@native-knowledge/knowledge-sdk 0.0.0-stage → 0.1.0-rc.1

package/dist/types/contracts/tenant-source-bridge.d.ts

@@ -0,0 +1,70 @@
+/** 显式桥接预检确认获取语义；该请求不授予启停或修改工作归属的权限。 */
+import { z } from 'zod';
+export declare const tenantSourceBridgePreviewInputSchema: z.ZodObject<{
+    projectKey: z.ZodString;
+    legacySourceId: z.ZodString;
+    expectedLegacyRevisionRef: z.ZodString;
+    nativeSourceId: z.ZodString;
+    expectedNativeRevisionRef: z.ZodString;
+    confirmAcquisitionSemantics: z.ZodObject<{
+        target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"URL">;
+            locator: z.ZodURL;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"FILE">;
+            rootBinding: z.ZodString;
+            relativePath: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"EXECUTOR">;
+            executorId: z.ZodString;
+            bindingRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            parameters: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>]>>>;
+        }, z.core.$strict>], "kind">;
+        credential: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"PUBLIC">;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"BOUND">;
+            bindingRef: z.ZodString;
+            revision: z.ZodString;
+        }, z.core.$strict>], "type">;
+        executionBinding: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+            bindingRef: z.ZodString;
+            revision: z.ZodString;
+        }, z.core.$strict>>>;
+        access: z.ZodEnum<{
+            PUBLIC: "PUBLIC";
+            PUBLIC_METADATA: "PUBLIC_METADATA";
+            TENANT: "TENANT";
+            INTERNAL: "INTERNAL";
+            FDE_INTERNAL: "FDE_INTERNAL";
+            ACCESS_CONTROLLED: "ACCESS_CONTROLLED";
+            UNKNOWN: "UNKNOWN";
+        }>;
+        sourcePolicy: z.ZodObject<{
+            ref: z.ZodString;
+            revision: z.ZodString;
+            acquisition: z.ZodEnum<{
+                ALLOW: "ALLOW";
+                DENY: "DENY";
+            }>;
+            propagation: z.ZodEnum<{
+                TENANT_ONLY: "TENANT_ONLY";
+                SHARE_ALLOWED: "SHARE_ALLOWED";
+                PUBLIC_ALLOWED: "PUBLIC_ALLOWED";
+            }>;
+        }, z.core.$strict>;
+        region: z.ZodNullable<z.ZodString>;
+        representation: z.ZodObject<{
+            format: z.ZodEnum<{
+                RICH_DOCUMENT_V1: "RICH_DOCUMENT_V1";
+                RAW: "RAW";
+            }>;
+            extractor: z.ZodNullable<z.ZodObject<{
+                id: z.ZodString;
+                version: z.ZodString;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    maxResourceBytes: z.ZodNumber;
+}, z.core.$strict>;
+export type TenantSourceBridgePreviewInput = z.infer<typeof tenantSourceBridgePreviewInputSchema>;

package/dist/types/contracts/tenant-source-cutover.d.ts

@@ -0,0 +1,226 @@
+/** Host 维护切换的冻结事实；不从回执推断真实进程已退出。 */
+import { z } from 'zod';
+export declare const SOURCE_CUTOVER_FENCE_CAPABILITY: "SOURCE_CUTOVER_FENCE_V1";
+export declare const sourceCutoverIdSchema: z.ZodString;
+export declare const sourceCutoverKey: (id: string) => string;
+export declare const sourceCutoverRef: (tenantId: string, id: string) => string;
+export declare const sourceCutoverIntentSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    cutoverId: z.ZodString;
+    cutoverRef: z.ZodString;
+    tenantId: z.ZodString;
+    actor: z.ZodObject<{
+        tenantId: z.ZodString;
+        userId: z.ZodString;
+        agentId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strict>;
+    createdAt: z.ZodISODateTime;
+    legacySource: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        projectKey: z.ZodString;
+        actor: z.ZodObject<{
+            tenantId: z.ZodString;
+            userId: z.ZodString;
+            agentId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strict>;
+        target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"URL">;
+            locator: z.ZodURL;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"FILE">;
+            rootBinding: z.ZodString;
+            relativePath: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"EXECUTOR">;
+            executorId: z.ZodString;
+            bindingRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            parameters: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>]>>>;
+        }, z.core.$strict>], "kind">;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        access: z.ZodDefault<z.ZodEnum<{
