@xpert-ai/plugin-sdk 3.18.7 → 3.19.0

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # @xpert-ai/plugin-sdk
 
+## 3.19.0
+
+### Minor Changes
+
+- 99d09ec: Release a coordinated minor update across all Xpert workspace packages, including the API, Web and Bosi applications, shared SDK and contracts, backend and UI libraries, bundled plugins, sandbox runtimes and documentation.
+
+### Patch Changes
+
+- 8a78318: Add explicit application Project types, provider-backed domain bindings, and typed Project provisioning/access contracts. App plugins using ProjectTypeProvider require these releases (3.19.0 or newer) and the matching host Project type endpoints/schema migration.
+- Updated dependencies [8a78318]
+- Updated dependencies [1e44173]
+- Updated dependencies [c953822]
+- Updated dependencies [b7983c8]
+- Updated dependencies [08f66e7]
+- Updated dependencies [b62543f]
+- Updated dependencies [5f26e05]
+- Updated dependencies [99d09ec]
+  - @xpert-ai/contracts@3.19.0
+
 ## 3.18.7
 
 ### Patch Changes

package/MIDDLEWARE_APPS.md

@@ -0,0 +1,71 @@
+# MCP Apps in Agent middleware
+
+An `AgentMiddleware` can return `apps` alongside `tools`. It does not need a remote
+MCP server or a published Toolset. The host renders the bundled HTML using its
+existing MCP App sandbox and RPC bridge.
+
+ChatKit accesses resources, RPC, approvals and teardown through `/api/ai/mcp-apps`,
+using the AI module's `ApiKeyOrClientSecretAuthGuard`. The ordinary management
+routes keep the platform's standard authorization. Use an SDK version whose
+`client.mcp.apps` targets this AI endpoint.
+
+```ts
+return {
+  name: 'ProjectSettings',
+  tools: [configure, readSettings, saveSettings],
+  apps: {
+    definitions: [{ key: 'settings', entry: 'dist/mcp-apps/settings.html' }],
+    tools: {
+      configure: { resourceKey: 'settings', visibility: ['model', 'app'] },
+      read_settings: { visibility: ['app'], approval: 'none' },
+      save_settings: { visibility: ['app'], approval: 'none' }
+    }
+  }
+}
+```
+
+Keys in `apps.tools` must match actual tool names. App-only tools are excluded
+from the model's tool list. `approval: 'none'` is a trusted plugin declaration for
+operations whose own services enforce scope, revision and validation. Omit it
+to retain host approval. App access never grants access to another middleware.
+For decorated providers, use `@XpertToolProvider({ apps: [...] })` and
+`@XpertTool({ middleware: true, app: { ... } })` with the same binding contract.
+
+To pause after a successful tool, configure the Assistant:
+
+```yaml
+team:
+  agentConfig:
+    interruptAfter: [configure]
+```
+
+The completed tool result is checkpointed before a separate gate calls
+LangGraph `interrupt`. Resume targets the gate, so tool side effects are not
+replayed. Ordinary tools display a Continue control; an App sends a standard
+`ui/message` after saving. The host supplies the original tool-call and execution
+identity, and ChatKit uses the existing `action: resume` protocol. No `ui/resume`
+extension is required. The App's message is added once at user priority on resume,
+so the Agent can distinguish the confirmed input from the pre-pause tool result.
+Inline images, audio and binary resources are retained in this message (25 MiB
+combined); arbitrary file paths and remote attachment URLs are rejected. ChatKit
+acknowledges continuation only after the run response supplies `Content-Location`,
+not when the local thread is resolved. Cross-origin hosts must expose that header.
+Error ToolMessages skip this gate so the Agent can repair
+the failure. Prefer calling interactive tools alone rather than mixing them with
+unrelated parallel work.
+
+The runtime re-resolves middleware bindings and enabled tools for each App RPC.
+UI teardown retains paused native form snapshots for 7 days; it does not cancel
+the Agent. Business settings must still be persisted by domain services before
+continuation. This requires the host capability `platform.middleware.mcp-apps`
+and the corresponding ChatKit continuation support; it adds no ORM dependency
+to the SDK.
+
+On hosts with schema synchronization disabled, apply
+`packages/server-ai/src/mcp-app-runtime/migrations/20260928-middleware-app-audit.sql`
+before enabling native middleware Apps. Their audit rows retain provider identity
+in `source` and leave `toolsetId` null. Interactive ChatKit user sessions are
+accepted only for their bound Assistant; existing user JWT access remains valid.
+An App produced by an external Assistant is also accessible when its persisted
+execution parent chain terminates at the session's entry Assistant in the same
+thread. Each execution remains subject to the normal access check.

