@tencent-ai/workbuddy-cloud-sdk 0.1.0-dev.dee063d.202608201621 → 0.1.1-dev.520de95.202609090209

package/README.md

@@ -0,0 +1,28 @@
+# WorkBuddy Cloud SDK
+
+通过 WorkBuddy 云服务的 `publicConfig` 访问 Auth、Database、Storage 和 LLM。
+
+## 微信小程序
+
+在小程序项目的 `package.json` 所在目录安装依赖：
+
+```sh
+npm install @tencent-ai/workbuddy-cloud-sdk@dev
+```
+
+然后在微信开发者工具中执行「工具 → 构建 npm」，确认生成
+`miniprogram_npm/@tencent-ai/workbuddy-cloud-sdk/miniprogram.js`，再点击「编译」。
+仅写入 `package.json` 不会安装依赖；升级 SDK 后也需要重新构建 npm。
+
+```js
+const { createMiniProgramWorkBuddyCloud } = require('@tencent-ai/workbuddy-cloud-sdk/miniprogram');
+
+const cloud = createMiniProgramWorkBuddyCloud({
+    endpoint: publicConfig.endpoint,
+    publishableKey: publicConfig.publishableKey,
+});
+```
+
+SDK 通过 `package.json#miniprogram` 提供微信专用的 CommonJS `.js` 产物，
+其中已打包运行时依赖。现有 Web / Node 的根入口和 `/miniprogram` 子入口保持不变。
+WorkBuddy H5 预览会注入 SDK，预览成功不能替代微信项目的安装、构建 npm 验证。

package/lib/index.cjs

@@ -39,6 +39,8 @@ __export(index_exports, {
   anonymousTokenProvider: () => anonymousTokenProvider,
   createMemoryStorage: () => createMemoryStorage,
   createWorkBuddyCloud: () => createWorkBuddyCloud,
+  getModelCapability: () => getModelCapability,
+  getModelDisplayName: () => getModelDisplayName,
   shouldClearCredentials: () => shouldClearCredentials
 });
 module.exports = __toCommonJS(index_exports);
@@ -73,6 +75,17 @@ function normalizeHttpUrl(value, field) {
   return trimmed.replace(/\/+$/, "");
 }
 __name(normalizeHttpUrl, "normalizeHttpUrl");
+function resolveEndpoint(value) {
+  if (value !== void 0 && value !== null && value !== "") {
+    return normalizeHttpUrl(value, "endpoint");
+  }
+  const origin = globalThis.location?.origin;
+  if (typeof origin !== "string" || origin === "") {
+    throw new WorkBuddyCloudConfigError("endpoint is required outside browsers (no location.origin to fall back to).");
+  }
+  return origin.replace(/\/+$/, "");
+}
+__name(resolveEndpoint, "resolveEndpoint");
 function normalizePublishableKey(publishableKey) {
   if (typeof publishableKey !== "string" || publishableKey.trim() === "") {
     throw new WorkBuddyCloudConfigError("publishableKey is required and must be a non-empty string.");
@@ -96,11 +109,11 @@ function resolveFetch(candidate) {
 __name(resolveFetch, "resolveFetch");
 function resolveRuntimeConfig(options) {
   if (!options || typeof options !== "object") {
-    throw new WorkBuddyCloudConfigError("createWorkBuddyCloud requires endpoint, oauthRelayBaseUrl and publishableKey.");
+    throw new WorkBuddyCloudConfigError("createWorkBuddyCloud requires publishableKey.");
   }
   return Object.freeze({
-    endpoint: normalizeHttpUrl(options.endpoint, "endpoint"),
-    oauthRelayBaseUrl: normalizeHttpUrl(options.oauthRelayBaseUrl, "oauthRelayBaseUrl"),
+    endpoint: resolveEndpoint(options.endpoint),
+    oauthRelayBaseUrl: options.oauthRelayBaseUrl ? normalizeHttpUrl(options.oauthRelayBaseUrl, "oauthRelayBaseUrl") : "",
     publishableKey: normalizePublishableKey(options.publishableKey),
     fetch: resolveFetch(options.fetch)
   });
@@ -144,6 +157,8 @@ var AUTH_PATHS = {
   signInWithProvider: "/v1/signin/with/provider",