+            PUBLIC: "PUBLIC";
+            PUBLIC_METADATA: "PUBLIC_METADATA";
+            TENANT: "TENANT";
+            INTERNAL: "INTERNAL";
+            FDE_INTERNAL: "FDE_INTERNAL";
+            ACCESS_CONTROLLED: "ACCESS_CONTROLLED";
+            UNKNOWN: "UNKNOWN";
+        }>>;
+        scopeIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        sourceFamilies: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        purpose: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        refresh: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            mode: z.ZodLiteral<"MANUAL">;
+        }, z.core.$strict>, z.ZodObject<{
+            mode: z.ZodLiteral<"INTERVAL">;
+            intervalSeconds: z.ZodNumber;
+        }, z.core.$strict>], "mode">>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+        projectRef: z.ZodString;
+        projectIntentRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        targetId: z.ZodString;
+        sourceId: z.ZodString;
+        revisionId: z.ZodString;
+        sourceRef: z.ZodString;
+        revisionRef: z.ZodString;
+    }, z.core.$strict>;
+    plan: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        tenantId: z.ZodString;
+        source: z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            tenantId: z.ZodString;
+            sourceId: z.ZodString;
+            title: z.ZodString;
+            semantics: z.ZodObject<{
+                target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"URL">;
+                    locator: z.ZodURL;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"FILE">;
+                    rootBinding: z.ZodString;
+                    relativePath: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"EXECUTOR">;
+                    executorId: z.ZodString;
+                    bindingRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                    parameters: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>]>>>;
+                }, z.core.$strict>], "kind">;
+                credential: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"PUBLIC">;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"BOUND">;
+                    bindingRef: z.ZodString;
+                    revision: z.ZodString;
+                }, z.core.$strict>], "type">;
+                executionBinding: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+                    bindingRef: z.ZodString;
+                    revision: z.ZodString;
+                }, z.core.$strict>>>;
+                access: z.ZodEnum<{
+                    PUBLIC: "PUBLIC";
+                    PUBLIC_METADATA: "PUBLIC_METADATA";
+                    TENANT: "TENANT";
+                    INTERNAL: "INTERNAL";
+                    FDE_INTERNAL: "FDE_INTERNAL";
+                    ACCESS_CONTROLLED: "ACCESS_CONTROLLED";
+                    UNKNOWN: "UNKNOWN";
+                }>;
+                sourcePolicy: z.ZodObject<{
+                    ref: z.ZodString;
+                    revision: z.ZodString;
+                    acquisition: z.ZodEnum<{
+                        ALLOW: "ALLOW";
+                        DENY: "DENY";
+                    }>;
+                    propagation: z.ZodEnum<{
+                        TENANT_ONLY: "TENANT_ONLY";
+                        SHARE_ALLOWED: "SHARE_ALLOWED";
+                        PUBLIC_ALLOWED: "PUBLIC_ALLOWED";
+                    }>;
+                }, z.core.$strict>;
+                region: z.ZodNullable<z.ZodString>;
+                representation: z.ZodObject<{
+                    format: z.ZodEnum<{
+                        RICH_DOCUMENT_V1: "RICH_DOCUMENT_V1";
+                        RAW: "RAW";
+                    }>;
+                    extractor: z.ZodNullable<z.ZodObject<{
+                        id: z.ZodString;
+                        version: z.ZodString;
+                    }, z.core.$strict>>;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            sourceRef: z.ZodString;
+            revision: z.ZodString;
+            revisionRef: z.ZodString;
+            semanticKey: z.ZodString;
+            targetId: z.ZodString;
+        }, z.core.$strict>;
+        maxResourceBytes: z.ZodNumber;
+        revision: z.ZodString;
+        planRef: z.ZodString;
+        workloadId: z.ZodString;
+    }, z.core.$strict>;
+    existingBinding: z.ZodNullable<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        tenantId: z.ZodString;
