@agentunion/fastaun 0.5.17 → 0.5.19

package/dist/client.d.ts

@@ -13,10 +13,12 @@
 import { AIDStore } from './aid-store.js';
 import { type Subscription, type EventHandler } from './events.js';
 import { CollabClient } from './collab/client.js';
-import { GroupFacade, MailFacade, MessageFacade, StreamFacade } from './facades.js';
+import { CredentialFacade, OrgFacade, GroupFacade, MailFacade, MessageFacade, StreamFacade } from './facades.js';
 import { StorageVFS } from './storage/vfs.js';
 import { type JsonObject, type JsonValue, type RpcParams, type RpcResult, ConnectionState } from './types.js';
 import { AID } from './aid.js';
+import { type OwnershipConsensusResult } from './ownership-v21.js';
+import { type OwnershipTaskResult } from './ownership-workflow.js';
 /**
  * 递归排序键的 JSON 序列化（Canonical JSON for AUN）
  * 等价于 Python json.dumps(sort_keys=True, separators=(",",":"), ensure_ascii=False)
@@ -60,6 +62,10 @@ export interface CreateGroupOptions {
 export interface CompleteGroupTransferOptions {
     aidStore?: AIDStore;
 }
+export interface OrgIdentityOptions {
+    aidStore?: AIDStore;
+    serviceAid?: string;
+}
 export declare class AUNClient {
     /** 原始配置 */
     readonly config: RpcParams;
@@ -73,6 +79,21 @@ export declare class AUNClient {
     private _state;
     /** 当前 AID 值对象（新 API） */
     private _currentAid;
+    private _serviceEventIdentityVersion;
+    /** ownership 关系只在 SDK 内存中编排；服务端不保存状态机。 */
+    private _ownershipRecords;
+    private _ownershipType;
+    private _ownershipStorage;
+    private _ownershipFiles;
+    private _ownershipWorkflow;
+    private _getOwnershipStorage;
+    private _getOwnershipFiles;
+    private _getOwnershipWorkflow;
+    private _persistOwnershipRecords;
+    private _restoreOwnershipRecords;
+    private _resumeOwnershipAfterConnect;
+    private _resumeRegistrationIntent;
+    private _resumeOwnership;
     /** 实例级 protected_headers */
     private _instanceProtectedHeaders;
     /** 重连退避时间戳（ms） */
@@ -95,6 +116,7 @@ export declare class AUNClient {
     private _transport;
     /** 认证流程 */
     private _auth;
+    resolveCredentialService?: (cid: string) => string | null | undefined | Promise<string | null | undefined>;
     /** 密钥存储 */
     private _tokenStore;
     /** 会话参数（重连用） */
@@ -140,10 +162,17 @@ export declare class AUNClient {
     private _pushProcessQueues;
     /** P2P pull 进行中到达的纯通知 push 上界；pull gate 释放后需要补拉一次。 */
     private _pendingP2pPullUpper;
+    /** P2P pending pull 的延迟重试定时器及次数，覆盖服务端异步落库窗口。 */
+    private _pendingP2pPullTimers;
+    private _pendingP2pPullRetries;
     /** 缺 sender IK 时暂存原始 V2 消息，后台补齐 IK 后重试解密。 */
     private _v2SenderIKPending;
     /** sender IK 后台补齐任务去重。 */
     private _v2SenderIKFetching;
+    private _readStateCache;
+    private _readStateQueries;
+    private _readStateIdentity;
+    private _readStateGeneration;
     private _heartbeatTimer;
     private _tokenRefreshTimer;
     private _tokenRefreshFailures;
@@ -190,12 +219,16 @@ export declare class AUNClient {
     private _mail?;
     private _group?;
     private _stream?;
+    private _credential?;
+    private _org?;
     constructor(aid?: AID);
     /** 当前 AID */
     get aid(): string | null;
     /** 返回后台刷新任务维护的最新 access token。 */
     getAccessToken(): string | null;
     /** AUN Storage VFS 入口 */
+    get credential(): CredentialFacade;
+    get org(): OrgFacade;
     get storage(): StorageVFS;
     /** AUN Collab 入口 */
     get collab(): CollabClient;
@@ -207,6 +240,39 @@ export declare class AUNClient {
     get stream(): StreamFacade;
     /** 当前 AID 值对象 */
     get currentAid(): AID | null;
+    private _ownershipKey;
+    getType(): string;
+    get_type(): string;
+    getOwner(): string | null;
+    get_owner(): string | null;
+    getOwnershipStatus(): Record<string, unknown>;
+    get_ownership_status(): Record<string, unknown>;
+    bindOwneraid(ownerAid: string): Promise<OwnershipTaskResult>;
+    bindSubaid(subAid: string): Promise<OwnershipTaskResult>;