package/README.md

@@ -115,6 +115,8 @@ For completed operations, `prepareToolResult(() => project(result), () => minima
 
 For a host-native MCP App, declare each static HTML bundle once in the Provider's `apps` array, then bind a Tool with `mcp.app.resourceKey` and include `app` visibility. The App key must exist in the same Provider and its entry must be a relative `.html` path inside the packaged plugin. The host publishes the bundle as a `ui://` resource; plugins must not create a stdio server or put CSP/credentials in Tool results.
 
+Agent middleware can also expose these Apps without a published Toolset. See [middleware Apps and post-tool continuation](./MIDDLEWARE_APPS.md) for `app` bindings and `interruptAfter` checkpoints.
+
 The host owns the public MCP endpoint identity. It combines the plugin's stable `artifactNamespace`, the Provider key, and an opaque scope hash; client names and product-specific identifiers do not belong in the slug. A tenant- or system-level plugin has one tenant-scoped Publication and capability snapshot, while each organization receives an independent access grant and organization-bound credential. An organization-level plugin receives a dedicated organization-scoped Publication.
 
 ## View extensions

package/index.cjs.js

@@ -9,7 +9,6 @@ var rxjs = require('rxjs');
 var contracts = require('@xpert-ai/contracts');
 var node_async_hooks = require('node:async_hooks');
 var passportJwt = require('passport-jwt');
-var jsonwebtoken = require('jsonwebtoken');
 var node_crypto = require('node:crypto');
 var cqrs = require('@nestjs/cqrs');
 var fs = require('fs');
@@ -350,22 +349,15 @@ class RequestContext {
         }
         return scope.organizationId;
     }
-    static hasPermissions(findPermissions, throwError) {
-        const requestContext = RequestContext.currentRequestContext();
-        if (requestContext) {
-            // tslint:disable-next-line
-            const token = passportJwt.ExtractJwt.fromAuthHeaderAsBearerToken()(requestContext.request);
-            if (token) {
-                const { permissions } = jsonwebtoken.verify(token, process.env['JWT_SECRET']);
-                if (permissions) {
-                    const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
-                    if (found.length === findPermissions.length) {
-                        return true;
-                    }
-                } else {
-                    return false;
-                }
-            }
+    /**
+     * Check the authenticated principal's enabled role permissions, matching the
+     * server RequestContext. Authentication guards resolve JWTs, API keys and
+     * ChatKit client secrets before this check; the bearer is not always a JWT.
+     */ static hasPermissions(findPermissions, throwError) {
+        const permissions = this.currentPermissions();
+        if (permissions.length > 0) {
+            const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
+            if (found.length === findPermissions.length) return true;
         }
         if (throwError) {
             throw new common.HttpException('Unauthorized', common.HttpStatus.UNAUTHORIZED);
@@ -373,17 +365,9 @@ class RequestContext {
         return false;
     }
     static hasAnyPermission(findPermissions, throwError) {
-        const requestContext = RequestContext.currentRequestContext();
-        if (requestContext) {
-            // tslint:disable-next-line
-            const token = passportJwt.ExtractJwt.fromAuthHeaderAsBearerToken()(requestContext.request);
-            if (token) {
-                const { permissions } = jsonwebtoken.verify(token, process.env['JWT_SECRET']);
