bailian-cli-core 1.27.0 → 2.0.0

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 //#region src/errors/codes.d.ts
-declare const ExitCode: {
+export declare const ExitCode: {
   readonly SUCCESS: 0;
   readonly GENERAL: 1;
   readonly USAGE: 2;
@@ -10,7 +10,7 @@ declare const ExitCode: {
   readonly CONFIRMATION_REQUIRED: 7;
   readonly CONTENT_FILTER: 10;
 };
-type ExitCode = (typeof ExitCode)[keyof typeof ExitCode];
+export type ExitCode = (typeof ExitCode)[keyof typeof ExitCode];
 //#endregion
 //#region src/errors/base.d.ts
 interface ApiErrorContext {
@@ -23,7 +23,7 @@ interface BailianErrorOptions {
   api?: ApiErrorContext;
   rawResponse?: string;
 }
-declare class BailianError extends Error {
+export declare class BailianError extends Error {
   readonly exitCode: ExitCode;
   readonly hint?: string;
   readonly api?: ApiErrorContext;
@@ -31,18 +31,18 @@ declare class BailianError extends Error {
   constructor(message: string, exitCode?: ExitCode, hint?: string, options?: BailianErrorOptions);
   toJSON(): {
     error: {
+      cause?: Record<string, unknown> | undefined;
+      request_id?: string | undefined;
+      api_code?: string | undefined;
+      http_status?: number | undefined;
+      hint?: string | undefined;
       code: ExitCode;
       message: string;
-      hint?: string | undefined;
-      http_status?: number | undefined;
-      api_code?: string | undefined;
-      request_id?: string | undefined;
-      cause?: Record<string, unknown> | undefined;
     };
   };
 }
 /** Invalid usage: unknown command, bad/unknown flag, missing required, failed validation. */
-declare class UsageError extends BailianError {
+export declare class UsageError extends BailianError {
   constructor(message: string, hint?: string);
 }
 //#endregion
@@ -58,7 +58,7 @@ interface ApiErrorBody {
   request_id?: string;
   requestID?: string;
 }
-declare function mapApiError(status: number, body: ApiErrorBody, _url?: string): BailianError;
+export declare function mapApiError(status: number, body: ApiErrorBody, _url?: string): BailianError;
 //#endregion
 //#region src/types/api.d.ts
 interface ChatMessage {
@@ -241,11 +241,13 @@ interface DashScopeImageRequest {
       }>;
     }>;
   } | {
-    prompt: string; /** Required by image2image models such as wan2.5-i2i-preview. */
+    prompt: string;
+    /** Required by image2image models such as wan2.5-i2i-preview. */
     images?: string[];
     negative_prompt?: string;
   } | {
-    /** Required by wanx*-imageedit models. */function: string;
+    /** Required by wanx*-imageedit models. */
+    function: string;
     prompt: string;
     base_image_url: string;
     mask_image_url?: string;
@@ -550,7 +552,8 @@ interface KnowledgeChatRequest {
   };
   parameters: {
     agent_options: {
-      agent_id: string; /** "beta" targets the debug draft; a numeric version targets that published version; defaults to the latest published version */
+      agent_id: string;
+      /** "beta" targets the debug draft; a numeric version targets that published version; defaults to the latest published version */
       agent_version?: string;
       user?: {
         user_id?: string;
@@ -631,16 +634,20 @@ interface DashScopeASRRequest {
   model: string;
   input: {
     file_urls?: string[];
-    file_url?: string; /** Context enhancement for async filetrans (array of chat-style messages). */
+    file_url?: string;
+    /** Context enhancement for async filetrans (array of chat-style messages). */
     context?: AsrContextMessage[];
   };
   parameters?: {
-    channel_id?: number[]; /** Classic async models (fun-asr / paraformer / qwen-audio filetrans, etc.) */
-    language_hints?: string[]; /** qwen3-asr-flash-filetrans* uses singular `language` */
+    channel_id?: number[];
+    /** Classic async models (fun-asr / paraformer / qwen-audio filetrans, etc.) */
+    language_hints?: string[];
+    /** qwen3-asr-flash-filetrans* uses singular `language` */
     language?: string;
     diarization_enabled?: boolean;
     speaker_count?: number;
-    vocabulary_id?: string; /** Instant hot words (word → weight); takes effect on Qwen-Audio-3.0-ASR-Flash series. */
+    vocabulary_id?: string;
+    /** Instant hot words (word → weight); takes effect on Qwen-Audio-3.0-ASR-Flash series. */
     vocabulary?: Record<string, number>;
   };
 }
@@ -654,8 +661,10 @@ interface DashScopeASRTranscriptionItem {
 interface DashScopeASRTaskResult {
   output: {
     task_id: string;
-    task_status: "PENDING" | "RUNNING" | "SUCCEEDED" | "FAILED" | "UNKNOWN"; /** Multi-file async results (fun-asr / paraformer / qwen-audio filetrans, etc.) */
-    results?: DashScopeASRTranscriptionItem[]; /** Singular result returned by qwen3-asr-flash-filetrans* on success */
+    task_status: "PENDING" | "RUNNING" | "SUCCEEDED" | "FAILED" | "UNKNOWN";
+    /** Multi-file async results (fun-asr / paraformer / qwen-audio filetrans, etc.) */
+    results?: DashScopeASRTranscriptionItem[];
+    /** Singular result returned by qwen3-asr-flash-filetrans* on success */
     result?: {
       transcription_url?: string;
     };
@@ -1041,21 +1050,21 @@ interface RagOssImportData {
 type RagOssImportResponse = RagConnectorResponse<RagOssImportData>;
 //#endregion
 //#region src/config/schema.d.ts
-declare const REGIONS: {
+export declare const REGIONS: {
   readonly cn: "https://dashscope.aliyuncs.com";
   readonly us: "https://dashscope-us.aliyuncs.com";
   readonly intl: "https://dashscope-intl.aliyuncs.com";
 };
-declare const DOCS_HOSTS: {
+export declare const DOCS_HOSTS: {
   readonly cn: "https://help.aliyun.com/zh/model-studio";
   readonly us: "https://help.aliyun.com/zh/model-studio";
   readonly intl: "https://help.aliyun.com/zh/model-studio";
 };
-declare const BAILIAN_HOST = "https://bailian.cn-beijing.aliyuncs.com";
+export declare const BAILIAN_HOST = "https://bailian.cn-beijing.aliyuncs.com";
 type Region = keyof typeof REGIONS;
-declare const SUPPORTED_LANGUAGES: readonly ["en-US", "zh-CN"];
+export declare const SUPPORTED_LANGUAGES: readonly ["en-US", "zh-CN"];
 type Language = (typeof SUPPORTED_LANGUAGES)[number];
-declare const DEFAULT_LANGUAGE: Language;
+export declare const DEFAULT_LANGUAGE: Language;
 interface ConfigFile {
   language?: Language;
   api_key?: string;
@@ -1088,15 +1097,15 @@ interface ConfigFile {
   console_switch_agent?: number;
   telemetry?: boolean;
 }
-declare const CONFIG_FILE_KEYS: readonly ["language", "api_key", "access_token", "access_key_id", "access_key_secret", "security_token", "base_url", "output", "output_dir", "timeout", "watermark", "default_text_model", "default_video_model", "default_image_to_video_model", "default_reference_to_video_model", "default_image_model", "default_speech_model", "default_speech_recognition_model", "default_omni_model", "api_key_capabilities", "workspace_id", "console_site", "console_region", "console_switch_agent", "telemetry"];
-declare const API_KEY_CAPABILITY_PATTERN: RegExp;
-declare function isApiKeyCapability(value: string): boolean;
+export declare const CONFIG_FILE_KEYS: readonly ["language", "api_key", "access_token", "access_key_id", "access_key_secret", "security_token", "base_url", "output", "output_dir", "timeout", "watermark", "default_text_model", "default_video_model", "default_image_to_video_model", "default_reference_to_video_model", "default_image_model", "default_speech_model", "default_speech_recognition_model", "default_omni_model", "api_key_capabilities", "workspace_id", "console_site", "console_region", "console_switch_agent", "telemetry"];
+export declare const API_KEY_CAPABILITY_PATTERN: RegExp;
+export declare function isApiKeyCapability(value: string): boolean;
 /**
  * Normalize a persisted capability allowlist. Absence keeps the policy disabled;
  * a present malformed value fails closed to an empty allowlist.
  */
-declare function normalizeApiKeyCapabilities(value: unknown): string[] | undefined;
-declare function parseConfigFile(raw: unknown): ConfigFile;
+export declare function normalizeApiKeyCapabilities(value: unknown): string[] | undefined;
+export declare function parseConfigFile(raw: unknown): ConfigFile;
 /** 静态产品身份,createCli 注入一次(bl/rag 各异,故注入而非模块常量)。 */
 interface Identity {
   /** Product binary name, e.g. "bl", "rag". */
@@ -1162,7 +1171,7 @@ interface ConfigStore {
   validateActivation(name?: unknown): string;
   path: string;
 }
-declare function makeConfigStore(configName?: string): ConfigStore;
+export declare function makeConfigStore(configName?: string): ConfigStore;
 //#endregion
 //#region src/auth/types.d.ts
 /** Where a resolved credential came from (shown by `bl auth status`). */
@@ -1223,7 +1232,7 @@ interface AuthStore {
   /** 实际写入的 config.json 路径(不受命名配置影响,一直是同一个文件)。 */
   path: string;
 }
-declare function makeAuthStore(sources: ResolutionSources): AuthStore;
+export declare function makeAuthStore(sources: ResolutionSources): AuthStore;
 //#endregion
 //#region src/client/http.d.ts
 /** 传输层依赖:UA 用 identity,timeout/verbose 用 settings。凭证由调用方(Client)注头。 */
@@ -1241,8 +1250,8 @@ interface RequestOpts {
   async?: boolean;
   signal?: AbortSignal;
 }
-declare function request(deps: HttpDeps, opts: RequestOpts): Promise<Response>;
-declare function requestJson<T>(deps: HttpDeps, opts: RequestOpts): Promise<T>;
+export declare function request(deps: HttpDeps, opts: RequestOpts): Promise<Response>;
+export declare function requestJson<T>(deps: HttpDeps, opts: RequestOpts): Promise<T>;
 //#endregion
 //#region src/client/acs.d.ts
 type AcsQueryParams = Record<string, string | string[] | undefined | number>;
@@ -1260,8 +1269,8 @@ interface AcsSignConfig {
   queryString?: string;
 }
 /** Build ACS3 canonical query string from OpenAPI query parameters. */
-declare function buildAcsCanonicalQuery(params: AcsQueryParams): string;
-declare function signAcsRequest(cfg: AcsSignConfig): Record<string, string>;
+export declare function buildAcsCanonicalQuery(params: AcsQueryParams): string;
+export declare function signAcsRequest(cfg: AcsSignConfig): Record<string, string>;
 //#endregion
 //#region src/client/mcp.d.ts
 interface McpTool {
@@ -1283,18 +1292,18 @@ interface McpToolResult {
  * The path is `/api/v1/mcps/<serverCode>/mcp`; the `serverCode` is taken
  * verbatim from `bl mcp list` (e.g. `WebSearch`, `market-cmapi00073529`).
  */
-declare function bailianMcpPath(serverCode: string): string;
+export declare function bailianMcpPath(serverCode: string): string;
 /** Classic SSE path: `/api/v1/mcps/<serverCode>/sse`. */
-declare function bailianMcpSsePath(serverCode: string): string;
+export declare function bailianMcpSsePath(serverCode: string): string;
 /**
  * True when Streamable HTTP is unsupported and classic SSE fallback should be tried.
  * Anchored to HTTP wrapper text only (not JSON-RPC / nested copies). Bailian 404 excluded.
  */
-declare function isStreamableHttpUnsupported(error: unknown): boolean;
+export declare function isStreamableHttpUnsupported(error: unknown): boolean;
 /**
  * SSE fallback for `--url` (official backwards-compat: same URL, HTTP 405/404 then GET SSE).
  */
-declare function isUrlOverrideSseFallbackCandidate(error: unknown): boolean;
+export declare function isUrlOverrideSseFallbackCandidate(error: unknown): boolean;
 type McpConnectedClient = {
   initialize(): Promise<void>;
   listTools(): Promise<McpTool[]>;
@@ -1303,8 +1312,10 @@ type McpConnectedClient = {
 };
 type ConnectBailianMcpOptions = {
   deps: HttpDeps;
-  authToken: string | undefined; /** Full Streamable HTTP URL (/mcp). */
-  httpUrl: string; /** Full classic SSE URL (/sse). */
+  authToken: string | undefined;
+  /** Full Streamable HTTP URL (/mcp). */
+  httpUrl: string;
+  /** Full classic SSE URL (/sse). */
   sseUrl: string;
   serverCode: string;
   /**
@@ -1318,11 +1329,11 @@ type ConnectBailianMcpOptions = {
  * `--url` uses the same URL for Streamable then classic SSE (official backwards-compat).
  * For WebSearch, rethrow the original error so commands can attach a re-activate hint.
  */
-declare function connectBailianMcpWithFallback(options: ConnectBailianMcpOptions): Promise<{
+export declare function connectBailianMcpWithFallback(options: ConnectBailianMcpOptions): Promise<{
   client: McpConnectedClient;
   url: string;
 }>;
-declare class McpClient {
+export declare class McpClient {
   private url;
   private sessionId;
   private nextId;
@@ -1335,6 +1346,9 @@ declare class McpClient {
   callTool(name: string, args: Record<string, unknown>): Promise<McpToolResult>;
   private rpc;
   private notify;
+  /**
+   * Read a JSON-RPC response by Content-Type: application/json or text/event-stream.
+   */
   private readJsonRpcResponse;
   private readJsonRpcFromSse;
   private send;
@@ -1388,7 +1402,7 @@ interface OpenApiResponse {
  * credentials. `console` needs a console token; calling one without its
  * credential throws.
  */
-declare class Client {
+export declare class Client {
   private readonly deps;
   constructor(deps: ClientDeps);
   private get http();
@@ -1405,6 +1419,11 @@ declare class Client {
    * resolved (authStage tolerates that only under dry-run).
    */
   exportApiCredential(): ApiKeyCredential | undefined;
+  /**
+   * Headers for registering a Bailian MCP endpoint in an external Agent.
+   * Credential resolution and channel attribution remain owned by the client.
+   */
+  bailianMcpRegistrationHeaders(): Record<string, string>;
   /**
    * Full URL for a model-domain path. Services may supply a lazy default origin,
    * evaluated only when no flag/env/profile base URL was configured.
@@ -1507,10 +1526,10 @@ type IsRequired<F extends FlagDef> = F extends SwitchFlag ? true : F extends {
  * Map a FlagsDef to the parsed flags object type. Required flags (switches +
  * `required: true`) are required properties; optional value flags are `?`.
  */
-type ParsedFlags<F extends FlagsDef> = { [K in keyof F as IsRequired<F[K]> extends true ? K : never]: ParsedValue<F[K]> } & { [K in keyof F as IsRequired<F[K]> extends true ? never : K]?: ParsedValue<F[K]> };
+type ParsedFlags<F extends FlagsDef> = { [K in keyof F as IsRequired<F[K]> extends true ? K : never]: ParsedValue<F[K]>; } & { [K in keyof F as IsRequired<F[K]> extends true ? never : K]?: ParsedValue<F[K]>; };
 type AuthRequirement = "apiKey" | "console" | "openapi" | "none";
 /** 所有命令都可用的全局 flag。 */
-declare const GLOBAL_FLAGS: {
+export declare const GLOBAL_FLAGS: {
   output: {
     type: "string";
     valueHint: string;
@@ -1572,7 +1591,7 @@ declare const GLOBAL_FLAGS: {
   };
 };
 /** Command-scoped flag for commands that support parallel API calls. */
-declare const CONCURRENT_FLAG: {
+export declare const CONCURRENT_FLAG: {
   concurrent: {
     type: "number";
     valueHint: string;
@@ -1583,7 +1602,7 @@ declare const CONCURRENT_FLAG: {
   };
 };
 /** Command-scoped flag for task-based commands that can return without polling. */
-declare const ASYNC_FLAG: {
+export declare const ASYNC_FLAG: {
   async: {
     type: "switch";
     description: {
@@ -1593,7 +1612,7 @@ declare const ASYNC_FLAG: {
   };
 };
 /** Model 域凭证/连接 flag,`auth: "apiKey"` 命令可见。 */
-declare const MODEL_AUTH_FLAGS: {
+export declare const MODEL_AUTH_FLAGS: {
   apiKey: {
     type: "string";
     valueHint: string;
@@ -1612,7 +1631,7 @@ declare const MODEL_AUTH_FLAGS: {
   };
 };
 /** Console 域目标/作用域 flag,`auth: "console"` 命令可见。 */
-declare const CONSOLE_AUTH_FLAGS: {
+export declare const CONSOLE_AUTH_FLAGS: {
   consoleRegion: {
     type: "string";
     valueHint: string;
@@ -1647,7 +1666,7 @@ declare const CONSOLE_AUTH_FLAGS: {
   };
 };
 /** Alibaba Cloud OpenAPI AK/SK credential flags, visible to `auth: "openapi"` commands. */
-declare const OPENAPI_AUTH_FLAGS: {
+export declare const OPENAPI_AUTH_FLAGS: {
   accessKeyId: {
     type: "string";
     valueHint: string;
@@ -1676,7 +1695,7 @@ declare const OPENAPI_AUTH_FLAGS: {
 /** sources 里可能出现的全部 flag(全局 + 凭证域)。 */
 type SourceFlags = ParsedFlags<typeof GLOBAL_FLAGS & typeof MODEL_AUTH_FLAGS & typeof CONSOLE_AUTH_FLAGS & typeof OPENAPI_AUTH_FLAGS>;
 /** 该命令可见的凭证域 flag 定义。 */
-declare function credentialFlagDefs(cmd: {
+export declare function credentialFlagDefs(cmd: {
   auth: AuthRequirement;
 }): FlagsDef;
 /**
@@ -1688,6 +1707,14 @@ declare function credentialFlagDefs(cmd: {
 interface CommandContext<F extends FlagsDef = FlagsDef> {
   /** 静态产品身份(binName/version/npmPackage/clientName)。 */
   identity: Identity;
+  /**
+   * Locale selector for user-facing output: picks the `en-US` / `zh-CN` variant
+   * of a {@link LocalizedText} per the resolved language. Supplied by the runtime
+   * (RunContext.localize). Commands use it to localize what they *print*; the
+   * localized command metadata (description/flags/notes) is rendered by the
+   * runtime's help output and does not need this.
