@danceiny/gotry 0.2.0-rc.28 → 0.2.0-rc.30

package/README.md

@@ -153,7 +153,7 @@ Trust is structural, not promised:
 ## Project Status and Roadmap
 Current boundary: deterministic planning and evidence-bound read capabilities are available; booking and real-user acceptance remain outside the shipped claim. See the [architecture](docs/architecture.md) and [roadmap](docs/roadmap.md).
 
-**v0.2.0-rc.27** on npm (`latest`). Pre-1.0: the core loop works end to end; evaluation is still at deterministic contracts and validators, with no external scores or uplift claims. External W2A events are contract-only and inert; no real sensor bridge or consumer is active yet.
+**v0.2.0-rc.29** on npm (`latest`). Pre-1.0: the core loop works end to end; evaluation is still at deterministic contracts and validators, with no external scores or uplift claims. External W2A events are contract-only and inert; no real sensor bridge or consumer is active yet.
 
 **Working today**
 
@@ -209,7 +209,7 @@ Documents ship as bilingual pairs (`x.md` English + `x.zh-CN.md` 中文); diverg
 
 **Built with**: DeepSeek Harness 0.2.0-rc.2 (root-pinned) · Cordis · Z3 (WASM) · loopx (pipx) · hotelbyte-cli · Agent-Reach v1.5.0 · OpenFlights · TypeScript
 
-**Version baseline: `v0.2.0-rc.27` (npm `latest`).** Verification gates: `scripts/run-all-tests.sh`; release flow: `scripts/publish-npm.sh`.
+**Version baseline: `v0.2.0-rc.29` (npm `latest`).** Verification gates: `scripts/run-all-tests.sh`; release flow: `scripts/publish-npm.sh`.
 
 <a href="https://www.star-history.com/?repos=danceiny%2Fgotry&type=date&legend=top-left">
  <picture>

package/README.zh-CN.md

@@ -155,7 +155,7 @@ npx @danceiny/gotry "我想从深圳休整两天,预算 3000"   # headless 一
 ## 状态与路线图
 当前边界：确定性规划与有证据边界的只读能力已经可用；预订与真实用户验收仍不属于当前交付声明。见[架构权威文档](docs/architecture.zh-CN.md)与[路线图](docs/roadmap.zh-CN.md)。
 
-npm `latest`：**v0.2.0-rc.27**。未到 1.0：核心链路已端到端可用；评测仍停留在确定性合同与校验器阶段，无外部分数、无 uplift 声明。外部 W2A 事件仍是合同层、默认 inert；尚无真实 sensor 桥或 consumer 激活。
+npm `latest`：**v0.2.0-rc.29**。未到 1.0：核心链路已端到端可用；评测仍停留在确定性合同与校验器阶段，无外部分数、无 uplift 声明。外部 W2A 事件仍是合同层、默认 inert；尚无真实 sensor 桥或 consumer 激活。
 
 **今天可用**
 
@@ -211,7 +211,7 @@ AI agent：[`AGENTS.md`](AGENTS.zh-CN.md) 是绑定契约——入场先清扫
 
 **Built with**: DeepSeek Harness 0.2.0-rc.2 (root-pinned) · Cordis · Z3 (WASM) · loopx (pipx) · hotelbyte-cli · Agent-Reach v1.5.0 · OpenFlights · TypeScript
 
-**版本基线：`v0.2.0-rc.27`（npm `latest`）。** 验证闸：`scripts/run-all-tests.sh`；发布流程：`scripts/publish-npm.sh`。
+**版本基线：`v0.2.0-rc.29`（npm `latest`）。** 验证闸：`scripts/run-all-tests.sh`；发布流程：`scripts/publish-npm.sh`。
 
 <a href="https://www.star-history.com/?repos=danceiny%2Fgotry&type=date&legend=top-left">
  <picture>

package/bin/gotry-bootstrap.js

@@ -891,7 +891,7 @@ async function doctorChecks() {
   // 扩展
   const extManifest = join(homedir(), '.gotry', 'extension', 'manifest.json')
   const extOk = existsSync(extManifest)
-  items.push({ label: 'GoTry Session Bridge 扩展', ok: extOk, level: extOk ? 'ok' : 'missing', detail: extOk ? `已就位(${extManifest})` : '未安装——影响面:gotry_session_search / gotry_session_login(账号会话通道)不可用;携程机票/酒店实时检索、12306 余票、Dida 实时报价都依赖此通道。其它工具(机票 FlyAI、酒店 hbcli、地图、天气等)不受影响', fix: extOk ? undefined : '在 Chrome 应用商店一键安装(自动更新): https://chromewebstore.google.com/detail/gotry-session-bridge/oeajpiccmonococjcegddlooeeohlbgd' })
+  items.push({ label: 'Stai Travel Bridge 扩展', ok: extOk, level: extOk ? 'ok' : 'missing', detail: extOk ? `已就位(${extManifest})` : '未安装——影响面:gotry_session_search / gotry_session_login(账号会话通道)不可用;携程机票/酒店实时检索、12306 余票、Dida 实时报价都依赖此通道。其它工具(机票 FlyAI、酒店 hbcli、地图、天气等)不受影响', fix: extOk ? undefined : '在 Chrome 应用商店一键安装(自动更新): https://chromewebstore.google.com/detail/gotry-session-bridge/oeajpiccmonococjcegddlooeeohlbgd' })
   // agent-reach(.venv 装在包内)
   const venvPython = join(repoRoot, '.venv/bin/python')
   const reachBin = join(repoRoot, '.venv/bin/agent-reach')
@@ -1164,7 +1164,7 @@ function classifyDoctorGap(item, opts = {}) {
     return installerEnabled('hbcli', env) && autoSupported ? 'auto' : 'unavailable'
   }
   if (label.startsWith('dsh-better-sidebar')) return installerEnabled('sidebar', env) && autoSupported ? 'auto' : 'unavailable'
-  if (label.startsWith('GoTry Session Bridge')) return 'user-action' // 浏览器商店一键装
+  if (label.startsWith('Stai Travel Bridge')) return 'user-action' // 浏览器商店一键装
   if (label.startsWith('FlyAI')) return 'user-action' // 上游控制台申请 key
   if (label.startsWith('dsh-calendar')) return 'user-action' // profile cordis.patch.yml 配置
   if (label.startsWith('dsh-map-tools')) return 'unavailable' // 随包 vendor,缺失即重装 gotry
@@ -1443,7 +1443,7 @@ function copyExtensionDir(srcDir, dstDir) {
 
