@acosmi/sdk-ts 2.0.1 → 2.1.0

package/dist/node/index.d.cts

@@ -184,6 +184,13 @@ interface ClientRegistration {
     client_secret?: string;
 }
 
+declare class OAuthTokenEndpointError extends Error {
+    readonly status: number;
+    readonly oauthError: string;
+    readonly errorDescription: string;
+    constructor(status: number, oauthError: string, errorDescription: string);
+}
+declare function isInvalidGrantError(err: unknown): boolean;
 /** OAuth metadata profile — 决定 well-known 端点的路径后缀 */
 type OAuthMetadataProfile = 'web' | 'desktop';
 /**
@@ -564,13 +571,48 @@ declare const FilterStatusFallbackTkdistSkew: FilterStatus;
 declare const FilterStatusFallbackNoBuckets: FilterStatus;
 declare const FilterStatusFallbackMissingUser: FilterStatus;
 declare const FilterStatusUnknown: FilterStatus;
+/** Acosmi Gateway URL 默认值 — 与历史行为一致。 */
+declare const DEFAULT_GATEWAY_BASE_URL = "https://acosmi.com";
+/**
+ * normalizeGatewayBaseURL — Acosmi nexus-v4 API Gateway URL 的归一化与校验。
+ *
+ * 红线 (Phase 0 契约 §1-§2):
+ *   1. 仅允许 `http:` / `https:`；`ws:` / `wss:` 是 CrabCode `--sdk-url`
+ *      RemoteIO 会话通道，不是 SDK API gateway URL，传入立刻抛错。
+ *   2. URL 必须可被 `new URL()` 解析；非法输入立刻抛错。
+ *   3. host 必须非空；query/hash 不允许 (gateway URL 不带 query)。
+ *   4. pathname 去尾 `/`；末段允许是 `/api/v4` (`apiURL()` 不会重复追加)。
+ *   5. 返回值是 `origin + pathname`，不带 query/hash/trailing slash。
+ *
+ * 该函数是公共 helper：CrabCode AppServer worker、CrabClaw 内部、外部第三方 SDK
+ * 都应在写入 Acosmi base 之前调用它一次，避免 ws/wss 误入 SDK API client。
+ */
+declare function normalizeGatewayBaseURL(input: unknown): string;
 /** 客户端配置 */
 interface Config {
     /**
-     * nexus-v4 API 根地址 (默认 https://acosmi.com)。
-     * SDK 自动追加 /api/v4, 无需手动拼接。
+     * Acosmi nexus-v4 API Gateway 根地址 (默认 https://acosmi.com)。
+     *
+     * 该 URL 是 `@acosmi/sdk-ts` 调 Acosmi 云端 API 的根 — agent-runs /
+     * managed-models / notifications WS / compliance 都从它派生。SDK 内部
+     * `apiURL()` 会自动追加 `/api/v4`，调用方无需手动拼。
+     *
+     * 见 Phase 0 契约 `docs/audit/sdk-remote-control-contract-2026-05-27.md` §1-§2:
+     *   - 协议: 仅允许 `http:` / `https:`；`ws:` / `wss:` 是 CrabCode `--sdk-url`
+     *     RemoteIO 会话通道，不是 SDK gateway URL，传入将抛 `Error`。
+     *   - `serverURL` / `baseURL` / `baseUrl` 三字段同语义，多写时 normalize 后必须相等。
      */
     serverURL?: string;
+    /**
+     * `serverURL` 的标准 alias (推荐拼写)。语义、normalize、校验完全等同 serverURL。
+     * 见 Phase 0 契约 §2。同时传入 serverURL/baseURL/baseUrl 时三者 normalize 后必须相等。
+     */
+    baseURL?: string;
+    /**
+     * `serverURL` 的 camelCase-小写 alias。语义、normalize、校验完全等同 serverURL。
+     * 见 Phase 0 契约 §2。
+     */
+    baseUrl?: string;
     /** token 持久化实现, 缺省时按平台选 (Node File / Browser LocalStorage / Memory) */
     store?: TokenStore;
     /** 自定义 fetch 实现 (默认 globalThis.fetch) */
@@ -696,6 +738,16 @@ declare class Client {
     static create(cfg?: Config): Promise<Client>;
     /** 是否已授权 (有可用 token) */
     isAuthorized(): boolean;
+    /**
+     * 返回归一化后的 Acosmi Gateway URL (= `serverURL` 字段). readonly helper.
+     *
+     * Phase 0 §2 红线:
+     *   - 不要 mutate `client.serverURL` 字段实现 base 切换; 用 per-base Client 实例.
+     *   - 该值仅供日志/排查/上层缓存键使用, 不重新 normalize 它 (构造期已 normalize).
