@native-knowledge/knowledge-sdk 0.1.0-rc.1 → 0.1.0-rc.2

package/dist/tenant-runtime.js

@@ -0,0 +1,17 @@
+/** 明确Provider20；仅此新client采用新registry，旧client默认保持原版本。 */
+import { tenantRuntimeInputSchema, tenantRuntimeStatusEnvelopeSchema, tenantRuntimeProviderSchema } from './internal/serving-contracts/index.js';
+import { KnowledgeTenantProjectClient } from './tenant-project.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+export class KnowledgeTenantRuntimeClient extends KnowledgeTenantProjectClient {
+    protocolVersion() { return 20; }
+    async runtimeStatus(raw = {}, options = {}) {
+        const input = tenantRuntimeInputSchema.parse(raw), response = await this.request(this.url('call', 20), { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ tool: 'tenant_runtime_status', arguments: input }), ...(options.signal ? { signal: options.signal } : {}) }), result = tenantRuntimeStatusEnvelopeSchema.safeParse(await this.json(response));
+        if (!result.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        if (result.data.tenantId !== this.options.expectedTenantId)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        return result.data;
+    }
+    async runtimeProvider() { const response = await this.request(this.url('provider', 20)), result = tenantRuntimeProviderSchema.safeParse(await this.json(response)); if (!result.success)
+        throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status); return result.data; }
+}

package/dist/{types/sdk/tenant-web-content.d.ts → tenant-web-content.d.ts}

@@ -1,5 +1,5 @@
 /** 显式 Provider24；继承旧入口但不改变其默认发现版本。 */
-import { type TenantWebToolName, type TenantWebContentToolInput, type TenantWebContentToolResponse } from '../serving-contracts/index.js';
+import { type TenantWebToolName, type TenantWebContentToolInput, type TenantWebContentToolResponse } from './internal/serving-contracts/index.js';
 import { KnowledgeTenantRuntimeClient } from './tenant-runtime.js';
 import { TenantManagementSdkError } from './tenant-management.js';
 import { type MaterialStreamOptions } from './material-stream.js';

package/dist/tenant-web-content.js

@@ -0,0 +1,70 @@
+import { tokenValue } from './token-provider.js';
+/** 显式 Provider24；继承旧入口但不改变其默认发现版本。 */
+import { tenantWebContentToolSchemas, tenantWebContentEnvelopeSchema, tenantWebContentProviderSchema, tenantWebContentErrorSchema, tenantWebSafeErrorRef } from './internal/serving-contracts/index.js';
+import { tenantWebJobRef, parseTenantResourceRef, tenantStorageKey } from './internal/contracts/index.js';
+import { KnowledgeTenantRuntimeClient } from './tenant-runtime.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+import { materialStream } from './material-stream.js';
+export class KnowledgeTenantWebContentClient extends KnowledgeTenantRuntimeClient {
+    protocolVersion() { return 24; }
+    failure(raw, status) {
+        const value = tenantWebContentErrorSchema.safeParse(raw);
+        if (!value.success)
+            return null;
+        const ref = tenantWebSafeErrorRef(value.data.ref, this.options.expectedTenantId);
+        return new TenantManagementSdkError(value.data.errorCode, status, { ...value.data, ref });
+    }
+    async webTool(name, raw, options = {}) {
+        if (!Object.hasOwn(tenantWebContentToolSchemas, name))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_OPERATION_UNSUPPORTED', 0);
+        const input = tenantWebContentToolSchemas[name].parse(raw), body = JSON.stringify({ tool: name, arguments: input });
+        if (Buffer.byteLength(body) > 131072)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_REQUEST_TOO_LARGE', 0);
+        const response = await this.request(this.url('call', 24), { method: 'POST', headers: { 'content-type': 'application/json' }, body, ...(options.signal ? { signal: options.signal } : {}) });
+        const result = tenantWebContentEnvelopeSchema(name).safeParse(await this.json(response));
+        if (!result.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        if (result.data.tenantId !== this.options.expectedTenantId)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        const data = result.data.data, actual = data.jobRef ?? data.job?.jobRef;
+        const request = input;
+        if (request.requestId && actual !== tenantWebJobRef(this.options.expectedTenantId, request.requestId) || request.jobRef && actual !== request.jobRef)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        return result.data;
+    }
+    async stream(ref, options = {}) {
+        const parsed = parseTenantResourceRef(ref);
+        if (parsed?.resourceType !== 'source_document')
+            return super.stream(ref, options);
+        if (parsed.storageKey !== tenantStorageKey(this.options.expectedTenantId))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', 0);
+        const url = this.url('content', 24);
+        url.searchParams.set('ref', ref);
+        const checked = async (input, init) => { const response = await this.request(new URL(String(input)), init); if (response.status !== 200 && response.status !== 206) {
+            await this.json(response);
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTENT_FAILURE', response.status);
+        } if (response.headers.get('x-knowledge-tenant-id') !== this.options.expectedTenantId || response.headers.get('x-knowledge-authority-policy') !== 'TENANT_NATIVE') {
+            await response.body?.cancel();
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        } return response; };
+        try {
+            const result = await materialStream(checked, url, await tokenValue(this.options), options);
+            if (result.contentClass !== 'REGISTERED_MATERIAL') {
+                await result.body?.cancel();
+                throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', result.status);
+            }
+            return result;
+        }
+        catch (error) {
+            if (error instanceof TenantManagementSdkError)
+                throw error;
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTENT_FAILURE', 0);
+        }
+    }
+    async webProvider() {
+        const response = await this.request(this.url('provider', 24)), value = tenantWebContentProviderSchema.safeParse(await this.json(response));
+        if (!value.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        return value.data;
+    }
+}

