@xpert-ai/plugin-sdk 3.7.2 → 3.8.0

package/index.cjs.js

@@ -30,6 +30,7 @@ var chat_models = require('@langchain/core/language_models/chat_models');
 var messages = require('@langchain/core/messages');
 var env = require('@langchain/core/utils/env');
 require('js-tiktoken');
+var base = require('@langchain/core/language_models/base');
 
 function _interopNamespaceDefault(e) {
 	var n = Object.create(null);
@@ -951,6 +952,52 @@ BuiltinToolset.provider = '';
     }
 }
 
+/**
+ * System token for resolving integration read service from plugin context.
+ */ const INTEGRATION_PERMISSION_SERVICE_TOKEN = 'XPERT_PLUGIN_INTEGRATION_PERMISSION_SERVICE';
+
+/**
+ * System token for resolving analytics permission service from plugin context.
+ */ const ANALYTICS_PERMISSION_SERVICE_TOKEN = 'XPERT_PLUGIN_ANALYTICS_PERMISSION_SERVICE';
+
+const PERMISSION_OPERATION_METADATA_KEY = 'XPERT_PLUGIN_PERMISSION_OPERATION';
+function RequirePermissionOperation(permissionType, operation) {
+    return (_target, _propertyKey, descriptor)=>{
+        const method = descriptor.value;
+        if (typeof method !== 'function') {
+            throw new Error('RequirePermissionOperation can only be applied to methods');
+        }
+        Reflect.defineMetadata(PERMISSION_OPERATION_METADATA_KEY, {
+            permissionType,
+            operation
+        }, method);
+    };
+}
+function getPermissionOperationMetadata(method) {
+    if (typeof method !== 'function') {
+        return undefined;
+    }
+    return Reflect.getMetadata(PERMISSION_OPERATION_METADATA_KEY, method);
+}
+function getRequiredPermissionOperation(method, permissionType) {
+    const metadata = getPermissionOperationMetadata(method);
+    if (!metadata || metadata.permissionType !== permissionType) {
+        return undefined;
+    }
+    return metadata.operation;
+}
+
+/**
+ * System token for resolving handoff queue service from plugin context.
+ */ const HANDOFF_PERMISSION_SERVICE_TOKEN = 'XPERT_PLUGIN_HANDOFF_PERMISSION_SERVICE';
+/**
+ * Internal system token used by core to expose the handoff queue bridge.
+ */ const HANDOFF_QUEUE_SERVICE_TOKEN = 'XPERT_HANDOFF_QUEUE_SERVICE';
+
+/**
+ * System token for resolving user permission service from plugin context.
+ */ const USER_PERMISSION_SERVICE_TOKEN = 'XPERT_PLUGIN_USER_PERMISSION_SERVICE';
+
 async function createI18nInstance(pluginDir, language) {
     const instance = i18next.createInstance();
     const i18nDir = path.join(pluginDir, 'i18n');
@@ -1365,6 +1412,18 @@ function AIModelProviderStrategy(provider) {
     if (file == null ? void 0 : file.startsWith('file:///')) {
         file = file.replace('file://', '');
     }
+    // Strip :line:col suffix (e.g. "/path/file.js:37:5" -> "/path/file.js")
+    if (file) {
+        file = file.replace(/:\d+:\d+$/, '');
+    }
+    // Decode URL-encoded paths (e.g. Chinese characters: %E9%A1%B9%E7%9B%AE -> 项目)
+    if (file) {
+        try {
+            file = decodeURIComponent(file);
+        } catch (e) {
+        // keep as-is if decode fails
+        }
+    }
     const dir = file ? path.dirname(file) : process.cwd();
     return function(target) {
         common.SetMetadata(STRATEGY_META_KEY, AI_MODEL_PROVIDER)(target);
@@ -2283,6 +2342,48 @@ class Speech2TextChatModel extends chat_models.BaseChatModel {
     return 0;
 }
 
+function getModelContextSize(input) {
+    if (isCopilotModel(input)) {
+        var _input_options;
+        return normalizeContextSize((_input_options = input.options) == null ? void 0 : _input_options[contracts.ModelPropertyKey.CONTEXT_SIZE]);
+    }
+    // Backward compatibility for langchain <1.0.0
+    if (input.metadata && "profile" in input.metadata) {
+        const profile = input.metadata['profile'];
+        if ("maxInputTokens" in profile && (typeof profile.maxInputTokens === "number" || profile.maxInputTokens == null)) {
+            var _profile_maxInputTokens;
+            return (_profile_maxInputTokens = profile.maxInputTokens) != null ? _profile_maxInputTokens : undefined;
+        }
+    }
+    // Langchain v1.0.0+
+    if ("profile" in input && typeof input.profile === "object" && input.profile && "maxInputTokens" in input.profile && (typeof input.profile.maxInputTokens === "number" || input.profile.maxInputTokens == null)) {
+        var _input_profile_maxInputTokens;
