@tool-bridge/server 0.20.0 → 0.21.1

package/dist/{chunk-WIGQCP6O.js → chunk-UZM2RXZH.js}

@@ -30,6 +30,7 @@ var STATUS_OVERRIDES = /* @__PURE__ */ new Set([
   "permission_denied:401",
   "unavailable:501"
 ]);
+var TB_ERROR_BRAND = /* @__PURE__ */ Symbol.for("tool-bridge.TBError.v1");
 var TBError = class _TBError extends Error {
   code;
   retryable;
@@ -37,6 +38,12 @@ var TBError = class _TBError extends Error {
   constructor(code, message, options = {}) {
     super(message);
     this.name = "TBError";
+    Object.defineProperty(this, TB_ERROR_BRAND, {
+      configurable: false,
+      enumerable: false,
+      value: true,
+      writable: false
+    });
     const retryable = options.retryable ?? false;
     if (retryable && !RETRYABLE_CODES.has(code)) {
       throw new Error(`TBError: retryable=true not allowed for code '${code}'`);
@@ -70,7 +77,10 @@ var TBError = class _TBError extends Error {
   }
 };
 function isTBError(value) {
-  return value instanceof TBError;
+  if (typeof value !== "object" || value === null) return false;
+  if (value[TB_ERROR_BRAND] !== true) return false;
+  const candidate = value;
+  return typeof candidate.code === "string" && TB_ERROR_CODES.includes(candidate.code) && typeof candidate.message === "string" && typeof candidate.retryable === "boolean" && typeof candidate.httpStatus === "number" && typeof candidate.toJSON === "function";
 }
 
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
@@ -14609,6 +14619,20 @@ function canonicalizePath(path) {
   if (norm === "") return "";
   return norm.split("/").map((seg) => canonicalizeSegment(seg)).join("/");
 }
+function assertNoCollision(names, context) {
+  const seen = /* @__PURE__ */ new Map();
+  for (const name of names) {
+    const lower = name.toLowerCase();
+    const prev = seen.get(lower);
+    if (prev !== void 0 && prev !== name) {
+      throw new TBError(
+        "invalid_argument",
+        `${context}:\u6807\u8BC6\u7B26 '${prev}' \u4E0E '${name}' \u5C0F\u5199\u89C4\u8303\u5316\u540E\u51B2\u7A81`
+      );
+    }
+    seen.set(lower, name);
+  }
+}
 function segments(path) {
   const p = normalizePath(path);
   return p === "" ? [] : p.split("/");
@@ -14682,10 +14706,10 @@ function normalizeAnnotationPath(path) {
   return norm;
 }
 var AnnotationStore = class {
+  store;
   constructor(store) {
     this.store = store;
   }
-  store;
   keyOf(path) {
     return KEY_ANNOTATION + path;
   }
@@ -14823,7 +14847,7 @@ var SYSTEM_AUTO = "system:auto";
 var RESERVED_ROOTS = ["system", "ui"];
 
 // ../core/src/auth/registerPath.ts
-var segments3 = (path) => path.split("/").filter((s) => s.length > 0);
+var foldedSegments = (path) => segments(path).map((seg) => seg.toLowerCase());
 function isUnderPrefix(target, prefix) {
   if (prefix.length > target.length) return false;
   return prefix.every((seg, i) => seg === target[i]);
@@ -14834,7 +14858,7 @@ var deny = (message) => ({
 });
 function checkRegisterPath(input) {
   const { sk, targetPath, existing, reservedRoots = [] } = input;
-  const target = segments3(targetPath);
+  const target = foldedSegments(targetPath);
   if (target.some((seg) => seg.startsWith("~"))) {
     return {
       allow: false,
@@ -14842,12 +14866,12 @@ function checkRegisterPath(input) {
     };
   }
   if (sk.registerPaths !== void 0) {
-    const ok = sk.registerPaths.some((p) => isUnderPrefix(target, segments3(p)));
+    const ok = sk.registerPaths.some((p) => isUnderPrefix(target, foldedSegments(p)));
     if (!ok) {
       return deny(`path '${targetPath}' is outside declared registerPaths`);
     }
   } else {
-    const roots = /* @__PURE__ */ new Set([...RESERVED_ROOTS, ...reservedRoots]);
+    const roots = /* @__PURE__ */ new Set([...RESERVED_ROOTS, ...reservedRoots.map((r) => r.toLowerCase())]);
     const head = target[0];
     if (head !== void 0 && roots.has(head)) {
       return deny(`cannot register under reserved root '${head}'`);
@@ -14907,6 +14931,10 @@ function base64urlEncode(bytes2) {
   }
   return out;
 }
+function base64Encode(bytes2) {
+  const url2 = base64urlEncode(bytes2).replaceAll("-", "+").replaceAll("_", "/");
+  return url2 + "=".repeat((4 - url2.length % 4) % 4);
+}
 function base64urlDecode(input) {
   if (input.length % 4 === 1 || !/^[A-Za-z0-9_-]*$/.test(input)) {
     throw new Error("base64urlDecode: malformed base64url input");
@@ -14926,6 +14954,12 @@ function base64urlDecode(input) {
   return new Uint8Array(bytes2);
 }
 
+// ../core/src/webGlobals.ts
+var g = globalThis;
+var crypto = g.crypto;
+var TextDecoder2 = g.TextDecoder;
+var TextEncoder = g.TextEncoder;
+
 // ../core/src/omit.ts
 function omit2(obj, ...keys) {
   const rest = { ...obj };
