@capybara-hq/kernel 0.1.0-rc.1 → 0.1.0-rc.2

package/dist/agents/agents.module.js

@@ -0,0 +1,41 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { Module } from "@nestjs/common";
+import { EvalBudgetModule } from "../evals/budget.js";
+import { OrgLockModule } from "../orgs/org-lock.js";
+import { ProvidersModule } from "../runtime/providers.js";
+import { SandboxModule } from "../sandbox/sandbox.module.js";
+import { SkillsModule } from "../skills/skills.module.js";
+import { ToolsModule } from "../tools/tools.module.js";
+import { AgentLookupModule } from "./agent-lookup.js";
+import { AgentsService } from "./agents.service.js";
+import { AgentTemplatesService } from "./templates.js";
+/**
+ * Agents: the one {@link AgentsService} (definitions, versions, visibility; writes under the org
+ * row lock) and the plugin agent templates. Reads for a viewer are {@link AgentLookupModule}'s
+ * (re-exported), which the conversations and the skill invoker use without this module.
+ */
+let AgentsModule = class AgentsModule {
+};
+AgentsModule = __decorate([
+    Module({
+        imports: [
+            AgentLookupModule,
+            OrgLockModule,
+            ProvidersModule,
+            SkillsModule,
+            ToolsModule,
+            // the producer of sandbox-destroy-for jobs after a delete
+            SandboxModule,
+            // cancels the deleted agent's eval runs
+            EvalBudgetModule,
+        ],
+        providers: [AgentsService, AgentTemplatesService],
+        exports: [AgentLookupModule, AgentsService, AgentTemplatesService],
+    })
+], AgentsModule);
+export { AgentsModule };

package/dist/agents/agents.service.d.ts

@@ -1,27 +1,17 @@
-import { type Logger, type ModelParameter } from "@capybara-hq/plugin-sdk";
-import { type ExpressionBuilder, type Transaction } from "kysely";
-import type { KernelDatabase, KernelDb } from "../db/kernel-schema.js";
-import type { ProviderRegistry } from "../runtime/providers.js";
-import type { SkillChangesService } from "../skills/changes.service.js";
-import type { ToolRegistry } from "../tools/registry.js";
+import type { KernelSchemaDb } from "../db/kernel-schema.js";
+import { EvalBudget } from "../evals/budget.js";
+import { KernelDb } from "../infra/database/kernel-db.js";
+import { TransactionHost } from "../infra/database/transaction-host.js";
+import type { KernelLogger } from "../log.js";
+import { OrgLock } from "../orgs/org-lock.js";
+import { ProviderRegistry } from "../runtime/providers.js";
+import { SandboxJobs } from "../sandbox/jobs.js";
+import { SkillChangesService } from "../skills/changes.service.js";
+import { ToolRegistry } from "../tools/registry.js";
+import { AgentLookup, type AgentView, type AgentVisibility } from "./agent-lookup.js";
 import { type AgentDefinition } from "./definition.js";
-type Trx = Transaction<KernelDatabase>;
-export declare const AGENT_VISIBILITIES: readonly ["private", "org", "members"];
-export type AgentVisibility = (typeof AGENT_VISIBILITIES)[number];
-/** 对外的 agent 视图：当前版本的定义 + 元数据；`memberIds` 只在 visibility='members' 时为数组。 */
-export interface AgentView {
-    id: string;
-    orgId: string;
-    ownerAccountId: string;
-    visibility: AgentVisibility;
-    currentVersion: number;
-    definition: AgentDefinition;
-    memberIds: string[] | null;
-    /** 负责人离职后被转给组织所有者、等待管理员重新指派。 */
