@acosmi/sdk-ts 2.6.0 → 2.7.0

package/dist/node/index.d.cts

@@ -2251,6 +2251,53 @@ declare function parseRemoteControlEvent(raw: unknown): RemoteControlEvent | nul
  *   因此 `error` 本身不算 terminal, `done` 才是。
  */
 declare function isTerminalRemoteEvent(ev: RemoteControlEvent): boolean;
+/**
+ * C 端/平台可下达的 permission 决策 (契约 §14)。
+ *
+ * 仅 `approved` | `rejected` — `timeout` / `cancelled` 由服务端 reaper/cancel
+ * 路径产生, 客户端不可下达。
+ */
+type RemotePermissionDecision = 'approved' | 'rejected';
+/** `agentRuns.submitPermissionResult()` 请求 — 回写 permission_request 的决策。 */
+interface RemotePermissionResultRequest {
+    /** 对应 permission_request 事件的 requestId。 */
+    requestId: string;
+    decision: RemotePermissionDecision;
+    /** 可选决策理由 (透传给 CrabCode control_response)。 */
+    reason?: string;
+}
+/** `agentRuns.submitUserMessage()` 请求 — 会话中途追加用户消息 (Phase 5C 输入框)。 */
+interface RemoteUserMessageRequest {
+    /** 消息正文; 服务端上限 64KB。Role 由服务端硬编码 'user' (契约 §6 #5 防注入)。 */
+    content: string;
+    /** 幂等键; 缺省由服务端生成并在 ack 中返回。 */
+    requestId?: string;
+}
+/** `agentRuns.submitUserMessage()` 确认。 */
+interface RemoteUserMessageAck {
+    ok: boolean;
+    /** 服务端最终采用的幂等键 (请求未带时为服务端生成值)。 */
+    requestId: string;
+}
+/**
+ * `agentRuns.revealRemoteToken()` 响应 — desktop launcher 一次性 session token
+ * (Phase 5B; 仅 runner='desktop')。
+ *
+ * 安全红线 (契约 §6): token 一次性消费 (重复调用 409), TTL ≤ 1h; 永不落
+ * 浏览器存储 (localStorage/cookie), 应由 native 层接收后只注入 CrabCode
+ * 子进程 env。
+ */
+interface RemoteSessionTokenGrant {
+    accessToken: string;
+    /** CrabCode 回连的 RemoteIO WS 完整地址 (公网 wss 基址 + run 路径 + tenant_id)。 */
+    sessionUrl: string;
+    tenantId: string;
+    /**
+     * 用户在 metadata.workspace 声明的期望项目目录 (契约 §18.3 r4); 缺省 undefined。
+     * 桌面端决定是否 chdir 采纳 (路径不存在/越权时回退并提示)。
+     */
+    workspace?: string;
+}
 
 type AgentRunStatus = 'queued' | 'running' | 'completed' | 'failed' | 'cancelled';
 /**
@@ -2269,6 +2316,17 @@ interface AgentRunArtifactPolicy {
     enabled?: boolean;
     maxFiles?: number;
 }
+/**
+ * Run metadata 约定键 (契约 §18.3 r4, additive)。
+ *
+ * 服务端防滥用上限: ≤32 条 / 键 ≤64B / 值 ≤2KB (`validateAgentRunMetadata`)。
+ *   - `title`     列表显示标题; 缺省由服务端从 input 首行派生 (60 rune 截断)。
+ *   - `workspace` 用户声明的期望项目目录; desktop runner 经
+ *     `revealRemoteToken()` 响应的 `workspace` 字段回传, 由桌面 launcher
+ *     决定是否 chdir 采纳 (路径不存在/越权时回退本机当前目录并提示)。
+ */
+declare const AGENT_RUN_META_TITLE = "title";
+declare const AGENT_RUN_META_WORKSPACE = "workspace";
 interface AgentRunCreateRequest {
     appId: string;
     mode?: string;
@@ -2278,6 +2336,10 @@ interface AgentRunCreateRequest {
     model?: string;
     activeSkillIds?: string[];
     knowledgeBaseIds?: string[];
+    /**
+     * 自由 KV 元数据。远控 run 的约定键见 {@link AGENT_RUN_META_TITLE} /
+     * {@link AGENT_RUN_META_WORKSPACE} (契约 §18.3 r4)。
+     */
     metadata?: Record<string, string>;
     localContextPolicy?: AgentRunLocalContextPolicy;
     artifactPolicy?: AgentRunArtifactPolicy;
@@ -2286,6 +2348,12 @@ interface AgentRunCreateRequest {
     adapter?: AdapterKind;
     permissionPolicy?: PermissionPolicy;
     workspacePolicy?: WorkspacePolicy;
+    /**
+     * BYO 模型密钥公开引用 (契约 §18.2; 仅远控 runtime + runner='cloud')。
+     * 只传 `crabcodeByok.create()` 返回的 credentialRef; 明文/密文绝不过此请求 —
+     * 解密只发生在网关 launchCloudRunner 的子进程 env 注入点。
+     */
+    byokCredentialRef?: string;
 }
 /**
  * Narrow type for `agentRuns.createRemoteRun(req)`:
@@ -2309,6 +2377,27 @@ interface AgentRun {
     completedAt?: string;
