@gt-fe/eap-runtime 0.0.26 → 0.0.28

package/dist/registry/deployment-snapshot.d.ts

@@ -28,7 +28,7 @@ export interface SnapshotSkillRef {
     name?: string;
     version?: string;
     description?: string;
-    /** 可选：对应 skill 清单文件内容 sha256 */
+    /** 可选；Runtime 加载不比对。完整性由 Agent 包 / Hosting 预装负责 */
     sha256?: string;
 }
 export interface AgentSnapshotMeta {

package/dist/registry/deployment-snapshot.js

@@ -583,15 +583,6 @@ export class FileSystemDeploymentSnapshot {
             }
             if (!manifest || !manifestPath)
                 continue;
-            const isUserOverridePath = bundlePath.includes('/users/') || bundlePath.includes('\\users\\');
-            const isAuthorOverlay = extraRoots.some((root) => root && isPathInside(root, bundlePath));
-            if (ref.sha256 &&
-                !isUserOverridePath &&
-                !isAuthorOverlay &&
-                manifestPath.endsWith('.json')) {
-                const actual = await sha256OfFile(manifestPath);
-                await warnIfDigestMismatch(ref.sha256, actual, `skill ${ref.skillId}`, { path: manifestPath }, this.flags.requireChecksum || isRequireChecksum());
-            }
             const skillId = String(ref.skillId);
             return {
                 skillId,

package/dist/runtime/dev-runtime.js

@@ -85,12 +85,14 @@ export function createDevRuntime(options) {
         llmProvider = createDefaultLLMProvider(turnLog);
         llmProviderKind = 'echo';
     }
-    // ── Tool Executor（dev+mcp 直连，缺配置失败 → 通用路由）──
+    // ── Tool Executor（dev+mcp：server MCP 走 Gateway，其余直连）──
     // overlay 必须在此处捕获：SDK createAgent 返回后会恢复 process.env。
     const overlayJail = captureOverlayJailOptions();
     const needsHarnessWrap = toolExecutionMode === 'mcp' && deploymentContext === 'dev';
     const innerExecutor = toolExecutionMode === 'mcp' && deploymentContext === 'dev'
-        ? new DevToolExecutor()
+        ? new DevToolExecutor({
+            foundationUrl: foundationConfigured ? foundationUrl : undefined,
+        })
         : createToolExecutor({ foundationUrl, deploymentContext, jail: overlayJail });
     const toolExecutor = needsHarnessWrap
         ? withHarnessPrimitives(innerExecutor, overlayJail)

package/dist/tool/dev-tool-executor.d.ts

@@ -4,7 +4,8 @@
  * 仅在 `EAP_TOOL_EXECUTION_MODE=mcp` 且 `deploymentContext=dev` 装配。
  * 按清单分流，缺配置则失败，不回落 mock。
  *
- * - execution.protocol=mcp → DevMcpExecutor
+ * - execution.protocol=mcp 且 toolRuntime=server → McpToolExecutor（FOUNDATION_SERVICE_URL）
+ * - 其余 execution.protocol=mcp → DevMcpExecutor（直连 server.url / stdio）
  * - execution.protocol=http → DevHttpExecutor
  * - 能解析出 code handler → LocalToolExecutor
  * - 其余 → NOT_CONFIGURED
@@ -13,11 +14,14 @@ import { DevMcpExecutor } from './dev-mcp-executor.js';
 import type { IToolExecutor, McpListedTool, ToolCallRequest, ToolCallResult } from './tool-executor.interface.js';
 export interface DevToolExecutorOptions {
     mcp?: ConstructorParameters<typeof DevMcpExecutor>[0];
+    /** 绝对 http(s)。仅 toolRuntime=server 的 MCP 使用；缺省不直连 server.url。 */
+    foundationUrl?: string;
 }
 export declare class DevToolExecutor implements IToolExecutor {
     private readonly mcp;
     private readonly http;
     private readonly local;
+    private readonly gateway;
     constructor(options?: DevToolExecutorOptions);
     execute(request: ToolCallRequest): Promise<ToolCallResult>;
     listTools(request: ToolCallRequest): Promise<McpListedTool[]>;

