@capybara-hq/kernel 0.0.0-stage → 0.1.0-rc.0

package/dist/http/plugin-dispatch.js

@@ -0,0 +1,200 @@
+import { Readable } from "node:stream";
+import FindMyWay from "find-my-way";
+import { errorBody } from "../errors.js";
+import { ACCESS_COOKIE, REFRESH_COOKIE } from "../identity/cookies.js";
+import { codeForStatus, redactPath } from "./error.filter.js";
+/** 插件路由都在此前缀下（ctx.http.route 已加 `/plugins/<name>` 前缀）。 */
+export const PLUGIN_PREFIX = "/plugins/";
+/** 固定的路由列表（测试与只挂一次的调用方）：版本不变、没有不可用的插件。 */
+export function staticRouteTable(routes) {
+    return { routes: () => routes, revision: () => 0, unavailable: () => false };
+}
+/** 路径里的插件名（`/plugins/<name>/...` 的 `<name>`）；不在插件前缀下返回 undefined。 */
+export function pluginOfPath(path) {
+    if (!path.startsWith(PLUGIN_PREFIX))
+        return undefined;
+    const name = path.slice(PLUGIN_PREFIX.length).split("/", 1)[0];
+    return name === undefined || name === "" ? undefined : name;
+}
+/** 用 find-my-way 建立插件路由表，路径语法与 Fastify 相同；路径不在 `/plugins/` 下时抛错。 */
+export function createPluginRouter(routes) {
+    const router = FindMyWay();
+    for (const r of routes) {
+        if (!r.path.startsWith(PLUGIN_PREFIX)) {
+            throw new Error(`plugin route ${r.method} ${r.path} is outside ${PLUGIN_PREFIX}`);
+        }
+        router.on(r.method, r.path, () => { }, { handler: r.handler });
+    }
+    return {
+        find(method, path) {
+            const lookup = (m) => router.find(m, path)?.store?.handler;
+            return lookup(method) ?? (method === "HEAD" ? lookup("GET") : undefined);
+        },
+    };
+}
+/**
+ * Registers `/plugins/*` in its own encapsulated scope and hands each request to the extension handler
+ * as a Web `Request`: the scope removes the default parsers and takes every content type as a raw
+ * Buffer, so the body the extension gets is the bytes the client sent.
+ * - The extension belongs to this deployment but is not in the registry (revoked and so on) -> 503
+ *   `extension.unavailable`; when an extension instance is revoked or replaced, the `req.signal` of
+ *   that extension's in-progress requests is aborted (`abortPlugin`, triggered by the route source's
+ *   `onChange`);
+ * - not mounted or no match -> 404 `not_found`; HEAD without its own route is handled as GET, with no
+ *   body in the response.
+ * - A `Request` that cannot be built (e.g. a malformed Host) -> 400 `validation_failed`, not logged as
+ *   an error.
+ * - `req.signal` aborts only when the client disconnects before the response is written (not on
+ *   normal completion); long-lived handlers use it to unsubscribe;
+ * - a throwing handler is logged (path redacted with `redactPath`) and returns 500 `internal` (the
+ *   error message is not echoed).
+ * - Fastify's own errors (a body over 1 MiB and so on) are mapped to the error envelope by the
+ *   scope's error handler: 4xx by the common error code table (413 `payload_too_large`, 415
+ *   `unsupported_media_type` and so on), 5xx are logged and return `internal`.
+ * - Shutdown: the returned `abortAll()` aborts the `req.signal` of every in-progress request (the
+ *   extension's SSE and other long connections wind down by it without using the http shutdown
+ *   budget); requests arriving afterwards start with an aborted `req.signal`. In-progress
+ *   AbortControllers are held only for the request's lifetime.
+ *   So extension handlers either finish quickly or tolerate the abort (see
+ *   .agents/skills/writing-extensions "Extension route matching semantics").
+ * Must be called before Nest `app.init()`.