     error?: AgentRunErrorPayload;
     metadata?: Record<string, string>;
+    runtime?: AgentRunRuntime | string;
+    runner?: RunnerKind | string;
+    adapter?: AdapterKind | string;
+}
+/** `agentRuns.list()` 过滤/分页参数 (GET /agent-runs, Phase 5C 控制台)。 */
+interface AgentRunListOptions {
+    /** 按 runtime 过滤, 例 'crabcode_remote' (远控控制台列表)。 */
+    runtime?: AgentRunRuntime | string;
+    /** 按状态过滤, 例 'running'。 */
+    status?: AgentRunStatus | string;
+    /** 页码, 1 起; 缺省 1。 */
+    page?: number;
+    /** 每页条数; 缺省 20, 服务端上限 100。 */
+    pageSize?: number;
+}
+/** `agentRuns.list()` 结果 — 分页形状对齐 listConsumeRecords ({records,total,page,pageSize})。 */
+interface AgentRunListResult {
+    records: AgentRun[];
+    total: number;
+    page: number;
+    pageSize: number;
 }
 interface AgentRunCreateResponse {
     runId: string;
@@ -2461,6 +2550,13 @@ declare class AgentRunsClient {
     private readonly client;
     constructor(client: Client);
     create(req: AgentRunCreateRequest, signal?: AbortSignal): Promise<AgentRunCreateResponse>;
+    /**
+     * List the caller's own agent runs, newest first (GET /agent-runs, Phase 5C
+     * console). Returns view metadata only — never session tokens, policies or
+     * messages (contract §6). Filter remote-control runs with
+     * `{ runtime: 'crabcode_remote' }`.
+     */
+    list(opts?: AgentRunListOptions, signal?: AbortSignal): Promise<AgentRunListResult>;
     get(runId: string, signal?: AbortSignal): Promise<AgentRun>;
     stream(runId: string, opts?: AgentRunStreamOptions, signal?: AbortSignal): AsyncIterable<AgentRunStreamEvent>;
     cancel(runId: string, signal?: AbortSignal): Promise<AgentRun>;
@@ -2491,6 +2587,35 @@ declare class AgentRunsClient {
      * matching `parseRemoteControlEvent`'s null-return contract.
      */
     streamRemoteControl(runId: string, signal?: AbortSignal): AsyncIterable<RemoteControlEvent>;
+    /**
+     * Submit a permission decision for a pending `permission_request` event
+     * (POST /agent-runs/:runId/permission-results, contract §4/§9/§14).
+     *
+     * Only `approved` | `rejected` may be submitted by clients — `timeout` /
+     * `cancelled` are produced server-side. Requires an OAuth token with the
+     * explicit `remote_control` scope (or a web JWT). 409 means the remote
+     * session is gone (e.g. already terminated).
+     */
+    submitPermissionResult(runId: string, result: RemotePermissionResultRequest, signal?: AbortSignal): Promise<void>;
+    /**
+     * Append a mid-session user message to a remote run
+     * (POST /agent-runs/:runId/messages, Phase 5C). The message role is
+     * hard-coded to 'user' server-side (contract §6 #5 prompt-injection
+     * defence); content is limited to 64KB. Requires the explicit
+     * `remote_control` scope (or a web JWT).
+     */
+    submitUserMessage(runId: string, message: RemoteUserMessageRequest, signal?: AbortSignal): Promise<RemoteUserMessageAck>;
+    /**
+     * Reveal the one-shot remote session token for a desktop-runner run
+     * (POST /agent-runs/:runId/remote-token, Phase 5B; contract §18.1).
+     *
+     * Desktop launcher only: the token is single-consumption (a second call
+     * returns 409) and must never touch browser storage — receive it in the
+     * native layer and inject it into the CrabCode child-process env only
+     * (contract §6). Cloud / local_embedded runners never expose tokens over
+     * HTTP (403). Requires the explicit `remote_control` scope.
