@acosmi/sdk-ts 1.9.0 → 2.0.1

package/CHANGELOG.md

@@ -5,6 +5,49 @@ All notable changes to `@acosmi/sdk-ts` will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.0.1] - 2026-05-25 — Packaging fix
+
+### Fixed
+
+- `package.json` `files` 字段白名单遗漏 — v2.0.0 publish 后发现 `docs/pii-role-matrix.md` (新建) 与 `docs/开发与发布手册.md` (修订) 未进 npm 包. 集成方 `npm install @acosmi/sdk-ts` 后 `node_modules/@acosmi/sdk-ts/docs/` 缺这两份关键文档. 修白名单加显式三份 `docs/*.md` (排除 `docs/api/` 1.7MB TypeDoc 输出避免包膨胀).
+
+## [2.0.0] - 2026-05-25 — BREAKING (Phase 3 复核 + 全量根治)
+
+商品化 P1-P7 Phase 3 深度复核审计 (主仓 9 commit, HEAD `e510f68a`) + SDK 全量同步.
+**用户裁决: major bump** (角色 fail-OPEN 别名废除 + admin 错误码契约变更 + PII 真加密 = breaking).
+
+### Added (Phase C — 主仓 user-facing 端点同步)
+
+- `casehall.getMyLawyerCredentialStatus()` — 律师自查执业证审核状态. 端点 `GET /api/casehall/lawyer-credentials/my` (主仓 `LawyerCredentialConsumerController`). 普通用户调返 `[]` 不抛.
+- `enterprise.getMyEnterpriseKycStatus()` — 企业 OWNER 自查 KYC 状态. 端点 `GET /api/distribution/enterprise/kyc/my` (主仓 `EnterpriseKycConsumerController`). 非 OWNER 调返 `{enterpriseId:undefined}` 空 view, 不抛.
+- 新增类型 `LawyerCredentialMyView` (`src/casehall/types.ts`) + `EnterpriseKycMyStatusView` (`src/enterprise/types.ts`), 与主仓 VO 字段对齐, 显式白名单剔除 `fields_json` / `rawJson` 等 PII L3 字段.
+
+### Changed (BREAKING — Phase 3 复核引入的契约变更)
+
+- **admin 写端点响应改 HTTP 状态码语义**: csign / compliance-billing admin POST 端点
+  (`/api/admin/csign/seals` / `/api/distribution/compliance-billing/commit|cancel|refund` 等)
+  跨租户/不存在改返 HTTP `403`/`404` (之前 `200` + `{ok:false}`); 印章/能力未配置返 HTTP `501`
+  (之前 `200` + `{code:NOT_CONFIGURED}`). 集成方需用 `try-catch` 拦 `HTTPError.statusCode`,
+  不再读 `CommonResult.ok` 字段. 详见 `src/compliance/errors.ts` 头部注释段.
+- **角色严格化**: `ROLE_ADMIN` / `ROLE_USER` / `INTERNAL` 三个旧别名失效 (主仓
+  `SensitiveSerializer.normalizeAuthority` 不再自动升级到 `platform_admin` / `consumer` / `s2s`
+  视角). yudao 后台通用 admin token 调用 PII 端点会拿到 guest 脱敏视图. 集成方需用正式
+  `ROLE_PLATFORM_ADMIN` / `ROLE_S2S` / `ROLE_LAWYER` / `ROLE_CONSUMER` 之一. 详见
+  `docs/pii-role-matrix.md`.
+
+### Docs
+
+- 新建 `docs/pii-role-matrix.md` — 4 角色 × 3 PII 级矩阵 + 旧别名 breaking 说明 + 脱敏算法
+  引用 + 集成方测试 mock 示例.
+- `src/finance/types.ts` `Invoice` JSDoc 升级 P2-016 注释 — 补充 v1.9.0+ 真落盘加密
+  (V51 + V63 + V64), keyVersion v1/v2 payload 协议, 角色严格化 4 正式角色枚举.
+- `src/compliance/errors.ts` 头部注释新增"v1.9.0+ admin 写端点行为变更"段 — 解释 403/404/501
+  HTTP 状态码契约改造与集成方应对.
+- `README.md` 状态行版本号 1.6.0 → 1.9.0, 概要补 v1.7/v1.8/v1.9 highlight.
+- `docs/开发与发布手册.md` 最后更新 2026-05-22 → 2026-05-25, 当前版本 1.5.0 → 1.9.0,
+  §4 目录结构补 6 个 namespace (casehall / enterprise / finance / pricing / products /
+  subscription).
+
 ## [1.9.0] - 2026-05-25
 
