@capybara-hq/kernel 0.0.0-stage → 0.1.0-rc.1

package/dist/http/api.module.js

@@ -0,0 +1,448 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var ApiModule_1;
+import { Module } from "@nestjs/common";
+import { APP_GUARD } from "@nestjs/core";
+import { AdminController } from "../admin/admin.controller.js";
+import { AdminExtensionsController } from "../admin/extensions.controller.js";
+import { SetupController } from "../admin/setup.controller.js";
+import { SetupService } from "../admin/setup.service.js";
+import { AgentsController } from "../agents/agents.controller.js";
+import { AgentsService } from "../agents/agents.service.js";
+import { ModelsController } from "../agents/models.controller.js";
+import { AgentTemplatesController } from "../agents/templates.controller.js";
+import { AgentTemplatesService } from "../agents/templates.js";
+import { AdminCatalogController } from "../catalog/admin-catalog.controller.js";
+import { MarketplacesController } from "../catalog/marketplaces.controller.js";
+import { AdminCatalogRequestsController, OrgCatalogController, } from "../catalog/org-catalog.controller.js";
+import { OrgCatalogService } from "../catalog/org-catalog.service.js";
+import { PluginInstaller } from "../catalog/plugin-install.js";
+import { PluginUpgrader } from "../catalog/plugin-upgrade.js";
+import { CatalogRequestsService } from "../catalog/requests.service.js";
+import { ChannelConnectionsController } from "../channels/connections.controller.js";
+import { ConversationArtifacts } from "../conversations/artifacts.js";
+import { AttachmentsController } from "../conversations/attachments.controller.js";
+import { ConversationsController } from "../conversations/conversations.controller.js";
+import { ConversationsService } from "../conversations/conversations.service.js";
+import { ConversationFiles } from "../conversations/files.js";
+import { ConversationOutputs } from "../conversations/outputs-read.js";
+import { ConversationQueue } from "../conversations/queue.js";
+import { ConversationSandboxStatus } from "../conversations/sandbox-status.js";
+import { EvalRunsController } from "../evals/runs.controller.js";
+import { EvalRunsService } from "../evals/runs.service.js";
+import { EvalSetsController } from "../evals/sets.controller.js";
+import { EvalSetsService } from "../evals/sets.service.js";
+import { TrajectoryController } from "../evals/trajectory.controller.js";
+import { TrajectoryService } from "../evals/trajectory.service.js";
+import { OrgExtensionConfigsController } from "../extensions/org-config.controller.js";
+import { FilePreviewersController } from "../files/previewers.controller.js";
+import { PreviewerRegistry } from "../files/previewers.js";
+import { AccountsService } from "../identity/accounts.js";
+import { ApiTokenService } from "../identity/api-tokens.js";
+import { AuthController } from "../identity/auth.controller.js";
+import { AuthGuard } from "../identity/auth.guard.js";
+import { MeController } from "../identity/me.controller.js";
+import { LoginRateLimiter } from "../identity/rate-limit.js";
+import { SessionService } from "../identity/sessions.js";
+import { SettingsService } from "../identity/settings.js";
+import { BindController, MeIdentitiesController, SsoController, } from "../identity/sso.controller.js";
+import { InboxService } from "../inbox/inbox.service.js";
+import { ModelPurposesController } from "../models/purposes.controller.js";
+import { DirectorySyncController } from "../orgs/directory-sync.controller.js";
+import { InvitationsController } from "../orgs/invitations.controller.js";
+import { InvitationsService } from "../orgs/invitations.service.js";
+import { MembersService } from "../orgs/members.service.js";
+import { OrgsController } from "../orgs/orgs.controller.js";
