@gt-fe/eap-runtime 0.0.22 → 0.0.23

package/dist/graph/nodes/tool-node.js

@@ -16,7 +16,7 @@ import { inferHarnessSkillDir } from '../../tool/skill-dir-infer.js';
 import { isHitlDecision, unwrapHitlPaused } from '../hitl/hitl-handler.js';
 import { ToolConfirmationInterceptor } from '../../tool/tool-confirmation.js';
 import { resolveCheckpointThreadId } from '../../session/persist-turn-messages.js';
-import { toolTraceIdentity } from '../../tool/mcp-list.js';
+import { mcpToolsetCode, toolTraceIdentity } from '../../tool/mcp-list.js';
 import { resolveExecutionTrace, warnTraceSpanFailure, } from '../execution-trace-context.js';
 import { emitRuntimeLog } from '../../common/logger.js';
 import { decideBeforeTool, } from '../../execution/interceptors.js';
@@ -92,6 +92,7 @@ export class ToolNode {
         // 4. 转换为 ToolCallRequest[]（附带 manifest 路由字段）
         const requests = lastAssistantMessage.toolCalls.map((tc) => {
             const loaded = loadedTools?.[tc.name];
+            const toolsetCode = mcpToolsetCode(loaded);
             const correlationId = String(state['correlationId'] ?? tc.id);
             const taskId = String(state['taskId'] ?? state['correlationId'] ?? tc.id);
             const command = typeof tc.arguments?.command === 'string' ? tc.arguments.command : undefined;
@@ -114,6 +115,7 @@ export class ToolNode {
                 // dev 上下文 DevMcpExecutor 直连所需；server 上下文会忽略
                 execution: loaded?.manifest.execution,
                 ...(loaded?.manifest.version ? { toolVersion: loaded.manifest.version } : {}),
+                ...(toolsetCode ? { toolsetCode } : {}),
                 correlationId,
                 taskId,
                 ...(jail.workdir ? { jailWorkdir: jail.workdir } : {}),
@@ -506,10 +508,17 @@ export class ToolNode {
         const delegationToken = String(executionContext?.delegationToken ??
             state['delegationToken'] ??
             this.defaultAuthContext.delegationToken);
+        const fromState = typeof state['agentVersion'] === 'string' ? state['agentVersion'].trim() : '';
+        const agentDir = typeof state['agentDir'] === 'string' ? state['agentDir'].trim() : '';
+        const fromDir = agentDir
+            ? agentDir.split(/[/\\]/).filter(Boolean).pop()
+            : undefined;
+        const agentVersion = fromState || fromDir;
         return {
             userId,
             delegationToken,
             agentCode,
+            ...(agentVersion ? { agentVersion } : {}),
         };
     }
     shouldForceServer(state, toolName) {

package/dist/registry/graph-loader.js

@@ -4,7 +4,7 @@
  * 生产（server + EAP_PREINSTALL_ROOT）：以预装为准，缺失则失败（04 Req 8.1）。
  * 开发态：Registry + 可选 ./tools 本地 manifest。
  */
-import { readFile } from 'node:fs/promises';
+import { readdir, readFile } from 'node:fs/promises';
 import path from 'node:path';
 import { resolveAgentModelAllowlist, resolveAgentDefaultModel } from './agent-models.js';
 import { DEFAULT_HTTP_TOOL_TIMEOUT_SEC, DEFAULT_TOOL_TIMEOUT_SEC } from '../tool/timeout.js';
@@ -463,16 +463,71 @@ function fromInlineToolDeclaration(tool) {
         inputSchema: tool.input,
     };
 }
+const DEV_LOCAL_MANIFEST_FILES = [
+    'toolset.manifest.json',
+    'tool.manifest.json',
+    'manifest.json',
+];
+async function readJsonObject(filePath) {
+    try {
+        const raw = await readFile(filePath, 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+            return null;
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+function loadedToolFromDevDir(dir, toolName, doc, toolsetOnly) {
+    const tools = doc.tools;
+    if (Array.isArray(tools) && tools.length > 0 && typeof tools[0] === 'object') {
+        const pre = {
+            toolId: String(doc.code ?? path.basename(dir)),
+            name: String(doc.name ?? path.basename(dir)),
+            version: String(doc.version ?? '0.0.0'),
+            manifest: doc,
+            bundlePath: dir,
+        };
+        const expanded = expandPreinstallToolset(pre);
+        return expanded.find((d) => d.name === toolName) ?? null;
+    }
+    if (toolsetOnly)
+        return null;
+    return fromLocalManifestFile(toolName, doc);
+}
+async function loadDevLocalManifestFromDir(dir, toolName, toolsetOnly) {
+    const files = toolsetOnly ? ['toolset.manifest.json'] : DEV_LOCAL_MANIFEST_FILES;
+    for (const file of files) {
+        const doc = await readJsonObject(path.join(dir, file));
+        if (!doc)
+            continue;
+        const hit = loadedToolFromDevDir(dir, toolName, doc, toolsetOnly);
+        if (hit)
+            return hit;
+    }
+    return null;
+}
 async function loadDevLocalManifest(toolName, toolsDir) {
-    const manifestPath = path.join(toolsDir, toolName, 'tool.manifest.json');
+    const direct = await loadDevLocalManifestFromDir(path.join(toolsDir, toolName), toolName, false);
+    if (direct)
+        return direct;
+    let entries;
     try {
-        const raw = await readFile(manifestPath, 'utf-8');
-        const manifest = JSON.parse(raw);
-        return fromLocalManifestFile(toolName, manifest);
+        entries = await readdir(toolsDir, { withFileTypes: true });
     }
     catch {
         return null;
     }
+    for (const ent of entries) {
+        if (!ent.isDirectory() || ent.name === toolName)
+            continue;
+        const hit = await loadDevLocalManifestFromDir(path.join(toolsDir, ent.name), toolName, true);
+        if (hit)
+            return hit;
+    }
+    return null;
 }
 function fromLocalInstall(install) {
     return {

