@xpert-ai/plugin-sdk 3.18.7 → 3.20.0

package/index.esm.js

@@ -1,14 +1,14 @@
-import { Module, Logger, applyDecorators, SetMetadata, HttpException, HttpStatus, BadRequestException, Injectable, Inject, Optional, UnauthorizedException, NotFoundException, ForbiddenException } from '@nestjs/common';
+import { Module, applyDecorators, SetMetadata, HttpException, HttpStatus, BadRequestException, Injectable, Inject, Logger, Optional, UnauthorizedException, NotFoundException, ForbiddenException } from '@nestjs/common';
 import { MODULE_METADATA } from '@nestjs/common/constants';
 import { pick } from 'lodash-es';
-import { _ as _extends } from './_extends.esm.js';
+import { dispatchCustomEvent } from '@langchain/core/callbacks/dispatch';
+import { ChatMessageEventTypeEnum, createResourceCardContent, LanguagesEnum, ParameterType, AiModelTypeEnum, PriceType, FetchFrom, ModelFeature, ModelPropertyKey, projectTaskExecutionContextSchema, projectTaskExecutionReferenceSchema, agentRuntimeProgressSchema, agentInvocationTerminalStatusSchema, MCP_REQUIRED_CONTEXTS, MCP_CAPABILITY_APPROVAL_MODES, MCP_TOOL_RISKS, MCP_TOOL_SIDE_EFFECTS, MCP_TOOL_IDEMPOTENCY, MCP_CAPABILITY_VISIBILITIES, PLUGIN_COMPONENT_TYPE } from '@xpert-ai/contracts';
+export { ASSISTANT_CHAT_SEND_MESSAGE_COMMAND, ASSISTANT_CONTEXT_SET_COMMAND, agentOutputDeliverySchema, agentResultPathSchema, createResourceCardContent, parseResourceCard, resourceCardId } from '@xpert-ai/contracts';
 import { DiscoveryService, Reflector } from '@nestjs/core';
 import { Subject, filter } from 'rxjs';
-import { LanguagesEnum, ParameterType, AiModelTypeEnum, PriceType, FetchFrom, ModelFeature, ModelPropertyKey, MCP_REQUIRED_CONTEXTS, MCP_CAPABILITY_APPROVAL_MODES, MCP_TOOL_RISKS, MCP_TOOL_SIDE_EFFECTS, MCP_TOOL_IDEMPOTENCY, MCP_CAPABILITY_VISIBILITIES, PLUGIN_COMPONENT_TYPE } from '@xpert-ai/contracts';
-export { ASSISTANT_CHAT_SEND_MESSAGE_COMMAND, ASSISTANT_CONTEXT_SET_COMMAND } from '@xpert-ai/contracts';
+import { _ as _extends } from './_extends.esm.js';
 import { AsyncLocalStorage } from 'node:async_hooks';
 import { ExtractJwt } from 'passport-jwt';
-import { verify, JsonWebTokenError } from 'jsonwebtoken';
 import { randomUUID, createHash } from 'node:crypto';
 import { Command } from '@nestjs/cqrs';
 import * as fs from 'fs';
@@ -16,7 +16,7 @@ import fs__default from 'fs';
 import http from 'http';
 import https from 'https';
 import { c as createRuntimeCapability, B as BuiltinToolset, W as WorkspaceFilesRuntimeCapability } from './model-provider.esm.js';
-export { A as ActorTokenRuntimeCapability, a as ActorTokenRuntimeFactoryCapability, b as ArtifactsRuntimeCapability, d as BaseTool, e as BaseToolset, D as DefaultAgentMiddlewareRuntimeCapabilityRegistry, D as DefaultRuntimeCapabilityRegistry, K as KnowledgeDocumentVisualAssetsRuntimeCapability, f as KnowledgeDocumentVisualAssetsRuntimeFactoryCapability, g as KnowledgeGraphRuntimeCapability, h as KnowledgebaseDocumentsRuntimeCapability, i as KnowledgebaseProvisioningRuntimeCapability, j as KnowledgebaseRuntimeCapability, M as ModelProviderBuiltinToolset, P as ProjectAccessRuntimeCapability, k as ProjectProvisioningRuntimeCapability, R as RUNTIME_CAPABILITY_PROVIDER, l as RuntimeCapabilityProvider, S as SANDBOX_JOB_ERROR_CODES, m as SANDBOX_JOB_PROGRESS_PREFIX, n as SandboxJobRuntimeError, o as SandboxJobsRuntimeCapability, p as WORKSPACE_FILES_SOURCE, X as XPERT_RUNTIME_CAPABILITIES_TOKEN, q as isSandboxJobRuntimeError } from './model-provider.esm.js';
+export { A as ActorTokenRuntimeCapability, a as ActorTokenRuntimeFactoryCapability, b as ArtifactsRuntimeCapability, d as BaseTool, e as BaseToolset, D as DefaultAgentMiddlewareRuntimeCapabilityRegistry, D as DefaultRuntimeCapabilityRegistry, K as KnowledgeDocumentVisualAssetsRuntimeCapability, f as KnowledgeDocumentVisualAssetsRuntimeFactoryCapability, g as KnowledgeGraphRuntimeCapability, h as KnowledgebaseDocumentsRuntimeCapability, i as KnowledgebaseProvisioningRuntimeCapability, j as KnowledgebaseRuntimeCapability, M as ModelProviderBuiltinToolset, P as ProjectAccessRuntimeCapability, k as ProjectProvisioningRuntimeCapability, R as RUNTIME_CAPABILITY_PROVIDER, l as RuntimeCapabilityProvider, S as SANDBOX_JOB_ERROR_CODES, m as SANDBOX_JOB_PROGRESS_PREFIX, n as SandboxJobRuntimeError, o as SandboxJobsRuntimeCapability, T as ToolImagesRuntimeCapability, p as WORKSPACE_FILES_SOURCE, X as XPERT_RUNTIME_CAPABILITIES_TOKEN, q as isSandboxJobRuntimeError } from './model-provider.esm.js';
 import fsPromises from 'fs/promises';
 import * as path from 'path';
 import path__default, { join } from 'path';
@@ -30,7 +30,7 @@ import * as _axios from 'axios';
 export { DataSourceRuntimeCapability, SqlDatabaseWorkbenchAdapter, quoteDatabaseIdentifier, requireReadStatement, splitWorkbenchSql } from './data-workbench.esm.js';
 import { BaseCallbackHandler } from '@langchain/core/callbacks/base';
 import { ChatGenerationChunk } from '@langchain/core/outputs';
-import { isAIMessageChunk, AIMessage } from '@langchain/core/messages';
+import { isBaseMessage, isAIMessage, isAIMessageChunk, AIMessage } from '@langchain/core/messages';
 import { ChatOpenAICompletions } from '@langchain/openai';
 import { Document } from '@langchain/core/documents';
 import { BaseChatModel } from '@langchain/core/language_models/chat_models';
@@ -38,11 +38,12 @@ import { getEnvironmentVariable } from '@langchain/core/utils/env';
 export { ModelProviderHttpClient, ModelProviderHttpError } from './model-provider-http-client.esm.js';
 import { getEncodingNameForModel, encodingForModel, getEncoding } from 'js-tiktoken';
 import { getModelContextSize as getModelContextSize$1 } from '@langchain/core/language_models/base';
+import { z, ZodError, ZodFirstPartyTypeKind } from 'zod/v3';
+export { A as AGENT_TASK_RESULTS_FEATURE, a as agentResultItemSchema, b as agentTaskResultSchema } from './results.esm.js';
 import { assertConnectorDefinition } from './connector.esm.js';
 export { CONNECTOR_AUTHORIZATION_MODES, CONNECTOR_SCOPE_TYPES, getConnectorAuthMethods, getConnectorAuthorizationModes } from './connector.esm.js';
 export { base64ToBytes, bytesToBase64, createCollaborationClient, createCollaborationPresenceStore, createSocketIoTransportAdapter, createYjsDocumentAdapter } from './collaboration-client.esm.js';
 import { tool } from '@langchain/core/tools';
-import { ZodError, z, ZodFirstPartyTypeKind } from 'zod/v3';
 
 /**
  * Metadata keys used in plugins for defining various aspects like entities, subscribers, and configurations.
@@ -106,6 +107,10 @@ function assertPluginArtifactNamePart(value, label) {
     }
 }
 
+/** Call after the business mutation commits. A display failure must not retry that mutation. */ async function emitResourceCard(card, config) {
+    await dispatchCustomEvent(ChatMessageEventTypeEnum.ON_CHAT_EVENT, createResourceCardContent(card), config);
+}
+
 const ORGANIZATION_METADATA_KEY = 'xpert:organizationId';
 const PLUGIN_METADATA_KEY = 'xpert:pluginName';
 const PLUGIN_VERSION_METADATA_KEY = 'xpert:pluginVersion';
@@ -142,27 +147,13 @@ function resolveTenantGlobalScopeKey(tenantId) {
     return GLOBAL_ORGANIZATION_SCOPE;
 }
 
