@capybara-hq/kernel 0.1.0-rc.1 → 0.1.0-rc.10

package/bootstrap.json

@@ -3,24 +3,104 @@
   "schemaVersion": 1,
   "marketplace": {
     "url": "https://github.com/capybara-hq/plugins.git",
-    "commit": "08e336dafe124615622534683887120c81ec416b"
+    "commit": "23106860bf79b5ab49ea3a0eeacd60b84142b463"
   },
   "plugins": [
     {
       "name": "openai-compatible",
       "source": "npm",
       "npm": "@capybara-hq/plugin-openai-compatible",
-      "version": "0.1.0-rc.0",
-      "integrity": "sha512-NYyjRfC2U6bAjjlFU0rmJuDs3IyuAwektV9KLBpnFcDVRDfRgBpcSBV/jp0tzXhv9ee5MWqzOKN20WNdKWO9fQ==",
+      "version": "0.1.0-rc.3",
+      "integrity": "sha512-7ygXLLB79afGG0fgEGzZxXpd2Xt9/rKL4X/1BIiWBKjNW+uWU0VEinw2PSGd3OS1NmonXn4BWpvYLh6wlXvVdg==",
       "required": true
     },
     {
       "name": "object-store-s3",
       "source": "npm",
       "npm": "@capybara-hq/plugin-object-store-s3",
-      "version": "0.1.0-rc.0",
-      "integrity": "sha512-jFbstLMsMeZ3EqGEm/5OnYWm4aGM9nIw71DmIuPu/frk4/Y+nTnaBWgT1SUDEr6NbFb34V31NIVNMJSoxmvMww==",
+      "version": "0.1.0-rc.2",
+      "integrity": "sha512-UEhE15+v/uzXVnilz2u4f1mRaBFp6fDVZujo5IfARSw83WEX6tdc+vCS333faAe1L8YJkzNsXZCHPgmxElE+pw==",
       "required": true
+    },
+    {
+      "name": "anthropic",
+      "source": "npm",
+      "npm": "@capybara-hq/plugin-anthropic",
+      "version": "0.1.0-rc.2",
+      "integrity": "sha512-9UPkGYwds/CDW3pY2Bf31W7/CRLN2jOsRxazFpo/Uu+/XwEtc15/phfe0kV0xJ+M76spH2SnewyJZ3hLtOnJCw==",
+      "required": false
+    },
+    {
+      "name": "openai",
+      "source": "npm",
+      "npm": "@capybara-hq/plugin-openai",
+      "version": "0.1.0-rc.2",
+      "integrity": "sha512-wb9HU+b6O62pObxgFNU/rF855tHwvAoXsCRzbZkuxY354tGxwjLdZjKgYfWdxgwmflkSY/18SGdG7TnyoeEdhA==",
+      "required": false
+    },
+    {
+      "name": "deepseek",
+      "source": "npm",
+      "npm": "@capybara-hq/plugin-deepseek",
+      "version": "0.1.0-rc.1",
+      "integrity": "sha512-YibChobIRXmv2cIkWffFXHq2RN5HoWK9YrFlXrARAjqa5PhJ1cfQoQrKZQpIPArgCRL/Sb5irQBlHwpvcE1RIQ==",
+      "required": false
+    },
+    {
+      "name": "bailian",
+      "source": "npm",
+      "npm": "@capybara-hq/plugin-bailian",
+      "version": "0.1.0-rc.1",
+      "integrity": "sha512-grhvqO33R5ugbLHZUN3L5dJiGVL8cCKS3Kxy7IGGjbS5HKEU9LNU1SxXIq55M219RkanSbX7Rtc4wubEYRON1A==",
+      "required": false
+    },
+    {
+      "name": "ark",
+      "source": "npm",
+      "npm": "@capybara-hq/plugin-ark",
+      "version": "0.1.0-rc.1",
+      "integrity": "sha512-DjOopE1yTX2nE67QcKUA7T7FofxOXtvIyUOezwjS41dt8mCkDuhjJR5jrPbpHO2wJfL5OJ+OfZm1y96DV9cBGw==",
+      "required": false
+    },
+    {
+      "name": "connector-mcp",
+      "source": "npm",
+      "npm": "@capybara-hq/plugin-connector-mcp",
+      "version": "0.1.0-rc.2",
+      "integrity": "sha512-23q0VIUYG4Svmoqx4WIA4TWjW3/rpvGv1hZ+aaDED97VfIgVfWByvPxSs7LdKiq+uvaxS20+Nf3Tx4Cqd9cXew==",
+      "required": false
+    },
+    {
+      "name": "connector-openapi",
+      "source": "npm",
+      "npm": "@capybara-hq/plugin-connector-openapi",
+      "version": "0.1.0-rc.3",
+      "integrity": "sha512-bBhV2ugPPRCGxDnbTI5rukw+GjVaDF3nwfGo6eLDI2SgENurGK9rHHz2w1kI+fM43Om/FZqZYtHYc46MkN62rQ==",
+      "required": false
+    },
+    {
+      "name": "jina",
+      "source": "npm",
+      "npm": "@capybara-hq/plugin-jina",
+      "version": "0.1.0-rc.2",
