feat(channels): 陌生人私聊正常聊天（跳概率门）+ 强制流控 6条/分与回合槽位 + 安静时段不再硬静默 + 受限车道边界行前置

- 陌生人私聊：不再走「值不值得回」的概率门，唯一闸门 = 每发送者 6 条/分滑窗 + 同会话 1 个在跑回合
- 被限流只登记不回，且留带 source 的可见告警（不静默）
- 安静时段在回复侧只作信号（规则层不再静默），群聊取消夜间静默
- 锁定流控常量：FlowDirectDefault 加字面量钉桩测试（放大它 = 静默关流控，且会让额度循环跑百万轮）

internal/services/channelbridge/light_test.go

@@ -14,15 +14,18 @@ import (
 	"git.yeij.top/AskaEth/Cyrene_v2/internal/user"
 )
 
-// stubLightJudge 是可配置的 LightJudge，记录自己被咨询了多少次。
+// stubLightJudge 是可配置的 LightJudge，记录自己被咨询了多少次，
+// 并保留最后一次收到的输入（用于断言 inQuiet 真值确实传到了下游判定器）。
 type stubLightJudge struct {
 	resp  LightDecision
 	err   error
 	calls int
+	last  LightInput
 }
 
-func (s *stubLightJudge) Judge(context.Context, LightInput) (LightDecision, error) {
+func (s *stubLightJudge) Judge(_ context.Context, in LightInput) (LightDecision, error) {
 	s.calls++
+	s.last = in
 	return s.resp, s.err
 }
 
@@ -127,40 +130,19 @@ func TestNonOwnerHighValueKeywordResponds(t *testing.T) {
 	}
 }
 
-func TestNonOwnerQuietHoursSilenced(t *testing.T) {
-	t.Parallel()
-
-	chat := &stubChatter{res: &loop.Result{Text: "不该回"}}
-	sess := &stubSessions{sess: nonOwnerSession()}
-	hist := &captureHistory{}
-	b, err := New(Options{
-		Loop: chat, Sessions: sess, Owner: &user.OwnerProfile{}, History: hist,
-		QuietStartHour: 23, QuietEndHour: 7,
-		Now: func() time.Time { return time.Date(2026, 1, 1, 2, 0, 0, 0, time.UTC) },
-	})
-	if err != nil {
-		t.Fatalf("New: %v", err)
-	}
-
-	// 策略五：安静时段内无信号的非主人消息被静默——
-	// 只登记、不回复。
-	b.process(context.Background(), nonOwnerGroupMsg("hello all"))
-
-	if chat.sessionID != "" || len(chat.messages) != 0 {
-		t.Fatalf("loop ran during quiet hours for a no-signal message: session=%q messages=%+v", chat.sessionID, chat.messages)
-	}
-	if len(hist.records()) != 1 {
-		t.Fatalf("records = %d, want 1 (registered, no reply)", len(hist.records()))
-	}
-}
-
-func TestNonOwnerQuietHoursMentionResponds(t *testing.T) {
+// TestNonOwnerQuietHoursRulesDoNotSilenceGroup 钉住裁决②（主人 2026-10-05）：
+// **安静时段不再是规则层的硬静默**——群里没被 @、无关键词的普通消息在 02:00
+// 仍会走到轻思考（LightJudge），由它决定回不回，而不是连判定器都不咨询就被
+// 静默。变异验证：把 `if inQuiet { return verdictSilent }` 加回 ruleLightJudge，
+// 本用例立刻变红（judge.calls 会是 0、循环不会跑）。
+func TestNonOwnerQuietHoursRulesDoNotSilenceGroup(t *testing.T) {
 	t.Parallel()
 
+	judge := &stubLightJudge{resp: LightDecision{Respond: true, Reason: "夜里这场值得聊"}}
 	chat := &stubChatter{res: &loop.Result{Text: "在的"}}
 	sess := &stubSessions{sess: nonOwnerSession()}
 	b, err := New(Options{
-		Loop: chat, Sessions: sess, Owner: &user.OwnerProfile{},
+		Loop: chat, Sessions: sess, Owner: &user.OwnerProfile{}, Light: judge,
 		QuietStartHour: 23, QuietEndHour: 7,
 		Now: func() time.Time { return time.Date(2026, 1, 1, 2, 0, 0, 0, time.UTC) },
 	})
@@ -168,12 +150,72 @@ func TestNonOwnerQuietHoursMentionResponds(t *testing.T) {
 		t.Fatalf("New: %v", err)
 	}
 
