@aicloud360/dsh-cloud-disk-api-provider 0.1.1-alpha.1

package/README.md

@@ -0,0 +1,36 @@
+# @aicloud360/dsh-cloud-disk-api-provider
+
+English | [中文](README.zh.md)
+
+Host-side direct 360 CloudDisk OpenAPI provider. It exchanges a Host-held user credential for an access token, signs directory and search requests with a separate Host-held application secret, and returns only normalized CloudDisk values.
+
+## Configuration
+
+`DirectCloudDiskProviderOptions` requires these Host-only values:
+
+| Field | Meaning |
+|---|---|
+| `credentialRef` | User API-key reference. |
+| `signingSecretRef` | Application signing-secret reference. |
+| `endpoint` | Audited OpenAPI endpoint. |
+| `clientEnv`, `clientSource`, `subChannel` | Deployment identity sent during authentication. |
+| `credentials`, `http` | Host credential and HTTP providers. |
+| `timeoutMs`, `maxRetries` | Per-attempt timeout and retry limit. |
+
+The user key, access token, qid, signing secret, request headers, and raw API responses must never reach a browser, Session, model, URL, log, or diagnostic.
+
+## Read operations
+
+`getUser()` exchanges the user credential and reads the current user. `list()` maps `File.getList` pages; listed directory ids are resolved to their path only within the current credential generation. `search()` maps form-encoded `File.searchList` pages. Both cursors are opaque source-page numbers.
+
+The provider rejects a missing user credential or signing secret before a signed request. A credential change clears the in-memory directory-path map. Caller cancellation is not retried; retryable transport failures and retryable HTTP statuses are bounded by `maxRetries`.
+
+## Deployment prerequisite
+
+The signing secret needs an approved, rotatable Host-only source. Do not copy signing material from an MCP reference project or commit it to source, fixtures, Bundle YAML, or client configuration. The package includes a production fetch transport, but remains a tested Provider implementation until that secret source and Provider registration are composed into the Bundle.
+
+## Known Limitations and Deferred Work
+
+- The Provider implements only user lookup, directory listing, and search. It has no upload, download, mutation, sharing, or transfer API.
+- One configured Provider serves one Host process. Multi-account switching and remote change observation are not implemented.
+- Signing material remains a user-managed Host credential in this release; a managed distribution or rotation service is not part of this package.

package/README.zh.md

@@ -0,0 +1,36 @@
+# @aicloud360/dsh-cloud-disk-api-provider
+
+[English](README.md) | 中文
+
+Host 侧直连 360 云盘 OpenAPI Provider。它用 Host 保存的用户凭据交换 access token，用另一份 Host 保存的应用签名密钥签名目录和搜索请求，只返回标准化的 CloudDisk 值。
+
+## 配置
+
+`DirectCloudDiskProviderOptions` 需要以下 Host-only 值：
+
+| 字段 | 含义 |
+|---|---|
+| `credentialRef` | 用户 API key 引用。 |
+| `signingSecretRef` | 应用签名密钥引用。 |
+| `endpoint` | 已审计的 OpenAPI endpoint。 |
+| `clientEnv`、`clientSource`、`subChannel` | 鉴权时发送的部署身份。 |
+| `credentials`、`http` | Host 凭据和 HTTP Provider。 |
+| `timeoutMs`、`maxRetries` | 单次超时和重试上限。 |
+
+用户 key、access token、qid、签名密钥、请求头和原始 API 响应不得进入浏览器、Session、模型、URL、日志或诊断。
+
+## 只读操作
+
+`getUser()` 交换用户凭据并读取当前用户。`list()` 映射 `File.getList` 分页；已列出的目录 id 仅在当前凭据代次内解析为路径。`search()` 映射表单编码的 `File.searchList` 分页。两种 cursor 都是不透明的源页码。
+
+缺少用户凭据或签名密钥时，Provider 会在发出签名请求前拒绝。凭据变化会清除内存目录路径映射。调用方取消不会重试；可重试的传输失败和 HTTP 状态由 `maxRetries` 限制。
+
+## 部署前提
+
+签名密钥需要经过批准、可轮换的 Host-only 来源。不得从 MCP 参考项目复制签名材料，也不得将其提交到源码、fixture、Bundle YAML 或客户端配置。本包已包含生产 fetch transport；但在该来源与 Provider 注册被组合到 Bundle 前，它只是经过测试的 Provider 实现，不是已部署集成。
+
+## 已知限制与暂缓事项
+
+- Provider 只实现用户查询、目录列表和搜索；不提供上传、下载、变更、分享或传输 API。
+- 一个已配置的 Provider 服务于一个 Host 进程，尚未实现多账户切换和远端变更观察。
+- 本发布中的签名材料仍是用户自管的 Host 凭据；本包不提供托管分发或轮换服务。