package/dist/tool/http-tool-executor.js

@@ -5,7 +5,7 @@
  * @see docs/contracts/cross-service-api.md §4.6
  */
 import { ErrorCodes } from '@gt-fe/eap-contracts';
-import { abortOrTimeoutMessage, isAbortError } from './timeout.js';
+import { abortOrTimeoutMessage, isAbortError, timeoutMsFromExecution } from './timeout.js';
 function mapGatewayHttpError(status, body, statusText) {
     const code = body?.error?.code;
     const bodyMessage = [body?.error?.message, body?.message].find((s) => typeof s === 'string' && s.trim()) ?? '';
@@ -81,13 +81,17 @@ export class HttpToolExecutor {
             Authorization: `Bearer ${request.authContext.delegationToken}`,
             'X-Agent-Id': agentCode,
             'X-Agent-Code': agentCode,
+            ...(request.authContext.agentVersion
+                ? { 'X-Agent-Version': request.authContext.agentVersion }
+                : {}),
             'X-User-Id': request.authContext.userId,
             userId: request.authContext.userId,
             'X-Correlation-Id': correlationId,
             'X-Task-Id': taskId,
         };
         const controller = new AbortController();
-        const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+        const timeoutMs = timeoutMsFromExecution(request.execution, this.timeout);
+        const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
         try {
             const response = await fetch(url, {
                 method: 'POST',
@@ -137,7 +141,7 @@ export class HttpToolExecutor {
         }
         catch (error) {
             clearTimeout(timeoutId);
-            const timeoutSec = Math.max(1, Math.round(this.timeout / 1000));
+            const timeoutSec = Math.max(1, Math.round(timeoutMsFromExecution(request.execution, this.timeout) / 1000));
             const aborted = isAbortError(error);
             return {
                 toolCallId: request.toolCallId,

package/dist/tool/index.d.ts

@@ -1,5 +1,5 @@
 export type { AuthContext, ToolCallRequest, ToolCallResult, LLMToolCall, LLMToolCallResponse, IToolExecutor, McpListedTool, } from './tool-executor.interface.js';
-export { hydrateMcpTools, isMcpDiscoverStub, needsMcpHydration, parseListedTools, toolsetCodeFromLoaded, toolTraceIdentity, } from './mcp-list.js';
+export { assertScopedListEcho, hydrateMcpTools, isMcpDiscoverStub, mcpToolsetCode, needsMcpHydration, parseListedTools, toolsetCodeFromLoaded, toolTraceIdentity, } from './mcp-list.js';
 export { toLoadedToolMap, type LoadedToolDefinition, type LoadedToolMap, type LoadedToolManifestRef, } from './loaded-tool-definition.js';
 export { ToolOrchestrator } from './tool-orchestrator.js';
 export { isRetryableToolFailure, resolveToolRetryConfig, type ToolFailureShape, } from './tool-retry.js';
@@ -11,6 +11,7 @@ export { DevHttpExecutor, buildHttpToolUrl, resolveHttpExecutionFromRequest, typ
 export { DevToolExecutor, type DevToolExecutorOptions } from './dev-tool-executor.js';
 export { LocalMcpClient, type ILocalMcpClient, type LocalMcpInvokeContext, type LocalMcpInvokeResult, } from './local-mcp-client.js';
 export { fileArtifactFromToolOutput, extractFileReference, resolveFileArtifact, type FileArtifact, } from './file-artifact.js';
+export { formatMcpOutput, toModelVisibleToolContent, MAX_MODEL_RESULT_ROWS, MAX_MODEL_CONTENT_CHARS, MAX_MODEL_RESULT_CHARS, } from './model-visible-tool-content.js';
 export { ToolExecutionRouter, type DeploymentContext, type ToolExecutionRouterOptions, } from './tool-execution-router.js';
 export { createToolExecutor, EmptyInstallStore, type CreateToolExecutorOptions, } from './create-tool-executor.js';
 export { assembleLoadedTools, mergeHarnessPrimitives as mergeBuiltinTools, withHarnessPrimitives as withBuiltinTools, HarnessPrimitiveExecutor as BuiltinToolExecutor, resolveUserDir, resolveJailFromState, captureOverlayJailOptions, collectToolBundlePaths, type HarnessJailOptions as BuiltinJailOptions, } from './harness-primitives.js';

package/dist/tool/index.js

@@ -1,4 +1,4 @@
-export { hydrateMcpTools, isMcpDiscoverStub, needsMcpHydration, parseListedTools, toolsetCodeFromLoaded, toolTraceIdentity, } from './mcp-list.js';
+export { assertScopedListEcho, hydrateMcpTools, isMcpDiscoverStub, mcpToolsetCode, needsMcpHydration, parseListedTools, toolsetCodeFromLoaded, toolTraceIdentity, } from './mcp-list.js';
 export { toLoadedToolMap, } from './loaded-tool-definition.js';
 export { ToolOrchestrator } from './tool-orchestrator.js';
 export { isRetryableToolFailure, resolveToolRetryConfig, } from './tool-retry.js';
@@ -10,6 +10,7 @@ export { DevHttpExecutor, buildHttpToolUrl, resolveHttpExecutionFromRequest, } f
 export { DevToolExecutor } from './dev-tool-executor.js';
 export { LocalMcpClient, } from './local-mcp-client.js';
 export { fileArtifactFromToolOutput, extractFileReference, resolveFileArtifact, } from './file-artifact.js';
+export { formatMcpOutput, toModelVisibleToolContent, MAX_MODEL_RESULT_ROWS, MAX_MODEL_CONTENT_CHARS, MAX_MODEL_RESULT_CHARS, } from './model-visible-tool-content.js';
 export { ToolExecutionRouter, } from './tool-execution-router.js';
 export { createToolExecutor, EmptyInstallStore, } from './create-tool-executor.js';
 export { assembleLoadedTools, mergeHarnessPrimitives as mergeBuiltinTools, withHarnessPrimitives as withBuiltinTools, HarnessPrimitiveExecutor as BuiltinToolExecutor, resolveUserDir, resolveJailFromState, captureOverlayJailOptions, collectToolBundlePaths, } from './harness-primitives.js';

package/dist/tool/loaded-tool-definition.d.ts

@@ -21,7 +21,7 @@ export interface LoadedToolManifestRef {
      * MCP/HTTP 出站执行配置（来自 tool.manifest.execution）
      *
      * dev 上下文 DevMcpExecutor 消费此字段做直连（stdio / streamable_http / sse）；
-     * server 上下文 gateway 会忽略此字段，改由 foundation-service 侧根据 toolName 分派。
+     * server 上下文 Gateway 按 `params._meta.toolsetCode` / `version` 分派，不读清单 server。
      */
     execution?: unknown;
 }

package/dist/tool/local-mcp-client.d.ts

@@ -7,6 +7,7 @@
 import type { McpRuntimeExecution } from '@gt-fe/eap-contracts';
 import { type FileArtifact } from './file-artifact.js';
 import type { McpListedTool } from './tool-executor.interface.js';
+export { formatMcpOutput } from './model-visible-tool-content.js';
 export interface LocalMcpInvokeContext {
     /** Platform Token.sub / ExecutionContext.userId */
     userId?: string | null;
@@ -19,7 +20,6 @@ export interface ILocalMcpClient {
     invoke(execution: McpRuntimeExecution, args: Record<string, unknown>, context?: LocalMcpInvokeContext): Promise<LocalMcpInvokeResult>;
     list(execution: McpRuntimeExecution, context?: LocalMcpInvokeContext): Promise<McpListedTool[]>;
 }
-export declare function formatMcpOutput(result: unknown): string;
 export declare class LocalMcpClient implements ILocalMcpClient {
     invoke(execution: McpRuntimeExecution, args: Record<string, unknown>, context?: LocalMcpInvokeContext): Promise<LocalMcpInvokeResult>;
     list(execution: McpRuntimeExecution, context?: LocalMcpInvokeContext): Promise<McpListedTool[]>;