+   */
+  localize: (text: LocalizedText) => string;
   /** flag/env/file 解析后的有效配置面。 */
   settings: Settings;
   /** 只含本命令声明的 flag;全局 flag 经 settings 读。 */
@@ -1742,17 +1769,17 @@ interface Command<F extends FlagsDef = FlagsDef> {
 /** Type-erased command for heterogeneous storage (registry / context). */
 type AnyCommand = Command<any>;
 /** Identity wrapper whose only job is to infer `F` from `spec.flags`. */
-declare function defineCommand<F extends FlagsDef>(spec: Command<F>): Command<F>;
+export declare function defineCommand<F extends FlagsDef>(spec: Command<F>): Command<F>;
 //#endregion
 //#region src/config/loader.d.ts
 /**
  * 校验并规范化 `--config <name>`：`undefined`/""/"default" 都视为未指定（等价顶层默认配置）。
  * 合法命名只允许字母、数字、`-`/`_`，且不能与 `ConfigFile` 顶层字段同名（避免写入时与默认配置字段歧义）。
  */
-declare function normalizeConfigName(name?: unknown): string | undefined;
-declare function readConfigFile(configName?: string): ConfigFile;
+export declare function normalizeConfigName(name?: unknown): string | undefined;
+export declare function readConfigFile(configName?: string): ConfigFile;
 /** 写入所选 Profile；登录流程可在同一次原子写入中将显式 Profile 设为激活项。 */
-declare function writeConfigFile(data: Record<string, unknown>, configName?: string, options?: {
+export declare function writeConfigFile(data: Record<string, unknown>, configName?: string, options?: {
   activate?: boolean;
 }): Promise<void>;
 /** 全量配置快照：顶层默认配置 + 各命名 profile。 */
@@ -1768,13 +1795,13 @@ interface ConfigProfiles {
  * 读取全部 profile：顶层默认配置与各命名 block。
  * 命名 block = raw 中不属于 `CONFIG_FILE_KEYS`、且值为普通对象的项。
  */
-declare function readConfigProfiles(): ConfigProfiles;
+export declare function readConfigProfiles(): ConfigProfiles;
 /** 校验激活目标并返回规范化展示名；不写配置。 */
-declare function validateConfigProfileActivation(name?: unknown): string;
+export declare function validateConfigProfileActivation(name?: unknown): string;
 /** 将已存在的命名 Profile（或 default）设为持久化激活项。 */
-declare function activateConfigProfile(name?: unknown): Promise<string>;
+export declare function activateConfigProfile(name?: unknown): Promise<string>;
 /** 删除一个命名 profile block；存在才删并回写，返回是否有变更。 */
-declare function deleteConfigProfile(name?: unknown): Promise<boolean>;
+export declare function deleteConfigProfile(name?: unknown): Promise<boolean>;
 /**
  * 解析的三个来源,dispatch 边界一次构建。flags 收 Partial:ParsedFlags 里 switch 是
  * 必填 boolean,收 Partial 让 pipeline 等无 flag 场景传 {} 即可。
@@ -1798,36 +1825,36 @@ interface ApiKeyResolutionSourceSelection {
  * persisted Profile capability list enables fallback. An explicit flag or
  * environment API connection override bypasses it entirely.
  */
-declare function selectApiKeyResolutionSources(sources: ResolutionSources, capability: string): ApiKeyResolutionSourceSelection;
-declare function buildSources(flags: Partial<SourceFlags>): ResolutionSources;
+export declare function selectApiKeyResolutionSources(sources: ResolutionSources, capability: string): ApiKeyResolutionSourceSelection;
+export declare function buildSources(flags: Partial<SourceFlags>): ResolutionSources;
 /**
  * 纯解析 sources → Settings(命令唯一会读的配置面)。不含身份、baseUrl、鉴权。
  * 各字段链序 flag > env > file > 默认;锁定表 tests/config-priority.test.ts。
  */
-declare function buildSettings(s: ResolutionSources): Settings;
+export declare function buildSettings(s: ResolutionSources): Settings;
 //#endregion
 //#region src/auth/resolver.d.ts
 /** Preserve whether the shared base URL chain selected a configured origin or its default. */
-declare function resolveModelBaseUrlState(sources: ResolutionSources, fallback?: string): {
+export declare function resolveModelBaseUrlState(sources: ResolutionSources, fallback?: string): {
   baseUrl: string;
   baseUrlIsDefault: boolean;
 };
 /** Model-domain baseUrl(flag > env > config file > fallback);无需 key 也可解析。 */
-declare function resolveModelBaseUrl(s: ResolutionSources, fallback?: string): string;
+export declare function resolveModelBaseUrl(s: ResolutionSources, fallback?: string): string;
 /**
  * Model-domain credential from sources. Priority: `--api-key` flag >
  * `DASHSCOPE_API_KEY` env > config.json `api_key`. baseUrl: flag > env > file > cn.
  */
-declare function resolveApiKey(s: ResolutionSources): ApiKeyCredential;
+export declare function resolveApiKey(s: ResolutionSources): ApiKeyCredential;
 /** Console-domain credential from sources — access token + 连接目标(flag > file > 默认)。 */
-declare function resolveConsole(s: ResolutionSources): ConsoleCredential;
+export declare function resolveConsole(s: ResolutionSources): ConsoleCredential;
 /** Alibaba Cloud OpenAPI AK/SK credential. Priority: flags > env > config. */
-declare function resolveOpenApi(s: ResolutionSources): OpenApiCredential;
+export declare function resolveOpenApi(s: ResolutionSources): OpenApiCredential;
 /** Full auth snapshot from sources — what would resolve per domain (or undefined). */
-declare function describeAuthState(s: ResolutionSources): AuthState;
+export declare function describeAuthState(s: ResolutionSources): AuthState;
 //#endregion
 //#region src/auth/refresh-token.d.ts
-declare function generateCLIAccessToken(opts: {
+export declare function generateCLIAccessToken(opts: {
   identity: Identity;
   settings: Settings;
   baseUrl: string;
@@ -1839,64 +1866,70 @@ declare function generateCLIAccessToken(opts: {
  * Try to refresh the console access_token using stored AK/SK.
  * Returns the new token on success, or null if AK/SK are not available.
  */
-declare function refreshAccessToken(opts: {
+export declare function refreshAccessToken(opts: {
   identity: Identity;
   settings: Settings;
   baseUrl: string;
 }): Promise<string | null>;
 //#endregion
 //#region src/client/endpoints.d.ts
-declare function chatPath(): string;
-declare function responsesPath(): string;
+export declare function chatPath(): string;
+export declare function responsesPath(): string;
 /** Async image API used by wan2.6-t2i / wan2.6-image (T2I) and similar message-format models. */
-declare function imagePath(): string;
+export declare function imagePath(): string;
 /** Sync multimodal API (qwen-image / wan2.7-image / z-image generate; also wan2.6-image edit). */
-declare function imageSyncPath(): string;
+export declare function imageSyncPath(): string;
 /** Legacy async text-to-image API (wan2.5/2.2/2.1-t2i, wanx-*-t2i). */
-declare function imageText2ImagePath(): string;
+export declare function imageText2ImagePath(): string;
 /** Legacy async image-to-image / edit API (wan2.5-i2i, *imageedit*). */
-declare function image2ImagePath(): string;
-declare function videoGeneratePath(): string;
+export declare function image2ImagePath(): string;
+export declare function videoGeneratePath(): string;
 /** POST /api/v1/services/aigc/image2video/video-synthesis — kf2v (first+last frame). */
-declare function image2videoPath(): string;
-declare function taskPath(taskId: string): string;
-declare function modelsLimitsPath(): string;
-declare function modelsPermissionsPath(): string;
-declare function appCompletionPath(appId: string): string;
-declare function memoryAddPath(): string;
-declare function memorySearchPath(): string;
-declare function memoryListPath(): string;
-declare function memoryNodePath(nodeId: string): string;
-declare function speechSynthesizePath(): string;
-declare function speechRecognizePath(): string;
-declare function speechVocabularyPath(): string;
-declare function profileSchemaPath(): string;
-declare function userProfilePath(schemaId: string): string;
-declare function knowledgeRetrievePath(): string;
-declare function knowledgeSearchEndpoint(workspaceId: string): string;
-declare function knowledgeChatEndpoint(workspaceId: string): string;
-declare function mcpWebSearchPath(): string;
-declare function ragEndpoint(workspaceId: string, path: string): string;
+export declare function image2videoPath(): string;
+export declare function taskPath(taskId: string): string;
+export declare function modelsLimitsPath(): string;
+export declare function modelsPermissionsPath(): string;
+export declare function appCompletionPath(appId: string): string;
+export declare function memoryAddPath(): string;
+export declare function memorySearchPath(): string;
+export declare function memoryListPath(): string;
+export declare function memoryNodePath(nodeId: string): string;
+export declare function speechSynthesizePath(): string;
+export declare function speechRecognizePath(): string;
+export declare function speechVocabularyPath(): string;
+export declare function profileSchemaPath(): string;
+export declare function userProfilePath(schemaId: string): string;
+export declare function knowledgeRetrievePath(): string;
+export declare function knowledgeSearchEndpoint(workspaceId: string): string;
+export declare function knowledgeChatEndpoint(workspaceId: string): string;
+/** Per-workspace AgentStudio host (same shape as {@link ragEndpoint}'s host). */
+export declare function agentStudioHost(workspaceId: string): string;
+/** GET protection overview — fixed to the last 24 hours, no request params. */
+export declare function securityOverviewEndpoint(host: string): string;
+/** GET alert list (agent_logs); filters / pagination go in the query string. */
+export declare function securityAgentLogsEndpoint(host: string): string;
+export declare function mcpWebSearchPath(): string;
+export declare function ragEndpoint(workspaceId: string, path: string): string;
 /** AgentStudio workspace files; template uploads send source=sandbox_template. */
-declare function agentStudioFilesPath(): string;
+export declare function agentStudioFilesPath(): string;
 /** Default Sandbox origin when no shared base URL was configured (cn-beijing only). */
-declare function sandboxBaseUrl(workspaceId: string): string;
+export declare function sandboxBaseUrl(workspaceId: string): string;
 /** Sandbox service prefix, appended to the selected origin just like AgentStudio SDK paths. */
-declare function sandboxApiPath(path: string): string;
+export declare function sandboxApiPath(path: string): string;
 /** Build the default workspace-scoped absolute Sandbox control-plane URL. */
-declare function sandboxEndpoint(workspaceId: string, path: string): string;
-declare const SANDBOX_PATHS: {
+export declare function sandboxEndpoint(workspaceId: string, path: string): string;
+export declare const SANDBOX_PATHS: {
   readonly sandboxes: "/sandboxes";
   readonly sandboxList: "/v2/sandboxes";
   readonly templates: "/templates";
   readonly templateCreate: "/v3/templates";
   readonly templateList: "/v2/templates";
 };
-declare function sandboxInstancePath(sandboxId: string): string;
-declare function sandboxInstanceActionPath(sandboxId: string, action: "connect" | "pause" | "resume"): string;
-declare function sandboxTemplatePath(templateId: string): string;
-declare function sandboxTemplateBuildStatusPath(templateId: string, buildId: string): string;
-declare const RAG_PATHS: {
+export declare function sandboxInstancePath(sandboxId: string): string;
+export declare function sandboxInstanceActionPath(sandboxId: string, action: "connect" | "pause" | "resume"): string;
+export declare function sandboxTemplatePath(templateId: string): string;
+export declare function sandboxTemplateBuildStatusPath(templateId: string, buildId: string): string;
+export declare const RAG_PATHS: {
   readonly indexList: "/api/v1/indices/rag/index/list";
   readonly indexCreateV2: "/api/v1/indices/rag/index/create_v2";
   readonly indexUpdate: "/api/v1/indices/rag/index/update";
@@ -1968,18 +2001,18 @@ interface ImageApiRoute {
   promptExtendDefault?: boolean;
 }
 /** True when the model family can use sync multimodal for generate. */
-declare function isSyncMultimodalImageModel(model: string): boolean;
+export declare function isSyncMultimodalImageModel(model: string): boolean;
 /** wan2.5 / wan2.2 / wan2.1 / wanx text-to-image models use the legacy prompt API. */
-declare function isLegacyText2ImageModel(model: string): boolean;
+export declare function isLegacyText2ImageModel(model: string): boolean;
 /** wan2.5-i2i uses the legacy image2image prompt+images API. */
-declare function isLegacyImage2ImageModel(model: string): boolean;
+export declare function isLegacyImage2ImageModel(model: string): boolean;
 /** wanx*-imageedit uses function + base_image_url (not prompt+images). */
-declare function isWanxFunctionImageEditModel(model: string): boolean;
-declare function resolveImageSizeProfile(model: string): ImageSizeProfile;
+export declare function isWanxFunctionImageEditModel(model: string): boolean;
+export declare function resolveImageSizeProfile(model: string): ImageSizeProfile;
 /** Official / CLI defaults for prompt_extend when the flag is omitted. */
-declare function resolvePromptExtendDefault(model: string): boolean | undefined;
-declare function resolveImageGenerateApi(model: string): ImageApiRoute;
-declare function resolveImageEditApi(model: string): ImageApiRoute;
+export declare function resolvePromptExtendDefault(model: string): boolean | undefined;
+export declare function resolveImageGenerateApi(model: string): ImageApiRoute;
+export declare function resolveImageEditApi(model: string): ImageApiRoute;
 //#endregion
 //#region src/client/asr-routes.d.ts
 /**
@@ -2026,9 +2059,9 @@ interface AsrApiRoute {
  * Resolve which DashScope ASR API a model should use for file recognition.
  * Unknown models default to async-filetrans (preserves existing CLI behavior).
  */
-declare function resolveAsrApi(model: string): AsrApiRoute;
+export declare function resolveAsrApi(model: string): AsrApiRoute;
 /** Infer audio container hint for input-audio Flash `parameters.format`. */
-declare function inferAudioFormatHint(audioUrl: string): string;
+export declare function inferAudioFormatHint(audioUrl: string): string;
 interface BuildAsrFlashRequestOpts {
   model: string;
   audioUrl: string;
@@ -2042,29 +2075,29 @@ interface BuildAsrFlashRequestOpts {
   flashFamily: AsrFlashFamily;
 }
 /** Wrap plain text as a single user context message for ASR. */
-declare function buildAsrContextMessages(text: string): AsrContextMessage[];
+export declare function buildAsrContextMessages(text: string): AsrContextMessage[];
 /**
  * Build language fields for async ASR routes.
  * qwen3-asr-flash-filetrans* → `language`; other async models → `language_hints`.
  */
-declare function buildAsyncAsrLanguageFields(languageStyle: "language_hints" | "language", language?: string): {
+export declare function buildAsyncAsrLanguageFields(languageStyle: "language_hints" | "language", language?: string): {
   language_hints?: string[];
   language?: string;
 };
 /** Build a sync multimodal ASR request body for Flash models. */
-declare function buildAsrFlashRequest(opts: BuildAsrFlashRequestOpts): Record<string, unknown>;
+export declare function buildAsrFlashRequest(opts: BuildAsrFlashRequestOpts): Record<string, unknown>;
 /**
  * Extract recognition text from a sync Flash ASR response.
  * Qwen3 uses choices[].message.content; input-audio Flash uses output.text /
  * output.sentence.text / output.output.sentence.text.