+     */
+    revealRemoteToken(runId: string, signal?: AbortSignal): Promise<RemoteSessionTokenGrant>;
     private streamRemoteControlGen;
     listArtifacts(runId: string, signal?: AbortSignal): Promise<AgentRunArtifact[]>;
     downloadArtifact(runId: string, artifactId: string, signal?: AbortSignal): Promise<AgentRunDownload>;
@@ -2506,6 +2631,54 @@ declare class AgentRunsClient {
     private requestRawInner;
 }
 
+/** 允许的第三方提供商 (与网关 byokAllowedProviders / managed_model Provider 谱系对齐)。 */
+type ByokProvider = 'anthropic' | 'openai' | 'deepseek' | 'dashscope' | 'zhipu' | 'volcengine' | 'custom';
+type ByokCredentialStatus = 'active' | 'revoked';
+/** BYOK 密钥 masked 视图 — 永不含明文/密文。 */
+interface ByokCredential {
+    credentialRef: string;
+    provider: ByokProvider | string;
+    name?: string;
+    /** 仅 provider='custom' 时存在 (https:// 起始)。 */
+    baseUrl?: string;
+    /** 明文指纹 (轮换后变化; 用于"是否同一把钥匙"的人工核对)。 */
+    fingerprint?: string;
+    status: ByokCredentialStatus | string;
+    createdAt?: string;
+    lastUsedAt?: string;
+}
+/** `crabcodeByok.create()` 请求。明文一次性提交, 服务端加密落库后即弃。 */
+interface ByokCreateRequest {
+    provider: ByokProvider;
+    /** API key 明文; ≤4KB, 不得含换行。 */
+    plaintext: string;
+    /** 显示名; ≤100 字符。 */
+    name?: string;
+    /** 仅 provider='custom' 必填 (必须 https://); 其他 provider 不可设。 */
+    baseUrl?: string;
+}
+declare module '@acosmi/sdk-ts' {
+    interface Client {
+        /** CrabCode 远控 BYO 模型密钥管理面 (契约 §18.2)。 */
+        readonly crabcodeByok: CrabCodeByokClient;
+    }
+}
+declare class CrabCodeByokClient {
+    private readonly client;
+    constructor(client: Client);
+    /** 列出调用者自己的密钥 (masked; 新→旧, 服务端上限 100 条)。 */
+    list(signal?: AbortSignal): Promise<ByokCredential[]>;
+    /**
+     * 创建密钥 — 明文一次性提交, 返回 masked 视图。
+     * 单用户上限 20 把; provider='custom' 必须带 https:// baseUrl。
+     */
+    create(req: ByokCreateRequest, signal?: AbortSignal): Promise<ByokCredential>;
+    /** 轮换密钥明文 — credentialRef 不变, fingerprint 更新。已吊销的密钥不可轮换 (400)。 */
+    rotate(credentialRef: string, newPlaintext: string, signal?: AbortSignal): Promise<ByokCredential>;
+    /** 吊销密钥 (软状态 + 服务端抹密文, 不可恢复; 幂等 — 重复吊销返回当前视图)。 */
+    revoke(credentialRef: string, signal?: AbortSignal): Promise<ByokCredential>;
+}
+
 declare const ScopeComplianceEvidenceRead = "compliance:evidence:read";
 declare const ScopeComplianceEvidenceWrite = "compliance:evidence:write";
 declare const ScopeComplianceTimestampIssue = "compliance:timestamp:issue";
@@ -4696,8 +4869,7 @@ interface BridgeThreadRef {
 /**
  * ChatIntegration — 平台安装记录的 SDK 只读视图.
  *
- * 注意: `configJson` 仅含非敏感配置 (rate limit / feature toggles); 严禁含 secret。
- * Phase 7B handler 落地后, SDK admin 子客户端会按此型号 GET。
+ * Phase 7B 起由 `client.chatBridge` 按此型号 GET (响应 camelCase, 契约 §12)。
  */
 interface ChatIntegration {
     id: string;
@@ -4708,6 +4880,10 @@ interface ChatIntegration {
     workspaceIdHash?: string;
     botIdHash?: string;
     status: IntegrationStatus;
+    /**
+     * @deprecated 服务端从不返回此字段 (model ConfigJSON json:"-", 防 secret 误入
+     * 后整体不外发) — 读取恒为 undefined。写入走 createIntegration({ configJson })。
+     */
     configJson?: string;
     installedByUserId?: string;
     lastUsedAt?: string;
@@ -4803,4 +4979,53 @@ declare function isChannelInboundEvent(v: unknown): v is ChannelInboundEvent;
  */
 declare function asCredentialRef(s: string): CredentialRef;
 
-export { ALL_INTEGRATION_STATUS, ALL_PLATFORMS, ALL_REGIONS, type APIResponse, type AdapterKind, type AgentRun, type AgentRunArtifact, type AgentRunArtifactList, type AgentRunArtifactPolicy, type AgentRunCreateRequest, type AgentRunCreateResponse, type AgentRunDownload, type AgentRunErrorPayload, type AgentRunLocalContextPolicy, type AgentRunLocalToolHandler, type AgentRunLocalToolHandlerContext, type AgentRunLocalToolResult, type AgentRunRemoteCreateRequest, type AgentRunRunOptions, type AgentRunRuntime, type AgentRunSettlement, type AgentRunStatus, AgentRunStreamError, type AgentRunStreamEvent, type AgentRunStreamOptions, type AgentRunUsage, type AgentRunWithLocalToolsOptions, AgentRunsClient, AnthropicResponse, type ApiClientRef, type ApproveSealApprovalQuery, type AssignSeatRequest, type Audience, AudienceEnum, type AuthorizeResult, type BalanceDetail, type BalanceDetailEntitlement, type BillingMode, BillingModeEnum, type BillingPreflightResult, type BlockMeta, type BookConsultationRequest, type BridgeThreadRef, type