@@ -15014,10 +15048,17 @@ var SKRegistryStore = class {
     const listOpts = { limit: clampLimit(opts?.limit) };
     if (opts?.cursor !== void 0) listOpts.cursor = opts.cursor;
     const page = await this.store.list(KEY_SK_ID, listOpts);
+    const hashes = page.items.map(({ value }) => value).filter((value) => typeof value === "string");
+    const records = /* @__PURE__ */ new Map();
+    for (let i = 0; i < hashes.length; i += 100) {
+      const chunk = await this.store.getMany(
+        hashes.slice(i, i + 100).map((hash2) => KEY_SK_HASH + hash2)
+      );
+      for (const [key, value] of chunk) records.set(key, value);
+    }
     const items = [];
-    for (const { value } of page.items) {
-      if (typeof value !== "string") continue;
-      const rec = await this.store.get(KEY_SK_HASH + value);
+    for (const hash2 of hashes) {
+      const rec = records.get(KEY_SK_HASH + hash2);
       if (rec) items.push(projectKey(rec));
     }
     return page.cursor !== void 0 ? { items, cursor: page.cursor } : { items };
@@ -15188,7 +15229,7 @@ var HtbpCommandRegistry = class {
   metadata = /* @__PURE__ */ new Map();
   operations = new OperationRegistry();
   register(name, spec, handler) {
-    const { h, returns, scope, ...operationSpec } = spec;
+    const { h, hostOnly, returns, scope, ...operationSpec } = spec;
     this.operations.register(
       name,
       { ...operationSpec, description: h },
@@ -15196,6 +15237,7 @@ var HtbpCommandRegistry = class {
     );
     this.metadata.set(name, {
       scope,
+      ...hostOnly !== void 0 ? { hostOnly } : {},
       ...returns !== void 0 ? { returns } : {}
     });
     return this;
@@ -15209,6 +15251,10 @@ var HtbpCommandRegistry = class {
   scopeFor(name) {
     return this.metadata.get(name)?.scope;
   }
+  /** 该命令是否宿主专属扩展(见 {@link HtbpCommandSpec.hostOnly});未注册按 false。 */
+  isHostOnly(name) {
+    return this.metadata.get(name)?.hostOnly === true;
+  }
   commandSpecs(nodePath) {
     return this.operations.list().map((operation) => {
       const metadata = this.metadata.get(operation.name);
@@ -15249,13 +15295,13 @@ var HtbpCommandRegistry = class {
 
 // ../core/src/builtin/commandRegistry.ts
 var BuiltinCommandRegistry = class extends HtbpCommandRegistry {
+  moduleName;
+  moduleDescription;
   constructor(moduleName, moduleDescription) {
     super();
     this.moduleName = moduleName;
     this.moduleDescription = moduleDescription;
   }
-  moduleName;
-  moduleDescription;
   help(nodePath) {
     return this.helpModel({
       path: nodePath,
@@ -15462,18 +15508,7 @@ function encodeForm(entries) {
   return [...entries].map(([key, value]) => `${encode3(key)}=${encode3(value)}`).join("&");
 }
 function base643(ascii) {
-  const table = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
-  let out = "";
-  for (let i = 0; i < ascii.length; i += 3) {
-    const a = ascii.charCodeAt(i);
-    const b = i + 1 < ascii.length ? ascii.charCodeAt(i + 1) : Number.NaN;
-    const c = i + 2 < ascii.length ? ascii.charCodeAt(i + 2) : Number.NaN;
-    out += table[a >> 2];
-    out += table[(a & 3) << 4 | (Number.isNaN(b) ? 0 : b >> 4)];
-    out += Number.isNaN(b) ? "=" : table[(b & 15) << 2 | (Number.isNaN(c) ? 0 : c >> 6)];
-    out += Number.isNaN(c) ? "=" : table[c & 63];
-  }
-  return out;
+  return base64Encode(Uint8Array.from(ascii, (char) => char.charCodeAt(0)));
 }
 function asRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
@@ -15664,6 +15699,8 @@ var contextCommands = new HtbpCommandRegistry().register(
   "create_upload",
   {
     h: "create a short-lived, path-scoped direct-upload grant; persist the returned uri, not url",
+    // 宿主专属扩展:仅在底层具备直传签名能力时由宿主装配,不进基础动词表。
+    hostOnly: true,
     inputSchema: external_exports.strictObject({
       path: external_exports.string().describe("target entry path inside the namespace"),
       contentType: external_exports.string().describe("media type signed into the PUT request"),
@@ -15687,14 +15724,14 @@ function contextScopeForCmd(command) {
 }
 function parseContextCmdArgs(command, args) {
   const normalized = command.toLowerCase();
-  if (!contextCommands.has(normalized) || normalized === "create_upload") {
+  if (!contextCommands.has(normalized) || contextCommands.isHostOnly(normalized)) {
     throw new TBError("invalid_argument", `unknown cmd '${command}'`);
   }
   return contextCommands.parse(normalized, args);
 }
 async function dispatchContextCmd(provider, command, args) {
   const normalized = command.toLowerCase();
-  if (!contextCommands.has(normalized) || normalized === "create_upload") {
+  if (!contextCommands.has(normalized) || contextCommands.isHostOnly(normalized)) {
