@danceiny/gotry 0.2.0-rc.30 → 0.2.0-rc.31

package/dist/scripts/gotry-web-api-tests.js

@@ -0,0 +1,114 @@
+/** Isolated Web setup regressions: real child verifier, official files, and Host-owned roots. */
+import assert from 'node:assert/strict';
+import { chmodSync, existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, statSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+const moduleUrl = new URL('../src/gotry-web-api.js', import.meta.url).href;
+const api = await import(moduleUrl).catch(() => undefined);
+assert.equal(typeof api?.createGotryWebHandlers, 'function', 'GoTry must expose authenticated Web configuration and artifact handlers');
+const root = mkdtempSync(join(tmpdir(), 'gotry-web-api-'));
+try {
+    const home = join(root, 'home'), workspace = join(root, 'workspace'), outside = join(root, 'outside');
+    for (const dir of [home, workspace, outside])
+        mkdirSync(dir);
+    const verifier = join(root, 'verifier.cjs');
+    writeFileSync(verifier, `#!/usr/bin/env node
+const fs = require('node:fs');
+fs.writeFileSync(process.env.VERIFIER_CAPTURE, JSON.stringify({ candidate: process.env.FLYAI_API_KEY, debug: process.env.DEBUG_FLYAI_API_KEY }));
+if (process.env.FLYAI_API_KEY === 'sk-bad-candidate') { process.stderr.write('HTTP 401 ' + process.env.FLYAI_API_KEY); process.exit(1); }
+if (process.env.FLYAI_API_KEY === 'sk-pending-candidate') { setTimeout(() => process.stdout.write(JSON.stringify({data:{itemList:[]}})), 1000); }
+else process.stdout.write(JSON.stringify({data:{itemList:[]}}));
+`);
+    chmodSync(verifier, 0o700);
+    const env = { PATH: process.env.PATH, HOME: home, GOTRY_FLYAI_CLI_BIN: verifier,
+        VERIFIER_CAPTURE: join(root, 'capture.json'), GOTRY_FLYAI_VERIFY_TIMEOUT_MS: '5000' };
+    const handlers = api.createGotryWebHandlers({ homeDir: home, env, stateRoot: workspace,
+        workspaceForSession: async (id) => id === 'known-session' ? workspace : undefined });
+    const request = (action, key, signal) => new Request('http://localhost/api/gotry/flyai', {
+        method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ action, ...(key === undefined ? {} : { key }) }), signal,
+    });
+    const status = () => handlers.flyai(new Request('http://localhost/api/gotry/flyai')).then((r) => r.json());
+    assert.deepEqual(await status(), { ok: true, configured: false, verified: false, writable: true, source: 'none', endpoint: 'https://flyai.open.fliggy.com/mcp', endpointDebug: false });
+    let response = await handlers.flyai(request('save', 'sk-good-candidate-1234'));
+    assert.equal(response.status, 200);
+    let body = await response.json();
+    assert.equal(body.ok, true);
+    assert.equal(body.verified, true);
+    assert.equal(body.source, 'config');
+    assert.ok(!JSON.stringify(body).includes('sk-good-candidate'));
+    const config = join(home, '.flyai/config.json'), receipt = join(home, '.gotry/flyai-verification.json');
+    assert.equal(JSON.parse(readFileSync(config, 'utf8')).FLYAI_API_KEY, 'sk-good-candidate-1234');
+    assert.equal(statSync(config).mode & 0o777, 0o600);
+    const previous = readFileSync(config, 'utf8'), previousReceipt = readFileSync(receipt, 'utf8');
+    response = await handlers.flyai(request('save', 'sk-bad-candidate'));
+    body = await response.json();
+    assert.equal(body.ok, false);
+    assert.equal(body.verdict, 'auth-error');
+    assert.ok(!JSON.stringify(body).includes('sk-bad-candidate'));
+    assert.equal(readFileSync(config, 'utf8'), previous);
+    assert.equal(readFileSync(receipt, 'utf8'), previousReceipt);
+    assert.equal((await status()).verified, true);
+    const cancelled = new AbortController();
+    const pending = handlers.flyai(request('save', 'sk-pending-candidate', cancelled.signal));
+    setTimeout(() => cancelled.abort(), 100);
+    assert.equal((await (await pending).json()).ok, false);
+    assert.equal(readFileSync(config, 'utf8'), previous);
+    env.FLYAI_API_KEY = 'sk-environment-key';
+    assert.equal((await status()).writable, false);
+    response = await handlers.flyai(request('save', 'sk-good-candidate-5678'));
+    assert.equal(response.status, 409);
+    assert.equal(readFileSync(config, 'utf8'), previous);
+    delete env.FLYAI_API_KEY;
+    response = await handlers.flyai(request('save', 'x'.repeat(9000)));
+    assert.equal(response.status, 413);
+    assert.equal(readFileSync(config, 'utf8'), previous);
+    const concurrent = handlers.flyai(request('save', 'sk-pending-candidate'));
+    setTimeout(() => writeFileSync(config, JSON.stringify({ FLYAI_API_KEY: 'sk-external-change' })), 150);
+    assert.equal((await concurrent).status, 409);
+    assert.equal(JSON.parse(readFileSync(config, 'utf8')).FLYAI_API_KEY, 'sk-external-change');
+    response = await handlers.flyai(request('clear'));
+    assert.equal((await response.json()).configured, false);
+    assert.ok(!existsSync(receipt));
+    writeFileSync(config, '{corrupt configuration', { mode: 0o600 });
+    assert.equal((await handlers.flyai(request('save', 'sk-good-candidate-1234'))).status, 409);
+    assert.equal(readFileSync(config, 'utf8'), '{corrupt configuration');
+    writeFileSync(config, previous);
+    // A receipt cannot be published when its parent is a file. A successful
+    // candidate must not replace the previously usable key in this case.
+    rmSync(join(home, '.gotry'), { recursive: true, force: true });
+    writeFileSync(join(home, '.gotry'), 'receipt directory unavailable');
+    assert.equal((await handlers.flyai(request('save', 'sk-good-candidate-5678'))).status, 409);
+    assert.equal(JSON.parse(readFileSync(config, 'utf8')).FLYAI_API_KEY, 'sk-good-candidate-1234');
+    rmSync(join(home, '.gotry'));
+    const queuedSave = handlers.flyai(request('save', 'sk-pending-candidate'));
+    const queuedClear = handlers.flyai(request('clear'));
+    const queuedSaved = await queuedSave;
+    assert.equal(queuedSaved.status, 200, await queuedSaved.text());
+    assert.equal((await (await queuedClear).json()).configured, false);
+    writeFileSync(join(workspace, 'trip-one.md'), '# A trip\n');
+    writeFileSync(join(workspace, 'trip-two.html'), '<h1>Another trip</h1>');
+    writeFileSync(join(outside, 'private-trip.md'), '# Outside\n');
+    response = await handlers.artifacts(new Request('http://localhost/api/gotry/artifacts?sessionId=known-session&search=trip&limit=1'));
+    body = await response.json();
+    assert.equal(body.total, 2);
+    assert.equal(body.artifacts.length, 1);
+    assert.equal(body.nextOffset, 1);
+    response = await handlers.artifacts(new Request('http://localhost/api/gotry/artifacts?sessionId=known-session&search=two'));
+    assert.ok((await response.json()).artifacts[0].path.endsWith('trip-two.html'));
+    response = await handlers.artifacts(new Request('http://localhost/api/gotry/artifacts?sessionId=unknown'));
+    assert.equal(response.status, 404);
+    response = await handlers.artifacts(new Request('http://localhost/api/gotry/artifacts?sessionId=known-session&cwd=' + encodeURIComponent(outside)));
+    assert.equal(response.status, 400);
+    const handoff = join(outside, 'gotry-state', 'turn-handoffs');
+    mkdirSync(handoff, { recursive: true });
+    writeFileSync(join(handoff, 'host-ticket.json'), JSON.stringify({ schema: 'gotry_turn_handoff.v1', id: 'host-ticket',
+        status: 'settled', objective: 'Host-owned handoff', deliverableFile: 'host-ticket.deliverable.md' }));
+    writeFileSync(join(handoff, 'host-ticket.deliverable.md'), '# Handoff delivery\n');
+    env.GOTRY_TURN_HANDOFF_ROOT = outside;
+    response = await handlers.artifacts(new Request('http://localhost/api/gotry/artifacts?sessionId=known-session&search=Host-owned'));
+    assert.equal((await response.json()).artifacts[0]?.id, 'host-ticket', 'Web must use the same configured Host handoff root as conversational listing');
+    console.log('GoTry Web API: verified save, rollback, cancellation, override, bounds, conflict, clear and Session-owned artifact search PASS');
+}
+finally {
+    rmSync(root, { recursive: true, force: true });
+}

