@xpert-ai/plugin-sdk 3.18.7 → 3.20.0

package/index.cjs.js

@@ -3,13 +3,13 @@
 var common = require('@nestjs/common');
 var constants = require('@nestjs/common/constants');
 var lodashEs = require('lodash-es');
-var _extends = require('./_extends.cjs.js');
+var dispatch = require('@langchain/core/callbacks/dispatch');
+var contracts = require('@xpert-ai/contracts');
 var core = require('@nestjs/core');
 var rxjs = require('rxjs');
-var contracts = require('@xpert-ai/contracts');
+var _extends = require('./_extends.cjs.js');
 var node_async_hooks = require('node:async_hooks');
 var passportJwt = require('passport-jwt');
-var jsonwebtoken = require('jsonwebtoken');
 var node_crypto = require('node:crypto');
 var cqrs = require('@nestjs/cqrs');
 var fs = require('fs');
@@ -35,10 +35,11 @@ var env = require('@langchain/core/utils/env');
 var modelProviderHttpClient = require('./model-provider-http-client.cjs.js');
 var jsTiktoken = require('js-tiktoken');
 var base$1 = require('@langchain/core/language_models/base');
+var v3 = require('zod/v3');
+var results = require('./results.cjs.js');
 var connector = require('./connector.cjs.js');
 var collaborationClient = require('./collaboration-client.cjs.js');
 var tools = require('@langchain/core/tools');
-var v3 = require('zod/v3');
 
 function _interopNamespaceDefault(e) {
     var n = Object.create(null);
@@ -124,6 +125,10 @@ function assertPluginArtifactNamePart(value, label) {
     }
 }
 
+/** Call after the business mutation commits. A display failure must not retry that mutation. */ async function emitResourceCard(card, config) {
+    await dispatch.dispatchCustomEvent(contracts.ChatMessageEventTypeEnum.ON_CHAT_EVENT, contracts.createResourceCardContent(card), config);
+}
+
 const ORGANIZATION_METADATA_KEY = 'xpert:organizationId';
 const PLUGIN_METADATA_KEY = 'xpert:pluginName';
 const PLUGIN_VERSION_METADATA_KEY = 'xpert:pluginVersion';
@@ -160,27 +165,13 @@ function resolveTenantGlobalScopeKey(tenantId) {
     return GLOBAL_ORGANIZATION_SCOPE;
 }
 
-function createPluginLogger(scope, baseMeta = {}) {
-    const nestLogger = new common.Logger(scope);
-    const wrap = (level, msg, meta)=>{
-        var // Maintain alignment with the Nest Logger interface
-        _nestLogger_level;
-        const payload = meta ? _extends._extends({}, baseMeta, meta) : baseMeta;
-        (_nestLogger_level = nestLogger[level]) == null ? void 0 : _nestLogger_level.call(nestLogger, msg + (Object.keys(payload).length ? ` ${JSON.stringify(payload)}` : ''));
-    };
-    return {
-        child (meta) {
-            return createPluginLogger(scope, _extends._extends({}, baseMeta, meta));
-        },
-        debug: (msg, meta)=>wrap('debug', msg, meta),
-        log: (msg, meta)=>wrap('log', msg, meta),
-        warn: (msg, meta)=>wrap('warn', msg, meta),
-        error: (msg, meta)=>wrap('error', msg, meta)
-    };
-}
-
-const INTEGRATION_STRATEGY = 'INTEGRATION_STRATEGY';
-const IntegrationStrategyKey = (provider)=>common.applyDecorators(common.SetMetadata(INTEGRATION_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, INTEGRATION_STRATEGY));
+const RESOURCE_CARD_PROVIDER = 'RESOURCE_CARD_PROVIDER';
+/** Register exact resource types whose message cards opt in to live refresh. */ const ResourceCardProvider = (...resources)=>{
+    if (!resources.length || resources.some(({ namespace, type })=>!(namespace == null ? void 0 : namespace.trim()) || !(type == null ? void 0 : type.trim()))) {
+        throw new Error('ResourceCardProvider requires explicit resource namespaces and types');
+    }
+    return common.applyDecorators(common.SetMetadata(RESOURCE_CARD_PROVIDER, resources), common.SetMetadata(STRATEGY_META_KEY, RESOURCE_CARD_PROVIDER));
+};
 
 function __decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -350,22 +341,15 @@ class RequestContext {
         }
         return scope.organizationId;
     }
-    static hasPermissions(findPermissions, throwError) {
-        const requestContext = RequestContext.currentRequestContext();
-        if (requestContext) {
-            // tslint:disable-next-line
-            const token = passportJwt.ExtractJwt.fromAuthHeaderAsBearerToken()(requestContext.request);
-            if (token) {
-                const { permissions } = jsonwebtoken.verify(token, process.env['JWT_SECRET']);
-                if (permissions) {
-                    const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
-                    if (found.length === findPermissions.length) {
-                        return true;
-                    }
-                } else {
-                    return false;
-                }
-            }
+    /**
+     * Check the authenticated principal's enabled role permissions, matching the
+     * server RequestContext. Authentication guards resolve JWTs, API keys and
+     * ChatKit client secrets before this check; the bearer is not always a JWT.
+     */ static hasPermissions(findPermissions, throwError) {
+        const permissions = this.currentPermissions();
+        if (permissions.length > 0) {
+            const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
+            if (found.length === findPermissions.length) return true;
         }
         if (throwError) {
             throw new common.HttpException('Unauthorized', common.HttpStatus.UNAUTHORIZED);
@@ -373,17 +357,9 @@ class RequestContext {
         return false;
     }
     static hasAnyPermission(findPermissions, throwError) {
-        const requestContext = RequestContext.currentRequestContext();
-        if (requestContext) {
-            // tslint:disable-next-line
-            const token = passportJwt.ExtractJwt.fromAuthHeaderAsBearerToken()(requestContext.request);
-            if (token) {
-                const { permissions } = jsonwebtoken.verify(token, process.env['JWT_SECRET']);
-                const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
-                if (found.length > 0) {
-                    return true;
-                }
-            }
+        const permissions = this.currentPermissions();
+        if (permissions.some((value)=>findPermissions.includes(value))) {
+            return true;
         }
         if (throwError) {
             throw new common.HttpException('Unauthorized', common.HttpStatus.UNAUTHORIZED);
@@ -421,20 +397,6 @@ class RequestContext {
         const context = RequestContext.currentRequestContext();
         if (context) {
             var _this_currentUser_role, _this_currentUser;
-            // tslint:disable-next-line
-            const token = this.currentToken();
-            if (token) {
-                try {
-                    const { role } = jsonwebtoken.verify(token, process.env['JWT_SECRET']);
-                    if (role) {
-                        return roles.includes(role);
-                    }
-                } catch (error) {
-                    if (!(error instanceof jsonwebtoken.JsonWebTokenError)) {
-                        throw error;
-                    }
-                }
-            }
             const role = (_this_currentUser = this.currentUser()) == null ? void 0 : (_this_currentUser_role = _this_currentUser.role) == null ? void 0 : _this_currentUser_role.name;
             if (role) {
                 return roles.includes(role);
@@ -445,6 +407,11 @@ class RequestContext {
         }
         return false;
     }
+    static currentPermissions() {
+        var _this_currentUser_role, _this_currentUser;
+        var _this_currentUser_role_rolePermissions;
+        return ((_this_currentUser_role_rolePermissions = (_this_currentUser = this.currentUser()) == null ? void 0 : (_this_currentUser_role = _this_currentUser.role) == null ? void 0 : _this_currentUser_role.rolePermissions) != null ? _this_currentUser_role_rolePermissions : []).filter((rolePermission)=>rolePermission == null ? void 0 : rolePermission.enabled).map((rolePermission)=>rolePermission == null ? void 0 : rolePermission.permission).filter((permission)=>!!permission);
+    }
     constructor(request, response, reqId, userId, extras = {}){
         this.request = request;
         this.response = response;
@@ -515,15 +482,6 @@ function runWithRequestContext(req, res, next) {
 }
 
 exports.StrategyBus = class StrategyBus {
-    registerRemovalGuard(guard) {
-        this.removalGuards.add(guard);
-        return ()=>{
-            this.removalGuards.delete(guard);
-        };
-    }
-    async assertCanRemove(scopeKey, pluginNames) {
-        for (const guard of this.removalGuards)await guard(scopeKey, pluginNames);
-    }
     upsert(strategyType, entry) {
         this.subject.next({
             type: 'UPSERT',
@@ -541,7 +499,6 @@ exports.StrategyBus = class StrategyBus {
         } : {}));
     }
     constructor(){
-        this.removalGuards = new Set();
         this.subject = new rxjs.Subject();
         this.events$ = this.subject.asObservable();
     }
@@ -799,6 +756,102 @@ __decorate([
     return typeof constructor === 'function' ? constructor : null;
 }
 