     throw new TBError("invalid_argument", `unknown cmd '${command}'`);
   }
   const method = normalized;
@@ -15716,7 +15753,7 @@ async function dispatchContextUploadCmd(args, upload) {
 }
 
 // ../core/src/context/capabilities.ts
-var CONTEXT_METHODS = contextCommands.names().filter((name) => name !== "create_upload");
+var CONTEXT_METHODS = contextCommands.names().filter((name) => !contextCommands.isHostOnly(name));
 var CONTEXT_WRITE_METHODS = CONTEXT_METHODS.filter((method) => contextCommands.scopeFor(method) === "write");
 function contextMethodsOf(provider) {
   const methods = /* @__PURE__ */ new Set();
@@ -16503,10 +16540,10 @@ function normalizeAllowHost(raw) {
   return host;
 }
 var RemoteAllowlistStore = class {
+  store;
   constructor(store) {
     this.store = store;
   }
-  store;
   /** 读全部运行时条目(缺省/脏值 → 空数组);按 host 升序稳定输出。 */
   async list() {
     const raw = await this.store.get(KEY_REMOTE_ALLOWLIST);
@@ -16682,7 +16719,7 @@ function parseRecord(value) {
   try {
     if (typeof value !== "object" || value === null || Array.isArray(value)) throw new Error();
     const raw = value;
-    if (raw.v !== 1 || !Number.isSafeInteger(raw.revision) || raw.revision < 1 || !nonEmpty(raw.operationId) || raw.commandId !== raw.operationId || !nonEmpty(raw.deviceId) || !nonEmpty(raw.deviceKeyId) || !nonEmpty(raw.mountPath) || !nonEmpty(raw.targetPath) || !nonEmpty(raw.path) || !nonEmpty(raw.callerKeyId) || !nonEmpty(raw.callerOwner) || !nonEmpty(raw.traceId) || !finiteTimestamp(raw.createdAt) || !finiteTimestamp(raw.updatedAt) || !finiteTimestamp(raw.expiresAt) || !isState(raw.state) || !Number.isSafeInteger(raw.attempt) || raw.attempt < 0 || typeof raw.executionMayHaveOccurred !== "boolean") throw new Error();
+    if (raw.v !== 1 || !Number.isSafeInteger(raw.revision) || raw.revision < 1 || !nonEmpty(raw.operationId) || !nonEmpty(raw.deviceId) || !nonEmpty(raw.deviceKeyId) || !nonEmpty(raw.mountPath) || !nonEmpty(raw.targetPath) || !nonEmpty(raw.path) || !nonEmpty(raw.callerKeyId) || !nonEmpty(raw.callerOwner) || !nonEmpty(raw.traceId) || !finiteTimestamp(raw.createdAt) || !finiteTimestamp(raw.updatedAt) || !finiteTimestamp(raw.expiresAt) || !isState(raw.state) || !Number.isSafeInteger(raw.attempt) || raw.attempt < 0 || typeof raw.executionMayHaveOccurred !== "boolean") throw new Error();
     if (raw.leaseId === void 0 !== (raw.leaseUntil === void 0)) throw new Error();
     if (raw.leaseId !== void 0 && (!nonEmpty(raw.leaseId) || !finiteTimestamp(raw.leaseUntil))) {
       throw new Error();
@@ -16694,7 +16731,6 @@ function parseRecord(value) {
       v: 1,
       revision: raw.revision,
       operationId: raw.operationId,
-      commandId: raw.commandId,
       deviceId: raw.deviceId,
       deviceKeyId: raw.deviceKeyId,
       mountPath: raw.mountPath,
@@ -16832,7 +16868,7 @@ var DeviceMailboxCipher = class {
         await this.key(),
         ciphertext
       );
-      return JSON.parse(new TextDecoder().decode(plaintext));
+      return JSON.parse(new TextDecoder2().decode(plaintext));
     } catch {
       throw new TBError("internal", "device mailbox data cannot be decrypted", { retryable: false });
     }
@@ -16904,7 +16940,6 @@ var DeviceMailboxService = class {
   summary(record2) {
     return {
       operationId: record2.operationId,
-      commandId: record2.commandId,
       deviceId: record2.deviceId,
       mountPath: record2.mountPath,
       targetPath: record2.targetPath,
@@ -17015,7 +17050,6 @@ var DeviceMailboxService = class {
       v: 1,
       revision: 1,
       operationId,
-      commandId: operationId,
       deviceId: input.deviceId,
       deviceKeyId: input.deviceKeyId,
       mountPath: input.mountPath,
@@ -17113,7 +17147,6 @@ var DeviceMailboxService = class {
         ...page.cursor === void 0 ? {} : { cursor: page.cursor },
         operation: {
           operationId: next.operationId,
-          commandId: next.commandId,
           targetPath: next.targetPath,
           path: next.path,
           arguments: payload.arguments,
@@ -17413,7 +17446,7 @@ var toolSearchRequestSchema = external_exports.strictObject({
     limit: external_exports.number().int().optional(),
     matching: external_exports.enum(["best", "all"]).optional(),
     minCoverage: external_exports.number().gt(0).max(1).optional(),
-    mode: external_exports.enum(["keyword", "semantic"]).optional(),
+    mode: external_exports.enum(["keyword"]).optional(),
     pathPrefix: external_exports.string().optional()
   }).optional(),
   query: external_exports.string().trim().min(1)
@@ -17429,7 +17462,6 @@ var deviceOperationSummaryShape = {
   attempt: external_exports.number().int().nonnegative(),
   caller: deviceOperationCallerSchema,
