@xpert-ai/plugin-sdk 3.21.1 → 3.22.1

package/index.cjs.js

@@ -35,6 +35,7 @@ var env = require('@langchain/core/utils/env');
 var modelProviderHttpClient = require('./model-provider-http-client.cjs.js');
 var jsTiktoken = require('js-tiktoken');
 var base$1 = require('@langchain/core/language_models/base');
+var zod = require('zod');
 var v3 = require('zod/v3');
 var results = require('./results.cjs.js');
 var connector = require('./connector.cjs.js');
@@ -124,6 +125,9 @@ function assertPluginArtifactNamePart(value, label) {
         throw new Error(`${label} must contain only lowercase letters, numbers, and underscores`);
     }
 }
+function isPluginArtifactNamespace(value) {
+    return typeof value === 'string' && ARTIFACT_NAMESPACE_PATTERN.test(value);
+}
 
 /** Call after the business mutation commits. A display failure must not retry that mutation. */ async function emitResourceCard(card, config) {
     await dispatch.dispatchCustomEvent(contracts.ChatMessageEventTypeEnum.ON_CHAT_EVENT, contracts.createResourceCardContent(card), config);
@@ -347,10 +351,9 @@ class RequestContext {
      * server RequestContext. Authentication guards resolve JWTs, API keys and
      * ChatKit client secrets before this check; the bearer is not always a JWT.
      */ static hasPermissions(findPermissions, throwError) {
-        const permissions = this.currentPermissions();
-        if (permissions.length > 0) {
-            const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
-            if (found.length === findPermissions.length) return true;
+        const permissions = new Set(this.currentPermissions());
+        if (permissions.size > 0 && findPermissions.every((permission)=>permissions.has(permission))) {
+            return true;
         }
         if (throwError) {
             throw new common.HttpException('Unauthorized', common.HttpStatus.UNAUTHORIZED);
@@ -2738,6 +2741,46 @@ function normalizeCurrency(currency) {
     return currency.trim().toUpperCase();
 }
 
+/** Apply an explicit saved configuration without mutating a shared predefined schema. */ function applyModelConfiguration(model, configuration, schema) {
+    var _schema_label, _schema_parameter_rules;
+    const result = _extends._extends({}, schema, {
+        model,
+        label: (_schema_label = schema == null ? void 0 : schema.label) != null ? _schema_label : {
+            en_US: model,
+            zh_Hans: model
+        },
+        model_type: configuration.modelType,
+        fetch_from: contracts.FetchFrom.CUSTOMIZABLE_MODEL,
+        model_properties: _extends._extends({}, schema == null ? void 0 : schema.model_properties, {
+            [contracts.ModelPropertyKey.CONTEXT_SIZE]: configuration.contextSize
+        }),
+        parameter_rules: [
+            ...(_schema_parameter_rules = schema == null ? void 0 : schema.parameter_rules) != null ? _schema_parameter_rules : []
+        ]
+    });
+    if (configuration.modelType === contracts.AiModelTypeEnum.LLM) {
+        result.features = [
+            ...configuration.features
+        ];
+        result.model_properties[contracts.ModelPropertyKey.MODE] = 'chat';
+        result.parameter_rules = [
+            ...result.parameter_rules.filter((rule)=>rule.name !== 'max_tokens'),
+            {
+                name: 'max_tokens',
+                label: {
+                    en_US: 'Max output tokens',
+                    zh_Hans: '最大输出 Token'
+                },
+                type: contracts.ParameterType.INT,
+                min: 1,
+                max: configuration.maxOutputTokens,
+                default: configuration.defaultMaxTokens
+            }
+        ];
+    }
+    return result;
+}
+
 var AIModel_1;
 exports.AIModel = AIModel_1 = class AIModel {
     getRealtimeModel(_copilotModel) {
@@ -2799,6 +2842,13 @@ exports.AIModel = AIModel_1 = class AIModel {
     getModelSchema(model, credentials) {
         const models = this.predefinedModels();
         const schema = models.find((_)=>_.model === model);
+        const configuration = contracts.readModelConfiguration(credentials);
+        if (configuration) {
+            if (configuration.modelType !== this.modelType) {
+                throw new Error('Saved model configuration does not match its model type');
+            }
+            return applyModelConfiguration(model, configuration, schema != null ? schema : this.getCustomizableModelSchemaFromCredentials(model, credentials));
+        }
         if (schema) {
             return schema;
         }
@@ -4011,6 +4061,62 @@ Reflect.defineMetadata(COMMAND_METADATA$1, {
     };
 }
 
+const modelListSchema = zod.z.object({
+    data: zod.z.array(zod.z.object({
+        id: zod.z.string().trim().min(1).max(512),
+        active: zod.z.boolean().optional(),
+        name: zod.z.string().optional(),
+        model_type: zod.z.string().optional()
+    }))
+});
+/** OpenAI-compatible discovery transport and import suggestions, never runtime routing. */ async function discoverOpenAIModels(options) {
+    var _options_fetchImpl, _options_path;
+    const response = await ((_options_fetchImpl = options.fetchImpl) != null ? _options_fetchImpl : fetch)(`${options.baseUrl.replace(/\/+$/, '')}/${((_options_path = options.path) != null ? _options_path : 'models').replace(/^\/+/, '')}`, {
+        method: 'GET',
+        headers: {
+            Authorization: options.authorization,
+            Accept: 'application/json'
+        },
+        signal: AbortSignal.timeout(15000)
+    });
+    if (!response.ok) throw new Error(`Model discovery returned HTTP ${response.status}`);
+    const payload = modelListSchema.parse(await response.json());
+    const models = new Map();
+    for (const entry of payload.data){
+        var _options_predefinedModels;
+        if (entry.active === false || models.has(entry.id)) continue;
+        const known = (_options_predefinedModels = options.predefinedModels) == null ? void 0 : _options_predefinedModels.find((model)=>model.model === entry.id);
+        // Explicit unsupported types must not fall through to name-based guesses.
+        if (entry.model_type && !contracts.isDiscoverableModelType(entry.model_type)) continue;
+        if (known && !contracts.isDiscoverableModelType(known.model_type)) continue;
+        var _entry_model_type, _ref;
+        const modelType = (_ref = (_entry_model_type = entry.model_type) != null ? _entry_model_type : known == null ? void 0 : known.model_type) != null ? _ref : suggestModelType(entry.id);
+        const typeSource = entry.model_type ? 'provider' : known ? 'catalog' : modelType ? 'name' : 'unknown';
+        const supportedType = contracts.isDiscoverableModelType(modelType) ? modelType : null;
+        models.set(entry.id, _extends._extends({
+            model: entry.id,
+            label: entry.name || entry.id,
+            modelType: supportedType,
+            typeSource
+        }, supportedType ? {
+            configuration: contracts.configurationFromModel(supportedType, known)
+        } : {}));
+    }
+    return [
+        ...models.values()
+    ];
+}
+function suggestModelType(name) {
+    if (/(?:rerank|reranker)/i.test(name)) return contracts.AiModelTypeEnum.RERANK;
+    if (/(?:embedding|embed)/i.test(name)) return contracts.AiModelTypeEnum.TEXT_EMBEDDING;
+    // Unknown and opaque IDs stay unclassified, including unsupported image/audio/video models.
+    if (/(?:image|vision-exp|video|tts|whisper|speech|audio|wan\d|seedance|seedream)/i.test(name)) return null;
+    if (/(?:^|[\/_-])(?:gpt|qwen|deepseek|glm|kimi|llama|mistral|claude|minimax|gemini|chat|doubao)(?:[\d._/-]|$)/i.test(name)) {
+        return contracts.AiModelTypeEnum.LLM;
+    }
+    return null;
+}
+
 const SKILL_SOURCE_PROVIDER = 'SKILL_SOURCE_PROVIDER';
 const SkillSourceProviderStrategy = (provider)=>common.applyDecorators(common.SetMetadata(SKILL_SOURCE_PROVIDER, provider), common.SetMetadata(STRATEGY_META_KEY, SKILL_SOURCE_PROVIDER));
 
@@ -6264,6 +6370,10 @@ function escapeInlineScript(value) {
 
 const VIEW_EXTENSION_CACHE_SERVICE_TOKEN = 'XPERT_PLUGIN_VIEW_EXTENSION_CACHE_SERVICE';
 
