@acosmi/sdk-ts 2.6.0 → 2.7.0

package/CHANGELOG.md

@@ -5,6 +5,26 @@ All notable changes to `@acosmi/sdk-ts` will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.7.0] - 2026-06-11 — 远控管理面补齐 + BYOK 密钥客户端 + Chat Bridge CRUD（Phase 7B）
+
+补齐远控核心交互之外的全部管理面（此前下游 CrabCode 只能裸 fetch），新增 BYO 模型密钥客户端，落地 chat-bridge integration/credential 管理面 CRUD——云端控制台与下游调用的是同一组端点同一份租户隔离数据，天然互通。全部方法逐字段对齐 nexus-v4 handler 真实 wire 形状（契约 §12/§14/§18 附录 A）。
+
+### Added
+
+- **`agentRuns.list(opts?)`** — 调用者自己的 run 列表（`GET /agent-runs`，Phase 5C 控制台）：`runtime`/`status` 过滤 + `page`/`pageSize` 分页，信封 `{records,total,page,pageSize}`；run view 新增 `runtime`/`runner`/`adapter` 字段（标准 run 缺省），永不含 session token/policy/messages。
+- **`agentRuns.submitPermissionResult(runId, {requestId, decision, reason?})`** — 远控审批决策回写（`POST /:runId/permission-results`）；decision 仅 `approved`|`rejected`（契约 §14），409 = 会话不可用。
+- **`agentRuns.submitUserMessage(runId, {content, requestId?})`** — 会话中途追加用户消息（`POST /:runId/messages`，≤64KB，role 服务端硬编码 user）；返回服务端最终幂等键。
+- **`agentRuns.revealRemoteToken(runId)`** — desktop launcher 一次性 session token（`POST /:runId/remote-token`，Phase 5B；仅 runner=desktop）；响应含 `workspace`（契约 §18.3 r4）。token 永不落浏览器存储。
+- **`AgentRunCreateRequest.byokCredentialRef`** — BYO 密钥引用上 wire（`byok_credential_ref`，仅远控 + cloud runner）。
+- **`client.crabcodeByok`（`CrabCodeByokClient`）** — BYO 模型密钥管理面（契约 §18.2，`/crabcode/byok-credentials`，`remote_control` scope）：`list`/`create`/`rotate`/`revoke`；明文一次性提交，响应恒 masked（ref+fingerprint）。新类型 `ByokProvider`/`ByokCredential`/`ByokCreateRequest`。
+- **`client.chatBridge`（`ChatBridgeClient`，Phase 7B）** — 第三方聊天平台集成/凭证管理面 CRUD：`createIntegration`/`listIntegrations`/`getIntegration`/`updateIntegrationStatus` + `storeCredential`/`listCredentials`/`rotateCredential`/`revokeCredential`。请求体 snake_case（SDK 转换）、响应 camelCase（契约 §12 平面分化）；scope 三档 `chat_bridge:read`/`:write`/`:rotate`。新类型 `CreateIntegrationRequest`/`StoreCredentialRequest`。
+- **metadata 约定键常量** — `AGENT_RUN_META_TITLE`/`AGENT_RUN_META_WORKSPACE`（契约 §18.3 r4：title 列表标题 / workspace 期望项目目录）。
+- **远控管理面类型** — `RemotePermissionDecision`/`RemotePermissionResultRequest`/`RemoteUserMessageRequest`/`RemoteUserMessageAck`/`RemoteSessionTokenGrant`/`AgentRunListOptions`/`AgentRunListResult`。
+
+### Deprecated
+
+- **`ChatIntegration.configJson`** — 服务端从不返回该字段（model `json:"-"`，防 secret 误入后整体不外发），读取恒 `undefined`；写入走 `createIntegration({ configJson })`。
+
 ## [2.6.0] - 2026-06-04 — 会员订阅查询 + 后端契约类型修正 + WS 一次性 ticket 鉴权
 
 新增会员订阅查询能力 + chat_bridge scope，并修正一批此前与后端不符（运行时即为 `undefined`）的计费/订单/钱包/余额/通知类型形状。**破坏性 = 类型修正**：被修正的类型字段名 / 类型发生变化，但它们此前本就拿不到正确运行时值，对真正生效的调用代码无功能回退。

package/README.md

@@ -332,14 +332,50 @@ const run = await client.agentRuns.createRemoteRun({
 for await (const ev of client.agentRuns.streamRemoteControl(run.runId)) {
   switch (ev.type) {
     case 'text_delta':         process.stdout.write(ev.text); break;
-    case 'permission_request': /* 渲染审批卡片，回写 permission_result */ break;
+    case 'permission_request': // 渲染审批卡片后回写决策 (仅 approved|rejected, 契约 §14)
+      await client.agentRuns.submitPermissionResult(run.runId, {
+        requestId: ev.requestId, decision: 'approved',
+      });
+      break;
     case 'settle':             console.log('billed', ev.billed); break;
   }
 }
 
+// 会话中途追加用户消息 (role 服务端硬编码 user, ≤64KB)
+await client.agentRuns.submitUserMessage(run.runId, { content: '继续, 用方案B' });
+