   cancelRequestedAt: external_exports.iso.datetime({ offset: true }).optional(),
-  commandId: external_exports.string().min(1),
   createdAt: external_exports.iso.datetime({ offset: true }),
   deviceId: external_exports.string().min(1),
   executionMayHaveOccurred: external_exports.boolean(),
@@ -17474,7 +17506,6 @@ var deviceOperationClaimSchema = external_exports.object({
   attempt: external_exports.number().int().positive(),
   caller: deviceOperationCallerSchema,
   cancelRequestedAt: external_exports.iso.datetime({ offset: true }).optional(),
-  commandId: external_exports.string().min(1),
   createdAt: external_exports.iso.datetime({ offset: true }),
   expiresAt: external_exports.iso.datetime({ offset: true }),
   leaseId: external_exports.string().min(1),
@@ -17875,17 +17906,7 @@ function createSkModule(store, now) {
 
 // ../core/src/builtin/index.ts
 async function countNodes(registry2) {
-  let count = 0;
-  let cursor;
-  do {
-    const page = await registry2.list(void 0, {
-      limit: LIST_LIMIT_MAX,
-      ...cursor !== void 0 ? { cursor } : {}
-    });
-    count += page.items.length;
-    cursor = page.cursor;
-  } while (cursor);
-  return count;
+  return (await registry2.subtree("")).length;
 }
 function createBuiltins(deps) {
   const now = deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
@@ -17934,7 +17955,7 @@ function contextHelpModel(node, opts = {}) {
   return contextCommands.helpModel(
     { path: node.path, kind: "context", description: node.description },
     (command) => {
-      if (command.name === "create_upload") return false;
+      if (contextCommands.isHostOnly(command.name)) return false;
       if (opts.methods !== void 0 && !opts.methods.has(command.name)) return false;
       return opts.readOnly !== true || command.scope === "read";
     }
@@ -17964,7 +17985,7 @@ async function readStreamBytes(stream) {
   return out;
 }
 async function readStreamText(stream) {
-  return new TextDecoder().decode(await readStreamBytes(stream));
+  return new TextDecoder2().decode(await readStreamBytes(stream));
 }
 function ownedBytes(view) {
   return view.buffer instanceof ArrayBuffer ? new Uint8Array(view.buffer, view.byteOffset, view.byteLength) : new Uint8Array(view);
@@ -18001,6 +18022,14 @@ function bytesToObjectStream(bytes2) {
 var DEFAULT_STORE_NAME = "default";
 var DEFAULT_STORE_DRIVER_KEY_ROOT = "__tool_bridge_internal__/store/v1";
 
+// ../core/src/context/contentType.ts
+function normalizeContentType(value, message) {
+  if (typeof value !== "string" || value.trim() === "" || value.length > 255 || !value.includes("/") || /[\r\n\0]/.test(value)) {
+    throw new TBError("invalid_argument", message);
+  }
+  return value.trim().toLowerCase();
+}
+
 // ../core/src/context/path.ts
 function hasControlChar(s) {
   for (let i = 0; i < s.length; i++) {
@@ -18083,9 +18112,10 @@ async function createObjectContextUploadGrant(store, opts, input) {
   if (unknownKeys.length > 0) {
     throw new TBError("invalid_argument", `create_upload \u542B\u672A\u77E5\u5B57\u6BB5:${unknownKeys.join(",")}`);
   }
-  if (typeof input?.contentType !== "string" || input.contentType.trim() === "" || input.contentType.length > 255 || !input.contentType.includes("/") || /[\r\n\0]/.test(input.contentType)) {
-    throw new TBError("invalid_argument", "create_upload \u9700\u8981\u5408\u6CD5\u7684 'contentType'");
-  }
+  const contentType = normalizeContentType(
+    input?.contentType,
+    "create_upload \u9700\u8981\u5408\u6CD5\u7684 'contentType'"
+  );
   const nsPath = normalizePath(opts.nsPath);
   const entryPath = normalizeEntryPath(input.path);
   const key = `${keyPrefixBare === "" ? "" : `${keyPrefixBare}/`}${entryPath}`;
@@ -18094,7 +18124,6 @@ async function createObjectContextUploadGrant(store, opts, input) {
     throw new TBError("unavailable", "\u5BF9\u8C61\u5B58\u50A8\u672A\u914D\u7F6E\u76F4\u4F20\u7B7E\u540D\u80FD\u529B", { retryable: false });
   }
   const ttlSec = assertPresignTtlSec(opts.uploadGrantTtlSec ?? PRESIGN_TTL_SEC_DEFAULT);
-  const contentType = input.contentType.trim();
   const expiresAt = new Date(Date.now() + ttlSec * 1e3).toISOString();
   const signed = await store.presignPut(key, ttlSec, {
     contentType,
@@ -18532,18 +18561,18 @@ function derivePresence(input) {
 var DEVICE_CALL_TIMEOUT_MS = 6e4;
 var DEVICE_REJECT_CLOSE_CODE = 1008;
 var DeviceGatewaySession = class {
-  constructor(io, opts) {
-    this.io = io;
-    this.opts = opts;
-    this.timeoutMs = opts.timeoutMs ?? DEVICE_CALL_TIMEOUT_MS;
-  }
-  io;
-  opts;
   phase_ = "awaiting-hello";
   helloSeen = false;
   results = /* @__PURE__ */ new Map();
   pending = /* @__PURE__ */ new Map();