package/dist/{types/sdk/tenant-web-crawl.d.ts → tenant-web-crawl.d.ts}

@@ -1,5 +1,5 @@
 /** 显式 Provider22；继承旧入口但不改变其默认发现版本。 */
-import { type TenantWebToolName, type TenantWebToolInput, type TenantWebCrawlToolResponse } from '../serving-contracts/index.js';
+import { type TenantWebToolName, type TenantWebToolInput, type TenantWebCrawlToolResponse } from './internal/serving-contracts/index.js';
 import { KnowledgeTenantRuntimeClient } from './tenant-runtime.js';
 import { TenantManagementSdkError } from './tenant-management.js';
 export declare class KnowledgeTenantWebCrawlClient extends KnowledgeTenantRuntimeClient {

package/dist/tenant-web-crawl.js

@@ -0,0 +1,39 @@
+/** 显式 Provider22；继承旧入口但不改变其默认发现版本。 */
+import { tenantWebToolSchemas, tenantWebCrawlEnvelopeSchema, tenantWebCrawlProviderSchema, tenantWebErrorSchema, tenantWebSafeErrorRef } from './internal/serving-contracts/index.js';
+import { tenantWebJobRef } from './internal/contracts/index.js';
+import { KnowledgeTenantRuntimeClient } from './tenant-runtime.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+export class KnowledgeTenantWebCrawlClient extends KnowledgeTenantRuntimeClient {
+    protocolVersion() { return 22; }
+    failure(raw, status) {
+        const value = tenantWebErrorSchema.safeParse(raw);
+        if (!value.success)
+            return null;
+        const ref = tenantWebSafeErrorRef(value.data.ref, this.options.expectedTenantId);
+        return new TenantManagementSdkError(value.data.errorCode, status, { ...value.data, ref });
+    }
+    async webTool(name, raw, options = {}) {
+        if (!Object.hasOwn(tenantWebToolSchemas, name))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_OPERATION_UNSUPPORTED', 0);
+        const input = tenantWebToolSchemas[name].parse(raw), body = JSON.stringify({ tool: name, arguments: input });
+        if (Buffer.byteLength(body) > 131072)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_REQUEST_TOO_LARGE', 0);
+        const response = await this.request(this.url('call', 22), { method: 'POST', headers: { 'content-type': 'application/json' }, body, ...(options.signal ? { signal: options.signal } : {}) });
+        const result = tenantWebCrawlEnvelopeSchema(name).safeParse(await this.json(response));
+        if (!result.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        if (result.data.tenantId !== this.options.expectedTenantId)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        const data = result.data.data, actual = data.jobRef ?? data.job?.jobRef;
+        const request = input;
+        if (request.requestId && actual !== tenantWebJobRef(this.options.expectedTenantId, request.requestId) || request.jobRef && actual !== request.jobRef)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        return result.data;
+    }
+    async webProvider() {
+        const response = await this.request(this.url('provider', 22)), value = tenantWebCrawlProviderSchema.safeParse(await this.json(response));
+        if (!value.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        return value.data;
+    }
+}

