@native-knowledge/knowledge-sdk 0.0.0-stage → 0.1.0-rc.2

package/dist/internal/contracts/tenant-source-cutover.d.ts

@@ -0,0 +1,226 @@
+/** Host 维护切换的冻结事实；不从回执推断真实进程已退出。 */
+import { z } from 'zod';
+export declare const SOURCE_CUTOVER_FENCE_CAPABILITY: "SOURCE_CUTOVER_FENCE_V1";
+export declare const sourceCutoverIdSchema: z.ZodString;
+export declare const sourceCutoverKey: (id: string) => string;
+export declare const sourceCutoverRef: (tenantId: string, id: string) => string;
+export declare const sourceCutoverIntentSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    cutoverId: z.ZodString;
+    cutoverRef: z.ZodString;
+    tenantId: z.ZodString;
+    actor: z.ZodObject<{
+        tenantId: z.ZodString;
+        userId: z.ZodString;
+        agentId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strict>;
+    createdAt: z.ZodISODateTime;
+    legacySource: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        projectKey: z.ZodString;
+        actor: z.ZodObject<{
+            tenantId: z.ZodString;
+            userId: z.ZodString;
+            agentId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strict>;
+        target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"URL">;
+            locator: z.ZodURL;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"FILE">;
+            rootBinding: z.ZodString;
+            relativePath: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"EXECUTOR">;
+            executorId: z.ZodString;
+            bindingRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            parameters: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>]>>>;
+        }, z.core.$strict>], "kind">;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        access: z.ZodDefault<z.ZodEnum<{
+            PUBLIC: "PUBLIC";
+            PUBLIC_METADATA: "PUBLIC_METADATA";
+            TENANT: "TENANT";
+            INTERNAL: "INTERNAL";
+            FDE_INTERNAL: "FDE_INTERNAL";
+            ACCESS_CONTROLLED: "ACCESS_CONTROLLED";
+            UNKNOWN: "UNKNOWN";
+        }>>;
+        scopeIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        sourceFamilies: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        purpose: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        refresh: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            mode: z.ZodLiteral<"MANUAL">;
+        }, z.core.$strict>, z.ZodObject<{
+            mode: z.ZodLiteral<"INTERVAL">;
+            intervalSeconds: z.ZodNumber;
+        }, z.core.$strict>], "mode">>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+        projectRef: z.ZodString;
+        projectIntentRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        targetId: z.ZodString;
+        sourceId: z.ZodString;
+        revisionId: z.ZodString;
+        sourceRef: z.ZodString;
+        revisionRef: z.ZodString;
+    }, z.core.$strict>;
+    plan: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        tenantId: z.ZodString;
+        source: z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            tenantId: z.ZodString;
+            sourceId: z.ZodString;
+            title: z.ZodString;
+            semantics: z.ZodObject<{
+                target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"URL">;
+                    locator: z.ZodURL;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"FILE">;
+                    rootBinding: z.ZodString;
+                    relativePath: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"EXECUTOR">;
+                    executorId: z.ZodString;
+                    bindingRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                    parameters: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>]>>>;
+                }, z.core.$strict>], "kind">;
+                credential: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"PUBLIC">;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"BOUND">;
+                    bindingRef: z.ZodString;
+                    revision: z.ZodString;
+                }, z.core.$strict>], "type">;
+                executionBinding: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+                    bindingRef: z.ZodString;
+                    revision: z.ZodString;
+                }, z.core.$strict>>>;
+                access: z.ZodEnum<{
+                    PUBLIC: "PUBLIC";
+                    PUBLIC_METADATA: "PUBLIC_METADATA";
+                    TENANT: "TENANT";
+                    INTERNAL: "INTERNAL";
+                    FDE_INTERNAL: "FDE_INTERNAL";
+                    ACCESS_CONTROLLED: "ACCESS_CONTROLLED";
+                    UNKNOWN: "UNKNOWN";
+                }>;
+                sourcePolicy: z.ZodObject<{
+                    ref: z.ZodString;
