@native-knowledge/knowledge-sdk 0.0.0-stage → 0.1.0-rc.2

package/dist/tenant-web-crawl.js

@@ -0,0 +1,39 @@
+/** 显式 Provider22；继承旧入口但不改变其默认发现版本。 */
+import { tenantWebToolSchemas, tenantWebCrawlEnvelopeSchema, tenantWebCrawlProviderSchema, tenantWebErrorSchema, tenantWebSafeErrorRef } from './internal/serving-contracts/index.js';
+import { tenantWebJobRef } from './internal/contracts/index.js';
+import { KnowledgeTenantRuntimeClient } from './tenant-runtime.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+export class KnowledgeTenantWebCrawlClient extends KnowledgeTenantRuntimeClient {
+    protocolVersion() { return 22; }
+    failure(raw, status) {
+        const value = tenantWebErrorSchema.safeParse(raw);
+        if (!value.success)
+            return null;
+        const ref = tenantWebSafeErrorRef(value.data.ref, this.options.expectedTenantId);
+        return new TenantManagementSdkError(value.data.errorCode, status, { ...value.data, ref });
+    }
+    async webTool(name, raw, options = {}) {
+        if (!Object.hasOwn(tenantWebToolSchemas, name))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_OPERATION_UNSUPPORTED', 0);
+        const input = tenantWebToolSchemas[name].parse(raw), body = JSON.stringify({ tool: name, arguments: input });
+        if (Buffer.byteLength(body) > 131072)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_REQUEST_TOO_LARGE', 0);
+        const response = await this.request(this.url('call', 22), { method: 'POST', headers: { 'content-type': 'application/json' }, body, ...(options.signal ? { signal: options.signal } : {}) });
+        const result = tenantWebCrawlEnvelopeSchema(name).safeParse(await this.json(response));
+        if (!result.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        if (result.data.tenantId !== this.options.expectedTenantId)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        const data = result.data.data, actual = data.jobRef ?? data.job?.jobRef;
+        const request = input;
+        if (request.requestId && actual !== tenantWebJobRef(this.options.expectedTenantId, request.requestId) || request.jobRef && actual !== request.jobRef)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        return result.data;
+    }
+    async webProvider() {
+        const response = await this.request(this.url('provider', 22)), value = tenantWebCrawlProviderSchema.safeParse(await this.json(response));
+        if (!value.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        return value.data;
+    }
+}

package/dist/tenant-web-dynamic.d.ts

@@ -0,0 +1,42 @@
+/** 显式 Provider23；继承旧入口但不改变其默认发现版本。 */
+import { type TenantWebToolName, type TenantWebDynamicToolInput, type TenantWebDynamicToolResponse } from './internal/serving-contracts/index.js';
+import { KnowledgeTenantRuntimeClient } from './tenant-runtime.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+export declare class KnowledgeTenantWebDynamicClient extends KnowledgeTenantRuntimeClient {
+    protected protocolVersion(): 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25;
+    protected failure(raw: unknown, status: number): TenantManagementSdkError<string> | null;
+    webTool<K extends TenantWebToolName>(name: K, raw: TenantWebDynamicToolInput<K>, options?: {
+        signal?: AbortSignal;
+    }): Promise<TenantWebDynamicToolResponse<K>>;
+    webProvider(): Promise<{
+        schemaVersion: 23;
+        capabilities: ["TENANT_MANAGEMENT_V1", "TENANT_WORKFLOW_V1", "TENANT_CURRENTNESS_V2", "TENANT_SOURCE_V1", "TENANT_WORKSPACE_METADATA_V1", "TENANT_PROJECT_CONTEXT_V1", "TENANT_RUNTIME_STATUS_V1", "TENANT_WEB_COLLECTION_SPEC_V1", "TENANT_WEB_CRAWL_V1", "TENANT_WEB_DYNAMIC_V1"];
+        tools: string[];
+        provider: "knowledge-v2";
+        codeRevision: string;
+        authorityVersion: 2;
+        context: "TENANT_EXPLICIT_MANAGEMENT_V1";
+        managementConfigured: boolean;
+        resource: string;
+        issuer: string;
+        authorizationEndpoint: string;
+        tokenEndpoint: string;
+        revocationEndpoint: string;
+        mcpEndpoint: string;
+        callEndpoint: string;
+        contentEndpoint: string;
+        contentContextHeader: "x-knowledge-tenant-id";
+        legacyProviderEndpoint: string;
+        protocols: ("2026-07-28" | "2025-06-18")[];
+        requestMaxBytes: 131072;
+        resultMaxBytes: 524288;
+        submissionMaxBytes: 65536;
+        inlineContentMaxBytes: 32768;
+        contentReadMaxBytes: 16777216;
+        collectionMode: "MANUAL_ONLY_OAUTH";
+        projectContentEndpoint: string;
+        projectContentPolicyHeader: "x-knowledge-authority-policy";
+        projectContentProjectHeader: "x-knowledge-project-key";
+        projectControlIdentitySchemaVersion: 19;
+    }>;
+}