  */
-declare function extractAsrFlashText(response: Record<string, unknown>, flashFamily: AsrFlashFamily): string;
+export declare function extractAsrFlashText(response: Record<string, unknown>, flashFamily: AsrFlashFamily): string;
 /**
  * Normalize async ASR task transcription items:
  * - classic models: `output.results[]`
  * - qwen3-asr-flash-filetrans*: `output.result.transcription_url`
  */
-declare function collectAsrTranscriptionItems(output: {
+export declare function collectAsrTranscriptionItems(output: {
   results?: Array<{
     file_url?: string;
     transcription_url?: string;
@@ -2084,13 +2117,51 @@ declare function collectAsrTranscriptionItems(output: {
 }>;
 //#endregion
 //#region src/client/headers.d.ts
-declare const CHANNEL = "bailian-cli";
+export declare const CHANNEL = "bailian-cli";
 /** Static source identifier advertised to the DashScope/Bailian OpenAPI gateway. */
-declare const OPEN_API_SOURCE = "BailianCLI";
+export declare const OPEN_API_SOURCE = "BailianCLI";
+/** Marketplace / service attribution header (HTTP names are case-insensitive). */
+export declare const DASHSCOPE_SERVICE_HEADER = "X-Dashscope-Service";
 type TrackingIdentity = Pick<Identity, "binName" | "version">;
-declare function sourceConfig(identity: TrackingIdentity): string;
+export declare function sourceConfig(identity: TrackingIdentity): string;
 /** Tracking headers for Bailian/DashScope API requests. */
-declare function trackingHeaders(identity: TrackingIdentity): Record<string, string>;
+export declare function trackingHeaders(identity: TrackingIdentity): Record<string, string>;
+//#endregion
+//#region src/client/security.d.ts
+/**
+ * Whether an origin is a public DashScope gateway. The security commands derive
+ * their per-workspace AgentStudio host by default, so a base URL that is just
+ * the DashScope gateway is the default and is ignored; any other origin
+ * (pre-release / private / mock) is treated as an explicit host override.
+ */
+export declare function isDashScopeGateway(origin: string): boolean;
+/**
+ * Parse an Agent Security Center response body and return the business payload.
+ *
+ * The backend serves these through the Zelda "DataV2" double-envelope — the same
+ * shape the console gateway returns (see console/models.ts unwrapResponse):
+ *
+ *   { code, successResponse, requestId,
+ *     data: { success, errorCode, errorMsg,
+ *             DataV2: { ret: ["SUCCESS::…"],
+ *                       data: { success, failed, data: <payload> } } } }
+ *
+ * The payload lives at `data.DataV2.data.data`. The legacy flat envelope
+ * `{ success, data, errorCode, errorMsg }` is still accepted so any endpoint
+ * that has not migrated keeps working. A failed or unrecognized shape throws
+ * with the raw body attached (surfaced by --output json) for diagnosis.
+ */
+export declare function parseSecurityBody<T>(raw: string, contentType?: string | null): T | null;
+/**
+ * GET a Security Center endpoint and unwrap its envelope.
+ *
+ * `url` is an absolute AgentStudio URL (see securityOverviewEndpoint /
+ * securityAgentLogsEndpoint, or a --base-url override); the Client uses it
+ * verbatim and injects the Bearer token. Genuine HTTP errors (non-2xx) surface
+ * through the Client transport; only HTTP 200 bodies reach parseSecurityBody.
+ * Returns null when the server reports success with no payload.
+ */
+export declare function securityGet<T>(client: Client, url: string): Promise<T | null>;
 //#endregion
 //#region src/client/instrumented-fetch.d.ts
 /**
@@ -2106,7 +2177,7 @@ type FetchImplementation = (input: string | URL | Request, init?: RequestInit) =
  * error mapping, so the caller's response semantics (status handling, SSE,
  * conflict detection) stay intact.
  */
-declare function createInstrumentedFetch(deps: HttpDeps): FetchImplementation;
+export declare function createInstrumentedFetch(deps: HttpDeps): FetchImplementation;
 //#endregion
 //#region src/client/bailian-control.d.ts
 /** Shared inputs for every BailianControl OpenAPI call (AK/SK passed explicitly). */
@@ -2129,16 +2200,16 @@ interface CreateUserReqDTO {
  * signed with Alibaba Cloud AK/SK. Mirrors {@link generateCLIAccessToken}: the
  * caller passes AK/SK explicitly, so this needs no stored credential.
  */
-declare function createBailianControlUser(opts: BailianControlAuth & {
+export declare function createBailianControlUser(opts: BailianControlAuth & {
   reqDTO: CreateUserReqDTO;
 }): Promise<OpenApiResponse>;
 /** List workspaces (used to resolve the agent id for permission changes). */
-declare function listBailianControlWorkspaces(opts: BailianControlAuth): Promise<OpenApiResponse>;
+export declare function listBailianControlWorkspaces(opts: BailianControlAuth): Promise<OpenApiResponse>;
 /**
  * Authorize a user's servicer permissions via `ResetPolicies4Agent`. The single
  * `data` param carries the console payload re-encoded as a JSON string.
  */
-declare function resetBailianControlPolicies4Agent(opts: BailianControlAuth & {
+export declare function resetBailianControlPolicies4Agent(opts: BailianControlAuth & {
   outerKey: string;
   agentId: number;
   policyIndexList?: number[];
@@ -2150,7 +2221,7 @@ interface ServerSentEvent {
   data: string;
   id?: string;
 }
-declare function parseSSE(response: Response): AsyncGenerator<ServerSentEvent>;
+export declare function parseSSE(response: Response): AsyncGenerator<ServerSentEvent>;
 //#endregion
 //#region src/console/gateway.d.ts
 type ConsoleSite = "domestic" | "international";
@@ -2158,7 +2229,7 @@ type ConsoleSite = "domestic" | "international";
  * Resolved console gateway settings (same defaults as {@link callConsoleGateway}).
  * 参数只需 settings 的 console 三元组;dry-run 展示分支直接传 settings。
  */
-declare function effectiveConsoleGatewayConfig(config: Pick<Settings, "consoleRegion" | "consoleSite" | "consoleSwitchAgent">): {
+export declare function effectiveConsoleGatewayConfig(config: Pick<Settings, "consoleRegion" | "consoleSite" | "consoleSwitchAgent">): {
   consoleRegion: string;
   consoleSite: ConsoleSite;
   consoleSwitchAgent?: number;
@@ -2174,7 +2245,7 @@ type ConsoleCall = (api: string, data: Record<string, unknown>) => Promise<unkno
  * Build an anonymous (token-less) gateway caller for public catalog APIs such
  * as `listFoundationModels` — no console login required.
  */
-declare function anonymousConsoleCall(config: Pick<Settings, "consoleRegion" | "consoleSite" | "consoleSwitchAgent" | "timeout">): ConsoleCall;
+export declare function anonymousConsoleCall(config: Pick<Settings, "consoleRegion" | "consoleSite" | "consoleSwitchAgent" | "timeout">): ConsoleCall;
 /**
  * Invoke a Bailian **console** OpenAPI via the CLI gateway (`/cli/api.json`).
  * 目标(region/site/switchAgent)与 token 均由调用方解析后传入:Client.console 传
@@ -2186,16 +2257,13 @@ interface ConsoleGatewayTarget {
   switchAgent?: number;
   token?: string;
 }
-declare function callConsoleGateway(target: ConsoleGatewayTarget, timeoutSec: number, {
-  api,
-  data
-}: ConsoleGatewayRequest, settings?: Pick<Settings, "verbose">): Promise<unknown>;
+export declare function callConsoleGateway(target: ConsoleGatewayTarget, timeoutSec: number, { api, data }: ConsoleGatewayRequest, settings?: Pick<Settings, "verbose">): Promise<unknown>;
 //#endregion
 //#region src/console/models.d.ts
-declare const MODEL_LIST_API = "zeldaHttp.dashscopeModel./zelda/api/v1/modelCenter/listFoundationModels";
-declare const PREDICT_CONFIG_API = "zeldaEasy.bmp.modelPredictRpcService.getPredictParamConfig";
+export declare const MODEL_LIST_API = "zeldaHttp.dashscopeModel./zelda/api/v1/modelCenter/listFoundationModels";
+export declare const PREDICT_CONFIG_API = "zeldaEasy.bmp.modelPredictRpcService.getPredictParamConfig";
 /** Unwrap the DataV2 double-envelope that console gateway returns. */
-declare function unwrapResponse(result: Record<string, unknown>): Record<string, unknown>;
+export declare function unwrapResponse(result: Record<string, unknown>): Record<string, unknown>;
 interface ModelListParams {
   pageNo?: number;
   pageSize?: number;
@@ -2208,15 +2276,15 @@ interface ModelListResult {
   models: Record<string, unknown>[];
 }
 /** Page the console model-list API. `call` makes the gateway request (e.g. `client.console`). */
-declare function fetchModelList(call: ConsoleCall, params?: ModelListParams): Promise<ModelListResult>;
+export declare function fetchModelList(call: ConsoleCall, params?: ModelListParams): Promise<ModelListResult>;
 /** Page through every model-list page and return all raw model items. */
-declare function fetchModelListAll(call: ConsoleCall, params?: Omit<ModelListParams, "pageNo">): Promise<Record<string, unknown>[]>;
+export declare function fetchModelListAll(call: ConsoleCall, params?: Omit<ModelListParams, "pageNo">): Promise<Record<string, unknown>[]>;
 /**
  * Look up a single model by exact id. The server's `name` filter is a
  * substring match, so an exact `model` equality check narrows the result
  * (e.g. avoids `qwen3-8b` matching `qwen3-8b-v2`).
  */
-declare function findModelByName(call: ConsoleCall, modelName: string): Promise<Record<string, unknown> | null>;
+export declare function findModelByName(call: ConsoleCall, modelName: string): Promise<Record<string, unknown> | null>;
 interface ModelPriceInfo {
   type?: string;
   priceUnit?: string;
@@ -2290,16 +2358,16 @@ interface ModelGroupResult {
   groups: ModelGroup[];
 }
 /** Fetch model families with optional filters and query flags. */
-declare function fetchModelGroups(call: ConsoleCall, params?: ModelGroupParams): Promise<ModelGroupResult>;
+export declare function fetchModelGroups(call: ConsoleCall, params?: ModelGroupParams): Promise<ModelGroupResult>;
 /** Flatten family groups into their individual model items. */
-declare function flattenModelGroups(groups: ModelGroup[]): ModelGroupItem[];
+export declare function flattenModelGroups(groups: ModelGroup[]): ModelGroupItem[];
 /**
  * Fetch every model item in the catalog. The first page yields `total`; the
  * remaining pages are fetched concurrently because ranking needs the whole set.
  */
-declare function fetchModelGroupsAll(call: ConsoleCall, params?: Omit<ModelGroupParams, "pageNo">): Promise<ModelGroupItem[]>;
+export declare function fetchModelGroupsAll(call: ConsoleCall, params?: Omit<ModelGroupParams, "pageNo">): Promise<ModelGroupItem[]>;
 /** Fetch a single model family with all detail flags enabled. */
-declare function fetchModelDetail(call: ConsoleCall, modelKey: string): Promise<ModelGroup | null>;
+export declare function fetchModelDetail(call: ConsoleCall, modelKey: string): Promise<ModelGroup | null>;
 interface PredictConfigEntry {
   name: string;
   key: string;
@@ -2308,13 +2376,13 @@ interface PredictConfigEntry {
   range?: unknown;
 }
 /** Fetch the input parameter schema for a specific model. */
-declare function fetchPredictConfig(call: ConsoleCall, modelId: string): Promise<PredictConfigEntry[] | null>;
+export declare function fetchPredictConfig(call: ConsoleCall, modelId: string): Promise<PredictConfigEntry[] | null>;
 //#endregion
 //#region src/config/paths.d.ts
-declare function getConfigDir(): string;
-declare function getConfigPath(): string;
-declare function getCredentialsPath(): string;
-declare function ensureConfigDir(): Promise<void>;
+export declare function getConfigDir(): string;
+export declare function getConfigPath(): string;
+export declare function getCredentialsPath(): string;
+export declare function ensureConfigDir(): Promise<void>;
 //#endregion
 //#region src/config/profile-presets.d.ts
 interface ModelProfilePreset {
@@ -2330,9 +2398,9 @@ interface ModelProfilePreset {
 }
 type ApiKeyLoginKind = "token-plan" | "ordinary" | "unknown";
 /** Defaults materialized when logging into a well-known model profile. */
-declare function getModelProfilePreset(configName?: string): ModelProfilePreset | undefined;
+export declare function getModelProfilePreset(configName?: string): ModelProfilePreset | undefined;
 /** Classify only the key formats that affect automatic Profile routing. */
-declare function getApiKeyLoginKind(apiKey: string): ApiKeyLoginKind;
+export declare function getApiKeyLoginKind(apiKey: string): ApiKeyLoginKind;
 //#endregion
 //#region src/config/model-base-url.d.ts
 /**
@@ -2340,19 +2408,19 @@ declare function getApiKeyLoginKind(apiKey: string): ApiKeyLoginKind;
  * CLI endpoints append their own API paths, so user-provided paths, query
  * parameters, and fragments must not remain in the stored or resolved base URL.
  */
-declare function normalizeModelBaseUrl(input: string): string;
+export declare function normalizeModelBaseUrl(input: string): string;
 //#endregion
 //#region src/output/formatter.d.ts
 type OutputFormat = "text" | "json";
-declare function detectOutputFormat(flagValue?: string): OutputFormat;
-declare function formatOutput(data: unknown, format: OutputFormat): string;
+export declare function detectOutputFormat(flagValue?: string): OutputFormat;
+export declare function formatOutput(data: unknown, format: OutputFormat): string;
 //#endregion
 //#region src/output/json.d.ts
-declare function formatJson(data: unknown): string;
-declare function formatErrorJson(code: number, message: string, hint?: string): string;
+export declare function formatJson(data: unknown): string;
+export declare function formatErrorJson(code: number, message: string, hint?: string): string;
 //#endregion
 //#region src/output/text.d.ts
-declare function formatText(data: unknown): string;
+export declare function formatText(data: unknown): string;
 //#endregion
 //#region src/files/upload.d.ts
 interface UploadOptions {
@@ -2363,23 +2431,23 @@ interface UploadOptions {
   signal?: AbortSignal;
 }
 /** Encode a local image as a Data URI. */
-declare function imageFileToDataUri(filePath: string): string;
+export declare function imageFileToDataUri(filePath: string): string;
 /** Keep dry-run output readable and avoid echoing the complete inline image. */
-declare function redactDataUri(input: string): string;
+export declare function redactDataUri(input: string): string;
 /**
  * Upload a local file to DashScope temporary storage and return the oss:// URL.
  * The URL is valid for 48 hours.
  */
-declare function uploadFile(opts: UploadOptions): Promise<string>;
+export declare function uploadFile(opts: UploadOptions): Promise<string>;
 /**
  * Check if a string looks like a local file path (not a URL).
  */
-declare function isLocalFile(input: string): boolean;
+export declare function isLocalFile(input: string): boolean;
 /**
  * Resolve a file argument: if it's a local path, upload it and return the oss:// URL.
  * If it's already a URL, return as-is.
  */
-declare function resolveFileUrl(input: string, apiKey: string, model: string, opts: {
+export declare function resolveFileUrl(input: string, apiKey: string, model: string, opts: {
   identity: TrackingIdentity;
   signal?: AbortSignal;
 }): Promise<string>;
@@ -2394,7 +2462,7 @@ declare function resolveFileUrl(input: string, apiKey: string, model: string, op
  * purposes can be plugged in without schema changes.
  */
 /** A single uploaded dataset file as returned by the platform. */
-interface DatasetFile {
+export interface DatasetFile {
   /** File ID — the only stable handle for downstream consumers. */
   file_id: string;
   /** Original filename uploaded by the user. */
@@ -2413,7 +2481,7 @@ interface DatasetFile {
   gmt_create?: string;
 }
 /** GET /api/v1/files response. */
-interface DatasetListResponse {
+export interface DatasetListResponse {
   request_id?: string;
   data?: {
     files?: DatasetFile[];
@@ -2423,7 +2491,7 @@ interface DatasetListResponse {
   };
 }
 /** GET /api/v1/files/{file_id} response. */
-interface DatasetGetResponse {
+export interface DatasetGetResponse {
   request_id?: string;
   data?: DatasetFile;
 }
@@ -2435,7 +2503,7 @@ interface DatasetGetResponse {
  * it landed. On business-level failure (HTTP 200 + `data.failed_uploads`)
  * `id` is absent and `data.failed_uploads[]` carries the platform's reason.
  */
-interface DatasetUploadResponse {
+export interface DatasetUploadResponse {
   request_id?: string;
   /** File ID — the handle returned to callers (e.g. `file-ft-…`). */
   id?: string;
@@ -2466,7 +2534,7 @@ interface DatasetUploadResponse {
   };
 }
 /** DELETE /api/v1/files/{file_id} response. */
-interface DatasetDeleteResponse {
+export interface DatasetDeleteResponse {
   request_id?: string;
   data?: {
     deleted?: boolean;
@@ -2475,7 +2543,7 @@ interface DatasetDeleteResponse {
 }
 //#endregion
 //#region src/dataset/api.d.ts
-interface DatasetUploadParams {
+export interface DatasetUploadParams {
   filePath: string;
   /**
    * Purpose tag forwarded to the platform. Defaults to "fine-tune" because
@@ -2496,21 +2564,21 @@ interface DatasetUploadParams {
  * `Response`'s helper to avoid the buffer doubling. Fall back to readFileSync
  * for small files where streaming overhead isn't worth it.
