@tool-bridge/server 0.19.0 → 0.21.0

package/dist/{ghost-OSO2FOZS.js → ghost-JCW6UIP2.js}

@@ -1,6 +1,6 @@
 import {
   createProviderHttpClient
-} from "./chunk-VLOIDU5U.js";
+} from "./chunk-Q74GLIDK.js";
 import {
   asJsonObject,
   trimmedText
@@ -9,14 +9,14 @@ import {
   createProviderPlugin,
   requireCredential,
   upstreamError
-} from "./chunk-B4P6YZFS.js";
+} from "./chunk-QR4LK3HF.js";
 import {
   assertPublicHttpUrl
-} from "./chunk-SWBNHIO4.js";
+} from "./chunk-ZTTN6AJG.js";
 import {
   TBError,
   external_exports
-} from "./chunk-OKRZPQ3R.js";
+} from "./chunk-MZCIPUNQ.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/ghost/api.ts

package/dist/{github-OR4I4RHE.js → github-CEGVRMNX.js}

@@ -1,6 +1,7 @@
 import {
-  createProviderHttpClient
-} from "./chunk-VLOIDU5U.js";
+  createAuthedClient
+} from "./chunk-JEWFX6Z6.js";
+import "./chunk-Q74GLIDK.js";
 import {
   asJsonObject,
   compactDefined,
@@ -8,14 +9,13 @@ import {
 } from "./chunk-JXHMDBAY.js";
 import {
   createProviderPlugin,
-  requireApiKey,
   upstreamError
-} from "./chunk-B4P6YZFS.js";
-import "./chunk-SWBNHIO4.js";
+} from "./chunk-QR4LK3HF.js";
+import "./chunk-ZTTN6AJG.js";
 import {
   TBError,
   external_exports
-} from "./chunk-OKRZPQ3R.js";
+} from "./chunk-MZCIPUNQ.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/github/api/shared.ts
@@ -23,7 +23,6 @@ var SERVICE = "github";
 var API_BASE = "https://api.github.com";
 var API_VERSION = "2022-11-28";
 var USER_AGENT = "tool-bridge";
-var http = createProviderHttpClient({ baseUrl: `${API_BASE}/`, service: SERVICE });
 var text = trimmedText;
 var record = asJsonObject;
 function objectArray(value) {
@@ -68,14 +67,6 @@ function requireBranchOrTagRef(ref) {
   }
   return ref;
 }
-function headers(ctx) {
-  return {
-    "accept": "application/vnd.github+json",
-    "authorization": `Bearer ${requireApiKey(ctx, SERVICE)}`,
-    "x-github-api-version": API_VERSION,
-    "user-agent": USER_AGENT
-  };
-}
 function payloadOf(result) {
   if (result.bodyKind === "empty") return null;
   if (result.bodyKind === "json") return result.data;
@@ -108,25 +99,35 @@ function githubError(response, payload) {
   }
   return upstreamError(response.status, message);
 }
+var http = createAuthedClient({
+  baseUrl: `${API_BASE}/`,
+  service: SERVICE,
+  auth: { kind: "bearer" },
+  headers: {
+    "accept": "application/vnd.github+json",
+    "x-github-api-version": API_VERSION,
+    "user-agent": USER_AGENT
+  },
+  // 403 双职分账 + 422 validation 摘要,整段覆写而不用标准键序提取。
+  mapError: (context) => githubError(
+    {
+      headers: context.headers,
+      ok: false,
+      status: context.status,
+      statusText: context.statusText
+    },
+    payloadOf(context)
+  )
+});
 async function requestRaw(ctx, input) {
-  const result = await http.request({
+  const result = await http.request(ctx, {
     method: input.method ?? "GET",
     path: input.path,
     query: Object.entries(input.query ?? {}),
-    headers: headers(ctx),
     ...input.body === void 0 ? {} : { json: input.body },
     invalidJson: "text",
     // GitHub 有三个 action 用 404 表达 false；其他调用方仍在下面将它映射为错误。
-    acceptStatuses: [404],
-    mapError: (context) => githubError(
-      {
-        headers: context.headers,
-        ok: false,
-        status: context.status,
-        statusText: context.statusText
-      },
-      payloadOf(context)
-    )
+    acceptStatuses: [404]
   });
   return {
     payload: payloadOf(result),