+import { OrgsService } from "../orgs/orgs.service.js";
+import { OrgSettingsController } from "../orgs/settings.controller.js";
+import { OrgSettingsService } from "../orgs/settings.service.js";
+import { ConversationStreamController } from "../runtime/stream.controller.js";
+import { ConversationStreams } from "../runtime/stream.js";
+import { AgentSkillsController, InboxController, SkillChangesController, } from "../skills/changes.controller.js";
+import { InvocableSkillsController } from "../skills/invocable.controller.js";
+import { SkillInvoker } from "../skills/invoke.js";
+import { SkillsController } from "../skills/skills.controller.js";
+import { ApprovalsController, ToolGrantsController } from "../tools/approvals.controller.js";
+import { ConnectorContentController } from "../tools/connector-content.controller.js";
+import { ConnectorsController } from "../tools/connectors.controller.js";
+import { ConnectorsService } from "../tools/connectors.service.js";
+import { ConversationToolInfo } from "../tools/info.js";
+import { OAuthFlow } from "../tools/oauth/flow.js";
+import { OAuthCallbackController, OAuthConnectController, } from "../tools/oauth/oauth.controller.js";
+import { QuestionsController } from "../tools/questions.controller.js";
+import { EmbedTokens } from "../ui/embed-token.js";
+import { OrgUiStreams, orgMembership } from "../ui/ui-stream.js";
+import { UiController } from "../ui/views.controller.js";
+import { recordedCard, UiViews } from "../ui/views.js";
+import { ACCOUNTS, AGENT_TEMPLATES, AGENTS, API_TOKENS, APPROVALS, ATTACHMENTS, CATALOG, CATALOG_REQUESTS, CHANNEL_CONNECTIONS, CONNECTOR_CONTENT, CONNECTORS, CONVERSATION_ARTIFACTS, CONVERSATION_FILES, CONVERSATION_OUTPUTS, CONVERSATION_QUEUE, CONVERSATION_SANDBOX, CONVERSATION_STREAMS, CONVERSATION_TOOLS, CONVERSATIONS, CREDENTIALS, DIRECTORY_SYNC, EMBED_TOKENS, EVAL_RUNS, EVAL_SETS, EVENT_LOG, EXTENSION_ADMIN, EXTENSION_ADMIN_OPS, EXTENSION_DEPLOYMENT_CONFIGS, EXTENSION_INSTALLS, EXTERNAL_IDENTITIES, FILE_PREVIEWERS, IDENTITY_BINDING, INBOX, INVITATIONS, KERNEL_BUS, KERNEL_CONFIG, KERNEL_DB, KERNEL_LOG, KERNEL_REDIS, MARKETPLACES, MEMBERS, MODEL_PURPOSES, OAUTH_FLOW, OFFBOARDING, ORG_CATALOG, ORG_EXTENSION_CONFIGS, ORG_SETTINGS, ORG_UI_STREAMS, ORGS, PLUGIN_IMPORT, PLUGIN_INSTALLER, PRICES, PROVIDER_REGISTRY, QUESTIONS, RATE_LIMITER, SESSIONS, SETTINGS, SETUP, SKILL_CHANGES, SKILL_INVOKER, SKILLS, SSO_FLOW, TOOL_REGISTRY, TRAJECTORIES, UI_VIEWS, } from "./tokens.js";
+/** 本副本已加载的连接器：插件 `plugin` 提供的 `Connector.kind === kind`。 */
+const findConnectorOf = (host) => (plugin, kind) => host
+    .list("connector")
+    .find((e) => e.plugin === plugin && e.impl?.kind === kind)?.impl;
+/** 内核 API 的全部 controller；后续任务往这里追加。 */
+const CONTROLLERS = [
+    AuthController,
+    MeController,
+    OrgsController,
+    OrgSettingsController,
+    InvitationsController,
+    SetupController,
+    AdminController,
+    AdminExtensionsController,
+    AdminCatalogController,
+    MarketplacesController,
+    OrgExtensionConfigsController,
+    AgentsController,
+    AgentTemplatesController,
+    ModelsController,
+    ConversationsController,
+    AttachmentsController,
+    SkillsController,
+    SkillChangesController,
+    AgentSkillsController,
+    InvocableSkillsController,
+    InboxController,
+    ConversationStreamController,
+    ConnectorContentController,
+    ConnectorsController,
+    ApprovalsController,
+    ToolGrantsController,
+    QuestionsController,
+    OAuthConnectController,
+    OAuthCallbackController,
+    SsoController,
+    BindController,
+    MeIdentitiesController,
+    ChannelConnectionsController,
+    DirectorySyncController,
+    UiController,
+    FilePreviewersController,
+    TrajectoryController,
+    EvalSetsController,
+    EvalRunsController,
+    ModelPurposesController,
