@tool-bridge/server 0.17.0 → 0.20.0

package/dist/{graphhopper-TYFDJZWC.js → graphhopper-2MORXLOW.js}

@@ -1,6 +1,6 @@
 import {
   createProviderHttpClient
-} from "./chunk-WW2IMPQK.js";
+} from "./chunk-6X55ALDX.js";
 import {
   asJsonObject
 } from "./chunk-JXHMDBAY.js";
@@ -8,12 +8,12 @@ import {
   createProviderPlugin,
   requireApiKey,
   upstreamError
-} from "./chunk-YASUMV2K.js";
-import "./chunk-U5UHT7CX.js";
+} from "./chunk-6ANLYNFB.js";
+import "./chunk-3WL6EXYX.js";
 import {
   TBError,
   external_exports
-} from "./chunk-RVWZN3CI.js";
+} from "./chunk-WIGQCP6O.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/graphhopper/api.ts

package/dist/index.d.ts

@@ -68,6 +68,7 @@ interface Scope {
  *   sys:bootstrapped  → true(Admin SK 引导幂等标志)
  *   annotation:<path> → { text, updatedAt, updatedBy }(管理员 Path 补充说明)
  *   feedback:<path>   → FeedbackEntry[](Agent 使用反馈,单 key 整存)
+ *   deviceop:<sha256(deviceId)>:<operationId> → DeviceOperationRecord(revision CAS,密文 payload/result)
  *   store:object:<id>  → StoreObject(revision CAS)
  *   store:upload:<id>  → UploadSession(revision CAS)
  *   store:call-capability:<id> → CallUploadCapability(token 仅存 hash)
@@ -542,6 +543,8 @@ interface ContextProvider {
 interface ToolSpec {
     /** 危险操作二次确认;进 `~help` 的 confirm 行。 */
     confirm?: boolean;
+    /** 仅 device-backed tool 使用；mailbox/both 表示 invoke 可选择持久化交付。 */
+    delivery?: 'realtime' | 'mailbox' | 'both';
     /** 一句话描述;进 `~help` 的 `h` 行。上游可能不带 → 可缺省。 */
     description?: string;
     /** 副作用标记(read/write/destructive);进 `~help` 的 effect 行。 */
@@ -631,8 +634,36 @@ type DeviceCallResult = {
     error: TBErrorBody;
     ok: false;
 };
+/**
+ * 网关对一次 realtime 尝试的权威认知。
+ *
+ * - completed:设备明确返回 result（成功或业务错误）；
+ * - not_dispatched:call 帧确定没有交给设备，可安全改走 Mailbox；
+ * - unknown:call 帧已经发送或可能已经发送，但结果未收敛，不能自动重试/入队。
+ */
+type DeviceCallDisposition = 'completed' | 'not_dispatched' | 'unknown';
+interface DeviceCallAttempt {
+    disposition: DeviceCallDisposition;
+    result: DeviceCallResult;
+}
+
+interface RuntimeRemoteSettings {
+    allowInsecure: boolean;
+    allowlist: string[];
+    federatedSearch?: {
+        maxConcurrency?: number;
+        maxResponseBodyBytes?: number;
+        maxSources?: number;
+        minChildWorkMs?: number;
+        perHopReturnReserveMs?: number;
+        sessionTtlMs?: number;
+        totalDeadlineMs?: number;
+    };
+    instanceId?: string;
+    maxHops: number;
+}
 
