@lingya-ai/agents-sdk 0.5.0 → 0.7.1

package/dist/esm/client.js

@@ -7,172 +7,111 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
+import { WebSocket } from 'ws';
+import { abortable, ApiError, checkSignal } from './lifecycle';
+import { AgentsUserClient } from './client-core';
 import { Configuration } from './runtime';
-import { ChatApi, ConfigurationApi, ConversationsApi, EventsApi, FilesApi, InteractionsApi, KnowledgeApi, MessagesApi, SQLApi, WorkspaceApi } from './apis';
 import { createSignedFetch } from './hmac';
-import { AgentsLowLevelApis, ChatApi as BoundChatApi, ConfigurationApi as BoundConfigurationApi, ConversationsApi as BoundConversationsApi, EventsApi as BoundEventsApi, FilesApi as BoundFilesApi, InteractionsApi as BoundInteractionsApi, KnowledgeApi as BoundKnowledgeApi, MessagesApi as BoundMessagesApi, SqlApi, WorkspaceApi as BoundWorkspaceApi, } from './bound';
-/**
- * Lingya Agents SDK 入口，仅适用于可信服务端。 / Server-side Lingya Agents SDK entry point.
- *
- * 客户端保存 channel 范围的凭证，但只有 [forUser] 创建的用户客户端可以发起请求。
- */
+import { createTokenFetch } from './token';
+export * from './client-core';
+export * from './token';
+/** Channel client; options construction binds authentication and exposes API groups directly. */
 export class AgentsClient {
-    /**
-     * 创建 channel 范围的客户端。 / Creates a channel-scoped client.
-     *
-     * @param baseUrl - 服务根地址，不包含 `/api/.../chat`。 / Service root without the API path.
-     * @param channelId - OpenAPI channel ID，不得为空。 / Non-empty OpenAPI channel ID.
-     * @param credentials - 仅保存在当前服务端进程中的 HMAC 凭证。 / HMAC credentials kept in this server process.
-     */
-    constructor(baseUrl, channelId, credentials) {
-        this.baseUrl = baseUrl;
-        this.channelId = channelId;
-        this.credentials = credentials;
-        if (channelId.length === 0)
+    constructor(options, channelId, credentials) {
+        this.baseUrl = typeof options === 'string' ? options : options.baseUrl;
+        this.channelId = typeof options === 'string' ? channelId : options.channelId;
+        if (!this.channelId)
             throw new Error('channelId must not be empty');
+        if (typeof options === 'string') {
+            if (!credentials)
+                throw new Error('credentials are required');
+            this.credentials = credentials;
+        }
+        else {
+            const transport = options.auth.type === 'token'
+                ? createTokenFetch(options.auth.tokenProvider, this.channelId, options.fetch)
+                : createSignedFetch(options.auth, options.auth.externalUserId, options.fetch);
+            this.bound = this.bind(transport, options.auth.type === 'token', (url, signal, requestId) => __awaiter(this, void 0, void 0, function* () {
+                var _a;
+                const factory = (_a = options.webSocketFactory) !== null && _a !== void 0 ? _a : createNodeWebSocket;
+                if (options.auth.type === 'token') {
+                    let token;
+                    try {
+                        token = yield abortable(Promise.resolve().then(() => { var _a; return options.auth.type === 'token' ? options.auth.tokenProvider({ channelId: this.channelId, signal, fetch: (_a = options.fetch) !== null && _a !== void 0 ? _a : globalThis.fetch }) : ''; }), signal);
+                    }
+                    catch (error) {
+                        if (signal.aborted)
+                            throw error;
+                        throw new ApiError('', '', undefined, '', { kind: 'authentication' });
+                    }
+                    if (typeof token !== 'string' || !/^[!#-~]+$/.test(token))
+                        throw new ApiError('', '', undefined, '', { kind: 'authentication' });
+                    checkSignal(signal);
+                    return factory(url, { protocols: [`xlt-openapi-token.${token}`], headers: requestId ? { 'X-Request-ID': requestId } : undefined });
+                }
+                const httpUrl = url.replace(/^ws/, 'http');
+                const capture = (input) => __awaiter(this, void 0, void 0, function* () { return new Response(null, { headers: new Request(input).headers }); });
+                const response = yield createSignedFetch(options.auth, options.auth.externalUserId, capture)(httpUrl, { signal });
+                checkSignal(signal);
+                return factory(url, { protocols: [], headers: Object.assign(Object.assign({}, Object.fromEntries(response.headers.entries())), (requestId ? { 'X-Request-ID': requestId } : {})) });
+            }));
+        }
     }
-    /**
-     * 绑定外部用户身份；后续所有请求都以该身份独立签名。 / Binds one external user to all subsequent signed calls.
-     *
-     * @param externalUserId - 调用方系统的稳定用户 ID，UTF-8 编码后为 1..256 字节且不能含 NUL。
