@acosmi/sdk-ts 1.4.2 → 1.5.0

package/dist/index.mjs

@@ -3464,6 +3464,115 @@ function normalizeRawMessages(rm) {
 // src/shared/index.ts
 init_errors();
 
+// src/shared/operation.ts
+var IdempotencyKeyHeader = "Idempotency-Key";
+
+// src/shared/retry-advice.ts
+var RETRY_ADVICE_REASONS = [
+  "unknown",
+  "retrying",
+  "failed",
+  "gate_closed",
+  "step_up_required",
+  "tenant_mismatch",
+  "insufficient_scope",
+  "quota_exceeded",
+  "provider_timeout",
+  "local_verify_failed",
+  "billing_preflight_failed"
+];
+var COMPLIANCE_KEY_TO_RETRY_REASON = {
+  // 通用 / token / scope
+  COMPLIANCE_UNAUTHORIZED: "failed",
+  COMPLIANCE_INSUFFICIENT_SCOPE: "insufficient_scope",
+  COMPLIANCE_STEP_UP_REQUIRED: "step_up_required",
+  COMPLIANCE_TOKEN_INVALID: "failed",
+  // 主体快照
+  SUBJECT_SNAPSHOT_REQUIRED: "failed",
+  SUBJECT_SNAPSHOT_NOT_FOUND: "failed",
+  SUBJECT_SNAPSHOT_TENANT_MISMATCH: "tenant_mismatch",
+  // Evidence / Timestamp / Package / Report
+  EVIDENCE_ASSET_NOT_FOUND: "failed",
+  EVIDENCE_ASSET_HASH_MISMATCH: "local_verify_failed",
+  EVIDENCE_ASSET_PAYLOAD_REQUIRED: "failed",
+  TIMESTAMP_TOKEN_NOT_FOUND: "failed",
+  TIMESTAMP_PROVIDER_FAILED: "failed",
+  TIMESTAMP_PROVIDER_UNKNOWN: "unknown",
+  TIMESTAMP_LOCAL_VERIFY_FAILED: "local_verify_failed",
+  TIMESTAMP_PROVIDER_NOT_AVAILABLE: "provider_timeout",
+  EVIDENCE_PACKAGE_NOT_FOUND: "failed",
+  EVIDENCE_PACKAGE_TIMESTAMP_REQUIRED: "failed",
+  EVIDENCE_PACKAGE_MANIFEST_HASH_MISMATCH: "local_verify_failed",
+  REPORT_NOT_FOUND: "failed",
+  REPORT_ALREADY_PUBLISHED: "failed",
+  REPORT_DRAFT_REQUIRED: "failed",
+  EVIDENCE_VERIFY_TARGET_REQUIRED: "failed",
+  EVIDENCE_VERIFY_TARGET_NOT_FOUND: "failed",
+  // Provider request
+  PROVIDER_REQUEST_UNKNOWN_NO_RETRY: "unknown",
+  PROVIDER_CALLBACK_SOURCE_INVALID: "failed",
+  PROVIDER_NOT_CONFIGURED: "gate_closed",
+  PROVIDER_REQUEST_NOT_FOUND: "failed",
+  PROVIDER_REQUEST_IDEMPOTENCY_REQUIRED: "failed",
+  PROVIDER_REQUEST_STATUS_NOT_TERMINAL: "retrying",
+  // Envelope
+  ENVELOPE_NOT_FOUND: "failed",
+  ENVELOPE_TENANT_MISMATCH: "tenant_mismatch",
+  ENVELOPE_STATE_NOT_ALLOWED: "failed",
+  ENVELOPE_GATE_CLOSED: "gate_closed",
+  CONTRACT_NOT_FOUND: "failed",
+  CONTRACT_HASH_MISMATCH: "local_verify_failed",
+  PROVIDER_AUTHORIZATION_NOT_CONFIRMED: "failed",
+  ENVELOPE_EVIDENCE_NOT_READY: "retrying",
+  // Seal approval / use
+  SEAL_ASSET_NOT_FOUND: "failed",
+  SEAL_APPROVAL_NOT_FOUND: "failed",
+  SEAL_APPROVAL_STATE_NOT_APPROVED: "failed",
+  SEAL_APPROVAL_EXPIRED: "failed",
+  SEAL_APPROVAL_ALREADY_USED: "failed",
+  SEAL_APPROVAL_NONCE_USED: "failed",
+  SEAL_APPROVAL_SEAL_MISMATCH: "failed",
+  SEAL_APPROVAL_LOCATION_MISMATCH: "failed",
+  SEAL_APPROVAL_TRANSACTOR_MISMATCH: "failed",
+  SEAL_APPROVAL_CONTRACT_HASH_MISMATCH: "local_verify_failed",
+  SEAL_APPROVAL_INVALID_TRANSITION: "failed",
+  SEAL_USE_ALREADY_CONSUMED: "failed",
+  // Audit chain
+  AUDIT_CHAIN_TAMPER_DETECTED: "local_verify_failed",
+  // Billing
+  BILLING_COMMIT_REQUIRES_LOCAL_VERIFY: "local_verify_failed",
+  BILLING_COMMIT_REQUIRES_PROVIDER_SUCCESS: "billing_preflight_failed",
+  BILLING_CALLBACK_CANNOT_COMMIT: "billing_preflight_failed",
+  BILLING_PROVIDER_UNKNOWN_NOT_COMMITTABLE: "billing_preflight_failed",