+ */
+export async function registerPluginDispatch(fastify, getTable, log) {
+    /** 进行中的请求 → 所属插件（停机时全部中止；插件实例变化时只中止该插件的）。 */
+    const inFlight = new Map();
+    let stopping = false;
+    // 按路由来源的版本缓存路由表（插件撤销 / 替换时版本变化才重建）
+    let cached;
+    const routerOf = (table) => {
+        const revision = table.revision();
+        if (!cached || cached.table !== table || cached.revision !== revision) {
+            cached = { table, revision, router: createPluginRouter(table.routes()) };
+        }
+        return cached.router;
+    };
+    const handler = async (req, reply) => {
+        const path = req.url.split("?")[0];
+        const table = getTable();
+        const plugin = pluginOfPath(path);
+        if (table && plugin !== undefined && (await table.unavailable(plugin))) {
+            return reply
+                .code(503)
+                .send(errorBody("extension.unavailable", `Extension ${plugin} is not available right now`));
+        }
+        const pluginHandler = table ? routerOf(table).find(req.method, path) : undefined;
+        if (!pluginHandler) {
+            return reply.code(404).send(errorBody("not_found", `Route ${req.method} ${path} not found`));
+        }
+        // 只在响应写完之前连接就关了（客户端断开）时中止 `req.signal`：长连接（SSE）的 handler 据此退订、收尾。
+        // 正常写完后的 close 不中止（writableFinished 为 true）。
+        const ac = new AbortController();
+        inFlight.set(ac, plugin ?? "");
+        if (stopping)
+            ac.abort();
+        reply.raw.once("close", () => {
+            inFlight.delete(ac);
+            if (!reply.raw.writableFinished)
+                ac.abort();
+        });
+        let webReq;
+        try {
+            webReq = toWebRequest(req, ac.signal);
+        }
+        catch {
+            return reply.code(400).send(errorBody("validation_failed", "Malformed request"));
+        }
+        let res;
+        try {
+            res = await pluginHandler(webReq);
+        }
+        catch (err) {
+            log.error("plugin handler failed", { method: req.method, path: redactPath(path), err });
+            return reply.code(500).send(errorBody("internal", "Internal error"));
+        }
+        reply.code(res.status);
+        for (const [name, value] of res.headers) {
+            if (name !== "set-cookie")
+                reply.header(name, value);
+        }
+        for (const cookie of res.headers.getSetCookie())
+            reply.header("set-cookie", cookie);
+        if (res.body === null)
+            return reply.send();
+        if (req.method === "HEAD") {
+            await res.body.cancel().catch(() => { });
+            return reply.send();
+        }
+        return reply.send(Readable.fromWeb(res.body));
+    };
+    await fastify.register(async (scope) => {
+        scope.removeAllContentTypeParsers();
+        scope.addContentTypeParser("*", { parseAs: "buffer" }, (_req, body, done) => done(null, body));
+        scope.setErrorHandler((err, req, reply) => {
+            const status = typeof err.statusCode === "number" ? err.statusCode : 500;
+            if (status >= 400 && status < 500) {
+                return reply.code(status).send(errorBody(codeForStatus(status), err.message));
+            }
+            log.error("plugin request failed", { method: req.method, path: redactPath(req.url), err });
+            return reply.code(status >= 500 ? status : 500).send(errorBody("internal", "Internal error"));
+        });