+        projectKey: z.ZodString;
+        sourceId: z.ZodString;
+        revisionRef: z.ZodString;
+        generation: z.ZodNumber;
+        purpose: z.ZodString;
+        refresh: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            mode: z.ZodLiteral<"MANUAL">;
+        }, z.core.$strict>, z.ZodObject<{
+            mode: z.ZodLiteral<"INTERVAL">;
+            intervalSeconds: z.ZodNumber;
+        }, z.core.$strict>], "mode">;
+        enabled: z.ZodBoolean;
+        demandContext: z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            projectIntentRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            scopeIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            sourceFamilies: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            attentionNotes: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strict>;
+        origin: z.ZodEnum<{
+            MIGRATED_V13: "MIGRATED_V13";
+            EXPLICIT_V14: "EXPLICIT_V14";
+        }>;
+        actor: z.ZodNullable<z.ZodObject<{
+            tenantId: z.ZodString;
+            userId: z.ZodString;
+            agentId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strict>>;
+        changedAt: z.ZodNullable<z.ZodISODateTime>;
+    }, z.core.$strict>>;
+    demandContext: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        projectIntentRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        scopeIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        sourceFamilies: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        attentionNotes: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const sourceCutoverStepNameSchema: z.ZodEnum<{
+    LEGACY_STOPPED: "LEGACY_STOPPED";
+    DRAINED: "DRAINED";
+    ACTIVATED: "ACTIVATED";
+    NATIVE_STOPPED: "NATIVE_STOPPED";
+    NATIVE_DRAINED: "NATIVE_DRAINED";
+    RESTORE_AUTHORIZED: "RESTORE_AUTHORIZED";
+    LEGACY_RESTORED: "LEGACY_RESTORED";
+    ROLLED_BACK: "ROLLED_BACK";
+}>;
+export declare const sourceCutoverStepSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    cutoverRef: z.ZodString;
+    step: z.ZodEnum<{
+        LEGACY_STOPPED: "LEGACY_STOPPED";
+        DRAINED: "DRAINED";
+        ACTIVATED: "ACTIVATED";
+        NATIVE_STOPPED: "NATIVE_STOPPED";
+        NATIVE_DRAINED: "NATIVE_DRAINED";
+        RESTORE_AUTHORIZED: "RESTORE_AUTHORIZED";
+        LEGACY_RESTORED: "LEGACY_RESTORED";
+        ROLLED_BACK: "ROLLED_BACK";
+    }>;
+    actor: z.ZodObject<{
+        tenantId: z.ZodString;
+        userId: z.ZodString;
+        agentId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strict>;
+    at: z.ZodISODateTime;
+    details: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>;
+}, z.core.$strict>;
+export type SourceCutoverIntent = z.infer<typeof sourceCutoverIntentSchema>;
+export type SourceCutoverStep = z.infer<typeof sourceCutoverStepSchema>;
+export declare const sourceCutoverRuntimeProofSchema: z.ZodObject<{
+    nodeId: z.ZodString;
+    codeRevision: z.ZodString;
+    capability: z.ZodLiteral<"SOURCE_CUTOVER_FENCE_V1">;
+    unmanagedExecutions: z.ZodLiteral<"QUIESCED">;
+    observedAt: z.ZodISODateTime;
+}, z.core.$strict>;
+export type SourceCutoverRuntimeProof = z.infer<typeof sourceCutoverRuntimeProofSchema>;

package/dist/types/contracts/tenant-source-document.d.ts

@@ -0,0 +1,163 @@
+/** 原生来源投影保留抽取结构，不借用 Project 身份或知识审核状态。 */
+import { z } from 'zod';
+import { type RichDocumentBlock } from './rich-document.js';
+export declare const TENANT_SOURCE_DOCUMENT_MEDIA_TYPE = "application/vnd.knowledge-v2.tenant-source-document+json";
+export declare const tenantSourceDocumentSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    title: z.ZodNullable<z.ZodString>;
+    summary: z.ZodNullable<z.ZodString>;
+    sourceContentHash: z.ZodString;
+    language: z.ZodNullable<z.ZodString>;
+    byline: z.ZodNullable<z.ZodString>;
+    blocks: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"HEADING">;
+        level: z.ZodNumber;
+        text: z.ZodString;
+        inlines: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            text: z.ZodString;
+            href: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>>>;
+        ordinal: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"PARAGRAPH">;
+        text: z.ZodString;
+        inlines: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            text: z.ZodString;
+            href: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>>>;
