@acosmi/sdk-ts 1.4.2 → 1.5.1

package/dist/browser/index.mjs

@@ -3464,6 +3464,115 @@ function normalizeRawMessages(rm) {
 // src/shared/index.ts
 init_errors();
 
+// src/shared/operation.ts
+var IdempotencyKeyHeader = "Idempotency-Key";
+
+// src/shared/retry-advice.ts
+var RETRY_ADVICE_REASONS = [
+  "unknown",
+  "retrying",
+  "failed",
+  "gate_closed",
+  "step_up_required",
+  "tenant_mismatch",
+  "insufficient_scope",
+  "quota_exceeded",
+  "provider_timeout",
+  "local_verify_failed",
+  "billing_preflight_failed"
+];
+var COMPLIANCE_KEY_TO_RETRY_REASON = {
+  // 通用 / token / scope
+  COMPLIANCE_UNAUTHORIZED: "failed",
+  COMPLIANCE_INSUFFICIENT_SCOPE: "insufficient_scope",
+  COMPLIANCE_STEP_UP_REQUIRED: "step_up_required",
+  COMPLIANCE_TOKEN_INVALID: "failed",
+  // 主体快照
+  SUBJECT_SNAPSHOT_REQUIRED: "failed",
+  SUBJECT_SNAPSHOT_NOT_FOUND: "failed",
+  SUBJECT_SNAPSHOT_TENANT_MISMATCH: "tenant_mismatch",
+  // Evidence / Timestamp / Package / Report
+  EVIDENCE_ASSET_NOT_FOUND: "failed",
+  EVIDENCE_ASSET_HASH_MISMATCH: "local_verify_failed",
+  EVIDENCE_ASSET_PAYLOAD_REQUIRED: "failed",
+  TIMESTAMP_TOKEN_NOT_FOUND: "failed",
+  TIMESTAMP_PROVIDER_FAILED: "failed",
+  TIMESTAMP_PROVIDER_UNKNOWN: "unknown",
+  TIMESTAMP_LOCAL_VERIFY_FAILED: "local_verify_failed",
+  TIMESTAMP_PROVIDER_NOT_AVAILABLE: "provider_timeout",
+  EVIDENCE_PACKAGE_NOT_FOUND: "failed",
+  EVIDENCE_PACKAGE_TIMESTAMP_REQUIRED: "failed",
+  EVIDENCE_PACKAGE_MANIFEST_HASH_MISMATCH: "local_verify_failed",
+  REPORT_NOT_FOUND: "failed",
+  REPORT_ALREADY_PUBLISHED: "failed",
+  REPORT_DRAFT_REQUIRED: "failed",
+  EVIDENCE_VERIFY_TARGET_REQUIRED: "failed",
+  EVIDENCE_VERIFY_TARGET_NOT_FOUND: "failed",
+  // Provider request
+  PROVIDER_REQUEST_UNKNOWN_NO_RETRY: "unknown",
+  PROVIDER_CALLBACK_SOURCE_INVALID: "failed",
+  PROVIDER_NOT_CONFIGURED: "gate_closed",
+  PROVIDER_REQUEST_NOT_FOUND: "failed",
+  PROVIDER_REQUEST_IDEMPOTENCY_REQUIRED: "failed",
+  PROVIDER_REQUEST_STATUS_NOT_TERMINAL: "retrying",
+  // Envelope
+  ENVELOPE_NOT_FOUND: "failed",
+  ENVELOPE_TENANT_MISMATCH: "tenant_mismatch",
+  ENVELOPE_STATE_NOT_ALLOWED: "failed",
+  ENVELOPE_GATE_CLOSED: "gate_closed",
+  CONTRACT_NOT_FOUND: "failed",
+  CONTRACT_HASH_MISMATCH: "local_verify_failed",
+  PROVIDER_AUTHORIZATION_NOT_CONFIRMED: "failed",
+  ENVELOPE_EVIDENCE_NOT_READY: "retrying",
+  // Seal approval / use
+  SEAL_ASSET_NOT_FOUND: "failed",
+  SEAL_APPROVAL_NOT_FOUND: "failed",
+  SEAL_APPROVAL_STATE_NOT_APPROVED: "failed",
+  SEAL_APPROVAL_EXPIRED: "failed",
+  SEAL_APPROVAL_ALREADY_USED: "failed",
+  SEAL_APPROVAL_NONCE_USED: "failed",
+  SEAL_APPROVAL_SEAL_MISMATCH: "failed",
+  SEAL_APPROVAL_LOCATION_MISMATCH: "failed",
+  SEAL_APPROVAL_TRANSACTOR_MISMATCH: "failed",
+  SEAL_APPROVAL_CONTRACT_HASH_MISMATCH: "local_verify_failed",
+  SEAL_APPROVAL_INVALID_TRANSITION: "failed",
+  SEAL_USE_ALREADY_CONSUMED: "failed",
+  // Audit chain
+  AUDIT_CHAIN_TAMPER_DETECTED: "local_verify_failed",
+  // Billing
+  BILLING_COMMIT_REQUIRES_LOCAL_VERIFY: "local_verify_failed",
+  BILLING_COMMIT_REQUIRES_PROVIDER_SUCCESS: "billing_preflight_failed",
+  BILLING_CALLBACK_CANNOT_COMMIT: "billing_preflight_failed",
+  BILLING_PROVIDER_UNKNOWN_NOT_COMMITTABLE: "billing_preflight_failed",
