@henjicc/ai-sdk 0.2.8

package/dist/upload/preprocess-core.js

@@ -0,0 +1,130 @@
+import { AiRuntimeError } from '../runtime/AiRuntimeError.js';
+import { resolveRuntimeContext, } from '../runtime/RuntimeContext.js';
+import { defaultFilename, parseDataUri } from './media-binary.js';
+import { buildMediaSourceIndex, inheritMediaKind, isLocalMediaSource, isRemoteHttpUrl, normalizeLocalSource, resolveMediaKind, } from './media-fields.js';
+/** 供应商无关的唯一媒体遍历与本地字节读取内核。 */
+export async function preprocessWithProviderStrategy(input, strategy) {
+    const body = cloneJson(input.body);
+    const params = input.params ?? {};
+    const context = {
+        providerId: input.providerId,
+        route: input.route,
+        params,
+        mediaSources: buildMediaSourceIndex(params),
+        mediaFields: new Map((input.constraints?.mediaFields ?? []).map(({ field, kind }) => [field, kind])),
+        requestId: input.requestId,
+        signal: input.signal,
+        runtime: resolveRuntimeContext(input.runtime),
+        strategy,
+    };
+    await preprocessValue(context, 'unknown', undefined, body);
+    warnUnresolvedLocalMedia(context, body);
+    return body;
+}
+async function preprocessValue(context, mediaKind, fieldName, value) {
+    if (typeof value === 'string')
+        return;
+    if (Array.isArray(value)) {
+        for (let index = 0; index < value.length; index += 1) {
+            const item = value[index];
+            if (typeof item === 'string') {
+                const kind = resolveMediaKind(context.mediaSources, mediaKind, item);
+                if (kind !== 'unknown')
+                    value[index] = await rewriteMediaSource(context, kind, fieldName, item);
+            }
+            else {
+                await preprocessValue(context, mediaKind, fieldName, item);
+            }
+        }
+        return;
+    }
+    if (!isJsonObject(value))
+        return;
+    await context.strategy.preprocessObject?.({
+        providerId: context.providerId,
+        route: context.route,
+        object: value,
+        params: context.params,
+        rewrite: async (kind, field, source) => await rewriteMediaSource(context, kind, field, source),
+    });
+    for (const [key, nestedValue] of Object.entries(value)) {
+        const nextKind = context.mediaFields.get(key) ?? inheritMediaKind(mediaKind, key);
+        if (typeof nestedValue === 'string') {
+            const kind = resolveMediaKind(context.mediaSources, nextKind, nestedValue);
+            if (kind !== 'unknown')
+                value[key] = await rewriteMediaSource(context, kind, key, nestedValue);
+        }
+        else {
+            await preprocessValue(context, nextKind, key, nestedValue);
+        }
+    }
+}
+async function rewriteMediaSource(context, mediaKind, fieldName, source) {
+    const trimmed = source.trim();
+    if (!trimmed || isRemoteHttpUrl(trimmed))
+        return source;
+    if (trimmed.startsWith('blob:')) {
+        throw new AiRuntimeError('unsupported_media_source', `Blob URL is not supported by backend runtime for field ${fieldName ?? '<unknown>'}.`);
+    }
+    if (!trimmed.startsWith('data:') && normalizeLocalSource(trimmed) === undefined)
+        return source;
+    const prepared = await prepareMediaBinary(context.runtime, trimmed, mediaKind);
+    return await context.strategy.rewrite({
+        providerId: context.providerId,
+        route: context.route,
+        mediaKind,
+        fieldName,
+        source,
+        prepared,
+        params: context.params,
+        requestId: context.requestId,
+        signal: context.signal,
+        runtime: context.runtime,
+    });
+}
+async function prepareMediaBinary(runtime, source, mediaKind) {
+    const dataUri = parseDataUri(source);
+    if (dataUri) {
+        return {
+            bytes: dataUri.bytes,
+            mimeType: dataUri.mimeType,
+            filename: defaultFilename(dataUri.mimeType, mediaKind),
+        };
+    }
+    return await runtime.media.read(source);
+}
+function warnUnresolvedLocalMedia(context, body) {
+    const fields = [];
+    const visit = (value, fieldName) => {
+        if (typeof value === 'string') {
+            if (fieldName && value.trim() && isLocalMediaSource(value.trim()) && !fields.includes(fieldName)) {
+                fields.push(fieldName);
+            }
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (const item of value)
+                visit(item, fieldName);
+            return;
+        }
+        if (isJsonObject(value)) {
+            for (const [key, nested] of Object.entries(value))
+                visit(nested, key);
+        }
+    };
+    visit(body, undefined);
+    if (fields.length > 0) {
+        context.runtime.logger.warn('请求体仍包含未上传的本地媒体路径，字段名可能未命中媒体 hint', {
+            event: 'ai_runtime.upload.unresolved_local_media',
+            requestId: context.requestId,
+            providerId: context.providerId,
+            context: { route: context.route, fields },
+        });
+    }
+}
+function cloneJson(value) {
+    return JSON.parse(JSON.stringify(value));
+}
+function isJsonObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}

