@xpert-ai/plugin-sdk 3.19.0 → 3.20.0

package/index.cjs.js

@@ -3,10 +3,11 @@
 var common = require('@nestjs/common');
 var constants = require('@nestjs/common/constants');
 var lodashEs = require('lodash-es');
-var _extends = require('./_extends.cjs.js');
+var dispatch = require('@langchain/core/callbacks/dispatch');
+var contracts = require('@xpert-ai/contracts');
 var core = require('@nestjs/core');
 var rxjs = require('rxjs');
-var contracts = require('@xpert-ai/contracts');
+var _extends = require('./_extends.cjs.js');
 var node_async_hooks = require('node:async_hooks');
 var passportJwt = require('passport-jwt');
 var node_crypto = require('node:crypto');
@@ -34,10 +35,11 @@ var env = require('@langchain/core/utils/env');
 var modelProviderHttpClient = require('./model-provider-http-client.cjs.js');
 var jsTiktoken = require('js-tiktoken');
 var base$1 = require('@langchain/core/language_models/base');
+var v3 = require('zod/v3');
+var results = require('./results.cjs.js');
 var connector = require('./connector.cjs.js');
 var collaborationClient = require('./collaboration-client.cjs.js');
 var tools = require('@langchain/core/tools');
-var v3 = require('zod/v3');
 
 function _interopNamespaceDefault(e) {
     var n = Object.create(null);
@@ -123,6 +125,10 @@ function assertPluginArtifactNamePart(value, label) {
     }
 }
 
+/** Call after the business mutation commits. A display failure must not retry that mutation. */ async function emitResourceCard(card, config) {
+    await dispatch.dispatchCustomEvent(contracts.ChatMessageEventTypeEnum.ON_CHAT_EVENT, contracts.createResourceCardContent(card), config);
+}
+
 const ORGANIZATION_METADATA_KEY = 'xpert:organizationId';
 const PLUGIN_METADATA_KEY = 'xpert:pluginName';
 const PLUGIN_VERSION_METADATA_KEY = 'xpert:pluginVersion';
@@ -159,27 +165,13 @@ function resolveTenantGlobalScopeKey(tenantId) {
     return GLOBAL_ORGANIZATION_SCOPE;
 }
 
-function createPluginLogger(scope, baseMeta = {}) {
-    const nestLogger = new common.Logger(scope);
-    const wrap = (level, msg, meta)=>{
-        var // Maintain alignment with the Nest Logger interface
-        _nestLogger_level;
-        const payload = meta ? _extends._extends({}, baseMeta, meta) : baseMeta;
-        (_nestLogger_level = nestLogger[level]) == null ? void 0 : _nestLogger_level.call(nestLogger, msg + (Object.keys(payload).length ? ` ${JSON.stringify(payload)}` : ''));
-    };
-    return {
-        child (meta) {
-            return createPluginLogger(scope, _extends._extends({}, baseMeta, meta));
-        },
-        debug: (msg, meta)=>wrap('debug', msg, meta),
-        log: (msg, meta)=>wrap('log', msg, meta),
-        warn: (msg, meta)=>wrap('warn', msg, meta),
-        error: (msg, meta)=>wrap('error', msg, meta)
-    };
-}
-
-const INTEGRATION_STRATEGY = 'INTEGRATION_STRATEGY';
-const IntegrationStrategyKey = (provider)=>common.applyDecorators(common.SetMetadata(INTEGRATION_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, INTEGRATION_STRATEGY));
+const RESOURCE_CARD_PROVIDER = 'RESOURCE_CARD_PROVIDER';
+/** Register exact resource types whose message cards opt in to live refresh. */ const ResourceCardProvider = (...resources)=>{
+    if (!resources.length || resources.some(({ namespace, type })=>!(namespace == null ? void 0 : namespace.trim()) || !(type == null ? void 0 : type.trim()))) {
+        throw new Error('ResourceCardProvider requires explicit resource namespaces and types');
+    }
+    return common.applyDecorators(common.SetMetadata(RESOURCE_CARD_PROVIDER, resources), common.SetMetadata(STRATEGY_META_KEY, RESOURCE_CARD_PROVIDER));
+};
 
 function __decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -764,6 +756,102 @@ __decorate([
     return typeof constructor === 'function' ? constructor : null;
 }
 