package/dist/{types/sdk/tenant-web-dynamic.d.ts → tenant-web-dynamic.d.ts}

@@ -1,5 +1,5 @@
 /** 显式 Provider23；继承旧入口但不改变其默认发现版本。 */
-import { type TenantWebToolName, type TenantWebDynamicToolInput, type TenantWebDynamicToolResponse } from '../serving-contracts/index.js';
+import { type TenantWebToolName, type TenantWebDynamicToolInput, type TenantWebDynamicToolResponse } from './internal/serving-contracts/index.js';
 import { KnowledgeTenantRuntimeClient } from './tenant-runtime.js';
 import { TenantManagementSdkError } from './tenant-management.js';
 export declare class KnowledgeTenantWebDynamicClient extends KnowledgeTenantRuntimeClient {

package/dist/tenant-web-dynamic.js

@@ -0,0 +1,39 @@
+/** 显式 Provider23；继承旧入口但不改变其默认发现版本。 */
+import { tenantWebDynamicToolSchemas, tenantWebDynamicEnvelopeSchema, tenantWebDynamicProviderSchema, tenantWebErrorSchema, tenantWebSafeErrorRef } from './internal/serving-contracts/index.js';
+import { tenantWebJobRef } from './internal/contracts/index.js';
+import { KnowledgeTenantRuntimeClient } from './tenant-runtime.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+export class KnowledgeTenantWebDynamicClient extends KnowledgeTenantRuntimeClient {
+    protocolVersion() { return 23; }
+    failure(raw, status) {
+        const value = tenantWebErrorSchema.safeParse(raw);
+        if (!value.success)
+            return null;
+        const ref = tenantWebSafeErrorRef(value.data.ref, this.options.expectedTenantId);
+        return new TenantManagementSdkError(value.data.errorCode, status, { ...value.data, ref });
+    }
+    async webTool(name, raw, options = {}) {
+        if (!Object.hasOwn(tenantWebDynamicToolSchemas, name))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_OPERATION_UNSUPPORTED', 0);
+        const input = tenantWebDynamicToolSchemas[name].parse(raw), body = JSON.stringify({ tool: name, arguments: input });
+        if (Buffer.byteLength(body) > 131072)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_REQUEST_TOO_LARGE', 0);
+        const response = await this.request(this.url('call', 23), { method: 'POST', headers: { 'content-type': 'application/json' }, body, ...(options.signal ? { signal: options.signal } : {}) });
+        const result = tenantWebDynamicEnvelopeSchema(name).safeParse(await this.json(response));
+        if (!result.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        if (result.data.tenantId !== this.options.expectedTenantId)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        const data = result.data.data, actual = data.jobRef ?? data.job?.jobRef;
+        const request = input;
+        if (request.requestId && actual !== tenantWebJobRef(this.options.expectedTenantId, request.requestId) || request.jobRef && actual !== request.jobRef)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        return result.data;
+    }
+    async webProvider() {
+        const response = await this.request(this.url('provider', 23)), value = tenantWebDynamicProviderSchema.safeParse(await this.json(response));
+        if (!value.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        return value.data;
+    }
+}

package/dist/{types/sdk/tenant-web-workflow.d.ts → tenant-web-workflow.d.ts}

@@ -1,4 +1,4 @@
-import { type TenantWebWorkflowToolName, type TenantWebWorkflowToolInput, type TenantWebWorkflowToolResponse } from '../serving-contracts/index.js';
+import { type TenantWebWorkflowToolName, type TenantWebWorkflowToolInput, type TenantWebWorkflowToolResponse } from './internal/serving-contracts/index.js';
 import { KnowledgeTenantWebContentClient } from './tenant-web-content.js';
 import { TenantManagementSdkError } from './tenant-management.js';
 import { type MaterialStreamOptions } from './material-stream.js';