package/dist/scripts/gotry-web-client-tests.js

@@ -0,0 +1,28 @@
+/** Native Web entry registration, without a model invocation or additional UI shell. */
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import vm from 'node:vm';
+const registrations = [], slots = [], tabs = [];
+const source = readFileSync(join(import.meta.dirname, '../../client/client.js'), 'utf8');
+vm.runInNewContext(source, { window: { __ModuleLoader__: { load: (r) => registrations.push(r) } }, console, fetch, AbortController });
+const react = { createElement: (type, props, ...children) => ({ type, props, children }) };
+const primitives = { SettingsForm: () => { }, SettingsSecretField: () => { }, Button: () => { }, Input: () => { }, Tag: () => { }, FileTypeIcon: () => { } };
+const plugin = registrations[0].factory((name) => name === 'react' ? react : primitives);
+const context = {
+    locale: { bind: () => (key) => key, register: () => () => { } },
+    slots: { inject: (_name, f) => f(), register: (definition, component) => { slots.push({ definition, component }); return () => { }; } },
+    sidebarRightTabs: { register: (definition) => { tabs.push(definition); return () => { }; } },
+    effect: (f) => f(),
+    inject: (names, f) => { if (names.every(name => name in context))
+        f(context); },
+};
+plugin.apply(context);
+assert.ok(slots.some(s => s.definition.name === 'plugins.item' && s.definition.id === 'gotry'), 'Plugins must contain a directly visible GoTry configuration entry');
+assert.ok(tabs.some(t => t.kind === 'gotry-artifacts' && t.guide?.length), 'right Sidebar must contain an always discoverable GoTry artifacts page');
+assert.ok(slots.some(s => s.definition.name === 'sidebar.right.pane.tab' && s.definition.key === '@danceiny/gotry:artifacts'));
+const pkg = JSON.parse(readFileSync(join(import.meta.dirname, '../../package.json'), 'utf8'));
+for (const dependency of ['@deepseek-ai/dsh-client-ui-primitives', '@deepseek-ai/dsh-client-ui-plugin-manager', '@deepseek-ai/dsh-client-ui-sidebar-right']) {
+    assert.ok(pkg.dsh.client.inject.includes(dependency), `the shipped client graph must include ${dependency}`);
+}
+console.log('GoTry native Plugins and artifact Sidebar entries PASS');