-type SearchCapability = 'search' | 'search:semantic';
+type SearchCapability = 'search' | 'search:federated' | 'search:semantic';
 /** 全局工具搜索的完整结果；只在权限和可见性候选筛选后 hydrate。 */
 interface ToolSearchHit {
     path: TreePath;
@@ -640,26 +671,48 @@ interface ToolSearchHit {
 }
 /** adapter 返回的轻量候选；resumeOffset 仅在当前请求内传递，不暴露给协议调用方。 */
 interface ToolSearchCandidate {
+    /** 命中的原始 logical terms / 全部原始 logical terms；不按派生 unit 重复计数。 */
+    coverage: number;
+    matchedTermCount: number;
     name: string;
     path: TreePath;
     ref: string;
     resumeOffset: number;
     revision: number;
+    /** 仅供宿主在 canonical hydration 提前截页时续签同一搜索约束，不进入 wire。 */
+    searchOptionsFingerprint?: string;
+    totalTermCount: number;
 }
+type ToolSearchEffect = 'destructive' | 'read' | 'unknown' | 'write';
+type ToolSearchMatching = 'all' | 'best';
 interface ToolSearchOptions {
     cursor?: string;
+    effects?: ToolSearchEffect[];
     limit?: number;
+    matching?: ToolSearchMatching;
+    minCoverage?: number;
     mode?: 'keyword' | 'semantic';
+    pathPrefix?: TreePath;
+}
+/** 会改变候选集合或分页档位的规范化约束；cursor 必须绑定其完整指纹。 */
+interface NormalizedToolSearchOptions {
+    effects?: ToolSearchEffect[];
+    matching: ToolSearchMatching;
+    minCoverage?: number;
+    pathPrefix?: TreePath;
 }
 /** 宿主提供的全局工具索引；权限和虚拟化仍由 gateway 处理。 */
 interface SearchIndex {
     readonly capabilities: readonly SearchCapability[];
     cursorFor(query: string, candidate: ToolSearchCandidate, mode?: 'keyword' | 'semantic'): Promise<string>;
+    /** 联邦 continuation 的 topology binding；不实现的自定义 adapter 只能提供 local search。 */
+    revision?(): Promise<number | string>;
     search(query: string, opts?: ToolSearchOptions): Promise<Page<ToolSearchCandidate>>;
 }
 /** 索引持久层使用的轻量记录；完整 ToolSpec 只保留摘要，不进入派生数据库。 */
 interface SerializedToolSearchRecord {
     description: string;
+    effect: ToolSearchEffect;
     feedback: string;
     name: string;
     path: TreePath;
@@ -745,7 +798,7 @@ interface SqlSearchDialect {
      * 把已 normalize 的 query 变成候选查询语句(含排序与分页)。三后端共用查询单元
      * 展开和评分形态，方言只选择占位符语法与 LIKE/ILIKE。
      */
-    candidateStatement(query: string, limit: number, offset: number): SqlSearchStatement;
+    candidateStatement(query: string, limit: number, offset: number, constraints?: NormalizedToolSearchOptions): SqlSearchStatement;
     /** 建表(幂等),元素不带尾分号。 */
     readonly schemaStatements: readonly string[];
     /** 编排直接下发的固定语句。 */
@@ -786,6 +839,7 @@ declare class SqlSearchIndex implements MutableSearchIndex {
     private meta;
     private snapshotDigests;
     initialized(): Promise<boolean>;
+    revision(): Promise<number>;
     replace(path: TreePath, tools: readonly ToolSpec[], opts?: {
         feedback?: string;
     }): Promise<void>;
@@ -851,11 +905,22 @@ interface RemoteSettings {
     allowInsecure: boolean;
     /** baseUrl 的 host 后缀白名单;空数组 = 拒一切 remote。 */
     allowlist: string[];
+    /** 联邦 search 的部署级硬上限；客户端与下游 header 只能进一步收紧。 */
+    federatedSearch?: Partial<FederatedSearchSettings>;
     /** 本实例 X-TB-Via 标识;缺省用**入站请求 host** 派生(跨实例联邦须显式配置才能可靠去环)。 */
     instanceId?: string;
     /** X-TB-Via 跳数上限(缺省 4,由宿主适配层落默认)。 */
     maxHops: number;
 }
+interface FederatedSearchSettings {
+    maxConcurrency: number;
+    maxResponseBodyBytes: number;
+    maxSources: number;
+    minChildWorkMs: number;
+    perHopReturnReserveMs: number;
+    sessionTtlMs: number;
+    totalDeadlineMs: number;
+}
 