+        scope.all(`${PLUGIN_PREFIX}*`, handler);
+    });
+    return {
+        abortAll() {
+            stopping = true;
+            for (const ac of [...inFlight.keys()])
+                ac.abort();
+        },
+        abortPlugin(plugin) {
+            for (const [ac, p] of [...inFlight])
+                if (p === plugin)
+                    ac.abort();
+        },
+    };
+}
+const KERNEL_COOKIES = new Set([ACCESS_COOKIE, REFRESH_COOKIE]);
+/**
+ * 从 Cookie 头里去掉内核会话 Cookie（`cap_at` / `cap_rt`）：插件 handler 不经内核鉴权，
+ * 拿到这两个 Cookie 就能冒充用户调内核 API。全部去掉后返回 undefined（不传 Cookie 头）。
+ */
+export function stripKernelCookies(cookie) {
+    const kept = cookie
+        .split(";")
+        .map((p) => p.trim())
+        .filter((p) => p !== "" && !KERNEL_COOKIES.has(p.split("=", 1)[0]?.trim() ?? ""));
+    return kept.length > 0 ? kept.join("; ") : undefined;
+}
+/**
+ * Fastify 请求 → Web `Request`：数组头用 `, ` 合并（`set-cookie` 逐条保留）；GET / HEAD 不带 body；
+ * Cookie 头去掉内核会话 Cookie；`signal` 在响应写完之前客户端断开时中止。
+ */
+function toWebRequest(req, signal) {
+    const headers = new Headers();
+    for (const [name, value] of Object.entries(req.headers)) {
+        if (value === undefined)
+            continue;
+        if (name === "cookie") {
+            const kept = stripKernelCookies(Array.isArray(value) ? value.join("; ") : value);
+            if (kept !== undefined)
+                headers.set(name, kept);
+            continue;
+        }
+        if (Array.isArray(value)) {
+            if (name === "set-cookie")
+                for (const v of value)
+                    headers.append(name, v);
+            else
+                headers.set(name, value.join(", "));
+        }
+        else {
+            headers.set(name, value);
+        }
+    }
+    const hasBody = req.method !== "GET" && req.method !== "HEAD" && Buffer.isBuffer(req.body);
+    return new Request(`http://${req.headers.host ?? "localhost"}${req.url}`, {
+        method: req.method,
+        headers,
+        signal,
+        ...(hasBody && { body: req.body }),
+    });
+}

package/dist/http/tokens.d.ts

@@ -0,0 +1,131 @@
+/** 内核 logger（`Logger`）的注入令牌。 */
+export declare const KERNEL_LOG: unique symbol;
+/** 健康检查参数（`HealthOptions`）的注入令牌。 */
+export declare const HEALTH_OPTIONS: unique symbol;
+/** 内核 schema 视图（`KernelDb`）的注入令牌。 */
+export declare const KERNEL_DB: unique symbol;
+/** 内核共享 Redis 连接（ioredis `Redis`）的注入令牌。 */
+export declare const KERNEL_REDIS: unique symbol;
+/** 当前配置的取值函数（`() => KernelConfig`，热更新后返回新配置）的注入令牌。 */
+export declare const KERNEL_CONFIG: unique symbol;
+/** `AccountsService` 的注入令牌。 */
+export declare const ACCOUNTS: unique symbol;
+/** `SessionService` 的注入令牌。 */
+export declare const SESSIONS: unique symbol;
+/** `ApiTokenService` 的注入令牌。 */
+export declare const API_TOKENS: unique symbol;
+/** `SettingsService` 的注入令牌。 */
+export declare const SETTINGS: unique symbol;
+/** `LoginRateLimiter` 的注入令牌。 */
+export declare const RATE_LIMITER: unique symbol;
+/** `OrgsService` 的注入令牌。 */
+export declare const ORGS: unique symbol;
+/** `OrgSettingsService`（组织设置）的注入令牌。 */
+export declare const ORG_SETTINGS: unique symbol;
+/** `MembersService` 的注入令牌。 */
+export declare const MEMBERS: unique symbol;
+/** `InvitationsService` 的注入令牌。 */
+export declare const INVITATIONS: unique symbol;
+/** `SetupService` 的注入令牌。 */
+export declare const SETUP: unique symbol;
+/** Injection token for `OrgExtensionConfigs`. */
