@native-marketing/sdk 0.2.0 → 0.3.0

package/README.md

@@ -46,4 +46,22 @@ const native = createContentFactoryClient({ baseUrl: 'https://ip.shipkitx.com/ap
 
 The `/http` entry contains the existing typed HTTP client, validators and generated endpoint types; it does not import the Node MCP/CLI implementation. It does not retry writes or manage browser sessions for Node callers.
 
+## Tenant application connections and event permissions
+
+Use the exact authorized `/mcp/tenants/TEN-*` resource with `cf.context.read`, `cf.knowledge.manage` and the current Tenant's `permissions.manage` permission. Project resources cannot administer Tenant event connections.
+
+```ts
+await withNativeAgentClient({ resource, accessToken }, async (native) => {
+  const connections = await native.callTool('cf_list_event_exchanges', { limit: 20 });
+  const schema = await native.describeCapability('cf_configure_event_exchange');
+  console.log(connections.result, schema.definition);
+});
+```
+
+`cf_configure_event_exchange` registers or revokes one exact EventSDK event-type Grant with the original `requestId` and current Connection `expectedRevision`. Inspect the current schema and confirm the precise source/target Tenant refs, consumer, event type and grant version before writing; events are never selected or authorized automatically. Other event types remain unchanged. Local ACTIVE does not grant peer consent, Broker access or resource readability.
+
+Recover an unknown configure result using `cf_get_event_exchange_receipt` with the original requestId. `cf_list_event_outbox` reads one bounded page and backlog/Worker observation. An explicitly authorized `cf_recover_event_outbox` command preserves the original delivery identity and expectedGeneration; UNKNOWN uses `cf_get_event_outbox_recovery_receipt`, without replaying the command. Read each receipt under the same authorized resource/client. Receipt absence does not permit another write. Authorization management does not emit a new authorization-change CloudEvent.
+
+The HTTP subpath includes typed GET/POST `/tenants/{tenantCode}/event-exchanges`, receipt and Outbox endpoints. HTTP uses the existing authorized Session; MCP uses resource-bound OAuth. Tenant and authorization facts remain in Native Marketing's database.
+
 The package's `release.json` records the actual source commit and generated API-types hash. This is a local build receipt, not CI provenance or proof that every remote business journey has been accepted. Rights reserved; public package availability does not grant an open-source license (UNLICENSED).

package/dist/index.js

@@ -6818,7 +6818,18 @@ var surveyRejections = [
   "PERSONAL_SURVEY_DRAFT_TRANSITION_IMMUTABLE"
 ];
 function isKnownCapabilityRejection(code2, name) {
-  return capabilityRejectedErrorCodes.includes(code2) || code2 === "INVALID_CURSOR" && isChangeAcknowledgement(name) || surveyWrites.includes(name ?? "") && surveyRejections.includes(code2) || researchWrites.includes(name ?? "") && ["FOUNDATION_RECORD_CONFLICT", "FOUNDATION_INPUT_REQUIRED"].includes(code2);
+  return capabilityRejectedErrorCodes.includes(code2) || name === "cf_adopt_discovered_knowledge" && [
+    "KNOWLEDGE_DISCOVERY_IDENTITY_CHANGED",
+    "KNOWLEDGE_DISCOVERY_FORBIDDEN",
+    "KNOWLEDGE_DISCOVERY_TEXT_TOO_LARGE",
+    "KNOWLEDGE_DISCOVERY_TEXT_UNSUPPORTED",
+    "KNOWLEDGE_DISCOVERY_UNAVAILABLE",
+    "KNOWLEDGE_CATALOG_UNAVAILABLE",
+    "KNOWLEDGE_CATALOG_INVALID",
+    "KNOWLEDGE_CATALOG_SCOPE_NOT_CONFIGURED",
+    "KNOWLEDGE_PROVIDER_AUTH_REQUIRED",
+    "KNOWLEDGE_TENANT_IDENTITY_CHANGED"
+  ].includes(code2) || code2 === "INVALID_CURSOR" && isChangeAcknowledgement(name) || surveyWrites.includes(name ?? "") && surveyRejections.includes(code2) || researchWrites.includes(name ?? "") && ["FOUNDATION_RECORD_CONFLICT", "FOUNDATION_INPUT_REQUIRED"].includes(code2);
 }
 var recoveries = {
   CAPABILITY_SCHEMA_CHANGED: "READ_EXACT_SCHEMA",
@@ -6890,6 +6901,167 @@ function capabilityRecovery(code2, outcome, name) {
   return "CHECK_ACCESS_OR_REFRESH_EXACT_INPUT";
 }
 