 await client.agentRuns.cancel(run.runId); // UI 中止走服务端 cancel control frame，不是 fetch abort
 ```
 
+#### 远控管理面（v2.7.0）
+
+| 方法 | 端点 | 说明 |
+| --- | --- | --- |
+| `agentRuns.list(opts?)` | `GET /agent-runs` | 调用者自己的 run 列表（新→旧）；`{ runtime: 'crabcode_remote' }` 过滤远控 run，分页 `{records,total,page,pageSize}`。view 只含元数据，永不含 session token / policy / messages（契约 §6） |
+| `agentRuns.submitPermissionResult(runId, {requestId, decision, reason?})` | `POST /:runId/permission-results` | 回写 `permission_request` 决策；仅 `approved` \| `rejected`（`timeout`/`cancelled` 由服务端产生）。409 = 远控会话已不可用 |
+| `agentRuns.submitUserMessage(runId, {content, requestId?})` | `POST /:runId/messages` | 会话中途追加用户消息；role 服务端硬编码 `user`（契约 §6 #5 防注入），返回服务端最终幂等键 |
+| `agentRuns.revealRemoteToken(runId)` | `POST /:runId/remote-token` | **仅 desktop runner / desktop launcher 用**：一次性 session token（重复调用 409）。token 永不落浏览器存储，native 层接收后只注入 CrabCode 子进程 env；响应含 `workspace`（用户声明的项目目录，契约 §18.3 r4） |
+
+**metadata 约定键（契约 §18.3 r4）**：`metadata.title`（列表显示标题，缺省服务端从 input 首行派生）、`metadata.workspace`（期望项目目录，经 `revealRemoteToken().workspace` 下发给桌面端采纳）。常量 `AGENT_RUN_META_TITLE` / `AGENT_RUN_META_WORKSPACE`。服务端上限 ≤32 条 / 键 ≤64B / 值 ≤2KB。
+
+#### BYOK — 用户自有模型密钥（v2.7.0，契约 §18.2）
+
+`client.crabcodeByok` 管理 BYO 模型密钥（守卫 `remote_control` scope）；创建后把 `credentialRef` 传给 `createRemoteRun({ byokCredentialRef })`（仅 `runner: 'cloud'`）。明文一次性提交、服务端加密落库后即弃，所有读取只回 masked 视图（ref + fingerprint）——解密只发生在网关 cloud runner 启动时的子进程 env 注入点。
+
+```ts
+const cred = await client.crabcodeByok.create({
+  provider: 'deepseek',          // anthropic|openai|deepseek|dashscope|zhipu|volcengine|custom
+  plaintext: process.env.MY_KEY!, // 一次性提交; SDK/服务端永不回传
+  name: '我的 DeepSeek 钥匙',
+});
+await client.agentRuns.createRemoteRun({
+  appId: '', input: '…', runtime: 'crabcode_remote', runner: 'cloud', adapter: 'remote_io',
+  byokCredentialRef: cred.credentialRef,
+});
+await client.crabcodeByok.rotate(cred.credentialRef, 'sk-new'); // ref 不变, fingerprint 更新
+await client.crabcodeByok.revoke(cred.credentialRef);           // 软吊销 + 抹密文, 幂等
+```
+
 要点：
 
 - **scope 隔离**：远控用专用 `remote_control` scope（服务端展开为 `remote_control:{agent-run,session-control,permission-response}` 三子项）；**绝不复用** `models:chat`/`ai`，且 `allScopes()` 不含它——桌面登录不会自动获得远控权限。用 `remoteControlScopes()` 或显式 `[...allScopes(), ScopeRemoteControl]`。
@@ -357,25 +393,52 @@ await client.agentRuns.cancel(run.runId); // UI 中止走服务端 cancel contro
 - **11 事件 union**（`RemoteControlEvent`，契约 §4）：`text_delta` / `reasoning_delta` / `tool_call` / `tool_result` / `permission_request` / `permission_result` / `usage` / `settle` / `status` / `error` / `done`。`error` **恒为非终结**（终结性错误由 `done.reason`/`done.finalStatus` 承载），`done` / `settle` 才终结流——故 `streamRemoteControl` 不接受 options、从不抛异常；用 `isTerminalRemoteEvent(ev)` 判终结。
 - **辅助导出**：`parseRemoteControlEvent` / `isTerminalRemoteEvent` / `AdapterKind` / `RunnerKind` / `RemoteControlEvent` / `RemoteSessionPlacement` / `PermissionPolicy` / `WorkspacePolicy`（`src/agent-runs/remote-control.ts`）。
 
-## Chat Bridge（第三方聊天平台桥接，v2.1.0 · types-only 骨架，无 client 方法，Phase 7B 后端落地）
+## Chat Bridge（第三方聊天平台桥接，v2.7.0 · Phase 7B 管理面 CRUD 落地）
 
-`chatbridge` 从根入口导出第三方聊天平台（飞书/企微/钉钉/Slack/Teams/Telegram/WhatsApp）接入 Acosmi 远控的**稳定类型契约**。Phase 7 仅交付类型骨架：**SDK 暂无 `client.chatBridge.*` 方法**，平台 webhook/凭证/桥接 handler 是 Phase 7B 后端工作；平台 SDK 依赖留在独立 adapter 包，不进主包。
+`client.chatBridge` 提供第三方聊天平台（飞书/企微/钉钉/Slack/Teams/Telegram/WhatsApp）集成与凭证的管理面 CRUD。**云端控制台与下游（CrabCode 等）调的是同一组端点、同一份按租户隔离的数据**——任一端创建/修改，另一端即时可见，无需同步机制。平台 webhook adapter（验签/收发消息）是 Phase 8 后端工作，SDK 不承载。
 