+export declare const ORG_EXTENSION_CONFIGS: unique symbol;
+/** `ProviderRegistry` 的注入令牌。 */
+export declare const PROVIDER_REGISTRY: unique symbol;
+/** `AgentsService` 的注入令牌。 */
+export declare const AGENTS: unique symbol;
+/** `AgentTemplatesService` (agent templates from plugins). */
+export declare const AGENT_TEMPLATES: unique symbol;
+/** 内核总线（`createBus(..., "kernel")`，`ExtensionContext["bus"]`）的注入令牌。 */
+export declare const KERNEL_BUS: unique symbol;
+/** `EventLog` 的注入令牌。 */
+export declare const EVENT_LOG: unique symbol;
+/** `ConversationsService` 的注入令牌。 */
+export declare const CONVERSATIONS: unique symbol;
+/** `AttachmentsService`（对话附件）的注入令牌。 */
+export declare const ATTACHMENTS: unique symbol;
+/** `SkillsService`（技能库）的注入令牌。 */
+export declare const SKILLS: unique symbol;
+/** `SkillInvoker` (a person's skill invocation, phase D). */
+export declare const SKILL_INVOKER: unique symbol;
+/** `SkillChangesService`（agent 自写技能与技能变更审批）的注入令牌。 */
+export declare const SKILL_CHANGES: unique symbol;
+/** `InboxService`（收件箱汇总）的注入令牌。 */
+export declare const INBOX: unique symbol;
+/** `ConversationOutputs`（网页读工具输出存档）的注入令牌。 */
+export declare const CONVERSATION_OUTPUTS: unique symbol;
+/** `ConversationArtifacts`（产物下载）的注入令牌。 */
+export declare const CONVERSATION_ARTIFACTS: unique symbol;
+/** `ConversationFiles` (file outputs list and text content, UI refresh B). */
+export declare const CONVERSATION_FILES: unique symbol;
+export declare const FILE_PREVIEWERS: unique symbol;
+/** `ConversationQueue` (queued messages, UI refresh B). */
+export declare const CONVERSATION_QUEUE: unique symbol;
+/** `ConversationSandboxStatus`（对话沙箱状态）的注入令牌。 */
+export declare const CONVERSATION_SANDBOX: unique symbol;
+/** `ConversationToolInfo` (tool titles, kinds and key arguments for the conversation page). */
+export declare const CONVERSATION_TOOLS: unique symbol;
+/** `ConversationStreams`（本进程持有的会话 SSE 连接）的注入令牌。 */
+export declare const CONVERSATION_STREAMS: unique symbol;
+/** 连接器凭据（`Credentials`）的注入令牌。 */
+export declare const CREDENTIALS: unique symbol;
+/** `ToolRegistry` 的注入令牌。 */
+export declare const TOOL_REGISTRY: unique symbol;
+/** `ConnectorsService` 的注入令牌。 */
+export declare const CONNECTORS: unique symbol;
+/** `ConnectorContent`（连接器的 prompts / resources，供斜杠命令与 @ 引用）的注入令牌。 */
+export declare const CONNECTOR_CONTENT: unique symbol;
+/** `ApprovalsService`（工具调用审批与授权）的注入令牌。 */
+export declare const APPROVALS: unique symbol;
+/** `QuestionsService`（工具调用的输入请求）的注入令牌。 */
+export declare const QUESTIONS: unique symbol;
+/** `OAuthFlow`（OAuth 授权码连接流程）的注入令牌。 */
+export declare const OAUTH_FLOW: unique symbol;
+/** `ExternalIdentities`（外部身份 ↔ 账号）的注入令牌。 */
+export declare const EXTERNAL_IDENTITIES: unique symbol;
+/** `IdentityBinding`（IM 身份的一次性绑定链接）的注入令牌。 */
+export declare const IDENTITY_BINDING: unique symbol;
+/** `SsoFlow`（第三方登录）的注入令牌。 */
+export declare const SSO_FLOW: unique symbol;
+/** `Offboarding`（成员离职处理）的注入令牌。 */
+export declare const OFFBOARDING: unique symbol;
+/** `ChannelConnections`（组织的渠道连接）的注入令牌。 */
+export declare const CHANNEL_CONNECTIONS: unique symbol;
+/** `DirectorySync`（通讯录同步）的注入令牌。 */
+export declare const DIRECTORY_SYNC: unique symbol;
+/** `UiViews`（插件视图：列出贡献、render / action）的注入令牌。 */
+export declare const UI_VIEWS: unique symbol;
+/** `EmbedTokens`（嵌入应用的短期令牌，签发 / 校验）的注入令牌。 */
+export declare const EMBED_TOKENS: unique symbol;
+/** `OrgUiStreams`（组织级界面刷新 SSE）的注入令牌。 */
