@xpert-ai/plugin-sdk 3.18.6 → 3.19.0

package/index.cjs.js

@@ -9,7 +9,6 @@ var rxjs = require('rxjs');
 var contracts = require('@xpert-ai/contracts');
 var node_async_hooks = require('node:async_hooks');
 var passportJwt = require('passport-jwt');
-var jsonwebtoken = require('jsonwebtoken');
 var node_crypto = require('node:crypto');
 var cqrs = require('@nestjs/cqrs');
 var fs = require('fs');
@@ -350,22 +349,15 @@ class RequestContext {
         }
         return scope.organizationId;
     }
-    static hasPermissions(findPermissions, throwError) {
-        const requestContext = RequestContext.currentRequestContext();
-        if (requestContext) {
-            // tslint:disable-next-line
-            const token = passportJwt.ExtractJwt.fromAuthHeaderAsBearerToken()(requestContext.request);
-            if (token) {
-                const { permissions } = jsonwebtoken.verify(token, process.env['JWT_SECRET']);
-                if (permissions) {
-                    const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
-                    if (found.length === findPermissions.length) {
-                        return true;
-                    }
-                } else {
-                    return false;
-                }
-            }
+    /**
+     * Check the authenticated principal's enabled role permissions, matching the
+     * server RequestContext. Authentication guards resolve JWTs, API keys and
+     * ChatKit client secrets before this check; the bearer is not always a JWT.
+     */ static hasPermissions(findPermissions, throwError) {
+        const permissions = this.currentPermissions();
+        if (permissions.length > 0) {
+            const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
+            if (found.length === findPermissions.length) return true;
         }
         if (throwError) {
             throw new common.HttpException('Unauthorized', common.HttpStatus.UNAUTHORIZED);
@@ -373,17 +365,9 @@ class RequestContext {
         return false;
     }
     static hasAnyPermission(findPermissions, throwError) {
-        const requestContext = RequestContext.currentRequestContext();
-        if (requestContext) {
-            // tslint:disable-next-line
-            const token = passportJwt.ExtractJwt.fromAuthHeaderAsBearerToken()(requestContext.request);
-            if (token) {
-                const { permissions } = jsonwebtoken.verify(token, process.env['JWT_SECRET']);
-                const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
-                if (found.length > 0) {
-                    return true;
-                }
-            }
+        const permissions = this.currentPermissions();
+        if (permissions.some((value)=>findPermissions.includes(value))) {
+            return true;
         }
         if (throwError) {
             throw new common.HttpException('Unauthorized', common.HttpStatus.UNAUTHORIZED);
@@ -421,20 +405,6 @@ class RequestContext {
         const context = RequestContext.currentRequestContext();
         if (context) {
             var _this_currentUser_role, _this_currentUser;
-            // tslint:disable-next-line
-            const token = this.currentToken();
-            if (token) {
-                try {
-                    const { role } = jsonwebtoken.verify(token, process.env['JWT_SECRET']);
-                    if (role) {
-                        return roles.includes(role);
-                    }
-                } catch (error) {
-                    if (!(error instanceof jsonwebtoken.JsonWebTokenError)) {
-                        throw error;
-                    }
-                }
-            }
             const role = (_this_currentUser = this.currentUser()) == null ? void 0 : (_this_currentUser_role = _this_currentUser.role) == null ? void 0 : _this_currentUser_role.name;
             if (role) {
                 return roles.includes(role);