+var ResourceCardProviderRegistry_1;
+const resourceTypeKey = ({ namespace, type })=>JSON.stringify([
+        namespace,
+        type
+    ]);
+function isProvider(value) {
+    return !!value && typeof value === 'object' && 'resolveMany' in value && typeof value.resolveMany === 'function';
+}
+exports.ResourceCardProviderRegistry = ResourceCardProviderRegistry_1 = class ResourceCardProviderRegistry extends BaseStrategyRegistry {
+    onModuleInit() {
+        this.subscription = this.bus.events$.pipe(rxjs.filter((event)=>!event.strategyType || event.strategyType === RESOURCE_CARD_PROVIDER)).subscribe((event)=>{
+            try {
+                if (event.type === 'UPSERT') this.upsert(event.entry.instance);
+                else this.remove(event.orgId, event.pluginName);
+            } catch (e) {
+                // Reject the conflicting provider without terminating the lifecycle subscription.
+                this.resourceLogger.warn('Rejected invalid or conflicting resource card provider registration');
+            }
+        });
+        for (const { instance } of this.discoveryService.getProviders())if (instance) this.upsert(instance);
+    }
+    onModuleDestroy() {
+        var _this_subscription;
+        (_this_subscription = this.subscription) == null ? void 0 : _this_subscription.unsubscribe();
+    }
+    remove(scopeKey, pluginName) {
+        for (const entry of this.listAllRegistrations()){
+            if (entry.source.kind === 'plugin' && entry.source.pluginName === pluginName && entry.source.scopeKey === scopeKey) {
+                this.unregister(entry.type, entry.source, entry.strategy);
+            }
+        }
+    }
+    upsert(instance) {
+        const target = resolveStrategyMetadataTarget(instance);
+        const resources = target && this.reflector.get(RESOURCE_CARD_PROVIDER, target);
+        if (!resources) return;
+        if (!isProvider(instance)) throw new Error('ResourceCardProvider must implement resolveMany');
+        const source = this.getSource(instance);
+        const keys = resources.map(resourceTypeKey);
+        // A route belongs to one plugin across scopes; a different plugin cannot shadow it.
+        // Preflight the whole batch so a conflicting multi-type provider is never partly installed.
+        for (const key of keys){
+            for (const existing of this.listAllRegistrations().filter((entry)=>entry.type === key)){
+                const samePlugin = source.kind === 'plugin' && existing.source.kind === 'plugin' && source.pluginName === existing.source.pluginName;
+                if (existing.strategy !== instance && !samePlugin) {
+                    throw new Error(`Resource card type ${key} is already registered`);
+                }
+            }
+            this.assertCanRegister(key, instance, source);
+        }
+        for (const key of keys)this.register(key, instance, source);
+    }
+    find(resource, organizationId) {
+        const key = resourceTypeKey(resource);
+        for (const scopeKey of this.resolveStrategyScopeKeys(organizationId)){
+            var _this_strategies_get;
+            const provider = (_this_strategies_get = this.strategies.get(scopeKey)) == null ? void 0 : _this_strategies_get.get(key);
+            if (provider) return provider;
+        }
+        return undefined;
+    }
+    constructor(discovery, reflector){
+        super(RESOURCE_CARD_PROVIDER, discovery, reflector);
+        this.resourceLogger = new common.Logger(ResourceCardProviderRegistry_1.name);
+    }
+};
+exports.ResourceCardProviderRegistry = ResourceCardProviderRegistry_1 = __decorate([
+    common.Injectable(),
+    __metadata("design:paramtypes", [
+        core.DiscoveryService,
+        core.Reflector
+    ])
+], exports.ResourceCardProviderRegistry);
+
+function createPluginLogger(scope, baseMeta = {}) {
+    const nestLogger = new common.Logger(scope);
+    const wrap = (level, msg, meta)=>{
+        var // Maintain alignment with the Nest Logger interface
+        _nestLogger_level;
+        const payload = meta ? _extends._extends({}, baseMeta, meta) : baseMeta;
+        (_nestLogger_level = nestLogger[level]) == null ? void 0 : _nestLogger_level.call(nestLogger, msg + (Object.keys(payload).length ? ` ${JSON.stringify(payload)}` : ''));
+    };
+    return {
+        child (meta) {
+            return createPluginLogger(scope, _extends._extends({}, baseMeta, meta));
+        },
+        debug: (msg, meta)=>wrap('debug', msg, meta),
+        log: (msg, meta)=>wrap('log', msg, meta),
+        warn: (msg, meta)=>wrap('warn', msg, meta),
+        error: (msg, meta)=>wrap('error', msg, meta)
+    };
+}
+
+const INTEGRATION_STRATEGY = 'INTEGRATION_STRATEGY';
+const IntegrationStrategyKey = (provider)=>common.applyDecorators(common.SetMetadata(INTEGRATION_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, INTEGRATION_STRATEGY));
+
 exports.IntegrationStrategyRegistry = class IntegrationStrategyRegistry extends BaseStrategyRegistry {
     constructor(discoveryService, reflector){
         super(INTEGRATION_STRATEGY, discoveryService, reflector);
@@ -2651,6 +2704,9 @@ function normalizeCurrency(currency) {
 
 var AIModel_1;
 exports.AIModel = AIModel_1 = class AIModel {
+    getRealtimeModel(_copilotModel) {
+        throw new Error('Unsupported realtime model');
+    }
     getChatModel(copilotModel, options) {
         throw new Error(`Unsupport chat model!`);
     }
@@ -2894,6 +2950,75 @@ function _class_private_field_loose_key(name) {
     return "__private_" + id++ + "_" + name;
 }
 