+    OrgCatalogController,
+    AdminCatalogRequestsController,
+];
+/**
+ * 领域服务 provider：领域类保持框架无关（不加装饰器），一律用 `useFactory` 构造。
+ * 后续任务往这里追加。
+ */
+function serviceProviders(deps) {
+    return [
+        { provide: KERNEL_LOG, useValue: deps.log },
+        { provide: KERNEL_DB, useValue: deps.db },
+        { provide: KERNEL_REDIS, useValue: deps.redis },
+        { provide: KERNEL_CONFIG, useValue: deps.config },
+        { provide: ORG_EXTENSION_CONFIGS, useValue: deps.orgExtensionConfigs },
+        {
+            provide: ACCOUNTS,
+            useFactory: (db) => new AccountsService(db),
+            inject: [KERNEL_DB],
+        },
+        {
+            provide: SESSIONS,
+            useFactory: (db, redis, config) => {
+                const { accessTokenTtlSeconds, refreshTokenTtlDays } = config().auth;
+                return new SessionService(db, redis, deps.keyring, {
+                    accessTtlSeconds: accessTokenTtlSeconds,
+                    refreshTtlDays: refreshTokenTtlDays,
+                });
+            },
+            inject: [KERNEL_DB, KERNEL_REDIS, KERNEL_CONFIG],
+        },
+        {
+            provide: API_TOKENS,
+            useFactory: (db) => new ApiTokenService(db),
+            inject: [KERNEL_DB],
+        },
+        {
+            provide: SETTINGS,
+            useFactory: (db) => new SettingsService(db, deps.log),
+            inject: [KERNEL_DB],
+        },
+        {
+            provide: ORGS,
+            useFactory: (db, settings, tokens) => new OrgsService(db, settings, tokens, {
+                afterDelete: (orgId) => deps.channels.notifyOrgChanged(orgId),
+            }),
+            inject: [KERNEL_DB, SETTINGS, API_TOKENS],
+        },
+        {
+            provide: ORG_SETTINGS,
+            useFactory: (db, config) => new OrgSettingsService(db, config),
+            inject: [KERNEL_DB, KERNEL_CONFIG],
+        },
+        {
+            provide: MEMBERS,
+            useFactory: (db) => new MembersService(db, deps.identity.offboarding),
+            inject: [KERNEL_DB],
+        },
+        {
+            provide: INVITATIONS,
+            useFactory: (db, accounts, members) => new InvitationsService(db, accounts, members),
+            inject: [KERNEL_DB, ACCOUNTS, MEMBERS],
+        },
+        {
+            provide: SETUP,
+            useFactory: (db, accounts, orgs) => new SetupService(db, accounts, orgs),
+            inject: [KERNEL_DB, ACCOUNTS, ORGS],
+        },
+        {
+            provide: RATE_LIMITER,
+            useFactory: (redis) => new LoginRateLimiter(redis),
+            inject: [KERNEL_REDIS],
+        },
+        { provide: PROVIDER_REGISTRY, useValue: deps.registry },
+        {
+            provide: AGENT_TEMPLATES,
+            useFactory: (db) => new AgentTemplatesService(db),
+            inject: [KERNEL_DB],
+        },
+        {
+            provide: AGENTS,
+            useFactory: (db, registry, tools) => new AgentsService(db, registry, tools, deps.skillChanges, deps.sandboxDestroy, deps.log),
+            inject: [KERNEL_DB, PROVIDER_REGISTRY, TOOL_REGISTRY],
+        },
+        { provide: PRICES, useValue: deps.prices },
+        { provide: MODEL_PURPOSES, useValue: deps.purposes },
+        { provide: EXTENSION_INSTALLS, useValue: deps.extensionInstalls },
+        { provide: EXTENSION_ADMIN, useValue: deps.extensionAdmin },
+        { provide: EXTENSION_ADMIN_OPS, useValue: deps.extensionAdminOps },
+        { provide: EXTENSION_DEPLOYMENT_CONFIGS, useValue: deps.extensionDeploymentConfigs },
+        { provide: CATALOG, useValue: deps.catalog },
+        { provide: PLUGIN_IMPORT, useValue: deps.pluginImport },
+        { provide: MARKETPLACES, useValue: deps.marketplaces },
+        {
+            provide: TRAJECTORIES,