+  BILLING_S2S_FORBIDDEN: "failed",
+  // SDK fallback
+  UNKNOWN_COMPLIANCE_ERROR: "unknown"
+};
+function retryReasonForComplianceKey(key) {
+  return COMPLIANCE_KEY_TO_RETRY_REASON[key] ?? "unknown";
+}
+var OAUTH_ERROR_TO_RETRY_REASON = {
+  insufficient_scope: "insufficient_scope",
+  invalid_token: "failed",
+  invalid_grant: "failed",
+  invalid_request: "failed",
+  access_denied: "failed",
+  unsupported_grant_type: "failed"
+};
+function retryReasonForOAuthError(oauthError) {
+  return OAUTH_ERROR_TO_RETRY_REASON[oauthError] ?? "unknown";
+}
+function complianceErrorToRetryAdvice(info) {
+  return {
+    retryable: info.retryable,
+    sameIdempotencyKeyRequired: !info.terminal,
+    manualActionRequired: info.terminal || info.stepUpRequired,
+    reason: retryReasonForComplianceKey(info.key),
+    developerMessage: info.message,
+    supportCode: `compliance:${info.code}`
+  };
+}
+
 // src/auth/scopes.ts
 var ScopeAI = "ai";
 var ScopeSkills = "skills";
@@ -4827,6 +4936,8 @@ var ScopeComplianceSealUseExecute = "compliance:seal_use:execute";
 var ScopeComplianceReportsRead = "compliance:reports:read";
 var ScopeComplianceReportsWrite = "compliance:reports:write";
 var ScopeComplianceReportsPublish = "compliance:reports:publish";
+var ScopeComplianceContractTemplateRead = "compliance:contract_template:read";
+var ScopeComplianceContractTemplateWrite = "compliance:contract_template:write";
 function complianceScopes() {
   return [
     ScopeComplianceEvidenceRead,
@@ -4841,7 +4952,9 @@ function complianceScopes() {
     ScopeComplianceSealUseExecute,
     ScopeComplianceReportsRead,
     ScopeComplianceReportsWrite,
-    ScopeComplianceReportsPublish
+    ScopeComplianceReportsPublish,
+    ScopeComplianceContractTemplateRead,
+    ScopeComplianceContractTemplateWrite
   ];
 }
 
@@ -5063,6 +5176,21 @@ var ComplianceClient = class {
       signal
     );
   }
+  /**
+   * 读 — 证据资产分页列表（compliance gateway S1）。
+   *
+   * 走 GET 读路径（允许 401 单次刷新重放）。返回 yudao `PageResult<T>`
+   * （`{ total, list }`）。所有过滤项可选；`createTimeStart` / `createTimeEnd`
+   * 由调用方按 `yyyy-MM-dd HH:mm:ss` 提供，SDK 原样透传。
+   */
+  listEvidenceAssets(req = {}, signal) {
+    return this.read(
+      "GET",
+      `/compliance/evidence/assets/page${pageQuery(req, ["assetType", "status", "createTimeStart", "createTimeEnd"])}`,
+      null,
+      signal
+    );
+  }
   /**
    * 公开 verify。隐私边界：返回字段不含 PII / 合同原文 / storage / provider raw。
    *
@@ -5107,6 +5235,20 @@ var ComplianceClient = class {
       signal
     );
   }
+  /**
+   * 读 — 时间章分页列表（compliance gateway S1）。
+   *
+   * 走 GET 读路径。返回 yudao `PageResult<T>`。所有过滤项可选；`createTimeStart` /
+   * `createTimeEnd` 由调用方按 `yyyy-MM-dd HH:mm:ss` 提供，SDK 原样透传。
+   */
+  listTimestamps(req = {}, signal) {
+    return this.read(
+      "GET",
+      `/compliance/timestamps/page${pageQuery(req, ["provider", "verificationStatus", "createTimeStart", "createTimeEnd"])}`,
+      null,
+      signal
+    );
+  }
   /** verify — 本地离线校验已申请的时间章。 */
   verifyTimestamp(req, opts = {}) {
     return this.write(
@@ -5131,6 +5273,38 @@ var ComplianceClient = class {
     );
   }
   // =========================================================================
+  // TSA readonly views (read-only — compliance gateway S3 / gap-register U-7)