+const ViewMiddlewareRuntimeCapability = modelProvider.createRuntimeCapability('platform.view.middleware-runtime', {
+    description: 'Resolve a View capability through its authorized Assistant middleware and scoped runtime.'
+});
+
 /** Platform-owned real-time collaboration capability available to scoped plugin runtimes. */ const CollaborationRuntimeCapability = modelProvider.createRuntimeCapability('platform.collaboration', {
     description: 'Create, synchronize, persist, authorize, and observe platform-managed real-time collaboration documents.'
 });
@@ -10179,6 +10289,10 @@ Object.defineProperty(exports, "agentResultPathSchema", {
     enumerable: true,
     get: function () { return contracts.agentResultPathSchema; }
 });
+Object.defineProperty(exports, "configurationFromModel", {
+    enumerable: true,
+    get: function () { return contracts.configurationFromModel; }
+});
 Object.defineProperty(exports, "createResourceCardContent", {
     enumerable: true,
     get: function () { return contracts.createResourceCardContent; }
@@ -10411,6 +10525,7 @@ exports.VIEW_EXTENSION_PROVIDER = VIEW_EXTENSION_PROVIDER;
 exports.VectorStoreStrategy = VectorStoreStrategy;
 exports.VideoGenerationModel = VideoGenerationModel;
 exports.ViewExtensionProvider = ViewExtensionProvider;
+exports.ViewMiddlewareRuntimeCapability = ViewMiddlewareRuntimeCapability;
 exports.WORKFLOW_NODE_STRATEGY = WORKFLOW_NODE_STRATEGY;
 exports.WORKFLOW_TRIGGER_STRATEGY = WORKFLOW_TRIGGER_STRATEGY;
 exports.WorkflowNodeStrategy = WorkflowNodeStrategy;
@@ -10438,6 +10553,7 @@ exports.agentRuntimeResultClaimSchema = agentRuntimeResultClaimSchema;
 exports.agentRuntimeResultConsumptionKey = agentRuntimeResultConsumptionKey;
 exports.als = als;
 exports.appendSandboxMessage = appendSandboxMessage;
+exports.applyModelConfiguration = applyModelConfiguration;
 exports.buildSandboxTimeoutMessage = buildSandboxTimeoutMessage;
 exports.calcTokenUsage = calcTokenUsage;
 exports.calculateLLMUsagePrice = calculateLLMUsagePrice;
@@ -10458,6 +10574,7 @@ exports.defineMcpResourceTemplate = defineMcpResourceTemplate;
 exports.defineXpertTool = defineXpertTool;
 exports.derivePluginArtifactNamespace = derivePluginArtifactNamespace;
 exports.describeXpertToolProvider = describeXpertToolProvider;
+exports.discoverOpenAIModels = discoverOpenAIModels;
 exports.downloadRemoteFile = downloadRemoteFile;
 exports.emitResourceCard = emitResourceCard;
 exports.formatSandboxTimeout = formatSandboxTimeout;
@@ -10475,6 +10592,7 @@ exports.isAgentInvocationTerminal = isAgentInvocationTerminal;
 exports.isDevelopmentSandboxRuntimeEnvironment = isDevelopmentSandboxRuntimeEnvironment;
 exports.isModelOutputValidationError = isModelOutputValidationError;
 exports.isModelUsagePricingConfig = isModelUsagePricingConfig;
+exports.isPluginArtifactNamespace = isPluginArtifactNamespace;
 exports.isRemoteFile = isRemoteFile;
 exports.isSandboxBackend = isSandboxBackend;
 exports.isSandboxManagedServiceAdapter = isSandboxManagedServiceAdapter;

package/index.esm.js

@@ -2,8 +2,8 @@ import { Module, applyDecorators, SetMetadata, HttpException, HttpStatus, BadReq
 import { MODULE_METADATA } from '@nestjs/common/constants';
 import { pick } from 'lodash-es';
 import { dispatchCustomEvent } from '@langchain/core/callbacks/dispatch';
-import { ChatMessageEventTypeEnum, createResourceCardContent, LanguagesEnum, ParameterType, AiModelTypeEnum, PriceType, FetchFrom, ModelFeature, ModelPropertyKey, projectTaskExecutionContextSchema, projectTaskExecutionReferenceSchema, agentRuntimeProgressSchema, agentInvocationTerminalStatusSchema, MCP_REQUIRED_CONTEXTS, MCP_CAPABILITY_APPROVAL_MODES, MCP_TOOL_RISKS, MCP_TOOL_SIDE_EFFECTS, MCP_TOOL_IDEMPOTENCY, MCP_CAPABILITY_VISIBILITIES, PLUGIN_COMPONENT_TYPE } from '@xpert-ai/contracts';
-export { ASSISTANT_CHAT_SEND_MESSAGE_COMMAND, ASSISTANT_CONTEXT_SET_COMMAND, agentOutputDeliverySchema, agentResultPathSchema, createResourceCardContent, parseResourceCard, resourceCardId } from '@xpert-ai/contracts';
+import { ChatMessageEventTypeEnum, createResourceCardContent, LanguagesEnum, ParameterType, AiModelTypeEnum, PriceType, FetchFrom, ModelPropertyKey, readModelConfiguration, ModelFeature, isDiscoverableModelType, configurationFromModel, projectTaskExecutionContextSchema, projectTaskExecutionReferenceSchema, agentRuntimeProgressSchema, agentInvocationTerminalStatusSchema, MCP_REQUIRED_CONTEXTS, MCP_CAPABILITY_APPROVAL_MODES, MCP_TOOL_RISKS, MCP_TOOL_SIDE_EFFECTS, MCP_TOOL_IDEMPOTENCY, MCP_CAPABILITY_VISIBILITIES, PLUGIN_COMPONENT_TYPE } from '@xpert-ai/contracts';
+export { ASSISTANT_CHAT_SEND_MESSAGE_COMMAND, ASSISTANT_CONTEXT_SET_COMMAND, agentOutputDeliverySchema, agentResultPathSchema, configurationFromModel, createResourceCardContent, parseResourceCard, resourceCardId } from '@xpert-ai/contracts';
 import { DiscoveryService, Reflector } from '@nestjs/core';
 import { Subject, filter } from 'rxjs';
 import { _ as _extends } from './_extends.esm.js';
@@ -38,7 +38,8 @@ import { getEnvironmentVariable } from '@langchain/core/utils/env';
 export { ModelProviderHttpClient, ModelProviderHttpError } from './model-provider-http-client.esm.js';
 import { getEncodingNameForModel, encodingForModel, getEncoding } from 'js-tiktoken';
 import { getModelContextSize as getModelContextSize$1 } from '@langchain/core/language_models/base';
-import { z, ZodError, ZodFirstPartyTypeKind } from 'zod/v3';
+import { z } from 'zod';
+import { z as z$1, ZodError, ZodFirstPartyTypeKind } from 'zod/v3';
 export { A as AGENT_TASK_RESULTS_FEATURE, a as agentResultItemSchema, b as agentTaskResultSchema } from './results.esm.js';
 import { assertConnectorDefinition } from './connector.esm.js';
 export { CONNECTOR_AUTHORIZATION_MODES, CONNECTOR_SCOPE_TYPES, getConnectorAuthMethods, getConnectorAuthorizationModes } from './connector.esm.js';
@@ -106,6 +107,9 @@ function assertPluginArtifactNamePart(value, label) {
         throw new Error(`${label} must contain only lowercase letters, numbers, and underscores`);
     }
 }
+function isPluginArtifactNamespace(value) {
+    return typeof value === 'string' && ARTIFACT_NAMESPACE_PATTERN.test(value);
+}
 