   timeoutMs;
+  io;
+  opts;
+  constructor(io, opts) {
+    this.io = io;
+    this.opts = opts;
+    this.timeoutMs = opts.timeoutMs ?? DEVICE_CALL_TIMEOUT_MS;
+  }
   get phase() {
     return this.phase_;
   }
@@ -19350,18 +19379,12 @@ function normalizeTimestamp(value, field) {
   try {
     return normalizeExpiresAt(value);
   } catch (error51) {
-    if (error51 instanceof TBError && error51.code === "invalid_argument") {
+    if (isTBError(error51) && error51.code === "invalid_argument") {
       throw new TBError("invalid_argument", `${field} \u5FC5\u987B\u662F\u5E26\u65F6\u533A\u7684 ISO 8601 timestamp`);
     }
     throw error51;
   }
 }
-function normalizeContentType(value) {
-  if (typeof value !== "string" || value.trim() === "" || value.length > 255 || !value.includes("/") || /[\r\n\0]/.test(value)) {
-    throw new TBError("invalid_argument", "contentType \u4E0D\u5408\u6CD5");
-  }
-  return value.trim().toLowerCase();
-}
 function normalizeChecksum(value) {
   if (value === void 0) return void 0;
   if (typeof value !== "object" || value === null || Array.isArray(value)) {
@@ -19378,7 +19401,7 @@ function normalizeChecksum(value) {
   return { algorithm: "sha256", value: digest };
 }
 function normalizeUploadInput(input) {
-  const contentType = normalizeContentType(input?.contentType);
+  const contentType = normalizeContentType(input?.contentType, "contentType \u4E0D\u5408\u6CD5");
   let filename;
   if (input.filename !== void 0) {
     if (typeof input.filename !== "string" || input.filename.trim() === "" || input.filename.length > 1024 || /[\r\n\0]/.test(input.filename)) throw new TBError("invalid_argument", "filename \u4E0D\u5408\u6CD5");
@@ -19427,7 +19450,7 @@ function normalizeContentTypePattern(value) {
     const prefix = value.slice(0, -1);
     if (prefix.length > 1 && !/[\r\n\0]/.test(value)) return value.toLowerCase();
   }
-  return normalizeContentType(value);
+  return normalizeContentType(value, "contentType \u4E0D\u5408\u6CD5");
 }
 function descriptorOf(object2) {
   if (object2.status !== "ready" || object2.readyAt === void 0 || object2.size === void 0) throw stateCorrupt("ready object");
@@ -19449,6 +19472,15 @@ function descriptorOf(object2) {
   };
 }
 var StoreService = class {
+  maxObjectBytes;
+  now;
+  relayMaxBytes;
+  shareTtlSec;
+  tokenSecret;
+  uploadTtlSec;
+  cas;
+  state;
+  objects;
   constructor(state, objects, opts) {
     this.state = state;
     this.objects = objects;
@@ -19480,15 +19512,6 @@ var StoreService = class {
       "shareTtlSec"
     );
   }
-  state;
-  objects;
-  maxObjectBytes;
-  now;
-  relayMaxBytes;
-  shareTtlSec;
-  tokenSecret;
-  uploadTtlSec;
-  cas;
   /** 所有已存在记录的 CAS 共用 revision 期望，并拒绝错误的版本跃迁。 */
   async compareRecord(key, current, next) {
     if (next !== null && next.revision !== current.revision + 1)
@@ -19625,12 +19648,12 @@ var StoreService = class {
         ifNoneMatch: "*"
       });
     } catch (error51) {
-      if (error51 instanceof TBError && error51.code === "conflict") {
+      if (isTBError(error51) && error51.code === "conflict") {
         const existing = await this.objects.head(object2.driverKey);
         if (existing === null) throw error51;
         meta3 = existing;
       } else {
-        if (error51 instanceof TBError && error51.code === "rate_limited") {
+        if (isTBError(error51) && error51.code === "rate_limited") {
           await this.objects.delete(object2.driverKey);
           await this.failUpload(session, object2);
         }
@@ -20756,7 +20779,7 @@ function encodeCallContext(ctx) {
 function decodeCallContext(header) {
   let text;
   try {
-    text = new TextDecoder().decode(base64urlDecode(header));
+    text = new TextDecoder2().decode(base64urlDecode(header));
   } catch {
     throw new TBError("invalid_argument", `${HEADER_TB_CONTEXT} \u975E\u6CD5 base64url`);
   }
@@ -21340,9 +21363,9 @@ async function decodeToolSearchCursor(cursor, query, mode, revision, secret, opt
       await cursorCryptoKey(secret),
       sealed.slice(12)
     );
-    value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(new Uint8Array(plaintext)));
+    value = JSON.parse(new TextDecoder2("utf-8", { fatal: true }).decode(new Uint8Array(plaintext)));
   } catch (error51) {
-    if (error51 instanceof TBError) throw error51;
+    if (isTBError(error51)) throw error51;
     throw new TBError("invalid_argument", "\u641C\u7D22 cursor \u683C\u5F0F\u975E\u6CD5");
   }
   if (typeof value !== "object" || value === null || Array.isArray(value)) {
@@ -21408,36 +21431,45 @@ var TOOL_SEARCH_INSERT_SQL = `
 INSERT INTO tb_search_tools_v5 (path, name, description, effect, feedback)
 VALUES (?, ?, ?, ?, ?)