 ```ts
-import {
-  isPlatform, isRegion, isChannelInboundEvent, asCredentialRef,
-  type Platform, type ChatCredentialPublic, type ChannelInboundEvent,
-} from '@acosmi/sdk-ts';
+import { Client, chatBridgeScopes } from '@acosmi/sdk-ts';
+
+const client = new Client({ baseURL: process.env.ACOSMI_BASE_URL! });
+// chat_bridge 是高风险 scope, 不在 allScopes() 内, 必须显式申请
+await client.login('CrabCode 平台接入', chatBridgeScopes());
 
+// 1. 创建集成 (chat_bridge:write); 平台原始 ID 服务端只存 SHA256 hash
+const integ = await client.chatBridge.createIntegration({
+  appId: 'crabcode', platform: 'feishu', region: 'cn',
+  workspaceId: 'ou_xxx', botId: 'cli_xxx',
+});
+
+// 2. 存凭证 (明文一次性提交; 响应恒为 masked 视图, 永不回明文/密文)
+const cred = await client.chatBridge.storeCredential(integ.id, {
+  secretKind: 'app_secret', plaintext: process.env.FEISHU_SECRET!,
+});
+
+// 3. 激活
+await client.chatBridge.updateIntegrationStatus(integ.id, 'active');
+
+// 查询 (chat_bridge:read) / 轮换与吊销 (chat_bridge:rotate, 高风险独立 scope)
+await client.chatBridge.listIntegrations('crabcode');
+await client.chatBridge.listCredentials(integ.id);
+await client.chatBridge.rotateCredential(integ.id, 'app_secret', 'new-secret');
+await client.chatBridge.revokeCredential(cred.credentialRef);
+```
+
+类型守卫与 branded ref 仍从根入口导出：
+
+```ts
+import { isPlatform, asCredentialRef, type Platform } from '@acosmi/sdk-ts';
 isPlatform('feishu');             // → true（7 平台枚举运行时守卫）
 asCredentialRef('cred_abc...');   // → branded CredentialRef（防 plaintext 误传）
 ```
 
-边界（契约 §6 + §16）：
+边界（契约 §6 + §12 + §16）：
 
-- 平台 secret（bot token / signing key / AES key）**只入上游 credential vault**；SDK 公共面只见 `CredentialRef`（`cred_<base32>`）+ `fingerprint` + 脱敏 metadata，**永不**出现 ciphertext / plaintext（`ChatCredentialPublic` 编译期即无密文字段）。
-- **wire 平面**：chatbridge 资源视图走 nexus-v4 model-direct 序列化，字段为 **camelCase**（与 remote-control 的 snake_case 平面不同，详见契约 §12）。
-- 平台原始 thread / sender / workspace ID 一律 SHA256 hash 后入库（`threadHash`/`senderHash`）。
+- 平台 secret（bot token / signing key / AES key）**只在 `storeCredential`/`rotateCredential` 请求体出现一次**，服务端加密落库后即弃；SDK 公共面只见 `CredentialRef`（`cred_<base32>`）+ `fingerprint` + 脱敏 metadata，**永不**出现 ciphertext / plaintext（`ChatCredentialPublic` 编译期即无密文字段）。
+- **wire 平面**：请求体为 snake_case（SDK 自动转换），响应资源视图走 nexus-v4 model-direct 序列化为 **camelCase**（与 remote-control 的 snake_case 平面不同，详见契约 §12）。`ChatIntegration.configJson` 服务端从不返回（`json:"-"`），写入走 `createIntegration({ configJson })`。
+- 平台原始 thread / sender / workspace ID 一律 SHA256 hash 后入库（`threadHash`/`senderHash`/`workspaceIdHash`）。
+- scope 三档最小授权：`chat_bridge:read`（查询）/ `chat_bridge:write`（创建集成/存凭证）/ `chat_bridge:rotate`（轮换/吊销，高风险）；分组 scope `chat_bridge` 自包含三子项。跨租户引用服务端一律 404。
 
 ## 认证
 

package/dist/browser/index.mjs

@@ -4763,6 +4763,8 @@ async function sleepWithSignal2(ms, signal) {
 }
 
 // src/agent-runs/types.ts
+var AGENT_RUN_META_TITLE = "title";
+var AGENT_RUN_META_WORKSPACE = "workspace";
 var AgentRunStreamError = class extends Error {
   event;
   code;
@@ -4938,6 +4940,33 @@ var AgentRunsClient = class {
     );
     return fromWireCreateResponse(resp);
   }
+  /**
+   * List the caller's own agent runs, newest first (GET /agent-runs, Phase 5C
+   * console). Returns view metadata only — never session tokens, policies or
+   * messages (contract §6). Filter remote-control runs with
+   * `{ runtime: 'crabcode_remote' }`.