-function createPluginLogger(scope, baseMeta = {}) {
-    const nestLogger = new Logger(scope);
-    const wrap = (level, msg, meta)=>{
-        var // Maintain alignment with the Nest Logger interface
-        _nestLogger_level;
-        const payload = meta ? _extends({}, baseMeta, meta) : baseMeta;
-        (_nestLogger_level = nestLogger[level]) == null ? void 0 : _nestLogger_level.call(nestLogger, msg + (Object.keys(payload).length ? ` ${JSON.stringify(payload)}` : ''));
-    };
-    return {
-        child (meta) {
-            return createPluginLogger(scope, _extends({}, baseMeta, meta));
-        },
-        debug: (msg, meta)=>wrap('debug', msg, meta),
-        log: (msg, meta)=>wrap('log', msg, meta),
-        warn: (msg, meta)=>wrap('warn', msg, meta),
-        error: (msg, meta)=>wrap('error', msg, meta)
-    };
-}
-
-const INTEGRATION_STRATEGY = 'INTEGRATION_STRATEGY';
-const IntegrationStrategyKey = (provider)=>applyDecorators(SetMetadata(INTEGRATION_STRATEGY, provider), SetMetadata(STRATEGY_META_KEY, INTEGRATION_STRATEGY));
+const RESOURCE_CARD_PROVIDER = 'RESOURCE_CARD_PROVIDER';
+/** Register exact resource types whose message cards opt in to live refresh. */ const ResourceCardProvider = (...resources)=>{
+    if (!resources.length || resources.some(({ namespace, type })=>!(namespace == null ? void 0 : namespace.trim()) || !(type == null ? void 0 : type.trim()))) {
+        throw new Error('ResourceCardProvider requires explicit resource namespaces and types');
+    }
+    return applyDecorators(SetMetadata(RESOURCE_CARD_PROVIDER, resources), SetMetadata(STRATEGY_META_KEY, RESOURCE_CARD_PROVIDER));
+};
 
 function __decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -332,22 +323,15 @@ class RequestContext {
         }
         return scope.organizationId;
     }
-    static hasPermissions(findPermissions, throwError) {
-        const requestContext = RequestContext.currentRequestContext();
-        if (requestContext) {
-            // tslint:disable-next-line
-            const token = ExtractJwt.fromAuthHeaderAsBearerToken()(requestContext.request);
-            if (token) {
-                const { permissions } = verify(token, process.env['JWT_SECRET']);
-                if (permissions) {
-                    const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
-                    if (found.length === findPermissions.length) {
-                        return true;
-                    }
-                } else {
-                    return false;
-                }
-            }
+    /**
+     * Check the authenticated principal's enabled role permissions, matching the
+     * server RequestContext. Authentication guards resolve JWTs, API keys and
+     * ChatKit client secrets before this check; the bearer is not always a JWT.
+     */ static hasPermissions(findPermissions, throwError) {
+        const permissions = this.currentPermissions();
+        if (permissions.length > 0) {
+            const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
+            if (found.length === findPermissions.length) return true;
         }
         if (throwError) {
             throw new HttpException('Unauthorized', HttpStatus.UNAUTHORIZED);
@@ -355,17 +339,9 @@ class RequestContext {
         return false;
     }
     static hasAnyPermission(findPermissions, throwError) {
-        const requestContext = RequestContext.currentRequestContext();
-        if (requestContext) {
-            // tslint:disable-next-line
-            const token = ExtractJwt.fromAuthHeaderAsBearerToken()(requestContext.request);
-            if (token) {
-                const { permissions } = verify(token, process.env['JWT_SECRET']);
-                const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
-                if (found.length > 0) {
-                    return true;
-                }
-            }
+        const permissions = this.currentPermissions();
+        if (permissions.some((value)=>findPermissions.includes(value))) {
+            return true;
         }
         if (throwError) {
             throw new HttpException('Unauthorized', HttpStatus.UNAUTHORIZED);
@@ -403,20 +379,6 @@ class RequestContext {
         const context = RequestContext.currentRequestContext();
         if (context) {
             var _this_currentUser_role, _this_currentUser;
-            // tslint:disable-next-line
-            const token = this.currentToken();
-            if (token) {
-                try {
-                    const { role } = verify(token, process.env['JWT_SECRET']);
-                    if (role) {
-                        return roles.includes(role);
-                    }
-                } catch (error) {
-                    if (!(error instanceof JsonWebTokenError)) {
-                        throw error;
-                    }
-                }
-            }
             const role = (_this_currentUser = this.currentUser()) == null ? void 0 : (_this_currentUser_role = _this_currentUser.role) == null ? void 0 : _this_currentUser_role.name;
             if (role) {
                 return roles.includes(role);
@@ -427,6 +389,11 @@ class RequestContext {
         }
         return false;
     }
+    static currentPermissions() {
+        var _this_currentUser_role, _this_currentUser;
+        var _this_currentUser_role_rolePermissions;
+        return ((_this_currentUser_role_rolePermissions = (_this_currentUser = this.currentUser()) == null ? void 0 : (_this_currentUser_role = _this_currentUser.role) == null ? void 0 : _this_currentUser_role.rolePermissions) != null ? _this_currentUser_role_rolePermissions : []).filter((rolePermission)=>rolePermission == null ? void 0 : rolePermission.enabled).map((rolePermission)=>rolePermission == null ? void 0 : rolePermission.permission).filter((permission)=>!!permission);
+    }
     constructor(request, response, reqId, userId, extras = {}){
         this.request = request;
         this.response = response;
@@ -497,15 +464,6 @@ function runWithRequestContext(req, res, next) {
 }
 
 let StrategyBus = class StrategyBus {
-    registerRemovalGuard(guard) {
-        this.removalGuards.add(guard);
-        return ()=>{
-            this.removalGuards.delete(guard);
-        };
-    }
-    async assertCanRemove(scopeKey, pluginNames) {
-        for (const guard of this.removalGuards)await guard(scopeKey, pluginNames);
-    }
     upsert(strategyType, entry) {
         this.subject.next({
             type: 'UPSERT',
@@ -523,7 +481,6 @@ let StrategyBus = class StrategyBus {
         } : {}));
     }
     constructor(){
-        this.removalGuards = new Set();
         this.subject = new Subject();
         this.events$ = this.subject.asObservable();
     }
@@ -781,6 +738,102 @@ __decorate([
     return typeof constructor === 'function' ? constructor : null;
 }
 
+var ResourceCardProviderRegistry_1;
+const resourceTypeKey = ({ namespace, type })=>JSON.stringify([
+        namespace,
+        type
+    ]);
+function isProvider(value) {
+    return !!value && typeof value === 'object' && 'resolveMany' in value && typeof value.resolveMany === 'function';
+}
+let ResourceCardProviderRegistry = ResourceCardProviderRegistry_1 = class ResourceCardProviderRegistry extends BaseStrategyRegistry {
+    onModuleInit() {
+        this.subscription = this.bus.events$.pipe(filter((event)=>!event.strategyType || event.strategyType === RESOURCE_CARD_PROVIDER)).subscribe((event)=>{
+            try {
+                if (event.type === 'UPSERT') this.upsert(event.entry.instance);
+                else this.remove(event.orgId, event.pluginName);
+            } catch (e) {
+                // Reject the conflicting provider without terminating the lifecycle subscription.
+                this.resourceLogger.warn('Rejected invalid or conflicting resource card provider registration');
+            }
+        });
+        for (const { instance } of this.discoveryService.getProviders())if (instance) this.upsert(instance);
+    }
+    onModuleDestroy() {
+        var _this_subscription;
+        (_this_subscription = this.subscription) == null ? void 0 : _this_subscription.unsubscribe();
+    }
+    remove(scopeKey, pluginName) {
+        for (const entry of this.listAllRegistrations()){
+            if (entry.source.kind === 'plugin' && entry.source.pluginName === pluginName && entry.source.scopeKey === scopeKey) {
+                this.unregister(entry.type, entry.source, entry.strategy);
+            }
+        }
+    }
+    upsert(instance) {
+        const target = resolveStrategyMetadataTarget(instance);
+        const resources = target && this.reflector.get(RESOURCE_CARD_PROVIDER, target);
+        if (!resources) return;
+        if (!isProvider(instance)) throw new Error('ResourceCardProvider must implement resolveMany');
+        const source = this.getSource(instance);
+        const keys = resources.map(resourceTypeKey);
+        // A route belongs to one plugin across scopes; a different plugin cannot shadow it.
+        // Preflight the whole batch so a conflicting multi-type provider is never partly installed.
+        for (const key of keys){
+            for (const existing of this.listAllRegistrations().filter((entry)=>entry.type === key)){
+                const samePlugin = source.kind === 'plugin' && existing.source.kind === 'plugin' && source.pluginName === existing.source.pluginName;
+                if (existing.strategy !== instance && !samePlugin) {
+                    throw new Error(`Resource card type ${key} is already registered`);
+                }
+            }
+            this.assertCanRegister(key, instance, source);
+        }
+        for (const key of keys)this.register(key, instance, source);
+    }
+    find(resource, organizationId) {
+        const key = resourceTypeKey(resource);
+        for (const scopeKey of this.resolveStrategyScopeKeys(organizationId)){
+            var _this_strategies_get;
+            const provider = (_this_strategies_get = this.strategies.get(scopeKey)) == null ? void 0 : _this_strategies_get.get(key);
+            if (provider) return provider;
+        }
+        return undefined;
+    }
+    constructor(discovery, reflector){
+        super(RESOURCE_CARD_PROVIDER, discovery, reflector);
+        this.resourceLogger = new Logger(ResourceCardProviderRegistry_1.name);
+    }
+};
+ResourceCardProviderRegistry = ResourceCardProviderRegistry_1 = __decorate([
+    Injectable(),
+    __metadata("design:paramtypes", [
+        DiscoveryService,
+        Reflector
+    ])
+], ResourceCardProviderRegistry);
+
+function createPluginLogger(scope, baseMeta = {}) {
+    const nestLogger = new Logger(scope);
+    const wrap = (level, msg, meta)=>{
+        var // Maintain alignment with the Nest Logger interface
+        _nestLogger_level;
+        const payload = meta ? _extends({}, baseMeta, meta) : baseMeta;
+        (_nestLogger_level = nestLogger[level]) == null ? void 0 : _nestLogger_level.call(nestLogger, msg + (Object.keys(payload).length ? ` ${JSON.stringify(payload)}` : ''));
+    };
+    return {
+        child (meta) {
+            return createPluginLogger(scope, _extends({}, baseMeta, meta));
+        },
+        debug: (msg, meta)=>wrap('debug', msg, meta),
+        log: (msg, meta)=>wrap('log', msg, meta),
+        warn: (msg, meta)=>wrap('warn', msg, meta),
+        error: (msg, meta)=>wrap('error', msg, meta)
+    };
+}
+
+const INTEGRATION_STRATEGY = 'INTEGRATION_STRATEGY';
+const IntegrationStrategyKey = (provider)=>applyDecorators(SetMetadata(INTEGRATION_STRATEGY, provider), SetMetadata(STRATEGY_META_KEY, INTEGRATION_STRATEGY));
+
 let IntegrationStrategyRegistry = class IntegrationStrategyRegistry extends BaseStrategyRegistry {
     constructor(discoveryService, reflector){
         super(INTEGRATION_STRATEGY, discoveryService, reflector);
@@ -2633,6 +2686,9 @@ function normalizeCurrency(currency) {
 