+  // =========================================================================
+  /**
+   * 读 — 时间章授权机构（TSA）provider 列表（compliance gateway S3）。
+   *
+   * 走 GET 读路径（允许 401 单次刷新重放）。后端 G3 为每个 TSA provider 返回
+   * 一条 {@link TsaProvider}：名称、所处环境、当前是否可用。只读视图，不含
+   * provider 端点 / 凭证 / 证书等内部接入材料。
+   */
+  listTsaProviders(signal) {
+    return this.read(
+      "GET",
+      "/compliance/timestamps/providers",
+      null,
+      signal
+    );
+  }
+  /**
+   * 读 — 时间章统计视图（compliance gateway S3）。
+   *
+   * 走 GET 读路径（允许 401 单次刷新重放）。返回 {@link TsaStats}：时间章总数
+   * + 按校验状态分桶的计数。只读聚合视图。
+   */
+  getTsaStats(signal) {
+    return this.read(
+      "GET",
+      "/compliance/timestamps/stats",
+      null,
+      signal
+    );
+  }
+  // =========================================================================
   // Evidence Package
   // =========================================================================
   /** 构建证据包（写）。 */
@@ -5143,6 +5317,20 @@ var ComplianceClient = class {
       writeCtx(opts)
     );
   }
+  /**
+   * 读 — 证据包分页列表（compliance gateway S1）。
+   *
+   * 走 GET 读路径。返回 yudao `PageResult<T>`。所有过滤项可选；`createTimeStart` /
+   * `createTimeEnd` 由调用方按 `yyyy-MM-dd HH:mm:ss` 提供，SDK 原样透传。
+   */
+  listEvidencePackages(req = {}, signal) {
+    return this.read(
+      "GET",
+      `/compliance/evidence/packages/page${pageQuery(req, ["status", "createTimeStart", "createTimeEnd"])}`,
+      null,
+      signal
+    );
+  }
   // =========================================================================
   // Report
   // =========================================================================
@@ -5159,6 +5347,20 @@ var ComplianceClient = class {
       signal
     );
   }
+  /**
+   * 读 — 证据报告分页列表（compliance gateway S1）。
+   *
+   * 走 GET 读路径。返回 yudao `PageResult<T>`。所有过滤项可选；`createTimeStart` /
+   * `createTimeEnd` 由调用方按 `yyyy-MM-dd HH:mm:ss` 提供，SDK 原样透传。
+   */
+  listReports(req = {}, signal) {
+    return this.read(
+      "GET",
+      `/compliance/reports/page${pageQuery(req, ["status", "createTimeStart", "createTimeEnd"])}`,
+      null,
+      signal
+    );
+  }
   /**
    * 发布报告（写，step-up 必须）。
    *
@@ -5209,6 +5411,20 @@ var ComplianceClient = class {
       signal
     );
   }
+  /**
+   * 读 — 签署 envelope 分页列表（compliance gateway S1）。
+   *
+   * 走 GET 读路径。返回 yudao `PageResult<T>`。所有过滤项可选；`createTimeStart` /
+   * `createTimeEnd` 由调用方按 `yyyy-MM-dd HH:mm:ss` 提供，SDK 原样透传。
+   */
+  listSigningEnvelopes(req = {}, signal) {
+    return this.read(
+      "GET",
+      `/compliance/signing-envelopes/page${pageQuery(req, ["status", "createTimeStart", "createTimeEnd"])}`,
+      null,
+      signal
+    );
+  }
   /**
    * 正式签署（写，step-up 必须）。
    *
@@ -5245,6 +5461,52 @@ var ComplianceClient = class {
       writeCtx(opts)
     );
   }
+  /**
+   * 读 — envelope 下挂的合同列表（compliance gateway S4）。
+   *
+   * 走 GET 读路径（允许 401 单次刷新重放）。后端 G4 为每份挂在该 envelope 上的
+   * 合同返回一条 {@link EnvelopeContractItem}：编号 / 标题 / MIME / 大小 / 哈希
+   * 指纹 / 状态。返回普通数组（非 `PageResult`）。SDK-safe 视图——不含合同原文 /
+   * storage key / provider raw payload。
+   */
+  listEnvelopeContracts(envelopeId, signal) {
+    return this.read(
+      "GET",
+      `/compliance/signing-envelopes/${encodeURIComponent(envelopeId)}/contracts`,