+   */
+  async list(opts = {}, signal) {
+    const params = new URLSearchParams();
+    if (opts.runtime) params.set("runtime", opts.runtime);
+    if (opts.status) params.set("status", opts.status);
+    if (opts.page != null) params.set("page", String(opts.page));
+    if (opts.pageSize != null) params.set("page_size", String(opts.pageSize));
+    const qs = params.toString();
+    const resp = await this.requestAPI(
+      "GET",
+      `/agent-runs${qs ? `?${qs}` : ""}`,
+      null,
+      signal,
+      { retryOn401: true }
+    );
+    return {
+      records: (resp.records ?? []).map(fromWireRun),
+      total: typeof resp.total === "number" ? resp.total : 0,
+      page: typeof resp.page === "number" ? resp.page : 1,
+      pageSize: typeof resp.pageSize === "number" ? resp.pageSize : 20
+    };
+  }
   get(runId, signal) {
     return this.requestAPI(
       "GET",
@@ -4999,6 +5028,73 @@ var AgentRunsClient = class {
       [Symbol.asyncIterator]: () => this.streamRemoteControlGen(runId, signal)
     };
   }
+  /**
+   * Submit a permission decision for a pending `permission_request` event
+   * (POST /agent-runs/:runId/permission-results, contract §4/§9/§14).
+   *
+   * Only `approved` | `rejected` may be submitted by clients — `timeout` /
+   * `cancelled` are produced server-side. Requires an OAuth token with the
+   * explicit `remote_control` scope (or a web JWT). 409 means the remote
+   * session is gone (e.g. already terminated).
+   */
+  async submitPermissionResult(runId, result, signal) {
+    await this.requestAPI(
+      "POST",
+      `/agent-runs/${encodeURIComponent(runId)}/permission-results`,
+      {
+        request_id: result.requestId,
+        decision: result.decision,
+        reason: result.reason
+      },
+      signal,
+      { retryOn401: false }
+    );
+  }
+  /**
+   * Append a mid-session user message to a remote run
+   * (POST /agent-runs/:runId/messages, Phase 5C). The message role is
+   * hard-coded to 'user' server-side (contract §6 #5 prompt-injection
+   * defence); content is limited to 64KB. Requires the explicit
+   * `remote_control` scope (or a web JWT).
+   */
+  async submitUserMessage(runId, message, signal) {
+    const resp = await this.requestAPI(
+      "POST",
+      `/agent-runs/${encodeURIComponent(runId)}/messages`,
+      { request_id: message.requestId, content: message.content },
+      signal,
+      { retryOn401: false }
+    );
+    return {
+      ok: resp?.ok === true,
+      requestId: resp?.request_id ?? message.requestId ?? ""
+    };
+  }
+  /**
+   * Reveal the one-shot remote session token for a desktop-runner run
+   * (POST /agent-runs/:runId/remote-token, Phase 5B; contract §18.1).
+   *
+   * Desktop launcher only: the token is single-consumption (a second call
+   * returns 409) and must never touch browser storage — receive it in the
+   * native layer and inject it into the CrabCode child-process env only
+   * (contract §6). Cloud / local_embedded runners never expose tokens over
+   * HTTP (403). Requires the explicit `remote_control` scope.