+// packages/contracts/src/event-exchange.ts
+import { z as z99 } from "zod";
+
+// packages/contracts/src/event-exchange-browser.ts
+import { z as z98 } from "zod";
+var ref2 = z98.string().min(1).max(2048);
+var eventExchangeSourceSchema = z98.object({ source: ref2, serviceRef: ref2, tenantRef: ref2, issuer: ref2, subject: ref2 }).strict();
+var eventExchangeTargetSchema = z98.object({ serviceRef: ref2, tenantRef: ref2 }).strict();
+var eventExchangeBrowserCommandSchema = z98.object({
+  schemaVersion: z98.literal(1),
+  requestId: z98.string().min(1).max(256),
+  expectedRevision: z98.number().int().positive().nullable(),
+  source: eventExchangeSourceSchema,
+  target: eventExchangeTargetSchema,
+  grant: z98.object({
+    grantRef: z98.string().min(1).max(256),
+    version: z98.number().int().positive(),
+    eventType: z98.string().min(1).max(256),
+    consumerRef: ref2
+  }).strict(),
+  status: z98.enum(["ACTIVE", "REVOKED"])
+}).strict();
+
+// packages/contracts/src/event-exchange.ts
+var eventExchangePageQuerySchema = z99.object({
+  after: z99.string().max(256).default(""),
+  limit: z99.number().int().min(1).max(100).default(50)
+}).strict();
+var eventExchangeReceiptQuerySchema = z99.object({ requestId: z99.string().min(1).max(256) }).strict();
+var knowledgeRefreshRevisionSchema = z99.object({
+  schemaVersion: z99.literal(1),
+  revision: z99.string().regex(/^\d+$/),
+  recordedAt: z99.string().datetime().nullable(),
+  baselines: z99.array(
+    z99.object({
+      connectionRef: z99.string(),
+      source: z99.string(),
+      baselineRef: z99.string(),
+      watermark: z99.string().regex(/^\d+$/),
+      sourceRevision: z99.string()
+    }).strict()
+  ).max(100).default([]),
+  baselinesTruncated: z99.boolean().default(false)
+}).strict();
+var exchangeStatus = z99.enum(["ACTIVE", "REVOKED"]);
+var direction = z99.enum(["OUTBOUND", "RECEIVE"]);
+var eventExchangeResultSchema = z99.object({
+  schemaVersion: z99.literal(1),
+  connectionRef: z99.string().regex(/^urn:eventsdk:connection:[a-f0-9]{64}$/),
+  revision: z99.number().int().positive(),
+  direction,
+  status: exchangeStatus,
+  grantRef: z99.string().min(1).max(256),
+  grantVersion: z99.number().int().positive(),
+  eventType: z99.string().optional()
+}).strict();
+var eventExchangeReceiptSchema = z99.object({
+  schemaVersion: z99.literal(1),
+  requestId: z99.string().min(1).max(256),
+  result: eventExchangeResultSchema.nullable()
+}).strict();
+var eventExchangePageSchema = z99.object({
+  schemaVersion: z99.literal(1),
+  localTenant: eventExchangeTargetSchema.optional(),
+  items: z99.array(
+    eventExchangeResultSchema.pick({
+      connectionRef: true,
+      revision: true,
+      direction: true,
+      status: true
+    }).extend({
+      source: eventExchangeSourceSchema.optional(),
+      target: eventExchangeTargetSchema.optional(),
+      grantsTruncated: z99.boolean().optional(),
+      grants: z99.array(
+        z99.object({
+          eventType: z99.string(),
+          grantRef: z99.string(),
+          grantVersion: z99.number().int().positive(),
+          consumerRef: z99.string().optional(),
+          source: eventExchangeSourceSchema.optional(),
+          target: eventExchangeTargetSchema.optional(),
+          status: exchangeStatus
+        }).strict()
+      ).max(100).optional()
+    })
+  ).max(100),
+  nextAfter: z99.string().max(256).nullable()
+}).strict();
+
+// packages/contracts/src/knowledge-discovery.ts
+import { z as z100 } from "zod";
+var knowledgeRemoteRefSchema = z100.string().min(1).max(4096).refine((value) => {
+  try {
+    const url = new URL(value);
+    return !url.username && !url.password && /^[a-z][a-z0-9+.-]*:$/.test(url.protocol);
+  } catch {
+    return false;
+  }
+});
+var knowledgeDiscoveryQuerySchema = z100.object({
+  q: z100.string().trim().min(2).max(160).optional(),
