@capybara-hq/kernel 0.1.0-rc.0 → 0.1.0-rc.2

package/dist/evals/sets.service.d.ts

@@ -1,7 +1,10 @@
-import type { KernelConfig } from "../config/schema.js";
-import type { KernelDb } from "../db/kernel-schema.js";
-import type { SettingsService } from "../identity/settings.js";
-import type { PricesService } from "../models/prices.js";
+import { SettingsService } from "../identity/settings.js";
+import { KernelConfigService } from "../infra/config/kernel-config.service.js";
+import { KernelDb } from "../infra/database/kernel-db.js";
+import { TransactionHost } from "../infra/database/transaction-host.js";
+import { PricesService } from "../models/prices.js";
+import { OrgLock } from "../orgs/org-lock.js";
+import { EvalBudget } from "./budget.js";
 import { type CaseSnapshot } from "./snapshot.js";
 import { type TrajectoryRun } from "./trajectory.js";
 export interface EvalSetView {
@@ -67,11 +70,19 @@ export declare function caseTitle(s: CaseSnapshot): string;
  * （`evals.manage`），再锁集合行，串行化同一集合的容量判定。查看用例内容写审计 `trajectory.viewed`。
  */
 export declare class EvalSetsService {
-    private readonly db;
+    private readonly kdb;
     private readonly config;
     private readonly prices;
     private readonly settings;
-    constructor(db: KernelDb, config: () => KernelConfig, prices: PricesService, settings: SettingsService);
+    /** The org row lock (orgs/org-lock.ts): joins the caller's transaction. */
+    private readonly orgLock;
+    private readonly budget;
+    readonly txHost: TransactionHost;
+    constructor(kdb: KernelDb, config: Pick<KernelConfigService, "get">, prices: Pick<PricesService, "table">, settings: Pick<SettingsService, "get">, 
+    /** The org row lock (orgs/org-lock.ts): joins the caller's transaction. */
+    orgLock: Pick<OrgLock, "lockAndAuthorize">, budget: Pick<EvalBudget, "skipRun">, txHost: TransactionHost);
+    /** The context-aware handle (the `@Transactional` method's transaction, else the pool). */
+    private get db();
     private views;
     private static toView;
     private view;
@@ -93,6 +104,11 @@ export declare class EvalSetsService {
      * 在执行的运行取消，运行行保留（无入口）。
      */
     remove(orgId: string, actor: string, setId: string, actorTokenId?: string): Promise<void>;
+    private createIn;
+    private updateIn;
+    private removeIn;
+    private insertCaseIn;
+    private removeCaseIn;
     /** 未删除的评测集；不存在 → `eval.set_not_found`。 */
     private liveSet;
     private caseCount;

package/dist/evals/sets.service.js

@@ -1,9 +1,26 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var EvalSetsService_1;
+import { Inject, Injectable } from "@nestjs/common";
 import { sql } from "kysely";
 import { typedInvocation } from "../conversations/events.js";
 import { ApiError } from "../errors.js";
 import { audit } from "../identity/audit.js";
-import { lockOrgAndAuthorize } from "../orgs/org-lock.js";
-import { recountCases, skipPendingJudges } from "./budget.js";
+import { SettingsService } from "../identity/settings.js";
+import { KernelConfigService } from "../infra/config/kernel-config.service.js";
+import { KernelDb } from "../infra/database/kernel-db.js";
+import { TransactionHost } from "../infra/database/transaction-host.js";
+import { Transactional } from "../infra/database/transactional.decorator.js";
+import { PricesService } from "../models/prices.js";
+import { OrgLock } from "../orgs/org-lock.js";
+import { EvalBudget } from "./budget.js";
 import { casePlans } from "./plan.js";
 import { caseBase } from "./runs.service.js";
 import { readSnapshot, replayableCalls, takeSnapshot, toEvents, } from "./snapshot.js";
@@ -74,16 +91,28 @@ function toCaseView(r) {
  * （`takeSnapshot`，≤ `evals.maxCaseBytes`），之后与原对话无关。写操作在事务里锁组织行并复核角色
  * （`evals.manage`），再锁集合行，串行化同一集合的容量判定。查看用例内容写审计 `trajectory.viewed`。
  */
-export class EvalSetsService {
-    db;
+let EvalSetsService = EvalSetsService_1 = class EvalSetsService {
+    kdb;
     config;
     prices;
     settings;
-    constructor(db, config, prices, settings) {
