@xpert-ai/plugin-sdk 3.21.0 → 3.21.1

package/docs/en/structured-knowledge-graph.md

@@ -0,0 +1,60 @@
+# Structured knowledge graph publication
+
+Use `KnowledgeGraphRuntimeCapability` for source-owned, already structured data. It publishes explicit identities, relationships, typed properties, and source chunk references without LLM extraction or identity classification. Unstructured documents continue to use the normal extraction pipeline.
+
+## Source and publication lifecycle
+
+1. Create an Agent Knowledge Writer managed document owned by the publishing Assistant. Set `metadata.graphSource = { mode: 'structured' }` before writing chunks, so automatic graph extraction is skipped.
+2. Write the complete chunk projection and its embeddings using `AgentKnowledgeWriterCapability`. Use immutable, content-versioned chunk keys.
+3. Resolve `KnowledgeGraphRuntimeCapability` and call `publish`. Supply the managed document owner, external source version, complete chunk ID manifest, entities, and relations. Each item must reference one or more chunks in the manifest.
+4. Poll `status` until `success`. A queued receipt means the snapshot is accepted, not yet searchable. Display failure/retry separately from embedding completion.
+5. A new snapshot replaces only this document's graph contribution. `retract` publishes an empty graph while retaining chunks and contributions from other documents. Deleting the source document follows the existing source cleanup lifecycle.
+
+```ts
+const graph = runtime.get(KnowledgeGraphRuntimeCapability)
+const owner = { knowledgebaseId, documentId, xpertId, agentKey }
+const receipt = await graph.publish({
+  ...owner,
+  publicationKey: 'automotive-bom:ASSEMBLY-01',
+  sourceVersion: 'R2:source-content-hash',
+  chunkIds: ['R2:root', 'R2:position-10'],
+  entities: [
+    {
+      id: 'root',
+      namespace: 'automotive:BOM:ASSEMBLY-01:R2',
+      nodeKey: 'ASSEMBLY-01',
+      type: 'Root',
+      name: 'Drive assembly',
+      chunkIds: ['R2:root']
+    },
+    {
+      id: 'sensor',
+      namespace: 'automotive:BOM:ASSEMBLY-01:R2:position-10',
+      nodeKey: 'SENSOR-01',
+      type: 'Component',
+      name: 'Temperature sensor',
+      properties: { resistance: 100, unit: 'ohm' },
+      chunkIds: ['R2:position-10']
+    }
+  ],
+  relations: [
+    {
+      source: 'root',
+      target: 'sensor',
+      type: 'CONTAINS',
+      properties: { quantity: 2, unit: 'EA' },
+      chunkIds: ['R2:position-10']
+    }
+  ]
+})
+```
+
+`namespace + nodeKey` is the exact identity within the knowledgebase. Include source revision and assembly occurrence in component namespaces; material master namespaces can be shared across BOMs. Do not merge occurrence-specific quantities or features onto a shared material. Relations reference local entity IDs in the same complete snapshot.
+
+The platform validates ownership, KB write access, enabled graph configuration, endpoint identities and chunk membership before accepting. Repeating the same snapshot against the same source epoch is idempotent. Snapshot persistence and source-contribution replacement are transactional. Retry/rebuild replay the stored structured snapshot; they never fall back to an LLM. If the source chunks have changed, republish from the source application. The immutable chunk-key convention is necessary to distinguish payload changes that retain otherwise identical IDs.
+
+Properties are JSON values, stored per source contribution and exposed in entity/relation metadata. `metadata.propertySources` retains per-document provenance when entities are shared. Graph visualization, graph/hybrid retrieval, entity evidence links and embedding indexes use the existing platform APIs.
+
+For deployments without schema synchronization, apply `packages/server-ai/src/graphrag/migrations/20260913-structured-properties.sql` before starting the updated API. This additive migration adds property columns to both graph contribution tables.
+
+If structured projections were created before the missing-confidence fix, also apply `20260913-structured-mention-confidence.sql` from that directory. It restores unknown mention confidence to `NULL` only for current structured snapshots without explicit confidence values. Model/manual evidence and explicit zero confidence are preserved. This prevents valid structured evidence from receiving a zero graph-retrieval score.

package/docs/en/video-generation-protocol.md

@@ -0,0 +1,86 @@
+# Video Generation Protocol
+
+The platform video generation service separates application requests from provider-specific tools.
+Applications submit normalized workspace file references; provider plugins declare capabilities and
+implement the standard tool arguments for the modes they support.
+
+## Versions
+
+- Protocol v1 supports text-to-video and one image-to-video input.
+- Protocol v2 adds multiple reference media, initial/final frames, and per-model input limits.
+- The platform continues to discover and route v1 providers. New provider integrations should use v2.
+
+## Modes
+
+| Mode                        | Normalized tool arguments                                                 |
+| --------------------------- | ------------------------------------------------------------------------- |
+| `text_to_video`             | no media arguments                                                        |
+| `image_to_video`            | `input_image_file`                                                        |
+| `first_last_frame_to_video` | `first_frame_file`, `last_frame_file`                                     |
+| `reference_to_video`        | `reference_image_files`, `reference_video_files`, `reference_audio_files` |
+
+Every file argument is a `WorkspacePortableFileReference`. Provider tools are responsible for
+reading those references through Workspace Files and converting them to the provider's accepted
+transport format. Applications must not send credentials, provider URLs, or provider tool names.
+
+## Capability Declaration
+
+Provider strategies declare generator-level modes and tool mappings, then narrow them for each
+model with `modes` and `inputs`. Reference limits are enforced by the host before invoking a paid
+provider operation.
+
+```ts
+videoGeneration: {
+  protocolVersion: 2,
+  family: 'seedance',
+  displayName: 'Seedance',
+  modes: [
+    'text_to_video',
+    'image_to_video',
+    'first_last_frame_to_video',
+    'reference_to_video'
+  ],
+  tools: {
+    textToVideo: 'provider_text_to_video',
+    imageToVideo: 'provider_image_to_video',
+    firstLastFrameToVideo: 'provider_first_last_frame_to_video',
+    referenceToVideo: 'provider_reference_to_video',
+    query: 'provider_video_query'
+  },
+  models: [{
+    id: 'provider-model-id',
+    label: 'Provider Model',
+    inputs: {
+      referenceImages: { maxItems: 9 },
+      referenceAudios: { maxItems: 3 },
+      initialFrame: true,
+      lastFrame: true
+    }
+  }]
+}
+```
+
+Discovery returns only modes backed by enabled tools and only models that retain at least one
+available mode. Submit validates model, output settings, reference kinds, frame combinations,
+per-model limits, duplicate files, and tool enablement before provider invocation.
+
+## Request Routing
+
+The host derives the mode from reference purposes:
+
+1. No references: text-to-video.
+2. One `first_frame`: image-to-video.
+3. One `first_frame` and one `last_frame`: first/final-frame-to-video.
+4. Generic image, video, or audio references: reference-to-video.
+5. A v1 provider or a v2 model without reference mode may accept one generic image through its
+   image-to-video tool. Other unsupported combinations fail before submission.
+
+Reference array order is preserved within each media kind. Prompts that refer to `image 1`,
+`image 2`, and so on must use the same image order as the request.
+
+## Standard Results
+
+Submit tools return artifact data containing `task_id`, `status`, and optionally `model`. Query tools
+return `task_id`, `status`, optional provider error data, and generated video files in the artifact
+`files` array. The platform exposes normalized task fields and Workspace Files references; it does
+not expose provider response bodies, credentials, internal tool names, or provider media URLs.