+  cursor: z100.string().min(1).max(8192).optional(),
+  resourceType: z100.string().regex(/^[a-z][a-z0-9._-]{0,63}$/).optional(),
+  limit: z100.number().int().min(1).max(50).default(20)
+}).strict();
+var knowledgeDiscoveryReadQuerySchema = z100.object({
+  ref: knowledgeRemoteRefSchema,
+  expectedContentHash: z100.string().regex(/^sha256:[a-f0-9]{64}$/).optional()
+}).strict();
+var knowledgeDiscoveryItemSchema = z100.object({
+  ref: knowledgeRemoteRefSchema,
+  ownerTenantId: z100.string().min(1).max(256),
+  resourceType: z100.string().min(1).max(128),
+  originType: z100.enum(["LEGACY_PROJECT", "TENANT_AUTHOR", "TENANT_SOURCE"]),
+  identityHash: z100.string().regex(/^sha256:[a-f0-9]{64}$/),
+  identityKind: z100.enum(["CAS_BYTES", "REFERENCE_RECORD_DIGEST"]),
+  kind: z100.string().min(1).max(128),
+  classification: z100.string().max(128),
+  mediaType: z100.string().min(1).max(256),
+  title: z100.string().max(512),
+  summary: z100.string().max(1024),
+  readable: z100.boolean(),
+  reasonCodes: z100.array(z100.string().max(128)).max(32)
+});
+var knowledgeDiscoveryPageSchema = z100.object({
+  schemaVersion: z100.literal(1),
+  sourceTenantId: z100.string().min(1).max(256),
+  items: z100.array(knowledgeDiscoveryItemSchema).max(50),
+  pageInfo: z100.object({ nextCursor: z100.string().max(8192).nullable() }).strict(),
+  coverage: z100.enum(["CURRENT_AUTHORIZED_DIRECTORY", "INDEXED_DESCRIPTIONS_ONLY"]),
+  checkedAt: z100.string().datetime()
+}).strict();
+var knowledgeDiscoveryReadSchema = z100.object({
+  schemaVersion: z100.literal(1),
+  sourceTenantId: z100.string().min(1).max(256),
+  item: knowledgeDiscoveryItemSchema,
+  contentHash: z100.string().regex(/^sha256:[a-f0-9]{64}$/),
+  mediaType: z100.string().min(1).max(256),
+  byteLength: z100.number().int().min(0).max(524288),
+  content: z100.string().max(524288),
+  verified: z100.literal(true),
+  checkedAt: z100.string().datetime()
+}).strict();
+var knowledgeAdoptionCommandSchema = knowledgeDiscoveryReadQuerySchema.required().extend({
+  requestId: z100.string().min(1).max(128)
+}).strict();
+var knowledgeAdoptionResultSchema = z100.object({ result: sourceRefSchema, replayed: z100.boolean() }).strict();
+var knowledgeAdoptionReceiptQuerySchema = z100.object({ requestId: z100.string().min(1).max(128) }).strict();
+var knowledgeAdoptionReceiptSchema = z100.discriminatedUnion("state", [
+  z100.object({ state: z100.literal("FOUND"), result: sourceRefSchema }).strict(),
+  z100.object({ state: z100.literal("NOT_FOUND"), result: z100.null() }).strict(),
+  commandRejectedReceiptSchema
+]);
+var adoptedKnowledgeResourceSchema = z100.object({
+  schemaVersion: z100.literal(1),
+  sourceTenantId: z100.string().min(1).max(256),
+  ref: knowledgeRemoteRefSchema,
+  identityHash: z100.string().regex(/^sha256:[a-f0-9]{64}$/)
+}).strict();
+
 // packages/contracts/src/agent/capability-receipts.ts
 var rule = (capability, schema2, operation, keys = [], field) => ({ capability, schema: schema2, operation, keys, field });
 var foundation = (operation, field) => rule(
@@ -6911,6 +7083,18 @@ var execution = (family, operation) => ({
 });
 var learning = (op) => rule("cf_get_learning_command_receipt", learningReceiptSchema, op);
 var rules = {
+  cf_configure_event_exchange: rule(
+    "cf_get_event_exchange_receipt",
+    eventExchangeReceiptQuerySchema
+  ),
+  cf_recover_event_outbox: rule(
+    "cf_get_event_outbox_recovery_receipt",
+    eventExchangeReceiptQuerySchema
+  ),
+  cf_adopt_discovered_knowledge: rule(
+    "cf_get_knowledge_adoption_receipt",
+    knowledgeAdoptionReceiptQuerySchema
+  ),
   cf_save_test_record: rule("cf_get_test_record_receipt", testRecordReceiptSchema, "SAVE"),
   cf_cleanup_test_records: rule("cf_get_test_record_receipt", testRecordReceiptSchema, "CLEANUP"),
   cf_register_source: rule(
@@ -7122,7 +7306,7 @@ function capabilityReceiptRead(name, input) {
 }
 