package/dist/tenant-web-dynamic.js

@@ -0,0 +1,39 @@
+/** 显式 Provider23；继承旧入口但不改变其默认发现版本。 */
+import { tenantWebDynamicToolSchemas, tenantWebDynamicEnvelopeSchema, tenantWebDynamicProviderSchema, tenantWebErrorSchema, tenantWebSafeErrorRef } from './internal/serving-contracts/index.js';
+import { tenantWebJobRef } from './internal/contracts/index.js';
+import { KnowledgeTenantRuntimeClient } from './tenant-runtime.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+export class KnowledgeTenantWebDynamicClient extends KnowledgeTenantRuntimeClient {
+    protocolVersion() { return 23; }
+    failure(raw, status) {
+        const value = tenantWebErrorSchema.safeParse(raw);
+        if (!value.success)
+            return null;
+        const ref = tenantWebSafeErrorRef(value.data.ref, this.options.expectedTenantId);
+        return new TenantManagementSdkError(value.data.errorCode, status, { ...value.data, ref });
+    }
+    async webTool(name, raw, options = {}) {
+        if (!Object.hasOwn(tenantWebDynamicToolSchemas, name))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_OPERATION_UNSUPPORTED', 0);
+        const input = tenantWebDynamicToolSchemas[name].parse(raw), body = JSON.stringify({ tool: name, arguments: input });
+        if (Buffer.byteLength(body) > 131072)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_REQUEST_TOO_LARGE', 0);
+        const response = await this.request(this.url('call', 23), { method: 'POST', headers: { 'content-type': 'application/json' }, body, ...(options.signal ? { signal: options.signal } : {}) });
+        const result = tenantWebDynamicEnvelopeSchema(name).safeParse(await this.json(response));
+        if (!result.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        if (result.data.tenantId !== this.options.expectedTenantId)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        const data = result.data.data, actual = data.jobRef ?? data.job?.jobRef;
+        const request = input;
+        if (request.requestId && actual !== tenantWebJobRef(this.options.expectedTenantId, request.requestId) || request.jobRef && actual !== request.jobRef)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        return result.data;
+    }
+    async webProvider() {
+        const response = await this.request(this.url('provider', 23)), value = tenantWebDynamicProviderSchema.safeParse(await this.json(response));
+        if (!value.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        return value.data;
+    }
+}

package/dist/tenant-web-workflow.d.ts

@@ -0,0 +1,43 @@
+import { type TenantWebWorkflowToolName, type TenantWebWorkflowToolInput, type TenantWebWorkflowToolResponse } from './internal/serving-contracts/index.js';
+import { KnowledgeTenantWebContentClient } from './tenant-web-content.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+import { type MaterialStreamOptions } from './material-stream.js';
+export declare class KnowledgeTenantWebWorkflowClient extends KnowledgeTenantWebContentClient {
+    protected protocolVersion(): 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25;
+    protected failure(raw: unknown, status: number): TenantManagementSdkError<string> | null;
+    workflowTool<K extends TenantWebWorkflowToolName>(name: K, raw: TenantWebWorkflowToolInput<K>, options?: {
+        signal?: AbortSignal;
+    }): Promise<TenantWebWorkflowToolResponse<K>>;
+    workflowProvider(): Promise<{
+        schemaVersion: 25;
+        collectionMode: "EXPLICIT_HOST_WITH_OPT_IN_DUE";
+        tools: string[];
+        capabilities: ["TENANT_MANAGEMENT_V1", "TENANT_WORKFLOW_V1", "TENANT_CURRENTNESS_V2", "TENANT_SOURCE_V1", "TENANT_WORKSPACE_METADATA_V1", "TENANT_PROJECT_CONTEXT_V1", "TENANT_RUNTIME_STATUS_V1", "TENANT_WEB_COLLECTION_SPEC_V1", "TENANT_WEB_CRAWL_V1", "TENANT_WEB_DYNAMIC_V1", "TENANT_WEB_CONTENT_V1", "TENANT_WEB_WORKFLOW_V1"];
+        provider: "knowledge-v2";
+        codeRevision: string;
+        authorityVersion: 2;
+        context: "TENANT_EXPLICIT_MANAGEMENT_V1";
+        managementConfigured: boolean;
+        resource: string;
+        issuer: string;
+        authorizationEndpoint: string;
+        tokenEndpoint: string;
+        revocationEndpoint: string;
+        mcpEndpoint: string;
+        callEndpoint: string;
+        contentEndpoint: string;
+        contentContextHeader: "x-knowledge-tenant-id";
+        legacyProviderEndpoint: string;
+        protocols: ("2026-07-28" | "2025-06-18")[];
+        requestMaxBytes: 131072;
+        resultMaxBytes: 524288;
+        submissionMaxBytes: 65536;
+        inlineContentMaxBytes: 32768;
+        contentReadMaxBytes: 16777216;
+        projectContentEndpoint: string;
+        projectContentPolicyHeader: "x-knowledge-authority-policy";
+        projectContentProjectHeader: "x-knowledge-project-key";
+        projectControlIdentitySchemaVersion: 19;
+    }>;
+    stream(ref: string, options?: MaterialStreamOptions): Promise<import("./material-stream.js").MaterialStreamResponse>;
+}

