@xpert-ai/plugin-sdk 3.21.0 → 3.22.0

package/index.esm.js

@@ -106,6 +106,9 @@ function assertPluginArtifactNamePart(value, label) {
         throw new Error(`${label} must contain only lowercase letters, numbers, and underscores`);
     }
 }
+function isPluginArtifactNamespace(value) {
+    return typeof value === 'string' && ARTIFACT_NAMESPACE_PATTERN.test(value);
+}
 
 /** Call after the business mutation commits. A display failure must not retry that mutation. */ async function emitResourceCard(card, config) {
     await dispatchCustomEvent(ChatMessageEventTypeEnum.ON_CHAT_EVENT, createResourceCardContent(card), config);
@@ -329,10 +332,9 @@ class RequestContext {
      * server RequestContext. Authentication guards resolve JWTs, API keys and
      * ChatKit client secrets before this check; the bearer is not always a JWT.
      */ static hasPermissions(findPermissions, throwError) {
-        const permissions = this.currentPermissions();
-        if (permissions.length > 0) {
-            const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
-            if (found.length === findPermissions.length) return true;
+        const permissions = new Set(this.currentPermissions());
+        if (permissions.size > 0 && findPermissions.every((permission)=>permissions.has(permission))) {
+            return true;
         }
         if (throwError) {
             throw new HttpException('Unauthorized', HttpStatus.UNAUTHORIZED);
@@ -1112,6 +1114,19 @@ const KnowledgebaseProvisioningRuntimeCapability = createRuntimeCapability('plat
     description: 'Idempotently provision managed platform knowledgebases and connect them to an Agent.'
 });
 
+/** Knowledgebase discovery is scoped to the authenticated runtime, never caller-supplied identities. */ const knowledgebaseActions = [
+    'knowledgebase.read',
+    'knowledgebase.manage',
+    'content.search',
+    'documents.read',
+    'documents.create',
+    'documents.update',
+    'documents.delete',
+    'documents.process',
+    'chunks.write',
+    'chunks.delete'
+];
+
 const KnowledgeGraphRuntimeCapability = createRuntimeCapability('platform.knowledge-graph', {
     description: 'Publish, inspect, and retract source-owned structured knowledge graphs without model extraction.'
 });
@@ -6233,6 +6248,10 @@ function escapeInlineScript(value) {
 
 const VIEW_EXTENSION_CACHE_SERVICE_TOKEN = 'XPERT_PLUGIN_VIEW_EXTENSION_CACHE_SERVICE';
 
+const ViewMiddlewareRuntimeCapability = createRuntimeCapability('platform.view.middleware-runtime', {
+    description: 'Resolve a View capability through its authorized Assistant middleware and scoped runtime.'
+});
+
 /** Platform-owned real-time collaboration capability available to scoped plugin runtimes. */ const CollaborationRuntimeCapability = createRuntimeCapability('platform.collaboration', {
     description: 'Create, synchronize, persist, authorize, and observe platform-managed real-time collaboration documents.'
 });
@@ -10132,4 +10151,4 @@ Reflect.defineMetadata('__command__', {
     id: ImportDefaultAgentPluginsCommand.type
 }, ImportDefaultAgentPluginsCommand);
 