-     * @returns 注入用户身份并可调用全部契约 API 的客户端。
-     */
-    forUser(externalUserId) {
-        const signedFetch = createSignedFetch(this.credentials, externalUserId);
-        const configuration = new Configuration({ basePath: this.baseUrl.replace(/\/+$/, ''), fetchApi: signedFetch });
-        return new AgentsUserClient(this.channelId, configuration, signedFetch, this.baseUrl);
-    }
-}
-/** 已绑定外部用户的强类型 API 集合。 / Strongly typed API collection bound to one external user. */
-export class AgentsUserClient {
-    constructor(channelId, configuration, signedFetch, baseUrl) {
-        this.channelId = channelId;
-        this.signedFetch = signedFetch;
-        this.baseUrl = baseUrl;
-        const chat = new ChatApi(configuration);
-        const configurationApi = new ConfigurationApi(configuration);
-        const conversations = new ConversationsApi(configuration);
-        const events = new EventsApi(configuration);
-        const files = new FilesApi(configuration);
-        const interactions = new InteractionsApi(configuration);
-        const knowledge = new KnowledgeApi(configuration);
-        const messages = new MessagesApi(configuration);
-        const sql = new SQLApi(configuration);
-        const workspace = new WorkspaceApi(configuration);
-        this.lowLevel = new AgentsLowLevelApis(configurationApi, chat, conversations, sql, messages, events, interactions, files, knowledge, workspace);
-        const rawRequest = this.rawRequest.bind(this);
-        this.chat = new BoundChatApi(channelId, chat, rawRequest);
-        this.configuration = new BoundConfigurationApi(channelId, configurationApi);
-        this.conversations = new BoundConversationsApi(channelId, conversations);
-        this.events = new BoundEventsApi(channelId, events);
-        this.files = new BoundFilesApi(channelId, files);
-        this.interactions = new BoundInteractionsApi(channelId, interactions);
-        this.knowledge = new BoundKnowledgeApi(channelId, knowledge);
-        this.messages = new BoundMessagesApi(channelId, messages);
-        this.sql = new SqlApi(channelId, sql);
-        this.workspace = new BoundWorkspaceApi(channelId, workspace);
-    }
-    /**
-     * 调用契约端点并按指定类型返回 JSON；优先使用上方生成的强类型 API。 / Calls a contract endpoint and decodes typed JSON.
-     *
-     * @param method - 大写 HTTP method。
-     * @param suffix - 相对于 channel chat 根路径的已编码路径。
-     * @param bodyJson - 最终发送并参与签名的 UTF-8 JSON 字符串；无请求体时省略。
-     * @param query - 已按最终顺序组装的查询参数，允许重复键。
-     * @returns 调用方指定的响应类型。
-     * @throws [ApiError] 当服务端返回非 2xx 状态。
-     */
-    /** @deprecated 使用对应的业务分组方法。 / Use the matching grouped facade operation. */
-    request(method, suffix, bodyJson, query) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const response = yield this.rawRequest(method, suffix, bodyJson, query, 'application/json');
-            return yield response.json();
-        });
-    }
-    /**
-     * 调用无响应正文的契约端点。 / Calls a contract endpoint that has no response body.
-     *
-     * @param method - 大写 HTTP method。
-     * @param suffix - 相对于 channel chat 根路径的已编码路径。
-     * @param bodyJson - 最终发送并参与签名的 UTF-8 JSON 字符串。
-     * @param query - 保留顺序的查询参数。
-     * @returns 2xx HTTP 状态码。
-     */
-    /** @deprecated 使用对应的业务分组方法。 / Use the matching grouped facade operation. */
-    requestStatus(method, suffix, bodyJson, query) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return (yield this.rawRequest(method, suffix, bodyJson, query, 'application/json')).status;
-        });
-    }
-    /**
-     * 下载二进制响应，返回精确响应字节。 / Downloads an exact binary response.
-     *
-     * @param method - HTTP method，通常为 `GET`。
-     * @param suffix - 已编码的相对路径。
-     * @param query - 保留顺序的查询参数。
-     * @returns 未经文本转换的响应字节。
-     */
-    /** @deprecated 使用对应的业务分组方法。 / Use the matching grouped facade operation. */
-    requestBinary(method, suffix, query) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const response = yield this.rawRequest(method, suffix, undefined, query, 'application/octet-stream');
-            return new Uint8Array(yield response.arrayBuffer());
-        });
+    bind(transport, tokenAuth = false, connector) {
+        return new AgentsUserClient(this.channelId, new Configuration({
+            basePath: this.baseUrl.replace(/\/+$/, ''), fetchApi: transport,
+        }), transport, this.baseUrl, tokenAuth, connector);
     }
-    /**
-     * 订阅对话 SSE，事件按契约判别联合返回。 / Streams SSE as the contract discriminated union.
-     *
-     * @param conversationId - 要订阅的会话 ID。
-     * @param messageId - 触发本次生成的消息 ID。
-     * @returns 支持取消的异步事件序列；未知 type 保留 `rawJson`。
-     */
-    /** @deprecated 使用 `chat.streamChatEvents(conversationId, { messageId })`。 / Use the channel-bound chat facade. */
-    streamChatEvents(conversationId, messageId) {