package/dist/upload/preprocess.d.ts

@@ -0,0 +1,8 @@
+import type { RuntimeContext } from '../runtime/RuntimeContext.js';
+import type { RuntimeConstraints } from '../types/model.js';
+import type { JsonObject, JsonValue } from '../types/runtime.js';
+/**
+ * 默认全量入口的兼容组合层。真正的媒体遍历只有 `preprocess-core` 一份；按需 packs 则直接
+ * 注入对应 provider-scoped 策略，不会静态带入其他供应商。
+ */
+export declare function preprocessRequestBody(providerId: string, route: string, body: JsonValue, runtime: RuntimeContext, params?: JsonObject, constraints?: RuntimeConstraints, requestId?: string, signal?: AbortSignal): Promise<JsonValue>;

package/dist/upload/preprocess.js

@@ -0,0 +1,24 @@
+import { strategy as apimart } from './provider-preprocessors/apimart.js';
+import { strategy as dataUri } from './provider-preprocessors/data-uri.js';
+import { strategy as fal } from './provider-preprocessors/fal.js';
+import { preprocessProviderInput } from './provider-preprocessors/factory.js';
+import { strategy as kie } from './provider-preprocessors/kie.js';
+import { strategy as ppio } from './provider-preprocessors/ppio.js';
+const preprocessors = { apimart, fal, kie, modelscope: kie, ppio };
+/**
+ * 默认全量入口的兼容组合层。真正的媒体遍历只有 `preprocess-core` 一份；按需 packs 则直接
+ * 注入对应 provider-scoped 策略，不会静态带入其他供应商。
+ */
+export async function preprocessRequestBody(providerId, route, body, runtime, params = {}, constraints, requestId, signal) {
+    const strategy = preprocessors[providerId] ?? dataUri;
+    return await preprocessProviderInput(strategy, {
+        providerId,
+        route,
+        body,
+        runtime,
+        params,
+        constraints,
+        requestId: requestId ?? `${providerId}-preprocess`,
+        signal: signal ?? new AbortController().signal,
+    });
+}

package/dist/upload/provider-preprocessors/apimart.d.ts

@@ -0,0 +1,4 @@
+export declare const strategy: {
+    rewrite({ mediaKind, prepared, runtime, route, requestId }: import("../preprocess-core.js").ProviderMediaRewriteInput): Promise<string>;
+};
+export declare const preprocess: import("../../index.js").GenerationRequestPreprocessor;

package/dist/upload/provider-preprocessors/apimart.js

@@ -0,0 +1,42 @@
+import { AiRuntimeError } from '../../runtime/AiRuntimeError.js';
+import { uploadToApiMart } from '../apimart-upload.js';
+import { createGenerationPreprocessor } from './factory.js';
+export const strategy = {
+    async rewrite({ mediaKind, prepared, runtime, route, requestId }) {
+        if (mediaKind !== 'image') {
+            throw new AiRuntimeError('public_media_url_required', `APIMart 没有通用的${mediaKind === 'video' ? '视频' : (mediaKind === 'audio' ? '音频' : '文件')}上传端点。`);
+        }
+        const apiKey = await runtime.credentials.get('generation', 'apimart');
+        if (!apiKey) {
+            throw new AiRuntimeError('missing_api_key', 'APIMart 本地图片必须先上传，请先在设置中配置 APIMart API Key。');
+        }
+        const context = { route, mimeType: prepared.mimeType, bytes: prepared.bytes.byteLength };
+        runtime.logger.info('开始上传 APIMart 本地图片', {
+            event: 'ai_runtime.upload.apimart_started',
+            requestId,
+            providerId: 'apimart',
+            context,
+        });
+        try {
+            const url = await uploadToApiMart(apiKey, prepared, runtime.transport);
+            runtime.logger.info('APIMart 本地图片上传完成', {
+                event: 'ai_runtime.upload.apimart_completed',
+                requestId,
+                providerId: 'apimart',
+                context,
+            });
+            return url;
+        }
+        catch (error) {
+            runtime.logger.error('APIMart 本地图片上传失败', {
+                event: 'ai_runtime.upload.apimart_failed',
+                requestId,
+                providerId: 'apimart',
+                context,
+                error,
+            });
+            throw error;
+        }
+    },
+};
+export const preprocess = createGenerationPreprocessor(strategy);

