@xpert-ai/plugin-sdk 3.7.0 → 3.7.2

package/index.cjs.js

@@ -4,11 +4,16 @@ var common = require('@nestjs/common');
 var constants = require('@nestjs/common/constants');
 var lodashEs = require('lodash-es');
 var core = require('@nestjs/core');
+var rxjs = require('rxjs');
+var contracts = require('@metad/contracts');
+var node_async_hooks = require('node:async_hooks');
+var passportJwt = require('passport-jwt');
+var jsonwebtoken = require('jsonwebtoken');
+var node_crypto = require('node:crypto');
 var cqrs = require('@nestjs/cqrs');
 var fs = require('fs');
 var http = require('http');
 var https = require('https');
-var contracts = require('@metad/contracts');
 var tools = require('@langchain/core/tools');
 var zod = require('zod');
 var fsPromises = require('fs/promises');
@@ -16,10 +21,8 @@ var path = require('path');
 var i18next = require('i18next');
 var FsBackend = require('i18next-fs-backend');
 var yaml = require('yaml');
-var node_async_hooks = require('node:async_hooks');
-var passportJwt = require('passport-jwt');
-var jsonwebtoken = require('jsonwebtoken');
-var node_crypto = require('node:crypto');
+var Ajv = require('ajv');
+var schemaDraft04 = require('ajv/dist/refs/json-schema-draft-06.json');
 var _axios = require('axios');
 var openai = require('@langchain/openai');
 var documents = require('@langchain/core/documents');
@@ -84,6 +87,11 @@ var _axios__namespace = /*#__PURE__*/_interopNamespaceDefault(_axios);
     };
 }
 
+const ORGANIZATION_METADATA_KEY = 'xpert:organizationId';
+const PLUGIN_METADATA_KEY = 'xpert:pluginName';
+const GLOBAL_ORGANIZATION_SCOPE = 'global';
+const STRATEGY_META_KEY = 'XPERT_STRATEGY_META_KEY';
+
 function _extends() {
     _extends = Object.assign || function assign(target) {
         for(var i = 1; i < arguments.length; i++){
@@ -115,7 +123,7 @@ function createPluginLogger(scope, baseMeta = {}) {
 }
 
 const INTEGRATION_STRATEGY = 'INTEGRATION_STRATEGY';
-const IntegrationStrategyKey = (provider)=>common.SetMetadata(INTEGRATION_STRATEGY, provider);
+const IntegrationStrategyKey = (provider)=>common.applyDecorators(common.SetMetadata(INTEGRATION_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, INTEGRATION_STRATEGY));
 
 function __decorate(decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -131,35 +139,346 @@ typeof SuppressedError === "function" ? SuppressedError : function _SuppressedEr
     return e.name = "SuppressedError", e.error = error, e.suppressed = suppressed, e;
 };
 
