@gt-fe/eap-runtime 0.0.16 → 0.0.17

package/README.md

@@ -256,7 +256,7 @@ FOUNDATION_SERVICE_URL=...
 EAP_DEPLOYMENT_CONTEXT=dev
 EAP_PREINSTALL_ROOT=/abs/path/to/preinstall   # 或 Agent 工程内预装树
 EAP_RUNTIME_STORAGE_PROFILE=dev
-EAP_TOOL_EXECUTION_MODE=mcp                  # 本地默认；http-debug 走 Gateway 调试口
+EAP_TOOL_EXECUTION_MODE=mcp                  # 仅 createDevRuntime / eap chat；Hosting 的 TOOL_EXECUTION_MODE 不读
 # OPENAI_BASE_URL / OPENAI_API_KEY / EAP_DEFAULT_MODEL
 ```
 

package/dist/tool/create-tool-executor.d.ts

@@ -1,9 +1,11 @@
 /**
  * createToolExecutor — 按部署上下文组装 Router + Gateway/Local 执行器
  *
- * server / hosting：**默认 MCP**（McpToolExecutor → POST /api/v1/mcp）；
+ * server / hosting：**默认 MCP**（McpToolExecutor → POST {绝对基址}/api/v1/mcp）；
  * `EAP_TOOL_GATEWAY_TRANSPORT=http` 时用 HttpToolExecutor（仅调试）。
  * desktop 经 ToolExecutionRouter 分流 Local / Gateway。
+ * desktop|dev 且 foundationUrl 不是绝对 http(s)：不创建 Gateway 客户端，只挂 LocalToolExecutor。
+ * 不读 Hosting 的 TOOL_EXECUTION_MODE。
  */
 import type { ILocalToolInstallStore, LocalToolInstallRecord } from '@gt-fe/eap-contracts';
 import { type DeploymentContext } from './tool-execution-router.js';

package/dist/tool/create-tool-executor.js

@@ -1,12 +1,14 @@
 /**
  * createToolExecutor — 按部署上下文组装 Router + Gateway/Local 执行器
  *
- * server / hosting：**默认 MCP**（McpToolExecutor → POST /api/v1/mcp）；
+ * server / hosting：**默认 MCP**（McpToolExecutor → POST {绝对基址}/api/v1/mcp）；
  * `EAP_TOOL_GATEWAY_TRANSPORT=http` 时用 HttpToolExecutor（仅调试）。
  * desktop 经 ToolExecutionRouter 分流 Local / Gateway。
+ * desktop|dev 且 foundationUrl 不是绝对 http(s)：不创建 Gateway 客户端，只挂 LocalToolExecutor。
+ * 不读 Hosting 的 TOOL_EXECUTION_MODE。
  */
 import { HttpToolExecutor } from './http-tool-executor.js';
-import { McpToolExecutor } from './mcp-tool-executor.js';
+import { isAbsoluteHttpUrl, McpToolExecutor } from './mcp-tool-executor.js';
 import { LocalToolExecutor } from './local-tool-executor.js';
 import { ToolExecutionRouter, } from './tool-execution-router.js';
 import { withHarnessPrimitives } from './harness-primitives.js';
@@ -46,14 +48,19 @@ function createServerExecutor(foundationUrl, transport, timeout) {
  */
 export function createToolExecutor(options) {
     const installStore = options.installStore ?? new EmptyInstallStore();
+    const localExecutor = new LocalToolExecutor({ installStore });
+    const deploymentContext = resolveDeploymentContext(options.deploymentContext);
+    const hasGateway = isAbsoluteHttpUrl(options.foundationUrl);
+    if (!hasGateway && (deploymentContext === 'desktop' || deploymentContext === 'dev')) {
+        return withHarnessPrimitives(localExecutor);
+    }
     const transport = resolveGatewayTransport(options.gatewayTransport);
     const serverExecutor = createServerExecutor(options.foundationUrl, transport, options.httpTimeout);
-    const localExecutor = new LocalToolExecutor({ installStore });
     return withHarnessPrimitives(new ToolExecutionRouter({
         httpExecutor: serverExecutor,
         localExecutor,
         installStore,
-        deploymentContext: resolveDeploymentContext(options.deploymentContext),
+        deploymentContext,
         toolTypes: options.toolTypes,
         toolRuntimes: options.toolRuntimes,
         forceToolServer: options.forceToolServer,

package/dist/tool/index.d.ts

@@ -3,7 +3,7 @@ export { hydrateMcpTools, isMcpDiscoverStub, needsMcpHydration, parseListedTools
 export { toLoadedToolMap, type LoadedToolDefinition, type LoadedToolMap, type LoadedToolManifestRef, } from './loaded-tool-definition.js';
 export { ToolOrchestrator } from './tool-orchestrator.js';
 export { HttpToolExecutor, type HttpToolExecutorOptions, } from './http-tool-executor.js';
-export { McpToolExecutor, type McpToolExecutorOptions, } from './mcp-tool-executor.js';