-        this.db = db;
+    orgLock;
+    budget;
+    txHost;
+    constructor(kdb, config, prices, settings, 
+    /** The org row lock (orgs/org-lock.ts): joins the caller's transaction. */
+    orgLock, budget, txHost) {
+        this.kdb = kdb;
         this.config = config;
         this.prices = prices;
         this.settings = settings;
+        this.orgLock = orgLock;
+        this.budget = budget;
+        this.txHost = txHost;
+    }
+    /** The context-aware handle (the `@Transactional` method's transaction, else the pool). */
+    get db() {
+        return this.kdb.db;
     }
     views(orgId) {
         return this.db
@@ -121,42 +150,10 @@ export class EvalSetsService {
         const r = await this.views(orgId).where("s.id", "=", setId).executeTakeFirst();
         if (!r)
             throw setNotFound();
-        return EvalSetsService.toView(r);
+        return EvalSetsService_1.toView(r);
     }
     async create(orgId, actor, input, actorTokenId) {
-        const id = await this.db.transaction().execute(async (trx) => {
-            await lockOrgAndAuthorize(trx, orgId, actor, "evals.manage");
-            const agent = await trx
-                .selectFrom("agents")
-                .select("id")
-                .where("id", "=", input.agentId)
-                .where("org_id", "=", orgId)
-                .where("deleted_at", "is", null)
-                .executeTakeFirst();
-            if (!agent)
-                throw new ApiError("agent.not_found", "Agent not found");
-            const row = await trx
-                .insertInto("eval_sets")
-                .values({
-                org_id: orgId,
-                agent_id: input.agentId,
-                name: input.name,
-                description: input.description ?? "",
-                rubric: input.rubric ?? null,
-                created_by: actor,
-            })
-                .returning("id")
-                .executeTakeFirstOrThrow();
-            await audit(trx, {
-                actorAccountId: actor,
-                ...(actorTokenId !== undefined && { actorTokenId }),
-                orgId,
-                action: "eval.set_created",
-                target: row.id,
-                detail: { agentId: input.agentId, name: input.name },
-            });
-            return row.id;
-        });
+        const id = await this.createIn(orgId, actor, input, actorTokenId);
         return this.view(orgId, id);
     }
     async list(orgId) {
@@ -164,7 +161,7 @@ export class EvalSetsService {
             .orderBy("s.created_at", "desc")
             .orderBy("s.id", "desc")
             .execute();
-        return rows.map((r) => EvalSetsService.toView(r));
+        return rows.map((r) => EvalSetsService_1.toView(r));
     }
     async get(orgId, setId) {
         const set = await this.view(orgId, setId);
@@ -181,34 +178,7 @@ export class EvalSetsService {
     async update(orgId, actor, setId, patch, actorTokenId) {
         if (!UUID.test(setId))
             throw setNotFound();
-        await this.db.transaction().execute(async (trx) => {
-            await lockOrgAndAuthorize(trx, orgId, actor, "evals.manage");
-            const r = await trx
-                .updateTable("eval_sets")
-                .set({
-                ...(patch.name !== undefined && { name: patch.name }),
-                ...(patch.description !== undefined && { description: patch.description }),
-                ...(patch.rubric !== undefined && { rubric: patch.rubric }),
-                updated_at: sql `now()`,
-            })
-                .where("id", "=", setId)
-                .where("org_id", "=", orgId)
-                .where("deleted_at", "is", null)
-                .executeTakeFirst();
-            if (Number(r.numUpdatedRows) === 0)
-                throw setNotFound();
-            await audit(trx, {
-                actorAccountId: actor,
-                ...(actorTokenId !== undefined && { actorTokenId }),
-                orgId,
-                action: "eval.set_updated",
