@cloudbase/cloudbase-mcp 2.34.7 → 2.34.8

package/dist/index.js

@@ -653,6 +653,7 @@ const logger_js_1 = __webpack_require__(781);
 const tool_result_js_1 = __webpack_require__(9645);
 const site_map_js_1 = __webpack_require__(4533);
 const project_config_js_1 = __webpack_require__(9175);
+const local_endpoint_js_1 = __webpack_require__(6156);
 // Timeout for envId auto-resolution flow.
 // 10 minutes (600 seconds) - matches InteractiveServer timeout
 const ENV_ID_TIMEOUT = 600000;
@@ -814,7 +815,7 @@ async function listAvailableEnvCandidates(options) {
         }
         // When CLOUDBASE_ENV_ID is set and credentials are not explicit, skip DescribeEnvs.
         const hasExplicitCredentials = !!(cloudBaseOptions?.secretId && cloudBaseOptions?.secretKey);
-        if (process.env.CLOUDBASE_ENV_ID && !hasExplicitCredentials) {
+        if (process.env.CLOUDBASE_ENV_ID && !hasExplicitCredentials && !cloudBaseOptions?.requestFn && !process.env.CLOUDBASE_LOCAL_ENDPOINT) {
             return [{
                     envId: process.env.CLOUDBASE_ENV_ID,
                 }];
@@ -825,7 +826,7 @@ async function listAvailableEnvCandidates(options) {
         ...(regionOverride ? { region: regionOverride } : {}),
     }).region;
     let cloudbase;
-    if (cloudBaseOptions?.secretId && cloudBaseOptions?.secretKey) {
+    if (cloudBaseOptions?.requestFn || (cloudBaseOptions?.secretId && cloudBaseOptions?.secretKey)) {
         cloudbase = createCloudBaseManagerWithOptions({
             ...cloudBaseOptions,
             region,
@@ -1064,11 +1065,13 @@ const envManager = new EnvironmentManager();
 exports.envManager = envManager;
 // 导出环境ID获取函数
 async function getEnvId(cloudBaseOptions) {
-    // 如果传入了 cloudBaseOptions 且包含 envId，直接返回
     if (cloudBaseOptions?.envId) {
         (0, logger_js_1.debug)('使用传入的 envId:', { envId: cloudBaseOptions.envId });
         return cloudBaseOptions.envId;
     }
+    if ((0, local_endpoint_js_1.resolveLocalEndpoint)()) {
+        return 'local';
+    }
     const cachedEnvId = envManager.getCachedEnvId() || process.env.CLOUDBASE_ENV_ID;
     if (cachedEnvId) {
         (0, logger_js_1.debug)('使用缓存中的 envId:', { envId: cachedEnvId });
@@ -1173,7 +1176,16 @@ async function getDatabaseInstanceId(options) {
  * 每次都实时获取最新的 token/secretId/secretKey
  */
 async function getCloudBaseManager(options = {}) {
-    const { requireEnvId = true, cloudBaseOptions, authStrategy = 'fail_fast', } = options;
+    const { requireEnvId = true, authStrategy = 'fail_fast', } = options;
+    let cloudBaseOptions = options.cloudBaseOptions;
+    const localEndpoint = (0, local_endpoint_js_1.resolveLocalEndpoint)();
+    if (localEndpoint && !cloudBaseOptions?.requestFn) {
+        cloudBaseOptions = {
+            ...cloudBaseOptions,
+            envId: cloudBaseOptions?.envId || 'local',
+            requestFn: (0, local_endpoint_js_1.createLocalCloudApiRequestFn)(localEndpoint),
+        };
+    }
     const hasDirectCredentials = !!(cloudBaseOptions?.secretId && cloudBaseOptions?.secretKey);
     const hasRequestFn = !!(cloudBaseOptions?.requestFn);
     // 如果传入了完整凭据或 requestFn，优先使用显式 CloudBase 配置
@@ -2451,7 +2463,7 @@ const types_js_1 = __webpack_require__(9921);
 exports.apps = (0, types_js_1.defineModule)({
     queryTitle: "查询 CloudBase 应用部署状态",
     queryDescription: "查询 CloudBase 应用部署的应用和版本。可查应用列表/详情、版本列表/详情；部署后用 getAppVersion 按 buildId 轮询构建状态；getBuildLog 可查询构建日志用于诊断失败原因。\n" +
-        "action=getUploadUrl（只读）可获取预签名上传 URL：无本地文件系统时（cloud mode），先拿到 uploadUrl 自行 PUT 代码 zip，再用返回的 unixTimestamp 调 manageApps(action=deployApp, cosTimestamp) 触发部署。",
+        "action=getUploadUrl（只读）可获取预签名上传 URL：无本地文件系统时（cloud mode），先拿到 uploadUrl 自行 PUT 代码 zip，再用返回的 unixTimestamp 调 manageApps(action=deployApp, cosTimestamp) 触发部署。uploadUrl 是一次性上传凭据，不要外传或写进工单。",
     manageTitle: "部署应用到 CloudBase（独立子域名）",
     manageDescription: "部署 Web 应用到 CloudBase（构建前后端，部署到独立子域名）。\n" +
         "云端上传通道（cloud mode，无本地文件系统）：queryApps(action=getUploadUrl) 或 manageApps(action=getUploadUrl) 获取预签名上传 URL → agent 自行 PUT 代码 zip 到 uploadUrl（带 uploadHeaders 与 Content-Type: application/zip）→ 用返回的 unixTimestamp 作为 cosTimestamp 调 deployApp 触发部署。\n" +
@@ -2484,7 +2496,7 @@ exports.apps = (0, types_js_1.defineModule)({
     uploadStep1: "1. 将代码打包为 zip（排除 node_modules/.git）",
     uploadStep2: "2. 用 PUT 方法把 zip 上传到 uploadUrl，请求头带 Content-Type: application/zip 以及 uploadHeaders 中的每个 header",
     uploadStep3: "3. 调用 manageApps(action=\"deployApp\", serviceName=\"{serviceName}\", cosTimestamp=<unixTimestamp>) 触发部署",
-    getUploadUrlSuccess: "预签名上传 URL 获取成功。请将代码 zip PUT 上传到 uploadUrl（携带 uploadHeaders 与 Content-Type: application/zip），然后用返回的 unixTimestamp 作为 cosTimestamp 调用 manageApps(action=deployApp) 触发部署。",
+    getUploadUrlSuccess: "预签名上传 URL 获取成功。请将代码 zip PUT 上传到 uploadUrl（携带 uploadHeaders 与 Content-Type: application/zip），然后用返回的 unixTimestamp 作为 cosTimestamp 调用 manageApps(action=deployApp) 触发部署。uploadUrl 是一次性上传凭据，不要外传或写进工单。",
     getSuccess: "CloudBase 应用详情查询成功",
     listVersionsSuccess: "CloudBase 应用版本列表查询成功",
     buildIdRequired: "action=getBuildLog 时必须提供 buildId",
@@ -2547,7 +2559,7 @@ exports.apps = (0, types_js_1.defineModule)({
 }, {
     queryTitle: "Query CloudBase app deployment status",
     queryDescription: "Query CloudBase deployed apps and versions. Supports app list/detail and version list/detail; after deployment, poll build status by buildId with getAppVersion; getBuildLog retrieves build logs to diagnose failures.\n" +