-                const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
-                if (found.length > 0) {
-                    return true;
-                }
-            }
+        const permissions = this.currentPermissions();
+        if (permissions.some((value)=>findPermissions.includes(value))) {
+            return true;
         }
         if (throwError) {
             throw new common.HttpException('Unauthorized', common.HttpStatus.UNAUTHORIZED);
@@ -421,20 +405,6 @@ class RequestContext {
         const context = RequestContext.currentRequestContext();
         if (context) {
             var _this_currentUser_role, _this_currentUser;
-            // tslint:disable-next-line
-            const token = this.currentToken();
-            if (token) {
-                try {
-                    const { role } = jsonwebtoken.verify(token, process.env['JWT_SECRET']);
-                    if (role) {
-                        return roles.includes(role);
-                    }
-                } catch (error) {
-                    if (!(error instanceof jsonwebtoken.JsonWebTokenError)) {
-                        throw error;
-                    }
-                }
-            }
             const role = (_this_currentUser = this.currentUser()) == null ? void 0 : (_this_currentUser_role = _this_currentUser.role) == null ? void 0 : _this_currentUser_role.name;
             if (role) {
                 return roles.includes(role);
@@ -445,6 +415,11 @@ class RequestContext {
         }
         return false;
     }
+    static currentPermissions() {
+        var _this_currentUser_role, _this_currentUser;
+        var _this_currentUser_role_rolePermissions;
+        return ((_this_currentUser_role_rolePermissions = (_this_currentUser = this.currentUser()) == null ? void 0 : (_this_currentUser_role = _this_currentUser.role) == null ? void 0 : _this_currentUser_role.rolePermissions) != null ? _this_currentUser_role_rolePermissions : []).filter((rolePermission)=>rolePermission == null ? void 0 : rolePermission.enabled).map((rolePermission)=>rolePermission == null ? void 0 : rolePermission.permission).filter((permission)=>!!permission);
+    }
     constructor(request, response, reqId, userId, extras = {}){
         this.request = request;
         this.response = response;
@@ -515,15 +490,6 @@ function runWithRequestContext(req, res, next) {
 }
 
 exports.StrategyBus = class StrategyBus {
-    registerRemovalGuard(guard) {
-        this.removalGuards.add(guard);
-        return ()=>{
-            this.removalGuards.delete(guard);
-        };
-    }
-    async assertCanRemove(scopeKey, pluginNames) {
-        for (const guard of this.removalGuards)await guard(scopeKey, pluginNames);
-    }
     upsert(strategyType, entry) {
         this.subject.next({
             type: 'UPSERT',
@@ -541,7 +507,6 @@ exports.StrategyBus = class StrategyBus {
         } : {}));
     }
     constructor(){
-        this.removalGuards = new Set();
         this.subject = new rxjs.Subject();
         this.events$ = this.subject.asObservable();
     }
@@ -3882,7 +3847,7 @@ exports.AgentMiddlewareRegistry = __decorate([
     'end'
 ];
 
-const AssistantTaskRuntimeCapability = modelProvider.createRuntimeCapability('platform.assistant_task', {
+/** Scoped runtime capability for platform Assistant tasks. */ const AssistantTaskRuntimeCapability = modelProvider.createRuntimeCapability('platform.assistant_task', {
     description: 'Start asynchronous tasks on the current platform assistant.'
 });
 
@@ -4005,6 +3970,52 @@ exports.HandoffProcessorRegistry = __decorate([
     runTtlMs: 10 * 60 * 1000
 };
 