-export { ACCOUNT_BINDING_PERMISSION_SERVICE_TOKEN, AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING, AGENT_CHAT_DISPATCH_MESSAGE_TYPE, AGENT_MIDDLEWARE_STRATEGY, AGENT_RUNTIME_EVENT_MESSAGE_TYPE, AGENT_RUNTIME_STRATEGY, AIModel, AIModelProviderNotFoundException, AIModelProviderRegistry, AIModelProviderStrategy, AI_MODEL_PROVIDER, ASSISTANT_CAPABILITY_PROVIDER, AdapterDataSourceStrategy, AgentExecutionRunnerCapability, AgentExecutionRunnerFactoryCapability, AgentInvocationRuntimeCapability, AgentMiddlewareRegistry, AgentMiddlewareStrategy, AgentRuntimeFactoryCapability, AgentRuntimeRegistry, AgentRuntimeStrategy, AiModelNotFoundException, AssistantCapabilityProvider, AssistantCapabilityProviderRegistry, AssistantTaskRuntimeCapability, BOUND_IDENTITY_LOGIN_PERMISSION_SERVICE_TOKEN, BUILTIN_GLOBAL_SCOPE, BaseHTTPQueryRunner, BaseQueryRunner, BaseSQLQueryRunner, BaseSandbox, BaseStrategyRegistry, BuiltinToolset, CHAT_CHANNEL, CHAT_CHANNEL_TEXT_LIMITS, CLI_MODEL_TOKEN_REFERENCE, COLLABORATION_DOCUMENT_PROVIDER, CONNECTION_COMMAND_ROUTER_TOKEN, CONNECTOR_STRATEGY, CancelConversationCommand, ChatChannel, ChatChannelRegistry, ChatOAICompatReasoningModel, CliModelProfilesCapability, CollaborationDocumentProvider, CollaborationDocumentProviderRegistry, CollaborationRuntimeCapability, CommonParameterRules, ConnectorRuntimeCapability, ConnectorRuntimeFactoryCapability, ConnectorStrategyKey, ConnectorStrategyRegistry, CreateModelClientCommand, CredentialsValidateFailedError, DATASOURCE_STRATEGY, DBCreateTableMode, DBProtocolEnum, DBSyntaxEnum, DBTableAction, DBTableDataAction, DEFAULT_EXECUTION_CONFIG, DEFAULT_SANDBOX_EXECUTION_MAX_OUTPUT_BYTES, DEFAULT_SANDBOX_FILE_OPERATION_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_SEC, DEFAULT_SANDBOX_FILE_SEARCH_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_SEC, DEFAULT_SANDBOX_SHELL_EXECUTION_OPTIONS, DEFAULT_SANDBOX_SHELL_TIMEOUT_MS, DEFAULT_SANDBOX_SHELL_TIMEOUT_SEC, DOCUMENT_SOURCE_STRATEGY, DOCUMENT_TRANSFORMER_STRATEGY, DataSourceStrategy, DataSourceStrategyRegistry, DecoratedAgentMiddlewareStrategy, DecoratedToolsetStrategy, DocumentSourceRegistry, DocumentSourceStrategy, DocumentTransformerRegistry, DocumentTransformerStrategy, EVOLUTION_RUNTIME_SERVICE_TOKEN, EVOLUTION_TARGET_PROVIDER, EvolutionBaselineRuntimeCapability, EvolutionChangeRuntimeCapability, EvolutionRuntimeCapability, EvolutionTargetProviderRegistry, EvolutionTargetProviderStrategy, FILE_STORAGE_PROVIDER, FILE_UPLOAD_TARGET_STRATEGY, FileRuntimeCapability, FileStorageProvider, FileStorageProviderRegistry, FileUploadTargetRegistry, FileUploadTargetStrategy, GLOBAL_ORGANIZATION_SCOPE, HANDOFF_PERMISSION_SERVICE_TOKEN, HANDOFF_PROCESSOR_STRATEGY, HANDOFF_QUEUE_SERVICE_TOKEN, HandoffProcessorRegistry, HandoffProcessorStrategy, IMAGE_UNDERSTANDING_STRATEGY, INTEGRATION_PERMISSION_SERVICE_TOKEN, INTEGRATION_STRATEGY, ImageGenerationModel, ImageUnderstandingRegistry, ImageUnderstandingStrategy, ImportDefaultAgentPluginsCommand, IntegrationStrategyKey, IntegrationStrategyRegistry, JUMP_TO_TARGETS, JsonSchemaValidator, KEYWORD_ANALYZER_STRATEGY, KNOWLEDGE_STRATEGY, KeywordAnalyzerRegistry, KeywordAnalyzerStrategy, KnowledgeDocumentVisualAssetsRuntimeCapability, KnowledgeDocumentVisualAssetsRuntimeFactoryCapability, KnowledgeGraphRuntimeCapability, KnowledgeStrategyKey, KnowledgeStrategyRegistry, KnowledgebaseDocumentsRuntimeCapability, KnowledgebaseProvisioningRuntimeCapability, KnowledgebaseRuntimeCapability, LLMUsage, LargeLanguageModel, MANAGED_CONNECTION_REGISTRY_TOKEN, MANAGED_QUEUE_HANDLER_REGISTRY_TOKEN, MANAGED_QUEUE_SERVICE_TOKEN, MCP_CAPABILITY_CHANGE_EVENT_TYPES, MODEL_OUTPUT_VALIDATION_ERROR_CODE, ModelExecutionEnvironmentCapability, ModelOutputValidationError, ModelProvider, ORGANIZATION_METADATA_KEY, OpenAICompatibleReranker, PERMISSION_OPERATION_METADATA_KEY, PLUGIN_CONFIG_RESOLVER_TOKEN, PLUGIN_JOB_PROCESSOR_METADATA, PLUGIN_METADATA, PLUGIN_METADATA_KEY, PLUGIN_VERSION_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_SERVICE_TOKEN, PROJECT_TASK_PROVIDER, PROJECT_TYPE_PROVIDER, PROVIDE_AI_MODEL_LLM, PROVIDE_AI_MODEL_MODERATION, PROVIDE_AI_MODEL_RERANK, PROVIDE_AI_MODEL_SPEECH2TEXT, PROVIDE_AI_MODEL_TEXT_EMBEDDING, PROVIDE_AI_MODEL_TTS, PluginJobProcessor, PluginWebhookAuth, PluginWebhookAuthGuard, ProjectTaskProvider, ProjectTaskProviderRegistry, ProjectTasksRuntimeCapability, ProjectTypeProvider, ProjectTypeProviderRegistry, RESOURCE_CARD_EVENT, RESOURCE_CARD_PROVIDER, RETRIEVER_STRATEGY, RequestContext, RequestContextMiddleware, RequirePermissionOperation, RerankModel, ResourceCardProvider, ResourceCardProviderRegistry, RetrieverRegistry, RetrieverStrategy, SANDBOX_PROVIDER, SANDBOX_RUNTIME_PROVIDER, SANDBOX_SHELL_TIMEOUT_LIMITS_SEC, SANDBOX_WORKSPACE_MAPPER, SKILL_SOURCE_PROVIDER, SPEECH_TO_TEXT_PERMISSION_SERVICE_TOKEN, SPEECH_TO_TEXT_SERVICE_TOKEN, SSOProviderRegistry, SSOProviderStrategyKey, SSO_BINDING_PERMISSION_SERVICE_TOKEN, SSO_PROVIDER, STRATEGY_META_KEY, SYSTEM_GLOBAL_SCOPE, SandboxProviderRegistry, SandboxProviderStrategy, SandboxRuntimeProviderRegistry, SandboxRuntimeProviderStrategy, SandboxWorkspaceMapperRegistry, SandboxWorkspaceMapperStrategy, ShellModelExecutionSourceCapability, SkillSourceProviderRegistry, SkillSourceProviderStrategy, Speech2TextChatModel, SpeechToTextModel, StrategyBus, TENANT_GLOBAL_SCOPE_PREFIX, TENANT_GLOBAL_SCOPE_SUFFIX, TEXT_SPLITTER_STRATEGY, TOOLSET_STRATEGY, TextEmbeddingModelManager, TextSplitterRegistry, TextSplitterStrategy, TextToSpeechModel, ToolsetRegistry, ToolsetStrategy, USER_PERMISSION_SERVICE_TOKEN, VECTOR_STORE_STRATEGY, VIDEO_GENERATION_PERMISSION_SERVICE_TOKEN, VIDEO_GENERATION_SERVICE_TOKEN, VIDEO_GENERATOR_FAMILIES, VIEW_EXTENSION_CACHE_SERVICE_TOKEN, VIEW_EXTENSION_PROVIDER, VectorStoreRegistry, VectorStoreStrategy, VideoGenerationModel, ViewExtensionProvider, ViewExtensionProviderRegistry, WORKFLOW_NODE_STRATEGY, WORKFLOW_TRIGGER_STRATEGY, WorkflowNodeRegistry, WorkflowNodeStrategy, WorkflowTriggerRegistry, WorkflowTriggerStrategy, WorkspaceFilesRuntimeCapability, WrapWorkflowNodeExecutionCommand, XPERT_AGENT_MIDDLEWARE_RUNTIME_TOKEN, XPERT_TOOL_METHOD_METADATA, XPERT_TOOL_PROVIDER, XPERT_TOOL_PROVIDER_METADATA, XPERT_TOOL_RESULT_FORMAT_VERSION, XpFileSystem, XpertPrompt, XpertResource, XpertResourceTemplate, XpertServerPlugin, XpertTool, XpertToolProvider, XpertToolProviderCoordinator, XpertToolProviderRegistry, agentInvocationDispatchContextSchema, agentRuntimeConsumptionStateSchema, agentRuntimeDeliveryStateSchema, agentRuntimeEventMessageId, agentRuntimeEventSchema, agentRuntimeReplyTargetSchema, agentRuntimeResultClaimSchema, agentRuntimeResultConsumptionKey, als, appendSandboxMessage, assertConnectorDefinition, buildSandboxTimeoutMessage, calcTokenUsage, calculateLLMUsagePrice, calculateModelPrice, calculateModelUsageCharge, chunkText, countTextTokens, countTokensSafe, createI18nInstance, createPluginLogger, createRuntimeCapability, defineAgentMessageType, defineChannelMessageType, defineMcpApp, defineMcpCapabilities, defineMcpPrompt, defineMcpResource, defineMcpResourceTemplate, defineXpertTool, derivePluginArtifactNamespace, describeXpertToolProvider, downloadRemoteFile, emitResourceCard, formatSandboxTimeout, getDefaultTenantId, getErrorMessage, getModelContextSize, getPermissionOperationMetadata, getPositionList, getPositionMap, getRequestContext, getRequiredPermissionOperation, getTenantGlobalScopeKey, getXpertToolMethod, isAgentInvocationTerminal, isDevelopmentSandboxRuntimeEnvironment, isModelOutputValidationError, isModelUsagePricingConfig, isRemoteFile, isSandboxBackend, isSandboxManagedServiceAdapter, isSandboxServiceProxyAdapter, isSandboxTerminalAdapter, isStrategyInstance, isStructuredMessageType, isTenantGlobalScopeKey, loadYamlFile, mergeCredentials, mergeModelRequirements, mergeParentChildChunks, nativeModelTransport, normalizeContextSize, normalizeTokenUsage, pluginArtifactTableName, prepareToolResult, processAsyncAIGCManagedJob, renderRemoteModuleIframeHtml, renderRemoteReactIframeHtml, renderRemoteVueIframeHtml, resolveModelUsagePricingSnapshot, resolveSandboxBackend, resolveSandboxExecutionOptions, resolveSandboxManagedServiceAdapter, resolveSandboxServiceProxyAdapter, resolveSandboxTerminalAdapter, resolveStrategyMetadataTarget, resolveTenantGlobalScopeKey, resolveTokenUsage, resolveTokenUsageCandidates, resolveXpertMcpExtensions, runWithRequestContext, runtimeToolProviderComponent, secondsToMilliseconds, setDefaultTenantId, sumTokenUsage, taskWaitReason, textTokenBoundaries };
+export { ACCOUNT_BINDING_PERMISSION_SERVICE_TOKEN, AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING, AGENT_CHAT_DISPATCH_MESSAGE_TYPE, AGENT_MIDDLEWARE_STRATEGY, AGENT_RUNTIME_EVENT_MESSAGE_TYPE, AGENT_RUNTIME_STRATEGY, AIModel, AIModelProviderNotFoundException, AIModelProviderRegistry, AIModelProviderStrategy, AI_MODEL_PROVIDER, ASSISTANT_CAPABILITY_PROVIDER, AdapterDataSourceStrategy, AgentExecutionRunnerCapability, AgentExecutionRunnerFactoryCapability, AgentInvocationRuntimeCapability, AgentMiddlewareRegistry, AgentMiddlewareStrategy, AgentRuntimeFactoryCapability, AgentRuntimeRegistry, AgentRuntimeStrategy, AiModelNotFoundException, AssistantCapabilityProvider, AssistantCapabilityProviderRegistry, AssistantTaskRuntimeCapability, BOUND_IDENTITY_LOGIN_PERMISSION_SERVICE_TOKEN, BUILTIN_GLOBAL_SCOPE, BaseHTTPQueryRunner, BaseQueryRunner, BaseSQLQueryRunner, BaseSandbox, BaseStrategyRegistry, BuiltinToolset, CHAT_CHANNEL, CHAT_CHANNEL_TEXT_LIMITS, CLI_MODEL_TOKEN_REFERENCE, COLLABORATION_DOCUMENT_PROVIDER, CONNECTION_COMMAND_ROUTER_TOKEN, CONNECTOR_STRATEGY, CancelConversationCommand, ChatChannel, ChatChannelRegistry, ChatOAICompatReasoningModel, CliModelProfilesCapability, CollaborationDocumentProvider, CollaborationDocumentProviderRegistry, CollaborationRuntimeCapability, CommonParameterRules, ConnectorRuntimeCapability, ConnectorRuntimeFactoryCapability, ConnectorStrategyKey, ConnectorStrategyRegistry, CreateModelClientCommand, CredentialsValidateFailedError, DATASOURCE_STRATEGY, DBCreateTableMode, DBProtocolEnum, DBSyntaxEnum, DBTableAction, DBTableDataAction, DEFAULT_EXECUTION_CONFIG, DEFAULT_SANDBOX_EXECUTION_MAX_OUTPUT_BYTES, DEFAULT_SANDBOX_FILE_OPERATION_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_SEC, DEFAULT_SANDBOX_FILE_SEARCH_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_SEC, DEFAULT_SANDBOX_SHELL_EXECUTION_OPTIONS, DEFAULT_SANDBOX_SHELL_TIMEOUT_MS, DEFAULT_SANDBOX_SHELL_TIMEOUT_SEC, DOCUMENT_SOURCE_STRATEGY, DOCUMENT_TRANSFORMER_STRATEGY, DataSourceStrategy, DataSourceStrategyRegistry, DecoratedAgentMiddlewareStrategy, DecoratedToolsetStrategy, DocumentSourceRegistry, DocumentSourceStrategy, DocumentTransformerRegistry, DocumentTransformerStrategy, EVOLUTION_RUNTIME_SERVICE_TOKEN, EVOLUTION_TARGET_PROVIDER, EvolutionBaselineRuntimeCapability, EvolutionChangeRuntimeCapability, EvolutionRuntimeCapability, EvolutionTargetProviderRegistry, EvolutionTargetProviderStrategy, FILE_STORAGE_PROVIDER, FILE_UPLOAD_TARGET_STRATEGY, FileRuntimeCapability, FileStorageProvider, FileStorageProviderRegistry, FileUploadTargetRegistry, FileUploadTargetStrategy, GLOBAL_ORGANIZATION_SCOPE, HANDOFF_PERMISSION_SERVICE_TOKEN, HANDOFF_PROCESSOR_STRATEGY, HANDOFF_QUEUE_SERVICE_TOKEN, HandoffProcessorRegistry, HandoffProcessorStrategy, IMAGE_UNDERSTANDING_STRATEGY, INTEGRATION_PERMISSION_SERVICE_TOKEN, INTEGRATION_STRATEGY, ImageGenerationModel, ImageUnderstandingRegistry, ImageUnderstandingStrategy, ImportDefaultAgentPluginsCommand, IntegrationStrategyKey, IntegrationStrategyRegistry, JUMP_TO_TARGETS, JsonSchemaValidator, KEYWORD_ANALYZER_STRATEGY, KNOWLEDGE_STRATEGY, KeywordAnalyzerRegistry, KeywordAnalyzerStrategy, KnowledgeDocumentVisualAssetsRuntimeCapability, KnowledgeDocumentVisualAssetsRuntimeFactoryCapability, KnowledgeGraphRuntimeCapability, KnowledgeStrategyKey, KnowledgeStrategyRegistry, KnowledgebaseDocumentsRuntimeCapability, KnowledgebaseProvisioningRuntimeCapability, KnowledgebaseRuntimeCapability, LLMUsage, LargeLanguageModel, MANAGED_CONNECTION_REGISTRY_TOKEN, MANAGED_QUEUE_HANDLER_REGISTRY_TOKEN, MANAGED_QUEUE_SERVICE_TOKEN, MCP_CAPABILITY_CHANGE_EVENT_TYPES, MODEL_OUTPUT_VALIDATION_ERROR_CODE, ModelExecutionEnvironmentCapability, ModelOutputValidationError, ModelProvider, ORGANIZATION_METADATA_KEY, OpenAICompatibleReranker, PERMISSION_OPERATION_METADATA_KEY, PLUGIN_CONFIG_RESOLVER_TOKEN, PLUGIN_JOB_PROCESSOR_METADATA, PLUGIN_METADATA, PLUGIN_METADATA_KEY, PLUGIN_VERSION_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_SERVICE_TOKEN, PROJECT_TASK_PROVIDER, PROJECT_TYPE_PROVIDER, PROVIDE_AI_MODEL_LLM, PROVIDE_AI_MODEL_MODERATION, PROVIDE_AI_MODEL_RERANK, PROVIDE_AI_MODEL_SPEECH2TEXT, PROVIDE_AI_MODEL_TEXT_EMBEDDING, PROVIDE_AI_MODEL_TTS, PluginJobProcessor, PluginWebhookAuth, PluginWebhookAuthGuard, ProjectTaskProvider, ProjectTaskProviderRegistry, ProjectTasksRuntimeCapability, ProjectTypeProvider, ProjectTypeProviderRegistry, RESOURCE_CARD_EVENT, RESOURCE_CARD_PROVIDER, RETRIEVER_STRATEGY, RequestContext, RequestContextMiddleware, RequirePermissionOperation, RerankModel, ResourceCardProvider, ResourceCardProviderRegistry, RetrieverRegistry, RetrieverStrategy, SANDBOX_PROVIDER, SANDBOX_RUNTIME_PROVIDER, SANDBOX_SHELL_TIMEOUT_LIMITS_SEC, SANDBOX_WORKSPACE_MAPPER, SKILL_SOURCE_PROVIDER, SPEECH_TO_TEXT_PERMISSION_SERVICE_TOKEN, SPEECH_TO_TEXT_SERVICE_TOKEN, SSOProviderRegistry, SSOProviderStrategyKey, SSO_BINDING_PERMISSION_SERVICE_TOKEN, SSO_PROVIDER, STRATEGY_META_KEY, SYSTEM_GLOBAL_SCOPE, SandboxProviderRegistry, SandboxProviderStrategy, SandboxRuntimeProviderRegistry, SandboxRuntimeProviderStrategy, SandboxWorkspaceMapperRegistry, SandboxWorkspaceMapperStrategy, ShellModelExecutionSourceCapability, SkillSourceProviderRegistry, SkillSourceProviderStrategy, Speech2TextChatModel, SpeechToTextModel, StrategyBus, TENANT_GLOBAL_SCOPE_PREFIX, TENANT_GLOBAL_SCOPE_SUFFIX, TEXT_SPLITTER_STRATEGY, TOOLSET_STRATEGY, TextEmbeddingModelManager, TextSplitterRegistry, TextSplitterStrategy, TextToSpeechModel, ToolsetRegistry, ToolsetStrategy, USER_PERMISSION_SERVICE_TOKEN, VECTOR_STORE_STRATEGY, VIDEO_GENERATION_PERMISSION_SERVICE_TOKEN, VIDEO_GENERATION_SERVICE_TOKEN, VIDEO_GENERATOR_FAMILIES, VIEW_EXTENSION_CACHE_SERVICE_TOKEN, VIEW_EXTENSION_PROVIDER, VectorStoreRegistry, VectorStoreStrategy, VideoGenerationModel, ViewExtensionProvider, ViewExtensionProviderRegistry, ViewMiddlewareRuntimeCapability, WORKFLOW_NODE_STRATEGY, WORKFLOW_TRIGGER_STRATEGY, WorkflowNodeRegistry, WorkflowNodeStrategy, WorkflowTriggerRegistry, WorkflowTriggerStrategy, WorkspaceFilesRuntimeCapability, WrapWorkflowNodeExecutionCommand, XPERT_AGENT_MIDDLEWARE_RUNTIME_TOKEN, XPERT_TOOL_METHOD_METADATA, XPERT_TOOL_PROVIDER, XPERT_TOOL_PROVIDER_METADATA, XPERT_TOOL_RESULT_FORMAT_VERSION, XpFileSystem, XpertPrompt, XpertResource, XpertResourceTemplate, XpertServerPlugin, XpertTool, XpertToolProvider, XpertToolProviderCoordinator, XpertToolProviderRegistry, agentInvocationDispatchContextSchema, agentRuntimeConsumptionStateSchema, agentRuntimeDeliveryStateSchema, agentRuntimeEventMessageId, agentRuntimeEventSchema, agentRuntimeReplyTargetSchema, agentRuntimeResultClaimSchema, agentRuntimeResultConsumptionKey, als, appendSandboxMessage, assertConnectorDefinition, buildSandboxTimeoutMessage, calcTokenUsage, calculateLLMUsagePrice, calculateModelPrice, calculateModelUsageCharge, chunkText, countTextTokens, countTokensSafe, createI18nInstance, createPluginLogger, createRuntimeCapability, defineAgentMessageType, defineChannelMessageType, defineMcpApp, defineMcpCapabilities, defineMcpPrompt, defineMcpResource, defineMcpResourceTemplate, defineXpertTool, derivePluginArtifactNamespace, describeXpertToolProvider, downloadRemoteFile, emitResourceCard, formatSandboxTimeout, getDefaultTenantId, getErrorMessage, getModelContextSize, getPermissionOperationMetadata, getPositionList, getPositionMap, getRequestContext, getRequiredPermissionOperation, getTenantGlobalScopeKey, getXpertToolMethod, isAgentInvocationTerminal, isDevelopmentSandboxRuntimeEnvironment, isModelOutputValidationError, isModelUsagePricingConfig, isPluginArtifactNamespace, isRemoteFile, isSandboxBackend, isSandboxManagedServiceAdapter, isSandboxServiceProxyAdapter, isSandboxTerminalAdapter, isStrategyInstance, isStructuredMessageType, isTenantGlobalScopeKey, knowledgebaseActions, loadYamlFile, mergeCredentials, mergeModelRequirements, mergeParentChildChunks, nativeModelTransport, normalizeContextSize, normalizeTokenUsage, pluginArtifactTableName, prepareToolResult, processAsyncAIGCManagedJob, renderRemoteModuleIframeHtml, renderRemoteReactIframeHtml, renderRemoteVueIframeHtml, resolveModelUsagePricingSnapshot, resolveSandboxBackend, resolveSandboxExecutionOptions, resolveSandboxManagedServiceAdapter, resolveSandboxServiceProxyAdapter, resolveSandboxTerminalAdapter, resolveStrategyMetadataTarget, resolveTenantGlobalScopeKey, resolveTokenUsage, resolveTokenUsageCandidates, resolveXpertMcpExtensions, runWithRequestContext, runtimeToolProviderComponent, secondsToMilliseconds, setDefaultTenantId, sumTokenUsage, taskWaitReason, textTokenBoundaries };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xpert-ai/plugin-sdk",
-  "version": "3.21.0",
+  "version": "3.22.0",
   "license": "AGPL-3.0",
   "repository": {
     "type": "git",
@@ -62,7 +62,7 @@
   },
   "dependencies": {
     "@langchain/openai": "0.6.9",
-    "@xpert-ai/contracts": "3.21.0",
+    "@xpert-ai/contracts": "3.21.1",
     "express": "^4.22.1",
     "js-tiktoken": "^1.0.21"
   },

