@tool-bridge/server 0.13.1 → 0.15.0

package/dist/{chunk-EF33TVRV.js → chunk-DXXYNIXV.js}

@@ -16822,13 +16822,15 @@ function createBuiltins(deps) {
 
 // ../core/src/context/help.ts
 var CONTEXT_CAPABILITIES = ["search", "delete"];
+var CONTEXT_DIRECT_UPLOAD_CAPABILITY = "direct-upload";
 var SCOPE_BY_CMD = {
   list: "read",
   get: "read",
   search: "read",
   write: "write",
   update: "write",
-  delete: "write"
+  delete: "write",
+  create_upload: "write"
 };
 function contextScopeForCmd(command) {
   return SCOPE_BY_CMD[command] ?? null;
@@ -16976,6 +16978,29 @@ function contextCmds(nodePath) {
   ];
   return withCommandPaths(nodePath, cmds);
 }
+function contextUploadCmd(nodePath) {
+  return withCommandPaths(nodePath, [{
+    name: "create_upload",
+    method: "POST",
+    path: cmdPath(nodePath),
+    h: "create a short-lived, path-scoped direct-upload grant; persist the returned uri, not url",
+    inputSchema: {
+      type: "object",
+      required: ["path", "contentType"],
+      properties: {
+        path: { type: "string", description: "target entry path inside the namespace" },
+        contentType: { type: "string", description: "media type signed into the PUT request" },
+        overwrite: {
+          type: "boolean",
+          description: "allow replacing an existing object; default false"
+        }
+      }
+    },
+    returns: "ContextUploadGrant",
+    scope: "write",
+    effect: "write"
+  }])[0];
+}
 function contextHelpModel(node, opts = {}) {
   const all = contextCmds(node.path);
   const present = opts.methods === void 0 ? all : all.filter((c) => opts.methods?.has(c.name));
@@ -17075,8 +17100,59 @@ function normalizeEntryPath(path) {
 // ../core/src/context/objectProvider.ts
 var REF_THRESHOLD_BYTES_DEFAULT = 1024 * 1024;
 var PRESIGN_TTL_SEC_DEFAULT = 900;
+var PRESIGN_TTL_SEC_MAX = 604800;
+function assertPresignTtlSec(ttlSec) {
+  if (!Number.isInteger(ttlSec) || ttlSec < 1 || ttlSec > PRESIGN_TTL_SEC_MAX) {
+    throw new TBError(
+      "invalid_argument",
+      `presign TTL \u5FC5\u987B\u662F 1..${PRESIGN_TTL_SEC_MAX} \u7684\u6574\u6570\u79D2`
+    );
+  }
+  return ttlSec;
+}
 var SEARCH_METADATA_HEAD_MAX = 200;
 var DIRECTORY_CONTENT_TYPE = "application/x-directory";
+async function createObjectContextUploadGrant(store, opts, input) {
+  if (opts.readOnly === true) {
+    throw new TBError("permission_denied", "readOnly \u6302\u8F7D\u62D2\u7EDD create_upload");
+  }
+  if (store.presignPut === void 0) {
+    throw new TBError("unavailable", "\u5BF9\u8C61\u5B58\u50A8\u672A\u914D\u7F6E\u76F4\u4F20\u7B7E\u540D\u80FD\u529B", { retryable: false });
+  }
+  if (typeof input?.path !== "string") {
+    throw new TBError("invalid_argument", "create_upload \u9700\u8981\u5B57\u7B26\u4E32 'path'");
+  }
+  if (input.overwrite !== void 0 && typeof input.overwrite !== "boolean") {
+    throw new TBError("invalid_argument", "create_upload \u7684 'overwrite' \u5FC5\u987B\u662F boolean");
+  }
+  const unknownKeys = Object.keys(input).filter(
+    (key2) => key2 !== "path" && key2 !== "contentType" && key2 !== "overwrite"
+  );
+  if (unknownKeys.length > 0) {
+    throw new TBError("invalid_argument", `create_upload \u542B\u672A\u77E5\u5B57\u6BB5:${unknownKeys.join(",")}`);
+  }
+  if (typeof input?.contentType !== "string" || input.contentType.trim() === "" || input.contentType.length > 255 || !input.contentType.includes("/") || /[\r\n\0]/.test(input.contentType)) {