+  BILLING_S2S_FORBIDDEN: "failed",
+  // SDK fallback
+  UNKNOWN_COMPLIANCE_ERROR: "unknown"
+};
+function retryReasonForComplianceKey(key) {
+  return COMPLIANCE_KEY_TO_RETRY_REASON[key] ?? "unknown";
+}
+var OAUTH_ERROR_TO_RETRY_REASON = {
+  insufficient_scope: "insufficient_scope",
+  invalid_token: "failed",
+  invalid_grant: "failed",
+  invalid_request: "failed",
+  access_denied: "failed",
+  unsupported_grant_type: "failed"
+};
+function retryReasonForOAuthError(oauthError) {
+  return OAUTH_ERROR_TO_RETRY_REASON[oauthError] ?? "unknown";
+}
+function complianceErrorToRetryAdvice(info) {
+  return {
+    retryable: info.retryable,
+    sameIdempotencyKeyRequired: !info.terminal,
+    manualActionRequired: info.terminal || info.stepUpRequired,
+    reason: retryReasonForComplianceKey(info.key),
+    developerMessage: info.message,
+    supportCode: `compliance:${info.code}`
+  };
+}
+
 // src/auth/scopes.ts
 var ScopeAI = "ai";
 var ScopeSkills = "skills";
@@ -4827,6 +4936,8 @@ var ScopeComplianceSealUseExecute = "compliance:seal_use:execute";
 var ScopeComplianceReportsRead = "compliance:reports:read";
 var ScopeComplianceReportsWrite = "compliance:reports:write";
 var ScopeComplianceReportsPublish = "compliance:reports:publish";
+var ScopeComplianceContractTemplateRead = "compliance:contract_template:read";
+var ScopeComplianceContractTemplateWrite = "compliance:contract_template:write";
 function complianceScopes() {
   return [
     ScopeComplianceEvidenceRead,
@@ -4841,7 +4952,9 @@ function complianceScopes() {
     ScopeComplianceSealUseExecute,
     ScopeComplianceReportsRead,
     ScopeComplianceReportsWrite,
-    ScopeComplianceReportsPublish
+    ScopeComplianceReportsPublish,
+    ScopeComplianceContractTemplateRead,
+    ScopeComplianceContractTemplateWrite
   ];
 }
 
@@ -5063,6 +5176,21 @@ var ComplianceClient = class {
       signal
     );
   }
+  /**
+   * 读 — 证据资产分页列表（compliance gateway S1）。
+   *
+   * 走 GET 读路径（允许 401 单次刷新重放）。返回 yudao `PageResult<T>`
+   * （`{ total, list }`）。所有过滤项可选；`createTimeStart` / `createTimeEnd`
+   * 由调用方按 `yyyy-MM-dd HH:mm:ss` 提供，SDK 原样透传。
+   */
+  listEvidenceAssets(req = {}, signal) {
+    return this.read(
+      "GET",
+      `/compliance/evidence/assets/page${pageQuery(req, ["assetType", "status", "createTimeStart", "createTimeEnd"])}`,
+      null,
+      signal
+    );
+  }
   /**
    * 公开 verify。隐私边界：返回字段不含 PII / 合同原文 / storage / provider raw。
    *
@@ -5107,6 +5235,20 @@ var ComplianceClient = class {
       signal
     );
   }
+  /**
+   * 读 — 时间章分页列表（compliance gateway S1）。
+   *
+   * 走 GET 读路径。返回 yudao `PageResult<T>`。所有过滤项可选；`createTimeStart` /
+   * `createTimeEnd` 由调用方按 `yyyy-MM-dd HH:mm:ss` 提供，SDK 原样透传。
+   */
+  listTimestamps(req = {}, signal) {
+    return this.read(
+      "GET",
+      `/compliance/timestamps/page${pageQuery(req, ["provider", "verificationStatus", "createTimeStart", "createTimeEnd"])}`,
+      null,
+      signal
+    );
+  }
   /** verify — 本地离线校验已申请的时间章。 */
   verifyTimestamp(req, opts = {}) {
     return this.write(
@@ -5131,6 +5273,38 @@ var ComplianceClient = class {
     );
   }
   // =========================================================================
+  // TSA readonly views (read-only — compliance gateway S3 / gap-register U-7)
