@cloudbase/cloudbase-mcp 2.34.5 → 2.34.6

package/dist/index.js

@@ -4986,8 +4986,8 @@ const types_js_1 = __webpack_require__(9921);
 exports.functions = (0, types_js_1.defineModule)({
     // ---- 工具 meta ----
     queryTitle: "查询 CloudBase 云函数",
-    queryDescription: "CloudBase 云函数统一只读入口。通过更自解释的 action 查询 CloudBase 云函数列表、函数详情、执行日志、层、触发器和代码下载地址。" +
-        "\n\n**分页说明**：`listFunctions`、`listLayers` 支持 `limit` 和 `offset` 参数。" +
+    queryDescription: "CloudBase 云函数统一只读入口。通过更自解释的 action 查询 CloudBase 云函数列表、函数详情、执行日志、层、触发器、代码下载地址、已发布版本与流量别名。" +
+        "\n\n**分页说明**：`listFunctions`、`listLayers`、`listVersionByFunction` 支持 `limit` 和 `offset` 参数。" +
         "\n- `limit`: 分页数量，默认值由后端决定" +
         "\n- `offset`: 分页偏移，从 0 开始" +
         "\n- 示例：`queryFunctions(action=\"listFunctions\", offset=10, limit=10)`" +
@@ -4995,6 +4995,7 @@ exports.functions = (0, types_js_1.defineModule)({
         "\n- 示例：`queryFunctions(action=\"listFunctionLogs\", functionName=\"my-function\")`" +
         "\n- 如需查看日志详情：`queryFunctions(action=\"getFunctionLogDetail\", requestId=\"xxx\")`" +
         "\n\n**定时任务 / cron / 定时跑**：使用 `listFunctionTriggers` 查询函数的 timer 触发器配置。" +
+        "\n\n**版本与流量路由**：`listVersionByFunction` 列出已发布版本（对齐 tcb fn list-function-versions）；`getFunctionAlias` 查看别名/灰度配置（对齐 tcb fn get-route，aliasName 默认 `$DEFAULT`）。" +
         "\n\n**层（Layer）说明**：" +
         "\n- 层为 SCF 账号级共享命名空间：不同环境创建同名层会共享同一层的版本序列；删除某版本会影响所有绑定该版本的环境的函数" +
         "\n- 创建层必须用带环境标识的唯一层名，固定格式：`{layerName}_{当前envId}`（如 `common_cloud1-d9ghadgak3edf6b36`）。不要在不同环境使用相同裸层名，创建前先 `listLayers` 查重" +
@@ -5003,8 +5004,9 @@ exports.functions = (0, types_js_1.defineModule)({
         "\n- 本工具用于查询特定 CloudBase 云函数的执行日志" +
         "\n- `queryLogs` 工具用于搜索 CLS 日志服务（跨服务日志聚合）",
     manageTitle: "管理 CloudBase 云函数",
-    manageDescription: "CloudBase 云函数统一写入口。支持创建函数、更新代码、更新配置、调用函数、管理定时跑 / 定时任务 / scheduled job 的 timer 触发器和层绑定。" +
+    manageDescription: "CloudBase 云函数统一写入口。支持创建函数、更新代码、更新配置、调用函数、发布版本、配置流量别名、管理定时跑 / 定时任务 / scheduled job 的 timer 触发器和层绑定。" +
         "如果要创建 cron 定时任务，先用 createFunction 创建函数，再用 createFunctionTrigger 创建 timer 触发器（支持7段cron表达式），deleteFunctionTrigger 删除触发器。" +
+        "版本发布：`publishVersion` 对齐 tcb fn publish-version / SDK publishVersion；灰度/切流：`updateFunctionAliasConfig` 对齐 tcb fn config-route / SDK updateFunctionAliasConfig（aliasName 默认 `$DEFAULT`）。" +
         "HTTP 云函数镜像构建部署：createFunction / updateFunctionCode 通过 func.buildStrategy 区分。" +
         "func.buildStrategy=image（已有镜像，填 func.imageConfig.imageUri）直接创建/更新 HTTP 函数；" +
         "func.buildStrategy=local（本地 Docker 构建推送）、cloud（CloudApp 云端构建）走镜像构建部署编排（需要 func.imageConfig；build 非必填，缺省仓库坐标自动补齐：namespace 默认 envId、repository 默认函数名），" +
@@ -5107,6 +5109,12 @@ exports.functions = (0, types_js_1.defineModule)({
     "reason.imageNextIteration": "后续迭代只需用新镜像 tag 调用 updateFunctionCode 更新镜像",
     "reason.imageGatewayRoute": "如需通过 URL 访问镜像 HTTP 函数，显式创建 Domain/Route 访问入口并传 type=\"HTTP\"（映射 WEB_SCF）",
     "reason.latestConfig": "确认最新函数配置",
+    "reason.publishVersion": "发布函数新版本（对齐 tcb fn publish-version）",
+    "reason.getFunctionAlias": "查看函数流量别名配置（对齐 tcb fn get-route）",
+    "reason.updateFunctionAlias": "更新函数流量别名/灰度路由（对齐 tcb fn config-route）",
+    "reason.listVersions": "查看函数已发布版本列表（对齐 tcb fn list-function-versions）",
+    "reason.routeTraffic": "将流量切到新版本或配置灰度权重",
+    "reason.confirmAlias": "确认别名与流量配置已生效",
     // ---- 成功 message ----
     listedFunctions: "已获取 {count} 个云函数",
     gotFunctionDetail: "已获取函数 {fnName} 的详情",
@@ -5118,6 +5126,10 @@ exports.functions = (0, types_js_1.defineModule)({
     gotLayerVersionDetail: "已获取层 {layerName} 版本 {layerVersion} 的详情",
     gotFunctionTriggers: "已获取函数 {fnName} 的触发器列表",
     gotDownloadUrl: "已获取函数 {fnName} 的代码下载链接",
+    gotFunctionVersions: "已获取函数 {fnName} 的版本列表",
+    gotFunctionAlias: "已获取函数 {fnName} 的别名 {aliasName}",
+    publishedVersion: "已发布函数 {fnName} 的新版本 {version}",
+    updatedFunctionAlias: "已更新函数 {fnName} 别名 {aliasName}（主版本 {version}）",
     createdHttpFunctionMessage: "已创建 HTTP 函数 {fnName}。如果后续需要通过 URL 访问，请显式调用 manageGateway(action=\"createRoute\")，并把 upstreamResourceType=\"WEB_SCF\" 一起传入，再按实际路径和鉴权需求创建访问入口。评测或其他外部调用方可能会以匿名身份访问，而且失败后不一定会把 EXCEED_AUTHORITY 再反馈给 AI；交付前请主动确认访问路径和函数安全规则，若已出现 EXCEED_AUTHORITY，请先调用 queryPermissions(action=\"getResourcePermission\", resourceType=\"function\", resourceId=\"{fnName}\") 查看当前规则，再按需要使用 managePermissions(action=\"updateResourcePermission\") 调整权限。",
     createdFunction: "已创建函数 {fnName}",
     imageCreatedMessage: "已基于镜像 {imageUri} 创建 HTTP 函数 {fnName}。请确认 TCR、SCF 与构建管道处于同一地域；如需通过 URL 访问，请显式调用 manageGateway(action=\"createRoute\", upstreamResourceType=\"WEB_SCF\") 并按需调整函数安全规则。部署后可用 queryFunctions(action=\"getFunctionDetail\") 确认函数已就绪。",
@@ -5185,8 +5197,8 @@ exports.functions = (0, types_js_1.defineModule)({
     "schema.create.layers": "Layer 配置",
     "schema.manageLayer.name": "层名称",
     "schema.manageLayer.version": "层版本号",
-    "schema.query.action": "只读操作类型：\n- `listFunctions`: 列出所有 CloudBase 云函数\n- `getFunctionDetail`: 获取 CloudBase 云函数详情（需要 functionName）\n- `listFunctionLogs`: 查询 CloudBase 云函数执行日志（需要 functionName）\n- `getFunctionLogDetail`: 获取日志详情（需要 requestId）\n- `listFunctionLayers`: 列出函数绑定的层\n- `listLayers`: 列出所有层（账号级视图，含其他环境创建的层）\n- `listLayerVersions`: 列出层的版本（注意：是 Versions 不是 Version；账号级视图）\n- `getLayerVersionDetail`: 获取层版本详情（账号级视图）\n- `listFunctionTriggers`: 列出函数触发器（用于查看定时任务 / cron / timer 配置）\n- `getFunctionDownloadUrl`: 获取函数代码下载地址\n- `getFunctionDeployStatus`: 按 taskId 查询异步部署状态、阶段进度和最终结果。返回 data.build（构建子状态）、data.deploy（部署子状态）、data.progress（阶段事件）；status=running 时 data.result 与 data.error 一律为 null，不得报告部署完成。调用方必须持续轮询直到 status=succeeded/failed；status=expired 表示任务超过最长保留时间（2 小时）被终结，云端可能仍在部署，需用 getFunctionDetail 确认。任务只保存在 MCP 进程内存中，过期或 MCP Server 重启后返回 errorCode=DEPLOY_TASK_NOT_FOUND；任务按环境隔离，只能查到当前环境自己发起的部署。cloud mode 下本 action 不可用：异步任务只由 buildStrategy=cloud/local 的真实部署创建，而这两种策略在 cloud mode 下都不支持真实执行，image 策略则走同步部署不产生 taskId。",
-    "schema.query.functionName": "CloudBase 云函数名称。`getFunctionDetail`、`listFunctionLogs`、`listFunctionLayers`、`listFunctionTriggers`、`getFunctionDownloadUrl` 时必填",
+    "schema.query.action": "只读操作类型：\n- `listFunctions`: 列出所有 CloudBase 云函数\n- `getFunctionDetail`: 获取 CloudBase 云函数详情（需要 functionName）\n- `listFunctionLogs`: 查询 CloudBase 云函数执行日志（需要 functionName）\n- `getFunctionLogDetail`: 获取日志详情（需要 requestId）\n- `listFunctionLayers`: 列出函数绑定的层\n- `listLayers`: 列出所有层（账号级视图，含其他环境创建的层）\n- `listLayerVersions`: 列出层的版本（注意：是 Versions 不是 Version；账号级视图）\n- `getLayerVersionDetail`: 获取层版本详情（账号级视图）\n- `listFunctionTriggers`: 列出函数触发器（用于查看定时任务 / cron / timer 配置）\n- `getFunctionDownloadUrl`: 获取函数代码下载地址\n- `getFunctionDeployStatus`: 按 taskId 查询异步部署状态、阶段进度和最终结果。返回 data.build（构建子状态）、data.deploy（部署子状态）、data.progress（阶段事件）；status=running 时 data.result 与 data.error 一律为 null，不得报告部署完成。调用方必须持续轮询直到 status=succeeded/failed；status=expired 表示任务超过最长保留时间（2 小时）被终结，云端可能仍在部署，需用 getFunctionDetail 确认。任务只保存在 MCP 进程内存中，过期或 MCP Server 重启后返回 errorCode=DEPLOY_TASK_NOT_FOUND；任务按环境隔离，只能查到当前环境自己发起的部署。cloud mode 下本 action 不可用：异步任务只由 buildStrategy=cloud/local 的真实部署创建，而这两种策略在 cloud mode 下都不支持真实执行，image 策略则走同步部署不产生 taskId。\n- `listVersionByFunction`: 列出函数已发布版本（对齐 tcb fn list-function-versions / SDK listVersionByFunction；需要 functionName）\n- `getFunctionAlias`: 查询函数别名与流量路由（对齐 tcb fn get-route / SDK getFunctionAlias；需要 functionName；aliasName 默认 $DEFAULT）",
+    "schema.query.functionName": "CloudBase 云函数名称。`getFunctionDetail`、`listFunctionLogs`、`listFunctionLayers`、`listFunctionTriggers`、`getFunctionDownloadUrl`、`listVersionByFunction`、`getFunctionAlias` 时必填",
     "schema.query.limit": "分页数量（limit）。列表类 action 可选，默认值由后端决定",
     "schema.query.offset": "分页偏移（offset）。列表类 action 可选，默认 0",
     "schema.query.codeSecret": "代码保护密钥，用于解密函数代码",
@@ -5200,11 +5212,14 @@ exports.functions = (0, types_js_1.defineModule)({