-        "action=getUploadUrl (read-only) returns a pre-signed upload URL: without a local filesystem (cloud mode), fetch the uploadUrl, PUT the code zip yourself, then call manageApps(action=deployApp, cosTimestamp) with the returned unixTimestamp to trigger deployment.",
+        "action=getUploadUrl (read-only) returns a pre-signed upload URL: without a local filesystem (cloud mode), fetch the uploadUrl, PUT the code zip yourself, then call manageApps(action=deployApp, cosTimestamp) with the returned unixTimestamp to trigger deployment. The uploadUrl is a one-time upload credential; do not forward it or paste it into tickets.",
     manageTitle: "Deploy app to CloudBase (dedicated subdomain)",
     manageDescription: "Deploy web apps to CloudBase (builds frontend and backend, deploys to a dedicated subdomain).\n" +
         "Cloud upload channel (cloud mode, no local filesystem): queryApps(action=getUploadUrl) or manageApps(action=getUploadUrl) returns a pre-signed upload URL → agent PUTs the code zip to uploadUrl itself (with uploadHeaders and Content-Type: application/zip) → call deployApp with the returned unixTimestamp as cosTimestamp to trigger deployment.\n" +
@@ -2580,7 +2592,7 @@ exports.apps = (0, types_js_1.defineModule)({
     uploadStep1: "1. Pack the code into a zip (exclude node_modules/.git)",
     uploadStep2: "2. PUT the zip to uploadUrl with header Content-Type: application/zip and every header from uploadHeaders",
     uploadStep3: "3. Call manageApps(action=\"deployApp\", serviceName=\"{serviceName}\", cosTimestamp=<unixTimestamp>) to trigger deployment",
-    getUploadUrlSuccess: "Pre-signed upload URL obtained. PUT the code zip to uploadUrl (with uploadHeaders and Content-Type: application/zip), then call manageApps(action=deployApp) with the returned unixTimestamp as cosTimestamp to trigger deployment.",
+    getUploadUrlSuccess: "Pre-signed upload URL obtained. PUT the code zip to uploadUrl (with uploadHeaders and Content-Type: application/zip), then call manageApps(action=deployApp) with the returned unixTimestamp as cosTimestamp to trigger deployment. The uploadUrl is a one-time upload credential; do not forward it or paste it into tickets.",
     getSuccess: "CloudBase app details retrieved successfully",
     listVersionsSuccess: "CloudBase app version list retrieved successfully",
     buildIdRequired: "buildId is required when action=getBuildLog",
@@ -5159,6 +5171,7 @@ exports.functions = (0, types_js_1.defineModule)({
     unsupportedAction: "不支持的操作类型: {action}",
     storageMissing: "当前环境没有可用的对象存储桶（DescribeEnvs 未返回 Storages），无法使用 COS 两段式部署。请检查环境存储配置，或改用本地模式部署。共享存储桶（ExternalStorage）环境同样不支持该通道。",
     credentialMissing: "当前凭据缺少 SecretId/SecretKey（如 IDE 代理模式），无法本地铸造 COS 预签名上传地址。请改用本地模式或包含永久密钥/临时密钥的登录方式。",
+    uploadTargetNotFound: "代码包上传目标不在本进程的登记里：{objectName}。ZIP 两段式部署要求 code 三元组来自本进程刚返回的 getFunctionUploadUrl（同一个 MCP 进程、同一个环境）；MCP Server 已重启、换了环境、或自行拼装 cosObjectName / cosBucketName 都会落到这里。请重新调用 queryFunctions action=getFunctionUploadUrl 取地址，按返回值上传代码包，再用返回的三元组调用本 action。",
     // ---- nextActions reasons ----
     "reason.continuePolling": "继续查询云函数部署状态",
     "reason.getDetail": "查看单个函数详情",
@@ -5217,7 +5230,7 @@ exports.functions = (0, types_js_1.defineModule)({
     gotLayerVersionDetail: "已获取层 {layerName} 版本 {layerVersion} 的详情",
     gotFunctionTriggers: "已获取函数 {fnName} 的触发器列表",
     gotDownloadUrl: "已获取函数 {fnName} 的代码下载链接",
-    gotUploadUrl: "已生成函数代码包上传地址（{seconds} 秒内有效）。下一步：PUT 代码 zip 到 uploadUrl（uploadHeaders 非空时须随请求携带），再调用 manageFunctions createFunction/updateFunctionCode 并传入 code 三元组（cosBucketName/cosObjectName/cosBucketRegion）完成部署",
+    gotUploadUrl: "已生成函数代码包上传地址（{seconds} 秒内有效）。下一步：PUT 代码 zip 到 uploadUrl（uploadHeaders 非空时须随请求携带），再调用 manageFunctions createFunction/updateFunctionCode 并传入 code 三元组（cosBucketName/cosObjectName/cosBucketRegion）完成部署。该 uploadUrl 等同一次性上传凭据，不要外传或写进工单；若上传前已过期，重新调用 getFunctionUploadUrl 取新地址",
     gotFunctionVersions: "已获取函数 {fnName} 的版本列表",
     gotFunctionAlias: "已获取函数 {fnName} 的别名 {aliasName}",
     publishedVersion: "已发布函数 {fnName} 的新版本 {version}",
@@ -5291,7 +5304,7 @@ exports.functions = (0, types_js_1.defineModule)({
     "schema.create.layers": "Layer 配置",
     "schema.manageLayer.name": "层名称",
     "schema.manageLayer.version": "层版本号",
-    "schema.query.action": "只读操作类型：\n- `listFunctions`: 列出所有 CloudBase 云函数\n- `getFunctionDetail`: 获取 CloudBase 云函数详情（需要 functionName）\n- `listFunctionLogs`: 查询 CloudBase 云函数执行日志（需要 functionName）\n- `getFunctionLogDetail`: 获取日志详情（需要 requestId）\n- `listFunctionLayers`: 列出函数绑定的层\n- `listLayers`: 列出所有层（账号级视图，含其他环境创建的层）\n- `listLayerVersions`: 列出层的版本（注意：是 Versions 不是 Version；账号级视图）\n- `getLayerVersionDetail`: 获取层版本详情（账号级视图）\n- `listFunctionTriggers`: 列出函数触发器（用于查看定时任务 / cron / timer 配置）\n- `getFunctionDownloadUrl`: 获取函数代码下载地址\n- `getFunctionDeployStatus`: 按 taskId 查询异步部署状态、阶段进度和最终结果。返回 data.build（构建子状态）、data.deploy（部署子状态）、data.progress（阶段事件）；status=running 时 data.result 与 data.error 一律为 null，不得报告部署完成。调用方必须持续轮询直到 status=succeeded/failed；status=expired 表示任务超过最长保留时间（2 小时）被终结，云端可能仍在部署，需用 getFunctionDetail 确认。任务只保存在 MCP 进程内存中，过期或 MCP Server 重启后返回 errorCode=DEPLOY_TASK_NOT_FOUND；任务按环境隔离，只能查到当前环境自己发起的部署。cloud mode 下本 action 不可用：异步任务只由 buildStrategy=cloud/local 的真实部署创建，而这两种策略在 cloud mode 下都不支持真实执行，image 策略则走同步部署不产生 taskId。\n- `listVersionByFunction`: 列出函数已发布版本（对齐 tcb fn list-function-versions / SDK listVersionByFunction；需要 functionName）\n- `getFunctionAlias`: 查询函数别名与流量路由（对齐 tcb fn get-route / SDK getFunctionAlias；需要 functionName；aliasName 默认 $DEFAULT）\n- `getFunctionUploadUrl`: 获取函数代码包的 COS 预签名上传地址（ZIP 两段式部署阶段 A）：PUT 代码 zip 到 uploadUrl（uploadHeaders 非空时须随请求携带对应请求头），再调用 manageFunctions 的 createFunction/updateFunctionCode 并传 code 三元组（阶段 B）。functionName 可选，仅用于生成上传对象 key。返回的 uploadUrl 含凭据签名，不得写入日志或持久化",