package/docs/en/view-extension-protocol.md

@@ -0,0 +1,413 @@
+# View Extension Protocol
+
+This document defines the contract between a view extension provider, its manifest, and an iframe remote component. It is intentionally small: every new backend interaction must be added as an explicit capability instead of becoming a generic RPC tunnel.
+
+## Goals
+
+- Keep plugin views portable across hosts.
+- Keep iframe remote components token-free and host-agnostic.
+- Make every backend interaction visible in the manifest.
+- Let provider APIs grow by optional methods with clear permissions and tests.
+- Avoid putting large files, streams, jobs, or assets into JSON actions.
+
+## Three Contract Layers
+
+The view extension surface has three layers. A feature is complete only when all three layers are defined.
+
+| Layer                    | Owner                           | Purpose                                                                        |
+| ------------------------ | ------------------------------- | ------------------------------------------------------------------------------ |
+| Message protocol         | Host web app + remote component | The `postMessage` request/response envelope used by iframe views.              |
+| Manifest declaration     | Provider                        | The visible capability whitelist for a view, including actions and parameters. |
+| Provider optional method | Plugin SDK                      | The server-side method that actually handles the declared capability.          |
+
+Do not add a broad `execute(any)` method to `IXpertViewExtensionProvider`. Add a named optional method only when a capability has a known lifecycle, payload type, and security boundary.
+
+## Assistant Workbench Slot
+
+Use `AGENT_WORKBENCH_SLOT` from `@xpert-ai/contracts`, whose value is `agent.workbench`, for Assistant Workbench views. The host exposes one Workbench slot. Opening behavior belongs to `workbench.openMode` (`auto` or `on-demand`), and the manual menu entry is controlled by `workbench.menu.enabled`.
+
+For compatibility, the host accepts requests to `agent.workbench.fixed` and `agent.workbench.main` and normalizes them to `agent.workbench`. Responses use the canonical slot. If a provider returns no manifests for the canonical slot, the host reads both legacy slots and merges their views by key. A duplicate key uses the complete `fixed` declaration; distinct keys from either legacy slot remain available. A provider's nonempty canonical catalog takes precedence over its legacy declarations.
+
+Compatibility mapping preserves view keys, permissions, Feature activation, visibility, and opening preferences. It does not grant access. Legacy `workbench.fixed: false` still hides the view; new providers should use `visible` for visibility and `openMode` for opening behavior. Other host types and slots are unaffected.
+
+## Message Envelope
+
+All iframe messages must use this envelope:
+
+```ts
+type XpertRemoteComponentMessage = {
+  channel: 'xpertai.remote_component'
+  protocolVersion: 1
+  instanceId?: string
+  type: string
+  requestId?: string
+}
+```
+
+Rules:
+
+- `channel` and `protocolVersion` are mandatory.
+- `instanceId` binds a message to one iframe instance after `init`.
+- `requestId` is mandatory for request/response messages.
+- The iframe may only send messages to its parent. It must not call view extension APIs directly.
+- The host must ignore messages from any source other than the iframe content window.
+
+## Supported Message Types
+
+Parent to iframe:
+
+| Type                  | Purpose                                                                   |
+| --------------------- | ------------------------------------------------------------------------- |
+| `init`                | Supplies manifest, initial data payload, query, locale, and theme tokens. |
+| `hostEvent`           | Delivers a host-side event that matched `manifest.hostEvents`.            |
+| `data`                | Response to `requestData`.                                                |
+| `parameterOptions`    | Response to `requestParameterOptions`.                                    |
+| `actionResult`        | Response to `executeAction`.                                              |
+| `fileActionResult`    | Response to `executeFileAction`.                                          |
+| `clientCommandResult` | Response to `invokeClientCommand`.                                        |
+| `error`               | Request-scoped failure response.                                          |
+
+Iframe to parent:
+
+| Type                      | Purpose                                      |
+| ------------------------- | -------------------------------------------- |
+| `ready`                   | Signals that the iframe is ready for `init`. |
+| `resize`                  | Requests host height adjustment.             |
+| `notify`                  | Requests a host notification.                |
+| `requestData`             | Requests view data through `getViewData`.    |
+| `requestParameterOptions` | Requests dynamic parameter options.          |
+| `executeAction`           | Executes a JSON action.                      |
+| `executeFileAction`       | Executes a multipart file action.            |
+| `invokeClientCommand`     | Requests a host-side client command.         |
+
+No other message type may perform backend I/O until it is added to this document, the host bridge, and the provider interface.
+
+Remote components and hosts should import the public identifiers from `@xpert-ai/contracts` instead of repeating
+their wire values:
+
+```ts
+import {
+  WORKBENCH_ASSISTANT_CONVERSATION_TARGET,
+  WORKBENCH_FILE_OPEN_COMMAND,
+  WORKBENCH_NAVIGATION_OPEN_COMMAND,
+  XPERT_REMOTE_COMPONENT_INVOKE_CLIENT_COMMAND_MESSAGE_TYPE,
+  type WorkbenchOpenFile,
+  type WorkbenchNavigationOpenPayload,
+  type XpertRemoteComponentInvokeClientCommandRequest
+} from '@xpert-ai/contracts'
+```
+
+## Manifest Rules
+
+The manifest is the capability whitelist. A remote component may only request operations that the manifest declares.
+
+```ts
+type XpertRemoteComponentViewSchema = {
+  type: 'remote_component'
+  runtime: 'react' | 'vue' | 'esm'
+  protocolVersion: 1
+  component: {
+    isolation: 'iframe'
+    entry: string
+  }
+  dataSource: {
+    mode: 'platform'
+  }
+}
+
+type XpertViewActionDefinition = {
+  key: string
+  label: I18nObject
+  icon?: string
+  placement?: 'toolbar' | 'row'
+  actionType: 'invoke' | 'navigate' | 'open_detail' | 'refresh'
+  inputSchema?: JsonSchemaObjectType
+  inputDefaults?: 'target' | Record<string, unknown>
+  confirm?: {
+    title?: I18nObject
+    message?: I18nObject
+  }
+  permissions?: string[]
+
+  // Convention for extension hosts. Omitted means 'json'.
+  transport?: 'json' | 'file'
+}
+```
+
+Rules:
+
+- `runtime: 'react'` is the legacy classic-script iframe runtime.
+- `runtime: 'vue'` and `runtime: 'esm'` use an ES module iframe entry. They keep the same postMessage protocol and may use top-level await inside the bundled `appScript`.
+- `transport: 'json'` maps to `executeViewAction`.
+- `transport: 'file'` maps to `executeViewFileAction`.
+- If `transport` is omitted, hosts must treat the action as `json` for backward compatibility.
+- File actions should normally use `actionType: 'invoke'` and should not be rendered as generic toolbar buttons unless the host explicitly supports file input for declared actions.
+- `inputSchema` only describes JSON fields. It does not describe the uploaded file body.
+- `clientCommands` declares host-side UI capabilities that the iframe may request through `invokeClientCommand`.
+- Client commands are resolved by the host page, not by the plugin provider. They must be allowlisted in the manifest and must return structured success or error data.
+- `hostEvents` declares host-side events that the view wants to observe. The host owns event normalization and matching; the plugin owns event semantics and UI behavior.
+- Manifests must not include access tokens, concrete API URLs, host IDs, assistant IDs, or tenant IDs.
+
+## Host Event Subscriptions
+
+Host events let a view react to activity that happened outside the iframe, for example an assistant tool call completing in the visible ChatKit. They are browser-local signals, not backend subscriptions.
+
+The provider declares subscriptions in the manifest:
+
+```ts
+type XpertViewHostEventSubscription = {
+  key: string
+  event: string
+  filter?: {
+    sources?: string[]
+    toolNames?: string[]
+    viewKeys?: string[]
+    visualizationTypes?: string[]
+  }
+  action?: {
+    // Defaults to 'refresh'.
+    type?: 'refresh' | 'forward' | 'refresh-and-forward'
+    debounceMs?: number
+  }
+}
+
+type XpertExtensionViewManifest = {
+  hostEvents?: {
+    subscriptions?: XpertViewHostEventSubscription[]
+  }
+}
+```
+
+Current data-xpert hosts normalize ChatKit logs into these event types:
+
+| Event                             | Source    | Notes                                                                                                  |
+| --------------------------------- | --------- | ------------------------------------------------------------------------------------------------------ |
+| `assistant.tool.completed`        | `chatkit` | Emitted from `lg.tool.end` logs and component logs that contain tool output or visualization metadata. |
+| `assistant.visualization.emitted` | `chatkit` | Emitted when a component log contains visualization metadata but the host cannot resolve a tool name.  |
+
+Action behavior:
+
+| Action                | Host behavior                                                                                                                  |
+| --------------------- | ------------------------------------------------------------------------------------------------------------------------------ |