package/dist/upload/provider-preprocessors/data-uri.d.ts

@@ -0,0 +1,4 @@
+export declare const strategy: {
+    rewrite: ({ prepared }: import("../preprocess-core.js").ProviderMediaRewriteInput) => Promise<string>;
+};
+export declare const preprocess: import("../../index.js").GenerationRequestPreprocessor;

package/dist/upload/provider-preprocessors/data-uri.js

@@ -0,0 +1,6 @@
+import { toDataUri } from '../base64.js';
+import { createGenerationPreprocessor } from './factory.js';
+export const strategy = {
+    rewrite: async ({ prepared }) => toDataUri(prepared.bytes, prepared.mimeType),
+};
+export const preprocess = createGenerationPreprocessor(strategy);

package/dist/upload/provider-preprocessors/factory.d.ts

@@ -0,0 +1,4 @@
+import type { GenerationRequestPreprocessor } from '../../generation/core.js';
+import { type ProviderPreprocessInput, type ProviderPreprocessStrategy } from '../preprocess-core.js';
+export declare function createGenerationPreprocessor(strategy: ProviderPreprocessStrategy): GenerationRequestPreprocessor;
+export declare function preprocessProviderInput(strategy: ProviderPreprocessStrategy, input: ProviderPreprocessInput): Promise<import('../../types/runtime.js').JsonValue>;

package/dist/upload/provider-preprocessors/factory.js

@@ -0,0 +1,16 @@
+import { preprocessWithProviderStrategy, } from '../preprocess-core.js';
+export function createGenerationPreprocessor(strategy) {
+    return async (input) => await preprocessWithProviderStrategy({
+        providerId: input.providerId,
+        route: input.route,
+        body: input.body,
+        runtime: input.runtime,
+        params: input.params,
+        constraints: input.model.runtimeConstraints,
+        requestId: input.requestId,
+        signal: input.signal,
+    }, strategy);
+}
+export async function preprocessProviderInput(strategy, input) {
+    return await preprocessWithProviderStrategy(input, strategy);
+}

package/dist/upload/provider-preprocessors/fal.d.ts

@@ -0,0 +1,4 @@
+export declare const strategy: {
+    rewrite({ prepared, runtime, route, requestId, signal }: import("../preprocess-core.js").ProviderMediaRewriteInput): Promise<string>;
+};
+export declare const preprocess: import("../../index.js").GenerationRequestPreprocessor;

package/dist/upload/provider-preprocessors/fal.js

@@ -0,0 +1,39 @@
+import { AiRuntimeError } from '../../runtime/AiRuntimeError.js';
+import { uploadToFalWithTransport } from '../fal-transport.js';
+import { createGenerationPreprocessor } from './factory.js';
+export const strategy = {
+    async rewrite({ prepared, runtime, route, requestId, signal }) {
+        const apiKey = await runtime.credentials.get('generation', 'fal');
+        if (!apiKey) {
+            throw new AiRuntimeError('missing_api_key', 'Fal 本地文件必须先上传，请先在设置中配置 Fal API Key。');
+        }
+        const context = { route, mimeType: prepared.mimeType, bytes: prepared.bytes.byteLength };
+        runtime.logger.info('开始上传 Fal 本地文件', {
+            event: 'ai_runtime.upload.fal_started',
+            requestId,
+            providerId: 'fal',
+            context,
+        });
+        try {
+            const url = await uploadToFalWithTransport(apiKey, prepared, runtime.transport, signal);
+            runtime.logger.info('Fal 本地文件上传完成', {
+                event: 'ai_runtime.upload.fal_completed',
+                requestId,
+                providerId: 'fal',
+                context,
+            });
+            return url;
+        }
+        catch (error) {
+            runtime.logger.error('Fal 本地文件上传失败', {
+                event: 'ai_runtime.upload.fal_failed',
+                requestId,
+                providerId: 'fal',
+                context,
+                error,
+            });
+            throw error;
+        }
+    },
+};
+export const preprocess = createGenerationPreprocessor(strategy);