+                    revision: z.ZodString;
+                    acquisition: z.ZodEnum<{
+                        ALLOW: "ALLOW";
+                        DENY: "DENY";
+                    }>;
+                    propagation: z.ZodEnum<{
+                        TENANT_ONLY: "TENANT_ONLY";
+                        SHARE_ALLOWED: "SHARE_ALLOWED";
+                        PUBLIC_ALLOWED: "PUBLIC_ALLOWED";
+                    }>;
+                }, z.core.$strict>;
+                region: z.ZodNullable<z.ZodString>;
+                representation: z.ZodObject<{
+                    format: z.ZodEnum<{
+                        RICH_DOCUMENT_V1: "RICH_DOCUMENT_V1";
+                        RAW: "RAW";
+                    }>;
+                    extractor: z.ZodNullable<z.ZodObject<{
+                        id: z.ZodString;
+                        version: z.ZodString;
+                    }, z.core.$strict>>;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+            sourceRef: z.ZodString;
+            revision: z.ZodString;
+            revisionRef: z.ZodString;
+            semanticKey: z.ZodString;
+            targetId: z.ZodString;
+        }, z.core.$strict>;
+        maxResourceBytes: z.ZodNumber;
+        revision: z.ZodString;
+        planRef: z.ZodString;
+        workloadId: z.ZodString;
+    }, z.core.$strict>;
+    existingBinding: z.ZodNullable<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        tenantId: z.ZodString;
+        projectKey: z.ZodString;
+        sourceId: z.ZodString;
+        revisionRef: z.ZodString;
+        generation: z.ZodNumber;
+        purpose: z.ZodString;
+        refresh: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            mode: z.ZodLiteral<"MANUAL">;
+        }, z.core.$strict>, z.ZodObject<{
+            mode: z.ZodLiteral<"INTERVAL">;
+            intervalSeconds: z.ZodNumber;
+        }, z.core.$strict>], "mode">;
+        enabled: z.ZodBoolean;
+        demandContext: z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            projectIntentRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            scopeIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            sourceFamilies: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            attentionNotes: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strict>;
+        origin: z.ZodEnum<{
+            MIGRATED_V13: "MIGRATED_V13";
+            EXPLICIT_V14: "EXPLICIT_V14";
+        }>;
+        actor: z.ZodNullable<z.ZodObject<{
+            tenantId: z.ZodString;
+            userId: z.ZodString;
+            agentId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strict>>;
+        changedAt: z.ZodNullable<z.ZodISODateTime>;
+    }, z.core.$strict>>;
+    demandContext: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        projectIntentRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        scopeIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        sourceFamilies: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        attentionNotes: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const sourceCutoverStepNameSchema: z.ZodEnum<{
+    LEGACY_STOPPED: "LEGACY_STOPPED";
+    DRAINED: "DRAINED";
+    ACTIVATED: "ACTIVATED";
+    NATIVE_STOPPED: "NATIVE_STOPPED";
+    NATIVE_DRAINED: "NATIVE_DRAINED";
+    RESTORE_AUTHORIZED: "RESTORE_AUTHORIZED";
+    LEGACY_RESTORED: "LEGACY_RESTORED";
+    ROLLED_BACK: "ROLLED_BACK";
+}>;
+export declare const sourceCutoverStepSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    cutoverRef: z.ZodString;
+    step: z.ZodEnum<{
+        LEGACY_STOPPED: "LEGACY_STOPPED";
+        DRAINED: "DRAINED";
+        ACTIVATED: "ACTIVATED";
+        NATIVE_STOPPED: "NATIVE_STOPPED";
+        NATIVE_DRAINED: "NATIVE_DRAINED";
+        RESTORE_AUTHORIZED: "RESTORE_AUTHORIZED";
+        LEGACY_RESTORED: "LEGACY_RESTORED";
+        ROLLED_BACK: "ROLLED_BACK";
+    }>;
+    actor: z.ZodObject<{
+        tenantId: z.ZodString;
+        userId: z.ZodString;
+        agentId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strict>;
+    at: z.ZodISODateTime;
+    details: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>;
+}, z.core.$strict>;
+export type SourceCutoverIntent = z.infer<typeof sourceCutoverIntentSchema>;
+export type SourceCutoverStep = z.infer<typeof sourceCutoverStepSchema>;
+export declare const sourceCutoverRuntimeProofSchema: z.ZodObject<{
+    nodeId: z.ZodString;
+    codeRevision: z.ZodString;
+    capability: z.ZodLiteral<"SOURCE_CUTOVER_FENCE_V1">;
+    unmanagedExecutions: z.ZodLiteral<"QUIESCED">;
+    observedAt: z.ZodISODateTime;
+}, z.core.$strict>;
+export type SourceCutoverRuntimeProof = z.infer<typeof sourceCutoverRuntimeProofSchema>;