 // packages/contracts/src/agent/capability-status.ts
-import { z as z98 } from "zod";
+import { z as z101 } from "zod";
 var verification = {
   capability: "cf_material_verification_status",
   schema: materialVerificationIdSchema,
@@ -7140,7 +7324,7 @@ var rules2 = {
   },
   cf_tenant_material_scan_advance: {
     capability: "cf_tenant_material_scan_status",
-    schema: z98.object({}).strict()
+    schema: z101.object({}).strict()
   },
   cf_sync_materials: {
     capability: "cf_reconcile_materials",
@@ -7530,7 +7714,9 @@ function knowledgeError(tool5, raw) {
   if (typeof error.checkedAt === "string" && /^\d{4}-\d{2}-\d{2}T[\d:.]+Z$/.test(error.checkedAt))
     details.checkedAt = error.checkedAt;
   const descriptor = object2(error.descriptor);
-  if (descriptor && typeof descriptor.readingPath === "string" && /^\/projects\/PRJ-\d{6,}\/knowledge\/library\/[0-9a-f-]{36}$/i.test(descriptor.readingPath))
+  if (descriptor && typeof descriptor.readingPath === "string" && /^\/(?:projects\/PRJ|tenants\/TEN)-\d{6,}\/knowledge\/library\/[0-9a-f-]{36}$/i.test(
+    descriptor.readingPath
+  ))
     details.readingPath = descriptor.readingPath;
   return new CliError(
     error.code,
@@ -7992,7 +8178,7 @@ function reviewLinks(resource, tool5, result2, input = {}) {
     }
     return {};
   }
-  if (tool5 === "cf_read_knowledge" && result2 && typeof result2 === "object" && "readingPath" in result2 && typeof result2.readingPath === "string" && /^\/projects\/PRJ-\d{6,}\/knowledge\/library\/[0-9a-f-]{36}$/i.test(result2.readingPath)) {
+  if (tool5 === "cf_read_knowledge" && result2 && typeof result2 === "object" && "readingPath" in result2 && typeof result2.readingPath === "string" && knowledgePathMatchesResource(result2.readingPath, url.pathname)) {
     return { readingUrl: new URL(result2.readingPath, url.origin).href };
   }
   if (tool5 === "cf_submit_intelligence_candidate" && url.pathname === "/mcp/me" && result2 && typeof result2 === "object" && "businessCode" in result2 && typeof result2.businessCode === "string" && /^INT-[0-9]{6,}$/.test(result2.businessCode)) {
@@ -8020,6 +8206,13 @@ function reviewLinks(resource, tool5, result2, input = {}) {
   }
   return { workspaceUrl: url.origin + (tenant ? "/foundation" : "/me/identity") };
 }
+function knowledgePathMatchesResource(readingPath, resourcePath) {
+  const resource = /^\/mcp\/((?:projects\/PRJ|tenants\/TEN)-\d{6,})$/.exec(resourcePath);
+  const path = /^\/((?:projects\/PRJ|tenants\/TEN)-\d{6,})\/knowledge\/library\/[0-9a-f-]{36}$/i.exec(
+    readingPath
+  );
+  return Boolean(resource && path && resource[1] === path[1]);
+}
 