-    needsReassignment: boolean;
-    createdAt: Date;
-    updatedAt: Date;
-}
+export { AGENT_VISIBILITIES, type AgentView, type AgentVisibility, isAgentVisibleTo, visibleTo, } from "./agent-lookup.js";
+export { paramIssues, SUBAGENT_ROSTER_MAX } from "./definition.js";
 export interface AgentVersion {
     version: number;
     definition: AgentDefinition;
@@ -31,27 +21,8 @@ export interface AgentVersion {
 export type AgentVersionSummary = Omit<AgentVersion, "definition">;
 /** 创建 / 修改的提示（不拒绝）：`fallback_same_provider` = 兜底与主模型同一供应商（spec 4.5）。 */
 export type AgentWarning = "fallback_same_provider";
-/** 按模型声明严格校验一组参数，返回 `{ path: "<field>.<key>", message }[]`（评测候选也用它）。 */
-export declare function paramIssues(field: string, decl: ModelParameter[], params: Record<string, unknown>): {
-    path: string;
-    message: string;
-}[];
-/**
- * 可见性判定（`canUse`）的 SQL 条件：agent 未删除、所属组织未删除，且
- * - viewer 为账号：仍是该组织成员（含访客），并且是负责人 / visibility='org' / 在 agent_members 名单中；
- * - viewer 为 null（该组织的服务令牌）：只认 visibility='org'。
- */
-export declare function visibleTo(viewerAccountId: string | null): (eb: ExpressionBuilder<KernelDatabase, "agents">) => import("kysely").ExpressionWrapper<KernelDatabase, "agents", import("kysely").SqlBool>;
-/**
- * Whether the live agent `agentId` is visible to `accountId` under the normal visibility rule
- * ({@link visibleTo}: owner, `visibility = 'org'`, or listed in `agent_members`, while a member of
- * the live org). Deleted agents are never visible.
- */
-export declare function isAgentVisibleTo(db: KernelDb | Trx, agentId: string, accountId: string): Promise<boolean>;
 /** Why a `subagents` block is refused (`agent.subagents_invalid` details). */
 export type SubagentsProblem = "not_found" | "invalid_name" | "duplicate" | "tool_not_selected" | "skill_not_selected" | "agent_not_available" | "self" | "too_many";
-/** Roster entries an agent may list (spec §4.3), general-purpose included. */
-export declare const SUBAGENT_ROSTER_MAX = 20;
 /**
  * Checks `subagents` of an agent definition in the caller's transaction (spec §5.2); throws 400
  * `agent.subagents_invalid` with one detail per problem (`{ reason, path, value? }`):
@@ -70,7 +41,7 @@ export declare const SUBAGENT_ROSTER_MAX = 20;
  * for `not_found` / `agent_not_available`: a template uninstalled or an agent switched off later
  * does not block other edits (the dispatch refuses it at run time).
  */
-export declare function assertSubagents(t: Trx, a: {
+export declare function assertSubagents(t: KernelSchemaDb, a: {
     orgId: string;
     agentId: string | null;
     actorAccountId: string;
@@ -84,26 +55,37 @@ export declare function assertSubagents(t: Trx, a: {
  */
 export declare class AgentsService {
     private readonly db;
-    private readonly registry;
+    private readonly lookup;
     private readonly tools;
     /** 删除 agent 时取消它待处理的技能改动（T15）。 */
     private readonly skillChanges;
+    /** The org row lock (orgs/org-lock.ts): joins the caller's transaction. */
+    private readonly orgLock;
+    /** Resolves the agent's models (and their parameter declarations) when it is saved. */
+    private readonly providers;
     /**
-     * 删除 agent 后销毁它各对话的沙箱（内核投递一次性维护任务 `sandbox-destroy-for`，worker 在锁内逐个销毁，
-     * 幂等）。不给时留给不活跃销毁扫描。
+     * The sandbox destruction after a delete (内核投递一次性维护任务 `sandbox-destroy-for`，worker
+     * 在锁内逐个销毁，幂等).