 /** 会话检索扩展(issue #21 方案 C):包内 extension/ → ~/.gotry/extension 幂等落位 + 一次性加载指引 */
 async function setupExtension() {
-  say('[gotry-setup] GoTry Session Bridge 扩展(会话检索数据面 issue #21;一次性安装,替代逐连接弹窗)')
+  say('[gotry-setup] Stai Travel Bridge 扩展(会话检索数据面 issue #21;一次性安装,替代逐连接弹窗)')
   const srcDir = join(repoRoot, 'extension')
   const srcManifest = join(srcDir, 'manifest.json')
   if (!existsSync(srcManifest)) {
@@ -1465,7 +1465,7 @@ async function setupExtension() {
     return { ok: false }
   }
   say(`  ✓ 已落位 ${dstDir}(v${srcVersion};manifest 带固定 key,unpacked 扩展 ID 恒为 olpgkofjhhiiiahdkkbcninhjmegghfe)`)
-  say('  推荐(免下面三步):Chrome 应用商店一键安装 GoTry Session Bridge(自动更新): https://chromewebstore.google.com/detail/gotry-session-bridge/oeajpiccmonococjcegddlooeeohlbgd')
+  say('  推荐(免下面三步):Chrome 应用商店一键安装 Stai Travel Bridge(自动更新): https://chromewebstore.google.com/detail/gotry-session-bridge/oeajpiccmonococjcegddlooeeohlbgd')
   say('  本地加载(每台浏览器一次,约 30 秒):Chrome 打开 chrome://extensions → 右上角开启「开发者模式」→「加载已解压的扩展程序」→ 选择 ~/.gotry/extension')
   say('  获取/更新本地通道扩展可走 GitHub Releases:npx @danceiny/gotry setup --extension-from=github(自动下载校验落位;手动下载: github.com/Danceiny/gotry/releases 标签 ext-*)')
   say('  装好即生效,零系统弹窗;扩展卡片开关=总闸(与 gotry 授权闸 sessionAccess 双重控制)')
@@ -1478,7 +1478,7 @@ async function setupExtension() {
  * 任何失败显式降级 bundled 包内副本——安装外部产物永远不挡 gotry 本体。
  */
 async function setupExtensionFromGithub() {
-  say('[gotry-setup] GoTry Session Bridge 扩展 · GitHub Releases 下载通道(dist-manifest → tar.gz → SHA256 → key 钉扎)')
+  say('[gotry-setup] Stai Travel Bridge 扩展 · GitHub Releases 下载通道(dist-manifest → tar.gz → SHA256 → key 钉扎)')
   const destDir = join(homedir(), '.gotry', 'extension')
   const cliScript = join(repoRoot, 'ts', 'scripts', 'extension-distribution-cli.ts')
   const releaseBase = process.env.GOTRY_EXTENSION_RELEASE_BASE // 镜像/测试基址覆盖;缺省 GitHub 官方
@@ -1509,7 +1509,7 @@ async function setupExtensionFromGithub() {
   if (r && r.ok) {
     if (r.action === 'installed') {
       say(`  ✓ 已从 GitHub Releases 落位 ${destDir}(v${r.version}${r.previousVersion ? `,旧 v${r.previousVersion}` : ''})`)
-      say('  已装过旧版的浏览器:chrome://extensions → GoTry Session Bridge 卡片 → 「重新加载」一次即生效(新装跳过)。')
+      say('  已装过旧版的浏览器:chrome://extensions → Stai Travel Bridge 卡片 → 「重新加载」一次即生效(新装跳过)。')
       return { ok: true }
     }
     // up-to-date(check-only 下远端更新也会走到这里,只报告不落盘)
@@ -1728,7 +1728,7 @@ if (WIZARD) {
     }
     say('')
     say('[gotry-wizard] ────────────────────────────────')
-    say('[gotry-wizard] GoTry Session Bridge 是浏览器的事——在 Chrome 应用商店一键装:')
+    say('[gotry-wizard] Stai Travel Bridge 是浏览器的事——在 Chrome 应用商店一键装:')
     say('[gotry-wizard]   https://chromewebstore.google.com/detail/gotry-session-bridge/oeajpiccmonococjcegddlooeeohlbgd')
     say('[gotry-wizard] 装好即生效;装完后我会自动检测到(下方探活等待,最长 120s)。')
     say('[gotry-wizard] 全过程 gotry 不动你的剪贴板、不开你的 Chrome、不弹任何面板。')
@@ -1749,7 +1749,7 @@ if (WIZARD) {
   }
 