package/dist/upload/provider-preprocessors/kie.d.ts

@@ -0,0 +1,4 @@
+export declare const strategy: {
+    rewrite({ prepared, runtime }: import("../preprocess-core.js").ProviderMediaRewriteInput): Promise<string>;
+};
+export declare const preprocess: import("../../index.js").GenerationRequestPreprocessor;

package/dist/upload/provider-preprocessors/kie.js

@@ -0,0 +1,18 @@
+import { toDataUri } from '../base64.js';
+import { uploadToKie } from '../kie-upload.js';
+import { createGenerationPreprocessor } from './factory.js';
+export const strategy = {
+    async rewrite({ prepared, runtime }) {
+        const apiKey = await runtime.credentials.get('generation', 'kie');
+        if (apiKey) {
+            try {
+                return await uploadToKie(apiKey, prepared, runtime.transport);
+            }
+            catch {
+                // 保持旧行为：KIE 托管上传失败时退回 data URI，由生成端点给出最终协议结论。
+            }
+        }
+        return toDataUri(prepared.bytes, prepared.mimeType);
+    },
+};
+export const preprocess = createGenerationPreprocessor(strategy);

package/dist/upload/provider-preprocessors/ppio.d.ts

@@ -0,0 +1,6 @@
+import type { ProviderMediaRewriteInput } from '../preprocess-core.js';
+export declare const strategy: {
+    rewrite(input: ProviderMediaRewriteInput): Promise<string>;
+    preprocessObject({ route, object, rewrite }: import("../preprocess-core.js").ProviderObjectPreprocessInput): Promise<void>;
+};
+export declare const preprocess: import("../../index.js").GenerationRequestPreprocessor;

package/dist/upload/provider-preprocessors/ppio.js

@@ -0,0 +1,56 @@
+import { resolvePpioMediaRewriteMode } from '../../providers/ppio-media.js';
+import { AiRuntimeError } from '../../runtime/AiRuntimeError.js';
+import { toBase64, toDataUri } from '../base64.js';
+import { uploadToKie } from '../kie-upload.js';
+import { createGenerationPreprocessor } from './factory.js';
+export const strategy = {
+    async rewrite(input) {
+        const mode = resolvePpioMediaRewriteMode(input.route, input.fieldName, input.mediaKind === 'video');
+        if (mode === 'raw-base64')
+            return toBase64(input.prepared.bytes);
+        if (mode === 'data-uri')
+            return toDataUri(input.prepared.bytes, input.prepared.mimeType);
+        return await uploadPublicUrl(input);
+    },
+    async preprocessObject({ route, object, rewrite }) {
+        if (route !== '/async/wan2.7-r2v')
+            return;
+        const type = typeof object.type === 'string' ? object.type : '';
+        const kind = type === 'reference_video'
+            ? 'video'
+            : (type === 'reference_image' || type === 'first_frame' ? 'image' : undefined);
+        if (kind && typeof object.url === 'string') {
+            object.url = await rewrite(kind, 'url', object.url);
+        }
+        if (typeof object.reference_voice === 'string') {
+            object.reference_voice = await rewrite('audio', 'reference_voice', object.reference_voice);
+        }
+    },
+};
+export const preprocess = createGenerationPreprocessor(strategy);
+async function uploadPublicUrl(input) {
+    const primary = typeof input.params.__upload_provider === 'string'
+        ? input.params.__upload_provider.trim()
+        : '';
+    const fallback = typeof input.params.__upload_fallback === 'boolean'
+        ? input.params.__upload_fallback
+        : true;
+    const allowKie = primary === 'kie' || (!primary && fallback) || (primary !== 'kie' && fallback);
+    const failures = [];
+    if (allowKie) {
+        const apiKey = await input.runtime.credentials.get('generation', 'kie');
+        if (apiKey) {
+            try {
+                return await uploadToKie(apiKey, input.prepared, input.runtime.transport);
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : String(error);
+                failures.push(`KIE 上传失败: ${message}`);
+            }
+        }
+        else {
+            failures.push('KIE 未配置');
+        }
+    }
+    throw new AiRuntimeError('public_media_url_required', `当前 PPIO 模型字段要求公网 HTTP/HTTPS 媒体 URL。请直接传入公网 URL，或配置 KIE API Key。${failures.join('；')}`);
+}