+export declare const ORG_UI_STREAMS: unique symbol;
+/** `PricesService`（模型价格表）的注入令牌。 */
+export declare const PRICES: unique symbol;
+/** `TrajectoryService`（轨迹查看器）的注入令牌。 */
+export declare const TRAJECTORIES: unique symbol;
+/** `EvalSetsService`（评测集与用例）的注入令牌。 */
+export declare const EVAL_SETS: unique symbol;
+/** `EvalRunsService`（评测运行）的注入令牌。 */
+export declare const EVAL_RUNS: unique symbol;
+/** `ModelPurposesService`（模型用途映射）的注入令牌。 */
+export declare const MODEL_PURPOSES: unique symbol;
+/** Injection token for `ExtensionInstalls` (extension package imports and install records). */
+export declare const EXTENSION_INSTALLS: unique symbol;
+/** Injection token for `ExtensionAdmin` (deployment-level extension list, status and web approval, enterprise admins). */
+export declare const EXTENSION_ADMIN: unique symbol;
+/** Deployment-level extension install / enable / disable / uninstall (`ExtensionAdminOps`). */
+export declare const EXTENSION_ADMIN_OPS: unique symbol;
+/** Deployment-level extension config (`ExtensionDeploymentConfigService`). */
+export declare const EXTENSION_DEPLOYMENT_CONFIGS: unique symbol;
+/** The enterprise catalog (`CatalogService`). */
+export declare const CATALOG: unique symbol;
+/** Plugin (app bundle) import: prepare / confirm and staging cleanup (`PluginImport`). */
+export declare const PLUGIN_IMPORT: unique symbol;
+/** Marketplaces (`MarketplacesService`). */
+export declare const MARKETPLACES: unique symbol;
+/** Organizations browse and install from the enterprise catalog (`OrgCatalogService`). */
+export declare const ORG_CATALOG: unique symbol;
+/** Catalog requests and approvals (`CatalogRequestsService`). */
+export declare const CATALOG_REQUESTS: unique symbol;
+/** Org install and uninstall of plugins (app bundles) (`PluginInstaller`). */
+export declare const PLUGIN_INSTALLER: unique symbol;

package/dist/http/tokens.js

@@ -0,0 +1,131 @@
+/** 内核 logger（`Logger`）的注入令牌。 */
+export const KERNEL_LOG = Symbol("KERNEL_LOG");
+/** 健康检查参数（`HealthOptions`）的注入令牌。 */
+export const HEALTH_OPTIONS = Symbol("HEALTH_OPTIONS");
+/** 内核 schema 视图（`KernelDb`）的注入令牌。 */
+export const KERNEL_DB = Symbol("KERNEL_DB");
+/** 内核共享 Redis 连接（ioredis `Redis`）的注入令牌。 */
+export const KERNEL_REDIS = Symbol("KERNEL_REDIS");
+/** 当前配置的取值函数（`() => KernelConfig`，热更新后返回新配置）的注入令牌。 */
+export const KERNEL_CONFIG = Symbol("KERNEL_CONFIG");
+/** `AccountsService` 的注入令牌。 */
+export const ACCOUNTS = Symbol("ACCOUNTS");
+/** `SessionService` 的注入令牌。 */
+export const SESSIONS = Symbol("SESSIONS");
+/** `ApiTokenService` 的注入令牌。 */
+export const API_TOKENS = Symbol("API_TOKENS");
+/** `SettingsService` 的注入令牌。 */
+export const SETTINGS = Symbol("SETTINGS");
+/** `LoginRateLimiter` 的注入令牌。 */
+export const RATE_LIMITER = Symbol("RATE_LIMITER");
+/** `OrgsService` 的注入令牌。 */
+export const ORGS = Symbol("ORGS");
+/** `OrgSettingsService`（组织设置）的注入令牌。 */
+export const ORG_SETTINGS = Symbol("ORG_SETTINGS");
+/** `MembersService` 的注入令牌。 */
+export const MEMBERS = Symbol("MEMBERS");
+/** `InvitationsService` 的注入令牌。 */
+export const INVITATIONS = Symbol("INVITATIONS");
+/** `SetupService` 的注入令牌。 */
+export const SETUP = Symbol("SETUP");
+/** Injection token for `OrgExtensionConfigs`. */
+export const ORG_EXTENSION_CONFIGS = Symbol("ORG_EXTENSION_CONFIGS");
+/** `ProviderRegistry` 的注入令牌。 */
+export const PROVIDER_REGISTRY = Symbol("PROVIDER_REGISTRY");
+/** `AgentsService` 的注入令牌。 */
+export const AGENTS = Symbol("AGENTS");