   if (process.platform === 'win32') {
-    say('[gotry-setup] GoTry Session Bridge 扩展:推荐 Chrome 应用商店一键安装 https://chromewebstore.google.com/detail/gotry-session-bridge/oeajpiccmonococjcegddlooeeohlbgd ;本地通道:手动把包内 extension/ 目录拷到 %USERPROFILE%\\.gotry\\extension,再在 chrome://extensions 开发者模式「加载已解压的扩展程序」')
+    say('[gotry-setup] Stai Travel Bridge 扩展:推荐 Chrome 应用商店一键安装 https://chromewebstore.google.com/detail/gotry-session-bridge/oeajpiccmonococjcegddlooeeohlbgd ;本地通道:手动把包内 extension/ 目录拷到 %USERPROFILE%\\.gotry\\extension,再在 chrome://extensions 开发者模式「加载已解压的扩展程序」')
     process.exit(AUTO ? 0 : 1)
   }
   if (AUTO && (process.env.CI || process.env.GOTRY_SETUP_SKIP === '1')) {
@@ -1760,7 +1760,7 @@ if (WIZARD) {
   const results = []
   // gotry 自留面只剩扩展是否就位;hbcli/agent-reach/dsh-better-sidebar 由各自宿主生态自管。
   if (process.env.GOTRY_SETUP_EXTENSION !== '0') results.push(await (EXTENSION_FROM === 'github' ? setupExtensionFromGithub() : setupExtension()))
-  else say('[gotry-setup] GoTry Session Bridge 扩展:GOTRY_SETUP_EXTENSION=0 跳过')
+  else say('[gotry-setup] Stai Travel Bridge 扩展:GOTRY_SETUP_EXTENSION=0 跳过')
   const failed = results.filter((r) => !r.ok).length
   if (failed > 0) {
     say(`[gotry-setup] ${failed} 项未就绪——gotry 本体不受影响;可稍后重跑: npx @danceiny/gotry setup`)

package/bin/gotry-inner.js

@@ -133,7 +133,7 @@ const selectedDsh = selectDshRuntime({
 let dshBin = selectedDsh?.bin ?? ''
 const dshSource = selectedDsh?.source ?? ''
 const dshCwd = selectedDsh
-  ? selectDshCwd({
+  ? process.env.GOTRY_HANDOFF_CHILD === '1' ? process.cwd() : selectDshCwd({
       repoRoot,
       invocationCwd: process.cwd(),
       sourceCheckoutMode,
@@ -430,6 +430,12 @@ if (!benchmarkEnvironmentConfig && (mode === 'web' || stdioAsk)) try {
 
 const unboundPatch = benchmarkPatchProjection ?? readFileSync(staticPatch, 'utf-8')
 let patchRaw = benchmarkPatchProjection ?? unboundPatch.replace(/(name:\s*)'[^']*ts\/src\/index\.ts'/, `$1'${pluginEntry}'`)
+if (!benchmarkPatchProjection && patchRaw.includes("'placeholder/dsh-tool-present'")) {
+  // Native file delivery is separate from fs/write in the pinned DSH runtime.
+  // Resolve through DSH's declared closure (also works with strict pnpm).
+  const presentEntry = createRequire(dshBin).resolve('@deepseek-ai/dsh-tool-present')
+  patchRaw = patchRaw.replace("'placeholder/dsh-tool-present'", `'${presentEntry}'`)
+}
 patchRaw = patchRaw.replace(/^\s*# \{ask-user-insert\}.*\n(\s*# .*\n)?/m, askUserInsert ? askUserInsert + '\n' : '')
 
 // Owner-local benchmark environment opt-in. Keep the path out of tool input

package/cordis.gotry-patch.yml

@@ -10,6 +10,8 @@
         stateRoot: '.'
         timeoutMs: 30000
         hbcliBin: 'hbcli'
+    - id: gotry-present
+      name: 'placeholder/dsh-tool-present'
     - id: dsh-map-tools
       name: 'placeholder/dsh-map-tools'
     - id: dsh-calendar

package/data/yunnan-pack.json

@@ -29,33 +29,6 @@
     ]
   },
   "legs": [
-    {
-      "id": "yn0",
-      "note": "昆明→丽江(衔接 8.4 FD582 KMG 11:25 落地后,下午转飞丽江;M-1 工作窗口外)",
-      "date": "8.4 下午",
-      "services": [
-        {
-          "id": "MU5819",
-          "dep": "14:30",
-          "arr": "15:35",
-          "price_cny": 520,
-          "price_note": "东航,1h5m 直飞"
-        },
-        {
-          "id": "8L9662",
-          "dep": "16:40",
-          "arr": "17:45",
-          "price_cny": 480,
-          "price_note": "祥鹏,1h5m 直飞"
-        }
-      ],
-      "evidence": [
-        {
-          "tag": "[demo-reconcil:已]",
-          "note": "8.4 FD582 → 11:25 KMG → 当天转飞丽江(已挖)"
-        }
-      ]
-    },
     {
       "id": "yn1",
       "note": "深圳→丽江(直飞,丽江进大理出的开口程第一段)",
@@ -153,6 +126,36 @@
       "weekday": "any"
     }
   ],
+  "advisory_legs": [
+    {
+      "id": "yn0",
+      "advisory_reason": "本段缺 buffer_min / origin_transfer_min / dest_transfer_min 三个真值,待 founder 校准(flights_2026.json 的 f3 evidence 早已写明:yn0 衔接仍写,引擎层不挂接)。替它填数等于编造真实世界的事实(ADR-10 翻译不造数),所以只记录、不挂接引擎;三个整数补齐后把整段搬回 legs 即可参与求解(issue #635)。",
+      "note": "昆明→丽江(衔接 8.4 FD582 KMG 11:25 落地后,下午转飞丽江;M-1 工作窗口外)",
+      "date": "8.4 下午",
+      "services": [
+        {
+          "id": "MU5819",
+          "dep": "14:30",
+          "arr": "15:35",
+          "price_cny": 520,
+          "price_note": "东航,1h5m 直飞"
+        },
+        {
+          "id": "8L9662",
+          "dep": "16:40",
+          "arr": "17:45",
+          "price_cny": 480,
+          "price_note": "祥鹏,1h5m 直飞"
+        }
+      ],
+      "evidence": [
+        {
+          "tag": "[demo-reconcil:已]",
+          "note": "8.4 FD582 → 11:25 KMG → 当天转飞丽江(已挖)"
+        }
+      ]
+    }
+  ],
   "stays": [
     {
       "id": "yns1",