package/dist/tenant-web-workflow.js

@@ -0,0 +1,63 @@
+import { tokenValue } from './token-provider.js';
+/** Explicit Provider25 network client; keeps old webTool signatures unchanged. */
+import { createHash } from 'node:crypto';
+import { tenantWebWorkflowToolSchemas as schemas, tenantWebWorkflowEnvelopeSchema, tenantWebWorkflowProviderSchema, tenantWebWorkflowErrorSchema, tenantWebSafeErrorRef } from './internal/serving-contracts/index.js';
+import { tenantWebJobRef, parseTenantResourceRef, tenantStorageKey } from './internal/contracts/index.js';
+import { KnowledgeTenantWebContentClient } from './tenant-web-content.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+import { materialStream } from './material-stream.js';
+export class KnowledgeTenantWebWorkflowClient extends KnowledgeTenantWebContentClient {
+    protocolVersion() { return 25; }
+    failure(raw, status) { const v = tenantWebWorkflowErrorSchema.safeParse(raw); return v.success ? new TenantManagementSdkError(v.data.errorCode, status, { ...v.data, ref: tenantWebSafeErrorRef(v.data.ref, this.options.expectedTenantId) }) : null; }
+    async workflowTool(name, raw, options = {}) {
+        if (!Object.hasOwn(schemas, name))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_OPERATION_UNSUPPORTED', 0);
+        const input = schemas[name].parse(raw), body = JSON.stringify({ tool: name, arguments: input });
+        if (Buffer.byteLength(body) > 131072)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_REQUEST_TOO_LARGE', 0);
+        const response = await this.request(this.url('call', 25), { method: 'POST', headers: { 'content-type': 'application/json' }, body, ...(options.signal ? { signal: options.signal } : {}) }), parsed = tenantWebWorkflowEnvelopeSchema(name).safeParse(await this.json(response));
+        if (!parsed.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        const value = parsed.data;
+        const request = input, data = value.data, actual = data.jobRef ?? data.job?.jobRef, expected = name === 'tenant_web_collect_submit' || name === 'tenant_web_collect_refresh' ? tenantWebJobRef(this.options.expectedTenantId, request.requestId) : request.jobRef;
+        if (value.tenantId !== this.options.expectedTenantId || expected && actual !== expected)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        if (name === 'tenant_web_collect_read' && data.result?.delivery === 'INLINE_BASE64') {
+            const r = data.result, b = Buffer.from(r.contentBase64 ?? '', 'base64');
+            if (r.contentBase64 !== b.toString('base64') || b.length !== r.byteLength || 'sha256:' + createHash('sha256').update(b).digest('hex') !== r.item?.identityHash)
+                throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTENT_IDENTITY_MISMATCH', response.status);
+        }
+        return value;
+    }
+    async workflowProvider() { const r = await this.request(this.url('provider', 25)), v = tenantWebWorkflowProviderSchema.safeParse(await this.json(r)); if (!v.success)
+        throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', r.status); return v.data; }
+    async stream(ref, options = {}) {
+        const p = parseTenantResourceRef(ref);
+        if (!p || !['evidence', 'source_document'].includes(p.resourceType))
+            return super.stream(ref, options);
+        if (p.storageKey !== tenantStorageKey(this.options.expectedTenantId))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', 0);
+        const url = this.url('content', 25);
+        url.searchParams.set('ref', ref);
+        const checked = async (input, init) => { const r = await this.request(new URL(String(input)), init); if (r.status !== 200 && r.status !== 206) {
+            await this.json(r);
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTENT_FAILURE', r.status);
+        } if (r.headers.get('x-knowledge-tenant-id') !== this.options.expectedTenantId || r.headers.get('x-knowledge-authority-policy') !== 'TENANT_NATIVE') {
+            await r.body?.cancel();
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', r.status);
+        } return r; };
+        try {
+            const r = await materialStream(checked, url, await tokenValue(this.options), options);
+            if (r.contentClass !== (p.resourceType === 'evidence' ? 'RAW_EVIDENCE' : 'REGISTERED_MATERIAL')) {
+                await r.body?.cancel();
+                throw new Error();
+            }
+            return r;
+        }
+        catch (e) {
+            if (e instanceof TenantManagementSdkError)
+                throw e;
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTENT_FAILURE', 0);
+        }
+    }
+}

