@native-knowledge/knowledge-sdk 0.0.0-stage → 0.1.0-rc.2

package/dist/tenant-management.js

@@ -0,0 +1,149 @@
+import { AuthError } from './auth.js';
+import { authorizedFetch, tokenValue } from './token-provider.js';
+/** Provider17 客户端：Tenant 必填，Project/actor/authority 不进入请求上下文。 */
+import { materialTenantIdSchema, tenantResourceRefSchema } from './internal/contracts/index.js';
+import { tenantManagementToolSchemas, tenantManagementEnvelopeSchema, tenantManagementErrorSchema, tenantManagementProviderSchema, tenantManagementSafeErrorRef } from './internal/serving-contracts/index.js';
+import { materialStream } from './material-stream.js';
+export class TenantManagementSdkError extends Error {
+    code;
+    status;
+    completedPhase;
+    ref;
+    constructor(code, status, details) {
+        super(code);
+        this.code = code;
+        this.status = status;
+        this.name = 'TenantManagementSdkError';
+        this.completedPhase = details?.completedPhase;
+        this.ref = details?.ref;
+    }
+}
+export class KnowledgeTenantManagementClient {
+    options;
+    root;
+    path;
+    fetchImpl;
+    constructor(options) {
+        this.options = options;
+        let url;
+        try {
+            url = new URL(options.baseUrl);
+        }
+        catch {
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_BASE_URL_INVALID', 0);
+        }
+        if (url.username || url.password || url.search || url.hash || !['https:', 'http:'].includes(url.protocol) || url.protocol === 'http:' && options.allowInsecureHttp !== true)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_BASE_URL_INVALID', 0);
+        materialTenantIdSchema.parse(options.expectedTenantId);
+        if (!options.tokenProvider && (typeof options.token !== 'string' || !/^[A-Za-z0-9_-]{43}$/.test(options.token)))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_TOKEN_INVALID', 0);
+        this.root = url;
+        this.path = url.pathname === '/' ? '' : url.pathname.replace(/\/+$/, '');
+        this.fetchImpl = authorizedFetch(options.fetchImpl ?? fetch, options, url.origin);
+    }
+    protocolVersion() { return 17; }
+    url(operation, version = this.protocolVersion()) { return new URL(this.path + (operation === 'provider' ? `/v${version}/provider` : `/v${version}/tenant/` + operation), this.root.origin); }
+    async request(url, init = {}) { try {
+        return await this.fetchImpl(url, { ...init, headers: { authorization: `Bearer ${await tokenValue(this.options)}`, accept: 'application/json', ...Object.fromEntries(new Headers(init.headers)) }, redirect: 'error' });
+    }
+    catch (error) {
+        if (error instanceof AuthError)
+            throw error;
+        throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_TRANSPORT_FAILURE', 0);
+    } }
+    failure(raw, status) { const failure = tenantManagementErrorSchema.safeParse(raw); if (!failure.success)
+        return null; const ref = tenantManagementSafeErrorRef(failure.data.ref, this.options.expectedTenantId); return new TenantManagementSdkError(failure.data.errorCode, status, { ...failure.data, ...(ref ? { ref } : { ref: undefined }) }); }
+    async json(response) {
+        if (!response.headers.get('content-type')?.toLowerCase().startsWith('application/json') || !response.body) {
+            await response.body?.cancel();
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        }
+        const reader = response.body.getReader(), chunks = [];
+        let bytes = 0;
+        try {
+            while (true) {
+                const part = await reader.read();
+                if (part.done)
+                    break;
+                bytes += part.value.length;
+                if (bytes > 524288) {
+                    await reader.cancel();
+                    throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESULT_TOO_LARGE', response.status);
+                }
+                chunks.push(Buffer.from(part.value));
+            }
+        }
+        catch (error) {
+            if (error instanceof TenantManagementSdkError)
+                throw error;
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_TRANSPORT_FAILURE', response.status);
+        }
+        finally {
+            reader.releaseLock();
+        }
+        let raw;
+        try {
+            raw = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(Buffer.concat(chunks)));
+        }
+        catch {
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        }
+        const failure = this.failure(raw, response.status);
+        if (failure)
+            throw failure;
+        if (!response.ok)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        return raw;
+    }
+    async tool(name, raw, options = {}) {
+        if (!Object.hasOwn(tenantManagementToolSchemas, name))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_OPERATION_UNSUPPORTED', 0);
+        const input = tenantManagementToolSchemas[name].parse(raw), body = JSON.stringify({ tool: name, arguments: input });
+        if (Buffer.byteLength(body) > 131072)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_REQUEST_TOO_LARGE', 0);
+        const response = await this.request(this.url('call'), { method: 'POST', headers: { 'content-type': 'application/json' }, body, ...(options.signal ? { signal: options.signal } : {}) }), result = tenantManagementEnvelopeSchema(name).safeParse(await this.json(response));
+        if (!result.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        if (result.data.tenantId !== this.options.expectedTenantId)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        return result.data;
+    }
+    async provider() { const response = await this.request(this.url('provider', 17)), result = tenantManagementProviderSchema.safeParse(await this.json(response)); if (!result.success)
+        throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status); return result.data; }
+    guide() { return this.tool('tenant_workflow_guide', {}); }
+    plan(ref) { return this.tool('tenant_workflow_plan', { ref }); }
+    read(ref) { return this.tool('tenant_knowledge_read', { ref }); }
+    snapshot(ref) { return this.tool('tenant_snapshot_status', { ref }); }
+    async stream(ref, options = {}) {
+        tenantResourceRefSchema.parse(ref);
+        const url = this.url('content');
+        url.searchParams.set('ref', ref);
+        const checked = async (input, init) => { let response; try {
+            response = await this.fetchImpl(input, { ...init, redirect: 'error' });
+        }
+        catch (error) {
+            if (error instanceof AuthError)
+                throw error;
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_TRANSPORT_FAILURE', 0);
+        } if (response.status !== 200 && response.status !== 206) {
+            await this.json(response);
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTENT_FAILURE', response.status);
+        } if (response.headers.get('x-knowledge-tenant-id') !== this.options.expectedTenantId) {
+            await response.body?.cancel();
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        } return response; };
+        try {
+            const result = await materialStream(checked, url, await tokenValue(this.options), options);
+            if (result.contentClass !== 'ARTIFACT_SNAPSHOT') {
+                await result.body?.cancel();
+                throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', result.status);
+            }
+            return result;
+        }
+        catch (error) {
+            if (error instanceof TenantManagementSdkError)
+                throw error;
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTENT_FAILURE', 0);
+        }
+    }
+}