-        return this.chat.streamChatEvents(conversationId, { messageId });
-    }
-    /**
-     * 发送底层受控请求；调用前固定最终 path、query、Content-Type 与 body 字节。 / Sends an exactly signed low-level request.
-     *
-     * 每次调用重新生成 timestamp 与 nonce，不对写请求自动重试。
-     *
-     * @param method - HTTP method。
-     * @param suffix - 已完成路径转义的相对路径；本方法不会二次编码。
-     * @param bodyJson - 最终 JSON 字符串，最大 2 MiB；省略时 Content-Type 为空。
-     * @param query - 最终查询参数；顺序和重复键均参与签名。
-     * @param accept - 精确的 Accept 值，例如 `application/json`、`text/event-stream` 或 `text/csv`。
-     * @returns 成功的原始 Fetch Response。
-     * @throws [ApiError] 当服务端返回非 2xx 状态。
-     */
-    /** @deprecated 使用 `lowLevel`，或使用对应的业务分组方法。 / Use `lowLevel` or a grouped facade operation. */
-    rawRequest(method_1, suffix_1, bodyJson_1, query_1) {
-        return __awaiter(this, arguments, void 0, function* (method, suffix, bodyJson, query, accept = 'application/json', requestId) {
-            const root = `${this.baseUrl.replace(/\/+$/, '')}/api/agents/channel/openapi/v1/${encodeURIComponent(this.channelId)}/chat`;
-            const url = `${root}${suffix}${query === undefined || query.size === 0 ? '' : `?${query.toString()}`}`;
-            const response = yield this.signedFetch(url, {
-                method,
-                headers: Object.assign(Object.assign({ Accept: accept }, (bodyJson === undefined ? {} : { 'Content-Type': 'application/json' })), (requestId === undefined ? {} : { 'X-Request-ID': requestId })),
-                body: bodyJson,
-            });
-            if (!response.ok)
-                throw new ApiError(method, suffix, response.status, yield response.text());
-            return response;
-        });
+    forUser(externalUserId) {
+        if (!this.credentials)
+            throw new Error('Options clients already bind identity; create a new client to switch users');
+        return new AgentsClient({ baseUrl: this.baseUrl, channelId: this.channelId, auth: Object.assign(Object.assign({ type: 'hmac' }, this.credentials), { externalUserId }) }).user;
     }
-}
-/** 不含凭证的 HTTP 错误。 / HTTP failure that never includes credentials. */
-export class ApiError extends Error {
-    constructor(method, path, status, responseBody) {
-        super(`${method} ${path} returned HTTP ${status}`);
-        this.method = method;
-        this.path = path;
-        this.status = status;
-        this.responseBody = responseBody;
-        this.name = 'ApiError';
+    get user() {
+        if (!this.bound)
+            throw new Error('Call forUser before using a legacy channel client');
+        return this.bound;
     }
+    get chat() { return this.user.chat; }
+    get configuration() { return this.user.configuration; }
+    get conversations() { return this.user.conversations; }
+    get events() { return this.user.events; }
+    get files() { return this.user.files; }
+    get interactions() { return this.user.interactions; }
+    get knowledge() { return this.user.knowledge; }
+    get messages() { return this.user.messages; }
+    get sql() { return this.user.sql; }
+    get workspace() { return this.user.workspace; }
+    get lowLevel() { return this.user.lowLevel; }
 }
-/** @deprecated Use [AgentsClient]. */
 export { AgentsClient as LingyaAgentsClient };
-/** @deprecated Use [AgentsUserClient]. */
-export { AgentsUserClient as LingyaAgentsUserClient };
-/** @deprecated Use [ApiError]. */
-export { ApiError as LingyaApiError };
+function createNodeWebSocket(address, init) {
+    const socket = new WebSocket(address, init.protocols, { headers: init.headers });
+    const result = socket;
+    // ws is an EventEmitter: termination while connecting must also have an error listener.
+    socket.on('error', () => undefined);
+    socket.on('upgrade', response => {
+        const id = response.headers['x-request-id'];
+        if (typeof id === 'string')
+            result.serverRequestId = id;
+    });
+    socket.on('unexpected-response', (_request, response) => {
+        const chunks = [];
+        let size = 0;
+        response.on('data', chunk => {
+            const bytes = Buffer.from(chunk);
+            if (size < 65536)
+                chunks.push(bytes.subarray(0, 65536 - size));
+            size += bytes.length;
+        });
+        const fail = () => {
+            const id = response.headers['x-request-id'];
+            result.handshakeError = new ApiError('GET', '/stream/ws', response.statusCode, Buffer.concat(chunks).toString('utf8'), { kind: 'http', requestId: typeof id === 'string' ? id : undefined });
+            socket.terminate();
+        };
+        response.once('end', fail);
+        response.once('error', fail);
+        socket.once('close', () => response.destroy());
+    });
+    return result;
+}