+        ordinal: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"LIST_ITEM">;
+        text: z.ZodString;
+        ordered: z.ZodBoolean;
+        level: z.ZodNumber;
+        index: z.ZodNullable<z.ZodNumber>;
+        inlines: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            text: z.ZodString;
+            href: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>>>;
+        ordinal: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"QUOTE">;
+        text: z.ZodString;
+        inlines: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            text: z.ZodString;
+            href: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>>>;
+        ordinal: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"CODE">;
+        text: z.ZodString;
+        language: z.ZodNullable<z.ZodString>;
+        ordinal: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"IMAGE">;
+        alt: z.ZodNullable<z.ZodString>;
+        width: z.ZodNullable<z.ZodNumber>;
+        height: z.ZodNullable<z.ZodNumber>;
+        ordinal: z.ZodNumber;
+        sourceUrl: z.ZodString;
+        canonicalUrl: z.ZodNullable<z.ZodString>;
+        availability: z.ZodEnum<{
+            MIRRORED: "MIRRORED";
+            REMOTE_ONLY: "REMOTE_ONLY";
+            UNAVAILABLE: "UNAVAILABLE";
+        }>;
+        mediaRef: z.ZodNullable<z.ZodString>;
+        evidenceRef: z.ZodNullable<z.ZodString>;
+        contentHash: z.ZodNullable<z.ZodString>;
+        mediaType: z.ZodNullable<z.ZodString>;
+        byteLength: z.ZodNullable<z.ZodNumber>;
+        caption: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"VIDEO">;
+        title: z.ZodNullable<z.ZodString>;
+        posterUrl: z.ZodNullable<z.ZodString>;
+        posterEvidenceRef: z.ZodNullable<z.ZodString>;
+        ordinal: z.ZodNumber;
+        sourceUrl: z.ZodString;
+        canonicalUrl: z.ZodNullable<z.ZodString>;
+        availability: z.ZodEnum<{
+            MIRRORED: "MIRRORED";
+            REMOTE_ONLY: "REMOTE_ONLY";
+            UNAVAILABLE: "UNAVAILABLE";
+        }>;
+        mediaRef: z.ZodNullable<z.ZodString>;
+        evidenceRef: z.ZodNullable<z.ZodString>;
+        contentHash: z.ZodNullable<z.ZodString>;
+        mediaType: z.ZodNullable<z.ZodString>;
+        byteLength: z.ZodNullable<z.ZodNumber>;
+        caption: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"AUDIO">;
+        title: z.ZodNullable<z.ZodString>;
+        ordinal: z.ZodNumber;
+        sourceUrl: z.ZodString;
+        canonicalUrl: z.ZodNullable<z.ZodString>;
+        availability: z.ZodEnum<{
+            MIRRORED: "MIRRORED";
+            REMOTE_ONLY: "REMOTE_ONLY";
+            UNAVAILABLE: "UNAVAILABLE";
+        }>;
+        mediaRef: z.ZodNullable<z.ZodString>;
+        evidenceRef: z.ZodNullable<z.ZodString>;
+        contentHash: z.ZodNullable<z.ZodString>;
+        mediaType: z.ZodNullable<z.ZodString>;
+        byteLength: z.ZodNullable<z.ZodNumber>;
+        caption: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"EMBED">;
+        sourceUrl: z.ZodString;
+        provider: z.ZodNullable<z.ZodString>;
+        title: z.ZodNullable<z.ZodString>;
+        caption: z.ZodNullable<z.ZodString>;
+        ordinal: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"DIVIDER">;
+        ordinal: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"TABLE">;
+        rows: z.ZodArray<z.ZodObject<{
+            cells: z.ZodArray<z.ZodObject<{
+                text: z.ZodString;
+                header: z.ZodBoolean;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        ordinal: z.ZodNumber;
+    }, z.core.$strict>], "kind">>;
+    citations: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        blockOrdinal: z.ZodNumber;
+        evidenceRefs: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>>;
+    primarySourceEvidenceRef: z.ZodString;
+    mediaEvidenceRefs: z.ZodArray<z.ZodString>;
+    sourceUri: z.ZodString;
+    extractedAt: z.ZodISODateTime;
+    sourceEvidenceRefs: z.ZodArray<z.ZodString>;
+    sourceMediaType: z.ZodString;
+    sourceByteLength: z.ZodNumber;
+    publishedAt: z.ZodNullable<z.ZodISODateTime>;
+    topics: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    textContent: z.ZodString;
+    extractor: z.ZodObject<{
+        id: z.ZodString;
+        version: z.ZodString;
+    }, z.core.$strict>;
+    format: z.ZodLiteral<"TENANT_RICH_SOURCE_DOCUMENT_V1">;
+    role: z.ZodLiteral<"SOURCE_MIRROR">;