@@ -445,6 +415,11 @@ class RequestContext {
         }
         return false;
     }
+    static currentPermissions() {
+        var _this_currentUser_role, _this_currentUser;
+        var _this_currentUser_role_rolePermissions;
+        return ((_this_currentUser_role_rolePermissions = (_this_currentUser = this.currentUser()) == null ? void 0 : (_this_currentUser_role = _this_currentUser.role) == null ? void 0 : _this_currentUser_role.rolePermissions) != null ? _this_currentUser_role_rolePermissions : []).filter((rolePermission)=>rolePermission == null ? void 0 : rolePermission.enabled).map((rolePermission)=>rolePermission == null ? void 0 : rolePermission.permission).filter((permission)=>!!permission);
+    }
     constructor(request, response, reqId, userId, extras = {}){
         this.request = request;
         this.response = response;
@@ -1031,6 +1006,34 @@ exports.KnowledgeStrategyRegistry = __decorate([
     ])
 ], exports.KnowledgeStrategyRegistry);
 
+const KEYWORD_ANALYZER_STRATEGY = 'KEYWORD_ANALYZER_STRATEGY';
+const KeywordAnalyzerStrategy = (provider)=>common.applyDecorators(common.SetMetadata(KEYWORD_ANALYZER_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, KEYWORD_ANALYZER_STRATEGY));
+
+exports.KeywordAnalyzerRegistry = class KeywordAnalyzerRegistry extends BaseStrategyRegistry {
+    /** Resolve a pinned source without allowing a higher-priority scope to shadow it. */ getBySource(provider, source, organizationId) {
+        var _this_strategies_get;
+        if (!this.resolveStrategyScopeKeys(organizationId).includes(source.scopeKey)) return undefined;
+        const strategy = (_this_strategies_get = this.strategies.get(source.scopeKey)) == null ? void 0 : _this_strategies_get.get(provider);
+        if (!strategy) return undefined;
+        const registered = this.getSource(strategy);
+        if (registered.kind !== source.kind || registered.scopeKey !== source.scopeKey) return undefined;
+        if (source.kind === 'plugin' && (registered.kind !== 'plugin' || registered.pluginName !== source.pluginName)) {
+            return undefined;
+        }
+        return strategy;
+    }
+    constructor(discoveryService, reflector){
+        super(KEYWORD_ANALYZER_STRATEGY, discoveryService, reflector);
+    }
+};
+exports.KeywordAnalyzerRegistry = __decorate([
+    common.Injectable(),
+    __metadata("design:paramtypes", [
+        core.DiscoveryService,
+        core.Reflector
+    ])
+], exports.KeywordAnalyzerRegistry);
+
 const TOOLSET_STRATEGY = 'TOOLSET_STRATEGY';
 /**
  * Decorator to mark a provider as a Toolset Strategy
@@ -3844,7 +3847,7 @@ exports.AgentMiddlewareRegistry = __decorate([
     'end'
 ];
 
-const AssistantTaskRuntimeCapability = modelProvider.createRuntimeCapability('platform.assistant_task', {
+/** Scoped runtime capability for platform Assistant tasks. */ const AssistantTaskRuntimeCapability = modelProvider.createRuntimeCapability('platform.assistant_task', {
     description: 'Start asynchronous tasks on the current platform assistant.'
 });
 
@@ -3967,6 +3970,52 @@ exports.HandoffProcessorRegistry = __decorate([
     runTtlMs: 10 * 60 * 1000
 };
 
+/** Checks confirmed completion; unknown remains non-terminal. */ function isAgentInvocationTerminal(status) {
+    return status === 'succeeded' || status === 'failed' || status === 'cancelled';
+}
+
+/** Nest discovery metadata key for runtime strategies. */ const AGENT_RUNTIME_STRATEGY = 'AGENT_RUNTIME_STRATEGY';
+/** Associate a stable provider key with an adapter. Also declare @Injectable() and register the provider. */ const AgentRuntimeStrategy = (provider)=>common.applyDecorators(common.SetMetadata(AGENT_RUNTIME_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, AGENT_RUNTIME_STRATEGY));
+/** Scoped strategy registry with pinned provider/version lookup for continuation. */ exports.AgentRuntimeRegistry = class AgentRuntimeRegistry extends BaseStrategyRegistry {