package/dist/scripts/issue-271-liveness-tests.js

@@ -32,6 +32,8 @@ function privateEnv(root) {
         TMPDIR: root,
         TEMP: root,
         TMP: root,
+        NODE_OPTIONS: `--import=${pathToFileURL(join(repoRoot, 'scripts', 'doctor-test-isolation.mjs')).href}`,
+        GOTRY_TEST_DOCTOR_PORT: '0',
     };
 }
 function waitForClose(child, timeoutMs) {
@@ -300,7 +302,7 @@ function writeProductFixture(root, options = { writeTerminalOutput: false, mode:
     mkdirSync(presentDir, { recursive: true });
     writeFileSync(join(presentDir, 'package.json'), JSON.stringify({ name: '@deepseek-ai/dsh-tool-present', main: 'index.js' }));
     writeFileSync(join(presentDir, 'index.js'), 'module.exports = {}\n');
-    for (const file of ['gotry-inner.js', 'gotry-bootstrap.js', 'gotry-runtime-resolution.js', 'gotry-process-liveness.js']) {
+    for (const file of ['gotry-inner.js', 'gotry-bootstrap.js', 'gotry-flyai-verification.js', 'gotry-extension-status.js', 'gotry-runtime-resolution.js', 'gotry-process-liveness.js']) {
         copyFileSync(join(repoRoot, 'bin', file), join(binDir, file));
     }
     copyFileSync(join(repoRoot, 'ts', 'capabilities', 'incident-log.ts'), join(tsCapabilitiesDir, 'incident-log.ts'));

package/dist/src/artifact-delivery.js

@@ -0,0 +1,26 @@
+import { realpathSync, statSync } from 'node:fs';
+import { isAbsolute, relative, sep } from 'node:path';
+export function registerArtifactDeliveries(ctx) {
+    // Tool-registration-only hosts have no conversation event surface.
+    if (typeof ctx.on !== 'function')
+        return;
+    ctx.on('tools/result', (exec, result) => {
+        if (result.isError || exec.signal.aborted || !['gotry_itinerary_render', 'gotry_itinerary_deck_render'].includes(exec.name))
+            return;
+        const value = result.value;
+        const session = exec.agent?.session, cwd = session?.header.cwd;
+        if (!session || !cwd || !isAbsolute(cwd) || value?.ok !== true || typeof value.path !== 'string' || !isAbsolute(value.path))
+            return;
+        const boundary = ctx.get('sessionProjections')?.stateOf(session, 'turnBoundary');
+        if (!boundary || boundary.openTurnStartSeq === null)
+            return;
+        try {
+            const path = realpathSync(value.path), root = realpathSync(cwd), inside = relative(root, path);
+            if (inside === '..' || inside.startsWith('..' + sep) || isAbsolute(inside) || !statSync(path).isFile())
+                return;
+            session.append('deliverables/presented', { turn: boundary.lastTurn, callId: exec.callId,
+                files: [{ path: value.path, description: 'GoTry itinerary' }] });
+        }
+        catch { /* A deleted or escaped file cannot become a delivery. */ }
+    });
+}