package/dist/esm/events.js

@@ -1,6 +1,6 @@
 const knownEventTypes = new Set([
     'user-query', 'compressor-context-start', 'compressor-context-end', 'compactor-warning', 'manual-interrupt',
-    'error', 'start', 'think', 'chat-client-request', 'chat-client-response', 'message', 'tool-execution',
+    'error', 'start', 'think', 'message', 'tool-execution',
     'tool-execution-sub-agent-call', 'tool-execution-awaiting-user-input', 'end',
 ]);
 const knownToolCategories = new Set([

package/dist/esm/hmac.d.ts

@@ -14,7 +14,7 @@ export interface OpenApiCredentials {
  * @param externalUserId - UTF-8 编码后为 1..256 字节且不含 NUL 的外部用户 ID。
  * @returns 与原生 fetch 兼容的签名 transport。
  */
-export declare function createSignedFetch(credentials: OpenApiCredentials, externalUserId: string): typeof fetch;
+export declare function createSignedFetch(credentials: OpenApiCredentials, externalUserId: string, network?: typeof fetch): typeof fetch;
 /**
  * 对固定 canonical string 计算 HMAC。 / Computes HMAC for a fixed canonical string.
  *

package/dist/esm/hmac.js

@@ -7,6 +7,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
+import { fetchResponse } from './lifecycle';
 import { createHash, createHmac, randomBytes } from 'node:crypto';
 /**
  * 构造已签名 fetch；每次调用都会重新生成 timestamp、nonce 和签名。 / Creates a fetch that signs every attempt independently.
@@ -17,7 +18,7 @@ import { createHash, createHmac, randomBytes } from 'node:crypto';
  * @param externalUserId - UTF-8 编码后为 1..256 字节且不含 NUL 的外部用户 ID。
  * @returns 与原生 fetch 兼容的签名 transport。
  */
-export function createSignedFetch(credentials, externalUserId) {
+export function createSignedFetch(credentials, externalUserId, network = globalThis.fetch) {
     const userBytes = Buffer.from(externalUserId, 'utf8');
     if (userBytes.length < 1 || userBytes.length > 256 || userBytes.includes(0)) {
         throw new Error('externalUserId must contain 1 to 256 UTF-8 bytes and no NUL');
@@ -48,7 +49,7 @@ export function createSignedFetch(credentials, externalUserId) {
         headers.set('X-OpenAPI-Nonce', nonce);
         headers.set('X-OpenAPI-User', encodedUser);
         headers.set('X-OpenAPI-Signature', createHmac('sha256', credentials.secretKey).update(canonical).digest('hex'));
-        return fetch(new Request(request, { headers }));
+        return fetchResponse(network, new Request(request, { headers, redirect: 'error' }));
     });
 }
 /**