+var ResourceCardProviderRegistry_1;
+const resourceTypeKey = ({ namespace, type })=>JSON.stringify([
+        namespace,
+        type
+    ]);
+function isProvider(value) {
+    return !!value && typeof value === 'object' && 'resolveMany' in value && typeof value.resolveMany === 'function';
+}
+exports.ResourceCardProviderRegistry = ResourceCardProviderRegistry_1 = class ResourceCardProviderRegistry extends BaseStrategyRegistry {
+    onModuleInit() {
+        this.subscription = this.bus.events$.pipe(rxjs.filter((event)=>!event.strategyType || event.strategyType === RESOURCE_CARD_PROVIDER)).subscribe((event)=>{
+            try {
+                if (event.type === 'UPSERT') this.upsert(event.entry.instance);
+                else this.remove(event.orgId, event.pluginName);
+            } catch (e) {
+                // Reject the conflicting provider without terminating the lifecycle subscription.
+                this.resourceLogger.warn('Rejected invalid or conflicting resource card provider registration');
+            }
+        });
+        for (const { instance } of this.discoveryService.getProviders())if (instance) this.upsert(instance);
+    }
+    onModuleDestroy() {
+        var _this_subscription;
+        (_this_subscription = this.subscription) == null ? void 0 : _this_subscription.unsubscribe();
+    }
+    remove(scopeKey, pluginName) {
+        for (const entry of this.listAllRegistrations()){
+            if (entry.source.kind === 'plugin' && entry.source.pluginName === pluginName && entry.source.scopeKey === scopeKey) {
+                this.unregister(entry.type, entry.source, entry.strategy);
+            }
+        }
+    }
+    upsert(instance) {
+        const target = resolveStrategyMetadataTarget(instance);
+        const resources = target && this.reflector.get(RESOURCE_CARD_PROVIDER, target);
+        if (!resources) return;
+        if (!isProvider(instance)) throw new Error('ResourceCardProvider must implement resolveMany');
+        const source = this.getSource(instance);
+        const keys = resources.map(resourceTypeKey);
+        // A route belongs to one plugin across scopes; a different plugin cannot shadow it.
+        // Preflight the whole batch so a conflicting multi-type provider is never partly installed.
+        for (const key of keys){
+            for (const existing of this.listAllRegistrations().filter((entry)=>entry.type === key)){
+                const samePlugin = source.kind === 'plugin' && existing.source.kind === 'plugin' && source.pluginName === existing.source.pluginName;
+                if (existing.strategy !== instance && !samePlugin) {
+                    throw new Error(`Resource card type ${key} is already registered`);
+                }
+            }
+            this.assertCanRegister(key, instance, source);
+        }
+        for (const key of keys)this.register(key, instance, source);
+    }
+    find(resource, organizationId) {
+        const key = resourceTypeKey(resource);
+        for (const scopeKey of this.resolveStrategyScopeKeys(organizationId)){
+            var _this_strategies_get;
+            const provider = (_this_strategies_get = this.strategies.get(scopeKey)) == null ? void 0 : _this_strategies_get.get(key);
+            if (provider) return provider;
+        }
+        return undefined;
+    }
+    constructor(discovery, reflector){
+        super(RESOURCE_CARD_PROVIDER, discovery, reflector);
+        this.resourceLogger = new common.Logger(ResourceCardProviderRegistry_1.name);
+    }
+};
+exports.ResourceCardProviderRegistry = ResourceCardProviderRegistry_1 = __decorate([
+    common.Injectable(),
+    __metadata("design:paramtypes", [
+        core.DiscoveryService,
+        core.Reflector
+    ])
+], exports.ResourceCardProviderRegistry);
+
+function createPluginLogger(scope, baseMeta = {}) {
+    const nestLogger = new common.Logger(scope);
+    const wrap = (level, msg, meta)=>{
+        var // Maintain alignment with the Nest Logger interface
+        _nestLogger_level;
+        const payload = meta ? _extends._extends({}, baseMeta, meta) : baseMeta;
+        (_nestLogger_level = nestLogger[level]) == null ? void 0 : _nestLogger_level.call(nestLogger, msg + (Object.keys(payload).length ? ` ${JSON.stringify(payload)}` : ''));
+    };
+    return {
+        child (meta) {
+            return createPluginLogger(scope, _extends._extends({}, baseMeta, meta));
+        },
+        debug: (msg, meta)=>wrap('debug', msg, meta),
+        log: (msg, meta)=>wrap('log', msg, meta),
+        warn: (msg, meta)=>wrap('warn', msg, meta),
+        error: (msg, meta)=>wrap('error', msg, meta)
+    };
+}
+
+const INTEGRATION_STRATEGY = 'INTEGRATION_STRATEGY';
+const IntegrationStrategyKey = (provider)=>common.applyDecorators(common.SetMetadata(INTEGRATION_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, INTEGRATION_STRATEGY));
+
 exports.IntegrationStrategyRegistry = class IntegrationStrategyRegistry extends BaseStrategyRegistry {
     constructor(discoveryService, reflector){
         super(INTEGRATION_STRATEGY, discoveryService, reflector);
@@ -2616,6 +2704,9 @@ function normalizeCurrency(currency) {
 
 var AIModel_1;
 exports.AIModel = AIModel_1 = class AIModel {
+    getRealtimeModel(_copilotModel) {
+        throw new Error('Unsupported realtime model');
+    }
     getChatModel(copilotModel, options) {
         throw new Error(`Unsupport chat model!`);
     }
@@ -2859,6 +2950,75 @@ function _class_private_field_loose_key(name) {
     return "__private_" + id++ + "_" + name;
 }
 