  */
-declare function uploadDataset(client: Client, params: DatasetUploadParams): Promise<DatasetFile & {
+export declare function uploadDataset(client: Client, params: DatasetUploadParams): Promise<DatasetFile & {
   request_id?: string;
 }>;
-interface DatasetListParams {
+export interface DatasetListParams {
   pageNo?: number;
   pageSize?: number;
   purpose?: string;
   signal?: AbortSignal;
 }
 /** GET /api/v1/files */
-declare function listDatasets(client: Client, params?: DatasetListParams): Promise<DatasetListResponse>;
+export declare function listDatasets(client: Client, params?: DatasetListParams): Promise<DatasetListResponse>;
 /** GET /api/v1/files/{file_id} */
-declare function getDataset(client: Client, fileId: string, signal?: AbortSignal): Promise<DatasetGetResponse>;
+export declare function getDataset(client: Client, fileId: string, signal?: AbortSignal): Promise<DatasetGetResponse>;
 /** DELETE /api/v1/files/{file_id} */
-declare function deleteDataset(client: Client, fileId: string, signal?: AbortSignal): Promise<DatasetDeleteResponse>;
+export declare function deleteDataset(client: Client, fileId: string, signal?: AbortSignal): Promise<DatasetDeleteResponse>;
 //#endregion
 //#region src/dataset/validate/types.d.ts
 /**
@@ -2664,20 +2732,20 @@ interface TrainingProfile {
  * Throws USAGE if the file extension is not `.jsonl` or `.zip`, or if the
  * content cannot be parsed.
  */
-declare function detectModality(filePath: string): Promise<DataModality>;
+export declare function detectModality(filePath: string): Promise<DataModality>;
 //#endregion
 //#region src/dataset/validate/registry.d.ts
 /** Lookup the validator that handles a given file extension. */
-declare function pickValidator(filePath: string): ValidatorSpec;
+export declare function pickValidator(filePath: string): ValidatorSpec;
 /** Allow tests / future plugins to inject extra validators. Idempotent. */
-declare function registerValidator(spec: ValidatorSpec): void;
+export declare function registerValidator(spec: ValidatorSpec): void;
 /**
  * Top-level entry point. Applies common pre-flight (existence/size/extension)
  * then defers to the format-specific validator.
  */
-declare function validateDataset(filePath: string, opts?: ValidateOpts): Promise<ValidationResult>;
+export declare function validateDataset(filePath: string, opts?: ValidateOpts): Promise<ValidationResult>;
 /** Read-only view of the active registry — handy for tests / `--help`. */
-declare function listSupportedFormats(): {
+export declare function listSupportedFormats(): {
   format: string;
   extensions: string[];
 }[];
@@ -2688,25 +2756,25 @@ declare function listSupportedFormats(): {
  * `bl dataset upload` enforces this client-side so users learn early.
  * CPT uses 300MB (see MAX_CPT_BYTES); API general upload is also 300MB.
  */
-declare const MAX_DATASET_BYTES: number;
+export declare const MAX_DATASET_BYTES: number;
 /**
  * CPT text dataset size cap — 300 MB per the platform docs.
  * CPT requires at least 50M tokens; larger files are expected.
  */
-declare const MAX_CPT_BYTES: number;
+export declare const MAX_CPT_BYTES: number;
 /**
  * Image / video ZIP size cap — 2 GB per the platform docs. Used by
  * `bl dataset upload` for media schemas and by the `sft-lora` training
  * profile for image / video validation.
  */
-declare const MAX_MEDIA_ZIP_BYTES: number;
+export declare const MAX_MEDIA_ZIP_BYTES: number;
 /**
  * Parse a `--schema` CLI value into a `DatasetSchema` (or `undefined` for
  * auto-detect). Single source of truth for the schema vocabulary so `dataset
  * validate`, `dataset upload`, and any future caller agree on accepted values
  * and error wording. Throws USAGE for anything unrecognized.
  */
-declare function parseDatasetSchemaFlag(value: string | undefined): DatasetSchema | undefined;
+export declare function parseDatasetSchemaFlag(value: string | undefined): DatasetSchema | undefined;
 //#endregion
 //#region src/dataset/validate/format.d.ts
 /**
@@ -2716,7 +2784,7 @@ declare function parseDatasetSchemaFlag(value: string | undefined): DatasetSchem
  * (`dataset validate`, `dataset upload`, `finetune create`) so the error
  * presentation stays consistent regardless of which command ran the validator.
  */
-declare function formatIssue(issue: ValidationIssue): string;
+export declare function formatIssue(issue: ValidationIssue): string;
 //#endregion
 //#region src/finetune/types.d.ts
 /**
@@ -2726,7 +2794,7 @@ declare function formatIssue(issue: ValidationIssue): string;
  * preserved verbatim — callers decide how to surface fields).
  */
 /** Hyper-parameters honored by text/thinking/vision SFT models. */
-interface FineTuneHyperParameters {
+export interface FineTuneHyperParameters {
   /** Number of training epochs. */
   n_epochs?: number;
   batch_size?: number;
@@ -2740,7 +2808,7 @@ interface FineTuneHyperParameters {
   [k: string]: unknown;
 }
 /** POST /api/v1/fine-tunes request body. */
-interface CreateFineTuneRequest {
+export interface CreateFineTuneRequest {
   /** Base model ID, or a previously fine-tuned model ID for continued training. */
   model: string;
   training_file_ids: string[];
@@ -2764,11 +2832,11 @@ interface CreateFineTuneRequest {
   finetuned_output_suffix?: string;
 }
 /** GET /api/v1/fine-tunes/{id}/logs response. */
-interface FineTuneLogEntry {
+export interface FineTuneLogEntry {
   /** Server-defined log line — schema varies; preserve as-is. */
   [k: string]: unknown;
 }
-interface GetFineTuneLogsResponse {
+export interface GetFineTuneLogsResponse {
   request_id?: string;
   output?: {
     logs?: Array<FineTuneLogEntry | string>;
@@ -2786,7 +2854,7 @@ interface GetFineTuneLogsResponse {
   };
 }
 /** A single checkpoint as returned by the platform. */
-interface FineTuneCheckpoint {
+export interface FineTuneCheckpoint {
   checkpoint?: string;
   checkpoint_id?: string;
   full_name?: string;
@@ -2810,7 +2878,7 @@ interface FineTuneCheckpoint {
  * `{ checkpoints: [...] }`). The wrapped form is preserved as a fallback for
  * older deployments.
  */
-interface ListCheckpointsResponse {
+export interface ListCheckpointsResponse {
   request_id?: string;
   output?: FineTuneCheckpoint[] | {
     checkpoints?: FineTuneCheckpoint[];
@@ -2824,10 +2892,11 @@ interface ListCheckpointsResponse {
   };
 }
 /** GET /api/v1/fine-tunes/{job_id}/export/{checkpoint}?model_name= response. */
-interface ExportCheckpointResponse {
+export interface ExportCheckpointResponse {
   request_id?: string;
   output?: {
-    /** Resulting deployable model name. */model_name?: string;
+    /** Resulting deployable model name. */
+    model_name?: string;
     [k: string]: unknown;
   };
   data?: {
@@ -2836,13 +2905,13 @@ interface ExportCheckpointResponse {
   };
 }
 /** POST /api/v1/fine-tunes/{id}/cancel response. */
-interface CancelFineTuneResponse {
+export interface CancelFineTuneResponse {
   request_id?: string;
   output?: FineTuneJob;
   data?: FineTuneJob;
 }
 /** DELETE /api/v1/fine-tunes/{id} response. */
-interface DeleteFineTuneResponse {
+export interface DeleteFineTuneResponse {
   request_id?: string;
   output?: {
     deleted?: boolean;
@@ -2856,7 +2925,7 @@ interface DeleteFineTuneResponse {
   };
 }
 /** A single fine-tune job record as returned by the platform. */
-interface FineTuneJob {
+export interface FineTuneJob {
   job_id?: string;
   job_name?: string;
   model?: string;
@@ -2880,7 +2949,7 @@ interface FineTuneJob {
   [k: string]: unknown;
 }
 /** POST /api/v1/fine-tunes response. */
-interface CreateFineTuneResponse {
+export interface CreateFineTuneResponse {
   request_id?: string;
   /** Modern DashScope shape. */
   output?: FineTuneJob;
@@ -2888,7 +2957,7 @@ interface CreateFineTuneResponse {
   data?: FineTuneJob;
 }
 /** GET /api/v1/fine-tunes response. */
-interface ListFineTunesResponse {
+export interface ListFineTunesResponse {
   request_id?: string;
   output?: {
     jobs?: FineTuneJob[];
@@ -2904,7 +2973,7 @@ interface ListFineTunesResponse {
   };
 }
 /** GET /api/v1/fine-tunes/{job_id} response. */
-interface GetFineTuneResponse {
+export interface GetFineTuneResponse {
   request_id?: string;
   output?: FineTuneJob;
   data?: FineTuneJob;
@@ -2912,8 +2981,8 @@ interface GetFineTuneResponse {
 //#endregion
 //#region src/finetune/api.d.ts
 /** POST /api/v1/fine-tunes */
-declare function createFineTune(client: Client, body: CreateFineTuneRequest, signal?: AbortSignal): Promise<CreateFineTuneResponse>;
-interface ListFineTunesParams {
+export declare function createFineTune(client: Client, body: CreateFineTuneRequest, signal?: AbortSignal): Promise<CreateFineTuneResponse>;
+export interface ListFineTunesParams {
   pageNo?: number;
   pageSize?: number;
   status?: string;
@@ -2922,22 +2991,22 @@ interface ListFineTunesParams {
   signal?: AbortSignal;
 }
 /** GET /api/v1/fine-tunes */
-declare function listFineTunes(client: Client, params?: ListFineTunesParams): Promise<ListFineTunesResponse>;
+export declare function listFineTunes(client: Client, params?: ListFineTunesParams): Promise<ListFineTunesResponse>;
 /** GET /api/v1/fine-tunes/{job_id} */
-declare function getFineTune(client: Client, jobId: string, signal?: AbortSignal): Promise<GetFineTuneResponse>;
+export declare function getFineTune(client: Client, jobId: string, signal?: AbortSignal): Promise<GetFineTuneResponse>;
 /** POST /api/v1/fine-tunes/{job_id}/cancel */
-declare function cancelFineTune(client: Client, jobId: string, signal?: AbortSignal): Promise<CancelFineTuneResponse>;
+export declare function cancelFineTune(client: Client, jobId: string, signal?: AbortSignal): Promise<CancelFineTuneResponse>;
 /** DELETE /api/v1/fine-tunes/{job_id} */
-declare function deleteFineTune(client: Client, jobId: string, signal?: AbortSignal): Promise<DeleteFineTuneResponse>;
-interface GetFineTuneLogsParams {
+export declare function deleteFineTune(client: Client, jobId: string, signal?: AbortSignal): Promise<DeleteFineTuneResponse>;
+export interface GetFineTuneLogsParams {
   pageNo?: number;
   pageSize?: number;
   signal?: AbortSignal;
 }
 /** GET /api/v1/fine-tunes/{job_id}/logs */
-declare function getFineTuneLogs(client: Client, jobId: string, params?: GetFineTuneLogsParams): Promise<GetFineTuneLogsResponse>;
+export declare function getFineTuneLogs(client: Client, jobId: string, params?: GetFineTuneLogsParams): Promise<GetFineTuneLogsResponse>;
 /** GET /api/v1/fine-tunes/{job_id}/checkpoints */
-declare function listCheckpoints(client: Client, jobId: string, signal?: AbortSignal): Promise<ListCheckpointsResponse>;
+export declare function listCheckpoints(client: Client, jobId: string, signal?: AbortSignal): Promise<ListCheckpointsResponse>;
 /**
  * GET /api/v1/fine-tunes/{job_id}/export/{checkpoint}?model_name={name}
  *
@@ -2945,7 +3014,7 @@ declare function listCheckpoints(client: Client, jobId: string, signal?: AbortSi
  * `deploy <modality> create` can target it. The platform may auto-export the best
  * checkpoint on SUCCEEDED, but explicit export is the canonical path.
  */
-declare function exportCheckpoint(client: Client, jobId: string, checkpoint: string, modelName: string, signal?: AbortSignal): Promise<ExportCheckpointResponse>;
+export declare function exportCheckpoint(client: Client, jobId: string, checkpoint: string, modelName: string, signal?: AbortSignal): Promise<ExportCheckpointResponse>;
 //#endregion
 //#region src/finetune/capability.d.ts
 /**
@@ -2961,7 +3030,7 @@ declare function exportCheckpoint(client: Client, jobId: string, checkpoint: str
  * the interface boundary (request body), so the rest of the CLI never sees the
  * raw server strings (`efficient_sft`, `dpo_full`, ...).
  */
-declare const TRAINING_TYPE_MAP: {
+export declare const TRAINING_TYPE_MAP: {
   readonly sft: {
     readonly server: "sft";
     readonly method: "sft";
@@ -2988,11 +3057,11 @@ declare const TRAINING_TYPE_MAP: {
     readonly variant: "full";
   };
 };
-type TrainingTypeCli = keyof typeof TRAINING_TYPE_MAP;
+export type TrainingTypeCli = keyof typeof TRAINING_TYPE_MAP;
 /** All accepted CLI training-type values (for whitelisting / help text). */
-declare const TRAINING_TYPES_CLI: readonly TrainingTypeCli[];
+export declare const TRAINING_TYPES_CLI: readonly TrainingTypeCli[];
 /** Default training type when `--training-type` is omitted. */
-declare const DEFAULT_TRAINING_TYPE: TrainingTypeCli;
+export declare const DEFAULT_TRAINING_TYPE: TrainingTypeCli;
 /** Subset of `supports` relevant to training capability. */
 interface ModelSupports {
   sft?: boolean;
@@ -3004,16 +3073,16 @@ interface ModelSupports {
  * A model record's training-capability fields. The full listFoundationModels
  * item carries many more fields; only these are consulted here.
  */
-interface ModelCapability {
+export interface ModelCapability {
   model?: string;
   supports?: ModelSupports;
   trainingTypes?: Record<string, string[]>;
   [key: string]: unknown;
 }
 /** True when `value` is one of the accepted CLI training types. */
-declare function isTrainingTypeCli(value: string): value is TrainingTypeCli;
+export declare function isTrainingTypeCli(value: string): value is TrainingTypeCli;
 /** The (method, variant) pair a CLI training type resolves to. */
-declare function trainingTypeMethodVariant(value: TrainingTypeCli): {
+export declare function trainingTypeMethodVariant(value: TrainingTypeCli): {
   method: string;
   variant: string;
 };
@@ -3025,13 +3094,13 @@ declare function trainingTypeMethodVariant(value: TrainingTypeCli): {
  *   2. `trainingTypes.<method>` includes the corresponding variant
  *      (`full` for the bare name, `lora` for the `-lora` suffix).
  */
-declare function modelSupportsTrainingType(model: ModelCapability | undefined | null, value: TrainingTypeCli): boolean;
+export declare function modelSupportsTrainingType(model: ModelCapability | undefined | null, value: TrainingTypeCli): boolean;
 /**
  * Every CLI training type a model supports, in canonical order
  * (sft, sft-lora, dpo, dpo-lora, cpt). Empty when the model carries no
  * capability metadata or supports none.
  */
-declare function listSupportedTrainingTypes(model: ModelCapability | undefined | null): TrainingTypeCli[];
+export declare function listSupportedTrainingTypes(model: ModelCapability | undefined | null): TrainingTypeCli[];
 /**
  * Fetch a single model's foundation metadata by name (console gateway
  * `listFoundationModels` with a `name` filter). No console login required —
@@ -3041,12 +3110,12 @@ declare function listSupportedTrainingTypes(model: ModelCapability | undefined |
  * server's `name` filter is a substring match, so we additionally require an
  * exact `model` equality to avoid e.g. `qwen3-8b` matching `qwen3-8b-v2`).
  */
-declare function fetchModelCapability(settings: Settings, modelName: string): Promise<ModelCapability | null>;
+export declare function fetchModelCapability(settings: Settings, modelName: string): Promise<ModelCapability | null>;
 //#endregion
 //#region src/finetune/preflight.d.ts
 /** Stable issue code for "too few training samples for the batch size". */
-declare const INSUFFICIENT_SAMPLES_CODE = "INSUFFICIENT_SAMPLES";
-interface BatchSizeGateInput {
+export declare const INSUFFICIENT_SAMPLES_CODE = "INSUFFICIENT_SAMPLES";
+export interface BatchSizeGateInput {
   /**
    * Total training-sample count across all `--datasets` files. Sourced from
    * `validateDataset`'s `stats.totalRecords` (summed per file). The gate only
@@ -3062,7 +3131,7 @@ interface BatchSizeGateInput {
    */
   batchSize: number;
 }
-interface BatchSizeGateResult {
+export interface BatchSizeGateResult {
   ok: boolean;
   /** Present when `!ok`, in the same shape `validateDataset` issues use. */
   issue?: ValidationIssue;
@@ -3083,25 +3152,25 @@ interface BatchSizeGateResult {
  * may still fail on the platform; that's an acceptable false negative for a
  * pre-check, and the hint nudges users to leave margin for the split.