+     */
+    getServerURL(): string;
+    /** `getServerURL()` 的 alias — Phase 0 §2 baseURL 与 serverURL 同义. */
+    getBaseURL(): string;
     /** 当前 token 信息 (用于 CLI whoami 显示) */
     getTokenSet(): TokenSet | null;
     private getCachedClientID;
@@ -732,6 +784,7 @@ declare class Client {
     private refreshCurrentTokenDirect;
     private refreshCurrentTokenViaProxy;
     private saveRefreshedToken;
+    private clearInvalidRefreshToken;
     /** 互斥锁 helper (替代 Go sync.Mutex) */
     private withMu;
     /** v1.0.2: 跨进程临界区 helper. store.withLock 可选, 缺省则直接调用 fn (LocalStorage /
@@ -1362,6 +1415,14 @@ interface BillingPreflightResult {
 declare const ScopeAI = "ai";
 declare const ScopeSkills = "skills";
 declare const ScopeAccount = "account";
+/** 远程控制能力 (分组 scope, 自包含展开到 3 个子 scope). 高风险, 不进 allScopes(). */
+declare const ScopeRemoteControl = "remote_control";
+/** 创建 / 取消 / stream AgentRun. */
+declare const ScopeRemoteControlAgentRun = "remote_control:agent-run";
+/** 远程会话 lifecycle 控制 (cancel / interrupt / kill). */
+declare const ScopeRemoteControlSessionControl = "remote_control:session-control";
+/** 代表用户提交远控权限审批响应 (allow / deny / timeout). */
+declare const ScopeRemoteControlPermissionResponse = "remote_control:permission-response";
 /** @deprecated 旧细粒度 scope, 保留向后兼容, 新代码请用分组 scope */
 declare const ScopeModels = "models";
 /** @deprecated */
@@ -1390,6 +1451,11 @@ declare function modelScopes(): string[];
 declare function commerceScopes(): string[];
 /** 技能/工具 scope */
 declare function skillScopes(): string[];
+/**
+ * 远程控制 scope (推荐). 仅返回分组 ScopeRemoteControl, 服务端 ScopeExpansion 会展开
+ * 为 3 个子 scope. 调用方需显式申请, allScopes() 不包含本项 (避免桌面登录自动获权).
+ */
+declare function remoteControlScopes(): string[];
 
 interface OpenAIChatResponse {
     id: string;
@@ -1900,7 +1966,139 @@ declare module '@acosmi/sdk-ts' {
     }
 }
 
+type AdapterKind = 'remote_io' | 'app_server_tcp_ws' | 'bridge_ccr' | 'app_server_uds' | 'stdio_stream_json' | 'tauri_managed_app_server';
+type RunnerKind = 'cloud' | 'desktop' | 'local_embedded';
+interface WorkspacePolicy {
+    readOnly?: boolean;
+    allowedPaths?: string[];
+    deniedPaths?: string[];
+    maxBytes?: number;
+}
+interface PermissionPolicy {
+    shellAllowed?: boolean;
+    shellDenyList?: string[];
+    networkAllowed?: boolean;
+    writeAllowed?: boolean;
+    approvalTimeoutMs?: number;
+    requiredActors?: string[];
+}
+interface RemoteSessionPlacement {
+    tenantId: string;
+    userId: string;
+    appId: string;
+    runId: string;
+    runner: RunnerKind;
+    adapter: AdapterKind;
+    ttlMs?: number;
+    workspace?: WorkspacePolicy;
+    permission?: PermissionPolicy;
+}
+interface RemoteSessionRef {
+    sessionId: string;
+    runId: string;
+    tenantId: string;
+    userId: string;
+    adapter: AdapterKind;
+    createdAt?: string;
+    expiresAt?: string;
+}
+type RemoteControlEventType = 'text_delta' | 'reasoning_delta' | 'tool_call' | 'tool_result' | 'permission_request' | 'permission_result' | 'usage' | 'settle' | 'status' | 'error' | 'done';
+interface RemoteControlTextDelta {
+    type: 'text_delta';
+    index: number;
+    text: string;
+}
+interface RemoteControlReasoningDelta {
+    type: 'reasoning_delta';
+    index: number;
+    text: string;
+}
+interface RemoteControlToolCall {
+    type: 'tool_call';
+    toolCallId: string;
+    name: string;
+    input?: unknown;
+    source?: string;
+}
+interface RemoteControlToolResult {
+    type: 'tool_result';
+    toolCallId: string;
+    ok: boolean;
+    output?: unknown;
+    error?: string;
+}
+interface RemoteControlPermissionRequest {
+    type: 'permission_request';
+    requestId: string;
+    kind: string;
+    payload?: unknown;
+    deadlineMs?: number;
+}
+interface RemoteControlPermissionResult {
+    type: 'permission_result';
+    requestId: string;
+    decision: 'allow' | 'deny' | string;
+    actor?: string;
+    decidedAt?: string;
+}
+interface RemoteControlUsage {
+    type: 'usage';
+    inputTokens?: number;
+    outputTokens?: number;
+    cacheRead?: number;
+    cacheCreate?: number;
+    exact?: boolean;
+}
+interface RemoteControlSettle {
+    type: 'settle';
+    status: string;
+    billed?: boolean;
+}
+interface RemoteControlStatus {
+    type: 'status';
+    phase: 'created' | 'connecting' | 'connected' | 'running' | 'cancelling' | 'terminating' | string;
+    message?: string;
+}
+interface RemoteControlError {
+    type: 'error';
+    code: string;
+    message: string;
+    retryable?: boolean;
+    kind?: string;
+}
+interface RemoteControlDone {
+    type: 'done';
+    reason: string;
+    runId: string;
+    finalStatus: string;
+}
+type RemoteControlEvent = RemoteControlTextDelta | RemoteControlReasoningDelta | RemoteControlToolCall | RemoteControlToolResult | RemoteControlPermissionRequest | RemoteControlPermissionResult | RemoteControlUsage | RemoteControlSettle | RemoteControlStatus | RemoteControlError | RemoteControlDone;
+/**
+ * 把后端 SSE/JSON wire payload 翻译成强类型 RemoteControlEvent。
+ *
+ * - wire 字段 snake_case (text_delta / tool_call_id / permission_request ...);
+ * - TS API 字段 camelCase (toolCallId / requestId ...);
+ * - 未知 type / 缺失关键字段返回 null, 调用方应当忽略并打 warn;
+ * - 不抛异常: 一律返回 null。
+ */
+declare function parseRemoteControlEvent(raw: unknown): RemoteControlEvent | null;
+/**
+ * isTerminalRemoteEvent — 仅 `done` 与 `settle` 终结一个 stream。
+ *
+ * 注意契约 §4 关于 error:
+ *   - 终结性错误进入 `done`;
+ *   - 非终结 error 不结束 stream;
+ *   因此 `error` 本身不算 terminal, `done` 才是。
+ */
+declare function isTerminalRemoteEvent(ev: RemoteControlEvent): boolean;
+
 type AgentRunStatus = 'queued' | 'running' | 'completed' | 'failed' | 'cancelled';
+/**
+ * Remote-control runtime selector (Phase 3 / contract §3).