+    throw new TBError("invalid_argument", "create_upload \u9700\u8981\u5408\u6CD5\u7684 'contentType'");
+  }
+  const nsPath = normalizePath(opts.nsPath);
+  const entryPath = normalizeEntryPath(input.path);
+  const keyPrefixBare = opts.keyPrefix?.replace(/^\/+|\/+$/g, "") ?? "";
+  const key = `${keyPrefixBare === "" ? "" : `${keyPrefixBare}/`}${entryPath}`;
+  const ttlSec = assertPresignTtlSec(opts.uploadGrantTtlSec ?? PRESIGN_TTL_SEC_DEFAULT);
+  const contentType = input.contentType.trim();
+  const expiresAt = new Date(Date.now() + ttlSec * 1e3).toISOString();
+  const signed = await store.presignPut(key, ttlSec, {
+    contentType,
+    ...input.overwrite === true ? {} : { ifNoneMatch: "*" }
+  });
+  return {
+    uri: `node://${nsPath}/${entryPath}`,
+    method: "PUT",
+    url: signed.url,
+    headers: signed.headers,
+    expiresAt
+  };
+}
 function clampLimit3(limit) {
   if (limit === void 0) return LIST_LIMIT_DEFAULT;
   if (!Number.isInteger(limit) || limit < 1) {
@@ -18476,6 +18552,8 @@ var TOOL_SEARCH_SNAPSHOT_CHUNKS_MAX = Math.ceil(
 );
 var TOOL_SEARCH_REBUILD_CHUNKS_MAX = TOOL_SEARCH_SOURCE_CHUNKS_MAX + TOOL_SEARCH_SNAPSHOT_CHUNKS_MAX;
 var TOOL_SEARCH_TERM_LIMIT = 32;
+var TOOL_SEARCH_UNIT_LIMIT = 98;
+var TOOL_SEARCH_LIKE_PATTERN_BYTES_MAX = 50;
 var TOOL_SEARCH_QUERY_MAX = 1024;
 var TOOL_SEARCH_CURSOR_OFFSET_MAX = 1e6;
 function assertKeywordToolSearchMode(opts) {
@@ -18643,25 +18721,70 @@ function likePattern(term) {
   const escaped = term.replaceAll("!", "!!").replaceAll("%", "!%").replaceAll("_", "!_");
   return `%${escaped}%`;
 }
-function toolSearchLikePatterns(query) {
-  const terms = normalizeToolSearchQuery(query).split(/\s+/u);
-  if (terms.length > TOOL_SEARCH_TERM_LIMIT) {
-    throw new TBError("invalid_argument", `\u641C\u7D22 query \u6700\u591A ${TOOL_SEARCH_TERM_LIMIT} \u4E2A terms`);
+function likePatternBytes(term) {
+  return new TextEncoder().encode(likePattern(term)).length;
+}
+function isCjkCodePoint(value) {
+  return new RegExp("^(?:\\p{Script=Han}|\\p{Script=Hiragana}|\\p{Script=Katakana}|\\p{Script=Hangul})$", "u").test(value);
+}
+function scriptRuns(term) {
+  const runs = [];
+  for (const codePoint of term) {
+    const cjk = isCjkCodePoint(codePoint);
+    const current = runs.at(-1);
+    if (current?.cjk === cjk) current.codePoints.push(codePoint);
+    else runs.push({ cjk, codePoints: [codePoint] });
+  }
+  return runs;
+}
+function addSearchUnit(units, value, tier) {
+  const pattern = likePattern(value);
+  if (new TextEncoder().encode(pattern).length > TOOL_SEARCH_LIKE_PATTERN_BYTES_MAX) return false;
+  const existing = units.get(pattern);
+  if (existing === void 0 || tier > existing.tier) {
+    units.set(pattern, { pattern, tier });
   }
-  return terms.map(likePattern);
+  return true;
 }
-function prepareToolSearchQuery(query) {
-  const normalized = normalizeToolSearchQuery(query);
-  const terms = normalized.split(/\s+/u);
+function addChunkedSearchUnits(units, value, tier) {
+  let chunk = "";
+  for (const codePoint of value) {
+    if (likePatternBytes(chunk + codePoint) <= TOOL_SEARCH_LIKE_PATTERN_BYTES_MAX) {
+      chunk += codePoint;
+      continue;
+    }
+    if (chunk.length > 0) addSearchUnit(units, chunk, tier);
+    chunk = codePoint;
+  }
+  if (chunk.length > 0) addSearchUnit(units, chunk, tier);