+            useFactory: (db, eventLog, prices, settings) => new TrajectoryService(db, eventLog, prices, settings),
+            inject: [KERNEL_DB, EVENT_LOG, PRICES, SETTINGS],
+        },
+        {
+            provide: EVAL_SETS,
+            useFactory: (db, config, prices, settings) => new EvalSetsService(db, config, prices, settings),
+            inject: [KERNEL_DB, KERNEL_CONFIG, PRICES, SETTINGS],
+        },
+        {
+            provide: EVAL_RUNS,
+            useFactory: (db, config, registry, prices, settings, redis) => new EvalRunsService({
+                db,
+                redis,
+                config,
+                registry,
+                prices,
+                settings,
+                queue: deps.evalQueue,
+                purposes: deps.purposes,
+            }),
+            inject: [KERNEL_DB, KERNEL_CONFIG, PROVIDER_REGISTRY, PRICES, SETTINGS, KERNEL_REDIS],
+        },
+        { provide: KERNEL_BUS, useValue: deps.bus },
+        { provide: EVENT_LOG, useValue: deps.eventLog },
+        { provide: CONNECTOR_CONTENT, useValue: deps.connectorContent },
+        { provide: ATTACHMENTS, useValue: deps.attachments },
+        { provide: SKILLS, useValue: deps.skills },
+        { provide: SKILL_CHANGES, useValue: deps.skillChanges },
+        {
+            provide: SKILL_INVOKER,
+            useFactory: (db, agents) => new SkillInvoker({ db, storage: deps.storage, agents, log: deps.log }),
+            inject: [KERNEL_DB, AGENTS],
+        },
+        {
+            provide: CATALOG_REQUESTS,
+            useFactory: (db) => new CatalogRequestsService(db),
+            inject: [KERNEL_DB],
+        },
+        {
+            provide: INBOX,
+            useFactory: (requests) => new InboxService({
+                approvals: deps.approvals,
+                skillChanges: deps.skillChanges,
+                catalogRequests: requests,
+            }),
+            inject: [CATALOG_REQUESTS],
+        },
+        {
+            provide: PLUGIN_INSTALLER,
+            useFactory: (db, connectors, requests) => new PluginInstaller({
+                db,
+                storage: deps.storage,
+                host: deps.host,
+                findConnector: findConnectorOf(deps.host),
+                connectors,
+                skills: deps.skills,
+                orgConfigs: deps.orgExtensionConfigs,
+                requests,
+                log: deps.log,
+                staleInstallMinutes: () => deps.config().catalog.staleInstallMinutes,
+            }),
+            inject: [KERNEL_DB, CONNECTORS, CATALOG_REQUESTS],
+        },
+        {
+            provide: ORG_CATALOG,
+            useFactory: (db, requests, pluginInstaller) => new OrgCatalogService({
+                db,
+                storage: deps.storage,
+                host: deps.host,
+                findConnector: findConnectorOf(deps.host),
+                requests,
+                pluginInstaller,
+                pluginUpgrader: new PluginUpgrader(pluginInstaller),
+                log: deps.log,
+            }),
+            inject: [KERNEL_DB, CATALOG_REQUESTS, PLUGIN_INSTALLER],
+        },
+        {
+            provide: CONVERSATIONS,
+            useFactory: (db, eventLog, agents, content, attachments, invoker) => new ConversationsService(db, eventLog, agents, deps.runs, deps.log, (orgId, accountId, refs) => content.resolveAttachments(orgId, accountId, refs), (trx, orgId, conversationId, accountId, ids) => attachments.bindForMessage(trx, orgId, conversationId, accountId, ids), deps.registry, invoker),
+            inject: [KERNEL_DB, EVENT_LOG, AGENTS, CONNECTOR_CONTENT, ATTACHMENTS, SKILL_INVOKER],
+        },
+        {
+            provide: CONVERSATION_OUTPUTS,
+            useFactory: (conversations) => new ConversationOutputs({