package/dist/capabilities/artifacts.js

@@ -215,6 +215,32 @@ async function listCwdArtifacts(cwd) {
     }
     return entries;
 }
+/** Durable handoff outputs live outside async/, including honest failure notes. */
+async function listHandoffArtifacts(root) {
+    const dir = join(root, 'gotry-state', 'turn-handoffs');
+    const names = await readdir(dir).catch(() => []);
+    const entries = [];
+    for (const name of names) {
+        if (!name.endsWith('.json'))
+            continue;
+        try {
+            const ticket = JSON.parse(await readFile(join(dir, name), 'utf8'));
+            if (ticket.schema !== 'gotry_turn_handoff.v1' || name !== `${ticket.id}.json`
+                || !['settled', 'failed'].includes(ticket.status) || ticket.deliverableFile !== `${ticket.id}.deliverable.md`)
+                continue;
+            const path = await realpath(join(dir, ticket.deliverableFile));
+            if (!underRoot(path, root) || hasDeniedSegment(path))
+                continue;
+            const info = await stat(path);
+            if (!info.isFile())
+                continue;
+            entries.push({ source: 'turn-handoff', id: ticket.id, title: String(ticket.objective ?? ticket.id),
+                path, status: ticket.status, updated: new Date(info.mtimeMs).toISOString(), bytes: info.size });
+        }
+        catch { /* A corrupt or missing output cannot be advertised as a file. */ }
+    }
+    return entries;
+}
 export async function listArtifacts(opts) {
     const limit = clampLimit(opts.limit);
     const offset = normalizeOffset(opts.offset, 'offset');
@@ -223,12 +249,16 @@ export async function listArtifacts(opts) {
     const cwd = opts.cwd ? resolve(opts.cwd) : process.cwd();
     const canonicalRoot = await realpath(root).catch(() => root);
     const canonicalCwd = await realpath(cwd).catch(() => cwd);
+    const handoffRoot = rootOf(opts.handoffRoot ?? opts.cwd ?? opts.stateRoot);
+    const canonicalHandoffRoot = await realpath(handoffRoot).catch(() => handoffRoot);
     // 1) collect all eligible entries per source, without per-source limits —
     //    pageSize is applied to the merged/deduped/sorted set so older cwd files
     //    stay reachable across pages.
     const collected = [
         ...listRunsFromLedger(canonicalRoot, 'local'),
         ...(await listDeliverableFiles(canonicalRoot)),
+        ...(await listHandoffArtifacts(canonicalRoot)),
+        ...(canonicalHandoffRoot !== canonicalRoot ? await listHandoffArtifacts(canonicalHandoffRoot) : []),
         ...(await listCwdArtifacts(canonicalCwd)),
     ];
     // 2) canonical-path dedupe (keep ledger authority when both sources point
@@ -262,6 +292,8 @@ export async function listArtifacts(opts) {
         offset,
         roots: [canonicalRoot, canonicalCwd],
     };
+    if (!result.roots.includes(canonicalHandoffRoot))
+        result.roots.push(canonicalHandoffRoot);
     if (hasMore)
         result.nextOffset = start + page.length;
     if (needle !== '')
@@ -280,6 +312,8 @@ export async function readArtifact(opts) {
     const cwd = opts.cwd ? resolve(opts.cwd) : process.cwd();
     const canonicalRoot = await realpath(root).catch(() => root);
     const canonicalCwd = await realpath(cwd).catch(() => cwd);
+    const handoffRoot = rootOf(opts.handoffRoot ?? opts.cwd ?? opts.stateRoot);
+    const canonicalHandoffRoot = await realpath(handoffRoot).catch(() => handoffRoot);
     const raw = String(opts.path ?? '').trim();
     if (!raw)
         return { ok: false, error: 'path 必填(来自 gotry_artifacts_list 的 path,或异步工单 id)' };
@@ -296,10 +330,13 @@ export async function readArtifact(opts) {
             filePath = asyncDeliverablePath(root, raw);
         }
         else {
-            const p = asyncDeliverablePath(root, raw);
+            const handoff = /^th-[a-z0-9-]+$/i.test(raw)
+                ? [join(handoffRoot, 'gotry-state', 'turn-handoffs', `${raw}.deliverable.md`),
+                    join(root, 'gotry-state', 'turn-handoffs', `${raw}.deliverable.md`)] : [];
+            const p = handoff.find(path => existsSync(path)) ?? asyncDeliverablePath(root, raw);
             const canonical = await realpath(p).catch(() => null);
             if (canonical) {
-                if (!underRoot(canonical, canonicalRoot) || hasDeniedSegment(canonical)) {
+                if (!(underRoot(canonical, canonicalRoot) || underRoot(canonical, canonicalHandoffRoot)) || hasDeniedSegment(canonical)) {
                     return { ok: false, error: `路径越界:${raw}`, hint: `只读 ${root} 与 dsh 工作目录内的文本产物` };
                 }
                 const ext = canonical.slice(canonical.lastIndexOf('.') + 1).toLowerCase();
@@ -325,7 +362,7 @@ export async function readArtifact(opts) {
         // 路径(realpath 后的 cwd),而 macOS 上 /var 与 /private/var 这类符号链接会让
         // canonical 路径不匹配字面 cwd,导致 list→read 串联断裂。边界权威仍是下方
         // realpath 后的 canonical 复检,这里放宽不改变可读集合。
-        const inScope = (p) => (underRoot(p, cwd) || underRoot(p, root) || underRoot(p, canonicalCwd) || underRoot(p, canonicalRoot)) && !hasDeniedSegment(p);
+        const inScope = (p) => (underRoot(p, cwd) || underRoot(p, root) || underRoot(p, canonicalCwd) || underRoot(p, canonicalRoot) || underRoot(p, handoffRoot) || underRoot(p, canonicalHandoffRoot)) && !hasDeniedSegment(p);
         // Prefer an existing candidate so a cwd miss does not mask a valid state-root file.
         const allowed = candidates.find(p => inScope(p) && existsSync(p)) ?? candidates.find(inScope);
         if (!allowed) {
@@ -335,7 +372,7 @@ export async function readArtifact(opts) {
         if (!canonical) {
             return { ok: false, error: `文件不存在:${raw}`, hint: '先 gotry_artifacts_list 看在册产物' };
         }
-        if (!(underRoot(canonical, canonicalCwd) || underRoot(canonical, canonicalRoot)) || hasDeniedSegment(canonical)) {
+        if (!(underRoot(canonical, canonicalCwd) || underRoot(canonical, canonicalRoot) || underRoot(canonical, canonicalHandoffRoot)) || hasDeniedSegment(canonical)) {
             return { ok: false, error: `路径越界:${raw}`, hint: `只读 ${root} 与 dsh 工作目录内的文本产物` };
         }
         const ext = canonical.slice(canonical.lastIndexOf('.') + 1).toLowerCase();