+}
+function prepareToolSearchUnits(query) {
+  const terms = normalizeToolSearchQuery(query).split(/\s+/u);
   if (terms.length > TOOL_SEARCH_TERM_LIMIT) {
     throw new TBError("invalid_argument", `\u641C\u7D22 query \u6700\u591A ${TOOL_SEARCH_TERM_LIMIT} \u4E2A terms`);
   }
-  const short = terms.filter((term) => Array.from(term).length < 3);
-  const long = terms.filter((term) => Array.from(term).length >= 3);
-  const patterns = short.map(likePattern);
-  if (long.length === 0) return { kind: "like", patterns };
-  const expression = long.map((term) => `"${term.replaceAll('"', '""')}"`).join(" ");
-  return patterns.length === 0 ? { kind: "fts", expression } : { kind: "hybrid", expression, patterns };
+  const units = /* @__PURE__ */ new Map();
+  for (const term of terms) {
+    const wholeAdded = addSearchUnit(units, term, 4);
+    const runs = scriptRuns(term);
+    if (runs.length > 1) {
+      for (const run of runs) {
+        const value = run.codePoints.join("");
+        if (run.cjk) addSearchUnit(units, value, 2);
+        else addChunkedSearchUnits(units, value, 2);
+      }
+    } else if (!wholeAdded && runs[0]?.cjk === false) {
+      addChunkedSearchUnits(units, term, 2);
+    }
+    for (const run of runs) {
+      if (!run.cjk) continue;
+      for (let index = 0; index < run.codePoints.length - 1; index += 1) {
+        addSearchUnit(units, run.codePoints.slice(index, index + 2).join(""), 2);
+      }
+      for (const codePoint of run.codePoints) addSearchUnit(units, codePoint, 1);
+    }
+  }
+  return [...units.values()].sort((left, right) => right.tier - left.tier).slice(0, TOOL_SEARCH_UNIT_LIMIT);
 }
 function cursorBase64UrlDecode(value) {
   if (value.length === 0 || value.length > 4096) {
@@ -18734,35 +18857,9 @@ async function decodeToolSearchCursor(cursor, query, mode, revision, secret) {
   return payload.o ?? 0;
 }
 
-// ../core/src/search/shortTermSql.ts
-function shortTermsSql(patterns) {
-  return `short_terms(pattern) AS (VALUES ${patterns.map(() => "(?)").join(", ")})`;
-}
-var SHORT_MATCH_SQL = `
-NOT EXISTS (
-  SELECT 1 FROM short_terms
-  WHERE tools.name NOT LIKE pattern ESCAPE '!'
-    AND tools.description NOT LIKE pattern ESCAPE '!'
-    AND tools.feedback NOT LIKE pattern ESCAPE '!'
-)
-`;
-var SHORT_SCORE_SQL = `
-(
-  SELECT COALESCE(SUM(
-    CASE
-      WHEN tools.name LIKE pattern ESCAPE '!' THEN 10
-      WHEN tools.description LIKE pattern ESCAPE '!' THEN 3
-      WHEN tools.feedback LIKE pattern ESCAPE '!' THEN 1
-      ELSE 0
-    END
-  ), 0)
-  FROM short_terms
-)
-`;
-
 // ../core/src/search/sqlSearchIndex.ts
 var TOOL_SEARCH_SCHEMA_STATEMENTS = [
-  `CREATE TABLE IF NOT EXISTS tb_search_tools_v3 (
+  `CREATE TABLE IF NOT EXISTS tb_search_tools_v4 (
     id INTEGER PRIMARY KEY,
     path TEXT NOT NULL,
     name TEXT NOT NULL,
@@ -18770,135 +18867,99 @@ var TOOL_SEARCH_SCHEMA_STATEMENTS = [
     feedback TEXT NOT NULL DEFAULT '',
     UNIQUE(path, name)
   )`,
-  `CREATE VIRTUAL TABLE IF NOT EXISTS tb_search_tools_fts_v3 USING fts5(
-    name,
-    description,
-    feedback,
-    content='tb_search_tools_v3',
-    content_rowid='id',
-    tokenize='trigram'
-  )`,
-  `CREATE TRIGGER IF NOT EXISTS tb_search_tools_v3_ai AFTER INSERT ON tb_search_tools_v3 BEGIN
-    INSERT INTO tb_search_tools_fts_v3(rowid, name, description, feedback)