package/lib/index.js

@@ -0,0 +1,326 @@
+import { createHash } from "node:crypto";
+import z from "@deepseek-ai/schemastery";
+import { credentialRef } from "@deepseek-ai/dsh-credentials";
+import CloudDiskRuntime, { CloudDiskError } from "@aicloud360/dsh-cloud-disk";
+//#region lib/types/index.js
+/** Direct Host-side adapter for the audited 360 CloudDisk OpenAPI. */
+/** Cordis loader name for the direct CloudDisk Provider plugin. */
+const name = "cloud-disk-api-provider";
+/** Host services required to register and operate the direct Provider. */
+const inject = ["cloudDisk", "credentials"];
+/** Runtime schema for the complete, explicit Provider configuration. */
+const Config = z.object({
+	endpoint: z.string().required(),
+	apiKeyRef: z.string().required(),
+	signingSecretRef: z.string().required(),
+	clientEnv: z.string().required(),
+	clientSource: z.string().required(),
+	subChannel: z.string().required(),
+	timeoutMs: z.number().required(),
+	maxRetries: z.number().required()
+});
+/**
+* Create the production fetch transport used by the Host-side Provider.
+* @param fetchImpl - Host fetch implementation; injectable only for tests.
+* @returns A transport that parses JSON without logging sensitive request data.
+*/
+function createFetchCloudDiskHttpClient(fetchImpl = fetch) {
+	return { async request(input) {
+		const response = await fetchImpl(input.url, {
+			method: input.method,
+			headers: input.headers,
+			...input.body === void 0 ? {} : { body: input.body },
+			...input.signal === void 0 ? {} : { signal: input.signal }
+		});
+		let json;
+		try {
+			json = await response.json();
+		} catch {
+			json = void 0;
+		}
+		return {
+			status: response.status,
+			json
+		};
+	} };
+}
+/** Provider that keeps API key, token, and signing material on the Host. */
+var DirectCloudDiskProvider = class {
+	options;
+	id = "360-http";
+	parentPaths = /* @__PURE__ */ new Map();
+	credentialFingerprint;
+	constructor(options) {
+		this.options = options;
+		if (!Number.isInteger(options.timeoutMs) || options.timeoutMs <= 0) throw new TypeError("timeoutMs must be a positive integer");
+		if (!Number.isInteger(options.maxRetries) || options.maxRetries < 0) throw new TypeError("maxRetries must be a non-negative integer");
+	}
+	/** Report that the Provider is configured; each operation verifies its credentials. */
+	available() {
+		return true;
+	}
+	/**
+	* Read the authenticated user without exposing credential or token fields.
+	* @param signal - Cancels the request.
+	* @returns Normalized user information.
+	*/
+	async getUser(signal) {
+		const auth = await this.authenticate(signal);
+		const result = await this.call(this.getInput({
+			method: "User.getUserDetail",
+			access_token: auth.accessToken,
+			qid: auth.qid,
+			sign: "",
+			sub_channel: this.options.subChannel
+		}, auth.accessToken), signal);
+		const data = this.data(result, "user");
+		if (!isRecord(data) || typeof data.qid !== "string") throw invalidResponse("user");
+		const displayName = [
+			data.nickname,
+			data.nickName,
+			data.nick,
+			data.userName,
+			data.name
+		].find((value) => typeof value === "string" && value.trim().length > 0);
+		return {
+			id: data.qid,
+			...displayName === void 0 ? {} : { displayName: displayName.trim() }
+		};
+	}
+	/**
+	* List one directory page.
+	* @param request - Stable parent id and opaque cursor.
+	* @param signal - Cancels the request.
+	* @returns Normalized remote nodes.
+	*/
+	async list(request, signal) {
+		const path = request.parentId === void 0 ? "/" : this.parentPaths.get(request.parentId);
+		if (path === void 0) throw new CloudDiskError("CloudDisk directory is no longer available in this Provider generation", "CLOUD_DISK_INVALID_REQUEST");
+		const page = pageNumber(request.cursor, 0);
+		const limit = request.limit ?? 50;
+		const auth = await this.authenticate(signal);
+		const params = await this.signed(auth, "File.getList", {
+			path,
+			page: String(page),
+			page_size: String(limit)
+		});
+		const result = await this.call(this.getInput(params, auth.accessToken), signal);
+		return this.page(this.data(result, "directory page"), path, request.parentId, page);
+	}