BrowserRefreshMode, type BugReportResult, type BugView, BusinessError, type BuyResponse, type CancelSealApprovalQuery, type CaseLead, type CaseMatter, type CertificationStatus, type ChannelAttachment, type ChannelCard, type ChannelCardAction, type ChannelInboundEvent, type ChannelOutboundEvent, type ChatBridgeSession, type ChatCredentialPublic, type ChatIntegration, ChatRequest, ChatResponse, type ChatThread, Client, type ClientRegistration, type ComplianceAssetType, type ComplianceBenefitType, type ComplianceBillingDisplayStatus, type ComplianceCapability, ComplianceClient, type ComplianceClientErrorCode, type ComplianceDigestSource, type ComplianceEnvelopeStatus, type ComplianceErrorInfo, type ComplianceErrorKey, type ComplianceHashAlgorithm, CompliancePollError, type CompliancePollOptions, type CompliancePrivacyLevel, type ComplianceProviderRequestStatus, type ComplianceProviderStatus, type ComplianceQuoteResponse, type ComplianceReport, type ComplianceScope, type ComplianceSealApprovalStatus, type ComplianceSku, type ComplianceTimestampVerificationStatus, type ComplianceWriteOptions, type Config, type ConsumeRecord, type ConsumeRecordPage, type ContractTemplateField, type ContractTemplateFieldType, type ContractTemplatePageItem, type ContractTemplateResp, type ContractTemplateStatus, type ContractTemplateVersion, type CorporateTransfer, type CreateContractTemplateRequest, type CreateEvidenceAssetRequest, type CreateH5SigningUrlRequest, type CreateReportRequest, type CreateSigningEnvelopeRequest, type CreateWebAuthorizationRequestOptions, type CredentialRef, DEFAULT_API_TIMEOUT_MS, DEFAULT_GATEWAY_BASE_URL, DefaultRetryPolicy, type DeviceRegistration, type EnterpriseKycMyStatusView, type EnterpriseMember, type EnterpriseSummary, type EntitlementBalance, type EntitlementItem, type EnvelopeContractItem, ErrAuthDenied, ErrBillingCallbackCannotCommit, ErrBillingCommitRequiresLocalVerify, ErrBillingS2sForbidden, ErrBrowserOpen, ErrComplianceStepUpRequired, ErrDiscovery, ErrEnvelopeGateClosed, ErrOAuthCORSBlocked, ErrProviderNotConfigured, ErrProviderUnknownNoRetry, ErrRefreshProxyFailed, ErrRegistration, ErrSSLProxy, ErrSealApprovalContractHashMismatch, ErrSealApprovalExpired, ErrSealApprovalLocationMismatch, ErrSealApprovalNonceUsed, ErrSealApprovalNotApproved, ErrSealApprovalSealMismatch, ErrSealApprovalTransactorMismatch, ErrSealUseAlreadyConsumed, ErrStateMismatch, ErrTimeout, ErrTokenExchange, ErrTokenExpired, EventAuthURL, EventComplete, EventError, type EvidenceAsset, type EvidenceAssetPageItem, type EvidencePackage, type EvidencePackagePageItem, type FeatureGateState, type FeatureGateStatus, FileTokenStore, type FilterStatus, FilterStatusAdminBypass, FilterStatusDisabledByFlag, FilterStatusFallbackMissingUser, FilterStatusFallbackNoBuckets, FilterStatusFallbackTkdistError, FilterStatusFallbackTkdistSkew, FilterStatusInternalBypass, FilterStatusOK, FilterStatusUnknown, type GateQuota, type GenerateSkillRequest, type GenerateSkillResult, HTTPError, type IdempotencyKey, IdempotencyKeyHeader, ImageGenerationRequest, ImageGenerationResponse, InMemoryTokenStore, type InitiateCorporateTransferInput, type InitiateCorporateTransferResult, InputModality, type IntegrationStatus, type InviteMemberRequest, type Invoice, type IssueTimestampRequest, type LawyerCredentialMyView, type LawyerSummary, type LegalConsultation, type LegalServiceOrder, type LegalServiceSku, type LegalSkuCode, type ListContractTemplatesRequest, type ListEvidenceAssetsRequest, type ListEvidencePackagesRequest, type ListOperationsRequest, type ListReportsRequest, type ListSealApprovalsRequest, type ListSealUsesRequest, type ListSigningEnvelopesRequest, type ListTimestampsRequest, LocalStorageTokenStore, type LoginErrCode, type LoginEvent, type LoginEventType, type LoginOptions, ManagedModel, type Membership, type ModelBucket, type ModelByQuotaResponse, ModelCapabilities, type ModelCoefficient, ModelNotFoundError, NetworkError, type Notification, type NotificationList, type NotificationPreference, type NotificationUnreadCount, type OAuthMetadataProfile, OAuthTokenEndpointError, type OpenAIChatChoice, type OpenAIChatMessage, type OpenAIChatResponse, type OpenAIFunctionCall, type OpenAIStreamChoice, type OpenAIStreamChunk, type OpenAIStreamDelta, type OpenAIStreamToolCall, type OpenAIToolCall, type OpenAIUsage, type OperationDetail, type OperationId, type OperationPageItem, type