+function resolveTokenUsageCandidates(input) {
+    const candidates = [
+        {
+            value: input.canonical,
+            source: 'provider'
+        },
+        {
+            value: input.actual,
+            source: 'provider'
+        },
+        {
+            value: input.estimated,
+            source: 'estimated'
+        },
+        {
+            value: {
+                totalTokens: input.legacyTotal
+            },
+            source: 'legacy'
+        }
+    ];
+    for (const candidate of candidates){
+        const usage = normalizeTokenUsage(candidate.value);
+        if (usage) return {
+            usage,
+            source: candidate.source
+        };
+    }
+    return {
+        usage: {
+            promptTokens: 0,
+            completionTokens: 0,
+            totalTokens: 0
+        },
+        source: 'unavailable'
+    };
+}
+function normalizeTokenUsage(candidate) {
+    if (!candidate) return null;
+    const counts = [
+        candidate.promptTokens,
+        candidate.completionTokens,
+        candidate.totalTokens,
+        candidate.cacheReadInputTokens,
+        candidate.cacheWriteInputTokens,
+        candidate.reasoningTokens
+    ];
+    if (counts.some((count)=>count !== undefined && (!Number.isSafeInteger(count) || count < 0))) return null;
+    var _candidate_promptTokens;
+    const promptTokens = (_candidate_promptTokens = candidate.promptTokens) != null ? _candidate_promptTokens : 0;
+    var _candidate_completionTokens;
+    const completionTokens = (_candidate_completionTokens = candidate.completionTokens) != null ? _candidate_completionTokens : 0;
+    const totalTokens = candidate.totalTokens || promptTokens + completionTokens;
+    if (!Number.isSafeInteger(totalTokens) || totalTokens <= 0 || totalTokens < promptTokens + completionTokens) return null;
+    var _candidate_cacheReadInputTokens, _candidate_cacheWriteInputTokens, _candidate_reasoningTokens;
+    if (((_candidate_cacheReadInputTokens = candidate.cacheReadInputTokens) != null ? _candidate_cacheReadInputTokens : 0) + ((_candidate_cacheWriteInputTokens = candidate.cacheWriteInputTokens) != null ? _candidate_cacheWriteInputTokens : 0) > promptTokens || ((_candidate_reasoningTokens = candidate.reasoningTokens) != null ? _candidate_reasoningTokens : 0) > completionTokens) return null;
+    return _extends._extends({
+        promptTokens,
+        completionTokens,
+        totalTokens
+    }, candidate.cacheReadInputTokens ? {
+        cacheReadInputTokens: candidate.cacheReadInputTokens
+    } : {}, candidate.cacheWriteInputTokens ? {
+        cacheWriteInputTokens: candidate.cacheWriteInputTokens
+    } : {}, candidate.reasoningTokens ? {
+        reasoningTokens: candidate.reasoningTokens
+    } : {});
+}
+
 var _a;
 class LLMUsage {
     static emptyUsage() {
@@ -2939,6 +3064,18 @@ class LargeLanguageModel extends exports.AIModel {
     _commonParameterRules(model) {
         return CommonParameterRules;
     }
+    /** Price already normalized provider facts without starting another inference or writing a ledger. */ priceActualTokenUsage(model, tokenUsage, context = {}) {
+        var _this_getModelSchema;
+        const usage = normalizeTokenUsage(tokenUsage);
+        if (!usage) throw new Error('Actual token usage is required');
+        const priced = this.calcResponseUsage(model, {}, usage.promptTokens, usage.completionTokens, performance.now(), usage, _extends._extends({}, context, {
+            inputTokensIncludeCache: true
+        }));
+        return _extends._extends({}, priced, usage, !((_this_getModelSchema = this.getModelSchema(model, {})) == null ? void 0 : _this_getModelSchema.pricing) ? {
+            pricingStatus: 'unpriced',
+            totalPrice: undefined
+        } : {});
+    }
     calcResponseUsage(model, credentials, promptTokens, completionTokens, startedAt = this.startedAt, tokenUsage, pricingContext = {}) {
         var _this_getModelSchema;
         const resolvedTokenUsage = tokenUsage != null ? tokenUsage : {
@@ -3086,12 +3223,15 @@ class LargeLanguageModel extends exports.AIModel {
             callback
         ];
     }
-    createHandleLLMErrorCallbacks(fields, logger) {
+    createHandleLLMErrorCallbacks(_fields, logger) {
         return {
-            handleLLMError: (err)=>{
-                var _err_cause;
-                var _err_cause_stack;
-                (logger != null ? logger : _class_private_field_loose_base(this, _logger)[_logger]).error(err, (_err_cause_stack = (_err_cause = err.cause) == null ? void 0 : _err_cause.stack) != null ? _err_cause_stack : err.stack, `Error attemptNumber: ${err.attemptNumber}, retriesLeft: ${err.retriesLeft}, ChatDeepSeek params are:\n${JSON.stringify(fields, null, 2)}`);
+            handleLLMError: (error)=>{
+                // Provider errors and constructor fields can contain credentials or request bodies.
+                const errorType = error instanceof Error && /^[A-Za-z]{1,60}$/.test(error.name) ? error.name : 'Error';
+                (logger != null ? logger : _class_private_field_loose_base(this, _logger)[_logger]).error({
+                    event: 'model_provider_request_failed',
+                    errorType
+                });
             }
         };
     }
@@ -3301,97 +3441,59 @@ function isAbortError(error) {
     return error.name === 'AbortError' || /\babort(?:ed)?\b/i.test(error.message);
 }
 function calcTokenUsage(output) {
-    var _output_generations;
-    const tokenUsage = {
+    const result = {
         promptTokens: 0,
         completionTokens: 0,
         totalTokens: 0
     };
-    let cacheReadInputTokens = 0;
-    let cacheWriteInputTokens = 0;
-    (_output_generations = output.generations) == null ? void 0 : _output_generations.forEach((generation)=>{
-        generation.forEach((item)=>{
-            const message = item.message;
-            if (message.usage_metadata) {
-                var _message_usage_metadata_input_token_details, _message_usage_metadata_input_token_details1;
-                tokenUsage.promptTokens += message.usage_metadata.input_tokens;
-                tokenUsage.completionTokens += message.usage_metadata.output_tokens;
-                tokenUsage.totalTokens += message.usage_metadata.total_tokens;
-                var _message_usage_metadata_input_token_details_cache_read;
-                cacheReadInputTokens += (_message_usage_metadata_input_token_details_cache_read = (_message_usage_metadata_input_token_details = message.usage_metadata.input_token_details) == null ? void 0 : _message_usage_metadata_input_token_details.cache_read) != null ? _message_usage_metadata_input_token_details_cache_read : 0;
-                var _message_usage_metadata_input_token_details_cache_creation;
-                cacheWriteInputTokens += (_message_usage_metadata_input_token_details_cache_creation = (_message_usage_metadata_input_token_details1 = message.usage_metadata.input_token_details) == null ? void 0 : _message_usage_metadata_input_token_details1.cache_creation) != null ? _message_usage_metadata_input_token_details_cache_creation : 0;
-            }
-        });
-    });
-    if (cacheReadInputTokens > 0) tokenUsage.cacheReadInputTokens = cacheReadInputTokens;
-    if (cacheWriteInputTokens > 0) tokenUsage.cacheWriteInputTokens = cacheWriteInputTokens;
-    return tokenUsage;
+    var _output_generations;
+    for (const choices of (_output_generations = output.generations) != null ? _output_generations : []){
+        // Each inner array contains choices from one request, not independent provider attempts.
+        const usage = choices.map((choice)=>{
+            var _metadata_input_token_details, _metadata_input_token_details1, _metadata_output_token_details;
+            if (!('message' in choice) || !messages.isBaseMessage(choice.message) || !messages.isAIMessage(choice.message)) return null;
+            const metadata = choice.message.usage_metadata;
+            return metadata ? normalizeTokenUsage({
+                promptTokens: metadata.input_tokens,
+                completionTokens: metadata.output_tokens,
+                totalTokens: metadata.total_tokens,
+                cacheReadInputTokens: (_metadata_input_token_details = metadata.input_token_details) == null ? void 0 : _metadata_input_token_details.cache_read,
+                cacheWriteInputTokens: (_metadata_input_token_details1 = metadata.input_token_details) == null ? void 0 : _metadata_input_token_details1.cache_creation,
+                reasoningTokens: (_metadata_output_token_details = metadata.output_token_details) == null ? void 0 : _metadata_output_token_details.reasoning
+            }) : null;
+        }).find((candidate)=>candidate !== null);
+        if (!usage) continue;
+        result.promptTokens += usage.promptTokens;
+        result.completionTokens += usage.completionTokens;
+        result.totalTokens += usage.totalTokens;
+        for (const key of [
+            'cacheReadInputTokens',
+            'cacheWriteInputTokens',
+            'reasoningTokens'
+        ]){
+            var _result_key;
+            if (usage[key] !== undefined) result[key] = ((_result_key = result[key]) != null ? _result_key : 0) + usage[key];
+        }
+    }
+    return result;
 }
 function resolveTokenUsage(output) {
     return resolveTokenUsageWithAuthority(output).usage;
 }
 function resolveTokenUsageWithAuthority(output) {
     var _output_llmOutput, _output_llmOutput1, _output_llmOutput2;
-    var _normalizeTokenUsage, _ref;
-    const actualUsage = (_ref = (_normalizeTokenUsage = normalizeTokenUsage(calcTokenUsage(output))) != null ? _normalizeTokenUsage : normalizeTokenUsage((_output_llmOutput = output.llmOutput) == null ? void 0 : _output_llmOutput['tokenUsage'])) != null ? _ref : normalizeTokenUsage({
-        totalTokens: (_output_llmOutput1 = output.llmOutput) == null ? void 0 : _output_llmOutput1['totalTokens']
+    const resolved = resolveTokenUsageCandidates({
+        canonical: calcTokenUsage(output),
+        actual: (_output_llmOutput = output.llmOutput) == null ? void 0 : _output_llmOutput['tokenUsage'],
+        estimated: (_output_llmOutput1 = output.llmOutput) == null ? void 0 : _output_llmOutput1['estimatedTokenUsage'],
+        legacyTotal: (_output_llmOutput2 = output.llmOutput) == null ? void 0 : _output_llmOutput2['totalTokens']
     });
-    if (actualUsage) {
-        return {
-            usage: actualUsage
-        };
-    }
-    const estimatedUsage = normalizeTokenUsage((_output_llmOutput2 = output.llmOutput) == null ? void 0 : _output_llmOutput2['estimatedTokenUsage']);
-    if (estimatedUsage) {
-        return {
-            usage: estimatedUsage,
-            type: 'estimated'
-        };
-    }
-    return {
-        usage: {
-            promptTokens: 0,
-            completionTokens: 0,
-            totalTokens: 0
-        }
-    };
-}
-function normalizeTokenUsage(candidate) {
-    if (!candidate) {
-        return null;
-    }
-    if (!isValidTokenCount(candidate.promptTokens) || !isValidTokenCount(candidate.completionTokens) || !isValidTokenCount(candidate.totalTokens)) {
-        return null;
-    }
-    var _candidate_promptTokens;
-    const promptTokens = (_candidate_promptTokens = candidate.promptTokens) != null ? _candidate_promptTokens : 0;
-    var _candidate_completionTokens;
-    const completionTokens = (_candidate_completionTokens = candidate.completionTokens) != null ? _candidate_completionTokens : 0;
-    const totalTokens = candidate.totalTokens || promptTokens + completionTokens;
-    if (promptTokens === 0 && completionTokens === 0 && totalTokens === 0) {
-        return null;
-    }
-    var _candidate_cacheReadInputTokens;
-    const cacheReadInputTokens = (_candidate_cacheReadInputTokens = candidate.cacheReadInputTokens) != null ? _candidate_cacheReadInputTokens : 0;
-    var _candidate_cacheWriteInputTokens;
-    const cacheWriteInputTokens = (_candidate_cacheWriteInputTokens = candidate.cacheWriteInputTokens) != null ? _candidate_cacheWriteInputTokens : 0;
-    if (!isValidTokenCount(cacheReadInputTokens) || !isValidTokenCount(cacheWriteInputTokens)) {
-        return null;
-    }
     return _extends._extends({
-        promptTokens,
-        completionTokens,
-        totalTokens
-    }, cacheReadInputTokens > 0 ? {
-        cacheReadInputTokens
-    } : {}, cacheWriteInputTokens > 0 ? {
-        cacheWriteInputTokens
+        usage: resolved.usage
+    }, resolved.source === 'estimated' ? {
+        type: 'estimated'
     } : {});
 }
-function isValidTokenCount(value) {
-    return value === undefined || Number.isFinite(value) && value >= 0;
-}
 function normalizeCacheTokenAccounting(tokenUsage, context) {
     if (context.inputTokensIncludeCache !== false) return tokenUsage;
     var _tokenUsage_cacheReadInputTokens, _tokenUsage_cacheWriteInputTokens;
@@ -3842,6 +3944,37 @@ Reflect.defineMetadata(COMMAND_METADATA$1, {
     id: CreateModelClientCommand.type
 }, CreateModelClientCommand);
 