+    "schema.query.action": "只读操作类型：\n- `listFunctions`: 列出所有 CloudBase 云函数\n- `getFunctionDetail`: 获取 CloudBase 云函数详情（需要 functionName）\n- `listFunctionLogs`: 查询 CloudBase 云函数执行日志（需要 functionName）\n- `getFunctionLogDetail`: 获取日志详情（需要 requestId）\n- `listFunctionLayers`: 列出函数绑定的层\n- `listLayers`: 列出所有层（账号级视图，含其他环境创建的层）\n- `listLayerVersions`: 列出层的版本（注意：是 Versions 不是 Version；账号级视图）\n- `getLayerVersionDetail`: 获取层版本详情（账号级视图）\n- `listFunctionTriggers`: 列出函数触发器（用于查看定时任务 / cron / timer 配置）\n- `getFunctionDownloadUrl`: 获取函数代码下载地址\n- `getFunctionDeployStatus`: 按 taskId 查询异步部署状态、阶段进度和最终结果。返回 data.build（构建子状态）、data.deploy（部署子状态）、data.progress（阶段事件）；status=running 时 data.result 与 data.error 一律为 null，不得报告部署完成。调用方必须持续轮询直到 status=succeeded/failed；status=expired 表示任务超过最长保留时间（2 小时）被终结，云端可能仍在部署，需用 getFunctionDetail 确认。任务只保存在 MCP 进程内存中，过期或 MCP Server 重启后返回 errorCode=DEPLOY_TASK_NOT_FOUND；任务按环境隔离，只能查到当前环境自己发起的部署。cloud mode 下本 action 不可用：异步任务只由 buildStrategy=cloud/local 的真实部署创建，而这两种策略在 cloud mode 下都不支持真实执行，image 策略则走同步部署不产生 taskId。\n- `listVersionByFunction`: 列出函数已发布版本（对齐 tcb fn list-function-versions / SDK listVersionByFunction；需要 functionName）\n- `getFunctionAlias`: 查询函数别名与流量路由（对齐 tcb fn get-route / SDK getFunctionAlias；需要 functionName；aliasName 默认 $DEFAULT）\n- `getFunctionUploadUrl`: 获取函数代码包的 COS 预签名上传地址（ZIP 两段式部署阶段 A）：PUT 代码 zip 到 uploadUrl（uploadHeaders 非空时须随请求携带对应请求头），再调用 manageFunctions 的 createFunction/updateFunctionCode 并传 code 三元组（阶段 B）。functionName 可选，仅用于生成上传对象 key。返回的 uploadUrl 含凭据签名，不得写入日志或持久化；阶段 A 与阶段 B 必须落在同一个 MCP 进程（MCP Server 重启后需重新取地址并重新上传）；地址默认 300 秒内有效",
     "schema.query.functionName": "CloudBase 云函数名称。`getFunctionDetail`、`listFunctionLogs`、`listFunctionLayers`、`listFunctionTriggers`、`getFunctionDownloadUrl`、`listVersionByFunction`、`getFunctionAlias` 时必填；`getFunctionUploadUrl` 可选（仅用于生成上传对象 key）",
     "schema.query.limit": "分页数量（limit）。列表类 action 可选，默认值由后端决定",
     "schema.query.offset": "分页偏移（offset）。列表类 action 可选，默认 0",
@@ -5315,7 +5328,7 @@ exports.functions = (0, types_js_1.defineModule)({
     "schema.manage.force": "createFunction 时是否覆盖",
     "schema.manage.functionName": "目标函数名称（顶层）。updateFunctionCode / updateFunctionConfig / invokeFunction / publishVersion / updateFunctionAliasConfig 等 action 使用此字段。不要只写在 func.name：createFunction 用 func.name，其它 action 用顶层 functionName。若误传 func.name，也会被识别为 functionName。",
     "schema.manage.zipFile": "仅兼容特殊场景：预先准备好的代码包 base64 编码。普通 createFunction/updateFunctionCode 默认不要先压缩 zip，优先使用 functionRootPath。",
-    "schema.manage.code": "ZIP 两段式部署阶段 B：代码包已通过 queryFunctions action=getFunctionUploadUrl 上传到环境 COS 桶。三元组（cosBucketName/cosObjectName/cosBucketRegion）直接使用 getFunctionUploadUrl 返回值原样透传。传入 code 后 createFunction/updateFunctionCode 不再读取本地目录（functionRootPath/zipFile 均不需要），默认不触发云端依赖安装（可用 func.installDependency 覆盖）。",
+    "schema.manage.code": "ZIP 两段式部署阶段 B：代码包已通过 queryFunctions action=getFunctionUploadUrl 上传到环境 COS 桶。三元组（cosBucketName/cosObjectName/cosBucketRegion）直接使用 getFunctionUploadUrl 返回值原样透传。传入 code 后 createFunction/updateFunctionCode 不再读取本地目录（functionRootPath/zipFile 均不需要），默认不触发云端依赖安装（可用 func.installDependency 覆盖）。code 三元组必须是同一个 MCP 进程的 getFunctionUploadUrl 刚返回的那一组（该 process 会在阶段 A 登记上传目标），自行拼装或跨环境复用会被拒绝并要求重新取地址。",
     "schema.code.cosBucketName": "环境存储桶短名（不含 -appid 后缀），直接使用 getFunctionUploadUrl 返回的 cosBucketName，不要自填",
     "schema.code.cosObjectName": "上传对象 key，直接使用 getFunctionUploadUrl 返回的 cosObjectName",
     "schema.code.cosBucketRegion": "存储桶地域，省略时自动使用当前环境存储桶地域",
@@ -5439,6 +5452,7 @@ exports.functions = (0, types_js_1.defineModule)({
     unsupportedAction: "Unsupported action: {action}",
     storageMissing: "The current environment has no usable object storage bucket (DescribeEnvs returned no Storages), so COS two-phase deployment is unavailable. Check the environment storage configuration, or deploy in local mode. Environments with a shared bucket (ExternalStorage) are not supported either.",
     credentialMissing: "The current credential lacks SecretId/SecretKey (e.g. IDE proxy mode), so a COS presigned upload URL cannot be minted locally. Use local mode or a login method with permanent/temporary keys.",
+    uploadTargetNotFound: "The code package upload target is not registered in this process: {objectName}. Two-phase ZIP deployment requires the code triplet to come from a getFunctionUploadUrl response minted by this same MCP process and environment; a restarted MCP Server, a different environment, or a hand-built cosObjectName / cosBucketName all land here. Call queryFunctions action=getFunctionUploadUrl again, upload the code package to the returned address, then call this action with the returned triplet.",
     // ---- nextActions reasons ----
     "reason.continuePolling": "Keep polling the cloud function deployment status",
     "reason.getDetail": "View details of a single function",
@@ -5497,7 +5511,7 @@ exports.functions = (0, types_js_1.defineModule)({
     gotLayerVersionDetail: "Retrieved details of layer {layerName} version {layerVersion}",
     gotFunctionTriggers: "Retrieved the trigger list of function {fnName}",