+  // =========================================================================
+  /**
+   * 读 — 时间章授权机构（TSA）provider 列表（compliance gateway S3）。
+   *
+   * 走 GET 读路径（允许 401 单次刷新重放）。后端 G3 为每个 TSA provider 返回
+   * 一条 {@link TsaProvider}：名称、所处环境、当前是否可用。只读视图，不含
+   * provider 端点 / 凭证 / 证书等内部接入材料。
+   */
+  listTsaProviders(signal) {
+    return this.read(
+      "GET",
+      "/compliance/timestamps/providers",
+      null,
+      signal
+    );
+  }
+  /**
+   * 读 — 时间章统计视图（compliance gateway S3）。
+   *
+   * 走 GET 读路径（允许 401 单次刷新重放）。返回 {@link TsaStats}：时间章总数
+   * + 按校验状态分桶的计数。只读聚合视图。
+   */
+  getTsaStats(signal) {
+    return this.read(
+      "GET",
+      "/compliance/timestamps/stats",
+      null,
+      signal
+    );
+  }
+  // =========================================================================
   // Evidence Package
   // =========================================================================
   /** 构建证据包（写）。 */
@@ -5143,6 +5317,20 @@ var ComplianceClient = class {
       writeCtx(opts)
     );
   }
+  /**
+   * 读 — 证据包分页列表（compliance gateway S1）。
+   *
+   * 走 GET 读路径。返回 yudao `PageResult<T>`。所有过滤项可选；`createTimeStart` /
+   * `createTimeEnd` 由调用方按 `yyyy-MM-dd HH:mm:ss` 提供，SDK 原样透传。
+   */
+  listEvidencePackages(req = {}, signal) {
+    return this.read(
+      "GET",
+      `/compliance/evidence/packages/page${pageQuery(req, ["status", "createTimeStart", "createTimeEnd"])}`,
+      null,
+      signal
+    );
+  }
   // =========================================================================
   // Report
   // =========================================================================
@@ -5159,6 +5347,20 @@ var ComplianceClient = class {
       signal
     );
   }
+  /**
+   * 读 — 证据报告分页列表（compliance gateway S1）。
+   *
+   * 走 GET 读路径。返回 yudao `PageResult<T>`。所有过滤项可选；`createTimeStart` /
+   * `createTimeEnd` 由调用方按 `yyyy-MM-dd HH:mm:ss` 提供，SDK 原样透传。
+   */
+  listReports(req = {}, signal) {
+    return this.read(
+      "GET",
+      `/compliance/reports/page${pageQuery(req, ["status", "createTimeStart", "createTimeEnd"])}`,
+      null,
+      signal
+    );
+  }
   /**
    * 发布报告（写，step-up 必须）。
    *
@@ -5209,6 +5411,20 @@ var ComplianceClient = class {
       signal
     );
   }
+  /**
+   * 读 — 签署 envelope 分页列表（compliance gateway S1）。
+   *
+   * 走 GET 读路径。返回 yudao `PageResult<T>`。所有过滤项可选；`createTimeStart` /
+   * `createTimeEnd` 由调用方按 `yyyy-MM-dd HH:mm:ss` 提供，SDK 原样透传。
+   */
+  listSigningEnvelopes(req = {}, signal) {
+    return this.read(
+      "GET",
+      `/compliance/signing-envelopes/page${pageQuery(req, ["status", "createTimeStart", "createTimeEnd"])}`,
+      null,
+      signal
+    );
+  }
   /**
    * 正式签署（写，step-up 必须）。
    *
@@ -5245,6 +5461,52 @@ var ComplianceClient = class {
       writeCtx(opts)
     );
   }
+  /**
+   * 读 — envelope 下挂的合同列表（compliance gateway S4）。
+   *
+   * 走 GET 读路径（允许 401 单次刷新重放）。后端 G4 为每份挂在该 envelope 上的
+   * 合同返回一条 {@link EnvelopeContractItem}：编号 / 标题 / MIME / 大小 / 哈希
+   * 指纹 / 状态。返回普通数组（非 `PageResult`）。SDK-safe 视图——不含合同原文 /
+   * storage key / provider raw payload。
+   */
+  listEnvelopeContracts(envelopeId, signal) {
+    return this.read(
+      "GET",
+      `/compliance/signing-envelopes/${encodeURIComponent(envelopeId)}/contracts`,
+      null,