   /** 本地续期端点（服务端不转发上游）。 */
   token: "/v1/token",
+  /** 小程序微信登录：本地认人后仍需用 custom 票据换取 TCB session。 */
+  loginWechat: "/v1/login-wechat",
   signOut: "/v1/user/signout",
   userMe: "/v1/user/me",
   /** 发码。 */
@@ -569,15 +584,34 @@ var AuthModule = class {
       password: credentials.password
     });
   }
+  /**
+   * 小程序 wx.login 的 code 换 Genie session。
+   * 试用与正式是两套独立小程序，必须带当前账号的 appid
+   *（`wx.getAccountInfoSync().miniProgram.appId`）。
+   */
+  async signInWithWechat(code, appid) {
+    if (!code) {
+      return fail(badRequest("signInWithWechat requires code"));
+    }
+    if (!appid) {
+      return fail(badRequest("signInWithWechat requires appid"));
+    }
+    return this.postForSession(AUTH_PATHS.loginWechat, {
+      code,
+      appid
+    });
+  }
   /**
    * 注册。
    *
    * 上游要求先完成验证码验证，所以必须带一个 `verificationToken`（来自
    * `verifyOtp`）。只有用户名+密码的注册会被上游明确拒绝。
+   *
+   * 账号标识用 `email` 或 `phone`（二选一，与发码渠道一致）。
    */
   async signUp(credentials) {
-    if (!credentials.email) {
-      return fail(badRequest("signUp requires email"));
+    if (!credentials.email && !credentials.phone) {
+      return fail(badRequest("signUp requires email or phone"));
     }
     if (!credentials.verificationToken) {
       return fail(badRequest("signUp requires a verificationToken; run sendOtp + verifyOtp first (the provider rejects username+password-only signup)"));
@@ -585,28 +619,40 @@ var AuthModule = class {
     const body = {
       verification_token: credentials.verificationToken
     };
-    body.email = credentials.email;
+    if (credentials.phone) body.phone_number = normalizePhone(credentials.phone);
+    if (credentials.email) body.email = credentials.email;
     if (credentials.password) body.password = credentials.password;
     return this.postForSession(AUTH_PATHS.signUp, body);
   }
   /**
-   * 发邮箱验证码。
+   * 发验证码（邮箱或短信，由 `credentials` 传的字段决定）。
    *
    * 这一步**不产生会话**，只返回一个 `verificationId`。发码由上游完成，
    * 我方不实现发码逻辑。
    *
    * 返回的 `isExistingUser` 决定验码之后走登录还是注册 —— 该判断由上游给出，
    * SDK 不猜。
+   *
+   * 两条渠道的请求体差异是刻意的（runtime-auth-design §3.1）：
+   * - 邮箱：`{ email, usage: 'EMAIL' }`
+   * - 手机：`{ phone_number, target: 'ANY' }` —— **不带 `usage`**（普通短信登录
+   *   发码时省略即可，上游没有对应的短信枚举值），`target: 'ANY'` 表示新老用户
+   *   都允许发码。
    */
   async sendOtp(credentials) {
-    if (!credentials.email) {
-      return fail(badRequest("sendOtp requires email"));
+    const body = {};
+    if (credentials.phone) {
+      body.phone_number = normalizePhone(credentials.phone);
+      body.target = "ANY";
+    } else if (credentials.email) {
+      body.email = credentials.email;
+      body.usage = "EMAIL";
+      if (credentials.emailRedirectTo) {
+        body.email_redirect_to = credentials.emailRedirectTo;
+      }
+    } else {
+      return fail(badRequest("sendOtp requires email or phone"));
     }
-    const body = {
-      email: credentials.email,
-      usage: "EMAIL"
-    };
-    if (credentials.emailRedirectTo) body.email_redirect_to = credentials.emailRedirectTo;
     const res = await this.request(AUTH_PATHS.verification, {
       method: "POST",
       body