package/dist/{gmail-5AOPJ63E.js → gmail-JCMJD55P.js}

@@ -1,25 +1,24 @@
 import {
-  createProviderHttpClient
-} from "./chunk-VLOIDU5U.js";
+  createAuthedClient
+} from "./chunk-JEWFX6Z6.js";
+import "./chunk-Q74GLIDK.js";
 import {
   asJsonObject
 } from "./chunk-JXHMDBAY.js";
 import {
   createProviderPlugin,
-  requireApiKey,
   upstreamError
-} from "./chunk-B4P6YZFS.js";
-import "./chunk-SWBNHIO4.js";
+} from "./chunk-QR4LK3HF.js";
+import "./chunk-ZTTN6AJG.js";
 import {
   TBError,
   external_exports
-} from "./chunk-OKRZPQ3R.js";
+} from "./chunk-MZCIPUNQ.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/gmail/api/shared.ts
 var SERVICE = "gmail";
 var API_BASE = "https://gmail.googleapis.com/gmail/v1";
-var http = createProviderHttpClient({ baseUrl: `${API_BASE}/`, service: SERVICE });
 var USER_ID = "me";
 var RATE_LIMIT_REASONS = /* @__PURE__ */ new Set([
   "dailyLimitExceeded",
@@ -100,22 +99,23 @@ function gmailError(status, payload) {
   }
   return upstreamError(status, message);
 }
+var http = createAuthedClient({
+  baseUrl: `${API_BASE}/`,
+  service: SERVICE,
+  auth: { kind: "bearer" },
+  mapError: ({ bodyKind, data, status }) => gmailError(
+    status,
+    bodyKind === "json" ? data : null
+  )
+});
 async function send(ctx, input) {
   const hasBody = input.body !== void 0;
-  const headers = {
-    authorization: `Bearer ${requireApiKey(ctx, SERVICE)}`
-  };
-  const response = await http.request({
+  const response = await http.request(ctx, {
     method: input.method ?? "GET",
     path: buildPath(input.path),
     query: Object.entries(input.query ?? {}),
-    headers,
     ...hasBody ? { json: input.body } : {},
-    invalidJson: "text",
-    mapError: ({ bodyKind, data, status }) => gmailError(
-      status,
-      bodyKind === "json" ? data : null
-    )
+    invalidJson: "text"
   });
   if (response.bodyKind === "invalid-json") {
     throw new TBError("unavailable", "Gmail \u8FD4\u56DE\u4E86\u975E JSON \u54CD\u5E94", { retryable: true });