package/dist/{types/sdk/tenant-web.d.ts → tenant-web.d.ts}

@@ -1,5 +1,5 @@
 /** 显式 Provider21；继承旧入口但不改变其默认发现版本。 */
-import { type TenantWebToolName, type TenantWebToolInput, type TenantWebToolResponse } from '../serving-contracts/index.js';
+import { type TenantWebToolName, type TenantWebToolInput, type TenantWebToolResponse } from './internal/serving-contracts/index.js';
 import { KnowledgeTenantRuntimeClient } from './tenant-runtime.js';
 import { TenantManagementSdkError } from './tenant-management.js';
 export declare class KnowledgeTenantWebCollectionClient extends KnowledgeTenantRuntimeClient {

package/dist/tenant-web.js

@@ -0,0 +1,39 @@
+/** 显式 Provider21；继承旧入口但不改变其默认发现版本。 */
+import { tenantWebToolSchemas, tenantWebEnvelopeSchema, tenantWebProviderSchema, tenantWebErrorSchema, tenantWebSafeErrorRef } from './internal/serving-contracts/index.js';
+import { tenantWebJobRef } from './internal/contracts/index.js';
+import { KnowledgeTenantRuntimeClient } from './tenant-runtime.js';
+import { TenantManagementSdkError } from './tenant-management.js';
+export class KnowledgeTenantWebCollectionClient extends KnowledgeTenantRuntimeClient {
+    protocolVersion() { return 21; }
+    failure(raw, status) {
+        const value = tenantWebErrorSchema.safeParse(raw);
+        if (!value.success)
+            return null;
+        const ref = tenantWebSafeErrorRef(value.data.ref, this.options.expectedTenantId);
+        return new TenantManagementSdkError(value.data.errorCode, status, { ...value.data, ref });
+    }
+    async webTool(name, raw, options = {}) {
+        if (!Object.hasOwn(tenantWebToolSchemas, name))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_OPERATION_UNSUPPORTED', 0);
+        const input = tenantWebToolSchemas[name].parse(raw), body = JSON.stringify({ tool: name, arguments: input });
+        if (Buffer.byteLength(body) > 131072)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_REQUEST_TOO_LARGE', 0);
+        const response = await this.request(this.url('call', 21), { method: 'POST', headers: { 'content-type': 'application/json' }, body, ...(options.signal ? { signal: options.signal } : {}) });
+        const result = tenantWebEnvelopeSchema(name).safeParse(await this.json(response));
+        if (!result.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        if (result.data.tenantId !== this.options.expectedTenantId)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        const data = result.data.data, actual = data.jobRef ?? data.job?.jobRef;
+        const request = input;
+        if (request.requestId && actual !== tenantWebJobRef(this.options.expectedTenantId, request.requestId) || request.jobRef && actual !== request.jobRef)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        return result.data;
+    }
+    async webProvider() {
+        const response = await this.request(this.url('provider', 21)), value = tenantWebProviderSchema.safeParse(await this.json(response));
+        if (!value.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        return value.data;
+    }
+}

package/dist/{types/sdk/tenant-workspace.d.ts → tenant-workspace.d.ts}

@@ -1,5 +1,5 @@
 /** Explicit v18 client; the original management client keeps its v17 default contract. */
-import { type TenantWorkspaceExtraToolName, type TenantWorkspaceExtraInput, type TenantWorkspaceResponse } from '../serving-contracts/index.js';
+import { type TenantWorkspaceExtraToolName, type TenantWorkspaceExtraInput, type TenantWorkspaceResponse } from './internal/serving-contracts/index.js';
 import { KnowledgeTenantManagementClient } from './tenant-management.js';
 export declare class KnowledgeTenantWorkspaceClient extends KnowledgeTenantManagementClient {
     protected protocolVersion(): 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25;