+      null,
+      signal
+    );
+  }
+  /**
+   * 读 — envelope 关联的 provider 请求列表（compliance gateway S4）。
+   *
+   * 走 GET 读路径（允许 401 单次刷新重放）。后端 G4 复用操作投影
+   * {@link OperationPageItem}：描述每次 provider 请求本身的执行进度，与 envelope
+   * 领域状态正交。返回普通数组（非 `PageResult`）。
+   */
+  listEnvelopeProviderRequests(envelopeId, signal) {
+    return this.read(
+      "GET",
+      `/compliance/signing-envelopes/${encodeURIComponent(envelopeId)}/provider-requests`,
+      null,
+      signal
+    );
+  }
+  /**
+   * 作废 envelope（写，compliance gateway S4）。
+   *
+   * 走 compliance 写路径——发送前 `ensureToken` 一次、不自动重试、`401` 不刷新
+   * 重放；支持 `Idempotency-Key` header（强烈建议调用方持久化幂等键，重试 / 恢复
+   * 时复用，避免重复作废）。`req.reason` 为必填的作废原因，随 JSON body 提交。
+   */
+  voidEnvelope(envelopeId, req, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/signing-envelopes/${encodeURIComponent(envelopeId)}/void`,
+      req,
+      writeCtx(opts)
+    );
+  }
   // =========================================================================
   // Seal Approval
   // =========================================================================
@@ -5319,6 +5581,45 @@ var ComplianceClient = class {
       signal
     );
   }
+  /**
+   * 读 — 用印审批分页列表（compliance gateway S1）。
+   *
+   * 与 {@link listPendingSealApprovals}（仅 pending、不分页）不同，本方法支持分页与
+   * 状态 / 时间过滤。走 GET 读路径。返回 yudao `PageResult<T>`。所有过滤项可选；
+   * `createTimeStart` / `createTimeEnd` 由调用方按 `yyyy-MM-dd HH:mm:ss` 提供，
+   * SDK 原样透传。
+   */
+  listSealApprovals(req = {}, signal) {
+    return this.read(
+      "GET",
+      `/compliance/seal-approvals/page${pageQuery(req, ["status", "createTimeStart", "createTimeEnd"])}`,
+      null,
+      signal
+    );
+  }
+  // =========================================================================
+  // Seal Use (read-only — compliance gateway S6 / gap-register U-4)
+  // =========================================================================
+  /**
+   * 读 — 用印执行记录分页列表（compliance gateway S6）。
+   *
+   * 走 GET 读路径（允许 401 单次刷新重放）。返回 yudao `PageResult<T>`
+   * （`{ total, list }`）。一次用印执行（seal use）描述 envelope / contract /
+   * seal / 审批联动后【真正调用 provider 落章】的那一笔记录，与 envelope
+   * 领域状态正交。所有过滤项可选；`createTimeStart` / `createTimeEnd` 由调用方
+   * 按 `yyyy-MM-dd HH:mm:ss` 提供，SDK 原样透传。
+   *
+   * 与后端复用同一只读 scope `CONTRACT_SIGNING_READ`
+   *（{@link ScopeComplianceContractSigningRead}）——不引入新 scope。
+   */
+  listSealUses(req = {}, signal) {
+    return this.read(
+      "GET",
+      `/compliance/seal-uses/page${pageQuery(req, ["sealId", "envelopeId", "usageStatus", "createTimeStart", "createTimeEnd"])}`,
+      null,
+      signal
+    );
+  }
   // =========================================================================
   // Provider Request (read-only)
   // =========================================================================
@@ -5346,6 +5647,206 @@ var ComplianceClient = class {
     );
   }
   // =========================================================================
+  // Capabilities (read-only — compliance gateway S2 / gap-register U-6)
+  // =========================================================================
+  /**
+   * 读 — compliance 能力闸门列表（compliance gateway S2）。
+   *
+   * 走 GET 读路径（允许 401 单次刷新重放）。后端 G2 为每个高风险 / 收费动作