+/** Checks confirmed completion; unknown remains non-terminal. */ function isAgentInvocationTerminal(status) {
+    return status === 'succeeded' || status === 'failed' || status === 'cancelled';
+}
+
+/** Nest discovery metadata key for runtime strategies. */ const AGENT_RUNTIME_STRATEGY = 'AGENT_RUNTIME_STRATEGY';
+/** Associate a stable provider key with an adapter. Also declare @Injectable() and register the provider. */ const AgentRuntimeStrategy = (provider)=>common.applyDecorators(common.SetMetadata(AGENT_RUNTIME_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, AGENT_RUNTIME_STRATEGY));
+/** Scoped strategy registry with pinned provider/version lookup for continuation. */ exports.AgentRuntimeRegistry = class AgentRuntimeRegistry extends BaseStrategyRegistry {
+    /** Find the exact original scope/plugin/version, without fallback. Returns undefined if unavailable. */ getPinned(provider, source) {
+        var _this_strategies_get;
+        const strategy = (_this_strategies_get = this.strategies.get(source.scopeKey)) == null ? void 0 : _this_strategies_get.get(provider);
+        if (!strategy) return undefined;
+        const actual = this.getSource(strategy);
+        return actual.kind === source.kind && actual.scopeKey === source.scopeKey && (actual.kind !== 'plugin' || source.kind !== 'plugin' || actual.pluginName === source.pluginName && actual.pluginVersion === source.pluginVersion) ? strategy : undefined;
+    }
+    constructor(discoveryService, reflector){
+        super(AGENT_RUNTIME_STRATEGY, discoveryService, reflector);
+    }
+};
+exports.AgentRuntimeRegistry = __decorate([
+    common.Injectable(),
+    __metadata("design:paramtypes", [
+        core.DiscoveryService,
+        core.Reflector
+    ])
+], exports.AgentRuntimeRegistry);
+
+/** Caller-scoped API obtained through runtime.capabilities.require(...). */ const AgentInvocationRuntimeCapability = modelProvider.createRuntimeCapability('platform.agent_invocation', {
+    description: 'Scoped, versioned Agent invocation and lifecycle control'
+});
+/** Platform factory capability. The wire key is stable across SDK naming changes. */ const AgentRuntimeFactoryCapability = modelProvider.createRuntimeCapability('platform.agent_invocation.factory');
+
+const ASSISTANT_CAPABILITY_PROVIDER = 'ASSISTANT_CAPABILITY_PROVIDER';
+const AssistantCapabilityProvider = (key)=>common.applyDecorators(common.SetMetadata(ASSISTANT_CAPABILITY_PROVIDER, key), common.SetMetadata(STRATEGY_META_KEY, ASSISTANT_CAPABILITY_PROVIDER));
+exports.AssistantCapabilityProviderRegistry = class AssistantCapabilityProviderRegistry extends BaseStrategyRegistry {
+    constructor(discovery, reflector){
+        super(ASSISTANT_CAPABILITY_PROVIDER, discovery, reflector);
+    }
+};
+exports.AssistantCapabilityProviderRegistry = __decorate([
+    common.Injectable(),
+    __metadata("design:paramtypes", [
+        core.DiscoveryService,
+        core.Reflector
+    ])
+], exports.AssistantCapabilityProviderRegistry);
+
 /**
  * Common platform message length limits
  */ const CHAT_CHANNEL_TEXT_LIMITS = {
@@ -4299,10 +4310,12 @@ function appendSandboxMessage(output, message) {
 function resolveSandboxExecutionOptions(options, defaults = DEFAULT_SANDBOX_SHELL_EXECUTION_OPTIONS) {
     const timeoutMs = typeof (options == null ? void 0 : options.timeoutMs) === 'number' && Number.isFinite(options.timeoutMs) && options.timeoutMs > 0 ? Math.trunc(options.timeoutMs) : typeof defaults.timeoutMs === 'number' && Number.isFinite(defaults.timeoutMs) && defaults.timeoutMs > 0 ? Math.trunc(defaults.timeoutMs) : DEFAULT_SANDBOX_SHELL_TIMEOUT_MS;
     const maxOutputBytes = typeof (options == null ? void 0 : options.maxOutputBytes) === 'number' && Number.isFinite(options.maxOutputBytes) && options.maxOutputBytes > 0 ? Math.trunc(options.maxOutputBytes) : typeof defaults.maxOutputBytes === 'number' && Number.isFinite(defaults.maxOutputBytes) && defaults.maxOutputBytes > 0 ? Math.trunc(defaults.maxOutputBytes) : DEFAULT_SANDBOX_EXECUTION_MAX_OUTPUT_BYTES;
-    return {
+    return _extends._extends({
         timeoutMs,
         maxOutputBytes
-    };
+    }, (options == null ? void 0 : options.signal) ? {
+        signal: options.signal
+    } : {});
 }
 