OperationSource, type OperationStatus, type OptimizeSkillRequest, type OptimizeSkillResult, type Order, type OrderListItem, type OrderStatus, OrderTerminalError, type OrgConsumeReport, type OrgSeat, type OrgSubscription, type PageRequest, type PageResult, type PayPayload, type PaymentMethod, type PermissionPolicy, type Platform, type PricingConfig, type PrincipalRef, type Product, type ProductFamily, ProductFamilyEnum, ProviderAdapter, type ProviderRequestStatus, type ProviderRequestStatusView, type PublicEvidenceVerifyResult, type PublicModelSummary, QuotaSummary, RETRY_ADVICE_REASONS, RateLimitError, type RefundPolicy, type RefundRecord, type Region, type RegionScope, RegionScopeEnum, type RegisterWebOAuthClientOptions, type RejectSealApprovalQuery, type RemoteControlDone, type RemoteControlError, type RemoteControlEvent, type RemoteControlEventType, type RemoteControlPermissionRequest, type RemoteControlPermissionResult, type RemoteControlReasoningDelta, type RemoteControlSettle, type RemoteControlStatus, type RemoteControlTextDelta, type RemoteControlToolCall, type RemoteControlToolResult, type RemoteControlUsage, type RemoteSessionPlacement, type RemoteSessionRef, type ReportDownload, type ReportPageItem, type ReqTimeoutCtl, type RequestInvoiceInput, type RequestRefundInput, type RetryAdvice, type RetryAdviceReason, type RetryPolicy, type RetryRequestInfo, type RolloverPolicy, type RunnerKind, ScopeAI, ScopeAccount, ScopeChatBridge, ScopeChatBridgeRead, ScopeChatBridgeRotate, ScopeChatBridgeWrite, ScopeComplianceContractSigningRead, ScopeComplianceContractSigningWrite, ScopeComplianceContractTemplateRead, ScopeComplianceContractTemplateWrite, ScopeComplianceEvidenceRead, ScopeComplianceEvidenceWrite, ScopeComplianceReportsPublish, ScopeComplianceReportsRead, ScopeComplianceReportsWrite, ScopeComplianceSealApprovalApprove, ScopeComplianceSealApprovalRequest, ScopeComplianceSealManage, ScopeComplianceSealUseExecute, ScopeComplianceTimestampIssue, ScopeComplianceTimestampVerify, ScopeEntitlements, ScopeModels, ScopeModelsChat, ScopeProfile, ScopeRemoteControl, ScopeRemoteControlAgentRun, ScopeRemoteControlPermissionResponse, ScopeRemoteControlSessionControl, ScopeSkillStore, ScopeSkills, ScopeTokenPackages, ScopeTools, ScopeToolsExecute, ScopeWallet, ScopeWalletReadonly, type SealApproval, type SealApprovalPageItem, type SealUsePageItem, type ServerMetadata, type SignEnvelopeRequest, type SigningEnvelope, type SigningEnvelopePageItem, type SkillBrowseListResponse, type SkillBrowseResponse, type SkillStoreItem, type SkillStoreListItem, type SkillStoreQuery, type SkillSummary, type SortDirection, SourcesEvent, type StepUpStatus, StreamError, StreamEvent, StreamSettlement, type SubmitCaseLeadRequest, type SubmitSealApprovalRequest, type SubscriptionAudience, type SubscriptionPlan, type SubscriptionTier, type TenantRef, type TimestampPageItem, type TimestampToken, type TimestampVerifyResult, type TokenPackage, type TokenResponse, type TokenSet, type TokenStore, type ToolListResponse, type ToolProvider, type ToolView, type Transaction, type TsaProvider, type TsaStats, type UpdateContractTemplateRequest, type UploadContractTemplatePdfRequest, type UserSubscription, type VerifyStatus, type VerifyTimestampRequest, VideoGenerationRequest, VideoTaskResponse, type VoidEnvelopeRequest, type WSConfig, type WSEvent, type WalletStats, type WebAuthorizationCallbackParams, type WebAuthorizationPending, type WebAuthorizationRequest, type WorkspacePolicy, type YudaoPageResult, allScopes, apiResponseBusinessError, apiResponseGetMessage, asCredentialRef, authorize, buildBetas, chatBridgeScopes, classifyComplianceError, commerceScopes, completeWebAuthorizationRequest, complianceErrorToRetryAdvice, complianceScopes, computeBackoff, createWebAuthorizationRequest, defaultRetryable, defaultSafeToRetry, discover, discoverWebOAuthMetadata, discoverWithProfile, effectivePolicy, exchangeCode, extractAnthropicBlockMeta, fileLockDefaults, findDesktopVisualUnderstandingModel, findFirstModelByInputModality, generateState, isBillingConfirmable, isChannelInboundEvent, isComplianceBusinessError, isComplianceTerminalError, isIntegrationStatus, isInvalidGrantError, isPlatform, isRegion, isSSECommentLine, isSSLError, isTerminalRemoteEvent, isValidTokenSet, maxEndUserIdLength, modelScopes, modelSupportsImageInput, modelSupportsInputModality, newFileTokenStore, newTokenSet, normalizeGatewayBaseURL, normalizeOverrideBaseURL, parseNotificationEvent, parseRemoteControlEvent, refreshToken, register, registerWebOAuthClient, remoteControlScopes, retryReasonForComplianceKey, retryReasonForOAuthError, revokeToken, skillScopes, tokenSetIsExpired, uniqueMerge, validateEndUserId };