package/src/lib/artifact-namespace.d.ts

@@ -8,3 +8,4 @@ export declare function derivePluginArtifactNamespace(packageName: string): stri
  * Keep table keys stable; the returned name is part of the plugin data contract.
  */
 export declare function pluginArtifactTableName(namespace: string, tableKey: string): string;
+export declare function isPluginArtifactNamespace(value: unknown): value is string;

package/src/lib/connector/runtime-capability.d.ts

@@ -3,6 +3,11 @@ import type { ConnectorRuntimeApi } from './strategy.interface';
 export declare const ConnectorRuntimeCapability: import("../core").RuntimeCapabilityKey<ConnectorRuntimeApi>;
 /** No binding or provider grants means no connector access. */
 export type ConnectorRuntimeScope = RuntimeIdentityScope & {
+    /** Server-owned View host identity, set only after the host authorizes the Assistant and its graph. */
+    viewHost?: {
+        type: 'agent';
+        id: string;
+    };
     /** Host-validated Agent Plugin dependencies may use their workspace binding in an authorized project. */
     allowWorkspaceBindingsInProject?: boolean;
     /** Host-selected bindings, including IDs pinned by enabled graph Connector nodes. */

package/src/lib/rag/capability/index.d.ts

@@ -1,4 +1,5 @@
 export * from './knowledgebase';
+export * from './knowledgebase-catalog';
 export * from './knowledge-graph';
 export * from './knowledgebase-documents';
 export * from './knowledge-upload-sessions';