+ *   - 'standard'         existing chat/workflow path (default; backward compatible)
+ *   - 'crabcode_remote'  CrabCode remote-control session; requires runner + adapter
+ */
+type AgentRunRuntime = 'standard' | 'crabcode_remote';
 interface AgentRunLocalContextPolicy {
     enabled?: boolean;
     readonly?: boolean;
@@ -1923,6 +2121,22 @@ interface AgentRunCreateRequest {
     metadata?: Record<string, string>;
     localContextPolicy?: AgentRunLocalContextPolicy;
     artifactPolicy?: AgentRunArtifactPolicy;
+    runtime?: AgentRunRuntime;
+    runner?: RunnerKind;
+    adapter?: AdapterKind;
+    permissionPolicy?: PermissionPolicy;
+    workspacePolicy?: WorkspacePolicy;
+}
+/**
+ * Narrow type for `agentRuns.createRemoteRun(req)`:
+ *   - runtime is fixed to `'crabcode_remote'`;
+ *   - runner + adapter are required;
+ *   - inherits everything else from AgentRunCreateRequest.
+ */
+interface AgentRunRemoteCreateRequest extends AgentRunCreateRequest {
+    runtime: 'crabcode_remote';
+    runner: RunnerKind;
+    adapter: AdapterKind;
 }
 interface AgentRun {
     runId: string;
@@ -2090,6 +2304,34 @@ declare class AgentRunsClient {
     get(runId: string, signal?: AbortSignal): Promise<AgentRun>;
     stream(runId: string, opts?: AgentRunStreamOptions, signal?: AbortSignal): AsyncIterable<AgentRunStreamEvent>;
     cancel(runId: string, signal?: AbortSignal): Promise<AgentRun>;
+    /**
+     * Create a CrabCode remote-control agent run (contract §3, ADR-2 + ADR-5).
+     *
+     * Equivalent to `create()` with `runtime: 'crabcode_remote'` and the required
+     * `runner` + `adapter` fields set. Per-session policies (permission/workspace)
+     * are forwarded to the gateway, which is the only side allowed to enforce
+     * them (contract §6). The SDK never enforces remote permissions client-side.
+     *
+     * The corresponding stream uses `streamRemoteControl(runId)`, NOT `stream()`,
+     * because the event union is different (contract §4).
+     */
+    createRemoteRun(req: AgentRunRemoteCreateRequest, signal?: AbortSignal): Promise<AgentRunCreateResponse>;
+    /**
+     * Stream remote-control events for a CrabCode remote run (contract §4).
+     *
+     * Yields the canonical 11-event union: text_delta / reasoning_delta /
+     * tool_call / tool_result / permission_request / permission_result /
+     * usage / settle / status / error / done.
+     *
+     * Iteration ends naturally when a terminal event (`done` or `settle`) is
+     * observed. Per contract §4, `error` alone is non-terminal — terminal errors
+     * are carried by `done.reason` / `done.final_status`.
+     *
+     * Unknown event types and malformed frames are silently skipped (warn-only),
+     * matching `parseRemoteControlEvent`'s null-return contract.
+     */
+    streamRemoteControl(runId: string, signal?: AbortSignal): AsyncIterable<RemoteControlEvent>;
+    private streamRemoteControlGen;
     listArtifacts(runId: string, signal?: AbortSignal): Promise<AgentRunArtifact[]>;
     downloadArtifact(runId: string, artifactId: string, signal?: AbortSignal): Promise<AgentRunDownload>;
     submitLocalToolResult(runId: string, result: AgentRunLocalToolResult, signal?: AbortSignal): Promise<AgentRun>;
@@ -3456,6 +3698,11 @@ declare module '@acosmi/sdk-ts' {
         listPlans(audience?: SubscriptionAudience, signal?: AbortSignal): Promise<SubscriptionPlan[]>;
         /** 列出当前用户已激活订阅 (跨档位; 通常 1 条 active) */
         listUserSubscriptions(signal?: AbortSignal): Promise<UserSubscription[]>;
+        /**
+         * 按 planCode 精确取单个可售订阅计划 (V41 起 planCode 在 active 内唯一)。
+         * 复用 listPlans 客户端过滤, 未命中返回 null。减少 C 端按字段手筛 (deep-review §12.3)。
+         */
+        getPlanByCode(planCode: string, signal?: AbortSignal): Promise<SubscriptionPlan | null>;
     }
 }
 
@@ -4135,4 +4382,201 @@ declare module '@acosmi/sdk-ts' {
     }
 }
 
-export { type APIResponse, type AgentRun, type AgentRunArtifact, type AgentRunArtifactList, type AgentRunArtifactPolicy, type AgentRunCreateRequest, type AgentRunCreateResponse, type AgentRunDownload, type AgentRunErrorPayload, type AgentRunLocalContextPolicy, type AgentRunLocalToolHandler, type AgentRunLocalToolHandlerContext, type AgentRunLocalToolResult, type AgentRunRunOptions, type AgentRunSettlement, type AgentRunStatus, AgentRunStreamError, type AgentRunStreamEvent, type AgentRunStreamOptions, type AgentRunUsage, type AgentRunWithLocalToolsOptions, AgentRunsClient, AnthropicResponse, type ApiClientRef, type ApproveSealApprovalQuery, type AssignSeatRequest, type