+/** A single fetch is one billable attempt. No SDK retries or redirects to another credential origin. */ function nativeModelTransport(input) {
+    const base = new URL(input.baseUrl);
+    if (![
+        'http:',
+        'https:'
+    ].includes(base.protocol) || base.username || base.password || base.search || base.hash) throw new Error('Invalid native model endpoint');
+    const suffix = input.protocol === 'openai_responses' ? '/responses' : '/v1/messages';
+    const url = `${base.href.replace(/\/$/, '')}${suffix}`;
+    return (body, forwarded, signal)=>{
+        const headers = new Headers({
+            'content-type': 'application/json'
+        });
+        if (input.protocol === 'anthropic_messages') {
+            headers.set('anthropic-version', '2023-06-01');
+            for (const [name, value] of Object.entries(forwarded)){
+                // Native Anthropic feature/version headers must survive protocol evolution.
+                if (/^anthropic-[a-z0-9-]+$/.test(name)) headers.set(name, value);
+            }
+            headers.set('x-api-key', input.authorization);
+        } else headers.set('authorization', input.authorization);
+        var _input_fetch;
+        return ((_input_fetch = input.fetch) != null ? _input_fetch : fetch)(url, {
+            method: 'POST',
+            headers,
+            body: JSON.stringify(body),
+            signal,
+            redirect: 'error'
+        });
+    };
+}
+
 const SKILL_SOURCE_PROVIDER = 'SKILL_SOURCE_PROVIDER';
 const SkillSourceProviderStrategy = (provider)=>common.applyDecorators(common.SetMetadata(SKILL_SOURCE_PROVIDER, provider), common.SetMetadata(STRATEGY_META_KEY, SKILL_SOURCE_PROVIDER));
 
@@ -3882,7 +4015,7 @@ exports.AgentMiddlewareRegistry = __decorate([
     'end'
 ];
 
-const AssistantTaskRuntimeCapability = modelProvider.createRuntimeCapability('platform.assistant_task', {
+/** Scoped runtime capability for platform Assistant tasks. */ const AssistantTaskRuntimeCapability = modelProvider.createRuntimeCapability('platform.assistant_task', {
     description: 'Start asynchronous tasks on the current platform assistant.'
 });
 
@@ -3916,6 +4049,18 @@ function isModelOutputValidationError(error) {
     return candidate.code === MODEL_OUTPUT_VALIDATION_ERROR_CODE && candidate.retryable === true && ((_candidate_repairContext = candidate.repairContext) == null ? void 0 : _candidate_repairContext.kind) === 'invalid_tool_calls' && Array.isArray(candidate.repairContext.issues);
 }
 
+/** Combine middleware contributions without mutating or weakening existing requirements. */ function mergeModelRequirements(...requirements) {
+    const features = [
+        ...new Set(requirements.flatMap((item)=>{
+            var _item_features;
+            return (_item_features = item == null ? void 0 : item.features) != null ? _item_features : [];
+        }))
+    ];
+    return features.length ? {
+        features
+    } : undefined;
+}
+
 const SEGMENT_PATTERN = /^[a-z][a-z0-9_-]*$/i;
 const VERSION_PATTERN = /^v[1-9][0-9]*$/;
 function assertSegment(input, name) {
@@ -3961,6 +4106,96 @@ function assertSegment(input, name) {
 const AGENT_CHAT_DISPATCH_MESSAGE_TYPE = defineAgentMessageType('chat_dispatch', 1);
 const AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING = 'steer_target_not_running';
 