-	// 策略五不是硬性静默：被直接点名的消息在安静时段
-	// 仍会得到回复。
+	// 无 @、无关键词、无主人显示名的群消息，落在安静时段内。
+	b.process(context.Background(), nonOwnerGroupMsg("hello all"))
+
+	if judge.calls != 1 {
+		t.Fatalf("light judge calls = %d, want 1（安静时段不得在规则层硬静默，应交给轻思考）", judge.calls)
+	}
+	// 安静时段作为**信号**必须是真的（而非硬编码 false）传到下游判定器。
+	if !judge.last.InQuietHours {
+		t.Fatalf("light judge InQuietHours = false, want true at 02:00（安静时段信号失真）")
+	}
+	if chat.sessionID != "sess-g" {
+		t.Fatalf("loop session = %q, want sess-g（轻思考说回就该回）", chat.sessionID)
+	}
+}
+
+// TestNonOwnerQuietHoursMentionResponds 保留「安静时段不是硬性全静默」的正面口径：
+// 被直接点名的群消息在 02:00 仍直接回，且**根本不咨询轻思考**（规则已能给结论）。
+func TestNonOwnerQuietHoursMentionResponds(t *testing.T) {
+	t.Parallel()
+
+	judge := &stubLightJudge{resp: LightDecision{Respond: false, Reason: "不该被问到"}}
+	chat := &stubChatter{res: &loop.Result{Text: "在的"}}
+	sess := &stubSessions{sess: nonOwnerSession()}
+	b, err := New(Options{
+		Loop: chat, Sessions: sess, Owner: &user.OwnerProfile{}, Light: judge,
+		QuietStartHour: 23, QuietEndHour: 7,
+		Now: func() time.Time { return time.Date(2026, 1, 1, 2, 0, 0, 0, time.UTC) },
+	})
+	if err != nil {
+		t.Fatalf("New: %v", err)
+	}
+
+	// 策略二：被直接点名的消息在安静时段仍会得到回复。
 	b.process(context.Background(), nonOwnerGroupMsg("在吗", adapter.Mention{UserID: "bot"}))
 	if chat.sessionID != "sess-g" {
 		t.Fatalf("loop session = %q, want sess-g (mention should break quiet-hours silence)", chat.sessionID)
 	}
+	if judge.calls != 0 {
+		t.Fatalf("light judge calls = %d, want 0（@ 是规则可直接判定的强信号）", judge.calls)
+	}
+}
+
+// TestNonOwnerQuietHoursKeywordResponds 补齐另一条强信号：命中高价值关键词的群消息
+// 在 02:00 也直接回，同样不咨询轻思考。
+func TestNonOwnerQuietHoursKeywordResponds(t *testing.T) {
+	t.Parallel()
+
+	judge := &stubLightJudge{resp: LightDecision{Respond: false, Reason: "不该被问到"}}
+	chat := &stubChatter{res: &loop.Result{Text: "我看看"}}
+	sess := &stubSessions{sess: nonOwnerSession()}
+	b, err := New(Options{
+		Loop: chat, Sessions: sess, Owner: &user.OwnerProfile{}, Light: judge,
+		QuietStartHour: 23, QuietEndHour: 7,
+		Now: func() time.Time { return time.Date(2026, 1, 1, 2, 0, 0, 0, time.UTC) },
+	})
+	if err != nil {
+		t.Fatalf("New: %v", err)
+	}
+
+	b.process(context.Background(), nonOwnerGroupMsg("有人在吗，紧急求助"))
+	if chat.sessionID != "sess-g" {
+		t.Fatalf("loop session = %q, want sess-g (keyword should break quiet-hours silence)", chat.sessionID)
+	}
+	if judge.calls != 0 {
+		t.Fatalf("light judge calls = %d, want 0（高价值关键词是规则可直接判定的强信号）", judge.calls)
+	}
 }
 
 func TestOwnerUnaffectedInQuietHours(t *testing.T) {