     "schema.query.layerName": "层名称。`listLayerVersions`、`getLayerVersionDetail` 操作必填。层为账号级共享命名空间；推荐固定格式 `{layerName}_{当前envId}`（如 common_cloud1-d9ghadgak3edf6b36）",
     "schema.query.layerVersion": "层版本号。`getLayerVersionDetail` 操作必填",
     "schema.query.taskId": "`getFunctionDeployStatus` 操作时的异步部署任务 ID（由 manageFunctions 的 wait=false 返回）。任务仅保存在当前 MCP 进程内存中：终态任务保留约 30 分钟，运行中任务最长保留 2 小时。",
-    "schema.manage.action": "写操作类型，例如 createFunction、updateFunctionCode、incrementalDeployFunction、invokeFunction、deleteFunction、createFunctionTrigger（定时任务 / cron / timer）、deleteFunctionTrigger、createLayerVersion、deleteLayerVersion、attachLayer、detachLayer、updateFunctionLayers。层名推荐固定格式 `{layerName}_{当前envId}`（如 common_cloud1-d9ghadgak3edf6b36）",
+    "schema.query.order": "`listVersionByFunction` 排序方向，如 ASC / DESC",
+    "schema.query.orderBy": "`listVersionByFunction` 排序字段，如 AddTime / ModTime",
+    "schema.query.aliasName": "`getFunctionAlias` 的别名名称。省略时默认 `$DEFAULT`（与 tcb fn get-route 一致）",
+    "schema.manage.action": "写操作类型，例如 createFunction、updateFunctionCode、incrementalDeployFunction、invokeFunction、deleteFunction、createFunctionTrigger（定时任务 / cron / timer）、deleteFunctionTrigger、createLayerVersion、deleteLayerVersion、attachLayer、detachLayer、updateFunctionLayers、publishVersion（发布新版本，对齐 tcb fn publish-version）、updateFunctionAliasConfig（更新别名/流量路由，对齐 tcb fn config-route）。层名推荐固定格式 `{layerName}_{当前envId}`（如 common_cloud1-d9ghadgak3edf6b36）",
     "schema.manage.func": "createFunction / updateFunctionCode 的函数配置。镜像/构建部署通过 func.buildStrategy（zip/cloud/local/image）区分，镜像相关字段收敛在 func.imageConfig 命名空间下。",
     "schema.manage.functionRootPath": "创建或更新函数代码时默认推荐的本地目录方式。必须是直接包含函数文件夹的目录绝对路径（如 /abs/path/cloudfunctions 或 /abs/path/functions），不要传项目根目录（如 /abs/path），也不要传到函数名子目录（如 /abs/path/cloudfunctions/hello）。本地应按 cloudfunctions/<functionName>/index.js 或 functions/<functionName>/index.js 布局，此参数传 cloudfunctions 或 functions 目录的绝对路径。SDK 会自动拼接函数名子目录，无需预先压缩 zip 或 base64 编码。",
     "schema.manage.force": "createFunction 时是否覆盖",
-    "schema.manage.functionName": "目标函数名称（顶层）。updateFunctionCode / updateFunctionConfig / invokeFunction 等 action 使用此字段。不要只写在 func.name：createFunction 用 func.name，其它 action 用顶层 functionName。若误传 func.name，也会被识别为 functionName。",
+    "schema.manage.functionName": "目标函数名称（顶层）。updateFunctionCode / updateFunctionConfig / invokeFunction / publishVersion / updateFunctionAliasConfig 等 action 使用此字段。不要只写在 func.name：createFunction 用 func.name，其它 action 用顶层 functionName。若误传 func.name，也会被识别为 functionName。",
     "schema.manage.zipFile": "仅兼容特殊场景：预先准备好的代码包 base64 编码。普通 createFunction/updateFunctionCode 默认不要先压缩 zip，优先使用 functionRootPath。",
     "schema.manage.handler": "函数入口",
     "schema.manage.timeout": "配置更新时的超时时间",
@@ -5218,7 +5233,7 @@ exports.functions = (0, types_js_1.defineModule)({
     "schema.manage.contentPath": "层内容路径，可为目录或 ZIP 文件",
     "schema.manage.base64Content": "层内容的 base64 编码",
     "schema.manage.runtimes": "层适用的运行时列表",
-    "schema.manage.description": "层版本描述",
+    "schema.manage.description": "描述信息。createLayerVersion 时为层版本描述；publishVersion / updateFunctionAliasConfig 时为版本或别名描述",
     "schema.manage.licenseInfo": "层许可证信息",
     "schema.manage.layers": "updateFunctionLayers 的目标层列表，顺序即最终顺序",
     "schema.manage.codeSecret": "层绑定时的代码保护密钥",
@@ -5227,11 +5242,22 @@ exports.functions = (0, types_js_1.defineModule)({
     "schema.manage.autoGrant": "镜像部署是否允许 manager-node 自动补齐固定白名单 CAM 策略。默认 false；仅在明确确认权限变更时设为 true。",
     "schema.manage.confirm": "危险操作确认开关。deleteFunction、deleteFunctionTrigger、deleteLayerVersion、detachLayer 等删除类操作以及镜像构建部署（func.buildStrategy=cloud/local）真实执行需要显式传入 confirm=true",
     "schema.manage.incrementalFile": "incrementalDeployFunction 增量部署时的变更文件路径",
+    "schema.manage.aliasName": "`updateFunctionAliasConfig` 的别名名称。省略时默认 `$DEFAULT`（与 tcb fn config-route 一致）",
+    "schema.manage.functionVersion": "`updateFunctionAliasConfig` 的主版本。可为具体版本号或 `$LATEST`",
+    "schema.manage.routingConfig": "`updateFunctionAliasConfig` 的流量路由配置。AdditionalVersionWeights 用于灰度权重；AddtionVersionMatchs 为 SCF/SDK 历史字段名（含拼写）",
+    "schema.routing.version": "附加流量版本号",
+    "schema.routing.weight": "附加流量权重（0-1 或百分比，按 SCF 约定）",
+    "schema.routing.matchVersion": "匹配规则指向的版本号",
+    "schema.routing.matchKey": "匹配规则的 Header/Query Key",
+    "schema.routing.matchMethod": "匹配方法，如 Exact / Regex",
+    "schema.routing.matchExpression": "匹配表达式",
+    "schema.routing.additionalWeights": "附加版本权重列表（灰度发布）",
+    "schema.routing.additionalMatches": "附加版本匹配规则列表（字段名保持 SCF AddtionVersionMatchs）",
 }, {
     // ---- Tool meta ----
     queryTitle: "Query CloudBase Cloud Functions",
-    queryDescription: "Unified read-only entry for CloudBase cloud functions. Query function lists, function details, execution logs, layers, triggers, and code download URLs through self-explanatory actions." +
-        "\n\n**Pagination**: `listFunctions` and `listLayers` support `limit` and `offset` parameters." +
+    queryDescription: "Unified read-only entry for CloudBase cloud functions. Query function lists, function details, execution logs, layers, triggers, code download URLs, published versions, and traffic aliases through self-explanatory actions." +
+        "\n\n**Pagination**: `listFunctions`, `listLayers`, and `listVersionByFunction` support `limit` and `offset` parameters." +
         "\n- `limit`: page size, the default is decided by the backend" +
         "\n- `offset`: pagination offset, starting from 0" +
         "\n- Example: `queryFunctions(action=\"listFunctions\", offset=10, limit=10)`" +
@@ -5239,6 +5265,7 @@ exports.functions = (0, types_js_1.defineModule)({
         "\n- Example: `queryFunctions(action=\"listFunctionLogs\", functionName=\"my-function\")`" +
         "\n- To view log details: `queryFunctions(action=\"getFunctionLogDetail\", requestId=\"xxx\")`" +
         "\n\n**Scheduled tasks / cron / timers**: use `listFunctionTriggers` to query a function's timer trigger configuration." +
+        "\n\n**Versions and traffic routing**: `listVersionByFunction` lists published versions (aligns with tcb fn list-function-versions); `getFunctionAlias` views alias / canary config (aligns with tcb fn get-route; aliasName defaults to `$DEFAULT`)." +
         "\n\n**Layers**:" +
         "\n- Layers are account-level shared namespaces in SCF: same-named layers created in different environments share one version sequence; deleting a version affects functions in every environment bound to it" +
         "\n- When creating a layer, use a unique name with the environment suffix, in the fixed format `{layerName}_{current envId}` (e.g. `common_cloud1-d9ghadgak3edf6b36`). Do not reuse the same bare layer name across environments; check with `listLayers` before creating" +
@@ -5247,8 +5274,9 @@ exports.functions = (0, types_js_1.defineModule)({
         "\n- This tool queries execution logs of a specific CloudBase cloud function" +
         "\n- The `queryLogs` tool searches the CLS log service (cross-service log aggregation)",
     manageTitle: "Manage CloudBase Cloud Functions",
-    manageDescription: "Unified write entry for CloudBase cloud functions. Supports creating functions, updating code, updating configuration, invoking functions, and managing timer triggers (scheduled jobs / cron) and layer bindings." +
+    manageDescription: "Unified write entry for CloudBase cloud functions. Supports creating functions, updating code, updating configuration, invoking functions, publishing versions, configuring traffic aliases, and managing timer triggers (scheduled jobs / cron) and layer bindings." +
         " To create a cron scheduled task, first create the function with createFunction, then create the timer trigger with createFunctionTrigger (7-field cron expression supported), and delete triggers with deleteFunctionTrigger." +