+/** `AgentTemplatesService` (agent templates from plugins). */
+export const AGENT_TEMPLATES = Symbol("AGENT_TEMPLATES");
+/** 内核总线（`createBus(..., "kernel")`，`ExtensionContext["bus"]`）的注入令牌。 */
+export const KERNEL_BUS = Symbol("KERNEL_BUS");
+/** `EventLog` 的注入令牌。 */
+export const EVENT_LOG = Symbol("EVENT_LOG");
+/** `ConversationsService` 的注入令牌。 */
+export const CONVERSATIONS = Symbol("CONVERSATIONS");
+/** `AttachmentsService`（对话附件）的注入令牌。 */
+export const ATTACHMENTS = Symbol("ATTACHMENTS");
+/** `SkillsService`（技能库）的注入令牌。 */
+export const SKILLS = Symbol("SKILLS");
+/** `SkillInvoker` (a person's skill invocation, phase D). */
+export const SKILL_INVOKER = Symbol("SKILL_INVOKER");
+/** `SkillChangesService`（agent 自写技能与技能变更审批）的注入令牌。 */
+export const SKILL_CHANGES = Symbol("SKILL_CHANGES");
+/** `InboxService`（收件箱汇总）的注入令牌。 */
+export const INBOX = Symbol("INBOX");
+/** `ConversationOutputs`（网页读工具输出存档）的注入令牌。 */
+export const CONVERSATION_OUTPUTS = Symbol("CONVERSATION_OUTPUTS");
+/** `ConversationArtifacts`（产物下载）的注入令牌。 */
+export const CONVERSATION_ARTIFACTS = Symbol("CONVERSATION_ARTIFACTS");
+/** `ConversationFiles` (file outputs list and text content, UI refresh B). */
+export const CONVERSATION_FILES = Symbol("CONVERSATION_FILES");
+export const FILE_PREVIEWERS = Symbol("FILE_PREVIEWERS");
+/** `ConversationQueue` (queued messages, UI refresh B). */
+export const CONVERSATION_QUEUE = Symbol("CONVERSATION_QUEUE");
+/** `ConversationSandboxStatus`（对话沙箱状态）的注入令牌。 */
+export const CONVERSATION_SANDBOX = Symbol("CONVERSATION_SANDBOX");
+/** `ConversationToolInfo` (tool titles, kinds and key arguments for the conversation page). */
+export const CONVERSATION_TOOLS = Symbol("CONVERSATION_TOOLS");
+/** `ConversationStreams`（本进程持有的会话 SSE 连接）的注入令牌。 */
+export const CONVERSATION_STREAMS = Symbol("CONVERSATION_STREAMS");
+/** 连接器凭据（`Credentials`）的注入令牌。 */
+export const CREDENTIALS = Symbol("CREDENTIALS");
+/** `ToolRegistry` 的注入令牌。 */
+export const TOOL_REGISTRY = Symbol("TOOL_REGISTRY");
+/** `ConnectorsService` 的注入令牌。 */
+export const CONNECTORS = Symbol("CONNECTORS");
+/** `ConnectorContent`（连接器的 prompts / resources，供斜杠命令与 @ 引用）的注入令牌。 */
+export const CONNECTOR_CONTENT = Symbol("CONNECTOR_CONTENT");
+/** `ApprovalsService`（工具调用审批与授权）的注入令牌。 */
+export const APPROVALS = Symbol("APPROVALS");
+/** `QuestionsService`（工具调用的输入请求）的注入令牌。 */
+export const QUESTIONS = Symbol("QUESTIONS");
+/** `OAuthFlow`（OAuth 授权码连接流程）的注入令牌。 */
+export const OAUTH_FLOW = Symbol("OAUTH_FLOW");
+/** `ExternalIdentities`（外部身份 ↔ 账号）的注入令牌。 */
+export const EXTERNAL_IDENTITIES = Symbol("EXTERNAL_IDENTITIES");
+/** `IdentityBinding`（IM 身份的一次性绑定链接）的注入令牌。 */
+export const IDENTITY_BINDING = Symbol("IDENTITY_BINDING");
+/** `SsoFlow`（第三方登录）的注入令牌。 */
+export const SSO_FLOW = Symbol("SSO_FLOW");
+/** `Offboarding`（成员离职处理）的注入令牌。 */
+export const OFFBOARDING = Symbol("OFFBOARDING");
+/** `ChannelConnections`（组织的渠道连接）的注入令牌。 */
+export const CHANNEL_CONNECTIONS = Symbol("CHANNEL_CONNECTIONS");
+/** `DirectorySync`（通讯录同步）的注入令牌。 */
+export const DIRECTORY_SYNC = Symbol("DIRECTORY_SYNC");
+/** `UiViews`（插件视图：列出贡献、render / action）的注入令牌。 */
+export const UI_VIEWS = Symbol("UI_VIEWS");
+/** `EmbedTokens`（嵌入应用的短期令牌，签发 / 校验）的注入令牌。 */
+export const EMBED_TOKENS = Symbol("EMBED_TOKENS");
+/** `OrgUiStreams`（组织级界面刷新 SSE）的注入令牌。 */
+export const ORG_UI_STREAMS = Symbol("ORG_UI_STREAMS");
+/** `PricesService`（模型价格表）的注入令牌。 */
+export const PRICES = Symbol("PRICES");