     gotDownloadUrl: "Retrieved the code download URL of function {fnName}",
-    gotUploadUrl: "Generated the code package upload URL (valid for {seconds} seconds). Next: PUT the code zip to uploadUrl (include the uploadHeaders when non-empty), then call manageFunctions createFunction/updateFunctionCode with the code triplet (cosBucketName/cosObjectName/cosBucketRegion) to deploy",
+    gotUploadUrl: "Generated the code package upload URL (valid for {seconds} seconds). Next: PUT the code zip to uploadUrl (include the uploadHeaders when non-empty), then call manageFunctions createFunction/updateFunctionCode with the code triplet (cosBucketName/cosObjectName/cosBucketRegion) to deploy. Treat the uploadUrl as a one-time upload credential: do not forward it or paste it into tickets; if it expires before the upload, call getFunctionUploadUrl again for a fresh address",
     gotFunctionVersions: "Retrieved the version list of function {fnName}",
     gotFunctionAlias: "Retrieved alias {aliasName} of function {fnName}",
     publishedVersion: "Published new version {version} of function {fnName}",
@@ -5571,7 +5585,7 @@ exports.functions = (0, types_js_1.defineModule)({
     "schema.create.layers": "Layer configuration",
     "schema.manageLayer.name": "Layer name",
     "schema.manageLayer.version": "Layer version number",
-    "schema.query.action": "Read-only action type:\n- `listFunctions`: list all CloudBase cloud functions\n- `getFunctionDetail`: get function details (requires functionName)\n- `listFunctionLogs`: query function execution logs (requires functionName)\n- `getFunctionLogDetail`: get log details (requires requestId)\n- `listFunctionLayers`: list layers bound to a function\n- `listLayers`: list all layers (account-level view, including layers from other environments)\n- `listLayerVersions`: list layer versions (Versions, not Version; account-level view)\n- `getLayerVersionDetail`: get layer version details (account-level view)\n- `listFunctionTriggers`: list function triggers (scheduled task / cron / timer configuration)\n- `getFunctionDownloadUrl`: get the function code download URL\n- `getFunctionDeployStatus`: query async deployment status, stage progress, and final result by taskId. Returns data.build, data.deploy, and data.progress. While status=running, data.result and data.error are null and deployment must not be reported as complete. Keep polling until status=succeeded/failed. status=expired means the task exceeded the 2-hour retention limit; cloud deployment may still be running, so confirm with getFunctionDetail. Tasks exist only in MCP process memory; expired tasks or a restarted MCP Server return errorCode=DEPLOY_TASK_NOT_FOUND. Tasks are isolated by environment. This action is unavailable in cloud mode because real cloud/local builds cannot run there, while image deployment is synchronous and creates no taskId.\n- `listVersionByFunction`: list published function versions (aligns with tcb fn list-function-versions / SDK listVersionByFunction; requires functionName)\n- `getFunctionAlias`: get function alias and traffic routing (aligns with tcb fn get-route / SDK getFunctionAlias; requires functionName; aliasName defaults to $DEFAULT)\n- `getFunctionUploadUrl`: get a COS presigned upload URL for a function code package (two-phase ZIP deployment phase A): PUT the code zip to uploadUrl (include the corresponding request headers when uploadHeaders is non-empty), then call manageFunctions createFunction/updateFunctionCode with the code triplet (phase B). functionName is optional and only shapes the upload object key. The uploadUrl carries credential-bound signatures; never log or persist it",
+    "schema.query.action": "Read-only action type:\n- `listFunctions`: list all CloudBase cloud functions\n- `getFunctionDetail`: get function details (requires functionName)\n- `listFunctionLogs`: query function execution logs (requires functionName)\n- `getFunctionLogDetail`: get log details (requires requestId)\n- `listFunctionLayers`: list layers bound to a function\n- `listLayers`: list all layers (account-level view, including layers from other environments)\n- `listLayerVersions`: list layer versions (Versions, not Version; account-level view)\n- `getLayerVersionDetail`: get layer version details (account-level view)\n- `listFunctionTriggers`: list function triggers (scheduled task / cron / timer configuration)\n- `getFunctionDownloadUrl`: get the function code download URL\n- `getFunctionDeployStatus`: query async deployment status, stage progress, and final result by taskId. Returns data.build, data.deploy, and data.progress. While status=running, data.result and data.error are null and deployment must not be reported as complete. Keep polling until status=succeeded/failed. status=expired means the task exceeded the 2-hour retention limit; cloud deployment may still be running, so confirm with getFunctionDetail. Tasks exist only in MCP process memory; expired tasks or a restarted MCP Server return errorCode=DEPLOY_TASK_NOT_FOUND. Tasks are isolated by environment. This action is unavailable in cloud mode because real cloud/local builds cannot run there, while image deployment is synchronous and creates no taskId.\n- `listVersionByFunction`: list published function versions (aligns with tcb fn list-function-versions / SDK listVersionByFunction; requires functionName)\n- `getFunctionAlias`: get function alias and traffic routing (aligns with tcb fn get-route / SDK getFunctionAlias; requires functionName; aliasName defaults to $DEFAULT)\n- `getFunctionUploadUrl`: get a COS presigned upload URL for a function code package (two-phase ZIP deployment phase A): PUT the code zip to uploadUrl (include the corresponding request headers when uploadHeaders is non-empty), then call manageFunctions createFunction/updateFunctionCode with the code triplet (phase B). functionName is optional and only shapes the upload object key. The uploadUrl carries credential-bound signatures; never log or persist it; phase A and phase B must run in the same MCP process (after an MCP Server restart, fetch a new address and upload again); the address is valid for 300 seconds by default",