package/dist/capabilities/channel-registry.js

@@ -52,7 +52,7 @@ export const CHANNELS = [
         evidenceTag: '[会话:ctrip-flight@ts]',
         tier: 'session',
         efficiencyRank: 2,
-        setup: '一次性装 Session Bridge 扩展 + 授权卡 + (如需)官网登录',
+        setup: '一次性装 Stai Travel Bridge 扩展 + 授权卡 + (如需)官网登录',
         hint: 'kind=flight',
     },
     {
@@ -64,7 +64,7 @@ export const CHANNELS = [
         evidenceTag: '[会话:ctrip-hotel@ts]',
         tier: 'session',
         efficiencyRank: 2,
-        setup: '一次性装 Session Bridge 扩展 + 授权卡 + (如需)官网登录',
+        setup: '一次性装 Stai Travel Bridge 扩展 + 授权卡 + (如需)官网登录',
         hint: 'kind=hotel',
     },
     {
@@ -76,7 +76,7 @@ export const CHANNELS = [
         evidenceTag: '[会话:dida-portal@ts]',
         tier: 'session',
         efficiencyRank: 2,
-        setup: '一次性装 Session Bridge 扩展 + 授权卡 + hotel-be portal 自动登录跳板(dida 官网由人完成登录)',
+        setup: '一次性装 Stai Travel Bridge 扩展 + 授权卡 + hotel-be portal 自动登录跳板(dida 官网由人完成登录)',
         hint: 'kind=dida',
     },
     {
@@ -88,7 +88,7 @@ export const CHANNELS = [
         evidenceTag: '[会话:train-12306@ts]',
         tier: 'session',
         efficiencyRank: 2,
-        setup: '一次性装 Session Bridge 扩展(公开查询面,无需登录)',
+        setup: '一次性装 Stai Travel Bridge 扩展(公开查询面,无需登录)',
         hint: 'kind=train',
     },
     {