package/dist/esm/lifecycle.d.ts

@@ -0,0 +1,55 @@
+export type ErrorKind = 'http' | 'network' | 'authentication' | 'protocol' | 'cancelled' | 'timeout' | 'unexpected_eof';
+export interface RequestOptions {
+    signal?: AbortSignal;
+    timeoutMs?: number;
+}
+export interface ErrorDetails {
+    kind?: ErrorKind;
+    code?: string;
+    fields?: Array<{
+        field: string;
+        message: string;
+    }>;
+    requestId?: string;
+    cause?: unknown;
+}
+export declare class ApiError extends Error {
+    readonly method: string;
+    readonly path: string;
+    readonly status: number | undefined;
+    readonly responseBody: string;
+    readonly kind: ErrorKind;
+    readonly code?: string;
+    readonly fields?: Array<{
+        field: string;
+        message: string;
+    }>;
+    readonly requestId?: string;
+    readonly cause?: unknown;
+    constructor(method: string, path: string, status: number | undefined, responseBody?: string, details?: ErrorDetails);
+}
+export declare function abortError(signal: AbortSignal): ApiError;
+export declare function checkSignal(signal?: AbortSignal): void;
+export declare function abortable<T>(promise: PromiseLike<T>, signal?: AbortSignal): Promise<T>;
+export declare class RequestScope {
+    private readonly options;
+    readonly controller: AbortController;
+    readonly signal: AbortSignal;
+    private timer?;
+    private readonly abort;
+    constructor(options?: RequestOptions);
+    dispose(): void;
+}
+export declare function normalizeError(error: unknown, signal?: AbortSignal): Promise<ApiError>;
+export declare function execute<T>(options: RequestOptions, operation: (signal: AbortSignal) => Promise<T>): Promise<T>;
+export interface DownloadResponse {
+    bytes: Uint8Array;
+    filename?: string;
+    contentType?: string;
+    headers: Headers;
+    status: number;
+    requestId?: string;
+}
+export declare function downloadResponse(response: Response): Promise<DownloadResponse>;
+/** Enforce cancellation even when an injected Fetch ignores its signal. */
+export declare function fetchResponse(network: typeof fetch, request: Request): Promise<Response>;