+// request-context.ts
+class RequestContext {
+    static currentRequestContext() {
+        const session = getRequestContext();
+        return session;
+    }
+    static currentRequest() {
+        const requestContext = RequestContext.currentRequestContext();
+        if (requestContext) {
+            return requestContext.request;
+        }
+        return null;
+    }
+    static currentTenantId() {
+        const user = RequestContext.currentUser();
+        if (user) {
+            return user.tenantId;
+        }
+        return null;
+    }
+    static currentUserId() {
+        const user = RequestContext.currentUser();
+        if (user) {
+            return user.id;
+        }
+        return null;
+    }
+    static currentRoleId() {
+        const user = RequestContext.currentUser();
+        if (user) {
+            return user.roleId;
+        }
+        return null;
+    }
+    static currentUser(throwError) {
+        const requestContext = RequestContext.currentRequestContext();
+        if (requestContext) {
+            // tslint:disable-next-line
+            const user = requestContext.request['user'];
+            if (user) {
+                return user;
+            }
+        }
+        if (throwError) {
+            throw new common.HttpException('Unauthorized', common.HttpStatus.UNAUTHORIZED);
+        }
+        return null;
+    }
+    static hasPermission(permission, throwError) {
+        return this.hasPermissions([
+            permission
+        ], throwError);
+    }
+    /**
+   * Retrieves the language code from the headers of the current request.
+   * @returns The language code (LanguagesEnum) extracted from the headers, or the default language (ENGLISH) if not found.
+   */ static getLanguageCode() {
+        // Retrieve the current request
+        const req = RequestContext.currentRequest();
+        // Variable to store the extracted language code
+        let lang;
+        // Check if a request exists
+        if (req) {
+            // Check if the 'language' header exists in the request
+            if (req.headers && req.headers['language']) {
+                // If found, set the lang variable
+                lang = req.headers['language'];
+            }
+        }
+        // Return the extracted language code or the default language (ENGLISH) if not found
+        return lang || contracts.LanguagesEnum.English;
+    }
+    static getOrganizationId() {
+        const req = this.currentRequest();
+        let organizationId;
+        const keys = [
+            'organization-id'
+        ];
+        if (req) {
+            for (const key of keys){
+                if (req.headers && req.headers[key]) {
+                    organizationId = req.headers[key];
+                    break;
+                }
+            }
+        }
+        return organizationId;
+    }
+    static hasPermissions(findPermissions, throwError) {
+        const requestContext = RequestContext.currentRequestContext();
+        if (requestContext) {
+            // tslint:disable-next-line
+            const token = passportJwt.ExtractJwt.fromAuthHeaderAsBearerToken()(requestContext.request);
+            if (token) {
+                const { permissions } = jsonwebtoken.verify(token, process.env['JWT_SECRET']);
+                if (permissions) {
+                    const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
+                    if (found.length === findPermissions.length) {
+                        return true;
+                    }
+                } else {
+                    return false;
+                }
+            }
+        }
+        if (throwError) {
+            throw new common.HttpException('Unauthorized', common.HttpStatus.UNAUTHORIZED);
+        }
+        return false;
+    }
+    static hasAnyPermission(findPermissions, throwError) {
+        const requestContext = RequestContext.currentRequestContext();
+        if (requestContext) {
+            // tslint:disable-next-line
+            const token = passportJwt.ExtractJwt.fromAuthHeaderAsBearerToken()(requestContext.request);
+            if (token) {
+                const { permissions } = jsonwebtoken.verify(token, process.env['JWT_SECRET']);
+                const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
+                if (found.length > 0) {
+                    return true;
+                }
+            }
+        }
+        if (throwError) {
+            throw new common.HttpException('Unauthorized', common.HttpStatus.UNAUTHORIZED);
+        }
+        return false;
+    }
+    static currentToken(throwError) {
+        const requestContext = RequestContext.currentRequestContext();
+        if (requestContext) {
+            // tslint:disable-next-line
+            return passportJwt.ExtractJwt.fromAuthHeaderAsBearerToken()(requestContext.request);
+        }
+        if (throwError) {
+            throw new common.HttpException('Unauthorized', common.HttpStatus.UNAUTHORIZED);
+        }
+        return null;
+    }
+    /**
+   * Checks if the current user has a specific role.
+   * @param {RolesEnum} role - The role to check.
+   * @param {boolean} throwError - Flag indicating whether to throw an error if the role is not granted.
+   * @returns {boolean} - True if the user has the role, otherwise false.
+   */ static hasRole(role, throwError) {
+        return this.hasRoles([
+            role
+        ], throwError);
+    }
+    /**
+   * Checks if the current request context has any of the specified roles.
+   *
+   * @param roles - An array of roles to check.
+   * @param throwError - Whether to throw an error if no roles are found.
+   * @returns True if any of the required roles are found, otherwise false.
+   */ static hasRoles(roles, throwError) {
+        const context = RequestContext.currentRequestContext();
+        if (context) {
+            try {
+                // tslint:disable-next-line
+                const token = this.currentToken();
+                if (token) {
+                    const { role } = jsonwebtoken.verify(token, process.env['JWT_SECRET']);
+                    return roles.includes(role != null ? role : null);
+                } else if (this.currentUser().role) {
+                    return roles.includes(this.currentUser().role.name);
+                }
+            } catch (error) {
+                if (error instanceof jsonwebtoken.JsonWebTokenError) {
+                    return false;
+                } else {
+                    throw error;
+                }
+            }
+        }
+        if (throwError) {
+            throw new common.HttpException('Unauthorized', common.HttpStatus.UNAUTHORIZED);
+        }
+        return false;
+    }
+    constructor(request, response, reqId, userId, extras = {}){
+        this.request = request;
+        this.response = response;
+        this.reqId = reqId;
+        this.userId = userId;
+        this.extras = extras;
+    }
+}
+const als = new node_async_hooks.AsyncLocalStorage();
+function getRequestContext() {
+    return als.getStore();
+}
+
+// request-context.middleware.ts
+exports.RequestContextMiddleware = class RequestContextMiddleware {
+    use(req, _res, next) {
+        var _req_user;
+        const reqId = req.headers['x-request-id'] || node_crypto.randomUUID();
+        // The userId can be placed in the authentication result here.
+        const userId = (_req_user = req['user']) == null ? void 0 : _req_user['id'];
+        const ctx = new RequestContext(req, _res, reqId, userId);
+        als.run(ctx, next);
+    }
+};
+exports.RequestContextMiddleware = __decorate([
+    common.Injectable()
+], exports.RequestContextMiddleware);
+function runWithRequestContext(req, res, next) {
+    var _req_user;
+    const reqId = req.headers['x-request-id'] || node_crypto.randomUUID();
+    const userId = (_req_user = req['user']) == null ? void 0 : _req_user['id'];
+    const ctx = new RequestContext(req, res, reqId, userId);
+    // Enable ALS scope
+    als.run(ctx, next);
+}
+
+exports.StrategyBus = class StrategyBus {
+    upsert(strategyType, entry) {
+        this.subject.next({
+            type: 'UPSERT',
+            strategyType,
+            entry
+        });
+    }
+    remove(orgId, pluginName) {
+        this.subject.next({
+            type: 'REMOVE',
+            orgId,
+            pluginName
+        });
+    }
+    constructor(){
+        this.subject = new rxjs.Subject();
+        this.events$ = this.subject.asObservable();
+    }
+};
+exports.StrategyBus = __decorate([
+    common.Injectable()
+], exports.StrategyBus);
+
 class BaseStrategyRegistry {
     onModuleInit() {
+        this.bus.events$.pipe(rxjs.filter((event)=>!event.strategyType || event.strategyType === this.strategyKey)).subscribe((evt)=>{
+            if (evt.type === 'UPSERT') {
+                this.upsert(evt.entry.instance);
+            } else if (evt.type === 'REMOVE') {
+                this.remove(evt.orgId, evt.pluginName);
+            }
+        });
         const providers = this.discoveryService.getProviders();
         for (const wrapper of providers){
             const { instance } = wrapper;
             if (!instance) continue;
-            const type = this.reflector.get(this.strategyKey, instance.constructor);
-            if (type) {
-                this.strategies.set(type, instance);
+            this.upsert(instance);
+        }
+    }
+    upsert(instance) {
+        const type = this.reflector.get(this.strategyKey, instance.constructor);
+        if (type) {
+            var _instance_metatype;
+            const target = (_instance_metatype = instance.metatype) != null ? _instance_metatype : instance.constructor;
+            var _this_reflector_get;
+            const organizationId = (_this_reflector_get = this.reflector.get(ORGANIZATION_METADATA_KEY, target)) != null ? _this_reflector_get : GLOBAL_ORGANIZATION_SCOPE;
+            var _this_strategies_get;
+            const orgMap = (_this_strategies_get = this.strategies.get(organizationId)) != null ? _this_strategies_get : new Map();
+            orgMap.set(type, instance);
+            this.strategies.set(organizationId, orgMap);
+            const pluginName = this.reflector.get(PLUGIN_METADATA_KEY, target);
+            this.logger.debug(`Registered strategy of type ${type} for organization ${organizationId} from plugin ${pluginName}`);
+            if (pluginName) {
+                var _this_pluginStrategies_get;
+                const pluginStrategies = (_this_pluginStrategies_get = this.pluginStrategies.get(pluginName)) != null ? _this_pluginStrategies_get : new Set();
+                pluginStrategies.add(type);
+                this.pluginStrategies.set(pluginName, pluginStrategies);
             }
         }
     }
-    get(type) {
-        const strategy = this.strategies.get(type);
+    /**
+     * Remove all strategies registered by the given plugin for the given organization.
+     */ remove(organizationId, pluginName) {
+        const strategies = this.pluginStrategies.get(pluginName);
+        const orgMap = this.strategies.get(organizationId);
+        for (const type of strategies != null ? strategies : []){
+            orgMap == null ? void 0 : orgMap.delete(type);
+        }
+    }
+    /**
+     * Resolve organization id, falling back to request context org or global scope.
+     */ resolveOrganization(organizationId) {
+        var _ref;
+        return (_ref = organizationId != null ? organizationId : RequestContext.getOrganizationId()) != null ? _ref : GLOBAL_ORGANIZATION_SCOPE;
+    }
+    /**
+     * Get strategy by type from the given organization including global strategies as fallback.
+     * 
+     * @param type 
+     * @param organizationId 
+     * @returns 
+     */ get(type, organizationId) {
+        var _this_strategies_get, _this_strategies_get1;
+        organizationId != null ? organizationId : organizationId = RequestContext.getOrganizationId();
+        const orgKey = this.resolveOrganization(organizationId);
+        var _this_strategies_get_get;
+        const strategy = (_this_strategies_get_get = (_this_strategies_get = this.strategies.get(orgKey)) == null ? void 0 : _this_strategies_get.get(type)) != null ? _this_strategies_get_get : orgKey === GLOBAL_ORGANIZATION_SCOPE ? undefined : (_this_strategies_get1 = this.strategies.get(GLOBAL_ORGANIZATION_SCOPE)) == null ? void 0 : _this_strategies_get1.get(type);
         if (!strategy) {
             throw new Error(`No strategy found for type ${type}`);
         }
         return strategy;
     }
-    list() {
-        return Array.from(this.strategies.values());
+    /**
+     * List all strategies for the given organization including global strategies, or only global strategies if global org is specified.
+     * 
+     * @param organizationId 
+     * @returns 
+     */ list(organizationId) {
+        var _this_strategies_get, _this_strategies_get1;
+        organizationId != null ? organizationId : organizationId = RequestContext.getOrganizationId();
+        const orgKey = this.resolveOrganization(organizationId);
+        var _this_strategies_get_values;
+        const scoped = (_this_strategies_get_values = (_this_strategies_get = this.strategies.get(orgKey)) == null ? void 0 : _this_strategies_get.values()) != null ? _this_strategies_get_values : [];
+        var _this_strategies_get_values1;
+        const global = orgKey === GLOBAL_ORGANIZATION_SCOPE ? [] : (_this_strategies_get_values1 = (_this_strategies_get1 = this.strategies.get(GLOBAL_ORGANIZATION_SCOPE)) == null ? void 0 : _this_strategies_get1.values()) != null ? _this_strategies_get_values1 : [];
+        return Array.from(new Set([
+            ...scoped,
+            ...global
+        ]));
     }
     constructor(strategyKey, discoveryService, reflector){
         this.strategyKey = strategyKey;
         this.discoveryService = discoveryService;
         this.reflector = reflector;
+        this.logger = new common.Logger(BaseStrategyRegistry.name);
         this.strategies = new Map();
+        this.pluginStrategies = new Map();
     }
 }
+__decorate([
+    common.Inject(exports.StrategyBus),
+    __metadata("design:type", typeof exports.StrategyBus === "undefined" ? Object : exports.StrategyBus)
+], BaseStrategyRegistry.prototype, "bus", void 0);
 