+/** `chatBridge.createIntegration()` 请求 (wire snake_case 由 SDK 转换)。 */
+interface CreateIntegrationRequest {
+    /** 绑定的 Acosmi app。 */
+    appId: string;
+    platform: Platform;
+    region: Region;
+    /** 平台 workspace/企业 原始 ID; 服务端只存 SHA256 hash。 */
+    workspaceId?: string;
+    /** 平台 bot 原始 ID; 服务端只存 SHA256 hash。 */
+    botId?: string;
+    /** 仅非敏感配置 (rate limit / feature toggles); 严禁含 secret。 */
+    configJson?: string;
+}
+/** `chatBridge.storeCredential()` 请求 — 明文一次性提交。 */
+interface StoreCredentialRequest {
+    /** 凭证种类 (平台相关, 例: app_secret / signing_secret / bot_token)。 */
+    secretKind: string;
+    /** 凭证明文; 加密落库后即弃, 响应只回 masked 视图。 */
+    plaintext: string;
+    region?: Region;
+    platform?: Platform;
+}
+declare module '@acosmi/sdk-ts' {
+    interface Client {
+        /** 第三方聊天 bridge 控制面 (Phase 7B; 契约 §6/§12/ADR-8)。 */
+        readonly chatBridge: ChatBridgeClient;
+    }
+}
+declare class ChatBridgeClient {
+    private readonly client;
+    constructor(client: Client);
+    /** 创建平台集成 (chat_bridge:write)。云端控制台与下游 (CrabCode) 调的是同一端点/同一份数据。 */
+    createIntegration(req: CreateIntegrationRequest, signal?: AbortSignal): Promise<ChatIntegration>;
+    /** 列出本租户集成 (chat_bridge:read; masked 视图)。可按 appId 过滤。 */
+    listIntegrations(appId?: string, signal?: AbortSignal): Promise<ChatIntegration[]>;
+    /** 取单个集成 (chat_bridge:read)。不存在/跨租户一律 404。 */
+    getIntegration(id: string, signal?: AbortSignal): Promise<ChatIntegration>;
+    /** 更新集成状态 (chat_bridge:write): pending | active | suspended | revoked。 */
+    updateIntegrationStatus(id: string, status: IntegrationStatus, signal?: AbortSignal): Promise<void>;
+    /** 存凭证 (chat_bridge:write) — 明文一次性提交, 返回 masked 记录 (ref+fingerprint)。 */
+    storeCredential(integrationId: string, req: StoreCredentialRequest, signal?: AbortSignal): Promise<ChatCredentialPublic>;
+    /** 列出集成的凭证 (chat_bridge:read; masked, 永不含明文/密文)。 */
+    listCredentials(integrationId: string, signal?: AbortSignal): Promise<ChatCredentialPublic[]>;
+    /** 轮换凭证 (chat_bridge:rotate, 高风险) — ref 不变, fingerprint 更新。 */
+    rotateCredential(integrationId: string, secretKind: string, newPlaintext: string, signal?: AbortSignal): Promise<ChatCredentialPublic>;
+    /** 吊销凭证 (chat_bridge:rotate) — 软吊销 + 服务端抹密文。 */
+    revokeCredential(credentialRef: string, signal?: AbortSignal): Promise<void>;
+}
+
+export { AGENT_RUN_META_TITLE, AGENT_RUN_META_WORKSPACE, ALL_INTEGRATION_STATUS, ALL_PLATFORMS, ALL_REGIONS, type APIResponse, type AdapterKind, type AgentRun, type AgentRunArtifact, type AgentRunArtifactList, type AgentRunArtifactPolicy, type AgentRunCreateRequest, type AgentRunCreateResponse, type AgentRunDownload, type AgentRunErrorPayload, type AgentRunListOptions, type AgentRunListResult, type AgentRunLocalContextPolicy, type AgentRunLocalToolHandler, type AgentRunLocalToolHandlerContext, type AgentRunLocalToolResult, type AgentRunRemoteCreateRequest, type AgentRunRunOptions, type AgentRunRuntime, type AgentRunSettlement, type AgentRunStatus, AgentRunStreamError, type AgentRunStreamEvent, type AgentRunStreamOptions, type AgentRunUsage, type AgentRunWithLocalToolsOptions, AgentRunsClient, AnthropicResponse, type ApiClientRef, type ApproveSealApprovalQuery, type AssignSeatRequest, type Audience, AudienceEnum, type AuthorizeResult, type BalanceDetail, type BalanceDetailEntitlement, type BillingMode, BillingModeEnum, type BillingPreflightResult, type BlockMeta, type BookConsultationRequest, type BridgeThreadRef, type BrowserRefreshMode, type BugReportResult, type BugView, BusinessError, type BuyResponse, type ByokCreateRequest, type ByokCredential, type ByokCredentialStatus, type ByokProvider, type CancelSealApprovalQuery, type CaseLead, type CaseMatter, type CertificationStatus, type ChannelAttachment, type ChannelCard, type ChannelCardAction, type ChannelInboundEvent, type ChannelOutboundEvent, ChatBridgeClient, type ChatBridgeSession, type ChatCredentialPublic, type ChatIntegration, ChatRequest, ChatResponse, type ChatThread, Client, type ClientRegistration, type ComplianceAssetType, type ComplianceBenefitType, type