+/** `TrajectoryService`（轨迹查看器）的注入令牌。 */
+export const TRAJECTORIES = Symbol("TRAJECTORIES");
+/** `EvalSetsService`（评测集与用例）的注入令牌。 */
+export const EVAL_SETS = Symbol("EVAL_SETS");
+/** `EvalRunsService`（评测运行）的注入令牌。 */
+export const EVAL_RUNS = Symbol("EVAL_RUNS");
+/** `ModelPurposesService`（模型用途映射）的注入令牌。 */
+export const MODEL_PURPOSES = Symbol("MODEL_PURPOSES");
+/** Injection token for `ExtensionInstalls` (extension package imports and install records). */
+export const EXTENSION_INSTALLS = Symbol("EXTENSION_INSTALLS");
+/** Injection token for `ExtensionAdmin` (deployment-level extension list, status and web approval, enterprise admins). */
+export const EXTENSION_ADMIN = Symbol("EXTENSION_ADMIN");
+/** Deployment-level extension install / enable / disable / uninstall (`ExtensionAdminOps`). */
+export const EXTENSION_ADMIN_OPS = Symbol("EXTENSION_ADMIN_OPS");
+/** Deployment-level extension config (`ExtensionDeploymentConfigService`). */
+export const EXTENSION_DEPLOYMENT_CONFIGS = Symbol("EXTENSION_DEPLOYMENT_CONFIGS");
+/** The enterprise catalog (`CatalogService`). */
+export const CATALOG = Symbol("CATALOG");
+/** Plugin (app bundle) import: prepare / confirm and staging cleanup (`PluginImport`). */
+export const PLUGIN_IMPORT = Symbol("PLUGIN_IMPORT");
+/** Marketplaces (`MarketplacesService`). */
+export const MARKETPLACES = Symbol("MARKETPLACES");
+/** Organizations browse and install from the enterprise catalog (`OrgCatalogService`). */
+export const ORG_CATALOG = Symbol("ORG_CATALOG");
+/** Catalog requests and approvals (`CatalogRequestsService`). */
+export const CATALOG_REQUESTS = Symbol("CATALOG_REQUESTS");
+/** Org install and uninstall of plugins (app bundles) (`PluginInstaller`). */
+export const PLUGIN_INSTALLER = Symbol("PLUGIN_INSTALLER");

package/dist/http/zod.pipe.d.ts

@@ -0,0 +1,8 @@
+import type { PipeTransform } from "@nestjs/common";
+import type { z } from "zod";
+/** 用 Zod schema 校验请求参数（通常是 body）；失败抛 `validation_failed`，details 逐条给出路径与原因。 */
+export declare class ZodPipe<S extends z.ZodType> implements PipeTransform<unknown, z.infer<S>> {
+    private readonly schema;
+    constructor(schema: S);
+    transform(value: unknown): z.infer<S>;
+}

package/dist/http/zod.pipe.js

@@ -0,0 +1,14 @@
+import { ApiError } from "../errors.js";
+/** 用 Zod schema 校验请求参数（通常是 body）；失败抛 `validation_failed`，details 逐条给出路径与原因。 */
+export class ZodPipe {
+    schema;
+    constructor(schema) {
+        this.schema = schema;
+    }
+    transform(value) {
+        const r = this.schema.safeParse(value);
+        if (r.success)
+            return r.data;
+        throw new ApiError("validation_failed", "Request validation failed", r.error.issues.map((i) => ({ path: i.path.map(String).join("."), message: i.message })));
+    }
+}

package/dist/identity/accounts.d.ts

@@ -0,0 +1,93 @@
+import { type Selectable, type Transaction } from "kysely";
+import type { AccountsTable, KernelDatabase, KernelDb } from "../db/kernel-schema.js";
+export interface Account {
+    id: string;
+    displayName: string;
+    email: string | null;
+    status: "active" | "disabled";
+    isEnterpriseAdmin: boolean;
+    createdAt: Date;
+}
+type Trx = Transaction<KernelDatabase>;
+/** 企业管理员可改的账号字段。 */
+export type AccountPatch = {
+    displayName?: string;
+    status?: "active" | "disabled";
+    isEnterpriseAdmin?: boolean;
+};
+/** 构造 `Account` 所需的 accounts 列（供跨表查询 select 使用）。 */