+   */
+  async revealRemoteToken(runId, signal) {
+    const resp = await this.requestAPI(
+      "POST",
+      `/agent-runs/${encodeURIComponent(runId)}/remote-token`,
+      {},
+      signal,
+      { retryOn401: false }
+    );
+    return {
+      accessToken: resp?.access_token ?? "",
+      sessionUrl: resp?.session_url ?? "",
+      tenantId: resp?.tenant_id ?? "",
+      workspace: resp?.workspace || void 0
+    };
+  }
   async *streamRemoteControlGen(runId, signal) {
     const resp = await this.requestRaw(
       "GET",
@@ -5249,6 +5345,7 @@ function toWireCreateRequest(req) {
     adapter: req.adapter,
     permission_policy: req.permissionPolicy ? toWirePermissionPolicy(req.permissionPolicy) : void 0,
     workspace_policy: req.workspacePolicy ? toWireWorkspacePolicy(req.workspacePolicy) : void 0,
+    byok_credential_ref: req.byokCredentialRef,
     artifact_policy: req.artifactPolicy ? {
       enabled: req.artifactPolicy.enabled,
       max_files: req.artifactPolicy.maxFiles
@@ -5281,7 +5378,10 @@ function fromWireRun(resp) {
     startedAt: resp.started_at,
     completedAt: resp.completed_at,
     error: normalizeError(resp.error),
-    metadata: resp.metadata
+    metadata: resp.metadata,
+    runtime: resp.runtime,
+    runner: resp.runner,
+    adapter: resp.adapter
   };
 }
 function fromWireArtifact(resp) {
@@ -5539,6 +5639,87 @@ function errorMessage(e) {
   return e instanceof Error ? e.message : String(e);
 }
 
+// src/agent-runs/byok.ts
+function fromWireByok(v) {
+  return {
+    credentialRef: v.credential_ref ?? "",
+    provider: v.provider ?? "",
+    name: v.name || void 0,
+    baseUrl: v.base_url || void 0,
+    fingerprint: v.fingerprint || void 0,
+    status: v.status ?? "",
+    createdAt: v.created_at || void 0,
+    lastUsedAt: v.last_used_at || void 0
+  };
+}
+var byokByClient = /* @__PURE__ */ new WeakMap();
+Object.defineProperty(Client.prototype, "crabcodeByok", {
+  configurable: true,
+  enumerable: false,
+  get() {
+    let existing = byokByClient.get(this);
+    if (!existing) {
+      existing = new CrabCodeByokClient(this);
+      byokByClient.set(this, existing);
+    }
+    return existing;
+  }
+});
+var CrabCodeByokClient = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  /** 列出调用者自己的密钥 (masked; 新→旧, 服务端上限 100 条)。 */
+  async list(signal) {
+    const resp = await this.client.doJSON(
+      "GET",
+      "/crabcode/byok-credentials",
+      null,
+      signal
+    );
+    return (resp.data?.items ?? []).map(fromWireByok);
+  }
+  /**
+   * 创建密钥 — 明文一次性提交, 返回 masked 视图。
+   * 单用户上限 20 把; provider='custom' 必须带 https:// baseUrl。
+   */
+  async create(req, signal) {
+    const resp = await this.client.doJSON(
+      "POST",
+      "/crabcode/byok-credentials",
+      {
+        provider: req.provider,
+        name: req.name,
+        base_url: req.baseUrl,
+        plaintext: req.plaintext
+      },
+      signal
+    );
+    return fromWireByok(resp.data ?? {});
+  }
+  /** 轮换密钥明文 — credentialRef 不变, fingerprint 更新。已吊销的密钥不可轮换 (400)。 */
+  async rotate(credentialRef, newPlaintext, signal) {
+    const resp = await this.client.doJSON(
+      "POST",
+      `/crabcode/byok-credentials/${encodeURIComponent(credentialRef)}/rotate`,
+      { new_plaintext: newPlaintext },
+      signal
+    );
+    return fromWireByok(resp.data ?? {});
+  }
+  /** 吊销密钥 (软状态 + 服务端抹密文, 不可恢复; 幂等 — 重复吊销返回当前视图)。 */
+  async revoke(credentialRef, signal) {
+    const resp = await this.client.doJSON(
+      "POST",
+      `/crabcode/byok-credentials/${encodeURIComponent(credentialRef)}/revoke`,
+      {},
+      signal
+    );
+    return fromWireByok(resp.data ?? {});
+  }
+};
+
 // src/compliance/scopes.ts
 var ScopeComplianceEvidenceRead = "compliance:evidence:read";
 var ScopeComplianceEvidenceWrite = "compliance:evidence:write";
@@ -7192,6 +7373,130 @@ function asCredentialRef(s) {
   return s;
 }
 