 /** Call after the business mutation commits. A display failure must not retry that mutation. */ async function emitResourceCard(card, config) {
     await dispatchCustomEvent(ChatMessageEventTypeEnum.ON_CHAT_EVENT, createResourceCardContent(card), config);
@@ -329,10 +333,9 @@ class RequestContext {
      * server RequestContext. Authentication guards resolve JWTs, API keys and
      * ChatKit client secrets before this check; the bearer is not always a JWT.
      */ static hasPermissions(findPermissions, throwError) {
-        const permissions = this.currentPermissions();
-        if (permissions.length > 0) {
-            const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
-            if (found.length === findPermissions.length) return true;
+        const permissions = new Set(this.currentPermissions());
+        if (permissions.size > 0 && findPermissions.every((permission)=>permissions.has(permission))) {
+            return true;
         }
         if (throwError) {
             throw new HttpException('Unauthorized', HttpStatus.UNAUTHORIZED);
@@ -2720,6 +2723,46 @@ function normalizeCurrency(currency) {
     return currency.trim().toUpperCase();
 }
 
+/** Apply an explicit saved configuration without mutating a shared predefined schema. */ function applyModelConfiguration(model, configuration, schema) {
+    var _schema_label, _schema_parameter_rules;
+    const result = _extends({}, schema, {
+        model,
+        label: (_schema_label = schema == null ? void 0 : schema.label) != null ? _schema_label : {
+            en_US: model,
+            zh_Hans: model
+        },
+        model_type: configuration.modelType,
+        fetch_from: FetchFrom.CUSTOMIZABLE_MODEL,
+        model_properties: _extends({}, schema == null ? void 0 : schema.model_properties, {
+            [ModelPropertyKey.CONTEXT_SIZE]: configuration.contextSize
+        }),
+        parameter_rules: [
+            ...(_schema_parameter_rules = schema == null ? void 0 : schema.parameter_rules) != null ? _schema_parameter_rules : []
+        ]
+    });
+    if (configuration.modelType === AiModelTypeEnum.LLM) {
+        result.features = [
+            ...configuration.features
+        ];
+        result.model_properties[ModelPropertyKey.MODE] = 'chat';
+        result.parameter_rules = [
+            ...result.parameter_rules.filter((rule)=>rule.name !== 'max_tokens'),
+            {
+                name: 'max_tokens',
+                label: {
+                    en_US: 'Max output tokens',
+                    zh_Hans: '最大输出 Token'
+                },
+                type: ParameterType.INT,
+                min: 1,
+                max: configuration.maxOutputTokens,
+                default: configuration.defaultMaxTokens
+            }
+        ];
+    }
+    return result;
+}
+
 var AIModel_1;
 let AIModel = AIModel_1 = class AIModel {
     getRealtimeModel(_copilotModel) {
@@ -2781,6 +2824,13 @@ let AIModel = AIModel_1 = class AIModel {
     getModelSchema(model, credentials) {
         const models = this.predefinedModels();
         const schema = models.find((_)=>_.model === model);
+        const configuration = readModelConfiguration(credentials);
+        if (configuration) {
+            if (configuration.modelType !== this.modelType) {
+                throw new Error('Saved model configuration does not match its model type');
+            }
+            return applyModelConfiguration(model, configuration, schema != null ? schema : this.getCustomizableModelSchemaFromCredentials(model, credentials));
+        }
         if (schema) {
             return schema;
         }
@@ -3993,6 +4043,62 @@ Reflect.defineMetadata(COMMAND_METADATA$1, {
     };
 }
 
+const modelListSchema = z.object({
+    data: z.array(z.object({
+        id: z.string().trim().min(1).max(512),
+        active: z.boolean().optional(),
+        name: z.string().optional(),
+        model_type: z.string().optional()
+    }))
+});
+/** OpenAI-compatible discovery transport and import suggestions, never runtime routing. */ async function discoverOpenAIModels(options) {
+    var _options_fetchImpl, _options_path;
+    const response = await ((_options_fetchImpl = options.fetchImpl) != null ? _options_fetchImpl : fetch)(`${options.baseUrl.replace(/\/+$/, '')}/${((_options_path = options.path) != null ? _options_path : 'models').replace(/^\/+/, '')}`, {
+        method: 'GET',
+        headers: {
+            Authorization: options.authorization,
+            Accept: 'application/json'
+        },
+        signal: AbortSignal.timeout(15000)
+    });
+    if (!response.ok) throw new Error(`Model discovery returned HTTP ${response.status}`);
+    const payload = modelListSchema.parse(await response.json());
+    const models = new Map();
+    for (const entry of payload.data){
+        var _options_predefinedModels;
+        if (entry.active === false || models.has(entry.id)) continue;
+        const known = (_options_predefinedModels = options.predefinedModels) == null ? void 0 : _options_predefinedModels.find((model)=>model.model === entry.id);
+        // Explicit unsupported types must not fall through to name-based guesses.
+        if (entry.model_type && !isDiscoverableModelType(entry.model_type)) continue;
+        if (known && !isDiscoverableModelType(known.model_type)) continue;
+        var _entry_model_type, _ref;
+        const modelType = (_ref = (_entry_model_type = entry.model_type) != null ? _entry_model_type : known == null ? void 0 : known.model_type) != null ? _ref : suggestModelType(entry.id);
+        const typeSource = entry.model_type ? 'provider' : known ? 'catalog' : modelType ? 'name' : 'unknown';
+        const supportedType = isDiscoverableModelType(modelType) ? modelType : null;
+        models.set(entry.id, _extends({
+            model: entry.id,
+            label: entry.name || entry.id,
+            modelType: supportedType,
+            typeSource
+        }, supportedType ? {
+            configuration: configurationFromModel(supportedType, known)
+        } : {}));
+    }
+    return [
+        ...models.values()
+    ];
+}
+function suggestModelType(name) {
+    if (/(?:rerank|reranker)/i.test(name)) return AiModelTypeEnum.RERANK;
+    if (/(?:embedding|embed)/i.test(name)) return AiModelTypeEnum.TEXT_EMBEDDING;
+    // Unknown and opaque IDs stay unclassified, including unsupported image/audio/video models.
+    if (/(?:image|vision-exp|video|tts|whisper|speech|audio|wan\d|seedance|seedream)/i.test(name)) return null;
+    if (/(?:^|[\/_-])(?:gpt|qwen|deepseek|glm|kimi|llama|mistral|claude|minimax|gemini|chat|doubao)(?:[\d._/-]|$)/i.test(name)) {
+        return AiModelTypeEnum.LLM;
+    }
+    return null;
+}
+
 const SKILL_SOURCE_PROVIDER = 'SKILL_SOURCE_PROVIDER';
 const SkillSourceProviderStrategy = (provider)=>applyDecorators(SetMetadata(SKILL_SOURCE_PROVIDER, provider), SetMetadata(STRATEGY_META_KEY, SKILL_SOURCE_PROVIDER));
 
@@ -4125,79 +4231,79 @@ const AGENT_CHAT_DISPATCH_MESSAGE_TYPE = defineAgentMessageType('chat_dispatch',
 const AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING = 'steer_target_not_running';
 
 /** Captured by an authorized host command. Describing a recipient never authorizes delivery. */ const replyConversation = {
-    conversationId: z.string().uuid(),
-    threadId: z.string().trim().min(1).max(256)
+    conversationId: z$1.string().uuid(),
+    threadId: z$1.string().trim().min(1).max(256)
 };
-const agentRuntimeReplyTargetSchema = z.discriminatedUnion('type', [
-    z.object(_extends({}, replyConversation, {
-        type: z.literal('xpert').optional(),
-        xpertId: z.string().uuid(),
-        agentKey: z.string().trim().min(1).max(256)
+const agentRuntimeReplyTargetSchema = z$1.discriminatedUnion('type', [
+    z$1.object(_extends({}, replyConversation, {
+        type: z$1.literal('xpert').optional(),
+        xpertId: z$1.string().uuid(),
+        agentKey: z$1.string().trim().min(1).max(256)
     })).strict(),
-    z.object(_extends({}, replyConversation, {
-        type: z.literal('project_agent'),
-        projectId: z.string().uuid(),
-        agentKey: z.literal('general_agent')
+    z$1.object(_extends({}, replyConversation, {
+        type: z$1.literal('project_agent'),
+        projectId: z$1.string().uuid(),
+        agentKey: z$1.literal('general_agent')
     })).strict()
 ]);
-/** Persist with the immutable invocation request before launch. No credentials or arbitrary routing headers. */ const agentInvocationDispatchContextSchema = z.object({
-    version: z.literal(1),
-    requestId: z.string().uuid(),
-    sourceMessageId: z.string().trim().min(1).max(256),
+/** Persist with the immutable invocation request before launch. No credentials or arbitrary routing headers. */ const agentInvocationDispatchContextSchema = z$1.object({
+    version: z$1.literal(1),
+    requestId: z$1.string().uuid(),
+    sourceMessageId: z$1.string().trim().min(1).max(256),
     replyTo: agentRuntimeReplyTargetSchema,
     projectTask: projectTaskExecutionContextSchema.optional()
 }).strict();
 