+	/** Search remote nodes. @param request - Query and opaque cursor. @param signal - Cancels the request. @returns Normalized matches. */
+	async search(request, signal) {
+		const page = pageNumber(request.cursor, 1);
+		const limit = request.limit ?? 20;
+		const auth = await this.authenticate(signal);
+		const params = await this.signed(auth, "File.searchList", {
+			file_category: "-1",
+			key: request.query,
+			page: String(page),
+			page_size: String(limit)
+		});
+		const result = await this.call(this.postInput(params, auth.accessToken), signal);
+		return this.page(this.data(result, "search page"), void 0, void 0, page);
+	}
+	async authenticate(signal) {
+		const credential = await this.options.credentials.resolve(this.options.credentialRef);
+		if (credential === void 0) throw credentialMissing();
+		const fingerprint = createHash("sha256").update(credential.value, "utf8").digest("hex");
+		if (this.credentialFingerprint !== fingerprint) {
+			this.parentPaths.clear();
+			this.credentialFingerprint = fingerprint;
+		}
+		const params = {
+			method: "Oauth.getAccessTokenByApiKeyOrQT",
+			client_env: this.options.clientEnv,
+			client_src: this.options.clientSource,
+			grant_type: "authorization_code",
+			sub_channel: this.options.subChannel,
+			api_key: credential.value
+		};
+		const result = await this.call({
+			method: "GET",
+			url: queryUrl(this.options.endpoint, params),
+			headers: {
+				accept: "application/json",
+				api_key: credential.value
+			}
+		}, signal);
+		const data = this.data(result, "authentication");
+		if (!isRecord(data) || typeof data.access_token !== "string" || typeof data.qid !== "string") throw invalidResponse("authentication");
+		return {
+			accessToken: data.access_token,
+			qid: data.qid
+		};
+	}
+	async signed(auth, method, extra) {
+		const secret = await this.options.credentials.resolve(this.options.signingSecretRef);
+		if (secret === void 0) throw signingSecretMissing();
+		const input = {
+			access_token: auth.accessToken,
+			method,
+			qid: auth.qid,
+			...extra
+		};
+		return {
+			...input,
+			sign: sign(input, secret.value),
+			sub_channel: this.options.subChannel
+		};
+	}
+	getInput(params, accessToken) {
+		return {
+			method: "GET",
+			url: queryUrl(this.options.endpoint, params),
+			headers: { "access-token": accessToken }
+		};
+	}
+	postInput(params, accessToken) {
+		return {
+			method: "POST",
+			url: this.options.endpoint,
+			headers: {
+				"access-token": accessToken,
+				"content-type": "application/x-www-form-urlencoded"
+			},
+			body: new URLSearchParams(params).toString()
+		};
+	}
+	async call(input, parent) {
+		for (let attempt = 0;; attempt += 1) {
+			const deadline = deadlineSignal(parent, this.options.timeoutMs);
+			try {
+				const response = await this.options.http.request({
+					...input,
+					signal: deadline.signal
+				});
+				if (response.status < 200 || response.status >= 300) {
+					if (retryableStatus(response.status) && attempt < this.options.maxRetries) continue;
+					throw response.status === 401 || response.status === 403 ? authenticationFailed() : failed(`CloudDisk API request failed with HTTP ${String(response.status)}`);
+				}
+				if (!isRecord(response.json)) throw invalidResponse("API envelope");
+				return response.json;
+			} catch (error) {
+				if (parent?.aborted) throw parent.reason;
+				if (error instanceof CloudDiskError) throw error;
+				if (attempt >= this.options.maxRetries) throw networkFailed();
+			} finally {
+				deadline.dispose();
+			}
+		}
+	}
+	data(result, subject) {
+		if (result.errno !== 0) throw failed(`CloudDisk ${subject} failed`);
+		return result.data;
+	}
+	page(value, path, parentId, page) {
+		if (!isRecord(value) || !Array.isArray(value.node_list) || typeof value.has_next_page !== "boolean") throw invalidResponse("page");
+		return {
+			nodes: value.node_list.map((node, index) => this.node(node, path, parentId, index)),
+			...value.has_next_page ? { nextCursor: String(page + 1) } : {}
+		};
+	}
+	node(value, parentPath, parentId, index) {
+		if (!isRecord(value) || typeof value.nid !== "string" || typeof value.name !== "string") throw invalidResponse(`page.node_list[${String(index)}]`);