Audience, AudienceEnum, type AuthorizeResult, type BalanceDetail, type BillingMode, BillingModeEnum, type BillingPreflightResult, type BlockMeta, type BookConsultationRequest, type BrowserRefreshMode, type BugReportResult, type BugView, BusinessError, type CancelSealApprovalQuery, type CaseLead, type CaseMatter, type CertificationStatus, ChatRequest, ChatResponse, Client, type ClientRegistration, type ComplianceAssetType, type ComplianceBenefitType, type ComplianceBillingDisplayStatus, type ComplianceCapability, ComplianceClient, type ComplianceClientErrorCode, type ComplianceDigestSource, type ComplianceEnvelopeStatus, type ComplianceErrorInfo, type ComplianceErrorKey, type ComplianceHashAlgorithm, CompliancePollError, type CompliancePollOptions, type CompliancePrivacyLevel, type ComplianceProviderRequestStatus, type ComplianceProviderStatus, type ComplianceQuoteResponse, type ComplianceReport, type ComplianceScope, type ComplianceSealApprovalStatus, type ComplianceSku, type ComplianceTimestampVerificationStatus, type ComplianceWriteOptions, type Config, type ConsumeRecord, type ConsumeRecordPage, type ContractTemplateField, type ContractTemplateFieldType, type ContractTemplatePageItem, type ContractTemplateResp, type ContractTemplateStatus, type ContractTemplateVersion, type CorporateTransfer, type CreateContractTemplateRequest, type CreateEvidenceAssetRequest, type CreateH5SigningUrlRequest, type CreateReportRequest, type CreateSigningEnvelopeRequest, type CreateWebAuthorizationRequestOptions, DefaultRetryPolicy, type DeviceRegistration, type EnterpriseKycMyStatusView, type EnterpriseMember, type EnterpriseSummary, type EntitlementBalance, type EntitlementItem, type EnvelopeContractItem, ErrAuthDenied, ErrBillingCallbackCannotCommit, ErrBillingCommitRequiresLocalVerify, ErrBillingS2sForbidden, ErrBrowserOpen, ErrComplianceStepUpRequired, ErrDiscovery, ErrEnvelopeGateClosed, ErrOAuthCORSBlocked, ErrProviderNotConfigured, ErrProviderUnknownNoRetry, ErrRefreshProxyFailed, ErrRegistration, ErrSSLProxy, ErrSealApprovalContractHashMismatch, ErrSealApprovalExpired, ErrSealApprovalLocationMismatch, ErrSealApprovalNonceUsed, ErrSealApprovalNotApproved, ErrSealApprovalSealMismatch, ErrSealApprovalTransactorMismatch, ErrSealUseAlreadyConsumed, ErrStateMismatch, ErrTimeout, ErrTokenExchange, ErrTokenExpired, EventAuthURL, EventComplete, EventError, type EvidenceAsset, type EvidenceAssetPageItem, type EvidencePackage, type EvidencePackagePageItem, type FeatureGateState, type FeatureGateStatus, FileTokenStore, type FilterStatus, FilterStatusAdminBypass, FilterStatusDisabledByFlag, FilterStatusFallbackMissingUser, FilterStatusFallbackNoBuckets, FilterStatusFallbackTkdistError, FilterStatusFallbackTkdistSkew, FilterStatusInternalBypass, FilterStatusOK, FilterStatusUnknown, type GateQuota, type GenerateSkillRequest, type GenerateSkillResult, HTTPError, type IdempotencyKey, IdempotencyKeyHeader, InMemoryTokenStore, type InitiateCorporateTransferInput, type InitiateCorporateTransferResult, InputModality, type InviteMemberRequest, type Invoice, type IssueTimestampRequest, type LawyerCredentialMyView, type LawyerSummary, type LegalConsultation, type LegalServiceOrder, type LegalServiceSku, type LegalSkuCode, type ListContractTemplatesRequest, type ListEvidenceAssetsRequest, type ListEvidencePackagesRequest, type ListOperationsRequest, type ListReportsRequest, type ListSealApprovalsRequest, type ListSealUsesRequest, type ListSigningEnvelopesRequest, type ListTimestampsRequest, LocalStorageTokenStore, type LoginErrCode, type LoginEvent, type LoginEventType, type LoginOptions, ManagedModel, type ModelBucket, type ModelByQuotaResponse, ModelCapabilities, type ModelCoefficient, ModelNotFoundError, NetworkError, type Notification, type NotificationList, type NotificationPreference, type NotificationUnreadCount, type OAuthMetadataProfile, type OpenAIChatChoice, type OpenAIChatMessage, type OpenAIChatResponse, type OpenAIFunctionCall, type OpenAIStreamChoice, type OpenAIStreamChunk, type OpenAIStreamDelta, type OpenAIStreamToolCall, type OpenAIToolCall, type OpenAIUsage, type OperationDetail, type OperationId, type OperationPageItem, type OperationSource, type OperationStatus, type OptimizeSkillRequest, type OptimizeSkillResult, type Order, type OrderStatus, OrderTerminalError, type OrgConsumeReport, type OrgSeat, type OrgSubscription, type PageRequest, type PageResult, type PayPayload, type PricingConfig, type PrincipalRef, type Product, type ProductFamily, ProductFamilyEnum, ProviderAdapter, type ProviderRequestStatus, type