package/dist/tool/dev-tool-executor.js

@@ -4,7 +4,8 @@
  * 仅在 `EAP_TOOL_EXECUTION_MODE=mcp` 且 `deploymentContext=dev` 装配。
  * 按清单分流，缺配置则失败，不回落 mock。
  *
- * - execution.protocol=mcp → DevMcpExecutor
+ * - execution.protocol=mcp 且 toolRuntime=server → McpToolExecutor（FOUNDATION_SERVICE_URL）
+ * - 其余 execution.protocol=mcp → DevMcpExecutor（直连 server.url / stdio）
  * - execution.protocol=http → DevHttpExecutor
  * - 能解析出 code handler → LocalToolExecutor
  * - 其余 → NOT_CONFIGURED
@@ -13,16 +14,37 @@ import { EmptyInstallStore } from './create-tool-executor.js';
 import { DevMcpExecutor } from './dev-mcp-executor.js';
 import { LocalToolExecutor, resolveCodeExecutionFromRequest, } from './local-tool-executor.js';
 import { DevHttpExecutor, resolveHttpExecutionFromRequest } from './dev-http-executor.js';
+import { isAbsoluteHttpUrl, McpToolExecutor } from './mcp-tool-executor.js';
 export class DevToolExecutor {
     mcp;
     http;
     local;
+    gateway;
     constructor(options = {}) {
         this.mcp = new DevMcpExecutor(options.mcp);
         this.http = new DevHttpExecutor();
         this.local = new LocalToolExecutor({ installStore: new EmptyInstallStore() });
+        const foundationUrl = options.foundationUrl?.trim();
+        this.gateway = foundationUrl && isAbsoluteHttpUrl(foundationUrl)
+            ? new McpToolExecutor({ baseUrl: foundationUrl })
+            : undefined;
     }
     async execute(request) {
+        if (hasMcpExecution(request.execution) && request.toolRuntime === 'server') {
+            if (!this.gateway) {
+                return {
+                    toolCallId: request.toolCallId,
+                    toolName: request.toolName,
+                    content: '',
+                    success: false,
+                    error: `Dev MCP: tool "${request.toolName}" is toolRuntime=server and requires ` +
+                        'FOUNDATION_SERVICE_URL (absolute http(s)); refusing to dial server.url',
+                    errorCode: 'NOT_CONFIGURED',
+                    runtime: 'local',
+                };
+            }
+            return this.gateway.execute(request);
+        }
         if (hasMcpExecution(request.execution)) {
             return this.mcp.execute(request);
         }
@@ -48,6 +70,13 @@ export class DevToolExecutor {
         };
     }
     async listTools(request) {
+        if (hasMcpExecution(request.execution) && request.toolRuntime === 'server') {
+            if (!this.gateway) {
+                throw new Error(`Dev MCP: tool "${request.toolName}" is toolRuntime=server and requires ` +
+                    'FOUNDATION_SERVICE_URL (absolute http(s)); refusing to dial server.url');
+            }
+            return this.gateway.listTools(request);
+        }
         if (hasMcpExecution(request.execution)) {
             return this.mcp.listTools(request);
         }