-    VALUES (new.id, new.name, new.description, new.feedback);
-  END`,
-  `CREATE TRIGGER IF NOT EXISTS tb_search_tools_v3_ad AFTER DELETE ON tb_search_tools_v3 BEGIN
-    INSERT INTO tb_search_tools_fts_v3(tb_search_tools_fts_v3, rowid, name, description, feedback)
-    VALUES ('delete', old.id, old.name, old.description, old.feedback);
-  END`,
-  `CREATE TRIGGER IF NOT EXISTS tb_search_tools_v3_au
-  AFTER UPDATE OF name, description, feedback ON tb_search_tools_v3 BEGIN
-    INSERT INTO tb_search_tools_fts_v3(tb_search_tools_fts_v3, rowid, name, description, feedback)
-    VALUES ('delete', old.id, old.name, old.description, old.feedback);
-    INSERT INTO tb_search_tools_fts_v3(rowid, name, description, feedback)
-    VALUES (new.id, new.name, new.description, new.feedback);
-  END`,
-  `CREATE TABLE IF NOT EXISTS tb_search_meta_v3 (
+  `CREATE TABLE IF NOT EXISTS tb_search_meta_v4 (
     singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
     revision INTEGER NOT NULL DEFAULT 0,
     seeded INTEGER NOT NULL DEFAULT 0,
     cursor_secret TEXT NOT NULL
   )`,
-  `INSERT OR IGNORE INTO tb_search_meta_v3(
+  `INSERT OR IGNORE INTO tb_search_meta_v4(
     singleton, revision, seeded, cursor_secret
   ) VALUES (1, 0, 0, lower(hex(randomblob(32))))`,
-  `CREATE TABLE IF NOT EXISTS tb_search_snapshots_v3 (
+  `CREATE TABLE IF NOT EXISTS tb_search_snapshots_v4 (
     path TEXT PRIMARY KEY,
     digest TEXT NOT NULL
   )`,
-  `CREATE TRIGGER IF NOT EXISTS tb_search_snapshots_v3_capacity
-  BEFORE INSERT ON tb_search_snapshots_v3
+  `CREATE TRIGGER IF NOT EXISTS tb_search_snapshots_v4_capacity
+  BEFORE INSERT ON tb_search_snapshots_v4
   WHEN NOT EXISTS (
-    SELECT 1 FROM tb_search_snapshots_v3 WHERE path = new.path
-  ) AND (SELECT COUNT(*) FROM tb_search_snapshots_v3) >= ${TOOL_SEARCH_AUDIT_NODE_LIMIT}
+    SELECT 1 FROM tb_search_snapshots_v4 WHERE path = new.path
+  ) AND (SELECT COUNT(*) FROM tb_search_snapshots_v4) >= ${TOOL_SEARCH_AUDIT_NODE_LIMIT}
   BEGIN
     SELECT RAISE(ABORT, 'tb_search_path_capacity');
   END`
 ];
 var TOOL_SEARCH_CAPACITY_MARKER = "tb_search_path_capacity";
 var TOOL_SEARCH_INSERT_SQL = `
-INSERT INTO tb_search_tools_v3 (path, name, description, feedback)
+INSERT INTO tb_search_tools_v4 (path, name, description, feedback)
 VALUES (?, ?, ?, ?)
 `;
-var TOOL_SEARCH_INSERT_SNAPSHOT_SQL = "INSERT INTO tb_search_snapshots_v3(path, digest) VALUES (?, ?)";
-var META_SQL = "SELECT revision, seeded, cursor_secret FROM tb_search_meta_v3 WHERE singleton = 1";
-var SNAPSHOT_DIGESTS_SQL = "SELECT path, digest FROM tb_search_snapshots_v3 ORDER BY path";
+var TOOL_SEARCH_INSERT_SNAPSHOT_SQL = "INSERT INTO tb_search_snapshots_v4(path, digest) VALUES (?, ?)";
+var META_SQL = "SELECT revision, seeded, cursor_secret FROM tb_search_meta_v4 WHERE singleton = 1";
+var SNAPSHOT_DIGESTS_SQL = "SELECT path, digest FROM tb_search_snapshots_v4 ORDER BY path";
 var PATH_STATE_SQL = `
 SELECT snapshots.digest,
-  EXISTS(SELECT 1 FROM tb_search_tools_v3 WHERE path = ?) AS has_tools,
-  (SELECT COUNT(*) FROM tb_search_snapshots_v3) AS path_count
+  EXISTS(SELECT 1 FROM tb_search_tools_v4 WHERE path = ?) AS has_tools,
+  (SELECT COUNT(*) FROM tb_search_snapshots_v4) AS path_count
 FROM (SELECT 1) AS singleton
-LEFT JOIN tb_search_snapshots_v3 AS snapshots ON snapshots.path = ?
+LEFT JOIN tb_search_snapshots_v4 AS snapshots ON snapshots.path = ?
 `;
-var PRESENT_SQL = "SELECT 1 AS present FROM tb_search_tools_v3 WHERE path = ? LIMIT 1";
+var PRESENT_SQL = "SELECT 1 AS present FROM tb_search_tools_v4 WHERE path = ? LIMIT 1";
 var PRESENT_PREFIX_SQL = `
-SELECT 1 AS present FROM tb_search_tools_v3
+SELECT 1 AS present FROM tb_search_tools_v4
 WHERE path = ? OR substr(path, 1, length(?) + 1) = ? || '/'
 LIMIT 1
 `;
-var DELETE_TOOLS_SQL = "DELETE FROM tb_search_tools_v3 WHERE path = ?";
-var DELETE_SNAPSHOT_SQL = "DELETE FROM tb_search_snapshots_v3 WHERE path = ?";
+var DELETE_TOOLS_SQL = "DELETE FROM tb_search_tools_v4 WHERE path = ?";
+var DELETE_SNAPSHOT_SQL = "DELETE FROM tb_search_snapshots_v4 WHERE path = ?";
 var DELETE_TOOLS_PREFIX_SQL = `
-DELETE FROM tb_search_tools_v3
+DELETE FROM tb_search_tools_v4
 WHERE path = ? OR substr(path, 1, length(?) + 1) = ? || '/'
 `;
 var DELETE_SNAPSHOT_PREFIX_SQL = `
-DELETE FROM tb_search_snapshots_v3
+DELETE FROM tb_search_snapshots_v4
 WHERE path = ? OR substr(path, 1, length(?) + 1) = ? || '/'
 `;
-var DELETE_ALL_TOOLS_SQL = "DELETE FROM tb_search_tools_v3";
-var DELETE_ALL_SNAPSHOTS_SQL = "DELETE FROM tb_search_snapshots_v3";
-var BUMP_REVISION_SQL = "UPDATE tb_search_meta_v3 SET revision = revision + 1 WHERE singleton = 1";
-var COMPLETE_REBUILD_SQL = "UPDATE tb_search_meta_v3 SET seeded = 1, revision = revision + 1 WHERE singleton = 1";
-function toolSearchCandidateStatement(prepared, limit, offset) {
-  if (prepared.kind === "like") {
-    return {
-      params: [...prepared.patterns, limit + 1, offset],
-      sql: `
-        WITH ${shortTermsSql(prepared.patterns)}
-        SELECT tools.id, tools.path, tools.name, ${SHORT_SCORE_SQL} AS short_score
-        FROM tb_search_tools_v3 AS tools
-        WHERE ${SHORT_MATCH_SQL}
-        ORDER BY short_score DESC, tools.path, tools.name
-        LIMIT ? OFFSET ?
-      `
-    };
-  }
-  if (prepared.kind === "hybrid") {
-    return {
-      params: [...prepared.patterns, prepared.expression, limit + 1, offset],
-      sql: `
-        WITH ${shortTermsSql(prepared.patterns)},
-        long_hits AS (
-          SELECT tools.id, bm25(tb_search_tools_fts_v3, 10.0, 3.0, 1.0) AS fts_rank
-          FROM tb_search_tools_fts_v3
-          JOIN tb_search_tools_v3 AS tools ON tools.id = tb_search_tools_fts_v3.rowid
-          WHERE tb_search_tools_fts_v3 MATCH ?
-        )
-        SELECT tools.id, tools.path, tools.name, long_hits.fts_rank,
-          ${SHORT_SCORE_SQL} AS short_score
-        FROM long_hits
-        JOIN tb_search_tools_v3 AS tools ON tools.id = long_hits.id
-        WHERE ${SHORT_MATCH_SQL}
-        ORDER BY long_hits.fts_rank, short_score DESC, tools.path, tools.name
-        LIMIT ? OFFSET ?
-      `
-    };
-  }
+var DELETE_ALL_TOOLS_SQL = "DELETE FROM tb_search_tools_v4";
+var DELETE_ALL_SNAPSHOTS_SQL = "DELETE FROM tb_search_snapshots_v4";
+var BUMP_REVISION_SQL = "UPDATE tb_search_meta_v4 SET revision = revision + 1 WHERE singleton = 1";
+var COMPLETE_REBUILD_SQL = "UPDATE tb_search_meta_v4 SET seeded = 1, revision = revision + 1 WHERE singleton = 1";
+function toolSearchCandidateStatement(units, limit, offset, syntax) {
+  const values = units.map((unit, index) => `(${syntax.placeholder(index + 1)}, ${unit.tier})`).join(", ");
+  const limitParam = syntax.placeholder(units.length + 1);
+  const offsetParam = syntax.placeholder(units.length + 2);
+  const like = syntax.likeOperator;
   return {
-    params: [prepared.expression, limit + 1, offset],
+    params: [...units.map((unit) => unit.pattern), limit + 1, offset],
     sql: `
-      SELECT tools.id, tools.path, tools.name
-      FROM tb_search_tools_fts_v3
-      JOIN tb_search_tools_v3 AS tools ON tools.id = tb_search_tools_fts_v3.rowid
-      WHERE tb_search_tools_fts_v3 MATCH ?
-      ORDER BY bm25(tb_search_tools_fts_v3, 10.0, 3.0, 1.0), tools.path, tools.name
-      LIMIT ? OFFSET ?