ProviderRequestStatusView, type PublicEvidenceVerifyResult, type PublicModelSummary, QuotaSummary, RETRY_ADVICE_REASONS, RateLimitError, type RefundPolicy, type RefundRecord, type RegionScope, RegionScopeEnum, type RegisterWebOAuthClientOptions, type RejectSealApprovalQuery, type ReportDownload, type ReportPageItem, type RequestInvoiceInput, type RequestRefundInput, type RetryAdvice, type RetryAdviceReason, type RetryPolicy, type RetryRequestInfo, type RolloverPolicy, ScopeAI, ScopeAccount, ScopeComplianceContractSigningRead, ScopeComplianceContractSigningWrite, ScopeComplianceContractTemplateRead, ScopeComplianceContractTemplateWrite, ScopeComplianceEvidenceRead, ScopeComplianceEvidenceWrite, ScopeComplianceReportsPublish, ScopeComplianceReportsRead, ScopeComplianceReportsWrite, ScopeComplianceSealApprovalApprove, ScopeComplianceSealApprovalRequest, ScopeComplianceSealManage, ScopeComplianceSealUseExecute, ScopeComplianceTimestampIssue, ScopeComplianceTimestampVerify, ScopeEntitlements, ScopeModels, ScopeModelsChat, ScopeProfile, ScopeSkillStore, ScopeSkills, ScopeTokenPackages, ScopeTools, ScopeToolsExecute, ScopeWallet, ScopeWalletReadonly, type SealApproval, type SealApprovalPageItem, type SealUsePageItem, type ServerMetadata, type SignEnvelopeRequest, type SigningEnvelope, type SigningEnvelopePageItem, type SkillBrowseListResponse, type SkillBrowseResponse, type SkillStoreItem, type SkillStoreListItem, type SkillStoreQuery, type SkillSummary, type SortDirection, SourcesEvent, type StepUpStatus, StreamError, StreamEvent, StreamSettlement, type SubmitCaseLeadRequest, type SubmitSealApprovalRequest, type SubscriptionAudience, type SubscriptionPlan, type TenantRef, type TimestampPageItem, type TimestampToken, type TimestampVerifyResult, type TokenPackage, type TokenResponse, type TokenSet, type TokenStore, type ToolListResponse, type ToolProvider, type ToolView, type Transaction, type TsaProvider, type TsaStats, type UpdateContractTemplateRequest, type UploadContractTemplatePdfRequest, type UserSubscription, type VerifyStatus, type VerifyTimestampRequest, type VoidEnvelopeRequest, type WSConfig, type WSEvent, type WalletStats, type WebAuthorizationCallbackParams, type WebAuthorizationPending, type WebAuthorizationRequest, type YudaoPageResult, allScopes, apiResponseBusinessError, apiResponseGetMessage, authorize, buildBetas, classifyComplianceError, commerceScopes, completeWebAuthorizationRequest, complianceErrorToRetryAdvice, complianceScopes, computeBackoff, createWebAuthorizationRequest, defaultRetryable, defaultSafeToRetry, discover, discoverWebOAuthMetadata, discoverWithProfile, effectivePolicy, exchangeCode, extractAnthropicBlockMeta, fileLockDefaults, findDesktopVisualUnderstandingModel, findFirstModelByInputModality, generateState, isBillingConfirmable, isComplianceBusinessError, isComplianceTerminalError, isSSECommentLine, isSSLError, maxEndUserIdLength, modelScopes, modelSupportsImageInput, modelSupportsInputModality, newFileTokenStore, newTokenSet, parseNotificationEvent, refreshToken, register, registerWebOAuthClient, retryReasonForComplianceKey, retryReasonForOAuthError, revokeToken, skillScopes, tokenSetIsExpired, uniqueMerge, validateEndUserId };
+type Platform = 'feishu' | 'wecom' | 'dingtalk' | 'slack' | 'teams' | 'telegram' | 'whatsapp';
+type Region = 'cn' | 'intl';
+type IntegrationStatus = 'pending' | 'active' | 'suspended' | 'revoked';
+/**
+ * CredentialRef — chat-bridge 凭证公开引用 (`cred_<22 char base32>`).
+ *
+ * branded type 防止 plaintext secret 字符串被误传到需要 CredentialRef 的位置。
+ * SDK 调用方应仅持有 CredentialRef, 永不持 plaintext。
+ */
+type CredentialRef = string & {
+    readonly __brand: 'CredentialRef';
+};
+/**
+ * ChannelAttachment — 入站附件 / 出站文件附件.
+ *
+ * 安全约束 (ADR-8):
+ *   - `url` 必须由 bridge runtime 解析过 (Acosmi 内部存储 URL); 严禁是平台原始签名 URL。
+ *   - `contentType` 是标准 MIME; `kind` 是 bridge 内部分类 (image/file/audio/video/link/...)。
+ */
+interface ChannelAttachment {
+    kind: string;
+    url: string;
+    size?: number;
+    contentType?: string;
+}
+/**
+ * ChannelCardAction — 出站交互卡片按钮 / 自由输入.
+ *
+ * `kind`: 'approve' | 'reject' | 'cancel' | 'free_text' | 其他 bridge 自定义。
+ * `id` 是 bridge 侧稳定 action id, 用于把用户点击映射回原 requestId 幂等键。
+ */
+interface ChannelCardAction {
+    kind: string;
+    id: string;
+    label: string;
+}
+/**
+ * ChannelCard — 出站交互卡片 (permission / tool_status / done / error).
+ */
+interface ChannelCard {
+    kind: string;
+    title: string;
+    body: string;
+    actions?: ChannelCardAction[];
+}
+/**
+ * ChannelInboundEvent — bridge runtime 视角的入站平台消息.