+      signal
+    );
+  }
+  /**
+   * 读 — envelope 关联的 provider 请求列表（compliance gateway S4）。
+   *
+   * 走 GET 读路径（允许 401 单次刷新重放）。后端 G4 复用操作投影
+   * {@link OperationPageItem}：描述每次 provider 请求本身的执行进度，与 envelope
+   * 领域状态正交。返回普通数组（非 `PageResult`）。
+   */
+  listEnvelopeProviderRequests(envelopeId, signal) {
+    return this.read(
+      "GET",
+      `/compliance/signing-envelopes/${encodeURIComponent(envelopeId)}/provider-requests`,
+      null,
+      signal
+    );
+  }
+  /**
+   * 作废 envelope（写，compliance gateway S4）。
+   *
+   * 走 compliance 写路径——发送前 `ensureToken` 一次、不自动重试、`401` 不刷新
+   * 重放；支持 `Idempotency-Key` header（强烈建议调用方持久化幂等键，重试 / 恢复
+   * 时复用，避免重复作废）。`req.reason` 为必填的作废原因，随 JSON body 提交。
+   */
+  voidEnvelope(envelopeId, req, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/signing-envelopes/${encodeURIComponent(envelopeId)}/void`,
+      req,
+      writeCtx(opts)
+    );
+  }
   // =========================================================================
   // Seal Approval
   // =========================================================================
@@ -5319,6 +5581,45 @@ var ComplianceClient = class {
       signal
     );
   }
+  /**
+   * 读 — 用印审批分页列表（compliance gateway S1）。
+   *
+   * 与 {@link listPendingSealApprovals}（仅 pending、不分页）不同，本方法支持分页与
+   * 状态 / 时间过滤。走 GET 读路径。返回 yudao `PageResult<T>`。所有过滤项可选；
+   * `createTimeStart` / `createTimeEnd` 由调用方按 `yyyy-MM-dd HH:mm:ss` 提供，
+   * SDK 原样透传。
+   */
+  listSealApprovals(req = {}, signal) {
+    return this.read(
+      "GET",
+      `/compliance/seal-approvals/page${pageQuery(req, ["status", "createTimeStart", "createTimeEnd"])}`,
+      null,
+      signal
+    );
+  }
+  // =========================================================================
+  // Seal Use (read-only — compliance gateway S6 / gap-register U-4)
+  // =========================================================================
+  /**
+   * 读 — 用印执行记录分页列表（compliance gateway S6）。
+   *
+   * 走 GET 读路径（允许 401 单次刷新重放）。返回 yudao `PageResult<T>`
+   * （`{ total, list }`）。一次用印执行（seal use）描述 envelope / contract /
+   * seal / 审批联动后【真正调用 provider 落章】的那一笔记录，与 envelope
+   * 领域状态正交。所有过滤项可选；`createTimeStart` / `createTimeEnd` 由调用方
+   * 按 `yyyy-MM-dd HH:mm:ss` 提供，SDK 原样透传。
+   *
+   * 与后端复用同一只读 scope `CONTRACT_SIGNING_READ`
+   *（{@link ScopeComplianceContractSigningRead}）——不引入新 scope。
+   */
+  listSealUses(req = {}, signal) {
+    return this.read(
+      "GET",
+      `/compliance/seal-uses/page${pageQuery(req, ["sealId", "envelopeId", "usageStatus", "createTimeStart", "createTimeEnd"])}`,
+      null,
+      signal
+    );
+  }
   // =========================================================================
   // Provider Request (read-only)
   // =========================================================================
@@ -5346,6 +5647,206 @@ var ComplianceClient = class {
     );
   }
   // =========================================================================
+  // Capabilities (read-only — compliance gateway S2 / gap-register U-6)
+  // =========================================================================
+  /**
+   * 读 — compliance 能力闸门列表（compliance gateway S2）。
+   *
+   * 走 GET 读路径（允许 401 单次刷新重放）。后端 G2 为每个高风险 / 收费动作
+   * （`signEnvelope` / `createH5SigningUrl` / `publishReport` /