+    /** Find the exact original scope/plugin/version, without fallback. Returns undefined if unavailable. */ getPinned(provider, source) {
+        var _this_strategies_get;
+        const strategy = (_this_strategies_get = this.strategies.get(source.scopeKey)) == null ? void 0 : _this_strategies_get.get(provider);
+        if (!strategy) return undefined;
+        const actual = this.getSource(strategy);
+        return actual.kind === source.kind && actual.scopeKey === source.scopeKey && (actual.kind !== 'plugin' || source.kind !== 'plugin' || actual.pluginName === source.pluginName && actual.pluginVersion === source.pluginVersion) ? strategy : undefined;
+    }
+    constructor(discoveryService, reflector){
+        super(AGENT_RUNTIME_STRATEGY, discoveryService, reflector);
+    }
+};
+exports.AgentRuntimeRegistry = __decorate([
+    common.Injectable(),
+    __metadata("design:paramtypes", [
+        core.DiscoveryService,
+        core.Reflector
+    ])
+], exports.AgentRuntimeRegistry);
+
+/** Caller-scoped API obtained through runtime.capabilities.require(...). */ const AgentInvocationRuntimeCapability = modelProvider.createRuntimeCapability('platform.agent_invocation', {
+    description: 'Scoped, versioned Agent invocation and lifecycle control'
+});
+/** Platform factory capability. The wire key is stable across SDK naming changes. */ const AgentRuntimeFactoryCapability = modelProvider.createRuntimeCapability('platform.agent_invocation.factory');
+
+const ASSISTANT_CAPABILITY_PROVIDER = 'ASSISTANT_CAPABILITY_PROVIDER';
+const AssistantCapabilityProvider = (key)=>common.applyDecorators(common.SetMetadata(ASSISTANT_CAPABILITY_PROVIDER, key), common.SetMetadata(STRATEGY_META_KEY, ASSISTANT_CAPABILITY_PROVIDER));
+exports.AssistantCapabilityProviderRegistry = class AssistantCapabilityProviderRegistry extends BaseStrategyRegistry {
+    constructor(discovery, reflector){
+        super(ASSISTANT_CAPABILITY_PROVIDER, discovery, reflector);
+    }
+};
+exports.AssistantCapabilityProviderRegistry = __decorate([
+    common.Injectable(),
+    __metadata("design:paramtypes", [
+        core.DiscoveryService,
+        core.Reflector
+    ])
+], exports.AssistantCapabilityProviderRegistry);
+
 /**
  * Common platform message length limits
  */ const CHAT_CHANNEL_TEXT_LIMITS = {
@@ -4261,10 +4310,12 @@ function appendSandboxMessage(output, message) {
 function resolveSandboxExecutionOptions(options, defaults = DEFAULT_SANDBOX_SHELL_EXECUTION_OPTIONS) {
     const timeoutMs = typeof (options == null ? void 0 : options.timeoutMs) === 'number' && Number.isFinite(options.timeoutMs) && options.timeoutMs > 0 ? Math.trunc(options.timeoutMs) : typeof defaults.timeoutMs === 'number' && Number.isFinite(defaults.timeoutMs) && defaults.timeoutMs > 0 ? Math.trunc(defaults.timeoutMs) : DEFAULT_SANDBOX_SHELL_TIMEOUT_MS;
     const maxOutputBytes = typeof (options == null ? void 0 : options.maxOutputBytes) === 'number' && Number.isFinite(options.maxOutputBytes) && options.maxOutputBytes > 0 ? Math.trunc(options.maxOutputBytes) : typeof defaults.maxOutputBytes === 'number' && Number.isFinite(defaults.maxOutputBytes) && defaults.maxOutputBytes > 0 ? Math.trunc(defaults.maxOutputBytes) : DEFAULT_SANDBOX_EXECUTION_MAX_OUTPUT_BYTES;
-    return {
+    return _extends._extends({
         timeoutMs,
         maxOutputBytes
-    };
+    }, (options == null ? void 0 : options.signal) ? {
+        signal: options.signal
+    } : {});
 }
 
 function isObjectLike$2(value) {
@@ -5917,6 +5968,9 @@ exports.EvolutionTargetProviderRegistry = __decorate([
 ], exports.EvolutionTargetProviderRegistry);
 
 const EVOLUTION_RUNTIME_SERVICE_TOKEN = 'XPERT_EVOLUTION_RUNTIME_SERVICE';
+const EvolutionBaselineRuntimeCapability = modelProvider.createRuntimeCapability('platform.agent-evolution.baselines', {
+    description: 'Inspect and initialize organization rule baselines with administrator authorization and revision checks.'