 exports.IntegrationStrategyRegistry = class IntegrationStrategyRegistry extends BaseStrategyRegistry {
     constructor(discoveryService, reflector){
@@ -176,7 +495,7 @@ exports.IntegrationStrategyRegistry = __decorate([
 ], exports.IntegrationStrategyRegistry);
 
 const WORKFLOW_TRIGGER_STRATEGY = 'WORKFLOW_TRIGGER_STRATEGY';
-const WorkflowTriggerStrategy = (provider)=>common.SetMetadata(WORKFLOW_TRIGGER_STRATEGY, provider);
+const WorkflowTriggerStrategy = (provider)=>common.applyDecorators(common.SetMetadata(WORKFLOW_TRIGGER_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, WORKFLOW_TRIGGER_STRATEGY));
 
 exports.WorkflowTriggerRegistry = class WorkflowTriggerRegistry extends BaseStrategyRegistry {
     constructor(discoveryService, reflector){
@@ -195,7 +514,7 @@ exports.WorkflowTriggerRegistry = __decorate([
 const WORKFLOW_NODE_STRATEGY = 'WORKFLOW_NODE_STRATEGY';
 /**
  * Decorator to mark a provider as a Workflow Node Strategy
- */ const WorkflowNodeStrategy = (provider)=>common.SetMetadata(WORKFLOW_NODE_STRATEGY, provider);
+ */ const WorkflowNodeStrategy = (provider)=>common.applyDecorators(common.SetMetadata(WORKFLOW_NODE_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, WORKFLOW_NODE_STRATEGY));
 
 exports.WorkflowNodeRegistry = class WorkflowNodeRegistry extends BaseStrategyRegistry {
     constructor(discoveryService, reflector){
@@ -223,7 +542,7 @@ exports.WorkflowNodeRegistry = __decorate([
 WrapWorkflowNodeExecutionCommand.type = '[Workflow] Wrap Workflow Node Execution';
 
 const VECTOR_STORE_STRATEGY = 'VECTOR_STORE_STRATEGY';
-const VectorStoreStrategy = (provider)=>common.SetMetadata(VECTOR_STORE_STRATEGY, provider);
+const VectorStoreStrategy = (provider)=>common.applyDecorators(common.SetMetadata(VECTOR_STORE_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, VECTOR_STORE_STRATEGY));
 
 exports.VectorStoreRegistry = class VectorStoreRegistry extends BaseStrategyRegistry {
     constructor(discoveryService, reflector){
@@ -240,7 +559,7 @@ exports.VectorStoreRegistry = __decorate([
 ], exports.VectorStoreRegistry);
 