package/dist/src/gotry-web-api.js

@@ -0,0 +1,157 @@
+import { existsSync, readFileSync, rmSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { isAbsolute } from 'node:path';
+import { verifyFlyaiCandidate } from '../../bin/gotry-flyai-verification.js';
+import { listArtifacts } from '../capabilities/artifacts.js';
+import { atomicWriteJson, clearFlyaiKey, displayEndpoint, endpointFingerprint, flyaiConfigPath, isPlaceholderFlyaiKey, maskFlyaiKey, readFlyaiConfig, readFlyaiVerification, removeFlyaiVerification, resolveFlyaiEndpoint, resolveFlyaiKey, saveFlyaiKey, sha256Hex, writeFlyaiVerification, } from '../capabilities/flyai-config.js';
+const json = (value, status = 200) => Response.json(value, { status, headers: { 'cache-control': 'no-store' } });
+const rejection = (error, status = 400) => json({ ok: false, error }, status);
+const BODY_LIMIT = 8192;
+async function readInput(request) {
+    if (request.headers.get('content-type')?.split(';')[0].trim() !== 'application/json')
+        return rejection('需要 JSON 请求。', 415);
+    const reader = request.body?.getReader();
+    if (!reader)
+        return rejection('请求为空。');
+    const chunks = [];
+    let bytes = 0;
+    try {
+        while (true) {
+            const chunk = await reader.read();
+            if (chunk.done)
+                break;
+            bytes += chunk.value.byteLength;
+            if (bytes > BODY_LIMIT) {
+                await reader.cancel();
+                return rejection('请求过大。', 413);
+            }
+            chunks.push(chunk.value);
+        }
+        const value = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+        return value && typeof value === 'object' && !Array.isArray(value) ? value : rejection('请求无效。');
+    }
+    catch {
+        return rejection('请求无效。');
+    }
+    finally {
+        reader.releaseLock();
+    }
+}
+export function createGotryWebHandlers(options) {
+    const homeDir = options.homeDir ?? homedir(), env = options.env ?? process.env;
+    const paths = { homeDir, env }, configPath = flyaiConfigPath(homeDir);
+    let mutations = Promise.resolve();
+    const status = () => {
+        const current = resolveFlyaiKey(paths), endpoint = resolveFlyaiEndpoint(paths), receipt = readFlyaiVerification(homeDir);
+        const matches = current.key && receipt?.keySha256 === sha256Hex(current.key) && receipt.source === current.source
+            && receipt.endpointFingerprint === endpointFingerprint(endpoint.url) && receipt.endpointDebug === endpoint.debug;
+        return { ok: true, configured: Boolean(current.key), verified: Boolean(matches && receipt?.verdict === 'verified'),
+            writable: current.source !== 'env' && current.source !== 'env-debug' && process.platform !== 'win32', source: current.source,
+            endpoint: displayEndpoint(endpoint.url), endpointDebug: endpoint.debug,
+            ...(matches && receipt ? { checkedAt: receipt.at, verdict: receipt.verdict } : {}) };
+    };
+    const bytesAt = () => existsSync(configPath) ? readFileSync(configPath, 'utf8') : undefined;
+    async function mutate(input, signal) {
+        if (signal.aborted)
+            return rejection('操作已取消。', 409);
+        if (!status().writable)
+            return rejection('当前 Key 由环境变量提供或此平台不支持安全写入。', 409);
+        if (input.action === 'clear') {
+            const result = clearFlyaiKey(paths);
+            if (!result.ok)
+                return rejection('无法清除配置，请检查本机配置文件及权限。', 409);
+            removeFlyaiVerification(homeDir);
+            return json(status());
+        }
+        const key = typeof input.key === 'string' ? input.key.trim() : '';
+        if (!key || key.length > 2048 || /[\r\n\0]/.test(key) || isPlaceholderFlyaiKey(key))
+            return rejection('请粘贴控制台中的真实 API Key。');
+        const before = readFlyaiConfig(configPath);
+        if (!before.ok)
+            return rejection('原配置损坏，已保留原文件，请先修复。', 409);
+        const previousBytes = bytesAt(), endpoint = resolveFlyaiEndpoint(paths), fingerprint = endpointFingerprint(endpoint.url);
+        if (!fingerprint)
+            return rejection('当前服务地址无效。', 409);
+        const verify = await verifyFlyaiCandidate(key, { env: { ...env, HOME: homeDir }, signal });
+        if (signal.aborted || verify.verdict !== 'hit')
+            return json({ ok: false, verdict: signal.aborted ? 'cancelled' : verify.verdict,
+                error: signal.aborted ? '验证已取消，旧配置保留。' : verify.error ?? '验证失败，旧配置保留。' }, 422);
+        if (!status().writable || bytesAt() !== previousBytes || fingerprint !== endpointFingerprint(resolveFlyaiEndpoint(paths).url)) {
+            return rejection('配置在验证期间发生变化，请重新读取后再试。', 409);
+        }
+        const saved = saveFlyaiKey(key, paths);
+        if (!saved.ok)
+            return rejection('安全保存失败，旧配置保留，请检查本机权限。', 409);
+        const receiptSaved = writeFlyaiVerification({ schema: 'gotry.flyai-verification.v1', source: 'config',
+            keySha256: sha256Hex(key), maskedKey: maskFlyaiKey(key), verdict: 'verified', endpointFingerprint: fingerprint,
+            endpointDebug: endpoint.debug, at: new Date().toISOString() }, homeDir);
+        if (!receiptSaved) {
+            const restored = previousBytes === undefined
+                ? (() => { try {
+                    rmSync(configPath, { force: true });
+                    return true;
+                }
+                catch {
+                    return false;
+                } })()
+                : atomicWriteJson(configPath, before.data).ok;
+            return rejection(restored ? '验证回执保存失败，旧配置已恢复。' : '验证回执保存失败，恢复旧配置失败，请检查本机文件。', 409);
+        }
+        return json(status());
+    }
+    return {
+        async flyai(request) {
+            if (request.method === 'GET')
+                return json(status());
+            if (request.method !== 'POST')
+                return rejection('不支持此操作。', 405);
+            const input = await readInput(request);
+            if (input instanceof Response)
+                return input;
+            if (!['save', 'clear'].includes(String(input.action)) || Object.keys(input).some(key => key !== 'action' && key !== 'key')
+                || (input.action === 'clear' && 'key' in input))
+                return rejection('请求无效。');
+            const operation = mutations.then(() => mutate(input, request.signal)).catch(() => rejection('操作失败，未能确认保存，请重新读取状态。', 500));
+            mutations = operation.then(() => undefined);
+            return operation;
+        },
+        async artifacts(request) {
+            const query = new URL(request.url).searchParams;
+            if ([...query.keys()].some(key => !['sessionId', 'search', 'offset', 'limit'].includes(key)))
+                return rejection('查询字段无效。');
+            const sessionId = query.get('sessionId') ?? '';
+            if (!/^[A-Za-z0-9_-]{1,256}$/.test(sessionId))
+                return rejection('需要有效会话。');
+            const cwd = await options.workspaceForSession(sessionId);
+            if (!cwd || !isAbsolute(cwd))
+                return rejection('会话工作目录不可用。', 404);
+            try {
+                return json({ ok: true, ...await listArtifacts({ stateRoot: options.stateRoot, cwd,
+                        handoffRoot: env.GOTRY_TURN_HANDOFF_ROOT ?? (options.stateRoot !== '.' ? options.stateRoot : cwd),
+                        search: query.get('search') ?? undefined, offset: query.has('offset') ? Number(query.get('offset')) : undefined,
+                        limit: query.has('limit') ? Number(query.get('limit')) : 20 }) });
+            }
+            catch {
+                return rejection('查询参数无效或产物暂时不可读取。');
+            }
+        },
+    };
+}
+export function registerGotryWebApi(ctx, stateRoot) {
+    if (typeof ctx.inject !== 'function')
+        return;
+    ctx.inject(['connection', 'sessions'], scope => {
+        const connection = scope.get('connection');
+        const handlers = createGotryWebHandlers({ stateRoot, workspaceForSession: async (sessionId) => {
+                const id = sessionId;
+                const live = scope.sessions.get(id)?.header;
+                const stored = live ? undefined : await scope.get('sessionPersistence')?.stat(sessionId);
+                return (live ?? stored?.header)?.cwd;
+            } });
+        // DSH's streaming adapter always attaches a request body; GET cannot use
+        // it. Exact routes have one body mode, so reads and bounded writes differ.
+        scope.effect(() => connection.fetch.register({ path: '/api/gotry/flyai', methods: ['GET'], requestBody: 'buffered', fetch: handlers.flyai }));
+        scope.effect(() => connection.fetch.register({ path: '/api/gotry/flyai/write', methods: ['POST'], requestBody: 'streaming', fetch: handlers.flyai }));
+        scope.effect(() => connection.fetch.register({ path: '/api/gotry/artifacts', methods: ['GET'], requestBody: 'buffered', fetch: handlers.artifacts }));
+    });
+}