+| `refresh`             | Re-run the normal view refresh flow. Declarative views call `getViewData`; remote components receive the current `init` again. |
+| `forward`             | Send a `hostEvent` message to the iframe. The remote component decides whether and how to refresh.                             |
+| `refresh-and-forward` | Do both.                                                                                                                       |
+
+Matching rules:
+
+- The host first matches the current assistant context. The assistant identifier is host-internal and must not be forwarded to the iframe.
+- `subscription.event` must equal the normalized host event type.
+- `sources`, `toolNames`, `viewKeys`, and `visualizationTypes` are optional allowlists. If present, the event field must match.
+- `debounceMs` is a lightweight duplicate guard for cases where one tool completion appears in multiple ChatKit logs.
+- The host must not hard-code plugin view keys or tool names in the workbench extension renderer. Plugin-owned behavior belongs in the manifest and the remote component.
+
+The forwarded `hostEvent` payload is intentionally small and sanitized:
+
+```ts
+{
+  type: 'hostEvent',
+  event: {
+    id: 'assistant.tool.completed:...',
+    type: 'assistant.tool.completed',
+    source: 'chatkit',
+    receivedAt: '2026-05-29T00:00:00.000Z',
+    toolName: 'save_contract',
+    toolCallId: 'tool-call-id',
+    runId: 'run-id',
+    threadId: 'thread-id',
+    data: {
+      output: {
+        contractId: 'contract-1'
+      }
+    },
+    visualization: {
+      type: 'xpert.extension_view',
+      viewKey: 'provider__review'
+    }
+  }
+}
+```
+
+The payload must not include access tokens, API URLs, host IDs, assistant IDs, tenant IDs, organization IDs, or host-internal assistant routing fields.
+
+Remote components should treat `hostEvent` as an intent signal. They may inspect `event.toolName`, `event.data.output`, and visualization metadata to switch tabs, update query parameters, refresh one data section, or ignore the event.
+
+## Provider Interface Mapping
+
+`IXpertViewExtensionProvider` exposes explicit optional methods:
+
+```ts
+interface IXpertViewExtensionProvider {
+  supports(context: XpertResolvedViewHostContext): Promise<boolean> | boolean
+
+  getViewManifests(
+    context: XpertResolvedViewHostContext,
+    slot: string
+  ): Promise<XpertExtensionViewManifest[]> | XpertExtensionViewManifest[]
+
+  getViewData(
+    context: XpertResolvedViewHostContext,
+    viewKey: string,
+    query: XpertViewQuery
+  ): Promise<XpertViewDataResult> | XpertViewDataResult
+
+  executeViewAction?(
+    context: XpertResolvedViewHostContext,
+    viewKey: string,
+    actionKey: string,
+    request: XpertViewActionRequest
+  ): Promise<XpertViewActionResult> | XpertViewActionResult
+
+  executeViewFileAction?(
+    context: XpertResolvedViewHostContext,
+    viewKey: string,
+    actionKey: string,
+    request: XpertViewActionRequest,
+    file: XpertViewFileActionFile
+  ): Promise<XpertViewActionResult> | XpertViewActionResult
+
+  getViewParameterOptions?(
+    context: XpertResolvedViewHostContext,
+    viewKey: string,
+    parameterKey: string,
+    query: XpertViewParameterOptionsQuery
+  ): Promise<XpertViewParameterOptionsResult> | XpertViewParameterOptionsResult
+
+  getRemoteComponentEntry?(
+    context: XpertResolvedViewHostContext,
+    viewKey: string,
+    component: XpertRemoteComponentViewSchema['component']
+  ): Promise<XpertRemoteComponentEntry> | XpertRemoteComponentEntry
+}
+```
+
+Mapping:
+
+| Capability        | Manifest declaration                          | Message                   | API transport                       | Provider method           |
+| ----------------- | --------------------------------------------- | ------------------------- | ----------------------------------- | ------------------------- |
+| Data query        | `dataSource.mode = 'platform'`                | `requestData`             | `GET /data`                         | `getViewData`             |
+| Parameter options | `parameters[].optionSource.mode = 'provider'` | `requestParameterOptions` | `GET /parameters/:key/options`      | `getViewParameterOptions` |
+| JSON action       | `actions[].transport = 'json'` or omitted     | `executeAction`           | JSON `POST /actions/:key`           | `executeViewAction`       |
+| File action       | `actions[].transport = 'file'`                | `executeFileAction`       | multipart `POST /actions/:key/file` | `executeViewFileAction`   |
+| Remote entry      | `view.type = 'remote_component'`              | host-managed              | `GET /remote-component/entry`       | `getRemoteComponentEntry` |
+| Client command    | `clientCommands[].key`                        | `invokeClientCommand`     | host in-page registry               | host-managed              |
+| Host event        | `hostEvents.subscriptions[]`                  | `hostEvent`               | browser-local                       | host-managed              |
+
+## Client Command Rules
+
+Client commands let a remote component ask the current host page to perform a UI-local action, for example sending a message through the page's visible assistant ChatKit. They are not backend RPC and they must not expose auth or host internals to the iframe.
+
+```ts
+type XpertViewClientCommandDefinition = {
+  key: string
+  label?: I18nObject
+  description?: I18nObject
+  permissions?: string[]
+}
+```
+
+The public file preview command uses `WORKBENCH_FILE_OPEN_COMMAND` and a
+`WorkbenchOpenFile` payload. Optional evidence metadata is represented by
+`WorkbenchOpenFileEvidence` and `WorkbenchOpenFileEvidenceBox`; plugins should
+import these contracts instead of repeating the payload shape.
+
+Rules:
+
+- The iframe may call only command keys declared in `manifest.clientCommands`.
+- The host must reject messages from the wrong iframe window or wrong `instanceId`.
+- Command payloads are intent data only. They may include text, attachments, references, and view state, but not tokens, API URLs, assistant IDs, or tenant IDs.
+- If the command handler is missing or unavailable, the host should return a structured unsupported result so the remote component can fall back to a backend action.
+- Provider code must continue to work without client commands; they are an optional host enhancement.
+
+## File Action Rules
+
+File actions use multipart transport end to end.
+
+```text
+iframe remote component
+  -> postMessage executeFileAction
+  -> host web app builds FormData
+  -> host API proxy resolves host context
+  -> xpert-pro view-host file endpoint
+  -> provider.executeViewFileAction(...)
+```
+
+Rules:
+
+- The multipart field name is `file`.
+- JSON fields are `targetId`, `input`, and `parameters`.
+- The iframe should send file bytes as a transferable `ArrayBuffer` or another host-supported file payload. Do not rely on cross-sandbox `File` objects being reusable by the parent window.
+- The provider receives `XpertViewFileActionFile` with `buffer`, `originalname`, `mimetype`, and `size`.
+- The provider must validate file type, required worksheet/header shape, maximum size, and business-level duplicate behavior.
+- The provider must return `XpertViewActionResult`; large parsed previews should go in `data`, not in `message`.
+
+## Error Shape
+
+Provider action results should use `success: false` for business failures that the UI can display.
+
+```ts
+{
+  success: false,
+  message: {
+    en_US: 'Preview has validation errors',
+  },
+  data: {
+    errors: ['...'],
+  },
+  refresh: false,
+}
+```
+
+Transport, permission, and malformed request failures should be thrown by the host or provider service so they become request-scoped `error` messages.
+
+## Security Invariants
+
+- Remote components must not receive access tokens.
+- Remote components must not receive xpert-pro API base URLs.
+- Remote components must not decide `hostType`, `hostId`, tenant, organization, or assistant identity.
+- Hosts must resolve context from authenticated server-side state.
+- Hosts must check that `viewKey` exists and is visible.
+- Hosts must check that `actionKey` exists, is visible, and matches the requested transport.
+- Hosts must forward only normalized JSON fields and multipart file bytes.
+- Providers must re-check business permissions and never trust iframe-provided identifiers by themselves.
+
+## Versioning
+
+`protocolVersion: 1` is the current iframe protocol.
+
+Backward-compatible changes:
+
+- New optional manifest fields.
+- New optional provider methods.
+- New message types that older hosts safely ignore.
+- Additional fields inside existing result `data`.
+
+Breaking changes require a new `protocolVersion`:
+
+- Renaming existing message types.
+- Changing request/response pairing.
+- Changing required envelope fields.
+- Changing file payload semantics.
+
+## Adding A New Capability
+
+Before adding a new backend interaction, update this document and answer:
+
+1. What message type does the iframe send?
+2. What manifest field declares the capability?
+3. What API transport does the host use?
+4. What optional provider method handles it?
+5. What permissions and context are enforced by the host?
+6. What payload size and lifecycle constraints apply?
+7. What tests prove non-declared operations fail?
+
+Recommended future capabilities:
+
+| Capability               | Suggested provider method                         |
+| ------------------------ | ------------------------------------------------- |
+| Streaming action         | `executeViewStreamAction?`                        |
+| Long-running job         | `createViewJob?`, `getViewJob?`, `cancelViewJob?` |
+| Generated asset download | `getViewAsset?`                                   |
+| Server-side subscription | `subscribeViewEvents?`                            |
+
+Do not add them until a real view needs them.