+export declare const ACCOUNT_COLUMNS: readonly ["accounts.id", "accounts.display_name", "accounts.email", "accounts.status", "accounts.is_enterprise_admin", "accounts.created_at"];
+type AccountRow = Pick<Selectable<AccountsTable>, "id" | "display_name" | "email" | "status" | "is_enterprise_admin" | "created_at">;
+export declare function toAccount(r: AccountRow): Account;
+export interface LocalAccountInput {
+    login: string;
+    password: string;
+    displayName: string;
+    email?: string;
+    enterpriseAdmin?: boolean;
+}
+/** 账号服务：本地账号的创建、认证与管理。框架无关，由调用方注入 db。 */
+export declare class AccountsService {
+    private readonly db;
+    constructor(db: KernelDb);
+    /** 校验密码长度并算出哈希（scrypt，较慢）：供需要在事务之外先算好哈希的调用方使用。 */
+    hashNewPassword(password: string): Promise<string>;
+    /**
+     * 建本地账号。传 `trx` 时在调用方的事务内插入；在事务内调用时应先在事务**之外**用 `hashNewPassword`
+     * 算好 `passwordHash` 传进来，避免 scrypt 期间连接处于 idle in transaction。
+     */
+    createLocal(input: LocalAccountInput, trx?: Trx, passwordHash?: string): Promise<Account>;
+    /**
+     * 企业管理员建本地账号（可同时设为企业管理员）：事务内取企业管理员锁并复核发起人仍是活跃企业管理员
+     * （否则 `forbidden`），建号并写审计 `account.created`。密码哈希在取锁之前算好，不在锁内跑 scrypt。
+     */
+    createByAdmin(input: LocalAccountInput, actorAccountId: string, actorTokenId?: string): Promise<Account>;
+    authenticateLocal(login: string, password: string): Promise<Account | null>;
+    /** 按账号 id 校验本地密码（改密码时核对旧密码）；没有本地密码、超长或不符 → false。 */
+    verifyPassword(accountId: string, password: string): Promise<boolean>;
+    get(id: string): Promise<Account | undefined>;
+    /** 按 id 升序分页，`after` 为上一页最后一个 id。 */
+    list(opts: {
+        limit: number;
+        after?: string;
+    }): Promise<Account[]>;
+    setPassword(accountId: string, password: string): Promise<void>;
+    /**
+     * 用户改密码（R24）：同一个 PG 事务里写新密码、吊销该账号除 `exceptSessionId` 外的全部会话
+     * （`sessions.revoked_at`）与全部个人访问令牌，要么全部生效要么都不生效。scrypt 在 BEGIN 之前算好。
+     * 返回被吊销的会话 id，调用方随后写 Redis 吊销标记（快速路径；鉴权以 PG `revoked_at` 为准，
+     * 标记写失败也不会让这些会话继续可用）。
+     */
+    changePassword(accountId: string, password: string, exceptSessionId: string): Promise<string[]>;
+    update(id: string, patch: AccountPatch, actorAccountId: string, actorTokenId?: string): Promise<Account>;
+    /**
+     * 企业管理员改账号。停用（`status: "disabled"`）时在**同一个 PG 事务**里吊销该账号的全部会话
+     * （`sessions.revoked_at`）与个人访问令牌，要么都生效要么都不生效；返回被吊销的会话 id，
+     * 调用方在提交后写 Redis 吊销标记（快速路径，失败只记 warn：鉴权以 PG 为准）。
+     */
+    updateAccount(id: string, patch: AccountPatch, actorAccountId: string, actorTokenId?: string): Promise<{
+        account: Account;
+        revokedSessionIds: string[];
+    }>;
+    /**
+     * CLI 的 `capybara admin grant|revoke <login>`（没有发起账号）：按本地登录名在 {@link lockEnterpriseAdmins}
+     * 的事务里改企业管理员标记；撤销沿用 {@link updateAccount} 的「最后一个活跃企业管理员」复核
+     * （`account.last_enterprise_admin`），在锁内判定，与网页撤销并发也不会一个都不剩。审计 `account.updated`
+     * 不带发起账号，`detail.via = "cli"`。已是目标状态时不改、不写审计（`changed: false`）。
+     * 登录名不存在 → `account.not_found`。
+     */
+    setEnterpriseAdminByLogin(login: string, isEnterpriseAdmin: boolean): Promise<{
+        account: Account;
+        changed: boolean;
+    }>;
+    /**
+     * 已持企业管理员锁的事务内改账号：改行、复核「最后一个活跃企业管理员」、写审计 `account.updated`；
+     * 停用时吊销该账号的全部会话与个人令牌。
+     */
+    private applyUpdate;
+    /** 全部账号数（含停用的；后台概览）。 */
+    count(): Promise<number>;
+    /** 活跃（status = active）的企业管理员数量。 */
+    countEnterpriseAdmins(trx?: Trx): Promise<number>;
+}
+export {};