package/dist/tenant-web-workflow.js

@@ -0,0 +1,63 @@
+import { tokenValue } from './token-provider.js';
+/** Explicit Provider25 network client; keeps old webTool signatures unchanged. */
+import { createHash } from 'node:crypto';
+import { tenantWebWorkflowToolSchemas as schemas, tenantWebWorkflowEnvelopeSchema, tenantWebWorkflowProviderSchema, tenantWebWorkflowErrorSchema, tenantWebSafeErrorRef } from './internal/serving-contracts/index.js';
+import { tenantWebJobRef, parseTenantResourceRef, tenantStorageKey } from './internal/contracts/index.js';
+import { KnowledgeTenantWebContentClient } from './tenant-web-content.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+import { materialStream } from './material-stream.js';
+export class KnowledgeTenantWebWorkflowClient extends KnowledgeTenantWebContentClient {
+    protocolVersion() { return 25; }
+    failure(raw, status) { const v = tenantWebWorkflowErrorSchema.safeParse(raw); return v.success ? new TenantManagementSdkError(v.data.errorCode, status, { ...v.data, ref: tenantWebSafeErrorRef(v.data.ref, this.options.expectedTenantId) }) : null; }
+    async workflowTool(name, raw, options = {}) {
+        if (!Object.hasOwn(schemas, name))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_OPERATION_UNSUPPORTED', 0);
+        const input = schemas[name].parse(raw), body = JSON.stringify({ tool: name, arguments: input });
+        if (Buffer.byteLength(body) > 131072)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_REQUEST_TOO_LARGE', 0);
+        const response = await this.request(this.url('call', 25), { method: 'POST', headers: { 'content-type': 'application/json' }, body, ...(options.signal ? { signal: options.signal } : {}) }), parsed = tenantWebWorkflowEnvelopeSchema(name).safeParse(await this.json(response));
+        if (!parsed.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        const value = parsed.data;
+        const request = input, data = value.data, actual = data.jobRef ?? data.job?.jobRef, expected = name === 'tenant_web_collect_submit' || name === 'tenant_web_collect_refresh' ? tenantWebJobRef(this.options.expectedTenantId, request.requestId) : request.jobRef;
+        if (value.tenantId !== this.options.expectedTenantId || expected && actual !== expected)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        if (name === 'tenant_web_collect_read' && data.result?.delivery === 'INLINE_BASE64') {
+            const r = data.result, b = Buffer.from(r.contentBase64 ?? '', 'base64');
+            if (r.contentBase64 !== b.toString('base64') || b.length !== r.byteLength || 'sha256:' + createHash('sha256').update(b).digest('hex') !== r.item?.identityHash)
+                throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTENT_IDENTITY_MISMATCH', response.status);
+        }
+        return value;
+    }
+    async workflowProvider() { const r = await this.request(this.url('provider', 25)), v = tenantWebWorkflowProviderSchema.safeParse(await this.json(r)); if (!v.success)
+        throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', r.status); return v.data; }
+    async stream(ref, options = {}) {
+        const p = parseTenantResourceRef(ref);
+        if (!p || !['evidence', 'source_document'].includes(p.resourceType))
+            return super.stream(ref, options);
+        if (p.storageKey !== tenantStorageKey(this.options.expectedTenantId))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', 0);
+        const url = this.url('content', 25);
+        url.searchParams.set('ref', ref);
+        const checked = async (input, init) => { const r = await this.request(new URL(String(input)), init); if (r.status !== 200 && r.status !== 206) {
+            await this.json(r);
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTENT_FAILURE', r.status);
+        } if (r.headers.get('x-knowledge-tenant-id') !== this.options.expectedTenantId || r.headers.get('x-knowledge-authority-policy') !== 'TENANT_NATIVE') {
+            await r.body?.cancel();
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', r.status);
+        } return r; };
+        try {
+            const r = await materialStream(checked, url, await tokenValue(this.options), options);
+            if (r.contentClass !== (p.resourceType === 'evidence' ? 'RAW_EVIDENCE' : 'REGISTERED_MATERIAL')) {
+                await r.body?.cancel();
+                throw new Error();
+            }
+            return r;
+        }
+        catch (e) {
+            if (e instanceof TenantManagementSdkError)
+                throw e;
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTENT_FAILURE', 0);
+        }
+    }
+}