+        " Version publish: `publishVersion` aligns with tcb fn publish-version / SDK publishVersion; canary / traffic shift: `updateFunctionAliasConfig` aligns with tcb fn config-route / SDK updateFunctionAliasConfig (aliasName defaults to `$DEFAULT`)." +
         " HTTP function image build & deploy: createFunction / updateFunctionCode distinguish via func.buildStrategy." +
         " func.buildStrategy=image (existing image, set func.imageConfig.imageUri) creates/updates the HTTP function directly;" +
         " func.buildStrategy=local (local Docker build & push) and cloud (CloudApp cloud build) go through the image build/deploy orchestration (func.imageConfig required; build optional — missing registry coordinates are auto-filled: namespace defaults to envId, repository defaults to the function name)," +
@@ -5351,6 +5379,12 @@ exports.functions = (0, types_js_1.defineModule)({
     "reason.imageNextIteration": "For later iterations, just call updateFunctionCode with the new image tag to update the image",
     "reason.imageGatewayRoute": "To access the image HTTP function via URL, explicitly create a Domain/Route access entry and pass type=\"HTTP\" (mapped to WEB_SCF)",
     "reason.latestConfig": "Confirm the latest function configuration",
+    "reason.publishVersion": "Publish a new function version (aligns with tcb fn publish-version)",
+    "reason.getFunctionAlias": "View function traffic alias config (aligns with tcb fn get-route)",
+    "reason.updateFunctionAlias": "Update function traffic alias / canary routing (aligns with tcb fn config-route)",
+    "reason.listVersions": "List published function versions (aligns with tcb fn list-function-versions)",
+    "reason.routeTraffic": "Shift traffic to the new version or configure canary weights",
+    "reason.confirmAlias": "Confirm the alias and traffic config have taken effect",
     // ---- Success messages ----
     listedFunctions: "Retrieved {count} cloud functions",
     gotFunctionDetail: "Retrieved details of function {fnName}",
@@ -5362,6 +5396,10 @@ exports.functions = (0, types_js_1.defineModule)({
     gotLayerVersionDetail: "Retrieved details of layer {layerName} version {layerVersion}",
     gotFunctionTriggers: "Retrieved the trigger list of function {fnName}",
     gotDownloadUrl: "Retrieved the code download URL of function {fnName}",
+    gotFunctionVersions: "Retrieved the version list of function {fnName}",
+    gotFunctionAlias: "Retrieved alias {aliasName} of function {fnName}",
+    publishedVersion: "Published new version {version} of function {fnName}",
+    updatedFunctionAlias: "Updated alias {aliasName} of function {fnName} (primary version {version})",
     createdHttpFunctionMessage: "Created HTTP function {fnName} from the image. If URL access is needed later, explicitly call manageGateway(action=\"createRoute\") with upstreamResourceType=\"WEB_SCF\", then create the access entry according to the actual path and auth requirements. Evaluators or other external callers may access anonymously, and failures may not feed EXCEED_AUTHORITY back to the AI; before delivery, proactively confirm the access path and the function security rules. If EXCEED_AUTHORITY has already appeared, first call queryPermissions(action=\"getResourcePermission\", resourceType=\"function\", resourceId=\"{fnName}\") to view the current rules, then adjust permissions with managePermissions(action=\"updateResourcePermission\") as needed.",
     createdFunction: "Created function {fnName}",
     imageCreatedMessage: "Created HTTP function {fnName} from image {imageUri}. Please confirm TCR, SCF, and the build pipeline are in the same region; for URL access, explicitly call manageGateway(action=\"createRoute\", upstreamResourceType=\"WEB_SCF\") and adjust the function security rules as needed. After deployment, use queryFunctions(action=\"getFunctionDetail\") to confirm the function is ready.",
@@ -5429,8 +5467,8 @@ exports.functions = (0, types_js_1.defineModule)({
     "schema.create.layers": "Layer configuration",
     "schema.manageLayer.name": "Layer name",
     "schema.manageLayer.version": "Layer version number",
-    "schema.query.action": "Read-only action type:\n- `listFunctions`: list all CloudBase cloud functions\n- `getFunctionDetail`: get function details (requires functionName)\n- `listFunctionLogs`: query function execution logs (requires functionName)\n- `getFunctionLogDetail`: get log details (requires requestId)\n- `listFunctionLayers`: list layers bound to a function\n- `listLayers`: list all layers (account-level view, including layers from other environments)\n- `listLayerVersions`: list layer versions (Versions, not Version; account-level view)\n- `getLayerVersionDetail`: get layer version details (account-level view)\n- `listFunctionTriggers`: list function triggers (scheduled task / cron / timer configuration)\n- `getFunctionDownloadUrl`: get the function code download URL\n- `getFunctionDeployStatus`: query async deployment status, stage progress, and final result by taskId. Returns data.build, data.deploy, and data.progress. While status=running, data.result and data.error are null and deployment must not be reported as complete. Keep polling until status=succeeded/failed. status=expired means the task exceeded the 2-hour retention limit; cloud deployment may still be running, so confirm with getFunctionDetail. Tasks exist only in MCP process memory; expired tasks or a restarted MCP Server return errorCode=DEPLOY_TASK_NOT_FOUND. Tasks are isolated by environment. This action is unavailable in cloud mode because real cloud/local builds cannot run there, while image deployment is synchronous and creates no taskId.",
-    "schema.query.functionName": "CloudBase cloud function name. Required for `getFunctionDetail`, `listFunctionLogs`, `listFunctionLayers`, `listFunctionTriggers`, and `getFunctionDownloadUrl`.",
+    "schema.query.action": "Read-only action type:\n- `listFunctions`: list all CloudBase cloud functions\n- `getFunctionDetail`: get function details (requires functionName)\n- `listFunctionLogs`: query function execution logs (requires functionName)\n- `getFunctionLogDetail`: get log details (requires requestId)\n- `listFunctionLayers`: list layers bound to a function\n- `listLayers`: list all layers (account-level view, including layers from other environments)\n- `listLayerVersions`: list layer versions (Versions, not Version; account-level view)\n- `getLayerVersionDetail`: get layer version details (account-level view)\n- `listFunctionTriggers`: list function triggers (scheduled task / cron / timer configuration)\n- `getFunctionDownloadUrl`: get the function code download URL\n- `getFunctionDeployStatus`: query async deployment status, stage progress, and final result by taskId. Returns data.build, data.deploy, and data.progress. While status=running, data.result and data.error are null and deployment must not be reported as complete. Keep polling until status=succeeded/failed. status=expired means the task exceeded the 2-hour retention limit; cloud deployment may still be running, so confirm with getFunctionDetail. Tasks exist only in MCP process memory; expired tasks or a restarted MCP Server return errorCode=DEPLOY_TASK_NOT_FOUND. Tasks are isolated by environment. This action is unavailable in cloud mode because real cloud/local builds cannot run there, while image deployment is synchronous and creates no taskId.\n- `listVersionByFunction`: list published function versions (aligns with tcb fn list-function-versions / SDK listVersionByFunction; requires functionName)\n- `getFunctionAlias`: get function alias and traffic routing (aligns with tcb fn get-route / SDK getFunctionAlias; requires functionName; aliasName defaults to $DEFAULT)",