+        return (_input_profile_maxInputTokens = input.profile.maxInputTokens) != null ? _input_profile_maxInputTokens : undefined;
+    }
+    if ("model" in input && typeof input.model === "string") {
+        return base.getModelContextSize(input.model);
+    }
+    if ("modelName" in input && typeof input.modelName === "string") {
+        return base.getModelContextSize(input.modelName);
+    }
+    return undefined;
+}
+function isCopilotModel(input) {
+    return typeof input === "object" && input !== null && !("invoke" in input);
+}
+function normalizeContextSize(value) {
+    if (typeof value === "number" && Number.isFinite(value) && value > 0) {
+        return Math.floor(value);
+    }
+    if (typeof value === "string") {
+        const parsed = Number.parseInt(value, 10);
+        if (Number.isFinite(parsed) && parsed > 0) {
+            return parsed;
+        }
+    }
+    return undefined;
+}
+
 /**
  * Get a Chat Model of copilot model and check it's token limitation, record the token usage
  */ class CreateModelClientCommand extends cqrs.Command {
@@ -2319,6 +2420,651 @@ exports.AgentMiddlewareRegistry = __decorate([
     "end"
 ];
 
+/**
+ * Structured message types (suggested format):
+ * - channel.{provider}.{action}.v{number}
+ * - agent.{action}.v{number}
+ * - system.{action}.v{number}
+ * - plugin.{domain}.{action}.v{number}
+ *
+ * Note: At runtime, any string type is still allowed, facilitating dynamic extension by plugins.
+ */ const SEGMENT_PATTERN = /^[a-z][a-z0-9_-]*$/i;
+const VERSION_PATTERN = /^v[1-9][0-9]*$/;
+function assertSegment(input, name) {
+    if (!SEGMENT_PATTERN.test(input)) {
+        throw new Error(`Invalid ${name} segment: "${input}"`);
+    }
+}
+/**
+ * Unified construction of channel message types to avoid manual string errors.
+ * Example: channel.lark.inbound.v1
+ */ function defineChannelMessageType(provider, action, version) {
+    assertSegment(provider, 'provider');
+    assertSegment(action, 'action');
+    if (!Number.isInteger(version) || version <= 0) {
+        throw new Error(`Invalid version: "${version}"`);
+    }
+    return `channel.${provider}.${action}.v${version}`;
+}
+/**
+ * Unified construction of agent message types.
+ * Example: agent.handoff.v1
+ */ function defineAgentMessageType(action, version) {
+    assertSegment(action, 'action');
+    if (!Number.isInteger(version) || version <= 0) {
+        throw new Error(`Invalid version: "${version}"`);
+    }
+    return `agent.${action}.v${version}`;
+}
+/**
+ * Check if a type conforms to the structured naming convention (format only, no semantic validation).
+ */ function isStructuredMessageType(type) {
+    const parts = type.split('.');
+    if (parts.length < 3) {
+        return false;
+    }
+    const version = parts[parts.length - 1];
+    if (!VERSION_PATTERN.test(version)) {
+        return false;
+    }
+    return parts.slice(0, -1).every((part)=>SEGMENT_PATTERN.test(part));
+}
+
+const AGENT_CHAT_DISPATCH_MESSAGE_TYPE = defineAgentMessageType('chat_dispatch', 1);
+
+/**
+ * Handoff Processor meta key。
+ */ const HANDOFF_PROCESSOR_STRATEGY = 'HANDOFF_PROCESSOR_STRATEGY';
+/**
+ * Declare on a provider:
+ * 1) Which message types it handles
+ * 2) Default execution policy (lane/timeout)
+ */ function HandoffProcessorStrategy(provider, metadata) {
+    var _metadata_types;
+    if (!(metadata == null ? void 0 : (_metadata_types = metadata.types) == null ? void 0 : _metadata_types.length)) {
+        throw new Error('HandoffProcessor requires at least one message type');
+    }
+    return common.applyDecorators(common.SetMetadata(HANDOFF_PROCESSOR_STRATEGY, provider), common.SetMetadata(STRATEGY_META_KEY, HANDOFF_PROCESSOR_STRATEGY));
+}
+
+exports.HandoffProcessorRegistry = class HandoffProcessorRegistry extends BaseStrategyRegistry {
+    constructor(discoveryService, reflector){
+        super(HANDOFF_PROCESSOR_STRATEGY, discoveryService, reflector);
+    }
+};
+exports.HandoffProcessorRegistry = __decorate([
+    common.Injectable(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [
+        typeof core.DiscoveryService === "undefined" ? Object : core.DiscoveryService,
+        typeof core.Reflector === "undefined" ? Object : core.Reflector
+    ])
+], exports.HandoffProcessorRegistry);
+
+/**
+ * Handoff execution types.