+      "integrity": "sha512-r+HrV7hCgWPbqWKl7baL0aP+xS6wvec747HbA6ktV/CsO695UYJUsjfYkkyV4NMsiF/hKRWPvE1nkPswRcQNFw==",
+      "required": false
+    },
+    {
+      "name": "sandbox-docker",
+      "source": "npm",
+      "npm": "@capybara-hq/plugin-sandbox-docker",
+      "version": "0.1.0-rc.6",
+      "integrity": "sha512-5eOix8ks7kh0QHtvbdb9PM90drSb4rmdHDtr291FpH+0rbMy4F3/v1Tcmc7bnjqpC++Z870fPG9+1rBdKIGwhQ==",
+      "required": false
+    },
+    {
+      "name": "todo",
+      "source": "npm",
+      "npm": "@capybara-hq/plugin-todo",
+      "version": "0.1.0-rc.2",
+      "integrity": "sha512-hmBgFEfn7rymz9ZybSLDhiZt8p5Giuo73S1g2NKobGggtSEhPzi6F/JB/Dd0qRfdmCYR7PhZA4DzSj/bQ4B0YA==",
+      "required": false
     }
   ]
 }

package/dist/admin/admin.controller.d.ts

@@ -1,74 +1,36 @@
-import type { Logger } from "@capybara-hq/plugin-sdk";
-import { z } from "zod";
-import type { CatalogRequestsService } from "../catalog/requests.service.js";
-import type { ExtensionAdmin } from "../extensions/admin-view.js";
-import type { Account, AccountsService } from "../identity/accounts.js";
+import type { LocalizedName, Logger } from "@capybara-hq/plugin-sdk";
+import type { z } from "zod";
+import { CatalogRequestsService } from "../catalog/requests.service.js";
+import { ExtensionAdmin } from "../extensions/admin-view.js";
+import { ExtensionDisplayNames } from "../extensions/display-name.js";
+import { PluginIcons } from "../extensions/plugin-icons.js";
+import { type Account, AccountsService } from "../identity/accounts.js";
 import { type Principal } from "../identity/principal.js";
-import type { SessionService } from "../identity/sessions.js";
-import { type DeploymentSettings, type SettingsService } from "../identity/settings.js";
-import { type ModelPrice, type ModelPricePut, type PricesService } from "../models/prices.js";
-import { type ModelPurposesService, type PurposePut, type PurposeView } from "../models/purposes.js";
-import type { Org, OrgsService } from "../orgs/orgs.service.js";
-import type { ProviderRegistry, ProviderStatus } from "../runtime/providers.js";
+import { SessionService } from "../identity/sessions.js";
+import { type DeploymentSettings, SettingsService } from "../identity/settings.js";
+import { KernelConfigService } from "../infra/config/kernel-config.service.js";
+import { type ModelDisabledPatch, type ModelProviderParams } from "../models/enablement.controller.js";
+import { type ModelDisableResult, ModelEnablement } from "../models/enablement.js";
+import { type ModelPrice, type ModelPricePut, PricesService } from "../models/prices.js";
+import { ModelPurposesService, type PurposeListing, type PurposePut } from "../models/purposes.js";
+import { type Org, OrgsService } from "../orgs/orgs.service.js";
+import { ProviderRegistry, type ProviderStatus } from "../runtime/providers.js";
+import { AccountListQuery, AccountParams, CreateAccountBody, DeploymentSettingsBody, PurposeParams, UpdateAccountBody } from "./admin.schemas.js";
+import { type LimitDefaults } from "./limit-defaults.js";
 /** 后台概览（`GET /api/v1/admin/overview`）的计数。 */
 export interface AdminOverview {
     /**
-     * Extensions an enterprise admin has to act on (pending approval or configuration, failed, missing
+     * Extensions a super admin has to act on (pending approval or configuration, failed, missing
      * dependency, replicas disagree); see `extensionNeedsAction`.