package/dist/esm/lifecycle.js

@@ -0,0 +1,163 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+export class ApiError extends Error {
+    constructor(method, path, status, responseBody = '', details = {}) {
+        var _a, _b, _c, _d;
+        let parsed = {};
+        try {
+            parsed = JSON.parse(responseBody);
+        }
+        catch ( /* Preserve non-JSON bodies. */_e) { /* Preserve non-JSON bodies. */ }
+        super(typeof (parsed === null || parsed === void 0 ? void 0 : parsed.message) === 'string' ? parsed.message : `${method} ${path} ${status === undefined ? (_a = details.kind) !== null && _a !== void 0 ? _a : 'failed' : `returned HTTP ${status}`}`);
+        this.method = method;
+        this.path = path;
+        this.status = status;
+        this.responseBody = responseBody;
+        this.name = 'ApiError';
+        this.kind = (_b = details.kind) !== null && _b !== void 0 ? _b : (status === undefined ? 'network' : 'http');
+        this.code = (_c = details.code) !== null && _c !== void 0 ? _c : (typeof (parsed === null || parsed === void 0 ? void 0 : parsed.code) === 'string' ? parsed.code : undefined);
+        this.fields = (_d = details.fields) !== null && _d !== void 0 ? _d : (Array.isArray(parsed === null || parsed === void 0 ? void 0 : parsed.fields) ? parsed.fields.filter((v) => typeof (v === null || v === void 0 ? void 0 : v.field) === 'string' && typeof (v === null || v === void 0 ? void 0 : v.message) === 'string') : undefined);
+        this.requestId = details.requestId;
+        this.cause = details.cause;
+    }
+}
+export function abortError(signal) {
+    return signal.reason instanceof ApiError ? signal.reason : new ApiError('', '', undefined, '', { kind: 'cancelled' });
+}
+export function checkSignal(signal) { if (signal === null || signal === void 0 ? void 0 : signal.aborted)
+    throw abortError(signal); }
+export function abortable(promise, signal) {
+    checkSignal(signal);
+    if (!signal)
+        return Promise.resolve(promise);
+    return new Promise((resolve, reject) => {
+        const aborted = () => { signal.removeEventListener('abort', aborted); reject(abortError(signal)); };
+        signal.addEventListener('abort', aborted, { once: true });
+        Promise.resolve(promise).then(value => { signal.removeEventListener('abort', aborted); resolve(value); }, error => { signal.removeEventListener('abort', aborted); reject(error); });
+    });
+}
+export class RequestScope {
+    constructor(options = {}) {
+        var _a, _b;
+        this.options = options;
+        this.controller = new AbortController();
+        this.signal = this.controller.signal;
+        if (options.timeoutMs !== undefined && (!Number.isFinite(options.timeoutMs) || options.timeoutMs <= 0))
+            throw new RangeError('timeoutMs must be positive');
+        this.abort = () => { var _a; return this.controller.abort(((_a = options.signal) === null || _a === void 0 ? void 0 : _a.reason) instanceof ApiError ? options.signal.reason : new ApiError('', '', undefined, '', { kind: 'cancelled' })); };
+        (_a = options.signal) === null || _a === void 0 ? void 0 : _a.addEventListener('abort', this.abort, { once: true });
+        if ((_b = options.signal) === null || _b === void 0 ? void 0 : _b.aborted)
+            this.abort();
+        if (options.timeoutMs !== undefined)
+            this.timer = setTimeout(() => this.controller.abort(new ApiError('', '', undefined, '', { kind: 'timeout' })), options.timeoutMs);
+    }
+    dispose() { var _a; clearTimeout(this.timer); (_a = this.options.signal) === null || _a === void 0 ? void 0 : _a.removeEventListener('abort', this.abort); }
+}
+export function normalizeError(error, signal) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        if (signal === null || signal === void 0 ? void 0 : signal.aborted)
+            return abortError(signal);
+        if (error instanceof ApiError)
+            return error;
+        const response = error === null || error === void 0 ? void 0 : error.response;
+        if (response)
+            return new ApiError('', '', response.status, (yield response.text()).slice(0, 65536), { requestId: (_a = response.headers.get('X-Request-ID')) !== null && _a !== void 0 ? _a : undefined });
+        return new ApiError('', '', undefined, '', { kind: error instanceof SyntaxError ? 'protocol' : 'network', cause: error });
+    });
+}
+export function execute(options, operation) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const scope = new RequestScope(options);
+        try {
+            checkSignal(scope.signal);
+            return yield abortable(operation(scope.signal), scope.signal);
+        }
+        catch (error) {
+            throw yield normalizeError(error, scope.signal);
+        }
+        finally {
+            scope.dispose();
+        }
+    });
+}
+export function downloadResponse(response) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c, _d, _e, _f, _g;
+        const disposition = (_a = response.headers.get('Content-Disposition')) !== null && _a !== void 0 ? _a : '';
+        let filename = (_c = (_b = /filename="([^"]*)"/i.exec(disposition)) === null || _b === void 0 ? void 0 : _b[1]) !== null && _c !== void 0 ? _c : (_d = /filename=([^;\s]+)/i.exec(disposition)) === null || _d === void 0 ? void 0 : _d[1];
+        const encoded = (_e = /filename\*=UTF-8''([^;]+)/i.exec(disposition)) === null || _e === void 0 ? void 0 : _e[1];
+        if (encoded) {
+            try {
+                filename = decodeURIComponent(encoded);
+            }
+            catch ( /* Use fallback. */_h) { /* Use fallback. */ }
+        }
+        return { bytes: new Uint8Array(yield response.arrayBuffer()), filename, contentType: (_f = response.headers.get('Content-Type')) !== null && _f !== void 0 ? _f : undefined,
+            headers: response.headers, status: response.status, requestId: (_g = response.headers.get('X-Request-ID')) !== null && _g !== void 0 ? _g : undefined };
+    });
+}
+/** Enforce cancellation even when an injected Fetch ignores its signal. */
+export function fetchResponse(network, request) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        checkSignal(request.signal);
+        const response = yield network(request);
+        if (request.signal.aborted) {
+            yield ((_a = response.body) === null || _a === void 0 ? void 0 : _a.cancel().catch(() => undefined));
+            throw abortError(request.signal);
+        }
+        if (!response.body)
+            return response;
+        const reader = response.body.getReader();
+        let controller;
+        let finished = false;
+        const cleanup = () => { finished = true; request.signal.removeEventListener('abort', abort); };
+        const abort = () => {
+            if (finished)
+                return;
+            cleanup();
+            void reader.cancel().catch(() => undefined);
+            controller.error(abortError(request.signal));
+        };
+        const body = new ReadableStream({
+            start(value) { controller = value; request.signal.addEventListener('abort', abort, { once: true }); if (request.signal.aborted)
+                abort(); },
+            pull(value) {
+                return __awaiter(this, void 0, void 0, function* () {
+                    try {
+                        const chunk = yield reader.read();
+                        if (finished)
+                            return;
+                        if (chunk.done) {
+                            cleanup();
+                            value.close();
+                            reader.releaseLock();
+                        }
+                        else
+                            value.enqueue(chunk.value);
+                    }
+                    catch (error) {
+                        if (!finished) {
+                            cleanup();
+                            value.error(error);
+                        }
+                    }
+                });
+            },
+            cancel(reason) {
+                return __awaiter(this, void 0, void 0, function* () { cleanup(); yield reader.cancel(reason); reader.releaseLock(); });
+            },
+        });
+        const wrapped = new Response(body, { status: response.status, statusText: response.statusText, headers: response.headers });
+        Object.defineProperties(wrapped, { url: { value: response.url }, redirected: { value: response.redirected }, type: { value: response.type } });
+        return wrapped;
+    });
+}