package/dist/tenant-project.d.ts

@@ -0,0 +1,57 @@
+import { type TenantProjectToolName, type TenantProjectToolInput, type TenantProjectToolResponse } from './internal/serving-contracts/index.js';
+import { KnowledgeTenantWorkspaceClient } from './tenant-workspace.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+import { type MaterialStreamOptions } from './material-stream.js';
+export declare class KnowledgeTenantProjectClient extends KnowledgeTenantWorkspaceClient {
+    protected protocolVersion(): 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25;
+    protected failure(raw: unknown, status: number): TenantManagementSdkError<string> | null;
+    projectTool<K extends TenantProjectToolName>(name: K, raw: TenantProjectToolInput<K>, options?: {
+        signal?: AbortSignal;
+    }): Promise<TenantProjectToolResponse<K>>;
+    projectProvider(): Promise<{
+        provider: "knowledge-v2";
+        codeRevision: string;
+        authorityVersion: 2;
+        context: "TENANT_EXPLICIT_MANAGEMENT_V1";
+        managementConfigured: boolean;
+        resource: string;
+        issuer: string;
+        authorizationEndpoint: string;
+        tokenEndpoint: string;
+        revocationEndpoint: string;
+        mcpEndpoint: string;
+        callEndpoint: string;
+        contentEndpoint: string;
+        contentContextHeader: "x-knowledge-tenant-id";
+        legacyProviderEndpoint: string;
+        protocols: ("2026-07-28" | "2025-06-18")[];
+        requestMaxBytes: 131072;
+        resultMaxBytes: 524288;
+        submissionMaxBytes: 65536;
+        inlineContentMaxBytes: 32768;
+        contentReadMaxBytes: 16777216;
+        collectionMode: "MANUAL_ONLY_OAUTH";
+        schemaVersion: 19;
+        projectContentEndpoint: string;
+        projectContentPolicyHeader: "x-knowledge-authority-policy";
+        projectContentProjectHeader: "x-knowledge-project-key";
+        projectControlIdentitySchemaVersion: 19;
+        tools: string[];
+        capabilities: ["TENANT_MANAGEMENT_V1", "TENANT_WORKFLOW_V1", "TENANT_CURRENTNESS_V2", "TENANT_SOURCE_V1", "TENANT_WORKSPACE_METADATA_V1", "TENANT_PROJECT_CONTEXT_V1"];
+    }>;
+    projectStream(projectKey: string, ref: string, options?: MaterialStreamOptions): Promise<{
+        context: {
+            tenantId: string;
+            projectKey: string;
+            policy: "TENANT_PROJECT_SCOPE";
+        };
+        status: 200 | 206;
+        contentClass: string;
+        contentHash: string;
+        mediaType: string;
+        contentLength: number;
+        contentRange: string | null;
+        body: ReadableStream<Uint8Array> | null;
+        verification: "SERVER_VERIFIED_BEFORE_HEADERS";
+    }>;
+}