 ### Added — 商品化总规划 P7: 财务 finance namespace (发票/退款/对公转账)

package/README.md

@@ -7,7 +7,7 @@
 ## 状态
 
 - 主实现 / 事实标准：本 TS SDK 现为 Acosmi SDK 的主力实现。Go SDK [acosmi-sdk-go](https://github.com/acosmi/acosmi-sdk-go) 已暂停维护，待 TS 稳定后再从 TS 反向翻译补齐
-- 当前版本：**1.6.0**（v1.6.0 新增 `ChatRequest.endUserId` 业务侧终端用户 id + SSE keep-alive 注释行自动跳过 + per-request 超时 5min→11min 覆盖上游"开始推理前最长 10min 保活"窗口；详见下方"用户隔离 (v1.6.0+)"+ [CHANGELOG](./CHANGELOG.md)）。`1.5.x` 文档复核 + `src/shared/` 跨域 DTO + compliance gateway S1-S6 rollup；`1.4.x` `src/` 按业务域重组 + 浏览器 Web OAuth；`1.3.x` `client.compliance` 合规域客户端
+- 当前版本：**2.0.0**（Phase 3 复核 + 全量根治 BREAKING 升级，2026-05-25）。**Phase 3 复核**: 主仓 9 commit 闭环 20 P0 (RBAC 表达式统一 / PII 真落盘加密链 / K7 视频 webhook 幂等 / K8 OCR SSRF / K9 KYC main flow / admin 写端点错误码契约). **SDK 同步**: 新增 `casehall.getMyLawyerCredentialStatus()` + `enterprise.getMyEnterpriseKycStatus()` 律师/企业 OWNER 自查端点; `finance/types.ts` P2-016 PII 注释升级 (含 keyVersion v1/v2 payload 协议); 新建 `docs/pii-role-matrix.md` (4 角色 × 3 PII 级矩阵); admin 写端点错误码改 HTTP 状态码语义 (`200+{ok:false}` → `403/404/501`). **v1.x 历史**: 1.9.0 finance / 1.8.1 enterprise / 1.8.0 casehall / 1.7.0 csign+pricing / 1.6.0 endUserId+11min 保活. 详见 [CHANGELOG](./CHANGELOG.md).
 - 测试：发布前需通过 typecheck/lint/vitest/build/packed-tarball smoke (`npm run test:pack`)
 - API 参考文档：`npm run docs` 经 TypeDoc 生成到 `docs/api/`
 - 包链接：[npm](https://www.npmjs.com/package/@acosmi/sdk-ts) · [GitHub Releases](https://github.com/acosmi/sdk-ts/releases)

package/dist/browser/index.mjs

@@ -6341,6 +6341,15 @@ Client.prototype.listLegalSKUs = async function(region, signal) {
   );
   return resp.data ?? [];
 };
+Client.prototype.getMyLawyerCredentialStatus = async function(signal) {
+  const resp = await this.doJSON(
+    "GET",
+    `/api/casehall/lawyer-credentials/my`,
+    null,
+    signal
+  );
+  return resp.data ?? [];
+};
 
 // src/enterprise/client.ts
 Client.prototype.listMyEnterprises = async function(signal) {
@@ -6436,6 +6445,15 @@ Client.prototype.getOrgConsumeReport = async function(enterpriseId, signal) {
   }
   return resp.data;
 };
+Client.prototype.getMyEnterpriseKycStatus = async function(signal) {
+  const resp = await this.doJSON(
+    "GET",
+    `/api/distribution/enterprise/kyc/my`,
+    null,
+    signal
+  );
+  return resp.data ?? {};
+};
 
 // src/finance/client.ts
 Client.prototype.requestRefund = async function(req, signal) {
@@ -6487,13 +6505,8 @@ Client.prototype.initiateCorporateTransfer = async function(req, signal) {
   return resp.data;
 };
 Client.prototype.uploadCorporateTransferProof = async function(id, proofUrl, signal) {
-  const qs = new URLSearchParams({ proofUrl });
-  const resp = await this.doJSON(
-    "POST",
-    `/api/distribution/finance/corporate-transfer/${id}/upload-proof?${qs.toString()}`,
-    null,
-    signal
-  );
+  const path = `/api/distribution/finance/corporate-transfer/${encodeURIComponent(String(id))}/upload-proof?proofUrl=${encodeURIComponent(proofUrl)}`;
+  const resp = await this.doJSON("POST", path, null, signal);
   return resp.data ?? false;
 };
 Client.prototype.listMyCorporateTransfers = async function(signal) {