 `;
-var TOOL_SEARCH_INSERT_SNAPSHOT_SQL = "INSERT INTO tb_search_snapshots_v5(path, digest) VALUES (?, ?)";
-var META_SQL = "SELECT revision, seeded, cursor_secret FROM tb_search_meta_v5 WHERE singleton = 1";
-var SNAPSHOT_DIGESTS_SQL = "SELECT path, digest FROM tb_search_snapshots_v5 ORDER BY path";
-var PATH_STATE_SQL = `
+function toolSearchFixedStatements(syntax) {
+  const p = (index) => syntax.placeholder(index);
+  const int2 = syntax.castInt ?? ((expr) => expr);
+  return {
+    bumpRevision: "UPDATE tb_search_meta_v5 SET revision = revision + 1 WHERE singleton = 1",
+    completeRebuild: "UPDATE tb_search_meta_v5 SET seeded = 1, revision = revision + 1 WHERE singleton = 1",
+    deleteAllSnapshots: "DELETE FROM tb_search_snapshots_v5",
+    deleteAllTools: "DELETE FROM tb_search_tools_v5",
+    deleteSnapshot: `DELETE FROM tb_search_snapshots_v5 WHERE path = ${p(1)}`,
+    deleteSnapshotPrefix: `
+DELETE FROM tb_search_snapshots_v5
+WHERE path = ${p(1)} OR substr(path, 1, length(${p(2)}) + 1) = ${p(3)} || '/'
+`,
+    deleteTools: `DELETE FROM tb_search_tools_v5 WHERE path = ${p(1)}`,
+    deleteToolsPrefix: `
+DELETE FROM tb_search_tools_v5
+WHERE path = ${p(1)} OR substr(path, 1, length(${p(2)}) + 1) = ${p(3)} || '/'
+`,
+    insertSnapshot: `INSERT INTO tb_search_snapshots_v5(path, digest) VALUES (${p(1)}, ${p(2)})`,
+    meta: `SELECT ${int2("revision")} AS revision, ${int2("seeded")} AS seeded, cursor_secret FROM tb_search_meta_v5 WHERE singleton = 1`,
+    // replace 的前置探测:一次拿到本 path 的 digest、是否残留 source 行、已用节点数。
+    pathState: `
 SELECT snapshots.digest,
-  EXISTS(SELECT 1 FROM tb_search_tools_v5 WHERE path = ?) AS has_tools,
-  (SELECT COUNT(*) FROM tb_search_snapshots_v5) AS path_count
+  ${int2(`EXISTS(SELECT 1 FROM tb_search_tools_v5 WHERE path = ${p(1)})`)} AS has_tools,
+  ${int2("(SELECT COUNT(*) FROM tb_search_snapshots_v5)")} AS path_count
 FROM (SELECT 1) AS singleton
-LEFT JOIN tb_search_snapshots_v5 AS snapshots ON snapshots.path = ?