+/** Captured by an authorized host command. Describing a recipient never authorizes delivery. */ const replyConversation = {
+    conversationId: v3.z.string().uuid(),
+    threadId: v3.z.string().trim().min(1).max(256)
+};
+const agentRuntimeReplyTargetSchema = v3.z.discriminatedUnion('type', [
+    v3.z.object(_extends._extends({}, replyConversation, {
+        type: v3.z.literal('xpert').optional(),
+        xpertId: v3.z.string().uuid(),
+        agentKey: v3.z.string().trim().min(1).max(256)
+    })).strict(),
+    v3.z.object(_extends._extends({}, replyConversation, {
+        type: v3.z.literal('project_agent'),
+        projectId: v3.z.string().uuid(),
+        agentKey: v3.z.literal('general_agent')
+    })).strict()
+]);
+/** Persist with the immutable invocation request before launch. No credentials or arbitrary routing headers. */ const agentInvocationDispatchContextSchema = v3.z.object({
+    version: v3.z.literal(1),
+    requestId: v3.z.string().uuid(),
+    sourceMessageId: v3.z.string().trim().min(1).max(256),
+    replyTo: agentRuntimeReplyTargetSchema,
+    projectTask: contracts.projectTaskExecutionContextSchema.optional()
+}).strict();
+
+const AGENT_RUNTIME_EVENT_MESSAGE_TYPE = defineAgentMessageType('runtime_event', 1);
+const reference = {
+    version: v3.z.literal(1),
+    invocationId: v3.z.string().uuid(),
+    /** Revision of the persisted observation, never a queue delivery attempt. */ revision: v3.z.number().int().nonnegative(),
+    projectTask: contracts.projectTaskExecutionReferenceSchema.optional()
+};
+/** Host-produced references. Consumers reload and authorize the invocation and its pinned observation. */ const agentRuntimeEventSchema = v3.z.discriminatedUnion('kind', [
+    v3.z.object(_extends._extends({}, reference, {
+        kind: v3.z.literal('progress'),
+        progress: contracts.agentRuntimeProgressSchema
+    })).strict(),
+    v3.z.object(_extends._extends({}, reference, {
+        kind: v3.z.literal('result'),
+        status: contracts.agentInvocationTerminalStatusSchema
+    })).strict(),
+    v3.z.object(_extends._extends({}, reference, {
+        kind: v3.z.literal('input_request'),
+        interactionId: v3.z.string().trim().min(1).max(256)
+    })).strict()
+]);
+/** Same observation always has the same HandoffMessage.id across retries and process restarts. */ function agentRuntimeEventMessageId(event) {
+    return `runtime-${event.invocationId}-${event.kind}-${event.revision}`;
+}
+/** Transport states are deliberately separate from Task and Invocation status. */ const agentRuntimeDeliveryStateSchema = v3.z.enum([
+    'pending',
+    'received',
+    'blocked',
+    'failed'
+]);
+const agentRuntimeConsumptionStateSchema = v3.z.enum([
+    'pending',
+    'processing',
+    'processed',
+    'blocked',
+    'failed'
+]);
+/** Store under a unique scoped key in the same transaction as the continuation reservation. */ const agentRuntimeResultClaimSchema = v3.z.object({
+    invocationId: v3.z.string().uuid(),
+    resultRevision: v3.z.number().int().nonnegative(),
+    recipient: agentRuntimeReplyTargetSchema,
+    consumer: v3.z.discriminatedUnion('type', [
+        v3.z.object({
+            type: v3.z.literal('follow_up'),
+            executionId: v3.z.string().uuid()
+        }).strict(),
+        v3.z.object({
+            type: v3.z.literal('wait'),
+            executionId: v3.z.string().uuid(),
+            callId: v3.z.string().trim().min(1).max(1024)
+        }).strict()
+    ])
+}).strict();
+/**
+ * Wait and asynchronous reply compete for this same key, regardless of delivery revision.
+ * The storage key must additionally include tenant, organization and owner from trusted scope.
+ */ function agentRuntimeResultConsumptionKey(invocationId, recipient) {
+    return JSON.stringify([
+        invocationId,
+        recipient.conversationId,
+        recipient.threadId,
+        recipient.type === 'project_agent' ? `project:${recipient.projectId}` : recipient.xpertId,
+        recipient.agentKey
+    ]);
+}
+
 /**
  * Handoff Processor meta key。
  */ const HANDOFF_PROCESSOR_STRATEGY = 'HANDOFF_PROCESSOR_STRATEGY';
@@ -4005,6 +4240,76 @@ exports.HandoffProcessorRegistry = __decorate([
     runTtlMs: 10 * 60 * 1000
 };
 
+/** Checks confirmed completion; unknown remains non-terminal. */ function isAgentInvocationTerminal(status) {
+    return status === 'succeeded' || status === 'failed' || status === 'cancelled';
+}
+
+/** Nest discovery metadata key for runtime strategies. */ const AGENT_RUNTIME_STRATEGY = 'AGENT_RUNTIME_STRATEGY';
+/** Associate a stable provider key with an adapter. Also declare @Injectable() and register the provider. */ const AgentRuntimeStrategy = (provider)=>common.applyDecorators(common.SetMetadata(AGENT_RUNTIME_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, AGENT_RUNTIME_STRATEGY));
+/** Scoped strategy registry with pinned provider/version lookup for continuation. */ exports.AgentRuntimeRegistry = class AgentRuntimeRegistry extends BaseStrategyRegistry {
+    /** Find the exact original scope/plugin/version, without fallback. Returns undefined if unavailable. */ getPinned(provider, source) {
+        var _this_strategies_get;
+        const strategy = (_this_strategies_get = this.strategies.get(source.scopeKey)) == null ? void 0 : _this_strategies_get.get(provider);
+        if (!strategy) return undefined;
+        const actual = this.getSource(strategy);
+        return actual.kind === source.kind && actual.scopeKey === source.scopeKey && (actual.kind !== 'plugin' || source.kind !== 'plugin' || actual.pluginName === source.pluginName && actual.pluginVersion === source.pluginVersion) ? strategy : undefined;
+    }
+    constructor(discoveryService, reflector){
+        super(AGENT_RUNTIME_STRATEGY, discoveryService, reflector);
+    }
+};
+exports.AgentRuntimeRegistry = __decorate([
+    common.Injectable(),
+    __metadata("design:paramtypes", [
+        core.DiscoveryService,
+        core.Reflector
+    ])
+], exports.AgentRuntimeRegistry);
+
+/** Caller-scoped API obtained through runtime.capabilities.require(...). */ const AgentInvocationRuntimeCapability = modelProvider.createRuntimeCapability('platform.agent_invocation', {
+    description: 'Scoped, versioned Agent invocation and lifecycle control'
+});
+/** Platform factory capability. The wire key is stable across SDK naming changes. */ const AgentRuntimeFactoryCapability = modelProvider.createRuntimeCapability('platform.agent_invocation.factory');
+
+/**
+ * Keeps shared OS model authorization independent of Pro Computer/Docker lifecycle details.
+ * Grant issuance, authentication, revalidation and renewal delegate environment checks to this host adapter.
+ * Implementations validate ownership and instance identity so a replaced runtime cannot keep its old grant.
+ * Execution validity is independent of desktop viewing sessions; managed runners may also require an operation lease.
+ * Other environments can supply their own checks without changing the grant service.
+ * This capability validates the bound environment; model selection and usage accounting remain separate concerns.
+ */ const ModelExecutionEnvironmentCapability = modelProvider.createRuntimeCapability('platform.model_execution.environment');
+
+/** Configuration adapters describe secrets by reference; only the host materializes credentials. */ const CLI_MODEL_TOKEN_REFERENCE = '${XPERT_EXECUTION_TOKEN}';
+const CliModelProfilesCapability = modelProvider.createRuntimeCapability('platform.cli_model_profiles');
+/** Additional execution sources can validate lifecycle without making OS depend on Pro entities. */ const ShellModelExecutionSourceCapability = modelProvider.createRuntimeCapability('platform.model_execution.shell_source');
+
+function taskWaitReason(states, mode) {
+    if (states.length && (mode === 'all' ? states.every((state)=>state === 'completed') : states.includes('completed'))) return 'completed';
+    if (states.includes('attention')) return 'attention';
+    return undefined;
+}
+
+const AgentExecutionRunnerCapability = modelProvider.createRuntimeCapability('platform.agent_execution.runner');
+const AgentExecutionRunnerFactoryCapability = modelProvider.createRuntimeCapability('platform.agent_execution.runner.factory');
+
+/** Older runtime plugins can still send this event; new emissions use ON_CHAT_EVENT. */ const RESOURCE_CARD_EVENT = 'xpert.resource_card';
+
+const ASSISTANT_CAPABILITY_PROVIDER = 'ASSISTANT_CAPABILITY_PROVIDER';
+const AssistantCapabilityProvider = (key)=>common.applyDecorators(common.SetMetadata(ASSISTANT_CAPABILITY_PROVIDER, key), common.SetMetadata(STRATEGY_META_KEY, ASSISTANT_CAPABILITY_PROVIDER));
+exports.AssistantCapabilityProviderRegistry = class AssistantCapabilityProviderRegistry extends BaseStrategyRegistry {
+    constructor(discovery, reflector){
+        super(ASSISTANT_CAPABILITY_PROVIDER, discovery, reflector);
+    }
+};
+exports.AssistantCapabilityProviderRegistry = __decorate([
+    common.Injectable(),
+    __metadata("design:paramtypes", [
+        core.DiscoveryService,
+        core.Reflector
+    ])
+], exports.AssistantCapabilityProviderRegistry);
+
 /**
  * Common platform message length limits
  */ const CHAT_CHANNEL_TEXT_LIMITS = {
@@ -4299,10 +4604,14 @@ function appendSandboxMessage(output, message) {
 function resolveSandboxExecutionOptions(options, defaults = DEFAULT_SANDBOX_SHELL_EXECUTION_OPTIONS) {
     const timeoutMs = typeof (options == null ? void 0 : options.timeoutMs) === 'number' && Number.isFinite(options.timeoutMs) && options.timeoutMs > 0 ? Math.trunc(options.timeoutMs) : typeof defaults.timeoutMs === 'number' && Number.isFinite(defaults.timeoutMs) && defaults.timeoutMs > 0 ? Math.trunc(defaults.timeoutMs) : DEFAULT_SANDBOX_SHELL_TIMEOUT_MS;
     const maxOutputBytes = typeof (options == null ? void 0 : options.maxOutputBytes) === 'number' && Number.isFinite(options.maxOutputBytes) && options.maxOutputBytes > 0 ? Math.trunc(options.maxOutputBytes) : typeof defaults.maxOutputBytes === 'number' && Number.isFinite(defaults.maxOutputBytes) && defaults.maxOutputBytes > 0 ? Math.trunc(defaults.maxOutputBytes) : DEFAULT_SANDBOX_EXECUTION_MAX_OUTPUT_BYTES;
-    return {
+    return _extends._extends({
         timeoutMs,
         maxOutputBytes
-    };
+    }, (options == null ? void 0 : options.executionScope) ? {
+        executionScope: options.executionScope
+    } : {}, (options == null ? void 0 : options.signal) ? {
+        signal: options.signal
+    } : {});
 }
 