 // packages/cli-client/src/operations.ts
 async function inspectNativeTool(client, name, timeout = 3e4) {
@@ -8819,13 +9012,24 @@ var commandTools = {
   "source read": "cf_get_opportunity_source",
   // 目录/正文与任务冻结 source read 分离，避免把当前知识替换为任务证据。
   "knowledge list": "cf_list_knowledge",
+  "knowledge discover": "cf_discover_knowledge",
+  "knowledge adopt": "cf_adopt_discovered_knowledge",
+  "knowledge adoption-receipt": "cf_get_knowledge_adoption_receipt",
+  "knowledge read-discovered": "cf_read_discovered_knowledge",
   "knowledge materials": "cf_list_materials",
+  "knowledge topics": "cf_list_material_topics",
   "knowledge read": "cf_read_knowledge",
+  "knowledge read-source": "cf_read_source",
   "knowledge select": "cf_select_knowledge",
   "knowledge collect": "cf_collect_materials",
-  "knowledge sync": "cf_sync_materials",
   "knowledge tenant-status": "cf_tenant_material_scan_status",
-  "knowledge tenant-advance": "cf_tenant_material_scan_advance",
+  "knowledge reconcile": "cf_reconcile_materials",
+  "event-exchanges list": "cf_list_event_exchanges",
+  "event-exchanges configure": "cf_configure_event_exchange",
+  "event-exchanges receipt": "cf_get_event_exchange_receipt",
+  "event-exchanges outbox-list": "cf_list_event_outbox",
+  "event-exchanges outbox-recover": "cf_recover_event_outbox",
+  "event-exchanges outbox-receipt": "cf_get_event_outbox_recovery_receipt",
   "knowledge verify-start": "cf_material_verification_start",
   "knowledge verify-status": "cf_material_verification_status",
   "knowledge verify-advance": "cf_material_verification_advance",
@@ -9025,7 +9229,9 @@ function resolveBaseCommand(parsed) {
 function resolveCommand(parsed) {
   const removed = {
     doctor: "context",
-    "knowledge sync-all": "knowledge sync"
+    "knowledge sync-all": "knowledge discover",
+    "knowledge sync": "knowledge discover",
+    "knowledge tenant-advance": "knowledge discover"
   };
   const replacement = removed[parsed.words.join(" ")];
   if (replacement)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@native-marketing/sdk",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "type": "module",
   "license": "UNLICENSED",
   "engines": {