+   * （`signEnvelope` / `createH5SigningUrl` / `publishReport` /
+   * `approveSealApproval` / `executeSealUse` / `createSeal`）返回一条
+   * {@link ComplianceCapability}：是否可执行、所处状态、所需 scope / step-up。
+   *
+   * 调用方在高风险动作执行【前】查询本结果做门控；拿不到能力时必须 fail-closed
+   *（按 `executable=false` 处理）。
+   */
+  getCapabilities(signal) {
+    return this.read(
+      "GET",
+      "/compliance/capabilities",
+      null,
+      signal
+    );
+  }
+  /**
+   * 读 — 单个动作的能力闸门视图（便捷方法）。
+   *
+   * 拉取完整 {@link getCapabilities} 列表并返回 `action` 匹配的那一条，无匹配时
+   * 返回 `undefined`。**每次调用产生一次网络请求**——需要门控多个动作时应改用
+   * {@link getCapabilities} 一次性取回再本地查表，避免重复请求。
+   *
+   * 与 {@link getCapabilities} 一致走 GET 读路径（允许 401 单次刷新重放）。
+   */
+  async getFeatureGate(action, signal) {
+    const caps = await this.getCapabilities(signal);
+    return caps.find((c) => c.action === action);
+  }
+  // =========================================================================
+  // Operation projection (read-only — compliance gateway S2 / gap-register U-5)
+  // =========================================================================
+  /**
+   * 读 — compliance 操作投影分页列表（compliance gateway S2）。
+   *
+   * 走 GET 读路径。返回 yudao `PageResult<T>`（`{ total, list }`）。所有过滤项
+   * 可选；`createTimeStart` / `createTimeEnd` 由调用方按 `yyyy-MM-dd HH:mm:ss`
+   * 提供，SDK 原样透传，不做格式校验或时区转换。
+   *
+   * 操作投影描述【一次操作】本身的执行进度，与履约对象的领域状态正交。
+   */
+  listOperations(req = {}, signal) {
+    return this.read(
+      "GET",
+      `/compliance/operations/page${pageQuery(req, ["status", "createTimeStart", "createTimeEnd"])}`,
+      null,
+      signal
+    );
+  }
+  /**
+   * 读 — compliance 操作投影详情（compliance gateway S2）。
+   *
+   * `id` 为数值行主键（非 `operationId` 幂等键）。走 GET 读路径（允许 401 单次
+   * 刷新重放）。
+   */
+  getOperation(id, signal) {
+    return this.read(
+      "GET",
+      `/compliance/operations/${encodeURIComponent(id)}`,
+      null,
+      signal
+    );
+  }
+  // =========================================================================
+  // Contract Template (compliance gateway S5 — gap-register U-2)
+  // =========================================================================
+  /**
+   * 创建合同模板（写）。
+   *
+   * 走 compliance 写路径——发送前 `ensureToken` 一次、不自动重试、`401` 不刷新
+   * 重放；支持 `Idempotency-Key` header（强烈建议调用方持久化幂等键，重试 / 恢复
+   * 时复用，避免重复创建模板）。模板创建后初始状态为 `DRAFT`。
+   */
+  createContractTemplate(req, opts = {}) {
+    return this.write(
+      "POST",
+      "/compliance/contract-templates",
+      req,
+      writeCtx(opts)
+    );
+  }
+  /**
+   * 更新合同模板（写，仅 DRAFT 状态）。
+   *
+   * 走 compliance 写路径——`Idempotency-Key`、不重试、`401` 不刷新重放。所有字段
+   * 可选，缺省字段视为不修改。服务端在 PUBLISHED / ARCHIVED 状态下会拒绝更新。
+   */
+  updateContractTemplate(id, req, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/contract-templates/${encodeURIComponent(id)}`,
+      req,
+      writeCtx(opts)
+    );
+  }
+  /**
+   * 删除合同模板（写，仅 DRAFT 状态）。
+   *
+   * 走 compliance 写路径——`Idempotency-Key`、不重试、`401` 不刷新重放。服务端
+   * 在 PUBLISHED / ARCHIVED 状态下会拒绝删除——已发布的模板应改走 `archive`。
+   */
+  deleteContractTemplate(id, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/contract-templates/${encodeURIComponent(id)}/delete`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  /** 读 — 合同模板详情。 */
+  getContractTemplate(id, signal) {
