@xpert-ai/plugin-sdk 3.15.13 → 3.15.15

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # @xpert-ai/plugin-sdk
 
+## 3.15.15
+
+### Patch Changes
+
+- a26a776: Add opt-in multi-auth connector strategies, provider-neutral runtime credentials, and legacy credential mapping.
+
+  Integration-enabled plugins can also opt into inherited tenant and organization configuration reads for connector-owned OAuth apps.
+
+  Existing `ConnectorDefinition`, `ConnectorStrategy`, `ConnectorRuntimeCredential`, `ConnectorRuntimeApi.getConnector()`, and legacy registry accessors remain available unchanged. New providers can implement `ConnectorMultiAuthStrategy`, while runtime consumers can adopt `getConnectorCredential()` when the host exposes it.
+
+- 8a0eba3: Calculate membership points proportionally, constrain tokens-per-point settings to safe presets, expose non-duplicated point usage by runtime organization in Copilot usage summaries, and support tiered model pricing.
+- e3d3c26: Add a machine-readable stale steer callback error and close the execution-completion race before channel follow-ups are persisted.
+- Updated dependencies [8a0eba3]
+- Updated dependencies [5d4a308]
+  - @xpert-ai/contracts@3.15.15
+
+## 3.15.14
+
+### Patch Changes
+
+- Updated dependencies [8a46f00]
+  - @xpert-ai/contracts@3.15.14
+
 ## 3.15.13
 
 ### Patch Changes

package/connector.cjs.default.js

@@ -0,0 +1 @@
+exports._default = require('./connector.cjs.js').default;

package/connector.cjs.js

@@ -0,0 +1,116 @@
+'use strict';
+
+function getConnectorAuthMethods(definition) {
+    var _definition_legacyAuthMethodId;
+    if ('authMethods' in definition) {
+        return definition.authMethods;
+    }
+    return [
+        {
+            id: ((_definition_legacyAuthMethodId = definition.legacyAuthMethodId) == null ? void 0 : _definition_legacyAuthMethodId.trim()) || 'oauth2',
+            type: 'oauth2',
+            label: {
+                en_US: 'OAuth 2.0',
+                zh_Hans: 'OAuth 2.0'
+            },
+            appCredentials: definition.appCredentials
+        }
+    ];
+}
+function assertConnectorDefinition(definition) {
+    if (!isObjectValue(definition)) {
+        throw new Error('Connector strategy must expose a valid connector definition');
+    }
+    const providerValue = Reflect.get(definition, 'provider');
+    const provider = typeof providerValue === 'string' ? providerValue.trim() : '';
+    if (!provider) {
+        throw new Error('Connector definition must declare a provider');
+    }
+    const label = Reflect.get(definition, 'label');
+    if (!isRuntimeI18nText(label)) {
+        throw new Error(`Connector '${provider}' must declare a label`);
+    }
+    const auth = Reflect.get(definition, 'auth');
+    const authMethods = Reflect.get(definition, 'authMethods');
+    const resolvedMethods = [];
+    const ids = new Set();
+    if (authMethods !== undefined) {
+        if (!Array.isArray(authMethods) || !authMethods.length) {
+            throw new Error(`Connector '${provider}' must declare at least one authentication method`);
+        }
+        for (const method of authMethods){
+            assertConnectorAuthMethod(method, provider);
+            const id = method.id.trim();
+            if (ids.has(id)) {
+                throw new Error(`Connector '${provider}' has duplicate authentication method id '${id}'`);
+            }
+            ids.add(id);
+            resolvedMethods.push({
+                id,
+                type: method.type
+            });
+        }
+        if (auth !== undefined && !isConnectorOAuthConfig(auth)) {
+            throw new Error(`Connector '${provider}' has invalid legacy OAuth metadata`);
+        }
+    } else {
+        if (!isConnectorOAuthConfig(auth)) {
+            throw new Error(`Connector '${provider}' must declare legacy OAuth configuration or authentication methods`);
+        }
+        const legacyMethodValue = Reflect.get(definition, 'legacyAuthMethodId');
+        const legacyMethodId = typeof legacyMethodValue === 'string' && legacyMethodValue.trim() ? legacyMethodValue.trim() : 'oauth2';
+        resolvedMethods.push({
+            id: legacyMethodId,
+            type: 'oauth2'
+        });
+    }
+    const legacyAuthMethodValue = Reflect.get(definition, 'legacyAuthMethodId');
+    if (legacyAuthMethodValue !== undefined && (typeof legacyAuthMethodValue !== 'string' || !legacyAuthMethodValue.trim())) {
+        throw new Error(`Connector '${provider}' has an invalid legacy authentication method id`);
+    }
+    if (typeof legacyAuthMethodValue === 'string') {
+        const legacyAuthMethodId = legacyAuthMethodValue.trim();
+        const legacyMethod = resolvedMethods.find((method)=>method.id === legacyAuthMethodId);
+        if (!legacyMethod) {
+            throw new Error(`Connector '${provider}' maps legacy credentials to unknown authentication method '${legacyAuthMethodId}'`);
+        }
+        if (legacyMethod.type !== 'oauth2') {
+            throw new Error(`Connector '${provider}' must map legacy credentials to an OAuth authentication method`);
+        }
+    }
+}
+function assertConnectorAuthMethod(method, provider) {
+    if (!isObjectValue(method)) {
+        throw new Error(`Connector '${provider}' has an invalid authentication method`);
+    }
+    const idValue = Reflect.get(method, 'id');
+    if (typeof idValue !== 'string' || !idValue.trim()) {
+        throw new Error(`Connector '${provider}' has an authentication method without an id`);
+    }
+    const label = Reflect.get(method, 'label');
+    if (!isRuntimeI18nText(label)) {
+        throw new Error(`Connector '${provider}' authentication method '${idValue.trim()}' must declare a label`);
+    }
+    const type = Reflect.get(method, 'type');
+    if (type !== 'oauth2' && type !== 'api_key') {
+        throw new Error(`Connector '${provider}' has unsupported authentication method type '${String(type)}'`);
+    }
+    if (type === 'api_key' && !isObjectValue(Reflect.get(method, 'credentials'))) {
+        throw new Error(`Connector '${provider}' API key method '${idValue.trim()}' must declare credentials`);
+    }
+}
+function isConnectorOAuthConfig(value) {
+    return isObjectValue(value) && Reflect.get(value, 'type') === 'oauth2';
+}
+function isRuntimeI18nText(value) {
+    if (typeof value === 'string') {
+        return !!value.trim();
+    }
+    return isObjectValue(value) && typeof Reflect.get(value, 'en_US') === 'string';
+}
+function isObjectValue(value) {
+    return typeof value === 'object' && value !== null;
+}
+
+exports.assertConnectorDefinition = assertConnectorDefinition;
+exports.getConnectorAuthMethods = getConnectorAuthMethods;

package/connector.cjs.mjs

@@ -0,0 +1,2 @@
+export * from './connector.cjs.js';
+export { _default as default } from './connector.cjs.default.js';

package/connector.d.ts

@@ -0,0 +1 @@
+export * from "./src/connector";