 var AIModel_1;
 let AIModel = AIModel_1 = class AIModel {
+    getRealtimeModel(_copilotModel) {
+        throw new Error('Unsupported realtime model');
+    }
     getChatModel(copilotModel, options) {
         throw new Error(`Unsupport chat model!`);
     }
@@ -2876,6 +2932,75 @@ function _class_private_field_loose_key(name) {
     return "__private_" + id++ + "_" + name;
 }
 
+function resolveTokenUsageCandidates(input) {
+    const candidates = [
+        {
+            value: input.canonical,
+            source: 'provider'
+        },
+        {
+            value: input.actual,
+            source: 'provider'
+        },
+        {
+            value: input.estimated,
+            source: 'estimated'
+        },
+        {
+            value: {
+                totalTokens: input.legacyTotal
+            },
+            source: 'legacy'
+        }
+    ];
+    for (const candidate of candidates){
+        const usage = normalizeTokenUsage(candidate.value);
+        if (usage) return {
+            usage,
+            source: candidate.source
+        };
+    }
+    return {
+        usage: {
+            promptTokens: 0,
+            completionTokens: 0,
+            totalTokens: 0
+        },
+        source: 'unavailable'
+    };
+}
+function normalizeTokenUsage(candidate) {
+    if (!candidate) return null;
+    const counts = [
+        candidate.promptTokens,
+        candidate.completionTokens,
+        candidate.totalTokens,
+        candidate.cacheReadInputTokens,
+        candidate.cacheWriteInputTokens,
+        candidate.reasoningTokens
+    ];
+    if (counts.some((count)=>count !== undefined && (!Number.isSafeInteger(count) || count < 0))) return null;
+    var _candidate_promptTokens;
+    const promptTokens = (_candidate_promptTokens = candidate.promptTokens) != null ? _candidate_promptTokens : 0;
+    var _candidate_completionTokens;
+    const completionTokens = (_candidate_completionTokens = candidate.completionTokens) != null ? _candidate_completionTokens : 0;
+    const totalTokens = candidate.totalTokens || promptTokens + completionTokens;
+    if (!Number.isSafeInteger(totalTokens) || totalTokens <= 0 || totalTokens < promptTokens + completionTokens) return null;
+    var _candidate_cacheReadInputTokens, _candidate_cacheWriteInputTokens, _candidate_reasoningTokens;
+    if (((_candidate_cacheReadInputTokens = candidate.cacheReadInputTokens) != null ? _candidate_cacheReadInputTokens : 0) + ((_candidate_cacheWriteInputTokens = candidate.cacheWriteInputTokens) != null ? _candidate_cacheWriteInputTokens : 0) > promptTokens || ((_candidate_reasoningTokens = candidate.reasoningTokens) != null ? _candidate_reasoningTokens : 0) > completionTokens) return null;
+    return _extends({
+        promptTokens,
+        completionTokens,
+        totalTokens
+    }, candidate.cacheReadInputTokens ? {
+        cacheReadInputTokens: candidate.cacheReadInputTokens
+    } : {}, candidate.cacheWriteInputTokens ? {
+        cacheWriteInputTokens: candidate.cacheWriteInputTokens
+    } : {}, candidate.reasoningTokens ? {
+        reasoningTokens: candidate.reasoningTokens
+    } : {});
+}
+
 var _a;
 class LLMUsage {
     static emptyUsage() {
@@ -2921,6 +3046,18 @@ class LargeLanguageModel extends AIModel {
     _commonParameterRules(model) {
         return CommonParameterRules;
     }
+    /** Price already normalized provider facts without starting another inference or writing a ledger. */ priceActualTokenUsage(model, tokenUsage, context = {}) {
+        var _this_getModelSchema;
+        const usage = normalizeTokenUsage(tokenUsage);
+        if (!usage) throw new Error('Actual token usage is required');
+        const priced = this.calcResponseUsage(model, {}, usage.promptTokens, usage.completionTokens, performance.now(), usage, _extends({}, context, {
+            inputTokensIncludeCache: true
+        }));
+        return _extends({}, priced, usage, !((_this_getModelSchema = this.getModelSchema(model, {})) == null ? void 0 : _this_getModelSchema.pricing) ? {
+            pricingStatus: 'unpriced',
+            totalPrice: undefined
+        } : {});
+    }
     calcResponseUsage(model, credentials, promptTokens, completionTokens, startedAt = this.startedAt, tokenUsage, pricingContext = {}) {
         var _this_getModelSchema;
         const resolvedTokenUsage = tokenUsage != null ? tokenUsage : {
@@ -3068,12 +3205,15 @@ class LargeLanguageModel extends AIModel {
             callback
         ];
     }
-    createHandleLLMErrorCallbacks(fields, logger) {
+    createHandleLLMErrorCallbacks(_fields, logger) {
         return {
-            handleLLMError: (err)=>{
-                var _err_cause;
-                var _err_cause_stack;
-                (logger != null ? logger : _class_private_field_loose_base(this, _logger)[_logger]).error(err, (_err_cause_stack = (_err_cause = err.cause) == null ? void 0 : _err_cause.stack) != null ? _err_cause_stack : err.stack, `Error attemptNumber: ${err.attemptNumber}, retriesLeft: ${err.retriesLeft}, ChatDeepSeek params are:\n${JSON.stringify(fields, null, 2)}`);
+            handleLLMError: (error)=>{
+                // Provider errors and constructor fields can contain credentials or request bodies.
+                const errorType = error instanceof Error && /^[A-Za-z]{1,60}$/.test(error.name) ? error.name : 'Error';
+                (logger != null ? logger : _class_private_field_loose_base(this, _logger)[_logger]).error({
+                    event: 'model_provider_request_failed',
+                    errorType
+                });
             }
         };
     }
@@ -3283,97 +3423,59 @@ function isAbortError(error) {
     return error.name === 'AbortError' || /\babort(?:ed)?\b/i.test(error.message);
 }
 function calcTokenUsage(output) {
-    var _output_generations;
-    const tokenUsage = {
+    const result = {
         promptTokens: 0,
         completionTokens: 0,
         totalTokens: 0
     };
-    let cacheReadInputTokens = 0;
-    let cacheWriteInputTokens = 0;
-    (_output_generations = output.generations) == null ? void 0 : _output_generations.forEach((generation)=>{
-        generation.forEach((item)=>{
-            const message = item.message;
-            if (message.usage_metadata) {
-                var _message_usage_metadata_input_token_details, _message_usage_metadata_input_token_details1;
-                tokenUsage.promptTokens += message.usage_metadata.input_tokens;
-                tokenUsage.completionTokens += message.usage_metadata.output_tokens;
-                tokenUsage.totalTokens += message.usage_metadata.total_tokens;
-                var _message_usage_metadata_input_token_details_cache_read;
-                cacheReadInputTokens += (_message_usage_metadata_input_token_details_cache_read = (_message_usage_metadata_input_token_details = message.usage_metadata.input_token_details) == null ? void 0 : _message_usage_metadata_input_token_details.cache_read) != null ? _message_usage_metadata_input_token_details_cache_read : 0;
-                var _message_usage_metadata_input_token_details_cache_creation;
-                cacheWriteInputTokens += (_message_usage_metadata_input_token_details_cache_creation = (_message_usage_metadata_input_token_details1 = message.usage_metadata.input_token_details) == null ? void 0 : _message_usage_metadata_input_token_details1.cache_creation) != null ? _message_usage_metadata_input_token_details_cache_creation : 0;
-            }
-        });
-    });
-    if (cacheReadInputTokens > 0) tokenUsage.cacheReadInputTokens = cacheReadInputTokens;
-    if (cacheWriteInputTokens > 0) tokenUsage.cacheWriteInputTokens = cacheWriteInputTokens;
-    return tokenUsage;
+    var _output_generations;
+    for (const choices of (_output_generations = output.generations) != null ? _output_generations : []){
+        // Each inner array contains choices from one request, not independent provider attempts.
+        const usage = choices.map((choice)=>{
+            var _metadata_input_token_details, _metadata_input_token_details1, _metadata_output_token_details;
+            if (!('message' in choice) || !isBaseMessage(choice.message) || !isAIMessage(choice.message)) return null;
+            const metadata = choice.message.usage_metadata;
+            return metadata ? normalizeTokenUsage({
+                promptTokens: metadata.input_tokens,
+                completionTokens: metadata.output_tokens,
+                totalTokens: metadata.total_tokens,
+                cacheReadInputTokens: (_metadata_input_token_details = metadata.input_token_details) == null ? void 0 : _metadata_input_token_details.cache_read,
+                cacheWriteInputTokens: (_metadata_input_token_details1 = metadata.input_token_details) == null ? void 0 : _metadata_input_token_details1.cache_creation,
+                reasoningTokens: (_metadata_output_token_details = metadata.output_token_details) == null ? void 0 : _metadata_output_token_details.reasoning
+            }) : null;
+        }).find((candidate)=>candidate !== null);
+        if (!usage) continue;
+        result.promptTokens += usage.promptTokens;
+        result.completionTokens += usage.completionTokens;
+        result.totalTokens += usage.totalTokens;
+        for (const key of [
+            'cacheReadInputTokens',
+            'cacheWriteInputTokens',
+            'reasoningTokens'
+        ]){
+            var _result_key;
+            if (usage[key] !== undefined) result[key] = ((_result_key = result[key]) != null ? _result_key : 0) + usage[key];
+        }
+    }
+    return result;
 }
 function resolveTokenUsage(output) {
     return resolveTokenUsageWithAuthority(output).usage;
 }
 function resolveTokenUsageWithAuthority(output) {
     var _output_llmOutput, _output_llmOutput1, _output_llmOutput2;
-    var _normalizeTokenUsage, _ref;
-    const actualUsage = (_ref = (_normalizeTokenUsage = normalizeTokenUsage(calcTokenUsage(output))) != null ? _normalizeTokenUsage : normalizeTokenUsage((_output_llmOutput = output.llmOutput) == null ? void 0 : _output_llmOutput['tokenUsage'])) != null ? _ref : normalizeTokenUsage({
-        totalTokens: (_output_llmOutput1 = output.llmOutput) == null ? void 0 : _output_llmOutput1['totalTokens']
+    const resolved = resolveTokenUsageCandidates({
+        canonical: calcTokenUsage(output),
+        actual: (_output_llmOutput = output.llmOutput) == null ? void 0 : _output_llmOutput['tokenUsage'],
+        estimated: (_output_llmOutput1 = output.llmOutput) == null ? void 0 : _output_llmOutput1['estimatedTokenUsage'],
+        legacyTotal: (_output_llmOutput2 = output.llmOutput) == null ? void 0 : _output_llmOutput2['totalTokens']
     });
-    if (actualUsage) {
-        return {
-            usage: actualUsage
-        };
-    }
-    const estimatedUsage = normalizeTokenUsage((_output_llmOutput2 = output.llmOutput) == null ? void 0 : _output_llmOutput2['estimatedTokenUsage']);
-    if (estimatedUsage) {
-        return {
-            usage: estimatedUsage,
-            type: 'estimated'
-        };
-    }
-    return {
-        usage: {
-            promptTokens: 0,
-            completionTokens: 0,
-            totalTokens: 0
-        }
-    };
-}
-function normalizeTokenUsage(candidate) {
-    if (!candidate) {
-        return null;
-    }
-    if (!isValidTokenCount(candidate.promptTokens) || !isValidTokenCount(candidate.completionTokens) || !isValidTokenCount(candidate.totalTokens)) {
-        return null;
-    }
-    var _candidate_promptTokens;
-    const promptTokens = (_candidate_promptTokens = candidate.promptTokens) != null ? _candidate_promptTokens : 0;
-    var _candidate_completionTokens;
-    const completionTokens = (_candidate_completionTokens = candidate.completionTokens) != null ? _candidate_completionTokens : 0;
-    const totalTokens = candidate.totalTokens || promptTokens + completionTokens;
-    if (promptTokens === 0 && completionTokens === 0 && totalTokens === 0) {
-        return null;
-    }
-    var _candidate_cacheReadInputTokens;
-    const cacheReadInputTokens = (_candidate_cacheReadInputTokens = candidate.cacheReadInputTokens) != null ? _candidate_cacheReadInputTokens : 0;
-    var _candidate_cacheWriteInputTokens;
-    const cacheWriteInputTokens = (_candidate_cacheWriteInputTokens = candidate.cacheWriteInputTokens) != null ? _candidate_cacheWriteInputTokens : 0;
-    if (!isValidTokenCount(cacheReadInputTokens) || !isValidTokenCount(cacheWriteInputTokens)) {
-        return null;
-    }
     return _extends({
-        promptTokens,
-        completionTokens,
-        totalTokens
-    }, cacheReadInputTokens > 0 ? {
-        cacheReadInputTokens
-    } : {}, cacheWriteInputTokens > 0 ? {
-        cacheWriteInputTokens
+        usage: resolved.usage
+    }, resolved.source === 'estimated' ? {
+        type: 'estimated'
     } : {});
 }
-function isValidTokenCount(value) {
-    return value === undefined || Number.isFinite(value) && value >= 0;
-}
 function normalizeCacheTokenAccounting(tokenUsage, context) {
     if (context.inputTokensIncludeCache !== false) return tokenUsage;
     var _tokenUsage_cacheReadInputTokens, _tokenUsage_cacheWriteInputTokens;
@@ -3824,6 +3926,37 @@ Reflect.defineMetadata(COMMAND_METADATA$1, {
     id: CreateModelClientCommand.type
 }, CreateModelClientCommand);
 