 function isObjectLike$2(value) {
@@ -5955,6 +5968,9 @@ exports.EvolutionTargetProviderRegistry = __decorate([
 ], exports.EvolutionTargetProviderRegistry);
 
 const EVOLUTION_RUNTIME_SERVICE_TOKEN = 'XPERT_EVOLUTION_RUNTIME_SERVICE';
+const EvolutionBaselineRuntimeCapability = modelProvider.createRuntimeCapability('platform.agent-evolution.baselines', {
+    description: 'Inspect and initialize organization rule baselines with administrator authorization and revision checks.'
+});
 const EvolutionRuntimeCapability = modelProvider.createRuntimeCapability('platform.agent-evolution', {
     description: 'Ingest learning signals and resolve immutable capability versions for domain runtimes.'
 });
@@ -6195,6 +6211,11 @@ function describeXpertToolProvider(instance) {
         if (middlewareProvider && !middlewareProviders.has(middlewareProvider)) {
             throw new Error(`Tool '${toolOptions.name}' references undeclared Middleware provider '${middlewareProvider}'.`);
         }
+        if (toolOptions.app) {
+            if (!middlewareProvider || !toolOptions.app.visibility.length || toolOptions.app.visibility.some((item)=>item !== 'model' && item !== 'app') || toolOptions.app.resourceKey && (!appKeys.has(toolOptions.app.resourceKey) || !toolOptions.app.visibility.includes('app'))) {
+                throw new Error(`Tool '${toolOptions.name}' has an invalid middleware App binding.`);
+            }
+        }
         const appKey = toolOptions.mcp && ((_toolOptions_mcp_app = toolOptions.mcp.app) == null ? void 0 : _toolOptions_mcp_app.resourceKey);
         if (appKey && !appKeys.has(appKey)) {
             throw new Error(`MCP Tool '${toolOptions.name}' references undeclared App '${appKey}'.`);
@@ -6592,12 +6613,21 @@ class DecoratedAgentMiddlewareStrategy {
         return this.descriptor.tools.filter((item)=>item.middlewareProvider === this.provider).map((item)=>item.options.name);
     }
     async createMiddleware(options, context) {
+        var _this_descriptor_options_apps;
         const tools = this.descriptor.tools.filter((item)=>item.middlewareProvider === this.provider).map((item)=>createAgentTool(this.instance, item, context, options));
         const extensions = await (this.instance.getMiddlewareExtensions == null ? void 0 : this.instance.getMiddlewareExtensions.call(this.instance, this.provider, options, context));
         return _extends._extends({}, extensions != null ? extensions : {}, {
             name: this.provider,
             tools
-        });
+        }, ((_this_descriptor_options_apps = this.descriptor.options.apps) == null ? void 0 : _this_descriptor_options_apps.length) ? {
+            apps: {
+                definitions: this.descriptor.options.apps,
+                tools: Object.fromEntries(this.descriptor.tools.filter((item)=>item.middlewareProvider === this.provider && item.options.app).map((item)=>[
+                        item.options.name,
+                        item.options.app
+                    ]))
+            }
+        } : {});
     }
     constructor(instance, descriptor, provider){
         var _descriptor_options_middlewares;
@@ -9757,6 +9787,39 @@ function stableJson(value) {
     return `{${entries.map(([key, item])=>`${JSON.stringify(key)}:${stableJson(item)}`).join(',')}}`;
 }
 