+ *
+ * 安全约束:
+ *   - `threadHash` / `senderHash` 是 SHA256(平台原始 ID), 不允许直接是平台 ID;
+ *   - `metadata` 仅含非敏感字段 (例: locale, message_kind), 严禁含 plaintext secret;
+ *   - `messageId` 是平台原生 message id, 仅用于平台侧 ack / dedup, 不进 AgentRun transcript。
+ */
+interface ChannelInboundEvent {
+    platform: Platform;
+    threadHash: string;
+    senderHash?: string;
+    content: string;
+    attachments?: ChannelAttachment[];
+    messageId?: string;
+    receivedAt?: string;
+    metadata?: Record<string, string>;
+}
+/**
+ * ChannelOutboundEvent — bridge runtime 出站平台消息 / 卡片.
+ *
+ * Metadata 仅含非敏感投递参数 (例: card_locale), 严禁含 plaintext secret。
+ */
+interface ChannelOutboundEvent {
+    threadHash: string;
+    content?: string;
+    cards?: ChannelCard[];
+    metadata?: Record<string, string>;
+}
+/**
+ * BridgeThreadRef — bridge runtime 内部 thread 引用 (Acosmi 三元组).
+ *
+ * 永不携带 platform secret / 原始平台 ID。
+ */
+interface BridgeThreadRef {
+    threadId: string;
+    runId?: string;
+    remoteSessionId?: string;
+    tenantId: string;
+    userId: string;
+    appId: string;
+}
+/**
+ * ChatIntegration — 平台安装记录的 SDK 只读视图.
+ *
+ * 注意: `configJson` 仅含非敏感配置 (rate limit / feature toggles); 严禁含 secret。
+ * Phase 7B handler 落地后, SDK admin 子客户端会按此型号 GET。
+ */
+interface ChatIntegration {
+    id: string;
+    tenantId: string;
+    appId: string;
+    platform: Platform;
+    region: Region;
+    workspaceIdHash?: string;
+    botIdHash?: string;
+    status: IntegrationStatus;
+    configJson?: string;
+    installedByUserId?: string;
+    lastUsedAt?: string;
+    createdAt?: string;
+    updatedAt?: string;
+}
+/**
+ * ChatCredentialPublic — 凭证的 SDK 只读视图 (绝不含 ciphertext / plaintext).
+ *
+ * 仅暴露公开字段: `credentialRef` / `fingerprint` / `keyId` / `version` / `status`。
+ */
+interface ChatCredentialPublic {
+    credentialRef: CredentialRef;
+    integrationId: string;
+    platform: Platform;
+    region: Region;
+    secretKind: string;
+    fingerprint: string;
+    keyId: string;
+    version: number;
+    status: 'active' | 'rotating' | 'revoked' | string;
+    lastUsedAt?: string;
+    rotatedAt?: string;
+    createdAt?: string;
+    updatedAt?: string;
+}
+/**
+ * ChatThread — 平台 thread 到 Acosmi session 的映射 (SDK 只读视图).
+ *
+ * 永不携带原始 platform thread / sender ID; 仅含 SHA256 hash。
+ */
+interface ChatThread {
+    id: string;
+    tenantId: string;
+    integrationId: string;
+    platformThreadHash: string;
+    platform: Platform;
+    userId: string;
+    appId: string;
+    sessionId?: string;
+    lastRunId?: string;
+    senderHash?: string;
+    lastInboundAt?: string;
+    lastOutboundAt?: string;
+}
+/**
+ * ChatBridgeSession — 一次 bridge runtime 会话 (SDK 只读视图).
+ */
+interface ChatBridgeSession {
+    id: string;
+    tenantId: string;
+    threadId: string;
+    integrationId: string;
+    runId?: string;
+    remoteSessionId?: string;
+    status: 'created' | 'routing' | 'active' | 'paused' | 'closed' | 'errored' | string;
+    adapter?: string;
+    lastFrameAt?: string;
+    closedAt?: string;
+    disconnectReason?: string;
+    createdAt?: string;
+    updatedAt?: string;
+}
+declare const ALL_PLATFORMS: readonly Platform[];
+declare const ALL_REGIONS: readonly Region[];
+declare const ALL_INTEGRATION_STATUS: readonly IntegrationStatus[];
+/**
+ * isPlatform — runtime type guard for {@link Platform}.
+ *
+ * 用途: SDK 解析 wire payload 时校验未知字段; 不直接抛异常, 调用方决策。
+ */
+declare function isPlatform(v: unknown): v is Platform;
+/**
+ * isRegion — runtime type guard for {@link Region}.
+ */
+declare function isRegion(v: unknown): v is Region;
+/**
+ * isIntegrationStatus — runtime type guard for {@link IntegrationStatus}.
+ */
+declare function isIntegrationStatus(v: unknown): v is IntegrationStatus;
+/**
+ * isChannelInboundEvent — 极简 type guard, 用于 wire payload 入口校验.
+ *
+ * 仅校验必填字段 (platform/threadHash/content); 其他字段交给调用方按需校验。
+ * 不抛异常: 失败返回 false。
+ */
+declare function isChannelInboundEvent(v: unknown): v is ChannelInboundEvent;
+/**
+ * 把任意字符串安全 brand 成 {@link CredentialRef}; 不做合法性校验.