@@ -631,15 +677,18 @@ var AuthModule = class {
       return fail(sent.error);
     }
     const { verificationId, isExistingUser } = sent.data;
+    const phone = credentials.phone ? normalizePhone(credentials.phone) : void 0;
     return ok({
       verificationId,
       isExistingUser,
       isUser: isExistingUser,
-      verify: /* @__PURE__ */ __name(({ token }) => this.verifyOtp({
+      verify: /* @__PURE__ */ __name(({ token, password }) => this.verifyOtp({
         verificationId,
         token,
         email: credentials.email,
-        isExistingUser
+        phone,
+        isExistingUser,
+        password
       }), "verify")
     });
   }
@@ -652,10 +701,14 @@ var AuthModule = class {
    * 走登录还是注册由 `isExistingUser` 决定（`sendOtp` 的返回值）。刻意不做
    * 「先试登录失败再试注册」的兜底：那会把「密码错」这类真实错误掩盖成一次
    * 莫名的注册尝试。
+   *
+   * 登录侧邮箱与手机号共用 `username` 字段 —— 上游 `SignInRequest.username`
+   * 承载邮箱/手机/用户名三种形态（runtime-auth-design §3.2）。
    */
   async verifyOtp(params) {
-    if (!params.verificationId || !params.token || !params.email) {
-      return fail(badRequest("verifyOtp requires verificationId, token and email"));
+    const identifier = params.phone ? normalizePhone(params.phone) : params.email ?? "";
+    if (!params.verificationId || !params.token || !identifier) {
+      return fail(badRequest("verifyOtp requires verificationId, token and either email or phone"));
     }
     const verified = await this.request(AUTH_PATHS.verificationVerify, {
       method: "POST",
@@ -674,12 +727,13 @@ var AuthModule = class {
     }
     if (params.isExistingUser) {
       return this.postForSession(AUTH_PATHS.signIn, {
-        username: params.email,
+        username: identifier,
         verification_token: verificationToken
       });
     }
     return this.signUp({
       email: params.email,
+      phone: params.phone,
       password: params.password ?? "",
       verificationToken
     });
@@ -696,8 +750,13 @@ var AuthModule = class {
    *
    * SDK 不自己跳转（不写 `location.href`）：跳转时机应由应用决定 —— 有的要
    * 先存草稿，有的在 iframe 里要开弹窗。返回 url 交调用方处置。
+   *
+   * @deprecated Google 登录已下线，新应用不应再调用该方法。
    */
   async signInWithOAuth(options) {
+    if (!this.oauthRelayBaseUrl) {
+      return fail(badRequest("signInWithOAuth requires oauthRelayBaseUrl"));
+    }
     if (options.provider !== "google") {
       return fail(badRequest("signInWithOAuth currently supports only google"));
     }
@@ -712,6 +771,8 @@ var AuthModule = class {
    *
    * 在回调落地页调一次即可。`code` 缺失时返回 `null` 数据而**不是**错误 ——
    * 落地页可能被直接访问（用户收藏了它），那不是失败。
+   *
+   * @deprecated Google 登录已下线，新应用不应再调用该方法。
    */
   async handleOAuthCallback(search) {
     const callbackInput = search ?? currentPageSearch();
@@ -946,7 +1007,11 @@ var AuthModule = class {
   // ------------------------------------------------------------------
   // 内部
   // ------------------------------------------------------------------
-  /** 拼出平台 Relay 授权地址；state 由 Relay 自己签发、校验并一次性消费。 */
+  /**
+   * 拼出平台 Relay 授权地址；state 由 Relay 自己签发、校验并一次性消费。
+   *
+   * @deprecated Google 登录已下线，仅保留给存量应用的回调落地页。
+   */
   async startRelayOAuth(options, redirectTo) {