+                isAccessible: (orgId, id, viewer) => conversations.isAccessible(orgId, id, viewer),
+                load: (scope, id) => deps.outputs.load(scope, id),
+            }),
+            inject: [CONVERSATIONS],
+        },
+        {
+            provide: CONVERSATION_ARTIFACTS,
+            useFactory: (db, conversations) => new ConversationArtifacts({
+                db,
+                storage: deps.storage,
+                isAccessible: (orgId, id, viewer) => conversations.isAccessible(orgId, id, viewer),
+            }),
+            inject: [KERNEL_DB, CONVERSATIONS],
+        },
+        {
+            provide: CONVERSATION_FILES,
+            useFactory: (db, conversations) => new ConversationFiles({
+                db,
+                storage: deps.storage,
+                isAccessible: (orgId, id, viewer) => conversations.isAccessible(orgId, id, viewer),
+            }),
+            inject: [KERNEL_DB, CONVERSATIONS],
+        },
+        {
+            provide: CONVERSATION_QUEUE,
+            useFactory: (db, eventLog, conversations) => new ConversationQueue({ db, eventLog, conversations, runs: deps.runs }),
+            inject: [KERNEL_DB, EVENT_LOG, CONVERSATIONS],
+        },
+        {
+            provide: CONVERSATION_SANDBOX,
+            useFactory: (conversations) => new ConversationSandboxStatus({
+                sandbox: deps.sandbox,
+                isAccessible: (orgId, id, viewer) => conversations.isAccessible(orgId, id, viewer),
+                sandboxConversationOf: (orgId, id) => conversations.sandboxConversationOf(orgId, id),
+            }),
+            inject: [CONVERSATIONS],
+        },
+        {
+            provide: CONVERSATION_TOOLS,
+            useFactory: (db, conversations) => new ConversationToolInfo({
+                db,
+                registry: deps.toolRegistry,
+                isAccessible: (orgId, id, viewer) => conversations.isAccessible(orgId, id, viewer),
+            }),
+            inject: [KERNEL_DB, CONVERSATIONS],
+        },
+        {
+            provide: CONVERSATION_STREAMS,
+            useFactory: (eventLog, bus, conversations, config) => new ConversationStreams({
+                eventLog,
+                bus,
+                access: (orgId, id, viewer) => conversations.isAccessible(orgId, id, viewer),
+                config,
+                log: deps.log,
+            }),
+            inject: [EVENT_LOG, KERNEL_BUS, CONVERSATIONS, KERNEL_CONFIG],
+        },
+        {
+            provide: FILE_PREVIEWERS,
+            useFactory: (db, files) => new PreviewerRegistry({
+                db,
+                host: deps.host,
+                enabledPlugins: (orgId) => deps.host.enabledPlugins(orgId),
+                files,
+                storage: deps.storage,
+                log: deps.log,
+            }),
+            inject: [KERNEL_DB, CONVERSATION_FILES],
+        },
+        {
+            provide: UI_VIEWS,
+            useFactory: (conversations, previewers, db) => new UiViews({
+                host: deps.host,
+                // org config rows plus the required bootstrap plugins
+                enabledPlugins: (orgId) => deps.host.enabledPlugins(orgId),
+                canAccessConversation: (orgId, id, accountId) => conversations.isAccessible(orgId, id, accountId),
+                checkWritable: async (orgId, id, accountId) => {
+                    await conversations.writable(orgId, id, accountId);
+                },
+                previewEmbedAllowed: (t) => previewers.embedAllowed(t),
+                recordedCard: (conversationId, callId) => recordedCard(db, conversationId, callId),
+                log: deps.log,
+            }),
+            inject: [CONVERSATIONS, FILE_PREVIEWERS, KERNEL_DB],
+        },