+ *
+ * Phase 7B SDK 客户端 wire 解析时使用 — 服务端返回的 `credential_ref` 字段一律走它。
+ * 调用方自行判断格式 (例: 是否 `cred_` 前缀)。
+ */
+declare function asCredentialRef(s: string): CredentialRef;
+
+export { ALL_INTEGRATION_STATUS, ALL_PLATFORMS, ALL_REGIONS, type APIResponse, type AdapterKind, type AgentRun, type AgentRunArtifact, type AgentRunArtifactList, type AgentRunArtifactPolicy, type AgentRunCreateRequest, type AgentRunCreateResponse, type AgentRunDownload, type AgentRunErrorPayload, type AgentRunLocalContextPolicy, type AgentRunLocalToolHandler, type AgentRunLocalToolHandlerContext, type AgentRunLocalToolResult, type AgentRunRemoteCreateRequest, type AgentRunRunOptions, type AgentRunRuntime, type AgentRunSettlement, type AgentRunStatus, AgentRunStreamError, type AgentRunStreamEvent, type AgentRunStreamOptions, type AgentRunUsage, type AgentRunWithLocalToolsOptions, AgentRunsClient, AnthropicResponse, type ApiClientRef, type ApproveSealApprovalQuery, type AssignSeatRequest, type Audience, AudienceEnum, type AuthorizeResult, type BalanceDetail, type BillingMode, BillingModeEnum, type BillingPreflightResult, type BlockMeta, type BookConsultationRequest, type BridgeThreadRef, type BrowserRefreshMode, type BugReportResult, type BugView, BusinessError, type CancelSealApprovalQuery, type CaseLead, type CaseMatter, type CertificationStatus, type ChannelAttachment, type ChannelCard, type ChannelCardAction, type ChannelInboundEvent, type ChannelOutboundEvent, type ChatBridgeSession, type ChatCredentialPublic, type ChatIntegration, ChatRequest, ChatResponse, type ChatThread, Client, type ClientRegistration, type ComplianceAssetType, type ComplianceBenefitType, type ComplianceBillingDisplayStatus, type ComplianceCapability, ComplianceClient, type ComplianceClientErrorCode, type ComplianceDigestSource, type ComplianceEnvelopeStatus, type ComplianceErrorInfo, type ComplianceErrorKey, type ComplianceHashAlgorithm, CompliancePollError, type CompliancePollOptions, type CompliancePrivacyLevel, type ComplianceProviderRequestStatus, type ComplianceProviderStatus, type ComplianceQuoteResponse, type ComplianceReport, type ComplianceScope, type ComplianceSealApprovalStatus, type ComplianceSku, type ComplianceTimestampVerificationStatus, type ComplianceWriteOptions, type Config, type ConsumeRecord, type ConsumeRecordPage, type ContractTemplateField, type ContractTemplateFieldType, type ContractTemplatePageItem, type ContractTemplateResp, type ContractTemplateStatus, type ContractTemplateVersion, type CorporateTransfer, type CreateContractTemplateRequest, type CreateEvidenceAssetRequest, type CreateH5SigningUrlRequest, type CreateReportRequest, type CreateSigningEnvelopeRequest, type CreateWebAuthorizationRequestOptions, type CredentialRef, DEFAULT_GATEWAY_BASE_URL, DefaultRetryPolicy, type DeviceRegistration, type EnterpriseKycMyStatusView, type EnterpriseMember, type EnterpriseSummary, type EntitlementBalance, type EntitlementItem, type EnvelopeContractItem, ErrAuthDenied, ErrBillingCallbackCannotCommit, ErrBillingCommitRequiresLocalVerify, ErrBillingS2sForbidden, ErrBrowserOpen, ErrComplianceStepUpRequired, ErrDiscovery, ErrEnvelopeGateClosed, ErrOAuthCORSBlocked, ErrProviderNotConfigured, ErrProviderUnknownNoRetry, ErrRefreshProxyFailed, ErrRegistration, ErrSSLProxy, ErrSealApprovalContractHashMismatch, ErrSealApprovalExpired, ErrSealApprovalLocationMismatch, ErrSealApprovalNonceUsed, ErrSealApprovalNotApproved, ErrSealApprovalSealMismatch, ErrSealApprovalTransactorMismatch, ErrSealUseAlreadyConsumed, ErrStateMismatch, ErrTimeout, ErrTokenExchange, ErrTokenExpired, EventAuthURL, EventComplete, EventError, type EvidenceAsset, type EvidenceAssetPageItem, type EvidencePackage, type EvidencePackagePageItem, type FeatureGateState, type FeatureGateStatus, FileTokenStore, type FilterStatus, FilterStatusAdminBypass, FilterStatusDisabledByFlag, FilterStatusFallbackMissingUser, FilterStatusFallbackNoBuckets, FilterStatusFallbackTkdistError, FilterStatusFallbackTkdistSkew, FilterStatusInternalBypass, FilterStatusOK, FilterStatusUnknown, type GateQuota, type GenerateSkillRequest, type GenerateSkillResult, HTTPError, type IdempotencyKey, IdempotencyKeyHeader, InMemoryTokenStore, type InitiateCorporateTransferInput, type InitiateCorporateTransferResult, InputModality, type IntegrationStatus, type InviteMemberRequest, type Invoice, type IssueTimestampRequest, type LawyerCredentialMyView, type LawyerSummary, type LegalConsultation, type LegalServiceOrder, type LegalServiceSku, type LegalSkuCode, type ListContractTemplatesRequest, type ListEvidenceAssetsRequest, type ListEvidencePackagesRequest, type ListOperationsRequest, type ListReportsRequest, type ListSealApprovalsRequest, type ListSealUsesRequest, type ListSigningEnvelopesRequest, type ListTimestampsRequest, LocalStorageTokenStore, type LoginErrCode, type LoginEvent, type LoginEventType, type LoginOptions, ManagedModel, type ModelBucket, type ModelByQuotaResponse, ModelCapabilities, type