+/** A single fetch is one billable attempt. No SDK retries or redirects to another credential origin. */ function nativeModelTransport(input) {
+    const base = new URL(input.baseUrl);
+    if (![
+        'http:',
+        'https:'
+    ].includes(base.protocol) || base.username || base.password || base.search || base.hash) throw new Error('Invalid native model endpoint');
+    const suffix = input.protocol === 'openai_responses' ? '/responses' : '/v1/messages';
+    const url = `${base.href.replace(/\/$/, '')}${suffix}`;
+    return (body, forwarded, signal)=>{
+        const headers = new Headers({
+            'content-type': 'application/json'
+        });
+        if (input.protocol === 'anthropic_messages') {
+            headers.set('anthropic-version', '2023-06-01');
+            for (const [name, value] of Object.entries(forwarded)){
+                // Native Anthropic feature/version headers must survive protocol evolution.
+                if (/^anthropic-[a-z0-9-]+$/.test(name)) headers.set(name, value);
+            }
+            headers.set('x-api-key', input.authorization);
+        } else headers.set('authorization', input.authorization);
+        var _input_fetch;
+        return ((_input_fetch = input.fetch) != null ? _input_fetch : fetch)(url, {
+            method: 'POST',
+            headers,
+            body: JSON.stringify(body),
+            signal,
+            redirect: 'error'
+        });
+    };
+}
+
 const SKILL_SOURCE_PROVIDER = 'SKILL_SOURCE_PROVIDER';
 const SkillSourceProviderStrategy = (provider)=>applyDecorators(SetMetadata(SKILL_SOURCE_PROVIDER, provider), SetMetadata(STRATEGY_META_KEY, SKILL_SOURCE_PROVIDER));
 
@@ -3864,7 +3997,7 @@ AgentMiddlewareRegistry = __decorate([
     'end'
 ];
 
-const AssistantTaskRuntimeCapability = createRuntimeCapability('platform.assistant_task', {
+/** Scoped runtime capability for platform Assistant tasks. */ const AssistantTaskRuntimeCapability = createRuntimeCapability('platform.assistant_task', {
     description: 'Start asynchronous tasks on the current platform assistant.'
 });
 
@@ -3898,6 +4031,18 @@ function isModelOutputValidationError(error) {
     return candidate.code === MODEL_OUTPUT_VALIDATION_ERROR_CODE && candidate.retryable === true && ((_candidate_repairContext = candidate.repairContext) == null ? void 0 : _candidate_repairContext.kind) === 'invalid_tool_calls' && Array.isArray(candidate.repairContext.issues);
 }
 
+/** Combine middleware contributions without mutating or weakening existing requirements. */ function mergeModelRequirements(...requirements) {
+    const features = [
+        ...new Set(requirements.flatMap((item)=>{
+            var _item_features;
+            return (_item_features = item == null ? void 0 : item.features) != null ? _item_features : [];
+        }))
+    ];
+    return features.length ? {
+        features
+    } : undefined;
+}
+
 const SEGMENT_PATTERN = /^[a-z][a-z0-9_-]*$/i;
 const VERSION_PATTERN = /^v[1-9][0-9]*$/;
 function assertSegment(input, name) {
@@ -3943,6 +4088,96 @@ function assertSegment(input, name) {
 const AGENT_CHAT_DISPATCH_MESSAGE_TYPE = defineAgentMessageType('chat_dispatch', 1);
 const AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING = 'steer_target_not_running';
 