package/dist/capabilities/doctor.js

@@ -124,14 +124,14 @@ export async function runDoctorChecks(opts = {}) {
     items.push(nodeOk(nodeVersion)
         ? { id: 'node', label: 'Node 运行时', status: 'ok', detail: `Node ${nodeVersion}(≥22.15)` }
         : { id: 'node', label: 'Node 运行时', status: 'missing', detail: `Node ${nodeVersion} 过旧(gotry 需 ≥22.15)`, fix: '升级 Node.js 至 22.15+(https://nodejs.org)' });
-    // 1. GoTry Session Bridge 扩展(账号会话通道的传输层;装在哪由 bootstrap setup 管理)
+    // 1. Stai Travel Bridge 扩展(账号会话通道的传输层;装在哪由 bootstrap setup 管理)
     //    D-24 自适应(#117):离线只能探测本地 unpacked 通道;商店版无本地文件面——
     //    missing detail 明示「商店版用户可忽略本项」,不再把商店版用户误导成本地通道缺失
     const extManifest = join(home, '.gotry', 'extension', 'manifest.json');
     items.push(existsSync(extManifest)
-        ? { id: 'extension', label: 'GoTry Session Bridge 扩展', status: 'ok', detail: `已就位(本地通道:${extManifest})` }
+        ? { id: 'extension', label: 'Stai Travel Bridge 扩展', status: 'ok', detail: `已就位(本地通道:${extManifest})` }
         : {
-            id: 'extension', label: 'GoTry Session Bridge 扩展', status: 'missing',
+            id: 'extension', label: 'Stai Travel Bridge 扩展', status: 'missing',
             detail: '本地通道未落位(~/.gotry/extension/manifest.json 不存在)。影响面:gotry_session_search / gotry_session_login(账号会话通道)不可用;携程机票/酒店实时检索、12306 余票、Dida 实时报价都依赖此通道。其它工具(机票 FlyAI、酒店 hbcli、地图、天气等)不受影响。若你已从 Chrome 商店安装(自动更新,商店版 ID oeajpicc…),本项可忽略——会话检索可用性以运行时为准(gotry_session_search 的 verdict)。若未安装:应用商店一键装即可',
             fix: '在 Chrome 应用商店一键安装(自动更新): https://chromewebstore.google.com/detail/gotry-session-bridge/oeajpiccmonococjcegddlooeeohlbgd',
         });

package/dist/capabilities/effect.js

@@ -9,7 +9,7 @@
  *     断路器,per-效应策略表)→ 渠道 handler(现能力层函数,零改写);
  *   - mock  解译器 makeMockInterpreter:夹具回放(CI/本地无网确定性);
  *   - 浏览器解译 = SESSION_* 效应(用户本人登录态的扩展桥车道,2026-08-29 起默认传输:
- *     MV3 GoTry Session Bridge + 本地桥长轮询,零系统弹窗;ReadGuard+授权闸不变,
+ *     MV3 Stai Travel Bridge + 本地桥长轮询,零系统弹窗;ReadGuard+授权闸不变,
  *     非 CUA 视觉点击——本仓已按零 Python 依赖与 a11y/DOM 优先判死后者,
  *     docs/design/effect-interpreter.md §4)。
  *

package/dist/capabilities/session/extension-bridge.js

@@ -58,17 +58,17 @@ export function localExtensionInstalled(home = homedir()) {
  * 影响面统一行:账号会话通道断 → 列表底部工具不提供;其余工具不受影响。
  * 纯函数(默认 HOME 可注入)。
  *
- * 双语对照:CN=本函数返回值;EN 权威见 docs/capability-onboarding.md「Session Bridge 安装」段。
+ * 双语对照:CN=本函数返回值;EN 权威见 docs/capability-onboarding.md「Stai Travel Bridge 安装」段。
  */
 const EXTENSION_IMPACT_LINE = '影响面:gotry_session_search / gotry_session_login(账号会话通道)不可用;携程机票/酒店实时检索、12306 余票、Dida 实时报价都依赖此通道。其它工具(机票 FlyAI、酒店 hbcli、地图、天气等)不受影响。';
 export function needsExtensionSummary(opts = {}) {
     const local = opts.localInstalled ?? localExtensionInstalled(opts.home);
     if (local) {
-        return 'GoTry Session Bridge 扩展未连接(未安装或已停用)。推荐 Chrome 应用商店一键装(自动更新) '
+        return 'Stai Travel Bridge 扩展未连接(未安装或已停用)。推荐 Chrome 应用商店一键装(自动更新) '
             + `${EXTENSION_STORE_URL} ;或 npx @danceiny/gotry setup 落位后 chrome://extensions 开发者模式「加载已解压的扩展程序」指向 ~/.gotry/extension。`
             + EXTENSION_IMPACT_LINE;
     }
-    return 'GoTry Session Bridge 扩展未连接。若你已从 Chrome 商店安装(自动更新):打开 Chrome 并确认扩展已启用即可自动连接,无需再装。'
+    return 'Stai Travel Bridge 扩展未连接。若你已从 Chrome 商店安装(自动更新):打开 Chrome 并确认扩展已启用即可自动连接,无需再装。'
         + `若尚未安装:应用商店一键装 ${EXTENSION_STORE_URL} (装完零弹窗,浏览器自己当安装器)。`
         + EXTENSION_IMPACT_LINE;
 }

package/dist/capabilities/session-search.js

@@ -2,7 +2,7 @@
  * 会话检索编排层(RFC §3.2):transport → adapter entry → networkHint 嗅探 → 解析 → ReadGuard → 证据链。
  *
  * 传输车道(2026-08-29 定案,RFC §2.2):**扩展桥为默认**——一次性安装的 MV3 扩展
- * (GoTry Session Bridge)在自己标签页被动嗅探 batchSearch,零 Chrome 系统弹窗;
+ * (Stai Travel Bridge)在自己标签页被动嗅探 batchSearch,零 Chrome 系统弹窗;
  *  cdp(attach 日常 Chrome,Chrome 144+ 每连接弹权限框)降为显式后备
  * (`GOTRY_SESSION_TRANSPORT=cdp` opt-in,诊断/测试用);persistent 仅测试。
  *

package/dist/scripts/agent-planning-turn-deadline-e2e.js

@@ -206,6 +206,8 @@ async function main() {
             cwd: TS_DIR,
             env: {
                 ...process.env,
+                HOME: dshHome,
+                DSH_HOME: dshHome,
                 GOTRY_HANDOFF_PLANNER_BIN: configuredBin,
                 LLM_API_KEY: 'synthetic-e2e-key',
                 LLM_BASE_URL: 'http://127.0.0.1:' + relay.port + '/v1',