-                target: setId,
-                // 只记改了哪些字段（评分标准可能很长，不进审计）
-                detail: {
-                    fields: ["name", "description", "rubric"].filter((f) => patch[f] !== undefined),
-                },
-            });
-        });
+        await this.updateIn(orgId, actor, setId, patch, actorTokenId);
         return this.view(orgId, setId);
     }
     /**
@@ -218,25 +188,173 @@ export class EvalSetsService {
     async remove(orgId, actor, setId, actorTokenId) {
         if (!UUID.test(setId))
             throw setNotFound();
-        await this.db.transaction().execute(async (trx) => {
-            await lockOrgAndAuthorize(trx, orgId, actor, "evals.manage");
-            const r = await trx
-                .updateTable("eval_sets")
-                .set({ deleted_at: sql `now()`, updated_at: sql `now()` })
-                .where("id", "=", setId)
-                .where("org_id", "=", orgId)
-                .where("deleted_at", "is", null)
-                .executeTakeFirst();
-            if (Number(r.numUpdatedRows) === 0)
-                throw setNotFound();
-            await stopAndPurgeRuns(trx, setId);
-            await audit(trx, {
-                actorAccountId: actor,
-                ...(actorTokenId !== undefined && { actorTokenId }),
-                orgId,
-                action: "eval.set_deleted",
-                target: setId,
-            });
+        await this.removeIn(orgId, actor, setId, actorTokenId);
+    }
+    async createIn(orgId, actor, input, actorTokenId) {
+        await this.orgLock.lockAndAuthorize(orgId, actor, "evals.manage");
+        const agent = await this.db
+            .selectFrom("agents")
+            .select("id")
+            .where("id", "=", input.agentId)
+            .where("org_id", "=", orgId)
+            .where("deleted_at", "is", null)
+            .executeTakeFirst();
+        if (!agent)
+            throw new ApiError("agent.not_found", "Agent not found");
+        const row = await this.db
+            .insertInto("eval_sets")
+            .values({
+            org_id: orgId,
+            agent_id: input.agentId,
+            name: input.name,
+            description: input.description ?? "",
+            rubric: input.rubric ?? null,
+            created_by: actor,
+        })
+            .returning("id")
+            .executeTakeFirstOrThrow();
+        await audit(this.db, {
+            actorAccountId: actor,
+            ...(actorTokenId !== undefined && { actorTokenId }),
+            orgId,
+            action: "eval.set_created",
+            target: row.id,
+            detail: { agentId: input.agentId, name: input.name },
+        });
+        return row.id;
+    }
+    async updateIn(orgId, actor, setId, patch, actorTokenId) {
+        await this.orgLock.lockAndAuthorize(orgId, actor, "evals.manage");
+        const r = await this.db
+            .updateTable("eval_sets")
+            .set({
+            ...(patch.name !== undefined && { name: patch.name }),
+            ...(patch.description !== undefined && { description: patch.description }),
+            ...(patch.rubric !== undefined && { rubric: patch.rubric }),
+            updated_at: sql `now()`,
+        })
+            .where("id", "=", setId)
+            .where("org_id", "=", orgId)
+            .where("deleted_at", "is", null)
+            .executeTakeFirst();
+        if (Number(r.numUpdatedRows) === 0)
+            throw setNotFound();
+        await audit(this.db, {
+            actorAccountId: actor,
+            ...(actorTokenId !== undefined && { actorTokenId }),
+            orgId,
+            action: "eval.set_updated",
+            target: setId,
+            // 只记改了哪些字段（评分标准可能很长，不进审计）
+            detail: {
+                fields: ["name", "description", "rubric"].filter((f) => patch[f] !== undefined),
+            },
+        });
+    }
+    async removeIn(orgId, actor, setId, actorTokenId) {
+        await this.orgLock.lockAndAuthorize(orgId, actor, "evals.manage");
+        const r = await this.db