 const TEXT_SPLITTER_STRATEGY = 'TEXT_SPLITTER_STRATEGY';
-const TextSplitterStrategy = (provider)=>common.SetMetadata(TEXT_SPLITTER_STRATEGY, provider);
+const TextSplitterStrategy = (provider)=>common.applyDecorators(common.SetMetadata(TEXT_SPLITTER_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, TEXT_SPLITTER_STRATEGY));
 
 exports.TextSplitterRegistry = class TextSplitterRegistry extends BaseStrategyRegistry {
     constructor(discoveryService, reflector){
@@ -259,7 +578,7 @@ exports.TextSplitterRegistry = __decorate([
 const DOCUMENT_SOURCE_STRATEGY = 'DOCUMENT_SOURCE_STRATEGY';
 /**
  * Decorator to mark a provider as a Document Source Strategy
- */ const DocumentSourceStrategy = (provider)=>common.SetMetadata(DOCUMENT_SOURCE_STRATEGY, provider);
+ */ const DocumentSourceStrategy = (provider)=>common.applyDecorators(common.SetMetadata(DOCUMENT_SOURCE_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, DOCUMENT_SOURCE_STRATEGY));
 
 exports.DocumentSourceRegistry = class DocumentSourceRegistry extends BaseStrategyRegistry {
     constructor(discoveryService, reflector){
@@ -278,7 +597,7 @@ exports.DocumentSourceRegistry = __decorate([
 const DOCUMENT_TRANSFORMER_STRATEGY = 'DOCUMENT_TRANSFORMER_STRATEGY';
 /**
  * Decorator to mark a provider as a Document Transformer Strategy
- */ const DocumentTransformerStrategy = (provider)=>common.SetMetadata(DOCUMENT_TRANSFORMER_STRATEGY, provider);
+ */ const DocumentTransformerStrategy = (provider)=>common.applyDecorators(common.SetMetadata(DOCUMENT_TRANSFORMER_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, DOCUMENT_TRANSFORMER_STRATEGY));
 
 exports.DocumentTransformerRegistry = class DocumentTransformerRegistry extends BaseStrategyRegistry {
     constructor(discoveryService, reflector){
@@ -297,7 +616,7 @@ exports.DocumentTransformerRegistry = __decorate([
 const RETRIEVER_STRATEGY = 'RETRIEVER_STRATEGY';
 /**
  * Decorator to mark a provider as a Retriever Strategy
- */ const RetrieverStrategy = (provider)=>common.SetMetadata(RETRIEVER_STRATEGY, provider);
+ */ const RetrieverStrategy = (provider)=>common.applyDecorators(common.SetMetadata(RETRIEVER_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, RETRIEVER_STRATEGY));
 
 exports.RetrieverRegistry = class RetrieverRegistry extends BaseStrategyRegistry {
     constructor(discoveryService, reflector){
@@ -372,7 +691,7 @@ async function downloadRemoteFile(url, dest) {
 const IMAGE_UNDERSTANDING_STRATEGY = 'IMAGE_UNDERSTANDING_STRATEGY';
 /**
  * Decorator to mark a provider as an Image Understanding Strategy
- */ const ImageUnderstandingStrategy = (provider)=>common.SetMetadata(IMAGE_UNDERSTANDING_STRATEGY, provider);
+ */ const ImageUnderstandingStrategy = (provider)=>common.applyDecorators(common.SetMetadata(IMAGE_UNDERSTANDING_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, IMAGE_UNDERSTANDING_STRATEGY));
 
 exports.ImageUnderstandingRegistry = class ImageUnderstandingRegistry extends BaseStrategyRegistry {
     constructor(discoveryService, reflector){
@@ -389,7 +708,7 @@ exports.ImageUnderstandingRegistry = __decorate([
 ], exports.ImageUnderstandingRegistry);
 
 const KNOWLEDGE_STRATEGY = 'KNOWLEDGE_STRATEGY';
-const KnowledgeStrategyKey = (provider)=>common.SetMetadata(KNOWLEDGE_STRATEGY, provider);
+const KnowledgeStrategyKey = (provider)=>common.applyDecorators(common.SetMetadata(KNOWLEDGE_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, KNOWLEDGE_STRATEGY));
 
 exports.KnowledgeStrategyRegistry = class KnowledgeStrategyRegistry extends BaseStrategyRegistry {
     constructor(discoveryService, reflector){
@@ -408,7 +727,7 @@ exports.KnowledgeStrategyRegistry = __decorate([
 const TOOLSET_STRATEGY = 'TOOLSET_STRATEGY';
 /**
  * Decorator to mark a provider as a Toolset Strategy
- */ const ToolsetStrategy = (provider)=>common.SetMetadata(TOOLSET_STRATEGY, provider);
+ */ const ToolsetStrategy = (provider)=>common.applyDecorators(common.SetMetadata(TOOLSET_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, TOOLSET_STRATEGY));
 