+    return this.read(
+      "GET",
+      `/compliance/contract-templates/${encodeURIComponent(id)}`,
+      null,
+      signal
+    );
+  }
+  /**
+   * 读 — 合同模板分页列表（compliance gateway S5）。
+   *
+   * 走 GET 读路径（允许 401 单次刷新重放）。返回 yudao `PageResult<T>`
+   * （`{ total, list }`）。所有过滤项可选；`createTimeStart` / `createTimeEnd`
+   * 由调用方按 `yyyy-MM-dd HH:mm:ss` 提供，SDK 原样透传。列表项视图
+   * {@link ContractTemplatePageItem} 不含 `fields`——字段叠加只在详情 / 版本
+   * 快照里返回。
+   */
+  listContractTemplates(req = {}, signal) {
+    return this.read(
+      "GET",
+      `/compliance/contract-templates/page${pageQuery(req, ["status", "createTimeStart", "createTimeEnd"])}`,
+      null,
+      signal
+    );
+  }
+  /**
+   * 上传合同模板 PDF（写）。
+   *
+   * 走 compliance 写路径——`Idempotency-Key`、不重试、`401` 不刷新重放。请求体
+   * 为 `{ pdfBase64 }`；SDK 不在客户端做 PDF 解析 / 几何校验，原样透传给后端。
+   * 返回上传后的最新模板视图（含 `pdfHash` / `pdfPageCount`）。
+   */
+  uploadContractTemplatePdf(id, req, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/contract-templates/${encodeURIComponent(id)}/pdf`,
+      req,
+      writeCtx(opts)
+    );
+  }
+  /**
+   * 发布合同模板（写）。DRAFT → PUBLISHED，落版本快照。
+   *
+   * 走 compliance 写路径——`Idempotency-Key`、不重试、`401` 不刷新重放。
+   * publish 后 `currentVersion` 递增，`fields` 与 `pdfHash` 同步固化进版本表。
+   */
+  publishContractTemplate(id, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/contract-templates/${encodeURIComponent(id)}/publish`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  /**
+   * 归档合同模板（写）。PUBLISHED → ARCHIVED。
+   *
+   * 走 compliance 写路径——`Idempotency-Key`、不重试、`401` 不刷新重放。
+   * 已归档模板只读，不再允许 publish / 编辑 / 删除。
+   */
+  archiveContractTemplate(id, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/contract-templates/${encodeURIComponent(id)}/archive`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  /**
+   * 读 — 合同模板版本快照列表。
+   *
+   * 走 GET 读路径（允许 401 单次刷新重放）。返回 {@link ContractTemplateVersion}
+   * 普通数组（非 `PageResult`）——每次 publish 落一个不可变快照，记录当时的
+   * `name` / `pdfHash` / `fields` / `statusAtSnapshot`，是离线复核 / 版本对账
+   * 的依据。
+   */
+  listContractTemplateVersions(id, signal) {
+    return this.read(
+      "GET",
+      `/compliance/contract-templates/${encodeURIComponent(id)}/versions`,
+      null,
+      signal
+    );
+  }
+  // =========================================================================
   // Error classification (re-export for convenience)
   // =========================================================================
   classifyError(err) {
@@ -5504,6 +6005,24 @@ function classifyProviderStatus(status) {
       return "continue";
   }
 }
+function pageQuery(req, filterKeys) {
+  const q = new URLSearchParams();
+  const append = (key, value) => {
+    if (value == null) return;
+    const s = typeof value === "string" ? value : String(value);
+    if (s === "") return;
+    q.set(key, s);
+  };
+  append("pageNo", req.pageNo);
+  append("pageSize", req.pageSize);
+  append("sortBy", req.sortBy);
+  append("sortDirection", req.sortDirection);
+  for (const key of filterKeys) {
+    append(String(key), req[key]);
+  }
+  const qs = q.toString();
+  return qs ? "?" + qs : "";
+}
 function writeCtx(opts, extraHeaders = {}) {
   return {
     idempotencyKey: opts.idempotencyKey,