     "schema.query.functionName": "CloudBase cloud function name. Required for `getFunctionDetail`, `listFunctionLogs`, `listFunctionLayers`, `listFunctionTriggers`, `getFunctionDownloadUrl`, `listVersionByFunction`, and `getFunctionAlias`. Optional for `getFunctionUploadUrl` (only used to generate the upload object key).",
     "schema.query.limit": "Page size (limit). Optional for list actions; the backend determines the default.",
     "schema.query.offset": "Pagination offset. Optional for list actions; defaults to 0.",
@@ -5595,7 +5609,7 @@ exports.functions = (0, types_js_1.defineModule)({
     "schema.manage.force": "Whether createFunction overwrites an existing function.",
     "schema.manage.functionName": "Target function name at the top level. Used by updateFunctionCode, updateFunctionConfig, invokeFunction, publishVersion, updateFunctionAliasConfig, and similar actions. createFunction uses func.name; other actions use top-level functionName. A mistakenly supplied func.name is also recognized as functionName.",
     "schema.manage.zipFile": "Compatibility only: base64-encoded prebuilt code package. For ordinary createFunction/updateFunctionCode, do not create a ZIP first; prefer functionRootPath.",
-    "schema.manage.code": "Two-phase ZIP deployment phase B: the code package has been uploaded to the environment COS bucket via queryFunctions action=getFunctionUploadUrl. Pass the triplet (cosBucketName/cosObjectName/cosBucketRegion) through unchanged from the getFunctionUploadUrl response. With code provided, createFunction/updateFunctionCode no longer reads local directories (functionRootPath/zipFile are unnecessary), and cloud dependency installation is skipped by default (override with func.installDependency).",
+    "schema.manage.code": "Two-phase ZIP deployment phase B: the code package has been uploaded to the environment COS bucket via queryFunctions action=getFunctionUploadUrl. Pass the triplet (cosBucketName/cosObjectName/cosBucketRegion) through unchanged from the getFunctionUploadUrl response. With code provided, createFunction/updateFunctionCode no longer reads local directories (functionRootPath/zipFile are unnecessary), and cloud dependency installation is skipped by default (override with func.installDependency). The code triplet must be the one just returned by getFunctionUploadUrl in the same MCP process (that process registers the upload target in phase A); hand-built triplets or cross-environment reuse are rejected and require fetching a new address.",
     "schema.code.cosBucketName": "Environment bucket short name (without the -appid suffix); pass through the cosBucketName returned by getFunctionUploadUrl, do not invent one",
     "schema.code.cosObjectName": "Uploaded object key; pass through the cosObjectName returned by getFunctionUploadUrl",
     "schema.code.cosBucketRegion": "Bucket region; defaults to the current environment bucket region when omitted",
@@ -7380,6 +7394,107 @@ function localizeZodSchemaShape(shape, lang, seen = new WeakMap()) {
 }
 
 
+/***/ },
+
+/***/ 6156
+(__unused_webpack_module, exports, __webpack_require__) {
+
+var __webpack_unused_export__;
+
+__webpack_unused_export__ = ({ value: true });
+__webpack_unused_export__ = assertLocalEndpoint;
+exports.resolveLocalEndpoint = resolveLocalEndpoint;
+exports.createLocalCloudApiRequestFn = createLocalCloudApiRequestFn;
+const logger_js_1 = __webpack_require__(781);
+/** Loopback hosts only. WHATWG URL keeps the brackets on IPv6 hostnames. */
+const ALLOWED_HOSTS = new Set(['127.0.0.1', '[::1]', 'localhost']);
+/** Upper bound for one cloud API call, so a hung endpoint cannot block a tool call forever. */
+const ENDPOINT_TIMEOUT_MS = 30_000;
+let announcedEndpoint;
+/**
+ * Validate and normalise CLOUDBASE_LOCAL_ENDPOINT.
+ *
+ * Setting this variable makes cloud API calls skip the login and credential
+ * checks, so it must never point off the local machine.
+ */
+function assertLocalEndpoint(endpoint) {
+    let parsed;
+    try {
+        parsed = new URL(endpoint);
+    }
+    catch {
+        throw new Error('CLOUDBASE_LOCAL_ENDPOINT is not a valid URL');
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+        throw new Error('CLOUDBASE_LOCAL_ENDPOINT must use http or https');
+    }
+    if (!ALLOWED_HOSTS.has(parsed.hostname)) {
+        throw new Error('CLOUDBASE_LOCAL_ENDPOINT must point at a loopback host');
+    }
+    return endpoint.replace(/\/+$/, '');
+}
+/**
+ * Read and validate CLOUDBASE_LOCAL_ENDPOINT. Returns undefined when unset.
+ *
+ * A malformed value throws instead of silently falling back, so a bad config
+ * surfaces as a config error rather than looking like an auth failure.