package/src/lib/rag/capability/knowledgebase-catalog.d.ts

@@ -0,0 +1,78 @@
+/** Knowledgebase discovery is scoped to the authenticated runtime, never caller-supplied identities. */
+export declare const knowledgebaseActions: readonly ["knowledgebase.read", "knowledgebase.manage", "content.search", "documents.read", "documents.create", "documents.update", "documents.delete", "documents.process", "chunks.write", "chunks.delete"];
+export type KnowledgebaseAction = (typeof knowledgebaseActions)[number];
+export type KnowledgebaseQuery = {
+    scope: {
+        kind: 'workspace';
+        workspaceId: string;
+        relation: 'owned' | 'available';
+    } | {
+        kind: 'organization';
+    } | {
+        kind: 'tenant';
+    };
+    filter?: {
+        /** Literal name/description substring, not content retrieval. */
+        text?: string;
+        visibility?: 'private' | 'organization' | 'public';
+        applicationTags?: {
+            allOf: string[];
+        };
+        publication?: 'published' | 'unpublished';
+    };
+    access?: {
+        requireAll: KnowledgebaseAction[];
+    };
+    page?: {
+        limit?: number;
+        cursor?: string;
+    };
+};
+export type KnowledgebaseSummary = {
+    id: string;
+    name: string;
+    description: string | null;
+    workspaceId: string | null;
+    visibility: 'private' | 'organization' | 'public';
+    applicationTags: string[];
+    type: string | null;
+    status: string | null;
+    published: boolean;
+    documentNum: number;
+    chunkNum: number;
+};
+export type KnowledgebasePage = {
+    items: KnowledgebaseSummary[];
+    /** Follow even when items is empty; authorization is re-evaluated on every page. */
+    nextCursor: string | null;
+};
+export type KnowledgebaseDetail = KnowledgebaseSummary & {
+    capabilities: {
+        documentIngestion: boolean;
+    };
+    configuration: {
+        embeddingConfigured: boolean;
+    };
+    processing: {
+        blocked: boolean;
+        reason: 'rebuilding' | 'embedding_not_configured' | 'unsupported_type' | null;
+    };
+};
+export type KnowledgebaseGetInput = {
+    knowledgebaseId: string;
+};
+export type KnowledgebaseAccessInput = {
+    knowledgebaseIds: string[];
+    actions: KnowledgebaseAction[];
+};
+export type KnowledgebaseAccessResult = {
+    items: Array<{
+        knowledgebaseId: string;
+        /** Missing and inaccessible resources have the same unavailable result. */
+        status: 'available' | 'unavailable';
+        actions: Array<{
+            action: KnowledgebaseAction;
+            allowed: boolean;
+        }>;
+    }>;
+};

package/src/lib/rag/capability/knowledgebase.d.ts

@@ -1,4 +1,5 @@
 import { JSONValue, KnowledgeFilterDiagnostics, KnowledgeFilterNode } from '@xpert-ai/contracts';
+import type { KnowledgebaseQuery, KnowledgebasePage, KnowledgebaseGetInput, KnowledgebaseDetail, KnowledgebaseAccessInput, KnowledgebaseAccessResult } from './knowledgebase-catalog';
 export type KnowledgebaseRetrievalMode = 'vector' | 'keyword' | 'graph' | 'hybrid';
 export type KnowledgebaseMetadata = Record<string, JSONValue>;
 export type KnowledgebaseRetrievalSettings = {
@@ -176,14 +177,78 @@ export type KnowledgebaseConnectAgentResult = {
     knowledgebaseIds: string[];
     addedKnowledgebaseIds: string[];
 };
+/**
+ * Set up application-managed libraries and Agent connections using trusted configuration.
+ * Use during installation/configuration; use KnowledgebaseApi for runtime discovery and
+ * retrieval, and the document capability for ingestion. Provisioning retains host access checks.
+ */
 export interface KnowledgebaseProvisioningApi {
+    /**
+     * Reconcile declared libraries by stable namespace/key, creating missing resources
+     * and updating managed settings. Preserve keys across retries to avoid duplicate libraries.
+     * Tenant provisioning requires an administrator already in tenant scope.
+     */
     ensure(input: KnowledgebaseEnsureInput): Promise<KnowledgebaseEnsureResult>;
+    /**
+     * Connect selected libraries and optional retrieval policies to an existing Agent.
+     * Existing connections are retained; repeated connections are not duplicated.
+     * Supply Agent/workspace identity from trusted configuration; binding does not grant access.
+     */
     connectAgent(input: KnowledgebaseConnectAgentInput): Promise<KnowledgebaseConnectAgentResult>;
 }
+/**
+ * Discover knowledgebase resources and consume indexed knowledge through the host runtime.
+ * Keep resource discovery (query), readiness (get), permissions (getAccess) and content
+ * retrieval (search) separate. Use the document capability for ingestion/lifecycle,
+ * and the provisioning capability for managed setup and Agent connections.
+ * Catalog methods use trusted request context; permission checks never authorize later
+ * writes. Feature-detect optional methods on older hosts and require an upgrade if needed.
+ */
 export interface KnowledgebaseApi {
+    /**
+     * Legacy discovery; preserves existing scope, shared-library semantics and array results.
+     * @deprecated Use query for new integrations. Migrate scope and pagination explicitly;
+     * a readable result does not establish write permission.
+     */
     list(input: KnowledgebaseListInput): Promise<KnowledgebaseListItem[]>;
+    /**
+     * Discover resources by scope, metadata and required actions. Use workspace/owned
+     * for destinations belonging to that workspace; use search for indexed content.
+     * Follow nextCursor until null, even after empty pages. Cursors bind query/context,
+     * not a snapshot or permission grant; every page rechecks access.
+     */
+    query?(input: KnowledgebaseQuery): Promise<KnowledgebasePage>;
+    /**
+     * Read safe resource metadata, ingestion capability and processing readiness.
+     * Combine with getAccess before costly work: readiness and permission are independent,
+     * and a configured model binding does not guarantee provider health.
+     * Missing and unreadable resources produce the same unavailable error.
+     */
+    get?(input: KnowledgebaseGetInput): Promise<KnowledgebaseDetail>;
+    /**
+     * Inspect current action permissions for known IDs; use query to discover candidates.
+     * Missing and inaccessible IDs both return unavailable with denied actions.
+     * Recheck after long-running work and retain authorization on actual mutations.
+     */
+    getAccess?(input: KnowledgebaseAccessInput): Promise<KnowledgebaseAccessResult>;
+    /**
+     * Retrieve indexed content from selected libraries using retrieval modes and filters.
+     * Preserve metadata for citations/provenance and use diagnostics to explain filtering.
+     * Derive legacy identity overrides from trusted context, never model-authored input.
+     */
     search(input: KnowledgebaseSearchInput): Promise<KnowledgebaseSearchResult>;
+    /**
+     * Write a small Agent-managed knowledge item into a connected library. Stable writeKey
+     * values allow replay detection; existing writes are skipped, not replaced. Use a stable
+     * document key for an independent projection. Use the document capability for file
+     * ingestion and durable processing, and trusted configuration for Agent bindings.
+     */
     writeChunk(input: KnowledgebaseWriteChunkInput): Promise<KnowledgebaseWriteChunkResult>;
+    /**
+     * Remove Agent-managed writes by exact keys or a narrow application prefix.
+     * Match documentKey to the write target; optionally remove its empty managed document.
+     * A missing target is a no-op. Use the document capability for ordinary document deletion.
+     */
     deleteChunks(input: KnowledgebaseDeleteChunksInput): Promise<KnowledgebaseDeleteChunksResult>;
 }
 export declare const KnowledgebaseRuntimeCapability: import("../../core/runtime-capability").RuntimeCapabilityKey<KnowledgebaseApi>;