 /**
  * 宿主注入面与请求期公共类型。
@@ -877,8 +942,8 @@ interface DeviceInvokeRequest {
 }
 /** 设备通道宿主(CF = DeviceSession DO / Docker = ws)。 */
 interface DeviceChannel {
-    /** HTTP→WS 调用转发:结果为 DeviceCallResult 形状(设备侧 result 帧)。 */
-    invoke(deviceId: string, req: DeviceInvokeRequest): Promise<unknown>;
+    /** HTTP→WS 调用转发，并显式报告是否已 dispatch，供安全 Mailbox fallback 判定。 */
+    invoke(deviceId: string, req: DeviceInvokeRequest): Promise<DeviceCallAttempt>;
     /** WS 升级请求转交(/system/device/ws)。 */
     ws(deviceId: string, request: Request): Promise<Response>;
 }
@@ -1073,12 +1138,7 @@ interface ServerConfig {
     redisUrl?: string;
     refThresholdBytes?: number;
     refTtlSec?: number;
-    remote: {
-        allowInsecure: boolean;
-        allowlist: string[];
-        instanceId?: string;
-        maxHops: number;
-    };
+    remote: RuntimeRemoteSettings;
     /**
      * 本副本标识(TB_REPLICA_ID),路由表的 value。缺省用 hostname —— 容器平台上
      * 每个副本的 hostname 天然唯一;同机多进程需显式区分。
@@ -1180,7 +1240,7 @@ declare class DeviceRouter {
     constructor(replicaId: string, backend: DeviceRouterBackend, opts: {
         forwardTimeoutMs?: number;
         /** 收到转发来的调用时,在本副本执行(本地无该连接则返回 offline)。 */
-        onLocalCall: (deviceId: string, req: DeviceInvokeRequest) => Promise<DeviceCallResult>;
+        onLocalCall: (deviceId: string, req: DeviceInvokeRequest) => Promise<DeviceCallAttempt>;
         ttlSec?: number;
     });
     private get ttlSec();
@@ -1196,7 +1256,7 @@ declare class DeviceRouter {
      * 把调用转发给持有该设备的副本并等结果。
      * 无人持有 → null(调用方按 deviceOffline 处理)。
      */
-    forward(deviceId: string, req: DeviceInvokeRequest): Promise<DeviceCallResult | null>;
+    forward(deviceId: string, req: DeviceInvokeRequest): Promise<DeviceCallAttempt | null>;
     close(): Promise<void>;
     /** correlationId 的进程内序号(与 replicaId 组合后全局唯一)。 */
     private static seq;
@@ -1224,7 +1284,7 @@ declare class DeviceRouter {
  */
 
 /** router 回调本副本执行设备调用的签名。 */
-type DeviceLocalCall = (deviceId: string, req: DeviceInvokeRequest) => Promise<DeviceCallResult>;
+type DeviceLocalCall = (deviceId: string, req: DeviceInvokeRequest) => Promise<DeviceCallAttempt>;
 declare const DEVICE_WS_PATH = "/system/device/ws";
 declare class DeviceHub {
     private readonly store;
@@ -1259,7 +1319,7 @@ declare class DeviceHub {
      * 本地没有但配了 router → 问路由表并转发给持有者副本(socket 不可序列化,
      * 只能把调用送到 socket 所在进程)。都没有 → deviceOffline。
      */
-    invoke(deviceId: string, req: DeviceInvokeRequest): Promise<unknown>;
+    invoke(deviceId: string, req: DeviceInvokeRequest): Promise<DeviceCallAttempt>;
     /**
      * 只走本副本 socket 的调用执行。
      *