-`;
-var PRESENT_SQL = "SELECT 1 AS present FROM tb_search_tools_v5 WHERE path = ? LIMIT 1";
-var PRESENT_PREFIX_SQL = `
+LEFT JOIN tb_search_snapshots_v5 AS snapshots ON snapshots.path = ${p(2)}
+`,
+    present: `SELECT 1 AS present FROM tb_search_tools_v5 WHERE path = ${p(1)} LIMIT 1`,
+    presentPrefix: `
 SELECT 1 AS present FROM tb_search_tools_v5
-WHERE path = ? OR substr(path, 1, length(?) + 1) = ? || '/'
+WHERE path = ${p(1)} OR substr(path, 1, length(${p(2)}) + 1) = ${p(3)} || '/'
 LIMIT 1
-`;
-var DELETE_TOOLS_SQL = "DELETE FROM tb_search_tools_v5 WHERE path = ?";
-var DELETE_SNAPSHOT_SQL = "DELETE FROM tb_search_snapshots_v5 WHERE path = ?";
-var DELETE_TOOLS_PREFIX_SQL = `
-DELETE FROM tb_search_tools_v5
-WHERE path = ? OR substr(path, 1, length(?) + 1) = ? || '/'
-`;
-var DELETE_SNAPSHOT_PREFIX_SQL = `
-DELETE FROM tb_search_snapshots_v5
-WHERE path = ? OR substr(path, 1, length(?) + 1) = ? || '/'
-`;
-var DELETE_ALL_TOOLS_SQL = "DELETE FROM tb_search_tools_v5";
-var DELETE_ALL_SNAPSHOTS_SQL = "DELETE FROM tb_search_snapshots_v5";
-var BUMP_REVISION_SQL = "UPDATE tb_search_meta_v5 SET revision = revision + 1 WHERE singleton = 1";
-var COMPLETE_REBUILD_SQL = "UPDATE tb_search_meta_v5 SET seeded = 1, revision = revision + 1 WHERE singleton = 1";
+`,
+    snapshotDigests: "SELECT path, digest FROM tb_search_snapshots_v5 ORDER BY path"
+  };
+}
+var SQLITE_FIXED_STATEMENTS = toolSearchFixedStatements({ placeholder: () => "?" });
+var TOOL_SEARCH_INSERT_SNAPSHOT_SQL = SQLITE_FIXED_STATEMENTS.insertSnapshot;
 function toolSearchEffectSql(effect) {
   switch (effect) {
     case "read":
@@ -21544,31 +21576,16 @@ var sqliteSearchDialect = {
     );
   },
   schemaStatements: TOOL_SEARCH_SCHEMA_STATEMENTS,
-  statements: {
-    bumpRevision: BUMP_REVISION_SQL,
-    completeRebuild: COMPLETE_REBUILD_SQL,
-    deleteAllSnapshots: DELETE_ALL_SNAPSHOTS_SQL,
-    deleteAllTools: DELETE_ALL_TOOLS_SQL,
-    deleteSnapshot: DELETE_SNAPSHOT_SQL,
-    deleteSnapshotPrefix: DELETE_SNAPSHOT_PREFIX_SQL,
-    deleteTools: DELETE_TOOLS_SQL,
-    deleteToolsPrefix: DELETE_TOOLS_PREFIX_SQL,
-    insertSnapshot: TOOL_SEARCH_INSERT_SNAPSHOT_SQL,
-    meta: META_SQL,
-    pathState: PATH_STATE_SQL,
-    present: PRESENT_SQL,
-    presentPrefix: PRESENT_PREFIX_SQL,
-    snapshotDigests: SNAPSHOT_DIGESTS_SQL
-  }
+  statements: SQLITE_FIXED_STATEMENTS
 };
 var SqlSearchIndex = class {
+  capabilities = ["search"];
+  dialect;
+  driver;
   constructor(driver, dialect = sqliteSearchDialect) {
     this.driver = driver;
     this.dialect = dialect;
   }
-  driver;
-  capabilities = ["search"];
-  dialect;
   /** 容量 trigger 的 ABORT 在各驱动里错误形状不同,统一按标记串归一。 */
   async writeOrCapacity(statements) {
     try {
@@ -21788,7 +21805,11 @@ var PG_SEARCH_SCHEMA_STATEMENTS = [
     FOR EACH ROW EXECUTE FUNCTION tb_search_snapshots_v5_capacity()`
 ];
 var PG_SEARCH_WRITE_LOCK_KEY = 2069799624;
-var PG_SEARCH_INSERT_SNAPSHOT_SQL = "INSERT INTO tb_search_snapshots_v5(path, digest) VALUES ($1, $2)";
+var PG_FIXED_STATEMENTS = toolSearchFixedStatements({
+  castInt: (expr) => `${expr}::int`,
+  placeholder: (index) => `$${index}`
+});
+var PG_SEARCH_INSERT_SNAPSHOT_SQL = PG_FIXED_STATEMENTS.insertSnapshot;
 function pgBulkInsertSql(table, columns, rows) {
   const tuples = [];
   for (let r = 0; r < rows; r++) {
@@ -21808,38 +21829,6 @@ var PG_SEARCH_TOOLS_COLUMNS = [
 var PG_SEARCH_SNAPSHOTS_TABLE = "tb_search_snapshots_v5";
 var PG_SEARCH_SNAPSHOTS_COLUMNS = ["path", "digest"];
 var PG_SEARCH_INSERT_ROWS_MAX = 1e3;
-var META_SQL2 = `
-SELECT revision::int AS revision, seeded::int AS seeded, cursor_secret
-FROM tb_search_meta_v5 WHERE singleton = 1
-`;
-var SNAPSHOT_DIGESTS_SQL2 = "SELECT path, digest FROM tb_search_snapshots_v5 ORDER BY path";