+            .updateTable("eval_sets")
+            .set({ deleted_at: sql `now()`, updated_at: sql `now()` })
+            .where("id", "=", setId)
+            .where("org_id", "=", orgId)
+            .where("deleted_at", "is", null)
+            .executeTakeFirst();
+        if (Number(r.numUpdatedRows) === 0)
+            throw setNotFound();
+        await stopAndPurgeRuns(this.db, this.budget, setId);
+        await audit(this.db, {
+            actorAccountId: actor,
+            ...(actorTokenId !== undefined && { actorTokenId }),
+            orgId,
+            action: "eval.set_deleted",
+            target: setId,
+        });
+    }
+    async insertCaseIn(orgId, actor, setId, snapshot, extra, prepared) {
+        const { max, json, plans, base } = prepared;
+        await this.orgLock.lockAndAuthorize(orgId, actor, "evals.manage");
+        const set = await this.db
+            .selectFrom("eval_sets")
+            .select("id")
+            .where("id", "=", setId)
+            .where("org_id", "=", orgId)
+            .where("deleted_at", "is", null)
+            .forUpdate()
+            .executeTakeFirst();
+        if (!set)
+            throw setNotFound();
+        if ((await this.caseCount(this.db, setId)) >= max)
+            return "full";
+        const row = await this.db
+            .insertInto("eval_cases")
+            .values({
+            set_id: setId,
+            org_id: orgId,
+            source_conversation_id: snapshot.conversationId,
+            source_run_id: snapshot.runId,
+            agent_version: snapshot.agentVersion,
+            title: caseTitle(snapshot),
+            snapshot: json,
+            snapshot_bytes: Buffer.byteLength(json),
+            replayable_steps: replayableCalls(snapshot).length,
+            plan_step: JSON.stringify(plans.step),
+            plan_run: JSON.stringify(plans.run),
+            base_model: base ? JSON.stringify(base.definition.model) : null,
+            added_by: actor,
+        })
+            .onConflict((oc) => oc.columns(["set_id", "source_run_id"]).doNothing())
+            .returning(CASE_COLUMNS)
+            .executeTakeFirst();
+        if (!row)
+            return "exists";
+        await audit(this.db, {
+            actorAccountId: actor,
+            ...(extra.actorTokenId !== undefined && { actorTokenId: extra.actorTokenId }),
+            orgId,
+            action: "eval.case_added",
+            target: setId,
+            detail: {
+                caseId: row.id,
+                conversationId: snapshot.conversationId,
+                runId: snapshot.runId,
+                ...(extra.sampled && { sampled: true }),
+            },
+        });
+        return toCaseView(row);
+    }
+    async removeCaseIn(orgId, actor, setId, caseId, actorTokenId) {
+        await this.orgLock.lockAndAuthorize(orgId, actor, "evals.manage");
+        const set = await this.db
+            .selectFrom("eval_sets")
+            .select("id")
+            .where("id", "=", setId)
+            .where("org_id", "=", orgId)
+            .where("deleted_at", "is", null)
+            .forUpdate()
+            .executeTakeFirst();
+        if (!set)
+            throw setNotFound();
+        const r = await this.db
+            .deleteFrom("eval_cases")
+            .where("id", "=", caseId)
+            .where("set_id", "=", setId)
+            .where("org_id", "=", orgId)
+            .returning(["source_conversation_id", "source_run_id"])
+            .executeTakeFirst();
+        if (!r)
+            throw caseNotFound();
+        await audit(this.db, {
+            actorAccountId: actor,
+            ...(actorTokenId !== undefined && { actorTokenId }),
+            orgId,
+            action: "eval.case_removed",
+            target: setId,
+            detail: {
+                caseId,
+                conversationId: r.source_conversation_id,
+                runId: r.source_run_id,
+            },
         });
     }
     /** 未删除的评测集；不存在 → `eval.set_not_found`。 */