+const PROJECT_TYPE_PROVIDER = 'PROJECT_TYPE_PROVIDER';
+/** Register the stable provider key used by entity-backed App project type declarations. */ const ProjectTypeProvider = (key)=>common.applyDecorators(common.SetMetadata(PROJECT_TYPE_PROVIDER, key), common.SetMetadata(STRATEGY_META_KEY, PROJECT_TYPE_PROVIDER));
+exports.ProjectTypeProviderRegistry = class ProjectTypeProviderRegistry extends BaseStrategyRegistry {
+    constructor(discovery, reflector){
+        super(PROJECT_TYPE_PROVIDER, discovery, reflector);
+    }
+};
+exports.ProjectTypeProviderRegistry = __decorate([
+    common.Injectable(),
+    __metadata("design:paramtypes", [
+        core.DiscoveryService,
+        core.Reflector
+    ])
+], exports.ProjectTypeProviderRegistry);
+
+const PROJECT_TASK_PROVIDER = 'PROJECT_TASK_PROVIDER';
+const ProjectTaskProvider = (key)=>common.applyDecorators(common.SetMetadata(PROJECT_TASK_PROVIDER, key), common.SetMetadata(STRATEGY_META_KEY, PROJECT_TASK_PROVIDER));
+exports.ProjectTaskProviderRegistry = class ProjectTaskProviderRegistry extends BaseStrategyRegistry {
+    constructor(discovery, reflector){
+        super(PROJECT_TASK_PROVIDER, discovery, reflector);
+    }
+};
+exports.ProjectTaskProviderRegistry = __decorate([
+    common.Injectable(),
+    __metadata("design:paramtypes", [
+        core.DiscoveryService,
+        core.Reflector
+    ])
+], exports.ProjectTaskProviderRegistry);
+const ProjectTasksRuntimeCapability = modelProvider.createRuntimeCapability('platform.project.tasks', {
+    description: 'Read project task graphs, manage schedules, and resolve exact execution conversations.'
+});
+
 Object.defineProperty(exports, "ASSISTANT_CHAT_SEND_MESSAGE_COMMAND", {
     enumerable: true,
     get: function () { return contracts.ASSISTANT_CHAT_SEND_MESSAGE_COMMAND; }
@@ -9815,12 +9878,18 @@ exports.ACCOUNT_BINDING_PERMISSION_SERVICE_TOKEN = ACCOUNT_BINDING_PERMISSION_SE
 exports.AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING = AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING;
 exports.AGENT_CHAT_DISPATCH_MESSAGE_TYPE = AGENT_CHAT_DISPATCH_MESSAGE_TYPE;
 exports.AGENT_MIDDLEWARE_STRATEGY = AGENT_MIDDLEWARE_STRATEGY;
+exports.AGENT_RUNTIME_STRATEGY = AGENT_RUNTIME_STRATEGY;
 exports.AIModelProviderNotFoundException = AIModelProviderNotFoundException;
 exports.AIModelProviderStrategy = AIModelProviderStrategy;
 exports.AI_MODEL_PROVIDER = AI_MODEL_PROVIDER;
+exports.ASSISTANT_CAPABILITY_PROVIDER = ASSISTANT_CAPABILITY_PROVIDER;
 exports.AdapterDataSourceStrategy = AdapterDataSourceStrategy;
+exports.AgentInvocationRuntimeCapability = AgentInvocationRuntimeCapability;
 exports.AgentMiddlewareStrategy = AgentMiddlewareStrategy;
+exports.AgentRuntimeFactoryCapability = AgentRuntimeFactoryCapability;