@@ -5567,6 +6086,6 @@ Client.prototype.getBugReport = async function(bugID, signal) {
   return resp.data;
 };
 
-export { AgentRunStreamError, AgentRunsClient, AnthropicAdapter, BucketClassCommercial, BucketClassGeneric, BusinessError, Client, ComplianceClient, CompliancePollError, DefaultRetryPolicy, ErrAuthDenied, ErrBillingCallbackCannotCommit, ErrBillingCommitRequiresLocalVerify, ErrBillingS2sForbidden, ErrBrowserOpen, ErrComplianceStepUpRequired, ErrDiscovery, ErrEnvelopeGateClosed, ErrOAuthCORSBlocked, ErrProviderNotConfigured, ErrProviderUnknownNoRetry, ErrRefreshProxyFailed, ErrRegistration, ErrSSLProxy, ErrSealApprovalContractHashMismatch, ErrSealApprovalExpired, ErrSealApprovalLocationMismatch, ErrSealApprovalNonceUsed, ErrSealApprovalNotApproved, ErrSealApprovalSealMismatch, ErrSealApprovalTransactorMismatch, ErrSealUseAlreadyConsumed, ErrStateMismatch, ErrTimeout, ErrTokenExchange, ErrTokenExpired, EventAuthURL, EventComplete, EventError, FileTokenStore, FilterStatusAdminBypass, FilterStatusDisabledByFlag, FilterStatusFallbackMissingUser, FilterStatusFallbackNoBuckets, FilterStatusFallbackTkdistError, FilterStatusFallbackTkdistSkew, FilterStatusInternalBypass, FilterStatusOK, FilterStatusUnknown, HTTPError, InMemoryTokenStore, LocalStorageTokenStore, ModelNotFoundError, NetworkError, OpenAIAdapter, OrderTerminalError, ProviderFormat, RateLimitError, ScopeAI, ScopeAccount, ScopeComplianceContractSigningRead, ScopeComplianceContractSigningWrite, ScopeComplianceEvidenceRead, ScopeComplianceEvidenceWrite, ScopeComplianceReportsPublish, ScopeComplianceReportsRead, ScopeComplianceReportsWrite, ScopeComplianceSealApprovalApprove, ScopeComplianceSealApprovalRequest, ScopeComplianceSealManage, ScopeComplianceSealUseExecute, ScopeComplianceTimestampIssue, ScopeComplianceTimestampVerify, ScopeEntitlements, ScopeModels, ScopeModelsChat, ScopeProfile, ScopeSkillStore, ScopeSkills, ScopeTokenPackages, ScopeTools, ScopeToolsExecute, ScopeWallet, ScopeWalletReadonly, ServerToolTypeWebSearch, StreamError, ThinkingHigh, ThinkingHighMinMaxTokens, ThinkingMax, ThinkingMaxFallbackMaxTokens, ThinkingOff, allScopes, anthropicResponseTextContent, anthropicResponseThinkingContent, anthropicResponseToolUseBlocks, apiResponseBusinessError, apiResponseGetMessage, authorize, bucketInfoIsCommercial, bucketRowIsCommercial, buildBetas, classifyComplianceError, commerceScopes, completeWebAuthorizationRequest, complianceScopes, computeBackoff, createWebAuthorizationRequest, defaultRetryable, defaultSafeToRetry, discover, discoverWebOAuthMetadata, discoverWithProfile, effectivePolicy, exchangeCode, extractAnthropicBlockMeta, fileLockDefaults, findDesktopVisualUnderstandingModel, findFirstModelByInputModality, generateState, getAdapter, getAdapterForModel, isBillingConfirmable, isComplianceBusinessError, isComplianceTerminalError, isSSLError, modelScopes, modelSupportsImageInput, modelSupportsInputModality, newFileTokenStore, newThinkingConfig, newTokenSet, newWebSearchTool, parseNotificationEvent, parseSettlement, parseSourcesEvent, refreshToken, register, registerWebOAuthClient, revokeToken, sanitize_exports as sanitize, skillScopes, tokenSetIsExpired, uniqueMerge };