 exports.ToolsetRegistry = class ToolsetRegistry extends BaseStrategyRegistry {
     constructor(discoveryService, reflector){
@@ -600,336 +919,142 @@ BuiltinToolset.provider = '';
         const url = new URL(filePath, this.baseUrl);
         return url.href;
     }
-    /**
-   * Delete a file
-   */ async deleteFile(filePath) {
-        this.ensureAllowed('delete');
-        this.ensureInScope(filePath);
-        await fsPromises.unlink(filePath);
-    }
-    /**
-   * List directory contents
-   */ async listDir(dirPath) {
-        this.ensureAllowed('list');
-        this.ensureInScope(dirPath);
-        return fsPromises.readdir(dirPath);
-    }
-    /**
-   * Utility: check if a file or directory exists
-   */ async exists(targetPath) {
-        try {
-            await fsPromises.access(targetPath);
-            return true;
-        } catch (e) {
-            return false;
-        }
-    }
-    constructor(permission, basePath, baseUrl){
-        this.basePath = basePath;
-        this.baseUrl = baseUrl;
-        this.allowedOps = new Set(permission.operations);
-        this.scope = permission.scope;
-    }
-}
-
-async function createI18nInstance(pluginDir, language) {
-    const instance = i18next.createInstance();
-    const i18nDir = path.join(pluginDir, 'i18n');
-    // detect available languages dynamically
-    const lngs = fs.readdirSync(i18nDir).filter((f)=>f.endsWith('.json')).map((f)=>f.replace('.json', ''));
-    await instance.use(FsBackend).init({
-        lng: language,
-        fallbackLng: 'en',
-        preload: lngs,
-        ns: [
-            'default'
-        ],
-        defaultNS: 'default',
-        backend: {
-            loadPath: path.join(i18nDir, '{{lng}}.json')
-        },
-        interpolation: {
-            escapeValue: false
-        }
-    });
-    return instance;
-}
-
-function loadYamlFile(filePath, logger, ignoreError = true, defaultValue = {}) {
-    try {
-        const fileContent = fs.readFileSync(filePath, 'utf-8');
-        try {
-            const yamlContent = yaml.parse(fileContent);
-            return yamlContent || defaultValue;
-        } catch (e) {
-            throw new Error(`Failed to load YAML file ${filePath}: ${e}`);
-        }
-    } catch (e) {
-        if (ignoreError) {
-            logger == null ? void 0 : logger.debug(`Error loading YAML file: ${e}`);
-            return defaultValue;
-        } else {
-            throw e;
-        }
-    }
-}
-/**
- * Get the mapping from name to index from a YAML file
- * 
- * @param folderPath
- * @param fileName the YAML file name, default to '_position.yaml'
- * @return a dict with name as key and index as value
- */ function getPositionMap(folderPath, fileName = '_position.yaml', logger) {
-    const positions = getPositionList(folderPath, fileName, logger);
-    return positions.reduce((acc, name, index)=>{
-        acc[name] = index;
-        return acc;
-    }, {});
-}
-function getPositionList(folderPath, fileName = '_position.yaml', logger) {
-    const positionFilePath = path.join(folderPath, fileName);
-    const yamlContent = loadYamlFile(positionFilePath, logger, true, []);
-    const positions = yamlContent == null ? void 0 : yamlContent.filter((item)=>item && typeof item === 'string' && item.trim()).map((item)=>item.trim());
-    return positions;
-}
-function getErrorMessage(err) {
-    let error;
-    if (typeof err === 'string') {
-        error = err;
-    } else if (err && (err.name === "AggregateError" || err.constructor.name === "AggregateError")) {
-        return err.errors.map((_)=>getErrorMessage(_)).join('\n\n');
-    } else if (err instanceof Error) {
-        error = err == null ? void 0 : err.message;
-    } else if ((err == null ? void 0 : err.error) instanceof Error) {
-        var _err_error;
-        error = err == null ? void 0 : (_err_error = err.error) == null ? void 0 : _err_error.message;
-    } else if (err == null ? void 0 : err.message) {
-        error = err == null ? void 0 : err.message;
-    } else if (err) {
-        // If there is no other way, convert it to JSON string
-        error = JSON.stringify(err);
-    }
-    return error;
-}
-
-// request-context.ts
-class RequestContext {
-    static currentRequestContext() {
-        const session = getRequestContext();
-        return session;
-    }
-    static currentRequest() {
-        const requestContext = RequestContext.currentRequestContext();
-        if (requestContext) {
-            return requestContext.request;
-        }
-        return null;
-    }
-    static currentTenantId() {
-        const user = RequestContext.currentUser();
-        if (user) {
-            return user.tenantId;
-        }
-        return null;
-    }
-    static currentUserId() {
-        const user = RequestContext.currentUser();
-        if (user) {
-            return user.id;
-        }
-        return null;
-    }
-    static currentRoleId() {
-        const user = RequestContext.currentUser();
-        if (user) {
-            return user.roleId;
-        }
-        return null;
-    }
-    static currentUser(throwError) {
-        const requestContext = RequestContext.currentRequestContext();
-        if (requestContext) {
-            // tslint:disable-next-line
-            const user = requestContext.request['user'];
-            if (user) {
-                return user;
-            }
-        }
-        if (throwError) {
-            throw new common.HttpException('Unauthorized', common.HttpStatus.UNAUTHORIZED);
-        }
-        return null;
-    }
-    static hasPermission(permission, throwError) {
-        return this.hasPermissions([
-            permission
-        ], throwError);
-    }
-    /**
-   * Retrieves the language code from the headers of the current request.
-   * @returns The language code (LanguagesEnum) extracted from the headers, or the default language (ENGLISH) if not found.
-   */ static getLanguageCode() {
-        // Retrieve the current request
-        const req = RequestContext.currentRequest();
-        // Variable to store the extracted language code
-        let lang;
-        // Check if a request exists
-        if (req) {
-            // Check if the 'language' header exists in the request
-            if (req.headers && req.headers['language']) {
-                // If found, set the lang variable
-                lang = req.headers['language'];
-            }
-        }
-        // Return the extracted language code or the default language (ENGLISH) if not found
-        return lang || contracts.LanguagesEnum.English;
-    }
-    static getOrganizationId() {
-        const req = this.currentRequest();
-        let organizationId;
-        const keys = [
-            'organization-id'
-        ];
-        if (req) {
-            for (const key of keys){
-                if (req.headers && req.headers[key]) {
-                    organizationId = req.headers[key];
-                    break;
-                }
-            }
-        }
-        return organizationId;
-    }
-    static hasPermissions(findPermissions, throwError) {
-        const requestContext = RequestContext.currentRequestContext();
-        if (requestContext) {
-            // tslint:disable-next-line
-            const token = passportJwt.ExtractJwt.fromAuthHeaderAsBearerToken()(requestContext.request);
-            if (token) {
-                const { permissions } = jsonwebtoken.verify(token, process.env['JWT_SECRET']);
-                if (permissions) {
-                    const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
-                    if (found.length === findPermissions.length) {
-                        return true;
-                    }
-                } else {
-                    return false;
-                }
-            }
-        }
-        if (throwError) {
-            throw new common.HttpException('Unauthorized', common.HttpStatus.UNAUTHORIZED);
-        }
-        return false;
-    }
-    static hasAnyPermission(findPermissions, throwError) {
-        const requestContext = RequestContext.currentRequestContext();
-        if (requestContext) {
-            // tslint:disable-next-line
-            const token = passportJwt.ExtractJwt.fromAuthHeaderAsBearerToken()(requestContext.request);
-            if (token) {
-                const { permissions } = jsonwebtoken.verify(token, process.env['JWT_SECRET']);
-                const found = permissions.filter((value)=>findPermissions.indexOf(value) >= 0);
-                if (found.length > 0) {
-                    return true;
-                }
-            }
-        }
-        if (throwError) {
-            throw new common.HttpException('Unauthorized', common.HttpStatus.UNAUTHORIZED);
-        }
-        return false;
-    }
-    static currentToken(throwError) {
-        const requestContext = RequestContext.currentRequestContext();
-        if (requestContext) {
-            // tslint:disable-next-line
-            return passportJwt.ExtractJwt.fromAuthHeaderAsBearerToken()(requestContext.request);
-        }
-        if (throwError) {
-            throw new common.HttpException('Unauthorized', common.HttpStatus.UNAUTHORIZED);
-        }
-        return null;
+    /**
+   * Delete a file
+   */ async deleteFile(filePath) {
+        this.ensureAllowed('delete');
+        this.ensureInScope(filePath);
+        await fsPromises.unlink(filePath);
     }
     /**
-   * Checks if the current user has a specific role.
-   * @param {RolesEnum} role - The role to check.
-   * @param {boolean} throwError - Flag indicating whether to throw an error if the role is not granted.
-   * @returns {boolean} - True if the user has the role, otherwise false.
-   */ static hasRole(role, throwError) {
-        return this.hasRoles([
-            role
-        ], throwError);
+   * List directory contents
+   */ async listDir(dirPath) {
+        this.ensureAllowed('list');
+        this.ensureInScope(dirPath);
+        return fsPromises.readdir(dirPath);
     }
     /**
-   * Checks if the current request context has any of the specified roles.
-   *
-   * @param roles - An array of roles to check.
-   * @param throwError - Whether to throw an error if no roles are found.
-   * @returns True if any of the required roles are found, otherwise false.
-   */ static hasRoles(roles, throwError) {
-        const context = RequestContext.currentRequestContext();
-        if (context) {
-            try {
-                // tslint:disable-next-line
-                const token = this.currentToken();
-                if (token) {
-                    const { role } = jsonwebtoken.verify(token, process.env['JWT_SECRET']);
-                    return roles.includes(role != null ? role : null);
-                } else if (this.currentUser().role) {
-                    return roles.includes(this.currentUser().role.name);
-                }
-            } catch (error) {
-                if (error instanceof jsonwebtoken.JsonWebTokenError) {
-                    return false;
-                } else {
-                    throw error;
-                }
-            }
-        }
-        if (throwError) {
-            throw new common.HttpException('Unauthorized', common.HttpStatus.UNAUTHORIZED);
+   * Utility: check if a file or directory exists
+   */ async exists(targetPath) {
+        try {
+            await fsPromises.access(targetPath);
+            return true;
+        } catch (e) {
+            return false;
         }
-        return false;
     }
-    constructor(request, response, reqId, userId, extras = {}){
-        this.request = request;
-        this.response = response;
-        this.reqId = reqId;
-        this.userId = userId;
-        this.extras = extras;
+    constructor(permission, basePath, baseUrl){
+        this.basePath = basePath;
+        this.baseUrl = baseUrl;
+        this.allowedOps = new Set(permission.operations);
+        this.scope = permission.scope;
     }
 }
-const als = new node_async_hooks.AsyncLocalStorage();
-function getRequestContext() {
-    return als.getStore();
+
+async function createI18nInstance(pluginDir, language) {
+    const instance = i18next.createInstance();
+    const i18nDir = path.join(pluginDir, 'i18n');
+    // detect available languages dynamically
+    const lngs = fs.readdirSync(i18nDir).filter((f)=>f.endsWith('.json')).map((f)=>f.replace('.json', ''));
+    await instance.use(FsBackend).init({
+        lng: language,
+        fallbackLng: 'en',
+        preload: lngs,
+        ns: [
+            'default'
+        ],
+        defaultNS: 'default',
+        backend: {
+            loadPath: path.join(i18nDir, '{{lng}}.json')
+        },
+        interpolation: {
+            escapeValue: false
+        }
+    });
+    return instance;
 }
 