+function resolveTokenUsageCandidates(input) {
+    const candidates = [
+        {
+            value: input.canonical,
+            source: 'provider'
+        },
+        {
+            value: input.actual,
+            source: 'provider'
+        },
+        {
+            value: input.estimated,
+            source: 'estimated'
+        },
+        {
+            value: {
+                totalTokens: input.legacyTotal
+            },
+            source: 'legacy'
+        }
+    ];
+    for (const candidate of candidates){
+        const usage = normalizeTokenUsage(candidate.value);
+        if (usage) return {
+            usage,
+            source: candidate.source
+        };
+    }
+    return {
+        usage: {
+            promptTokens: 0,
+            completionTokens: 0,
+            totalTokens: 0
+        },
+        source: 'unavailable'
+    };
+}
+function normalizeTokenUsage(candidate) {
+    if (!candidate) return null;
+    const counts = [
+        candidate.promptTokens,
+        candidate.completionTokens,
+        candidate.totalTokens,
+        candidate.cacheReadInputTokens,
+        candidate.cacheWriteInputTokens,
+        candidate.reasoningTokens
+    ];
+    if (counts.some((count)=>count !== undefined && (!Number.isSafeInteger(count) || count < 0))) return null;
+    var _candidate_promptTokens;
+    const promptTokens = (_candidate_promptTokens = candidate.promptTokens) != null ? _candidate_promptTokens : 0;
+    var _candidate_completionTokens;
+    const completionTokens = (_candidate_completionTokens = candidate.completionTokens) != null ? _candidate_completionTokens : 0;
+    const totalTokens = candidate.totalTokens || promptTokens + completionTokens;
+    if (!Number.isSafeInteger(totalTokens) || totalTokens <= 0 || totalTokens < promptTokens + completionTokens) return null;
+    var _candidate_cacheReadInputTokens, _candidate_cacheWriteInputTokens, _candidate_reasoningTokens;
+    if (((_candidate_cacheReadInputTokens = candidate.cacheReadInputTokens) != null ? _candidate_cacheReadInputTokens : 0) + ((_candidate_cacheWriteInputTokens = candidate.cacheWriteInputTokens) != null ? _candidate_cacheWriteInputTokens : 0) > promptTokens || ((_candidate_reasoningTokens = candidate.reasoningTokens) != null ? _candidate_reasoningTokens : 0) > completionTokens) return null;
+    return _extends._extends({
+        promptTokens,
+        completionTokens,
+        totalTokens
+    }, candidate.cacheReadInputTokens ? {
+        cacheReadInputTokens: candidate.cacheReadInputTokens
+    } : {}, candidate.cacheWriteInputTokens ? {
+        cacheWriteInputTokens: candidate.cacheWriteInputTokens
+    } : {}, candidate.reasoningTokens ? {
+        reasoningTokens: candidate.reasoningTokens
+    } : {});
+}
+
 var _a;
 class LLMUsage {
     static emptyUsage() {
@@ -2904,6 +3064,18 @@ class LargeLanguageModel extends exports.AIModel {
     _commonParameterRules(model) {
         return CommonParameterRules;
     }
+    /** Price already normalized provider facts without starting another inference or writing a ledger. */ priceActualTokenUsage(model, tokenUsage, context = {}) {
+        var _this_getModelSchema;
+        const usage = normalizeTokenUsage(tokenUsage);
+        if (!usage) throw new Error('Actual token usage is required');
+        const priced = this.calcResponseUsage(model, {}, usage.promptTokens, usage.completionTokens, performance.now(), usage, _extends._extends({}, context, {
+            inputTokensIncludeCache: true
+        }));
+        return _extends._extends({}, priced, usage, !((_this_getModelSchema = this.getModelSchema(model, {})) == null ? void 0 : _this_getModelSchema.pricing) ? {
+            pricingStatus: 'unpriced',
+            totalPrice: undefined
+        } : {});
+    }
     calcResponseUsage(model, credentials, promptTokens, completionTokens, startedAt = this.startedAt, tokenUsage, pricingContext = {}) {
         var _this_getModelSchema;
         const resolvedTokenUsage = tokenUsage != null ? tokenUsage : {
@@ -3051,12 +3223,15 @@ class LargeLanguageModel extends exports.AIModel {
             callback
         ];
     }
-    createHandleLLMErrorCallbacks(fields, logger) {
+    createHandleLLMErrorCallbacks(_fields, logger) {
         return {
-            handleLLMError: (err)=>{
-                var _err_cause;
-                var _err_cause_stack;
-                (logger != null ? logger : _class_private_field_loose_base(this, _logger)[_logger]).error(err, (_err_cause_stack = (_err_cause = err.cause) == null ? void 0 : _err_cause.stack) != null ? _err_cause_stack : err.stack, `Error attemptNumber: ${err.attemptNumber}, retriesLeft: ${err.retriesLeft}, ChatDeepSeek params are:\n${JSON.stringify(fields, null, 2)}`);
+            handleLLMError: (error)=>{
+                // Provider errors and constructor fields can contain credentials or request bodies.
+                const errorType = error instanceof Error && /^[A-Za-z]{1,60}$/.test(error.name) ? error.name : 'Error';
+                (logger != null ? logger : _class_private_field_loose_base(this, _logger)[_logger]).error({
+                    event: 'model_provider_request_failed',
+                    errorType
+                });
             }
         };
     }
@@ -3266,97 +3441,59 @@ function isAbortError(error) {
     return error.name === 'AbortError' || /\babort(?:ed)?\b/i.test(error.message);
 }
 function calcTokenUsage(output) {
-    var _output_generations;
-    const tokenUsage = {
+    const result = {
         promptTokens: 0,
         completionTokens: 0,
         totalTokens: 0
     };
-    let cacheReadInputTokens = 0;
-    let cacheWriteInputTokens = 0;
-    (_output_generations = output.generations) == null ? void 0 : _output_generations.forEach((generation)=>{
-        generation.forEach((item)=>{
-            const message = item.message;
-            if (message.usage_metadata) {
-                var _message_usage_metadata_input_token_details, _message_usage_metadata_input_token_details1;
-                tokenUsage.promptTokens += message.usage_metadata.input_tokens;
-                tokenUsage.completionTokens += message.usage_metadata.output_tokens;
-                tokenUsage.totalTokens += message.usage_metadata.total_tokens;
-                var _message_usage_metadata_input_token_details_cache_read;
-                cacheReadInputTokens += (_message_usage_metadata_input_token_details_cache_read = (_message_usage_metadata_input_token_details = message.usage_metadata.input_token_details) == null ? void 0 : _message_usage_metadata_input_token_details.cache_read) != null ? _message_usage_metadata_input_token_details_cache_read : 0;
-                var _message_usage_metadata_input_token_details_cache_creation;
-                cacheWriteInputTokens += (_message_usage_metadata_input_token_details_cache_creation = (_message_usage_metadata_input_token_details1 = message.usage_metadata.input_token_details) == null ? void 0 : _message_usage_metadata_input_token_details1.cache_creation) != null ? _message_usage_metadata_input_token_details_cache_creation : 0;
-            }
-        });
-    });
-    if (cacheReadInputTokens > 0) tokenUsage.cacheReadInputTokens = cacheReadInputTokens;
-    if (cacheWriteInputTokens > 0) tokenUsage.cacheWriteInputTokens = cacheWriteInputTokens;
-    return tokenUsage;
+    var _output_generations;
+    for (const choices of (_output_generations = output.generations) != null ? _output_generations : []){
+        // Each inner array contains choices from one request, not independent provider attempts.
+        const usage = choices.map((choice)=>{
+            var _metadata_input_token_details, _metadata_input_token_details1, _metadata_output_token_details;
+            if (!('message' in choice) || !messages.isBaseMessage(choice.message) || !messages.isAIMessage(choice.message)) return null;
+            const metadata = choice.message.usage_metadata;
+            return metadata ? normalizeTokenUsage({
+                promptTokens: metadata.input_tokens,
+                completionTokens: metadata.output_tokens,
+                totalTokens: metadata.total_tokens,
+                cacheReadInputTokens: (_metadata_input_token_details = metadata.input_token_details) == null ? void 0 : _metadata_input_token_details.cache_read,
+                cacheWriteInputTokens: (_metadata_input_token_details1 = metadata.input_token_details) == null ? void 0 : _metadata_input_token_details1.cache_creation,
+                reasoningTokens: (_metadata_output_token_details = metadata.output_token_details) == null ? void 0 : _metadata_output_token_details.reasoning
+            }) : null;
+        }).find((candidate)=>candidate !== null);
+        if (!usage) continue;
+        result.promptTokens += usage.promptTokens;
+        result.completionTokens += usage.completionTokens;
+        result.totalTokens += usage.totalTokens;
+        for (const key of [
+            'cacheReadInputTokens',
+            'cacheWriteInputTokens',
+            'reasoningTokens'
+        ]){
+            var _result_key;
+            if (usage[key] !== undefined) result[key] = ((_result_key = result[key]) != null ? _result_key : 0) + usage[key];
+        }
+    }
+    return result;
 }
 function resolveTokenUsage(output) {
     return resolveTokenUsageWithAuthority(output).usage;
 }
 function resolveTokenUsageWithAuthority(output) {
     var _output_llmOutput, _output_llmOutput1, _output_llmOutput2;
-    var _normalizeTokenUsage, _ref;
-    const actualUsage = (_ref = (_normalizeTokenUsage = normalizeTokenUsage(calcTokenUsage(output))) != null ? _normalizeTokenUsage : normalizeTokenUsage((_output_llmOutput = output.llmOutput) == null ? void 0 : _output_llmOutput['tokenUsage'])) != null ? _ref : normalizeTokenUsage({
-        totalTokens: (_output_llmOutput1 = output.llmOutput) == null ? void 0 : _output_llmOutput1['totalTokens']
+    const resolved = resolveTokenUsageCandidates({
+        canonical: calcTokenUsage(output),
+        actual: (_output_llmOutput = output.llmOutput) == null ? void 0 : _output_llmOutput['tokenUsage'],
+        estimated: (_output_llmOutput1 = output.llmOutput) == null ? void 0 : _output_llmOutput1['estimatedTokenUsage'],
+        legacyTotal: (_output_llmOutput2 = output.llmOutput) == null ? void 0 : _output_llmOutput2['totalTokens']
     });
-    if (actualUsage) {
-        return {
-            usage: actualUsage
-        };
-    }
-    const estimatedUsage = normalizeTokenUsage((_output_llmOutput2 = output.llmOutput) == null ? void 0 : _output_llmOutput2['estimatedTokenUsage']);
-    if (estimatedUsage) {
-        return {
-            usage: estimatedUsage,
-            type: 'estimated'
-        };
-    }
-    return {
-        usage: {
-            promptTokens: 0,
-            completionTokens: 0,
-            totalTokens: 0
-        }
-    };
-}
-function normalizeTokenUsage(candidate) {
-    if (!candidate) {
-        return null;
-    }
-    if (!isValidTokenCount(candidate.promptTokens) || !isValidTokenCount(candidate.completionTokens) || !isValidTokenCount(candidate.totalTokens)) {
-        return null;
-    }
-    var _candidate_promptTokens;
-    const promptTokens = (_candidate_promptTokens = candidate.promptTokens) != null ? _candidate_promptTokens : 0;
-    var _candidate_completionTokens;
-    const completionTokens = (_candidate_completionTokens = candidate.completionTokens) != null ? _candidate_completionTokens : 0;
-    const totalTokens = candidate.totalTokens || promptTokens + completionTokens;
-    if (promptTokens === 0 && completionTokens === 0 && totalTokens === 0) {
-        return null;
-    }
-    var _candidate_cacheReadInputTokens;
-    const cacheReadInputTokens = (_candidate_cacheReadInputTokens = candidate.cacheReadInputTokens) != null ? _candidate_cacheReadInputTokens : 0;
-    var _candidate_cacheWriteInputTokens;
-    const cacheWriteInputTokens = (_candidate_cacheWriteInputTokens = candidate.cacheWriteInputTokens) != null ? _candidate_cacheWriteInputTokens : 0;
-    if (!isValidTokenCount(cacheReadInputTokens) || !isValidTokenCount(cacheWriteInputTokens)) {
-        return null;
-    }
     return _extends._extends({
-        promptTokens,
-        completionTokens,
-        totalTokens
-    }, cacheReadInputTokens > 0 ? {
-        cacheReadInputTokens
-    } : {}, cacheWriteInputTokens > 0 ? {
-        cacheWriteInputTokens
+        usage: resolved.usage
+    }, resolved.source === 'estimated' ? {
+        type: 'estimated'
     } : {});
 }
-function isValidTokenCount(value) {
-    return value === undefined || Number.isFinite(value) && value >= 0;
-}
 function normalizeCacheTokenAccounting(tokenUsage, context) {
     if (context.inputTokensIncludeCache !== false) return tokenUsage;
     var _tokenUsage_cacheReadInputTokens, _tokenUsage_cacheWriteInputTokens;
@@ -3807,6 +3944,37 @@ Reflect.defineMetadata(COMMAND_METADATA$1, {
     id: CreateModelClientCommand.type
 }, CreateModelClientCommand);
 