package/dist/upload/providers.d.ts

@@ -0,0 +1,5 @@
+/** 兼容聚合入口；按需 pack 应直接导入对应 provider-scoped 文件。 */
+export * from './prepared-media.js';
+export * from './base64.js';
+export * from './apimart-upload.js';
+export * from './kie-upload.js';

package/dist/upload/providers.js

@@ -0,0 +1,5 @@
+/** 兼容聚合入口；按需 pack 应直接导入对应 provider-scoped 文件。 */
+export * from './prepared-media.js';
+export * from './base64.js';
+export * from './apimart-upload.js';
+export * from './kie-upload.js';

package/dist/upload/upload-response.d.ts

@@ -0,0 +1,3 @@
+import type { JsonValue } from '../types/runtime.js';
+export declare function readUploadJson(response: Response, label: string): Promise<JsonValue>;
+export declare function readUploadString(value: JsonValue, pointer: string): string | undefined;

package/dist/upload/upload-response.js

@@ -0,0 +1,24 @@
+import { AiRuntimeError } from '../runtime/AiRuntimeError.js';
+export async function readUploadJson(response, label) {
+    const payload = await response.json().catch((error) => {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new AiRuntimeError('upload_failed', message);
+    });
+    if (!response.ok) {
+        throw new AiRuntimeError('upload_failed', `${label} HTTP ${response.status}: ${JSON.stringify(payload)}`);
+    }
+    return payload;
+}
+export function readUploadString(value, pointer) {
+    let current = value;
+    for (const rawPart of pointer.split('/').slice(1)) {
+        if (!isJsonObject(current) && !Array.isArray(current))
+            return undefined;
+        const part = rawPart.replace(/~1/g, '/').replace(/~0/g, '~');
+        current = Array.isArray(current) ? current[Number(part)] : current[part];
+    }
+    return typeof current === 'string' ? current : undefined;
+}
+function isJsonObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}

package/docs/README.md

@@ -0,0 +1,26 @@
+# SDK 调研资料索引
+
+本目录收纳「模型SDK抽离」任务 1.3 从仓库根 `docs/` 迁入的两份调研资产。迁入 SDK 包的目的是让
+「代码 + 文档 + 目录数据」同仓同版本，避免文档与实现分处两地产生漂移；两份资料此前分别是
+`docs/model-adaptation/` 与 `docs/llm-adaptation/`，现分别对应本目录下同名子目录。
+
+## [model-adaptation/](model-adaptation/README.md) —— 生成模型 API 与价格资料
+
+覆盖**生成模型**（图片/视频/音频）：每个 (模型, 供应商) 组合对应一份写死的
+`packages/ai-sdk/src/catalog/{provider}/*.model.ts`，供应商是固定枚举。是本项目**唯一的模型 API 与价格资料源**，
+核对字段名、枚举值、输入限制、端点或价格时只读这里，不要凭记忆下结论。
+
+动手前先读入口手册：[model-adaptation/文档采集手册.md](model-adaptation/文档采集手册.md)。
+
+## [llm-adaptation/](llm-adaptation/README.md) —— LLM 供应商适配资料
+
+覆盖**大语言模型**：供应商和模型是用户运行时自建的，不是代码里为每个模型写一份文件，按供应商
+（而非模型）组织资料。用于核对思考参数、联网搜索、工具调用、协议矩阵等信息。
+
+动手前先读入口手册：[llm-adaptation/文档采集手册.md](llm-adaptation/文档采集手册.md)。
+
+## 两者的区别
+
+详见 [llm-adaptation/README.md](llm-adaptation/README.md) 第一节「这是什么，和
+`docs/model-adaptation/` 有什么不一样」——生成模型的供应商固定、代码与文档 1:1 影子关系；LLM 的
+供应商与模型运行时自建，代码只在协议层（而非模型层）与文档对应。