+ *
+ * Note:
+ * - Two-gate lane/session permit logic has been removed.
+ * - Lane is now an execution tag for observability and soft policy only.
+ */ const DEFAULT_EXECUTION_CONFIG = {
+    lanes: {
+        main: 8,
+        subagent: 16,
+        cron: 4,
+        nested: 8
+    },
+    runTtlMs: 10 * 60 * 1000
+};
+
+/**
+ * Common platform message length limits
+ */ const CHAT_CHANNEL_TEXT_LIMITS = {
+    lark: 4000,
+    wecom: 2048,
+    dingtalk: 4000,
+    slack: 4000,
+    telegram: 4096,
+    discord: 2000
+};
+/**
+ * Chunk long text by specified length
+ *
+ * @param text - Text to chunk
+ * @param limit - Maximum characters per chunk
+ * @param mode - Chunking mode: 'text' splits by character, 'markdown' tries to preserve paragraphs
+ * @returns Array of chunked text
+ */ function chunkText(text, limit, mode = 'text') {
+    if (!text || text.length <= limit) {
+        return [
+            text
+        ];
+    }
+    const chunks = [];
+    if (mode === 'markdown') {
+        // Markdown mode: try to split at paragraph boundaries
+        const paragraphs = text.split(/\n\n+/);
+        let currentChunk = '';
+        for (const para of paragraphs){
+            if (currentChunk.length + para.length + 2 <= limit) {
+                currentChunk += (currentChunk ? '\n\n' : '') + para;
+            } else if (para.length > limit) {
+                // Paragraph itself is too long, need hard split
+                if (currentChunk) {
+                    chunks.push(currentChunk);
+                    currentChunk = '';
+                }
+                let remaining = para;
+                while(remaining.length > limit){
+                    chunks.push(remaining.slice(0, limit));
+                    remaining = remaining.slice(limit);
+                }
+                currentChunk = remaining;
+            } else {
+                if (currentChunk) {
+                    chunks.push(currentChunk);
+                }
+                currentChunk = para;
+            }
+        }
+        if (currentChunk) {
+            chunks.push(currentChunk);
+        }
+    } else {
+        // Plain text mode: split directly by length
+        let remaining = text;
+        while(remaining.length > limit){
+            chunks.push(remaining.slice(0, limit));
+            remaining = remaining.slice(limit);
+        }
+        if (remaining) {
+            chunks.push(remaining);
+        }
+    }
+    return chunks;
+}
+
+/**
+ * Metadata key for chat channel
+ */ const CHAT_CHANNEL = 'CHAT_CHANNEL';
+/**
+ * Decorator for chat channel implementations
+ *
+ * Use this decorator to register a chat channel implementation.
+ * The decorated class will be automatically discovered and registered
+ * to ChatChannelRegistry on module initialization.
+ *
+ * @param type - The channel type identifier (e.g., 'lark', 'wecom', 'dingtalk')
+ *
+ * @example
+ * ```typescript
+ * @Injectable()
+ * @ChatChannel('lark')
+ * export class LarkChatChannel implements IChatChannel {
+ *   // Implementation
+ * }
+ * ```
+ */ const ChatChannel = (type)=>common.SetMetadata(CHAT_CHANNEL, type);
+
+exports.ChatChannelRegistry = class ChatChannelRegistry extends BaseStrategyRegistry {
+    constructor(discoveryService, reflector){
+        super(CHAT_CHANNEL, discoveryService, reflector);
+    }
+};
+exports.ChatChannelRegistry = __decorate([
+    common.Injectable(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [
+        typeof core.DiscoveryService === "undefined" ? Object : core.DiscoveryService,
+        typeof core.Reflector === "undefined" ? Object : core.Reflector
+    ])
+], exports.ChatChannelRegistry);
+
+class CancelConversationCommand {
+    constructor(input){
+        this.input = input;
+    }
+}
+CancelConversationCommand.type = '[Chat Conversation] Cancel';
+
+/**
+ * Protocol definition for pluggable memory backends.