package/dist/index.js

@@ -12,9 +12,9 @@ import {
   configFromEnv,
   createDataObjectStore,
   createTbServer
-} from "./chunk-TLNUIPFZ.js";
-import "./chunk-U5UHT7CX.js";
-import "./chunk-RVWZN3CI.js";
+} from "./chunk-RVUERWUZ.js";
+import "./chunk-3WL6EXYX.js";
+import "./chunk-WIGQCP6O.js";
 import "./chunk-U67V476Y.js";
 export {
   DEVICE_FORWARD_TIMEOUT_MS,

package/dist/{ip2proxy-GJ4HXVXO.js → ip2proxy-R4K4KEMI.js}

@@ -1,17 +1,17 @@
 import {
   createProviderHttpClient
-} from "./chunk-WW2IMPQK.js";
+} from "./chunk-6X55ALDX.js";
 import "./chunk-JXHMDBAY.js";
 import {
   createProviderPlugin,
   requireApiKey,
   upstreamError
-} from "./chunk-YASUMV2K.js";
-import "./chunk-U5UHT7CX.js";
+} from "./chunk-6ANLYNFB.js";
+import "./chunk-3WL6EXYX.js";
 import {
   TBError,
   external_exports
-} from "./chunk-RVWZN3CI.js";
+} from "./chunk-WIGQCP6O.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/ip2proxy/schema.ts

package/dist/{ipgeolocation_io-OAGR6PRF.js → ipgeolocation_io-H4J55OGI.js}

@@ -1,6 +1,6 @@
 import {
   createProviderHttpClient
-} from "./chunk-WW2IMPQK.js";
+} from "./chunk-6X55ALDX.js";
 import {
   asJsonObject
 } from "./chunk-JXHMDBAY.js";
@@ -8,11 +8,11 @@ import {
   createProviderPlugin,
   requireApiKey,
   upstreamError
-} from "./chunk-YASUMV2K.js";
-import "./chunk-U5UHT7CX.js";
+} from "./chunk-6ANLYNFB.js";
+import "./chunk-3WL6EXYX.js";
 import {
   external_exports
-} from "./chunk-RVWZN3CI.js";
+} from "./chunk-WIGQCP6O.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/ipgeolocation_io/api.ts

package/dist/{ipqualityscore-BCKAMDGL.js → ipqualityscore-XGID4OHA.js}

@@ -1,17 +1,17 @@
 import {
   createProviderHttpClient
-} from "./chunk-WW2IMPQK.js";
+} from "./chunk-6X55ALDX.js";
 import "./chunk-JXHMDBAY.js";
 import {
   createProviderPlugin,
   requireApiKey,
   upstreamError
-} from "./chunk-YASUMV2K.js";
-import "./chunk-U5UHT7CX.js";
+} from "./chunk-6ANLYNFB.js";
+import "./chunk-3WL6EXYX.js";
 import {
   TBError,
   external_exports
-} from "./chunk-RVWZN3CI.js";
+} from "./chunk-WIGQCP6O.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/ipqualityscore/api.ts

package/dist/{jina_ai-N3NXRVIZ.js → jina_ai-7ZVDOR3Z.js}

@@ -1,6 +1,6 @@
 import {
   createProviderHttpClient
-} from "./chunk-WW2IMPQK.js";
+} from "./chunk-6X55ALDX.js";
 import {
   messageFrom
 } from "./chunk-JXHMDBAY.js";
@@ -8,11 +8,11 @@ import {
   createProviderPlugin,
   requireApiKey,
   upstreamError
-} from "./chunk-YASUMV2K.js";
-import "./chunk-U5UHT7CX.js";
+} from "./chunk-6ANLYNFB.js";
+import "./chunk-3WL6EXYX.js";
 import {
   external_exports
-} from "./chunk-RVWZN3CI.js";
+} from "./chunk-WIGQCP6O.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/jina_ai/api.ts