  */
-declare function preflightBatchSizeGate(input: BatchSizeGateInput): BatchSizeGateResult;
+export declare function preflightBatchSizeGate(input: BatchSizeGateInput): BatchSizeGateResult;
 //#endregion
 //#region src/finetune/profiles/registry.d.ts
 /** Look up a profile by its CLI training-type name. Throws USAGE if unknown. */
-declare function getProfile(clientTrainingType: string): TrainingProfile;
+export declare function getProfile(clientTrainingType: string): TrainingProfile;
 /** All registered CLI training-type names (for help text / whitelisting). */
-declare function listTrainingTypes(): string[];
+export declare function listTrainingTypes(): string[];
 //#endregion
 //#region src/finetune/price.d.ts
-declare const TRAINING_MODEL_PRICE_API = "zeldaEasy.broadscope-platform.modelCenter.getModelPrice";
-declare const CALC_DATASETS_TOKENS_API = "zeldaEasy.broadscope-platform.modelInstance.calculateDatasetsTotalTokens";
-declare const ESTIMATE_FINETUNE_TOKENS_API = "zeldaEasy.broadscope-platform.modelInstance.estimateFinetuneTokens";
-interface TrainingModelPrice {
+export declare const TRAINING_MODEL_PRICE_API = "zeldaEasy.broadscope-platform.modelCenter.getModelPrice";
+export declare const CALC_DATASETS_TOKENS_API = "zeldaEasy.broadscope-platform.modelInstance.calculateDatasetsTotalTokens";
+export declare const ESTIMATE_FINETUNE_TOKENS_API = "zeldaEasy.broadscope-platform.modelInstance.estimateFinetuneTokens";
+export interface TrainingModelPrice {
   price?: string;
   priceUnit?: string;
   modelId?: string;
   [key: string]: unknown;
 }
-interface TokenEstimate {
+export interface TokenEstimate {
   estimatedDatasetConsumedTokensMinPerEpoch?: number;
   estimatedDatasetConsumedTokensMaxPerEpoch?: number;
   estimatedMixedConsumedTokensMinPerEpoch?: number;
@@ -3112,12 +3181,12 @@ interface TokenEstimate {
  * Training unit price for a model. `price` is denominated in `priceUnit`
  * (typically "千Token" — yuan per 1000 tokens).
  */
-declare function fetchTrainingModelPrice(client: Client, modelId: string): Promise<TrainingModelPrice>;
+export declare function fetchTrainingModelPrice(client: Client, modelId: string): Promise<TrainingModelPrice>;
 /**
  * Estimate training tokens for SFT / DPO jobs.
  * Returns a per-epoch min/max range; multiply by `n_epochs` for the total.
  */
-declare function estimateSftDpoTokens(client: Client, datasetIds: string[], hyperParams: {
+export declare function estimateSftDpoTokens(client: Client, datasetIds: string[], hyperParams: {
   nEpochs: number;
   batchSize: number;
   maxLength: number;
@@ -3131,7 +3200,7 @@ declare function estimateSftDpoTokens(client: Client, datasetIds: string[], hype
  * `n_epochs` / `max_length` materially affect the estimate; the remaining
  * hyper-parameters are fixed defaults.
  */
-declare function estimateCptTokens(client: Client, model: string, datasetIdsCsv: string, nEpochs: number): Promise<TokenEstimate>;
+export declare function estimateCptTokens(client: Client, model: string, datasetIdsCsv: string, nEpochs: number): Promise<TokenEstimate>;
 //#endregion
 //#region src/deploy/types.d.ts
 /**
@@ -3141,7 +3210,7 @@ declare function estimateCptTokens(client: Client, model: string, datasetIdsCsv:
  * preserved verbatim — callers decide how to surface fields).
  */
 /** A single deployment record as returned by the platform. */
-interface Deployment {
+export interface Deployment {
   /** Unique deployed-model identifier — used as the `model` parameter when invoking the deployed model. */
   deployed_model?: string;
   /** Human-friendly display name set at creation time. */
@@ -3179,7 +3248,7 @@ interface Deployment {
   [k: string]: unknown;
 }
 /** A single deployable model record (GET /deployments/models). */
-interface DeployableModel {
+export interface DeployableModel {
   model_name?: string;
   base_model?: string;
   /** custom | public | base | … */
@@ -3208,7 +3277,7 @@ interface DeployableModel {
   [k: string]: unknown;
 }
 /** A single deployment template (only used by `plan=mu` base models). */
-interface DeployableTemplate {
+export interface DeployableTemplate {
   template_id?: string;
   template_name?: string;
   template_desc?: string;
@@ -3242,7 +3311,7 @@ interface DeployableTemplate {
   [k: string]: unknown;
 }
 /** POST /api/v1/deployments request body. */
-interface CreateDeploymentRequest {
+export interface CreateDeploymentRequest {
   /** Required. The catalog or fine-tuned model identifier. */
   model_name: string;
   /** Required. Display name shown in the console. */
@@ -3276,13 +3345,13 @@ interface CreateDeploymentRequest {
  *   - use_input_prompt=true: honor the caller's prompt.
  * `lora_prompt_default` is the default trigger-word phrase appended for the LoRA.
  */
-interface AigcConfig {
+export interface AigcConfig {
   use_input_prompt?: boolean;
   prompt?: string;
   lora_prompt_default?: string;
 }
 /** PTU throughput limits — only used when `plan === "ptu"`. */
-interface PtuCapacity {
+export interface PtuCapacity {
   /** Max input tokens per minute (all models). */
   input_tpm?: number;
   /** Max output tokens per minute (all models). */
@@ -3291,13 +3360,13 @@ interface PtuCapacity {
   thinking_output_tpm?: number;
 }
 /** POST /api/v1/deployments response. */
-interface CreateDeploymentResponse {
+export interface CreateDeploymentResponse {
   request_id?: string;
   output?: Deployment;
   data?: Deployment;
 }
 /** GET /api/v1/deployments response. */
-interface ListDeploymentsResponse {
+export interface ListDeploymentsResponse {
   request_id?: string;
   output?: {
     deployments?: Deployment[];
@@ -3315,13 +3384,13 @@ interface ListDeploymentsResponse {
   };
 }
 /** GET /api/v1/deployments/{deployed_model} response. */
-interface GetDeploymentResponse {
+export interface GetDeploymentResponse {
   request_id?: string;
   output?: Deployment;
   data?: Deployment;
 }
 /** DELETE /api/v1/deployments/{deployed_model} response. */
-interface DeleteDeploymentResponse {
+export interface DeleteDeploymentResponse {
   request_id?: string;
   output?: {
     deleted?: boolean;
@@ -3335,7 +3404,7 @@ interface DeleteDeploymentResponse {
   };
 }
 /** GET /api/v1/deployments/models response. */
-interface ListDeployableModelsResponse {
+export interface ListDeployableModelsResponse {
   request_id?: string;
   output?: {
     models?: DeployableModel[];
@@ -3353,7 +3422,7 @@ interface ListDeployableModelsResponse {
   };
 }
 /** PUT /api/v1/deployments/{deployed_model}/scale request body. */
-interface ScaleDeploymentRequest {
+export interface ScaleDeploymentRequest {
   /** New capacity in plan units. Server-side constraint: integer multiple of `base_capacity`, < 1000. */
   capacity?: number;
   /** PTU-only token-rate adjustments. */
@@ -3362,7 +3431,7 @@ interface ScaleDeploymentRequest {
   [k: string]: unknown;
 }
 /** PUT /api/v1/deployments/{deployed_model}/scale response. */
-interface ScaleDeploymentResponse {
+export interface ScaleDeploymentResponse {
   request_id?: string;
   output?: Deployment;
   data?: Deployment;
@@ -3374,13 +3443,13 @@ interface ScaleDeploymentResponse {
  *   - rpm_limit: requests per minute
  *   - tpm_limit: tokens per minute
  */
-interface UpdateDeploymentRequest {
+export interface UpdateDeploymentRequest {
   rpm_limit?: number;
   tpm_limit?: number;
   [k: string]: unknown;
 }
 /** PUT /api/v1/deployments/{deployed_model} response. */
-interface UpdateDeploymentResponse {
+export interface UpdateDeploymentResponse {
   request_id?: string;
   output?: Deployment;
   data?: Deployment;
@@ -3388,20 +3457,20 @@ interface UpdateDeploymentResponse {
 //#endregion
 //#region src/deploy/api.d.ts
 /** POST /api/v1/deployments */
-declare function createDeployment(client: Client, body: CreateDeploymentRequest, signal?: AbortSignal): Promise<CreateDeploymentResponse>;
-interface ListDeploymentsParams {
+export declare function createDeployment(client: Client, body: CreateDeploymentRequest, signal?: AbortSignal): Promise<CreateDeploymentResponse>;
+export interface ListDeploymentsParams {
   pageNo?: number;
   pageSize?: number;
   status?: string;
   signal?: AbortSignal;
 }
 /** GET /api/v1/deployments */
-declare function listDeployments(client: Client, params?: ListDeploymentsParams): Promise<ListDeploymentsResponse>;
+export declare function listDeployments(client: Client, params?: ListDeploymentsParams): Promise<ListDeploymentsResponse>;
 /** GET /api/v1/deployments/{deployed_model} */
-declare function getDeployment(client: Client, deployedModel: string, signal?: AbortSignal): Promise<GetDeploymentResponse>;
+export declare function getDeployment(client: Client, deployedModel: string, signal?: AbortSignal): Promise<GetDeploymentResponse>;
 /** DELETE /api/v1/deployments/{deployed_model} */
-declare function deleteDeployment(client: Client, deployedModel: string, signal?: AbortSignal): Promise<DeleteDeploymentResponse>;
-interface ListDeployableModelsParams {
+export declare function deleteDeployment(client: Client, deployedModel: string, signal?: AbortSignal): Promise<DeleteDeploymentResponse>;
+export interface ListDeployableModelsParams {
   pageNo?: number;
   pageSize?: number;
   /** Catalog version filter, e.g. "v1.0". */
@@ -3411,15 +3480,15 @@ interface ListDeployableModelsParams {
   signal?: AbortSignal;
 }
 /** GET /api/v1/deployments/models */
-declare function listDeployableModels(client: Client, params?: ListDeployableModelsParams): Promise<ListDeployableModelsResponse>;
+export declare function listDeployableModels(client: Client, params?: ListDeployableModelsParams): Promise<ListDeployableModelsResponse>;
 /** PUT /api/v1/deployments/{deployed_model}/scale */
-declare function scaleDeployment(client: Client, deployedModel: string, body: ScaleDeploymentRequest, signal?: AbortSignal): Promise<ScaleDeploymentResponse>;
+export declare function scaleDeployment(client: Client, deployedModel: string, body: ScaleDeploymentRequest, signal?: AbortSignal): Promise<ScaleDeploymentResponse>;
 /**
  * PUT /api/v1/deployments/{deployed_model}/update
  *
  * Update rate limits. At least one of `rpm_limit` / `tpm_limit` must be set.
  */
-declare function updateDeployment(client: Client, deployedModel: string, body: UpdateDeploymentRequest, signal?: AbortSignal): Promise<UpdateDeploymentResponse>;
+export declare function updateDeployment(client: Client, deployedModel: string, body: UpdateDeploymentRequest, signal?: AbortSignal): Promise<UpdateDeploymentResponse>;
 //#endregion
 //#region src/deploy/constants.d.ts
 /**
@@ -3428,16 +3497,19 @@ declare function updateDeployment(client: Client, deployedModel: string, body: U
  * string for these server-contract values.
  */
 /** Billing plan (`--plan` value, matches the server's deployment plan). */
-declare const DEPLOY_PLAN: {
-  /** Token-billed; the CLI default. */readonly LORA: "lora"; /** Token-billed, provisioned throughput. */
-  readonly PTU: "ptu"; /** Model-unit-billed. */
+export declare const DEPLOY_PLAN: {
+  /** Token-billed; the CLI default. */
+  readonly LORA: "lora";
+  /** Token-billed, provisioned throughput. */
+  readonly PTU: "ptu";
+  /** Model-unit-billed. */
   readonly MU: "mu";
 };
-type DeployPlan = (typeof DEPLOY_PLAN)[keyof typeof DEPLOY_PLAN];
+export type DeployPlan = (typeof DEPLOY_PLAN)[keyof typeof DEPLOY_PLAN];
 /** CLI default plan when `--plan` is omitted. */
-declare const DEFAULT_DEPLOY_PLAN: DeployPlan;
+export declare const DEFAULT_DEPLOY_PLAN: DeployPlan;
 /** Deployment target modality — fixes the default plan when `--plan` is omitted. */
-type DeployModality = "text" | "audio" | "image";
+export type DeployModality = "text" | "audio" | "image";
 /**
  * Default plan per modality when `--plan` is omitted.
  *
@@ -3448,25 +3520,27 @@ type DeployModality = "text" | "audio" | "image";
  *     speech-synthesis guide fixes `plan: "mu"` and requires deploy_spec /
  *     capacity / billing_method (all auto-picked by the mu strategy).
  */
-declare function defaultDeployPlan(modality: DeployModality): DeployPlan;
+export declare function defaultDeployPlan(modality: DeployModality): DeployPlan;
 /** Billing method (`billing_method`, plan=mu only). */
-declare const BILLING_METHOD: {
-  /** Post-paid (currently the only server-supported value). */readonly POST_PAY: "POST_PAY"; /** Pre-paid. */
+export declare const BILLING_METHOD: {
+  /** Post-paid (currently the only server-supported value). */
+  readonly POST_PAY: "POST_PAY";
+  /** Pre-paid. */
   readonly PRE_PAY: "PRE_PAY";
 };
-type BillingMethod = (typeof BILLING_METHOD)[keyof typeof BILLING_METHOD];
+export type BillingMethod = (typeof BILLING_METHOD)[keyof typeof BILLING_METHOD];
 /** Default billing method for plan=mu when `--billing-method` is omitted. */
-declare const DEFAULT_BILLING_METHOD: BillingMethod;
+export declare const DEFAULT_BILLING_METHOD: BillingMethod;
 /** Template charge type (`charge_type`) returned by the deployable-models catalog. */
-declare const CHARGE_TYPE: {
+export declare const CHARGE_TYPE: {
   readonly POST_PAID: "post_paid";
   readonly PRE_PAID: "pre_paid";
 };
-type ChargeType = (typeof CHARGE_TYPE)[keyof typeof CHARGE_TYPE];
+export type ChargeType = (typeof CHARGE_TYPE)[keyof typeof CHARGE_TYPE];
 //#endregion
 //#region src/deploy/plans.d.ts
 /** Plan-relevant subset of `deploy <modality> create` flags (parsed flags satisfy this shape). */
-interface CreatePlanFlags {
+export interface CreatePlanFlags {
   plan?: string;
   deploySpec?: string;
   capacity?: number;
@@ -3475,7 +3549,7 @@ interface CreatePlanFlags {
   outputTpm?: number;
   thinkingOutputTpm?: number;
 }
-interface PlanContext {
+export interface PlanContext {
   client: Client;
   /** True in --dry-run: strategies must skip side-effecting catalog lookups. */
   dryRun: boolean;
@@ -3487,14 +3561,14 @@ interface PlanContext {
   /** Console display name (`--name`). */
   name: string;
 }
-interface PlanResolved {
+export interface PlanResolved {
   /**
    * Plan-specific fields to merge into the request body. The shared envelope
    * (`{model_name, name, plan}`) is added by the caller.
    */
   body: Record<string, unknown>;
 }
-interface PlanStrategy {
+export interface PlanStrategy {
   /** Plan id, matches `--plan` CLI value. */
   name: string;
   /** Returns an error message when required flags are missing; undefined to pass. */
@@ -3511,15 +3585,15 @@ interface PlanStrategy {
  * accepted by the create endpoint, so the dispatcher in the command will
  * reject anything outside this table with a clear USAGE error.
  */
-declare const STRATEGIES: Record<string, PlanStrategy>;
+export declare const STRATEGIES: Record<string, PlanStrategy>;
 /** Throws USAGE if `plan` is not in the strategy table. */
-declare function pickPlanStrategy(plan: string): PlanStrategy;
+export declare function pickPlanStrategy(plan: string): PlanStrategy;
 //#endregion
 //#region src/deploy/lifecycle.d.ts
-declare const DEPLOY_START_API = "zeldaEasy.broadscope-platform.modelInstance.startModelService";
-declare const DEPLOY_STOP_API = "zeldaEasy.broadscope-platform.modelInstance.stopModelService";
-declare const DEPLOY_LIST_INDEPENDENT_API = "zeldaEasy.broadscope-platform.modelInstance.listIndependentDeployedModel";
-interface ModelServiceEntry {
+export declare const DEPLOY_START_API = "zeldaEasy.broadscope-platform.modelInstance.startModelService";
+export declare const DEPLOY_STOP_API = "zeldaEasy.broadscope-platform.modelInstance.stopModelService";
+export declare const DEPLOY_LIST_INDEPENDENT_API = "zeldaEasy.broadscope-platform.modelInstance.listIndependentDeployedModel";
+export interface ModelServiceEntry {
   modelServiceId?: string;
   deployedModel?: string;
   deployed_model?: string;
@@ -3530,24 +3604,24 @@ interface ModelServiceEntry {
   [key: string]: unknown;
 }
 /** Start (bring online) a stopped deployment. */
-declare function startModelService(client: Client, modelServiceId: string): Promise<Record<string, unknown>>;
+export declare function startModelService(client: Client, modelServiceId: string): Promise<Record<string, unknown>>;
 /** Stop (take offline) a running deployment. Stops billing for mu/ptu plans. */
-declare function stopModelService(client: Client, modelServiceId: string): Promise<Record<string, unknown>>;
+export declare function stopModelService(client: Client, modelServiceId: string): Promise<Record<string, unknown>>;
 /**
  * List independently deployed models (console domain).
  * Used for precheck status verification and ID mapping.
  * Paginates internally to return all entries.
  */
-declare function listIndependentDeployedModels(client: Client): Promise<ModelServiceEntry[]>;
+export declare function listIndependentDeployedModels(client: Client): Promise<ModelServiceEntry[]>;
 /**
  * Find a deployment entry by its identifier in the console-domain list.
  * Matches against `modelServiceId`, `deployedModel`, or `deployed_model`.