     const callback = new URL(redirectTo);
     const relay = new URL(`${this.oauthRelayBaseUrl}/authorize`);
@@ -1042,6 +1107,17 @@ function badRequest(message) {
   };
 }
 __name(badRequest, "badRequest");
+function normalizePhone(phone) {
+  const digits = phone.replace(/\D/g, "");
+  let local = digits;
+  if (local.startsWith("0086")) {
+    local = local.slice(4);
+  } else if (local.startsWith("86") && local.length === 13) {
+    local = local.slice(2);
+  }
+  return /^1\d{10}$/.test(local) ? `+86 ${local}` : phone;
+}
+__name(normalizePhone, "normalizePhone");
 function isCloudError(v) {
   return !!v && typeof v === "object" && typeof v.kind === "string";
 }
@@ -5140,9 +5216,42 @@ function pricingField(value) {
   return Object.keys(pricing).length ? pricing : void 0;
 }
 __name(pricingField, "pricingField");
+function reasoningField(value) {
+  if (!value || typeof value !== "object") return void 0;
+  const raw = value;
+  const result = {};
+  const effort = stringField(raw.effort);
+  if (effort !== void 0) result.effort = effort;
+  const defaultEffort = stringField(raw.defaultEffort);
+  if (defaultEffort !== void 0) result.defaultEffort = defaultEffort;
+  if (Array.isArray(raw.supportedEfforts)) {
+    result.supportedEfforts = raw.supportedEfforts.filter((item) => typeof item === "string");
+  }
+  const rawSummary = stringField(raw.summary);
+  if (rawSummary !== void 0 && (rawSummary === "auto" || rawSummary === "concise" || rawSummary === "detailed")) {
+    result.summary = rawSummary;
+  }
+  const canDisable = booleanField(raw.canDisableThinking);
+  if (canDisable !== void 0) result.canDisableThinking = canDisable;
+  return Object.keys(result).length > 0 ? result : void 0;
+}
+__name(reasoningField, "reasoningField");
 function normalizeModel(raw) {
   const id = stringField(raw.id, raw.ID);
   if (!id) return null;
+  const serverEnabled = booleanField(raw.enabled, raw.Enabled);
+  const serverDisabled = booleanField(raw.disabled, raw.Disabled);
+  let enabled;
+  let disabled;
+  if (serverEnabled !== void 0) {
+    enabled = serverEnabled;
+    if (serverDisabled !== void 0) disabled = serverDisabled;
+  } else if (serverDisabled !== void 0) {
+    disabled = serverDisabled;
+    enabled = !serverDisabled;
+  } else {
+    enabled = true;
+  }
   return {
     id,
     name: stringField(raw.name, raw.Name) ?? id,
@@ -5185,7 +5294,10 @@ function normalizeModel(raw) {
     ...capabilitiesField(raw.capabilities ?? raw.Capabilities) ? {
       capabilities: capabilitiesField(raw.capabilities ?? raw.Capabilities)
     } : {},
-    enabled: booleanField(raw.enabled, raw.Enabled) ?? true,
+    enabled,
+    ...disabled !== void 0 ? {
+      disabled
+    } : {},
     ...booleanField(raw.isDefault, raw.IsDefault) !== void 0 ? {
       isDefault: booleanField(raw.isDefault, raw.IsDefault)
     } : {},
@@ -5194,10 +5306,55 @@ function normalizeModel(raw) {
     } : {},
     ...pricingField(raw.pricing ?? raw.Pricing) ? {
       pricing: pricingField(raw.pricing ?? raw.Pricing)
+    } : {},
+    // User-specified sparse fields: preserve explicit false/0, omit only when absent.