+    "schema.query.functionName": "CloudBase cloud function name. Required for `getFunctionDetail`, `listFunctionLogs`, `listFunctionLayers`, `listFunctionTriggers`, `getFunctionDownloadUrl`, `listVersionByFunction`, and `getFunctionAlias`.",
     "schema.query.limit": "Page size (limit). Optional for list actions; the backend determines the default.",
     "schema.query.offset": "Pagination offset. Optional for list actions; defaults to 0.",
     "schema.query.codeSecret": "Code protection secret used to decrypt function code.",
@@ -5444,11 +5482,14 @@ exports.functions = (0, types_js_1.defineModule)({
     "schema.query.layerName": "Layer name. Required for `listLayerVersions` and `getLayerVersionDetail`. Layers use an account-level shared namespace; use the fixed format `{layerName}_{current envId}` (for example, common_cloud1-d9ghadgak3edf6b36).",
     "schema.query.layerVersion": "Layer version number. Required for `getLayerVersionDetail`.",
     "schema.query.taskId": "Async deployment task ID for `getFunctionDeployStatus` (returned by manageFunctions with wait=false). Tasks exist only in current MCP process memory: terminal tasks are retained for about 30 minutes and running tasks for at most 2 hours.",
-    "schema.manage.action": "Write action type, such as createFunction, updateFunctionCode, incrementalDeployFunction, invokeFunction, deleteFunction, createFunctionTrigger (scheduled task / cron / timer), deleteFunctionTrigger, createLayerVersion, deleteLayerVersion, attachLayer, detachLayer, or updateFunctionLayers. Use the fixed layer naming format `{layerName}_{current envId}` (for example, common_cloud1-d9ghadgak3edf6b36).",
+    "schema.query.order": "Sort direction for `listVersionByFunction`, such as ASC / DESC.",
+    "schema.query.orderBy": "Sort field for `listVersionByFunction`, such as AddTime / ModTime.",
+    "schema.query.aliasName": "Alias name for `getFunctionAlias`. Defaults to `$DEFAULT` when omitted (same as tcb fn get-route).",
+    "schema.manage.action": "Write action type, such as createFunction, updateFunctionCode, incrementalDeployFunction, invokeFunction, deleteFunction, createFunctionTrigger (scheduled task / cron / timer), deleteFunctionTrigger, createLayerVersion, deleteLayerVersion, attachLayer, detachLayer, updateFunctionLayers, publishVersion (publish a new version; aligns with tcb fn publish-version), or updateFunctionAliasConfig (update alias / traffic routing; aligns with tcb fn config-route). Use the fixed layer naming format `{layerName}_{current envId}` (for example, common_cloud1-d9ghadgak3edf6b36).",
     "schema.manage.func": "Function configuration for createFunction / updateFunctionCode. Image/build deployment is selected by func.buildStrategy (zip/cloud/local/image), with image fields under func.imageConfig.",
     "schema.manage.functionRootPath": "Recommended local-directory input for creating or updating function code. It must be the absolute directory that directly contains function folders (for example, /abs/path/cloudfunctions or /abs/path/functions), not the project root or the function subdirectory. Local layout should be cloudfunctions/<functionName>/index.js or functions/<functionName>/index.js. Pass the absolute cloudfunctions/functions directory; the SDK appends the function subdirectory. Do not precompress ZIP or base64 content.",
     "schema.manage.force": "Whether createFunction overwrites an existing function.",
-    "schema.manage.functionName": "Target function name at the top level. Used by updateFunctionCode, updateFunctionConfig, invokeFunction, and similar actions. createFunction uses func.name; other actions use top-level functionName. A mistakenly supplied func.name is also recognized as functionName.",
+    "schema.manage.functionName": "Target function name at the top level. Used by updateFunctionCode, updateFunctionConfig, invokeFunction, publishVersion, updateFunctionAliasConfig, and similar actions. createFunction uses func.name; other actions use top-level functionName. A mistakenly supplied func.name is also recognized as functionName.",
     "schema.manage.zipFile": "Compatibility only: base64-encoded prebuilt code package. For ordinary createFunction/updateFunctionCode, do not create a ZIP first; prefer functionRootPath.",
     "schema.manage.handler": "Function entry point",
     "schema.manage.timeout": "Timeout used for configuration updates.",
@@ -5462,7 +5503,7 @@ exports.functions = (0, types_js_1.defineModule)({
     "schema.manage.contentPath": "Layer content path, either a directory or ZIP file.",
     "schema.manage.base64Content": "Base64-encoded layer content.",
     "schema.manage.runtimes": "Runtimes supported by the layer.",
-    "schema.manage.description": "Layer version description.",
+    "schema.manage.description": "Description. Layer version description for createLayerVersion; version or alias description for publishVersion / updateFunctionAliasConfig.",
     "schema.manage.licenseInfo": "Layer license information.",
     "schema.manage.layers": "Target layer list for updateFunctionLayers; array order becomes final order.",
     "schema.manage.codeSecret": "Code protection secret used when binding a layer.",
@@ -5471,6 +5512,17 @@ exports.functions = (0, types_js_1.defineModule)({
     "schema.manage.autoGrant": "Whether manager-node may automatically add the fixed allowlist of CAM policies for image deployment. Defaults to false; set true only after explicitly confirming permission changes.",
     "schema.manage.confirm": "Dangerous-operation confirmation. deleteFunction, deleteFunctionTrigger, deleteLayerVersion, detachLayer, other delete actions, and real image build deployment (func.buildStrategy=cloud/local) require confirm=true.",
     "schema.manage.incrementalFile": "Changed-file path for incrementalDeployFunction incremental deployment.",
+    "schema.manage.aliasName": "Alias name for `updateFunctionAliasConfig`. Defaults to `$DEFAULT` when omitted (same as tcb fn config-route).",
+    "schema.manage.functionVersion": "Primary version for `updateFunctionAliasConfig`. May be a concrete version number or `$LATEST`.",
+    "schema.manage.routingConfig": "Traffic routing config for `updateFunctionAliasConfig`. AdditionalVersionWeights is used for canary weights; AddtionVersionMatchs keeps the SCF/SDK historical field name (including the typo).",
+    "schema.routing.version": "Additional traffic version number",
+    "schema.routing.weight": "Additional traffic weight (0-1 or percentage per SCF convention)",
+    "schema.routing.matchVersion": "Version targeted by a match rule",
+    "schema.routing.matchKey": "Header/Query key for a match rule",
+    "schema.routing.matchMethod": "Match method, such as Exact / Regex",
+    "schema.routing.matchExpression": "Match expression",
+    "schema.routing.additionalWeights": "Additional version weight list (canary release)",
+    "schema.routing.additionalMatches": "Additional version match rules (field name keeps SCF AddtionVersionMatchs)",
 });
 
 
@@ -5804,10 +5856,11 @@ exports.hosting = (0, types_js_1.defineModule)({
     queryDescription: "查询 CloudBase 静态托管的只读信息。适合 AI 先做发现再决定下一步：action=websiteConfig 查询首页/错误页/路由规则与站点域名信息；action=status 查询托管服务状态；action=findFiles 按前缀查找文件；action=listFiles 列出全部托管文件；action=domainStatus 查询自定义域名的当前状态与配置。该工具不会产生任何副作用。",
     manageTitle: "管理 CloudBase 静态托管",
     manageDescription: "管理 CloudBase 静态托管的变更操作。action=upload 上传本地构建产物到共享域名（域名格式：<envId>-<appId>.tcloudbaseapp.com/<cloudPath>）；action=delete 删除托管文件或目录（必须 confirm=true）；action=setWebsiteDocument 设置首页/错误页/路由规则；action=enableService 开通静态托管；action=bindDomain / unbindDomain / updateDomain 管理自定义域名；action=downloadFile / downloadDirectory 下载托管内容到本地。⚠️ 底层每次托管操作都会请求 DescribeStaticStore 管控接口（20 次/秒 QPS 限制）：批量删除多个文件请逐次调用并保持间隔（建议每秒不超过 10 次），同一目录下多个文件可优先用 isDir=true 一次删除整个目录；若报错含 \"frequency limit\" 说明触发了限流，请等待 1-2 秒后重试，不要连续快速重试。⚠️ 本工具没有关闭默认域名（*.tcloudbaseapp.com）的 action；要禁用该默认公网域名，请用 manageGateway(action=\"disableRoute\", domain=该 STATIC_STORE IsDefault 域名, path=\"/\")（底层 ModifyHTTPServiceRoute，不是 ModifyGatewayRoute）。⚠️ 新项目部署优先使用 manageApps（部署到独立子域名），本工具适合已有老项目继续使用或作为 manageApps 的 fallback。manageApps 与 manageHosting 域名不同，切换会导致老链接失效。若任务只是查看配置、文件或域名状态，请改用 queryHosting。",