+    tenantId: z.ZodString;
+}, z.core.$strict>;
+export type TenantSourceDocument = z.infer<typeof tenantSourceDocumentSchema>;
+export type TenantRichMediaBlock = Extract<RichDocumentBlock, {
+    kind: 'IMAGE' | 'VIDEO' | 'AUDIO';
+}>;
+export declare function tenantSourceDocumentIdentity(tenantId: string, parentRef: string, documentContentHash: string): {
+    identityRef: string;
+    ref: string;
+    resourceId: string;
+};
+export declare function tenantSourceMediaIdentity(tenantId: string, parentRef: string, kind: string, url: string): {
+    identityRef: string;
+    ref: string;
+    resourceId: string;
+};

package/dist/types/contracts/tenant-source-lease.d.ts

@@ -0,0 +1 @@
+export declare function tenantSourceLeaseKey(tenantId: string, sourceId: string): string;

package/dist/types/contracts/tenant-source.d.ts

@@ -0,0 +1,223 @@
+/** 来源获取语义不包含用途、Project、调度启用或秘密；同 URL 不代表同一次获取权限。 */
+import { z } from 'zod';
+export declare const tenantSourceIdSchema: z.ZodString;
+export declare const tenantSourceCredentialSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    type: z.ZodLiteral<"PUBLIC">;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"BOUND">;
+    bindingRef: z.ZodString;
+    revision: z.ZodString;
+}, z.core.$strict>], "type">;
+/** Shared Source/configuration rule: secrets never become acquisition locator parameters. */
+export declare const isTenantSourceCredentialParameter: (key: string) => boolean;
+export declare const tenantSourceSemanticsSchema: z.ZodObject<{
+    target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"URL">;
+        locator: z.ZodURL;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"FILE">;
+        rootBinding: z.ZodString;
+        relativePath: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"EXECUTOR">;
+        executorId: z.ZodString;
+        bindingRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        parameters: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>]>>>;
+    }, z.core.$strict>], "kind">;
+    credential: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"PUBLIC">;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"BOUND">;
+        bindingRef: z.ZodString;
+        revision: z.ZodString;
+    }, z.core.$strict>], "type">;
+    executionBinding: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        bindingRef: z.ZodString;
+        revision: z.ZodString;
+    }, z.core.$strict>>>;
+    access: z.ZodEnum<{
+        PUBLIC: "PUBLIC";
+        PUBLIC_METADATA: "PUBLIC_METADATA";
+        TENANT: "TENANT";
+        INTERNAL: "INTERNAL";
+        FDE_INTERNAL: "FDE_INTERNAL";
+        ACCESS_CONTROLLED: "ACCESS_CONTROLLED";
+        UNKNOWN: "UNKNOWN";
+    }>;
+    sourcePolicy: z.ZodObject<{
+        ref: z.ZodString;
+        revision: z.ZodString;
+        acquisition: z.ZodEnum<{
+            ALLOW: "ALLOW";
+            DENY: "DENY";
+        }>;
+        propagation: z.ZodEnum<{
+            TENANT_ONLY: "TENANT_ONLY";
+            SHARE_ALLOWED: "SHARE_ALLOWED";
+            PUBLIC_ALLOWED: "PUBLIC_ALLOWED";
+        }>;
+    }, z.core.$strict>;
+    region: z.ZodNullable<z.ZodString>;
+    representation: z.ZodObject<{
+        format: z.ZodEnum<{
+            RICH_DOCUMENT_V1: "RICH_DOCUMENT_V1";
+            RAW: "RAW";
+        }>;
+        extractor: z.ZodNullable<z.ZodObject<{
+            id: z.ZodString;
+            version: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const tenantSourceBasisSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    tenantId: z.ZodString;
+    sourceId: z.ZodString;
+    title: z.ZodString;
+    semantics: z.ZodObject<{
+        target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"URL">;
+            locator: z.ZodURL;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"FILE">;
+            rootBinding: z.ZodString;
+            relativePath: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"EXECUTOR">;
+            executorId: z.ZodString;
+            bindingRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            parameters: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>]>>>;
+        }, z.core.$strict>], "kind">;
+        credential: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"PUBLIC">;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"BOUND">;
+            bindingRef: z.ZodString;
+            revision: z.ZodString;
+        }, z.core.$strict>], "type">;
+        executionBinding: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+            bindingRef: z.ZodString;