 function isObjectLike$2(value) {
@@ -5441,6 +5750,7 @@ exports.ViewExtensionProviderRegistry = __decorate([
 
 const XPERT_REMOTE_UI_CSS = `
 :root {
+  font-size: var(--xui-density-root-font-size, 16px);
   color-scheme: light;
   --xui-font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
   --xui-color-background: #fff;
@@ -5475,6 +5785,7 @@ const XPERT_REMOTE_UI_CSS = `
   --xui-radius-sm: 6px;
   --xui-radius-md: 8px;
   --xui-radius-lg: 10px;
+  --xui-font-size: 14px;
   --xui-font-size-xs: 0.75rem;
   --xui-font-size-sm: 0.8125rem;
   --xui-font-size-md: 0.875rem;
@@ -5762,6 +6073,7 @@ const XPERT_REMOTE_UI_BOOTSTRAP = `
   var VERSION = 1
   var TOKEN_MAP = {
     fontFamily: '--xui-font-family',
+    densityRootFontSize: '--xui-density-root-font-size',
     colorBackground: '--xui-color-background',
     colorForeground: '--xui-color-foreground',
     colorCard: '--xui-color-card',
@@ -5794,6 +6106,7 @@ const XPERT_REMOTE_UI_BOOTSTRAP = `
     radiusSm: '--xui-radius-sm',
     radiusMd: '--xui-radius-md',
     radiusLg: '--xui-radius-lg',
+    fontSize: '--xui-font-size',
     fontSizeXs: '--xui-font-size-xs',
     fontSizeSm: '--xui-font-size-sm',
     fontSizeMd: '--xui-font-size-md',
@@ -5955,6 +6268,9 @@ exports.EvolutionTargetProviderRegistry = __decorate([
 ], exports.EvolutionTargetProviderRegistry);
 
 const EVOLUTION_RUNTIME_SERVICE_TOKEN = 'XPERT_EVOLUTION_RUNTIME_SERVICE';
+const EvolutionBaselineRuntimeCapability = modelProvider.createRuntimeCapability('platform.agent-evolution.baselines', {
+    description: 'Inspect and initialize organization rule baselines with administrator authorization and revision checks.'
+});
 const EvolutionRuntimeCapability = modelProvider.createRuntimeCapability('platform.agent-evolution', {
     description: 'Ingest learning signals and resolve immutable capability versions for domain runtimes.'
 });
@@ -6195,6 +6511,11 @@ function describeXpertToolProvider(instance) {
         if (middlewareProvider && !middlewareProviders.has(middlewareProvider)) {
             throw new Error(`Tool '${toolOptions.name}' references undeclared Middleware provider '${middlewareProvider}'.`);
         }
+        if (toolOptions.app) {
+            if (!middlewareProvider || !toolOptions.app.visibility.length || toolOptions.app.visibility.some((item)=>item !== 'model' && item !== 'app') || toolOptions.app.resourceKey && (!appKeys.has(toolOptions.app.resourceKey) || !toolOptions.app.visibility.includes('app'))) {
+                throw new Error(`Tool '${toolOptions.name}' has an invalid middleware App binding.`);
+            }
+        }
         const appKey = toolOptions.mcp && ((_toolOptions_mcp_app = toolOptions.mcp.app) == null ? void 0 : _toolOptions_mcp_app.resourceKey);
         if (appKey && !appKeys.has(appKey)) {
             throw new Error(`MCP Tool '${toolOptions.name}' references undeclared App '${appKey}'.`);
@@ -6592,12 +6913,21 @@ class DecoratedAgentMiddlewareStrategy {
         return this.descriptor.tools.filter((item)=>item.middlewareProvider === this.provider).map((item)=>item.options.name);
     }
     async createMiddleware(options, context) {
+        var _this_descriptor_options_apps;
         const tools = this.descriptor.tools.filter((item)=>item.middlewareProvider === this.provider).map((item)=>createAgentTool(this.instance, item, context, options));
         const extensions = await (this.instance.getMiddlewareExtensions == null ? void 0 : this.instance.getMiddlewareExtensions.call(this.instance, this.provider, options, context));
         return _extends._extends({}, extensions != null ? extensions : {}, {
             name: this.provider,
             tools
-        });
+        }, ((_this_descriptor_options_apps = this.descriptor.options.apps) == null ? void 0 : _this_descriptor_options_apps.length) ? {
+            apps: {
+                definitions: this.descriptor.options.apps,
+                tools: Object.fromEntries(this.descriptor.tools.filter((item)=>item.middlewareProvider === this.provider && item.options.app).map((item)=>[
+                        item.options.name,
+                        item.options.app
+                    ]))
+            }
+        } : {});
     }
     constructor(instance, descriptor, provider){
         var _descriptor_options_middlewares;
@@ -9757,6 +10087,39 @@ function stableJson(value) {
     return `{${entries.map(([key, item])=>`${JSON.stringify(key)}:${stableJson(item)}`).join(',')}}`;
 }
 