 const AGENT_RUNTIME_EVENT_MESSAGE_TYPE = defineAgentMessageType('runtime_event', 1);
 const reference = {
-    version: z.literal(1),
-    invocationId: z.string().uuid(),
-    /** Revision of the persisted observation, never a queue delivery attempt. */ revision: z.number().int().nonnegative(),
+    version: z$1.literal(1),
+    invocationId: z$1.string().uuid(),
+    /** Revision of the persisted observation, never a queue delivery attempt. */ revision: z$1.number().int().nonnegative(),
     projectTask: projectTaskExecutionReferenceSchema.optional()
 };
-/** Host-produced references. Consumers reload and authorize the invocation and its pinned observation. */ const agentRuntimeEventSchema = z.discriminatedUnion('kind', [
-    z.object(_extends({}, reference, {
-        kind: z.literal('progress'),
+/** Host-produced references. Consumers reload and authorize the invocation and its pinned observation. */ const agentRuntimeEventSchema = z$1.discriminatedUnion('kind', [
+    z$1.object(_extends({}, reference, {
+        kind: z$1.literal('progress'),
         progress: agentRuntimeProgressSchema
     })).strict(),
-    z.object(_extends({}, reference, {
-        kind: z.literal('result'),
+    z$1.object(_extends({}, reference, {
+        kind: z$1.literal('result'),
         status: agentInvocationTerminalStatusSchema
     })).strict(),
-    z.object(_extends({}, reference, {
-        kind: z.literal('input_request'),
-        interactionId: z.string().trim().min(1).max(256)
+    z$1.object(_extends({}, reference, {
+        kind: z$1.literal('input_request'),
+        interactionId: z$1.string().trim().min(1).max(256)
     })).strict()
 ]);
 /** Same observation always has the same HandoffMessage.id across retries and process restarts. */ function agentRuntimeEventMessageId(event) {
     return `runtime-${event.invocationId}-${event.kind}-${event.revision}`;
 }
-/** Transport states are deliberately separate from Task and Invocation status. */ const agentRuntimeDeliveryStateSchema = z.enum([
+/** Transport states are deliberately separate from Task and Invocation status. */ const agentRuntimeDeliveryStateSchema = z$1.enum([
     'pending',
     'received',
     'blocked',
     'failed'
 ]);
-const agentRuntimeConsumptionStateSchema = z.enum([
+const agentRuntimeConsumptionStateSchema = z$1.enum([
     'pending',
     'processing',
     'processed',
     'blocked',
     'failed'
 ]);
-/** Store under a unique scoped key in the same transaction as the continuation reservation. */ const agentRuntimeResultClaimSchema = z.object({
-    invocationId: z.string().uuid(),
-    resultRevision: z.number().int().nonnegative(),
+/** Store under a unique scoped key in the same transaction as the continuation reservation. */ const agentRuntimeResultClaimSchema = z$1.object({
+    invocationId: z$1.string().uuid(),
+    resultRevision: z$1.number().int().nonnegative(),
     recipient: agentRuntimeReplyTargetSchema,
-    consumer: z.discriminatedUnion('type', [
-        z.object({
-            type: z.literal('follow_up'),
-            executionId: z.string().uuid()
+    consumer: z$1.discriminatedUnion('type', [
+        z$1.object({
+            type: z$1.literal('follow_up'),
+            executionId: z$1.string().uuid()
         }).strict(),
-        z.object({
-            type: z.literal('wait'),
-            executionId: z.string().uuid(),
-            callId: z.string().trim().min(1).max(1024)
+        z$1.object({
+            type: z$1.literal('wait'),
+            executionId: z$1.string().uuid(),
+            callId: z$1.string().trim().min(1).max(1024)
         }).strict()
     ])
 }).strict();
@@ -6246,6 +6352,10 @@ function escapeInlineScript(value) {
 
 const VIEW_EXTENSION_CACHE_SERVICE_TOKEN = 'XPERT_PLUGIN_VIEW_EXTENSION_CACHE_SERVICE';
 
+const ViewMiddlewareRuntimeCapability = createRuntimeCapability('platform.view.middleware-runtime', {
+    description: 'Resolve a View capability through its authorized Assistant middleware and scoped runtime.'
+});
+
 /** Platform-owned real-time collaboration capability available to scoped plugin runtimes. */ const CollaborationRuntimeCapability = createRuntimeCapability('platform.collaboration', {
     description: 'Create, synchronize, persist, authorize, and observe platform-managed real-time collaboration documents.'
 });
@@ -6789,38 +6899,38 @@ async function resolveToolResult(value, validate) {
 // Validate metadata with the declared output schema, preserve bounded media blocks,
 // and include the same DTO in text for clients that hide structuredContent.
 const XPERT_TOOL_RESULT_FORMAT_VERSION = 1;
-const contentSchema = z.discriminatedUnion('type', [
-    z.object({
-        type: z.literal('text'),
-        text: z.string().max(2 * 1024 * 1024)
+const contentSchema = z$1.discriminatedUnion('type', [
+    z$1.object({
+        type: z$1.literal('text'),
+        text: z$1.string().max(2 * 1024 * 1024)
     }).strict(),
-    z.object({
-        type: z.literal('image'),
-        data: z.string().min(1).max(8 * 1024 * 1024),
-        mimeType: z.enum([
+    z$1.object({
+        type: z$1.literal('image'),
+        data: z$1.string().min(1).max(8 * 1024 * 1024),
+        mimeType: z$1.enum([
             'image/png',
             'image/jpeg',
             'image/webp',
             'image/gif'
         ])
     }).strict(),
-    z.object({
-        type: z.literal('audio'),
-        data: z.string().min(1).max(8 * 1024 * 1024),
-        mimeType: z.string().min(1).max(100)
+    z$1.object({
+        type: z$1.literal('audio'),
+        data: z$1.string().min(1).max(8 * 1024 * 1024),
+        mimeType: z$1.string().min(1).max(100)
     }).strict(),
-    z.object({
-        type: z.literal('resource_link'),
-        uri: z.string().min(1).max(4096),
-        name: z.string().max(240).optional()
+    z$1.object({
+        type: z$1.literal('resource_link'),
+        uri: z$1.string().min(1).max(4096),
+        name: z$1.string().max(240).optional()
     }).strict()
 ]);
 /** Validate the envelope separately so binary content never enters the business DTO. */ async function parseDecoratedToolResult(value, outputSchema) {
     var _result_content;
-    const envelope = z.object({
-        content: z.array(contentSchema).max(32).optional(),
-        structuredContent: outputSchema != null ? outputSchema : z.unknown().optional(),
-        isError: z.boolean().optional()
+    const envelope = z$1.object({
+        content: z$1.array(contentSchema).max(32).optional(),
+        structuredContent: outputSchema != null ? outputSchema : z$1.unknown().optional(),
+        isError: z$1.boolean().optional()
     }).strict();
     const result = await envelope.parseAsync(value);
     var _result_content_map;
@@ -10145,4 +10255,4 @@ Reflect.defineMetadata('__command__', {
     id: ImportDefaultAgentPluginsCommand.type
 }, ImportDefaultAgentPluginsCommand);
 