package/dist/{googlecalendar-SOJIJUWH.js → googlecalendar-2EAW4MNM.js}

@@ -1,6 +1,7 @@
 import {
-  createProviderHttpClient
-} from "./chunk-VLOIDU5U.js";
+  createAuthedClient
+} from "./chunk-JEWFX6Z6.js";
+import "./chunk-Q74GLIDK.js";
 import {
   asJsonObject,
   compactDefined,
@@ -8,14 +9,13 @@ import {
 } from "./chunk-JXHMDBAY.js";
 import {
   createProviderPlugin,
-  requireApiKey,
   upstreamError
-} from "./chunk-B4P6YZFS.js";
-import "./chunk-SWBNHIO4.js";
+} from "./chunk-QR4LK3HF.js";
+import "./chunk-ZTTN6AJG.js";
 import {
   TBError,
   external_exports
-} from "./chunk-OKRZPQ3R.js";
+} from "./chunk-MZCIPUNQ.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/googlecalendar/api/shared.ts
@@ -23,7 +23,6 @@ var SERVICE = "googlecalendar";
 var API_BASE = "https://www.googleapis.com/calendar/v3";
 var REQUEST_TIMEOUT_MS = 3e4;
 var GOOGLE_API_ORIGIN = new URL(API_BASE).origin;
-var http = createProviderHttpClient({ baseUrl: `${GOOGLE_API_ORIGIN}/`, service: SERVICE });
 var MAX_ERROR_MESSAGE_LENGTH = 500;
 var RATE_LIMIT_REASONS = /* @__PURE__ */ new Set([
   "rateLimitExceeded",
@@ -102,22 +101,25 @@ function calendarError(context, syncTokenAware) {
   }
   return upstreamError(context.status, message);
 }
+var http = createAuthedClient({
+  baseUrl: `${GOOGLE_API_ORIGIN}/`,
+  service: SERVICE,
+  auth: { kind: "bearer" },
+  headers: { accept: "application/json" },
+  mapTransportError: ({ kind, message }) => kind === "timeout" ? upstreamError(504, `Google Calendar \u8BF7\u6C42\u8D85\u65F6(${REQUEST_TIMEOUT_MS / 1e3} \u79D2)`) : upstreamError(502, `Google Calendar \u8BF7\u6C42\u5931\u8D25:${message ?? "unknown network error"}`)
+});
 async function send(ctx, input) {
   const hasBody = input.body !== void 0;
   const target = requestTarget(input.url, input.query);
-  return await http.request({
+  return await http.request(ctx, {
     method: input.method ?? (hasBody ? "POST" : "GET"),
     path: target.path,
     query: target.query,
-    headers: {
-      accept: "application/json",
-      authorization: `Bearer ${requireApiKey(ctx, SERVICE)}`
-    },
     ...hasBody ? { json: input.body } : {},
     invalidJson: "text",
     timeoutMs: REQUEST_TIMEOUT_MS,
-    mapError: (context) => calendarError(context, input.syncTokenAware ?? false),
-    mapTransportError: ({ kind, message }) => kind === "timeout" ? upstreamError(504, `Google Calendar \u8BF7\u6C42\u8D85\u65F6(${REQUEST_TIMEOUT_MS / 1e3} \u79D2)`) : upstreamError(502, `Google Calendar \u8BF7\u6C42\u5931\u8D25:${message ?? "unknown network error"}`)
+    // 410 的 syncToken 解读随每次请求走(见文件头第 2 条),故 mapError 只能逐请求给。
+    mapError: (context) => calendarError(context, input.syncTokenAware ?? false)
   });
 }
 async function requestJson(ctx, input) {

package/dist/{googledocs-QSKN5TLN.js → googledocs-YNKKBM6Q.js}

@@ -9,14 +9,14 @@ import {
   createProviderPlugin,
   requireApiKey,
   upstreamError
-} from "./chunk-B4P6YZFS.js";
+} from "./chunk-QR4LK3HF.js";
 import {
   guardedFetch
-} from "./chunk-SWBNHIO4.js";
+} from "./chunk-ZTTN6AJG.js";
 import {
   TBError,
   external_exports
-} from "./chunk-OKRZPQ3R.js";
+} from "./chunk-MZCIPUNQ.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/googledocs/api/shared.ts