+export { AgentRunStreamError, AgentRunsClient, AnthropicAdapter, BucketClassCommercial, BucketClassGeneric, BusinessError, Client, ComplianceClient, CompliancePollError, DefaultRetryPolicy, ErrAuthDenied, ErrBillingCallbackCannotCommit, ErrBillingCommitRequiresLocalVerify, ErrBillingS2sForbidden, ErrBrowserOpen, ErrComplianceStepUpRequired, ErrDiscovery, ErrEnvelopeGateClosed, ErrOAuthCORSBlocked, ErrProviderNotConfigured, ErrProviderUnknownNoRetry, ErrRefreshProxyFailed, ErrRegistration, ErrSSLProxy, ErrSealApprovalContractHashMismatch, ErrSealApprovalExpired, ErrSealApprovalLocationMismatch, ErrSealApprovalNonceUsed, ErrSealApprovalNotApproved, ErrSealApprovalSealMismatch, ErrSealApprovalTransactorMismatch, ErrSealUseAlreadyConsumed, ErrStateMismatch, ErrTimeout, ErrTokenExchange, ErrTokenExpired, EventAuthURL, EventComplete, EventError, FileTokenStore, FilterStatusAdminBypass, FilterStatusDisabledByFlag, FilterStatusFallbackMissingUser, FilterStatusFallbackNoBuckets, FilterStatusFallbackTkdistError, FilterStatusFallbackTkdistSkew, FilterStatusInternalBypass, FilterStatusOK, FilterStatusUnknown, HTTPError, IdempotencyKeyHeader, InMemoryTokenStore, LocalStorageTokenStore, ModelNotFoundError, NetworkError, OpenAIAdapter, OrderTerminalError, ProviderFormat, RETRY_ADVICE_REASONS, RateLimitError, ScopeAI, ScopeAccount, ScopeComplianceContractSigningRead, ScopeComplianceContractSigningWrite, ScopeComplianceContractTemplateRead, ScopeComplianceContractTemplateWrite, ScopeComplianceEvidenceRead, ScopeComplianceEvidenceWrite, ScopeComplianceReportsPublish, ScopeComplianceReportsRead, ScopeComplianceReportsWrite, ScopeComplianceSealApprovalApprove, ScopeComplianceSealApprovalRequest, ScopeComplianceSealManage, ScopeComplianceSealUseExecute, ScopeComplianceTimestampIssue, ScopeComplianceTimestampVerify, ScopeEntitlements, ScopeModels, ScopeModelsChat, ScopeProfile, ScopeSkillStore, ScopeSkills, ScopeTokenPackages, ScopeTools, ScopeToolsExecute, ScopeWallet, ScopeWalletReadonly, ServerToolTypeWebSearch, StreamError, ThinkingHigh, ThinkingHighMinMaxTokens, ThinkingMax, ThinkingMaxFallbackMaxTokens, ThinkingOff, allScopes, anthropicResponseTextContent, anthropicResponseThinkingContent, anthropicResponseToolUseBlocks, apiResponseBusinessError, apiResponseGetMessage, authorize, bucketInfoIsCommercial, bucketRowIsCommercial, buildBetas, classifyComplianceError, commerceScopes, completeWebAuthorizationRequest, complianceErrorToRetryAdvice, complianceScopes, computeBackoff, createWebAuthorizationRequest, defaultRetryable, defaultSafeToRetry, discover, discoverWebOAuthMetadata, discoverWithProfile, effectivePolicy, exchangeCode, extractAnthropicBlockMeta, fileLockDefaults, findDesktopVisualUnderstandingModel, findFirstModelByInputModality, generateState, getAdapter, getAdapterForModel, isBillingConfirmable, isComplianceBusinessError, isComplianceTerminalError, isSSLError, modelScopes, modelSupportsImageInput, modelSupportsInputModality, newFileTokenStore, newThinkingConfig, newTokenSet, newWebSearchTool, parseNotificationEvent, parseSettlement, parseSourcesEvent, refreshToken, register, registerWebOAuthClient, retryReasonForComplianceKey, retryReasonForOAuthError, revokeToken, sanitize_exports as sanitize, skillScopes, tokenSetIsExpired, uniqueMerge };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map