ComplianceBillingDisplayStatus, type ComplianceCapability, ComplianceClient, type ComplianceClientErrorCode, type ComplianceDigestSource, type ComplianceEnvelopeStatus, type ComplianceErrorInfo, type ComplianceErrorKey, type ComplianceHashAlgorithm, CompliancePollError, type CompliancePollOptions, type CompliancePrivacyLevel, type ComplianceProviderRequestStatus, type ComplianceProviderStatus, type ComplianceQuoteResponse, type ComplianceReport, type ComplianceScope, type ComplianceSealApprovalStatus, type ComplianceSku, type ComplianceTimestampVerificationStatus, type ComplianceWriteOptions, type Config, type ConsumeRecord, type ConsumeRecordPage, type ContractTemplateField, type ContractTemplateFieldType, type ContractTemplatePageItem, type ContractTemplateResp, type ContractTemplateStatus, type ContractTemplateVersion, type CorporateTransfer, CrabCodeByokClient, type CreateContractTemplateRequest, type CreateEvidenceAssetRequest, type CreateH5SigningUrlRequest, type CreateIntegrationRequest, type CreateReportRequest, type CreateSigningEnvelopeRequest, type CreateWebAuthorizationRequestOptions, type CredentialRef, DEFAULT_API_TIMEOUT_MS, DEFAULT_GATEWAY_BASE_URL, DefaultRetryPolicy, type DeviceRegistration, type EnterpriseKycMyStatusView, type EnterpriseMember, type EnterpriseSummary, type EntitlementBalance, type EntitlementItem, type EnvelopeContractItem, ErrAuthDenied, ErrBillingCallbackCannotCommit, ErrBillingCommitRequiresLocalVerify, ErrBillingS2sForbidden, ErrBrowserOpen, ErrComplianceStepUpRequired, ErrDiscovery, ErrEnvelopeGateClosed, ErrOAuthCORSBlocked, ErrProviderNotConfigured, ErrProviderUnknownNoRetry, ErrRefreshProxyFailed, ErrRegistration, ErrSSLProxy, ErrSealApprovalContractHashMismatch, ErrSealApprovalExpired, ErrSealApprovalLocationMismatch, ErrSealApprovalNonceUsed, ErrSealApprovalNotApproved, ErrSealApprovalSealMismatch, ErrSealApprovalTransactorMismatch, ErrSealUseAlreadyConsumed, ErrStateMismatch, ErrTimeout, ErrTokenExchange, ErrTokenExpired, EventAuthURL, EventComplete, EventError, type EvidenceAsset, type EvidenceAssetPageItem, type EvidencePackage, type EvidencePackagePageItem, type FeatureGateState, type FeatureGateStatus, FileTokenStore, type FilterStatus, FilterStatusAdminBypass, FilterStatusDisabledByFlag, FilterStatusFallbackMissingUser, FilterStatusFallbackNoBuckets, FilterStatusFallbackTkdistError, FilterStatusFallbackTkdistSkew, FilterStatusInternalBypass, FilterStatusOK, FilterStatusUnknown, type GateQuota, type GenerateSkillRequest, type GenerateSkillResult, HTTPError, type IdempotencyKey, IdempotencyKeyHeader, ImageGenerationRequest, ImageGenerationResponse, InMemoryTokenStore, type InitiateCorporateTransferInput, type InitiateCorporateTransferResult, InputModality, type IntegrationStatus, type InviteMemberRequest, type Invoice, type IssueTimestampRequest, type LawyerCredentialMyView, type LawyerSummary, type LegalConsultation, type LegalServiceOrder, type LegalServiceSku, type LegalSkuCode, type ListContractTemplatesRequest, type ListEvidenceAssetsRequest, type ListEvidencePackagesRequest, type ListOperationsRequest, type ListReportsRequest, type ListSealApprovalsRequest, type ListSealUsesRequest, type ListSigningEnvelopesRequest, type ListTimestampsRequest, LocalStorageTokenStore, type LoginErrCode, type LoginEvent, type LoginEventType, type LoginOptions, ManagedModel, type Membership, type ModelBucket, type ModelByQuotaResponse, ModelCapabilities, type ModelCoefficient, ModelNotFoundError, NetworkError, type Notification, type NotificationList, type NotificationPreference, type NotificationUnreadCount, type OAuthMetadataProfile, OAuthTokenEndpointError, type OpenAIChatChoice, type OpenAIChatMessage, type OpenAIChatResponse, type OpenAIFunctionCall, type OpenAIStreamChoice, type OpenAIStreamChunk, type OpenAIStreamDelta, type OpenAIStreamToolCall, type OpenAIToolCall, type OpenAIUsage, type OperationDetail, type OperationId, type OperationPageItem, type OperationSource, type OperationStatus, type OptimizeSkillRequest, type OptimizeSkillResult, type Order, type OrderListItem, type OrderStatus, OrderTerminalError, type OrgConsumeReport, type OrgSeat, type OrgSubscription, type PageRequest, type PageResult, type PayPayload, type PaymentMethod, type PermissionPolicy, type Platform, type PricingConfig, type PrincipalRef, type Product, type ProductFamily, ProductFamilyEnum, ProviderAdapter, type ProviderRequestStatus, type