+    ...stringField(raw.credits, raw.Credits) ? {
+      credits: stringField(raw.credits, raw.Credits)
+    } : {},
+    ...numberField(raw.maxAllowedSize, raw.MaxAllowedSize) !== void 0 ? {
+      maxAllowedSize: numberField(raw.maxAllowedSize, raw.MaxAllowedSize)
+    } : {},
+    ...booleanField(raw.disabledMultimodal, raw.DisabledMultimodal) !== void 0 ? {
+      disabledMultimodal: booleanField(raw.disabledMultimodal, raw.DisabledMultimodal)
+    } : {},
+    ...booleanField(raw.supportsImages, raw.SupportsImages) !== void 0 ? {
+      supportsImages: booleanField(raw.supportsImages, raw.SupportsImages)
+    } : {},
+    ...booleanField(raw.supportsToolCall, raw.SupportsToolCall) !== void 0 ? {
+      supportsToolCall: booleanField(raw.supportsToolCall, raw.SupportsToolCall)
+    } : {},
+    ...booleanField(raw.supportsReasoning, raw.SupportsReasoning) !== void 0 ? {
+      supportsReasoning: booleanField(raw.supportsReasoning, raw.SupportsReasoning)
+    } : {},
+    ...booleanField(raw.onlyReasoning, raw.OnlyReasoning) !== void 0 ? {
+      onlyReasoning: booleanField(raw.onlyReasoning, raw.OnlyReasoning)
+    } : {},
+    ...reasoningField(raw.reasoning ?? raw.Reasoning) ? {
+      reasoning: reasoningField(raw.reasoning ?? raw.Reasoning)
+    } : {},
+    ...numberField(raw.temperature, raw.Temperature) !== void 0 ? {
+      temperature: numberField(raw.temperature, raw.Temperature)
+    } : {},
+    ...numberField(raw.top_k, raw.Top_K) !== void 0 ? {
+      top_k: numberField(raw.top_k, raw.Top_K)
+    } : {},
+    ...numberField(raw.top_p, raw.Top_P) !== void 0 ? {
+      top_p: numberField(raw.top_p, raw.Top_P)
+    } : {},
+    ...numberField(raw.repetition_penalty, raw.Repetition_Penalty) !== void 0 ? {
+      repetition_penalty: numberField(raw.repetition_penalty, raw.Repetition_Penalty)
     } : {}
   };
 }
 __name(normalizeModel, "normalizeModel");
+function getModelDisplayName(model) {
+  return model.name || model.id;
+}
+__name(getModelDisplayName, "getModelDisplayName");
+function getModelCapability(model, capability) {
+  return model.capabilities?.[capability];
+}
+__name(getModelCapability, "getModelCapability");
 var ModelsAPI = class {
   static {
     __name(this, "ModelsAPI");
@@ -5213,8 +5370,8 @@ var ModelsAPI = class {
    *
    * `id` is the value to pass as `model` to `chat.completions.create()`.
    * Optional metadata is included only when the server explicitly provides
-   * it; absence means unknown, not unsupported. The server remains the
-   * final allowlist authority for chat requests.
+   * it; absence means unknown, not unsupported. The actual call result
+   * is determined by the response, not by the directory entry.
    */
   async list(signal) {
     let response;
@@ -5487,7 +5644,10 @@ async function* iterSSEEvents(body, signal) {
 __name(iterSSEEvents, "iterSSEEvents");
 
 // src/modules/llm/chat.ts
-function extractSSEError(data) {
+function extractSSEError(data, requestId) {
+  const init = requestId ? {
+    requestId
+  } : {};
   try {
     const parsed = JSON.parse(data);
     if (parsed && typeof parsed === "object") {
@@ -5498,7 +5658,7 @@ function extractSSEError(data) {
           type: typeof errorObj.type === "string" ? errorObj.type : "server_error",
           param: errorObj.param === void 0 ? null : errorObj.param,
           code: errorObj.code === void 0 ? null : errorObj.code
-        });
+        }, init);
       }
     }
   } catch {
@@ -5508,7 +5668,7 @@ function extractSSEError(data) {
     type: "server_error",
     param: null,
     code: null
-  });
+  }, init);
 }
 __name(extractSSEError, "extractSSEError");
 var ChatCompletionsAPI = class {
@@ -5522,72 +5682,28 @@ var ChatCompletionsAPI = class {
     this.fetch = fetch2;
   }
   create(input) {
-    if (input.stream === true) {
-      return this.createStreaming(input);
-    }
-    return this.createNonStreaming(input);
-  }
-  /**
-   * Non-streaming chat completion.