+ *
+ * This module defines the BackendProtocol that all backend implementations
+ * must follow. Backends can store files in different locations (state, filesystem,
+ * database, etc.) and provide a uniform interface for file operations.
+ */ /**
+ * Type guard to check if a backend supports execution.
+ *
+ * @param backend - Backend instance to check
+ * @returns True if the backend implements SandboxBackendProtocol
+ */ function isSandboxBackend(backend) {
+    return typeof backend.execute === "function" && typeof backend.id === "string";
+}
+
+/**
+ * BaseSandbox: Abstract base class for sandbox backends with command execution.
+ *
+ * This class provides default implementations for all SandboxBackendProtocol
+ * methods using shell commands executed via execute(). Concrete implementations
+ * only need to implement the execute() method.
+ *
+ * Requires Node.js 20+ on the sandbox host.
+ */ /**
+ * Node.js command template for glob operations.
+ * Uses web-standard atob() for base64 decoding.
+ */ function buildGlobCommand(searchPath, pattern) {
+    const pathB64 = btoa(searchPath);
+    const patternB64 = btoa(pattern);
+    return `node -e "
+const fs = require('fs');
+const path = require('path');
+
+const searchPath = atob('${pathB64}');
+const pattern = atob('${patternB64}');
+
+function globMatch(relativePath, pattern) {
+  const regexPattern = pattern
+    .replace(/\\*\\*/g, '<<<GLOBSTAR>>>')
+    .replace(/\\*/g, '[^/]*')
+    .replace(/\\?/g, '.')
+    .replace(/<<<GLOBSTAR>>>/g, '.*');
+  return new RegExp('^' + regexPattern + '$').test(relativePath);
+}
+
+function walkDir(dir, baseDir, results) {
+  try {
+    const entries = fs.readdirSync(dir, { withFileTypes: true });
+    for (const entry of entries) {
+      const fullPath = path.join(dir, entry.name);
+      const relativePath = path.relative(baseDir, fullPath);
+      if (entry.isDirectory()) {
+        walkDir(fullPath, baseDir, results);
+      } else if (globMatch(relativePath, pattern)) {
+        const stat = fs.statSync(fullPath);
+        console.log(JSON.stringify({
+          path: relativePath,
+          size: stat.size,
+          mtime: stat.mtimeMs,
+          isDir: false
+        }));
+      }
+    }
+  } catch (e) {
+    // Silent failure for non-existent paths
+  }
+}
+
+try {
+  process.chdir(searchPath);
+  walkDir('.', '.', []);
+} catch (e) {
+  // Silent failure for non-existent paths
+}
+"`;
+}
+/**
+ * Node.js command template for listing directory contents.
+ */ function buildLsCommand(dirPath) {
+    const pathB64 = btoa(dirPath);
+    return `node -e "
+const fs = require('fs');
+const path = require('path');
+
+const dirPath = atob('${pathB64}');
+
+try {
+  const entries = fs.readdirSync(dirPath, { withFileTypes: true });
+  for (const entry of entries) {
+    const fullPath = path.join(dirPath, entry.name);
+    const stat = fs.statSync(fullPath);
+    console.log(JSON.stringify({
+      path: entry.isDirectory() ? fullPath + '/' : fullPath,
+      size: stat.size,
+      mtime: stat.mtimeMs,
+      isDir: entry.isDirectory()
+    }));
+  }
+} catch (e) {
+  console.error('Error: ' + e.message);
+  process.exit(1);
+}
+"`;
+}
+/**
+ * Node.js command template for reading files.
+ */ function buildReadCommand(filePath, offset, limit) {
+    const pathB64 = btoa(filePath);
+    // Coerce offset and limit to safe non-negative integers before embedding in the shell command.
+    const safeOffset = Number.isFinite(offset) && offset > 0 ? Math.floor(offset) : 0;
+    const safeLimit = Number.isFinite(limit) && limit > 0 && limit < Number.MAX_SAFE_INTEGER ? Math.floor(limit) : 0;
+    return `node -e "
+const fs = require('fs');
+
+const filePath = atob('${pathB64}');
+const offset = ${safeOffset};
+const limit = ${safeLimit};
+
+if (!fs.existsSync(filePath)) {
+  console.log('Error: File not found');
+  process.exit(1);
+}
+
+const stat = fs.statSync(filePath);
+if (stat.size === 0) {
+  console.log('System reminder: File exists but has empty contents');
+  process.exit(0);
+}
+
+const content = fs.readFileSync(filePath, 'utf-8');
+const lines = content.split('\\n');
+const selected = lines.slice(offset, offset + limit);
+
+for (let i = 0; i < selected.length; i++) {
+  const lineNum = offset + i + 1;
+  console.log(String(lineNum).padStart(6) + '\\t' + selected[i]);
+}
+"`;
+}
+/**
+ * Node.js command template for writing files.