package/dist/tenant-project.js

@@ -0,0 +1,63 @@
+import { tokenValue } from './token-provider.js';
+/** Explicit v19 Project context client; v17/v18 discovery and defaults remain available. */
+import { projectKeySchema, stableUriSchema, tenantProjectOperationRef } from './internal/contracts/index.js';
+import { tenantProjectToolSchemas, tenantProjectEnvelopeSchema, tenantProjectErrorSchema, tenantProjectProviderSchema, tenantManagementSafeErrorRef } from './internal/serving-contracts/index.js';
+import { KnowledgeTenantWorkspaceClient } from './tenant-workspace.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+import { materialStream } from './material-stream.js';
+export class KnowledgeTenantProjectClient extends KnowledgeTenantWorkspaceClient {
+    protocolVersion() { return 19; }
+    failure(raw, status) { const failure = tenantProjectErrorSchema.safeParse(raw); if (!failure.success)
+        return null; const ref = tenantManagementSafeErrorRef(failure.data.ref, this.options.expectedTenantId); return new TenantManagementSdkError(failure.data.errorCode, status, { ...failure.data, ...(ref ? { ref } : { ref: undefined }) }); }
+    async projectTool(name, raw, options = {}) {
+        if (!Object.hasOwn(tenantProjectToolSchemas, name))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_OPERATION_UNSUPPORTED', 0);
+        const input = tenantProjectToolSchemas[name].parse(raw), body = JSON.stringify({ tool: name, arguments: input });
+        if (Buffer.byteLength(body) > 131072)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_REQUEST_TOO_LARGE', 0);
+        const response = await this.request(this.url('call'), { method: 'POST', headers: { 'content-type': 'application/json' }, body, ...(options.signal ? { signal: options.signal } : {}) }), result = tenantProjectEnvelopeSchema(name).safeParse(await this.json(response));
+        if (!result.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        if (result.data.tenantId !== this.options.expectedTenantId)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        const data = result.data.data;
+        if ('projectKey' in input && data.projectKey !== input.projectKey)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        if ('requestId' in input && input.requestId) {
+            const expected = tenantProjectOperationRef(this.options.expectedTenantId, input.requestId);
+            if (data.operationRef && data.operationRef !== expected || data.receipt && data.receipt.operationRef !== expected)
+                throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        }
+        return result.data;
+    }
+    async projectProvider() { const response = await this.request(this.url('provider', 19)), result = tenantProjectProviderSchema.safeParse(await this.json(response)); if (!result.success)
+        throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status); return result.data; }
+    async projectStream(projectKey, ref, options = {}) {
+        const checkedProject = projectKeySchema.parse(projectKey), checkedRef = stableUriSchema.parse(ref);
+        const url = this.url('content', 19);
+        url.pathname = url.pathname.replace(/\/tenant\/content$/, '/project/content');
+        url.searchParams.set('projectKey', checkedProject);
+        url.searchParams.set('ref', checkedRef);
+        const fetchImpl = this.options.fetchImpl ?? fetch;
+        const checked = async (input, init) => { let response; try {
+            response = await fetchImpl(input, { ...init, redirect: 'error' });
+        }
+        catch {
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_TRANSPORT_FAILURE', 0);
+        } if (response.status !== 200 && response.status !== 206) {
+            await this.json(response);
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTENT_FAILURE', response.status);
+        } if (response.headers.get('x-knowledge-tenant-id') !== this.options.expectedTenantId || response.headers.get('x-knowledge-project-key') !== checkedProject || response.headers.get('x-knowledge-authority-policy') !== 'TENANT_PROJECT_SCOPE') {
+            await response.body?.cancel();
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        } return response; };
+        try {
+            return { ...await materialStream(checked, url, await tokenValue(this.options), options), context: { tenantId: this.options.expectedTenantId, projectKey: checkedProject, policy: 'TENANT_PROJECT_SCOPE' } };
+        }
+        catch (error) {
+            if (error instanceof TenantManagementSdkError)
+                throw error;
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTENT_FAILURE', 0);
+        }
+    }
+}