package/src/lib/runtime/capabilities/index.d.ts

@@ -1,6 +1,7 @@
 export * from './actor-token';
 export * from './artifacts';
 export * from './workspace-files';
+export * from './workspace-storage';
 export * from './sandbox-jobs';
 export * from './project-provisioning';
 export * from './project-access';

package/src/lib/runtime/capabilities/workspace-files.d.ts

@@ -1,3 +1,4 @@
+import type { WorkspaceAppDataOptions, WorkspaceStorage } from './workspace-storage';
 /** Logical workspace volume catalog supported by plugin-facing file APIs. */
 export type WorkspaceFileCatalog = 'projects' | 'users' | 'knowledges' | 'skills' | 'xperts' | 'user-xperts';
 /** Stable source identifier for portable workspace file references. */
@@ -232,6 +233,9 @@ export type WorkspaceSearchUnderstandingChunksInput = WorkspaceFileScope & {
  * understanding files in Xpert workspace Volumes.
  */
 export interface WorkspaceFilesApi {
+    /** Managed .apps data in the bound Assistant workspace. Each operation reauthorizes the actor.
+     * Ordinary Files/sandbox access cannot access this namespace. Requires a scoped runtime API. */
+    appData(options: WorkspaceAppDataOptions): WorkspaceStorage;
     /** Host-bound storage identity for restoring the same scope in durable jobs. */
     readonly scope?: Readonly<WorkspaceFileScope>;
     /** Upload raw bytes into an explicitly scoped workspace Volume. */

package/src/lib/runtime/capabilities/workspace-storage.d.ts

@@ -0,0 +1,22 @@
+/** Durable application state inside an authorized Assistant workspace.
+ * Paths and lock keys are canonical relative paths: no empty, dot or .locks segments.
+ * Handles stay bound to their first authorized volume; recreate them after a workspace policy change. */
+export interface WorkspaceStorage {
+    read(path: string): Promise<Buffer>;
+    write(path: string, content: string | Uint8Array): Promise<void>;
+    mkdir(path: string): Promise<void>;
+    list(path: string): Promise<string[]>;
+    remove(path: string): Promise<void>;
+    /** Shared-filesystem mutex renewed by confirmed heartbeats. Lock loss rejects subsequent
+     * app-data and ordinary Volume mutations in the callback, including detached work. */
+    withLock<T>(key: string, action: () => Promise<T>, options?: {
+        waitMs?: number;
+    }): Promise<T>;
+}
+/** Host resolves the namespace from this loaded plugin's metadata, never from a filesystem path.
+ * Native plugins are trusted server code; this handle is not a sandbox for malicious plugin code. */
+export interface WorkspaceAppDataOptions {
+    pluginName: string;
+    /** Opt in for personal data; shared Assistant workspaces otherwise remain supported. */
+    requireUserIsolation?: boolean;
+}

package/src/lib/view-extension/index.d.ts

@@ -3,4 +3,5 @@ export * from './provider.interface';
 export * from './provider.registry';
 export * from './remote-component-html';
 export * from './tokens';
+export * from './middleware-runtime';
 export { ASSISTANT_CHAT_SEND_MESSAGE_COMMAND, ASSISTANT_CONTEXT_SET_COMMAND } from '@xpert-ai/contracts';

package/src/lib/view-extension/middleware-runtime.d.ts

@@ -0,0 +1,20 @@
+import type { IWFNMiddleware, XpertResolvedViewHostContext } from '@xpert-ai/contracts';
+import type { IAgentMiddlewareContext } from '../agent/middleware/strategy.interface';
+/** Server-only input: use the authorized context received by a View provider, never iframe input. */
+export interface ViewMiddlewareRuntimeInput {
+    context: XpertResolvedViewHostContext;
+    provider: string;
+    requiredFeature: string;
+    /** Authoring requires the same draft access policy as the Agent View host. Defaults to published. */
+    isDraft?: boolean;
+}
+/** Contains trusted configuration and callable capabilities. Never serialize this result to a Remote View. */
+export interface ViewMiddlewareRuntimeResult {
+    options: IWFNMiddleware['options'];
+    context: IAgentMiddlewareContext;
+}
+export interface ViewMiddlewareRuntimeResolver {
+    /** Revalidates identity, host access, the exact connected middleware and its Feature on every call. */
+    resolve(input: ViewMiddlewareRuntimeInput): Promise<ViewMiddlewareRuntimeResult>;
+}
+export declare const ViewMiddlewareRuntimeCapability: import("../core/runtime-capability").RuntimeCapabilityKey<ViewMiddlewareRuntimeResolver>;