ModelCoefficient, ModelNotFoundError, NetworkError, type Notification, type NotificationList, type NotificationPreference, type NotificationUnreadCount, type OAuthMetadataProfile, OAuthTokenEndpointError, type OpenAIChatChoice, type OpenAIChatMessage, type OpenAIChatResponse, type OpenAIFunctionCall, type OpenAIStreamChoice, type OpenAIStreamChunk, type OpenAIStreamDelta, type OpenAIStreamToolCall, type OpenAIToolCall, type OpenAIUsage, type OperationDetail, type OperationId, type OperationPageItem, type OperationSource, type OperationStatus, type OptimizeSkillRequest, type OptimizeSkillResult, type Order, type OrderStatus, OrderTerminalError, type OrgConsumeReport, type OrgSeat, type OrgSubscription, type PageRequest, type PageResult, type PayPayload, type PermissionPolicy, type Platform, type PricingConfig, type PrincipalRef, type Product, type ProductFamily, ProductFamilyEnum, ProviderAdapter, type ProviderRequestStatus, type ProviderRequestStatusView, type PublicEvidenceVerifyResult, type PublicModelSummary, QuotaSummary, RETRY_ADVICE_REASONS, RateLimitError, type RefundPolicy, type RefundRecord, type Region, type RegionScope, RegionScopeEnum, type RegisterWebOAuthClientOptions, type RejectSealApprovalQuery, type RemoteControlDone, type RemoteControlError, type RemoteControlEvent, type RemoteControlEventType, type RemoteControlPermissionRequest, type RemoteControlPermissionResult, type RemoteControlReasoningDelta, type RemoteControlSettle, type RemoteControlStatus, type RemoteControlTextDelta, type RemoteControlToolCall, type RemoteControlToolResult, type RemoteControlUsage, type RemoteSessionPlacement, type RemoteSessionRef, type ReportDownload, type ReportPageItem, type RequestInvoiceInput, type RequestRefundInput, type RetryAdvice, type RetryAdviceReason, type RetryPolicy, type RetryRequestInfo, type RolloverPolicy, type RunnerKind, ScopeAI, ScopeAccount, ScopeComplianceContractSigningRead, ScopeComplianceContractSigningWrite, ScopeComplianceContractTemplateRead, ScopeComplianceContractTemplateWrite, ScopeComplianceEvidenceRead, ScopeComplianceEvidenceWrite, ScopeComplianceReportsPublish, ScopeComplianceReportsRead, ScopeComplianceReportsWrite, ScopeComplianceSealApprovalApprove, ScopeComplianceSealApprovalRequest, ScopeComplianceSealManage, ScopeComplianceSealUseExecute, ScopeComplianceTimestampIssue, ScopeComplianceTimestampVerify, ScopeEntitlements, ScopeModels, ScopeModelsChat, ScopeProfile, ScopeRemoteControl, ScopeRemoteControlAgentRun, ScopeRemoteControlPermissionResponse, ScopeRemoteControlSessionControl, ScopeSkillStore, ScopeSkills, ScopeTokenPackages, ScopeTools, ScopeToolsExecute, ScopeWallet, ScopeWalletReadonly, type SealApproval, type SealApprovalPageItem, type SealUsePageItem, type ServerMetadata, type SignEnvelopeRequest, type SigningEnvelope, type SigningEnvelopePageItem, type SkillBrowseListResponse, type SkillBrowseResponse, type SkillStoreItem, type SkillStoreListItem, type SkillStoreQuery, type SkillSummary, type SortDirection, SourcesEvent, type StepUpStatus, StreamError, StreamEvent, StreamSettlement, type SubmitCaseLeadRequest, type SubmitSealApprovalRequest, type SubscriptionAudience, type SubscriptionPlan, type TenantRef, type TimestampPageItem, type TimestampToken, type TimestampVerifyResult, type TokenPackage, type TokenResponse, type TokenSet, type TokenStore, type ToolListResponse, type ToolProvider, type ToolView, type Transaction, type TsaProvider, type TsaStats, type UpdateContractTemplateRequest, type UploadContractTemplatePdfRequest, type UserSubscription, type VerifyStatus, type VerifyTimestampRequest, type VoidEnvelopeRequest, type WSConfig, type WSEvent, type WalletStats, type WebAuthorizationCallbackParams, type WebAuthorizationPending, type WebAuthorizationRequest, type WorkspacePolicy, type YudaoPageResult, allScopes, apiResponseBusinessError, apiResponseGetMessage, asCredentialRef, authorize, buildBetas, classifyComplianceError, commerceScopes, completeWebAuthorizationRequest, complianceErrorToRetryAdvice, complianceScopes, computeBackoff, createWebAuthorizationRequest, defaultRetryable, defaultSafeToRetry, discover, discoverWebOAuthMetadata, discoverWithProfile, effectivePolicy, exchangeCode, extractAnthropicBlockMeta, fileLockDefaults, findDesktopVisualUnderstandingModel, findFirstModelByInputModality, generateState, isBillingConfirmable, isChannelInboundEvent, isComplianceBusinessError, isComplianceTerminalError, isIntegrationStatus, isInvalidGrantError, isPlatform, isRegion, isSSECommentLine, isSSLError, isTerminalRemoteEvent, maxEndUserIdLength, modelScopes, modelSupportsImageInput, modelSupportsInputModality, newFileTokenStore, newTokenSet, normalizeGatewayBaseURL, parseNotificationEvent, parseRemoteControlEvent, refreshToken, register, registerWebOAuthClient, remoteControlScopes, retryReasonForComplianceKey, retryReasonForOAuthError, revokeToken, skillScopes, tokenSetIsExpired, uniqueMerge, validateEndUserId };