-var PATH_STATE_SQL2 = `
-SELECT snapshots.digest,
-  EXISTS(SELECT 1 FROM tb_search_tools_v5 WHERE path = $1)::int AS has_tools,
-  (SELECT COUNT(*) FROM tb_search_snapshots_v5)::int AS path_count
-FROM (SELECT 1) AS singleton
-LEFT JOIN tb_search_snapshots_v5 AS snapshots ON snapshots.path = $2
-`;
-var PRESENT_SQL2 = "SELECT 1 AS present FROM tb_search_tools_v5 WHERE path = $1 LIMIT 1";
-var PRESENT_PREFIX_SQL2 = `
-SELECT 1 AS present FROM tb_search_tools_v5
-WHERE path = $1 OR substr(path, 1, length($2) + 1) = $3 || '/'
-LIMIT 1
-`;
-var DELETE_TOOLS_SQL2 = "DELETE FROM tb_search_tools_v5 WHERE path = $1";
-var DELETE_SNAPSHOT_SQL2 = "DELETE FROM tb_search_snapshots_v5 WHERE path = $1";
-var DELETE_TOOLS_PREFIX_SQL2 = `
-DELETE FROM tb_search_tools_v5
-WHERE path = $1 OR substr(path, 1, length($2) + 1) = $3 || '/'
-`;
-var DELETE_SNAPSHOT_PREFIX_SQL2 = `
-DELETE FROM tb_search_snapshots_v5
-WHERE path = $1 OR substr(path, 1, length($2) + 1) = $3 || '/'
-`;
-var DELETE_ALL_TOOLS_SQL2 = "DELETE FROM tb_search_tools_v5";
-var DELETE_ALL_SNAPSHOTS_SQL2 = "DELETE FROM tb_search_snapshots_v5";
-var BUMP_REVISION_SQL2 = "UPDATE tb_search_meta_v5 SET revision = revision + 1 WHERE singleton = 1";
-var COMPLETE_REBUILD_SQL2 = "UPDATE tb_search_meta_v5 SET seeded = 1, revision = revision + 1 WHERE singleton = 1";
 var pgSearchDialect = {
   candidateStatement: (query, limit, offset, rawConstraints) => {
     const constraints = normalizeToolSearchOptions(rawConstraints);
@@ -21857,22 +21846,7 @@ var pgSearchDialect = {
     );
   },
   schemaStatements: PG_SEARCH_SCHEMA_STATEMENTS,
-  statements: {
-    bumpRevision: BUMP_REVISION_SQL2,
-    completeRebuild: COMPLETE_REBUILD_SQL2,
-    deleteAllSnapshots: DELETE_ALL_SNAPSHOTS_SQL2,
-    deleteAllTools: DELETE_ALL_TOOLS_SQL2,
-    deleteSnapshot: DELETE_SNAPSHOT_SQL2,
-    deleteSnapshotPrefix: DELETE_SNAPSHOT_PREFIX_SQL2,
-    deleteTools: DELETE_TOOLS_SQL2,
-    deleteToolsPrefix: DELETE_TOOLS_PREFIX_SQL2,
-    insertSnapshot: PG_SEARCH_INSERT_SNAPSHOT_SQL,
-    meta: META_SQL2,
-    pathState: PATH_STATE_SQL2,
-    present: PRESENT_SQL2,
-    presentPrefix: PRESENT_PREFIX_SQL2,
-    snapshotDigests: SNAPSHOT_DIGESTS_SQL2
-  }
+  statements: PG_FIXED_STATEMENTS
 };
 
 // ../core/src/secret/secretStore.ts
@@ -22004,7 +21978,7 @@ var SecretStoreImpl = class _SecretStoreImpl {
       await this.key(),
       ciphertext
     );
-    return new TextDecoder().decode(plaintext);
+    return new TextDecoder2().decode(plaintext);
   }
 };
 
@@ -22509,7 +22483,7 @@ function rewriteRemotePath(nodePath, requestPath, baseUrl) {
   return rel === "" ? base : `${base}/${rel}`;
 }
 function hostOf(url2) {
-  const m = /^[a-zA-Z][a-zA-Z0-9+.-]*:\/\/([^/?#]*)/.exec(url2);
+  const m = /^[a-zA-Z][a-zA-Z0-9+.-]*:\/\/([^/?#\\]*)/.exec(url2);
   if (m === null) return void 0;
   let authority = m[1] ?? "";
   const at = authority.lastIndexOf("@");
@@ -22608,10 +22582,10 @@ function byPath(a, b) {
   return a.path < b.path ? -1 : a.path > b.path ? 1 : 0;
 }
 var NodeRegistryStore = class {
+  store;
   constructor(store) {
     this.store = store;
   }
-  store;
   keyOf(path) {
     return KEY_NODE + path;
   }
@@ -23265,6 +23239,7 @@ export {
   TBError,
   isTBError,
   normalizePath,
+  assertNoCollision,
   validatePath,
   KEY_SK_HASH,
   KEY_SK_ID,
@@ -23278,9 +23253,10 @@ export {
   checkRegisterPath,
   assertSecretRefUse,
   NEVER,
+  safeParse,
   toJSONSchema,
   iso_exports,
-  safeParse2 as safeParse,
+  safeParse2,
   string2 as string,
   email2 as email,
   url,
@@ -23300,6 +23276,7 @@ export {
   literal,
   optional,
   lazy,
+  custom,
   preprocess,
   ZodIssueCode,
   coerce_exports,