-export { ALL_INTEGRATION_STATUS, ALL_PLATFORMS, ALL_REGIONS, AgentRunStreamError, AgentRunsClient, AnthropicAdapter, AudienceEnum, BillingModeEnum, BucketClassCommercial, BucketClassGeneric, BusinessError, Client, ComplianceClient, CompliancePollError, DEFAULT_API_TIMEOUT_MS, DEFAULT_GATEWAY_BASE_URL, LocalStorageTokenStore as DefaultBrowserTokenStore, DefaultRetryPolicy, ErrAuthDenied, ErrBillingCallbackCannotCommit, ErrBillingCommitRequiresLocalVerify, ErrBillingS2sForbidden, ErrBrowserOpen, ErrComplianceStepUpRequired, ErrDiscovery, ErrEnvelopeGateClosed, ErrOAuthCORSBlocked, ErrProviderNotConfigured, ErrProviderUnknownNoRetry, ErrRefreshProxyFailed, ErrRegistration, ErrSSLProxy, ErrSealApprovalContractHashMismatch, ErrSealApprovalExpired, ErrSealApprovalLocationMismatch, ErrSealApprovalNonceUsed, ErrSealApprovalNotApproved, ErrSealApprovalSealMismatch, ErrSealApprovalTransactorMismatch, ErrSealUseAlreadyConsumed, ErrStateMismatch, ErrTimeout, ErrTokenExchange, ErrTokenExpired, EventAuthURL, EventComplete, EventError, FileTokenStore, FilterStatusAdminBypass, FilterStatusDisabledByFlag, FilterStatusFallbackMissingUser, FilterStatusFallbackNoBuckets, FilterStatusFallbackTkdistError, FilterStatusFallbackTkdistSkew, FilterStatusInternalBypass, FilterStatusOK, FilterStatusUnknown, HTTPError, IdempotencyKeyHeader, InMemoryTokenStore, LocalStorageTokenStore, ModelNotFoundError, NetworkError, OAuthTokenEndpointError, OpenAIAdapter, OrderTerminalError, ProductFamilyEnum, ProviderFormat, RETRY_ADVICE_REASONS, RateLimitError, RegionScopeEnum, ScopeAI, ScopeAccount, ScopeChatBridge, ScopeChatBridgeRead, ScopeChatBridgeRotate, ScopeChatBridgeWrite, ScopeComplianceContractSigningRead, ScopeComplianceContractSigningWrite, ScopeComplianceContractTemplateRead, ScopeComplianceContractTemplateWrite, ScopeComplianceEvidenceRead, ScopeComplianceEvidenceWrite, ScopeComplianceReportsPublish, ScopeComplianceReportsRead, ScopeComplianceReportsWrite, ScopeComplianceSealApprovalApprove, ScopeComplianceSealApprovalRequest, ScopeComplianceSealManage, ScopeComplianceSealUseExecute, ScopeComplianceTimestampIssue, ScopeComplianceTimestampVerify, ScopeEntitlements, ScopeModels, ScopeModelsChat, ScopeProfile, ScopeRemoteControl, ScopeRemoteControlAgentRun, ScopeRemoteControlPermissionResponse, ScopeRemoteControlSessionControl, ScopeSkillStore, ScopeSkills, ScopeTokenPackages, ScopeTools, ScopeToolsExecute, ScopeWallet, ScopeWalletReadonly, ServerToolTypeWebSearch, StreamError, ThinkingHigh, ThinkingHighMinMaxTokens, ThinkingMax, ThinkingMaxFallbackMaxTokens, ThinkingOff, allScopes, anthropicResponseTextContent, anthropicResponseThinkingContent, anthropicResponseToolUseBlocks, apiResponseBusinessError, apiResponseGetMessage, asCredentialRef, authorize, bucketInfoIsCommercial, bucketRowIsCommercial, buildBetas, chatBridgeScopes, classifyComplianceError, commerceScopes, completeWebAuthorizationRequest, complianceErrorToRetryAdvice, complianceScopes, computeBackoff, createWebAuthorizationRequest, defaultRetryable, defaultSafeToRetry, discover, discoverWebOAuthMetadata, discoverWithProfile, effectivePolicy, exchangeCode, extractAnthropicBlockMeta, fileLockDefaults, findDesktopVisualUnderstandingModel, findFirstModelByInputModality, generateState, getAdapter, getAdapterForModel, isBillingConfirmable, isChannelInboundEvent, isComplianceBusinessError, isComplianceTerminalError, isIntegrationStatus, isInvalidGrantError, isPlatform, isRegion, isSSECommentLine, isSSLError, isTerminalRemoteEvent, isValidTokenSet, maxEndUserIdLength, modelScopes, modelSupportsImageInput, modelSupportsInputModality, newFileTokenStore, newThinkingConfig, newTokenSet, newWebSearchTool, normalizeGatewayBaseURL, normalizeOverrideBaseURL, parseNotificationEvent, parseRemoteControlEvent, parseSettlement, parseSourcesEvent, refreshToken, register, registerWebOAuthClient, remoteControlScopes, retryReasonForComplianceKey, retryReasonForOAuthError, revokeToken, sanitize_exports as sanitize, skillScopes, tokenSetIsExpired, uniqueMerge, validateEndUserId };
+// src/chatbridge/client.ts
+var chatBridgeByClient = /* @__PURE__ */ new WeakMap();