package/dist/internal/contracts/tenant-source-cutover.js

@@ -0,0 +1,26 @@
+/** Host 维护切换的冻结事实；不从回执推断真实进程已退出。 */
+import { z } from 'zod';
+import { createHash } from 'node:crypto';
+import { idSchema, isoDateTimeSchema, stableUriSchema } from './common.js';
+import { projectSourceSnapshotSchema, knowledgeActorContextSchema } from './project-intent.js';
+import { tenantCollectionPlanSchema } from './tenant-collection.js';
+import { tenantSourceBindingRevisionSchema, tenantSourceBindingContextSchema } from './tenant-source-binding.js';
+import { tenantStorageKey } from './resource-scope.js';
+import { materialTenantIdSchema } from './material-context.js';
+export const SOURCE_CUTOVER_FENCE_CAPABILITY = 'SOURCE_CUTOVER_FENCE_V1';
+export const sourceCutoverIdSchema = z.string().regex(/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/);
+export const sourceCutoverKey = (id) => createHash('sha256').update(sourceCutoverIdSchema.parse(id)).digest('hex');
+export const sourceCutoverRef = (tenantId, id) => `tenant-source-cutover://${tenantStorageKey(tenantId)}/${sourceCutoverKey(id)}`;
+export const sourceCutoverIntentSchema = z.object({
+    schemaVersion: z.literal(1), cutoverId: sourceCutoverIdSchema, cutoverRef: stableUriSchema, tenantId: materialTenantIdSchema, actor: knowledgeActorContextSchema, createdAt: isoDateTimeSchema,
+    legacySource: projectSourceSnapshotSchema, plan: tenantCollectionPlanSchema, existingBinding: tenantSourceBindingRevisionSchema.nullable(),
+    demandContext: tenantSourceBindingContextSchema,
+}).strict().superRefine((v, ctx) => {
+    if (v.cutoverRef !== sourceCutoverRef(v.tenantId, v.cutoverId) || v.actor.tenantId !== v.tenantId || v.legacySource.actor.tenantId !== v.tenantId || v.plan.tenantId !== v.tenantId || v.legacySource.targetId !== v.plan.source.targetId || v.legacySource.access !== v.plan.source.semantics.access || v.demandContext.projectIntentRef !== v.legacySource.projectIntentRef)
+        ctx.addIssue({ code: 'custom', message: 'Cutover must retain exact owner, source and Project demand' });
+    if (v.existingBinding && (v.existingBinding.tenantId !== v.tenantId || v.existingBinding.projectKey !== v.legacySource.projectKey || v.existingBinding.sourceId !== v.plan.source.sourceId))
+        ctx.addIssue({ code: 'custom', path: ['existingBinding'], message: 'Prior binding belongs to another context' });
+});
+export const sourceCutoverStepNameSchema = z.enum(['LEGACY_STOPPED', 'DRAINED', 'ACTIVATED', 'NATIVE_STOPPED', 'NATIVE_DRAINED', 'RESTORE_AUTHORIZED', 'LEGACY_RESTORED', 'ROLLED_BACK']);
+export const sourceCutoverStepSchema = z.object({ schemaVersion: z.literal(1), cutoverRef: stableUriSchema, step: sourceCutoverStepNameSchema, actor: knowledgeActorContextSchema, at: isoDateTimeSchema, details: z.record(z.string().max(64), z.union([z.string().max(4096), z.number().finite(), z.boolean(), z.null()])).refine(v => Object.keys(v).length <= 32) }).strict();
+export const sourceCutoverRuntimeProofSchema = z.object({ nodeId: idSchema, codeRevision: z.string().regex(/^[A-Za-z0-9._-]{7,64}$/), capability: z.literal(SOURCE_CUTOVER_FENCE_CAPABILITY), unmanagedExecutions: z.literal('QUIESCED'), observedAt: isoDateTimeSchema }).strict();