+const PROJECT_TYPE_PROVIDER = 'PROJECT_TYPE_PROVIDER';
+/** Register the stable provider key used by entity-backed App project type declarations. */ const ProjectTypeProvider = (key)=>common.applyDecorators(common.SetMetadata(PROJECT_TYPE_PROVIDER, key), common.SetMetadata(STRATEGY_META_KEY, PROJECT_TYPE_PROVIDER));
+exports.ProjectTypeProviderRegistry = class ProjectTypeProviderRegistry extends BaseStrategyRegistry {
+    constructor(discovery, reflector){
+        super(PROJECT_TYPE_PROVIDER, discovery, reflector);
+    }
+};
+exports.ProjectTypeProviderRegistry = __decorate([
+    common.Injectable(),
+    __metadata("design:paramtypes", [
+        core.DiscoveryService,
+        core.Reflector
+    ])
+], exports.ProjectTypeProviderRegistry);
+
+const PROJECT_TASK_PROVIDER = 'PROJECT_TASK_PROVIDER';
+const ProjectTaskProvider = (key)=>common.applyDecorators(common.SetMetadata(PROJECT_TASK_PROVIDER, key), common.SetMetadata(STRATEGY_META_KEY, PROJECT_TASK_PROVIDER));
+exports.ProjectTaskProviderRegistry = class ProjectTaskProviderRegistry extends BaseStrategyRegistry {
+    constructor(discovery, reflector){
+        super(PROJECT_TASK_PROVIDER, discovery, reflector);
+    }
+};
+exports.ProjectTaskProviderRegistry = __decorate([
+    common.Injectable(),
+    __metadata("design:paramtypes", [
+        core.DiscoveryService,
+        core.Reflector
+    ])
+], exports.ProjectTaskProviderRegistry);
+const ProjectTasksRuntimeCapability = modelProvider.createRuntimeCapability('platform.project.tasks', {
+    description: 'Read project task graphs, manage schedules, and resolve exact execution conversations.'
+});
+
 Object.defineProperty(exports, "ASSISTANT_CHAT_SEND_MESSAGE_COMMAND", {
     enumerable: true,
     get: function () { return contracts.ASSISTANT_CHAT_SEND_MESSAGE_COMMAND; }
@@ -9765,6 +10128,26 @@ Object.defineProperty(exports, "ASSISTANT_CONTEXT_SET_COMMAND", {
     enumerable: true,
     get: function () { return contracts.ASSISTANT_CONTEXT_SET_COMMAND; }
 });
+Object.defineProperty(exports, "agentOutputDeliverySchema", {
+    enumerable: true,
+    get: function () { return contracts.agentOutputDeliverySchema; }
+});
+Object.defineProperty(exports, "agentResultPathSchema", {
+    enumerable: true,
+    get: function () { return contracts.agentResultPathSchema; }
+});
+Object.defineProperty(exports, "createResourceCardContent", {
+    enumerable: true,
+    get: function () { return contracts.createResourceCardContent; }
+});
+Object.defineProperty(exports, "parseResourceCard", {
+    enumerable: true,
+    get: function () { return contracts.parseResourceCard; }
+});
+Object.defineProperty(exports, "resourceCardId", {
+    enumerable: true,
+    get: function () { return contracts.resourceCardId; }
+});
 exports.ActorTokenRuntimeCapability = modelProvider.ActorTokenRuntimeCapability;
 exports.ActorTokenRuntimeFactoryCapability = modelProvider.ActorTokenRuntimeFactoryCapability;
 exports.ArtifactsRuntimeCapability = modelProvider.ArtifactsRuntimeCapability;
@@ -9788,6 +10171,7 @@ exports.SANDBOX_JOB_ERROR_CODES = modelProvider.SANDBOX_JOB_ERROR_CODES;
 exports.SANDBOX_JOB_PROGRESS_PREFIX = modelProvider.SANDBOX_JOB_PROGRESS_PREFIX;
 exports.SandboxJobRuntimeError = modelProvider.SandboxJobRuntimeError;
 exports.SandboxJobsRuntimeCapability = modelProvider.SandboxJobsRuntimeCapability;
+exports.ToolImagesRuntimeCapability = modelProvider.ToolImagesRuntimeCapability;
 exports.WORKSPACE_FILES_SOURCE = modelProvider.WORKSPACE_FILES_SOURCE;
 exports.WorkspaceFilesRuntimeCapability = modelProvider.WorkspaceFilesRuntimeCapability;
 exports.XPERT_RUNTIME_CAPABILITIES_TOKEN = modelProvider.XPERT_RUNTIME_CAPABILITIES_TOKEN;
@@ -9800,6 +10184,9 @@ exports.requireReadStatement = dataWorkbench.requireReadStatement;
 exports.splitWorkbenchSql = dataWorkbench.splitWorkbenchSql;
 exports.ModelProviderHttpClient = modelProviderHttpClient.ModelProviderHttpClient;
 exports.ModelProviderHttpError = modelProviderHttpClient.ModelProviderHttpError;
+exports.AGENT_TASK_RESULTS_FEATURE = results.AGENT_TASK_RESULTS_FEATURE;
+exports.agentResultItemSchema = results.agentResultItemSchema;
+exports.agentTaskResultSchema = results.agentTaskResultSchema;
 exports.CONNECTOR_AUTHORIZATION_MODES = connector.CONNECTOR_AUTHORIZATION_MODES;
 exports.CONNECTOR_SCOPE_TYPES = connector.CONNECTOR_SCOPE_TYPES;
 exports.assertConnectorDefinition = connector.assertConnectorDefinition;
@@ -9815,12 +10202,21 @@ exports.ACCOUNT_BINDING_PERMISSION_SERVICE_TOKEN = ACCOUNT_BINDING_PERMISSION_SE
 exports.AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING = AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING;
 exports.AGENT_CHAT_DISPATCH_MESSAGE_TYPE = AGENT_CHAT_DISPATCH_MESSAGE_TYPE;
 exports.AGENT_MIDDLEWARE_STRATEGY = AGENT_MIDDLEWARE_STRATEGY;
+exports.AGENT_RUNTIME_EVENT_MESSAGE_TYPE = AGENT_RUNTIME_EVENT_MESSAGE_TYPE;
+exports.AGENT_RUNTIME_STRATEGY = AGENT_RUNTIME_STRATEGY;
 exports.AIModelProviderNotFoundException = AIModelProviderNotFoundException;
 exports.AIModelProviderStrategy = AIModelProviderStrategy;
 exports.AI_MODEL_PROVIDER = AI_MODEL_PROVIDER;
+exports.ASSISTANT_CAPABILITY_PROVIDER = ASSISTANT_CAPABILITY_PROVIDER;
 exports.AdapterDataSourceStrategy = AdapterDataSourceStrategy;
+exports.AgentExecutionRunnerCapability = AgentExecutionRunnerCapability;
+exports.AgentExecutionRunnerFactoryCapability = AgentExecutionRunnerFactoryCapability;
+exports.AgentInvocationRuntimeCapability = AgentInvocationRuntimeCapability;
 exports.AgentMiddlewareStrategy = AgentMiddlewareStrategy;
+exports.AgentRuntimeFactoryCapability = AgentRuntimeFactoryCapability;
+exports.AgentRuntimeStrategy = AgentRuntimeStrategy;
 exports.AiModelNotFoundException = AiModelNotFoundException;
+exports.AssistantCapabilityProvider = AssistantCapabilityProvider;
 exports.AssistantTaskRuntimeCapability = AssistantTaskRuntimeCapability;
 exports.BOUND_IDENTITY_LOGIN_PERMISSION_SERVICE_TOKEN = BOUND_IDENTITY_LOGIN_PERMISSION_SERVICE_TOKEN;
 exports.BUILTIN_GLOBAL_SCOPE = BUILTIN_GLOBAL_SCOPE;
@@ -9831,12 +10227,14 @@ exports.BaseSandbox = BaseSandbox;
 exports.BaseStrategyRegistry = BaseStrategyRegistry;
 exports.CHAT_CHANNEL = CHAT_CHANNEL;
 exports.CHAT_CHANNEL_TEXT_LIMITS = CHAT_CHANNEL_TEXT_LIMITS;
+exports.CLI_MODEL_TOKEN_REFERENCE = CLI_MODEL_TOKEN_REFERENCE;
 exports.COLLABORATION_DOCUMENT_PROVIDER = COLLABORATION_DOCUMENT_PROVIDER;
 exports.CONNECTION_COMMAND_ROUTER_TOKEN = CONNECTION_COMMAND_ROUTER_TOKEN;
 exports.CONNECTOR_STRATEGY = CONNECTOR_STRATEGY;
 exports.CancelConversationCommand = CancelConversationCommand;
 exports.ChatChannel = ChatChannel;
 exports.ChatOAICompatReasoningModel = ChatOAICompatReasoningModel;
+exports.CliModelProfilesCapability = CliModelProfilesCapability;
 exports.CollaborationDocumentProvider = CollaborationDocumentProvider;