+/** A single fetch is one billable attempt. No SDK retries or redirects to another credential origin. */ function nativeModelTransport(input) {
+    const base = new URL(input.baseUrl);
+    if (![
+        'http:',
+        'https:'
+    ].includes(base.protocol) || base.username || base.password || base.search || base.hash) throw new Error('Invalid native model endpoint');
+    const suffix = input.protocol === 'openai_responses' ? '/responses' : '/v1/messages';
+    const url = `${base.href.replace(/\/$/, '')}${suffix}`;
+    return (body, forwarded, signal)=>{
+        const headers = new Headers({
+            'content-type': 'application/json'
+        });
+        if (input.protocol === 'anthropic_messages') {
+            headers.set('anthropic-version', '2023-06-01');
+            for (const [name, value] of Object.entries(forwarded)){
+                // Native Anthropic feature/version headers must survive protocol evolution.
+                if (/^anthropic-[a-z0-9-]+$/.test(name)) headers.set(name, value);
+            }
+            headers.set('x-api-key', input.authorization);
+        } else headers.set('authorization', input.authorization);
+        var _input_fetch;
+        return ((_input_fetch = input.fetch) != null ? _input_fetch : fetch)(url, {
+            method: 'POST',
+            headers,
+            body: JSON.stringify(body),
+            signal,
+            redirect: 'error'
+        });
+    };
+}
+
 const SKILL_SOURCE_PROVIDER = 'SKILL_SOURCE_PROVIDER';
 const SkillSourceProviderStrategy = (provider)=>common.applyDecorators(common.SetMetadata(SKILL_SOURCE_PROVIDER, provider), common.SetMetadata(STRATEGY_META_KEY, SKILL_SOURCE_PROVIDER));
 