+        { provide: EMBED_TOKENS, useFactory: () => new EmbedTokens(deps.keyring) },
+        {
+            provide: ORG_UI_STREAMS,
+            useFactory: (db, bus, config) => new OrgUiStreams({ bus, memberRole: orgMembership(db), config, log: deps.log }),
+            inject: [KERNEL_DB, KERNEL_BUS, KERNEL_CONFIG],
+        },
+        { provide: CREDENTIALS, useValue: deps.credentials },
+        { provide: EXTERNAL_IDENTITIES, useValue: deps.identity.external },
+        { provide: IDENTITY_BINDING, useValue: deps.identity.binding },
+        { provide: SSO_FLOW, useValue: deps.identity.sso },
+        { provide: OFFBOARDING, useValue: deps.identity.offboarding },
+        { provide: CHANNEL_CONNECTIONS, useValue: deps.channels },
+        { provide: DIRECTORY_SYNC, useValue: deps.identity.directory },
+        { provide: TOOL_REGISTRY, useValue: deps.toolRegistry },
+        { provide: APPROVALS, useValue: deps.approvals },
+        { provide: QUESTIONS, useValue: deps.questions },
+        {
+            provide: CONNECTORS,
+            useFactory: (db, registry, credentials, config) => new ConnectorsService(db, registry, deps.host, credentials, config, deps.drift),
+            inject: [KERNEL_DB, TOOL_REGISTRY, CREDENTIALS, KERNEL_CONFIG],
+        },
+        {
+            provide: OAUTH_FLOW,
+            useFactory: (db, redis, credentials, config, connectors) => new OAuthFlow({
+                db,
+                redis,
+                credentials,
+                config,
+                log: deps.log,
+                onFirstConnect: async (orgId, connectorId, accountId) => {
+                    await connectors.refresh(orgId, connectorId, accountId, undefined, {
+                        trigger: "first_connect",
+                    });
+                },
+            }),
+            inject: [KERNEL_DB, KERNEL_REDIS, CREDENTIALS, KERNEL_CONFIG, CONNECTORS],
+        },
+    ];
+}
+/**
+ * 内核 API 模块（`/api/v1/*`），只在角色含 `api` 时挂载。
+ * 全局守卫 `AuthGuard` 默认拒绝：未标注 `@Public()` 的路由一律要求凭据（含根模块的健康检查，它们显式标了 `@Public()`）。
+ */
+let ApiModule = ApiModule_1 = class ApiModule {
+    static register(deps) {
+        return {
+            module: ApiModule_1,
+            controllers: CONTROLLERS,
+            providers: [...serviceProviders(deps), { provide: APP_GUARD, useClass: AuthGuard }],
+        };
+    }
+};
+ApiModule = ApiModule_1 = __decorate([
+    Module({})
+    // biome-ignore lint/complexity/noStaticOnlyClass: Nest 动态模块约定（`Module.register()` 返回 DynamicModule）
+], ApiModule);
+export { ApiModule };

package/dist/http/app.d.ts

@@ -0,0 +1,77 @@
+import "reflect-metadata";
+import type { Logger } from "@capybara-hq/plugin-sdk";
+import { type DynamicModule } from "@nestjs/common";
+import type { InjectOptions, LightMyRequestResponse } from "fastify";
+import type { Route } from "../ctx/create-ctx.js";
+import { type GatewayRoutes } from "./gateway.module.js";
+import { type HealthOptions } from "./health.controller.js";
+import { type PluginRouteTable } from "./plugin-dispatch.js";
+export type { HealthOptions } from "./health.controller.js";
+/** 内核 HTTP 的只读视图：进程内注入请求与列出路由（测试与元测试用）。 */
+export interface KernelHttp {
+    inject(opts: InjectOptions): Promise<LightMyRequestResponse>;
+    /** 已注册的全部路由（Fastify onRoute 收集），供元测试遍历。 */
+    routes(): {
+        method: string;
+        url: string;
+    }[];
+    /** 服务端当前打开的 TCP 连接数（测试观察连接是否被释放）。 */
+    connections(): Promise<number>;
+}
+/** 内核 HTTP 应用。 */
+export interface KernelHttpApp extends KernelHttp {
+    /**
+     * Mounts extension routes; paths must start with `/plugins/`. May be called only once. With a route
+     * source ({@link PluginRouteTable}) routes are resolved live per request (an extension revoked /
+     * replaced takes effect right away), and a revoked extension answers 503 `extension.unavailable`.