+export { McpToolExecutor, isAbsoluteHttpUrl, type McpToolExecutorOptions, } from './mcp-tool-executor.js';
 export { LocalToolExecutor, isLocalPreferredExecution, resolveCodeExecutionFromRequest } from './local-tool-executor.js';
 export { DevMcpExecutor, type DevMcpExecutorOptions, } from './dev-mcp-executor.js';
 export { DevHttpExecutor, buildHttpToolUrl, resolveHttpExecutionFromRequest, type DevHttpExecution, } from './dev-http-executor.js';

package/dist/tool/index.js

@@ -2,7 +2,7 @@ export { hydrateMcpTools, isMcpDiscoverStub, needsMcpHydration, parseListedTools
 export { toLoadedToolMap, } from './loaded-tool-definition.js';
 export { ToolOrchestrator } from './tool-orchestrator.js';
 export { HttpToolExecutor, } from './http-tool-executor.js';
-export { McpToolExecutor, } from './mcp-tool-executor.js';
+export { McpToolExecutor, isAbsoluteHttpUrl, } from './mcp-tool-executor.js';
 export { LocalToolExecutor, isLocalPreferredExecution, resolveCodeExecutionFromRequest } from './local-tool-executor.js';
 export { DevMcpExecutor, } from './dev-mcp-executor.js';
 export { DevHttpExecutor, buildHttpToolUrl, resolveHttpExecutionFromRequest, } from './dev-http-executor.js';

package/dist/tool/mcp-tool-executor.d.ts

@@ -4,6 +4,8 @@
  * @see docs/contracts/tool-execution.md §2.0
  */
 import type { IToolExecutor, McpListedTool, ToolCallRequest, ToolCallResult } from './tool-executor.interface.js';
+/** Tool Gateway 基址：必须是绝对 http(s)。空串 / 相对路径禁止 fetch。 */
+export declare function isAbsoluteHttpUrl(value: unknown): boolean;
 export interface McpToolExecutorOptions {
     baseUrl: string;
     timeout?: number;

package/dist/tool/mcp-tool-executor.js

@@ -4,8 +4,24 @@
  * @see docs/contracts/tool-execution.md §2.0
  */
 import { ErrorCodes } from '@gt-fe/eap-contracts';
+import { emitRuntimeLog } from '../common/logger.js';
 import { abortOrTimeoutMessage, isAbortError } from './timeout.js';
 import { nextListCursor, parseListedTools } from './mcp-list.js';
+/** Tool Gateway 基址：必须是绝对 http(s)。空串 / 相对路径禁止 fetch。 */
+export function isAbsoluteHttpUrl(value) {
+    if (typeof value !== 'string')
+        return false;
+    const trimmed = value.trim();
+    if (!trimmed)
+        return false;
+    try {
+        const url = new URL(trimmed);
+        return url.protocol === 'http:' || url.protocol === 'https:';
+    }
+    catch {
+        return false;
+    }
+}
 function resolveAgentCode(request) {
     return request.authContext.agentCode;
 }
@@ -49,7 +65,14 @@ export class McpToolExecutor {
     /** endpoint+user+agent → in-flight / completed tools/list */
     listCache = new Map();
     constructor(options) {
-        this.baseUrl = options.baseUrl.replace(/\/+$/, '');
+        if (!isAbsoluteHttpUrl(options.baseUrl)) {
+            emitRuntimeLog('warn', 'tool', 'McpToolExecutor 基址不是绝对 http(s)，拒绝请求', {
+                event: 'runtime.tool.gateway_base_invalid',
+                baseUrl: options.baseUrl,
+            });
+            throw new Error(`McpToolExecutor 需要绝对 http(s) 基址，收到 ${JSON.stringify(options.baseUrl ?? '')}`);
+        }
+        this.baseUrl = options.baseUrl.trim().replace(/\/+$/, '');
         this.timeout = options.timeout ?? 30_000;
         const path = options.mcpPath ?? '/api/v1/mcp';
         this.mcpUrl = `${this.baseUrl}${path.startsWith('/') ? path : `/${path}`}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gt-fe/eap-runtime",
-  "version": "0.0.16",
+  "version": "0.0.17",
   "description": "Enterprise Agent Platform \u2014 Runtime\u6838\u5fc3\uff1aGraph\u6267\u884c\u5f15\u64ce\u3001Task\u751f\u547d\u5468\u671f\u3001Session\u7ba1\u7406\u3001Checkpoint\u6301\u4e45\u5316",
   "type": "module",
   "main": "dist/index.js",