+		const directory = value.type === 1 || value.type === "1" || value.type === "dir" || value.is_dir === 1 || value.is_dir === "1";
+		const id = value.nid;
+		if (directory && parentPath !== void 0) this.parentPaths.set(id, childPath(parentPath, value.name));
+		const parent = parentId === void 0 ? {} : { parentId };
+		const size = typeof value.count_size === "string" && /^\d+$/.test(value.count_size) ? { size: Number(value.count_size) } : {};
+		const updatedAt = typeof value.modify_time === "string" ? { updatedAt: value.modify_time } : {};
+		return {
+			id,
+			kind: directory ? "directory" : "file",
+			name: value.name,
+			...parent,
+			...size,
+			...updatedAt
+		};
+	}
+};
+/**
+* Register a direct Provider and return its disposer.
+* @param ctx - CloudDisk service owner.
+* @param options - Host-only Provider configuration.
+* @returns Registration disposer.
+*/
+function applyDirectCloudDiskProvider(ctx, options) {
+	return ctx.cloudDisk.registerProvider(new DirectCloudDiskProvider(options));
+}
+/**
+* Register the production fetch Provider from a profile's explicit credential references.
+* @param ctx - Host context that owns the CloudDisk and credential services.
+* @param config - Complete direct-Provider configuration from the profile Bundle.
+*/
+function apply(ctx, config) {
+	applyDirectCloudDiskProvider(ctx, {
+		endpoint: config.endpoint,
+		credentialRef: credentialRef(config.apiKeyRef),
+		signingSecretRef: credentialRef(config.signingSecretRef),
+		clientEnv: config.clientEnv,
+		clientSource: config.clientSource,
+		subChannel: config.subChannel,
+		credentials: ctx.credentials,
+		http: createFetchCloudDiskHttpClient(),
+		timeoutMs: config.timeoutMs,
+		maxRetries: config.maxRetries
+	});
+}
+function isRecord(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function credentialMissing() {
+	return new CloudDiskError("CloudDisk credential is not configured", "CLOUD_DISK_CREDENTIAL_MISSING");
+}
+function signingSecretMissing() {
+	return new CloudDiskError("CloudDisk signing secret is not configured", "CLOUD_DISK_SIGNING_SECRET_MISSING");
+}
+function authenticationFailed() {
+	return new CloudDiskError("CloudDisk authentication failed", "CLOUD_DISK_AUTHENTICATION_FAILED");
+}
+function networkFailed() {
+	return new CloudDiskError("CloudDisk network request failed", "CLOUD_DISK_NETWORK_FAILED");
+}
+function failed(message) {
+	return new CloudDiskError(message, "CLOUD_DISK_PROVIDER_FAILED");
+}
+function invalidResponse(subject) {
+	return failed(`CloudDisk ${subject} response is invalid`);
+}
+function retryableStatus(status) {
+	return status === 408 || status === 425 || status === 429 || status >= 500;
+}
+function queryUrl(endpoint, params) {
+	const url = new URL(endpoint);
+	for (const [key, value] of Object.entries(params)) url.searchParams.set(key, value);
+	return url.toString();
+}
+function pageNumber(cursor, initial) {
+	if (cursor === void 0) return initial;
+	if (!/^\d+$/.test(cursor)) throw new CloudDiskError("CloudDisk cursor is invalid", "CLOUD_DISK_INVALID_REQUEST");
+	return Number(cursor);
+}
+function childPath(parent, name) {
+	const path = name.startsWith("/") ? name : `${parent}${name}`;
+	return path.endsWith("/") ? path : `${path}/`;
+}
+function phpEncode(value) {
+	return encodeURIComponent(value).replace(/%20/g, "+").replace(/[!'()*~]/g, (char) => `%${char.charCodeAt(0).toString(16).toUpperCase()}`);
+}
+function sign(params, secret) {
+	return createHash("md5").update(`${Object.keys(params).sort().map((key) => `${key}=${phpEncode(params[key])}`).join("&")}${secret}`, "utf8").digest("hex");
+}
+function deadlineSignal(parent, timeoutMs) {
+	const controller = new AbortController();
+	const timer = setTimeout(() => controller.abort(), timeoutMs);
+	const abort = () => controller.abort(parent?.reason);
+	parent?.addEventListener("abort", abort, { once: true });
+	return {
+		signal: controller.signal,
+		dispose: () => {
+			clearTimeout(timer);
+			parent?.removeEventListener("abort", abort);
+		}
+	};
+}
+//#endregion
+export { CloudDiskRuntime, Config, DirectCloudDiskProvider, apply, applyDirectCloudDiskProvider, createFetchCloudDiskHttpClient, inject, name };