package/index.cjs.js

@@ -1130,6 +1130,19 @@ const KnowledgebaseProvisioningRuntimeCapability = modelProvider.createRuntimeCa
     description: 'Idempotently provision managed platform knowledgebases and connect them to an Agent.'
 });
 
+/** Knowledgebase discovery is scoped to the authenticated runtime, never caller-supplied identities. */ const knowledgebaseActions = [
+    'knowledgebase.read',
+    'knowledgebase.manage',
+    'content.search',
+    'documents.read',
+    'documents.create',
+    'documents.update',
+    'documents.delete',
+    'documents.process',
+    'chunks.write',
+    'chunks.delete'
+];
+
 const KnowledgeGraphRuntimeCapability = modelProvider.createRuntimeCapability('platform.knowledge-graph', {
     description: 'Publish, inspect, and retract source-owned structured knowledge graphs without model extraction.'
 });
@@ -10470,6 +10483,7 @@ exports.isSandboxTerminalAdapter = isSandboxTerminalAdapter;
 exports.isStrategyInstance = isStrategyInstance;
 exports.isStructuredMessageType = isStructuredMessageType;
 exports.isTenantGlobalScopeKey = isTenantGlobalScopeKey;
+exports.knowledgebaseActions = knowledgebaseActions;
 exports.loadYamlFile = loadYamlFile;
 exports.mergeCredentials = mergeCredentials;
 exports.mergeModelRequirements = mergeModelRequirements;

package/index.esm.js

@@ -1112,6 +1112,19 @@ const KnowledgebaseProvisioningRuntimeCapability = createRuntimeCapability('plat
     description: 'Idempotently provision managed platform knowledgebases and connect them to an Agent.'
 });
 
+/** Knowledgebase discovery is scoped to the authenticated runtime, never caller-supplied identities. */ const knowledgebaseActions = [
+    'knowledgebase.read',
+    'knowledgebase.manage',
+    'content.search',
+    'documents.read',
+    'documents.create',
+    'documents.update',
+    'documents.delete',
+    'documents.process',
+    'chunks.write',
+    'chunks.delete'
+];
+
 const KnowledgeGraphRuntimeCapability = createRuntimeCapability('platform.knowledge-graph', {
     description: 'Publish, inspect, and retract source-owned structured knowledge graphs without model extraction.'
 });
@@ -10132,4 +10145,4 @@ Reflect.defineMetadata('__command__', {
     id: ImportDefaultAgentPluginsCommand.type
 }, ImportDefaultAgentPluginsCommand);
 