package/dist/tool/local-mcp-client.js

@@ -8,46 +8,9 @@ import { spawn } from 'node:child_process';
 import readline from 'node:readline';
 import { isAbortError, resolveToolTimeoutSec, toToolTimeoutMs, toolTimeoutErrorMessage, } from './timeout.js';
 import { fileArtifactFromToolOutput, fileBasesFromEnv } from './file-artifact.js';
+import { formatMcpOutput } from './model-visible-tool-content.js';
 import { nextListCursor, parseListedTools } from './mcp-list.js';
-export function formatMcpOutput(result) {
-    const r = result;
-    if (r?.structuredContent !== undefined) {
-        return JSON.stringify(redactFileLocators(r.structuredContent));
-    }
-    const text = r?.content?.[0]?.text;
-    if (text) {
-        try {
-            return JSON.stringify(redactFileLocators(JSON.parse(text)));
-        }
-        catch {
-            return text;
-        }
-    }
-    return JSON.stringify(redactFileLocators(result));
-}
-function redactFileLocators(value) {
-    if (Array.isArray(value))
-        return value.map(redactFileLocators);
-    if (!value || typeof value !== 'object')
-        return value;
-    const obj = value;
-    const fileShaped = typeof obj.fileName === 'string'
-        && (typeof obj.url === 'string' || typeof obj.relativePath === 'string');
-    const out = {};
-    for (const [key, child] of Object.entries(obj)) {
-        if (key === 'fileReference' && child && typeof child === 'object' && !Array.isArray(child)) {
-            const ref = { ...child };
-            delete ref.url;
-            delete ref.relativePath;
-            out[key] = ref;
-            continue;
-        }
-        if (fileShaped && (key === 'url' || key === 'relativePath'))
-            continue;
-        out[key] = redactFileLocators(child);
-    }
-    return out;
-}
+export { formatMcpOutput } from './model-visible-tool-content.js';
 function expandEnvRefs(value) {
     if (!value)
         return '';

package/dist/tool/local-tool-executor.js

@@ -5,7 +5,7 @@
  * 或 request.execution 带可解析的 code bundlePath+handler，则直接本机执行。
  */
 import { spawn } from 'node:child_process';
-import { existsSync } from 'node:fs';
+import { existsSync, mkdirSync } from 'node:fs';
 import path from 'node:path';
 import { ErrorCodes, resolveReadyInstallByToolName, resolveMcpExecutionFromInstall, resolveCodeHandlerFromInstall, } from '@gt-fe/eap-contracts';
 import { isAbortError, toToolTimeoutMs, toolTimeoutErrorMessage } from './timeout.js';
@@ -49,13 +49,21 @@ function formatCodeLaunchError(err, spec) {
     }
     return new Error(err instanceof Error ? err.message : String(err));
 }
-function runHandler(handlerPath, input, timeoutMs, execution) {
+function runHandler(handlerPath, input, timeoutMs, execution, spawnOpts) {
     if (!existsSync(handlerPath)) {
         return Promise.reject(new Error(`找不到 handler 文件：${handlerPath}。请检查 toolset.manifest.json 的 tools[].handler 与工具目录。`));
     }
     const { cmd, args } = resolveCommand(handlerPath, execution);
+    const cwd = spawnOpts?.cwd?.trim() || undefined;
+    if (cwd)
+        mkdirSync(cwd, { recursive: true });
+    const env = { ...process.env, ...(spawnOpts?.env ?? {}) };
+    if (spawnOpts?.userId)
+        env.EAP_USER_ID = spawnOpts.userId;
+    if (cwd)
+        env.EAP_ARTIFACT_ROOT = cwd;
     return new Promise((resolve, reject) => {
-        const child = spawn(cmd, args, { stdio: ['pipe', 'pipe', 'pipe'] });
+        const child = spawn(cmd, args, { stdio: ['pipe', 'pipe', 'pipe'], cwd, env });
         let stdout = '';
         let stderr = '';
         let settled = false;
@@ -92,6 +100,20 @@ function runHandler(handlerPath, input, timeoutMs, execution) {
         child.stdin.end();
     });
 }
+function executionEnvFromRequest(request) {
+    const raw = request.execution;
+    if (!raw || typeof raw !== 'object')
+        return undefined;
+    const env = raw.env;
+    if (!env || typeof env !== 'object' || Array.isArray(env))
+        return undefined;
+    const out = {};
+    for (const [key, value] of Object.entries(env)) {
+        if (typeof value === 'string')
+            out[key] = value;
+    }
+    return Object.keys(out).length > 0 ? out : undefined;
+}
 /** 是否为应本机执行的 code（显式 localPreferred，例如 DevToolExecutor） */
 export function isLocalPreferredExecution(raw) {
     if (!raw || typeof raw !== 'object')
@@ -188,14 +210,19 @@ export class LocalToolExecutor {
     }
     async executeCodeSpec(request, spec) {
         try {
-            const stdout = await runHandler(spec.handlerPath, request.arguments, spec.timeoutMs ?? this.options.timeoutMs ?? 30_000, { runtime: spec.runtime, args: spec.args });
+            const jail = request.jailWorkdir?.trim() || undefined;
+            const stdout = await runHandler(spec.handlerPath, request.arguments, spec.timeoutMs ?? this.options.timeoutMs ?? 30_000, { runtime: spec.runtime, args: spec.args }, {
+                cwd: jail,
+                userId: request.authContext?.userId,
+                env: executionEnvFromRequest(request),
+            });
             return {
                 toolCallId: request.toolCallId,
                 toolName: request.toolName,
                 content: stdout,
                 success: true,
                 runtime: 'local',
-                file: fileArtifactFromToolOutput(stdout, fileBasesFromEnv()),
+                file: fileArtifactFromToolOutput(stdout, [...fileBasesFromEnv(), jail]),
             };
         }
         catch (error) {