package/dist/{grafana-R3AIZM7M.js → grafana-353VSGXN.js}

@@ -1,6 +1,7 @@
 import {
-  createProviderHttpClient
-} from "./chunk-VLOIDU5U.js";
+  createAuthedClient
+} from "./chunk-JEWFX6Z6.js";
+import "./chunk-Q74GLIDK.js";
 import {
   asJsonObject,
   booleanValue,
@@ -12,14 +13,14 @@ import {
   createProviderPlugin,
   requireApiKey,
   upstreamError
-} from "./chunk-B4P6YZFS.js";
+} from "./chunk-QR4LK3HF.js";
 import {
   assertPublicHttpUrl
-} from "./chunk-SWBNHIO4.js";
+} from "./chunk-ZTTN6AJG.js";
 import {
   TBError,
   external_exports
-} from "./chunk-OKRZPQ3R.js";
+} from "./chunk-MZCIPUNQ.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/grafana/api.ts
@@ -33,7 +34,20 @@ var API_GROUPS = {
   folders: "folder.grafana.app"
 };
 var API_VERSION_CACHE_MAX = 256;
-var http = createProviderHttpClient({ service: SERVICE });
+var http = createAuthedClient({
+  service: SERVICE,
+  auth: { kind: "bearer" },
+  headers: { accept: "application/json" },
+  // Grafana 的错误消息在 `message` / `error` / `detail` / `title` 之一,或整个体就是一段文本。
+  errorMessage: {
+    keys: ["message", "error", "detail", "title"],
+    fallback: (status, statusText) => trimmedText(statusText) ?? `Grafana request failed with ${status}`
+  },
+  mapTransportError: ({ message }) => upstreamError(
+    502,
+    `Grafana request failed: ${message ?? "unknown network error"}`
+  )
+});
 var apiVersionCache = /* @__PURE__ */ new Map();
 function requireText(value, field) {
   const result = trimmedText(value);
@@ -86,37 +100,22 @@ function resolveBaseUrl(ctx) {
   return `${url.origin}${url.pathname.replace(/\/+$/, "")}`;
 }
 function resolveTarget(ctx) {
-  return { apiKey: requireApiKey(ctx, SERVICE), baseUrl: resolveBaseUrl(ctx) };
-}
-function errorMessage(payload, status, statusText) {
-  const direct = trimmedText(payload);
-  if (direct !== void 0) return direct;
-  const fields = asJsonObject(payload);
-  const message = trimmedText(fields?.message) ?? trimmedText(fields?.error) ?? trimmedText(fields?.detail) ?? trimmedText(fields?.title);
-  return message ?? trimmedText(statusText) ?? `Grafana request failed with ${status}`;
+  requireApiKey(ctx, SERVICE);
+  return { baseUrl: resolveBaseUrl(ctx), ctx };
 }
 async function request(target, input) {
   const query = [
     ...Object.entries(input.query ?? {}),
     ...Object.entries(input.multiValueQuery ?? {})
   ];
-  const result = await http.request({
+  const result = await http.request(target.ctx, {
     // 尾斜杠保住实例部署上下文路径(`/grafana`)；薄层再强制 path 不得换 origin。
     baseUrl: `${target.baseUrl}/`,
     path: input.path,
     method: input.method,
     query,
-    headers: { accept: "application/json", authorization: `Bearer ${target.apiKey}` },
     ...input.body === void 0 ? {} : { json: input.body },
-    invalidJson: "text",
-    mapError: ({ data, status, statusText }) => upstreamError(
-      status,
-      errorMessage(data, status, statusText)
-    ),
-    mapTransportError: ({ message }) => upstreamError(
-      502,
-      `Grafana request failed: ${message ?? "unknown network error"}`
-    )
+    invalidJson: "text"
   });
   return result.data === void 0 ? null : result.data;
 }

package/dist/{graphhopper-4CR3QOAX.js → graphhopper-H3IVJNDS.js}

@@ -1,6 +1,6 @@
 import {
   createProviderHttpClient
-} from "./chunk-VLOIDU5U.js";
+} from "./chunk-Q74GLIDK.js";
 import {
   asJsonObject
 } from "./chunk-JXHMDBAY.js";
@@ -8,12 +8,12 @@ import {
   createProviderPlugin,
   requireApiKey,
   upstreamError
-} from "./chunk-B4P6YZFS.js";
-import "./chunk-SWBNHIO4.js";
+} from "./chunk-QR4LK3HF.js";
+import "./chunk-ZTTN6AJG.js";
 import {
   TBError,
   external_exports
-} from "./chunk-OKRZPQ3R.js";
+} from "./chunk-MZCIPUNQ.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/graphhopper/api.ts

package/dist/index.d.ts

@@ -1,4 +1,3 @@
-import * as z from './v4/classic/external.cjs';
 import * as http from 'node:http';
 import { Sql } from 'postgres';
 import { Hono } from 'hono';
@@ -68,6 +67,7 @@ interface Scope {
  *   sys:bootstrapped  → true(Admin SK 引导幂等标志)
  *   annotation:<path> → { text, updatedAt, updatedBy }(管理员 Path 补充说明)
  *   feedback:<path>   → FeedbackEntry[](Agent 使用反馈,单 key 整存)
+ *   deviceop:<sha256(deviceId)>:<operationId> → DeviceOperationRecord(revision CAS,密文 payload/result)
  *   store:object:<id>  → StoreObject(revision CAS)
  *   store:upload:<id>  → UploadSession(revision CAS)
  *   store:call-capability:<id> → CallUploadCapability(token 仅存 hash)
@@ -134,9 +134,14 @@ interface TBErrorBody {
  * 信任根不自举存储(spec-digest)。主密钥缺失/格式非法时能力禁用:Set 抛 unavailable。
  *
  * 纯逻辑,仅依赖 WebCrypto(core 无宿主依赖)。`crypto` / `TextEncoder` / `TextDecoder`
- * 在 Workers 与 Node 20+ 均为全局;此处以模块作用域最小声明补齐类型(不改 tsconfig、不污染全局)。
+ * 在 Workers 与 Node 20+ 均为全局;类型经 webGlobals.ts 统一承接(不改 tsconfig、不污染全局)。
  */
 