      */
     extensionsNeedingAction: number;
-    /** Catalog requests waiting for an enterprise admin (stage deployment, pending). */
+    /** Catalog requests waiting for a super admin (stage deployment, pending). */
     catalogRequestsPending: number;
     orgs: number;
     accounts: number;
 }
-declare const ListQuery: z.ZodObject<{
-    after: z.ZodOptional<z.ZodString>;
-    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
-}, z.core.$strip>;
-declare const CreateAccountBody: z.ZodObject<{
-    login: z.ZodString;
-    password: z.ZodString;
-    displayName: z.ZodString;
-    email: z.ZodOptional<z.ZodEmail>;
-    enterpriseAdmin: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strip>;
-declare const UpdateAccountBody: z.ZodObject<{
-    displayName: z.ZodOptional<z.ZodString>;
-    status: z.ZodOptional<z.ZodEnum<{
-        active: "active";
-        disabled: "disabled";
-    }>>;
-    isEnterpriseAdmin: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strip>;
-/** 至少给出一个键；`runConcurrencyOverrides` 按组织合并，值为 null 删除该组织的覆盖。 */
-declare const SettingsBody: z.ZodObject<{
-    orgCreation: z.ZodOptional<z.ZodEnum<{
-        anyone: "anyone";
-        enterprise_admin: "enterprise_admin";
-    }>>;
-    runConcurrencyOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodNumber>>>;
-    priceCurrency: z.ZodOptional<z.ZodString>;
-    sandboxLimitOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodObject<{
-        cpu: z.ZodOptional<z.ZodNumber>;
-        memoryMb: z.ZodOptional<z.ZodNumber>;
-    }, z.core.$strict>>>>;
-    subagentLimitOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodObject<{
-        maxConcurrentPerRun: z.ZodOptional<z.ZodNumber>;
-        maxDispatchesPerRun: z.ZodOptional<z.ZodNumber>;
-        maxTokensPerRun: z.ZodOptional<z.ZodNumber>;
-    }, z.core.$strict>>>>;
-    customConnectors: z.ZodOptional<z.ZodEnum<{
-        allow: "allow";
-        deny: "deny";
-    }>>;
-    customSkills: z.ZodOptional<z.ZodEnum<{
-        allow: "allow";
-        deny: "deny";
-    }>>;
-}, z.core.$strict>;
 /**
- * 企业管理员端点（`/api/v1/admin/*`）：只接受企业管理员的 Web 会话或个人令牌；
+ * 超级管理员端点（`/api/v1/admin/*`）：只接受超级管理员的 Web 会话或个人令牌；
  * 服务令牌一律 `forbidden`（未标 `@AllowService`）。
  */
 export declare class AdminController {
@@ -82,41 +44,61 @@ export declare class AdminController {
     private readonly plugins;
     private readonly registry;
     private readonly catalogRequests;
-    constructor(accounts: AccountsService, sessions: SessionService, log: Logger, orgs: OrgsService, settings: SettingsService, prices: PricesService, purposes: ModelPurposesService, plugins: ExtensionAdmin, registry: ProviderRegistry, catalogRequests: CatalogRequestsService);
+    private readonly displayNames;
+    private readonly enablement;
+    private readonly config;
+    private readonly icons;