package/dist/scripts/agent-planning-turn-deadline-tests.js

@@ -1,7 +1,10 @@
 import assert from 'node:assert/strict';
-import { existsSync, mkdtempSync, readdirSync, readFileSync, rmSync } from 'node:fs';
+import { existsSync, mkdtempSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
+import { Context } from '@deepseek-ai/cordis';
+import { ToolRuntime, defineTool } from '@deepseek-ai/dsh-tools';
+import { createScope } from '@deepseek-ai/dsh-scope';
 import { installTurnDeadline, TURN_DEADLINE_EXHAUSTED, TURN_DEADLINE_HANDOFF, TURN_HANDOFF_SCHEMA, writeTurnHandoffTicket, } from '../src/turn-deadline.js';
 const success = () => ({ isError: false, value: null, content: [] });
 const handlers = new Map();
@@ -129,7 +132,7 @@ const turnEvent = (id, type) => sessionEvent({ id }, { type });
         const text = result.content[0]?.text ?? '';
         assert.match(text, /TURN_DEADLINE_HANDOFF/);
         assert.match(text, /th-/, 'result names the persisted ticket id');
-        assert.match(text, /约 1 小时/, 'ETA label mirrors the S5 promise');
+        assert.match(text, /queued|not started/i, 'a persisted ticket alone must not claim a running worker');
     }
     // 同步抑制已生效
     assert.deepEqual(restricted.at(-1), { agentId: agent.id, deny: ['gotry_alpha', 'gotry_beta'] });
@@ -181,5 +184,135 @@ function deepPlanningNoise() {
     rmSync(root, { recursive: true, force: true });
 }
 sessionDisposed({ id: 'agent-handoff' });
+// A deadline must let the pending output write complete and keep native present
+// available. Start exactly one tracked job even if the model makes another call.
+{
+    const hooks = new Map();
+    let started = 0;
+    let denied = [];
+    const agent = { id: 'delivery',
+        session: { id: 'delivery', header: { cwd: handoffRoot }, snapshotEvents: () => [
+                { type: 'tool/call', data: { name: 'ask_user_question', callId: 'question' } },
+                { type: 'tool/result', data: { message: { source: { kind: 'tool', callId: 'question' }, content: [{ text: 'China working hours 9-18 CST' }] } } },
+                { type: 'tool/result', data: { message: { source: { kind: 'tool', callId: 'other' }, content: [{ text: 'large evidence '.repeat(3000) }] } } },
+            ] },
+        ctx: { tools: { restrict: (filter) => { denied = filter.deny; return () => { }; } } } };
+    const deliveryCtx = {
+        tools: { schemas: () => [{ name: 'write' }, { name: 'present' }, { name: 'search' }] },
+        on: (name, hook) => { hooks.set(name, hook); },
+    };
+    installTurnDeadline(deliveryCtx, {
+        stateRoot: handoffRoot, now: clock.now,
+        startHandoff: async (ticket) => {
+            assert.equal(written, true, 'output finishes before the worker starts');
+            assert.ok(ticket.context?.includes('9-18 CST'), 'retain early clarification answers despite large recent evidence');
+            started++;
+            return { ...ticket, status: 'running', jobId: 'gotry-planning-1' };
+        },
+    });
+    hooks.get('session/event')({ id: agent.id }, { type: 'user/message', data: { source: { kind: 'user' }, content: [{ type: 'text', text: deepMessageForDelivery() }] } });
+    clock.advance(240_001);
+    let written = false;
+    const draft = join(handoffRoot, 'exploration.md');
+    const pending = { token: Symbol(), name: 'write', agent };
+    const result = await hooks.get('tools/execute')(pending, async () => { writeFileSync(draft, '# Exploration'); written = true; return success(); });
+    const post = await hooks.get('tools/post-execute')(pending, result, async () => ({ kind: 'accept' }));
+    assert.equal(written, true, 'pending output write must really execute');
+    assert.equal(readFileSync(draft, 'utf8'), '# Exploration');
+    assert.equal(result.isError, false, 'write result must remain truthful');
+    assert.ok(!denied.includes('present'), 'native deliverable publication stays available');
+    assert.equal(started, 1, 'handoff starts a tracked job');
+    await hooks.get('tools/execute')({ token: Symbol(), name: 'present', agent }, async () => success());
+    assert.equal(started, 1, 'present must not queue another planner');
+    const text = JSON.stringify(post.additionalContexts);
+    assert.match(text, /gotry-planning-1/, 'handoff names the actual native job');
+    assert.match(text, /present/, 'successful writes must be presented before final reply');
+    let repeatedWrite = false;
+    await hooks.get('tools/execute')({ token: Symbol(), name: 'write', agent }, async () => { repeatedWrite = true; return success(); });
+    assert.equal(repeatedWrite, false, 'only the pending draft write gets the deadline exception');
+    assert.equal(started, 1, 'repeated finalization must not dispatch another worker');
+}
+function deepMessageForDelivery() { return '12月初有个阿联酋国庆，我打算借机 IRW远程办公（还有5天额度）+请假+放假 回国玩一趟，主要去东北，比如长春泡澡啊啥的，可以看看一些东北风光啥的（没去过），我女朋友从南京过去，请帮我探索一个可行的具体规划'; }
 rmSync(handoffRoot, { recursive: true, force: true });
+// Real DSH registry coverage: inherited and agent-scoped output writes must
+// finish before deadline restrictions hide inherited registrations.
+for (const [registration, writeFailure] of [['global', false], ['scoped', false], ['global', true], ['scoped', true]]) {