+});
 const EvolutionRuntimeCapability = modelProvider.createRuntimeCapability('platform.agent-evolution', {
     description: 'Ingest learning signals and resolve immutable capability versions for domain runtimes.'
 });
@@ -6157,6 +6211,11 @@ function describeXpertToolProvider(instance) {
         if (middlewareProvider && !middlewareProviders.has(middlewareProvider)) {
             throw new Error(`Tool '${toolOptions.name}' references undeclared Middleware provider '${middlewareProvider}'.`);
         }
+        if (toolOptions.app) {
+            if (!middlewareProvider || !toolOptions.app.visibility.length || toolOptions.app.visibility.some((item)=>item !== 'model' && item !== 'app') || toolOptions.app.resourceKey && (!appKeys.has(toolOptions.app.resourceKey) || !toolOptions.app.visibility.includes('app'))) {
+                throw new Error(`Tool '${toolOptions.name}' has an invalid middleware App binding.`);
+            }
+        }
         const appKey = toolOptions.mcp && ((_toolOptions_mcp_app = toolOptions.mcp.app) == null ? void 0 : _toolOptions_mcp_app.resourceKey);
         if (appKey && !appKeys.has(appKey)) {
             throw new Error(`MCP Tool '${toolOptions.name}' references undeclared App '${appKey}'.`);
@@ -6554,12 +6613,21 @@ class DecoratedAgentMiddlewareStrategy {
         return this.descriptor.tools.filter((item)=>item.middlewareProvider === this.provider).map((item)=>item.options.name);
     }
     async createMiddleware(options, context) {
+        var _this_descriptor_options_apps;
         const tools = this.descriptor.tools.filter((item)=>item.middlewareProvider === this.provider).map((item)=>createAgentTool(this.instance, item, context, options));
         const extensions = await (this.instance.getMiddlewareExtensions == null ? void 0 : this.instance.getMiddlewareExtensions.call(this.instance, this.provider, options, context));
         return _extends._extends({}, extensions != null ? extensions : {}, {
             name: this.provider,
             tools
-        });
+        }, ((_this_descriptor_options_apps = this.descriptor.options.apps) == null ? void 0 : _this_descriptor_options_apps.length) ? {
+            apps: {
+                definitions: this.descriptor.options.apps,
+                tools: Object.fromEntries(this.descriptor.tools.filter((item)=>item.middlewareProvider === this.provider && item.options.app).map((item)=>[
+                        item.options.name,
+                        item.options.app
+                    ]))
+            }
+        } : {});
     }
     constructor(instance, descriptor, provider){
         var _descriptor_options_middlewares;
@@ -9719,6 +9787,39 @@ function stableJson(value) {
     return `{${entries.map(([key, item])=>`${JSON.stringify(key)}:${stableJson(item)}`).join(',')}}`;
 }
 
+const PROJECT_TYPE_PROVIDER = 'PROJECT_TYPE_PROVIDER';