package/dist/tenant-web.d.ts

@@ -0,0 +1,42 @@
+/** 显式 Provider21；继承旧入口但不改变其默认发现版本。 */
+import { type TenantWebToolName, type TenantWebToolInput, type TenantWebToolResponse } from './internal/serving-contracts/index.js';
+import { KnowledgeTenantRuntimeClient } from './tenant-runtime.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+export declare class KnowledgeTenantWebCollectionClient extends KnowledgeTenantRuntimeClient {
+    protected protocolVersion(): 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25;
+    protected failure(raw: unknown, status: number): TenantManagementSdkError<string> | null;
+    webTool<K extends TenantWebToolName>(name: K, raw: TenantWebToolInput<K>, options?: {
+        signal?: AbortSignal;
+    }): Promise<TenantWebToolResponse<K>>;
+    webProvider(): Promise<{
+        schemaVersion: 21;
+        tools: string[];
+        capabilities: ["TENANT_MANAGEMENT_V1", "TENANT_WORKFLOW_V1", "TENANT_CURRENTNESS_V2", "TENANT_SOURCE_V1", "TENANT_WORKSPACE_METADATA_V1", "TENANT_PROJECT_CONTEXT_V1", "TENANT_RUNTIME_STATUS_V1", "TENANT_WEB_COLLECTION_SPEC_V1"];
+        provider: "knowledge-v2";
+        codeRevision: string;
+        authorityVersion: 2;
+        context: "TENANT_EXPLICIT_MANAGEMENT_V1";
+        managementConfigured: boolean;
+        resource: string;
+        issuer: string;
+        authorizationEndpoint: string;
+        tokenEndpoint: string;
+        revocationEndpoint: string;
+        mcpEndpoint: string;
+        callEndpoint: string;
+        contentEndpoint: string;
+        contentContextHeader: "x-knowledge-tenant-id";
+        legacyProviderEndpoint: string;
+        protocols: ("2026-07-28" | "2025-06-18")[];
+        requestMaxBytes: 131072;
+        resultMaxBytes: 524288;
+        submissionMaxBytes: 65536;
+        inlineContentMaxBytes: 32768;
+        contentReadMaxBytes: 16777216;
+        collectionMode: "MANUAL_ONLY_OAUTH";
+        projectContentEndpoint: string;
+        projectContentPolicyHeader: "x-knowledge-authority-policy";
+        projectContentProjectHeader: "x-knowledge-project-key";
+        projectControlIdentitySchemaVersion: 19;
+    }>;
+}