+            revision: z.ZodString;
+        }, z.core.$strict>>>;
+        access: z.ZodEnum<{
+            PUBLIC: "PUBLIC";
+            PUBLIC_METADATA: "PUBLIC_METADATA";
+            TENANT: "TENANT";
+            INTERNAL: "INTERNAL";
+            FDE_INTERNAL: "FDE_INTERNAL";
+            ACCESS_CONTROLLED: "ACCESS_CONTROLLED";
+            UNKNOWN: "UNKNOWN";
+        }>;
+        sourcePolicy: z.ZodObject<{
+            ref: z.ZodString;
+            revision: z.ZodString;
+            acquisition: z.ZodEnum<{
+                ALLOW: "ALLOW";
+                DENY: "DENY";
+            }>;
+            propagation: z.ZodEnum<{
+                TENANT_ONLY: "TENANT_ONLY";
+                SHARE_ALLOWED: "SHARE_ALLOWED";
+                PUBLIC_ALLOWED: "PUBLIC_ALLOWED";
+            }>;
+        }, z.core.$strict>;
+        region: z.ZodNullable<z.ZodString>;
+        representation: z.ZodObject<{
+            format: z.ZodEnum<{
+                RICH_DOCUMENT_V1: "RICH_DOCUMENT_V1";
+                RAW: "RAW";
+            }>;
+            extractor: z.ZodNullable<z.ZodObject<{
+                id: z.ZodString;
+                version: z.ZodString;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare function tenantSourceRef(tenantId: string, sourceId: string): string;
+export declare function parseTenantSourceRevisionRef(ref: string): {
+    storageKey: string;
+    sourceId: string;
+    revision: string;
+} | null;
+/** 已正规化 basis 的唯一指纹算法，canonical reader 与 Identity 关系校验共用。 */
+export declare function tenantSourceFingerprints(basis: TenantSourceBasis): {
+    sourceRef: string;
+    revision: string;
+    revisionRef: string;
+    semanticKey: string;
+    targetId: string;
+};
+export declare const tenantSourceSnapshotSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    tenantId: z.ZodString;
+    sourceId: z.ZodString;
+    title: z.ZodString;
+    semantics: z.ZodObject<{
+        target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"URL">;
+            locator: z.ZodURL;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"FILE">;
+            rootBinding: z.ZodString;
+            relativePath: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"EXECUTOR">;
+            executorId: z.ZodString;
+            bindingRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            parameters: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>]>>>;
+        }, z.core.$strict>], "kind">;
+        credential: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"PUBLIC">;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"BOUND">;
+            bindingRef: z.ZodString;
+            revision: z.ZodString;
+        }, z.core.$strict>], "type">;
+        executionBinding: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+            bindingRef: z.ZodString;
+            revision: z.ZodString;
+        }, z.core.$strict>>>;
+        access: z.ZodEnum<{
+            PUBLIC: "PUBLIC";
+            PUBLIC_METADATA: "PUBLIC_METADATA";
+            TENANT: "TENANT";
+            INTERNAL: "INTERNAL";
+            FDE_INTERNAL: "FDE_INTERNAL";
+            ACCESS_CONTROLLED: "ACCESS_CONTROLLED";
+            UNKNOWN: "UNKNOWN";
+        }>;
+        sourcePolicy: z.ZodObject<{
+            ref: z.ZodString;
+            revision: z.ZodString;
+            acquisition: z.ZodEnum<{
+                ALLOW: "ALLOW";
+                DENY: "DENY";
+            }>;
+            propagation: z.ZodEnum<{
+                TENANT_ONLY: "TENANT_ONLY";
+                SHARE_ALLOWED: "SHARE_ALLOWED";
+                PUBLIC_ALLOWED: "PUBLIC_ALLOWED";
+            }>;
+        }, z.core.$strict>;
+        region: z.ZodNullable<z.ZodString>;
+        representation: z.ZodObject<{
+            format: z.ZodEnum<{
+                RICH_DOCUMENT_V1: "RICH_DOCUMENT_V1";
+                RAW: "RAW";
+            }>;
+            extractor: z.ZodNullable<z.ZodObject<{
+                id: z.ZodString;
+                version: z.ZodString;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    sourceRef: z.ZodString;
+    revision: z.ZodString;
+    revisionRef: z.ZodString;
+    semanticKey: z.ZodString;
+    targetId: z.ZodString;
+}, z.core.$strict>;
+export type TenantSourceBasis = z.infer<typeof tenantSourceBasisSchema>;
+export type TenantSourceSemantics = z.infer<typeof tenantSourceSemanticsSchema>;
+export type TenantSourceSnapshot = z.infer<typeof tenantSourceSnapshotSchema>;