+ */ function buildWriteCommand(filePath, content) {
+    const pathB64 = btoa(filePath);
+    const contentB64 = btoa(content);
+    return `node -e "
+const fs = require('fs');
+const path = require('path');
+
+const filePath = atob('${pathB64}');
+const content = atob('${contentB64}');
+
+if (fs.existsSync(filePath)) {
+  console.error('Error: File already exists');
+  process.exit(1);
+}
+
+const parentDir = path.dirname(filePath) || '.';
+fs.mkdirSync(parentDir, { recursive: true });
+
+fs.writeFileSync(filePath, content, 'utf-8');
+console.log('OK');
+"`;
+}
+/**
+ * Node.js command template for editing files.
+ */ function buildEditCommand(filePath, oldStr, newStr, replaceAll) {
+    const pathB64 = btoa(filePath);
+    const oldB64 = btoa(oldStr);
+    const newB64 = btoa(newStr);
+    return `node -e "
+const fs = require('fs');
+
+const filePath = atob('${pathB64}');
+const oldStr = atob('${oldB64}');
+const newStr = atob('${newB64}');
+const replaceAll = ${Boolean(replaceAll)};
+
+let text;
+try {
+  text = fs.readFileSync(filePath, 'utf-8');
+} catch (e) {
+  process.exit(3);
+}
+
+const count = text.split(oldStr).length - 1;
+
+if (count === 0) {
+  process.exit(1);
+}
+if (count > 1 && !replaceAll) {
+  process.exit(2);
+}
+
+const result = text.split(oldStr).join(newStr);
+fs.writeFileSync(filePath, result, 'utf-8');
+console.log(count);
+"`;
+}
+/**
+ * Node.js command template for grep operations.
+ */ function buildGrepCommand(pattern, searchPath, globPattern) {
+    const patternB64 = btoa(pattern);
+    const pathB64 = btoa(searchPath);
+    const globB64 = globPattern ? btoa(globPattern) : "";
+    return `node -e "
+const fs = require('fs');
+const path = require('path');
+
+const pattern = atob('${patternB64}');
+const searchPath = atob('${pathB64}');
+const globPattern = ${globPattern ? `atob('${globB64}')` : "null"};
+
+let regex;
+try {
+  regex = new RegExp(pattern);
+} catch (e) {
+  console.error('Invalid regex: ' + e.message);
+  process.exit(1);
+}
+
+function globMatch(filePath, pattern) {
+  if (!pattern) return true;
+  const regexPattern = pattern
+    .replace(/\\*\\*/g, '<<<GLOBSTAR>>>')
+    .replace(/\\*/g, '[^/]*')
+    .replace(/\\?/g, '.')
+    .replace(/<<<GLOBSTAR>>>/g, '.*');
+  return new RegExp('^' + regexPattern + '$').test(filePath);
+}
+
+function walkDir(dir, results) {
+  try {
+    const entries = fs.readdirSync(dir, { withFileTypes: true });
+    for (const entry of entries) {
+      const fullPath = path.join(dir, entry.name);
+      if (entry.isDirectory()) {
+        walkDir(fullPath, results);
+      } else {
+        const relativePath = path.relative(searchPath, fullPath);
+        if (globMatch(relativePath, globPattern)) {
+          try {
+            const content = fs.readFileSync(fullPath, 'utf-8');
+            const lines = content.split('\\n');
+            for (let i = 0; i < lines.length; i++) {
+              if (regex.test(lines[i])) {
+                console.log(JSON.stringify({
+                  path: fullPath,
+                  line: i + 1,
+                  text: lines[i]
+                }));
+              }
+            }
+          } catch (e) {
+            // Skip unreadable files
+          }
+        }
+      }
+    }
+  } catch (e) {
+    // Skip unreadable directories
+  }
+}
+
+try {
+  walkDir(searchPath, []);
+} catch (e) {
+  // Silent failure
+}
+"`;
+}
+/**
+ * Base sandbox implementation with execute() as the only abstract method.
+ *
+ * This class provides default implementations for all SandboxBackendProtocol
+ * methods using shell commands executed via execute(). Concrete implementations
+ * only need to implement the execute() method.
+ *
+ * Requires Node.js 20+ on the sandbox host.
+ */ class BaseSandbox {
+    /**
+   * List files and directories in the specified directory (non-recursive).
+   *
+   * @param path - Absolute path to directory
+   * @returns List of FileInfo objects for files and directories directly in the directory.
+   */ async lsInfo(path) {
+        const command = buildLsCommand(path);
+        const result = await this.execute(command);
+        if (result.exitCode !== 0) {
+            return [];
+        }
+        const infos = [];
+        const lines = result.output.trim().split("\n").filter(Boolean);
+        for (const line of lines){
+            try {
+                const parsed = JSON.parse(line);
+                infos.push({
+                    path: parsed.path,
+                    is_dir: parsed.isDir,
+                    size: parsed.size,
+                    modified_at: parsed.mtime ? new Date(parsed.mtime).toISOString() : undefined
+                });
+            } catch (e) {
+            // Skip invalid JSON lines
+            }
+        }
+        return infos;
+    }
+    /**
+   * Read file content with line numbers.
+   *
+   * @param filePath - Absolute file path
+   * @param offset - Line offset to start reading from (0-indexed)
+   * @param limit - Maximum number of lines to read
+   * @returns Formatted file content with line numbers, or error message
+   */ async read(filePath, offset = 0, limit = 500) {
+        const command = buildReadCommand(filePath, offset, limit);
+        const result = await this.execute(command);
+        if (result.exitCode !== 0) {
+            return `Error: File '${filePath}' not found`;
+        }
+        return result.output;
+    }
+    /**
+   * Structured search results or error string for invalid input.
+   */ async grepRaw(pattern, path = "/", glob = null) {
+        const command = buildGrepCommand(pattern, path, glob);
+        const result = await this.execute(command);
+        if (result.exitCode === 1) {
+            // Check if it's a regex error
+            if (result.output.includes("Invalid regex:")) {
+                return result.output.trim();
+            }
+        }
+        const matches = [];
+        const lines = result.output.trim().split("\n").filter(Boolean);
+        for (const line of lines){
+            try {
+                const parsed = JSON.parse(line);
+                matches.push({
+                    path: parsed.path,
+                    line: parsed.line,
+                    text: parsed.text
+                });
+            } catch (e) {
+            // Skip invalid JSON lines
+            }
+        }
+        return matches;
+    }
+    /**
+   * Structured glob matching returning FileInfo objects.
+   */ async globInfo(pattern, path = "/") {
+        const command = buildGlobCommand(path, pattern);
+        const result = await this.execute(command);
+        const infos = [];
+        const lines = result.output.trim().split("\n").filter(Boolean);
+        for (const line of lines){
+            try {
+                const parsed = JSON.parse(line);
+                infos.push({
+                    path: parsed.path,
+                    is_dir: parsed.isDir,
+                    size: parsed.size,
+                    modified_at: parsed.mtime ? new Date(parsed.mtime).toISOString() : undefined
+                });
+            } catch (e) {
+            // Skip invalid JSON lines
+            }
+        }
+        return infos;
+    }
+    /**
+   * Create a new file with content.
+   */ async write(filePath, content) {
+        const command = buildWriteCommand(filePath, content);
+        const result = await this.execute(command);
+        if (result.exitCode !== 0) {
+            return {
+                error: `Cannot write to ${filePath} because it already exists. Read and then make an edit, or write to a new path.`
+            };
+        }
+        return {
+            path: filePath,
+            filesUpdate: null
+        };
+    }
+    /**
+   * Edit a file by replacing string occurrences.
