@native-knowledge/knowledge-sdk 0.0.0-stage → 0.1.0-rc.2

package/dist/internal/contracts/tenant-management.d.ts

@@ -0,0 +1,286 @@
+/** 新 Tenant 管理输入与操作归因；身份/actor/来源 origin 不能由正文注入。 */
+import { z } from 'zod';
+export declare const tenantManagementRequestIdSchema: z.ZodString;
+export declare const tenantInvocationAuthoritySchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    type: z.ZodLiteral<"HOST">;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"OAUTH">;
+    authorityVersion: z.ZodLiteral<2>;
+    clientId: z.ZodString;
+    grantId: z.ZodString;
+    resource: z.ZodString;
+}, z.core.$strict>], "type">;
+export declare function tenantOperationRef(tenantId: string, requestId: string): string;
+export declare const tenantManagementIntentSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    requestId: z.ZodString;
+    tenantId: z.ZodString;
+    ref: z.ZodString;
+    action: z.ZodString;
+    inputHash: z.ZodString;
+    actor: z.ZodObject<{
+        tenantId: z.ZodString;
+        userId: z.ZodString;
+        agentId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strict>;
+    authority: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"HOST">;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"OAUTH">;
+        authorityVersion: z.ZodLiteral<2>;
+        clientId: z.ZodString;
+        grantId: z.ZodString;
+        resource: z.ZodString;
+    }, z.core.$strict>], "type">;
+    receivedAt: z.ZodISODateTime;
+}, z.core.$strict>;
+export declare const tenantRawSubmissionSchema: z.ZodObject<{
+    title: z.ZodString;
+    summary: z.ZodDefault<z.ZodString>;
+    mediaType: z.ZodString;
+    access: z.ZodDefault<z.ZodEnum<{
+        PUBLIC: "PUBLIC";
+        PUBLIC_METADATA: "PUBLIC_METADATA";
+        TENANT: "TENANT";
+        INTERNAL: "INTERNAL";
+        FDE_INTERNAL: "FDE_INTERNAL";
+        ACCESS_CONTROLLED: "ACCESS_CONTROLLED";
+        UNKNOWN: "UNKNOWN";
+    }>>;
+    claimedSourceRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    requestId: z.ZodString;
+}, z.core.$strict>;
+export declare const tenantArtifactDraftSchema: z.ZodObject<{
+    artifactId: z.ZodString;
+    kind: z.ZodEnum<{
+        RESEARCH: "RESEARCH";
+        KNOWLEDGE: "KNOWLEDGE";
+        INSIGHT: "INSIGHT";
+    }>;
+    title: z.ZodString;
+    mediaType: z.ZodString;
+    access: z.ZodDefault<z.ZodEnum<{
+        PUBLIC: "PUBLIC";
+        PUBLIC_METADATA: "PUBLIC_METADATA";
+        TENANT: "TENANT";
+        INTERNAL: "INTERNAL";
+        FDE_INTERNAL: "FDE_INTERNAL";
+        ACCESS_CONTROLLED: "ACCESS_CONTROLLED";
+        UNKNOWN: "UNKNOWN";
+    }>>;
+    observedAt: z.ZodDefault<z.ZodNullable<z.ZodISODateTime>>;
+    validUntil: z.ZodDefault<z.ZodNullable<z.ZodISODateTime>>;
+    sourceRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    evidenceRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    relatedRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    expectedVersion: z.ZodNumber;
+    requestId: z.ZodString;
+}, z.core.$strict>;
+export declare const tenantReviewInputSchema: z.ZodObject<{
+    targetRef: z.ZodString;
+    expectedVersion: z.ZodNumber;
+    decision: z.ZodEnum<{
+        PASS: "PASS";
+        REWORK: "REWORK";
+        REJECT: "REJECT";
+    }>;
+    reviewedAt: z.ZodISODateTime;
+    summary: z.ZodString;
+    sourceRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    requestId: z.ZodString;
+}, z.core.$strict>;
+export declare const tenantPromoteInputSchema: z.ZodObject<{
+    targetRef: z.ZodString;
+    expectedVersion: z.ZodNumber;
+    nextStatus: z.ZodEnum<{
+        READY_FOR_REVIEW: "READY_FOR_REVIEW";
+        REWORK_REQUIRED: "REWORK_REQUIRED";
+        APPROVED: "APPROVED";
+        REJECTED: "REJECTED";
+    }>;
+    reviewRef: z.ZodOptional<z.ZodString>;
+    requestId: z.ZodString;
+}, z.core.$strict>;
+export declare const tenantComposeInputSchema: z.ZodObject<{
+    artifactId: z.ZodString;
+    sourceRefs: z.ZodArray<z.ZodString>;
+    primarySourceRef: z.ZodOptional<z.ZodString>;
+    title: z.ZodOptional<z.ZodString>;
+    outputKind: z.ZodDefault<z.ZodEnum<{
+        KNOWLEDGE: "KNOWLEDGE";