+/** Captured by an authorized host command. Describing a recipient never authorizes delivery. */ const replyConversation = {
+    conversationId: z.string().uuid(),
+    threadId: z.string().trim().min(1).max(256)
+};
+const agentRuntimeReplyTargetSchema = z.discriminatedUnion('type', [
+    z.object(_extends({}, replyConversation, {
+        type: z.literal('xpert').optional(),
+        xpertId: z.string().uuid(),
+        agentKey: z.string().trim().min(1).max(256)
+    })).strict(),
+    z.object(_extends({}, replyConversation, {
+        type: z.literal('project_agent'),
+        projectId: z.string().uuid(),
+        agentKey: z.literal('general_agent')
+    })).strict()
+]);
+/** Persist with the immutable invocation request before launch. No credentials or arbitrary routing headers. */ const agentInvocationDispatchContextSchema = z.object({
+    version: z.literal(1),
+    requestId: z.string().uuid(),
+    sourceMessageId: z.string().trim().min(1).max(256),
+    replyTo: agentRuntimeReplyTargetSchema,
+    projectTask: projectTaskExecutionContextSchema.optional()
+}).strict();
+
+const AGENT_RUNTIME_EVENT_MESSAGE_TYPE = defineAgentMessageType('runtime_event', 1);
+const reference = {
+    version: z.literal(1),
+    invocationId: z.string().uuid(),
+    /** Revision of the persisted observation, never a queue delivery attempt. */ revision: z.number().int().nonnegative(),
+    projectTask: projectTaskExecutionReferenceSchema.optional()
+};
+/** Host-produced references. Consumers reload and authorize the invocation and its pinned observation. */ const agentRuntimeEventSchema = z.discriminatedUnion('kind', [
+    z.object(_extends({}, reference, {
+        kind: z.literal('progress'),
+        progress: agentRuntimeProgressSchema
+    })).strict(),
+    z.object(_extends({}, reference, {
+        kind: z.literal('result'),
+        status: agentInvocationTerminalStatusSchema
+    })).strict(),
+    z.object(_extends({}, reference, {
+        kind: z.literal('input_request'),
+        interactionId: z.string().trim().min(1).max(256)
+    })).strict()
+]);
+/** Same observation always has the same HandoffMessage.id across retries and process restarts. */ function agentRuntimeEventMessageId(event) {
+    return `runtime-${event.invocationId}-${event.kind}-${event.revision}`;
+}
+/** Transport states are deliberately separate from Task and Invocation status. */ const agentRuntimeDeliveryStateSchema = z.enum([
+    'pending',
+    'received',
+    'blocked',
+    'failed'
+]);
+const agentRuntimeConsumptionStateSchema = z.enum([
+    'pending',
+    'processing',
+    'processed',
+    'blocked',
+    'failed'
+]);
+/** Store under a unique scoped key in the same transaction as the continuation reservation. */ const agentRuntimeResultClaimSchema = z.object({
+    invocationId: z.string().uuid(),
+    resultRevision: z.number().int().nonnegative(),
+    recipient: agentRuntimeReplyTargetSchema,
+    consumer: z.discriminatedUnion('type', [
+        z.object({
+            type: z.literal('follow_up'),
+            executionId: z.string().uuid()
+        }).strict(),
+        z.object({
+            type: z.literal('wait'),
+            executionId: z.string().uuid(),
+            callId: z.string().trim().min(1).max(1024)
+        }).strict()
+    ])
+}).strict();
+/**
+ * Wait and asynchronous reply compete for this same key, regardless of delivery revision.
+ * The storage key must additionally include tenant, organization and owner from trusted scope.
+ */ function agentRuntimeResultConsumptionKey(invocationId, recipient) {
+    return JSON.stringify([
+        invocationId,
+        recipient.conversationId,
+        recipient.threadId,
+        recipient.type === 'project_agent' ? `project:${recipient.projectId}` : recipient.xpertId,
+        recipient.agentKey
+    ]);
+}
+
 /**
  * Handoff Processor meta key。
  */ const HANDOFF_PROCESSOR_STRATEGY = 'HANDOFF_PROCESSOR_STRATEGY';
@@ -3987,6 +4222,76 @@ HandoffProcessorRegistry = __decorate([
     runTtlMs: 10 * 60 * 1000
 };
 
+/** Checks confirmed completion; unknown remains non-terminal. */ function isAgentInvocationTerminal(status) {
+    return status === 'succeeded' || status === 'failed' || status === 'cancelled';
+}
+
+/** Nest discovery metadata key for runtime strategies. */ const AGENT_RUNTIME_STRATEGY = 'AGENT_RUNTIME_STRATEGY';
+/** Associate a stable provider key with an adapter. Also declare @Injectable() and register the provider. */ const AgentRuntimeStrategy = (provider)=>applyDecorators(SetMetadata(AGENT_RUNTIME_STRATEGY, provider), SetMetadata(STRATEGY_META_KEY, AGENT_RUNTIME_STRATEGY));
+/** Scoped strategy registry with pinned provider/version lookup for continuation. */ let AgentRuntimeRegistry = class AgentRuntimeRegistry extends BaseStrategyRegistry {
+    /** Find the exact original scope/plugin/version, without fallback. Returns undefined if unavailable. */ getPinned(provider, source) {
+        var _this_strategies_get;
+        const strategy = (_this_strategies_get = this.strategies.get(source.scopeKey)) == null ? void 0 : _this_strategies_get.get(provider);
+        if (!strategy) return undefined;
+        const actual = this.getSource(strategy);
+        return actual.kind === source.kind && actual.scopeKey === source.scopeKey && (actual.kind !== 'plugin' || source.kind !== 'plugin' || actual.pluginName === source.pluginName && actual.pluginVersion === source.pluginVersion) ? strategy : undefined;
+    }
+    constructor(discoveryService, reflector){
+        super(AGENT_RUNTIME_STRATEGY, discoveryService, reflector);
+    }
+};
+AgentRuntimeRegistry = __decorate([
+    Injectable(),
+    __metadata("design:paramtypes", [
+        DiscoveryService,
+        Reflector
+    ])
+], AgentRuntimeRegistry);
+
+/** Caller-scoped API obtained through runtime.capabilities.require(...). */ const AgentInvocationRuntimeCapability = createRuntimeCapability('platform.agent_invocation', {
+    description: 'Scoped, versioned Agent invocation and lifecycle control'
+});
+/** Platform factory capability. The wire key is stable across SDK naming changes. */ const AgentRuntimeFactoryCapability = createRuntimeCapability('platform.agent_invocation.factory');
+
+/**
+ * Keeps shared OS model authorization independent of Pro Computer/Docker lifecycle details.
+ * Grant issuance, authentication, revalidation and renewal delegate environment checks to this host adapter.
+ * Implementations validate ownership and instance identity so a replaced runtime cannot keep its old grant.
+ * Execution validity is independent of desktop viewing sessions; managed runners may also require an operation lease.
+ * Other environments can supply their own checks without changing the grant service.
+ * This capability validates the bound environment; model selection and usage accounting remain separate concerns.
+ */ const ModelExecutionEnvironmentCapability = createRuntimeCapability('platform.model_execution.environment');
+
+/** Configuration adapters describe secrets by reference; only the host materializes credentials. */ const CLI_MODEL_TOKEN_REFERENCE = '${XPERT_EXECUTION_TOKEN}';
+const CliModelProfilesCapability = createRuntimeCapability('platform.cli_model_profiles');
+/** Additional execution sources can validate lifecycle without making OS depend on Pro entities. */ const ShellModelExecutionSourceCapability = createRuntimeCapability('platform.model_execution.shell_source');
+
+function taskWaitReason(states, mode) {
+    if (states.length && (mode === 'all' ? states.every((state)=>state === 'completed') : states.includes('completed'))) return 'completed';
+    if (states.includes('attention')) return 'attention';
+    return undefined;
+}
+
+const AgentExecutionRunnerCapability = createRuntimeCapability('platform.agent_execution.runner');
+const AgentExecutionRunnerFactoryCapability = createRuntimeCapability('platform.agent_execution.runner.factory');
+
+/** Older runtime plugins can still send this event; new emissions use ON_CHAT_EVENT. */ const RESOURCE_CARD_EVENT = 'xpert.resource_card';
+
+const ASSISTANT_CAPABILITY_PROVIDER = 'ASSISTANT_CAPABILITY_PROVIDER';
+const AssistantCapabilityProvider = (key)=>applyDecorators(SetMetadata(ASSISTANT_CAPABILITY_PROVIDER, key), SetMetadata(STRATEGY_META_KEY, ASSISTANT_CAPABILITY_PROVIDER));
+let AssistantCapabilityProviderRegistry = class AssistantCapabilityProviderRegistry extends BaseStrategyRegistry {
+    constructor(discovery, reflector){
+        super(ASSISTANT_CAPABILITY_PROVIDER, discovery, reflector);
+    }
+};
+AssistantCapabilityProviderRegistry = __decorate([
+    Injectable(),
+    __metadata("design:paramtypes", [
+        DiscoveryService,
+        Reflector
+    ])
+], AssistantCapabilityProviderRegistry);
+
 /**
  * Common platform message length limits
  */ const CHAT_CHANNEL_TEXT_LIMITS = {
@@ -4281,10 +4586,14 @@ function appendSandboxMessage(output, message) {
 function resolveSandboxExecutionOptions(options, defaults = DEFAULT_SANDBOX_SHELL_EXECUTION_OPTIONS) {
     const timeoutMs = typeof (options == null ? void 0 : options.timeoutMs) === 'number' && Number.isFinite(options.timeoutMs) && options.timeoutMs > 0 ? Math.trunc(options.timeoutMs) : typeof defaults.timeoutMs === 'number' && Number.isFinite(defaults.timeoutMs) && defaults.timeoutMs > 0 ? Math.trunc(defaults.timeoutMs) : DEFAULT_SANDBOX_SHELL_TIMEOUT_MS;
     const maxOutputBytes = typeof (options == null ? void 0 : options.maxOutputBytes) === 'number' && Number.isFinite(options.maxOutputBytes) && options.maxOutputBytes > 0 ? Math.trunc(options.maxOutputBytes) : typeof defaults.maxOutputBytes === 'number' && Number.isFinite(defaults.maxOutputBytes) && defaults.maxOutputBytes > 0 ? Math.trunc(defaults.maxOutputBytes) : DEFAULT_SANDBOX_EXECUTION_MAX_OUTPUT_BYTES;
-    return {
+    return _extends({
         timeoutMs,
         maxOutputBytes
-    };
+    }, (options == null ? void 0 : options.executionScope) ? {
+        executionScope: options.executionScope
+    } : {}, (options == null ? void 0 : options.signal) ? {
+        signal: options.signal
+    } : {});
 }
 