+    manageDescriptionCloud: "管理 CloudBase 静态托管的变更操作（cloud mode 版本）。⚠️ 依赖本地文件路径的 action 在 cloud mode 下不可用：action=upload / downloadFile / downloadDirectory 会直接报错，请勿调用。部署静态站点请改用 manageApps 云端链路：queryApps(action=\"getUploadUrl\", serviceName=\"<应用名>\") 获取预签名上传 URL → 将代码 zip PUT 上传到 uploadUrl（带 uploadHeaders 与 Content-Type: application/zip）→ manageApps(action=\"deployApp\", serviceName, cosTimestamp=<返回的 unixTimestamp>) 触发部署。可正常使用的远端管理操作：action=delete 删除托管文件或目录（必须 confirm=true）；action=setWebsiteDocument 设置首页/错误页/路由规则；action=enableService 开通静态托管；action=bindDomain / unbindDomain / updateDomain 管理自定义域名。⚠️ 底层每次托管操作都会请求 DescribeStaticStore 管控接口（20 次/秒 QPS 限制）：批量删除多个文件请逐次调用并保持间隔（建议每秒不超过 10 次）；若报错含 \"frequency limit\" 说明触发了限流，请等待 1-2 秒后重试。若任务只是查看配置、文件或域名状态，请改用 queryHosting。",
     commonServiceUnsupported: "当前 CloudBase Manager 实例不支持 commonService.call，无法执行 {action}。",
     managerUnavailable: "CloudBase Manager 实例不可用。",
     hostingStoreMissing: "当前环境 {envId} 未发现静态托管资源配置，无法上传文件。请先确认 MCP 已绑定到已开通静态托管的 CloudBase 环境；如需切换环境，请调用 auth(action=\"set_env\", envId=\"目标环境ID\") 后重试。",
-    cloudModeLocalActionUnavailable: "manageHosting(action=\"{action}\") 在 cloud mode 下不可用，因为该操作依赖本地文件路径。请改用本地模式执行；若只需要远端管理静态托管，可继续使用 delete / setWebsiteDocument / enableService / bindDomain / unbindDomain / updateDomain。",
+    cloudModeLocalActionUnavailable: "manageHosting(action=\"{action}\") 在 cloud mode 下不可用，因为该操作依赖本地文件路径。若需要部署静态站点，请改用 manageApps 云端链路：queryApps(action=\"getUploadUrl\", serviceName=\"<应用名>\") 获取预签名上传 URL → 将代码 zip PUT 上传到 uploadUrl（带 uploadHeaders 与 Content-Type: application/zip）→ manageApps(action=\"deployApp\", serviceName, cosTimestamp=<返回的 unixTimestamp>) 触发部署；若只是要上传/下载已有托管文件且无本地文件系统，该操作在云端没有替代路径，请改用本地模式执行。远端管理操作（delete / setWebsiteDocument / enableService / bindDomain / unbindDomain / updateDomain）不受影响，可继续使用。",
     uploadArgsRequired: "manageHosting(action=\"upload\") 需要提供 localPath + cloudPath，或提供 files 多文件上传列表。",
     uploadSuccess: "静态托管文件上传成功。若需要校验上传结果，请继续调用 queryHosting(action=\"findFiles\") 或 queryHosting(action=\"listFiles\")。",
     uploadRouteDisabledWithFallback: "静态托管文件上传成功。默认静态托管域名的网关路由已禁用（访问会返回 GATEWAY_ROUTE_DISABLED），已改用其他可达域名作为 accessUrl。可用 manageGateway(action=\"updateRoute\", route.enable=true) 重新启用默认域路由。",
@@ -5907,10 +5960,11 @@ exports.hosting = (0, types_js_1.defineModule)({
     queryDescription: "Read-only information about CloudBase static hosting. Lets the AI discover state first and then decide the next step: action=websiteConfig queries the index/error document, routing rules, and site domain info; action=status queries the hosting service status; action=findFiles finds files by prefix; action=listFiles lists all hosted files; action=domainStatus queries the current status and configuration of custom domains. This tool has no side effects.",
     manageTitle: "Manage CloudBase static hosting",
     manageDescription: "Mutation operations for CloudBase static hosting. action=upload uploads local build artifacts to the shared domain (domain format: <envId>-<appId>.tcloudbaseapp.com/<cloudPath>); action=delete deletes hosted files or directories (confirm=true required); action=setWebsiteDocument sets the index/error document and routing rules; action=enableService enables static hosting; action=bindDomain / unbindDomain / updateDomain manage custom domains; action=downloadFile / downloadDirectory download hosted content to local disk. ⚠️ Every hosting operation calls the DescribeStaticStore control-plane API underneath (20 req/s QPS limit): when deleting multiple files, call sequentially with intervals (no more than 10 calls per second recommended); for multiple files in the same directory, prefer isDir=true to delete the whole directory in one call. If the error contains \"frequency limit\", rate limiting was triggered — wait 1-2 seconds and retry; do not retry in rapid succession. ⚠️ This tool has no action to disable the default domain (*.tcloudbaseapp.com); to disable that default public domain, use manageGateway(action=\"disableRoute\", domain=the STATIC_STORE IsDefault domain, path=\"/\") (backed by ModifyHTTPServiceRoute, not ModifyGatewayRoute). ⚠️ For new projects prefer manageApps (deploys to a dedicated subdomain); this tool suits existing legacy projects or as a fallback for manageApps. manageApps and manageHosting use different domains, so switching invalidates old links. If the task is only inspecting config, files, or domain status, use queryHosting instead.",
+    manageDescriptionCloud: "Mutation operations for CloudBase static hosting (cloud mode variant). ⚠️ Actions that depend on local file paths are unavailable in cloud mode: action=upload / downloadFile / downloadDirectory will fail immediately — do not call them. To deploy a static site, use the manageApps cloud path instead: queryApps(action=\"getUploadUrl\", serviceName=\"<app name>\") to get a presigned upload URL → PUT the code zip to uploadUrl (with uploadHeaders and Content-Type: application/zip) → manageApps(action=\"deployApp\", serviceName, cosTimestamp=<returned unixTimestamp>) to trigger deployment. Remote-only management actions remain available: action=delete deletes hosted files or directories (confirm=true required); action=setWebsiteDocument sets the index/error document and routing rules; action=enableService enables static hosting; action=bindDomain / unbindDomain / updateDomain manage custom domains. ⚠️ Every hosting operation calls the DescribeStaticStore control-plane API underneath (20 req/s QPS limit): when deleting multiple files, call sequentially with intervals (no more than 10 calls per second recommended); if the error contains \"frequency limit\", rate limiting was triggered — wait 1-2 seconds and retry. If the task is only inspecting config, files, or domain status, use queryHosting instead.",
     commonServiceUnsupported: "The current CloudBase Manager instance does not support commonService.call; cannot execute {action}.",
     managerUnavailable: "CloudBase manager is unavailable.",
     hostingStoreMissing: "No static hosting storage config found for environment {envId}; cannot upload files. Make sure MCP is bound to a CloudBase environment with static hosting enabled; to switch environments, call auth(action=\"set_env\", envId=\"<target env ID>\") and retry.",
-    cloudModeLocalActionUnavailable: "manageHosting(action=\"{action}\") is unavailable in cloud mode because the operation depends on local file paths. Run MCP in local mode instead; for remote-only static hosting management, you can still use delete / setWebsiteDocument / enableService / bindDomain / unbindDomain / updateDomain.",
+    cloudModeLocalActionUnavailable: "manageHosting(action=\"{action}\") is unavailable in cloud mode because the operation depends on local file paths. To deploy a static site, use the manageApps cloud path instead: queryApps(action=\"getUploadUrl\", serviceName=\"<app name>\") to get a presigned upload URL → PUT the code zip to uploadUrl (with uploadHeaders and Content-Type: application/zip) → manageApps(action=\"deployApp\", serviceName, cosTimestamp=<returned unixTimestamp>) to trigger deployment. If you only need to upload/download existing hosted files and there is no local filesystem, there is no cloud alternative for this action — run MCP in local mode instead. Remote-only management actions (delete / setWebsiteDocument / enableService / bindDomain / unbindDomain / updateDomain) are unaffected and remain available.",