package/dist/internal/contracts/tenant-source-document.d.ts

@@ -0,0 +1,163 @@
+/** 原生来源投影保留抽取结构，不借用 Project 身份或知识审核状态。 */
+import { z } from 'zod';
+import { type RichDocumentBlock } from './rich-document.js';
+export declare const TENANT_SOURCE_DOCUMENT_MEDIA_TYPE = "application/vnd.knowledge-v2.tenant-source-document+json";
+export declare const tenantSourceDocumentSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    title: z.ZodNullable<z.ZodString>;
+    summary: z.ZodNullable<z.ZodString>;
+    sourceContentHash: z.ZodString;
+    language: z.ZodNullable<z.ZodString>;
+    byline: z.ZodNullable<z.ZodString>;
+    blocks: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"HEADING">;
+        level: z.ZodNumber;
+        text: z.ZodString;
+        inlines: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            text: z.ZodString;
+            href: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>>>;
+        ordinal: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"PARAGRAPH">;
+        text: z.ZodString;
+        inlines: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            text: z.ZodString;
+            href: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>>>;
+        ordinal: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"LIST_ITEM">;
+        text: z.ZodString;
+        ordered: z.ZodBoolean;
+        level: z.ZodNumber;
+        index: z.ZodNullable<z.ZodNumber>;
+        inlines: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            text: z.ZodString;
+            href: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>>>;
+        ordinal: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"QUOTE">;
+        text: z.ZodString;
+        inlines: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            text: z.ZodString;
+            href: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>>>;
+        ordinal: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"CODE">;
+        text: z.ZodString;
+        language: z.ZodNullable<z.ZodString>;
+        ordinal: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"IMAGE">;
+        alt: z.ZodNullable<z.ZodString>;
+        width: z.ZodNullable<z.ZodNumber>;
+        height: z.ZodNullable<z.ZodNumber>;
+        ordinal: z.ZodNumber;
+        sourceUrl: z.ZodString;
+        canonicalUrl: z.ZodNullable<z.ZodString>;
+        availability: z.ZodEnum<{
+            MIRRORED: "MIRRORED";
+            REMOTE_ONLY: "REMOTE_ONLY";
+            UNAVAILABLE: "UNAVAILABLE";
+        }>;
+        mediaRef: z.ZodNullable<z.ZodString>;
+        evidenceRef: z.ZodNullable<z.ZodString>;
+        contentHash: z.ZodNullable<z.ZodString>;
+        mediaType: z.ZodNullable<z.ZodString>;
+        byteLength: z.ZodNullable<z.ZodNumber>;
+        caption: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"VIDEO">;
+        title: z.ZodNullable<z.ZodString>;
+        posterUrl: z.ZodNullable<z.ZodString>;
+        posterEvidenceRef: z.ZodNullable<z.ZodString>;
+        ordinal: z.ZodNumber;
+        sourceUrl: z.ZodString;
+        canonicalUrl: z.ZodNullable<z.ZodString>;
+        availability: z.ZodEnum<{