 function isObjectLike$2(value) {
@@ -5423,6 +5732,7 @@ ViewExtensionProviderRegistry = __decorate([
 
 const XPERT_REMOTE_UI_CSS = `
 :root {
+  font-size: var(--xui-density-root-font-size, 16px);
   color-scheme: light;
   --xui-font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
   --xui-color-background: #fff;
@@ -5457,6 +5767,7 @@ const XPERT_REMOTE_UI_CSS = `
   --xui-radius-sm: 6px;
   --xui-radius-md: 8px;
   --xui-radius-lg: 10px;
+  --xui-font-size: 14px;
   --xui-font-size-xs: 0.75rem;
   --xui-font-size-sm: 0.8125rem;
   --xui-font-size-md: 0.875rem;
@@ -5744,6 +6055,7 @@ const XPERT_REMOTE_UI_BOOTSTRAP = `
   var VERSION = 1
   var TOKEN_MAP = {
     fontFamily: '--xui-font-family',
+    densityRootFontSize: '--xui-density-root-font-size',
     colorBackground: '--xui-color-background',
     colorForeground: '--xui-color-foreground',
     colorCard: '--xui-color-card',
@@ -5776,6 +6088,7 @@ const XPERT_REMOTE_UI_BOOTSTRAP = `
     radiusSm: '--xui-radius-sm',
     radiusMd: '--xui-radius-md',
     radiusLg: '--xui-radius-lg',
+    fontSize: '--xui-font-size',
     fontSizeXs: '--xui-font-size-xs',
     fontSizeSm: '--xui-font-size-sm',
     fontSizeMd: '--xui-font-size-md',
@@ -5937,6 +6250,9 @@ EvolutionTargetProviderRegistry = __decorate([
 ], EvolutionTargetProviderRegistry);
 
 const EVOLUTION_RUNTIME_SERVICE_TOKEN = 'XPERT_EVOLUTION_RUNTIME_SERVICE';
+const EvolutionBaselineRuntimeCapability = createRuntimeCapability('platform.agent-evolution.baselines', {
+    description: 'Inspect and initialize organization rule baselines with administrator authorization and revision checks.'
+});
 const EvolutionRuntimeCapability = createRuntimeCapability('platform.agent-evolution', {
     description: 'Ingest learning signals and resolve immutable capability versions for domain runtimes.'
 });
@@ -6177,6 +6493,11 @@ function describeXpertToolProvider(instance) {
         if (middlewareProvider && !middlewareProviders.has(middlewareProvider)) {
             throw new Error(`Tool '${toolOptions.name}' references undeclared Middleware provider '${middlewareProvider}'.`);
         }
+        if (toolOptions.app) {
+            if (!middlewareProvider || !toolOptions.app.visibility.length || toolOptions.app.visibility.some((item)=>item !== 'model' && item !== 'app') || toolOptions.app.resourceKey && (!appKeys.has(toolOptions.app.resourceKey) || !toolOptions.app.visibility.includes('app'))) {
+                throw new Error(`Tool '${toolOptions.name}' has an invalid middleware App binding.`);
+            }
+        }
         const appKey = toolOptions.mcp && ((_toolOptions_mcp_app = toolOptions.mcp.app) == null ? void 0 : _toolOptions_mcp_app.resourceKey);
         if (appKey && !appKeys.has(appKey)) {
             throw new Error(`MCP Tool '${toolOptions.name}' references undeclared App '${appKey}'.`);
@@ -6574,12 +6895,21 @@ class DecoratedAgentMiddlewareStrategy {
         return this.descriptor.tools.filter((item)=>item.middlewareProvider === this.provider).map((item)=>item.options.name);
     }
     async createMiddleware(options, context) {
+        var _this_descriptor_options_apps;
         const tools = this.descriptor.tools.filter((item)=>item.middlewareProvider === this.provider).map((item)=>createAgentTool(this.instance, item, context, options));
         const extensions = await (this.instance.getMiddlewareExtensions == null ? void 0 : this.instance.getMiddlewareExtensions.call(this.instance, this.provider, options, context));
         return _extends({}, extensions != null ? extensions : {}, {
             name: this.provider,
             tools
-        });
+        }, ((_this_descriptor_options_apps = this.descriptor.options.apps) == null ? void 0 : _this_descriptor_options_apps.length) ? {
+            apps: {
+                definitions: this.descriptor.options.apps,
+                tools: Object.fromEntries(this.descriptor.tools.filter((item)=>item.middlewareProvider === this.provider && item.options.app).map((item)=>[
+                        item.options.name,
+                        item.options.app
+                    ]))
+            }
+        } : {});
     }
     constructor(instance, descriptor, provider){
         var _descriptor_options_middlewares;
@@ -9739,4 +10069,37 @@ function stableJson(value) {
     return `{${entries.map(([key, item])=>`${JSON.stringify(key)}:${stableJson(item)}`).join(',')}}`;
 }
 