+/** Register the stable provider key used by entity-backed App project type declarations. */ const ProjectTypeProvider = (key)=>common.applyDecorators(common.SetMetadata(PROJECT_TYPE_PROVIDER, key), common.SetMetadata(STRATEGY_META_KEY, PROJECT_TYPE_PROVIDER));
+exports.ProjectTypeProviderRegistry = class ProjectTypeProviderRegistry extends BaseStrategyRegistry {
+    constructor(discovery, reflector){
+        super(PROJECT_TYPE_PROVIDER, discovery, reflector);
+    }
+};
+exports.ProjectTypeProviderRegistry = __decorate([
+    common.Injectable(),
+    __metadata("design:paramtypes", [
+        core.DiscoveryService,
+        core.Reflector
+    ])
+], exports.ProjectTypeProviderRegistry);
+
+const PROJECT_TASK_PROVIDER = 'PROJECT_TASK_PROVIDER';
+const ProjectTaskProvider = (key)=>common.applyDecorators(common.SetMetadata(PROJECT_TASK_PROVIDER, key), common.SetMetadata(STRATEGY_META_KEY, PROJECT_TASK_PROVIDER));
+exports.ProjectTaskProviderRegistry = class ProjectTaskProviderRegistry extends BaseStrategyRegistry {
+    constructor(discovery, reflector){
+        super(PROJECT_TASK_PROVIDER, discovery, reflector);
+    }
+};
+exports.ProjectTaskProviderRegistry = __decorate([
+    common.Injectable(),
+    __metadata("design:paramtypes", [
+        core.DiscoveryService,
+        core.Reflector
+    ])
+], exports.ProjectTaskProviderRegistry);
+const ProjectTasksRuntimeCapability = modelProvider.createRuntimeCapability('platform.project.tasks', {
+    description: 'Read project task graphs, manage schedules, and resolve exact execution conversations.'
+});
+
 Object.defineProperty(exports, "ASSISTANT_CHAT_SEND_MESSAGE_COMMAND", {
     enumerable: true,
     get: function () { return contracts.ASSISTANT_CHAT_SEND_MESSAGE_COMMAND; }
@@ -9777,12 +9878,18 @@ exports.ACCOUNT_BINDING_PERMISSION_SERVICE_TOKEN = ACCOUNT_BINDING_PERMISSION_SE
 exports.AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING = AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING;
 exports.AGENT_CHAT_DISPATCH_MESSAGE_TYPE = AGENT_CHAT_DISPATCH_MESSAGE_TYPE;
 exports.AGENT_MIDDLEWARE_STRATEGY = AGENT_MIDDLEWARE_STRATEGY;
+exports.AGENT_RUNTIME_STRATEGY = AGENT_RUNTIME_STRATEGY;
 exports.AIModelProviderNotFoundException = AIModelProviderNotFoundException;
 exports.AIModelProviderStrategy = AIModelProviderStrategy;
 exports.AI_MODEL_PROVIDER = AI_MODEL_PROVIDER;
+exports.ASSISTANT_CAPABILITY_PROVIDER = ASSISTANT_CAPABILITY_PROVIDER;
 exports.AdapterDataSourceStrategy = AdapterDataSourceStrategy;
+exports.AgentInvocationRuntimeCapability = AgentInvocationRuntimeCapability;
 exports.AgentMiddlewareStrategy = AgentMiddlewareStrategy;
+exports.AgentRuntimeFactoryCapability = AgentRuntimeFactoryCapability;
+exports.AgentRuntimeStrategy = AgentRuntimeStrategy;
 exports.AiModelNotFoundException = AiModelNotFoundException;
+exports.AssistantCapabilityProvider = AssistantCapabilityProvider;
 exports.AssistantTaskRuntimeCapability = AssistantTaskRuntimeCapability;
 exports.BOUND_IDENTITY_LOGIN_PERMISSION_SERVICE_TOKEN = BOUND_IDENTITY_LOGIN_PERMISSION_SERVICE_TOKEN;