+    constructor(accounts: AccountsService, sessions: SessionService, log: Logger, orgs: OrgsService, settings: SettingsService, prices: PricesService, purposes: ModelPurposesService, plugins: ExtensionAdmin, registry: ProviderRegistry, catalogRequests: CatalogRequestsService, displayNames: ExtensionDisplayNames, enablement: ModelEnablement, config: KernelConfigService, icons: PluginIcons);
     /** 后台概览的四个数字（只读计数，不含任何对话内容）。 */
     overview(): Promise<AdminOverview>;
     /**
      * 全部账号，按 id 升序分页：`next` 为下一页的游标（作为 `after` 传回），没有更多时为 null。
      * 多取一条判断是否还有下一页。
      */
-    listAccounts(q: z.infer<typeof ListQuery>): Promise<{
+    listAccounts(q: z.infer<typeof AccountListQuery>): Promise<{
         accounts: Account[];
         next: string | null;
     }>;
     createAccount(principal: Principal, body: z.infer<typeof CreateAccountBody>): Promise<{
         account: Account;
     }>;
-    /** 改显示名 / 状态 / 企业管理员；停用时同时吊销该账号的全部会话与个人令牌。 */
-    updateAccount(principal: Principal, accountId: string, body: z.infer<typeof UpdateAccountBody>): Promise<{
+    /** 改显示名 / 状态 / 超级管理员；停用时同时吊销该账号的全部会话与个人令牌。 */
+    updateAccount(principal: Principal, { accountId }: z.infer<typeof AccountParams>, body: z.infer<typeof UpdateAccountBody>): Promise<{
         account: Account;
     }>;
-    /** 全部组织的元数据与成员数（不含成员明细）。 */
+    /**
+     * 全部组织的元数据与成员数（不含成员明细）, with the deployment's defaults of the limits an org
+     * can be given its own value of (the org limits dialog shows them for the values left empty).
+     */
     listOrgs(): Promise<{
         orgs: (Org & {
             memberCount: number;
         })[];
+        limitDefaults: LimitDefaults;
     }>;
     getSettings(): Promise<DeploymentSettings>;
-    putSettings(principal: Principal, body: z.infer<typeof SettingsBody>): Promise<DeploymentSettings>;
+    putSettings(principal: Principal, body: z.infer<typeof DeploymentSettingsBody>): Promise<DeploymentSettings>;
     /**
      * 模型供应商与模型（后台「模型」页）：每个供应商带状态，列模型失败的标 `error`，不影响其他供应商；
-     * 一并返回价格表与币种（改价仍走 `PUT /admin/model-prices`）。
+     * 一并返回价格表与币种（改价仍走 `PUT /admin/model-prices`）。Each provider carries its extension's
+     * display name (null when it has none); every model of the platform's list carries `disabled`
+     * (the platform's disabled list, spec B §5.3).
      */
     getModels(): Promise<{
-        providers: ProviderStatus[];
+        providers: (ProviderStatus & {
+            displayName: LocalizedName | null;
+            icon: string | null;
+        })[];
         prices: ModelPrice[];
         currency: string;
     }>;
+    /**
+     * The platform's disabled models of one provider (spec B §5.3): disables and enables the ids the
+     * body names (others keep their state); such a model is invisible to every org. The response
+     * lists the agents and purposes, across orgs, that now point at a newly disabled model (the
+     * disable is not refused for them).