  */
-declare function findDeploymentEntry(entries: ModelServiceEntry[], deployedModel: string): ModelServiceEntry | undefined;
+export declare function findDeploymentEntry(entries: ModelServiceEntry[], deployedModel: string): ModelServiceEntry | undefined;
 //#endregion
 //#region src/speech/vocabulary.d.ts
 /** Fixed model id for the hot-word customization endpoint. */
-declare const SPEECH_BIASING_MODEL = "speech-biasing";
+export declare const SPEECH_BIASING_MODEL = "speech-biasing";
 interface VocabularyEntry {
   text: string;
   weight: number;
@@ -3572,47 +3646,47 @@ interface VocabularyRequest {
   input: Record<string, unknown>;
 }
 /** Shared request body builder for dry-run and live calls. */
-declare function buildVocabularyRequest(action: string, input: Record<string, unknown>): VocabularyRequest;
-declare function createVocabulary(client: Client, params: {
+export declare function buildVocabularyRequest(action: string, input: Record<string, unknown>): VocabularyRequest;
+export declare function createVocabulary(client: Client, params: {
   targetModel: string;
   prefix: string;
   vocabulary: VocabularyEntry[];
 }, signal?: AbortSignal): Promise<VocabularyEnvelope<{
   vocabulary_id?: string;
 }>>;
-declare function listVocabularies(client: Client, params?: {
+export declare function listVocabularies(client: Client, params?: {
   prefix?: string;
   pageIndex?: number;
   pageSize?: number;
 }, signal?: AbortSignal): Promise<VocabularyEnvelope<{
   vocabulary_list?: VocabularyListItem[];
 }>>;
-declare function queryVocabulary(client: Client, vocabularyId: string, signal?: AbortSignal): Promise<VocabularyEnvelope<{
+export declare function queryVocabulary(client: Client, vocabularyId: string, signal?: AbortSignal): Promise<VocabularyEnvelope<{
   gmt_create?: string;
   gmt_modified?: string;
   status?: string;
   target_model?: string;
   vocabulary?: VocabularyEntry[];
 }>>;
-declare function updateVocabulary(client: Client, vocabularyId: string, vocabulary: VocabularyEntry[], signal?: AbortSignal): Promise<VocabularyEnvelope<Record<string, never>>>;
-declare function deleteVocabulary(client: Client, vocabularyId: string, signal?: AbortSignal): Promise<VocabularyEnvelope<Record<string, never>>>;
+export declare function updateVocabulary(client: Client, vocabularyId: string, vocabulary: VocabularyEntry[], signal?: AbortSignal): Promise<VocabularyEnvelope<Record<string, never>>>;
+export declare function deleteVocabulary(client: Client, vocabularyId: string, signal?: AbortSignal): Promise<VocabularyEnvelope<Record<string, never>>>;
 //#endregion
 //#region src/speech/vocabulary-input.d.ts
 /**
  * Instant hot words for `recognize --vocabulary`.
  * The API field is a flat word→weight object, so an array is a usage error here.
  */
-declare function parseInstantVocabulary(raw: string): Record<string, number>;
+export declare function parseInstantVocabulary(raw: string): Record<string, number>;
 /**
  * Vocabulary create/update --words.
  * Accepts the same word→weight object as recognize, or the API entry array
  * when per-entry lang is needed. Array form ignores the optional lang param.
  */
-declare function parseVocabularyEntries(raw: string, lang?: string): VocabularyEntry[];
+export declare function parseVocabularyEntries(raw: string, lang?: string): VocabularyEntry[];
 //#endregion
 //#region src/types/command-pack.d.ts
 /** Current Command Pack protocol version understood by this release. */
-declare const COMMAND_PACK_API_VERSION: 1;
+export declare const COMMAND_PACK_API_VERSION: 1;
 /** `package.json#bailianCli` metadata for a Command Pack package. */
 interface CommandPackMeta {
   type: "command-pack";
@@ -3666,8 +3740,63 @@ interface CommandPackCommand<F extends FlagsDef = FlagsDef, C extends CommandPac
 /** A Command Pack explicitly maps product command paths to command implementations. */
 type CommandPack = Record<string, CommandPackCommand<any, any>>;
 //#endregion
+//#region src/types/security.d.ts
+/** A capability / protection switch keyed by a stable code. */
+interface SecurityToggle {
+  key: string;
+  enabled: boolean;
+  /** Protection entries carry an asset count; absent for some (e.g. external_agent). */
+  count?: number | null;
+}
+/** Detection card: `hit` is the headline number, `scanned` the total. */
+interface SecurityScanStat {
+  hit: number | null;
+  scanned: number | null;
+}
+/** Protection overview — fixed to the last 24 hours, no request params. */
+interface SecurityOverview {
+  capabilities?: SecurityToggle[] | null;
+  protection?: SecurityToggle[] | null;
+  content_safety?: SecurityScanStat | null;
+  file_scan?: SecurityScanStat | null;
+  skill_scan?: SecurityScanStat | null;
+  contentSafety?: SecurityScanStat | null;
+  fileScan?: SecurityScanStat | null;
+  skillScan?: SecurityScanStat | null;
+}
+type SecurityRiskLevel = "high" | "medium" | "low";
+/** A single alert row from agent_logs. */
+interface SecurityAlert {
+  alert_id: string;
+  risk_level?: SecurityRiskLevel | null;
+  risk_name?: string | null;
+  risk_desc?: string | null;
+  asset_type?: string | null;
+  asset_name?: string | null;
+  app_id?: string | null;
+  app_name?: string | null;
+  agent_name?: string | null;
+  status?: string | null;
+  source?: string | null;
+  /** Millisecond timestamp string; some environments return ISO 8601 instead. */
+  check_time?: string | null;
+  handle_time?: string | null;
+  vendor?: string | null;
+}
+/** agent_logs list — cursor paginated; `next_page` is null on the last page. */
+interface SecurityAlertList {
+  stats?: {
+    total?: number | null;
+    high?: number | null;
+    medium?: number | null;
+    low?: number | null;
+  } | null;
+  data?: SecurityAlert[] | null;
+  next_page?: string | number | null;
+}
+//#endregion
 //#region src/utils/filename.d.ts
-declare function generateFilename(prefix: string, prompt: string): string;
+export declare function generateFilename(prefix: string, prompt: string): string;
 //#endregion
 //#region src/utils/output-dir.d.ts
 /**
@@ -3681,13 +3810,13 @@ declare function generateFilename(prefix: string, prompt: string): string;
  * Optionally appends a subdirectory (e.g. 'images', 'videos', 'speech').
  * Creates the directory if it doesn't exist.
  */
-declare function resolveOutputDir(settings: Settings, options?: {
+export declare function resolveOutputDir(settings: Settings, options?: {
   flagDir?: string;
   subDir?: string;
 }): string;
 //#endregion
 //#region src/utils/token.d.ts
-declare function maskToken(token: string): string;
+export declare function maskToken(token: string): string;
 //#endregion
 //#region src/utils/object.d.ts
 /**
@@ -3702,29 +3831,29 @@ declare function maskToken(token: string): string;
  * stripUndefined(params); // { a: 1 }
  * ```
  */
-declare function stripUndefined<T extends Record<string, unknown>>(obj: T): T;
+export declare function stripUndefined<T extends Record<string, unknown>>(obj: T): T;
 //#endregion
 //#region src/utils/fs.d.ts
-declare function readTextFromPathOrStdin(path: string): string;
+export declare function readTextFromPathOrStdin(path: string): string;
 //#endregion
 //#region src/utils/concurrency.d.ts
 /**
  * Run async task factories with a bounded concurrency pool.
  * Returns results in the same order as the input tasks array.
  */
-declare function runWithConcurrency<T>(tasks: Array<() => Promise<T>>, limit: number): Promise<T[]>;
+export declare function runWithConcurrency<T>(tasks: Array<() => Promise<T>>, limit: number): Promise<T[]>;
 //#endregion
 //#region src/utils/boolean-flag.d.ts
 /** Parse true/false from CLI flags (e.g. `--watermark <bool>`). */
-declare function parseBooleanValue(value: unknown, label?: string): boolean;
-declare function parseOptionalBooleanValue(value: unknown, label?: string): boolean | undefined;
+export declare function parseBooleanValue(value: unknown, label?: string): boolean;
+export declare function parseOptionalBooleanValue(value: unknown, label?: string): boolean | undefined;
 /**
  * Resolve a tri-state boolean CLI flag (`--name <bool>`).
  * Returns `defaultWhenUnset` when the flag is omitted.
  */
-declare function resolveBooleanFlag(flagValue: unknown, defaultWhenUnset: boolean | undefined, label?: string): boolean | undefined;
+export declare function resolveBooleanFlag(flagValue: unknown, defaultWhenUnset: boolean | undefined, label?: string): boolean | undefined;
 /** Resolve `--watermark`; command flag overrides config, then defaults to true. */
-declare function resolveWatermark(flagValue: unknown, configuredValue?: boolean): boolean;
+export declare function resolveWatermark(flagValue: unknown, configuredValue?: boolean): boolean;
 //#endregion
 //#region src/telemetry/event.d.ts
 interface TrackingEvent {
@@ -3742,7 +3871,7 @@ interface TrackingEvent {
   authMethod?: AuthRequirement;
   params?: Record<string, unknown>;
 }
-declare function createTrackingEvent(opts: {
+export declare function createTrackingEvent(opts: {
   command: string;
   durationMs: number;
   success: boolean;
@@ -3768,9 +3897,9 @@ declare function createTrackingEvent(opts: {
  * 埋点永远不应阻塞 CLI：调用方应传入较短的超时（例如 1000ms），并始终与超时
  * race。错误与超时一律静默吞掉。
  */
-declare function flushTelemetry(timeoutMs?: number): Promise<void>;
-declare function localSink(event: TrackingEvent): Promise<void>;
-declare function remoteSink(event: TrackingEvent): Promise<void>;
+export declare function flushTelemetry(timeoutMs?: number): Promise<void>;
+export declare function localSink(event: TrackingEvent): Promise<void>;
+export declare function remoteSink(event: TrackingEvent): Promise<void>;
 //#endregion
 //#region src/telemetry/tracker.d.ts
 /** 遥测只记录命令声明的鉴权域,不接触具体凭证能力。 */
@@ -3779,7 +3908,7 @@ interface TrackingDeps {
   settings: Settings;
   authMethod?: AuthRequirement;
 }
-declare function trackCommandExecution(deps: TrackingDeps, commandPath: string[], flags: Record<string, unknown>, fn: () => Promise<void>): Promise<void>;
+export declare function trackCommandExecution(deps: TrackingDeps, commandPath: string[], flags: Record<string, unknown>, fn: () => Promise<void>): Promise<void>;
 //#endregion
 //#region src/advisor/types.d.ts
 type Modality = "Text" | "Image" | "Video" | "Audio";
@@ -3796,32 +3925,32 @@ interface ModelPreference {
   targets?: string[];
   excludes?: string[];
 }
-declare const Modalities: {
+export declare const Modalities: {
   readonly Text: "Text";
   readonly Image: "Image";
   readonly Video: "Video";
   readonly Audio: "Audio";
 };
-declare const Complexities: {
+export declare const Complexities: {
   readonly Single: "single";
   readonly Pipeline: "pipeline";
 };
-declare const Budgets: {
+export declare const Budgets: {
   readonly Low: "low";
   readonly Medium: "medium";
   readonly High: "high";
 };
-declare const ContextNeeds: {
+export declare const ContextNeeds: {
   readonly Standard: "standard";
   readonly Large: "large";
   readonly ExtraLarge: "extra-large";
 };
-declare const QualityPreferences: {
+export declare const QualityPreferences: {
   readonly Flagship: "flagship";
   readonly Balanced: "balanced";
   readonly CostOptimized: "cost-optimized";
 };
-declare const Capabilities: {
+export declare const Capabilities: {
   readonly TG: "TG";
   readonly Reasoning: "Reasoning";
   readonly VU: "VU";
@@ -3838,13 +3967,13 @@ declare const Capabilities: {
   readonly TR: "TR";
   readonly ThreeDGeneration: "3D-generation";
 };
-declare const Features: {
+export declare const Features: {
   readonly FunctionCalling: "function-calling";
   readonly WebSearch: "web-search";
   readonly StructuredOutputs: "structured-outputs";
   readonly PrefixCompletion: "prefix-completion";
 };
-declare const ModelCategories: {
+export declare const ModelCategories: {
   readonly Flagship: "Flagship";
   readonly CostOptimized: "Cost-optimized";
 };
@@ -3943,10 +4072,10 @@ type RecommendResult = SingleResult | PipelineResult;
 interface GetModelsOptions {
   onPrepareStart?: () => void;
 }
-declare function getModels(settings: Settings, options?: GetModelsOptions): Promise<ModelProfile[]>;
+export declare function getModels(settings: Settings, options?: GetModelsOptions): Promise<ModelProfile[]>;
 //#endregion
 //#region src/advisor/constants/scoring.d.ts
-declare const SEMANTIC_TOP_K = 20;
+export declare const SEMANTIC_TOP_K = 20;
 //#endregion
 //#region src/advisor/intent.d.ts
 /**
@@ -3958,7 +4087,7 @@ declare const SEMANTIC_TOP_K = 20;
  *
  * On failure, degrades gracefully to DEFAULT_INTENT with confidence 0.
  */
-declare function analyzeIntent(client: Client, input: string): Promise<IntentProfile>;
+export declare function analyzeIntent(client: Client, input: string): Promise<IntentProfile>;
 //#endregion
 //#region src/advisor/recall.d.ts
 interface ScoredCandidate {
@@ -3969,11 +4098,11 @@ interface ScoredCandidate {
   /** Cosine similarity [0,1] between the semantic query and the model embedding. */
   softScore?: number;
 }
-declare function recallCandidates(models: ModelProfile[], intent: IntentProfile): ScoredCandidate[];
+export declare function recallCandidates(models: ModelProfile[], intent: IntentProfile): ScoredCandidate[];
 //#endregion
 //#region src/advisor/recall-semantic.d.ts
-declare function isSemanticAvailable(): boolean;
-declare function recallSemantic(client: Client, models: ModelProfile[], query: string, topK: number, intent?: IntentProfile): Promise<ScoredCandidate[]>;
+export declare function isSemanticAvailable(): boolean;
+export declare function recallSemantic(client: Client, models: ModelProfile[], query: string, topK: number, intent?: IntentProfile): Promise<ScoredCandidate[]>;
 //#endregion
 //#region src/advisor/recommend.d.ts
 interface RecommendOptions {
@@ -3981,15 +4110,15 @@ interface RecommendOptions {
   onContentStart?: () => void;
   enableThinking?: boolean;
 }
-declare function buildDocLink(docUrl?: string): string | undefined;
-declare function rankModels(client: Client, candidates: ScoredCandidate[], intent: IntentProfile, userInput: string, top: number, options?: RecommendOptions): Promise<RecommendResult>;
+export declare function buildDocLink(docUrl?: string): string | undefined;
+export declare function rankModels(client: Client, candidates: ScoredCandidate[], intent: IntentProfile, userInput: string, top: number, options?: RecommendOptions): Promise<RecommendResult>;
 //#endregion
 //#region src/advisor/sync.d.ts
 /**
  * Check and sync Wiki data. Runs silently; never throws.
  * @returns Whether data was actually updated (for testing/debugging)
  */
-declare function maybeSyncWikiData(): Promise<boolean>;
+export declare function maybeSyncWikiData(): Promise<boolean>;
 //#endregion
 //#region src/advisor/sources/types.d.ts
 interface ModelSource {
@@ -4002,7 +4131,7 @@ interface ModelSource {
 /** How the CLI was installed on this machine. */
 type InstallMethod = "binary" | "npm" | "brew" | "winget" | "unknown";
 /** Product that currently ships standalone binary artifacts (`bl` / `bailian`). */
-declare const BINARY_PRODUCT_CLIENT_NAME = "bailian-cli";
+export declare const BINARY_PRODUCT_CLIENT_NAME = "bailian-cli";
 type InstallMethodIdentity = {
   clientName: string;
 };
@@ -4012,9 +4141,9 @@ type InstallMethodIdentity = {
  *
  * Binary entrypoints set `BAILIAN_COMPILED=1` before other code runs.
  */
-declare function isCompiledBinary(): boolean;
+export declare function isCompiledBinary(): boolean;
 /** Infer install method when no marker file / env override is present. */
-declare function detectInstallMethod(): InstallMethod;
+export declare function detectInstallMethod(): InstallMethod;
 /**
  * Read the persisted install method, falling back to detection.
  *
@@ -4022,13 +4151,13 @@ declare function detectInstallMethod(): InstallMethod;
  * Legacy `~/.bailian/install-method` is only consulted for `bailian-cli`
  * so other products (e.g. kscli) are not polluted by a shared binary marker.
  */
-declare function getInstallMethod(identity?: InstallMethodIdentity): InstallMethod;
+export declare function getInstallMethod(identity?: InstallMethodIdentity): InstallMethod;
 /**
  * Install method for update / auto-update routing.
  * Only `bailian-cli` may follow the binary channel; other products always use npm
  * even if env or a mistaken marker claims `binary`.
  */
-declare function getUpdateInstallMethod(identity: {
+export declare function getUpdateInstallMethod(identity: {
   clientName: string;
   npmPackage: string;
 }): InstallMethod;
@@ -4036,7 +4165,7 @@ declare function getUpdateInstallMethod(identity: {
  * Persist install method under `~/.bailian/install-method.<clientName>` (best-effort).
  * For `bailian-cli`, also write the legacy `install-method` file for older readers.