package/docs/consumers.md

@@ -0,0 +1,48 @@
+# SDK 消费项目清单
+
+本清单是 `@henjicc/ai-sdk` 消费方的唯一维护入口，用于 SDK 发布后的跨仓升级协调。
+绝对路径仅描述当前开发机上的仓库位置，不进入 SDK 运行时代码、发布包或用户配置。
+
+最后核对日期：2026-08-31
+
+当前 SDK 版本：`0.2.8`（公共 npm 首发候选；正式发布后再回填远端 integrity）
+
+## 判定口径
+
+- **消费者**：package manifest / lockfile 声明 SDK，或源码、构建入口实际导入 SDK。
+- **内部消费验证面**：位于 SDK 主仓库内，但有独立 manifest 和可运行构建的示例；它们不是外部仓库，仍需跟随发布版本验证。
+- **非消费者证据**：README、任务交接、迁移记录中的文字引用，以及没有进入实际构建的声明，不单独算消费者。
+- 扫描范围为 `/Users/henji/Documents/VibeCode` 下一级项目，排除了 `.git`、`node_modules`、`dist`、`target`、`build`、`coverage` 和缓存目录。
+
+## 独立宿主
+
+| 仓库 / 开发路径 | 宿主类型 | 当前精确版本 | SDK 入口与构建方式 | 凭据 / transport 责任 | 需同步的变更类型 | 验证命令 | 同步证据与边界 | 最后核对 |
+|---|---|---|---|---|---|---|---|---|
+| `Henji-AI`<br>`/Users/henji/Documents/VibeCode/Henji-AI` | Electron 42 主进程 + React/Vite；SDK 主开发、首发验证宿主 | workspace 源码为 `0.2.8`；待首次发布到公共 npm | 包根、`provider-packs/*`、`tool-packs/*`；根构建先执行 `build:sdk`，再构建 Electron | Electron 主进程注入 HTTP transport、凭据、媒体读取、日志、trace、取消与落盘；渲染层不直接持有密钥 | 公共类型/目录、provider preset、凭据坐标、transport、媒体、包导出、LLM/生成执行协议 | `npm run check:sdk`；相关 Vitest；改主进程后 `npm run electron:build` | 公共发布候选的 prepublish 全门禁通过，72 个测试文件 / 766 项测试；实际 tarball 已在无 GitHub 凭据的仓外项目完成安装与根/runtime/generation 导入 | 2026-08-31 |
+| `henji-ai-ps`<br>`/Users/henji/Documents/VibeCode/henji-ai-ps` | Photoshop UXP 插件 + React/Vite IIFE（pnpm） | manifest/lock 均为 `0.2.6`；lock integrity `sha512-HgOQ/YIAHWcHwMzDh6VRy8m8M5vZr+XnUJU3u9bMPoHFAtC3OmQdjfS1VZNPDROGr6LPYHyKiCjZiIFJo0wlfw==` | `generation/core`、单模型/供应商 pack、LLM streaming；Vite 构建与 UXP smoke bundle | UXP 宿主注入受限 `fetch`、provider 凭据、媒体编码读取和脱敏日志；SDK 不读取 Node/文件系统 | 生成 pack/exports、受限环境可移植性、RuntimeContext、凭据 scope、媒体与流式 LLM；不因版本同步自动引入 GLM | `pnpm typecheck:uxp-smoke && pnpm check:uxp-sdk && pnpm smoke:uxp:build && pnpm check:uxp-smoke`；完整 `pnpm check` | `c61b249`；Node 22 下四项门禁通过，正式产品仍仅 39 个图片 generation/erase packs，未引入供应商元数据 UI | 2026-08-28 |
+| `say-it`<br>`/Users/henji/Documents/VibeCode/say-it` | Tauri 2 + Rust 管理 QuickJS；WebView 不运行 SDK | manifest/lock 均精确锁定远端 `0.2.7`；lock integrity `sha512-1J38LuRPTddVb4vUINzbz8uilCub+M0KC3vM8xbDn40yv3weGrVkN7pfZJEKJIffojddZxuXc8qkyOA/Qr3vaw==` | 按需打包 capability、Bailian/火山实时 ASR、SiliconFlow/Groq 文件 ASR、translation、LLM modules 为相互隔离 IIFE；Rust 加载 bundle | Rust Host API 注入 HTTP 字节流、WS、media-ref、CredentialStore、日志/trace、Abort/timeout/cancel；QuickJS/插件/WebView 