-// request-context.middleware.ts
-exports.RequestContextMiddleware = class RequestContextMiddleware {
-    use(req, _res, next) {
-        var _req_user;
-        const reqId = req.headers['x-request-id'] || node_crypto.randomUUID();
-        // The userId can be placed in the authentication result here.
-        const userId = (_req_user = req['user']) == null ? void 0 : _req_user['id'];
-        const ctx = new RequestContext(req, _res, reqId, userId);
-        als.run(ctx, next);
+function loadYamlFile(filePath, logger, ignoreError = true, defaultValue = {}) {
+    try {
+        const fileContent = fs.readFileSync(filePath, 'utf-8');
+        try {
+            const yamlContent = yaml.parse(fileContent);
+            return yamlContent || defaultValue;
+        } catch (e) {
+            throw new Error(`Failed to load YAML file ${filePath}: ${e}`);
+        }
+    } catch (e) {
+        if (ignoreError) {
+            logger == null ? void 0 : logger.debug(`Error loading YAML file: ${e}`);
+            return defaultValue;
+        } else {
+            throw e;
+        }
+    }
+}
+/**
+ * Get the mapping from name to index from a YAML file
+ * 
+ * @param folderPath
+ * @param fileName the YAML file name, default to '_position.yaml'
+ * @return a dict with name as key and index as value
+ */ function getPositionMap(folderPath, fileName = '_position.yaml', logger) {
+    const positions = getPositionList(folderPath, fileName, logger);
+    return positions.reduce((acc, name, index)=>{
+        acc[name] = index;
+        return acc;
+    }, {});
+}
+function getPositionList(folderPath, fileName = '_position.yaml', logger) {
+    const positionFilePath = path.join(folderPath, fileName);
+    const yamlContent = loadYamlFile(positionFilePath, logger, true, []);
+    const positions = yamlContent == null ? void 0 : yamlContent.filter((item)=>item && typeof item === 'string' && item.trim()).map((item)=>item.trim());
+    return positions;
+}
+function getErrorMessage(err) {
+    let error;
+    if (typeof err === 'string') {
+        error = err;
+    } else if (err && (err.name === "AggregateError" || err.constructor.name === "AggregateError")) {
+        return err.errors.map((_)=>getErrorMessage(_)).join('\n\n');
+    } else if (err instanceof Error) {
+        error = err == null ? void 0 : err.message;
+    } else if ((err == null ? void 0 : err.error) instanceof Error) {
+        var _err_error;
+        error = err == null ? void 0 : (_err_error = err.error) == null ? void 0 : _err_error.message;
+    } else if (err == null ? void 0 : err.message) {
+        error = err == null ? void 0 : err.message;
+    } else if (err) {
+        // If there is no other way, convert it to JSON string
+        error = JSON.stringify(err);
+    }
+    return error;
+}
+class JsonSchemaValidator {
+    parseAndValidate(schemaStr) {
+        if (!schemaStr) return undefined;
+        let schema;
+        try {
+            schema = JSON.parse(schemaStr);
+        } catch (e) {
+            throw new Error('Schema is not valid JSON');
+        }
+        const validate = this.ajv.getSchema(schemaDraft04.$id);
+        if (!validate(schema)) {
+            throw new Error('Invalid JSON Schema: ' + this.ajv.errorsText(validate.errors));
+        }
+        return schema;
+    }
+    constructor(){
+        this.ajv = new Ajv({
+            strict: false
+        });
+        this.ajv.addMetaSchema(schemaDraft04);
     }
-};
-exports.RequestContextMiddleware = __decorate([
-    common.Injectable()
-], exports.RequestContextMiddleware);
-function runWithRequestContext(req, res, next) {
-    var _req_user;
-    const reqId = req.headers['x-request-id'] || node_crypto.randomUUID();
-    const userId = (_req_user = req['user']) == null ? void 0 : _req_user['id'];
-    const ctx = new RequestContext(req, res, reqId, userId);
-    // Enable ALS scope
-    als.run(ctx, next);
 }
 