+            MIRRORED: "MIRRORED";
+            REMOTE_ONLY: "REMOTE_ONLY";
+            UNAVAILABLE: "UNAVAILABLE";
+        }>;
+        mediaRef: z.ZodNullable<z.ZodString>;
+        evidenceRef: z.ZodNullable<z.ZodString>;
+        contentHash: z.ZodNullable<z.ZodString>;
+        mediaType: z.ZodNullable<z.ZodString>;
+        byteLength: z.ZodNullable<z.ZodNumber>;
+        caption: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"AUDIO">;
+        title: z.ZodNullable<z.ZodString>;
+        ordinal: z.ZodNumber;
+        sourceUrl: z.ZodString;
+        canonicalUrl: z.ZodNullable<z.ZodString>;
+        availability: z.ZodEnum<{
+            MIRRORED: "MIRRORED";
+            REMOTE_ONLY: "REMOTE_ONLY";
+            UNAVAILABLE: "UNAVAILABLE";
+        }>;
+        mediaRef: z.ZodNullable<z.ZodString>;
+        evidenceRef: z.ZodNullable<z.ZodString>;
+        contentHash: z.ZodNullable<z.ZodString>;
+        mediaType: z.ZodNullable<z.ZodString>;
+        byteLength: z.ZodNullable<z.ZodNumber>;
+        caption: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"EMBED">;
+        sourceUrl: z.ZodString;
+        provider: z.ZodNullable<z.ZodString>;
+        title: z.ZodNullable<z.ZodString>;
+        caption: z.ZodNullable<z.ZodString>;
+        ordinal: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"DIVIDER">;
+        ordinal: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"TABLE">;
+        rows: z.ZodArray<z.ZodObject<{
+            cells: z.ZodArray<z.ZodObject<{
+                text: z.ZodString;
+                header: z.ZodBoolean;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        ordinal: z.ZodNumber;
+    }, z.core.$strict>], "kind">>;
+    citations: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        blockOrdinal: z.ZodNumber;
+        evidenceRefs: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>>;
+    primarySourceEvidenceRef: z.ZodString;
+    mediaEvidenceRefs: z.ZodArray<z.ZodString>;
+    sourceUri: z.ZodString;
+    extractedAt: z.ZodISODateTime;
+    sourceEvidenceRefs: z.ZodArray<z.ZodString>;
+    sourceMediaType: z.ZodString;
+    sourceByteLength: z.ZodNumber;
+    publishedAt: z.ZodNullable<z.ZodISODateTime>;
+    topics: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    textContent: z.ZodString;
+    extractor: z.ZodObject<{
+        id: z.ZodString;
+        version: z.ZodString;
+    }, z.core.$strict>;
+    format: z.ZodLiteral<"TENANT_RICH_SOURCE_DOCUMENT_V1">;
+    role: z.ZodLiteral<"SOURCE_MIRROR">;
+    tenantId: z.ZodString;
+}, z.core.$strict>;
+export type TenantSourceDocument = z.infer<typeof tenantSourceDocumentSchema>;
+export type TenantRichMediaBlock = Extract<RichDocumentBlock, {
+    kind: 'IMAGE' | 'VIDEO' | 'AUDIO';
+}>;
+export declare function tenantSourceDocumentIdentity(tenantId: string, parentRef: string, documentContentHash: string): {
+    identityRef: string;
+    ref: string;
+    resourceId: string;
+};
+export declare function tenantSourceMediaIdentity(tenantId: string, parentRef: string, kind: string, url: string): {
+    identityRef: string;
+    ref: string;
+    resourceId: string;
+};