-export { ACCOUNT_BINDING_PERMISSION_SERVICE_TOKEN, AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING, AGENT_CHAT_DISPATCH_MESSAGE_TYPE, AGENT_MIDDLEWARE_STRATEGY, AGENT_RUNTIME_EVENT_MESSAGE_TYPE, AGENT_RUNTIME_STRATEGY, AIModel, AIModelProviderNotFoundException, AIModelProviderRegistry, AIModelProviderStrategy, AI_MODEL_PROVIDER, ASSISTANT_CAPABILITY_PROVIDER, AdapterDataSourceStrategy, AgentExecutionRunnerCapability, AgentExecutionRunnerFactoryCapability, AgentInvocationRuntimeCapability, AgentMiddlewareRegistry, AgentMiddlewareStrategy, AgentRuntimeFactoryCapability, AgentRuntimeRegistry, AgentRuntimeStrategy, AiModelNotFoundException, AssistantCapabilityProvider, AssistantCapabilityProviderRegistry, AssistantTaskRuntimeCapability, BOUND_IDENTITY_LOGIN_PERMISSION_SERVICE_TOKEN, BUILTIN_GLOBAL_SCOPE, BaseHTTPQueryRunner, BaseQueryRunner, BaseSQLQueryRunner, BaseSandbox, BaseStrategyRegistry, BuiltinToolset, CHAT_CHANNEL, CHAT_CHANNEL_TEXT_LIMITS, CLI_MODEL_TOKEN_REFERENCE, COLLABORATION_DOCUMENT_PROVIDER, CONNECTION_COMMAND_ROUTER_TOKEN, CONNECTOR_STRATEGY, CancelConversationCommand, ChatChannel, ChatChannelRegistry, ChatOAICompatReasoningModel, CliModelProfilesCapability, CollaborationDocumentProvider, CollaborationDocumentProviderRegistry, CollaborationRuntimeCapability, CommonParameterRules, ConnectorRuntimeCapability, ConnectorRuntimeFactoryCapability, ConnectorStrategyKey, ConnectorStrategyRegistry, CreateModelClientCommand, CredentialsValidateFailedError, DATASOURCE_STRATEGY, DBCreateTableMode, DBProtocolEnum, DBSyntaxEnum, DBTableAction, DBTableDataAction, DEFAULT_EXECUTION_CONFIG, DEFAULT_SANDBOX_EXECUTION_MAX_OUTPUT_BYTES, DEFAULT_SANDBOX_FILE_OPERATION_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_SEC, DEFAULT_SANDBOX_FILE_SEARCH_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_SEC, DEFAULT_SANDBOX_SHELL_EXECUTION_OPTIONS, DEFAULT_SANDBOX_SHELL_TIMEOUT_MS, DEFAULT_SANDBOX_SHELL_TIMEOUT_SEC, DOCUMENT_SOURCE_STRATEGY, DOCUMENT_TRANSFORMER_STRATEGY, DataSourceStrategy, DataSourceStrategyRegistry, DecoratedAgentMiddlewareStrategy, DecoratedToolsetStrategy, DocumentSourceRegistry, DocumentSourceStrategy, DocumentTransformerRegistry, DocumentTransformerStrategy, EVOLUTION_RUNTIME_SERVICE_TOKEN, EVOLUTION_TARGET_PROVIDER, EvolutionBaselineRuntimeCapability, EvolutionChangeRuntimeCapability, EvolutionRuntimeCapability, EvolutionTargetProviderRegistry, EvolutionTargetProviderStrategy, FILE_STORAGE_PROVIDER, FILE_UPLOAD_TARGET_STRATEGY, FileRuntimeCapability, FileStorageProvider, FileStorageProviderRegistry, FileUploadTargetRegistry, FileUploadTargetStrategy, GLOBAL_ORGANIZATION_SCOPE, HANDOFF_PERMISSION_SERVICE_TOKEN, HANDOFF_PROCESSOR_STRATEGY, HANDOFF_QUEUE_SERVICE_TOKEN, HandoffProcessorRegistry, HandoffProcessorStrategy, IMAGE_UNDERSTANDING_STRATEGY, INTEGRATION_PERMISSION_SERVICE_TOKEN, INTEGRATION_STRATEGY, ImageGenerationModel, ImageUnderstandingRegistry, ImageUnderstandingStrategy, ImportDefaultAgentPluginsCommand, IntegrationStrategyKey, IntegrationStrategyRegistry, JUMP_TO_TARGETS, JsonSchemaValidator, KEYWORD_ANALYZER_STRATEGY, KNOWLEDGE_STRATEGY, KeywordAnalyzerRegistry, KeywordAnalyzerStrategy, KnowledgeDocumentVisualAssetsRuntimeCapability, KnowledgeDocumentVisualAssetsRuntimeFactoryCapability, KnowledgeGraphRuntimeCapability, KnowledgeStrategyKey, KnowledgeStrategyRegistry, KnowledgebaseDocumentsRuntimeCapability, KnowledgebaseProvisioningRuntimeCapability, KnowledgebaseRuntimeCapability, LLMUsage, LargeLanguageModel, MANAGED_CONNECTION_REGISTRY_TOKEN, MANAGED_QUEUE_HANDLER_REGISTRY_TOKEN, MANAGED_QUEUE_SERVICE_TOKEN, MCP_CAPABILITY_CHANGE_EVENT_TYPES, MODEL_OUTPUT_VALIDATION_ERROR_CODE, ModelExecutionEnvironmentCapability, ModelOutputValidationError, ModelProvider, ORGANIZATION_METADATA_KEY, OpenAICompatibleReranker, PERMISSION_OPERATION_METADATA_KEY, PLUGIN_CONFIG_RESOLVER_TOKEN, PLUGIN_JOB_PROCESSOR_METADATA, PLUGIN_METADATA, PLUGIN_METADATA_KEY, PLUGIN_VERSION_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_SERVICE_TOKEN, PROJECT_TASK_PROVIDER, PROJECT_TYPE_PROVIDER, PROVIDE_AI_MODEL_LLM, PROVIDE_AI_MODEL_MODERATION, PROVIDE_AI_MODEL_RERANK, PROVIDE_AI_MODEL_SPEECH2TEXT, PROVIDE_AI_MODEL_TEXT_EMBEDDING, PROVIDE_AI_MODEL_TTS, PluginJobProcessor, PluginWebhookAuth, PluginWebhookAuthGuard, ProjectTaskProvider, ProjectTaskProviderRegistry, ProjectTasksRuntimeCapability, ProjectTypeProvider, ProjectTypeProviderRegistry, RESOURCE_CARD_EVENT, RESOURCE_CARD_PROVIDER, RETRIEVER_STRATEGY, RequestContext, RequestContextMiddleware, RequirePermissionOperation, RerankModel, ResourceCardProvider, ResourceCardProviderRegistry, RetrieverRegistry, RetrieverStrategy, SANDBOX_PROVIDER, SANDBOX_RUNTIME_PROVIDER, SANDBOX_SHELL_TIMEOUT_LIMITS_SEC, SANDBOX_WORKSPACE_MAPPER, SKILL_SOURCE_PROVIDER, SPEECH_TO_TEXT_PERMISSION_SERVICE_TOKEN, SPEECH_TO_TEXT_SERVICE_TOKEN, SSOProviderRegistry, SSOProviderStrategyKey, SSO_BINDING_PERMISSION_SERVICE_TOKEN, SSO_PROVIDER, STRATEGY_META_KEY, SYSTEM_GLOBAL_SCOPE, SandboxProviderRegistry, SandboxProviderStrategy, SandboxRuntimeProviderRegistry, SandboxRuntimeProviderStrategy, SandboxWorkspaceMapperRegistry, SandboxWorkspaceMapperStrategy, ShellModelExecutionSourceCapability, SkillSourceProviderRegistry, SkillSourceProviderStrategy, Speech2TextChatModel, SpeechToTextModel, StrategyBus, TENANT_GLOBAL_SCOPE_PREFIX, TENANT_GLOBAL_SCOPE_SUFFIX, TEXT_SPLITTER_STRATEGY, TOOLSET_STRATEGY, TextEmbeddingModelManager, TextSplitterRegistry, TextSplitterStrategy, TextToSpeechModel, ToolsetRegistry, ToolsetStrategy, USER_PERMISSION_SERVICE_TOKEN, VECTOR_STORE_STRATEGY, VIDEO_GENERATION_PERMISSION_SERVICE_TOKEN, VIDEO_GENERATION_SERVICE_TOKEN, VIDEO_GENERATOR_FAMILIES, VIEW_EXTENSION_CACHE_SERVICE_TOKEN, VIEW_EXTENSION_PROVIDER, VectorStoreRegistry, VectorStoreStrategy, VideoGenerationModel, ViewExtensionProvider, ViewExtensionProviderRegistry, WORKFLOW_NODE_STRATEGY, WORKFLOW_TRIGGER_STRATEGY, WorkflowNodeRegistry, WorkflowNodeStrategy, WorkflowTriggerRegistry, WorkflowTriggerStrategy, WorkspaceFilesRuntimeCapability, WrapWorkflowNodeExecutionCommand, XPERT_AGENT_MIDDLEWARE_RUNTIME_TOKEN, XPERT_TOOL_METHOD_METADATA, XPERT_TOOL_PROVIDER, XPERT_TOOL_PROVIDER_METADATA, XPERT_TOOL_RESULT_FORMAT_VERSION, XpFileSystem, XpertPrompt, XpertResource, XpertResourceTemplate, XpertServerPlugin, XpertTool, XpertToolProvider, XpertToolProviderCoordinator, XpertToolProviderRegistry, agentInvocationDispatchContextSchema, agentRuntimeConsumptionStateSchema, agentRuntimeDeliveryStateSchema, agentRuntimeEventMessageId, agentRuntimeEventSchema, agentRuntimeReplyTargetSchema, agentRuntimeResultClaimSchema, agentRuntimeResultConsumptionKey, als, appendSandboxMessage, assertConnectorDefinition, buildSandboxTimeoutMessage, calcTokenUsage, calculateLLMUsagePrice, calculateModelPrice, calculateModelUsageCharge, chunkText, countTextTokens, countTokensSafe, createI18nInstance, createPluginLogger, createRuntimeCapability, defineAgentMessageType, defineChannelMessageType, defineMcpApp, defineMcpCapabilities, defineMcpPrompt, defineMcpResource, defineMcpResourceTemplate, defineXpertTool, derivePluginArtifactNamespace, describeXpertToolProvider, downloadRemoteFile, emitResourceCard, formatSandboxTimeout, getDefaultTenantId, getErrorMessage, getModelContextSize, getPermissionOperationMetadata, getPositionList, getPositionMap, getRequestContext, getRequiredPermissionOperation, getTenantGlobalScopeKey, getXpertToolMethod, isAgentInvocationTerminal, isDevelopmentSandboxRuntimeEnvironment, isModelOutputValidationError, isModelUsagePricingConfig, isRemoteFile, isSandboxBackend, isSandboxManagedServiceAdapter, isSandboxServiceProxyAdapter, isSandboxTerminalAdapter, isStrategyInstance, isStructuredMessageType, isTenantGlobalScopeKey, knowledgebaseActions, loadYamlFile, mergeCredentials, mergeModelRequirements, mergeParentChildChunks, nativeModelTransport, normalizeContextSize, normalizeTokenUsage, pluginArtifactTableName, prepareToolResult, processAsyncAIGCManagedJob, renderRemoteModuleIframeHtml, renderRemoteReactIframeHtml, renderRemoteVueIframeHtml, resolveModelUsagePricingSnapshot, resolveSandboxBackend, resolveSandboxExecutionOptions, resolveSandboxManagedServiceAdapter, resolveSandboxServiceProxyAdapter, resolveSandboxTerminalAdapter, resolveStrategyMetadataTarget, resolveTenantGlobalScopeKey, resolveTokenUsage, resolveTokenUsageCandidates, resolveXpertMcpExtensions, runWithRequestContext, runtimeToolProviderComponent, secondsToMilliseconds, setDefaultTenantId, sumTokenUsage, taskWaitReason, textTokenBoundaries };
+export { ACCOUNT_BINDING_PERMISSION_SERVICE_TOKEN, AGENT_CHAT_DISPATCH_ERROR_STEER_TARGET_NOT_RUNNING, AGENT_CHAT_DISPATCH_MESSAGE_TYPE, AGENT_MIDDLEWARE_STRATEGY, AGENT_RUNTIME_EVENT_MESSAGE_TYPE, AGENT_RUNTIME_STRATEGY, AIModel, AIModelProviderNotFoundException, AIModelProviderRegistry, AIModelProviderStrategy, AI_MODEL_PROVIDER, ASSISTANT_CAPABILITY_PROVIDER, AdapterDataSourceStrategy, AgentExecutionRunnerCapability, AgentExecutionRunnerFactoryCapability, AgentInvocationRuntimeCapability, AgentMiddlewareRegistry, AgentMiddlewareStrategy, AgentRuntimeFactoryCapability, AgentRuntimeRegistry, AgentRuntimeStrategy, AiModelNotFoundException, AssistantCapabilityProvider, AssistantCapabilityProviderRegistry, AssistantTaskRuntimeCapability, BOUND_IDENTITY_LOGIN_PERMISSION_SERVICE_TOKEN, BUILTIN_GLOBAL_SCOPE, BaseHTTPQueryRunner, BaseQueryRunner, BaseSQLQueryRunner, BaseSandbox, BaseStrategyRegistry, BuiltinToolset, CHAT_CHANNEL, CHAT_CHANNEL_TEXT_LIMITS, CLI_MODEL_TOKEN_REFERENCE, COLLABORATION_DOCUMENT_PROVIDER, CONNECTION_COMMAND_ROUTER_TOKEN, CONNECTOR_STRATEGY, CancelConversationCommand, ChatChannel, ChatChannelRegistry, ChatOAICompatReasoningModel, CliModelProfilesCapability, CollaborationDocumentProvider, CollaborationDocumentProviderRegistry, CollaborationRuntimeCapability, CommonParameterRules, ConnectorRuntimeCapability, ConnectorRuntimeFactoryCapability, ConnectorStrategyKey, ConnectorStrategyRegistry, CreateModelClientCommand, CredentialsValidateFailedError, DATASOURCE_STRATEGY, DBCreateTableMode, DBProtocolEnum, DBSyntaxEnum, DBTableAction, DBTableDataAction, DEFAULT_EXECUTION_CONFIG, DEFAULT_SANDBOX_EXECUTION_MAX_OUTPUT_BYTES, DEFAULT_SANDBOX_FILE_OPERATION_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_OPERATION_TIMEOUT_SEC, DEFAULT_SANDBOX_FILE_SEARCH_EXECUTION_OPTIONS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_MS, DEFAULT_SANDBOX_FILE_SEARCH_TIMEOUT_SEC, DEFAULT_SANDBOX_SHELL_EXECUTION_OPTIONS, DEFAULT_SANDBOX_SHELL_TIMEOUT_MS, DEFAULT_SANDBOX_SHELL_TIMEOUT_SEC, DOCUMENT_SOURCE_STRATEGY, DOCUMENT_TRANSFORMER_STRATEGY, DataSourceStrategy, DataSourceStrategyRegistry, DecoratedAgentMiddlewareStrategy, DecoratedToolsetStrategy, DocumentSourceRegistry, DocumentSourceStrategy, DocumentTransformerRegistry, DocumentTransformerStrategy, EVOLUTION_RUNTIME_SERVICE_TOKEN, EVOLUTION_TARGET_PROVIDER, EvolutionBaselineRuntimeCapability, EvolutionChangeRuntimeCapability, EvolutionRuntimeCapability, EvolutionTargetProviderRegistry, EvolutionTargetProviderStrategy, FILE_STORAGE_PROVIDER, FILE_UPLOAD_TARGET_STRATEGY, FileRuntimeCapability, FileStorageProvider, FileStorageProviderRegistry, FileUploadTargetRegistry, FileUploadTargetStrategy, GLOBAL_ORGANIZATION_SCOPE, HANDOFF_PERMISSION_SERVICE_TOKEN, HANDOFF_PROCESSOR_STRATEGY, HANDOFF_QUEUE_SERVICE_TOKEN, HandoffProcessorRegistry, HandoffProcessorStrategy, IMAGE_UNDERSTANDING_STRATEGY, INTEGRATION_PERMISSION_SERVICE_TOKEN, INTEGRATION_STRATEGY, ImageGenerationModel, ImageUnderstandingRegistry, ImageUnderstandingStrategy, ImportDefaultAgentPluginsCommand, IntegrationStrategyKey, IntegrationStrategyRegistry, JUMP_TO_TARGETS, JsonSchemaValidator, KEYWORD_ANALYZER_STRATEGY, KNOWLEDGE_STRATEGY, KeywordAnalyzerRegistry, KeywordAnalyzerStrategy, KnowledgeDocumentVisualAssetsRuntimeCapability, KnowledgeDocumentVisualAssetsRuntimeFactoryCapability, KnowledgeGraphRuntimeCapability, KnowledgeStrategyKey, KnowledgeStrategyRegistry, KnowledgebaseDocumentsRuntimeCapability, KnowledgebaseProvisioningRuntimeCapability, KnowledgebaseRuntimeCapability, LLMUsage, LargeLanguageModel, MANAGED_CONNECTION_REGISTRY_TOKEN, MANAGED_QUEUE_HANDLER_REGISTRY_TOKEN, MANAGED_QUEUE_SERVICE_TOKEN, MCP_CAPABILITY_CHANGE_EVENT_TYPES, MODEL_OUTPUT_VALIDATION_ERROR_CODE, ModelExecutionEnvironmentCapability, ModelOutputValidationError, ModelProvider, ORGANIZATION_METADATA_KEY, OpenAICompatibleReranker, PERMISSION_OPERATION_METADATA_KEY, PLUGIN_CONFIG_RESOLVER_TOKEN, PLUGIN_JOB_PROCESSOR_METADATA, PLUGIN_METADATA, PLUGIN_METADATA_KEY, PLUGIN_VERSION_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_METADATA_KEY, PLUGIN_WEBHOOK_AUTH_SERVICE_TOKEN, PROJECT_TASK_PROVIDER, PROJECT_TYPE_PROVIDER, PROVIDE_AI_MODEL_LLM, PROVIDE_AI_MODEL_MODERATION, PROVIDE_AI_MODEL_RERANK, PROVIDE_AI_MODEL_SPEECH2TEXT, PROVIDE_AI_MODEL_TEXT_EMBEDDING, PROVIDE_AI_MODEL_TTS, PluginJobProcessor, PluginWebhookAuth, PluginWebhookAuthGuard, ProjectTaskProvider, ProjectTaskProviderRegistry, ProjectTasksRuntimeCapability, ProjectTypeProvider, ProjectTypeProviderRegistry, RESOURCE_CARD_EVENT, RESOURCE_CARD_PROVIDER, RETRIEVER_STRATEGY, RequestContext, RequestContextMiddleware, RequirePermissionOperation, RerankModel, ResourceCardProvider, ResourceCardProviderRegistry, RetrieverRegistry, RetrieverStrategy, SANDBOX_PROVIDER, SANDBOX_RUNTIME_PROVIDER, SANDBOX_SHELL_TIMEOUT_LIMITS_SEC, SANDBOX_WORKSPACE_MAPPER, SKILL_SOURCE_PROVIDER, SPEECH_TO_TEXT_PERMISSION_SERVICE_TOKEN, SPEECH_TO_TEXT_SERVICE_TOKEN, SSOProviderRegistry, SSOProviderStrategyKey, SSO_BINDING_PERMISSION_SERVICE_TOKEN, SSO_PROVIDER, STRATEGY_META_KEY, SYSTEM_GLOBAL_SCOPE, SandboxProviderRegistry, SandboxProviderStrategy, SandboxRuntimeProviderRegistry, SandboxRuntimeProviderStrategy, SandboxWorkspaceMapperRegistry, SandboxWorkspaceMapperStrategy, ShellModelExecutionSourceCapability, SkillSourceProviderRegistry, SkillSourceProviderStrategy, Speech2TextChatModel, SpeechToTextModel, StrategyBus, TENANT_GLOBAL_SCOPE_PREFIX, TENANT_GLOBAL_SCOPE_SUFFIX, TEXT_SPLITTER_STRATEGY, TOOLSET_STRATEGY, TextEmbeddingModelManager, TextSplitterRegistry, TextSplitterStrategy, TextToSpeechModel, ToolsetRegistry, ToolsetStrategy, USER_PERMISSION_SERVICE_TOKEN, VECTOR_STORE_STRATEGY, VIDEO_GENERATION_PERMISSION_SERVICE_TOKEN, VIDEO_GENERATION_SERVICE_TOKEN, VIDEO_GENERATOR_FAMILIES, VIEW_EXTENSION_CACHE_SERVICE_TOKEN, VIEW_EXTENSION_PROVIDER, VectorStoreRegistry, VectorStoreStrategy, VideoGenerationModel, ViewExtensionProvider, ViewExtensionProviderRegistry, ViewMiddlewareRuntimeCapability, WORKFLOW_NODE_STRATEGY, WORKFLOW_TRIGGER_STRATEGY, WorkflowNodeRegistry, WorkflowNodeStrategy, WorkflowTriggerRegistry, WorkflowTriggerStrategy, WorkspaceFilesRuntimeCapability, WrapWorkflowNodeExecutionCommand, XPERT_AGENT_MIDDLEWARE_RUNTIME_TOKEN, XPERT_TOOL_METHOD_METADATA, XPERT_TOOL_PROVIDER, XPERT_TOOL_PROVIDER_METADATA, XPERT_TOOL_RESULT_FORMAT_VERSION, XpFileSystem, XpertPrompt, XpertResource, XpertResourceTemplate, XpertServerPlugin, XpertTool, XpertToolProvider, XpertToolProviderCoordinator, XpertToolProviderRegistry, agentInvocationDispatchContextSchema, agentRuntimeConsumptionStateSchema, agentRuntimeDeliveryStateSchema, agentRuntimeEventMessageId, agentRuntimeEventSchema, agentRuntimeReplyTargetSchema, agentRuntimeResultClaimSchema, agentRuntimeResultConsumptionKey, als, appendSandboxMessage, applyModelConfiguration, assertConnectorDefinition, buildSandboxTimeoutMessage, calcTokenUsage, calculateLLMUsagePrice, calculateModelPrice, calculateModelUsageCharge, chunkText, countTextTokens, countTokensSafe, createI18nInstance, createPluginLogger, createRuntimeCapability, defineAgentMessageType, defineChannelMessageType, defineMcpApp, defineMcpCapabilities, defineMcpPrompt, defineMcpResource, defineMcpResourceTemplate, defineXpertTool, derivePluginArtifactNamespace, describeXpertToolProvider, discoverOpenAIModels, downloadRemoteFile, emitResourceCard, formatSandboxTimeout, getDefaultTenantId, getErrorMessage, getModelContextSize, getPermissionOperationMetadata, getPositionList, getPositionMap, getRequestContext, getRequiredPermissionOperation, getTenantGlobalScopeKey, getXpertToolMethod, isAgentInvocationTerminal, isDevelopmentSandboxRuntimeEnvironment, isModelOutputValidationError, isModelUsagePricingConfig, isPluginArtifactNamespace, isRemoteFile, isSandboxBackend, isSandboxManagedServiceAdapter, isSandboxServiceProxyAdapter, isSandboxTerminalAdapter, isStrategyInstance, isStructuredMessageType, isTenantGlobalScopeKey, knowledgebaseActions, loadYamlFile, mergeCredentials, mergeModelRequirements, mergeParentChildChunks, nativeModelTransport, normalizeContextSize, normalizeTokenUsage, pluginArtifactTableName, prepareToolResult, processAsyncAIGCManagedJob, renderRemoteModuleIframeHtml, renderRemoteReactIframeHtml, renderRemoteVueIframeHtml, resolveModelUsagePricingSnapshot, resolveSandboxBackend, resolveSandboxExecutionOptions, resolveSandboxManagedServiceAdapter, resolveSandboxServiceProxyAdapter, resolveSandboxTerminalAdapter, resolveStrategyMetadataTarget, resolveTenantGlobalScopeKey, resolveTokenUsage, resolveTokenUsageCandidates, resolveXpertMcpExtensions, runWithRequestContext, runtimeToolProviderComponent, secondsToMilliseconds, setDefaultTenantId, sumTokenUsage, taskWaitReason, textTokenBoundaries };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xpert-ai/plugin-sdk",
-  "version": "3.21.1",
+  "version": "3.22.1",
   "license": "AGPL-3.0",
   "repository": {
     "type": "git",
@@ -62,7 +62,7 @@
   },
   "dependencies": {
     "@langchain/openai": "0.6.9",
-    "@xpert-ai/contracts": "3.21.0",
+    "@xpert-ai/contracts": "3.21.2",
     "express": "^4.22.1",
     "js-tiktoken": "^1.0.21"
   },