+      WITH units(pattern, tier) AS (VALUES ${values})
+      SELECT * FROM (
+        SELECT tools.id, tools.path, tools.name,
+          (
+            SELECT COALESCE(SUM(units.tier * CASE
+              WHEN tools.name ${like} units.pattern ESCAPE '!' THEN 10
+              WHEN tools.path ${like} units.pattern ESCAPE '!' THEN 5
+              WHEN tools.description ${like} units.pattern ESCAPE '!' THEN 3
+              WHEN tools.feedback ${like} units.pattern ESCAPE '!' THEN 1
+              ELSE 0
+            END), 0)
+            FROM units
+          ) AS score
+        FROM tb_search_tools_v4 AS tools
+      ) AS scored_tools
+      WHERE score > 0
+      ORDER BY score DESC, path, name
+      LIMIT ${limitParam} OFFSET ${offsetParam}
     `
   };
 }
 var sqliteSearchDialect = {
-  candidateStatement: (query, limit, offset) => toolSearchCandidateStatement(prepareToolSearchQuery(query), limit, offset),
+  candidateStatement: (query, limit, offset) => toolSearchCandidateStatement(
+    prepareToolSearchUnits(query),
+    limit,
+    offset,
+    { likeOperator: "LIKE", placeholder: () => "?" }
+  ),
   schemaStatements: TOOL_SEARCH_SCHEMA_STATEMENTS,
   statements: {
     bumpRevision: BUMP_REVISION_SQL,
@@ -19084,7 +19145,7 @@ var SqlSearchIndex = class {
 
 // ../core/src/search/pgSearchDialect.ts
 var PG_SEARCH_SCHEMA_STATEMENTS = [
-  `CREATE TABLE IF NOT EXISTS tb_search_tools_v3 (
+  `CREATE TABLE IF NOT EXISTS tb_search_tools_v4 (
     id bigint GENERATED ALWAYS AS IDENTITY PRIMARY KEY,
     path text NOT NULL,
     name text NOT NULL,
@@ -19092,13 +19153,11 @@ var PG_SEARCH_SCHEMA_STATEMENTS = [
     feedback text NOT NULL DEFAULT '',
     UNIQUE(path, name)
   )`,
-  // 这里**故意不建 trigram GIN 索引**。实测(4000 条记录 = 500 节点上限满载):
-  // 候选查询是"三列 ILIKE 用 OR 连接 + LIMIT",规划器一律选 Seq Scan(整表仅 1 个
-  // buffer),GIN 索引一次都没被使用;而它让插入从 13.7ms 涨到 75.8ms(5.5×)、表总大小
-  // 从 1072 kB 涨到 7208 kB(6.7×),检索却仍是 0.50 vs 0.53ms —— 纯负担。
-  // 索引记录数受 TOOL_SEARCH_AUDIT_NODE_LIMIT 硬顶约束,不会增长到需要索引的规模;
-  // 若将来放宽该上限,应连同候选查询形状(拆成 UNION 或改单列检索列)一起重新评估。
-  `CREATE TABLE IF NOT EXISTS tb_search_meta_v3 (
+  // 这里**故意不建 trigram GIN 索引**。历史基准在 500 节点 × 8 工具(4000 行)
+  // 样本上对单 unit 多列 ILIKE 一律选 Seq Scan；GIN 让写入和体积显著增加却未改善
+  // 检索。4000 行只是代表样本，不是严格工具行上限（节点内还受 20KB JSON 约束）；
+  // 查询单元数或容量边界变化时，应重跑 searchBench 并重新评估查询形状与索引。
+  `CREATE TABLE IF NOT EXISTS tb_search_meta_v4 (
     singleton integer PRIMARY KEY CHECK (singleton = 1),
     revision bigint NOT NULL DEFAULT 0,
     seeded integer NOT NULL DEFAULT 0,
@@ -19106,32 +19165,32 @@ var PG_SEARCH_SCHEMA_STATEMENTS = [
   )`,
   // cursor_secret 需 64 hex(32 字节)。两个内置 gen_random_uuid() 去连字符正好 64
   // hex,避免依赖 pgcrypto 的 gen_random_bytes(自托管 PG 未必预装 pgcrypto)。
-  `INSERT INTO tb_search_meta_v3(singleton, revision, seeded, cursor_secret)
+  `INSERT INTO tb_search_meta_v4(singleton, revision, seeded, cursor_secret)
     VALUES (
       1, 0, 0,
       replace(gen_random_uuid()::text, '-', '') || replace(gen_random_uuid()::text, '-', '')
     )
     ON CONFLICT (singleton) DO NOTHING`,
-  `CREATE TABLE IF NOT EXISTS tb_search_snapshots_v3 (
+  `CREATE TABLE IF NOT EXISTS tb_search_snapshots_v4 (
     path text PRIMARY KEY,
     digest text NOT NULL
   )`,
-  `CREATE OR REPLACE FUNCTION tb_search_snapshots_v3_capacity()