package/dist/tool/mcp-list.d.ts

@@ -8,6 +8,14 @@ import type { LoadedToolDefinition, LoadedToolMap } from './loaded-tool-definiti
 import type { AuthContext, IToolExecutor, McpListedTool } from './tool-executor.interface.js';
 export declare function parseListedTools(result: unknown): McpListedTool[];
 export declare function nextListCursor(result: unknown): string | undefined;
+/**
+ * 有 toolsetCode 的 tools/list：回包 `_meta` 必须与请求作用域一致（Gateway A16）。
+ * 无 `_meta` 或编码/版本不符视为本次 list 失败，不把全局目录当该工具集。
+ */
+export declare function assertScopedListEcho(result: unknown, expected: {
+    toolsetCode: string;
+    version?: string;
+}): void;
 export interface McpDiscoverExecution {
     protocol?: string;
     discover?: boolean;
@@ -32,6 +40,19 @@ export declare function toolsetCodeFromLoaded(loaded: {
         id?: string;
     };
 } | undefined): string | undefined;
+/**
+ * Gateway `params._meta.toolsetCode`：hydrate 后的 `toolset:toolName` 前缀，
+ * 或 MCP discover stub 自身的工具集编码。
+ */
+export declare function mcpToolsetCode(loaded: {
+    toolId?: string;
+    name?: string;
+    manifest?: {
+        id?: string;
+        type?: string;
+        execution?: unknown;
+    };
+} | undefined): string | undefined;
 /** Tool Span：工具集 code + 声明版本。与 Skill 的 skillSpace/version 同一假设。 */
 export declare function toolTraceIdentity(loaded: {
     toolId?: string;

package/dist/tool/mcp-list.js

@@ -16,8 +16,9 @@ export function parseListedTools(result) {
         const t = raw;
         if (typeof t.name !== 'string' || !t.name.trim())
             continue;
-        const inputSchema = t.inputSchema && typeof t.inputSchema === 'object' && !Array.isArray(t.inputSchema)
-            ? t.inputSchema
+        const schemaRaw = t.inputSchema ?? t.input;
+        const inputSchema = schemaRaw && typeof schemaRaw === 'object' && !Array.isArray(schemaRaw)
+            ? schemaRaw
             : undefined;
         out.push({
             name: t.name,
@@ -31,6 +32,30 @@ export function nextListCursor(result) {
     const cursor = result?.nextCursor;
     return typeof cursor === 'string' && cursor.trim() ? cursor : undefined;
 }
+/**
+ * 有 toolsetCode 的 tools/list：回包 `_meta` 必须与请求作用域一致（Gateway A16）。
+ * 无 `_meta` 或编码/版本不符视为本次 list 失败，不把全局目录当该工具集。
+ */
+export function assertScopedListEcho(result, expected) {
+    const root = result && typeof result === 'object' && !Array.isArray(result)
+        ? result
+        : {};
+    const echo = root._meta && typeof root._meta === 'object' && !Array.isArray(root._meta)
+        ? root._meta
+        : {};
+    const code = typeof echo.toolsetCode === 'string' ? echo.toolsetCode.trim() : '';
+    const version = typeof echo.version === 'string' ? echo.version.trim() : '';
+    const wantCode = expected.toolsetCode.trim();
+    const wantVersion = expected.version?.trim() ?? '';
+    if (!wantCode)
+        return;
+    if (code !== wantCode) {
+        throw new Error(`MCP tools/list 回包 toolsetCode 与请求不一致: 期望 ${wantCode}, 实际 ${code || '<missing>'}`);
+    }
+    if (wantVersion && version !== wantVersion) {
+        throw new Error(`MCP tools/list 回包 version 与请求不一致: 期望 ${wantVersion}, 实际 ${version || '<missing>'}`);
+    }
+}
 export function readMcpDiscoverExecution(raw) {
     if (!raw || typeof raw !== 'object' || Array.isArray(raw))
         return null;
@@ -84,6 +109,21 @@ export function toolsetCodeFromLoaded(loaded) {
     }
     return undefined;
 }
+/**
+ * Gateway `params._meta.toolsetCode`：hydrate 后的 `toolset:toolName` 前缀，
+ * 或 MCP discover stub 自身的工具集编码。
+ */
+export function mcpToolsetCode(loaded) {
+    const fromPrefix = toolsetCodeFromLoaded(loaded);
+    if (fromPrefix)
+        return fromPrefix;
+    if (!loaded || loaded.manifest?.type !== 'mcp')
+        return undefined;
+    if (!readMcpDiscoverExecution(loaded.manifest.execution))
+        return undefined;
+    const id = (loaded.manifest.id || loaded.toolId || loaded.name || '').trim();
+    return id || undefined;
+}
 function declaredToolVersion(toolName, version) {
     const raw = version?.trim();
     if (!raw || raw === toolName)
@@ -120,7 +160,10 @@ export async function hydrateMcpTools(loadedTools, executor, auth) {
     }
     const groups = new Map();
     for (const stub of stubs) {
-        const key = mcpEndpointKey(stub.manifest.execution);
+        const endpoint = mcpEndpointKey(stub.manifest.execution);
+        const toolsetCode = mcpToolsetCode(stub) ?? stub.name;
+        const version = stub.manifest.version?.trim() ?? '';
+        const key = `${endpoint}\0${toolsetCode}\0${version}`;
         const list = groups.get(key);
         if (list)
             list.push(stub);
@@ -132,6 +175,7 @@ export async function hydrateMcpTools(loadedTools, executor, auth) {
     for (const [, group] of groups) {
         const primary = group[0];
         const endpoint = mcpEndpointKey(primary.manifest.execution, primary.name);
+        const toolsetCode = mcpToolsetCode(primary);
         let listed;
         try {
             listed = await executor.listTools({
@@ -144,6 +188,8 @@ export async function hydrateMcpTools(loadedTools, executor, auth) {
                 toolType: 'mcp',
                 toolRuntime: primary.manifest.toolRuntime,
                 execution: primary.manifest.execution,
+                ...(toolsetCode ? { toolsetCode } : {}),
+                ...(primary.manifest.version ? { toolVersion: primary.manifest.version } : {}),
             });
         }
         catch (err) {

package/dist/tool/mcp-tool-executor.d.ts

@@ -18,7 +18,7 @@ export declare class McpToolExecutor implements IToolExecutor {
     private readonly mcpUrl;
     private rpcId;
     private initialized;
-    /** endpoint+user+agent → in-flight / completed tools/list */
+    /** endpoint+user+agent+toolset+version → in-flight / completed tools/list */
     private readonly listCache;
     constructor(options: McpToolExecutorOptions);
     execute(request: ToolCallRequest): Promise<ToolCallResult>;