  */
-declare function writeInstallMethodSync(method: InstallMethod, identity?: InstallMethodIdentity): void;
+export declare function writeInstallMethodSync(method: InstallMethod, identity?: InstallMethodIdentity): void;
 //#endregion
 //#region src/install/cdn.d.ts
 /**
@@ -4059,13 +4188,13 @@ declare function writeInstallMethodSync(method: InstallMethod, identity?: Instal
  *
  * Override with `BAILIAN_CLI_CDN`.
  */
-declare const DEFAULT_CLI_CDN_BASE = "https://bailian-wiki.oss-cn-hangzhou.aliyuncs.com/release";
+export declare const DEFAULT_CLI_CDN_BASE = "https://bailian-wiki.oss-cn-hangzhou.aliyuncs.com/release";
 /** GitHub Releases base — used when writing manifests attached to gh release assets. */
-declare const GITHUB_RELEASES_BASE = "https://github.com/modelstudioai/cli/releases";
+export declare const GITHUB_RELEASES_BASE = "https://github.com/modelstudioai/cli/releases";
 /** User-facing install entry (docs / update hints); asset downloads still use getCliCdnBase(). */
-declare const DEFAULT_INSTALL_SCRIPT_URL = "https://bailian.aliyun.com/cli/install.sh";
-declare const DEFAULT_INSTALL_PS1_URL = "https://bailian.aliyun.com/cli/install.ps1";
-declare function getCliCdnBase(): string;
+export declare const DEFAULT_INSTALL_SCRIPT_URL = "https://bailian.aliyun.com/cli/install.sh";
+export declare const DEFAULT_INSTALL_PS1_URL = "https://bailian.aliyun.com/cli/install.ps1";
+export declare function getCliCdnBase(): string;
 /**
  * Rolling manifest URL at the CDN base root.
  * Stable (`latest` / `stable` / empty) → `manifest.json`.
@@ -4073,31 +4202,31 @@ declare function getCliCdnBase(): string;
  * Other names still map to `{channel}.json` for backward compatibility only.
  * All share the same rolling-manifest shape from binary-build.
  */
-declare function channelManifestUrl(channel?: string): string;
+export declare function channelManifestUrl(channel?: string): string;
 /** Immutable per-version asset: `{base}/v{version}/{fileName}`. */
-declare function releaseAssetUrl(version: string, fileName: string): string;
+export declare function releaseAssetUrl(version: string, fileName: string): string;
 /** Platform triple used in asset names: `bl-<ver>-<os>-<arch>[.exe]`. */
-declare function detectBinaryPlatform(): {
+export declare function detectBinaryPlatform(): {
   os: string;
   arch: string;
   fileSuffix: string;
 };
 /** Release download asset: `bl-<ver>-<os>-<arch>.zip`. */
-declare function binaryAssetFileName(version: string, os: string, arch: string, _exe?: boolean): string;
+export declare function binaryAssetFileName(version: string, os: string, arch: string, _exe?: boolean): string;
 /**
  * Unix install.sh archive: `bl-<ver>-<os>-<arch>.tar.gz`.
  * Windows has no tar.gz (PowerShell Expand-Archive uses zip).
  */
-declare function binaryTarFileName(version: string, os: string, arch: string): string | undefined;
+export declare function binaryTarFileName(version: string, os: string, arch: string): string | undefined;
 /** Uncompressed binary name inside the zip. */
-declare function binaryInnerFileName(version: string, os: string, arch: string, exe?: boolean): string;
+export declare function binaryInnerFileName(version: string, os: string, arch: string, exe?: boolean): string;
 //#endregion
 //#region src/install/unzip-asset.d.ts
 /**
  * Extract `entryName` (or the first non-directory entry) from `zipPath` to `destPath`.
  * Returns the archive entry basename that was extracted.
  */
-declare function extractZipEntryToFile(zipPath: string, destPath: string, entryName?: string): Promise<string>;
+export declare function extractZipEntryToFile(zipPath: string, destPath: string, entryName?: string): Promise<string>;
 //#endregion
 //#region src/skills/types.d.ts
 /**
@@ -4171,18 +4300,18 @@ interface SkillStatusRow {
 }
 //#endregion
 //#region src/skills/registry.d.ts
-declare function getSkillRegistryBaseUrl(): string;
+export declare function getSkillRegistryBaseUrl(): string;
 /**
  * Fetch the remote skill index. No local caching — the diff comparison is always
  * "live remote index vs local skill-lock.json".
  * Silent background channels (advisor sync) may pass a tighter timeout and attempts=1
  * than the interactive defaults.
  */
-declare function fetchSkillsIndex(timeoutMs?: number, attempts?: number): Promise<SkillsIndex>;
+export declare function fetchSkillsIndex(timeoutMs?: number, attempts?: number): Promise<SkillsIndex>;
 /** Resolve which file to download for a skill: content-addressed object, else legacy fixed key */
-declare function resolveAssetFileName(entry?: SkillIndexEntry): string;
+export declare function resolveAssetFileName(entry?: SkillIndexEntry): string;
 /** Download the tar.br archive for a single skill (one skill = one GET) */
-declare function downloadSkillAsset(name: string, entry?: SkillIndexEntry, attempts?: number): Promise<Buffer>;
+export declare function downloadSkillAsset(name: string, entry?: SkillIndexEntry, attempts?: number): Promise<Buffer>;
 //#endregion
 //#region src/skills/lock.d.ts
 /**
@@ -4192,23 +4321,23 @@ declare function downloadSkillAsset(name: string, entry?: SkillIndexEntry, attem
  * caches the remote index — list/update diffs are always "live remote index vs lock".
  * Paths follow the config.json directory logic (BAILIAN_CONFIG_DIR can redirect everything).
  */
-declare function getSkillsDir(): string;
-declare function getSkillLockPath(): string;
-declare function emptySkillLock(): SkillLockFile;
+export declare function getSkillsDir(): string;
+export declare function getSkillLockPath(): string;
+export declare function emptySkillLock(): SkillLockFile;
 /**
  * Read installation records. Returns an empty lock when the file is absent (first install),
  * corrupted, or has an unrecognized version — an empty lock is a valid initial state, not an
  * error; subsequent install actions will rebuild correct records.
  */
-declare function readSkillLock(): SkillLockFile;
-declare function writeSkillLock(lock: SkillLockFile): void;
+export declare function readSkillLock(): SkillLockFile;
+export declare function writeSkillLock(lock: SkillLockFile): void;
 /**
  * Merge-update a single skill's installation record (read-modify-write).
  * Shallow-merges with the existing entry: fields not provided in patch (typically links —
  * agent fan-out records) are preserved, preventing "install-only, no fan-out" sync channels
  * like postinstall/advisor from overwriting link records established by bl skill add.
  */
-declare function upsertSkillLockEntry(name: string, patch: SkillLockEntry): void;
+export declare function upsertSkillLockEntry(name: string, patch: SkillLockEntry): void;
 //#endregion
 //#region src/skills/sanitize.d.ts
 /**
@@ -4220,16 +4349,16 @@ declare function upsertSkillLockEntry(name: string, patch: SkillLockEntry): void
  * `bl skill` uses this as an "equivalence check": if the sanitized name differs from the original,
  * installation is rejected outright (the publisher already has an isomorphic allowlist; this is client-side defense-in-depth).
  */
-declare function sanitizeSkillName(name: string): string;
+export declare function sanitizeSkillName(name: string): string;
 /** Whether the skill name is already a safe directory name (unchanged after sanitization) */
-declare function isSafeSkillName(name: string): boolean;
+export declare function isSafeSkillName(name: string): boolean;
 //#endregion
 //#region src/skills/names.d.ts
 /**
  * Parse --name: `all` or a comma-separated list of skill names (deduplicated, trimmed).
  * `all` cannot be mixed with specific names.
  */
-declare function parseSkillNames(raw: string | undefined, defaultAll: boolean): string[] | "all";
+export declare function parseSkillNames(raw: string | undefined, defaultAll: boolean): string[] | "all";
 //#endregion
 //#region src/skills/validate.d.ts
 /**
@@ -4244,25 +4373,25 @@ interface SkillMeta {
   name: string;
   description: string;
 }
-declare function validateSkillDir(dir: string, skillName: string): SkillMeta;
+export declare function validateSkillDir(dir: string, skillName: string): SkillMeta;
 //#endregion
 //#region src/skills/extract.d.ts
 /** tar 条目路径必须是相对路径且不含 ..，防止 tar-slip 逃逸解包目录 */
-declare function isSafeEntryName(name: string): boolean;
+export declare function isSafeEntryName(name: string): boolean;
 /** Brotli decompress + tar-stream extract into destDir (per-entry path safety check). */
-declare function extractTarBr(tarBrBuffer: Buffer, destDir: string): Promise<void>;
+export declare function extractTarBr(tarBrBuffer: Buffer, destDir: string): Promise<void>;
 /**
  * Recompute the publisher's deterministic content hash over an extracted directory:
  * regular files sorted by "/"-separated relative path (code-unit order, same as the
  * publisher's byte-order sort for ASCII paths), sha256 accumulating relPath + bytes.
  * Symmetric with computeContentHash in FC skills-publish.mjs.
  */
-declare function computeDirContentHash(dir: string): string;
+export declare function computeDirContentHash(dir: string): string;
 /**
  * Atomic swap: replace destDir with the extracted content from tmpDir.
  * tmpDir must be on the same volume as destDir (same parent) for renameSync to be atomic.
  */
-declare function atomicSwap(tmpDir: string, destDir: string): void;
+export declare function atomicSwap(tmpDir: string, destDir: string): void;
 //#endregion
 //#region src/skills/agents.d.ts
 /**
@@ -4289,8 +4418,8 @@ interface AgentTarget {
  * project-only). Shared-dir agents (Cline/Warp/Zed/Kimi/… read ~/.agents/skills; Amp/Replit
  * read $XDG_CONFIG_HOME/agents/skills) are folded into the universal pseudo-agents' detectDirs.
  */
-declare function getAgentTargets(): AgentTarget[];
-declare function detectInstalledAgents(): AgentTarget[];
+export declare function getAgentTargets(): AgentTarget[];
+export declare function detectInstalledAgents(): AgentTarget[];
 interface LinkResult {
   agent: string;
   path: string;
@@ -4304,7 +4433,7 @@ interface LinkResult {
  * any other existing files/dirs are always skipped (never delete user content).
  * Falls back to copy when symlink fails (e.g. Windows without Developer Mode).
  */
-declare function linkSkillToAgents(name: string, agents?: AgentTarget[], recordedLinks?: string[]): LinkResult[];
+export declare function linkSkillToAgents(name: string, agents?: AgentTarget[], recordedLinks?: string[]): LinkResult[];
 /**
  * Fan-out workflow: link to agents AND compute the next lock ledger in one step.
  * Shared by bl skill add/update (fresh install and self-healing) and advisor wiki sync,
@@ -4326,14 +4455,21 @@ interface FanoutOutcome {
  *   - recorded paths confirmed foreign this run (unmanaged skip) are dropped — the user
  *     replaced our artifact, and keeping the record would let remove delete user content.
  */
-declare function fanOutSkillToAgents(name: string, agents?: AgentTarget[], recordedLinks?: string[]): FanoutOutcome;
+export declare function fanOutSkillToAgents(name: string, agents?: AgentTarget[], recordedLinks?: string[]): FanoutOutcome;
+/**
+ * Collect paths that unlinkSkillFromAgents would reclaim (read-only).
+ * Same candidate set and eligibility rules as the mutating unlink: managed
+ * symlinks anywhere under the agent registry (including historical links not
+ * in lock), plus recorded copy-fallback directories.
+ */
+export declare function planUnlinkSkillFromAgents(name: string, recordedLinks?: string[]): string[];
 /**
  * Reclaim fan-out artifacts for a skill across all agent dirs.
  * Symlinks pointing to canonical are removed (including historical links not in lock,
  * via defensive scan of the full registry); real directories are only removed if recorded
  * in lock (copy-fallback artifacts). A single failure does not block the rest.
  */
-declare function unlinkSkillFromAgents(name: string, recordedLinks?: string[]): string[];
+export declare function unlinkSkillFromAgents(name: string, recordedLinks?: string[]): string[];
 //#endregion
 //#region src/skills/installer.d.ts
 /**
@@ -4347,17 +4483,17 @@ interface InstalledSkill {
   meta: SkillMeta;
 }
 /** Install from an in-memory tar.br archive (the download-and-onwards half of installSkill; test-friendly) */
-declare function installSkillFromBuffer(name: string, tarBrBuffer: Buffer, expectedContentHash?: string): Promise<InstalledSkill>;
+export declare function installSkillFromBuffer(name: string, tarBrBuffer: Buffer, expectedContentHash?: string): Promise<InstalledSkill>;
 /** Install a single skill by index entry (download + validate + write to disk) */
-declare function installSkill(name: string, entry: SkillIndexEntry, downloadAttempts?: number): Promise<InstalledSkill>;
+export declare function installSkill(name: string, entry: SkillIndexEntry, downloadAttempts?: number): Promise<InstalledSkill>;
 /** Remove the skill directory under canonical; returns whether it was actually deleted (dir absent → false) */
-declare function removeSkillDir(name: string): boolean;
+export declare function removeSkillDir(name: string): boolean;
 /**
  * Build a skill-lock entry from an index entry + effective fan-out link paths.
  * Single source of truth for the "installation fact" shape shared by bl skill add/update,
  * advisor wiki sync, and any future install channel.
  */
-declare function buildSkillLockEntry(entry: SkillIndexEntry, links: string[]): SkillLockEntry;
+export declare function buildSkillLockEntry(entry: SkillIndexEntry, links: string[]): SkillLockEntry;
 interface SkillInstallRecord {
   /** Ready-to-persist lock entry (links = effective fan-out paths) */
   lockEntry: SkillLockEntry;
@@ -4373,14 +4509,14 @@ interface SkillInstallRecord {
  * downloadAttempts = registry fetch attempts (undefined → interactive default; silent
  * background channels pass 1 to fail fast instead of stalling the host command).
  */
-declare function installSkillWithFanout(name: string, entry: SkillIndexEntry, agents?: AgentTarget[], recordedLinks?: string[], downloadAttempts?: number): Promise<SkillInstallRecord>;
+export declare function installSkillWithFanout(name: string, entry: SkillIndexEntry, agents?: AgentTarget[], recordedLinks?: string[], downloadAttempts?: number): Promise<SkillInstallRecord>;
 //#endregion
 //#region src/skills/status.d.ts
 /**
  * Three-way reconciliation for list: remote index (live) × skill-lock.json (installation facts) × disk (ground truth).