+    const root = mkdtempSync(join(tmpdir(), 'gotry-write-registry-'));
+    const runtimeCtx = new Context();
+    runtimeCtx.provide('systemPrompt', { tools() { } });
+    const tools = new ToolRuntime(runtimeCtx);
+    let time = 0;
+    const mutableAgent = { id: registration, ctx: runtimeCtx, session: { id: registration, header: { cwd: root }, snapshotEvents: () => [] } };
+    const agent = mutableAgent;
+    const scope = createScope(runtimeCtx, agent);
+    mutableAgent.ctx = scope.ctx;
+    installTurnDeadline(runtimeCtx, { stateRoot: root, now: () => time, fixedPolicy: { softMs: 5, hardMs: 10, exit: 'handoff' } });
+    const draft = join(root, 'draft.md');
+    let writes = 0;
+    (registration === 'global' ? tools : scope.ctx.tools).register(defineTool({
+        name: 'write', description: 'Write the draft', parameters: {}, output: { schema: { type: 'json' }, render: () => [{ type: 'text', text: 'saved' }] },
+        async execute() { writes++; if (writeFailure)
+            throw new Error('disk write failed'); writeFileSync(draft, 'saved draft'); return { saved: true }; },
+    }));
+    try {
+        assert.ok(tools.get('write', agent), 'write is visible before deadline dispatch');
+        runtimeCtx.emit('session/event', agent.session, { type: 'user/message', data: { source: { kind: 'user' }, content: [{ type: 'text', text: 'plan my trip' }] } });
+        time = 11;
+        const call = () => tools.execute({ name: 'write', agent, arguments: {}, callId: 'draft', signal: new AbortController().signal });
+        const result = await call();
+        assert.equal(result.isError, writeFailure, `${registration} pending write keeps its actual registry outcome: ${JSON.stringify(result)}`);
+        if (writeFailure) {
+            assert.equal(existsSync(draft), false);
+            assert.match(JSON.stringify(result), /disk write failed/);
+        }
+        else
+            assert.equal(readFileSync(draft, 'utf8'), 'saved draft');
+        assert.match(JSON.stringify(result.additionalContexts), /queued/, 'registry post-execute carries handoff guidance');
+        await call();
+        assert.equal(writes, 1, 'only the pending write receives the exception');
+    }
+    finally {
+        await scope.dispose();
+        await runtimeCtx.fiber.dispose();
+        rmSync(root, { recursive: true, force: true });
+    }
+}
+// Long earlier prose and recent large search output cannot evict a mandatory
+// answer. If user input itself exceeds the bounded snapshot, fail visibly.
+for (const overflow of [false, true]) {
+    const root = mkdtempSync(join(tmpdir(), 'gotry-handoff-context-'));
+    const hooks = new Map();
+    let captured;
+    const agent = { id: 'constraints', ctx: { tools: { restrict: () => () => { } } }, session: {
+            id: 'constraints', header: { cwd: root }, snapshotEvents: () => [
+                { type: 'user/message', data: { source: { kind: 'user' }, content: [{ type: 'text', text: 'earlier prose '.repeat(overflow ? 6000 : 600) }] } },
+                { type: 'tool/call', data: { name: 'ask_user_question', callId: 'access' } },
+                { type: 'tool/result', data: { message: { source: { kind: 'tool', callId: 'access' }, content: [{ type: 'text', text: 'MUST_KEEP_WHEELCHAIR_ACCESS_AND_NO_STAIRS' }] } } },
+                { type: 'tool/result', data: { message: { source: { kind: 'tool', callId: 'search' }, content: [{ type: 'text', text: 'recent search '.repeat(2000) }] } } },
+            ],
+        } };
+    const localCtx = { tools: { schemas: () => [] }, on: (name, hook) => hooks.set(name, hook) };
+    let time = 0;
+    installTurnDeadline(localCtx, { stateRoot: root, now: () => time, fixedPolicy: { softMs: 5, hardMs: 10, exit: 'handoff' },
+        startHandoff: async (ticket) => { captured = ticket; return ticket; } });
+    try {
+        hooks.get('session/event')({ id: agent.id }, { type: 'user/message', data: { source: { kind: 'user' }, content: [{ type: 'text', text: 'plan my trip' }] } });
+        time = 11;
+        await hooks.get('tools/execute')({ token: Symbol(), name: 'search', agent }, async () => success());
+        if (overflow) {
+            assert.equal(captured, undefined, 'do not start planning after silently losing user constraints');
+            const ticketFile = readdirSync(join(root, 'gotry-state', 'turn-handoffs')).find(name => name.endsWith('.json'));
+            const ticket = JSON.parse(readFileSync(join(root, 'gotry-state', 'turn-handoffs', ticketFile), 'utf8'));
+            assert.equal(ticket.status, 'failed');
+            assert.match(ticket.error, /context|answers|constraints/i);
+        }
+        else {
+            assert.ok(captured?.context?.includes('MUST_KEEP_WHEELCHAIR_ACCESS_AND_NO_STAIRS'), 'mandatory answer survives large surrounding output');
+            assert.ok(captured.context.length < 90_000, 'context remains bounded');
+        }
+    }
+    finally {
+        rmSync(root, { recursive: true, force: true });
+    }
+}
 console.log('agent turn deadline tests: OK (routing→converge/handoff exits, ticket persistence, plugin-message discipline, lifecycle)');