     uploadArgsRequired: "manageHosting(action=\"upload\") requires localPath + cloudPath, or a files list for multi-file upload.",
     uploadSuccess: "Static hosting files uploaded. To verify the upload result, call queryHosting(action=\"findFiles\") or queryHosting(action=\"listFiles\").",
     uploadRouteDisabledWithFallback: "Static hosting files uploaded. The gateway route for the default static hosting domain is disabled (access returns GATEWAY_ROUTE_DISABLED); another reachable domain is used as accessUrl. Use manageGateway(action=\"updateRoute\", route.enable=true) to re-enable the default domain route.",
@@ -6639,6 +6693,8 @@ exports.rag = (0, types_js_1.defineModule)({
     findByNameSuccess: "CloudBase 文档查找成功",
     readDocSuccess: "CloudBase 文档读取成功",
     readDocNotMarkdown: "文档 {docPath} 没有可用的 Markdown 版本（站点对该路径返回了 HTML 页面）。请用 action=searchDocs 或 action=findByName 确认正确地址后重试；也可以直接抓取网页版：{pageUrl}",
+    readDocUrlNotAllowed: "readDoc 只读取 CloudBase 官方文档站（{host}）上的文档，不接受其他主机的地址：{docPath}。请改传站内相对路径（如 /quick-start），或该文档站上的地址。",
+    readDocPathEmpty: "readDoc 需要一个具体文档路径，{docPath} 里没有路径部分。例如传 /quick-start，或传 action=findByName / action=searchDocs 返回的文档地址。",
     searchDocsSuccess: "CloudBase 文档搜索成功",
     skillNotFound: "未找到技能文档 \"{skillName}\"。可用技能文档：{available}。{remoteHint}",
     skillRemoteHint: " 你也可以直接从这个地址获取技能文档：{url}",
@@ -6659,7 +6715,7 @@ exports.rag = (0, types_js_1.defineModule)({
     "schema.action": "仅 mode=docs 时指定；mode=openapi 不要传 action。CloudBase 文档操作类型：listModules=列出所有文档模块，listModuleDocs=获取指定模块的目录结构，findByName=按名称/路径/URL 智能查找，readDoc=读取指定文档 Markdown，searchDocs=全文搜索官方文档。",
     "schema.moduleName": "mode=docs 且 action=listModuleDocs 时指定。模块名称。",
     "schema.input": "mode=docs 且 action=findByName 时指定。支持模块名、文档标题、层级路径或 URL。",
-    "schema.docPath": "mode=docs 且 action=readDoc 时指定。文档相对路径或完整 URL。",
+    "schema.docPath": "mode=docs 且 action=readDoc 时指定。站内相对路径（如 /quick-start），或 action=findByName / action=searchDocs 返回的文档地址 —— 传地址时只取其中的路径，主机部分一律忽略。",
     "schema.query": "mode=docs 且 action=searchDocs 时指定。全文检索关键词。",
 }, {
     title: "CloudBase knowledge base search",
@@ -6695,6 +6751,8 @@ exports.rag = (0, types_js_1.defineModule)({
     findByNameSuccess: "CloudBase doc lookup succeeded",
     readDocSuccess: "CloudBase doc read successfully",
     readDocNotMarkdown: "No Markdown version is available for {docPath} (the site returned an HTML page for it). Use action=searchDocs or action=findByName to confirm the correct address and retry; you can also fetch the rendered page directly: {pageUrl}",
+    readDocUrlNotAllowed: "readDoc only reads documents on the official CloudBase docs site ({host}); other hosts are not accepted: {docPath}. Pass a site-relative path such as /quick-start, or an address on that docs site.",
+    readDocPathEmpty: "readDoc needs a concrete document path; {docPath} carries no path. For example pass /quick-start, or a document address returned by action=findByName / action=searchDocs.",
     searchDocsSuccess: "CloudBase doc search succeeded",
     skillNotFound: "Skill document \"{skillName}\" not found. Available skill docs: {available}.{remoteHint}",
     skillRemoteHint: " You can also try fetching the skill doc directly from: {url}",
@@ -6715,7 +6773,7 @@ exports.rag = (0, types_js_1.defineModule)({
     "schema.action": "Only for mode=docs; do not pass action with mode=openapi. CloudBase documentation action: listModules lists all documentation modules; listModuleDocs gets the catalog for a module; findByName searches intelligently by name, path, or URL; readDoc reads document Markdown; searchDocs performs a full-text search of the official documentation.",
     "schema.moduleName": "Required when mode=docs and action=listModuleDocs. The module name.",
     "schema.input": "Required when mode=docs and action=findByName. Accepts a module name, document title, hierarchical path, or URL.",
-    "schema.docPath": "Required when mode=docs and action=readDoc. A relative document path or full URL.",
+    "schema.docPath": "Required when mode=docs and action=readDoc. A site-relative path such as /quick-start, or a document address returned by action=findByName / action=searchDocs — only the path is used; any host is ignored.",
     "schema.query": "Required when mode=docs and action=searchDocs. Full-text search keywords.",
 });
 
@@ -9117,6 +9175,8 @@ exports.MZ = {
     tag: ["2018-08-13"],
     billing: ["2018-07-09"],
     region: ["2022-06-27"],
+    // 备案
+    ba: ["2020-07-20"],
     // 计算 / 容器 / 存储
     cvm: ["2017-03-12"],
     lighthouse: ["2020-03-24"],
@@ -23844,7 +23904,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.CUSTOM_IMAGE_RUNTIME = exports.MASKED_ENV_VALUE = exports.LAYER_SOFT_WARN = exports.MANAGE_FUNCTION_ACTIONS = exports.QUERY_FUNCTION_ACTIONS = exports.TRIGGER_CONFIG_EXAMPLES = exports.SUPPORTED_TRIGGER_TYPES = exports.DEFAULT_NODEJS_RUNTIME = exports.SUPPORTED_NODEJS_RUNTIMES = exports.RECOMMENDED_RUNTIMES = exports.DEFAULT_RUNTIME = exports.ALL_SUPPORTED_RUNTIMES = exports.SUPPORTED_RUNTIMES = void 0;
+exports.CUSTOM_IMAGE_RUNTIME = exports.MASKED_ENV_VALUE = exports.LAYER_SOFT_WARN = exports.DEFAULT_FUNCTION_ALIAS = exports.MANAGE_FUNCTION_ACTIONS = exports.QUERY_FUNCTION_ACTIONS = exports.TRIGGER_CONFIG_EXAMPLES = exports.SUPPORTED_TRIGGER_TYPES = exports.DEFAULT_NODEJS_RUNTIME = exports.SUPPORTED_NODEJS_RUNTIMES = exports.RECOMMENDED_RUNTIMES = exports.DEFAULT_RUNTIME = exports.ALL_SUPPORTED_RUNTIMES = exports.SUPPORTED_RUNTIMES = void 0;
 exports.formatRuntimeList = formatRuntimeList;
 exports.layerNameIncludesEnvId = layerNameIncludesEnvId;
 exports.buildCreateLayerNameWarning = buildCreateLayerNameWarning;
@@ -23943,6 +24003,8 @@ exports.QUERY_FUNCTION_ACTIONS = [
     "listFunctionTriggers",
     "getFunctionDownloadUrl",
     "getFunctionDeployStatus",
+    "listVersionByFunction",
+    "getFunctionAlias",
 ];
 exports.MANAGE_FUNCTION_ACTIONS = [
     "createFunction",
@@ -23957,8 +24019,12 @@ exports.MANAGE_FUNCTION_ACTIONS = [
     "attachLayer",
     "detachLayer",
     "updateFunctionLayers",
+    "publishVersion",
+    "updateFunctionAliasConfig",
     "incrementalDeployFunction", // 增量部署，需通过 pluginOptions.functions 注入实现
 ];
+/** Default SCF traffic alias used by CloudBase CLI `fn get-route` / `fn config-route`. */
+exports.DEFAULT_FUNCTION_ALIAS = "$DEFAULT";
 /** Layer soft-warn copy — account-scoped SCF LayerName guidance (no hard fail). */
 exports.LAYER_SOFT_WARN = {
     createNameFormat: (envId) => (0, index_js_1.t)("functions.layerWarn.createNameFormat", { envId }),
@@ -24118,6 +24184,27 @@ const MANAGE_LAYER_SCHEMA = zod_1.z.object({
     layerName: zod_1.z.string().describe("functions.schema.manageLayer.name"),
     layerVersion: zod_1.z.number().describe("functions.schema.manageLayer.version"),
 });
+const FUNCTION_VERSION_WEIGHT_SCHEMA = zod_1.z.object({
+    Version: zod_1.z.string().describe("functions.schema.routing.version"),
+    Weight: zod_1.z.number().describe("functions.schema.routing.weight"),
+});
+const FUNCTION_VERSION_MATCH_SCHEMA = zod_1.z.object({
+    Version: zod_1.z.string().describe("functions.schema.routing.matchVersion"),
+    Key: zod_1.z.string().describe("functions.schema.routing.matchKey"),
+    Method: zod_1.z.string().describe("functions.schema.routing.matchMethod"),
+    Expression: zod_1.z.string().describe("functions.schema.routing.matchExpression"),
+});
+const FUNCTION_ROUTING_CONFIG_SCHEMA = zod_1.z.object({
+    AdditionalVersionWeights: zod_1.z
+        .array(FUNCTION_VERSION_WEIGHT_SCHEMA)
+        .optional()
+        .describe("functions.schema.routing.additionalWeights"),
+    // Keep SCF/SDK historical field name (typo included) as the public contract.