@@ -267,7 +385,7 @@ export class EvalSetsService {
      * `(set_id, source_run_id)` 已存在时返回 null（不写）。成功时写审计 `eval.case_added`。
      */
     async insertCase(orgId, actor, setId, snapshot, extra) {
-        const max = this.config().evals.maxCasesPerSet;
+        const max = this.config.get().evals.maxCasesPerSet;
         const json = JSON.stringify(snapshot);
         // 估算与启动只读这些列（不读快照）：两种模式的计划与用例原版本的模型
         const plans = casePlans(snapshot);
@@ -277,57 +395,7 @@ export class EvalSetsService {
             plans.step.switchedModel = switched;
             plans.run.switchedModel = switched;
         }
-        return this.db.transaction().execute(async (trx) => {
-            await lockOrgAndAuthorize(trx, orgId, actor, "evals.manage");
-            const set = await trx
-                .selectFrom("eval_sets")
-                .select("id")
-                .where("id", "=", setId)
-                .where("org_id", "=", orgId)
-                .where("deleted_at", "is", null)
-                .forUpdate()
-                .executeTakeFirst();
-            if (!set)
-                throw setNotFound();
-            if ((await this.caseCount(trx, setId)) >= max)
-                return "full";
-            const row = await trx
-                .insertInto("eval_cases")
-                .values({
-                set_id: setId,
-                org_id: orgId,
-                source_conversation_id: snapshot.conversationId,
-                source_run_id: snapshot.runId,
-                agent_version: snapshot.agentVersion,
-                title: caseTitle(snapshot),
-                snapshot: json,
-                snapshot_bytes: Buffer.byteLength(json),
-                replayable_steps: replayableCalls(snapshot).length,
-                plan_step: JSON.stringify(plans.step),
-                plan_run: JSON.stringify(plans.run),
-                base_model: base ? JSON.stringify(base.definition.model) : null,
-                added_by: actor,
-            })
-                .onConflict((oc) => oc.columns(["set_id", "source_run_id"]).doNothing())
-                .returning(CASE_COLUMNS)
-                .executeTakeFirst();
-            if (!row)
-                return "exists";
-            await audit(trx, {
-                actorAccountId: actor,
-                ...(extra.actorTokenId !== undefined && { actorTokenId: extra.actorTokenId }),
-                orgId,
-                action: "eval.case_added",
-                target: setId,
-                detail: {
-                    caseId: row.id,
-                    conversationId: snapshot.conversationId,
-                    runId: snapshot.runId,
-                    ...(extra.sampled && { sampled: true }),
-                },
-            });
-            return toCaseView(row);
-        });
+        return this.insertCaseIn(orgId, actor, setId, snapshot, extra, { max, json, plans, base });
     }
     /**
      * 把某次运行加为用例。对话不在本组织（或是 eval 对话）→ `conversation.not_found`；对话的 agent 不是集合的 agent →
@@ -358,7 +426,7 @@ export class EvalSetsService {
             .executeTakeFirst();
         if (exists)
             throw caseExists();
-        const { maxCasesPerSet, maxCaseBytes } = this.config().evals;
+        const { maxCasesPerSet, maxCaseBytes } = this.config.get().evals;
         // 先判容量再取快照（快照可能很大）；写入时在锁内再判一次
         if ((await this.caseCount(this.db, setId)) >= maxCasesPerSet)
             throw tooMany(maxCasesPerSet);
@@ -380,7 +448,7 @@ export class EvalSetsService {
      */
     async sample(orgId, actor, setId, input, actorTokenId) {
         const set = await this.liveSet(orgId, setId);
-        const { maxCasesPerSet, maxCaseBytes } = this.config().evals;
+        const { maxCasesPerSet, maxCaseBytes } = this.config.get().evals;
         const room = maxCasesPerSet - (await this.caseCount(this.db, setId));
         if (room <= 0)
             throw tooMany(maxCasesPerSet);
@@ -442,40 +510,7 @@ export class EvalSetsService {
             throw setNotFound();
         if (!UUID.test(caseId))