package/dist/tenant-runtime.d.ts

@@ -0,0 +1,174 @@
+/** 明确Provider20；仅此新client采用新registry，旧client默认保持原版本。 */
+import { type TenantRuntimeInput } from './internal/serving-contracts/index.js';
+import { KnowledgeTenantProjectClient } from './tenant-project.js';
+export declare class KnowledgeTenantRuntimeClient extends KnowledgeTenantProjectClient {
+    protected protocolVersion(): 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25;
+    runtimeStatus(raw?: TenantRuntimeInput, options?: {
+        signal?: AbortSignal;
+    }): Promise<{
+        schemaVersion: 2;
+        tenantId: string;
+        tool: "tenant_runtime_status";
+        data: {
+            nodeId: string;
+            kind: "REQUESTS" | "RESOURCES" | "PROJECTIONS" | "PROJECTS";
+            observedAt: string;
+            coverage: "OWN_TENANT_METADATA_SAMPLE";
+            metadataOnly: true;
+            pageState: "UNAVAILABLE" | "READY";
+            items: ({
+                kind: "REQUESTS";
+                requestRef: string;
+                batchRef: string;
+                admission: "COMPLETED" | "PENDING" | "FAILED" | "STOPPED";
+                stopReason: "GRANT_REVOKED" | "DELEGATION_SUPERSEDED" | null;
+                executionAuthority: "UNAVAILABLE" | "CURRENT" | "BLOCKED" | "NOT_CONFIGURED" | "NOT_PENDING";
+                budgetReason: "READY" | "PAUSED" | "TENANT_UNCONFIGURED" | "HOST_IN_FLIGHT" | "TENANT_IN_FLIGHT" | "WORK_BUDGET" | "TIME_BUDGET" | "WORK_ACTIVE" | null;
+                captureRecord: "MISSING" | "UNAVAILABLE" | "PRESENT";
+                raw: {
+                    ref: string;
+                    contentHash: string | null;
+                    recordedBytes: number | null;
+                    manifest: "MISSING" | "UNAVAILABLE" | "INTEGRITY_MISMATCH" | "PRESENT";
+                    blob: "MISSING" | "UNAVAILABLE" | "INTEGRITY_MISMATCH" | "PRESENT_UNVERIFIED";
+                    contentHashReverified: false;
+                    catalog: "MISSING" | "UNAVAILABLE" | "INTEGRITY_MISMATCH" | "NOT_REGISTERED" | "MATCH";
+                    directory: "MISSING" | "UNAVAILABLE" | "INTEGRITY_MISMATCH" | "NOT_REGISTERED" | "MATCH";
+                    search: "MISSING" | "UNAVAILABLE" | "INTEGRITY_MISMATCH" | "NOT_REGISTERED" | "MATCH";
+                };
+                derivation: "REGISTERED" | "UNAVAILABLE" | "PENDING" | "NOT_REQUIRED";
+                completedPhase: "RAW_REGISTERED" | "DERIVED_REGISTERED" | null;
+                process: {
+                    runtimeNodeId: string;
+                    workloadId: string;
+                    runId: string;
+                    attribution: "COMPLETION_RUN" | "FAILURE_RUN" | "SOURCE_WORKLOAD_LATEST" | "PROJECT_WORKLOAD_LATEST";
+                    batchMatches: boolean | null;
+                    outcome: "FAILED" | "SUCCEEDED" | "TIMED_OUT" | "OUTPUT_LIMIT" | "SPAWN_FAILED" | "RECEIPT_MISSING" | null;
+                    receiptStatus: "BLOCKED" | "PARTIAL" | "FAILED" | "SUCCEEDED" | "SKIPPED" | null;
+                    durationMs: number | null;
+                    finishedAt: string;
+                    category: "NONE" | "OUTPUT_LIMIT" | "TIMEOUT" | "SPAWN_FAILURE" | "V8_HEAP_EXHAUSTED" | "NATIVE_ASSERTION_FAILURE" | "UNCAUGHT_EXCEPTION" | "PROCESS_SIGNAL" | "UNKNOWN_FAILURE" | null;
+                    peakRssBytes: number | null;
+                    sampleCount: number | null;
+                } | null;
+                failureCode?: "TENANT_SOURCE_HTTP_TERMINAL" | null | undefined;
+            } | {
+                ref: string;
+                contentHash: string | null;
+                recordedBytes: number | null;
+                manifest: "MISSING" | "UNAVAILABLE" | "INTEGRITY_MISMATCH" | "PRESENT";
+                blob: "MISSING" | "UNAVAILABLE" | "INTEGRITY_MISMATCH" | "PRESENT_UNVERIFIED";
+                contentHashReverified: false;
+                catalog: "MISSING" | "UNAVAILABLE" | "INTEGRITY_MISMATCH" | "NOT_REGISTERED" | "MATCH";
+                directory: "MISSING" | "UNAVAILABLE" | "INTEGRITY_MISMATCH" | "NOT_REGISTERED" | "MATCH";
+                search: "MISSING" | "UNAVAILABLE" | "INTEGRITY_MISMATCH" | "NOT_REGISTERED" | "MATCH";
+                kind: "RESOURCES";
+            } | {
+                ref: string;
+                contentHash: string | null;
+                recordedBytes: number | null;
+                manifest: "MISSING" | "UNAVAILABLE" | "INTEGRITY_MISMATCH" | "PRESENT";
+                blob: "MISSING" | "UNAVAILABLE" | "INTEGRITY_MISMATCH" | "PRESENT_UNVERIFIED";
+                contentHashReverified: false;