package/release.json

@@ -1,7 +1,7 @@
 {
-  "sourceCommit": "351676c470fe22c510ee38fe9c3e6032de241407",
+  "sourceCommit": "10c5dcfba354af4dfed4a2faaffbb6ff6b743c62",
   "workingTreeDirty": false,
-  "version": "0.2.0",
-  "openapiTypesSha256": "ab00b08c6f94b2b39d7f4010de2335d70be26e7987e9db6dc57fa308426aecc4",
+  "version": "0.3.0",
+  "openapiTypesSha256": "1a86e24ce9e458e945e4df5e9c7423c9bf4253ac24b3f627f67ba38c92856a38",
   "localBuild": true
 }

package/types/contracts/agent/knowledge-reads.d.ts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-/** 知识工具只选择已授权项目内的来源；不允许输入租户、凭据或任意上游地址。 */
+/** 知识工具只选择当前 OAuth Tenant／项目内的来源；不允许输入租户、凭据或任意上游地址。 */
 export declare const mcpKnowledgeListSchema: z.ZodObject<{
     q: z.ZodOptional<z.ZodString>;
     kind: z.ZodOptional<z.ZodEnum<{

package/types/contracts/event-backlog.d.ts

@@ -0,0 +1,47 @@
+import { z } from 'zod';
+export declare const eventBacklogObservationSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    observedAt: z.ZodString;
+    outbox: z.ZodObject<{
+        pendingCount: z.ZodNumber;
+        oldestPendingAt: z.ZodNullable<z.ZodString>;
+        oldestPendingAgeMs: z.ZodNullable<z.ZodNumber>;
+        oldestKnownPendingAt: z.ZodNullable<z.ZodString>;
+        unknownAgeCount: z.ZodNumber;
+        reasons: z.ZodArray<z.ZodObject<{
+            status: z.ZodString;
+            reasonCode: z.ZodNullable<z.ZodString>;
+            count: z.ZodNumber;
+        }, z.core.$strict>>;
+        reasonsTruncated: z.ZodBoolean;
+    }, z.core.$strict>;
+    unstaged: z.ZodObject<{
+        deliveryCount: z.ZodNumber;
+        oldestRecordedAt: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>;
+    inbox: z.ZodObject<{
+        pendingCount: z.ZodNumber;
+        oldestPendingAt: z.ZodNullable<z.ZodString>;
+        oldestPendingAgeMs: z.ZodNullable<z.ZodNumber>;
+        oldestKnownPendingAt: z.ZodNullable<z.ZodString>;
+        unknownAgeCount: z.ZodNumber;
+        reasons: z.ZodArray<z.ZodObject<{
+            status: z.ZodString;
+            reasonCode: z.ZodNullable<z.ZodString>;
+            count: z.ZodNumber;
+        }, z.core.$strict>>;
+        reasonsTruncated: z.ZodBoolean;
+        pendingBaselines: z.ZodNumber;
+        sourceGapState: z.ZodLiteral<"NOT_OBSERVED">;
+    }, z.core.$strict>;
+    quarantine: z.ZodObject<{
+        attributedRouteAttempts: z.ZodNumber;
+        coverage: z.ZodLiteral<"LOCAL_ROUTE_ATTEMPTS_ONLY">;
+        reasons: z.ZodArray<z.ZodObject<{
+            status: z.ZodString;
+            reasonCode: z.ZodNullable<z.ZodString>;
+            count: z.ZodNumber;
+        }, z.core.$strict>>;
+        reasonsTruncated: z.ZodBoolean;
+    }, z.core.$strict>;
+}, z.core.$strict>;