package/connector.esm.js

@@ -0,0 +1,113 @@
+function getConnectorAuthMethods(definition) {
+    var _definition_legacyAuthMethodId;
+    if ('authMethods' in definition) {
+        return definition.authMethods;
+    }
+    return [
+        {
+            id: ((_definition_legacyAuthMethodId = definition.legacyAuthMethodId) == null ? void 0 : _definition_legacyAuthMethodId.trim()) || 'oauth2',
+            type: 'oauth2',
+            label: {
+                en_US: 'OAuth 2.0',
+                zh_Hans: 'OAuth 2.0'
+            },
+            appCredentials: definition.appCredentials
+        }
+    ];
+}
+function assertConnectorDefinition(definition) {
+    if (!isObjectValue(definition)) {
+        throw new Error('Connector strategy must expose a valid connector definition');
+    }
+    const providerValue = Reflect.get(definition, 'provider');
+    const provider = typeof providerValue === 'string' ? providerValue.trim() : '';
+    if (!provider) {
+        throw new Error('Connector definition must declare a provider');
+    }
+    const label = Reflect.get(definition, 'label');
+    if (!isRuntimeI18nText(label)) {
+        throw new Error(`Connector '${provider}' must declare a label`);
+    }
+    const auth = Reflect.get(definition, 'auth');
+    const authMethods = Reflect.get(definition, 'authMethods');
+    const resolvedMethods = [];
+    const ids = new Set();
+    if (authMethods !== undefined) {
+        if (!Array.isArray(authMethods) || !authMethods.length) {
+            throw new Error(`Connector '${provider}' must declare at least one authentication method`);
+        }
+        for (const method of authMethods){
+            assertConnectorAuthMethod(method, provider);
+            const id = method.id.trim();
+            if (ids.has(id)) {
+                throw new Error(`Connector '${provider}' has duplicate authentication method id '${id}'`);
+            }
+            ids.add(id);
+            resolvedMethods.push({
+                id,
+                type: method.type
+            });
+        }
+        if (auth !== undefined && !isConnectorOAuthConfig(auth)) {
+            throw new Error(`Connector '${provider}' has invalid legacy OAuth metadata`);
+        }
+    } else {
+        if (!isConnectorOAuthConfig(auth)) {
+            throw new Error(`Connector '${provider}' must declare legacy OAuth configuration or authentication methods`);
+        }
+        const legacyMethodValue = Reflect.get(definition, 'legacyAuthMethodId');
+        const legacyMethodId = typeof legacyMethodValue === 'string' && legacyMethodValue.trim() ? legacyMethodValue.trim() : 'oauth2';
+        resolvedMethods.push({
+            id: legacyMethodId,
+            type: 'oauth2'
+        });
+    }
+    const legacyAuthMethodValue = Reflect.get(definition, 'legacyAuthMethodId');
+    if (legacyAuthMethodValue !== undefined && (typeof legacyAuthMethodValue !== 'string' || !legacyAuthMethodValue.trim())) {
+        throw new Error(`Connector '${provider}' has an invalid legacy authentication method id`);
+    }
+    if (typeof legacyAuthMethodValue === 'string') {
+        const legacyAuthMethodId = legacyAuthMethodValue.trim();
+        const legacyMethod = resolvedMethods.find((method)=>method.id === legacyAuthMethodId);
+        if (!legacyMethod) {
+            throw new Error(`Connector '${provider}' maps legacy credentials to unknown authentication method '${legacyAuthMethodId}'`);
+        }
+        if (legacyMethod.type !== 'oauth2') {
+            throw new Error(`Connector '${provider}' must map legacy credentials to an OAuth authentication method`);
+        }
+    }
+}
+function assertConnectorAuthMethod(method, provider) {
+    if (!isObjectValue(method)) {
+        throw new Error(`Connector '${provider}' has an invalid authentication method`);
+    }
+    const idValue = Reflect.get(method, 'id');
+    if (typeof idValue !== 'string' || !idValue.trim()) {
+        throw new Error(`Connector '${provider}' has an authentication method without an id`);
+    }
+    const label = Reflect.get(method, 'label');
+    if (!isRuntimeI18nText(label)) {
+        throw new Error(`Connector '${provider}' authentication method '${idValue.trim()}' must declare a label`);
+    }
+    const type = Reflect.get(method, 'type');
+    if (type !== 'oauth2' && type !== 'api_key') {
+        throw new Error(`Connector '${provider}' has unsupported authentication method type '${String(type)}'`);
+    }
+    if (type === 'api_key' && !isObjectValue(Reflect.get(method, 'credentials'))) {
+        throw new Error(`Connector '${provider}' API key method '${idValue.trim()}' must declare credentials`);
+    }
+}
+function isConnectorOAuthConfig(value) {
+    return isObjectValue(value) && Reflect.get(value, 'type') === 'oauth2';
+}
+function isRuntimeI18nText(value) {
+    if (typeof value === 'string') {
+        return !!value.trim();
+    }
+    return isObjectValue(value) && typeof Reflect.get(value, 'en_US') === 'string';
+}
+function isObjectValue(value) {
+    return typeof value === 'object' && value !== null;
+}
+
+export { assertConnectorDefinition, getConnectorAuthMethods };

package/index.cjs.js

@@ -32,6 +32,7 @@ var messages = require('@langchain/core/messages');
 var env = require('@langchain/core/utils/env');
 require('js-tiktoken');
 var base = require('@langchain/core/language_models/base');
+var connector = require('./connector.cjs.js');
 
 function _interopNamespaceDefault(e) {
     var n = Object.create(null);
@@ -2079,12 +2080,34 @@ function mergeCredentials(credentials, modelProperties) {
     return collaborationClient._extends({}, credentials != null ? credentials : {}, modelProperties != null ? modelProperties : {});
 }
 
+function calculateModelPrice(pricing, priceType, tokens, inputTokens = tokens) {
+    var _pricing_tiered_pricing;
+    const tier = (_pricing_tiered_pricing = pricing.tiered_pricing) == null ? void 0 : _pricing_tiered_pricing.find(({ max_tokens })=>inputTokens <= Number(max_tokens));
+    var _tier_input, _tier_output;
+    const configuredUnitPrice = priceType === contracts.PriceType.INPUT ? (_tier_input = tier == null ? void 0 : tier.input) != null ? _tier_input : pricing.input : (_tier_output = tier == null ? void 0 : tier.output) != null ? _tier_output : pricing.output;
+    const unitPrice = Number(configuredUnitPrice);
+    if (!Number.isFinite(unitPrice)) {
+        return {
+            unitPrice: 0,
+            unit: 0,
+            totalAmount: 0,
+            currency: 'USD'
+        };
+    }
+    return {
+        unitPrice,
+        unit: Number(pricing.unit),
+        totalAmount: Number((tokens * unitPrice * Number(pricing.unit)).toFixed(7)),
+        currency: pricing.currency
+    };
+}
+
 var AIModel_1;
 let AIModel = AIModel_1 = class AIModel {
     getChatModel(copilotModel, options) {
         throw new Error(`Unsupport chat model!`);
     }
-    getPrice(model, credentials, priceType, tokens) {
+    getPrice(model, credentials, priceType, tokens, inputTokens = tokens) {
         const modelSchema = this.getModelSchema(model, credentials);
         if (!modelSchema || !modelSchema.pricing) {
             return {
@@ -2094,23 +2117,7 @@ let AIModel = AIModel_1 = class AIModel {
                 currency: 'USD'
             };
         }
-        const { pricing } = modelSchema;
-        const unitPrice = priceType === contracts.PriceType.INPUT ? pricing.input : pricing.output;
-        if (unitPrice === undefined) {
-            return {
-                unitPrice: 0,
-                unit: 0,
-                totalAmount: 0,
-                currency: 'USD'
-            };
-        }
-        const totalAmount = Number((tokens * unitPrice * pricing.unit).toFixed(7));
-        return {
-            unitPrice,
-            unit: pricing.unit,
-            totalAmount,
-            currency: pricing.currency
-        };
+        return calculateModelPrice(modelSchema.pricing, priceType, tokens, inputTokens);
     }
     getModelPath() {
         const modelType = this.modelType.toLowerCase();
@@ -2366,10 +2373,9 @@ class LargeLanguageModel extends AIModel {
         return CommonParameterRules;
     }
     calcResponseUsage(model, credentials, promptTokens, completionTokens) {
-        // Get prompt price information
-        const promptPriceInfo = this.getPrice(model, credentials, contracts.PriceType.INPUT, promptTokens);
-        // Get completed price information
-        const completionPriceInfo = this.getPrice(model, credentials, contracts.PriceType.OUTPUT, completionTokens);
+        const promptPriceInfo = this.getPrice(model, credentials, contracts.PriceType.INPUT, promptTokens, promptTokens);
+        const completionPriceInfo = this.getPrice(model, credentials, contracts.PriceType.OUTPUT, completionTokens, promptTokens);
+        const totalPrice = Number((promptPriceInfo.totalAmount + completionPriceInfo.totalAmount).toFixed(7));
         // Conversion usage
         const usage = {
             promptTokens: promptTokens,
@@ -2381,7 +2387,7 @@ class LargeLanguageModel extends AIModel {
             completionPriceUnit: completionPriceInfo.unit,
             completionPrice: completionPriceInfo.totalAmount,
             totalTokens: promptTokens + completionTokens,
-            totalPrice: promptPriceInfo.totalAmount + completionPriceInfo.totalAmount,
+            totalPrice,
             currency: promptPriceInfo.currency,
             latency: performance.now() - this.startedAt
         };
@@ -2557,8 +2563,8 @@ function calcTokenUsage(output) {
             const message = item.message;
             if (message.usage_metadata) {
                 tokenUsage.promptTokens += message.usage_metadata.input_tokens;
-                tokenUsage.completionTokens = message.usage_metadata.output_tokens;
-                tokenUsage.totalTokens = message.usage_metadata.total_tokens;
+                tokenUsage.completionTokens += message.usage_metadata.output_tokens;
+                tokenUsage.totalTokens += message.usage_metadata.total_tokens;
             }
         });
     });
@@ -2935,6 +2941,7 @@ function assertSegment(input, name) {
 }
 
 const AGENT_CHAT_DISPATCH_MESSAGE_TYPE = defineAgentMessageType('chat_dispatch', 1);
+const AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING = 'steer_target_not_running';
 