不直取密钥 | capability/LLM 协议、按需 exports、descriptor source/坐标、QuickJS 可移植性、bundle 隔离；不因版本同步自动增加未采用模型 | `npm run sdk-runtime:typecheck && npm run sdk-runtime:build`；`npm run test:ui`；Rust 定向/全量测试；`npm run ui:build` | `12d0100`；新增火山 SeedASR 2.0 实时、SiliconFlow 两个文件模型、Groq 两个文件模型；远端安装和 387 项 Rust、28 项 UI 测试通过；私有包授予 Actions Read，带包权限的 CI 限于 push/同仓 PR | 2026-08-31 |
+
+## SDK 仓内消费验证面
+
+这些目录是可独立安装、构建的真实示例，但与 SDK 同属 `Henji-AI` 仓库，不重复算外部仓库。
+它们的 manifest 均精确声明待发布的 `0.2.8`，且没有锁文件；公共 npm 发布后再从远端重新安装并回填验证证据。
+
+| 路径 | 用途 / 入口 | 当前版本 | 宿主责任 | 验证命令 | 同步证据 | 最后核对 |
+|---|---|---|---|---|---|---|
+| `/Users/henji/Documents/VibeCode/Henji-AI/packages/ai-sdk/examples/minimal-node` | `generation` + `runtime` 按需入口；完整 generation catalog、KIE dry-run/live 闸门，不带 LLM/BigModel | `0.2.8`（精确 manifest，无 lock、无 workspace alias） | Node transport、环境凭据、文件媒体读取、日志 | 在目录内 `npm install && npm run dry-run` | 待公共 npm 远端回装验证 | 2026-08-31 |
+| `/Users/henji/Documents/VibeCode/Henji-AI/packages/ai-sdk/examples/llm-chat` | `llm/streaming` 按需入口；OpenAI-compatible SSE 对话，不带 generation、BigModel preset/models/pricing、Groq 或 LLM modules（保留通用身份解析所需 profiles） | `0.2.8`（精确 manifest，无 lock、无 workspace alias） | Node transport、环境凭据、流事件与取消 | 在目录内 `npm install && npm run dry-run && npm run check:bundle` | 待公共 npm 远端回装验证 | 2026-08-31 |
+| `/Users/henji/Documents/VibeCode/Henji-AI/packages/ai-sdk/examples/form-renderer` | `generation` + `catalog` + `runtime` 按需入口；完整 generation catalog/参数契约与最小 renderer，不带 LLM/BigModel | `0.2.8`（精确 manifest，无 lock、无 workspace alias） | 零网络 RuntimeContext；仅目录与 renderer | 在目录内 `npm install && npm run build && npm start` | 待公共 npm 远端回装验证 | 2026-08-31 |
+
+## 非消费者证据
+
+- `Henji-AI`、`henji-ai-ps`、`say-it` 的 README、任务文件和交接文档含历史版本或迁移描述；它们用于追溯，不形成额外消费者。
+- `/Users/henji/Documents/VibeCode` 下的 `ai-roundtable`、`fast-install`、`henji`、`henji-dev`、`henjicc.github.io`、`mySkills`、`test` 未发现 `@henjicc/ai-sdk` 的 manifest、lockfile、源码 import 或构建脚本引用。
+- SDK 自身的测试、fixture、导出检查和发布脚本属于生产者验证，不作为独立消费项目。
+
+## 发布后维护规则
+
+1. SDK 必须先在 `Henji-AI` 完成精确测试、全量/可移植性/包验证与远端回装，再发布。
+2. 发布后按变更影响逐个同步本清单中的实际消费者；外部消费者必须精确锁版本并核对 lock integrity，再回写 commit、验证状态、边界和日期。
+3. 只升级消费项目实际使用的按需入口。新增 provider/model 不等于所有宿主都要增加对应 bundle 或业务入口。
+4. 涉及 provider 身份、endpoint profile、credentialId、transport、media 或协议事件时，逐项检查表中宿主责任边界，禁止在消费方复制 SDK 执行内核。
+5. 消费项目升级完成后，将验证结果写入对应任务交接；本清单只维护稳定事实，不复制每次执行日志。