+   * `approveSealApproval` / `executeSealUse` / `createSeal`）返回一条
+   * {@link ComplianceCapability}：是否可执行、所处状态、所需 scope / step-up。
+   *
+   * 调用方在高风险动作执行【前】查询本结果做门控；拿不到能力时必须 fail-closed
+   *（按 `executable=false` 处理）。
+   */
+  getCapabilities(signal) {
+    return this.read(
+      "GET",
+      "/compliance/capabilities",
+      null,
+      signal
+    );
+  }
+  /**
+   * 读 — 单个动作的能力闸门视图（便捷方法）。
+   *
+   * 拉取完整 {@link getCapabilities} 列表并返回 `action` 匹配的那一条，无匹配时
+   * 返回 `undefined`。**每次调用产生一次网络请求**——需要门控多个动作时应改用
+   * {@link getCapabilities} 一次性取回再本地查表，避免重复请求。
+   *
+   * 与 {@link getCapabilities} 一致走 GET 读路径（允许 401 单次刷新重放）。
+   */
+  async getFeatureGate(action, signal) {
+    const caps = await this.getCapabilities(signal);
+    return caps.find((c) => c.action === action);
+  }
+  // =========================================================================
+  // Operation projection (read-only — compliance gateway S2 / gap-register U-5)
+  // =========================================================================
+  /**
+   * 读 — compliance 操作投影分页列表（compliance gateway S2）。
+   *
+   * 走 GET 读路径。返回 yudao `PageResult<T>`（`{ total, list }`）。所有过滤项
+   * 可选；`createTimeStart` / `createTimeEnd` 由调用方按 `yyyy-MM-dd HH:mm:ss`
+   * 提供，SDK 原样透传，不做格式校验或时区转换。
+   *
+   * 操作投影描述【一次操作】本身的执行进度，与履约对象的领域状态正交。
+   */
+  listOperations(req = {}, signal) {
+    return this.read(
+      "GET",
+      `/compliance/operations/page${pageQuery(req, ["status", "createTimeStart", "createTimeEnd"])}`,
+      null,
+      signal
+    );
+  }
+  /**
+   * 读 — compliance 操作投影详情（compliance gateway S2）。
+   *
+   * `id` 为数值行主键（非 `operationId` 幂等键）。走 GET 读路径（允许 401 单次
+   * 刷新重放）。
+   */
+  getOperation(id, signal) {
+    return this.read(
+      "GET",
+      `/compliance/operations/${encodeURIComponent(id)}`,
+      null,
+      signal
+    );
+  }
+  // =========================================================================
+  // Contract Template (compliance gateway S5 — gap-register U-2)
+  // =========================================================================
+  /**
+   * 创建合同模板（写）。
+   *
+   * 走 compliance 写路径——发送前 `ensureToken` 一次、不自动重试、`401` 不刷新
+   * 重放；支持 `Idempotency-Key` header（强烈建议调用方持久化幂等键，重试 / 恢复
+   * 时复用，避免重复创建模板）。模板创建后初始状态为 `DRAFT`。
+   */
+  createContractTemplate(req, opts = {}) {
+    return this.write(
+      "POST",
+      "/compliance/contract-templates",
+      req,
+      writeCtx(opts)
+    );
+  }
+  /**
+   * 更新合同模板（写，仅 DRAFT 状态）。
+   *
+   * 走 compliance 写路径——`Idempotency-Key`、不重试、`401` 不刷新重放。所有字段
+   * 可选，缺省字段视为不修改。服务端在 PUBLISHED / ARCHIVED 状态下会拒绝更新。
+   */
+  updateContractTemplate(id, req, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/contract-templates/${encodeURIComponent(id)}`,
+      req,
+      writeCtx(opts)
+    );
+  }
+  /**
+   * 删除合同模板（写，仅 DRAFT 状态）。
+   *
+   * 走 compliance 写路径——`Idempotency-Key`、不重试、`401` 不刷新重放。服务端
+   * 在 PUBLISHED / ARCHIVED 状态下会拒绝删除——已发布的模板应改走 `archive`。
+   */
+  deleteContractTemplate(id, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/contract-templates/${encodeURIComponent(id)}/delete`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  /** 读 — 合同模板详情。 */
+  getContractTemplate(id, signal) {
+    return this.read(
+      "GET",