package/lib/invariant.js

@@ -0,0 +1,20 @@
+//#region lib/types/invariant.js
+/**
+* Package-owned invariant companion for `@aicloud360/dsh-cloud-disk-api-provider`.
+* @module @aicloud360/dsh-cloud-disk-api-provider/invariant
+*/
+const PACKAGE_NAME = "@aicloud360/dsh-cloud-disk-api-provider";
+/** Cordis companion plugin name. */
+const name = "cloud-disk-api-provider-invariant";
+/** Service required before the companion can reserve package ownership. */
+const inject = ["invariants"];
+/** No runtime invariant: provider behavior is enforced at operation time and routed through stable `CloudDiskError` codes. */
+const install = () => {};
+/**
+* Register this package's invariant companion.
+* @param ctx - Cordis context carrying the invariant service.
+* @returns the installed registration's disposer.
+*/
+const apply = (ctx) => Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install));
+//#endregion
+export { apply, inject, name };

package/lib/types/index.d.ts

@@ -0,0 +1,110 @@
+/** Direct Host-side adapter for the audited 360 CloudDisk OpenAPI. */
+import type { Context } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
+import { type CredentialProvider, type CredentialRef } from '@deepseek-ai/dsh-credentials';
+import CloudDiskRuntime, { type CloudDiskListRequest, type CloudDiskPage, type CloudDiskProvider, type CloudDiskProviderConfig, type CloudDiskSearchRequest, type CloudDiskUser } from '@aicloud360/dsh-cloud-disk';
+/** Cordis loader name for the direct CloudDisk Provider plugin. */
+export declare const name = "cloud-disk-api-provider";
+/** Host services required to register and operate the direct Provider. */
+export declare const inject: string[];
+/** Loader configuration for the direct CloudDisk Provider. */
+export interface Config {
+    /** OpenAPI endpoint URL. */
+    endpoint: string;
+    /** Credential reference containing the user API key. */
+    apiKeyRef: string;
+    /** Credential reference containing the server-side request-signing secret. */
+    signingSecretRef: string;
+    /** 360 client environment identifier. */
+    clientEnv: string;
+    /** 360 client source identifier. */
+    clientSource: string;
+    /** 360 sub-channel identifier. */
+    subChannel: string;
+    /** Maximum duration of one HTTP attempt in milliseconds. */
+    timeoutMs: number;
+    /** Number of retry attempts after the initial HTTP attempt. */
+    maxRetries: number;
+}
+/** Runtime schema for the complete, explicit Provider configuration. */
+export declare const Config: z<Config>;
+/** Response returned by the Provider's injectable Host HTTP transport. */
+export interface CloudDiskHttpResponse {
+    readonly status: number;
+    readonly json: unknown;
+}
+/** Host HTTP transport. It must not log request headers or response bodies. */
+export interface CloudDiskHttpClient {
+    request(input: {
+        readonly method: 'GET' | 'POST';
+        readonly url: string;
+        readonly headers: Readonly<Record<string, string>>;
+        readonly body?: string;
+        readonly signal?: AbortSignal;
+    }): Promise<CloudDiskHttpResponse>;
+}
+/**
+ * Create the production fetch transport used by the Host-side Provider.
+ * @param fetchImpl - Host fetch implementation; injectable only for tests.
+ * @returns A transport that parses JSON without logging sensitive request data.
+ */
+export declare function createFetchCloudDiskHttpClient(fetchImpl?: typeof fetch): CloudDiskHttpClient;
+/** Host-only configuration for the audited direct 360 OpenAPI Provider. */
+export interface DirectCloudDiskProviderOptions extends CloudDiskProviderConfig {
+    readonly signingSecretRef: CredentialRef;
+    readonly clientEnv: string;
+    readonly clientSource: string;
+    readonly subChannel: string;
+    readonly credentials: CredentialProvider;
+    readonly http: CloudDiskHttpClient;
+    readonly timeoutMs: number;
+    readonly maxRetries: number;
+}