+exports.AgentRuntimeStrategy = AgentRuntimeStrategy;
 exports.AiModelNotFoundException = AiModelNotFoundException;
+exports.AssistantCapabilityProvider = AssistantCapabilityProvider;
 exports.AssistantTaskRuntimeCapability = AssistantTaskRuntimeCapability;
 exports.BOUND_IDENTITY_LOGIN_PERMISSION_SERVICE_TOKEN = BOUND_IDENTITY_LOGIN_PERMISSION_SERVICE_TOKEN;
 exports.BUILTIN_GLOBAL_SCOPE = BUILTIN_GLOBAL_SCOPE;
@@ -9866,6 +9935,7 @@ exports.DocumentSourceStrategy = DocumentSourceStrategy;
 exports.DocumentTransformerStrategy = DocumentTransformerStrategy;
 exports.EVOLUTION_RUNTIME_SERVICE_TOKEN = EVOLUTION_RUNTIME_SERVICE_TOKEN;
 exports.EVOLUTION_TARGET_PROVIDER = EVOLUTION_TARGET_PROVIDER;
+exports.EvolutionBaselineRuntimeCapability = EvolutionBaselineRuntimeCapability;
 exports.EvolutionChangeRuntimeCapability = EvolutionChangeRuntimeCapability;
 exports.EvolutionRuntimeCapability = EvolutionRuntimeCapability;
 exports.EvolutionTargetProviderStrategy = EvolutionTargetProviderStrategy;
@@ -9909,6 +9979,8 @@ exports.PLUGIN_METADATA_KEY = PLUGIN_METADATA_KEY;
 exports.PLUGIN_VERSION_METADATA_KEY = PLUGIN_VERSION_METADATA_KEY;
 exports.PLUGIN_WEBHOOK_AUTH_METADATA_KEY = PLUGIN_WEBHOOK_AUTH_METADATA_KEY;
 exports.PLUGIN_WEBHOOK_AUTH_SERVICE_TOKEN = PLUGIN_WEBHOOK_AUTH_SERVICE_TOKEN;
+exports.PROJECT_TASK_PROVIDER = PROJECT_TASK_PROVIDER;
+exports.PROJECT_TYPE_PROVIDER = PROJECT_TYPE_PROVIDER;
 exports.PROVIDE_AI_MODEL_LLM = PROVIDE_AI_MODEL_LLM;
 exports.PROVIDE_AI_MODEL_MODERATION = PROVIDE_AI_MODEL_MODERATION;
 exports.PROVIDE_AI_MODEL_RERANK = PROVIDE_AI_MODEL_RERANK;
@@ -9917,6 +9989,9 @@ exports.PROVIDE_AI_MODEL_TEXT_EMBEDDING = PROVIDE_AI_MODEL_TEXT_EMBEDDING;
 exports.PROVIDE_AI_MODEL_TTS = PROVIDE_AI_MODEL_TTS;
 exports.PluginJobProcessor = PluginJobProcessor;
 exports.PluginWebhookAuth = PluginWebhookAuth;
+exports.ProjectTaskProvider = ProjectTaskProvider;
+exports.ProjectTasksRuntimeCapability = ProjectTasksRuntimeCapability;
+exports.ProjectTypeProvider = ProjectTypeProvider;
 exports.RETRIEVER_STRATEGY = RETRIEVER_STRATEGY;
 exports.RequestContext = RequestContext;
 exports.RequirePermissionOperation = RequirePermissionOperation;
@@ -10009,6 +10084,7 @@ exports.getRequestContext = getRequestContext;
 exports.getRequiredPermissionOperation = getRequiredPermissionOperation;
 exports.getTenantGlobalScopeKey = getTenantGlobalScopeKey;
 exports.getXpertToolMethod = getXpertToolMethod;
+exports.isAgentInvocationTerminal = isAgentInvocationTerminal;
 exports.isDevelopmentSandboxRuntimeEnvironment = isDevelopmentSandboxRuntimeEnvironment;
 exports.isModelOutputValidationError = isModelOutputValidationError;
 exports.isModelUsagePricingConfig = isModelUsagePricingConfig;