package/src/lib/ai-model/ai-model-provider.interface.d.ts

@@ -1,4 +1,4 @@
-import { AiModelTypeEnum, IAiProviderEntity, ICopilotModel, ProviderModel, AIModelEntity } from '@xpert-ai/contracts';
+import { AiModelTypeEnum, IAiProviderEntity, ICopilotModel, ProviderModel, AIModelEntity, DiscoveredModel } from '@xpert-ai/contracts';
 import { BaseLanguageModel } from '@langchain/core/language_models/base';
 import { Embeddings } from '@langchain/core/embeddings';
 import { BaseChatModel } from '@langchain/core/language_models/chat_models';
@@ -6,6 +6,8 @@ import { AIGCModelClient, AsyncAIGCModelClient, IRerank } from './types';
 import { AIModel } from './ai-model';
 import type { NativeModelClientFactory } from './native-model';
 export interface IAIModelProviderStrategy {
+    /** Fetch account-visible models without persisting them or invoking model inference. */
+    discoverModels?(credentials: Record<string, unknown>): Promise<DiscoveredModel[]>;
     getNativeModelClient?: NativeModelClientFactory;
     /**
      * Provider metadata

package/src/lib/ai-model/index.d.ts

@@ -15,3 +15,5 @@ export * from './commands/index';
 export * from './token-usage';
 export * from './native-model';
 export * from './realtime';
+export * from './model-discovery';
+export * from './model-configuration';

package/src/lib/ai-model/model-configuration.d.ts

@@ -0,0 +1,3 @@
+import { AIModelEntity, ModelConfiguration } from '@xpert-ai/contracts';
+/** Apply an explicit saved configuration without mutating a shared predefined schema. */
+export declare function applyModelConfiguration(model: string, configuration: ModelConfiguration, schema?: AIModelEntity | null): AIModelEntity;

package/src/lib/ai-model/model-discovery.d.ts

@@ -0,0 +1,11 @@
+import { AIModelEntity, DiscoveredModel } from '@xpert-ai/contracts';
+export type OpenAIModelDiscoveryOptions = {
+    baseUrl: string;
+    authorization: string;
+    path?: string;
+    predefinedModels?: readonly AIModelEntity[];
+    fetchImpl?: typeof fetch;
+};
+/** OpenAI-compatible discovery transport and import suggestions, never runtime routing. */
+export declare function discoverOpenAIModels(options: OpenAIModelDiscoveryOptions): Promise<DiscoveredModel[]>;
+export { configurationFromModel } from '@xpert-ai/contracts';

package/src/lib/artifact-namespace.d.ts

@@ -8,3 +8,4 @@ export declare function derivePluginArtifactNamespace(packageName: string): stri
  * Keep table keys stable; the returned name is part of the plugin data contract.
  */
 export declare function pluginArtifactTableName(namespace: string, tableKey: string): string;
+export declare function isPluginArtifactNamespace(value: unknown): value is string;

package/src/lib/connector/runtime-capability.d.ts

@@ -3,6 +3,11 @@ import type { ConnectorRuntimeApi } from './strategy.interface';
 export declare const ConnectorRuntimeCapability: import("../core").RuntimeCapabilityKey<ConnectorRuntimeApi>;
 /** No binding or provider grants means no connector access. */
 export type ConnectorRuntimeScope = RuntimeIdentityScope & {
+    /** Server-owned View host identity, set only after the host authorizes the Assistant and its graph. */
+    viewHost?: {
+        type: 'agent';
+        id: string;
+    };
     /** Host-validated Agent Plugin dependencies may use their workspace binding in an authorized project. */
     allowWorkspaceBindingsInProject?: boolean;
     /** Host-selected bindings, including IDs pinned by enabled graph Connector nodes. */

package/src/lib/runtime/capabilities/index.d.ts

@@ -1,6 +1,7 @@
 export * from './actor-token';
 export * from './artifacts';
 export * from './workspace-files';
+export * from './workspace-storage';
 export * from './sandbox-jobs';
 export * from './project-provisioning';
 export * from './project-access';

package/src/lib/runtime/capabilities/workspace-files.d.ts

@@ -1,3 +1,4 @@
+import type { WorkspaceAppDataOptions, WorkspaceStorage } from './workspace-storage';
 /** Logical workspace volume catalog supported by plugin-facing file APIs. */
 export type WorkspaceFileCatalog = 'projects' | 'users' | 'knowledges' | 'skills' | 'xperts' | 'user-xperts';
 /** Stable source identifier for portable workspace file references. */
@@ -232,6 +233,9 @@ export type WorkspaceSearchUnderstandingChunksInput = WorkspaceFileScope & {
  * understanding files in Xpert workspace Volumes.
  */
 export interface WorkspaceFilesApi {
+    /** Managed .apps data in the bound Assistant workspace. Each operation reauthorizes the actor.
+     * Ordinary Files/sandbox access cannot access this namespace. Requires a scoped runtime API. */
+    appData(options: WorkspaceAppDataOptions): WorkspaceStorage;
     /** Host-bound storage identity for restoring the same scope in durable jobs. */
     readonly scope?: Readonly<WorkspaceFileScope>;
     /** Upload raw bytes into an explicitly scoped workspace Volume. */

package/src/lib/runtime/capabilities/workspace-storage.d.ts

@@ -0,0 +1,22 @@
+/** Durable application state inside an authorized Assistant workspace.
+ * Paths and lock keys are canonical relative paths: no empty, dot or .locks segments.
+ * Handles stay bound to their first authorized volume; recreate them after a workspace policy change. */
+export interface WorkspaceStorage {
+    read(path: string): Promise<Buffer>;
+    write(path: string, content: string | Uint8Array): Promise<void>;
+    mkdir(path: string): Promise<void>;
+    list(path: string): Promise<string[]>;
+    remove(path: string): Promise<void>;
+    /** Shared-filesystem mutex renewed by confirmed heartbeats. Lock loss rejects subsequent
+     * app-data and ordinary Volume mutations in the callback, including detached work. */
+    withLock<T>(key: string, action: () => Promise<T>, options?: {
+        waitMs?: number;
+    }): Promise<T>;
+}
+/** Host resolves the namespace from this loaded plugin's metadata, never from a filesystem path.
+ * Native plugins are trusted server code; this handle is not a sandbox for malicious plugin code. */
+export interface WorkspaceAppDataOptions {
+    pluginName: string;
+    /** Opt in for personal data; shared Assistant workspaces otherwise remain supported. */
+    requireUserIsolation?: boolean;
+}

package/src/lib/view-extension/index.d.ts

@@ -3,4 +3,5 @@ export * from './provider.interface';
 export * from './provider.registry';
 export * from './remote-component-html';
 export * from './tokens';
+export * from './middleware-runtime';
 export { ASSISTANT_CHAT_SEND_MESSAGE_COMMAND, ASSISTANT_CONTEXT_SET_COMMAND } from '@xpert-ai/contracts';

package/src/lib/view-extension/middleware-runtime.d.ts

@@ -0,0 +1,20 @@
+import type { IWFNMiddleware, XpertResolvedViewHostContext } from '@xpert-ai/contracts';
+import type { IAgentMiddlewareContext } from '../agent/middleware/strategy.interface';
+/** Server-only input: use the authorized context received by a View provider, never iframe input. */
+export interface ViewMiddlewareRuntimeInput {
+    context: XpertResolvedViewHostContext;
+    provider: string;
+    requiredFeature: string;
+    /** Authoring requires the same draft access policy as the Agent View host. Defaults to published. */
+    isDraft?: boolean;
+}
+/** Contains trusted configuration and callable capabilities. Never serialize this result to a Remote View. */
+export interface ViewMiddlewareRuntimeResult {
+    options: IWFNMiddleware['options'];
+    context: IAgentMiddlewareContext;
+}
+export interface ViewMiddlewareRuntimeResolver {
+    /** Revalidates identity, host access, the exact connected middleware and its Feature on every call. */
+    resolve(input: ViewMiddlewareRuntimeInput): Promise<ViewMiddlewareRuntimeResult>;
+}
+export declare const ViewMiddlewareRuntimeCapability: import("../core/runtime-capability").RuntimeCapabilityKey<ViewMiddlewareRuntimeResolver>;