+  `CREATE OR REPLACE FUNCTION tb_search_snapshots_v4_capacity()
     RETURNS trigger AS $$
     BEGIN
-      IF (SELECT COUNT(*) FROM tb_search_snapshots_v3) >= ${TOOL_SEARCH_AUDIT_NODE_LIMIT} THEN
+      IF (SELECT COUNT(*) FROM tb_search_snapshots_v4) >= ${TOOL_SEARCH_AUDIT_NODE_LIMIT} THEN
         RAISE EXCEPTION '${TOOL_SEARCH_CAPACITY_MARKER}';
       END IF;
       RETURN NEW;
     END;
     $$ LANGUAGE plpgsql`,
-  `DROP TRIGGER IF EXISTS tb_search_snapshots_v3_capacity_trg ON tb_search_snapshots_v3`,
-  `CREATE TRIGGER tb_search_snapshots_v3_capacity_trg
-    BEFORE INSERT ON tb_search_snapshots_v3
-    FOR EACH ROW EXECUTE FUNCTION tb_search_snapshots_v3_capacity()`
+  `DROP TRIGGER IF EXISTS tb_search_snapshots_v4_capacity_trg ON tb_search_snapshots_v4`,
+  `CREATE TRIGGER tb_search_snapshots_v4_capacity_trg
+    BEFORE INSERT ON tb_search_snapshots_v4
+    FOR EACH ROW EXECUTE FUNCTION tb_search_snapshots_v4_capacity()`
 ];
 var PG_SEARCH_WRITE_LOCK_KEY = 2069799624;
-var PG_SEARCH_INSERT_SNAPSHOT_SQL = "INSERT INTO tb_search_snapshots_v3(path, digest) VALUES ($1, $2)";
+var PG_SEARCH_INSERT_SNAPSHOT_SQL = "INSERT INTO tb_search_snapshots_v4(path, digest) VALUES ($1, $2)";
 function pgBulkInsertSql(table, columns, rows) {
   const tuples = [];
   for (let r = 0; r < rows; r++) {
@@ -19140,68 +19199,50 @@ function pgBulkInsertSql(table, columns, rows) {
   }
   return `INSERT INTO ${table} (${columns.join(", ")}) VALUES ${tuples.join(", ")}`;
 }
-var PG_SEARCH_TOOLS_TABLE = "tb_search_tools_v3";
+var PG_SEARCH_TOOLS_TABLE = "tb_search_tools_v4";
 var PG_SEARCH_TOOLS_COLUMNS = ["path", "name", "description", "feedback"];
-var PG_SEARCH_SNAPSHOTS_TABLE = "tb_search_snapshots_v3";
+var PG_SEARCH_SNAPSHOTS_TABLE = "tb_search_snapshots_v4";
 var PG_SEARCH_SNAPSHOTS_COLUMNS = ["path", "digest"];
 var PG_SEARCH_INSERT_ROWS_MAX = 1e3;
 var META_SQL2 = `
 SELECT revision::int AS revision, seeded::int AS seeded, cursor_secret
-FROM tb_search_meta_v3 WHERE singleton = 1
+FROM tb_search_meta_v4 WHERE singleton = 1
 `;
-var SNAPSHOT_DIGESTS_SQL2 = "SELECT path, digest FROM tb_search_snapshots_v3 ORDER BY path";
+var SNAPSHOT_DIGESTS_SQL2 = "SELECT path, digest FROM tb_search_snapshots_v4 ORDER BY path";
 var PATH_STATE_SQL2 = `
 SELECT snapshots.digest,
-  EXISTS(SELECT 1 FROM tb_search_tools_v3 WHERE path = $1)::int AS has_tools,
-  (SELECT COUNT(*) FROM tb_search_snapshots_v3)::int AS path_count
+  EXISTS(SELECT 1 FROM tb_search_tools_v4 WHERE path = $1)::int AS has_tools,
+  (SELECT COUNT(*) FROM tb_search_snapshots_v4)::int AS path_count
 FROM (SELECT 1) AS singleton
-LEFT JOIN tb_search_snapshots_v3 AS snapshots ON snapshots.path = $2
+LEFT JOIN tb_search_snapshots_v4 AS snapshots ON snapshots.path = $2
 `;
-var PRESENT_SQL2 = "SELECT 1 AS present FROM tb_search_tools_v3 WHERE path = $1 LIMIT 1";
+var PRESENT_SQL2 = "SELECT 1 AS present FROM tb_search_tools_v4 WHERE path = $1 LIMIT 1";
 var PRESENT_PREFIX_SQL2 = `
-SELECT 1 AS present FROM tb_search_tools_v3
+SELECT 1 AS present FROM tb_search_tools_v4
 WHERE path = $1 OR substr(path, 1, length($2) + 1) = $3 || '/'
 LIMIT 1
 `;
-var DELETE_TOOLS_SQL2 = "DELETE FROM tb_search_tools_v3 WHERE path = $1";