-export { ACCOUNT_BINDING_PERMISSION_SERVICE_TOKEN, AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING, AGENT_CHAT_DISPATCH_MESSAGE_TYPE, AGENT_MIDDLEWARE_STRATEGY, AIModel, AIModelProviderNotFoundException, AIModelProviderRegistry, AIModelProviderStrategy, AI_MODEL_PROVIDER, AdapterDataSourceStrategy, AgentMiddlewareRegistry, AgentMiddlewareStrategy, AiModelNotFoundException, AssistantTaskRuntimeCapability, BOUND_IDENTITY_LOGIN_PERMISSION_SERVICE_TOKEN, BUILTIN_GLOBAL_SCOPE, BaseHTTPQueryRunner, BaseQueryRunner, BaseSQLQueryRunner, BaseSandbox, BaseStrategyRegistry, BuiltinToolset, CHAT_CHANNEL, CHAT_CHANNEL_TEXT_LIMITS, COLLABORATION_DOCUMENT_PROVIDER, CONNECTION_COMMAND_ROUTER_TOKEN, CONNECTOR_STRATEGY, CancelConversationCommand, ChatChannel, ChatChannelRegistry, ChatOAICompatReasoningModel, CollaborationDocumentProvider, CollaborationDocumentProviderRegistry, CollaborationRuntimeCapability, CommonParameterRules, ConnectorRuntimeCapability, ConnectorRuntimeFactoryCapability, ConnectorStrategyKey, ConnectorStrategyRegistry, CreateModelClientCommand, CredentialsValidateFailedError, DATASOURCE_STRATEGY, DBCreateTableMode, DBProtocolEnum, DBSyntaxEnum, DBTableAction, DBTableDataAction, DEFAULT_EXECUTION_CONFIG, DEFAULT_SANDBOX_EXECUTION_MAX_OUTPUT_BYTES, DEFAULT_SANDBOX_FILE_OPERATION_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_SEC, DEFAULT_SANDBOX_FILE_SEARCH_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_SEC, DEFAULT_SANDBOX_SHELL_EXECUTION_OPTIONS, DEFAULT_SANDBOX_SHELL_TIMEOUT_MS, DEFAULT_SANDBOX_SHELL_TIMEOUT_SEC, DOCUMENT_SOURCE_STRATEGY, DOCUMENT_TRANSFORMER_STRATEGY, DataSourceStrategy, DataSourceStrategyRegistry, DecoratedAgentMiddlewareStrategy, DecoratedToolsetStrategy, DocumentSourceRegistry, DocumentSourceStrategy, DocumentTransformerRegistry, DocumentTransformerStrategy, EVOLUTION_RUNTIME_SERVICE_TOKEN, EVOLUTION_TARGET_PROVIDER, EvolutionChangeRuntimeCapability, EvolutionRuntimeCapability, EvolutionTargetProviderRegistry, EvolutionTargetProviderStrategy, FILE_STORAGE_PROVIDER, FILE_UPLOAD_TARGET_STRATEGY, FileRuntimeCapability, FileStorageProvider, FileStorageProviderRegistry, FileUploadTargetRegistry, FileUploadTargetStrategy, GLOBAL_ORGANIZATION_SCOPE, HANDOFF_PERMISSION_SERVICE_TOKEN, HANDOFF_PROCESSOR_STRATEGY, HANDOFF_QUEUE_SERVICE_TOKEN, HandoffProcessorRegistry, HandoffProcessorStrategy, IMAGE_UNDERSTANDING_STRATEGY, INTEGRATION_PERMISSION_SERVICE_TOKEN, INTEGRATION_STRATEGY, ImageGenerationModel, ImageUnderstandingRegistry, ImageUnderstandingStrategy, IntegrationStrategyKey, IntegrationStrategyRegistry, JUMP_TO_TARGETS, JsonSchemaValidator, KEYWORD_ANALYZER_STRATEGY, KNOWLEDGE_STRATEGY, KeywordAnalyzerRegistry, KeywordAnalyzerStrategy, KnowledgeStrategyKey, KnowledgeStrategyRegistry, LLMUsage, LargeLanguageModel, MANAGED_CONNECTION_REGISTRY_TOKEN, MANAGED_QUEUE_HANDLER_REGISTRY_TOKEN, MANAGED_QUEUE_SERVICE_TOKEN, MCP_CAPABILITY_CHANGE_EVENT_TYPES, MODEL_OUTPUT_VALIDATION_ERROR_CODE, ModelOutputValidationError, ModelProvider, ORGANIZATION_METADATA_KEY, OpenAICompatibleReranker, PERMISSION_OPERATION_METADATA_KEY, PLUGIN_CONFIG_RESOLVER_TOKEN, PLUGIN_JOB_PROCESSOR_METADATA, PLUGIN_METADATA, PLUGIN_METADATA_KEY, PLUGIN_VERSION_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_SERVICE_TOKEN, PROVIDE_AI_MODEL_LLM, PROVIDE_AI_MODEL_MODERATION, PROVIDE_AI_MODEL_RERANK, PROVIDE_AI_MODEL_SPEECH2TEXT, PROVIDE_AI_MODEL_TEXT_EMBEDDING, PROVIDE_AI_MODEL_TTS, PluginJobProcessor, PluginWebhookAuth, PluginWebhookAuthGuard, RETRIEVER_STRATEGY, RequestContext, RequestContextMiddleware, RequirePermissionOperation, RerankModel, RetrieverRegistry, RetrieverStrategy, SANDBOX_PROVIDER, SANDBOX_RUNTIME_PROVIDER, SANDBOX_SHELL_TIMEOUT_LIMITS_SEC, SANDBOX_WORKSPACE_MAPPER, SKILL_SOURCE_PROVIDER, SPEECH_TO_TEXT_PERMISSION_SERVICE_TOKEN, SPEECH_TO_TEXT_SERVICE_TOKEN, SSOProviderRegistry, SSOProviderStrategyKey, SSO_BINDING_PERMISSION_SERVICE_TOKEN, SSO_PROVIDER, STRATEGY_META_KEY, SYSTEM_GLOBAL_SCOPE, SandboxProviderRegistry, SandboxProviderStrategy, SandboxRuntimeProviderRegistry, SandboxRuntimeProviderStrategy, SandboxWorkspaceMapperRegistry, SandboxWorkspaceMapperStrategy, SkillSourceProviderRegistry, SkillSourceProviderStrategy, Speech2TextChatModel, SpeechToTextModel, StrategyBus, TENANT_GLOBAL_SCOPE_PREFIX, TENANT_GLOBAL_SCOPE_SUFFIX, TEXT_SPLITTER_STRATEGY, TOOLSET_STRATEGY, TextEmbeddingModelManager, TextSplitterRegistry, TextSplitterStrategy, TextToSpeechModel, ToolsetRegistry, ToolsetStrategy, USER_PERMISSION_SERVICE_TOKEN, VECTOR_STORE_STRATEGY, VIDEO_GENERATION_PERMISSION_SERVICE_TOKEN, VIDEO_GENERATION_SERVICE_TOKEN, VIDEO_GENERATOR_FAMILIES, VIEW_EXTENSION_CACHE_SERVICE_TOKEN, VIEW_EXTENSION_PROVIDER, VectorStoreRegistry, VectorStoreStrategy, VideoGenerationModel, ViewExtensionProvider, ViewExtensionProviderRegistry, WORKFLOW_NODE_STRATEGY, WORKFLOW_TRIGGER_STRATEGY, WorkflowNodeRegistry, WorkflowNodeStrategy, WorkflowTriggerRegistry, WorkflowTriggerStrategy, WorkspaceFilesRuntimeCapability, WrapWorkflowNodeExecutionCommand, XPERT_AGENT_MIDDLEWARE_RUNTIME_TOKEN, XPERT_TOOL_METHOD_METADATA, XPERT_TOOL_PROVIDER, XPERT_TOOL_PROVIDER_METADATA, XPERT_TOOL_RESULT_FORMAT_VERSION, XpFileSystem, XpertPrompt, XpertResource, XpertResourceTemplate, XpertServerPlugin, XpertTool, XpertToolProvider, XpertToolProviderCoordinator, XpertToolProviderRegistry, als, appendSandboxMessage, assertConnectorDefinition, buildSandboxTimeoutMessage, calcTokenUsage, calculateLLMUsagePrice, calculateModelPrice, calculateModelUsageCharge, chunkText, countTextTokens, countTokensSafe, createI18nInstance, createPluginLogger, createRuntimeCapability, defineAgentMessageType, defineChannelMessageType, defineMcpApp, defineMcpCapabilities, defineMcpPrompt, defineMcpResource, defineMcpResourceTemplate, defineXpertTool, derivePluginArtifactNamespace, describeXpertToolProvider, downloadRemoteFile, formatSandboxTimeout, getDefaultTenantId, getErrorMessage, getModelContextSize, getPermissionOperationMetadata, getPositionList, getPositionMap, getRequestContext, getRequiredPermissionOperation, getTenantGlobalScopeKey, getXpertToolMethod, isDevelopmentSandboxRuntimeEnvironment, isModelOutputValidationError, isModelUsagePricingConfig, isRemoteFile, isSandboxBackend, isSandboxManagedServiceAdapter, isSandboxServiceProxyAdapter, isSandboxTerminalAdapter, isStrategyInstance, isStructuredMessageType, isTenantGlobalScopeKey, loadYamlFile, mergeCredentials, mergeParentChildChunks, normalizeContextSize, pluginArtifactTableName, prepareToolResult, processAsyncAIGCManagedJob, renderRemoteModuleIframeHtml, renderRemoteReactIframeHtml, renderRemoteVueIframeHtml, resolveModelUsagePricingSnapshot, resolveSandboxBackend, resolveSandboxExecutionOptions, resolveSandboxManagedServiceAdapter, resolveSandboxServiceProxyAdapter, resolveSandboxTerminalAdapter, resolveStrategyMetadataTarget, resolveTenantGlobalScopeKey, resolveTokenUsage, resolveXpertMcpExtensions, runWithRequestContext, runtimeToolProviderComponent, secondsToMilliseconds, setDefaultTenantId, sumTokenUsage, textTokenBoundaries };
+const PROJECT_TYPE_PROVIDER = 'PROJECT_TYPE_PROVIDER';
+/** Register the stable provider key used by entity-backed App project type declarations. */ const ProjectTypeProvider = (key)=>applyDecorators(SetMetadata(PROJECT_TYPE_PROVIDER, key), SetMetadata(STRATEGY_META_KEY, PROJECT_TYPE_PROVIDER));
+let ProjectTypeProviderRegistry = class ProjectTypeProviderRegistry extends BaseStrategyRegistry {
+    constructor(discovery, reflector){
+        super(PROJECT_TYPE_PROVIDER, discovery, reflector);
+    }
+};
+ProjectTypeProviderRegistry = __decorate([
+    Injectable(),
+    __metadata("design:paramtypes", [
+        DiscoveryService,
+        Reflector
+    ])
+], ProjectTypeProviderRegistry);
+
+const PROJECT_TASK_PROVIDER = 'PROJECT_TASK_PROVIDER';
+const ProjectTaskProvider = (key)=>applyDecorators(SetMetadata(PROJECT_TASK_PROVIDER, key), SetMetadata(STRATEGY_META_KEY, PROJECT_TASK_PROVIDER));
+let ProjectTaskProviderRegistry = class ProjectTaskProviderRegistry extends BaseStrategyRegistry {
+    constructor(discovery, reflector){
+        super(PROJECT_TASK_PROVIDER, discovery, reflector);
+    }
+};
+ProjectTaskProviderRegistry = __decorate([
+    Injectable(),
+    __metadata("design:paramtypes", [
+        DiscoveryService,
+        Reflector
+    ])
+], ProjectTaskProviderRegistry);