 /**
  * Handoff Processor meta key。
@@ -3172,6 +3179,40 @@ const CONNECTOR_STRATEGY = 'CONNECTOR_STRATEGY';
 const ConnectorStrategyKey = (provider)=>common.applyDecorators(common.SetMetadata(CONNECTOR_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, CONNECTOR_STRATEGY));
 
 exports.ConnectorStrategyRegistry = class ConnectorStrategyRegistry extends BaseStrategyRegistry {
+    upsert(instance) {
+        const target = resolveStrategyMetadataTarget(instance);
+        if (!target) {
+            return;
+        }
+        const provider = this.reflector.get(CONNECTOR_STRATEGY, target);
+        if (provider) {
+            const definition = readConnectorDefinition(instance, target);
+            if (definition === undefined) {
+                throw new Error(`Connector strategy '${provider}' must expose a connector definition`);
+            }
+            connector.assertConnectorDefinition(definition);
+            if (definition.provider !== provider) {
+                throw new Error(`Connector strategy '${provider}' definition declares provider '${definition.provider}'`);
+            }
+        }
+        super.upsert(instance);
+    }
+    get(type, organizationId) {
+        const strategy = super.get(type, organizationId);
+        if (!isLegacyConnectorStrategy(strategy)) {
+            throw new Error(`Connector strategy '${type}' does not implement the legacy OAuth contract`);
+        }
+        return strategy;
+    }
+    list(organizationId) {
+        return super.list(organizationId).filter(isLegacyConnectorStrategy);
+    }
+    getRuntime(type, organizationId) {
+        return super.get(type, organizationId);
+    }
+    listRuntime(organizationId) {
+        return super.list(organizationId);
+    }
     constructor(discoveryService, reflector){
         super(CONNECTOR_STRATEGY, discoveryService, reflector);
     }
@@ -3183,6 +3224,19 @@ exports.ConnectorStrategyRegistry = __decorate([
         core.Reflector
     ])
 ], exports.ConnectorStrategyRegistry);
+function readConnectorDefinition(instance, target) {
+    if (isStrategyInstance(instance)) {
+        const definition = Reflect.get(instance, 'definition');
+        if (definition !== undefined) {
+            return definition;
+        }
+    }
+    return Reflect.get(target, 'definition');
+}
+function isLegacyConnectorStrategy(strategy) {
+    var _strategy_definition_auth;
+    return 'auth' in strategy.definition && ((_strategy_definition_auth = strategy.definition.auth) == null ? void 0 : _strategy_definition_auth.type) === 'oauth2' && typeof strategy.buildAuthorizationUrl === 'function' && typeof strategy.exchangeOAuthCode === 'function';
+}
 
 const SANDBOX_SHELL_TIMEOUT_LIMITS_SEC = {
     min: 1,
@@ -4844,7 +4898,10 @@ Object.defineProperty(exports, "ASSISTANT_CONTEXT_SET_COMMAND", {
     enumerable: true,
     get: function () { return contracts.ASSISTANT_CONTEXT_SET_COMMAND; }
 });
+exports.assertConnectorDefinition = connector.assertConnectorDefinition;
+exports.getConnectorAuthMethods = connector.getConnectorAuthMethods;
 exports.ACCOUNT_BINDING_PERMISSION_SERVICE_TOKEN = ACCOUNT_BINDING_PERMISSION_SERVICE_TOKEN;
+exports.AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING = AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING;
 exports.AGENT_CHAT_DISPATCH_MESSAGE_TYPE = AGENT_CHAT_DISPATCH_MESSAGE_TYPE;
 exports.AGENT_MIDDLEWARE_STRATEGY = AGENT_MIDDLEWARE_STRATEGY;
 exports.AIModelProviderNotFoundException = AIModelProviderNotFoundException;
@@ -4997,6 +5054,7 @@ exports.als = als;
 exports.appendSandboxMessage = appendSandboxMessage;
 exports.buildSandboxTimeoutMessage = buildSandboxTimeoutMessage;
 exports.calcTokenUsage = calcTokenUsage;
+exports.calculateModelPrice = calculateModelPrice;
 exports.chunkText = chunkText;
 exports.countTokensSafe = countTokensSafe;
 exports.createI18nInstance = createI18nInstance;

package/index.esm.js

@@ -35,6 +35,8 @@ import { AIMessage } from '@langchain/core/messages';
 import { getEnvironmentVariable } from '@langchain/core/utils/env';
 import 'js-tiktoken';
 import { getModelContextSize as getModelContextSize$1 } from '@langchain/core/language_models/base';
+import { assertConnectorDefinition } from './connector.esm.js';
+export { getConnectorAuthMethods } from './connector.esm.js';
 
 /**
  * Metadata keys used in plugins for defining various aspects like entities, subscribers, and configurations.
@@ -2060,12 +2062,34 @@ function mergeCredentials(credentials, modelProperties) {
     return _extends({}, credentials != null ? credentials : {}, modelProperties != null ? modelProperties : {});
 }
 
+function calculateModelPrice(pricing, priceType, tokens, inputTokens = tokens) {
+    var _pricing_tiered_pricing;
+    const tier = (_pricing_tiered_pricing = pricing.tiered_pricing) == null ? void 0 : _pricing_tiered_pricing.find(({ max_tokens })=>inputTokens <= Number(max_tokens));
+    var _tier_input, _tier_output;
+    const configuredUnitPrice = priceType === PriceType.INPUT ? (_tier_input = tier == null ? void 0 : tier.input) != null ? _tier_input : pricing.input : (_tier_output = tier == null ? void 0 : tier.output) != null ? _tier_output : pricing.output;
+    const unitPrice = Number(configuredUnitPrice);
+    if (!Number.isFinite(unitPrice)) {
+        return {
+            unitPrice: 0,
+            unit: 0,
+            totalAmount: 0,
+            currency: 'USD'
+        };
+    }
+    return {
+        unitPrice,
+        unit: Number(pricing.unit),
+        totalAmount: Number((tokens * unitPrice * Number(pricing.unit)).toFixed(7)),
+        currency: pricing.currency
+    };
+}
+
 var AIModel_1;
 let AIModel = AIModel_1 = class AIModel {
     getChatModel(copilotModel, options) {
         throw new Error(`Unsupport chat model!`);
     }
-    getPrice(model, credentials, priceType, tokens) {
+    getPrice(model, credentials, priceType, tokens, inputTokens = tokens) {
         const modelSchema = this.getModelSchema(model, credentials);
         if (!modelSchema || !modelSchema.pricing) {
             return {
@@ -2075,23 +2099,7 @@ let AIModel = AIModel_1 = class AIModel {
                 currency: 'USD'
             };
         }
-        const { pricing } = modelSchema;
-        const unitPrice = priceType === PriceType.INPUT ? pricing.input : pricing.output;
-        if (unitPrice === undefined) {
-            return {
-                unitPrice: 0,
-                unit: 0,
-                totalAmount: 0,
-                currency: 'USD'
-            };
-        }
-        const totalAmount = Number((tokens * unitPrice * pricing.unit).toFixed(7));
-        return {
-            unitPrice,
-            unit: pricing.unit,
-            totalAmount,
-            currency: pricing.currency
-        };
+        return calculateModelPrice(modelSchema.pricing, priceType, tokens, inputTokens);
     }
     getModelPath() {
         const modelType = this.modelType.toLowerCase();
@@ -2347,10 +2355,9 @@ class LargeLanguageModel extends AIModel {
         return CommonParameterRules;
     }
     calcResponseUsage(model, credentials, promptTokens, completionTokens) {
-        // Get prompt price information
-        const promptPriceInfo = this.getPrice(model, credentials, PriceType.INPUT, promptTokens);
-        // Get completed price information
-        const completionPriceInfo = this.getPrice(model, credentials, PriceType.OUTPUT, completionTokens);
+        const promptPriceInfo = this.getPrice(model, credentials, PriceType.INPUT, promptTokens, promptTokens);
+        const completionPriceInfo = this.getPrice(model, credentials, PriceType.OUTPUT, completionTokens, promptTokens);
+        const totalPrice = Number((promptPriceInfo.totalAmount + completionPriceInfo.totalAmount).toFixed(7));
         // Conversion usage
         const usage = {
             promptTokens: promptTokens,
@@ -2362,7 +2369,7 @@ class LargeLanguageModel extends AIModel {
             completionPriceUnit: completionPriceInfo.unit,
             completionPrice: completionPriceInfo.totalAmount,
             totalTokens: promptTokens + completionTokens,
-            totalPrice: promptPriceInfo.totalAmount + completionPriceInfo.totalAmount,
+            totalPrice,
             currency: promptPriceInfo.currency,
             latency: performance.now() - this.startedAt
         };
@@ -2538,8 +2545,8 @@ function calcTokenUsage(output) {
             const message = item.message;
             if (message.usage_metadata) {
                 tokenUsage.promptTokens += message.usage_metadata.input_tokens;
-                tokenUsage.completionTokens = message.usage_metadata.output_tokens;
-                tokenUsage.totalTokens = message.usage_metadata.total_tokens;
+                tokenUsage.completionTokens += message.usage_metadata.output_tokens;
+                tokenUsage.totalTokens += message.usage_metadata.total_tokens;
             }
         });
     });
@@ -2916,6 +2923,7 @@ function assertSegment(input, name) {
 }
 
 const AGENT_CHAT_DISPATCH_MESSAGE_TYPE = defineAgentMessageType('chat_dispatch', 1);
+const AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING = 'steer_target_not_running';
 