+/** Provider that keeps API key, token, and signing material on the Host. */
+export declare class DirectCloudDiskProvider implements CloudDiskProvider {
+    private readonly options;
+    readonly id = "360-http";
+    private readonly parentPaths;
+    private credentialFingerprint;
+    constructor(options: DirectCloudDiskProviderOptions);
+    /** Report that the Provider is configured; each operation verifies its credentials. */
+    available(): boolean;
+    /**
+     * Read the authenticated user without exposing credential or token fields.
+     * @param signal - Cancels the request.
+     * @returns Normalized user information.
+     */
+    getUser(signal?: AbortSignal): Promise<CloudDiskUser>;
+    /**
+     * List one directory page.
+     * @param request - Stable parent id and opaque cursor.
+     * @param signal - Cancels the request.
+     * @returns Normalized remote nodes.
+     */
+    list(request: CloudDiskListRequest, signal?: AbortSignal): Promise<CloudDiskPage>;
+    /** Search remote nodes. @param request - Query and opaque cursor. @param signal - Cancels the request. @returns Normalized matches. */
+    search(request: CloudDiskSearchRequest, signal?: AbortSignal): Promise<CloudDiskPage>;
+    private authenticate;
+    private signed;
+    private getInput;
+    private postInput;
+    private call;
+    private data;
+    private page;
+    private node;
+}
+/**
+ * Register a direct Provider and return its disposer.
+ * @param ctx - CloudDisk service owner.
+ * @param options - Host-only Provider configuration.
+ * @returns Registration disposer.
+ */
+export declare function applyDirectCloudDiskProvider(ctx: Context, options: DirectCloudDiskProviderOptions): () => void;
+/**
+ * Register the production fetch Provider from a profile's explicit credential references.
+ * @param ctx - Host context that owns the CloudDisk and credential services.
+ * @param config - Complete direct-Provider configuration from the profile Bundle.
+ */
+export declare function apply(ctx: Context, config: Config): void;
+export { CloudDiskRuntime };
+//# sourceMappingURL=index.d.ts.map

package/lib/types/invariant.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Package-owned invariant companion for `@aicloud360/dsh-cloud-disk-api-provider`.
+ * @module @aicloud360/dsh-cloud-disk-api-provider/invariant
+ */
+import type { Context } from '@deepseek-ai/cordis';
+/** Cordis companion plugin name. */
+export declare const name = "cloud-disk-api-provider-invariant";
+/** Service required before the companion can reserve package ownership. */
+export declare const inject: string[];
+/**
+ * Register this package's invariant companion.
+ * @param ctx - Cordis context carrying the invariant service.
+ * @returns the installed registration's disposer.
+ */
+export declare const apply: (ctx: Context) => Promise<() => void>;
+//# sourceMappingURL=invariant.d.ts.map

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@aicloud360/dsh-cloud-disk-api-provider",
+  "description": "Direct Host-side HTTP provider adapter for the native CloudDisk capability seam",
+  "version": "0.1.1-alpha.1",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/yifangyun/dsh-cloud-disk.git",
+    "directory": "packages/dsh-cloud-disk-api-provider"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "files": [
+    "lib/index.js",
+    "lib/invariant.js",
+    "lib/types/**/*.d.ts"
+  ],
+  "license": "MIT",
+  "peerDependencies": {
+    "@deepseek-ai/dsh-credentials": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-invariants": "0.1.1-rc.2",
+    "@deepseek-ai/schemastery": "^3.18.1",
+    "@deepseek-ai/cordis": "^4.0.1"
+  },
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./invariant": {
+      "types": "./lib/types/invariant.d.ts",
+      "default": "./lib/invariant.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "dependencies": {
+    "@aicloud360/dsh-cloud-disk": "0.1.1-alpha.1"
+  }
+}