 const DATASOURCE_STRATEGY = 'DATASOURCE_STRATEGY';
-const DataSourceStrategy = (provider)=>common.SetMetadata(DATASOURCE_STRATEGY, provider);
+const DataSourceStrategy = (provider)=>common.applyDecorators(common.SetMetadata(DATASOURCE_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, DATASOURCE_STRATEGY));
 
 exports.DataSourceStrategyRegistry = class DataSourceStrategyRegistry extends BaseStrategyRegistry {
     constructor(discoveryService, reflector){
@@ -1242,6 +1367,7 @@ function AIModelProviderStrategy(provider) {
     }
     const dir = file ? path.dirname(file) : process.cwd();
     return function(target) {
+        common.SetMetadata(STRATEGY_META_KEY, AI_MODEL_PROVIDER)(target);
         // Ensure NestJS is discoverable
         common.SetMetadata(AI_MODEL_PROVIDER, provider)(target);
         // Write custom path (does not affect Discovery)
@@ -1533,6 +1659,46 @@ const PARAMETER_RULE_TEMPLATE = {
     }
 };
 
+const CommonParameterRules = [
+    {
+        name: 'temperature',
+        label: {
+            zh_Hans: '温度',
+            en_US: `Temperature`
+        },
+        type: contracts.ParameterType.FLOAT,
+        help: {
+            zh_Hans: '控制模型输出的随机性。较高的值（例如 1.0）使响应更具创意，而较低的值（例如 0.1）使响应更具确定性和重点性。',
+            en_US: `Controls the randomness of the model's output. A higher value (e.g., 1.0) makes responses more creative, while a lower value (e.g., 0.1) makes them more deterministic and focused.`
+        },
+        required: false,
+        default: 0.2,
+        min: 0,
+        max: 1,
+        precision: 0.1
+    },
+    {
+        label: {
+            zh_Hans: '最大尝试次数',
+            en_US: 'The maximum number of attempts'
+        },
+        type: contracts.ParameterType.INT,
+        help: {
+            zh_Hans: '如果请求由于网络超时或速率限制等问题而失败，系统将尝试重新发送请求的最大次数',
+            en_US: 'The maximum number of attempts the system will make to resend a request if it fails due to issues like network timeouts or rate limits'
+        },
+        required: false,
+        default: 6,
+        min: 0,
+        max: 10,
+        precision: 0,
+        name: 'maxRetries'
+    }
+];
+function mergeCredentials(credentials, modelProperties) {
+    return _extends({}, credentials != null ? credentials : {}, modelProperties != null ? modelProperties : {});
+}
+
 let AIModel = class AIModel {
     getChatModel(copilotModel, options) {
         throw new Error(`Unsupport chat model!`);
@@ -1676,6 +1842,15 @@ let AIModel = class AIModel {
             ...parameterRules.filter((_)=>!CommonParameterRules.some((r)=>r.name === _.name))
         ];
     }
+    getModelProfile(model, credentials) {
+        var _modelSchema_model_properties, _modelSchema_features, _modelSchema_features1, _modelSchema_features2, _modelSchema_features3;
+        const modelSchema = this.getModelSchema(model, credentials);
+        return modelSchema && {
+            maxInputTokens: (_modelSchema_model_properties = modelSchema.model_properties) == null ? void 0 : _modelSchema_model_properties.context_size,
+            toolCalling: ((_modelSchema_features = modelSchema.features) == null ? void 0 : _modelSchema_features.includes(contracts.ModelFeature.TOOL_CALL)) || ((_modelSchema_features1 = modelSchema.features) == null ? void 0 : _modelSchema_features1.includes(contracts.ModelFeature.MULTI_TOOL_CALL)) || ((_modelSchema_features2 = modelSchema.features) == null ? void 0 : _modelSchema_features2.includes(contracts.ModelFeature.STREAM_TOOL_CALL)),
+            structuredOutput: (_modelSchema_features3 = modelSchema.features) == null ? void 0 : _modelSchema_features3.includes(contracts.ModelFeature.STRUCTURED_OUTPUT)
+        };
+    }
     constructor(modelProvider, modelType){
         this.modelProvider = modelProvider;
         this.modelType = modelType;
@@ -1715,46 +1890,6 @@ class RerankModel extends AIModel {
     }
 }
 