+   */ async edit(filePath, oldString, newString, replaceAll = false) {
+        const command = buildEditCommand(filePath, oldString, newString, replaceAll);
+        const result = await this.execute(command);
+        switch(result.exitCode){
+            case 0:
+                {
+                    const occurrences = parseInt(result.output.trim(), 10) || 1;
+                    return {
+                        path: filePath,
+                        filesUpdate: null,
+                        occurrences
+                    };
+                }
+            case 1:
+                return {
+                    error: `String not found in file '${filePath}'`
+                };
+            case 2:
+                return {
+                    error: `Multiple occurrences found in '${filePath}'. Use replaceAll=true to replace all.`
+                };
+            case 3:
+                return {
+                    error: `Error: File '${filePath}' not found`
+                };
+            default:
+                return {
+                    error: `Unknown error editing file '${filePath}'`
+                };
+        }
+    }
+}
+
+const SANDBOX_PROVIDER = 'SANDBOX_PROVIDER';
+const SandboxProviderStrategy = (provider)=>common.applyDecorators(common.SetMetadata(SANDBOX_PROVIDER, provider), common.SetMetadata(STRATEGY_META_KEY, SANDBOX_PROVIDER));
+
+exports.SandboxProviderRegistry = class SandboxProviderRegistry extends BaseStrategyRegistry {
+    constructor(discoveryService, reflector){
+        super(SANDBOX_PROVIDER, discoveryService, reflector);
+    }
+};
+exports.SandboxProviderRegistry = __decorate([
+    common.Injectable(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [
+        typeof core.DiscoveryService === "undefined" ? Object : core.DiscoveryService,
+        typeof core.Reflector === "undefined" ? Object : core.Reflector
+    ])
+], exports.SandboxProviderRegistry);
+
 Object.defineProperty(exports, "IColumnDef", {
 	enumerable: true,
 	get: function () { return contracts.IColumnDef; }
@@ -2335,32 +3081,45 @@ Object.defineProperty(exports, "TDocumentAsset", {
 	enumerable: true,
 	get: function () { return contracts.TDocumentAsset; }
 });
+exports.AGENT_CHAT_DISPATCH_MESSAGE_TYPE = AGENT_CHAT_DISPATCH_MESSAGE_TYPE;
 exports.AGENT_MIDDLEWARE_STRATEGY = AGENT_MIDDLEWARE_STRATEGY;
 exports.AIModelProviderNotFoundException = AIModelProviderNotFoundException;
 exports.AIModelProviderStrategy = AIModelProviderStrategy;
 exports.AI_MODEL_PROVIDER = AI_MODEL_PROVIDER;
+exports.ANALYTICS_PERMISSION_SERVICE_TOKEN = ANALYTICS_PERMISSION_SERVICE_TOKEN;
 exports.AdapterDataSourceStrategy = AdapterDataSourceStrategy;
 exports.AgentMiddlewareStrategy = AgentMiddlewareStrategy;
 exports.AiModelNotFoundException = AiModelNotFoundException;
 exports.BaseHTTPQueryRunner = BaseHTTPQueryRunner;
 exports.BaseQueryRunner = BaseQueryRunner;
 exports.BaseSQLQueryRunner = BaseSQLQueryRunner;
+exports.BaseSandbox = BaseSandbox;
 exports.BaseStrategyRegistry = BaseStrategyRegistry;
 exports.BaseTool = BaseTool;
 exports.BaseToolset = BaseToolset;
 exports.BuiltinToolset = BuiltinToolset;
+exports.CHAT_CHANNEL = CHAT_CHANNEL;
+exports.CHAT_CHANNEL_TEXT_LIMITS = CHAT_CHANNEL_TEXT_LIMITS;
+exports.CancelConversationCommand = CancelConversationCommand;
+exports.ChatChannel = ChatChannel;
 exports.ChatOAICompatReasoningModel = ChatOAICompatReasoningModel;
 exports.CommonParameterRules = CommonParameterRules;
 exports.CreateModelClientCommand = CreateModelClientCommand;
 exports.CredentialsValidateFailedError = CredentialsValidateFailedError;
 exports.DATASOURCE_STRATEGY = DATASOURCE_STRATEGY;
+exports.DEFAULT_EXECUTION_CONFIG = DEFAULT_EXECUTION_CONFIG;
 exports.DOCUMENT_SOURCE_STRATEGY = DOCUMENT_SOURCE_STRATEGY;
 exports.DOCUMENT_TRANSFORMER_STRATEGY = DOCUMENT_TRANSFORMER_STRATEGY;