+Object.defineProperty(Client.prototype, "chatBridge", {
+  configurable: true,
+  enumerable: false,
+  get() {
+    let existing = chatBridgeByClient.get(this);
+    if (!existing) {
+      existing = new ChatBridgeClient(this);
+      chatBridgeByClient.set(this, existing);
+    }
+    return existing;
+  }
+});
+var ChatBridgeClient = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  // ---------------------------------------------------------------------------
+  // Integration 管理面
+  // ---------------------------------------------------------------------------
+  /** 创建平台集成 (chat_bridge:write)。云端控制台与下游 (CrabCode) 调的是同一端点/同一份数据。 */
+  async createIntegration(req, signal) {
+    const resp = await this.client.doJSON(
+      "POST",
+      "/chat-bridge/integrations",
+      {
+        app_id: req.appId,
+        platform: req.platform,
+        region: req.region,
+        workspace_id: req.workspaceId,
+        bot_id: req.botId,
+        config_json: req.configJson
+      },
+      signal
+    );
+    return resp.data;
+  }
+  /** 列出本租户集成 (chat_bridge:read; masked 视图)。可按 appId 过滤。 */
+  async listIntegrations(appId, signal) {
+    const qs = appId ? `?app_id=${encodeURIComponent(appId)}` : "";
+    const resp = await this.client.doJSON(
+      "GET",
+      `/chat-bridge/integrations${qs}`,
+      null,
+      signal
+    );
+    return resp.data?.items ?? [];
+  }
+  /** 取单个集成 (chat_bridge:read)。不存在/跨租户一律 404。 */
+  async getIntegration(id, signal) {
+    const resp = await this.client.doJSON(
+      "GET",
+      `/chat-bridge/integrations/${encodeURIComponent(id)}`,
+      null,
+      signal
+    );
+    return resp.data;
+  }
+  /** 更新集成状态 (chat_bridge:write): pending | active | suspended | revoked。 */
+  async updateIntegrationStatus(id, status, signal) {
+    await this.client.doJSON(
+      "PATCH",
+      `/chat-bridge/integrations/${encodeURIComponent(id)}/status`,
+      { status },
+      signal
+    );
+  }
+  // ---------------------------------------------------------------------------
+  // Credential 管理面 (vault)
+  // ---------------------------------------------------------------------------
+  /** 存凭证 (chat_bridge:write) — 明文一次性提交, 返回 masked 记录 (ref+fingerprint)。 */
+  async storeCredential(integrationId, req, signal) {
+    const resp = await this.client.doJSON(
+      "POST",
+      `/chat-bridge/integrations/${encodeURIComponent(integrationId)}/credentials`,
+      {
+        secret_kind: req.secretKind,
+        plaintext: req.plaintext,
+        region: req.region,
+        platform: req.platform
+      },
+      signal
+    );
+    return brandCredential(resp.data);
+  }
+  /** 列出集成的凭证 (chat_bridge:read; masked, 永不含明文/密文)。 */
+  async listCredentials(integrationId, signal) {
+    const resp = await this.client.doJSON(
+      "GET",
+      `/chat-bridge/integrations/${encodeURIComponent(integrationId)}/credentials`,
+      null,
+      signal
+    );
+    return (resp.data?.items ?? []).map(brandCredential);
+  }
+  /** 轮换凭证 (chat_bridge:rotate, 高风险) — ref 不变, fingerprint 更新。 */
+  async rotateCredential(integrationId, secretKind, newPlaintext, signal) {
+    const resp = await this.client.doJSON(
+      "POST",
+      `/chat-bridge/integrations/${encodeURIComponent(integrationId)}/credentials/rotate`,
+      { secret_kind: secretKind, new_plaintext: newPlaintext },
+      signal
+    );
+    return brandCredential(resp.data);
+  }
+  /** 吊销凭证 (chat_bridge:rotate) — 软吊销 + 服务端抹密文。 */
+  async revokeCredential(credentialRef, signal) {
+    await this.client.doJSON(
+      "POST",
+      `/chat-bridge/credentials/${encodeURIComponent(credentialRef)}/revoke`,
+      {},
+      signal
+    );
+  }
+};
+function brandCredential(c) {
+  if (c && typeof c.credentialRef === "string") {
+    return { ...c, credentialRef: asCredentialRef(c.credentialRef) };
+  }
+  return c;
+}
+