             throw caseNotFound();
-        await this.db.transaction().execute(async (trx) => {
-            await lockOrgAndAuthorize(trx, orgId, actor, "evals.manage");
-            const set = await trx
-                .selectFrom("eval_sets")
-                .select("id")
-                .where("id", "=", setId)
-                .where("org_id", "=", orgId)
-                .where("deleted_at", "is", null)
-                .forUpdate()
-                .executeTakeFirst();
-            if (!set)
-                throw setNotFound();
-            const r = await trx
-                .deleteFrom("eval_cases")
-                .where("id", "=", caseId)
-                .where("set_id", "=", setId)
-                .where("org_id", "=", orgId)
-                .returning(["source_conversation_id", "source_run_id"])
-                .executeTakeFirst();
-            if (!r)
-                throw caseNotFound();
-            await audit(trx, {
-                actorAccountId: actor,
-                ...(actorTokenId !== undefined && { actorTokenId }),
-                orgId,
-                action: "eval.case_removed",
-                target: setId,
-                detail: {
-                    caseId,
-                    conversationId: r.source_conversation_id,
-                    runId: r.source_run_id,
-                },
-            });
-        });
+        await this.removeCaseIn(orgId, actor, setId, caseId, actorTokenId);
     }
     /**
      * 用例详情：由快照还原轨迹（原对话删除后照常可读）。快照即对话内容，每次查看写审计 `trajectory.viewed`
@@ -514,15 +549,41 @@ export class EvalSetsService {
             }),
         };
     }
-}
+};
+__decorate([
+    Transactional({ propagation: "requires_new" })
+], EvalSetsService.prototype, "createIn", null);
+__decorate([
+    Transactional({ propagation: "requires_new" })
+], EvalSetsService.prototype, "updateIn", null);
+__decorate([
+    Transactional({ propagation: "requires_new" })
+], EvalSetsService.prototype, "removeIn", null);
+__decorate([
+    Transactional({ propagation: "requires_new" })
+], EvalSetsService.prototype, "insertCaseIn", null);
+__decorate([
+    Transactional({ propagation: "requires_new" })
+], EvalSetsService.prototype, "removeCaseIn", null);
+EvalSetsService = EvalSetsService_1 = __decorate([
+    Injectable(),
+    __param(0, Inject(KernelDb)),
+    __param(1, Inject(KernelConfigService)),
+    __param(2, Inject(PricesService)),
+    __param(3, Inject(SettingsService)),
+    __param(4, Inject(OrgLock)),
+    __param(5, Inject(EvalBudget)),
+    __param(6, Inject(TransactionHost))
+], EvalSetsService);
+export { EvalSetsService };
 /**
  * 删除评测集时（同一事务内）：在执行的评测运行置 `cancelled`、未开始的结果 `skipped`（在途的用例在下一次请求前停下），
  * 删掉这些运行的整轮回放隐藏对话（及其 checkpoint）与集合的全部用例（结果级联删除）——集合软删后它们没有入口，也不该留着。
  * 与回放写种子互斥：种子事务对运行行加共享锁并复核仍在执行（见 `replayRun`），这里的 UPDATE 持行锁，
  * 先提交的一方胜出，不会在删除之后再长出新的评测对话。
  */
-async function stopAndPurgeRuns(trx, setId) {
-    const runs = await trx
+async function stopAndPurgeRuns(db, budget, setId) {
+    const runs = await db
         .updateTable("eval_runs")
         .set({ status: "cancelled", finished_at: sql `now()` })
         .where("set_id", "=", setId)
@@ -530,29 +591,22 @@ async function stopAndPurgeRuns(trx, setId) {
         .returning("id")
         .execute();
     for (const r of runs) {
-        await trx
-            .updateTable("eval_results")
-            .set({ status: "skipped", updated_at: sql `now()` })
-            .where("run_id", "=", r.id)
-            .where("status", "=", "pending")
-            .execute();
-        await skipPendingJudges(trx, r.id);
-        await recountCases(trx, r.id);
+        await budget.skipRun(r.id);
     }
-    const all = trx.selectFrom("eval_runs").select("id").where("set_id", "=", setId);
-    const convs = trx
+    const all = db.selectFrom("eval_runs").select("id").where("set_id", "=", setId);
+    const convs = db
         .selectFrom("conversations")
         .select("id")
         .where("kind", "=", "eval")
         .where("eval_run_id", "in", all);