package/dist/tool/mcp-tool-executor.js

@@ -5,8 +5,10 @@
  */
 import { ErrorCodes } from '@gt-fe/eap-contracts';
 import { emitRuntimeLog } from '../common/logger.js';
-import { abortOrTimeoutMessage, isAbortError } from './timeout.js';
-import { nextListCursor, parseListedTools } from './mcp-list.js';
+import { abortOrTimeoutMessage, isAbortError, timeoutMsFromExecution } from './timeout.js';
+import { formatMcpOutput } from './model-visible-tool-content.js';
+import { fileArtifactFromToolOutput, fileBasesFromEnv } from './file-artifact.js';
+import { assertScopedListEcho, nextListCursor, parseListedTools } from './mcp-list.js';
 /** Tool Gateway 基址：必须是绝对 http(s)。空串 / 相对路径禁止 fetch。 */
 export function isAbsoluteHttpUrl(value) {
     if (typeof value !== 'string')
@@ -26,10 +28,7 @@ function resolveAgentCode(request) {
     return request.authContext.agentCode;
 }
 function formatContent(result) {
-    const text = result?.content?.[0]?.text;
-    if (text != null)
-        return text;
-    return JSON.stringify(result ?? {});
+    return formatMcpOutput(result ?? {});
 }
 function mapMcpError(status, body) {
     const eapCode = body?.error?.data?.eapCode;
@@ -56,13 +55,41 @@ function mapMcpError(status, body) {
     }
     return { error: message, errorCode: eapCode ?? 'EXECUTION_FAILED', retryable: false };
 }
+/** Gateway 作用域只在 params._meta；name / arguments / cursor 是协议字段。 */
+function mcpScopeMeta(request) {
+    const toolsetCode = request.toolsetCode?.trim();
+    const version = request.toolVersion?.trim();
+    const meta = {};
+    if (toolsetCode)
+        meta.toolsetCode = toolsetCode;
+    if (version)
+        meta.version = version;
+    return Object.keys(meta).length > 0 ? meta : undefined;
+}
+function mcpCallParams(request) {
+    const _meta = mcpScopeMeta(request);
+    return {
+        name: request.toolName,
+        arguments: request.arguments,
+        ...(_meta ? { _meta } : {}),
+    };
+}
+function mcpListCacheKey(mcpUrl, request) {
+    return [
+        mcpUrl,
+        request.authContext.userId ?? '',
+        request.authContext.agentCode,
+        request.toolsetCode?.trim() ?? '',
+        request.toolVersion?.trim() ?? '',
+    ].join('\0');
+}
 export class McpToolExecutor {
     baseUrl;
     timeout;
     mcpUrl;
     rpcId = 1;
     initialized = false;
-    /** endpoint+user+agent → in-flight / completed tools/list */
+    /** endpoint+user+agent+toolset+version → in-flight / completed tools/list */
     listCache = new Map();
     constructor(options) {
         if (!isAbsoluteHttpUrl(options.baseUrl)) {
@@ -87,16 +114,7 @@ export class McpToolExecutor {
                 jsonrpc: '2.0',
                 id,
                 method: 'tools/call',
-                params: {
-                    name: request.toolName,
-                    arguments: request.arguments,
-                    ...(request.toolVersion
-                        ? {
-                            version: request.toolVersion,
-                            _meta: { version: request.toolVersion },
-                        }
-                        : {}),
-                },
+                params: mcpCallParams(request),
             }, request, agentCode, correlationId);
             if (!response.ok) {
                 let body = null;
@@ -128,16 +146,18 @@ export class McpToolExecutor {
                     ...mapped,
                 };
             }
+            const raw = body.result;
             return {
                 toolCallId: request.toolCallId,
                 toolName: request.toolName,
-                content: formatContent(body.result),
+                content: formatContent(raw),
                 success: true,
                 runtime: 'server',
+                file: fileArtifactFromToolOutput(raw?.structuredContent ?? raw?.content?.[0]?.text ?? raw, [...fileBasesFromEnv(), request.jailWorkdir]),
             };
         }
         catch (err) {
-            const timeoutSec = Math.max(1, Math.round(this.timeout / 1000));
+            const timeoutSec = Math.max(1, Math.round(timeoutMsFromExecution(request.execution, this.timeout) / 1000));
             const aborted = isAbortError(err);
             return {
                 toolCallId: request.toolCallId,
@@ -152,7 +172,7 @@ export class McpToolExecutor {
         }
     }
     async listTools(request) {
-        const key = `${this.mcpUrl}\0${request.authContext.userId}\0${request.authContext.agentCode}`;
+        const key = mcpListCacheKey(this.mcpUrl, request);
         const cached = this.listCache.get(key);
         if (cached)
             return cached;
@@ -168,10 +188,22 @@ export class McpToolExecutor {
     }
     async listAllTools(request) {
         await this.ensureInitialized(request);
+        const meta = mcpScopeMeta(request);
+        if (meta?.toolsetCode) {
+            const result = await this.rpcResult(request, 'tools/list', { _meta: meta });
+            assertScopedListEcho(result, {
+                toolsetCode: meta.toolsetCode,
+                version: meta.version,
+            });
+            return parseListedTools(result);
+        }
         const tools = [];
         let cursor;
         do {
-            const result = await this.rpcResult(request, 'tools/list', cursor ? { cursor } : {});
+            const result = await this.rpcResult(request, 'tools/list', {
+                ...(cursor ? { cursor } : {}),
+                ...(meta ? { _meta: meta } : {}),
+            });
             tools.push(...parseListedTools(result));
             cursor = nextListCursor(result);
         } while (cursor);
@@ -223,7 +255,8 @@ export class McpToolExecutor {
     }
     async postRpc(payload, request, agentCode, correlationId) {
         const controller = new AbortController();
-        const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+        const timeoutMs = timeoutMsFromExecution(request.execution, this.timeout);
+        const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
         try {
             return await fetch(this.mcpUrl, {
                 method: 'POST',
@@ -234,6 +267,9 @@ export class McpToolExecutor {
                     Authorization: `Bearer ${request.authContext.delegationToken}`,
                     'X-Agent-Code': agentCode,
                     'X-Agent-Id': agentCode,
+                    ...(request.authContext.agentVersion
+                        ? { 'X-Agent-Version': request.authContext.agentVersion }
+                        : {}),
                     'X-User-Id': request.authContext.userId,
                     // 上游 mcp-data-service 认 `userId`；Gateway 侧亦保留 X-User-Id
                     userId: request.authContext.userId,