@@ -3881,6 +4049,18 @@ function isModelOutputValidationError(error) {
     return candidate.code === MODEL_OUTPUT_VALIDATION_ERROR_CODE && candidate.retryable === true && ((_candidate_repairContext = candidate.repairContext) == null ? void 0 : _candidate_repairContext.kind) === 'invalid_tool_calls' && Array.isArray(candidate.repairContext.issues);
 }
 
+/** Combine middleware contributions without mutating or weakening existing requirements. */ function mergeModelRequirements(...requirements) {
+    const features = [
+        ...new Set(requirements.flatMap((item)=>{
+            var _item_features;
+            return (_item_features = item == null ? void 0 : item.features) != null ? _item_features : [];
+        }))
+    ];
+    return features.length ? {
+        features
+    } : undefined;
+}
+
 const SEGMENT_PATTERN = /^[a-z][a-z0-9_-]*$/i;
 const VERSION_PATTERN = /^v[1-9][0-9]*$/;
 function assertSegment(input, name) {
@@ -3926,6 +4106,96 @@ function assertSegment(input, name) {
 const AGENT_CHAT_DISPATCH_MESSAGE_TYPE = defineAgentMessageType('chat_dispatch', 1);
 const AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING = 'steer_target_not_running';
 
+/** Captured by an authorized host command. Describing a recipient never authorizes delivery. */ const replyConversation = {
+    conversationId: v3.z.string().uuid(),
+    threadId: v3.z.string().trim().min(1).max(256)
+};
+const agentRuntimeReplyTargetSchema = v3.z.discriminatedUnion('type', [
+    v3.z.object(_extends._extends({}, replyConversation, {
+        type: v3.z.literal('xpert').optional(),
+        xpertId: v3.z.string().uuid(),
+        agentKey: v3.z.string().trim().min(1).max(256)
+    })).strict(),
+    v3.z.object(_extends._extends({}, replyConversation, {
+        type: v3.z.literal('project_agent'),
+        projectId: v3.z.string().uuid(),
+        agentKey: v3.z.literal('general_agent')
+    })).strict()
+]);
+/** Persist with the immutable invocation request before launch. No credentials or arbitrary routing headers. */ const agentInvocationDispatchContextSchema = v3.z.object({
+    version: v3.z.literal(1),
+    requestId: v3.z.string().uuid(),
+    sourceMessageId: v3.z.string().trim().min(1).max(256),
+    replyTo: agentRuntimeReplyTargetSchema,
+    projectTask: contracts.projectTaskExecutionContextSchema.optional()
+}).strict();
+
+const AGENT_RUNTIME_EVENT_MESSAGE_TYPE = defineAgentMessageType('runtime_event', 1);
+const reference = {
+    version: v3.z.literal(1),
+    invocationId: v3.z.string().uuid(),
+    /** Revision of the persisted observation, never a queue delivery attempt. */ revision: v3.z.number().int().nonnegative(),
+    projectTask: contracts.projectTaskExecutionReferenceSchema.optional()
+};
+/** Host-produced references. Consumers reload and authorize the invocation and its pinned observation. */ const agentRuntimeEventSchema = v3.z.discriminatedUnion('kind', [
+    v3.z.object(_extends._extends({}, reference, {
+        kind: v3.z.literal('progress'),
+        progress: contracts.agentRuntimeProgressSchema
+    })).strict(),
+    v3.z.object(_extends._extends({}, reference, {
+        kind: v3.z.literal('result'),
+        status: contracts.agentInvocationTerminalStatusSchema
+    })).strict(),
+    v3.z.object(_extends._extends({}, reference, {
+        kind: v3.z.literal('input_request'),
+        interactionId: v3.z.string().trim().min(1).max(256)
+    })).strict()
+]);
+/** Same observation always has the same HandoffMessage.id across retries and process restarts. */ function agentRuntimeEventMessageId(event) {
+    return `runtime-${event.invocationId}-${event.kind}-${event.revision}`;
+}
+/** Transport states are deliberately separate from Task and Invocation status. */ const agentRuntimeDeliveryStateSchema = v3.z.enum([
+    'pending',
+    'received',
+    'blocked',
+    'failed'
+]);
+const agentRuntimeConsumptionStateSchema = v3.z.enum([
+    'pending',
+    'processing',
+    'processed',
+    'blocked',
+    'failed'
+]);
+/** Store under a unique scoped key in the same transaction as the continuation reservation. */ const agentRuntimeResultClaimSchema = v3.z.object({
+    invocationId: v3.z.string().uuid(),
+    resultRevision: v3.z.number().int().nonnegative(),
+    recipient: agentRuntimeReplyTargetSchema,
+    consumer: v3.z.discriminatedUnion('type', [
+        v3.z.object({
+            type: v3.z.literal('follow_up'),
+            executionId: v3.z.string().uuid()
+        }).strict(),
+        v3.z.object({
+            type: v3.z.literal('wait'),
+            executionId: v3.z.string().uuid(),
+            callId: v3.z.string().trim().min(1).max(1024)
+        }).strict()
+    ])
+}).strict();
+/**
+ * Wait and asynchronous reply compete for this same key, regardless of delivery revision.
+ * The storage key must additionally include tenant, organization and owner from trusted scope.
+ */ function agentRuntimeResultConsumptionKey(invocationId, recipient) {
+    return JSON.stringify([
+        invocationId,
+        recipient.conversationId,
+        recipient.threadId,
+        recipient.type === 'project_agent' ? `project:${recipient.projectId}` : recipient.xpertId,
+        recipient.agentKey
+    ]);
+}
+
 /**
  * Handoff Processor meta key。
  */ const HANDOFF_PROCESSOR_STRATEGY = 'HANDOFF_PROCESSOR_STRATEGY';
@@ -4001,6 +4271,30 @@ exports.AgentRuntimeRegistry = __decorate([
 });
 /** Platform factory capability. The wire key is stable across SDK naming changes. */ const AgentRuntimeFactoryCapability = modelProvider.createRuntimeCapability('platform.agent_invocation.factory');
 