package/dist/internal/contracts/tenant-source-document.js

@@ -0,0 +1,38 @@
+/** 原生来源投影保留抽取结构，不借用 Project 身份或知识审核状态。 */
+import { z } from 'zod';
+import { createHash } from 'node:crypto';
+import { richDocumentSchema, validateRichDocumentContent } from './rich-document.js';
+import { materialTenantIdSchema } from './material-context.js';
+import { tenantResourceRefs, parseTenantResourceRef, tenantStorageKey } from './resource-scope.js';
+import { sha256Schema, stableUriSchema } from './common.js';
+export const TENANT_SOURCE_DOCUMENT_MEDIA_TYPE = 'application/vnd.knowledge-v2.tenant-source-document+json';
+const base = z.object({ ...richDocumentSchema.shape }).omit({ projectKey: true, projectRef: true, format: true, role: true, publicationProfile: true });
+export const tenantSourceDocumentSchema = base.extend({ format: z.literal('TENANT_RICH_SOURCE_DOCUMENT_V1'), role: z.literal('SOURCE_MIRROR'), tenantId: materialTenantIdSchema }).strict().superRefine((v, ctx) => {
+    validateRichDocumentContent(v, ctx);
+    const issue = (message) => ctx.addIssue({ code: 'custom', message });
+    if (v.sourceEvidenceRefs.length !== 1 || v.sourceEvidenceRefs[0] !== v.primarySourceEvidenceRef)
+        issue('Source mirror requires one exact parent');
+    const key = tenantStorageKey(v.tenantId), refs = [...v.sourceEvidenceRefs, ...v.mediaEvidenceRefs];
+    if (new Set(refs).size !== refs.length || refs.some(ref => { const p = parseTenantResourceRef(ref); return !p || p.storageKey !== key || p.resourceType !== 'evidence'; }))
+        issue('Source/media must retain exact Tenant Evidence identity');
+    const media = new Set(v.mediaEvidenceRefs);
+    for (const b of v.blocks) {
+        if ('availability' in b && (b.evidenceRef && (!media.has(b.evidenceRef) || b.mediaRef !== b.evidenceRef) || b.kind === 'VIDEO' && b.posterEvidenceRef && !media.has(b.posterEvidenceRef)))
+            issue('Media must identify a declared Evidence');
+    }
+});
+export function tenantSourceDocumentIdentity(tenantId, parentRef, documentContentHash) {
+    const parent = parseTenantResourceRef(parentRef);
+    if (!parent || parent.storageKey !== tenantStorageKey(tenantId) || parent.resourceType !== 'evidence')
+        throw new Error('TENANT_DERIVATION_PARENT_INVALID');
+    const resourceId = 'doc_' + createHash('sha256').update(JSON.stringify([parentRef, sha256Schema.parse(documentContentHash)])).digest('hex');
+    return { resourceId, ...tenantResourceRefs({ tenantId, resourceType: 'source_document', resourceId, version: 1 }) };
+}
+export function tenantSourceMediaIdentity(tenantId, parentRef, kind, url) {
+    stableUriSchema.parse(url);
+    const parent = parseTenantResourceRef(parentRef);
+    if (!parent || parent.storageKey !== tenantStorageKey(tenantId) || parent.resourceType !== 'evidence' || !['IMAGE', 'VIDEO', 'AUDIO'].includes(kind))
+        throw new Error('TENANT_DERIVATION_PARENT_INVALID');
+    const resourceId = 'media_' + createHash('sha256').update(JSON.stringify([parentRef, kind, url])).digest('hex');
+    return { resourceId, ...tenantResourceRefs({ tenantId, resourceType: 'evidence', resourceId, version: 1 }) };
+}

package/dist/internal/contracts/tenant-source-lease.d.ts

@@ -0,0 +1 @@
+export declare function tenantSourceLeaseKey(tenantId: string, sourceId: string): string;

package/dist/internal/contracts/tenant-source-lease.js

@@ -0,0 +1,5 @@
+/** 预算和计划修订不能为同一 Tenant Source 创建并行获取 owner；复用 RuntimeStore 租约。 */
+import { createHash } from 'node:crypto';
+import { materialTenantIdSchema } from './material-context.js';
+import { tenantSourceIdSchema } from './tenant-source.js';
+export function tenantSourceLeaseKey(tenantId, sourceId) { return 'tenant-source:' + createHash('sha256').update(JSON.stringify(['TENANT_SOURCE_LEASE_V1', materialTenantIdSchema.parse(tenantId), tenantSourceIdSchema.parse(sourceId)])).digest('hex'); }