package/types/contracts/event-delivery.d.ts

@@ -0,0 +1,124 @@
+import { z } from 'zod';
+export declare const eventWorkerObservationSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    status: z.ZodEnum<{
+        CONNECTED: "CONNECTED";
+        DISABLED: "DISABLED";
+        RECONNECTING: "RECONNECTING";
+        STOPPED: "STOPPED";
+    }>;
+    connected: z.ZodBoolean;
+    at: z.ZodString;
+    revision: z.ZodOptional<z.ZodString>;
+    stale: z.ZodBoolean;
+}, z.core.$strict>;
+export declare const eventDeliveryPageQuerySchema: z.ZodObject<{
+    after: z.ZodDefault<z.ZodString>;
+    limit: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const eventDeliveryRecoveryResultSchema: z.ZodObject<{
+    source: z.ZodString;
+    id: z.ZodString;
+    deliveryid: z.ZodString;
+    schemaVersion: z.ZodLiteral<1>;
+    requestId: z.ZodString;
+    status: z.ZodLiteral<"REQUEUED">;
+    generation: z.ZodNumber;
+    attempt: z.ZodNumber;
+    previousReasonCode: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export declare const eventDeliveryRecoveryReceiptSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    requestId: z.ZodString;
+    result: z.ZodNullable<z.ZodObject<{
+        source: z.ZodString;
+        id: z.ZodString;
+        deliveryid: z.ZodString;
+        schemaVersion: z.ZodLiteral<1>;
+        requestId: z.ZodString;
+        status: z.ZodLiteral<"REQUEUED">;
+        generation: z.ZodNumber;
+        attempt: z.ZodNumber;
+        previousReasonCode: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const eventDeliveryPageSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    items: z.ZodArray<z.ZodObject<{
+        source: z.ZodString;
+        id: z.ZodString;
+        deliveryid: z.ZodString;
+        status: z.ZodEnum<{
+            HOLD: "HOLD";
+            PENDING: "PENDING";
+            PUBLISHED: "PUBLISHED";
+            UNKNOWN: "UNKNOWN";
+        }>;
+        generation: z.ZodNumber;
+        attempt: z.ZodNumber;
+        nextAttemptAt: z.ZodNumber;
+        reasonCode: z.ZodNullable<z.ZodString>;
+        queuedAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    }, z.core.$strict>>;
+    nextAfter: z.ZodNullable<z.ZodString>;
+    counts: z.ZodRecord<z.ZodString, z.ZodNumber>;
+    worker: z.ZodNullable<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        status: z.ZodEnum<{
+            CONNECTED: "CONNECTED";
+            DISABLED: "DISABLED";
+            RECONNECTING: "RECONNECTING";
+            STOPPED: "STOPPED";
+        }>;
+        connected: z.ZodBoolean;
+        at: z.ZodString;
+        revision: z.ZodOptional<z.ZodString>;
+        stale: z.ZodBoolean;
+    }, z.core.$strict>>;
+    backlog: z.ZodOptional<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        observedAt: z.ZodString;
+        outbox: z.ZodObject<{
+            pendingCount: z.ZodNumber;
+            oldestPendingAt: z.ZodNullable<z.ZodString>;
+            oldestPendingAgeMs: z.ZodNullable<z.ZodNumber>;
+            oldestKnownPendingAt: z.ZodNullable<z.ZodString>;
+            unknownAgeCount: z.ZodNumber;
+            reasons: z.ZodArray<z.ZodObject<{
+                status: z.ZodString;
+                reasonCode: z.ZodNullable<z.ZodString>;
+                count: z.ZodNumber;
+            }, z.core.$strict>>;
+            reasonsTruncated: z.ZodBoolean;
+        }, z.core.$strict>;
+        unstaged: z.ZodObject<{
+            deliveryCount: z.ZodNumber;
+            oldestRecordedAt: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>;
+        inbox: z.ZodObject<{
+            pendingCount: z.ZodNumber;
+            oldestPendingAt: z.ZodNullable<z.ZodString>;
+            oldestPendingAgeMs: z.ZodNullable<z.ZodNumber>;
+            oldestKnownPendingAt: z.ZodNullable<z.ZodString>;
+            unknownAgeCount: z.ZodNumber;
+            reasons: z.ZodArray<z.ZodObject<{
+                status: z.ZodString;
+                reasonCode: z.ZodNullable<z.ZodString>;
+                count: z.ZodNumber;
+            }, z.core.$strict>>;
+            reasonsTruncated: z.ZodBoolean;
+            pendingBaselines: z.ZodNumber;
+            sourceGapState: z.ZodLiteral<"NOT_OBSERVED">;
+        }, z.core.$strict>;
+        quarantine: z.ZodObject<{
+            attributedRouteAttempts: z.ZodNumber;
+            coverage: z.ZodLiteral<"LOCAL_ROUTE_ATTEMPTS_ONLY">;
+            reasons: z.ZodArray<z.ZodObject<{
+                status: z.ZodString;
+                reasonCode: z.ZodNullable<z.ZodString>;
+                count: z.ZodNumber;
+            }, z.core.$strict>>;
+            reasonsTruncated: z.ZodBoolean;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;

package/types/contracts/event-exchange-browser.d.ts

@@ -0,0 +1,39 @@
+import { z } from 'zod';
+export declare const eventExchangeSourceSchema: z.ZodObject<{
+    source: z.ZodString;
+    serviceRef: z.ZodString;
+    tenantRef: z.ZodString;
+    issuer: z.ZodString;
+    subject: z.ZodString;
+}, z.core.$strict>;
+export declare const eventExchangeTargetSchema: z.ZodObject<{
+    serviceRef: z.ZodString;
+    tenantRef: z.ZodString;
+}, z.core.$strict>;
+export declare const eventExchangeBrowserCommandSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    requestId: z.ZodString;
+    expectedRevision: z.ZodNullable<z.ZodNumber>;
+    source: z.ZodObject<{
+        source: z.ZodString;
+        serviceRef: z.ZodString;
+        tenantRef: z.ZodString;
+        issuer: z.ZodString;
+        subject: z.ZodString;
+    }, z.core.$strict>;
+    target: z.ZodObject<{
+        serviceRef: z.ZodString;
+        tenantRef: z.ZodString;
+    }, z.core.$strict>;
+    grant: z.ZodObject<{
+        grantRef: z.ZodString;
+        version: z.ZodNumber;
+        eventType: z.ZodString;
+        consumerRef: z.ZodString;
+    }, z.core.$strict>;
+    status: z.ZodEnum<{
+        ACTIVE: "ACTIVE";
+        REVOKED: "REVOKED";
+    }>;
+}, z.core.$strict>;
+export type EventExchangeBrowserCommand = z.infer<typeof eventExchangeBrowserCommandSchema>;