 /**
  * Handoff Processor meta key。
@@ -3153,6 +3161,40 @@ const CONNECTOR_STRATEGY = 'CONNECTOR_STRATEGY';
 const ConnectorStrategyKey = (provider)=>applyDecorators(SetMetadata(CONNECTOR_STRATEGY, provider), SetMetadata(STRATEGY_META_KEY, CONNECTOR_STRATEGY));
 
 let ConnectorStrategyRegistry = class ConnectorStrategyRegistry extends BaseStrategyRegistry {
+    upsert(instance) {
+        const target = resolveStrategyMetadataTarget(instance);
+        if (!target) {
+            return;
+        }
+        const provider = this.reflector.get(CONNECTOR_STRATEGY, target);
+        if (provider) {
+            const definition = readConnectorDefinition(instance, target);
+            if (definition === undefined) {
+                throw new Error(`Connector strategy '${provider}' must expose a connector definition`);
+            }
+            assertConnectorDefinition(definition);
+            if (definition.provider !== provider) {
+                throw new Error(`Connector strategy '${provider}' definition declares provider '${definition.provider}'`);
+            }
+        }
+        super.upsert(instance);
+    }
+    get(type, organizationId) {
+        const strategy = super.get(type, organizationId);
+        if (!isLegacyConnectorStrategy(strategy)) {
+            throw new Error(`Connector strategy '${type}' does not implement the legacy OAuth contract`);
+        }
+        return strategy;
+    }
+    list(organizationId) {
+        return super.list(organizationId).filter(isLegacyConnectorStrategy);
+    }
+    getRuntime(type, organizationId) {
+        return super.get(type, organizationId);
+    }
+    listRuntime(organizationId) {
+        return super.list(organizationId);
+    }
     constructor(discoveryService, reflector){
         super(CONNECTOR_STRATEGY, discoveryService, reflector);
     }
@@ -3164,6 +3206,19 @@ ConnectorStrategyRegistry = __decorate([
         Reflector
     ])
 ], ConnectorStrategyRegistry);
+function readConnectorDefinition(instance, target) {
+    if (isStrategyInstance(instance)) {
+        const definition = Reflect.get(instance, 'definition');
+        if (definition !== undefined) {
+            return definition;
+        }
+    }
+    return Reflect.get(target, 'definition');
+}
+function isLegacyConnectorStrategy(strategy) {
+    var _strategy_definition_auth;
+    return 'auth' in strategy.definition && ((_strategy_definition_auth = strategy.definition.auth) == null ? void 0 : _strategy_definition_auth.type) === 'oauth2' && typeof strategy.buildAuthorizationUrl === 'function' && typeof strategy.exchangeOAuthCode === 'function';
+}
 
 const SANDBOX_SHELL_TIMEOUT_LIMITS_SEC = {
     min: 1,
@@ -4811,4 +4866,4 @@ CollaborationDocumentProviderRegistry = __decorate([
     ])
 ], CollaborationDocumentProviderRegistry);
 