+                catalog: "MISSING" | "UNAVAILABLE" | "INTEGRITY_MISMATCH" | "NOT_REGISTERED" | "MATCH";
+                directory: "MISSING" | "UNAVAILABLE" | "INTEGRITY_MISMATCH" | "NOT_REGISTERED" | "MATCH";
+                search: "MISSING" | "UNAVAILABLE" | "INTEGRITY_MISMATCH" | "NOT_REGISTERED" | "MATCH";
+                kind: "PROJECTIONS";
+                expectedManifestRevision: string;
+                preparedAt: string;
+            } | {
+                kind: "PROJECTS";
+                projectKey: string;
+                lifecycle: "ACTIVE" | "ARCHIVED";
+                runtimeState: "UNAVAILABLE" | "AVAILABLE";
+                projection: {
+                    requestedGeneration: number;
+                    completedGeneration: number;
+                    pendingGenerationDelta: number;
+                } | null;
+                checkpointState: "UNAVAILABLE" | "READY" | "EPOCH_MISMATCH";
+                directoryThroughSeq: number | null;
+                searchThroughSeq: number | null;
+                searchObservedMaxSeq: number | null;
+                searchSequenceDelta: number | null;
+                process: {
+                    runtimeNodeId: string;
+                    workloadId: string;
+                    runId: string;
+                    attribution: "COMPLETION_RUN" | "FAILURE_RUN" | "SOURCE_WORKLOAD_LATEST" | "PROJECT_WORKLOAD_LATEST";
+                    batchMatches: boolean | null;
+                    outcome: "FAILED" | "SUCCEEDED" | "TIMED_OUT" | "OUTPUT_LIMIT" | "SPAWN_FAILED" | "RECEIPT_MISSING" | null;
+                    receiptStatus: "BLOCKED" | "PARTIAL" | "FAILED" | "SUCCEEDED" | "SKIPPED" | null;
+                    durationMs: number | null;
+                    finishedAt: string;
+                    category: "NONE" | "OUTPUT_LIMIT" | "TIMEOUT" | "SPAWN_FAILURE" | "V8_HEAP_EXHAUSTED" | "NATIVE_ASSERTION_FAILURE" | "UNCAUGHT_EXCEPTION" | "PROCESS_SIGNAL" | "UNKNOWN_FAILURE" | null;
+                    peakRssBytes: number | null;
+                    sampleCount: number | null;
+                } | null;
+            })[];
+            nextAfter: string | null;
+            sampleCount: number;
+            total: null;
+            budget: {
+                state: "READY";
+                scope: "RUNTIME_OWNER_DATA_ROOT";
+                windowStart: string;
+                windowEnd: string;
+                usage: {
+                    inFlight: number;
+                    workUnits: number;
+                    runtimeMs: number;
+                };
+                limits: {
+                    tenantId: string;
+                    maxInFlight: number;
+                    maxWorkUnits: number;
+                    maxRuntimeMs: number;
+                    weight: number;
+                    paused: boolean;
+                };
+                maxWaitRounds: number;
+            } | {
+                state: "UNAVAILABLE" | "NOT_CONFIGURED";
+                reason: "CONFIGURATION_REQUIRED" | "TENANT_NOT_CONFIGURED" | "BINDING_MISMATCH" | "STATE_UNAVAILABLE";
+            };
+            delivery: {
+                headSeq: number;
+                retainedThroughSeq: number;
+                businessOutcome: "NOT_ASSERTED";
+            };
+        };
+    }>;
+    runtimeProvider(): Promise<{
+        schemaVersion: 20;
+        tools: string[];
+        capabilities: ["TENANT_MANAGEMENT_V1", "TENANT_WORKFLOW_V1", "TENANT_CURRENTNESS_V2", "TENANT_SOURCE_V1", "TENANT_WORKSPACE_METADATA_V1", "TENANT_PROJECT_CONTEXT_V1", "TENANT_RUNTIME_STATUS_V1"];
+        provider: "knowledge-v2";
+        codeRevision: string;
+        authorityVersion: 2;
+        context: "TENANT_EXPLICIT_MANAGEMENT_V1";
+        managementConfigured: boolean;
+        resource: string;
+        issuer: string;
+        authorizationEndpoint: string;
+        tokenEndpoint: string;
+        revocationEndpoint: string;
+        mcpEndpoint: string;
+        callEndpoint: string;
+        contentEndpoint: string;
+        contentContextHeader: "x-knowledge-tenant-id";
+        legacyProviderEndpoint: string;
+        protocols: ("2026-07-28" | "2025-06-18")[];
+        requestMaxBytes: 131072;
+        resultMaxBytes: 524288;
+        submissionMaxBytes: 65536;
+        inlineContentMaxBytes: 32768;
+        contentReadMaxBytes: 16777216;
+        collectionMode: "MANUAL_ONLY_OAUTH";
+        projectContentEndpoint: string;
+        projectContentPolicyHeader: "x-knowledge-authority-policy";
+        projectContentProjectHeader: "x-knowledge-project-key";
+        projectControlIdentitySchemaVersion: 19;
+    }>;
+}