+        INSIGHT: "INSIGHT";
+    }>>;
+    publicationProfile: z.ZodDefault<z.ZodEnum<{
+        HUMAN_ARTICLE_V1: "HUMAN_ARTICLE_V1";
+        KNOWLEDGE_CARD_V1: "KNOWLEDGE_CARD_V1";
+    }>>;
+    validUntil: z.ZodDefault<z.ZodNullable<z.ZodISODateTime>>;
+    composition: z.ZodOptional<z.ZodObject<{
+        summary: z.ZodString;
+        byline: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        language: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        blocks: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"HEADING">;
+            level: z.ZodNumber;
+            text: z.ZodString;
+            inlines: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                text: z.ZodString;
+                href: z.ZodNullable<z.ZodString>;
+            }, z.core.$strict>>>;
+            ordinal: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"PARAGRAPH">;
+            text: z.ZodString;
+            inlines: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                text: z.ZodString;
+                href: z.ZodNullable<z.ZodString>;
+            }, z.core.$strict>>>;
+            ordinal: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"LIST_ITEM">;
+            text: z.ZodString;
+            ordered: z.ZodBoolean;
+            level: z.ZodNumber;
+            index: z.ZodNullable<z.ZodNumber>;
+            inlines: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                text: z.ZodString;
+                href: z.ZodNullable<z.ZodString>;
+            }, z.core.$strict>>>;
+            ordinal: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"QUOTE">;
+            text: z.ZodString;
+            inlines: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                text: z.ZodString;
+                href: z.ZodNullable<z.ZodString>;
+            }, z.core.$strict>>>;
+            ordinal: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"CODE">;
+            text: z.ZodString;
+            language: z.ZodNullable<z.ZodString>;
+            ordinal: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"IMAGE">;
+            alt: z.ZodNullable<z.ZodString>;
+            width: z.ZodNullable<z.ZodNumber>;
+            height: z.ZodNullable<z.ZodNumber>;
+            ordinal: z.ZodNumber;
+            sourceUrl: z.ZodString;
+            canonicalUrl: z.ZodNullable<z.ZodString>;
+            availability: z.ZodEnum<{
+                MIRRORED: "MIRRORED";
+                REMOTE_ONLY: "REMOTE_ONLY";
+                UNAVAILABLE: "UNAVAILABLE";
+            }>;
+            mediaRef: z.ZodNullable<z.ZodString>;
+            evidenceRef: z.ZodNullable<z.ZodString>;
+            contentHash: z.ZodNullable<z.ZodString>;
+            mediaType: z.ZodNullable<z.ZodString>;
+            byteLength: z.ZodNullable<z.ZodNumber>;
+            caption: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"VIDEO">;
+            title: z.ZodNullable<z.ZodString>;
+            posterUrl: z.ZodNullable<z.ZodString>;
+            posterEvidenceRef: z.ZodNullable<z.ZodString>;
+            ordinal: z.ZodNumber;
+            sourceUrl: z.ZodString;
+            canonicalUrl: z.ZodNullable<z.ZodString>;
+            availability: z.ZodEnum<{
+                MIRRORED: "MIRRORED";
+                REMOTE_ONLY: "REMOTE_ONLY";
+                UNAVAILABLE: "UNAVAILABLE";
+            }>;
+            mediaRef: z.ZodNullable<z.ZodString>;
+            evidenceRef: z.ZodNullable<z.ZodString>;
+            contentHash: z.ZodNullable<z.ZodString>;
+            mediaType: z.ZodNullable<z.ZodString>;
+            byteLength: z.ZodNullable<z.ZodNumber>;
+            caption: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"AUDIO">;
+            title: z.ZodNullable<z.ZodString>;
+            ordinal: z.ZodNumber;
+            sourceUrl: z.ZodString;
+            canonicalUrl: z.ZodNullable<z.ZodString>;
+            availability: z.ZodEnum<{
+                MIRRORED: "MIRRORED";
+                REMOTE_ONLY: "REMOTE_ONLY";
+                UNAVAILABLE: "UNAVAILABLE";
+            }>;
+            mediaRef: z.ZodNullable<z.ZodString>;