+      `/compliance/contract-templates/${encodeURIComponent(id)}`,
+      null,
+      signal
+    );
+  }
+  /**
+   * 读 — 合同模板分页列表（compliance gateway S5）。
+   *
+   * 走 GET 读路径（允许 401 单次刷新重放）。返回 yudao `PageResult<T>`
+   * （`{ total, list }`）。所有过滤项可选；`createTimeStart` / `createTimeEnd`
+   * 由调用方按 `yyyy-MM-dd HH:mm:ss` 提供，SDK 原样透传。列表项视图
+   * {@link ContractTemplatePageItem} 不含 `fields`——字段叠加只在详情 / 版本
+   * 快照里返回。
+   */
+  listContractTemplates(req = {}, signal) {
+    return this.read(
+      "GET",
+      `/compliance/contract-templates/page${pageQuery(req, ["status", "createTimeStart", "createTimeEnd"])}`,
+      null,
+      signal
+    );
+  }
+  /**
+   * 上传合同模板 PDF（写）。
+   *
+   * 走 compliance 写路径——`Idempotency-Key`、不重试、`401` 不刷新重放。请求体
+   * 为 `{ pdfBase64 }`；SDK 不在客户端做 PDF 解析 / 几何校验，原样透传给后端。
+   * 返回上传后的最新模板视图（含 `pdfHash` / `pdfPageCount`）。
+   */
+  uploadContractTemplatePdf(id, req, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/contract-templates/${encodeURIComponent(id)}/pdf`,
+      req,
+      writeCtx(opts)
+    );
+  }
+  /**
+   * 发布合同模板（写）。DRAFT → PUBLISHED，落版本快照。
+   *
+   * 走 compliance 写路径——`Idempotency-Key`、不重试、`401` 不刷新重放。
+   * publish 后 `currentVersion` 递增，`fields` 与 `pdfHash` 同步固化进版本表。
+   */
+  publishContractTemplate(id, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/contract-templates/${encodeURIComponent(id)}/publish`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  /**
+   * 归档合同模板（写）。PUBLISHED → ARCHIVED。
+   *
+   * 走 compliance 写路径——`Idempotency-Key`、不重试、`401` 不刷新重放。
+   * 已归档模板只读，不再允许 publish / 编辑 / 删除。
+   */
+  archiveContractTemplate(id, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/contract-templates/${encodeURIComponent(id)}/archive`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  /**
+   * 读 — 合同模板版本快照列表。
+   *
+   * 走 GET 读路径（允许 401 单次刷新重放）。返回 {@link ContractTemplateVersion}
+   * 普通数组（非 `PageResult`）——每次 publish 落一个不可变快照，记录当时的
+   * `name` / `pdfHash` / `fields` / `statusAtSnapshot`，是离线复核 / 版本对账
+   * 的依据。
+   */
+  listContractTemplateVersions(id, signal) {
+    return this.read(
+      "GET",
+      `/compliance/contract-templates/${encodeURIComponent(id)}/versions`,
+      null,
+      signal
+    );
+  }
+  // =========================================================================
   // Error classification (re-export for convenience)
   // =========================================================================
   classifyError(err) {
@@ -5504,6 +6005,24 @@ function classifyProviderStatus(status) {
       return "continue";
   }
 }
+function pageQuery(req, filterKeys) {
+  const q = new URLSearchParams();
+  const append = (key, value) => {
+    if (value == null) return;
+    const s = typeof value === "string" ? value : String(value);
+    if (s === "") return;
+    q.set(key, s);
+  };
+  append("pageNo", req.pageNo);
+  append("pageSize", req.pageSize);
+  append("sortBy", req.sortBy);
+  append("sortDirection", req.sortDirection);
+  for (const key of filterKeys) {
+    append(String(key), req[key]);
+  }
+  const qs = q.toString();
+  return qs ? "?" + qs : "";
+}
 function writeCtx(opts, extraHeaders = {}) {
   return {
     idempotencyKey: opts.idempotencyKey,
@@ -5567,6 +6086,6 @@ Client.prototype.getBugReport = async function(bugID, signal) {