+    AddtionVersionMatchs: zod_1.z
+        .array(FUNCTION_VERSION_MATCH_SCHEMA)
+        .optional()
+        .describe("functions.schema.routing.additionalMatches"),
+});
 /**
  * Prefer top-level functionName; fall back to func.name for the common
  * mistake of nesting the target name under func (createFunction shape).
@@ -24684,6 +24771,78 @@ function registerFunctionTools(server) {
                     raw: result,
                 }, (0, index_js_1.t)("functions.gotDownloadUrl", { fnName: input.functionName }));
             }
+            case "listVersionByFunction": {
+                if (!input.functionName) {
+                    throw new Error((0, index_js_1.t)("functions.paramRequired", { action: input.action, param: "functionName" }));
+                }
+                const cloudbase = await getManager();
+                const result = await cloudbase.functions.listVersionByFunction({
+                    functionName: input.functionName,
+                    offset: input.offset,
+                    limit: input.limit,
+                    order: input.order,
+                    orderBy: input.orderBy,
+                });
+                (0, cloudbase_manager_js_1.logCloudBaseResult)(server.logger, result);
+                return buildEnvelope({
+                    action: input.action,
+                    functionName: input.functionName,
+                    functionVersions: result.FunctionVersion || [],
+                    versions: result.Versions || [],
+                    totalCount: result.TotalCount,
+                    requestId: result.RequestId,
+                    raw: result,
+                }, (0, index_js_1.t)("functions.gotFunctionVersions", { fnName: input.functionName }), [
+                    {
+                        tool: "manageFunctions",
+                        action: "publishVersion",
+                        reason: (0, index_js_1.t)("functions.reason.publishVersion"),
+                    },
+                    {
+                        tool: "queryFunctions",
+                        action: "getFunctionAlias",
+                        reason: (0, index_js_1.t)("functions.reason.getFunctionAlias"),
+                    },
+                ]);
+            }
+            case "getFunctionAlias": {
+                if (!input.functionName) {
+                    throw new Error((0, index_js_1.t)("functions.paramRequired", { action: input.action, param: "functionName" }));
+                }
+                const aliasName = input.aliasName || exports.DEFAULT_FUNCTION_ALIAS;
+                const cloudbase = await getManager();
+                const result = await cloudbase.functions.getFunctionAlias({
+                    functionName: input.functionName,
+                    name: aliasName,
+                });
+                (0, cloudbase_manager_js_1.logCloudBaseResult)(server.logger, result);
+                return buildEnvelope({
+                    action: input.action,
+                    functionName: input.functionName,
+                    aliasName,
+                    functionVersion: result.FunctionVersion,
+                    routingConfig: result.RoutingConfig,
+                    description: result.Description,
+                    addTime: result.AddTime,
+                    modTime: result.ModTime,
+                    requestId: result.RequestId,
+                    raw: result,
+                }, (0, index_js_1.t)("functions.gotFunctionAlias", {
+                    fnName: input.functionName,
+                    aliasName,
+                }), [
+                    {
+                        tool: "manageFunctions",
+                        action: "updateFunctionAliasConfig",
+                        reason: (0, index_js_1.t)("functions.reason.updateFunctionAlias"),
+                    },
+                    {
+                        tool: "queryFunctions",
+                        action: "listVersionByFunction",
+                        reason: (0, index_js_1.t)("functions.reason.listVersions"),
+                    },
+                ]);
+            }
             default:
                 throw new Error((0, index_js_1.t)("functions.unsupportedAction", { action: input.action }));
         }
@@ -25522,6 +25681,94 @@ function registerFunctionTools(server) {
                     },
                 ], bindWarnings);
             }
+            case "publishVersion": {
+                if (!input.functionName) {
+                    throw new Error((0, index_js_1.t)("functions.paramRequired", { action: input.action, param: "functionName" }));
+                }
+                const cloudbase = await getManager();
+                const result = await cloudbase.functions.publishVersion({
+                    functionName: input.functionName,
+                    description: input.description,
+                });
+                (0, cloudbase_manager_js_1.logCloudBaseResult)(server.logger, result);
+                return buildEnvelope({
+                    action: input.action,
+                    functionName: input.functionName,
+                    functionVersion: result.FunctionVersion,
+                    description: result.Description,
+                    codeSize: result.CodeSize,
+                    memorySize: result.MemorySize,
+                    handler: result.Handler,
+                    timeout: result.Timeout,
+                    runtime: result.Runtime,
+                    namespace: result.Namespace,
+                    requestId: result.RequestId,
+                    raw: result,
+                }, (0, index_js_1.t)("functions.publishedVersion", {
+                    fnName: input.functionName,
+                    version: result.FunctionVersion,
+                }), [
+                    {
+                        tool: "queryFunctions",
+                        action: "listVersionByFunction",
+                        reason: (0, index_js_1.t)("functions.reason.listVersions"),
+                    },
+                    {
+                        tool: "manageFunctions",
+                        action: "updateFunctionAliasConfig",
+                        reason: (0, index_js_1.t)("functions.reason.routeTraffic"),
+                        suggested_args: {
+                            functionName: input.functionName,
+                            functionVersion: result.FunctionVersion,
+                            aliasName: exports.DEFAULT_FUNCTION_ALIAS,
+                        },
+                    },
+                ]);
+            }
+            case "updateFunctionAliasConfig": {
+                if (!input.functionName) {
+                    throw new Error((0, index_js_1.t)("functions.paramRequired", { action: input.action, param: "functionName" }));
+                }
+                if (!input.functionVersion) {
+                    throw new Error((0, index_js_1.t)("functions.paramRequired", {
+                        action: input.action,
+                        param: "functionVersion",
+                    }));
+                }
+                const aliasName = input.aliasName || exports.DEFAULT_FUNCTION_ALIAS;
+                const cloudbase = await getManager();
+                const result = await cloudbase.functions.updateFunctionAliasConfig({
+                    functionName: input.functionName,
+                    name: aliasName,
+                    functionVersion: input.functionVersion,
+                    description: input.description,
+                    routingConfig: input.routingConfig,
+                });
+                (0, cloudbase_manager_js_1.logCloudBaseResult)(server.logger, result);
+                return buildEnvelope({
+                    action: input.action,
+                    functionName: input.functionName,
+                    aliasName,
+                    functionVersion: input.functionVersion,
+                    routingConfig: input.routingConfig,
+                    requestId: result.RequestId,
+                    raw: result,
+                }, (0, index_js_1.t)("functions.updatedFunctionAlias", {
+                    fnName: input.functionName,
+                    aliasName,
+                    version: input.functionVersion,
+                }), [
+                    {
+                        tool: "queryFunctions",
+                        action: "getFunctionAlias",
+                        reason: (0, index_js_1.t)("functions.reason.confirmAlias"),
+                        suggested_args: {
+                            functionName: input.functionName,
+                            aliasName,
+                        },
+                    },
+                ]);
+            }
             default:
                 // incrementalDeployFunction：无默认实现，必须通过 pluginOptions 注入
                 if (input.action === 'incrementalDeployFunction') {
@@ -25581,6 +25828,12 @@ function registerFunctionTools(server) {
                 .string()
                 .optional()
                 .describe("functions.schema.query.taskId"),
+            order: zod_1.z.string().optional().describe("functions.schema.query.order"),
+            orderBy: zod_1.z.string().optional().describe("functions.schema.query.orderBy"),
+            aliasName: zod_1.z
+                .string()
+                .optional()
+                .describe("functions.schema.query.aliasName"),
         },
         annotations: {
             readOnlyHint: true,
@@ -25649,6 +25902,15 @@ function registerFunctionTools(server) {
                 .describe("functions.schema.manage.autoGrant"),
             confirm: zod_1.z.boolean().optional().describe("functions.schema.manage.confirm"),
             incrementalFile: zod_1.z.string().optional().describe("functions.schema.manage.incrementalFile"),
+            aliasName: zod_1.z
+                .string()
+                .optional()
+                .describe("functions.schema.manage.aliasName"),
+            functionVersion: zod_1.z
+                .string()
+                .optional()
+                .describe("functions.schema.manage.functionVersion"),
+            routingConfig: FUNCTION_ROUTING_CONFIG_SCHEMA.optional().describe("functions.schema.manage.routingConfig"),
         },
         annotations: {
             readOnlyHint: false,
@@ -27787,7 +28049,12 @@ function registerHostingTools(server) {
     });
     server.registerTool('manageHosting', {
         title: 'hosting.manageTitle',
-        description: 'hosting.manageDescription',
+        // cloud mode 下注册期即切换描述：upload/download 系 action 不可用、部署引导走
+        // manageApps 云端链路（getUploadUrl → PUT zip → deployApp(cosTimestamp)），
+        // 让 agent 在 tools/list 阶段就避开必败调用，而不是等报错后浪费一轮。
+        description: (0, cloud_mode_js_1.isCloudMode)()
+            ? 'hosting.manageDescriptionCloud'
+            : 'hosting.manageDescription',
         inputSchema: manageHostingInputSchema,
         annotations: {
             readOnlyHint: false,
@@ -30308,9 +30575,11 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.SKILL_REMOTE_BASE_URL = void 0;
+exports.DOCS_BASE_HOST = exports.SKILL_REMOTE_BASE_URL = void 0;
 exports.resolveSkillSearchRoots = resolveSkillSearchRoots;
 exports.resolveDocsMarkdownPath = resolveDocsMarkdownPath;
+exports.toSiteRelativeDocPath = toSiteRelativeDocPath;
+exports.assertNoHostInDocPath = assertNoHostInDocPath;
 exports.isDocsHtmlFallback = isDocsHtmlFallback;
 exports.registerRagTools = registerRagTools;
 exports.buildSkillRawUrl = buildSkillRawUrl;
@@ -30739,6 +31008,74 @@ function resolveDocsMarkdownPath(docPath) {
         : `${base.replace(/\/index$/i, "")}.md`;
     return `${normalized}${hash}`;
 }
+/**
+ * 交给 `DocsService.readDoc()` 的地址**永远不含 host**。
+ *
+ * Manager SDK 的 `DocsService.readDoc()` 见到 `http` 前缀就把入参原样 fetch、并把整段响应体
+ * 回显给调用方（`@cloudbase/manager-node/lib/docs/index.js:101`）。等于 docPath 是一条「由服务端
+ * 发起任意 HTTP 请求、把响应交给调用方」的通路：只要入参能带主机，`http://127.0.0.1/...`、
+ * `http://169.254.169.254/...`（云主机元数据）就能把工具变成 SSRF 原语。
+ *
+ * 而 docPath 收到完整 URL 是**主线用法**，不能靠「拒绝一切 URL」收口：`findByName` /
+ * `listModuleDocs` 的数据源 `category.json` 里 1016 个文档值全部是
+ * `https://docs.cloudbase.net/...` 形态，`searchDocs`（Algolia）返回的 `url` 也是完整地址，
+ * AI 拿到之后自然是原样喂回 readDoc。
+ *
+ * 所以这里的做法是**剥掉主机**：官方文档站的地址只取 pathname（+ 锚点），其余主机直接拒绝。
+ * 效果比白名单更强 —— 不是「允许的 host 恰好只有一个」，而是**没有任何 host 能走到 fetch**，
+ * 请求目标恒为 SDK 里的 `DOCS_BASE_URL`；顺带也让 `resolveDocsMarkdownPath` 的 `.md` 后缀
+ * 拼接不再可能作用在主机上（旧实现里裸主机名会被拼成 `docs.cloudbase.net.md`——`.md` 是
+ * 可被第三方注册的国家顶级域）。
+ */
+exports.DOCS_BASE_HOST = "docs.cloudbase.net";
+/** 带 scheme 的绝对地址（`//host/path` 这类 protocol-relative 也算「指定了主机」）。 */
+const ABSOLUTE_DOC_URL_PATTERN = /^[a-z][a-z0-9+.-]*:\/\//i;
+function parseAbsoluteDocUrl(value) {
+    const candidate = value.startsWith("//") ? `https:${value}` : value;
+    if (!ABSOLUTE_DOC_URL_PATTERN.test(candidate)) {
+        return null;
+    }
+    try {
+        return new URL(candidate);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * 把 docPath 折成站内相对路径：官方文档站地址**丢掉 host**只留路径，非首方主机直接拒绝。
+ *
+ * 查询串一并丢弃：站点用 `<路径>.md` 寻址，query 不属于寻址的一部分，留着只会拼出
+ * `.../x.md?foo` 这种畸形地址。锚点保留（`resolveDocsMarkdownPath` 本就支持 `#`）。
+ */
+function toSiteRelativeDocPath(docPath) {
+    const raw = docPath.trim();
+    const parsed = parseAbsoluteDocUrl(raw);
+    if (!parsed) {
+        return raw;
+    }
+    const host = parsed.hostname.toLowerCase().replace(/\.$/, "");
+    const isAllowedProtocol = parsed.protocol === "http:" || parsed.protocol === "https:";
+    if (!isAllowedProtocol || host !== exports.DOCS_BASE_HOST) {
+        throw new Error((0, index_js_1.t)("rag.readDocUrlNotAllowed", { docPath: raw, host: exports.DOCS_BASE_HOST }));
+    }
+    const sitePath = `${parsed.pathname}${parsed.hash}`;
+    if (!sitePath.replace(/^\/+|\/+$/g, "")) {
+        throw new Error((0, index_js_1.t)("rag.readDocPathEmpty", { docPath: raw }));
+    }
+    return sitePath;
+}
+/**
+ * invariant：走到 SDK 的地址不能含 host。
+ *
+ * 归一化之后再过一次，保证「fetch 目标恒为首方基址」这条性质不依赖
+ * `resolveDocsMarkdownPath` 的实现细节 —— 它以后改动了也漏不掉。
+ */
+function assertNoHostInDocPath(sitePath) {
+    if (parseAbsoluteDocUrl(sitePath.trim())) {
+        throw new Error((0, index_js_1.t)("rag.readDocUrlNotAllowed", { docPath: sitePath, host: exports.DOCS_BASE_HOST }));
+    }
+}
 /**
  * 识别 SPA 兜底页：站点对不存在的 markdown 路径同样返回 200，正文是站点 HTML 外壳。
  * 用于把「静默返回一坨 HTML」换成明确的失败信息。
@@ -30859,14 +31196,22 @@ async function registerRagTools(server) {
                 }
                 if (resolvedAction === "readDoc") {
                     const resolvedDocPath = requireStringParam(docPath, "docPath", resolvedAction);
-                    const markdownPath = resolveDocsMarkdownPath(resolvedDocPath);
+                    // 先剥掉 host（非首方主机直接拒绝），再做 `.md` 归一化，最后复核一遍不含 host。
+                    // 三者顺序不能换：归一化会给路径补后缀，若让它作用在主机上就会把
+                    // `docs.cloudbase.net` 拼成 `docs.cloudbase.net.md`（`.md` 是第三方可注册的 TLD）。
+                    const siteDocPath = toSiteRelativeDocPath(resolvedDocPath);
+                    const markdownPath = resolveDocsMarkdownPath(siteDocPath);
+                    assertNoHostInDocPath(markdownPath);
                     const markdown = await docsManager.readDoc(markdownPath);
                     // 站点对没有 markdown 的路径也返回 200 + HTML 外壳，必须显式判失败，
                     // 否则会把整页 HTML 当成文档正文交给模型（旧行为就是这样静默出错的）。
                     if (isDocsHtmlFallback(markdown)) {
+                        // 「网页版」退路必须是绝对地址：走到这里 markdownPath 已不含 host，只给路径
+                        // 调用方没法直接抓。
+                        const pageUrl = `https://${exports.DOCS_BASE_HOST}${markdownPath.replace(/\.md(?=#|$)/i, "")}`;
                         throw new Error((0, index_js_1.t)("rag.readDocNotMarkdown", {
                             docPath: markdownPath,
-                            pageUrl: markdownPath.replace(/\.md(?=#|$)/i, ""),
+                            pageUrl,
                         }));
                     }
                     return (0, json_content_js_1.jsonContent)(buildDocsEnvelope(resolvedAction, { docPath: resolvedDocPath, markdownPath, content: markdown }, (0, index_js_1.t)("rag.readDocSuccess")));
@@ -34254,7 +34599,7 @@ class TelemetryReporter {
         const arch = os_1.default.arch(); // 系统架构
         // Build-time injected version; guard for vitest / non-webpack runtimes.
         const mcpVersion = process.env.npm_package_version ||
-            ( true ? "2.34.5" : 0);
+            ( true ? "2.34.6" : 0);
         return {
             userAgent: `${osType} ${osRelease} ${arch} ${nodeVersion} CloudBase-MCP/${mcpVersion}`,
             deviceId: this.deviceId,
@@ -34976,7 +35321,7 @@ ${envIdSection}
 ## 环境信息
 - 操作系统: ${os_1.default.type()} ${os_1.default.release()}
 - Node.js版本: ${process.version}
-- MCP 版本：${( true ? "2.34.5" : 0) || 0 || 0}
+- MCP 版本：${( true ? "2.34.6" : 0) || 0 || 0}
 - 系统架构: ${os_1.default.arch()}
 - 时间: ${new Date().toISOString()}
 - 请求ID: ${requestId}
@@ -35065,7 +35410,7 @@ function createWrappedHandler(name, handler, server) {
                 requestId,
                 ide: server.ide || process.env.INTEGRATION_IDE || ''
             });
-            const mcpVersion =  true ? "2.34.5" : 0;
+            const mcpVersion =  true ? "2.34.6" : 0;
             const requestIdSuffix = requestId ? `\n🆔 RequestId: ${requestId}` : '';
             const enhancedErrorMessage = `${errorMessage}${requestIdSuffix}\n\n📦 CloudBase MCP v${mcpVersion}\n🔗 遇到问题？请复制以下链接到浏览器打开\n即可自动携带错误详情快速创建 GitHub Issue：\n${issueLink}`;
             // 创建新的错误对象，保持原有的错误类型但更新消息