-var DELETE_SNAPSHOT_SQL2 = "DELETE FROM tb_search_snapshots_v3 WHERE path = $1";
+var DELETE_TOOLS_SQL2 = "DELETE FROM tb_search_tools_v4 WHERE path = $1";
+var DELETE_SNAPSHOT_SQL2 = "DELETE FROM tb_search_snapshots_v4 WHERE path = $1";
 var DELETE_TOOLS_PREFIX_SQL2 = `
-DELETE FROM tb_search_tools_v3
+DELETE FROM tb_search_tools_v4
 WHERE path = $1 OR substr(path, 1, length($2) + 1) = $3 || '/'
 `;
 var DELETE_SNAPSHOT_PREFIX_SQL2 = `
-DELETE FROM tb_search_snapshots_v3
+DELETE FROM tb_search_snapshots_v4
 WHERE path = $1 OR substr(path, 1, length($2) + 1) = $3 || '/'
 `;
-var DELETE_ALL_TOOLS_SQL2 = "DELETE FROM tb_search_tools_v3";
-var DELETE_ALL_SNAPSHOTS_SQL2 = "DELETE FROM tb_search_snapshots_v3";
-var BUMP_REVISION_SQL2 = "UPDATE tb_search_meta_v3 SET revision = revision + 1 WHERE singleton = 1";
-var COMPLETE_REBUILD_SQL2 = "UPDATE tb_search_meta_v3 SET seeded = 1, revision = revision + 1 WHERE singleton = 1";
-function pgCandidateStatement(query, limit, offset) {
-  const patterns = toolSearchLikePatterns(query);
-  const matchClauses = patterns.map((_, i) => {
-    const p = `$${i + 1}`;
-    return `(name ILIKE ${p} ESCAPE '!' OR description ILIKE ${p} ESCAPE '!' OR feedback ILIKE ${p} ESCAPE '!')`;
-  });
-  const scoreTerms = patterns.map((_, i) => {
-    const p = `$${i + 1}`;
-    return `CASE WHEN name ILIKE ${p} ESCAPE '!' THEN 10 WHEN description ILIKE ${p} ESCAPE '!' THEN 3 WHEN feedback ILIKE ${p} ESCAPE '!' THEN 1 ELSE 0 END`;
-  });
-  const limitParam = `$${patterns.length + 1}`;
-  const offsetParam = `$${patterns.length + 2}`;
-  return {
-    params: [...patterns, limit + 1, offset],
-    sql: `
-      SELECT id, path, name, (${scoreTerms.join(" + ")}) AS score
-      FROM tb_search_tools_v3
-      WHERE ${matchClauses.join(" AND ")}
-      ORDER BY score DESC, path, name
-      LIMIT ${limitParam} OFFSET ${offsetParam}
-    `
-  };
-}
+var DELETE_ALL_TOOLS_SQL2 = "DELETE FROM tb_search_tools_v4";
+var DELETE_ALL_SNAPSHOTS_SQL2 = "DELETE FROM tb_search_snapshots_v4";
+var BUMP_REVISION_SQL2 = "UPDATE tb_search_meta_v4 SET revision = revision + 1 WHERE singleton = 1";
+var COMPLETE_REBUILD_SQL2 = "UPDATE tb_search_meta_v4 SET seeded = 1, revision = revision + 1 WHERE singleton = 1";
 var pgSearchDialect = {
-  candidateStatement: pgCandidateStatement,
+  candidateStatement: (query, limit, offset) => toolSearchCandidateStatement(
+    prepareToolSearchUnits(query),
+    limit,
+    offset,
+    { likeOperator: "ILIKE", placeholder: (index) => `$${index}` }
+  ),
   schemaStatements: PG_SEARCH_SCHEMA_STATEMENTS,
   statements: {
     bumpRevision: BUMP_REVISION_SQL2,
@@ -20332,12 +20373,17 @@ export {
   parseNodeInput,
   createBuiltins,
   CONTEXT_CAPABILITIES,
+  CONTEXT_DIRECT_UPLOAD_CAPABILITY,
   contextScopeForCmd,
+  contextUploadCmd,
   contextHelpModel,
   objectBodyToBytes,
   bytesToObjectStream,
   normalizeEntryPath,
   PRESIGN_TTL_SEC_DEFAULT,
+  PRESIGN_TTL_SEC_MAX,
+  assertPresignTtlSec,
+  createObjectContextUploadGrant,
   createObjectContextProvider,
   isContextExpired,
   decodeDeviceFrame,

package/dist/{chunk-7KSQ6GMZ.js → chunk-KH663T3A.js}

@@ -1,6 +1,6 @@
 import {
   TBError
-} from "./chunk-EF33TVRV.js";
+} from "./chunk-DXXYNIXV.js";
 
 // ../plugins/src/_runtime/ipPolicy.ts
 function parseIpv4(value) {