+/** system/secret list 的一行(名字与时间戳,永不含值);CLI/Dashboard 经 SDK 消费同一命名。 */
+interface SecretEntrySummary {
+    name: string;
+    updatedAt: Timestamp;
+}
 /**
  * SecretStore 的纯逻辑实现。以注入的 StateStore 为后端。
  *
@@ -167,10 +172,7 @@ declare class SecretStoreImpl {
      * 枚举 secret 元数据。**绝不返回明文/密文**——只出 name + updatedAt(只进不出)。
      * limit 默认 50、上限 200 钳制。
      */
-    list(opts?: ListOptions): Promise<Page<{
-        name: string;
-        updatedAt: Timestamp;
-    }>>;
+    list(opts?: ListOptions): Promise<Page<SecretEntrySummary>>;
     /** 删除 secret;不存在 → not_found。 */
     delete(name: string): Promise<void>;
     /**
@@ -199,31 +201,26 @@ declare class SecretStoreImpl {
  * 的落点。
  */
 
-declare const pluginOAuthSchema: z.ZodObject<{
-    authorizationUrl: z.ZodString;
-    tokenUrl: z.ZodString;
-    refreshUrl: z.ZodOptional<z.ZodString>;
-    scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    scopeSeparator: z.ZodOptional<z.ZodEnum<{
-        " ": " ";
-        ",": ",";
-    }>>;
-    clientAuth: z.ZodOptional<z.ZodEnum<{
-        client_secret_basic: "client_secret_basic";
-        client_secret_post: "client_secret_post";
-        none: "none";
-    }>>;
-    authorizationParams: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    responseEnvelope: z.ZodOptional<z.ZodString>;
-    pkce: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strip>;
+/** 令牌端点的客户端认证方式。 */
+declare const OAUTH_CLIENT_AUTH_METHODS: readonly ["client_secret_basic", "client_secret_post", "none"];
+type OAuthClientAuthMethod = (typeof OAUTH_CLIENT_AUTH_METHODS)[number];
 /**
  * provider 型 OAuth2 的声明。
  *
  * client_id / client_secret **不在这里** —— 它们是每个部署自己的应用凭证,走
  * `authRef` 指向的 secret(多字段:`clientId` + `clientSecret`),与其他上游凭证同一通道。
  */
-type PluginOAuth = z.infer<typeof pluginOAuthSchema>;
+interface PluginOAuth {
+    authorizationParams?: Record<string, string>;
+    authorizationUrl: string;
+    clientAuth?: OAuthClientAuthMethod;
+    pkce?: boolean;
+    refreshUrl?: string;
+    responseEnvelope?: string;
+    scopes?: string[];
+    scopeSeparator?: ' ' | ',';
+    tokenUrl: string;
+}
 
 /**
  * 注册时契约校验(plugin/v2)。
@@ -542,6 +539,8 @@ interface ContextProvider {
 interface ToolSpec {
     /** 危险操作二次确认;进 `~help` 的 confirm 行。 */
     confirm?: boolean;
+    /** 仅 device-backed tool 使用；mailbox/both 表示 invoke 可选择持久化交付。 */
+    delivery?: 'realtime' | 'mailbox' | 'both';
     /** 一句话描述;进 `~help` 的 `h` 行。上游可能不带 → 可缺省。 */
     description?: string;
     /** 副作用标记(read/write/destructive);进 `~help` 的 effect 行。 */
@@ -631,6 +630,18 @@ type DeviceCallResult = {
     error: TBErrorBody;
     ok: false;
 };
+/**
+ * 网关对一次 realtime 尝试的权威认知。
+ *
+ * - completed:设备明确返回 result（成功或业务错误）；
+ * - not_dispatched:call 帧确定没有交给设备，可安全改走 Mailbox；
+ * - unknown:call 帧已经发送或可能已经发送，但结果未收敛，不能自动重试/入队。
+ */
+type DeviceCallDisposition = 'completed' | 'not_dispatched' | 'unknown';
+interface DeviceCallAttempt {
+    disposition: DeviceCallDisposition;
+    result: DeviceCallResult;
+}
 
 interface RuntimeRemoteSettings {
     allowInsecure: boolean;
@@ -648,7 +659,12 @@ interface RuntimeRemoteSettings {
     maxHops: number;
 }
 