package/dist/tool/harness-primitives.js

@@ -34,16 +34,29 @@ function harnessDefinitions() {
             manifest: {
                 id: 'builtin:read_file',
                 name: 'read_file',
-                description: '读取当前用户目录或预装 tools/skills 内的文本。要用某个技能时读该技能文件夹下的 SKILL.md。超限会截断并注明。',
+                description: '读取文本文件，成功时工具结果就是文件正文（纯文本，不是 JSON）。可读当前用户目录或预装 tools/skills；要用技能时读该技能目录下的 SKILL.md。大文件先整段读，若被截断（正文末尾会注明 truncated），再用 offset/limit 分段。路径越权或文件不存在会失败。不要用来读图/PDF 等二进制。写文件请用 write_file 或 append_to_file。',
                 ...common,
             },
             inputSchema: {
                 type: 'object',
+                additionalProperties: false,
                 required: ['path'],
                 properties: {
-                    path: { type: 'string', description: '相对工作目录或技能根的路径' },
-                    offset: { type: 'integer', description: '从第几行开始读，从 1 起。省略则从头。' },
-                    limit: { type: 'integer', description: '最多读多少行。省略则读到末尾或字节上限。' },
+                    path: {
+                        type: 'string',
+                        minLength: 1,
+                        description: '相对路径，例如 notes/todo.md 或 some-skill/SKILL.md。不能用 .. 跳出允许目录。',
+                    },
+                    offset: {
+                        type: 'integer',
+                        minimum: 1,
+                        description: '从第几行开始读，从 1 起。省略则从头。只在大文件分段时用。',
+                    },
+                    limit: {
+                        type: 'integer',
+                        minimum: 1,
+                        description: '最多读多少行。省略则读到末尾或字节上限。只在大文件分段时用。',
+                    },
                 },
             },
         },
@@ -53,15 +66,23 @@ function harnessDefinitions() {
             manifest: {
                 id: 'builtin:write_file',
                 name: 'write_file',
-                description: '写入当前用户目录（含用户自己的 skills）。预装 tools / skills 只读。覆盖已有文件。',
+                description: '把文本整份写入当前用户目录（含用户自己的 skills）。没有该文件则创建；已有文件会整份换成 content，不是改某一行。只要在末尾加内容请用 append_to_file。不能写预装 tools/skills，不能写 .assembly.json 等平台文件。成功时工具结果是 JSON：{"ok":true,"path":"相对用户目录的路径","bytesWritten":字节数}。路径越权或禁写文件名会失败。',
                 ...common,
             },
             inputSchema: {
                 type: 'object',
+                additionalProperties: false,
                 required: ['path', 'content'],
                 properties: {
-                    path: { type: 'string' },
-                    content: { type: 'string' },
+                    path: {
+                        type: 'string',
+                        minLength: 1,
+                        description: '相对当前用户目录的路径，例如 notes/todo.md。不能写预装 tools/skills。',
+                    },
+                    content: {
+                        type: 'string',
+                        description: '文件的完整新内容。会覆盖原文件全部内容。',
+                    },
                 },
             },
         },
@@ -71,15 +92,23 @@ function harnessDefinitions() {
             manifest: {
                 id: 'builtin:append_to_file',
                 name: 'append_to_file',
-                description: '向当前用户目录内的文件追加文本。文件不存在则创建。预装 tools / skills 只读。',
+                description: '在当前用户目录的文件末尾追加文本，不覆盖已有内容。没有该文件则创建。不要用它整份改写文件，那是 write_file。不能写预装 tools/skills，不能写 .assembly.json 等平台文件。成功时工具结果是 JSON：{"ok":true,"path":"相对用户目录的路径","bytesWritten":本次追加字节数}。路径越权或禁写文件名会失败。',
                 ...common,
             },
             inputSchema: {
                 type: 'object',
+                additionalProperties: false,
                 required: ['path', 'content'],
                 properties: {
-                    path: { type: 'string' },
-                    content: { type: 'string' },
+                    path: {
+                        type: 'string',
+                        minLength: 1,
+                        description: '相对当前用户目录的路径，例如 notes/todo.md。不能写预装 tools/skills。',
+                    },
+                    content: {
+                        type: 'string',
+                        description: '接到文件末尾的文本。不会删除或替换原有内容。',
+                    },
                 },
             },
         },
@@ -441,7 +470,7 @@ export class HarnessPrimitiveExecutor {
         }
     }
     async readFile(request) {
-        const filePath = String(request.arguments.path ?? request.arguments.file ?? '');
+        const filePath = String(request.arguments.path ?? '');
         const workdir = this.workdirFor(request);
         const located = locateSkillRelativeRead(filePath, workdir, request.skillDir, this.extraRootsFor(request));
         const target = resolveJailedPath(located.path, this.rootsFor(request), {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gt-fe/eap-runtime",
-  "version": "0.0.26",
+  "version": "0.0.28",
   "description": "Enterprise Agent Platform — Runtime核心：Graph执行引擎、Task生命周期、Session管理、Checkpoint持久化",
   "type": "module",
   "main": "dist/index.js",