   return resp.data;
 };
 
-export { AgentRunStreamError, AgentRunsClient, AnthropicAdapter, BucketClassCommercial, BucketClassGeneric, BusinessError, Client, ComplianceClient, CompliancePollError, LocalStorageTokenStore as DefaultBrowserTokenStore, DefaultRetryPolicy, ErrAuthDenied, ErrBillingCallbackCannotCommit, ErrBillingCommitRequiresLocalVerify, ErrBillingS2sForbidden, ErrBrowserOpen, ErrComplianceStepUpRequired, ErrDiscovery, ErrEnvelopeGateClosed, ErrOAuthCORSBlocked, ErrProviderNotConfigured, ErrProviderUnknownNoRetry, ErrRefreshProxyFailed, ErrRegistration, ErrSSLProxy, ErrSealApprovalContractHashMismatch, ErrSealApprovalExpired, ErrSealApprovalLocationMismatch, ErrSealApprovalNonceUsed, ErrSealApprovalNotApproved, ErrSealApprovalSealMismatch, ErrSealApprovalTransactorMismatch, ErrSealUseAlreadyConsumed, ErrStateMismatch, ErrTimeout, ErrTokenExchange, ErrTokenExpired, EventAuthURL, EventComplete, EventError, FileTokenStore, FilterStatusAdminBypass, FilterStatusDisabledByFlag, FilterStatusFallbackMissingUser, FilterStatusFallbackNoBuckets, FilterStatusFallbackTkdistError, FilterStatusFallbackTkdistSkew, FilterStatusInternalBypass, FilterStatusOK, FilterStatusUnknown, HTTPError, InMemoryTokenStore, LocalStorageTokenStore, ModelNotFoundError, NetworkError, OpenAIAdapter, OrderTerminalError, ProviderFormat, RateLimitError, ScopeAI, ScopeAccount, ScopeComplianceContractSigningRead, ScopeComplianceContractSigningWrite, ScopeComplianceEvidenceRead, ScopeComplianceEvidenceWrite, ScopeComplianceReportsPublish, ScopeComplianceReportsRead, ScopeComplianceReportsWrite, ScopeComplianceSealApprovalApprove, ScopeComplianceSealApprovalRequest, ScopeComplianceSealManage, ScopeComplianceSealUseExecute, ScopeComplianceTimestampIssue, ScopeComplianceTimestampVerify, ScopeEntitlements, ScopeModels, ScopeModelsChat, ScopeProfile, ScopeSkillStore, ScopeSkills, ScopeTokenPackages, ScopeTools, ScopeToolsExecute, ScopeWallet, ScopeWalletReadonly, ServerToolTypeWebSearch, StreamError, ThinkingHigh, ThinkingHighMinMaxTokens, ThinkingMax, ThinkingMaxFallbackMaxTokens, ThinkingOff, allScopes, anthropicResponseTextContent, anthropicResponseThinkingContent, anthropicResponseToolUseBlocks, apiResponseBusinessError, apiResponseGetMessage, authorize, bucketInfoIsCommercial, bucketRowIsCommercial, buildBetas, classifyComplianceError, commerceScopes, completeWebAuthorizationRequest, complianceScopes, computeBackoff, createWebAuthorizationRequest, defaultRetryable, defaultSafeToRetry, discover, discoverWebOAuthMetadata, discoverWithProfile, effectivePolicy, exchangeCode, extractAnthropicBlockMeta, fileLockDefaults, findDesktopVisualUnderstandingModel, findFirstModelByInputModality, generateState, getAdapter, getAdapterForModel, isBillingConfirmable, isComplianceBusinessError, isComplianceTerminalError, isSSLError, modelScopes, modelSupportsImageInput, modelSupportsInputModality, newFileTokenStore, newThinkingConfig, newTokenSet, newWebSearchTool, parseNotificationEvent, parseSettlement, parseSourcesEvent, refreshToken, register, registerWebOAuthClient, revokeToken, sanitize_exports as sanitize, skillScopes, tokenSetIsExpired, uniqueMerge };