package/PERMISSIONS.md

@@ -1,181 +0,0 @@
-# 插件权限设计指南
-
-:::tip
-在 meta 中设计一套可以向核心系统反向请求 大模型 调用权限的（如请求一个 OpenAI Client实例）的配置，例如在 meta中声明大模型的权限请求，在 configSchema 中设计属性让用户配置具体的模型提供商和模型名称，核心系统在识别到权限请求时会根据 config 中用户配置的具体参数实例化大模型 Client 通过 config 传入到 understandImages 这个方法：
-:::
-
-👌明白了，你希望 **在插件 Strategy 的 meta 中声明依赖的大模型权限请求**，核心系统解析后根据用户配置（模型提供商 + 模型名称 + 其他参数）自动注入一个 `client` 到 `config`，这样插件不用自己创建 OpenAI / Anthropic / 其他 VLM 客户端。
-
-我帮你重新设计 `OpenAIGPT4VStrategy` 的 meta 和 configSchema，使它能 **反向请求核心系统提供的 Client**。
-
----
-
-## 新版 Strategy
-
-```ts
-import { Injectable } from '@nestjs/common';
-import { Document } from 'langchain/document';
-import {
-  ImageUnderstandingStrategy,
-  IImageUnderstandingStrategy,
-  TImageUnderstandingFile,
-  TImageUnderstandingResult
-} from './strategy.interface';
-
-@Injectable()
-@ImageUnderstandingStrategy('openai-gpt4v')
-export class OpenAIGPT4VStrategy implements IImageUnderstandingStrategy<any> {
-  readonly meta = {
-    name: 'openai-gpt4v',
-    label: { en: 'OpenAI GPT-4 Vision', zh: 'OpenAI GPT-4 图像理解' },
-
-    /**
-     * 权限声明：告诉核心系统，这个插件需要一个 "llm" 权限，
-     * 提供方是 openai，能力是 vision。
-     * 核心系统识别后会根据 config.provider + config.model 实例化对应的 Client，
-     * 并注入到 config.client
-     */
-    permissions: [
-      {
-        type: 'llm',
-        provider: 'openai',
-        capability: 'vision',
-      },
-    ],
-
-    /**
-     * 配置 schema，用户需要填写 provider 和 model，
-     * 核心系统会根据 provider + model + 用户账号 API Key，
-     * 实例化好 Client 注入。
-     */
-    configSchema: {
-      type: 'object',
-      properties: {
-        provider: { 
-          type: 'string', 
-          enum: ['openai'], 
-          description: '模型提供商' 
-        },
-        model: { 
-          type: 'string', 
-          default: 'gpt-4-vision-preview', 
-          description: '大模型名称' 
-        },
-        prompt: { 
-          type: 'string', 
-          default: 'Describe this image in detail.', 
-          description: '提示词（可以自定义理解任务）' 
-        }
-      },
-      required: ['provider', 'model']
-    },
-
-    icon: {
-      svg: '<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 20 20"><circle cx="10" cy="10" r="8" stroke="black" fill="none"/><text x="6" y="14">VLM</text></svg>',
-      color: '#10a37f'
-    }
-  };
-
-  async validateConfig(config: any): Promise<void> {
-    if (!config.client) {
-      throw new Error('Missing injected LLM client in config. Core system must inject client.');
-    }
-  }
-
-  async understandImages(
-    files: TImageUnderstandingFile[],
-    config: any
-  ): Promise<TImageUnderstandingResult[]> {
-    const client = config.client; // ✅ 已由核心系统注入
-    const results: TImageUnderstandingResult[] = [];
-
-    for (const file of files) {
-      const description = await this.runGPT4V(client, file.path, config);
-
-      const doc = new Document({
-        pageContent: description,
-        metadata: {
-          chunkId: `img-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
-          parentChunkId: file.parentChunkId,
-          imagePath: file.path,
-          source: file.filename,
-          type: 'vlm',
-          engine: config.model
-        }
-      });
-
-      results.push({
-        docs: [doc],
-        metadata: { engine: config.model, file: file.filename }
-      });
-    }
-
-    return results;
-  }
-
-  private async runGPT4V(client: any, imagePath: string, config: any): Promise<string> {
-    // client 已经是 openai client，由核心系统实例化
-    const response = await client.chat.completions.create({
-      model: config.model,
-      messages: [
-        {
-          role: 'user',
-          content: [
-            { type: 'text', text: config.prompt || 'Describe this image in detail.' },
-            { type: 'image_url', image_url: { url: imagePath } }
-          ]
-        }
-      ],
-      max_tokens: 500
-    });
-
-    return response.choices[0]?.message?.content || '';
-  }
-}
-```
-
----
-
-## 🔑 核心系统如何处理
-
-* 解析插件的 `meta.permissions`，发现需要：
-
-  ```json
-  { "type": "llm", "provider": "openai", "capability": "vision" }
-  ```
-* 根据用户 `config.provider = "openai"`, `config.model = "gpt-4-vision-preview"`
-  实例化 `OpenAI({ apiKey: userApiKey })`
-* 将 client 注入到 `config.client`
-* 调用 `strategy.understandImages(files, config)`
-
----
-
-## 📌 使用示例
-
-```ts
-const strategy = this.imageUnderstandingRegistry.get('openai-gpt4v');
-const result = await strategy.understandImages(
-  [
-    { 
-      path: 'https://example.com/chart.png', 
-      filename: 'chart.png', 
-      extname: 'png', 
-      parentChunkId: 'uuid-123' 
-    }
-  ],
-  { 
-    provider: 'openai',
-    model: 'gpt-4-vision-preview',
-    prompt: '请用中文详细描述这张图片。',
-    client: openaiClient // ✅ 核心系统注入
-  }
-);
-
-console.log(result[0].docs[0].pageContent);
-```
-
----
-
-这样插件本身不依赖任何 `openai` 包装逻辑，**只声明权限 + 要求 provider/model**，核心系统就能注入合适的 client。
-
-要不要我帮你写一个 **抽象的权限声明接口 (例如 ILLMPermissionRequest)**，这样 OCR/VLM/Embedding 插件都可以统一声明依赖？