package/dist/tool/model-visible-tool-content.d.ts

@@ -0,0 +1,16 @@
+/**
+ * 模型可见 Tool 结果：MCP / Code 成功正文在写入 GraphState 前统一裁到最多 200 行，并写 recordCount / previewCount / truncated。
+ *
+ * 假设：模型看到的永远可能是预览；全量条数与是否裁过只在这一处写。
+ * 不按工具名分支。fileReference 路径仍由 format 阶段剔除，下载走 result.file。
+ *
+ * 预览行数按 DeepSeek V4 Pro（约 1M 上下文）估：单次工具结果要够看列和分布，
+ * 又不能看起来像全表。200 行约 3–8 万 token（视列宽）；多轮 5–6 次查询仍远低于窗口。
+ * 50 行只够看样例。1000 行接近聚合工具自己的预览上限，模型容易拿来排名。
+ * 超宽表先按行裁，再按体积把行数压到整段 JSON 仍合法。
+ */
+export declare const MAX_MODEL_RESULT_ROWS = 200;
+export declare const MAX_MODEL_CONTENT_CHARS = 64000;
+export declare const MAX_MODEL_RESULT_CHARS = 120000;
+export declare function formatMcpOutput(result: unknown): string;
+export declare function toModelVisibleToolContent(content: string): string;

package/dist/tool/model-visible-tool-content.js

@@ -0,0 +1,266 @@
+/**
+ * 模型可见 Tool 结果：MCP / Code 成功正文在写入 GraphState 前统一裁到最多 200 行，并写 recordCount / previewCount / truncated。
+ *
+ * 假设：模型看到的永远可能是预览；全量条数与是否裁过只在这一处写。
+ * 不按工具名分支。fileReference 路径仍由 format 阶段剔除，下载走 result.file。
+ *
+ * 预览行数按 DeepSeek V4 Pro（约 1M 上下文）估：单次工具结果要够看列和分布，
+ * 又不能看起来像全表。200 行约 3–8 万 token（视列宽）；多轮 5–6 次查询仍远低于窗口。
+ * 50 行只够看样例。1000 行接近聚合工具自己的预览上限，模型容易拿来排名。
+ * 超宽表先按行裁，再按体积把行数压到整段 JSON 仍合法。
+ */
+export const MAX_MODEL_RESULT_ROWS = 200;
+export const MAX_MODEL_CONTENT_CHARS = 64_000;
+export const MAX_MODEL_RESULT_CHARS = 120_000;
+const PRIMARY_ARRAY_KEYS = ['rows', 'data', 'records', 'result', 'dataset', 'items', 'results'];
+const TEXT_CLIP_SUFFIX = '...[文本已截断]';
+export function formatMcpOutput(result) {
+    const r = result;
+    const count = finiteCount(r?._meta?.recordCount) ?? finiteCount(r?._meta?.totalCount);
+    if (r?.structuredContent !== undefined) {
+        return JSON.stringify(attachCount(redactFileLocators(r.structuredContent), count));
+    }
+    const text = r?.content?.[0]?.text;
+    if (text) {
+        try {
+            return JSON.stringify(attachCount(redactFileLocators(JSON.parse(text)), count));
+        }
+        catch {
+            if (count == null)
+                return text;
+            return JSON.stringify({ recordCount: count, content: text });
+        }
+    }
+    return JSON.stringify(attachCount(redactFileLocators(result), count));
+}
+export function toModelVisibleToolContent(content) {
+    if (content === '')
+        return content;
+    const parsed = parseJson(content);
+    if (parsed === undefined) {
+        if (content.length <= MAX_MODEL_CONTENT_CHARS)
+            return content;
+        return `${content.slice(0, MAX_MODEL_CONTENT_CHARS)}${TEXT_CLIP_SUFFIX}`;
+    }
+    const clipped = clipParsed(parsed);
+    if (!clipped.needEnvelope)
+        return content;
+    let out = clipped.value;
+    if (isPlainObject(clipped.value)) {
+        out = {
+            ...clipped.value,
+            recordCount: clipped.recordCount,
+            previewCount: clipped.previewCount,
+            truncated: clipped.truncated,
+        };
+    }
+    else if (Array.isArray(clipped.value)) {
+        out = {
+            truncated: clipped.truncated,
+            recordCount: clipped.recordCount,
+            previewCount: clipped.previewCount,
+            data: clipped.value,
+        };
+    }
+    if (typeof out === 'string') {
+        if (out.length <= MAX_MODEL_CONTENT_CHARS)
+            return JSON.stringify(out);
+        return JSON.stringify(`${out.slice(0, MAX_MODEL_CONTENT_CHARS)}${TEXT_CLIP_SUFFIX}`);
+    }
+    return stringifyWithinLimit(out, clipped.recordCount);
+}
+function clipParsed(value) {
+    if (Array.isArray(value)) {
+        const recordCount = value.length;
+        const clipped = value.length > MAX_MODEL_RESULT_ROWS;
+        const next = clipped ? value.slice(0, MAX_MODEL_RESULT_ROWS) : value;
+        return {
+            value: next,
+            needEnvelope: clipped,
+            recordCount,
+            previewCount: next.length,
+            truncated: clipped,
+        };
+    }
+    if (isPlainObject(value)) {
+        const obj = value;
+        const next = {};
+        let didClip = false;
+        for (const [key, child] of Object.entries(obj)) {
+            if (typeof child === 'string' && child.length > MAX_MODEL_CONTENT_CHARS) {
+                next[key] = `${child.slice(0, MAX_MODEL_CONTENT_CHARS)}${TEXT_CLIP_SUFFIX}`;
+                didClip = true;
+            }
+            else if (Array.isArray(child) && isPrimaryArrayKey(key) && child.length > MAX_MODEL_RESULT_ROWS) {
+                next[key] = child.slice(0, MAX_MODEL_RESULT_ROWS);
+                didClip = true;
+            }
+            else {
+                next[key] = child;
+            }
+        }
+        const prePrimary = primaryArrayLength(obj);
+        const recordCount = finiteCount(obj.recordCount) ?? finiteCount(obj.rowCount) ?? prePrimary;
+        const previewCount = primaryArrayLength(next);
+        const truncated = didClip
+            || obj.truncated === true
+            || (recordCount != null && previewCount != null && previewCount < recordCount);
+        const needEnvelope = didClip
+            || truncated
+            || finiteCount(obj.recordCount) != null
+            || finiteCount(obj.rowCount) != null;
+        return {
+            value: next,
+            needEnvelope,
+            recordCount,
+            previewCount,
+            truncated,
+        };
+    }
+    if (typeof value === 'string' && value.length > MAX_MODEL_CONTENT_CHARS) {
+        return {
+            value: `${value.slice(0, MAX_MODEL_CONTENT_CHARS)}${TEXT_CLIP_SUFFIX}`,
+            needEnvelope: false,
+            truncated: true,
+        };
+    }
+    return { value, needEnvelope: false, truncated: false };
+}
+function stringifyWithinLimit(value, recordCount) {
+    let current = value;
+    let json = JSON.stringify(current);
+    if (json.length <= MAX_MODEL_RESULT_CHARS)
+        return json;
+    if (isPlainObject(current)) {
+        current = shrinkPrimaryArray(current, recordCount);
+        json = JSON.stringify(current);
+        if (json.length <= MAX_MODEL_RESULT_CHARS)
+            return json;
+        const shortened = clipLongStrings(current, 256);
+        json = JSON.stringify(shortened);
+        if (json.length <= MAX_MODEL_RESULT_CHARS)
+            return json;
+        const count = isPlainObject(shortened)
+            ? (finiteCount(shortened.recordCount) ?? recordCount)
+            : recordCount;
+        json = JSON.stringify({
+            truncated: true,
+            recordCount: count,
+            previewCount: 0,
+            message: '结果过大，模型侧不返回行数据；请用 aggregate_dataset_data / export_dataset_data 处理全量',
+        });
+    }
+    if (json.length <= MAX_MODEL_RESULT_CHARS)
+        return json;
+    return JSON.stringify({ truncated: true, previewCount: 0, message: '结果过大' });
+}
+function clipLongStrings(value, maxChars) {
+    if (typeof value === 'string') {
+        return value.length > maxChars ? `${value.slice(0, maxChars)}${TEXT_CLIP_SUFFIX}` : value;
+    }
+    if (Array.isArray(value))
+        return value.map((item) => clipLongStrings(item, maxChars));
+    if (!isPlainObject(value))
+        return value;
+    const out = {};
+    for (const [key, child] of Object.entries(value)) {
+        out[key] = clipLongStrings(child, maxChars);
+    }
+    return out;
+}
+function isPrimaryArrayKey(key) {
+    return PRIMARY_ARRAY_KEYS.includes(key);
+}
+function shrinkPrimaryArray(obj, recordCount) {
+    const key = primaryArrayKey(obj);
+    const rows = key ? obj[key] : undefined;
+    if (!key || !Array.isArray(rows) || rows.length <= 1)
+        return obj;
+    let low = 1;
+    let high = rows.length;
+    let best = 1;
+    while (low <= high) {
+        const mid = Math.floor((low + high) / 2);
+        const candidate = withPreview(obj, key, rows.slice(0, mid), recordCount);
+        if (JSON.stringify(candidate).length <= MAX_MODEL_RESULT_CHARS) {
+            best = mid;
+            low = mid + 1;
+        }
+        else {
+            high = mid - 1;
+        }
+    }
+    return withPreview(obj, key, rows.slice(0, best), recordCount);
+}
+function withPreview(obj, key, rows, recordCount) {
+    const full = recordCount ?? finiteCount(obj.recordCount) ?? finiteCount(obj.rowCount) ?? rows.length;
+    return {
+        ...obj,
+        [key]: rows,
+        recordCount: full,
+        previewCount: rows.length,
+        truncated: true,
+    };
+}
+function primaryArrayKey(obj) {
+    for (const key of PRIMARY_ARRAY_KEYS) {
+        if (Array.isArray(obj[key]))
+            return key;
+    }
+    return undefined;
+}
+function attachCount(value, count) {
+    if (count == null || !isPlainObject(value))
+        return value;
+    const obj = value;
+    if (finiteCount(obj.recordCount) != null || finiteCount(obj.rowCount) != null)
+        return value;
+    return { ...obj, recordCount: count };
+}
+function primaryArrayLength(obj) {
+    for (const key of PRIMARY_ARRAY_KEYS) {
+        const child = obj[key];
+        if (Array.isArray(child))
+            return child.length;
+    }
+    return undefined;
+}
+function finiteCount(value) {
+    return typeof value === 'number' && Number.isFinite(value) ? value : undefined;
+}
+function parseJson(text) {
+    const trimmed = text.trim();
+    if (!trimmed.startsWith('{') && !trimmed.startsWith('['))
+        return undefined;
+    try {
+        return JSON.parse(trimmed);
+    }
+    catch {
+        return undefined;
+    }
+}
+function isPlainObject(value) {
+    return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
+function redactFileLocators(value) {
+    if (Array.isArray(value))
+        return value.map(redactFileLocators);
+    if (!isPlainObject(value))
+        return value;
+    const obj = value;
+    const fileShaped = typeof obj.fileName === 'string'
+        && (typeof obj.url === 'string' || typeof obj.relativePath === 'string');
+    const out = {};
+    for (const [key, child] of Object.entries(obj)) {
+        if (key === 'fileReference' && isPlainObject(child)) {
+            const ref = { ...child };
+            delete ref.url;
+            out[key] = ref;
+            continue;
+        }
+        if (fileShaped && key === 'url')
+            continue;
+        out[key] = redactFileLocators(child);
+    }
+    return out;
+}