package/dist/src/index.js

@@ -42,6 +42,8 @@ import { generateItineraryDeckExport } from '../capabilities/itinerary-deck-expo
 import { interpretEffect, declinedObservation } from '../capabilities/effect.js';
 import { customerSendCode, customerLogin } from '../capabilities/hbcli.js';
 import { FLYAI_POI_CATEGORIES } from '../capabilities/flyai.js';
+import { registerGotryWebApi } from './gotry-web-api.js';
+import { registerArtifactDeliveries } from './artifact-delivery.js';
 import { createFlyaiSetupTool } from './flyai-setup-tool.js';
 import { appendFacts, loadFactRegistry } from '../capabilities/fact-log.js';
 import { factsFromFlyai, factsFromHotel, factsFromSession, factsFromSessionTrain } from './bookable-facts.js';
@@ -429,6 +431,10 @@ export function apply(ctx, config, seams = {}) {
     // 固定 policy 保证评测可复现,不走路由。GOTRY_HANDOFF_CHILD=1 是收集器
     // 派生的后台规划会话:唯一出口 converge + 长 leash——前台转后台,后台
     // 必须产出最终交付物,不得再次 handoff(否则无限递归)。
+    if (!rawBenchmarkEnvironmentConfigPath) {
+        registerGotryWebApi(ctx, config.stateRoot ?? '.');
+        registerArtifactDeliveries(ctx);
+    }
     const handoffChild = process.env.GOTRY_HANDOFF_CHILD === '1';
     installTurnDeadline(ctx, handoffChild
         ? { fixedPolicy: { softMs: 300_000, hardMs: 900_000, exit: 'converge' } }