-export { ACCOUNT_BINDING_PERMISSION_SERVICE_TOKEN, AGENT_CHAT_DISPATCH_MESSAGE_TYPE, AGENT_MIDDLEWARE_STRATEGY, AIModelProviderNotFoundException, AIModelProviderRegistry, AIModelProviderStrategy, AI_MODEL_PROVIDER, ANALYTICS_PERMISSION_SERVICE_TOKEN, AdapterDataSourceStrategy, AgentMiddlewareRegistry, AgentMiddlewareStrategy, AiModelNotFoundException, ArtifactsRuntimeCapability, AssistantTaskRuntimeCapability, BOUND_IDENTITY_LOGIN_PERMISSION_SERVICE_TOKEN, BUILTIN_GLOBAL_SCOPE, BaseHTTPQueryRunner, BaseQueryRunner, BaseSQLQueryRunner, BaseSandbox, BaseStrategyRegistry, BaseTool, BaseToolset, BuiltinToolset, CHAT_CHANNEL, CHAT_CHANNEL_TEXT_LIMITS, COLLABORATION_DOCUMENT_PROVIDER, CONNECTION_COMMAND_ROUTER_TOKEN, CONNECTOR_STRATEGY, CancelConversationCommand, ChatChannel, ChatChannelRegistry, ChatOAICompatReasoningModel, CollaborationDocumentProvider, CollaborationDocumentProviderRegistry, CollaborationRuntimeCapability, CommonParameterRules, ConnectorRuntimeCapability, ConnectorStrategyKey, ConnectorStrategyRegistry, CreateModelClientCommand, CredentialsValidateFailedError, DATASOURCE_STRATEGY, DBCreateTableMode, DBProtocolEnum, DBSyntaxEnum, DBTableAction, DBTableDataAction, DEFAULT_EXECUTION_CONFIG, DEFAULT_SANDBOX_EXECUTION_MAX_OUTPUT_BYTES, DEFAULT_SANDBOX_FILE_OPERATION_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_SEC, DEFAULT_SANDBOX_FILE_SEARCH_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_SEC, DEFAULT_SANDBOX_SHELL_EXECUTION_OPTIONS, DEFAULT_SANDBOX_SHELL_TIMEOUT_MS, DEFAULT_SANDBOX_SHELL_TIMEOUT_SEC, DOCUMENT_SOURCE_STRATEGY, DOCUMENT_TRANSFORMER_STRATEGY, DataSourceStrategy, DataSourceStrategyRegistry, DefaultRuntimeCapabilityRegistry as DefaultAgentMiddlewareRuntimeCapabilityRegistry, DefaultRuntimeCapabilityRegistry, DocumentSourceRegistry, DocumentSourceStrategy, DocumentTransformerRegistry, DocumentTransformerStrategy, FILE_STORAGE_PROVIDER, FILE_UPLOAD_TARGET_STRATEGY, FileRuntimeCapability, FileStorageProvider, FileStorageProviderRegistry, FileUploadTargetRegistry, FileUploadTargetStrategy, GLOBAL_ORGANIZATION_SCOPE, HANDOFF_PERMISSION_SERVICE_TOKEN, HANDOFF_PROCESSOR_STRATEGY, HANDOFF_QUEUE_SERVICE_TOKEN, HandoffProcessorRegistry, HandoffProcessorStrategy, IMAGE_UNDERSTANDING_STRATEGY, INTEGRATION_PERMISSION_SERVICE_TOKEN, INTEGRATION_STRATEGY, ImageUnderstandingRegistry, ImageUnderstandingStrategy, IntegrationStrategyKey, IntegrationStrategyRegistry, JUMP_TO_TARGETS, JsonSchemaValidator, KNOWLEDGE_STRATEGY, KnowledgeStrategyKey, KnowledgeStrategyRegistry, KnowledgebaseDocumentsRuntimeCapability, KnowledgebaseRuntimeCapability, LLMUsage, LargeLanguageModel, MANAGED_CONNECTION_REGISTRY_TOKEN, MANAGED_QUEUE_HANDLER_REGISTRY_TOKEN, MANAGED_QUEUE_SERVICE_TOKEN, ModelProvider, ORGANIZATION_METADATA_KEY, OpenAICompatibleReranker, PERMISSION_OPERATION_METADATA_KEY, PLUGIN_CONFIG_RESOLVER_TOKEN, PLUGIN_JOB_PROCESSOR_METADATA, PLUGIN_METADATA, PLUGIN_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_SERVICE_TOKEN, PROVIDE_AI_MODEL_LLM, PROVIDE_AI_MODEL_MODERATION, PROVIDE_AI_MODEL_RERANK, PROVIDE_AI_MODEL_SPEECH2TEXT, PROVIDE_AI_MODEL_TEXT_EMBEDDING, PROVIDE_AI_MODEL_TTS, PluginJobProcessor, PluginWebhookAuth, PluginWebhookAuthGuard, RETRIEVER_STRATEGY, RequestContext, RequestContextMiddleware, RequirePermissionOperation, RerankModel, RetrieverRegistry, RetrieverStrategy, SANDBOX_JOB_ERROR_CODES, SANDBOX_PROVIDER, SANDBOX_RUNTIME_PROVIDER, SANDBOX_SHELL_TIMEOUT_LIMITS_SEC, SANDBOX_WORKSPACE_MAPPER, SKILL_SOURCE_PROVIDER, SPEECH_TO_TEXT_PERMISSION_SERVICE_TOKEN, SPEECH_TO_TEXT_SERVICE_TOKEN, SSOProviderRegistry, SSOProviderStrategyKey, SSO_BINDING_PERMISSION_SERVICE_TOKEN, SSO_PROVIDER, STRATEGY_META_KEY, SYSTEM_GLOBAL_SCOPE, SandboxJobRuntimeError, SandboxJobsRuntimeCapability, SandboxProviderRegistry, SandboxProviderStrategy, SandboxRuntimeProviderRegistry, SandboxRuntimeProviderStrategy, SandboxWorkspaceMapperRegistry, SandboxWorkspaceMapperStrategy, SkillSourceProviderRegistry, SkillSourceProviderStrategy, Speech2TextChatModel, SpeechToTextModel, StrategyBus, TENANT_GLOBAL_SCOPE_PREFIX, TENANT_GLOBAL_SCOPE_SUFFIX, TEXT_SPLITTER_STRATEGY, TOOLSET_STRATEGY, TextEmbeddingModelManager, TextSplitterRegistry, TextSplitterStrategy, TextToSpeechModel, ToolsetRegistry, ToolsetStrategy, USER_PERMISSION_SERVICE_TOKEN, VECTOR_STORE_STRATEGY, VIEW_EXTENSION_CACHE_SERVICE_TOKEN, VIEW_EXTENSION_PROVIDER, VectorStoreRegistry, VectorStoreStrategy, ViewExtensionProvider, ViewExtensionProviderRegistry, WORKFLOW_NODE_STRATEGY, WORKFLOW_TRIGGER_STRATEGY, WORKSPACE_FILES_SOURCE, WorkflowNodeRegistry, WorkflowNodeStrategy, WorkflowTriggerRegistry, WorkflowTriggerStrategy, WorkspaceFilesRuntimeCapability, WrapWorkflowNodeExecutionCommand, XPERT_RUNTIME_CAPABILITIES_TOKEN, XpFileSystem, XpertServerPlugin, als, appendSandboxMessage, buildSandboxTimeoutMessage, calcTokenUsage, chunkText, countTokensSafe, createI18nInstance, createPluginLogger, createRuntimeCapability, defineAgentMessageType, defineChannelMessageType, derivePluginArtifactNamespace, downloadRemoteFile, formatSandboxTimeout, getDefaultTenantId, getErrorMessage, getModelContextSize, getPermissionOperationMetadata, getPositionList, getPositionMap, getRequestContext, getRequiredPermissionOperation, getTenantGlobalScopeKey, isDevelopmentSandboxRuntimeEnvironment, isRemoteFile, isSandboxBackend, isSandboxJobRuntimeError, isSandboxManagedServiceAdapter, isSandboxServiceProxyAdapter, isSandboxTerminalAdapter, isStrategyInstance, isStructuredMessageType, isTenantGlobalScopeKey, loadYamlFile, mergeCredentials, mergeParentChildChunks, normalizeContextSize, pluginArtifactTableName, renderRemoteModuleIframeHtml, renderRemoteReactIframeHtml, renderRemoteVueIframeHtml, resolveSandboxBackend, resolveSandboxExecutionOptions, resolveSandboxManagedServiceAdapter, resolveSandboxServiceProxyAdapter, resolveSandboxTerminalAdapter, resolveStrategyMetadataTarget, resolveTenantGlobalScopeKey, runWithRequestContext, secondsToMilliseconds, setDefaultTenantId, sumTokenUsage };
+export { ACCOUNT_BINDING_PERMISSION_SERVICE_TOKEN, AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING, AGENT_CHAT_DISPATCH_MESSAGE_TYPE, AGENT_MIDDLEWARE_STRATEGY, AIModelProviderNotFoundException, AIModelProviderRegistry, AIModelProviderStrategy, AI_MODEL_PROVIDER, ANALYTICS_PERMISSION_SERVICE_TOKEN, AdapterDataSourceStrategy, AgentMiddlewareRegistry, AgentMiddlewareStrategy, AiModelNotFoundException, ArtifactsRuntimeCapability, AssistantTaskRuntimeCapability, BOUND_IDENTITY_LOGIN_PERMISSION_SERVICE_TOKEN, BUILTIN_GLOBAL_SCOPE, BaseHTTPQueryRunner, BaseQueryRunner, BaseSQLQueryRunner, BaseSandbox, BaseStrategyRegistry, BaseTool, BaseToolset, BuiltinToolset, CHAT_CHANNEL, CHAT_CHANNEL_TEXT_LIMITS, COLLABORATION_DOCUMENT_PROVIDER, CONNECTION_COMMAND_ROUTER_TOKEN, CONNECTOR_STRATEGY, CancelConversationCommand, ChatChannel, ChatChannelRegistry, ChatOAICompatReasoningModel, CollaborationDocumentProvider, CollaborationDocumentProviderRegistry, CollaborationRuntimeCapability, CommonParameterRules, ConnectorRuntimeCapability, ConnectorStrategyKey, ConnectorStrategyRegistry, CreateModelClientCommand, CredentialsValidateFailedError, DATASOURCE_STRATEGY, DBCreateTableMode, DBProtocolEnum, DBSyntaxEnum, DBTableAction, DBTableDataAction, DEFAULT_EXECUTION_CONFIG, DEFAULT_SANDBOX_EXECUTION_MAX_OUTPUT_BYTES, DEFAULT_SANDBOX_FILE_OPERATION_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_SEC, DEFAULT_SANDBOX_FILE_SEARCH_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_SEC, DEFAULT_SANDBOX_SHELL_EXECUTION_OPTIONS, DEFAULT_SANDBOX_SHELL_TIMEOUT_MS, DEFAULT_SANDBOX_SHELL_TIMEOUT_SEC, DOCUMENT_SOURCE_STRATEGY, DOCUMENT_TRANSFORMER_STRATEGY, DataSourceStrategy, DataSourceStrategyRegistry, DefaultRuntimeCapabilityRegistry as DefaultAgentMiddlewareRuntimeCapabilityRegistry, DefaultRuntimeCapabilityRegistry, DocumentSourceRegistry, DocumentSourceStrategy, DocumentTransformerRegistry, DocumentTransformerStrategy, FILE_STORAGE_PROVIDER, FILE_UPLOAD_TARGET_STRATEGY, FileRuntimeCapability, FileStorageProvider, FileStorageProviderRegistry, FileUploadTargetRegistry, FileUploadTargetStrategy, GLOBAL_ORGANIZATION_SCOPE, HANDOFF_PERMISSION_SERVICE_TOKEN, HANDOFF_PROCESSOR_STRATEGY, HANDOFF_QUEUE_SERVICE_TOKEN, HandoffProcessorRegistry, HandoffProcessorStrategy, IMAGE_UNDERSTANDING_STRATEGY, INTEGRATION_PERMISSION_SERVICE_TOKEN, INTEGRATION_STRATEGY, ImageUnderstandingRegistry, ImageUnderstandingStrategy, IntegrationStrategyKey, IntegrationStrategyRegistry, JUMP_TO_TARGETS, JsonSchemaValidator, KNOWLEDGE_STRATEGY, KnowledgeStrategyKey, KnowledgeStrategyRegistry, KnowledgebaseDocumentsRuntimeCapability, KnowledgebaseRuntimeCapability, LLMUsage, LargeLanguageModel, MANAGED_CONNECTION_REGISTRY_TOKEN, MANAGED_QUEUE_HANDLER_REGISTRY_TOKEN, MANAGED_QUEUE_SERVICE_TOKEN, ModelProvider, ORGANIZATION_METADATA_KEY, OpenAICompatibleReranker, PERMISSION_OPERATION_METADATA_KEY, PLUGIN_CONFIG_RESOLVER_TOKEN, PLUGIN_JOB_PROCESSOR_METADATA, PLUGIN_METADATA, PLUGIN_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_SERVICE_TOKEN, PROVIDE_AI_MODEL_LLM, PROVIDE_AI_MODEL_MODERATION, PROVIDE_AI_MODEL_RERANK, PROVIDE_AI_MODEL_SPEECH2TEXT, PROVIDE_AI_MODEL_TEXT_EMBEDDING, PROVIDE_AI_MODEL_TTS, PluginJobProcessor, PluginWebhookAuth, PluginWebhookAuthGuard, RETRIEVER_STRATEGY, RequestContext, RequestContextMiddleware, RequirePermissionOperation, RerankModel, RetrieverRegistry, RetrieverStrategy, SANDBOX_JOB_ERROR_CODES, SANDBOX_PROVIDER, SANDBOX_RUNTIME_PROVIDER, SANDBOX_SHELL_TIMEOUT_LIMITS_SEC, SANDBOX_WORKSPACE_MAPPER, SKILL_SOURCE_PROVIDER, SPEECH_TO_TEXT_PERMISSION_SERVICE_TOKEN, SPEECH_TO_TEXT_SERVICE_TOKEN, SSOProviderRegistry, SSOProviderStrategyKey, SSO_BINDING_PERMISSION_SERVICE_TOKEN, SSO_PROVIDER, STRATEGY_META_KEY, SYSTEM_GLOBAL_SCOPE, SandboxJobRuntimeError, SandboxJobsRuntimeCapability, SandboxProviderRegistry, SandboxProviderStrategy, SandboxRuntimeProviderRegistry, SandboxRuntimeProviderStrategy, SandboxWorkspaceMapperRegistry, SandboxWorkspaceMapperStrategy, SkillSourceProviderRegistry, SkillSourceProviderStrategy, Speech2TextChatModel, SpeechToTextModel, StrategyBus, TENANT_GLOBAL_SCOPE_PREFIX, TENANT_GLOBAL_SCOPE_SUFFIX, TEXT_SPLITTER_STRATEGY, TOOLSET_STRATEGY, TextEmbeddingModelManager, TextSplitterRegistry, TextSplitterStrategy, TextToSpeechModel, ToolsetRegistry, ToolsetStrategy, USER_PERMISSION_SERVICE_TOKEN, VECTOR_STORE_STRATEGY, VIEW_EXTENSION_CACHE_SERVICE_TOKEN, VIEW_EXTENSION_PROVIDER, VectorStoreRegistry, VectorStoreStrategy, ViewExtensionProvider, ViewExtensionProviderRegistry, WORKFLOW_NODE_STRATEGY, WORKFLOW_TRIGGER_STRATEGY, WORKSPACE_FILES_SOURCE, WorkflowNodeRegistry, WorkflowNodeStrategy, WorkflowTriggerRegistry, WorkflowTriggerStrategy, WorkspaceFilesRuntimeCapability, WrapWorkflowNodeExecutionCommand, XPERT_RUNTIME_CAPABILITIES_TOKEN, XpFileSystem, XpertServerPlugin, als, appendSandboxMessage, assertConnectorDefinition, buildSandboxTimeoutMessage, calcTokenUsage, calculateModelPrice, chunkText, countTokensSafe, createI18nInstance, createPluginLogger, createRuntimeCapability, defineAgentMessageType, defineChannelMessageType, derivePluginArtifactNamespace, downloadRemoteFile, formatSandboxTimeout, getDefaultTenantId, getErrorMessage, getModelContextSize, getPermissionOperationMetadata, getPositionList, getPositionMap, getRequestContext, getRequiredPermissionOperation, getTenantGlobalScopeKey, isDevelopmentSandboxRuntimeEnvironment, isRemoteFile, isSandboxBackend, isSandboxJobRuntimeError, isSandboxManagedServiceAdapter, isSandboxServiceProxyAdapter, isSandboxTerminalAdapter, isStrategyInstance, isStructuredMessageType, isTenantGlobalScopeKey, loadYamlFile, mergeCredentials, mergeParentChildChunks, normalizeContextSize, pluginArtifactTableName, renderRemoteModuleIframeHtml, renderRemoteReactIframeHtml, renderRemoteVueIframeHtml, resolveSandboxBackend, resolveSandboxExecutionOptions, resolveSandboxManagedServiceAdapter, resolveSandboxServiceProxyAdapter, resolveSandboxTerminalAdapter, resolveStrategyMetadataTarget, resolveTenantGlobalScopeKey, runWithRequestContext, secondsToMilliseconds, setDefaultTenantId, sumTokenUsage };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xpert-ai/plugin-sdk",
-  "version": "3.15.13",
+  "version": "3.15.15",
   "license": "AGPL-3.0",
   "repository": {
     "type": "git",
@@ -17,7 +17,7 @@
   },
   "dependencies": {
     "@langchain/openai": "0.6.9",
-    "@xpert-ai/contracts": "3.15.13",
+    "@xpert-ai/contracts": "3.15.15",
     "express": "^4.22.1",
     "js-tiktoken": "^1.0.21"
   },
@@ -51,6 +51,12 @@
       "types": "./collaboration-client.d.ts",
       "import": "./collaboration-client.cjs.mjs",
       "default": "./collaboration-client.cjs.js"
+    },
+    "./connector": {
+      "module": "./connector.esm.js",
+      "types": "./connector.d.ts",
+      "import": "./connector.cjs.mjs",
+      "default": "./connector.cjs.js"
     }
   },
   "types": "./index.d.ts"