package/dist/tenant-runtime.js

@@ -0,0 +1,17 @@
+/** 明确Provider20；仅此新client采用新registry，旧client默认保持原版本。 */
+import { tenantRuntimeInputSchema, tenantRuntimeStatusEnvelopeSchema, tenantRuntimeProviderSchema } from './internal/serving-contracts/index.js';
+import { KnowledgeTenantProjectClient } from './tenant-project.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+export class KnowledgeTenantRuntimeClient extends KnowledgeTenantProjectClient {
+    protocolVersion() { return 20; }
+    async runtimeStatus(raw = {}, options = {}) {
+        const input = tenantRuntimeInputSchema.parse(raw), response = await this.request(this.url('call', 20), { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ tool: 'tenant_runtime_status', arguments: input }), ...(options.signal ? { signal: options.signal } : {}) }), result = tenantRuntimeStatusEnvelopeSchema.safeParse(await this.json(response));
+        if (!result.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        if (result.data.tenantId !== this.options.expectedTenantId)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        return result.data;
+    }
+    async runtimeProvider() { const response = await this.request(this.url('provider', 20)), result = tenantRuntimeProviderSchema.safeParse(await this.json(response)); if (!result.success)
+        throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status); return result.data; }
+}

package/dist/tenant-web-content.d.ts

@@ -0,0 +1,44 @@
+/** 显式 Provider24；继承旧入口但不改变其默认发现版本。 */
+import { type TenantWebToolName, type TenantWebContentToolInput, type TenantWebContentToolResponse } from './internal/serving-contracts/index.js';
+import { KnowledgeTenantRuntimeClient } from './tenant-runtime.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+import { type MaterialStreamOptions } from './material-stream.js';
+export declare class KnowledgeTenantWebContentClient extends KnowledgeTenantRuntimeClient {
+    protected protocolVersion(): 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25;
+    protected failure(raw: unknown, status: number): TenantManagementSdkError<string> | null;
+    webTool<K extends TenantWebToolName>(name: K, raw: TenantWebContentToolInput<K>, options?: {
+        signal?: AbortSignal;
+    }): Promise<TenantWebContentToolResponse<K>>;
+    stream(ref: string, options?: MaterialStreamOptions): Promise<import("./material-stream.js").MaterialStreamResponse>;
+    webProvider(): Promise<{
+        schemaVersion: 24;
+        capabilities: ["TENANT_MANAGEMENT_V1", "TENANT_WORKFLOW_V1", "TENANT_CURRENTNESS_V2", "TENANT_SOURCE_V1", "TENANT_WORKSPACE_METADATA_V1", "TENANT_PROJECT_CONTEXT_V1", "TENANT_RUNTIME_STATUS_V1", "TENANT_WEB_COLLECTION_SPEC_V1", "TENANT_WEB_CRAWL_V1", "TENANT_WEB_DYNAMIC_V1", "TENANT_WEB_CONTENT_V1"];
+        tools: string[];
+        provider: "knowledge-v2";
+        codeRevision: string;
+        authorityVersion: 2;
+        context: "TENANT_EXPLICIT_MANAGEMENT_V1";
+        managementConfigured: boolean;
+        resource: string;
+        issuer: string;
+        authorizationEndpoint: string;
+        tokenEndpoint: string;
+        revocationEndpoint: string;
+        mcpEndpoint: string;
+        callEndpoint: string;
+        contentEndpoint: string;
+        contentContextHeader: "x-knowledge-tenant-id";
+        legacyProviderEndpoint: string;
+        protocols: ("2026-07-28" | "2025-06-18")[];
+        requestMaxBytes: 131072;
+        resultMaxBytes: 524288;
+        submissionMaxBytes: 65536;
+        inlineContentMaxBytes: 32768;
+        contentReadMaxBytes: 16777216;
+        collectionMode: "MANUAL_ONLY_OAUTH";
+        projectContentEndpoint: string;
+        projectContentPolicyHeader: "x-knowledge-authority-policy";
+        projectContentProjectHeader: "x-knowledge-project-key";
+        projectControlIdentitySchemaVersion: 19;
+    }>;
+}

package/dist/tenant-web-content.js

@@ -0,0 +1,70 @@
+import { tokenValue } from './token-provider.js';
+/** 显式 Provider24；继承旧入口但不改变其默认发现版本。 */