+/**
+ * Keeps shared OS model authorization independent of Pro Computer/Docker lifecycle details.
+ * Grant issuance, authentication, revalidation and renewal delegate environment checks to this host adapter.
+ * Implementations validate ownership and instance identity so a replaced runtime cannot keep its old grant.
+ * Execution validity is independent of desktop viewing sessions; managed runners may also require an operation lease.
+ * Other environments can supply their own checks without changing the grant service.
+ * This capability validates the bound environment; model selection and usage accounting remain separate concerns.
+ */ const ModelExecutionEnvironmentCapability = modelProvider.createRuntimeCapability('platform.model_execution.environment');
+
+/** Configuration adapters describe secrets by reference; only the host materializes credentials. */ const CLI_MODEL_TOKEN_REFERENCE = '${XPERT_EXECUTION_TOKEN}';
+const CliModelProfilesCapability = modelProvider.createRuntimeCapability('platform.cli_model_profiles');
+/** Additional execution sources can validate lifecycle without making OS depend on Pro entities. */ const ShellModelExecutionSourceCapability = modelProvider.createRuntimeCapability('platform.model_execution.shell_source');
+
+function taskWaitReason(states, mode) {
+    if (states.length && (mode === 'all' ? states.every((state)=>state === 'completed') : states.includes('completed'))) return 'completed';
+    if (states.includes('attention')) return 'attention';
+    return undefined;
+}
+
+const AgentExecutionRunnerCapability = modelProvider.createRuntimeCapability('platform.agent_execution.runner');
+const AgentExecutionRunnerFactoryCapability = modelProvider.createRuntimeCapability('platform.agent_execution.runner.factory');
+
+/** Older runtime plugins can still send this event; new emissions use ON_CHAT_EVENT. */ const RESOURCE_CARD_EVENT = 'xpert.resource_card';
+
 const ASSISTANT_CAPABILITY_PROVIDER = 'ASSISTANT_CAPABILITY_PROVIDER';
 const AssistantCapabilityProvider = (key)=>common.applyDecorators(common.SetMetadata(ASSISTANT_CAPABILITY_PROVIDER, key), common.SetMetadata(STRATEGY_META_KEY, ASSISTANT_CAPABILITY_PROVIDER));
 exports.AssistantCapabilityProviderRegistry = class AssistantCapabilityProviderRegistry extends BaseStrategyRegistry {
@@ -4313,7 +4607,9 @@ function resolveSandboxExecutionOptions(options, defaults = DEFAULT_SANDBOX_SHEL
     return _extends._extends({
         timeoutMs,
         maxOutputBytes
-    }, (options == null ? void 0 : options.signal) ? {
+    }, (options == null ? void 0 : options.executionScope) ? {
+        executionScope: options.executionScope
+    } : {}, (options == null ? void 0 : options.signal) ? {
         signal: options.signal
     } : {});
 }
@@ -5454,6 +5750,7 @@ exports.ViewExtensionProviderRegistry = __decorate([
 