package/extension/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Stai Travel Bridge",
-  "version": "0.2.0.30",
+  "version": "0.2.0.31",
   "description": "Stai 连接获准的旅行检索与供应商门户：检索结果经本机或授权后端桥接；门户可触发一次性登录代填，扩展不持久保存凭据。",
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuzBX8rT8+RZKEUip5VRA0cY056pExy9PNdN9YCiuY3dgglRbcIBhjuFJoR6EX3/MaUv82vJVyItRVrowXLTwDk4WZof0vwFgKL0zBK304PC46pUaAKTSu1PgXeL1+j5KTAGz/9a9+RnPdbj7jND5rM/MOmBHNPVPpp1NlwxRGIgF9OxHSOfXORcH4Iyte1aJSFUJbFtNS/DaE5D+KjyupPLyIqVN/dCiKnNsTCEHQB9ngeli665PFp76hkccHQQZ4sVuMLS4zBPcazUsp1kcnW+xsQoUATkODTCY+Pzk3zUVF1QOESTjRCVnbNi8tkO43RMRs2q63gX/3inFivcEwIDAQAB",
   "permissions": [
@@ -56,5 +56,5 @@
       "run_at": "document_start"
     }
   ],
-  "version_name": "0.2.0-rc.30"
+  "version_name": "0.2.0-rc.31"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@danceiny/gotry",
-  "version": "0.2.0-rc.30",
+  "version": "0.2.0-rc.31",
   "description": "GoTry — 从出发到下一次出发的 AI 旅行 Agent(dsh 插件)。npm/源码入口共用锁定的 dsh runtime + README 安装路径。",
   "type": "module",
   "main": "ts/src/index.ts",
@@ -44,7 +44,10 @@
     "client": {
       "platform": "web",
       "inject": [
-        "@deepseek-ai/dsh-client-ui-tool"
+        "@deepseek-ai/dsh-client-ui-tool",
+        "@deepseek-ai/dsh-client-ui-primitives",
+        "@deepseek-ai/dsh-client-ui-plugin-manager",
+        "@deepseek-ai/dsh-client-ui-sidebar-right"
       ]
     }
   },
@@ -57,6 +60,8 @@
     "bin/",
     "ts/src/index.ts",
     "ts/src/flyai-setup-tool.ts",
+    "ts/src/gotry-web-api.ts",
+    "ts/src/artifact-delivery.ts",
     "ts/src/subagent-job-id-guard.ts",
     "ts/src/benchmark-environment-bridge.ts",
     "ts/src/benchmark-tool-isolation.ts",

package/ts/src/artifact-delivery.ts

@@ -0,0 +1,25 @@
+/** Bridge successful GoTry render results to DSH's native present/delivery protocol. */
+import type { Context } from '@deepseek-ai/cordis'
+import type {} from '@deepseek-ai/dsh-tool-present/types'
+import type {} from '@deepseek-ai/dsh-tools'
+import { realpathSync, statSync } from 'node:fs'
+import { isAbsolute, relative, sep } from 'node:path'
+
+export function registerArtifactDeliveries(ctx: Context): void {
+  // Tool-registration-only hosts have no conversation event surface.
+  if (typeof ctx.on !== 'function') return
+  ctx.on('tools/result', (exec, result) => {
+    if (result.isError || exec.signal.aborted || !['gotry_itinerary_render', 'gotry_itinerary_deck_render'].includes(exec.name)) return
+    const value = result.value as { ok?: boolean; path?: unknown } | null
+    const session = exec.agent?.session, cwd = session?.header.cwd
+    if (!session || !cwd || !isAbsolute(cwd) || value?.ok !== true || typeof value.path !== 'string' || !isAbsolute(value.path)) return
+    const boundary = ctx.get('sessionProjections')?.stateOf(session, 'turnBoundary')
+    if (!boundary || boundary.openTurnStartSeq === null) return
+    try {
+      const path = realpathSync(value.path), root = realpathSync(cwd), inside = relative(root, path)
+      if (inside === '..' || inside.startsWith('..' + sep) || isAbsolute(inside) || !statSync(path).isFile()) return
+      session.append('deliverables/presented', { turn: boundary.lastTurn, callId: exec.callId,
+        files: [{ path: value.path, description: 'GoTry itinerary' }] })
+    } catch { /* A deleted or escaped file cannot become a delivery. */ }
+  })
+}