+const ProjectTasksRuntimeCapability = createRuntimeCapability('platform.project.tasks', {
+    description: 'Read project task graphs, manage schedules, and resolve exact execution conversations.'
+});
+
+export { ACCOUNT_BINDING_PERMISSION_SERVICE_TOKEN, AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING, AGENT_CHAT_DISPATCH_MESSAGE_TYPE, AGENT_MIDDLEWARE_STRATEGY, AGENT_RUNTIME_EVENT_MESSAGE_TYPE, AGENT_RUNTIME_STRATEGY, AIModel, AIModelProviderNotFoundException, AIModelProviderRegistry, AIModelProviderStrategy, AI_MODEL_PROVIDER, ASSISTANT_CAPABILITY_PROVIDER, AdapterDataSourceStrategy, AgentExecutionRunnerCapability, AgentExecutionRunnerFactoryCapability, AgentInvocationRuntimeCapability, AgentMiddlewareRegistry, AgentMiddlewareStrategy, AgentRuntimeFactoryCapability, AgentRuntimeRegistry, AgentRuntimeStrategy, AiModelNotFoundException, AssistantCapabilityProvider, AssistantCapabilityProviderRegistry, AssistantTaskRuntimeCapability, BOUND_IDENTITY_LOGIN_PERMISSION_SERVICE_TOKEN, BUILTIN_GLOBAL_SCOPE, BaseHTTPQueryRunner, BaseQueryRunner, BaseSQLQueryRunner, BaseSandbox, BaseStrategyRegistry, BuiltinToolset, CHAT_CHANNEL, CHAT_CHANNEL_TEXT_LIMITS, CLI_MODEL_TOKEN_REFERENCE, COLLABORATION_DOCUMENT_PROVIDER, CONNECTION_COMMAND_ROUTER_TOKEN, CONNECTOR_STRATEGY, CancelConversationCommand, ChatChannel, ChatChannelRegistry, ChatOAICompatReasoningModel, CliModelProfilesCapability, CollaborationDocumentProvider, CollaborationDocumentProviderRegistry, CollaborationRuntimeCapability, CommonParameterRules, ConnectorRuntimeCapability, ConnectorRuntimeFactoryCapability, ConnectorStrategyKey, ConnectorStrategyRegistry, CreateModelClientCommand, CredentialsValidateFailedError, DATASOURCE_STRATEGY, DBCreateTableMode, DBProtocolEnum, DBSyntaxEnum, DBTableAction, DBTableDataAction, DEFAULT_EXECUTION_CONFIG, DEFAULT_SANDBOX_EXECUTION_MAX_OUTPUT_BYTES, DEFAULT_SANDBOX_FILE_OPERATION_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_SEC, DEFAULT_SANDBOX_FILE_SEARCH_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_SEC, DEFAULT_SANDBOX_SHELL_EXECUTION_OPTIONS, DEFAULT_SANDBOX_SHELL_TIMEOUT_MS, DEFAULT_SANDBOX_SHELL_TIMEOUT_SEC, DOCUMENT_SOURCE_STRATEGY, DOCUMENT_TRANSFORMER_STRATEGY, DataSourceStrategy, DataSourceStrategyRegistry, DecoratedAgentMiddlewareStrategy, DecoratedToolsetStrategy, DocumentSourceRegistry, DocumentSourceStrategy, DocumentTransformerRegistry, DocumentTransformerStrategy, EVOLUTION_RUNTIME_SERVICE_TOKEN, EVOLUTION_TARGET_PROVIDER, EvolutionBaselineRuntimeCapability, EvolutionChangeRuntimeCapability, EvolutionRuntimeCapability, EvolutionTargetProviderRegistry, EvolutionTargetProviderStrategy, FILE_STORAGE_PROVIDER, FILE_UPLOAD_TARGET_STRATEGY, FileRuntimeCapability, FileStorageProvider, FileStorageProviderRegistry, FileUploadTargetRegistry, FileUploadTargetStrategy, GLOBAL_ORGANIZATION_SCOPE, HANDOFF_PERMISSION_SERVICE_TOKEN, HANDOFF_PROCESSOR_STRATEGY, HANDOFF_QUEUE_SERVICE_TOKEN, HandoffProcessorRegistry, HandoffProcessorStrategy, IMAGE_UNDERSTANDING_STRATEGY, INTEGRATION_PERMISSION_SERVICE_TOKEN, INTEGRATION_STRATEGY, ImageGenerationModel, ImageUnderstandingRegistry, ImageUnderstandingStrategy, IntegrationStrategyKey, IntegrationStrategyRegistry, JUMP_TO_TARGETS, JsonSchemaValidator, KEYWORD_ANALYZER_STRATEGY, KNOWLEDGE_STRATEGY, KeywordAnalyzerRegistry, KeywordAnalyzerStrategy, KnowledgeStrategyKey, KnowledgeStrategyRegistry, LLMUsage, LargeLanguageModel, MANAGED_CONNECTION_REGISTRY_TOKEN, MANAGED_QUEUE_HANDLER_REGISTRY_TOKEN, MANAGED_QUEUE_SERVICE_TOKEN, MCP_CAPABILITY_CHANGE_EVENT_TYPES, MODEL_OUTPUT_VALIDATION_ERROR_CODE, ModelExecutionEnvironmentCapability, ModelOutputValidationError, ModelProvider, ORGANIZATION_METADATA_KEY, OpenAICompatibleReranker, PERMISSION_OPERATION_METADATA_KEY, PLUGIN_CONFIG_RESOLVER_TOKEN, PLUGIN_JOB_PROCESSOR_METADATA, PLUGIN_METADATA, PLUGIN_METADATA_KEY, PLUGIN_VERSION_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_SERVICE_TOKEN, PROJECT_TASK_PROVIDER, PROJECT_TYPE_PROVIDER, PROVIDE_AI_MODEL_LLM, PROVIDE_AI_MODEL_MODERATION, PROVIDE_AI_MODEL_RERANK, PROVIDE_AI_MODEL_SPEECH2TEXT, PROVIDE_AI_MODEL_TEXT_EMBEDDING, PROVIDE_AI_MODEL_TTS, PluginJobProcessor, PluginWebhookAuth, PluginWebhookAuthGuard, ProjectTaskProvider, ProjectTaskProviderRegistry, ProjectTasksRuntimeCapability, ProjectTypeProvider, ProjectTypeProviderRegistry, RESOURCE_CARD_EVENT, RESOURCE_CARD_PROVIDER, RETRIEVER_STRATEGY, RequestContext, RequestContextMiddleware, RequirePermissionOperation, RerankModel, ResourceCardProvider, ResourceCardProviderRegistry, RetrieverRegistry, RetrieverStrategy, SANDBOX_PROVIDER, SANDBOX_RUNTIME_PROVIDER, SANDBOX_SHELL_TIMEOUT_LIMITS_SEC, SANDBOX_WORKSPACE_MAPPER, SKILL_SOURCE_PROVIDER, SPEECH_TO_TEXT_PERMISSION_SERVICE_TOKEN, SPEECH_TO_TEXT_SERVICE_TOKEN, SSOProviderRegistry, SSOProviderStrategyKey, SSO_BINDING_PERMISSION_SERVICE_TOKEN, SSO_PROVIDER, STRATEGY_META_KEY, SYSTEM_GLOBAL_SCOPE, SandboxProviderRegistry, SandboxProviderStrategy, SandboxRuntimeProviderRegistry, SandboxRuntimeProviderStrategy, SandboxWorkspaceMapperRegistry, SandboxWorkspaceMapperStrategy, ShellModelExecutionSourceCapability, SkillSourceProviderRegistry, SkillSourceProviderStrategy, Speech2TextChatModel, SpeechToTextModel, StrategyBus, TENANT_GLOBAL_SCOPE_PREFIX, TENANT_GLOBAL_SCOPE_SUFFIX, TEXT_SPLITTER_STRATEGY, TOOLSET_STRATEGY, TextEmbeddingModelManager, TextSplitterRegistry, TextSplitterStrategy, TextToSpeechModel, ToolsetRegistry, ToolsetStrategy, USER_PERMISSION_SERVICE_TOKEN, VECTOR_STORE_STRATEGY, VIDEO_GENERATION_PERMISSION_SERVICE_TOKEN, VIDEO_GENERATION_SERVICE_TOKEN, VIDEO_GENERATOR_FAMILIES, VIEW_EXTENSION_CACHE_SERVICE_TOKEN, VIEW_EXTENSION_PROVIDER, VectorStoreRegistry, VectorStoreStrategy, VideoGenerationModel, ViewExtensionProvider, ViewExtensionProviderRegistry, WORKFLOW_NODE_STRATEGY, WORKFLOW_TRIGGER_STRATEGY, WorkflowNodeRegistry, WorkflowNodeStrategy, WorkflowTriggerRegistry, WorkflowTriggerStrategy, WorkspaceFilesRuntimeCapability, WrapWorkflowNodeExecutionCommand, XPERT_AGENT_MIDDLEWARE_RUNTIME_TOKEN, XPERT_TOOL_METHOD_METADATA, XPERT_TOOL_PROVIDER, XPERT_TOOL_PROVIDER_METADATA, XPERT_TOOL_RESULT_FORMAT_VERSION, XpFileSystem, XpertPrompt, XpertResource, XpertResourceTemplate, XpertServerPlugin, XpertTool, XpertToolProvider, XpertToolProviderCoordinator, XpertToolProviderRegistry, agentInvocationDispatchContextSchema, agentRuntimeConsumptionStateSchema, agentRuntimeDeliveryStateSchema, agentRuntimeEventMessageId, agentRuntimeEventSchema, agentRuntimeReplyTargetSchema, agentRuntimeResultClaimSchema, agentRuntimeResultConsumptionKey, als, appendSandboxMessage, assertConnectorDefinition, buildSandboxTimeoutMessage, calcTokenUsage, calculateLLMUsagePrice, calculateModelPrice, calculateModelUsageCharge, chunkText, countTextTokens, countTokensSafe, createI18nInstance, createPluginLogger, createRuntimeCapability, defineAgentMessageType, defineChannelMessageType, defineMcpApp, defineMcpCapabilities, defineMcpPrompt, defineMcpResource, defineMcpResourceTemplate, defineXpertTool, derivePluginArtifactNamespace, describeXpertToolProvider, downloadRemoteFile, emitResourceCard, formatSandboxTimeout, getDefaultTenantId, getErrorMessage, getModelContextSize, getPermissionOperationMetadata, getPositionList, getPositionMap, getRequestContext, getRequiredPermissionOperation, getTenantGlobalScopeKey, getXpertToolMethod, isAgentInvocationTerminal, isDevelopmentSandboxRuntimeEnvironment, isModelOutputValidationError, isModelUsagePricingConfig, isRemoteFile, isSandboxBackend, isSandboxManagedServiceAdapter, isSandboxServiceProxyAdapter, isSandboxTerminalAdapter, isStrategyInstance, isStructuredMessageType, isTenantGlobalScopeKey, loadYamlFile, mergeCredentials, mergeModelRequirements, mergeParentChildChunks, nativeModelTransport, normalizeContextSize, normalizeTokenUsage, pluginArtifactTableName, prepareToolResult, processAsyncAIGCManagedJob, renderRemoteModuleIframeHtml, renderRemoteReactIframeHtml, renderRemoteVueIframeHtml, resolveModelUsagePricingSnapshot, resolveSandboxBackend, resolveSandboxExecutionOptions, resolveSandboxManagedServiceAdapter, resolveSandboxServiceProxyAdapter, resolveSandboxTerminalAdapter, resolveStrategyMetadataTarget, resolveTenantGlobalScopeKey, resolveTokenUsage, resolveTokenUsageCandidates, resolveXpertMcpExtensions, runWithRequestContext, runtimeToolProviderComponent, secondsToMilliseconds, setDefaultTenantId, sumTokenUsage, taskWaitReason, textTokenBoundaries };