 exports.BUILTIN_GLOBAL_SCOPE = BUILTIN_GLOBAL_SCOPE;
@@ -9828,6 +9935,7 @@ exports.DocumentSourceStrategy = DocumentSourceStrategy;
 exports.DocumentTransformerStrategy = DocumentTransformerStrategy;
 exports.EVOLUTION_RUNTIME_SERVICE_TOKEN = EVOLUTION_RUNTIME_SERVICE_TOKEN;
 exports.EVOLUTION_TARGET_PROVIDER = EVOLUTION_TARGET_PROVIDER;
+exports.EvolutionBaselineRuntimeCapability = EvolutionBaselineRuntimeCapability;
 exports.EvolutionChangeRuntimeCapability = EvolutionChangeRuntimeCapability;
 exports.EvolutionRuntimeCapability = EvolutionRuntimeCapability;
 exports.EvolutionTargetProviderStrategy = EvolutionTargetProviderStrategy;
@@ -9849,7 +9957,9 @@ exports.ImageUnderstandingStrategy = ImageUnderstandingStrategy;
 exports.IntegrationStrategyKey = IntegrationStrategyKey;
 exports.JUMP_TO_TARGETS = JUMP_TO_TARGETS;
 exports.JsonSchemaValidator = JsonSchemaValidator;
+exports.KEYWORD_ANALYZER_STRATEGY = KEYWORD_ANALYZER_STRATEGY;
 exports.KNOWLEDGE_STRATEGY = KNOWLEDGE_STRATEGY;
+exports.KeywordAnalyzerStrategy = KeywordAnalyzerStrategy;
 exports.KnowledgeStrategyKey = KnowledgeStrategyKey;
 exports.LLMUsage = LLMUsage;
 exports.LargeLanguageModel = LargeLanguageModel;
@@ -9869,6 +9979,8 @@ exports.PLUGIN_METADATA_KEY = PLUGIN_METADATA_KEY;
 exports.PLUGIN_VERSION_METADATA_KEY = PLUGIN_VERSION_METADATA_KEY;
 exports.PLUGIN_WEBHOOK_AUTH_METADATA_KEY = PLUGIN_WEBHOOK_AUTH_METADATA_KEY;
 exports.PLUGIN_WEBHOOK_AUTH_SERVICE_TOKEN = PLUGIN_WEBHOOK_AUTH_SERVICE_TOKEN;
+exports.PROJECT_TASK_PROVIDER = PROJECT_TASK_PROVIDER;
+exports.PROJECT_TYPE_PROVIDER = PROJECT_TYPE_PROVIDER;
 exports.PROVIDE_AI_MODEL_LLM = PROVIDE_AI_MODEL_LLM;
 exports.PROVIDE_AI_MODEL_MODERATION = PROVIDE_AI_MODEL_MODERATION;
 exports.PROVIDE_AI_MODEL_RERANK = PROVIDE_AI_MODEL_RERANK;
@@ -9877,6 +9989,9 @@ exports.PROVIDE_AI_MODEL_TEXT_EMBEDDING = PROVIDE_AI_MODEL_TEXT_EMBEDDING;
 exports.PROVIDE_AI_MODEL_TTS = PROVIDE_AI_MODEL_TTS;
 exports.PluginJobProcessor = PluginJobProcessor;
 exports.PluginWebhookAuth = PluginWebhookAuth;
+exports.ProjectTaskProvider = ProjectTaskProvider;
+exports.ProjectTasksRuntimeCapability = ProjectTasksRuntimeCapability;
+exports.ProjectTypeProvider = ProjectTypeProvider;
 exports.RETRIEVER_STRATEGY = RETRIEVER_STRATEGY;
 exports.RequestContext = RequestContext;
 exports.RequirePermissionOperation = RequirePermissionOperation;
@@ -9969,6 +10084,7 @@ exports.getRequestContext = getRequestContext;
 exports.getRequiredPermissionOperation = getRequiredPermissionOperation;
 exports.getTenantGlobalScopeKey = getTenantGlobalScopeKey;
 exports.getXpertToolMethod = getXpertToolMethod;
+exports.isAgentInvocationTerminal = isAgentInvocationTerminal;
 exports.isDevelopmentSandboxRuntimeEnvironment = isDevelopmentSandboxRuntimeEnvironment;
 exports.isModelOutputValidationError = isModelOutputValidationError;
 exports.isModelUsagePricingConfig = isModelUsagePricingConfig;