-    const threads = trx.selectFrom("runs").select("id").where("conversation_id", "in", convs);
-    await trx.deleteFrom("lg_checkpoint_writes").where("thread_id", "in", threads).execute();
-    await trx.deleteFrom("lg_checkpoints").where("thread_id", "in", threads).execute();
-    await trx
+    const threads = db.selectFrom("runs").select("id").where("conversation_id", "in", convs);
+    await db.deleteFrom("lg_checkpoint_writes").where("thread_id", "in", threads).execute();
+    await db.deleteFrom("lg_checkpoints").where("thread_id", "in", threads).execute();
+    await db
         .deleteFrom("conversations")
         .where("kind", "=", "eval")
         .where("eval_run_id", "in", all)
         .execute();
     // 用例快照是复制来的对话内容：硬删（结果随之级联删除），与单个移除用例一致
-    await trx.deleteFrom("eval_cases").where("set_id", "=", setId).execute();
+    await db.deleteFrom("eval_cases").where("set_id", "=", setId).execute();
 }

package/dist/evals/snapshot.d.ts

@@ -1,7 +1,7 @@
 import type { ToolSpec } from "@capybara-hq/plugin-sdk";
 import { type AgentDefinition } from "../agents/definition.js";
 import type { ConversationEvent, ConversationEventType } from "../conversations/events.js";
-import type { KernelDb } from "../db/kernel-schema.js";
+import type { KernelSchemaDb } from "../db/kernel-schema.js";
 /**
  * 评测用例快照（C3）：复制截至某次运行终态的会话事件、这些事件引用的 agent 版本定义、请求用到的工具定义
  * （按 specHash）。回放只读快照，不改原对话的日志；媒体不复制字节，回放时按引用取原附件。
@@ -57,7 +57,7 @@ export interface CaseSnapshot {
  * 运行还没有终态事件 → `eval.run_not_finished`（409）；序列化后超过 `maxBytes` 字节 → `eval.case_too_large`（413）。
  * `maxBytes` 由调用方传入（`evals.maxCaseBytes`）。
  */
-export declare function takeSnapshot(db: KernelDb, orgId: string, conversationId: string, runId: string, maxBytes: number): Promise<CaseSnapshot>;
+export declare function takeSnapshot(db: KernelSchemaDb, orgId: string, conversationId: string, runId: string, maxBytes: number): Promise<CaseSnapshot>;
 /**
  * 读出库里存的快照（`eval_cases.snapshot`）：把各版本定义里改名前（D17）的 `{ kind: "app" }` 工具引用规范化为
  * connector 形（C27）。整轮回放会把定义交给实时注册表，不规范化的话连接器工具全部失效。其余字段原样。

package/dist/evals/step-replay.d.ts

@@ -1,7 +1,7 @@
 import { type ContentBlock, type ModelUsage, type ParamValue, type StopReason } from "@capybara-hq/plugin-sdk";
 import type { AgentDefinition, ModelRef } from "../agents/definition.js";
-import type { KernelConfig } from "../config/schema.js";
 import { type Selection } from "../conversations/selection.js";
+import type { KernelConfigService } from "../infra/config/kernel-config.service.js";
 import { type MediaSourceDeps } from "../runtime/model-call.js";
 import type { ProviderRegistry } from "../runtime/providers.js";
 import { type DriftReason } from "./reconstruct.js";
@@ -56,7 +56,7 @@ export interface ReplayOutput {
 }
 export interface StepReplayDeps {
     registry: Pick<ProviderRegistry, "resolve">;
-    config: () => KernelConfig;
+    config: Pick<KernelConfigService, "get">;
     /** 附件来源（与运行时同一个，按组织 + 对话取）；不给时媒体一律按「不再可用」占位。 */
     media?: MediaSourceDeps;
 }

package/dist/evals/step-replay.js

@@ -151,7 +151,7 @@ export async function replayStep(d, s, call, candidate, signal) {
         }),
         ...(media !== undefined && { mediaInfo: media.mediaInfo, media: media.media }),
     });
-    const idleMs = info.streamIdleTimeoutMs ?? d.config().runtime.streamIdleMs;
+    const idleMs = info.streamIdleTimeoutMs ?? d.config.get().runtime.streamIdleMs;
     const started = Date.now();
     let streamedChars = 0;
     let out;

package/dist/evals/trajectory.controller.d.ts

@@ -1,7 +1,7 @@
 import { z } from "zod";
 import { type Principal } from "../identity/principal.js";
 import { type OrgContext } from "../orgs/org.guard.js";
-import { type TrajectoryDetail, type TrajectoryListItem, type TrajectoryService } from "./trajectory.service.js";
+import { type TrajectoryDetail, type TrajectoryListItem, TrajectoryService } from "./trajectory.service.js";
 declare const ListQuery: z.ZodObject<{
     agentId: z.ZodOptional<z.ZodString>;
     kind: z.ZodOptional<z.ZodEnum<{