package/ts/src/gotry-web-api.ts

@@ -0,0 +1,140 @@
+/** Native Connection routes. Secrets never enter model tools or conversation events. */
+import type { Context } from '@deepseek-ai/cordis'
+import type { HostConnectionHandle } from '@deepseek-ai/dsh-client-connection'
+import { existsSync, readFileSync, rmSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { isAbsolute } from 'node:path'
+import { verifyFlyaiCandidate } from '../../bin/gotry-flyai-verification.js'
+import { listArtifacts } from '../capabilities/artifacts.ts'
+import {
+  atomicWriteJson, clearFlyaiKey, displayEndpoint, endpointFingerprint, flyaiConfigPath,
+  isPlaceholderFlyaiKey, maskFlyaiKey, readFlyaiConfig, readFlyaiVerification,
+  removeFlyaiVerification, resolveFlyaiEndpoint, resolveFlyaiKey, saveFlyaiKey,
+  sha256Hex, writeFlyaiVerification,
+} from '../capabilities/flyai-config.ts'
+
+interface WebOptions {
+  stateRoot: string
+  homeDir?: string
+  env?: NodeJS.ProcessEnv
+  workspaceForSession: (sessionId: string) => Promise<string | undefined>
+}
+
+const json = (value: unknown, status = 200) => Response.json(value, { status, headers: { 'cache-control': 'no-store' } })
+const rejection = (error: string, status = 400) => json({ ok: false, error }, status)
+const BODY_LIMIT = 8192
+
+async function readInput(request: Request): Promise<Record<string, unknown> | Response> {
+  if (request.headers.get('content-type')?.split(';')[0].trim() !== 'application/json') return rejection('需要 JSON 请求。', 415)
+  const reader = request.body?.getReader()
+  if (!reader) return rejection('请求为空。')
+  const chunks: Uint8Array[] = []
+  let bytes = 0
+  try {
+    while (true) {
+      const chunk = await reader.read()
+      if (chunk.done) break
+      bytes += chunk.value.byteLength
+      if (bytes > BODY_LIMIT) { await reader.cancel(); return rejection('请求过大。', 413) }
+      chunks.push(chunk.value)
+    }
+    const value: unknown = JSON.parse(Buffer.concat(chunks).toString('utf8'))
+    return value && typeof value === 'object' && !Array.isArray(value) ? value as Record<string, unknown> : rejection('请求无效。')
+  } catch { return rejection('请求无效。') }
+  finally { reader.releaseLock() }
+}
+
+export function createGotryWebHandlers(options: WebOptions) {
+  const homeDir = options.homeDir ?? homedir(), env = options.env ?? process.env
+  const paths = { homeDir, env }, configPath = flyaiConfigPath(homeDir)
+  let mutations: Promise<unknown> = Promise.resolve()
+  const status = () => {
+    const current = resolveFlyaiKey(paths), endpoint = resolveFlyaiEndpoint(paths), receipt = readFlyaiVerification(homeDir)
+    const matches = current.key && receipt?.keySha256 === sha256Hex(current.key) && receipt.source === current.source
+      && receipt.endpointFingerprint === endpointFingerprint(endpoint.url) && receipt.endpointDebug === endpoint.debug
+    return { ok: true, configured: Boolean(current.key), verified: Boolean(matches && receipt?.verdict === 'verified'),
+      writable: current.source !== 'env' && current.source !== 'env-debug' && process.platform !== 'win32', source: current.source,
+      endpoint: displayEndpoint(endpoint.url), endpointDebug: endpoint.debug,
+      ...(matches && receipt ? { checkedAt: receipt.at, verdict: receipt.verdict } : {}) }
+  }
+  const bytesAt = () => existsSync(configPath) ? readFileSync(configPath, 'utf8') : undefined
+  async function mutate(input: Record<string, unknown>, signal: AbortSignal): Promise<Response> {
+    if (signal.aborted) return rejection('操作已取消。', 409)
+    if (!status().writable) return rejection('当前 Key 由环境变量提供或此平台不支持安全写入。', 409)
+    if (input.action === 'clear') {
+      const result = clearFlyaiKey(paths)
+      if (!result.ok) return rejection('无法清除配置，请检查本机配置文件及权限。', 409)
+      removeFlyaiVerification(homeDir)
+      return json(status())
+    }
+    const key = typeof input.key === 'string' ? input.key.trim() : ''
+    if (!key || key.length > 2048 || /[\r\n\0]/.test(key) || isPlaceholderFlyaiKey(key)) return rejection('请粘贴控制台中的真实 API Key。')
+    const before = readFlyaiConfig(configPath)
+    if (!before.ok) return rejection('原配置损坏，已保留原文件，请先修复。', 409)
+    const previousBytes = bytesAt(), endpoint = resolveFlyaiEndpoint(paths), fingerprint = endpointFingerprint(endpoint.url)
+    if (!fingerprint) return rejection('当前服务地址无效。', 409)
+    const verify = await verifyFlyaiCandidate(key, { env: { ...env, HOME: homeDir }, signal })
+    if (signal.aborted || verify.verdict !== 'hit') return json({ ok: false, verdict: signal.aborted ? 'cancelled' : verify.verdict,
+      error: signal.aborted ? '验证已取消，旧配置保留。' : verify.error ?? '验证失败，旧配置保留。' }, 422)
+    if (!status().writable || bytesAt() !== previousBytes || fingerprint !== endpointFingerprint(resolveFlyaiEndpoint(paths).url)) {
+      return rejection('配置在验证期间发生变化，请重新读取后再试。', 409)
+    }
+    const saved = saveFlyaiKey(key, paths)
+    if (!saved.ok) return rejection('安全保存失败，旧配置保留，请检查本机权限。', 409)
+    const receiptSaved = writeFlyaiVerification({ schema: 'gotry.flyai-verification.v1', source: 'config',
+      keySha256: sha256Hex(key), maskedKey: maskFlyaiKey(key), verdict: 'verified', endpointFingerprint: fingerprint,
+      endpointDebug: endpoint.debug, at: new Date().toISOString() }, homeDir)
+    if (!receiptSaved) {
+      const restored = previousBytes === undefined
+        ? (() => { try { rmSync(configPath, { force: true }); return true } catch { return false } })()
+        : atomicWriteJson(configPath, before.data).ok
+      return rejection(restored ? '验证回执保存失败，旧配置已恢复。' : '验证回执保存失败，恢复旧配置失败，请检查本机文件。', 409)
+    }
+    return json(status())
+  }
+  return {
+    async flyai(request: Request): Promise<Response> {
+      if (request.method === 'GET') return json(status())
+      if (request.method !== 'POST') return rejection('不支持此操作。', 405)
+      const input = await readInput(request)
+      if (input instanceof Response) return input
+      if (!['save', 'clear'].includes(String(input.action)) || Object.keys(input).some(key => key !== 'action' && key !== 'key')
+        || (input.action === 'clear' && 'key' in input)) return rejection('请求无效。')
+      const operation = mutations.then(() => mutate(input, request.signal)).catch(() => rejection('操作失败，未能确认保存，请重新读取状态。', 500))
+      mutations = operation.then(() => undefined)
+      return operation
+    },
+    async artifacts(request: Request): Promise<Response> {
+      const query = new URL(request.url).searchParams
+      if ([...query.keys()].some(key => !['sessionId', 'search', 'offset', 'limit'].includes(key))) return rejection('查询字段无效。')
+      const sessionId = query.get('sessionId') ?? ''
+      if (!/^[A-Za-z0-9_-]{1,256}$/.test(sessionId)) return rejection('需要有效会话。')
+      const cwd = await options.workspaceForSession(sessionId)
+      if (!cwd || !isAbsolute(cwd)) return rejection('会话工作目录不可用。', 404)
+      try {
+        return json({ ok: true, ...await listArtifacts({ stateRoot: options.stateRoot, cwd,
+          handoffRoot: env.GOTRY_TURN_HANDOFF_ROOT ?? (options.stateRoot !== '.' ? options.stateRoot : cwd),
+          search: query.get('search') ?? undefined, offset: query.has('offset') ? Number(query.get('offset')) : undefined,
+          limit: query.has('limit') ? Number(query.get('limit')) : 20 }) })
+      } catch { return rejection('查询参数无效或产物暂时不可读取。') }
+    },
+  }
+}
+
+export function registerGotryWebApi(ctx: Context, stateRoot: string): void {
+  if (typeof ctx.inject !== 'function') return
+  ctx.inject(['connection', 'sessions'], scope => {
+    const connection = scope.get('connection') as HostConnectionHandle
+    const handlers = createGotryWebHandlers({ stateRoot, workspaceForSession: async sessionId => {
+      const id = sessionId as Parameters<typeof scope.sessions.get>[0]
+      const live = scope.sessions.get(id)?.header
+      const stored = live ? undefined : await scope.get('sessionPersistence')?.stat(sessionId)
+      return (live ?? stored?.header)?.cwd
+    } })
+    // DSH's streaming adapter always attaches a request body; GET cannot use
+    // it. Exact routes have one body mode, so reads and bounded writes differ.
+    scope.effect(() => connection.fetch.register({ path: '/api/gotry/flyai', methods: ['GET'], requestBody: 'buffered', fetch: handlers.flyai }))
+    scope.effect(() => connection.fetch.register({ path: '/api/gotry/flyai/write', methods: ['POST'], requestBody: 'streaming', fetch: handlers.flyai }))
+    scope.effect(() => connection.fetch.register({ path: '/api/gotry/artifacts', methods: ['GET'], requestBody: 'buffered', fetch: handlers.artifacts }))
+  })
+}