package/src/connector.d.ts

@@ -0,0 +1,2 @@
+/** Browser-safe connector contracts and helpers without server-side SDK dependencies. */
+export * from './lib/connector/strategy.interface';

package/src/lib/agent/handoff/agent-chat.contract.d.ts

@@ -1,5 +1,6 @@
 import { TChatOptions, TChatRequest, TChatRuntimePrincipal, TChatSourceAuditOptions } from '@xpert-ai/contracts';
 export declare const AGENT_CHAT_DISPATCH_MESSAGE_TYPE: import("./message-type").StructuredHandoffMessageType;
+export declare const AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING = "steer_target_not_running";
 export interface AgentChatHandoffMessageCallbackTarget {
     transport?: 'handoff-message';
     messageType: string;
@@ -38,5 +39,6 @@ export interface AgentChatCallbackEnvelopePayload extends Record<string, unknown
     sequence: number;
     event?: unknown;
     error?: string;
+    errorCode?: typeof AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING;
     context?: Record<string, unknown>;
 }

package/src/lib/ai-model/ai-model.d.ts

@@ -13,7 +13,7 @@ export declare abstract class AIModel implements IAIModel {
     constructor(modelProvider: ModelProvider, modelType: AiModelTypeEnum);
     abstract validateCredentials(model: string, credentials: Record<string, any>): Promise<void>;
     getChatModel(copilotModel: ICopilotModel, options?: TChatModelOptions): BaseChatModel;
-    getPrice(model: string, credentials: Record<string, any>, priceType: PriceType, tokens: number): PriceInfo;
+    getPrice(model: string, credentials: Record<string, any>, priceType: PriceType, tokens: number, inputTokens?: number): PriceInfo;
     protected getModelPath(): string;
     predefinedModels(): AIModelEntity[];
     getModelSchema(model: string, credentials?: Record<string, any>): AIModelEntity | null;

package/src/lib/ai-model/index.d.ts

@@ -4,6 +4,7 @@ export * from './ai-model-provider.registry';
 export * from './abstract-provider';
 export * from './types';
 export * from './llm';
+export * from './pricing';
 export * from './errors';
 export * from './openai-compatible';
 export * from './utils/index';

package/src/lib/ai-model/pricing.d.ts

@@ -0,0 +1,2 @@
+import { PriceConfig, PriceInfo, PriceType } from '@xpert-ai/contracts';
+export declare function calculateModelPrice(pricing: PriceConfig, priceType: PriceType, tokens: number, inputTokens?: number): PriceInfo;

package/src/lib/ai-model/types/model.d.ts

@@ -17,7 +17,7 @@ export interface IAIModel {
     validateCredentials(model: string, credentials: Record<string, any>): Promise<void>;
     getChatModel(copilotModel: ICopilotModel, options?: TChatModelOptions): BaseChatModel;
     predefinedModels(): AIModelEntity[];
-    getPrice(model: string, credentials: Record<string, any>, priceType: PriceType, tokens: number): PriceInfo;
+    getPrice(model: string, credentials: Record<string, any>, priceType: PriceType, tokens: number, inputTokens?: number): PriceInfo;
 }
 export declare const CommonParameterRules: {
     name: string;