-export { ACCOUNT_BINDING_PERMISSION_SERVICE_TOKEN, AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING, AGENT_CHAT_DISPATCH_MESSAGE_TYPE, AGENT_MIDDLEWARE_STRATEGY, AGENT_RUNTIME_EVENT_MESSAGE_TYPE, AGENT_RUNTIME_STRATEGY, AIModel, AIModelProviderNotFoundException, AIModelProviderRegistry, AIModelProviderStrategy, AI_MODEL_PROVIDER, ASSISTANT_CAPABILITY_PROVIDER, AdapterDataSourceStrategy, AgentExecutionRunnerCapability, AgentExecutionRunnerFactoryCapability, AgentInvocationRuntimeCapability, AgentMiddlewareRegistry, AgentMiddlewareStrategy, AgentRuntimeFactoryCapability, AgentRuntimeRegistry, AgentRuntimeStrategy, AiModelNotFoundException, AssistantCapabilityProvider, AssistantCapabilityProviderRegistry, AssistantTaskRuntimeCapability, BOUND_IDENTITY_LOGIN_PERMISSION_SERVICE_TOKEN, BUILTIN_GLOBAL_SCOPE, BaseHTTPQueryRunner, BaseQueryRunner, BaseSQLQueryRunner, BaseSandbox, BaseStrategyRegistry, BuiltinToolset, CHAT_CHANNEL, CHAT_CHANNEL_TEXT_LIMITS, CLI_MODEL_TOKEN_REFERENCE, COLLABORATION_DOCUMENT_PROVIDER, CONNECTION_COMMAND_ROUTER_TOKEN, CONNECTOR_STRATEGY, CancelConversationCommand, ChatChannel, ChatChannelRegistry, ChatOAICompatReasoningModel, CliModelProfilesCapability, CollaborationDocumentProvider, CollaborationDocumentProviderRegistry, CollaborationRuntimeCapability, CommonParameterRules, ConnectorRuntimeCapability, ConnectorRuntimeFactoryCapability, ConnectorStrategyKey, ConnectorStrategyRegistry, CreateModelClientCommand, CredentialsValidateFailedError, DATASOURCE_STRATEGY, DBCreateTableMode, DBProtocolEnum, DBSyntaxEnum, DBTableAction, DBTableDataAction, DEFAULT_EXECUTION_CONFIG, DEFAULT_SANDBOX_EXECUTION_MAX_OUTPUT_BYTES, DEFAULT_SANDBOX_FILE_OPERATION_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_SEC, DEFAULT_SANDBOX_FILE_SEARCH_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_SEC, DEFAULT_SANDBOX_SHELL_EXECUTION_OPTIONS, DEFAULT_SANDBOX_SHELL_TIMEOUT_MS, DEFAULT_SANDBOX_SHELL_TIMEOUT_SEC, DOCUMENT_SOURCE_STRATEGY, DOCUMENT_TRANSFORMER_STRATEGY, DataSourceStrategy, DataSourceStrategyRegistry, DecoratedAgentMiddlewareStrategy, DecoratedToolsetStrategy, DocumentSourceRegistry, DocumentSourceStrategy, DocumentTransformerRegistry, DocumentTransformerStrategy, EVOLUTION_RUNTIME_SERVICE_TOKEN, EVOLUTION_TARGET_PROVIDER, EvolutionBaselineRuntimeCapability, EvolutionChangeRuntimeCapability, EvolutionRuntimeCapability, EvolutionTargetProviderRegistry, EvolutionTargetProviderStrategy, FILE_STORAGE_PROVIDER, FILE_UPLOAD_TARGET_STRATEGY, FileRuntimeCapability, FileStorageProvider, FileStorageProviderRegistry, FileUploadTargetRegistry, FileUploadTargetStrategy, GLOBAL_ORGANIZATION_SCOPE, HANDOFF_PERMISSION_SERVICE_TOKEN, HANDOFF_PROCESSOR_STRATEGY, HANDOFF_QUEUE_SERVICE_TOKEN, HandoffProcessorRegistry, HandoffProcessorStrategy, IMAGE_UNDERSTANDING_STRATEGY, INTEGRATION_PERMISSION_SERVICE_TOKEN, INTEGRATION_STRATEGY, ImageGenerationModel, ImageUnderstandingRegistry, ImageUnderstandingStrategy, ImportDefaultAgentPluginsCommand, IntegrationStrategyKey, IntegrationStrategyRegistry, JUMP_TO_TARGETS, JsonSchemaValidator, KEYWORD_ANALYZER_STRATEGY, KNOWLEDGE_STRATEGY, KeywordAnalyzerRegistry, KeywordAnalyzerStrategy, KnowledgeDocumentVisualAssetsRuntimeCapability, KnowledgeDocumentVisualAssetsRuntimeFactoryCapability, KnowledgeGraphRuntimeCapability, KnowledgeStrategyKey, KnowledgeStrategyRegistry, KnowledgebaseDocumentsRuntimeCapability, KnowledgebaseProvisioningRuntimeCapability, KnowledgebaseRuntimeCapability, LLMUsage, LargeLanguageModel, MANAGED_CONNECTION_REGISTRY_TOKEN, MANAGED_QUEUE_HANDLER_REGISTRY_TOKEN, MANAGED_QUEUE_SERVICE_TOKEN, MCP_CAPABILITY_CHANGE_EVENT_TYPES, MODEL_OUTPUT_VALIDATION_ERROR_CODE, ModelExecutionEnvironmentCapability, ModelOutputValidationError, ModelProvider, ORGANIZATION_METADATA_KEY, OpenAICompatibleReranker, PERMISSION_OPERATION_METADATA_KEY, PLUGIN_CONFIG_RESOLVER_TOKEN, PLUGIN_JOB_PROCESSOR_METADATA, PLUGIN_METADATA, PLUGIN_METADATA_KEY, PLUGIN_VERSION_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_SERVICE_TOKEN, PROJECT_TASK_PROVIDER, PROJECT_TYPE_PROVIDER, PROVIDE_AI_MODEL_LLM, PROVIDE_AI_MODEL_MODERATION, PROVIDE_AI_MODEL_RERANK, PROVIDE_AI_MODEL_SPEECH2TEXT, PROVIDE_AI_MODEL_TEXT_EMBEDDING, PROVIDE_AI_MODEL_TTS, PluginJobProcessor, PluginWebhookAuth, PluginWebhookAuthGuard, ProjectTaskProvider, ProjectTaskProviderRegistry, ProjectTasksRuntimeCapability, ProjectTypeProvider, ProjectTypeProviderRegistry, RESOURCE_CARD_EVENT, RESOURCE_CARD_PROVIDER, RETRIEVER_STRATEGY, RequestContext, RequestContextMiddleware, RequirePermissionOperation, RerankModel, ResourceCardProvider, ResourceCardProviderRegistry, RetrieverRegistry, RetrieverStrategy, SANDBOX_PROVIDER, SANDBOX_RUNTIME_PROVIDER, SANDBOX_SHELL_TIMEOUT_LIMITS_SEC, SANDBOX_WORKSPACE_MAPPER, SKILL_SOURCE_PROVIDER, SPEECH_TO_TEXT_PERMISSION_SERVICE_TOKEN, SPEECH_TO_TEXT_SERVICE_TOKEN, SSOProviderRegistry, SSOProviderStrategyKey, SSO_BINDING_PERMISSION_SERVICE_TOKEN, SSO_PROVIDER, STRATEGY_META_KEY, SYSTEM_GLOBAL_SCOPE, SandboxProviderRegistry, SandboxProviderStrategy, SandboxRuntimeProviderRegistry, SandboxRuntimeProviderStrategy, SandboxWorkspaceMapperRegistry, SandboxWorkspaceMapperStrategy, ShellModelExecutionSourceCapability, SkillSourceProviderRegistry, SkillSourceProviderStrategy, Speech2TextChatModel, SpeechToTextModel, StrategyBus, TENANT_GLOBAL_SCOPE_PREFIX, TENANT_GLOBAL_SCOPE_SUFFIX, TEXT_SPLITTER_STRATEGY, TOOLSET_STRATEGY, TextEmbeddingModelManager, TextSplitterRegistry, TextSplitterStrategy, TextToSpeechModel, ToolsetRegistry, ToolsetStrategy, USER_PERMISSION_SERVICE_TOKEN, VECTOR_STORE_STRATEGY, VIDEO_GENERATION_PERMISSION_SERVICE_TOKEN, VIDEO_GENERATION_SERVICE_TOKEN, VIDEO_GENERATOR_FAMILIES, VIEW_EXTENSION_CACHE_SERVICE_TOKEN, VIEW_EXTENSION_PROVIDER, VectorStoreRegistry, VectorStoreStrategy, VideoGenerationModel, ViewExtensionProvider, ViewExtensionProviderRegistry, WORKFLOW_NODE_STRATEGY, WORKFLOW_TRIGGER_STRATEGY, WorkflowNodeRegistry, WorkflowNodeStrategy, WorkflowTriggerRegistry, WorkflowTriggerStrategy, WorkspaceFilesRuntimeCapability, WrapWorkflowNodeExecutionCommand, XPERT_AGENT_MIDDLEWARE_RUNTIME_TOKEN, XPERT_TOOL_METHOD_METADATA, XPERT_TOOL_PROVIDER, XPERT_TOOL_PROVIDER_METADATA, XPERT_TOOL_RESULT_FORMAT_VERSION, XpFileSystem, XpertPrompt, XpertResource, XpertResourceTemplate, XpertServerPlugin, XpertTool, XpertToolProvider, XpertToolProviderCoordinator, XpertToolProviderRegistry, agentInvocationDispatchContextSchema, agentRuntimeConsumptionStateSchema, agentRuntimeDeliveryStateSchema, agentRuntimeEventMessageId, agentRuntimeEventSchema, agentRuntimeReplyTargetSchema, agentRuntimeResultClaimSchema, agentRuntimeResultConsumptionKey, als, appendSandboxMessage, assertConnectorDefinition, buildSandboxTimeoutMessage, calcTokenUsage, calculateLLMUsagePrice, calculateModelPrice, calculateModelUsageCharge, chunkText, countTextTokens, countTokensSafe, createI18nInstance, createPluginLogger, createRuntimeCapability, defineAgentMessageType, defineChannelMessageType, defineMcpApp, defineMcpCapabilities, defineMcpPrompt, defineMcpResource, defineMcpResourceTemplate, defineXpertTool, derivePluginArtifactNamespace, describeXpertToolProvider, downloadRemoteFile, emitResourceCard, formatSandboxTimeout, getDefaultTenantId, getErrorMessage, getModelContextSize, getPermissionOperationMetadata, getPositionList, getPositionMap, getRequestContext, getRequiredPermissionOperation, getTenantGlobalScopeKey, getXpertToolMethod, isAgentInvocationTerminal, isDevelopmentSandboxRuntimeEnvironment, isModelOutputValidationError, isModelUsagePricingConfig, isRemoteFile, isSandboxBackend, isSandboxManagedServiceAdapter, isSandboxServiceProxyAdapter, isSandboxTerminalAdapter, isStrategyInstance, isStructuredMessageType, isTenantGlobalScopeKey, loadYamlFile, mergeCredentials, mergeModelRequirements, mergeParentChildChunks, nativeModelTransport, normalizeContextSize, normalizeTokenUsage, pluginArtifactTableName, prepareToolResult, processAsyncAIGCManagedJob, renderRemoteModuleIframeHtml, renderRemoteReactIframeHtml, renderRemoteVueIframeHtml, resolveModelUsagePricingSnapshot, resolveSandboxBackend, resolveSandboxExecutionOptions, resolveSandboxManagedServiceAdapter, resolveSandboxServiceProxyAdapter, resolveSandboxTerminalAdapter, resolveStrategyMetadataTarget, resolveTenantGlobalScopeKey, resolveTokenUsage, resolveTokenUsageCandidates, resolveXpertMcpExtensions, runWithRequestContext, runtimeToolProviderComponent, secondsToMilliseconds, setDefaultTenantId, sumTokenUsage, taskWaitReason, textTokenBoundaries };