package/dist/tenant-workspace.js

@@ -0,0 +1,21 @@
+/** Explicit v18 client; the original management client keeps its v17 default contract. */
+import { tenantWorkspaceExtraToolSchemas, tenantWorkspaceEnvelopeSchema, tenantWorkspaceProviderSchema } from './internal/serving-contracts/index.js';
+import { KnowledgeTenantManagementClient, TenantManagementSdkError } from './tenant-management.js';
+export class KnowledgeTenantWorkspaceClient extends KnowledgeTenantManagementClient {
+    protocolVersion() { return 18; }
+    async workspaceTool(name, raw, options = {}) {
+        if (!Object.hasOwn(tenantWorkspaceExtraToolSchemas, name))
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_OPERATION_UNSUPPORTED', 0);
+        const input = tenantWorkspaceExtraToolSchemas[name].parse(raw), body = JSON.stringify({ tool: name, arguments: input });
+        if (Buffer.byteLength(body) > 131072)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_REQUEST_TOO_LARGE', 0);
+        const response = await this.request(this.url('call'), { method: 'POST', headers: { 'content-type': 'application/json' }, body, ...(options.signal ? { signal: options.signal } : {}) }), result = tenantWorkspaceEnvelopeSchema(name).safeParse(await this.json(response));
+        if (!result.success)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status);
+        if (result.data.tenantId !== this.options.expectedTenantId)
+            throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_CONTEXT_MISMATCH', response.status);
+        return result.data;
+    }
+    async workspaceProvider() { const response = await this.request(this.url('provider', 18)), result = tenantWorkspaceProviderSchema.safeParse(await this.json(response)); if (!result.success)
+        throw new TenantManagementSdkError('TENANT_MANAGEMENT_SDK_RESPONSE_INVALID', response.status); return result.data; }
+}

package/dist/token-provider.d.ts

@@ -0,0 +1,14 @@
+/// <reference types="node" />
+/** 请求前取得当前凭据；mutation 永不因认证/网络失败被自动重放。 */
+export interface TokenProvider {
+    getToken(options?: {
+        forceRefresh?: boolean;
+    }): Promise<string>;
+}
+export interface TokenOptions {
+    token?: string;
+    tokenProvider?: TokenProvider;
+}
+export declare function validateTokenOptions(o: TokenOptions): void;
+export declare function tokenValue(o: TokenOptions): Promise<string>;
+export declare function authorizedFetch(fetchImpl: typeof fetch, o: TokenOptions, origin: string): typeof fetch;

package/dist/token-provider.js

@@ -0,0 +1,21 @@
+export function validateTokenOptions(o) { if ((o.token !== undefined) === (o.tokenProvider !== undefined))
+    throw Error('AUTH_CREDENTIAL_SOURCE_CONFLICT'); if (o.tokenProvider && typeof o.tokenProvider.getToken !== 'function')
+    throw Error('AUTH_TOKEN_PROVIDER_INVALID'); if (o.token && (!/^[^\s\u0000-\u001f\u007f]{16,4096}$/.test(o.token)))
+    throw Error('AUTH_TOKEN_INVALID'); }
+export async function tokenValue(o) { const value = o.tokenProvider ? await o.tokenProvider.getToken() : o.token; if (!value || !/^[^\s\u0000-\u001f\u007f]{16,4096}$/.test(value))
+    throw Error('AUTH_TOKEN_INVALID'); return value; }
+export function authorizedFetch(fetchImpl, o, origin) {
+    validateTokenOptions(o);
+    return async (input, init = {}) => {
+        const url = new URL(input instanceof Request ? input.url : String(input));
+        if (url.origin !== origin)
+            throw Error('AUTH_ENDPOINT_MISMATCH');
+        const run = async (force = false) => { const headers = new Headers(init.headers); headers.set('authorization', 'Bearer ' + (force && o.tokenProvider ? await o.tokenProvider.getToken({ forceRefresh: true }) : await tokenValue(o))); return fetchImpl(input, { ...init, headers: Object.fromEntries(headers), redirect: 'error', signal: init.signal ? AbortSignal.any([init.signal, AbortSignal.timeout(60000)]) : AbortSignal.timeout(60000) }); };
+        const r = await run();
+        if (r.status === 401 && o.tokenProvider && ['GET', 'HEAD'].includes((init.method ?? 'GET').toUpperCase())) {
+            await r.body?.cancel();
+            return run(true);
+        }
+        return r;
+    };
+}