package/src/lib/connector/strategy.interface.d.ts

@@ -27,6 +27,18 @@ export type ConnectorAppCredentialsConfig = {
     };
     defaultValues?: Record<string, string | number | boolean | null>;
 };
+export type ConnectorCredentialFormDefinition = ConnectorAppCredentialsConfig;
+export type ConnectorAuthMethodDefinition = {
+    id: string;
+    type: 'oauth2';
+    label: RuntimeI18nText;
+    appCredentials?: ConnectorCredentialFormDefinition;
+} | {
+    id: string;
+    type: 'api_key';
+    label: RuntimeI18nText;
+    credentials: ConnectorCredentialFormDefinition;
+};
 export type ConnectorPermissionDeclaration = {
     key: string;
     label?: RuntimeI18nText;
@@ -37,15 +49,28 @@ export type ConnectorPermissionDeclaration = {
     storage?: 'platform_vault' | 'runtime_only' | 'external';
     required?: boolean;
 };
-export type ConnectorDefinition = {
+export type ConnectorDefinitionBase = {
     provider: string;
     label: RuntimeI18nText;
     description?: RuntimeI18nText;
     icon?: RuntimeCapabilityIcon;
-    auth: ConnectorOAuthConfig;
     permissions?: ConnectorPermissionDeclaration[];
+    /** Maps credentials stored before multi-auth support to a declared OAuth method. */
+    legacyAuthMethodId?: string;
+};
+export type ConnectorDefinition = ConnectorDefinitionBase & {
+    auth: ConnectorOAuthConfig;
+    appCredentials?: ConnectorAppCredentialsConfig;
+};
+export type ConnectorMultiAuthDefinition = ConnectorDefinitionBase & {
+    authMethods: ConnectorAuthMethodDefinition[];
+    /** Optional legacy OAuth metadata used by host compatibility adapters. */
+    auth?: ConnectorOAuthConfig;
     appCredentials?: ConnectorAppCredentialsConfig;
 };
+export type ConnectorStrategyDefinition = ConnectorDefinition | ConnectorMultiAuthDefinition;
+export declare function getConnectorAuthMethods(definition: ConnectorStrategyDefinition): ConnectorAuthMethodDefinition[];
+export declare function assertConnectorDefinition(definition: unknown): asserts definition is ConnectorStrategyDefinition;
 export type ConnectorProfile = {
     openId?: string;
     unionId?: string;
@@ -59,6 +84,7 @@ export type ConnectorInstance = {
     id: string;
     workspaceId: string;
     provider: string;
+    authMethodId?: string | null;
     status: ConnectorStatus;
     profile?: ConnectorProfile | null;
     scopes?: string[];
@@ -75,6 +101,19 @@ export type ConnectorInstance = {
 export type ConnectorOAuthStartRequest = {
     app?: ConnectorAppCredentialPayload;
 };
+export type ConnectorConnectRequest = {
+    authMethodId?: string;
+    values?: ConnectorAppCredentialPayload;
+    /** @deprecated Use values instead. */
+    app?: ConnectorAppCredentialPayload;
+};
+export type ConnectorConnectResponse = {
+    status: 'active' | 'pending';
+    connector: ConnectorInstance;
+    authorizationUrl?: string | null;
+    stateExpiresAt?: string | null;
+    pollIntervalSeconds?: number | null;
+};
 export type ConnectorOAuthStartResponse = {
     connector: ConnectorInstance;
     authorizationUrl: string;
@@ -99,6 +138,16 @@ export type ConnectorRuntimeCredential = {
     scopes?: string[];
     profile?: ConnectorProfile | null;
 };
+export type ConnectorRuntimeCredentialV2 = {
+    connectorId: string;
+    workspaceId: string;
+    provider: string;
+    authMethodId: string;
+    credentials: Record<string, unknown>;
+    expiresAt?: string | null;
+    scopes?: string[];
+    profile?: ConnectorProfile | null;
+};
 export type ConnectorRuntimeGetInput = {
     workspaceId: string;
     provider: string;
@@ -106,6 +155,7 @@ export type ConnectorRuntimeGetInput = {
 };
 export interface ConnectorRuntimeApi {
     getConnector(input: ConnectorRuntimeGetInput): Promise<ConnectorRuntimeCredential>;
+    getConnectorCredential?(input: ConnectorRuntimeGetInput): Promise<ConnectorRuntimeCredentialV2>;
 }
 export type ConnectorSelectOption = {
     value: string;
@@ -153,6 +203,68 @@ export type ConnectorOAuthCredential = {
     scopes?: string[];
     profile?: ConnectorProfile | null;
 };
+export type ConnectorCredential = {
+    data: ConnectorAppCredentialPayload;
+    expiresAt?: string | null;
+    refreshExpiresAt?: string | null;
+    scopes?: string[];
+    profile?: ConnectorProfile | null;
+};
+export type ConnectorConnectInput = {
+    authMethodId: string;
+    values?: ConnectorAppCredentialPayload;
+    redirectUri: string;
+    state: string;
+    scopes?: string[];
+};
+export type ConnectorConnectResult = {
+    status: 'pending';
+    authorizationUrl: string;
+    scopes?: string[];
+    metadata?: Record<string, unknown>;
+    pollIntervalSeconds?: number | null;
+} | {
+    status: 'active';
+    credential: ConnectorCredential;
+};
+export type ConnectorAuthorizationCodeInput = {
+    authMethodId: string;
+    values?: ConnectorAppCredentialPayload;
+    metadata?: Record<string, unknown> | null;
+    code: string;
+    redirectUri: string;
+    scopes?: string[];
+};
+export type ConnectorConnectionPollInput = {
+    authMethodId: string;
+    values?: ConnectorAppCredentialPayload;
+    metadata?: Record<string, unknown> | null;
+    redirectUri: string;
+    scopes?: string[];
+};
+export type ConnectorConnectionPollResult = {
+    status: 'pending';
+    authorizationUrl?: string;
+    metadata?: Record<string, unknown>;
+    pollIntervalSeconds?: number | null;
+    message?: string;
+} | {
+    status: 'complete';
+    credential: ConnectorCredential;
+    metadata?: Record<string, unknown>;
+} | {
+    status: 'error';
+    error: string;
+    metadata?: Record<string, unknown>;
+};
+export type ConnectorCredentialRefreshInput = {
+    authMethodId: string;
+    credential: ConnectorCredential;
+};
+export type ConnectorRuntimeCredentialResolveInput = {
+    authMethodId: string;
+    credential: ConnectorCredential;
+};
 export type ConnectorOAuthCompleteRequest = {
     state: string;
     code: string;
@@ -177,10 +289,24 @@ export type ConnectorAuthorizationPollResult = {
     error: string;
     metadata?: Record<string, unknown>;
 };
-export interface ConnectorStrategy {
+export interface ConnectorStrategyRuntime {
+    definition: ConnectorStrategyDefinition;
+    connect?(input: ConnectorConnectInput): Promise<ConnectorConnectResult>;
+    exchangeAuthorizationCode?(input: ConnectorAuthorizationCodeInput): Promise<ConnectorCredential>;
+    pollConnection?(input: ConnectorConnectionPollInput): Promise<ConnectorConnectionPollResult>;
+    refreshConnectionCredential?(input: ConnectorCredentialRefreshInput): Promise<ConnectorCredential>;
+    resolveRuntimeCredential?(input: ConnectorRuntimeCredentialResolveInput): Promise<Record<string, unknown>> | Record<string, unknown>;
+    buildAuthorizationUrl?(input: ConnectorAuthorizationUrlInput): Promise<ConnectorAuthorizationUrlResult>;
+    exchangeOAuthCode?(input: ConnectorOAuthCodeInput): Promise<ConnectorOAuthCredential>;
+    refreshCredential?(input: ConnectorRefreshInput): Promise<ConnectorOAuthCredential>;
+    pollAuthorization?(input: ConnectorAuthorizationPollInput): Promise<ConnectorAuthorizationPollResult>;
+}
+export interface ConnectorStrategy extends ConnectorStrategyRuntime {
     definition: ConnectorDefinition;
     buildAuthorizationUrl(input: ConnectorAuthorizationUrlInput): Promise<ConnectorAuthorizationUrlResult>;
     exchangeOAuthCode(input: ConnectorOAuthCodeInput): Promise<ConnectorOAuthCredential>;
-    refreshCredential?(input: ConnectorRefreshInput): Promise<ConnectorOAuthCredential>;
-    pollAuthorization?(input: ConnectorAuthorizationPollInput): Promise<ConnectorAuthorizationPollResult>;
+}
+export interface ConnectorMultiAuthStrategy extends ConnectorStrategyRuntime {
+    definition: ConnectorMultiAuthDefinition;
+    connect(input: ConnectorConnectInput): Promise<ConnectorConnectResult>;
 }