 const XPERT_REMOTE_UI_CSS = `
 :root {
+  font-size: var(--xui-density-root-font-size, 16px);
   color-scheme: light;
   --xui-font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
   --xui-color-background: #fff;
@@ -5488,6 +5785,7 @@ const XPERT_REMOTE_UI_CSS = `
   --xui-radius-sm: 6px;
   --xui-radius-md: 8px;
   --xui-radius-lg: 10px;
+  --xui-font-size: 14px;
   --xui-font-size-xs: 0.75rem;
   --xui-font-size-sm: 0.8125rem;
   --xui-font-size-md: 0.875rem;
@@ -5775,6 +6073,7 @@ const XPERT_REMOTE_UI_BOOTSTRAP = `
   var VERSION = 1
   var TOKEN_MAP = {
     fontFamily: '--xui-font-family',
+    densityRootFontSize: '--xui-density-root-font-size',
     colorBackground: '--xui-color-background',
     colorForeground: '--xui-color-foreground',
     colorCard: '--xui-color-card',
@@ -5807,6 +6106,7 @@ const XPERT_REMOTE_UI_BOOTSTRAP = `
     radiusSm: '--xui-radius-sm',
     radiusMd: '--xui-radius-md',
     radiusLg: '--xui-radius-lg',
+    fontSize: '--xui-font-size',
     fontSizeXs: '--xui-font-size-xs',
     fontSizeSm: '--xui-font-size-sm',
     fontSizeMd: '--xui-font-size-md',
@@ -9828,6 +10128,26 @@ Object.defineProperty(exports, "ASSISTANT_CONTEXT_SET_COMMAND", {
     enumerable: true,
     get: function () { return contracts.ASSISTANT_CONTEXT_SET_COMMAND; }
 });
+Object.defineProperty(exports, "agentOutputDeliverySchema", {
+    enumerable: true,
+    get: function () { return contracts.agentOutputDeliverySchema; }
+});
+Object.defineProperty(exports, "agentResultPathSchema", {
+    enumerable: true,
+    get: function () { return contracts.agentResultPathSchema; }
+});
+Object.defineProperty(exports, "createResourceCardContent", {
+    enumerable: true,
+    get: function () { return contracts.createResourceCardContent; }
+});
+Object.defineProperty(exports, "parseResourceCard", {
+    enumerable: true,
+    get: function () { return contracts.parseResourceCard; }
+});
+Object.defineProperty(exports, "resourceCardId", {
+    enumerable: true,
+    get: function () { return contracts.resourceCardId; }
+});
 exports.ActorTokenRuntimeCapability = modelProvider.ActorTokenRuntimeCapability;
 exports.ActorTokenRuntimeFactoryCapability = modelProvider.ActorTokenRuntimeFactoryCapability;
 exports.ArtifactsRuntimeCapability = modelProvider.ArtifactsRuntimeCapability;
@@ -9851,6 +10171,7 @@ exports.SANDBOX_JOB_ERROR_CODES = modelProvider.SANDBOX_JOB_ERROR_CODES;
 exports.SANDBOX_JOB_PROGRESS_PREFIX = modelProvider.SANDBOX_JOB_PROGRESS_PREFIX;
 exports.SandboxJobRuntimeError = modelProvider.SandboxJobRuntimeError;
 exports.SandboxJobsRuntimeCapability = modelProvider.SandboxJobsRuntimeCapability;
+exports.ToolImagesRuntimeCapability = modelProvider.ToolImagesRuntimeCapability;
 exports.WORKSPACE_FILES_SOURCE = modelProvider.WORKSPACE_FILES_SOURCE;
 exports.WorkspaceFilesRuntimeCapability = modelProvider.WorkspaceFilesRuntimeCapability;
 exports.XPERT_RUNTIME_CAPABILITIES_TOKEN = modelProvider.XPERT_RUNTIME_CAPABILITIES_TOKEN;
@@ -9863,6 +10184,9 @@ exports.requireReadStatement = dataWorkbench.requireReadStatement;
 exports.splitWorkbenchSql = dataWorkbench.splitWorkbenchSql;
 exports.ModelProviderHttpClient = modelProviderHttpClient.ModelProviderHttpClient;
 exports.ModelProviderHttpError = modelProviderHttpClient.ModelProviderHttpError;
+exports.AGENT_TASK_RESULTS_FEATURE = results.AGENT_TASK_RESULTS_FEATURE;
+exports.agentResultItemSchema = results.agentResultItemSchema;
+exports.agentTaskResultSchema = results.agentTaskResultSchema;
 exports.CONNECTOR_AUTHORIZATION_MODES = connector.CONNECTOR_AUTHORIZATION_MODES;
 exports.CONNECTOR_SCOPE_TYPES = connector.CONNECTOR_SCOPE_TYPES;
 exports.assertConnectorDefinition = connector.assertConnectorDefinition;
@@ -9878,12 +10202,15 @@ exports.ACCOUNT_BINDING_PERMISSION_SERVICE_TOKEN = ACCOUNT_BINDING_PERMISSION_SE
 exports.AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING = AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING;
 exports.AGENT_CHAT_DISPATCH_MESSAGE_TYPE = AGENT_CHAT_DISPATCH_MESSAGE_TYPE;
 exports.AGENT_MIDDLEWARE_STRATEGY = AGENT_MIDDLEWARE_STRATEGY;
+exports.AGENT_RUNTIME_EVENT_MESSAGE_TYPE = AGENT_RUNTIME_EVENT_MESSAGE_TYPE;
 exports.AGENT_RUNTIME_STRATEGY = AGENT_RUNTIME_STRATEGY;
 exports.AIModelProviderNotFoundException = AIModelProviderNotFoundException;
 exports.AIModelProviderStrategy = AIModelProviderStrategy;
 exports.AI_MODEL_PROVIDER = AI_MODEL_PROVIDER;
 exports.ASSISTANT_CAPABILITY_PROVIDER = ASSISTANT_CAPABILITY_PROVIDER;
 exports.AdapterDataSourceStrategy = AdapterDataSourceStrategy;
+exports.AgentExecutionRunnerCapability = AgentExecutionRunnerCapability;
+exports.AgentExecutionRunnerFactoryCapability = AgentExecutionRunnerFactoryCapability;
 exports.AgentInvocationRuntimeCapability = AgentInvocationRuntimeCapability;
 exports.AgentMiddlewareStrategy = AgentMiddlewareStrategy;
 exports.AgentRuntimeFactoryCapability = AgentRuntimeFactoryCapability;
@@ -9900,12 +10227,14 @@ exports.BaseSandbox = BaseSandbox;
 exports.BaseStrategyRegistry = BaseStrategyRegistry;
 exports.CHAT_CHANNEL = CHAT_CHANNEL;
 exports.CHAT_CHANNEL_TEXT_LIMITS = CHAT_CHANNEL_TEXT_LIMITS;
+exports.CLI_MODEL_TOKEN_REFERENCE = CLI_MODEL_TOKEN_REFERENCE;
 exports.COLLABORATION_DOCUMENT_PROVIDER = COLLABORATION_DOCUMENT_PROVIDER;