+export { AGENT_RUN_META_TITLE, AGENT_RUN_META_WORKSPACE, ALL_INTEGRATION_STATUS, ALL_PLATFORMS, ALL_REGIONS, AgentRunStreamError, AgentRunsClient, AnthropicAdapter, AudienceEnum, BillingModeEnum, BucketClassCommercial, BucketClassGeneric, BusinessError, ChatBridgeClient, Client, ComplianceClient, CompliancePollError, CrabCodeByokClient, DEFAULT_API_TIMEOUT_MS, DEFAULT_GATEWAY_BASE_URL, LocalStorageTokenStore as DefaultBrowserTokenStore, DefaultRetryPolicy, ErrAuthDenied, ErrBillingCallbackCannotCommit, ErrBillingCommitRequiresLocalVerify, ErrBillingS2sForbidden, ErrBrowserOpen, ErrComplianceStepUpRequired, ErrDiscovery, ErrEnvelopeGateClosed, ErrOAuthCORSBlocked, ErrProviderNotConfigured, ErrProviderUnknownNoRetry, ErrRefreshProxyFailed, ErrRegistration, ErrSSLProxy, ErrSealApprovalContractHashMismatch, ErrSealApprovalExpired, ErrSealApprovalLocationMismatch, ErrSealApprovalNonceUsed, ErrSealApprovalNotApproved, ErrSealApprovalSealMismatch, ErrSealApprovalTransactorMismatch, ErrSealUseAlreadyConsumed, ErrStateMismatch, ErrTimeout, ErrTokenExchange, ErrTokenExpired, EventAuthURL, EventComplete, EventError, FileTokenStore, FilterStatusAdminBypass, FilterStatusDisabledByFlag, FilterStatusFallbackMissingUser, FilterStatusFallbackNoBuckets, FilterStatusFallbackTkdistError, FilterStatusFallbackTkdistSkew, FilterStatusInternalBypass, FilterStatusOK, FilterStatusUnknown, HTTPError, IdempotencyKeyHeader, InMemoryTokenStore, LocalStorageTokenStore, ModelNotFoundError, NetworkError, OAuthTokenEndpointError, OpenAIAdapter, OrderTerminalError, ProductFamilyEnum, ProviderFormat, RETRY_ADVICE_REASONS, RateLimitError, RegionScopeEnum, ScopeAI, ScopeAccount, ScopeChatBridge, ScopeChatBridgeRead, ScopeChatBridgeRotate, ScopeChatBridgeWrite, ScopeComplianceContractSigningRead, ScopeComplianceContractSigningWrite, ScopeComplianceContractTemplateRead, ScopeComplianceContractTemplateWrite, ScopeComplianceEvidenceRead, ScopeComplianceEvidenceWrite, ScopeComplianceReportsPublish, ScopeComplianceReportsRead, ScopeComplianceReportsWrite, ScopeComplianceSealApprovalApprove, ScopeComplianceSealApprovalRequest, ScopeComplianceSealManage, ScopeComplianceSealUseExecute, ScopeComplianceTimestampIssue, ScopeComplianceTimestampVerify, ScopeEntitlements, ScopeModels, ScopeModelsChat, ScopeProfile, ScopeRemoteControl, ScopeRemoteControlAgentRun, ScopeRemoteControlPermissionResponse, ScopeRemoteControlSessionControl, ScopeSkillStore, ScopeSkills, ScopeTokenPackages, ScopeTools, ScopeToolsExecute, ScopeWallet, ScopeWalletReadonly, ServerToolTypeWebSearch, StreamError, ThinkingHigh, ThinkingHighMinMaxTokens, ThinkingMax, ThinkingMaxFallbackMaxTokens, ThinkingOff, allScopes, anthropicResponseTextContent, anthropicResponseThinkingContent, anthropicResponseToolUseBlocks, apiResponseBusinessError, apiResponseGetMessage, asCredentialRef, authorize, bucketInfoIsCommercial, bucketRowIsCommercial, buildBetas, chatBridgeScopes, classifyComplianceError, commerceScopes, completeWebAuthorizationRequest, complianceErrorToRetryAdvice, complianceScopes, computeBackoff, createWebAuthorizationRequest, defaultRetryable, defaultSafeToRetry, discover, discoverWebOAuthMetadata, discoverWithProfile, effectivePolicy, exchangeCode, extractAnthropicBlockMeta, fileLockDefaults, findDesktopVisualUnderstandingModel, findFirstModelByInputModality, generateState, getAdapter, getAdapterForModel, isBillingConfirmable, isChannelInboundEvent, isComplianceBusinessError, isComplianceTerminalError, isIntegrationStatus, isInvalidGrantError, isPlatform, isRegion, isSSECommentLine, isSSLError, isTerminalRemoteEvent, isValidTokenSet, maxEndUserIdLength, modelScopes, modelSupportsImageInput, modelSupportsInputModality, newFileTokenStore, newThinkingConfig, newTokenSet, newWebSearchTool, normalizeGatewayBaseURL, normalizeOverrideBaseURL, parseNotificationEvent, parseRemoteControlEvent, parseSettlement, parseSourcesEvent, refreshToken, register, registerWebOAuthClient, remoteControlScopes, retryReasonForComplianceKey, retryReasonForOAuthError, revokeToken, sanitize_exports as sanitize, skillScopes, tokenSetIsExpired, uniqueMerge, validateEndUserId };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map