package/dist/tool/timeout.d.ts

@@ -1,14 +1,7 @@
 /**
- * Tool / toolset `timeout`：秒。
- * 与 `@gt-fe/eap-contracts` `src/tool/timeout.ts` 同语义；Runtime 钉的是 contracts 0.0.9，
- * 尚未含这些导出。发版 contracts 后改为从 `@gt-fe/eap-contracts` 引用。
+ * 秒钳制与 abort 识别从 `@gt-fe/eap-contracts` 来。
+ * 本文件保留：本次工具 execution.timeout → 毫秒。
  */
-export declare const DEFAULT_TOOL_TIMEOUT_SEC = 30;
-export declare const DEFAULT_HTTP_TOOL_TIMEOUT_SEC = 10;
-export declare const MIN_TOOL_TIMEOUT_SEC = 1;
-export declare const MAX_TOOL_TIMEOUT_SEC = 300;
-export declare function resolveToolTimeoutSec(timeoutSec: unknown, fallbackSec?: number): number;
-export declare function toToolTimeoutMs(timeoutSec: unknown, fallbackSec?: number): number;
-export declare function isAbortError(error: unknown): boolean;
-export declare function toolTimeoutErrorMessage(timeoutSec: number): string;
-export declare function abortOrTimeoutMessage(error: unknown, timeoutSec: number): string;
+export { DEFAULT_HTTP_TOOL_TIMEOUT_SEC, DEFAULT_TOOL_TIMEOUT_SEC, MAX_TOOL_TIMEOUT_SEC, MIN_TOOL_TIMEOUT_SEC, abortOrTimeoutMessage, isAbortError, resolveToolTimeoutSec, toToolTimeoutMs, toolTimeoutErrorMessage, } from '@gt-fe/eap-contracts';
+/** 清单 tools[].timeout / 展开后 execution.timeout（秒）→ 本次调用毫秒；没有则用装配默认。 */
+export declare function timeoutMsFromExecution(execution: unknown, fallbackMs: number): number;