package/ts/src/index.ts

@@ -59,6 +59,8 @@ import { generateItineraryDeckExport } from '../capabilities/itinerary-deck-expo
 import { interpretEffect, declinedObservation, type EffectInterpreter } from '../capabilities/effect.ts'
 import { customerSendCode, customerLogin } from '../capabilities/hbcli.ts'
 import { FLYAI_POI_CATEGORIES, type FlyaiKind, type FlyaiQuery, type FlyaiResult } from '../capabilities/flyai.ts'
+import { registerGotryWebApi } from './gotry-web-api.ts'
+import { registerArtifactDeliveries } from './artifact-delivery.ts'
 import { createFlyaiSetupTool } from './flyai-setup-tool.ts'
 import { appendFacts, loadFactRegistry } from '../capabilities/fact-log.ts'
 import { factsFromFlyai, factsFromHotel, factsFromSession, factsFromSessionTrain } from './bookable-facts.ts'
@@ -520,6 +522,10 @@ export function apply(ctx: Context, config: Config, seams: ApplyTestSeams = {}):
   // 固定 policy 保证评测可复现,不走路由。GOTRY_HANDOFF_CHILD=1 是收集器
   // 派生的后台规划会话:唯一出口 converge + 长 leash——前台转后台,后台
   // 必须产出最终交付物,不得再次 handoff(否则无限递归)。
+  if (!rawBenchmarkEnvironmentConfigPath) {
+    registerGotryWebApi(ctx, config.stateRoot ?? '.')
+    registerArtifactDeliveries(ctx)
+  }
   const handoffChild = process.env.GOTRY_HANDOFF_CHILD === '1'
   installTurnDeadline(ctx, handoffChild
     ? { fixedPolicy: { softMs: 300_000, hardMs: 900_000, exit: 'converge' } }