-   */
-  async createNonStreaming(input) {
-    if (input.stream_options) {
+    if (input.stream !== true) {
       throw new CloudOpenAIError({
-        message: "stream_options can only be used with stream=true",
+        message: "stream must be true; non-streaming chat completions are not supported",
         type: "invalid_request_error",
-        param: "stream_options",
-        code: "request_invalid_parameter"
-      });
-    }
-    const { signal, ...body } = input;
-    if (body.stream === void 0) {
-      delete body.stream;
-    } else {
-      body.stream = false;
-    }
-    let response;
-    try {
-      response = await this.fetch(`${this.baseUrl}/chat/completions`, {
-        method: "POST",
-        headers: {
-          Accept: "application/json",
-          "Content-Type": "application/json"
-        },
-        body: JSON.stringify(body),
-        signal
-      });
-    } catch (err) {
-      if (err instanceof Error && err.name === "AbortError") {
-        throw err;
-      }
-      throw new CloudOpenAIError({
-        message: `Network error: ${err?.message ?? "unknown"}`,
-        type: "server_error",
-        param: null,
-        code: "gateway_network_error"
-      }, {
-        cause: err
-      });
-    }
-    if (!response.ok) {
-      throw await httpError(response);
-    }
-    const text = await response.text();
-    try {
-      return JSON.parse(text);
-    } catch {
-      throw new CloudOpenAIError({
-        message: "Failed to parse chat completion response: invalid JSON",
-        type: "server_error",
-        param: null,
-        code: "gateway_invalid_response"
+        param: "stream",
+        code: "request_stream_required"
       });
     }
+    return this.createStreaming(input);
   }
   /**
    * Streaming chat completion — returns an async generator of chunks.
    *
    * Reads the SSE stream incrementally, yielding ChatCompletionChunk objects.
+   * `stream_options` is passed through unchanged when present.
+   *
+   * The `X-Request-Id` response header is captured and attached (as
+   * `requestId`) to every `CloudOpenAIError` thrown from within the stream:
+   * `event: error`, chunk-embedded error, JSON parse failure, and missing
+   * `[DONE]` interruption. Non-2xx HTTP errors continue to go through
+   * `httpError`, which independently extracts `X-Request-Id`.
+   *
    * Throws CloudOpenAIError on:
    * - `event: error` in the stream
    * - Stream ends without `[DONE]` (gateway_stream_interrupted)
@@ -5595,7 +5711,7 @@ var ChatCompletionsAPI = class {
    * - Caller abort (AbortSignal) — exits silently, no throw
    */
   async *createStreaming(input) {
-    const { signal, ...body } = input;
+    const { signal, conversationId, ...body } = input;
     body.stream = true;
     let response;
     try {
@@ -5603,7 +5719,10 @@ var ChatCompletionsAPI = class {
         method: "POST",
         headers: {
           Accept: "text/event-stream",
-          "Content-Type": "application/json"
+          "Content-Type": "application/json",
+          ...conversationId !== void 0 ? {
+            "X-Conversation-ID": conversationId
+          } : {}
         },
         body: JSON.stringify(body),
         signal
@@ -5630,15 +5749,18 @@ var ChatCompletionsAPI = class {
         type: "server_error",
         param: null,
         code: "gateway_invalid_response"
+      }, {
+        requestId: response.headers.get("x-request-id") ?? void 0
       });
     }
+    const requestId = response.headers.get("x-request-id") ?? void 0;
     let receivedDone = false;
     let threw = false;
     try {
       for await (const sseEvent of iterSSEEvents(response.body, signal)) {
         if (sseEvent.event === "error") {
           threw = true;
-          throw extractSSEError(sseEvent.data);
+          throw extractSSEError(sseEvent.data, requestId);
         }
         if (sseEvent.event === null || sseEvent.event === "") {
           if (sseEvent.data === SSE_DONE) {
@@ -5658,6 +5780,8 @@ var ChatCompletionsAPI = class {
               type: "server_error",
               param: null,
               code: "gateway_invalid_response"
+            }, {
+              requestId
             });
           }
           if (chunk && typeof chunk === "object" && "error" in chunk) {
@@ -5668,6 +5792,8 @@ var ChatCompletionsAPI = class {
               type: typeof errObj?.type === "string" ? errObj.type : "server_error",
               param: errObj?.param === void 0 ? null : errObj.param,
               code: errObj?.code === void 0 ? null : errObj.code
+            }, {
+              requestId
             });
           }
           yield chunk;
@@ -5686,6 +5812,8 @@ var ChatCompletionsAPI = class {
         type: "server_error",
         param: null,
         code: "gateway_stream_interrupted"
+      }, {
+        requestId
       });
     }
   }
@@ -9266,6 +9394,8 @@ __name(shouldClearCredentials, "shouldClearCredentials");
   anonymousTokenProvider,
   createMemoryStorage,
   createWorkBuddyCloud,
+  getModelCapability,
+  getModelDisplayName,
   shouldClearCredentials
 });
 //# sourceMappingURL=index.cjs.map