package/dist/tool/timeout.js

@@ -1,39 +1,17 @@
 /**
- * Tool / toolset `timeout`：秒。
- * 与 `@gt-fe/eap-contracts` `src/tool/timeout.ts` 同语义；Runtime 钉的是 contracts 0.0.9，
- * 尚未含这些导出。发版 contracts 后改为从 `@gt-fe/eap-contracts` 引用。
+ * 秒钳制与 abort 识别从 `@gt-fe/eap-contracts` 来。
+ * 本文件保留：本次工具 execution.timeout → 毫秒。
  */
-export const DEFAULT_TOOL_TIMEOUT_SEC = 30;
-export const DEFAULT_HTTP_TOOL_TIMEOUT_SEC = 10;
-export const MIN_TOOL_TIMEOUT_SEC = 1;
-export const MAX_TOOL_TIMEOUT_SEC = 300;
-export function resolveToolTimeoutSec(timeoutSec, fallbackSec = DEFAULT_TOOL_TIMEOUT_SEC) {
-    if (typeof timeoutSec !== 'number' || !Number.isFinite(timeoutSec) || timeoutSec <= 0) {
-        return fallbackSec;
+export { DEFAULT_HTTP_TOOL_TIMEOUT_SEC, DEFAULT_TOOL_TIMEOUT_SEC, MAX_TOOL_TIMEOUT_SEC, MIN_TOOL_TIMEOUT_SEC, abortOrTimeoutMessage, isAbortError, resolveToolTimeoutSec, toToolTimeoutMs, toolTimeoutErrorMessage, } from '@gt-fe/eap-contracts';
+import { toToolTimeoutMs } from '@gt-fe/eap-contracts';
+/** 清单 tools[].timeout / 展开后 execution.timeout（秒）→ 本次调用毫秒；没有则用装配默认。 */
+export function timeoutMsFromExecution(execution, fallbackMs) {
+    if (!execution || typeof execution !== 'object' || Array.isArray(execution)) {
+        return fallbackMs;
     }
-    return Math.min(MAX_TOOL_TIMEOUT_SEC, Math.max(MIN_TOOL_TIMEOUT_SEC, Math.trunc(timeoutSec)));
-}
-export function toToolTimeoutMs(timeoutSec, fallbackSec = DEFAULT_TOOL_TIMEOUT_SEC) {
-    return resolveToolTimeoutSec(timeoutSec, fallbackSec) * 1000;
-}
-export function isAbortError(error) {
-    if (!error || typeof error !== 'object')
-        return false;
-    const err = error;
-    if (err.name === 'AbortError' || err.name === 'TimeoutError' || err.code === 'ABORT_ERR') {
-        return true;
+    const timeout = execution.timeout;
+    if (typeof timeout !== 'number' || !Number.isFinite(timeout) || timeout <= 0) {
+        return fallbackMs;
     }
-    const msg = (err.message ?? '').toLowerCase();
-    return (msg === 'this operation was aborted'
-        || msg === 'the operation was aborted'
-        || msg.includes('this operation was aborted')
-        || msg.includes('the operation was aborted'));
-}
-export function toolTimeoutErrorMessage(timeoutSec) {
-    return `timeout after ${resolveToolTimeoutSec(timeoutSec)}s`;
-}
-export function abortOrTimeoutMessage(error, timeoutSec) {
-    if (isAbortError(error))
-        return toolTimeoutErrorMessage(timeoutSec);
-    return error instanceof Error ? error.message : String(error);
+    return toToolTimeoutMs(timeout);
 }

package/dist/tool/tool-executor.interface.d.ts

@@ -12,6 +12,8 @@ export interface AuthContext {
     delegationToken: string;
     /** Agent 对外主键 */
     agentCode: string;
+    /** 本次请求的 Agent 预装版本（目录名）；Gateway 写根用 */
+    agentVersion?: string;
 }
 /**
  * ToolCallRequest — Tool 调用请求
@@ -22,9 +24,13 @@ export interface ToolCallRequest {
     arguments: Record<string, unknown>;
     /**
      * 工具语义化版本（来自 LoadedToolDefinition.manifest.version）。
-     * McpToolExecutor 在 Gateway `tools/call` 中透传为 params.version。
+     * McpToolExecutor 只放进 Gateway `params._meta.version`，不写 params 顶层。
      */
     toolVersion?: string;
+    /**
+     * MCP 工具集编码。McpToolExecutor 只放进 Gateway `params._meta.toolsetCode`。
+     */
+    toolsetCode?: string;
     authContext: AuthContext;
     dataScope?: 'user-bound' | 'department-bound' | 'global';
     resourceOwnerId?: string;

package/dist/tool/tool-orchestrator.js

@@ -6,6 +6,7 @@
  */
 import { isBuiltinToolExecution } from '@gt-fe/eap-contracts';
 import { assertToolPermission, GovernanceUnavailableError, PermissionDeniedError, } from '../governance/permission-guard.js';
+import { toModelVisibleToolContent } from './model-visible-tool-content.js';
 /**
  * ToolOrchestrator — Tool 调用编排主服务
  */
@@ -70,7 +71,11 @@ export class ToolOrchestrator {
             }
         }
         try {
-            return await this.toolExecutor.execute(request);
+            const result = await this.toolExecutor.execute(request);
+            if (result.success && result.content) {
+                return { ...result, content: toModelVisibleToolContent(result.content) };
+            }
+            return result;
         }
         catch (error) {
             const message = error instanceof Error ? error.message : 'Unknown execution error';

package/dist/tool/tool-result-injector.js

@@ -10,6 +10,7 @@
  * @see design.md §1.2 Tool结果注入State → 回到LLM节点（ReAct循环）
  * @see requirements.md Requirement 8 AC4
  */
+import { toModelVisibleToolContent } from './model-visible-tool-content.js';
 // ─────────────────────────────────────────────
 // ToolResultInjector
 // ─────────────────────────────────────────────
@@ -51,7 +52,7 @@ export class ToolResultInjector {
      */
     buildToolMessage(result) {
         const content = result.success
-            ? result.content
+            ? toModelVisibleToolContent(result.content)
             : `[Tool Error] ${result.error ?? 'Unknown error'}`;
         return {
             role: 'tool',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gt-fe/eap-runtime",
-  "version": "0.0.22",
+  "version": "0.0.23",
   "description": "Enterprise Agent Platform — Runtime核心：Graph执行引擎、Task生命周期、Session管理、Checkpoint持久化",
   "type": "module",
   "main": "dist/index.js",
@@ -20,7 +20,7 @@
     "ioredis": "^5.4.0",
     "pg": "^8.13.0",
     "yaml": "^2.6.1",
-    "@gt-fe/eap-contracts": "0.0.12"
+    "@gt-fe/eap-contracts": "0.0.13"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",