ProviderRequestStatusView, type PublicEvidenceVerifyResult, type PublicModelSummary, QuotaSummary, RETRY_ADVICE_REASONS, RateLimitError, type RefundPolicy, type RefundRecord, type Region, type RegionScope, RegionScopeEnum, type RegisterWebOAuthClientOptions, type RejectSealApprovalQuery, type RemoteControlDone, type RemoteControlError, type RemoteControlEvent, type RemoteControlEventType, type RemoteControlPermissionRequest, type RemoteControlPermissionResult, type RemoteControlReasoningDelta, type RemoteControlSettle, type RemoteControlStatus, type RemoteControlTextDelta, type RemoteControlToolCall, type RemoteControlToolResult, type RemoteControlUsage, type RemotePermissionDecision, type RemotePermissionResultRequest, type RemoteSessionPlacement, type RemoteSessionRef, type RemoteSessionTokenGrant, type RemoteUserMessageAck, type RemoteUserMessageRequest, type ReportDownload, type ReportPageItem, type ReqTimeoutCtl, type RequestInvoiceInput, type RequestRefundInput, type RetryAdvice, type RetryAdviceReason, type RetryPolicy, type RetryRequestInfo, type RolloverPolicy, type RunnerKind, ScopeAI, ScopeAccount, ScopeChatBridge, ScopeChatBridgeRead, ScopeChatBridgeRotate, ScopeChatBridgeWrite, ScopeComplianceContractSigningRead, ScopeComplianceContractSigningWrite, ScopeComplianceContractTemplateRead, ScopeComplianceContractTemplateWrite, ScopeComplianceEvidenceRead, ScopeComplianceEvidenceWrite, ScopeComplianceReportsPublish, ScopeComplianceReportsRead, ScopeComplianceReportsWrite, ScopeComplianceSealApprovalApprove, ScopeComplianceSealApprovalRequest, ScopeComplianceSealManage, ScopeComplianceSealUseExecute, ScopeComplianceTimestampIssue, ScopeComplianceTimestampVerify, ScopeEntitlements, ScopeModels, ScopeModelsChat, ScopeProfile, ScopeRemoteControl, ScopeRemoteControlAgentRun, ScopeRemoteControlPermissionResponse, ScopeRemoteControlSessionControl, ScopeSkillStore, ScopeSkills, ScopeTokenPackages, ScopeTools, ScopeToolsExecute, ScopeWallet, ScopeWalletReadonly, type SealApproval, type SealApprovalPageItem, type SealUsePageItem, type ServerMetadata, type SignEnvelopeRequest, type SigningEnvelope, type SigningEnvelopePageItem, type SkillBrowseListResponse, type SkillBrowseResponse, type SkillStoreItem, type SkillStoreListItem, type SkillStoreQuery, type SkillSummary, type SortDirection, SourcesEvent, type StepUpStatus, type StoreCredentialRequest, StreamError, StreamEvent, StreamSettlement, type SubmitCaseLeadRequest, type SubmitSealApprovalRequest, type SubscriptionAudience, type SubscriptionPlan, type SubscriptionTier, type TenantRef, type TimestampPageItem, type TimestampToken, type TimestampVerifyResult, type TokenPackage, type TokenResponse, type TokenSet, type TokenStore, type ToolListResponse, type ToolProvider, type ToolView, type Transaction, type TsaProvider, type TsaStats, type UpdateContractTemplateRequest, type UploadContractTemplatePdfRequest, type UserSubscription, type VerifyStatus, type VerifyTimestampRequest, VideoGenerationRequest, VideoTaskResponse, type VoidEnvelopeRequest, type WSConfig, type WSEvent, type WalletStats, type WebAuthorizationCallbackParams, type WebAuthorizationPending, type WebAuthorizationRequest, type WorkspacePolicy, type YudaoPageResult, allScopes, apiResponseBusinessError, apiResponseGetMessage, asCredentialRef, authorize, buildBetas, chatBridgeScopes, classifyComplianceError, commerceScopes, completeWebAuthorizationRequest, complianceErrorToRetryAdvice, complianceScopes, computeBackoff, createWebAuthorizationRequest, defaultRetryable, defaultSafeToRetry, discover, discoverWebOAuthMetadata, discoverWithProfile, effectivePolicy, exchangeCode, extractAnthropicBlockMeta, fileLockDefaults, findDesktopVisualUnderstandingModel, findFirstModelByInputModality, generateState, isBillingConfirmable, isChannelInboundEvent, isComplianceBusinessError, isComplianceTerminalError, isIntegrationStatus, isInvalidGrantError, isPlatform, isRegion, isSSECommentLine, isSSLError, isTerminalRemoteEvent, isValidTokenSet, maxEndUserIdLength, modelScopes, modelSupportsImageInput, modelSupportsInputModality, newFileTokenStore, newTokenSet, normalizeGatewayBaseURL, normalizeOverrideBaseURL, parseNotificationEvent, parseRemoteControlEvent, refreshToken, register, registerWebOAuthClient, remoteControlScopes, retryReasonForComplianceKey, retryReasonForOAuthError, revokeToken, skillScopes, tokenSetIsExpired, uniqueMerge, validateEndUserId };