package/dist/{jira-CHLBKWLO.js → jira-CTIYZTT3.js}

@@ -1,6 +1,6 @@
 import {
   createProviderHttpClient
-} from "./chunk-WW2IMPQK.js";
+} from "./chunk-6X55ALDX.js";
 import {
   asJsonObject,
   booleanValue,
@@ -12,14 +12,14 @@ import {
   createProviderPlugin,
   requireCredential,
   upstreamError
-} from "./chunk-YASUMV2K.js";
+} from "./chunk-6ANLYNFB.js";
 import {
   assertPublicHttpUrl
-} from "./chunk-U5UHT7CX.js";
+} from "./chunk-3WL6EXYX.js";
 import {
   TBError,
   external_exports
-} from "./chunk-RVWZN3CI.js";
+} from "./chunk-WIGQCP6O.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/jira/api.ts

package/dist/{langsmith-OIKOTPY3.js → langsmith-ISP567FS.js}

@@ -1,6 +1,6 @@
 import {
   createProviderHttpClient
-} from "./chunk-WW2IMPQK.js";
+} from "./chunk-6X55ALDX.js";
 import {
   asJsonObject,
   compactDefined,
@@ -12,12 +12,12 @@ import {
   createProviderPlugin,
   requireApiKey,
   upstreamError
-} from "./chunk-YASUMV2K.js";
-import "./chunk-U5UHT7CX.js";
+} from "./chunk-6ANLYNFB.js";
+import "./chunk-3WL6EXYX.js";
 import {
   TBError,
   external_exports
-} from "./chunk-RVWZN3CI.js";
+} from "./chunk-WIGQCP6O.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/langsmith/api.ts

package/dist/{lemlist-VAKYPKS3.js → lemlist-OGKK272F.js}

@@ -1,6 +1,6 @@
 import {
   createProviderHttpClient
-} from "./chunk-WW2IMPQK.js";
+} from "./chunk-6X55ALDX.js";
 import {
   asJsonObject,
   compactDefined,
@@ -10,12 +10,12 @@ import {
   createProviderPlugin,
   requireApiKey,
   upstreamError
-} from "./chunk-YASUMV2K.js";
-import "./chunk-U5UHT7CX.js";
+} from "./chunk-6ANLYNFB.js";
+import "./chunk-3WL6EXYX.js";
 import {
   TBError,
   external_exports
-} from "./chunk-RVWZN3CI.js";
+} from "./chunk-WIGQCP6O.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/lemlist/api.ts

package/dist/{linear-Q6QTPJ5R.js → linear-6JX4E3JI.js}

@@ -7,14 +7,14 @@ import {
   createProviderPlugin,
   requireApiKey,
   upstreamError
-} from "./chunk-YASUMV2K.js";
+} from "./chunk-6ANLYNFB.js";
 import {
   guardedFetch
-} from "./chunk-U5UHT7CX.js";
+} from "./chunk-3WL6EXYX.js";
 import {
   TBError,
   external_exports
-} from "./chunk-RVWZN3CI.js";
+} from "./chunk-WIGQCP6O.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/linear/api.ts

package/dist/{logsnag-SQOQBTES.js → logsnag-BVB36ZCL.js}

@@ -1,6 +1,6 @@
 import {
   createProviderHttpClient
-} from "./chunk-WW2IMPQK.js";
+} from "./chunk-6X55ALDX.js";
 import {
   messageFrom
 } from "./chunk-JXHMDBAY.js";
@@ -8,11 +8,11 @@ import {
   createProviderPlugin,
   requireApiKey,
   upstreamError
-} from "./chunk-YASUMV2K.js";
-import "./chunk-U5UHT7CX.js";
+} from "./chunk-6ANLYNFB.js";
+import "./chunk-3WL6EXYX.js";
 import {
   external_exports
-} from "./chunk-RVWZN3CI.js";
+} from "./chunk-WIGQCP6O.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/logsnag/api.ts