+     */
+    patchModelsDisabled(principal: Principal, params: z.infer<typeof ModelProviderParams>, body: z.infer<typeof ModelDisabledPatch>): Promise<ModelDisableResult>;
     /** 模型价格表（每百万 token）与币种（部署设置 `priceCurrency`）。 */
     getModelPrices(): Promise<{
         prices: ModelPrice[];
@@ -129,11 +111,10 @@ export declare class AdminController {
     }>;
     /** 模型用途与部署默认映射（`override` 一律为 null；组织覆盖在组织侧接口）。 */
     getModelPurposes(): Promise<{
-        purposes: PurposeView[];
+        purposes: PurposeListing[];
     }>;
     /** 设置一个用途的部署默认，或 `target: null` 清除。 */
-    putModelPurpose(principal: Principal, purpose: string, body: PurposePut): Promise<{
-        purpose: PurposeView;
+    putModelPurpose(principal: Principal, { purpose }: z.infer<typeof PurposeParams>, body: PurposePut): Promise<{
+        purpose: PurposeListing;
     }>;
 }
-export {};

package/dist/admin/admin.controller.js

@@ -7,39 +7,45 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Body, Controller, Get, HttpCode, Inject, Param, Patch, Post, Put, Query, } from "@nestjs/common";
-import { z } from "zod";
+import { Controller, Get, HttpCode, Inject, Patch, Post, Put } from "@nestjs/common";
+import { CatalogRequestsService } from "../catalog/requests.service.js";
+import { ExtensionAdmin } from "../extensions/admin-view.js";
+import { ExtensionDisplayNames } from "../extensions/display-name.js";
 import { extensionNeedsAction } from "../extensions/permission-view.js";
-import { ACCOUNTS, CATALOG_REQUESTS, EXTENSION_ADMIN, KERNEL_LOG, MODEL_PURPOSES, ORGS, PRICES, PROVIDER_REGISTRY, SESSIONS, SETTINGS, } from "../http/tokens.js";
-import { ZodPipe } from "../http/zod.pipe.js";
-import { MAX_PASSWORD_LENGTH } from "../identity/login.js";
-import { CurrentPrincipal, EnterpriseAdmin, patTokenId, requireUser, } from "../identity/principal.js";
-import { DEPLOYMENT_SETTINGS_PATCH, } from "../identity/settings.js";
-import { MODEL_PRICE_PUT, } from "../models/prices.js";
+import { PluginIcons } from "../extensions/plugin-icons.js";
+import { AccountsService } from "../identity/accounts.js";
+import { CurrentPrincipal, patTokenId, requireUser, SuperAdmin, } from "../identity/principal.js";
+import { SessionService } from "../identity/sessions.js";
+import { SettingsService } from "../identity/settings.js";
+import { KernelConfigService } from "../infra/config/kernel-config.service.js";
+import { KERNEL_LOGGER } from "../infra/tokens.js";
+import { createZodDto } from "../infra/validation/create-zod-dto.js";
+import { ZBody, ZParam, ZQuery } from "../infra/validation/zod-params.js";
+import { ModelDisabledPatchDto, ModelProviderParamsDto, } from "../models/enablement.controller.js";
+import { ModelEnablement } from "../models/enablement.js";
+import { MODEL_PRICE_PUT, PricesService, } from "../models/prices.js";
 import { purposeTargetOf } from "../models/purposes.controller.js";
-import { PURPOSE_PUT, } from "../models/purposes.js";
-const ListQuery = z.object({
-    after: z.string().min(1).optional(),
-    limit: z.coerce.number().int().min(1).max(200).default(50),
-});
-const CreateAccountBody = z.object({
-    login: z.string().min(1).max(64),
-    password: z.string().min(1).max(MAX_PASSWORD_LENGTH),
-    displayName: z.string().trim().min(1).max(100),
-    email: z.email().max(254).optional(),
-    enterpriseAdmin: z.boolean().optional(),
-});
-const UpdateAccountBody = z.object({
-    displayName: z.string().trim().min(1).max(100).optional(),
-    status: z.enum(["active", "disabled"]).optional(),
-    isEnterpriseAdmin: z.boolean().optional(),
-});
-/** 至少给出一个键；`runConcurrencyOverrides` 按组织合并，值为 null 删除该组织的覆盖。 */
-const SettingsBody = DEPLOYMENT_SETTINGS_PATCH.refine((b) => Object.keys(b).length > 0, {
-    message: "at least one setting is required",
-});
+import { ModelPurposesService, PurposePutDto, withDeclaredByNames, } from "../models/purposes.js";