+export { ACCOUNT_BINDING_PERMISSION_SERVICE_TOKEN, AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING, AGENT_CHAT_DISPATCH_MESSAGE_TYPE, AGENT_MIDDLEWARE_STRATEGY, AGENT_RUNTIME_EVENT_MESSAGE_TYPE, AGENT_RUNTIME_STRATEGY, AIModel, AIModelProviderNotFoundException, AIModelProviderRegistry, AIModelProviderStrategy, AI_MODEL_PROVIDER, ASSISTANT_CAPABILITY_PROVIDER, AdapterDataSourceStrategy, AgentExecutionRunnerCapability, AgentExecutionRunnerFactoryCapability, AgentInvocationRuntimeCapability, AgentMiddlewareRegistry, AgentMiddlewareStrategy, AgentRuntimeFactoryCapability, AgentRuntimeRegistry, AgentRuntimeStrategy, AiModelNotFoundException, AssistantCapabilityProvider, AssistantCapabilityProviderRegistry, AssistantTaskRuntimeCapability, BOUND_IDENTITY_LOGIN_PERMISSION_SERVICE_TOKEN, BUILTIN_GLOBAL_SCOPE, BaseHTTPQueryRunner, BaseQueryRunner, BaseSQLQueryRunner, BaseSandbox, BaseStrategyRegistry, BuiltinToolset, CHAT_CHANNEL, CHAT_CHANNEL_TEXT_LIMITS, CLI_MODEL_TOKEN_REFERENCE, COLLABORATION_DOCUMENT_PROVIDER, CONNECTION_COMMAND_ROUTER_TOKEN, CONNECTOR_STRATEGY, CancelConversationCommand, ChatChannel, ChatChannelRegistry, ChatOAICompatReasoningModel, CliModelProfilesCapability, CollaborationDocumentProvider, CollaborationDocumentProviderRegistry, CollaborationRuntimeCapability, CommonParameterRules, ConnectorRuntimeCapability, ConnectorRuntimeFactoryCapability, ConnectorStrategyKey, ConnectorStrategyRegistry, CreateModelClientCommand, CredentialsValidateFailedError, DATASOURCE_STRATEGY, DBCreateTableMode, DBProtocolEnum, DBSyntaxEnum, DBTableAction, DBTableDataAction, DEFAULT_EXECUTION_CONFIG, DEFAULT_SANDBOX_EXECUTION_MAX_OUTPUT_BYTES, DEFAULT_SANDBOX_FILE_OPERATION_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_SEC, DEFAULT_SANDBOX_FILE_SEARCH_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_SEC, DEFAULT_SANDBOX_SHELL_EXECUTION_OPTIONS, DEFAULT_SANDBOX_SHELL_TIMEOUT_MS, DEFAULT_SANDBOX_SHELL_TIMEOUT_SEC, DOCUMENT_SOURCE_STRATEGY, DOCUMENT_TRANSFORMER_STRATEGY, DataSourceStrategy, DataSourceStrategyRegistry, DecoratedAgentMiddlewareStrategy, DecoratedToolsetStrategy, DocumentSourceRegistry, DocumentSourceStrategy, DocumentTransformerRegistry, DocumentTransformerStrategy, EVOLUTION_RUNTIME_SERVICE_TOKEN, EVOLUTION_TARGET_PROVIDER, EvolutionBaselineRuntimeCapability, EvolutionChangeRuntimeCapability, EvolutionRuntimeCapability, EvolutionTargetProviderRegistry, EvolutionTargetProviderStrategy, FILE_STORAGE_PROVIDER, FILE_UPLOAD_TARGET_STRATEGY, FileRuntimeCapability, FileStorageProvider, FileStorageProviderRegistry, FileUploadTargetRegistry, FileUploadTargetStrategy, GLOBAL_ORGANIZATION_SCOPE, HANDOFF_PERMISSION_SERVICE_TOKEN, HANDOFF_PROCESSOR_STRATEGY, HANDOFF_QUEUE_SERVICE_TOKEN, HandoffProcessorRegistry, HandoffProcessorStrategy, IMAGE_UNDERSTANDING_STRATEGY, INTEGRATION_PERMISSION_SERVICE_TOKEN, INTEGRATION_STRATEGY, ImageGenerationModel, ImageUnderstandingRegistry, ImageUnderstandingStrategy, ImportDefaultAgentPluginsCommand, IntegrationStrategyKey, IntegrationStrategyRegistry, JUMP_TO_TARGETS, JsonSchemaValidator, KEYWORD_ANALYZER_STRATEGY, KNOWLEDGE_STRATEGY, KeywordAnalyzerRegistry, KeywordAnalyzerStrategy, KnowledgeDocumentVisualAssetsRuntimeCapability, KnowledgeDocumentVisualAssetsRuntimeFactoryCapability, KnowledgeGraphRuntimeCapability, KnowledgeStrategyKey, KnowledgeStrategyRegistry, KnowledgebaseDocumentsRuntimeCapability, KnowledgebaseProvisioningRuntimeCapability, KnowledgebaseRuntimeCapability, LLMUsage, LargeLanguageModel, MANAGED_CONNECTION_REGISTRY_TOKEN, MANAGED_QUEUE_HANDLER_REGISTRY_TOKEN, MANAGED_QUEUE_SERVICE_TOKEN, MCP_CAPABILITY_CHANGE_EVENT_TYPES, MODEL_OUTPUT_VALIDATION_ERROR_CODE, ModelExecutionEnvironmentCapability, ModelOutputValidationError, ModelProvider, ORGANIZATION_METADATA_KEY, OpenAICompatibleReranker, PERMISSION_OPERATION_METADATA_KEY, PLUGIN_CONFIG_RESOLVER_TOKEN, PLUGIN_JOB_PROCESSOR_METADATA, PLUGIN_METADATA, PLUGIN_METADATA_KEY, PLUGIN_VERSION_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_SERVICE_TOKEN, PROJECT_TASK_PROVIDER, PROJECT_TYPE_PROVIDER, PROVIDE_AI_MODEL_LLM, PROVIDE_AI_MODEL_MODERATION, PROVIDE_AI_MODEL_RERANK, PROVIDE_AI_MODEL_SPEECH2TEXT, PROVIDE_AI_MODEL_TEXT_EMBEDDING, PROVIDE_AI_MODEL_TTS, PluginJobProcessor, PluginWebhookAuth, PluginWebhookAuthGuard, ProjectTaskProvider, ProjectTaskProviderRegistry, ProjectTasksRuntimeCapability, ProjectTypeProvider, ProjectTypeProviderRegistry, RESOURCE_CARD_EVENT, RESOURCE_CARD_PROVIDER, RETRIEVER_STRATEGY, RequestContext, RequestContextMiddleware, RequirePermissionOperation, RerankModel, ResourceCardProvider, ResourceCardProviderRegistry, RetrieverRegistry, RetrieverStrategy, SANDBOX_PROVIDER, SANDBOX_RUNTIME_PROVIDER, SANDBOX_SHELL_TIMEOUT_LIMITS_SEC, SANDBOX_WORKSPACE_MAPPER, SKILL_SOURCE_PROVIDER, SPEECH_TO_TEXT_PERMISSION_SERVICE_TOKEN, SPEECH_TO_TEXT_SERVICE_TOKEN, SSOProviderRegistry, SSOProviderStrategyKey, SSO_BINDING_PERMISSION_SERVICE_TOKEN, SSO_PROVIDER, STRATEGY_META_KEY, SYSTEM_GLOBAL_SCOPE, SandboxProviderRegistry, SandboxProviderStrategy, SandboxRuntimeProviderRegistry, SandboxRuntimeProviderStrategy, SandboxWorkspaceMapperRegistry, SandboxWorkspaceMapperStrategy, ShellModelExecutionSourceCapability, SkillSourceProviderRegistry, SkillSourceProviderStrategy, Speech2TextChatModel, SpeechToTextModel, StrategyBus, TENANT_GLOBAL_SCOPE_PREFIX, TENANT_GLOBAL_SCOPE_SUFFIX, TEXT_SPLITTER_STRATEGY, TOOLSET_STRATEGY, TextEmbeddingModelManager, TextSplitterRegistry, TextSplitterStrategy, TextToSpeechModel, ToolsetRegistry, ToolsetStrategy, USER_PERMISSION_SERVICE_TOKEN, VECTOR_STORE_STRATEGY, VIDEO_GENERATION_PERMISSION_SERVICE_TOKEN, VIDEO_GENERATION_SERVICE_TOKEN, VIDEO_GENERATOR_FAMILIES, VIEW_EXTENSION_CACHE_SERVICE_TOKEN, VIEW_EXTENSION_PROVIDER, VectorStoreRegistry, VectorStoreStrategy, VideoGenerationModel, ViewExtensionProvider, ViewExtensionProviderRegistry, WORKFLOW_NODE_STRATEGY, WORKFLOW_TRIGGER_STRATEGY, WorkflowNodeRegistry, WorkflowNodeStrategy, WorkflowTriggerRegistry, WorkflowTriggerStrategy, WorkspaceFilesRuntimeCapability, WrapWorkflowNodeExecutionCommand, XPERT_AGENT_MIDDLEWARE_RUNTIME_TOKEN, XPERT_TOOL_METHOD_METADATA, XPERT_TOOL_PROVIDER, XPERT_TOOL_PROVIDER_METADATA, XPERT_TOOL_RESULT_FORMAT_VERSION, XpFileSystem, XpertPrompt, XpertResource, XpertResourceTemplate, XpertServerPlugin, XpertTool, XpertToolProvider, XpertToolProviderCoordinator, XpertToolProviderRegistry, agentInvocationDispatchContextSchema, agentRuntimeConsumptionStateSchema, agentRuntimeDeliveryStateSchema, agentRuntimeEventMessageId, agentRuntimeEventSchema, agentRuntimeReplyTargetSchema, agentRuntimeResultClaimSchema, agentRuntimeResultConsumptionKey, als, appendSandboxMessage, assertConnectorDefinition, buildSandboxTimeoutMessage, calcTokenUsage, calculateLLMUsagePrice, calculateModelPrice, calculateModelUsageCharge, chunkText, countTextTokens, countTokensSafe, createI18nInstance, createPluginLogger, createRuntimeCapability, defineAgentMessageType, defineChannelMessageType, defineMcpApp, defineMcpCapabilities, defineMcpPrompt, defineMcpResource, defineMcpResourceTemplate, defineXpertTool, derivePluginArtifactNamespace, describeXpertToolProvider, downloadRemoteFile, emitResourceCard, formatSandboxTimeout, getDefaultTenantId, getErrorMessage, getModelContextSize, getPermissionOperationMetadata, getPositionList, getPositionMap, getRequestContext, getRequiredPermissionOperation, getTenantGlobalScopeKey, getXpertToolMethod, isAgentInvocationTerminal, isDevelopmentSandboxRuntimeEnvironment, isModelOutputValidationError, isModelUsagePricingConfig, isRemoteFile, isSandboxBackend, isSandboxManagedServiceAdapter, isSandboxServiceProxyAdapter, isSandboxTerminalAdapter, isStrategyInstance, isStructuredMessageType, isTenantGlobalScopeKey, knowledgebaseActions, loadYamlFile, mergeCredentials, mergeModelRequirements, mergeParentChildChunks, nativeModelTransport, normalizeContextSize, normalizeTokenUsage, pluginArtifactTableName, prepareToolResult, processAsyncAIGCManagedJob, renderRemoteModuleIframeHtml, renderRemoteReactIframeHtml, renderRemoteVueIframeHtml, resolveModelUsagePricingSnapshot, resolveSandboxBackend, resolveSandboxExecutionOptions, resolveSandboxManagedServiceAdapter, resolveSandboxServiceProxyAdapter, resolveSandboxTerminalAdapter, resolveStrategyMetadataTarget, resolveTenantGlobalScopeKey, resolveTokenUsage, resolveTokenUsageCandidates, resolveXpertMcpExtensions, runWithRequestContext, runtimeToolProviderComponent, secondsToMilliseconds, setDefaultTenantId, sumTokenUsage, taskWaitReason, textTokenBoundaries };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xpert-ai/plugin-sdk",
-  "version": "3.21.0",
+  "version": "3.21.1",
   "license": "AGPL-3.0",
   "repository": {
     "type": "git",

package/src/lib/rag/capability/index.d.ts

@@ -1,4 +1,5 @@
 export * from './knowledgebase';
+export * from './knowledgebase-catalog';
 export * from './knowledge-graph';
 export * from './knowledgebase-documents';
 export * from './knowledge-upload-sessions';