 exports.CONNECTION_COMMAND_ROUTER_TOKEN = CONNECTION_COMMAND_ROUTER_TOKEN;
 exports.CONNECTOR_STRATEGY = CONNECTOR_STRATEGY;
 exports.CancelConversationCommand = CancelConversationCommand;
 exports.ChatChannel = ChatChannel;
 exports.ChatOAICompatReasoningModel = ChatOAICompatReasoningModel;
+exports.CliModelProfilesCapability = CliModelProfilesCapability;
 exports.CollaborationDocumentProvider = CollaborationDocumentProvider;
 exports.CollaborationRuntimeCapability = CollaborationRuntimeCapability;
 exports.CommonParameterRules = CommonParameterRules;
@@ -9968,6 +10297,7 @@ exports.MANAGED_QUEUE_HANDLER_REGISTRY_TOKEN = MANAGED_QUEUE_HANDLER_REGISTRY_TO
 exports.MANAGED_QUEUE_SERVICE_TOKEN = MANAGED_QUEUE_SERVICE_TOKEN;
 exports.MCP_CAPABILITY_CHANGE_EVENT_TYPES = MCP_CAPABILITY_CHANGE_EVENT_TYPES;
 exports.MODEL_OUTPUT_VALIDATION_ERROR_CODE = MODEL_OUTPUT_VALIDATION_ERROR_CODE;
+exports.ModelExecutionEnvironmentCapability = ModelExecutionEnvironmentCapability;
 exports.ModelOutputValidationError = ModelOutputValidationError;
 exports.ORGANIZATION_METADATA_KEY = ORGANIZATION_METADATA_KEY;
 exports.OpenAICompatibleReranker = OpenAICompatibleReranker;
@@ -9992,10 +10322,13 @@ exports.PluginWebhookAuth = PluginWebhookAuth;
 exports.ProjectTaskProvider = ProjectTaskProvider;
 exports.ProjectTasksRuntimeCapability = ProjectTasksRuntimeCapability;
 exports.ProjectTypeProvider = ProjectTypeProvider;
+exports.RESOURCE_CARD_EVENT = RESOURCE_CARD_EVENT;
+exports.RESOURCE_CARD_PROVIDER = RESOURCE_CARD_PROVIDER;
 exports.RETRIEVER_STRATEGY = RETRIEVER_STRATEGY;
 exports.RequestContext = RequestContext;
 exports.RequirePermissionOperation = RequirePermissionOperation;
 exports.RerankModel = RerankModel;
+exports.ResourceCardProvider = ResourceCardProvider;
 exports.RetrieverStrategy = RetrieverStrategy;
 exports.SANDBOX_PROVIDER = SANDBOX_PROVIDER;
 exports.SANDBOX_RUNTIME_PROVIDER = SANDBOX_RUNTIME_PROVIDER;
@@ -10012,6 +10345,7 @@ exports.SYSTEM_GLOBAL_SCOPE = SYSTEM_GLOBAL_SCOPE;
 exports.SandboxProviderStrategy = SandboxProviderStrategy;
 exports.SandboxRuntimeProviderStrategy = SandboxRuntimeProviderStrategy;
 exports.SandboxWorkspaceMapperStrategy = SandboxWorkspaceMapperStrategy;
+exports.ShellModelExecutionSourceCapability = ShellModelExecutionSourceCapability;
 exports.SkillSourceProviderStrategy = SkillSourceProviderStrategy;
 exports.Speech2TextChatModel = Speech2TextChatModel;
 exports.SpeechToTextModel = SpeechToTextModel;
@@ -10050,6 +10384,14 @@ exports.XpertResourceTemplate = XpertResourceTemplate;
 exports.XpertServerPlugin = XpertServerPlugin;
 exports.XpertTool = XpertTool;
 exports.XpertToolProvider = XpertToolProvider;
+exports.agentInvocationDispatchContextSchema = agentInvocationDispatchContextSchema;
+exports.agentRuntimeConsumptionStateSchema = agentRuntimeConsumptionStateSchema;
+exports.agentRuntimeDeliveryStateSchema = agentRuntimeDeliveryStateSchema;
+exports.agentRuntimeEventMessageId = agentRuntimeEventMessageId;
+exports.agentRuntimeEventSchema = agentRuntimeEventSchema;
+exports.agentRuntimeReplyTargetSchema = agentRuntimeReplyTargetSchema;
+exports.agentRuntimeResultClaimSchema = agentRuntimeResultClaimSchema;
+exports.agentRuntimeResultConsumptionKey = agentRuntimeResultConsumptionKey;
 exports.als = als;
 exports.appendSandboxMessage = appendSandboxMessage;
 exports.buildSandboxTimeoutMessage = buildSandboxTimeoutMessage;
@@ -10073,6 +10415,7 @@ exports.defineXpertTool = defineXpertTool;
 exports.derivePluginArtifactNamespace = derivePluginArtifactNamespace;
 exports.describeXpertToolProvider = describeXpertToolProvider;
 exports.downloadRemoteFile = downloadRemoteFile;
+exports.emitResourceCard = emitResourceCard;
 exports.formatSandboxTimeout = formatSandboxTimeout;
 exports.getDefaultTenantId = getDefaultTenantId;
 exports.getErrorMessage = getErrorMessage;
@@ -10098,8 +10441,11 @@ exports.isStructuredMessageType = isStructuredMessageType;
 exports.isTenantGlobalScopeKey = isTenantGlobalScopeKey;
 exports.loadYamlFile = loadYamlFile;
 exports.mergeCredentials = mergeCredentials;
+exports.mergeModelRequirements = mergeModelRequirements;
 exports.mergeParentChildChunks = mergeParentChildChunks;
+exports.nativeModelTransport = nativeModelTransport;
 exports.normalizeContextSize = normalizeContextSize;
+exports.normalizeTokenUsage = normalizeTokenUsage;
 exports.pluginArtifactTableName = pluginArtifactTableName;
 exports.prepareToolResult = prepareToolResult;
 exports.processAsyncAIGCManagedJob = processAsyncAIGCManagedJob;
@@ -10115,10 +10461,12 @@ exports.resolveSandboxTerminalAdapter = resolveSandboxTerminalAdapter;
 exports.resolveStrategyMetadataTarget = resolveStrategyMetadataTarget;
 exports.resolveTenantGlobalScopeKey = resolveTenantGlobalScopeKey;
 exports.resolveTokenUsage = resolveTokenUsage;
+exports.resolveTokenUsageCandidates = resolveTokenUsageCandidates;
 exports.resolveXpertMcpExtensions = resolveXpertMcpExtensions;
 exports.runWithRequestContext = runWithRequestContext;
 exports.runtimeToolProviderComponent = runtimeToolProviderComponent;
 exports.secondsToMilliseconds = secondsToMilliseconds;
 exports.setDefaultTenantId = setDefaultTenantId;
 exports.sumTokenUsage = sumTokenUsage;
+exports.taskWaitReason = taskWaitReason;
 exports.textTokenBoundaries = textTokenBoundaries;