+import { OrgsService } from "../orgs/orgs.service.js";
+import { ProviderRegistry } from "../runtime/providers.js";
+import { AccountListQuery, AccountParams, CreateAccountBody, DeploymentSettingsBody, PurposeParams, UpdateAccountBody, } from "./admin.schemas.js";
+import { limitDefaults } from "./limit-defaults.js";
+class AccountListQueryDto extends createZodDto(AccountListQuery, "AccountListQuery") {
+}
+class CreateAccountBodyDto extends createZodDto(CreateAccountBody, "CreateAccountBody") {
+}
+class UpdateAccountBodyDto extends createZodDto(UpdateAccountBody, "UpdateAccountBody") {
+}
+class AccountParamsDto extends createZodDto(AccountParams, "AccountParams") {
+}
+class PurposeParamsDto extends createZodDto(PurposeParams, "PurposeParams") {
+}
+class DeploymentSettingsBodyDto extends createZodDto(DeploymentSettingsBody, "DeploymentSettingsPatch") {
+}
+// a union schema: a DTO value rather than a class (a class cannot extend a union instance type)
+const ModelPriceBody = createZodDto(MODEL_PRICE_PUT, "ModelPricePut");
 /**
- * 企业管理员端点（`/api/v1/admin/*`）：只接受企业管理员的 Web 会话或个人令牌；
+ * 超级管理员端点（`/api/v1/admin/*`）：只接受超级管理员的 Web 会话或个人令牌；
  * 服务令牌一律 `forbidden`（未标 `@AllowService`）。
  */
 let AdminController = class AdminController {
@@ -53,7 +59,11 @@ let AdminController = class AdminController {
     plugins;
     registry;
     catalogRequests;
-    constructor(accounts, sessions, log, orgs, settings, prices, purposes, plugins, registry, catalogRequests) {
+    displayNames;
+    enablement;
+    config;
+    icons;
+    constructor(accounts, sessions, log, orgs, settings, prices, purposes, plugins, registry, catalogRequests, displayNames, enablement, config, icons) {
         this.accounts = accounts;
         this.sessions = sessions;
         this.log = log;
@@ -64,6 +74,10 @@ let AdminController = class AdminController {
         this.plugins = plugins;
         this.registry = registry;
         this.catalogRequests = catalogRequests;
+        this.displayNames = displayNames;
+        this.enablement = enablement;
+        this.config = config;
+        this.icons = icons;
     }
     /** 后台概览的四个数字（只读计数，不含任何对话内容）。 */
     async overview() {
@@ -100,17 +114,17 @@ let AdminController = class AdminController {
             password: body.password,
             displayName: body.displayName,
             ...(body.email !== undefined && { email: body.email }),
-            ...(body.enterpriseAdmin !== undefined && { enterpriseAdmin: body.enterpriseAdmin }),
+            ...(body.superAdmin !== undefined && { superAdmin: body.superAdmin }),
         }, actor.account.id, patTokenId(actor));
         return { account };
     }
-    /** 改显示名 / 状态 / 企业管理员；停用时同时吊销该账号的全部会话与个人令牌。 */
-    async updateAccount(principal, accountId, body) {
+    /** 改显示名 / 状态 / 超级管理员；停用时同时吊销该账号的全部会话与个人令牌。 */
+    async updateAccount(principal, { accountId }, body) {
         const actor = requireUser(principal);
         const patch = {
             ...(body.displayName !== undefined && { displayName: body.displayName }),
             ...(body.status !== undefined && { status: body.status }),
-            ...(body.isEnterpriseAdmin !== undefined && { isEnterpriseAdmin: body.isEnterpriseAdmin }),
+            ...(body.isSuperAdmin !== undefined && { isSuperAdmin: body.isSuperAdmin }),
         };
         // 停用时账号状态、会话与个人令牌的吊销在同一个 PG 事务里完成
         const { account, revokedSessionIds } = await this.accounts.updateAccount(accountId, patch, actor.account.id, patTokenId(actor));
@@ -126,9 +140,12 @@ let AdminController = class AdminController {
         }
         return { account };
     }
-    /** 全部组织的元数据与成员数（不含成员明细）。 */
+    /**
+     * 全部组织的元数据与成员数（不含成员明细）, with the deployment's defaults of the limits an org
+     * can be given its own value of (the org limits dialog shows them for the values left empty).