+ */
+function resolveLocalEndpoint() {
+    const raw = process.env.CLOUDBASE_LOCAL_ENDPOINT;
+    if (!raw) {
+        return undefined;
+    }
+    const base = assertLocalEndpoint(raw);
+    if (announcedEndpoint !== base) {
+        announcedEndpoint = base;
+        (0, logger_js_1.warn)(`CLOUDBASE_LOCAL_ENDPOINT is set: cloud API calls go to ${base} and the login/credential check is skipped`);
+    }
+    return base;
+}
+/**
+ * manager-node 5.8.8 routes both DatabaseService.executePGSql and
+ * commonService().call through CloudService.request. That method delegates
+ * to context.requestFn and skips TC3 when the function is set.
+ */
+function createLocalCloudApiRequestFn(endpoint) {
+    const base = assertLocalEndpoint(endpoint);
+    return async ({ service, action, version, region, payload }) => {
+        const response = await fetch(`${base}/capi`, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                'x-tc-action': action,
+                'x-tc-version': version,
+                'x-tc-region': region,
+                'x-tc-service': service,
+            },
+            body: JSON.stringify(payload ?? {}),
+            signal: AbortSignal.timeout(ENDPOINT_TIMEOUT_MS),
+            redirect: 'manual',
+        });
+        // With redirect: 'manual' a 3xx comes back as an opaque redirect (status 0)
+        // instead of being followed, so both shapes must be rejected explicitly.
+        if (response.type === 'opaqueredirect' || (response.status >= 300 && response.status < 400)) {
+            throw new Error('CLOUDBASE_LOCAL_ENDPOINT responded with a redirect; redirects are not followed');
+        }
+        const body = await response.json();
+        const inner = body.Response;
+        if (!inner) {
+            const error = new Error('missing Response');
+            error.code = 'InternalError';
+            throw error;
+        }
+        const apiError = inner.Error;
+        if (apiError) {
+            const error = new Error(apiError.Message || apiError.Code || 'cloud api error');
+            error.code = apiError.Code;
+            throw error;
+        }
+        return inner;
+    };
+}
+
+
 /***/ },
 
 /***/ 6324
@@ -21901,6 +22016,7 @@ function registerEnvTools(server) {
                             typeof cloudBaseOptions?.envId === "string" &&
                             cloudBaseOptions.envId.length > 0;
                         const envIdFromEnv = !cloudBaseOptions?.requestFn &&
+                            !process.env.CLOUDBASE_LOCAL_ENDPOINT &&
                             (process.env.CLOUDBASE_ENV_ID ||
                                 (isEnvScopedCredential ? cloudBaseOptions.envId : undefined));
                         const shouldPinToEnvVar = Boolean(envIdFromEnv &&
@@ -22922,7 +23038,7 @@ function resolveMcpVersion(declared, packageVersion) {
     return fromPackage;
 }
 function readDeclaredMcpVersion() {
-    return  true ? "2.34.7" : 0;
+    return  true ? "2.34.8" : 0;
 }
 function blank(value, lang) {
     return value.trim().length > 0 ? value.trim() : (lang === "en" ? "blank" : "留空");
@@ -23281,7 +23397,7 @@ function encodeKv(obj) {
  * Host 头始终签入（对齐 SDK ForceSignHost 默认 true），query 为空故 q-url-param-list 为空。
  */
 function buildCosPutAuthorization(options) {
-    const { secretId, secretKey, bucket, region, objectKey, securityToken, expiresInSeconds = 3600, } = options;
+    const { secretId, secretKey, bucket, region, objectKey, securityToken, expiresInSeconds = 300, } = options;
     if (!secretId)
         throw new Error("missing param SecretId");
     if (!secretKey)
@@ -23329,15 +23445,20 @@ function buildCosPutAuthorization(options) {
 }
 /**
  * 生成两段式部署阶段 A 的完整返回体：预签名 PUT URL + 阶段 B 所需的 COS 三元组。
- * 对象 key 形如 `fnzip-upload/{ts}-{rand}/{functionName|code}.zip`，全部为 COS 签名
- * 安全字符（字母数字与 -_. /），保证签名 pathname 与请求 URL 一致。
+ * 对象 key 形如 `fnzip-upload/{ts}-{rand}/{functionName|code}.zip`。functionName 会被
+ * 收窄到 COS 签名安全字符（字母数字与 -_），保证签名 pathname 与请求 URL 一致。
  */
 function buildFunctionZipUpload(params) {
     const { storage, credential, functionName } = params;
-    const expiresIn = params.expiresIn ?? 3600;
+    const expiresIn = params.expiresIn ?? 300;
     const ts = params.now ?? Math.floor(Date.now() / 1000);
     const rand = params.randomSuffix ?? (0, crypto_1.randomBytes)(8).toString("hex");
-    const objectKey = `fnzip-upload/${ts}-${rand}/${functionName || "code"}.zip`;
+    // functionName 只用于让对象 key 可读，必须收窄：否则 "../" 之类能把对象写到
+    // fnzip-upload/ 前缀之外
+    const safeFunctionName = functionName && /^[A-Za-z0-9_-]{1,64}$/.test(functionName)
+        ? functionName
+        : "code";
+    const objectKey = `fnzip-upload/${ts}-${rand}/${safeFunctionName}.zip`;
     const keyTime = params.keyTime ?? `${ts - 1};${ts + expiresIn}`;
     const authorization = buildCosPutAuthorization({
         secretId: credential.secretId,
@@ -24717,6 +24838,127 @@ async function waitUntilFunctionActive(getStatus, options = {}) {
 }
 
 
+/***/ },
+
+/***/ 7499
+(__unused_webpack_module, exports, __webpack_require__) {
+
+var __webpack_unused_export__;
+
+__webpack_unused_export__ = ({ value: true });
+exports.FUNCTION_UPLOAD_TARGET_NOT_FOUND_ERROR_CODE = exports.S1 = void 0;
+exports.registerFunctionUploadTarget = registerFunctionUploadTarget;
+exports.findFunctionUploadTarget = findFunctionUploadTarget;
+__webpack_unused_export__ = getFunctionUploadTargetCount;
+__webpack_unused_export__ = resetFunctionUploadTargets;
+const function_cos_upload_js_1 = __webpack_require__(5735);