-type SearchCapability = 'search' | 'search:federated' | 'search:semantic';
+/**
+ * pre-launch 收口:曾预留 'search:semantic' 全链路(wire/cursor/CLI/Dashboard 穿透)
+ * 但仓内从无任何 SearchIndex 声明或实现,唯一作用是被拒绝——已整链删除。
+ * 语义检索将来作为新 capability + 新 mode 一并落地,不留空档字段。
+ */
+type SearchCapability = 'search' | 'search:federated';
 /** 全局工具搜索的完整结果；只在权限和可见性候选筛选后 hydrate。 */
 interface ToolSearchHit {
     path: TreePath;
@@ -676,7 +692,7 @@ interface ToolSearchOptions {
     limit?: number;
     matching?: ToolSearchMatching;
     minCoverage?: number;
-    mode?: 'keyword' | 'semantic';
+    mode?: 'keyword';
     pathPrefix?: TreePath;
 }
 /** 会改变候选集合或分页档位的规范化约束；cursor 必须绑定其完整指纹。 */
@@ -689,7 +705,7 @@ interface NormalizedToolSearchOptions {
 /** 宿主提供的全局工具索引；权限和虚拟化仍由 gateway 处理。 */
 interface SearchIndex {
     readonly capabilities: readonly SearchCapability[];
-    cursorFor(query: string, candidate: ToolSearchCandidate, mode?: 'keyword' | 'semantic'): Promise<string>;
+    cursorFor(query: string, candidate: ToolSearchCandidate, mode?: 'keyword'): Promise<string>;
     /** 联邦 continuation 的 topology binding；不实现的自定义 adapter 只能提供 local search。 */
     revision?(): Promise<number | string>;
     search(query: string, opts?: ToolSearchOptions): Promise<Page<ToolSearchCandidate>>;
@@ -815,9 +831,9 @@ interface SqlSearchDriver {
     write: (statements: readonly SqlSearchStatement[]) => Promise<void>;
 }
 declare class SqlSearchIndex implements MutableSearchIndex {
-    protected readonly driver: SqlSearchDriver;
     readonly capabilities: readonly SearchCapability[];
     protected readonly dialect: SqlSearchDialect;
+    protected readonly driver: SqlSearchDriver;
     constructor(driver: SqlSearchDriver, dialect?: SqlSearchDialect);
     /** 容量 trigger 的 ABORT 在各驱动里错误形状不同,统一按标记串归一。 */
     private writeOrCapacity;
@@ -832,7 +848,7 @@ declare class SqlSearchIndex implements MutableSearchIndex {
     removePrefix(path: TreePath): Promise<void>;
     rebuild(documents: readonly ToolSearchDocument[]): Promise<void>;
     search(query: string, opts?: ToolSearchOptions): Promise<Page<ToolSearchCandidate>>;
-    cursorFor(query: string, candidate: ToolSearchCandidate, mode?: 'keyword' | 'semantic'): Promise<string>;
+    cursorFor(query: string, candidate: ToolSearchCandidate, mode?: 'keyword'): Promise<string>;
 }
 
 /**
@@ -927,8 +943,8 @@ interface DeviceInvokeRequest {
 }
 /** 设备通道宿主(CF = DeviceSession DO / Docker = ws)。 */
 interface DeviceChannel {
-    /** HTTP→WS 调用转发:结果为 DeviceCallResult 形状(设备侧 result 帧)。 */
-    invoke(deviceId: string, req: DeviceInvokeRequest): Promise<unknown>;
+    /** HTTP→WS 调用转发，并显式报告是否已 dispatch，供安全 Mailbox fallback 判定。 */
+    invoke(deviceId: string, req: DeviceInvokeRequest): Promise<DeviceCallAttempt>;
     /** WS 升级请求转交(/system/device/ws)。 */
     ws(deviceId: string, request: Request): Promise<Response>;
 }
@@ -1225,7 +1241,7 @@ declare class DeviceRouter {
     constructor(replicaId: string, backend: DeviceRouterBackend, opts: {
         forwardTimeoutMs?: number;
         /** 收到转发来的调用时,在本副本执行(本地无该连接则返回 offline)。 */
-        onLocalCall: (deviceId: string, req: DeviceInvokeRequest) => Promise<DeviceCallResult>;
+        onLocalCall: (deviceId: string, req: DeviceInvokeRequest) => Promise<DeviceCallAttempt>;
         ttlSec?: number;
     });
     private get ttlSec();
@@ -1241,7 +1257,7 @@ declare class DeviceRouter {
      * 把调用转发给持有该设备的副本并等结果。
      * 无人持有 → null(调用方按 deviceOffline 处理)。
      */
-    forward(deviceId: string, req: DeviceInvokeRequest): Promise<DeviceCallResult | null>;
+    forward(deviceId: string, req: DeviceInvokeRequest): Promise<DeviceCallAttempt | null>;
     close(): Promise<void>;
     /** correlationId 的进程内序号(与 replicaId 组合后全局唯一)。 */
     private static seq;
@@ -1269,7 +1285,7 @@ declare class DeviceRouter {
  */
 