  */
 /** Scan skill directories under canonical (skipping hidden entries, tmp/backup remnants, and plain files) */
-declare function listSkillDirsOnDisk(): string[];
-declare function computeSkillStatuses(index: SkillsIndex, lock: SkillLockFile, diskNames: string[]): SkillStatusRow[];
+export declare function listSkillDirsOnDisk(): string[];
+export declare function computeSkillStatuses(index: SkillsIndex, lock: SkillLockFile, diskNames: string[]): SkillStatusRow[];
 //#endregion
-export { API_KEY_CAPABILITY_PATTERN, ASYNC_FLAG, AcsQueryParams, AcsSignConfig, AgentTarget, AigcConfig, AnyCommand, type ApiErrorBody, ApiKeyCredential, ApiKeyLoginKind, ApiKeyResolutionSourceSelection, AppCompletionRequest, AppCompletionResponse, AppStreamChunk, AsrApiKind, AsrApiRoute, AsrContextMessage, AsrFlashFamily, AuthPersistPatch, AuthRequirement, AuthState, AuthStore, BAILIAN_HOST, BILLING_METHOD, BINARY_PRODUCT_CLIENT_NAME, BailianControlAuth, BailianError, BatchSizeGateInput, BatchSizeGateResult, BillingMethod, Budget, Budgets, BuildAsrFlashRequestOpts, CALC_DATASETS_TOKENS_API, CHANNEL, CHARGE_TYPE, COMMAND_PACK_API_VERSION, CONCURRENT_FLAG, CONFIG_FILE_KEYS, CONSOLE_AUTH_FLAGS, CancelFineTuneResponse, Capabilities, Capability, ChargeType, ChatChoice, ChatMessage, ChatMessageContent, ChatRequest, ChatResponse, ChatResponseFormat, ChatTool, Client, ClientOpenApiJsonOpts, ClientOpenApiQueryOpts, ClientRequestOpts, Command, CommandContext, CommandPack, CommandPackApiKeyContext, CommandPackCommand, CommandPackContext, CommandPackCredentials, CommandPackErrorOptions, CommandPackErrors, CommandPackManager, CommandPackMeta, CommandPackMutationResult, CommandPackOutput, CommandPackOutputOptions, CommandPackReport, CommandRisk, CommandRiskLevel, Complexities, Complexity, ConfigFile, ConfigProfiles, ConfigStore, ConnectBailianMcpOptions, ConsoleCall, ConsoleCredential, ConsoleGatewayRequest, ConsoleGatewayTarget, ConsoleSite, ContextNeed, ContextNeeds, CreateDeploymentRequest, CreateDeploymentResponse, CreateFineTuneRequest, CreateFineTuneResponse, CreatePlanFlags, CreateUserReqDTO, CredentialSource, DEFAULT_BILLING_METHOD, DEFAULT_CLI_CDN_BASE, DEFAULT_DEPLOY_PLAN, DEFAULT_INSTALL_PS1_URL, DEFAULT_INSTALL_SCRIPT_URL, DEFAULT_LANGUAGE, DEFAULT_TRAINING_TYPE, DEPLOY_LIST_INDEPENDENT_API, DEPLOY_PLAN, DEPLOY_START_API, DEPLOY_STOP_API, DOCS_HOSTS, DashScopeASRRequest, DashScopeASRTaskResult, DashScopeASRTranscriptionItem, DashScopeAsyncResponse, DashScopeImageRequest, DashScopeImageSyncResponse, DashScopeKnowledgeRetrieveRequest, DashScopeKnowledgeRetrieveResponse, DashScopeTTSRequest, DashScopeTTSResponse, DashScopeTTSStreamChunk, DashScopeTaskResponse, DashScopeVideoEditRequest, DashScopeVideoRefRequest, DashScopeVideoRequest, type DataModality, DatasetDeleteResponse, DatasetFile, DatasetGetResponse, DatasetListParams, DatasetListResponse, DatasetSchema, DatasetUploadParams, DatasetUploadResponse, DeleteDeploymentResponse, DeleteFineTuneResponse, DeployModality, DeployPlan, DeployableModel, DeployableTemplate, Deployment, ESTIMATE_FINETUNE_TOKENS_API, ExitCode, ExportCheckpointResponse, FanoutOutcome, Feature, Features, FetchImplementation, FineTuneCheckpoint, FineTuneHyperParameters, FineTuneJob, FineTuneLogEntry, FlagDef, FlagsDef, GITHUB_RELEASES_BASE, GLOBAL_FLAGS, GetDeploymentResponse, GetFineTuneLogsParams, GetFineTuneLogsResponse, GetFineTuneResponse, GetModelsOptions, HttpDeps, INSUFFICIENT_SAMPLES_CODE, Identity, ImageApiKind, ImageApiRoute, ImageInputStyle, ImageSizeProfile, InstallMethod, InstallMethodIdentity, InstalledSkill, IntentProfile, IntentSegment, KnowledgeChatContentPart, KnowledgeChatMessage, KnowledgeChatRequest, KnowledgeChatStreamChunk, KnowledgeSearchRequest, KnowledgeSearchResponse, Language, LinkResult, ListCheckpointsResponse, ListDeployableModelsParams, ListDeployableModelsResponse, ListDeploymentsParams, ListDeploymentsResponse, ListFineTunesParams, ListFineTunesResponse, LocalizedText, MAX_CPT_BYTES, MAX_DATASET_BYTES, MAX_MEDIA_ZIP_BYTES, MODEL_AUTH_FLAGS, MODEL_LIST_API, McpClient, McpConnectedClient, McpTool, McpToolResult, MemoryAddRequest, MemoryAddResponse, MemoryMessage, MemoryNode, MemoryNodeListResponse, MemoryNodeUpdateRequest, MemorySearchRequest, MemorySearchResponse, Modalities, Modality, ModelCapability, ModelCategories, ModelCategory, ModelGroup, ModelGroupItem, ModelGroupParams, ModelGroupResult, ModelListParams, ModelListResult, ModelOfflineInfo, ModelOfflineNotice, ModelPreference, ModelPrice, ModelPriceInfo, ModelProfile, ModelSampleCodeV2, ModelSampleSnippet, ModelServiceEntry, ModelSource, OPENAPI_AUTH_FLAGS, OPEN_API_SOURCE, OpenApiCredential, OutputFormat, PREDICT_CONFIG_API, ParsedFlags, PipelineResult, PipelineStep, PlanContext, PlanResolved, PlanStrategy, PredictConfigEntry, PreferenceMode, ProfileAttribute, ProfileSchemaCreateRequest, ProfileSchemaCreateResponse, PtuCapacity, QpmLimit, QualityPreference, QualityPreferences, RAG_PATHS, REGIONS, RagAddCategoryData, RagAddCategoryResponse, RagAddConnectorResponse, RagAddFileData, RagAddFileResponse, RagAgentConfig, RagAgentDetail, RagAgentGetData, RagAgentGetResponse, RagAgentListData, RagAgentListResponse, RagAgentMutationData, RagAgentMutationResponse, RagAgentRow, RagBatchUpdateTagResponse, RagCategory, RagChunkListData, RagChunkListResponse, RagChunkNode, RagChunkNodeMetadata, RagConnectorInfo, RagConnectorResponse, RagCreateIndexV2Data, RagCreateIndexV2Response, RagDataCenterFile, RagDeleteFileData, RagDeleteFileResponse, RagDescribeFileResponse, RagGetConnectorResponse, RagIndexFileRow, RagIndexFilesData, RagIndexFilesResponse, RagIndexJobDoc, RagIndexJobStatusData, RagIndexJobStatusResponse, RagIndexListData, RagIndexListResponse, RagIndexRow, RagJobCreateData, RagJobCreateResponse, RagListCategoryData, RagListCategoryResponse, RagListFileData, RagListFileResponse, RagMonitorData, RagMonitorResponse, RagMutationResponse, RagOssImportData, RagOssImportFileResult, RagOssImportResponse, RagQpsMonitorData, RagResponse, RagStorageMonitorData, RagUploadLeaseData, RagUploadLeaseParam, RagUploadLeaseResponse, RecommendOptions, RecommendResult, RecommendedModel, Region, RequestOpts, ResolutionSources, ResponsesOutputContent, ResponsesOutputItem, ResponsesRequest, ResponsesResponse, ResponsesStreamEvent, SANDBOX_PATHS, SEMANTIC_TOP_K, SPEECH_BIASING_MODEL, STRATEGIES, SUPPORTED_LANGUAGES, ScaleDeploymentRequest, ScaleDeploymentResponse, ScoredCandidate, ServerSentEvent, Settings, SingleResult, SkillIndexEntry, SkillInstallRecord, SkillLockEntry, SkillLockFile, SkillMeta, SkillStatus, SkillStatusRow, SkillsIndex, SourceFlags, StreamChoice, StreamChunk, TRAINING_MODEL_PRICE_API, TRAINING_TYPES_CLI, TRAINING_TYPE_MAP, TokenEstimate, TrackingEvent, TrackingIdentity, TrainingModelPrice, type TrainingProfile, TrainingTypeCli, UpdateDeploymentRequest, UpdateDeploymentResponse, UsageError, UserProfileResponse, ValidateOpts, ValidationIssue, ValidationResult, ValidationSeverity, ValidationStats, ValidatorSpec, VocabularyEntry, VocabularyEnvelope, VocabularyListItem, VocabularyRequest, activateConfigProfile, agentStudioFilesPath, analyzeIntent, anonymousConsoleCall, appCompletionPath, atomicSwap, bailianMcpPath, bailianMcpSsePath, binaryAssetFileName, binaryInnerFileName, binaryTarFileName, buildAcsCanonicalQuery, buildAsrContextMessages, buildAsrFlashRequest, buildAsyncAsrLanguageFields, buildDocLink, buildSettings, buildSkillLockEntry, buildSources, buildVocabularyRequest, callConsoleGateway, cancelFineTune, channelManifestUrl, chatPath, collectAsrTranscriptionItems, computeDirContentHash, computeSkillStatuses, connectBailianMcpWithFallback, createBailianControlUser, createDeployment, createFineTune, createInstrumentedFetch, createTrackingEvent, createVocabulary, credentialFlagDefs, defaultDeployPlan, defineCommand, deleteConfigProfile, deleteDataset, deleteDeployment, deleteFineTune, deleteVocabulary, describeAuthState, detectBinaryPlatform, detectInstallMethod, detectInstalledAgents, detectModality, detectOutputFormat, downloadSkillAsset, effectiveConsoleGatewayConfig, emptySkillLock, ensureConfigDir, estimateCptTokens, estimateSftDpoTokens, exportCheckpoint, extractAsrFlashText, extractTarBr, extractZipEntryToFile, fanOutSkillToAgents, fetchModelCapability, fetchModelDetail, fetchModelGroups, fetchModelGroupsAll, fetchModelList, fetchModelListAll, fetchPredictConfig, fetchSkillsIndex, fetchTrainingModelPrice, findDeploymentEntry, findModelByName, flattenModelGroups, flushTelemetry, formatErrorJson, formatIssue, formatJson, formatOutput, formatText, generateCLIAccessToken, generateFilename, getAgentTargets, getApiKeyLoginKind, getCliCdnBase, getConfigDir, getConfigPath, getCredentialsPath, getDataset, getDeployment, getFineTune, getFineTuneLogs, getInstallMethod, getModelProfilePreset, getModels, getProfile, getSkillLockPath, getSkillRegistryBaseUrl, getSkillsDir, getUpdateInstallMethod, image2ImagePath, image2videoPath, imageFileToDataUri, imagePath, imageSyncPath, imageText2ImagePath, inferAudioFormatHint, installSkill, installSkillFromBuffer, installSkillWithFanout, isApiKeyCapability, isCompiledBinary, isLegacyImage2ImageModel, isLegacyText2ImageModel, isLocalFile, isSafeEntryName, isSafeSkillName, isSemanticAvailable, isStreamableHttpUnsupported, isSyncMultimodalImageModel, isTrainingTypeCli, isUrlOverrideSseFallbackCandidate, isWanxFunctionImageEditModel, knowledgeChatEndpoint, knowledgeRetrievePath, knowledgeSearchEndpoint, linkSkillToAgents, listBailianControlWorkspaces, listCheckpoints, listDatasets, listDeployableModels, listDeployments, listFineTunes, listIndependentDeployedModels, listSkillDirsOnDisk, listSupportedFormats, listSupportedTrainingTypes, listTrainingTypes, listVocabularies, localSink, makeAuthStore, makeConfigStore, mapApiError, maskToken, maybeSyncWikiData, mcpWebSearchPath, memoryAddPath, memoryListPath, memoryNodePath, memorySearchPath, modelSupportsTrainingType, modelsLimitsPath, modelsPermissionsPath, normalizeApiKeyCapabilities, normalizeConfigName, normalizeModelBaseUrl, parseBooleanValue, parseConfigFile, parseDatasetSchemaFlag, parseInstantVocabulary, parseOptionalBooleanValue, parseSSE, parseSkillNames, parseVocabularyEntries, pickPlanStrategy, pickValidator, preflightBatchSizeGate, profileSchemaPath, queryVocabulary, ragEndpoint, rankModels, readConfigFile, readConfigProfiles, readSkillLock, readTextFromPathOrStdin, recallCandidates, recallSemantic, redactDataUri, refreshAccessToken, registerValidator, releaseAssetUrl, remoteSink, removeSkillDir, request, requestJson, resetBailianControlPolicies4Agent, resolveApiKey, resolveAsrApi, resolveAssetFileName, resolveBooleanFlag, resolveConsole, resolveFileUrl, resolveImageEditApi, resolveImageGenerateApi, resolveImageSizeProfile, resolveModelBaseUrl, resolveModelBaseUrlState, resolveOpenApi, resolveOutputDir, resolvePromptExtendDefault, resolveWatermark, responsesPath, runWithConcurrency, sandboxApiPath, sandboxBaseUrl, sandboxEndpoint, sandboxInstanceActionPath, sandboxInstancePath, sandboxTemplateBuildStatusPath, sandboxTemplatePath, sanitizeSkillName, scaleDeployment, selectApiKeyResolutionSources, signAcsRequest, sourceConfig, speechRecognizePath, speechSynthesizePath, speechVocabularyPath, startModelService, stopModelService, stripUndefined, taskPath, trackCommandExecution, trackingHeaders, trainingTypeMethodVariant, unlinkSkillFromAgents, unwrapResponse, updateDeployment, updateVocabulary, uploadDataset, uploadFile, upsertSkillLockEntry, userProfilePath, validateConfigProfileActivation, validateDataset, validateSkillDir, videoGeneratePath, writeConfigFile, writeInstallMethodSync, writeSkillLock };
+export type { AcsQueryParams, AcsSignConfig, AgentTarget, AnyCommand, ApiErrorBody, ApiKeyCredential, ApiKeyLoginKind, ApiKeyResolutionSourceSelection, AppCompletionRequest, AppCompletionResponse, AppStreamChunk, AsrApiKind, AsrApiRoute, AsrContextMessage, AsrFlashFamily, AuthPersistPatch, AuthRequirement, AuthState, AuthStore, BailianControlAuth, Budget, BuildAsrFlashRequestOpts, Capability, ChatChoice, ChatMessage, ChatMessageContent, ChatRequest, ChatResponse, ChatResponseFormat, ChatTool, ClientOpenApiJsonOpts, ClientOpenApiQueryOpts, ClientRequestOpts, Command, CommandContext, CommandPack, CommandPackApiKeyContext, CommandPackCommand, CommandPackContext, CommandPackCredentials, CommandPackErrorOptions, CommandPackErrors, CommandPackManager, CommandPackMeta, CommandPackMutationResult, CommandPackOutput, CommandPackOutputOptions, CommandPackReport, CommandRisk, CommandRiskLevel, Complexity, ConfigFile, ConfigProfiles, ConfigStore, ConnectBailianMcpOptions, ConsoleCall, ConsoleCredential, ConsoleGatewayRequest, ConsoleGatewayTarget, ConsoleSite, ContextNeed, CreateUserReqDTO, CredentialSource, DashScopeASRRequest, DashScopeASRTaskResult, DashScopeASRTranscriptionItem, DashScopeAsyncResponse, DashScopeImageRequest, DashScopeImageSyncResponse, DashScopeKnowledgeRetrieveRequest, DashScopeKnowledgeRetrieveResponse, DashScopeTTSRequest, DashScopeTTSResponse, DashScopeTTSStreamChunk, DashScopeTaskResponse, DashScopeVideoEditRequest, DashScopeVideoRefRequest, DashScopeVideoRequest, DataModality, DatasetSchema, FanoutOutcome, Feature, FetchImplementation, FlagDef, FlagsDef, GetModelsOptions, HttpDeps, Identity, ImageApiKind, ImageApiRoute, ImageInputStyle, ImageSizeProfile, InstallMethod, InstallMethodIdentity, InstalledSkill, IntentProfile, IntentSegment, KnowledgeChatContentPart, KnowledgeChatMessage, KnowledgeChatRequest, KnowledgeChatStreamChunk, KnowledgeSearchRequest, KnowledgeSearchResponse, Language, LinkResult, LocalizedText, McpConnectedClient, McpTool, McpToolResult, MemoryAddRequest, MemoryAddResponse, MemoryMessage, MemoryNode, MemoryNodeListResponse, MemoryNodeUpdateRequest, MemorySearchRequest, MemorySearchResponse, Modality, ModelCategory, ModelGroup, ModelGroupItem, ModelGroupParams, ModelGroupResult, ModelListParams, ModelListResult, ModelOfflineInfo, ModelOfflineNotice, ModelPreference, ModelPrice, ModelPriceInfo, ModelProfile, ModelSampleCodeV2, ModelSampleSnippet, ModelSource, OpenApiCredential, OutputFormat, ParsedFlags, PipelineResult, PipelineStep, PredictConfigEntry, PreferenceMode, ProfileAttribute, ProfileSchemaCreateRequest, ProfileSchemaCreateResponse, QpmLimit, QualityPreference, RagAddCategoryData, RagAddCategoryResponse, RagAddConnectorResponse, RagAddFileData, RagAddFileResponse, RagAgentConfig, RagAgentDetail, RagAgentGetData, RagAgentGetResponse, RagAgentListData, RagAgentListResponse, RagAgentMutationData, RagAgentMutationResponse, RagAgentRow, RagBatchUpdateTagResponse, RagCategory, RagChunkListData, RagChunkListResponse, RagChunkNode, RagChunkNodeMetadata, RagConnectorInfo, RagConnectorResponse, RagCreateIndexV2Data, RagCreateIndexV2Response, RagDataCenterFile, RagDeleteFileData, RagDeleteFileResponse, RagDescribeFileResponse, RagGetConnectorResponse, RagIndexFileRow, RagIndexFilesData, RagIndexFilesResponse, RagIndexJobDoc, RagIndexJobStatusData, RagIndexJobStatusResponse, RagIndexListData, RagIndexListResponse, RagIndexRow, RagJobCreateData, RagJobCreateResponse, RagListCategoryData, RagListCategoryResponse, RagListFileData, RagListFileResponse, RagMonitorData, RagMonitorResponse, RagMutationResponse, RagOssImportData, RagOssImportFileResult, RagOssImportResponse, RagQpsMonitorData, RagResponse, RagStorageMonitorData, RagUploadLeaseData, RagUploadLeaseParam, RagUploadLeaseResponse, RecommendOptions, RecommendResult, RecommendedModel, Region, RequestOpts, ResolutionSources, ResponsesOutputContent, ResponsesOutputItem, ResponsesRequest, ResponsesResponse, ResponsesStreamEvent, ScoredCandidate, SecurityAlert, SecurityAlertList, SecurityOverview, SecurityRiskLevel, SecurityScanStat, SecurityToggle, ServerSentEvent, Settings, SingleResult, SkillIndexEntry, SkillInstallRecord, SkillLockEntry, SkillLockFile, SkillMeta, SkillStatus, SkillStatusRow, SkillsIndex, SourceFlags, StreamChoice, StreamChunk, TrackingEvent, TrackingIdentity, TrainingProfile, UserProfileResponse, ValidateOpts, ValidationIssue, ValidationResult, ValidationSeverity, ValidationStats, ValidatorSpec, VocabularyEntry, VocabularyEnvelope, VocabularyListItem, VocabularyRequest };