+     */
+    mountPlugins(routes: Route[] | PluginRouteTable): void;
+    /** 监听 0.0.0.0，返回实际端口。 */
+    listen(port: number): Promise<number>;
+    close(): Promise<void>;
+    /** 中止进行中（及此后到达）的插件请求的 `req.signal`：停机开始时调用，插件长连接据此收尾。 */
+    abortPluginRequests(): void;
+    /** 强制断开所有连接（含进行中的请求）；停机时 `close()` 超时后调用。 */
+    closeAllConnections(): void;
+}
+export interface CreateHttpAppOptions {
+    log: Logger;
+    health: HealthOptions;
+    /** 是否提供内核 API（`apiModule`）。 */
+    serveApi: boolean;
+    /** 是否转发 `/plugins/*` 到插件路由。 */
+    servePlugins: boolean;
+    /**
+     * Gateway-role routes (the channel webhook), registered only when given: the kernel passes them
+     * when `roles` includes `gateway` (`serveGateway`).
+     */
+    gateway?: GatewayRoutes;
+    apiModule?: DynamicModule;
+    /** 信任哪些代理跳：false、跳数，或受信代理 IP / CIDR 列表（见 `http.trustProxy` 配置）。 */
+    trustProxy?: boolean | number | string[];
+    /** 副本标识（`http.replicaId`）：设置时每个响应带 `x-capybara-replica` 头。 */
+    replicaId?: string | undefined;
+    /**
+     * The size limit for package uploads ({@link PACKAGE_UPLOAD_ROUTES}: extension packages and
+     * enterprise catalog packages, `application/octet-stream`), i.e. `packages.maxBytes`. The route
+     * bodyLimit is one byte more: a package exactly one byte over reaches the handler and returns
+     * `extension.package_too_large`; larger ones are refused by Fastify itself (413
+     * `payload_too_large`).
+     */
+    packageMaxBytes?: number;
+}
+/** The extension package upload route (Fastify route template). */
+export declare const EXTENSION_PACKAGE_UPLOAD_ROUTE = "/api/v1/admin/extensions/packages/file";
+/** The plugin package upload route of the catalog import (Fastify route template). */
+export declare const CATALOG_UPLOAD_ROUTE = "/api/v1/admin/catalog/import/file";
+/**
+ * The upload routes that take raw bytes (`application/octet-stream`, limit `packages.maxBytes`,
+ * the enterprise admin is authenticated before the body is read).
+ */
+export declare const PACKAGE_UPLOAD_ROUTES: ReadonlySet<string>;
+/**
+ * 创建并初始化内核 HTTP 应用（NestJS + Fastify），不连接任何外部资源。
+ * 插件路由不经过 Nest：在 Fastify 的独立作用域里统一转发 `/plugins/*`（见 plugin-dispatch.ts）；
+ * 插件加载前 `/plugins/*` 一律 404。未匹配的内核路由同样返回 404 错误信封。
+ */
+export declare function createHttpApp(opts: CreateHttpAppOptions): Promise<KernelHttpApp>;