-const CommonParameterRules = [
-    {
-        name: 'temperature',
-        label: {
-            zh_Hans: '温度',
-            en_US: `Temperature`
-        },
-        type: contracts.ParameterType.FLOAT,
-        help: {
-            zh_Hans: '控制模型输出的随机性。较高的值（例如 1.0）使响应更具创意，而较低的值（例如 0.1）使响应更具确定性和重点性。',
-            en_US: `Controls the randomness of the model's output. A higher value (e.g., 1.0) makes responses more creative, while a lower value (e.g., 0.1) makes them more deterministic and focused.`
-        },
-        required: false,
-        default: 0.2,
-        min: 0,
-        max: 1,
-        precision: 0.1
-    },
-    {
-        label: {
-            zh_Hans: '最大尝试次数',
-            en_US: 'The maximum number of attempts'
-        },
-        type: contracts.ParameterType.INT,
-        help: {
-            zh_Hans: '如果请求由于网络超时或速率限制等问题而失败，系统将尝试重新发送请求的最大次数',
-            en_US: 'The maximum number of attempts the system will make to resend a request if it fails due to issues like network timeouts or rate limits'
-        },
-        required: false,
-        default: 6,
-        min: 0,
-        max: 10,
-        precision: 0,
-        name: 'maxRetries'
-    }
-];
-function mergeCredentials(credentials, modelProperties) {
-    return _extends({}, credentials != null ? credentials : {}, modelProperties != null ? modelProperties : {});
-}
-
 class SpeechToTextModel extends AIModel {
 }
 
@@ -2081,7 +2216,7 @@ class OpenAICompatibleReranker {
             if (!Array.isArray(output)) {
                 throw new Error('Invalid response format: missing results array');
             }
-            // 收集原始分数并进行归一化处理
+            // Collect raw scores and normalize them.
             const scores = output.map((r)=>r.relevance_score);
             const minScore = Math.min(...scores);
             const maxScore = Math.max(...scores);
@@ -2160,7 +2295,7 @@ class Speech2TextChatModel extends chat_models.BaseChatModel {
 CreateModelClientCommand.type = '[AI Model] Create Model Client';
 
 const AGENT_MIDDLEWARE_STRATEGY = 'AGENT_MIDDLEWARE_STRATEGY';
-const AgentMiddlewareStrategy = (provider)=>common.SetMetadata(AGENT_MIDDLEWARE_STRATEGY, provider);
+const AgentMiddlewareStrategy = (provider)=>common.applyDecorators(common.SetMetadata(AGENT_MIDDLEWARE_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, AGENT_MIDDLEWARE_STRATEGY));
 
 exports.AgentMiddlewareRegistry = class AgentMiddlewareRegistry extends BaseStrategyRegistry {
     constructor(discoveryService, reflector){
@@ -2210,6 +2345,7 @@ exports.AiModelNotFoundException = AiModelNotFoundException;
 exports.BaseHTTPQueryRunner = BaseHTTPQueryRunner;
 exports.BaseQueryRunner = BaseQueryRunner;
 exports.BaseSQLQueryRunner = BaseSQLQueryRunner;
+exports.BaseStrategyRegistry = BaseStrategyRegistry;
 exports.BaseTool = BaseTool;
 exports.BaseToolset = BaseToolset;
 exports.BuiltinToolset = BuiltinToolset;
@@ -2223,17 +2359,21 @@ exports.DOCUMENT_TRANSFORMER_STRATEGY = DOCUMENT_TRANSFORMER_STRATEGY;
 exports.DataSourceStrategy = DataSourceStrategy;
 exports.DocumentSourceStrategy = DocumentSourceStrategy;
 exports.DocumentTransformerStrategy = DocumentTransformerStrategy;
+exports.GLOBAL_ORGANIZATION_SCOPE = GLOBAL_ORGANIZATION_SCOPE;
 exports.IMAGE_UNDERSTANDING_STRATEGY = IMAGE_UNDERSTANDING_STRATEGY;
 exports.INTEGRATION_STRATEGY = INTEGRATION_STRATEGY;
 exports.ImageUnderstandingStrategy = ImageUnderstandingStrategy;
 exports.IntegrationStrategyKey = IntegrationStrategyKey;
 exports.JUMP_TO_TARGETS = JUMP_TO_TARGETS;
+exports.JsonSchemaValidator = JsonSchemaValidator;
 exports.KNOWLEDGE_STRATEGY = KNOWLEDGE_STRATEGY;
 exports.KnowledgeStrategyKey = KnowledgeStrategyKey;
 exports.LLMUsage = LLMUsage;
 exports.LargeLanguageModel = LargeLanguageModel;
+exports.ORGANIZATION_METADATA_KEY = ORGANIZATION_METADATA_KEY;
 exports.OpenAICompatibleReranker = OpenAICompatibleReranker;
 exports.PLUGIN_METADATA = PLUGIN_METADATA;
+exports.PLUGIN_METADATA_KEY = PLUGIN_METADATA_KEY;
 exports.PROVIDE_AI_MODEL_LLM = PROVIDE_AI_MODEL_LLM;
 exports.PROVIDE_AI_MODEL_MODERATION = PROVIDE_AI_MODEL_MODERATION;
 exports.PROVIDE_AI_MODEL_RERANK = PROVIDE_AI_MODEL_RERANK;
@@ -2244,6 +2384,7 @@ exports.RETRIEVER_STRATEGY = RETRIEVER_STRATEGY;
 exports.RequestContext = RequestContext;
 exports.RerankModel = RerankModel;
 exports.RetrieverStrategy = RetrieverStrategy;
+exports.STRATEGY_META_KEY = STRATEGY_META_KEY;
 exports.Speech2TextChatModel = Speech2TextChatModel;
 exports.SpeechToTextModel = SpeechToTextModel;
 exports.TEXT_SPLITTER_STRATEGY = TEXT_SPLITTER_STRATEGY;