 exports.DataSourceStrategy = DataSourceStrategy;
 exports.DocumentSourceStrategy = DocumentSourceStrategy;
 exports.DocumentTransformerStrategy = DocumentTransformerStrategy;
 exports.GLOBAL_ORGANIZATION_SCOPE = GLOBAL_ORGANIZATION_SCOPE;
+exports.HANDOFF_PERMISSION_SERVICE_TOKEN = HANDOFF_PERMISSION_SERVICE_TOKEN;
+exports.HANDOFF_PROCESSOR_STRATEGY = HANDOFF_PROCESSOR_STRATEGY;
+exports.HANDOFF_QUEUE_SERVICE_TOKEN = HANDOFF_QUEUE_SERVICE_TOKEN;
+exports.HandoffProcessorStrategy = HandoffProcessorStrategy;
 exports.IMAGE_UNDERSTANDING_STRATEGY = IMAGE_UNDERSTANDING_STRATEGY;
+exports.INTEGRATION_PERMISSION_SERVICE_TOKEN = INTEGRATION_PERMISSION_SERVICE_TOKEN;
 exports.INTEGRATION_STRATEGY = INTEGRATION_STRATEGY;
 exports.ImageUnderstandingStrategy = ImageUnderstandingStrategy;
 exports.IntegrationStrategyKey = IntegrationStrategyKey;
@@ -2372,6 +3131,7 @@ exports.LLMUsage = LLMUsage;
 exports.LargeLanguageModel = LargeLanguageModel;
 exports.ORGANIZATION_METADATA_KEY = ORGANIZATION_METADATA_KEY;
 exports.OpenAICompatibleReranker = OpenAICompatibleReranker;
+exports.PERMISSION_OPERATION_METADATA_KEY = PERMISSION_OPERATION_METADATA_KEY;
 exports.PLUGIN_METADATA = PLUGIN_METADATA;
 exports.PLUGIN_METADATA_KEY = PLUGIN_METADATA_KEY;
 exports.PROVIDE_AI_MODEL_LLM = PROVIDE_AI_MODEL_LLM;
@@ -2382,9 +3142,12 @@ exports.PROVIDE_AI_MODEL_TEXT_EMBEDDING = PROVIDE_AI_MODEL_TEXT_EMBEDDING;
 exports.PROVIDE_AI_MODEL_TTS = PROVIDE_AI_MODEL_TTS;
 exports.RETRIEVER_STRATEGY = RETRIEVER_STRATEGY;
 exports.RequestContext = RequestContext;
+exports.RequirePermissionOperation = RequirePermissionOperation;
 exports.RerankModel = RerankModel;
 exports.RetrieverStrategy = RetrieverStrategy;
+exports.SANDBOX_PROVIDER = SANDBOX_PROVIDER;
 exports.STRATEGY_META_KEY = STRATEGY_META_KEY;
+exports.SandboxProviderStrategy = SandboxProviderStrategy;
 exports.Speech2TextChatModel = Speech2TextChatModel;
 exports.SpeechToTextModel = SpeechToTextModel;
 exports.TEXT_SPLITTER_STRATEGY = TEXT_SPLITTER_STRATEGY;
@@ -2393,6 +3156,7 @@ exports.TextEmbeddingModelManager = TextEmbeddingModelManager;
 exports.TextSplitterStrategy = TextSplitterStrategy;
 exports.TextToSpeechModel = TextToSpeechModel;
 exports.ToolsetStrategy = ToolsetStrategy;
+exports.USER_PERMISSION_SERVICE_TOKEN = USER_PERMISSION_SERVICE_TOKEN;
 exports.VECTOR_STORE_STRATEGY = VECTOR_STORE_STRATEGY;
 exports.VectorStoreStrategy = VectorStoreStrategy;
 exports.WORKFLOW_NODE_STRATEGY = WORKFLOW_NODE_STRATEGY;
@@ -2404,17 +3168,26 @@ exports.XpFileSystem = XpFileSystem;
 exports.XpertServerPlugin = XpertServerPlugin;
 exports.als = als;
 exports.calcTokenUsage = calcTokenUsage;
+exports.chunkText = chunkText;
 exports.countTokensSafe = countTokensSafe;
 exports.createI18nInstance = createI18nInstance;
 exports.createPluginLogger = createPluginLogger;
+exports.defineAgentMessageType = defineAgentMessageType;
+exports.defineChannelMessageType = defineChannelMessageType;
 exports.downloadRemoteFile = downloadRemoteFile;
 exports.getErrorMessage = getErrorMessage;
+exports.getModelContextSize = getModelContextSize;
+exports.getPermissionOperationMetadata = getPermissionOperationMetadata;
 exports.getPositionList = getPositionList;
 exports.getPositionMap = getPositionMap;
 exports.getRequestContext = getRequestContext;
+exports.getRequiredPermissionOperation = getRequiredPermissionOperation;
 exports.isRemoteFile = isRemoteFile;
+exports.isSandboxBackend = isSandboxBackend;
+exports.isStructuredMessageType = isStructuredMessageType;
 exports.loadYamlFile = loadYamlFile;
 exports.mergeCredentials = mergeCredentials;
 exports.mergeParentChildChunks = mergeParentChildChunks;
+exports.normalizeContextSize = normalizeContextSize;
 exports.runWithRequestContext = runWithRequestContext;
 exports.sumTokenUsage = sumTokenUsage;