+import { tenantWebContentToolSchemas, tenantWebContentEnvelopeSchema, tenantWebContentProviderSchema, tenantWebContentErrorSchema, tenantWebSafeErrorRef } from './internal/serving-contracts/index.js';
+import { tenantWebJobRef, parseTenantResourceRef, tenantStorageKey } from './internal/contracts/index.js';
+import { KnowledgeTenantRuntimeClient } from './tenant-runtime.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+import { materialStream } from './material-stream.js';
+export class KnowledgeTenantWebContentClient extends KnowledgeTenantRuntimeClient {
+    protocolVersion() { return 24; }
+    failure(raw, status) {
+        const value = tenantWebContentErrorSchema.safeParse(raw);
+        if (!value.success)
+            return null;
+        const ref = tenantWebSafeErrorRef(value.data.ref, this.options.expectedTenantId);
+        return new TenantManagementSdkError(value.data.errorCode, status, { ...value.data, ref });
+    }
+    async webTool(name, raw, options = {}) {
+        if (!Object.hasOwn(tenantWebContentToolSchemas, name))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_OPERATION_UNSUPPORTED', 0);
+        const input = tenantWebContentToolSchemas[name].parse(raw), body = JSON.stringify({ tool: name, arguments: input });
+        if (Buffer.byteLength(body) > 131072)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_REQUEST_TOO_LARGE', 0);
+        const response = await this.request(this.url('call', 24), { method: 'POST', headers: { 'content-type': 'application/json' }, body, ...(options.signal ? { signal: options.signal } : {}) });
+        const result = tenantWebContentEnvelopeSchema(name).safeParse(await this.json(response));
+        if (!result.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        if (result.data.tenantId !== this.options.expectedTenantId)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        const data = result.data.data, actual = data.jobRef ?? data.job?.jobRef;
+        const request = input;
+        if (request.requestId && actual !== tenantWebJobRef(this.options.expectedTenantId, request.requestId) || request.jobRef && actual !== request.jobRef)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        return result.data;
+    }
+    async stream(ref, options = {}) {
+        const parsed = parseTenantResourceRef(ref);
+        if (parsed?.resourceType !== 'source_document')
+            return super.stream(ref, options);
+        if (parsed.storageKey !== tenantStorageKey(this.options.expectedTenantId))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', 0);
+        const url = this.url('content', 24);
+        url.searchParams.set('ref', ref);
+        const checked = async (input, init) => { const response = await this.request(new URL(String(input)), init); if (response.status !== 200 && response.status !== 206) {
+            await this.json(response);
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTENT_FAILURE', response.status);
+        } if (response.headers.get('x-knowledge-tenant-id') !== this.options.expectedTenantId || response.headers.get('x-knowledge-authority-policy') !== 'TENANT_NATIVE') {
+            await response.body?.cancel();
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        } return response; };
+        try {
+            const result = await materialStream(checked, url, await tokenValue(this.options), options);
+            if (result.contentClass !== 'REGISTERED_MATERIAL') {
+                await result.body?.cancel();
+                throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', result.status);
+            }
+            return result;
+        }
+        catch (error) {
+            if (error instanceof TenantManagementSdkError)
+                throw error;
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTENT_FAILURE', 0);
+        }
+    }
+    async webProvider() {
+        const response = await this.request(this.url('provider', 24)), value = tenantWebContentProviderSchema.safeParse(await this.json(response));
+        if (!value.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        return value.data;
+    }
+}