package/dist/tenant-web.js

@@ -0,0 +1,39 @@
+/** 显式 Provider21；继承旧入口但不改变其默认发现版本。 */
+import { tenantWebToolSchemas, tenantWebEnvelopeSchema, tenantWebProviderSchema, tenantWebErrorSchema, tenantWebSafeErrorRef } from './internal/serving-contracts/index.js';
+import { tenantWebJobRef } from './internal/contracts/index.js';
+import { KnowledgeTenantRuntimeClient } from './tenant-runtime.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+export class KnowledgeTenantWebCollectionClient extends KnowledgeTenantRuntimeClient {
+    protocolVersion() { return 21; }
+    failure(raw, status) {
+        const value = tenantWebErrorSchema.safeParse(raw);
+        if (!value.success)
+            return null;
+        const ref = tenantWebSafeErrorRef(value.data.ref, this.options.expectedTenantId);
+        return new TenantManagementSdkError(value.data.errorCode, status, { ...value.data, ref });
+    }
+    async webTool(name, raw, options = {}) {
+        if (!Object.hasOwn(tenantWebToolSchemas, name))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_OPERATION_UNSUPPORTED', 0);
+        const input = tenantWebToolSchemas[name].parse(raw), body = JSON.stringify({ tool: name, arguments: input });
+        if (Buffer.byteLength(body) > 131072)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_REQUEST_TOO_LARGE', 0);
+        const response = await this.request(this.url('call', 21), { method: 'POST', headers: { 'content-type': 'application/json' }, body, ...(options.signal ? { signal: options.signal } : {}) });
+        const result = tenantWebEnvelopeSchema(name).safeParse(await this.json(response));
+        if (!result.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        if (result.data.tenantId !== this.options.expectedTenantId)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        const data = result.data.data, actual = data.jobRef ?? data.job?.jobRef;
+        const request = input;
+        if (request.requestId && actual !== tenantWebJobRef(this.options.expectedTenantId, request.requestId) || request.jobRef && actual !== request.jobRef)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        return result.data;
+    }
+    async webProvider() {
+        const response = await this.request(this.url('provider', 21)), value = tenantWebProviderSchema.safeParse(await this.json(response));
+        if (!value.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        return value.data;
+    }
+}

package/dist/tenant-workspace.d.ts

@@ -0,0 +1,36 @@
+/** Explicit v18 client; the original management client keeps its v17 default contract. */
+import { type TenantWorkspaceExtraToolName, type TenantWorkspaceExtraInput, type TenantWorkspaceResponse } from './internal/serving-contracts/index.js';
+import { KnowledgeTenantManagementClient } from './tenant-management.js';
+export declare class KnowledgeTenantWorkspaceClient extends KnowledgeTenantManagementClient {
+    protected protocolVersion(): 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25;
+    workspaceTool<K extends TenantWorkspaceExtraToolName>(name: K, raw: TenantWorkspaceExtraInput<K>, options?: {
+        signal?: AbortSignal;
+    }): Promise<TenantWorkspaceResponse<K>>;
+    workspaceProvider(): Promise<{
+        provider: "knowledge-v2";
+        codeRevision: string;
+        authorityVersion: 2;
+        context: "TENANT_EXPLICIT_MANAGEMENT_V1";
+        managementConfigured: boolean;
+        resource: string;
+        issuer: string;
+        authorizationEndpoint: string;
+        tokenEndpoint: string;
+        revocationEndpoint: string;
+        mcpEndpoint: string;
+        callEndpoint: string;
+        contentEndpoint: string;
+        contentContextHeader: "x-knowledge-tenant-id";
+        legacyProviderEndpoint: string;
+        protocols: ("2026-07-28" | "2025-06-18")[];
+        requestMaxBytes: 131072;
+        resultMaxBytes: 524288;
+        submissionMaxBytes: 65536;
+        inlineContentMaxBytes: 32768;
+        contentReadMaxBytes: 16777216;
+        collectionMode: "MANUAL_ONLY_OAUTH";
+        schemaVersion: 18;
+        tools: string[];
+        capabilities: ["TENANT_MANAGEMENT_V1", "TENANT_WORKFLOW_V1", "TENANT_CURRENTNESS_V2", "TENANT_SOURCE_V1", "TENANT_WORKSPACE_METADATA_V1"];
+    }>;
+}

package/dist/tenant-workspace.js

@@ -0,0 +1,21 @@
+/** Explicit v18 client; the original management client keeps its v17 default contract. */
+import { tenantWorkspaceExtraToolSchemas, tenantWorkspaceEnvelopeSchema, tenantWorkspaceProviderSchema } from './internal/serving-contracts/index.js';
+import { KnowledgeTenantManagementClient, TenantManagementSdkError } from './tenant-management.js';
+export class KnowledgeTenantWorkspaceClient extends KnowledgeTenantManagementClient {
+    protocolVersion() { return 18; }
+    async workspaceTool(name, raw, options = {}) {
+        if (!Object.hasOwn(tenantWorkspaceExtraToolSchemas, name))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_OPERATION_UNSUPPORTED', 0);
+        const input = tenantWorkspaceExtraToolSchemas[name].parse(raw), body = JSON.stringify({ tool: name, arguments: input });
+        if (Buffer.byteLength(body) > 131072)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_REQUEST_TOO_LARGE', 0);
+        const response = await this.request(this.url('call'), { method: 'POST', headers: { 'content-type': 'application/json' }, body, ...(options.signal ? { signal: options.signal } : {}) }), result = tenantWorkspaceEnvelopeSchema(name).safeParse(await this.json(response));
+        if (!result.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        if (result.data.tenantId !== this.options.expectedTenantId)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        return result.data;
+    }
+    async workspaceProvider() { const response = await this.request(this.url('provider', 18)), result = tenantWorkspaceProviderSchema.safeParse(await this.json(response)); if (!result.success)
+        throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status); return result.data; }
+}