 exports.CollaborationRuntimeCapability = CollaborationRuntimeCapability;
 exports.CommonParameterRules = CommonParameterRules;
@@ -9866,6 +10264,7 @@ exports.DocumentSourceStrategy = DocumentSourceStrategy;
 exports.DocumentTransformerStrategy = DocumentTransformerStrategy;
 exports.EVOLUTION_RUNTIME_SERVICE_TOKEN = EVOLUTION_RUNTIME_SERVICE_TOKEN;
 exports.EVOLUTION_TARGET_PROVIDER = EVOLUTION_TARGET_PROVIDER;
+exports.EvolutionBaselineRuntimeCapability = EvolutionBaselineRuntimeCapability;
 exports.EvolutionChangeRuntimeCapability = EvolutionChangeRuntimeCapability;
 exports.EvolutionRuntimeCapability = EvolutionRuntimeCapability;
 exports.EvolutionTargetProviderStrategy = EvolutionTargetProviderStrategy;
@@ -9898,6 +10297,7 @@ exports.MANAGED_QUEUE_HANDLER_REGISTRY_TOKEN = MANAGED_QUEUE_HANDLER_REGISTRY_TO
 exports.MANAGED_QUEUE_SERVICE_TOKEN = MANAGED_QUEUE_SERVICE_TOKEN;
 exports.MCP_CAPABILITY_CHANGE_EVENT_TYPES = MCP_CAPABILITY_CHANGE_EVENT_TYPES;
 exports.MODEL_OUTPUT_VALIDATION_ERROR_CODE = MODEL_OUTPUT_VALIDATION_ERROR_CODE;
+exports.ModelExecutionEnvironmentCapability = ModelExecutionEnvironmentCapability;
 exports.ModelOutputValidationError = ModelOutputValidationError;
 exports.ORGANIZATION_METADATA_KEY = ORGANIZATION_METADATA_KEY;
 exports.OpenAICompatibleReranker = OpenAICompatibleReranker;
@@ -9909,6 +10309,8 @@ exports.PLUGIN_METADATA_KEY = PLUGIN_METADATA_KEY;
 exports.PLUGIN_VERSION_METADATA_KEY = PLUGIN_VERSION_METADATA_KEY;
 exports.PLUGIN_WEBHOOK_AUTH_METADATA_KEY = PLUGIN_WEBHOOK_AUTH_METADATA_KEY;
 exports.PLUGIN_WEBHOOK_AUTH_SERVICE_TOKEN = PLUGIN_WEBHOOK_AUTH_SERVICE_TOKEN;
+exports.PROJECT_TASK_PROVIDER = PROJECT_TASK_PROVIDER;
+exports.PROJECT_TYPE_PROVIDER = PROJECT_TYPE_PROVIDER;
 exports.PROVIDE_AI_MODEL_LLM = PROVIDE_AI_MODEL_LLM;
 exports.PROVIDE_AI_MODEL_MODERATION = PROVIDE_AI_MODEL_MODERATION;
 exports.PROVIDE_AI_MODEL_RERANK = PROVIDE_AI_MODEL_RERANK;
@@ -9917,10 +10319,16 @@ exports.PROVIDE_AI_MODEL_TEXT_EMBEDDING = PROVIDE_AI_MODEL_TEXT_EMBEDDING;
 exports.PROVIDE_AI_MODEL_TTS = PROVIDE_AI_MODEL_TTS;
 exports.PluginJobProcessor = PluginJobProcessor;
 exports.PluginWebhookAuth = PluginWebhookAuth;
+exports.ProjectTaskProvider = ProjectTaskProvider;
+exports.ProjectTasksRuntimeCapability = ProjectTasksRuntimeCapability;
+exports.ProjectTypeProvider = ProjectTypeProvider;
+exports.RESOURCE_CARD_EVENT = RESOURCE_CARD_EVENT;
+exports.RESOURCE_CARD_PROVIDER = RESOURCE_CARD_PROVIDER;
 exports.RETRIEVER_STRATEGY = RETRIEVER_STRATEGY;
 exports.RequestContext = RequestContext;
 exports.RequirePermissionOperation = RequirePermissionOperation;
 exports.RerankModel = RerankModel;
+exports.ResourceCardProvider = ResourceCardProvider;
 exports.RetrieverStrategy = RetrieverStrategy;
 exports.SANDBOX_PROVIDER = SANDBOX_PROVIDER;
 exports.SANDBOX_RUNTIME_PROVIDER = SANDBOX_RUNTIME_PROVIDER;
@@ -9937,6 +10345,7 @@ exports.SYSTEM_GLOBAL_SCOPE = SYSTEM_GLOBAL_SCOPE;
 exports.SandboxProviderStrategy = SandboxProviderStrategy;
 exports.SandboxRuntimeProviderStrategy = SandboxRuntimeProviderStrategy;
 exports.SandboxWorkspaceMapperStrategy = SandboxWorkspaceMapperStrategy;
+exports.ShellModelExecutionSourceCapability = ShellModelExecutionSourceCapability;
 exports.SkillSourceProviderStrategy = SkillSourceProviderStrategy;
 exports.Speech2TextChatModel = Speech2TextChatModel;
 exports.SpeechToTextModel = SpeechToTextModel;
@@ -9975,6 +10384,14 @@ exports.XpertResourceTemplate = XpertResourceTemplate;
 exports.XpertServerPlugin = XpertServerPlugin;
 exports.XpertTool = XpertTool;
 exports.XpertToolProvider = XpertToolProvider;
+exports.agentInvocationDispatchContextSchema = agentInvocationDispatchContextSchema;
+exports.agentRuntimeConsumptionStateSchema = agentRuntimeConsumptionStateSchema;
+exports.agentRuntimeDeliveryStateSchema = agentRuntimeDeliveryStateSchema;
+exports.agentRuntimeEventMessageId = agentRuntimeEventMessageId;
+exports.agentRuntimeEventSchema = agentRuntimeEventSchema;
+exports.agentRuntimeReplyTargetSchema = agentRuntimeReplyTargetSchema;
+exports.agentRuntimeResultClaimSchema = agentRuntimeResultClaimSchema;
+exports.agentRuntimeResultConsumptionKey = agentRuntimeResultConsumptionKey;
 exports.als = als;
 exports.appendSandboxMessage = appendSandboxMessage;
 exports.buildSandboxTimeoutMessage = buildSandboxTimeoutMessage;
@@ -9998,6 +10415,7 @@ exports.defineXpertTool = defineXpertTool;
 exports.derivePluginArtifactNamespace = derivePluginArtifactNamespace;
 exports.describeXpertToolProvider = describeXpertToolProvider;
 exports.downloadRemoteFile = downloadRemoteFile;
+exports.emitResourceCard = emitResourceCard;
 exports.formatSandboxTimeout = formatSandboxTimeout;
 exports.getDefaultTenantId = getDefaultTenantId;
 exports.getErrorMessage = getErrorMessage;
@@ -10009,6 +10427,7 @@ exports.getRequestContext = getRequestContext;
 exports.getRequiredPermissionOperation = getRequiredPermissionOperation;
 exports.getTenantGlobalScopeKey = getTenantGlobalScopeKey;
 exports.getXpertToolMethod = getXpertToolMethod;
+exports.isAgentInvocationTerminal = isAgentInvocationTerminal;
 exports.isDevelopmentSandboxRuntimeEnvironment = isDevelopmentSandboxRuntimeEnvironment;
 exports.isModelOutputValidationError = isModelOutputValidationError;
 exports.isModelUsagePricingConfig = isModelUsagePricingConfig;
@@ -10022,8 +10441,11 @@ exports.isStructuredMessageType = isStructuredMessageType;
 exports.isTenantGlobalScopeKey = isTenantGlobalScopeKey;
 exports.loadYamlFile = loadYamlFile;
 exports.mergeCredentials = mergeCredentials;
+exports.mergeModelRequirements = mergeModelRequirements;
 exports.mergeParentChildChunks = mergeParentChildChunks;
+exports.nativeModelTransport = nativeModelTransport;
 exports.normalizeContextSize = normalizeContextSize;
+exports.normalizeTokenUsage = normalizeTokenUsage;
 exports.pluginArtifactTableName = pluginArtifactTableName;
 exports.prepareToolResult = prepareToolResult;
 exports.processAsyncAIGCManagedJob = processAsyncAIGCManagedJob;
@@ -10039,10 +10461,12 @@ exports.resolveSandboxTerminalAdapter = resolveSandboxTerminalAdapter;
 exports.resolveStrategyMetadataTarget = resolveStrategyMetadataTarget;
 exports.resolveTenantGlobalScopeKey = resolveTenantGlobalScopeKey;
 exports.resolveTokenUsage = resolveTokenUsage;
+exports.resolveTokenUsageCandidates = resolveTokenUsageCandidates;
 exports.resolveXpertMcpExtensions = resolveXpertMcpExtensions;
 exports.runWithRequestContext = runWithRequestContext;
 exports.runtimeToolProviderComponent = runtimeToolProviderComponent;
 exports.secondsToMilliseconds = secondsToMilliseconds;
 exports.setDefaultTenantId = setDefaultTenantId;
 exports.sumTokenUsage = sumTokenUsage;
+exports.taskWaitReason = taskWaitReason;
 exports.textTokenBoundaries = textTokenBoundaries;