+            evidenceRef: z.ZodNullable<z.ZodString>;
+            contentHash: z.ZodNullable<z.ZodString>;
+            mediaType: z.ZodNullable<z.ZodString>;
+            byteLength: z.ZodNullable<z.ZodNumber>;
+            caption: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"EMBED">;
+            sourceUrl: z.ZodString;
+            provider: z.ZodNullable<z.ZodString>;
+            title: z.ZodNullable<z.ZodString>;
+            caption: z.ZodNullable<z.ZodString>;
+            ordinal: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"DIVIDER">;
+            ordinal: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"TABLE">;
+            rows: z.ZodArray<z.ZodObject<{
+                cells: z.ZodArray<z.ZodObject<{
+                    text: z.ZodString;
+                    header: z.ZodBoolean;
+                }, z.core.$strict>>;
+            }, z.core.$strict>>;
+            ordinal: z.ZodNumber;
+        }, z.core.$strict>], "kind">>;
+        citations: z.ZodArray<z.ZodObject<{
+            blockOrdinal: z.ZodNumber;
+            sourceRefs: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    sourceDocuments: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        sourceRef: z.ZodString;
+        documentRef: z.ZodString;
+    }, z.core.$strict>>>;
+    expectedVersion: z.ZodNumber;
+    requestId: z.ZodString;
+}, z.core.$strict>;
+export type TenantManagementIntent = z.infer<typeof tenantManagementIntentSchema>;
+export type TenantRawSubmission = z.infer<typeof tenantRawSubmissionSchema>;
+export type TenantArtifactDraft = z.infer<typeof tenantArtifactDraftSchema>;
+export type TenantReviewInput = z.infer<typeof tenantReviewInputSchema>;
+export type TenantPromoteInput = z.infer<typeof tenantPromoteInputSchema>;
+export type TenantComposeInput = z.infer<typeof tenantComposeInputSchema>;
+export declare const tenantReviewDecisionSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<2>;
+    format: z.ZodLiteral<"TENANT_REVIEW_DECISION_V1">;
+    targetRef: z.ZodString;
+    decision: z.ZodEnum<{
+        PASS: "PASS";
+        REWORK: "REWORK";
+        REJECT: "REJECT";
+    }>;
+    reviewedAt: z.ZodISODateTime;
+    summary: z.ZodString;
+    sourceRefs: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type TenantReviewDecision = z.infer<typeof tenantReviewDecisionSchema>;
+export declare const tenantShareInputSchema: z.ZodObject<{
+    requestId: z.ZodString;
+    recipientTenantId: z.ZodString;
+    matchType: z.ZodEnum<{
+        SOURCE: "SOURCE";
+        REF: "REF";
+    }>;
+    matchValue: z.ZodString;
+    effect: z.ZodDefault<z.ZodEnum<{
+        ALLOW: "ALLOW";
+        DENY: "DENY";
+    }>>;
+}, z.core.$strict>;
+export declare const tenantRevokeShareInputSchema: z.ZodObject<{
+    requestId: z.ZodString;
+    routeId: z.ZodString;
+}, z.core.$strict>;

package/dist/internal/contracts/tenant-management.js

@@ -0,0 +1,27 @@
+/** 新 Tenant 管理输入与操作归因；身份/actor/来源 origin 不能由正文注入。 */
+import { z } from 'zod';
+import { createHash } from 'node:crypto';
+import { artifactIdSchema, reviewDecisionSchema } from './artifact.js';
+import { accessClassificationSchema, isoDateTimeSchema, sha256Schema, stableUriSchema } from './common.js';
+import { knowledgeActorContextSchema } from './project-intent.js';
+import { materialTenantIdSchema } from './material-context.js';
+import { tenantStorageKey, tenantResourceRefSchema } from './resource-scope.js';
+import { tenantCollectionRequestAuthoritySchema } from './tenant-collection-request.js';
+import { tenantCompositionDraftSchema } from './tenant-rich-document.js';
+import { publicationProfileSchema } from './rich-document.js';
+export const tenantManagementRequestIdSchema = z.string().regex(/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/);
+export const tenantInvocationAuthoritySchema = tenantCollectionRequestAuthoritySchema;
+export function tenantOperationRef(tenantId, requestId) { return `tenant-operation://${tenantStorageKey(tenantId)}/${createHash('sha256').update(tenantManagementRequestIdSchema.parse(requestId)).digest('hex')}`; }