+     */
     async listOrgs() {
-        return { orgs: await this.orgs.listAll() };
+        return { orgs: await this.orgs.listAll(), limitDefaults: limitDefaults(this.config) };
     }
     async getSettings() {
         return this.settings.get();
@@ -139,14 +156,41 @@ let AdminController = class AdminController {
     }
     /**
      * 模型供应商与模型（后台「模型」页）：每个供应商带状态，列模型失败的标 `error`，不影响其他供应商；
-     * 一并返回价格表与币种（改价仍走 `PUT /admin/model-prices`）。
+     * 一并返回价格表与币种（改价仍走 `PUT /admin/model-prices`）。Each provider carries its extension's
+     * display name (null when it has none); every model of the platform's list carries `disabled`
+     * (the platform's disabled list, spec B §5.3).
      */
     async getModels() {
         const [providers, prices] = await Promise.all([
             this.registry.listWithStatus(),
             this.getModelPrices(),
         ]);
-        return { providers, ...prices };
+        const plugins = providers.map((p) => p.plugin);
+        const [names, icons] = await Promise.all([
+            this.displayNames.many(plugins),
+            this.icons.many(plugins, { kind: "admin" }),
+        ]);
+        return {
+            providers: providers.map((p) => ({
+                ...p,
+                displayName: names.get(p.plugin) ?? null,
+                icon: icons.get(p.plugin) ?? null,
+            })),
+            ...prices,
+        };
+    }
+    /**
+     * The platform's disabled models of one provider (spec B §5.3): disables and enables the ids the
+     * body names (others keep their state); such a model is invisible to every org. The response
+     * lists the agents and purposes, across orgs, that now point at a newly disabled model (the
+     * disable is not refused for them).
+     */
+    async patchModelsDisabled(principal, params, body) {
+        const actor = requireUser(principal);
+        return this.enablement.setPlatform(params.provider, body, {
+            accountId: actor.account.id,
+            tokenId: patTokenId(actor),
+        });
     }
     /** 模型价格表（每百万 token）与币种（部署设置 `priceCurrency`）。 */
     async getModelPrices() {
@@ -161,14 +205,14 @@ let AdminController = class AdminController {
     }
     /** 模型用途与部署默认映射（`override` 一律为 null；组织覆盖在组织侧接口）。 */
     async getModelPurposes() {
-        return { purposes: await this.purposes.list() };
+        return { purposes: await withDeclaredByNames(await this.purposes.list(), this.displayNames) };
     }
     /** 设置一个用途的部署默认，或 `target: null` 清除。 */
-    async putModelPurpose(principal, purpose, body) {
+    async putModelPurpose(principal, { purpose }, body) {
         const actor = requireUser(principal);
-        return {
-            purpose: await this.purposes.setDefault(purpose, purposeTargetOf(body), actor.account.id, patTokenId(actor)),
-        };
+        const view = await this.purposes.setDefault(purpose, purposeTargetOf(body), actor.account.id, patTokenId(actor));
+        const [listing] = await withDeclaredByNames([view], this.displayNames);
+        return { purpose: listing };
     }
 };
 __decorate([
@@ -176,19 +220,19 @@ __decorate([
 ], AdminController.prototype, "overview", null);
 __decorate([
     Get("accounts"),
-    __param(0, Query(new ZodPipe(ListQuery)))
+    __param(0, ZQuery(AccountListQueryDto))
 ], AdminController.prototype, "listAccounts", null);
 __decorate([
     Post("accounts"),
     HttpCode(201),
     __param(0, CurrentPrincipal()),
-    __param(1, Body(new ZodPipe(CreateAccountBody)))
+    __param(1, ZBody(CreateAccountBodyDto))
 ], AdminController.prototype, "createAccount", null);
 __decorate([
     Patch("accounts/:accountId"),