+/**
+ * 云函数 ZIP 两段式部署的「上传目标」进程内登记。
+ *
+ * 阶段 A（queryFunctions action=getFunctionUploadUrl）铸造预签名上传地址时，
+ * 在本进程登记这次铸造出来的 (envId, bucket, region, objectKey)；阶段 B
+ * （manageFunctions createFunction / updateFunctionCode 带 code 三元组）只接受
+ * 登记过的组合。
+ *
+ * 为什么需要它：code.cosObjectName 是模型可以自由填写的字符串，如果不校验，
+ * 它可以指向环境桶里的任意对象，也可以指向另一个桶（包括调用方自己的桶）——
+ * SCF 会用环境角色去拉取那个对象。登记把可用面收窄成「本进程刚为当前环境铸造
+ * 出来的那个 key」。
+ *
+ * 取舍（刻意不做的事）：
+ * - 不做「用一次即作废」：同一个 key 在保留期内可以重复提交。上传失败重试、
+ *   updateFunctionCode 撞上 ResourceInUse 后的重试、以及同一份代码包重复部署
+ *   都要能重放，收窄的只是「谁能成为目标」，不是「能用几次」。
+ * - 不区分「没登记」与「登记在别的环境」：登记按 envId 隔离，跨环境查询直接
+ *   未命中，调用方只需要知道「这个目标不在登记里，请重新取地址」。
+ *
+ * 登记只保存在当前 MCP 进程内存中，MCP Server 重启即丢失 —— 此时重新调用
+ * getFunctionUploadUrl 取地址、重新上传即可。这与 function-deploy-task-store
+ * 的语义一致（异步部署任务同样只活在进程内）。
+ */
+exports.S1 = {
+    /**
+     * 登记的保留时间。远长于上传地址本身的有效期（默认 300 秒）：地址过期只影响
+     * 「还能不能 PUT」，而登记要覆盖「取地址 → 上传 → 提交部署」整条链在客户端
+     * 可能的等待（大包上传、人工确认、agent 多轮编排）。
+     */
+    ttlMs: 60 * 60 * 1000,
+    /** 最大登记数，超出时淘汰最旧的 */
+    maxTargets: 500,
+};
+exports.FUNCTION_UPLOAD_TARGET_NOT_FOUND_ERROR_CODE = "FUNCTION_UPLOAD_TARGET_NOT_FOUND";
+const uploadTargets = new Map();
+/**
+ * envId 与 objectKey 都不可能含 NUL，用它拼主键不会产生歧义；
+ * 反过来，跨环境的查询无法构造出同一主键（前缀 envId 由服务端解析，调用方改不了）。
+ */
+function targetKey(envId, objectKey) {
+    return `${envId}\u0000${objectKey}`;
+}
+function cleanupUploadTargets(now) {
+    for (const [key, target] of uploadTargets) {
+        if (now - target.createdAtMs > exports.S1.ttlMs) {
+            uploadTargets.delete(key);
+        }
+    }
+}
+/**
+ * 达到上限时淘汰最旧的登记。
+ *
+ * 与部署任务表不同，这里每一条登记都可以淘汰 —— 淘汰最坏的结果是调用方重新
+ * 取一次上传地址，不会影响任何正在进行中的云端操作，因此不需要 warn。
+ */
+function enforceMaxTargets() {
+    const { maxTargets } = exports.S1;
+    if (uploadTargets.size < maxTargets) {
+        return;
+    }
+    const oldestFirst = [...uploadTargets.entries()].sort((left, right) => left[1].createdAtMs - right[1].createdAtMs);
+    for (const [key] of oldestFirst) {
+        if (uploadTargets.size < maxTargets) {
+            return;
+        }
+        uploadTargets.delete(key);
+    }
+}
+/** 阶段 A 登记本次铸造的上传目标。 */
+function registerFunctionUploadTarget(input) {
+    const now = input.now ?? Date.now();
+    cleanupUploadTargets(now);
+    enforceMaxTargets();
+    uploadTargets.set(targetKey(input.envId, input.objectKey), {
+        envId: input.envId,
+        bucket: input.bucket,
+        region: input.region,
+        objectKey: input.objectKey,
+        createdAtMs: now,
+    });
+}
+/**
+ * 阶段 B 校验：命中登记且桶、地域都对得上才返回目标，否则返回 undefined。
+ *
+ * 地域与桶都要比对 —— 只比对象 key 的话，仍然可以把同一个 key 指到别的桶或
+ * 别的地域（例如把代码指到调用方自己的桶）上。
+ */
+function findFunctionUploadTarget(input) {
+    const now = input.now ?? Date.now();
+    cleanupUploadTargets(now);
+    const target = uploadTargets.get(targetKey(input.envId, input.objectKey));
+    if (!target) {
+        return undefined;
+    }
+    const bucketMatches = (0, function_cos_upload_js_1.stripAppIdSuffix)(input.bucketName) === (0, function_cos_upload_js_1.stripAppIdSuffix)(target.bucket);
+    return bucketMatches && input.region === target.region ? target : undefined;
+}
+function getFunctionUploadTargetCount() {
+    return uploadTargets.size;
+}
+/** 测试用：清空登记表 */
+function resetFunctionUploadTargets() {
+    uploadTargets.clear();
+}
+
+
 /***/ },
 
 /***/ 1546
@@ -24748,10 +24990,35 @@ const tool_result_js_1 = __webpack_require__(9645);
 const function_deploy_js_1 = __webpack_require__(9151);
 const function_deploy_schema_js_1 = __webpack_require__(6427);
 const function_cos_upload_js_1 = __webpack_require__(5735);
+const function_upload_target_store_js_1 = __webpack_require__(7499);
 const function_updating_js_1 = __webpack_require__(326);
 const index_js_1 = __webpack_require__(4908);
 const fs_1 = __webpack_require__(4421);
 const path_1 = __importDefault(__webpack_require__(2521));
+/**
+ * 阶段 B 校验：code 三元组必须是本进程阶段 A 登记过的上传目标。
+ *
+ * 未命中时统一按「目标不在登记里」返回，不区分「没登记」与「登记在别的环境」——
+ * 与部署任务表同款取舍，调用方只需要知道下一步该重新取上传地址。
+ */
+function assertFunctionUploadTarget(input) {
+    if ((0, function_upload_target_store_js_1.findFunctionUploadTarget)(input)) {
+        return;
+    }
+    (0, tool_result_js_1.throwToolPayloadError)({
+        success: false,
+        errorCode: function_upload_target_store_js_1.FUNCTION_UPLOAD_TARGET_NOT_FOUND_ERROR_CODE,
+        data: {
+            action: input.action,
+            cosBucketName: input.bucketName,
+            cosBucketRegion: input.region,
+            cosObjectName: input.objectKey,
+        },
+        message: (0, index_js_1.t)("functions.uploadTargetNotFound", {
+            objectName: input.objectKey,
+        }),
+    });
+}
 exports.SUPPORTED_RUNTIMES = {
     nodejs: [
         "Nodejs20.19",
@@ -25267,7 +25534,8 @@ function registerFunctionTools(server) {
         if (!bucket || !region) {
             throw new Error((0, index_js_1.t)("functions.storageMissing"));
         }
-        return { bucket, region };
+        // envId 一并返回：阶段 A 的上传目标登记与阶段 B 的校验都按环境隔离
+        return { bucket, region, envId };
     };
     const ensureActionAllowedInCloudMode = (input) => {
         if (!(0, cloud_mode_js_1.isCloudMode)()) {
@@ -25658,7 +25926,9 @@ function registerFunctionTools(server) {
                 }
                 const cloudbase = await getManager();
                 const result = await cloudbase.functions.getFunctionDownloadUrl(input.functionName, input.codeSecret);
-                (0, cloudbase_manager_js_1.logCloudBaseResult)(server.logger, result);