package/package.json

@@ -1,36 +1,48 @@
 {
-  "version": "0.1.0-rc.1",
+  "name": "@native-knowledge/knowledge-sdk",
+  "version": "0.1.0-rc.2",
   "private": false,
   "type": "module",
-  "license": "MIT",
+  "description": "Typed remote native-knowledge clients with OAuth and Agent-native discovery",
   "engines": {
     "node": ">=24"
   },
+  "license": "Apache-2.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/SENLIN746/native-knowledge.git"
   },
-  "publishConfig": {
-    "access": "public",
-    "tag": "next",
-    "registry": "https://registry.npmjs.org/"
-  },
   "files": [
     "dist",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "NOTICE"
   ],
-  "name": "@native-knowledge/knowledge-sdk",
-  "description": "Governed native-knowledge clients for Node.js",
   "exports": {
     ".": {
-      "types": "./dist/types/sdk/index.d.ts",
-      "import": "./dist/index.js"
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./auth": {
+      "types": "./dist/auth.d.ts",
+      "import": "./dist/auth.js",
+      "default": "./dist/auth.js"
+    },
+    "./session": {
+      "types": "./dist/session.d.ts",
+      "import": "./dist/session.js",
+      "default": "./dist/session.js"
+    },
+    "./token-provider": {
+      "types": "./dist/token-provider.d.ts",
+      "import": "./dist/token-provider.js",
+      "default": "./dist/token-provider.js"
     }
   },
-  "types": "./dist/types/sdk/index.d.ts",
+  "types": "./dist/index.d.ts",
   "dependencies": {
-    "zod": "4.6.7",
+    "zod": "^4.6.7",
     "@types/node": "24.13.3"
   }
-}
+}

package/dist/types/contracts/resource-transfer.d.ts

@@ -1,24 +0,0 @@
-/** Explicit transfer binding leaves historical Provider16 JSON and clients unchanged. */
-import { z } from 'zod';
-export declare const resourceTransferRequestHeader = "x-knowledge-resource-transfer";
-export declare const resourceTransferFeature = "context-v1";
-export declare const resourceTransferResponseHeader = "x-knowledge-resource-context";
-export declare const resourceTransferBindingSchema: z.ZodObject<{
-    schemaVersion: z.ZodLiteral<1>;
-    context: z.ZodDiscriminatedUnion<[z.ZodObject<{
-        type: z.ZodLiteral<"TENANT">;
-        tenantId: z.ZodString;
-        tenantRef: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-        type: z.ZodLiteral<"PROJECT">;
-        tenantId: z.ZodString;
-        projectKey: z.ZodString;
-        projectRef: z.ZodString;
-    }, z.core.$strict>], "type">;
-    policy: z.ZodEnum<{
-        LEGACY_PROJECT: "LEGACY_PROJECT";
-        TENANT_NATIVE: "TENANT_NATIVE";
-        TENANT_PROJECT_SCOPE: "TENANT_PROJECT_SCOPE";
-    }>;
-    refHash: z.ZodString;
-}, z.core.$strict>;

package/dist/types/sdk/resource-integrity.d.ts

@@ -1,21 +0,0 @@
-import { type ResourceToolName } from '../contracts/index.js';
-export declare const contentHash: (bytes: Uint8Array | string) => string;
-export declare function transferBinding(response: Response): {
-    schemaVersion: 1;
-    context: {
-        type: "TENANT";
-        tenantId: string;
-        tenantRef: string;
-    } | {
-        type: "PROJECT";
-        tenantId: string;
-        projectKey: string;
-        projectRef: string;
-    };
-    policy: "LEGACY_PROJECT" | "TENANT_NATIVE" | "TENANT_PROJECT_SCOPE";
-    refHash: string;
-};
-export declare function resourceIntegrity(name: ResourceToolName, input: {
-    ref?: string | undefined;
-    projectRef?: string | undefined;
-}, raw: unknown): void;

package/dist/types/sdk/transport.d.ts

@@ -1,16 +0,0 @@
-/** A single attempt with a deadline covering headers and body; never retries writes. */
-export interface SdkTransportOptions {
-    timeoutMs?: number;
-    maxJsonBytes?: number;
-    maxContentBytes?: number;
-}
-/** Default logging/JSON must not enumerate credentials or connection configuration. */
-export declare function concealClientState(client: object, publicKeys?: string[]): void;
-export declare function transportLimits(options?: SdkTransportOptions): {
-    timeoutMs: number;
-    maxJsonBytes: number;
-    maxContentBytes: number;
-};
-export declare function deadlineFetch(fetchImpl: typeof fetch, timeoutMs: number): typeof fetch;
-export declare function boundedBytes(response: Response, maxBytes: number, prefix: string): Promise<Buffer>;
-export declare function boundedJson(response: Response, maxBytes: number, prefix: string): Promise<unknown>;