package/dist/token-provider.d.ts

@@ -0,0 +1,14 @@
+/// <reference types="node" />
+/** 请求前取得当前凭据；mutation 永不因认证/网络失败被自动重放。 */
+export interface TokenProvider {
+    getToken(options?: {
+        forceRefresh?: boolean;
+    }): Promise<string>;
+}
+export interface TokenOptions {
+    token?: string;
+    tokenProvider?: TokenProvider;
+}
+export declare function validateTokenOptions(o: TokenOptions): void;
+export declare function tokenValue(o: TokenOptions): Promise<string>;
+export declare function authorizedFetch(fetchImpl: typeof fetch, o: TokenOptions, origin: string): typeof fetch;

package/dist/token-provider.js

@@ -0,0 +1,21 @@
+export function validateTokenOptions(o) { if ((o.token !== undefined) === (o.tokenProvider !== undefined))
+    throw Error('AUTH_CREDENTIAL_SOURCE_CONFLICT'); if (o.tokenProvider && typeof o.tokenProvider.getToken !== 'function')
+    throw Error('AUTH_TOKEN_PROVIDER_INVALID'); if (o.token && (!/^[^\s\u0000-\u001f\u007f]{16,4096}$/.test(o.token)))
+    throw Error('AUTH_TOKEN_INVALID'); }
+export async function tokenValue(o) { const value = o.tokenProvider ? await o.tokenProvider.getToken() : o.token; if (!value || !/^[^\s\u0000-\u001f\u007f]{16,4096}$/.test(value))
+    throw Error('AUTH_TOKEN_INVALID'); return value; }
+export function authorizedFetch(fetchImpl, o, origin) {
+    validateTokenOptions(o);
+    return async (input, init = {}) => {
+        const url = new URL(input instanceof Request ? input.url : String(input));
+        if (url.origin !== origin)
+            throw Error('AUTH_ENDPOINT_MISMATCH');
+        const run = async (force = false) => { const headers = new Headers(init.headers); headers.set('authorization', 'Bearer ' + (force && o.tokenProvider ? await o.tokenProvider.getToken({ forceRefresh: true }) : await tokenValue(o))); return fetchImpl(input, { ...init, headers: Object.fromEntries(headers), redirect: 'error', signal: init.signal ? AbortSignal.any([init.signal, AbortSignal.timeout(60000)]) : AbortSignal.timeout(60000) }); };
+        const r = await run();
+        if (r.status === 401 && o.tokenProvider && ['GET', 'HEAD'].includes((init.method ?? 'GET').toUpperCase())) {
+            await r.body?.cancel();
+            return run(true);
+        }
+        return r;
+    };
+}

package/package.json

@@ -1,6 +1,48 @@
 {
   "name": "@native-knowledge/knowledge-sdk",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0-rc.2",
+  "private": false,
+  "type": "module",
+  "description": "Typed remote native-knowledge clients with OAuth and Agent-native discovery",
+  "engines": {
+    "node": ">=24"
+  },
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/SENLIN746/native-knowledge.git"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./auth": {
+      "types": "./dist/auth.d.ts",
+      "import": "./dist/auth.js",
+      "default": "./dist/auth.js"
+    },
+    "./session": {
+      "types": "./dist/session.d.ts",
+      "import": "./dist/session.js",
+      "default": "./dist/session.js"
+    },
+    "./token-provider": {
+      "types": "./dist/token-provider.d.ts",
+      "import": "./dist/token-provider.js",
+      "default": "./dist/token-provider.js"
+    }
+  },
+  "types": "./dist/index.d.ts",
+  "dependencies": {
+    "zod": "^4.6.7",
+    "@types/node": "24.13.3"
+  }
 }