      */
-    private readonly sandboxes?;
-    private readonly log?;
-    constructor(db: KernelDb, registry: ProviderRegistry, tools: Pick<ToolRegistry, "checkRefs">, 
+    private readonly sandboxJobs;
+    private readonly log;
+    readonly txHost: TransactionHost;
+    /** Cancels the deleted agent's running eval runs (in the delete's transaction). */
+    private readonly evalBudget;
+    constructor(db: KernelDb, lookup: AgentLookup, tools: Pick<ToolRegistry, "checkRefs">, 
     /** 删除 agent 时取消它待处理的技能改动（T15）。 */
     skillChanges: Pick<SkillChangesService, "cancelPendingForAgent" | "finishCancel">, 
+    /** The org row lock (orgs/org-lock.ts): joins the caller's transaction. */
+    orgLock: Pick<OrgLock, "lockAndAuthorize">, 
+    /** Resolves the agent's models (and their parameter declarations) when it is saved. */
+    providers: Pick<ProviderRegistry, "resolve">, 
     /**
-     * 删除 agent 后销毁它各对话的沙箱（内核投递一次性维护任务 `sandbox-destroy-for`，worker 在锁内逐个销毁，
-     * 幂等）。不给时留给不活跃销毁扫描。
+     * The sandbox destruction after a delete (内核投递一次性维护任务 `sandbox-destroy-for`，worker
+     * 在锁内逐个销毁，幂等).
      */
-    sandboxes?: {
-        destroy(conversationIds: string[]): Promise<void>;
-    } | undefined, log?: Pick<Logger, "warn"> | undefined);
+    sandboxJobs: Pick<SandboxJobs, "destroy">, log: Pick<KernelLogger, "warn">, txHost: TransactionHost, 
+    /** Cancels the deleted agent's running eval runs (in the delete's transaction). */
+    evalBudget: Pick<EvalBudget, "cancelRuns">);
     /**
      * 校验工具引用与工具策略：引用的内置 / 插件 / 连接器工具必须存在（见 `ToolRegistry.checkRefs`）；
      * `toolPolicies` 的键必须是这些引用产生的工具 key（取值只能收紧，已由 schema 保证）。
@@ -118,9 +100,6 @@ export declare class AgentsService {
     /** 名单里的账号必须都是该组织当前成员，否则 `member.not_found`；返回去重后的 id。 */
     private checkMembers;
     private setMembers;
-    private view;
-    /** 按给定 id 顺序组装视图（调用方已完成可见性判定）。 */
-    private views;
     /**
      * 新建 agent（版本 1）：在组织行锁内授权 `agents.create`；主模型与兜底都必须可解析
      * （`agent.model_unavailable`）；兜底与主模型同一供应商只提示 `fallback_same_provider`。
@@ -133,6 +112,7 @@ export declare class AgentsService {
         agent: AgentView;
         warnings: AgentWarning[];
     }>;
+    private createIn;
     /**
      * 锁组织行并复核发起人，再锁 agent 行：发起人须仍具备 `agents.create`（member 以上），且是负责人或组织管理员以上；
      * 对发起人不可见的 agent（非管理员）→ `agent.not_found`，可见但无权 → `forbidden`。
@@ -155,8 +135,10 @@ export declare class AgentsService {
         agent: AgentView;
         warnings: AgentWarning[];
     }>;
+    private updateIn;
     /** 软删除：权限同 update。待处理的技能改动与该 agent 评测集在执行的评测运行一并取消，提交后删除草稿（T15）。 */
     softDelete(orgId: string, agentId: string, actorAccountId: string, actorTokenId?: string): Promise<void>;
+    private softDeleteIn;
     /** 提交后尽力而为：投递销毁这个 agent 各对话还没销毁的沙箱（失败只记日志，留给不活跃销毁扫描）。 */
     private destroySandboxes;
     /**
@@ -174,4 +156,3 @@ export declare class AgentsService {
     /** 版本列表，新的在前（不做可见性判定，调用方负责）。 */
     listVersions(agentId: string): Promise<AgentVersionSummary[]>;
 }
-export {};