 /** router 回调本副本执行设备调用的签名。 */
-type DeviceLocalCall = (deviceId: string, req: DeviceInvokeRequest) => Promise<DeviceCallResult>;
+type DeviceLocalCall = (deviceId: string, req: DeviceInvokeRequest) => Promise<DeviceCallAttempt>;
 declare const DEVICE_WS_PATH = "/system/device/ws";
 declare class DeviceHub {
     private readonly store;
@@ -1304,7 +1320,7 @@ declare class DeviceHub {
      * 本地没有但配了 router → 问路由表并转发给持有者副本(socket 不可序列化,
      * 只能把调用送到 socket 所在进程)。都没有 → deviceOffline。
      */
-    invoke(deviceId: string, req: DeviceInvokeRequest): Promise<unknown>;
+    invoke(deviceId: string, req: DeviceInvokeRequest): Promise<DeviceCallAttempt>;
     /**
      * 只走本副本 socket 的调用执行。
      *

package/dist/index.js

@@ -12,9 +12,9 @@ import {
   configFromEnv,
   createDataObjectStore,
   createTbServer
-} from "./chunk-CLEZ6YQ6.js";
-import "./chunk-SWBNHIO4.js";
-import "./chunk-OKRZPQ3R.js";
+} from "./chunk-MDY7K5CX.js";
+import "./chunk-ZTTN6AJG.js";
+import "./chunk-MZCIPUNQ.js";
 import "./chunk-U67V476Y.js";
 export {
   DEVICE_FORWARD_TIMEOUT_MS,

package/dist/{ip2proxy-OBCG6X6J.js → ip2proxy-DBGRWH7S.js}

@@ -1,17 +1,17 @@
 import {
   createProviderHttpClient
-} from "./chunk-VLOIDU5U.js";
+} from "./chunk-Q74GLIDK.js";
 import "./chunk-JXHMDBAY.js";
 import {
   createProviderPlugin,
   requireApiKey,
   upstreamError
-} from "./chunk-B4P6YZFS.js";
-import "./chunk-SWBNHIO4.js";
+} from "./chunk-QR4LK3HF.js";
+import "./chunk-ZTTN6AJG.js";
 import {
   TBError,
   external_exports
-} from "./chunk-OKRZPQ3R.js";
+} from "./chunk-MZCIPUNQ.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/ip2proxy/schema.ts

package/dist/{ipgeolocation_io-NHH3DTQW.js → ipgeolocation_io-5I2BDVMG.js}

@@ -1,6 +1,6 @@
 import {
   createProviderHttpClient
-} from "./chunk-VLOIDU5U.js";
+} from "./chunk-Q74GLIDK.js";
 import {
   asJsonObject
 } from "./chunk-JXHMDBAY.js";
@@ -8,11 +8,11 @@ import {
   createProviderPlugin,
   requireApiKey,
   upstreamError
-} from "./chunk-B4P6YZFS.js";
-import "./chunk-SWBNHIO4.js";
+} from "./chunk-QR4LK3HF.js";
+import "./chunk-ZTTN6AJG.js";
 import {
   external_exports
-} from "./chunk-OKRZPQ3R.js";
+} from "./chunk-MZCIPUNQ.js";
 import "./chunk-U67V476Y.js";
 
 // ../plugins/src/ipgeolocation_io/api.ts