package/types/contracts/event-exchange.d.ts

@@ -0,0 +1,110 @@
+import { z } from 'zod';
+export declare const eventExchangePageQuerySchema: z.ZodObject<{
+    after: z.ZodDefault<z.ZodString>;
+    limit: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const eventExchangeReceiptQuerySchema: z.ZodObject<{
+    requestId: z.ZodString;
+}, z.core.$strict>;
+export declare const knowledgeRefreshRevisionSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    revision: z.ZodString;
+    recordedAt: z.ZodNullable<z.ZodString>;
+    baselines: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        connectionRef: z.ZodString;
+        source: z.ZodString;
+        baselineRef: z.ZodString;
+        watermark: z.ZodString;
+        sourceRevision: z.ZodString;
+    }, z.core.$strict>>>;
+    baselinesTruncated: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const eventExchangeResultSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    connectionRef: z.ZodString;
+    revision: z.ZodNumber;
+    direction: z.ZodEnum<{
+        OUTBOUND: "OUTBOUND";
+        RECEIVE: "RECEIVE";
+    }>;
+    status: z.ZodEnum<{
+        ACTIVE: "ACTIVE";
+        REVOKED: "REVOKED";
+    }>;
+    grantRef: z.ZodString;
+    grantVersion: z.ZodNumber;
+    eventType: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const eventExchangeReceiptSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    requestId: z.ZodString;
+    result: z.ZodNullable<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        connectionRef: z.ZodString;
+        revision: z.ZodNumber;
+        direction: z.ZodEnum<{
+            OUTBOUND: "OUTBOUND";
+            RECEIVE: "RECEIVE";
+        }>;
+        status: z.ZodEnum<{
+            ACTIVE: "ACTIVE";
+            REVOKED: "REVOKED";
+        }>;
+        grantRef: z.ZodString;
+        grantVersion: z.ZodNumber;
+        eventType: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const eventExchangePageSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    localTenant: z.ZodOptional<z.ZodObject<{
+        serviceRef: z.ZodString;
+        tenantRef: z.ZodString;
+    }, z.core.$strict>>;
+    items: z.ZodArray<z.ZodObject<{
+        connectionRef: z.ZodString;
+        revision: z.ZodNumber;
+        direction: z.ZodEnum<{
+            OUTBOUND: "OUTBOUND";
+            RECEIVE: "RECEIVE";
+        }>;
+        status: z.ZodEnum<{
+            ACTIVE: "ACTIVE";
+            REVOKED: "REVOKED";
+        }>;
+        source: z.ZodOptional<z.ZodObject<{
+            source: z.ZodString;
+            serviceRef: z.ZodString;
+            tenantRef: z.ZodString;
+            issuer: z.ZodString;
+            subject: z.ZodString;
+        }, z.core.$strict>>;
+        target: z.ZodOptional<z.ZodObject<{
+            serviceRef: z.ZodString;
+            tenantRef: z.ZodString;
+        }, z.core.$strict>>;
+        grantsTruncated: z.ZodOptional<z.ZodBoolean>;
+        grants: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            eventType: z.ZodString;
+            grantRef: z.ZodString;
+            grantVersion: z.ZodNumber;
+            consumerRef: z.ZodOptional<z.ZodString>;
+            source: z.ZodOptional<z.ZodObject<{
+                source: z.ZodString;
+                serviceRef: z.ZodString;
+                tenantRef: z.ZodString;
+                issuer: z.ZodString;
+                subject: z.ZodString;
+            }, z.core.$strict>>;
+            target: z.ZodOptional<z.ZodObject<{
+                serviceRef: z.ZodString;
+                tenantRef: z.ZodString;
+            }, z.core.$strict>>;
+            status: z.ZodEnum<{
+                ACTIVE: "ACTIVE";
+                REVOKED: "REVOKED";
+            }>;
+        }, z.core.$strict>>>;
+    }, z.core.$strict>>;
+    nextAfter: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;