     __param(0, CurrentPrincipal()),
-    __param(1, Param("accountId")),
-    __param(2, Body(new ZodPipe(UpdateAccountBody)))
+    __param(1, ZParam(AccountParamsDto)),
+    __param(2, ZBody(UpdateAccountBodyDto))
 ], AdminController.prototype, "updateAccount", null);
 __decorate([
     Get("orgs")
@@ -199,18 +243,24 @@ __decorate([
 __decorate([
     Put("settings"),
     __param(0, CurrentPrincipal()),
-    __param(1, Body(new ZodPipe(SettingsBody)))
+    __param(1, ZBody(DeploymentSettingsBodyDto))
 ], AdminController.prototype, "putSettings", null);
 __decorate([
     Get("models")
 ], AdminController.prototype, "getModels", null);
+__decorate([
+    Patch("models/:provider/disabled"),
+    __param(0, CurrentPrincipal()),
+    __param(1, ZParam(ModelProviderParamsDto)),
+    __param(2, ZBody(ModelDisabledPatchDto))
+], AdminController.prototype, "patchModelsDisabled", null);
 __decorate([
     Get("model-prices")
 ], AdminController.prototype, "getModelPrices", null);
 __decorate([
     Put("model-prices"),
     __param(0, CurrentPrincipal()),
-    __param(1, Body(new ZodPipe(MODEL_PRICE_PUT)))
+    __param(1, ZBody(ModelPriceBody))
 ], AdminController.prototype, "putModelPrice", null);
 __decorate([
     Get("model-purposes")
@@ -218,21 +268,25 @@ __decorate([
 __decorate([
     Put("model-purposes/:purpose"),
     __param(0, CurrentPrincipal()),
-    __param(1, Param("purpose")),
-    __param(2, Body(new ZodPipe(PURPOSE_PUT)))
+    __param(1, ZParam(PurposeParamsDto)),
+    __param(2, ZBody(PurposePutDto))
 ], AdminController.prototype, "putModelPurpose", null);
 AdminController = __decorate([
     Controller("api/v1/admin"),
-    EnterpriseAdmin(),
-    __param(0, Inject(ACCOUNTS)),
-    __param(1, Inject(SESSIONS)),
-    __param(2, Inject(KERNEL_LOG)),
-    __param(3, Inject(ORGS)),
-    __param(4, Inject(SETTINGS)),
-    __param(5, Inject(PRICES)),
-    __param(6, Inject(MODEL_PURPOSES)),
-    __param(7, Inject(EXTENSION_ADMIN)),
-    __param(8, Inject(PROVIDER_REGISTRY)),
-    __param(9, Inject(CATALOG_REQUESTS))
+    SuperAdmin(),
+    __param(0, Inject(AccountsService)),
+    __param(1, Inject(SessionService)),
+    __param(2, Inject(KERNEL_LOGGER)),
+    __param(3, Inject(OrgsService)),
+    __param(4, Inject(SettingsService)),
+    __param(5, Inject(PricesService)),
+    __param(6, Inject(ModelPurposesService)),
+    __param(7, Inject(ExtensionAdmin)),
+    __param(8, Inject(ProviderRegistry)),
+    __param(9, Inject(CatalogRequestsService)),
+    __param(10, Inject(ExtensionDisplayNames)),
+    __param(11, Inject(ModelEnablement)),
+    __param(12, Inject(KernelConfigService)),
+    __param(13, Inject(PluginIcons))
 ], AdminController);
 export { AdminController };

package/dist/admin/admin.module.d.ts

@@ -0,0 +1,3 @@
+/** Deployment administration: the setup wizard (its controllers are the api role's, `ApiModule`). */
+export declare class AdminModule {
+}

package/dist/admin/admin.module.js

@@ -0,0 +1,22 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { Module } from "@nestjs/common";
+import { IdentityModule } from "../identity/identity.module.js";
+import { OrgsModule } from "../orgs/orgs.module.js";
+import { SetupService } from "./setup.service.js";
+import { SetupLockModule } from "./setup-lock.js";
+/** Deployment administration: the setup wizard (its controllers are the api role's, `ApiModule`). */
+let AdminModule = class AdminModule {
+};
+AdminModule = __decorate([
+    Module({
+        imports: [IdentityModule, OrgsModule, SetupLockModule],
+        providers: [SetupService],
+        exports: [SetupService],
+    })
+], AdminModule);
+export { AdminModule };