package/dist/esm/models/AgentAsyncTaskSync.d.ts

@@ -1,8 +1,8 @@
 /**
  * Lingya Agents OpenAPI
- * 本契约描述灵涯 Agents 面向可信服务端的公开渠道 API，使用 OPENAPI-HMAC-SHA256-V1 验证请求，不包含 Studio 管理接口。在线文档只展示请求，不会在浏览器中收集或保存 secret。  This contract describes the public Lingya Agents channel API for trusted servers. Requests use OPENAPI-HMAC-SHA256-V1, and Studio administration endpoints are excluded. The online reference only displays requests and never collects or stores a secret in the browser.  ## 快速开始 / Quick start  1. 读取 Configuration，确认模型和附件限制。 / Read Configuration to discover model and attachment limits.  2. 在本地固定最终 method、raw path、raw query、Content-Type 和 body 字节，再生成签名。 / Finalize method, raw path, raw query, Content-Type, and body bytes locally before signing.  3. 按业务分组调用接口；SSE 断开后使用 Events 补取。 / Call the appropriate business group and use Events for recovery after an SSE disconnect.  ## 公共错误 / Common errors  `401` 签名、时间戳或 nonce 无效；`403` 资源不属于当前渠道用户；`413` 请求体过大；`422` 参数校验失败；`429` 请求过于频繁；`500` 服务内部错误；`503` 依赖或执行服务暂不可用。  `401` invalid signature, timestamp, or nonce; `403` resource not owned by the current channel user; `413` request body too large; `422` validation failed; `429` rate limited; `500` internal error; `503` dependency or execution service unavailable.
+ * Public Lingya Agents channel API. HMAC credentials belong on trusted servers; client tokens are single-use.
  *
- * The version of the OpenAPI document: 0.1.5
+ * The version of the OpenAPI document: 0.1.7
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/models/AgentAsyncTaskSync.js

@@ -2,9 +2,9 @@
 /* eslint-disable */
 /**
  * Lingya Agents OpenAPI
- * 本契约描述灵涯 Agents 面向可信服务端的公开渠道 API，使用 OPENAPI-HMAC-SHA256-V1 验证请求，不包含 Studio 管理接口。在线文档只展示请求，不会在浏览器中收集或保存 secret。  This contract describes the public Lingya Agents channel API for trusted servers. Requests use OPENAPI-HMAC-SHA256-V1, and Studio administration endpoints are excluded. The online reference only displays requests and never collects or stores a secret in the browser.  ## 快速开始 / Quick start  1. 读取 Configuration，确认模型和附件限制。 / Read Configuration to discover model and attachment limits.  2. 在本地固定最终 method、raw path、raw query、Content-Type 和 body 字节，再生成签名。 / Finalize method, raw path, raw query, Content-Type, and body bytes locally before signing.  3. 按业务分组调用接口；SSE 断开后使用 Events 补取。 / Call the appropriate business group and use Events for recovery after an SSE disconnect.  ## 公共错误 / Common errors  `401` 签名、时间戳或 nonce 无效；`403` 资源不属于当前渠道用户；`413` 请求体过大；`422` 参数校验失败；`429` 请求过于频繁；`500` 服务内部错误；`503` 依赖或执行服务暂不可用。  `401` invalid signature, timestamp, or nonce; `403` resource not owned by the current channel user; `413` request body too large; `422` validation failed; `429` rate limited; `500` internal error; `503` dependency or execution service unavailable.
+ * Public Lingya Agents channel API. HMAC credentials belong on trusted servers; client tokens are single-use.
  *
- * The version of the OpenAPI document: 0.1.5
+ * The version of the OpenAPI document: 0.1.7
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/models/AgentFile.d.ts