+export const tenantManagementIntentSchema = z.object({ schemaVersion: z.literal(1), requestId: tenantManagementRequestIdSchema, tenantId: materialTenantIdSchema, ref: stableUriSchema, action: z.string().min(1).max(64), inputHash: sha256Schema, actor: knowledgeActorContextSchema, authority: tenantInvocationAuthoritySchema, receivedAt: isoDateTimeSchema }).strict().superRefine((v, ctx) => { if (v.actor.tenantId !== v.tenantId || v.ref !== tenantOperationRef(v.tenantId, v.requestId))
+    ctx.addIssue({ code: 'custom', message: 'Operation retains exact Tenant, actor and request identity' }); });
+const request = { requestId: tenantManagementRequestIdSchema }, version = { expectedVersion: z.number().int().nonnegative().safe() }, refs = z.array(stableUriSchema).max(256);
+export const tenantRawSubmissionSchema = z.object({ ...request, title: z.string().trim().min(1).max(512), summary: z.string().max(1024).default(''), mediaType: z.string().trim().min(1).max(256), access: accessClassificationSchema.default('INTERNAL'), claimedSourceRefs: z.array(stableUriSchema).max(127).default([]) }).strict();
+export const tenantArtifactDraftSchema = z.object({ ...request, ...version, artifactId: artifactIdSchema, kind: z.enum(['RESEARCH', 'KNOWLEDGE', 'INSIGHT']), title: z.string().trim().min(1).max(500), mediaType: z.string().trim().min(1).max(256), access: accessClassificationSchema.default('INTERNAL'), observedAt: isoDateTimeSchema.nullable().default(null), validUntil: isoDateTimeSchema.nullable().default(null), sourceRefs: refs.default([]), evidenceRefs: refs.default([]), relatedRefs: refs.default([]) }).strict();
+export const tenantReviewInputSchema = z.object({ ...request, targetRef: tenantResourceRefSchema, expectedVersion: z.number().int().positive().safe(), decision: reviewDecisionSchema.shape.decision, reviewedAt: isoDateTimeSchema, summary: reviewDecisionSchema.shape.summary, sourceRefs: refs.default([]) }).strict();
+export const tenantPromoteInputSchema = z.object({ ...request, targetRef: tenantResourceRefSchema, expectedVersion: z.number().int().positive().safe(), nextStatus: z.enum(['READY_FOR_REVIEW', 'APPROVED', 'REWORK_REQUIRED', 'REJECTED']), reviewRef: tenantResourceRefSchema.optional() }).strict();
+export const tenantComposeInputSchema = z.object({ ...request, ...version, artifactId: artifactIdSchema, sourceRefs: z.array(stableUriSchema).min(1).max(64), primarySourceRef: stableUriSchema.optional(), title: z.string().trim().min(1).max(500).optional(), outputKind: z.enum(['KNOWLEDGE', 'INSIGHT']).default('KNOWLEDGE'), publicationProfile: publicationProfileSchema.default('KNOWLEDGE_CARD_V1'), validUntil: isoDateTimeSchema.nullable().default(null), composition: tenantCompositionDraftSchema.optional(), sourceDocuments: z.array(z.object({ sourceRef: stableUriSchema, documentRef: stableUriSchema }).strict()).max(64).default([]) }).strict().superRefine((v, ctx) => { if (new Set(v.sourceRefs).size !== v.sourceRefs.length || v.primarySourceRef && !v.sourceRefs.includes(v.primarySourceRef) || new Set(v.sourceDocuments.map(row => row.sourceRef)).size !== v.sourceDocuments.length || v.sourceDocuments.some(row => !v.sourceRefs.includes(row.sourceRef)))
+    ctx.addIssue({ code: 'custom', message: 'Source selection must be unique and exact' }); });
+export const tenantReviewDecisionSchema = z.object({ schemaVersion: z.literal(2), format: z.literal('TENANT_REVIEW_DECISION_V1'), targetRef: tenantResourceRefSchema, decision: reviewDecisionSchema.shape.decision, reviewedAt: isoDateTimeSchema, summary: reviewDecisionSchema.shape.summary, sourceRefs: refs }).strict();
+export const tenantShareInputSchema = z.object({ requestId: tenantManagementRequestIdSchema, recipientTenantId: materialTenantIdSchema, matchType: z.enum(['SOURCE', 'REF']), matchValue: stableUriSchema, effect: z.enum(['ALLOW', 'DENY']).default('ALLOW') }).strict().superRefine((v, ctx) => { if (v.effect === 'DENY' && v.matchType !== 'REF')
+    ctx.addIssue({ code: 'custom', message: 'DENY requires an exact resource ref' }); });
+export const tenantRevokeShareInputSchema = z.object({ requestId: tenantManagementRequestIdSchema, routeId: z.string().regex(/^[a-f0-9]{64}$/) }).strict();