+    releaseSubaid(subAid: string): Promise<OwnershipTaskResult>;
+    transferSubaid(subAid: string, newOwnerAid: string): Promise<OwnershipTaskResult>;
+    checkOwnershipConsensus(subAid?: string): Promise<OwnershipConsensusResult>;
+    bindAid(subjectAid: string, options?: {
+        subjectType?: string;
+        subject_type?: string;
+        extensions?: Record<string, unknown>;
+        requestId?: string;
+        request_id?: string;
+    }): Promise<RpcResult>;
+    bind_aid(subjectAid: string, options?: Parameters<AUNClient['bindAid']>[1]): Promise<RpcResult>;
+    bindOwner(ownerAid: string, options?: {
+        subjectType?: string;
+        subject_type?: string;
+        extensions?: Record<string, unknown>;
+        requestId?: string;
+        request_id?: string;
+    }): Promise<RpcResult>;
+    bind_owner(ownerAid: string, options?: Parameters<AUNClient['bindOwner']>[1]): Promise<RpcResult>;
+    releaseOwnership(subjectAid: string): Promise<RpcResult>;
+    release_ownership(subjectAid: string): Promise<RpcResult>;
+    acceptOwnershipRequest(operationId: string): Promise<OwnershipTaskResult>;
+    rejectOwnershipRequest(operationId: string, reason?: string): Promise<OwnershipTaskResult>;
+    private _handleOwnershipMessage;
     get hasIdentity(): boolean;
     get canSign(): boolean;
     get canConnect(): boolean;
@@ -272,12 +338,23 @@ export declare class AUNClient {
     call(method: string, params?: RpcParams): Promise<RpcResult>;
     private _maybeHandleHalfOpenRpcFailure;
     _recoverIdentityAdmission(err: unknown, _method?: string, params?: RpcParams): Promise<boolean>;
+    private _ensureInitialAgentMd;
     private _checkIdentityAdmissionAfterConnect;
     private _runGroupIdentityOperation;
+    createOrg(params?: RpcParams, options?: OrgIdentityOptions): Promise<RpcResult>;
+    private _resumeOrgIdentityAfterConnect;
+    completeOrgTransfer(params?: RpcParams, options?: OrgIdentityOptions): Promise<RpcResult>;
+    dissolveOrg(params?: RpcParams, options?: OrgIdentityOptions): Promise<RpcResult>;
+    private _uploadOrgAgentMd;
     createGroup(params?: RpcParams, options?: CreateGroupOptions): Promise<RpcResult>;
     private _inviteInitialGroupMembers;
     private _groupAgentMdContent;
+    private _resumeGroupAgentMdUpload;
     private _uploadGroupAgentMd;
+    private _localEntityCertificate;
+    private _freshEntityCertificate;
+    private _freshEntitySigner;
+    private _resolveEntityAgentMdOwner;
     bindGroupAid(params?: RpcParams, options?: BindGroupAidOptions): Promise<RpcResult>;
     startGroupTransfer(params?: RpcParams, options?: CompleteGroupTransferOptions): Promise<RpcResult>;
     renewGroupAid(params?: RpcParams, options?: BindGroupAidOptions): Promise<RpcResult>;
@@ -293,6 +370,13 @@ export declare class AUNClient {
     notify(method: string, params?: RpcParams, options?: NotifyOptions): Promise<void>;
     /** 订阅事件 */
     on(event: string, handler: EventHandler): Subscription;
+    private _readStateIsNewer;
+    private _ensureReadStateIdentity;
+    private _registerReadStateQuery;
+    private _readStateItems;
+    private _observeReadStateResult;
+    private _onRawReadChanged;
+    private _reconcileReadStates;
     private _callRawV2Rpc;
     /** P2-13: 取消订阅事件（对齐 Python/JS off 方法） */
     off(event: string, handler: EventHandler): void;
@@ -357,6 +441,7 @@ export declare class AUNClient {
      */
     private _verifyEventSignatureAsync;
     private _validateAndCachePeerCert;
+    private _fetchServiceEventCertificate;
     /** 获取对方证书（带缓存 + 完整 PKI 验证），跨域时自动路由到 peer 所在域。 */
     private _fetchPeerCert;
     private _bootstrapCaChain;
@@ -470,6 +555,7 @@ export declare class AUNClient {
     private _decryptV2PushMessage;
     /** 按当前 AID 发现 Gateway；用于 authenticate()/connect() 的新入口。 */
     private _resolveGatewayForAid;
+    private _resolveOwnershipCertificateGateway;
     /** 发现并缓存全部 Gateway 候选，供首连和自动重连故障转移使用。 */
     private _resolveGatewayCandidatesForAid;
     /** 从参数中解析 Gateway URL */