@@ -1,8 +1,8 @@
 /**
  * Lingya Agents OpenAPI
- * 本契约描述灵涯 Agents 面向可信服务端的公开渠道 API，使用 OPENAPI-HMAC-SHA256-V1 验证请求，不包含 Studio 管理接口。在线文档只展示请求，不会在浏览器中收集或保存 secret。  This contract describes the public Lingya Agents channel API for trusted servers. Requests use OPENAPI-HMAC-SHA256-V1, and Studio administration endpoints are excluded. The online reference only displays requests and never collects or stores a secret in the browser.  ## 快速开始 / Quick start  1. 读取 Configuration，确认模型和附件限制。 / Read Configuration to discover model and attachment limits.  2. 在本地固定最终 method、raw path、raw query、Content-Type 和 body 字节，再生成签名。 / Finalize method, raw path, raw query, Content-Type, and body bytes locally before signing.  3. 按业务分组调用接口；SSE 断开后使用 Events 补取。 / Call the appropriate business group and use Events for recovery after an SSE disconnect.  ## 公共错误 / Common errors  `401` 签名、时间戳或 nonce 无效；`403` 资源不属于当前渠道用户；`413` 请求体过大；`422` 参数校验失败；`429` 请求过于频繁；`500` 服务内部错误；`503` 依赖或执行服务暂不可用。  `401` invalid signature, timestamp, or nonce; `403` resource not owned by the current channel user; `413` request body too large; `422` validation failed; `429` rate limited; `500` internal error; `503` dependency or execution service unavailable.
+ * Public Lingya Agents channel API. HMAC credentials belong on trusted servers; client tokens are single-use.
  *
- * The version of the OpenAPI document: 0.1.5
+ * The version of the OpenAPI document: 0.1.7
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/esm/models/AgentFile.js

@@ -2,9 +2,9 @@
 /* eslint-disable */
 /**
  * Lingya Agents OpenAPI
- * 本契约描述灵涯 Agents 面向可信服务端的公开渠道 API，使用 OPENAPI-HMAC-SHA256-V1 验证请求，不包含 Studio 管理接口。在线文档只展示请求，不会在浏览器中收集或保存 secret。  This contract describes the public Lingya Agents channel API for trusted servers. Requests use OPENAPI-HMAC-SHA256-V1, and Studio administration endpoints are excluded. The online reference only displays requests and never collects or stores a secret in the browser.  ## 快速开始 / Quick start  1. 读取 Configuration，确认模型和附件限制。 / Read Configuration to discover model and attachment limits.  2. 在本地固定最终 method、raw path、raw query、Content-Type 和 body 字节，再生成签名。 / Finalize method, raw path, raw query, Content-Type, and body bytes locally before signing.  3. 按业务分组调用接口；SSE 断开后使用 Events 补取。 / Call the appropriate business group and use Events for recovery after an SSE disconnect.  ## 公共错误 / Common errors  `401` 签名、时间戳或 nonce 无效；`403` 资源不属于当前渠道用户；`413` 请求体过大；`422` 参数校验失败；`429` 请求过于频繁；`500` 服务内部错误；`503` 依赖或执行服务暂不可用。  `401` invalid signature, timestamp, or nonce; `403` resource not owned by the current channel user; `413` request body too large; `422` validation failed; `429` rate limited; `500` internal error; `503` dependency or execution service unavailable.
+ * Public Lingya Agents channel API. HMAC credentials belong on trusted servers; client tokens are single-use.
  *
- * The version of the OpenAPI document: 0.1.5
+ * The version of the OpenAPI document: 0.1.7
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).