package/dist/tenant-web-crawl.d.ts

@@ -0,0 +1,42 @@
+/** 显式 Provider22；继承旧入口但不改变其默认发现版本。 */
+import { type TenantWebToolName, type TenantWebToolInput, type TenantWebCrawlToolResponse } from './internal/serving-contracts/index.js';
+import { KnowledgeTenantRuntimeClient } from './tenant-runtime.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+export declare class KnowledgeTenantWebCrawlClient extends KnowledgeTenantRuntimeClient {
+    protected protocolVersion(): 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25;
+    protected failure(raw: unknown, status: number): TenantManagementSdkError<string> | null;
+    webTool<K extends TenantWebToolName>(name: K, raw: TenantWebToolInput<K>, options?: {
+        signal?: AbortSignal;
+    }): Promise<TenantWebCrawlToolResponse<K>>;
+    webProvider(): Promise<{
+        schemaVersion: 22;
+        capabilities: ["TENANT_MANAGEMENT_V1", "TENANT_WORKFLOW_V1", "TENANT_CURRENTNESS_V2", "TENANT_SOURCE_V1", "TENANT_WORKSPACE_METADATA_V1", "TENANT_PROJECT_CONTEXT_V1", "TENANT_RUNTIME_STATUS_V1", "TENANT_WEB_COLLECTION_SPEC_V1", "TENANT_WEB_CRAWL_V1"];
+        tools: string[];
+        provider: "knowledge-v2";
+        codeRevision: string;
+        authorityVersion: 2;
+        context: "TENANT_EXPLICIT_MANAGEMENT_V1";
+        managementConfigured: boolean;
+        resource: string;
+        issuer: string;
+        authorizationEndpoint: string;
+        tokenEndpoint: string;
+        revocationEndpoint: string;
+        mcpEndpoint: string;
+        callEndpoint: string;
+        contentEndpoint: string;
+        contentContextHeader: "x-knowledge-tenant-id";
+        legacyProviderEndpoint: string;
+        protocols: ("2026-07-28" | "2025-06-18")[];
+        requestMaxBytes: 131072;
+        resultMaxBytes: 524288;
+        submissionMaxBytes: 65536;
+        inlineContentMaxBytes: 32768;
+        contentReadMaxBytes: 16777216;
+        collectionMode: "MANUAL_ONLY_OAUTH";
+        projectContentEndpoint: string;
+        projectContentPolicyHeader: "x-knowledge-authority-policy";
+        projectContentProjectHeader: "x-knowledge-project-key";
+        projectControlIdentitySchemaVersion: 19;
+    }>;
+}