+export { AgentRunStreamError, AgentRunsClient, AnthropicAdapter, BucketClassCommercial, BucketClassGeneric, BusinessError, Client, ComplianceClient, CompliancePollError, LocalStorageTokenStore as DefaultBrowserTokenStore, DefaultRetryPolicy, ErrAuthDenied, ErrBillingCallbackCannotCommit, ErrBillingCommitRequiresLocalVerify, ErrBillingS2sForbidden, ErrBrowserOpen, ErrComplianceStepUpRequired, ErrDiscovery, ErrEnvelopeGateClosed, ErrOAuthCORSBlocked, ErrProviderNotConfigured, ErrProviderUnknownNoRetry, ErrRefreshProxyFailed, ErrRegistration, ErrSSLProxy, ErrSealApprovalContractHashMismatch, ErrSealApprovalExpired, ErrSealApprovalLocationMismatch, ErrSealApprovalNonceUsed, ErrSealApprovalNotApproved, ErrSealApprovalSealMismatch, ErrSealApprovalTransactorMismatch, ErrSealUseAlreadyConsumed, ErrStateMismatch, ErrTimeout, ErrTokenExchange, ErrTokenExpired, EventAuthURL, EventComplete, EventError, FileTokenStore, FilterStatusAdminBypass, FilterStatusDisabledByFlag, FilterStatusFallbackMissingUser, FilterStatusFallbackNoBuckets, FilterStatusFallbackTkdistError, FilterStatusFallbackTkdistSkew, FilterStatusInternalBypass, FilterStatusOK, FilterStatusUnknown, HTTPError, IdempotencyKeyHeader, InMemoryTokenStore, LocalStorageTokenStore, ModelNotFoundError, NetworkError, OpenAIAdapter, OrderTerminalError, ProviderFormat, RETRY_ADVICE_REASONS, RateLimitError, ScopeAI, ScopeAccount, ScopeComplianceContractSigningRead, ScopeComplianceContractSigningWrite, ScopeComplianceContractTemplateRead, ScopeComplianceContractTemplateWrite, ScopeComplianceEvidenceRead, ScopeComplianceEvidenceWrite, ScopeComplianceReportsPublish, ScopeComplianceReportsRead, ScopeComplianceReportsWrite, ScopeComplianceSealApprovalApprove, ScopeComplianceSealApprovalRequest, ScopeComplianceSealManage, ScopeComplianceSealUseExecute, ScopeComplianceTimestampIssue, ScopeComplianceTimestampVerify, ScopeEntitlements, ScopeModels, ScopeModelsChat, ScopeProfile, ScopeSkillStore, ScopeSkills, ScopeTokenPackages, ScopeTools, ScopeToolsExecute, ScopeWallet, ScopeWalletReadonly, ServerToolTypeWebSearch, StreamError, ThinkingHigh, ThinkingHighMinMaxTokens, ThinkingMax, ThinkingMaxFallbackMaxTokens, ThinkingOff, allScopes, anthropicResponseTextContent, anthropicResponseThinkingContent, anthropicResponseToolUseBlocks, apiResponseBusinessError, apiResponseGetMessage, authorize, bucketInfoIsCommercial, bucketRowIsCommercial, buildBetas, classifyComplianceError, commerceScopes, completeWebAuthorizationRequest, complianceErrorToRetryAdvice, complianceScopes, computeBackoff, createWebAuthorizationRequest, defaultRetryable, defaultSafeToRetry, discover, discoverWebOAuthMetadata, discoverWithProfile, effectivePolicy, exchangeCode, extractAnthropicBlockMeta, fileLockDefaults, findDesktopVisualUnderstandingModel, findFirstModelByInputModality, generateState, getAdapter, getAdapterForModel, isBillingConfirmable, isComplianceBusinessError, isComplianceTerminalError, isSSLError, modelScopes, modelSupportsImageInput, modelSupportsInputModality, newFileTokenStore, newThinkingConfig, newTokenSet, newWebSearchTool, parseNotificationEvent, parseSettlement, parseSourcesEvent, refreshToken, register, registerWebOAuthClient, retryReasonForComplianceKey, retryReasonForOAuthError, revokeToken, sanitize_exports as sanitize, skillScopes, tokenSetIsExpired, uniqueMerge };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map