package/src/lib/connector/strategy.registry.d.ts

@@ -1,6 +1,11 @@
 import { DiscoveryService, Reflector } from '@nestjs/core';
 import { BaseStrategyRegistry } from '../strategy';
-import type { ConnectorStrategy } from './strategy.interface';
-export declare class ConnectorStrategyRegistry extends BaseStrategyRegistry<ConnectorStrategy> {
+import { type ConnectorStrategy, type ConnectorStrategyRuntime } from './strategy.interface';
+export declare class ConnectorStrategyRegistry extends BaseStrategyRegistry<ConnectorStrategyRuntime> {
     constructor(discoveryService: DiscoveryService, reflector: Reflector);
+    upsert(instance: unknown): void;
+    get(type: string, organizationId?: string): ConnectorStrategy;
+    list(organizationId?: string): ConnectorStrategy[];
+    getRuntime(type: string, organizationId?: string): ConnectorStrategyRuntime;
+    listRuntime(organizationId?: string): ConnectorStrategyRuntime[];
 }

package/src/lib/core/permissions/general.d.ts

@@ -70,6 +70,7 @@ export declare const INTEGRATION_PERMISSION_SERVICE_TOKEN = "XPERT_PLUGIN_INTEGR
 export interface IntegrationPermissionService {
     read<TIntegration = IIntegration>(id: string, options?: Record<string, any>): Promise<TIntegration | null>;
     findAll<TIntegration = IIntegration>(options?: Record<string, any>): Promise<IPagination<TIntegration>>;
+    findAllWithInheritance?<TIntegration = IIntegration>(options?: Record<string, any>): Promise<IPagination<TIntegration>>;
     ensureWebhookCredential?(id: string, options?: {
         provider?: string | null;
         rotateIfRevoked?: boolean;

package/src/lib/managed-queue/index.d.ts

@@ -48,6 +48,7 @@ export type ManagedQueueEnqueueInput<TPayload = unknown> = {
     payload: TPayload;
     tenantId?: string | null;
     organizationId?: string | null;
+    /** Plugin installation scope used to route to the matching processor (for example system:global or an organization id). */
     scopeKey?: string | null;
     userId?: string | null;
     jobId?: string;
@@ -88,6 +89,8 @@ export type ManagedQueueJobContext = {
 };
 export type ManagedQueueJobSnapshot<TPayload = unknown> = ManagedQueueJob<TPayload> & {
     state?: string;
+    /** BullMQ terminal failure text, when the physical job is in the failed state. */
+    failedReason?: string;
     timestamp?: number;
     processedOn?: number;
     finishedOn?: number;

package/src/lib/runtime/capabilities/sandbox-jobs.d.ts

@@ -13,8 +13,17 @@ export type SandboxJobFileInput = {
     targetPath: string;
     /** Expected immutable byte length checked during materialization. */
     size: number;
-    /** Expected lowercase SHA-256 checked during materialization. */
+    /** Expected immutable lowercase SHA-256; materialized inputs are re-hashed before execution. */
     sha256: string;
+    /**
+     * Input access semantics required by the Action.
+     *
+     * `materialized` preserves the v1 behavior: Core verifies and copies the
+     * complete file into the Job workspace before execution. `read-only-seekable`
+     * asks Core to expose the exact Workspace file through a Provider-owned,
+     * Job-scoped read-only mapping so media decoders can perform on-demand reads.
+     */
+    access?: 'materialized' | 'read-only-seekable';
 };
 /** Declares one output to validate and persist back into Workspace Files. */
 export type SandboxJobOutputRequest = {

package/src/lib/sandbox/runtime-provider.d.ts

@@ -24,6 +24,30 @@ export type SandboxRuntimeFileDownloadResponse = {
     content: Uint8Array | null;
     error: SandboxRuntimeFileOperationError | null;
 };
+/**
+ * Core-resolved Workspace file source that a system Runtime Provider may expose
+ * read-only to one Job. These paths are never part of plugin payloads or Action
+ * manifests and must not be persisted as business data.
+ */
+export type SandboxRuntimeReadOnlyFileSource = {
+    /** Canonical path visible to the API process. */
+    serverPath: string;
+    /** Equivalent source path visible to the Provider engine, for example Docker. */
+    hostPath: string;
+    size: number;
+    mtimeMs: number;
+    device: number;
+    inode: number;
+};
+/** Exact Job-workspace alias for one authorized, seekable Workspace file. */
+export type SandboxRuntimeReadOnlyFile = {
+    source: SandboxRuntimeReadOnlyFileSource;
+    /** Safe relative path below the Runtime workspace root. */
+    targetPath: string;
+    /** Immutable identity asserted by the system plugin that owns the Action. */
+    size: number;
+    sha256: string;
+};
 /** Resource policy requested by a provider-neutral Runtime Definition. */
 export type SandboxRuntimeResources = {
     memoryMb: number;
@@ -50,6 +74,8 @@ export type SandboxRuntimeProviderCapabilities = {
     resourceLimits: boolean;
     networkPolicy: boolean;
     readOnlyRootFilesystem: boolean;
+    /** Supports Job-scoped, read-only, seekable Workspace file mappings. */
+    readOnlyFileMounts?: boolean;
 };
 /** Minimum Provider guarantees required by a Runtime Definition. */
 export type SandboxRuntimeRequirements = SandboxRuntimeProviderCapabilities;
@@ -129,6 +155,12 @@ export type SandboxRuntimeCreateOptions = {
     networkPolicy: SandboxRuntimeNetworkPolicy;
     security: SandboxRuntimeSecurity;
     hardDeadlineMs: number;
+    /**
+     * Core-authorized read-only inputs resolved from portable Workspace
+     * references. Providers must expose each source only at its targetPath and
+     * must not make any broader Workspace subtree visible to the Runtime.
+     */
+    readOnlyFiles?: readonly SandboxRuntimeReadOnlyFile[];
 };
 /** Persisted evidence required to destroy a Runtime even after Provider reload. */
 export type SandboxRuntimeDestroyOptions = {

package/src/lib/view-extension/provider.interface.d.ts

@@ -1,16 +1,24 @@
-import { XpertExtensionViewManifest, XpertRemoteComponentEntry, XpertRemoteComponentViewSchema, XpertResolvedViewHostContext, XpertViewActionRequest, XpertViewActionResult, XpertViewDataResult, XpertViewParameterOptionsQuery, XpertViewParameterOptionsResult, XpertViewQuery } from '@xpert-ai/contracts';
+import { XpertExtensionViewManifest, XpertRemoteComponentEntry, XpertRemoteComponentViewSchema, XpertResolvedViewHostContext, XpertViewActionRequest, XpertViewActionResult, XpertViewDataResult, XpertViewFileAccessRequest, XpertViewParameterOptionsQuery, XpertViewParameterOptionsResult, XpertViewQuery } from '@xpert-ai/contracts';
+import type { WorkspacePortableFileReference } from '../runtime/capabilities/workspace-files';
 export interface XpertViewFileActionFile {
     buffer: Buffer;
     originalname?: string;
     mimetype?: string;
     size?: number;
 }
+export interface XpertViewFileResource {
+    reference: WorkspacePortableFileReference;
+    fileName: string;
+    mimeType: string;
+    size?: number;
+}
 export interface IXpertViewExtensionProvider {
     supports(context: XpertResolvedViewHostContext): Promise<boolean> | boolean;
     getViewManifests(context: XpertResolvedViewHostContext, slot: string): Promise<XpertExtensionViewManifest[]> | XpertExtensionViewManifest[];
     getViewData(context: XpertResolvedViewHostContext, viewKey: string, query: XpertViewQuery): Promise<XpertViewDataResult> | XpertViewDataResult;
     executeViewAction?(context: XpertResolvedViewHostContext, viewKey: string, actionKey: string, request: XpertViewActionRequest): Promise<XpertViewActionResult> | XpertViewActionResult;
     executeViewFileAction?(context: XpertResolvedViewHostContext, viewKey: string, actionKey: string, request: XpertViewActionRequest, file: XpertViewFileActionFile): Promise<XpertViewActionResult> | XpertViewActionResult;
+    resolveViewFile?(context: XpertResolvedViewHostContext, viewKey: string, request: XpertViewFileAccessRequest): Promise<XpertViewFileResource> | XpertViewFileResource;
     getViewParameterOptions?(context: XpertResolvedViewHostContext, viewKey: string, parameterKey: string, query: XpertViewParameterOptionsQuery): Promise<XpertViewParameterOptionsResult> | XpertViewParameterOptionsResult;
     getRemoteComponentEntry?(context: XpertResolvedViewHostContext, viewKey: string, component: XpertRemoteComponentViewSchema['component']): Promise<XpertRemoteComponentEntry> | XpertRemoteComponentEntry;
 }