+                // downloadUrl 是带凭据签名的临时链接：与 apps getUploadUrl 同款处理，只落 RequestId，
+                // 避免整条 URL 随宿主日志持久化
+                (0, cloudbase_manager_js_1.logCloudBaseResult)(server.logger, { RequestId: result.RequestId });
                 return buildEnvelope({
                     action: input.action,
                     functionName: input.functionName,
@@ -25759,6 +26029,14 @@ function registerFunctionTools(server) {
                     },
                     functionName: input.functionName,
                 });
+                // 阶段 A 在进程内登记本次铸造的上传目标：阶段 B 只接受登记过的
+                // (envId, bucket, region, objectKey)，cosObjectName 因此不再是任意字符串。
+                (0, function_upload_target_store_js_1.registerFunctionUploadTarget)({
+                    envId: storage.envId,
+                    bucket: storage.bucket,
+                    region: storage.region,
+                    objectKey: upload.cosObjectName,
+                });
                 // uploadUrl 内含凭据绑定的签名（临时凭据还绑定 token），禁止落日志
                 (0, logger_js_1.debug)(`[getFunctionUploadUrl] envId=${authConfig.envId ?? "n/a"}, cosObjectName=${upload.cosObjectName}, expiresIn=${upload.expiresInSeconds}s`);
                 return buildEnvelope({
@@ -26040,6 +26318,13 @@ function registerFunctionTools(server) {
                     const storage = await resolveEnvFunctionCosStorage();
                     const cosBucketName = (0, function_cos_upload_js_1.stripAppIdSuffix)(input.code.cosBucketName || storage.bucket);
                     const cosBucketRegion = input.code.cosBucketRegion ?? storage.region;
+                    assertFunctionUploadTarget({
+                        envId: storage.envId,
+                        bucketName: input.code.cosBucketName || storage.bucket,
+                        region: cosBucketRegion,
+                        objectKey: input.code.cosObjectName,
+                        action: input.action,
+                    });
                     const codeFunc = { ...func };
                     // 用户 zip 自带依赖语义（装没装由上传方决定），默认不触发云端依赖安装
                     delete codeFunc.installDependency;
@@ -26305,6 +26590,13 @@ function registerFunctionTools(server) {
                     const storage = await resolveEnvFunctionCosStorage();
                     const cosBucketName = (0, function_cos_upload_js_1.stripAppIdSuffix)(input.code.cosBucketName || storage.bucket);
                     const cosBucketRegion = input.code.cosBucketRegion ?? storage.region;
+                    assertFunctionUploadTarget({
+                        envId: storage.envId,
+                        bucketName: input.code.cosBucketName || storage.bucket,
+                        region: cosBucketRegion,
+                        objectKey: input.code.cosObjectName,
+                        action: input.action,
+                    });
                     let cosUpdateResult;
                     try {
                         cosUpdateResult = await cloudbase.functions.updateFunctionCode({
@@ -35991,7 +36283,7 @@ class TelemetryReporter {
         const arch = os_1.default.arch(); // 系统架构
         // Build-time injected version; guard for vitest / non-webpack runtimes.
         const mcpVersion = process.env.npm_package_version ||
-            ( true ? "2.34.7" : 0);
+            ( true ? "2.34.8" : 0);
         return {
             userAgent: `${osType} ${osRelease} ${arch} ${nodeVersion} CloudBase-MCP/${mcpVersion}`,
             deviceId: this.deviceId,
@@ -36714,7 +37006,7 @@ ${envIdSection}
 ## 环境信息
 - 操作系统: ${os_1.default.type()} ${os_1.default.release()}
 - Node.js版本: ${process.version}
-- MCP 版本：${( true ? "2.34.7" : 0) || 0 || 0}
+- MCP 版本：${( true ? "2.34.8" : 0) || 0 || 0}
 - 系统架构: ${os_1.default.arch()}
 - 时间: ${new Date().toISOString()}
 - 请求ID: ${requestId}
@@ -36812,7 +37104,7 @@ function createWrappedHandler(name, handler, server) {
                 requestId,
                 ide: server.ide || process.env.INTEGRATION_IDE || ''
             });
-            const mcpVersion =  true ? "2.34.7" : 0;
+            const mcpVersion =  true ? "2.34.8" : 0;
             const requestIdSuffix = requestId ? `\n🆔 RequestId: ${requestId}` : '';
             const enhancedErrorMessage = `${errorMessage}${requestIdSuffix}\n\n📦 CloudBase MCP v${mcpVersion}\n🔗 遇到问题？请复制以下链接到浏览器打开\n即可自动携带错误详情快速创建 GitHub Issue：\n${issueLink}`;
             // 创建新的错误对象，保持原有的错误类型但更新消息

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloudbase/cloudbase-mcp",
-  "version": "2.34.7",
+  "version": "2.34.8",
   "mcpName": "io.github.TencentCloudBase/cloudbase-mcp",
   "packageManager": "pnpm@10.8.0",
   "description": "CloudBase MCP Server — operate Tencent CloudBase (database, auth, functions, storage, hosting) from AI coding tools via the Model Context Protocol. Part of CloudBase AI Toolkit.",

package/server.json

@@ -3,7 +3,7 @@
   "name": "io.github.TencentCloudBase/cloudbase-mcp",
   "title": "CloudBase",
   "description": "CloudBase MCP: DB, functions, storage, hosting via @cloudbase/cloudbase-mcp",
-  "version": "2.34.7",
+  "version": "2.34.8",
   "websiteUrl": "https://github.com/TencentCloudBase/CloudBase-AI-Toolkit",
   "repository": {
     "url": "https://github.com/TencentCloudBase/CloudBase-AI-Toolkit",
@@ -25,7 +25,7 @@
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@cloudbase/cloudbase-mcp",
-      "version": "2.34.7",
+      "version": "2.34.8",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"