@capybara-hq/kernel 0.1.0-rc.1 → 0.1.0-rc.2

package/dist/conversations/attachments.service.js

@@ -1,7 +1,26 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
 import { randomUUID } from "node:crypto";
 import { IMAGE_MEDIA_TYPES, MEDIA_LIMITS, } from "@capybara-hq/plugin-sdk";
+import { Inject, Injectable } from "@nestjs/common";
 import { sql } from "kysely";
 import { ApiError } from "../errors.js";
+import { KernelConfigService } from "../infra/config/kernel-config.service.js";
+import { KernelDb } from "../infra/database/kernel-db.js";
+import { TransactionHost } from "../infra/database/transaction-host.js";
+import { Transactional } from "../infra/database/transactional.decorator.js";
+import { LockService } from "../infra/lock/lock.service.js";
+import { LockedCron } from "../infra/schedule/locked-cron.decorator.js";
+import { KERNEL_LOGGER } from "../infra/tokens.js";
+import { StorageService } from "../storage/storage.service.js";
+import { ConversationAccess } from "./access.js";
 /** 预签名上传的有效期（秒）。尽量短：表单在有效期内可被再次使用（内容替换由 etag 核对兜底）。 */
 export const ATTACHMENT_UPLOAD_TTL_SECONDS = 300;
 /** 下载跳转的预签名有效期（秒）；不短于 {@link ATTACHMENT_DOWNLOAD_CACHE_SECONDS}（浏览器缓存的跳转仍可用）。 */
@@ -26,10 +45,8 @@ export const SKILL_PACKAGE_TTL_HOURS = 1;
  * 并发处理同一上传也不会互相覆盖出不同内容。版本行记下这个前缀（`skill_versions.object_prefix`）。
  */
 export const skillFilesPrefix = (uploadId) => `skills/${uploadId}/`;
-/** 维护任务：清理过期未绑定的附件（任务名与 scheduler id 不含 `:`）。 */
+/** 周期任务：每小时清理过期未绑定的附件（`@LockedCron`）。 */
 export const ATTACHMENT_CLEANUP_JOB = "attachment-cleanup";
-export const ATTACHMENT_CLEANUP_SCHEDULER_ID = "attachment-cleanup-hourly";
-export const ATTACHMENT_CLEANUP_EVERY_MS = 3_600_000;
 /** 每批认领的行数。 */
 const CLEANUP_BATCH = 100;
 /** finalize 时读取开头多少字节核对文件签名。 */
@@ -77,26 +94,38 @@ async function readAll(body) {
  * 字节只在对象存储（`kernel/<orgId>/attachments/<id>`），日志里只有引用；构建模型请求时经 {@link fetchMedia} 取字节。
  * 无进程内状态，可多副本共用。
  */
-export class AttachmentsService {
-    d;
-    constructor(d) {
-        this.d = d;
+let AttachmentsService = class AttachmentsService {
+    db;
+    storage;
+    config;
+    access;
+    log;
+    txHost;
+    constructor(db, storage, config, 
+    /** viewer 能否访问该会话（与会话流相同的规则）。 */
+    access, log, txHost) {
+        this.db = db;
+        this.storage = storage;
+        this.config = config;
+        this.access = access;
+        this.log = log;
+        this.txHost = txHost;
     }
     /** 单个附件的大小上限：配置的 `maxBytes`，图片再受 `MEDIA_LIMITS.imageBytes` 限制。 */
     limitFor(contentType) {
-        const { maxBytes } = this.d.config().attachments;
+        const { maxBytes } = this.config.get().attachments;
         return Math.min(maxBytes, isImage(contentType) ? MEDIA_LIMITS.imageBytes : MEDIA_LIMITS.documentBytes);
     }
     /** 当前配置下的上限（不需要对象存储）。 */
     limits() {
-        const cfg = this.d.config().attachments;
+        const cfg = this.config.get().attachments;
         return {
             types: [...cfg.allowedTypes],
             maxBytes: Math.min(cfg.maxBytes, MEDIA_LIMITS.documentBytes),
             imageMaxBytes: Math.min(cfg.maxBytes, MEDIA_LIMITS.imageBytes),
             maxPerMessage: cfg.maxPerMessage,
             requestMediaBytes: cfg.requestMediaBytes,
-            available: this.d.storage.available,
+            available: this.storage.available,
         };
     }
     /**
@@ -106,8 +135,8 @@ export class AttachmentsService {
      * （软上限：并发登记可能略超）；没有对象存储 → `storage.unavailable`。
      */
     async create(orgId, accountId, input, purpose = "chat") {
-        this.d.storage.assertAvailable();
-        const cfg = this.d.config().attachments;
+        this.storage.assertAvailable();
+        const cfg = this.config.get().attachments;
         const contentType = normalizeContentType(input.contentType);
         const skill = purpose === "skill-package";
         if (skill
@@ -119,7 +148,7 @@ export class AttachmentsService {
         if (input.size > limit) {
             throw new ApiError("attachment.too_large", `Attachment is ${input.size} bytes, over the limit of ${limit} bytes`);
         }
-        const pending = await this.d.db
+        const pending = await this.db
             .selectFrom("attachments")
             .select((eb) => eb.fn.countAll().as("n"))
             .where("org_id", "=", orgId)
@@ -134,12 +163,12 @@ export class AttachmentsService {
         const id = randomUUID();
         const key = objectKey(id, purpose);
         const ttlHours = skill ? SKILL_PACKAGE_TTL_HOURS : cfg.unboundTtlHours;
-        const upload = await this.d.storage.kernel(orgId).presignPut(key, {
+        const upload = await this.storage.kernel(orgId).presignPut(key, {
             contentType,
             maxSize: input.size,
             ttlSeconds: ATTACHMENT_UPLOAD_TTL_SECONDS,
         });
-        await this.d.db
+        await this.db
             .insertInto("attachments")
             .values({
             id,
@@ -167,8 +196,8 @@ export class AttachmentsService {
      * - 存储记录的类型或文件开头的签名与声明不符 → 删除对象，`attachment.type_not_allowed`。
      */
     async finalize(orgId, accountId, id) {
-        this.d.storage.assertAvailable();
-        const row = await this.d.db
+        this.storage.assertAvailable();
+        const row = await this.db
             .selectFrom("attachments")
             .select(["id", "name", "content_type", "size", "object_key", "status"])
             .where("id", "=", id)
@@ -186,7 +215,7 @@ export class AttachmentsService {
         };
         if (row.status === "ready")
             return view;
-        const store = this.d.storage.kernel(orgId);
+        const store = this.storage.kernel(orgId);
         const head = await store.head(row.object_key);
         if (!head) {
             throw new ApiError("attachment.not_ready", "The file has not been uploaded yet");
@@ -211,7 +240,7 @@ export class AttachmentsService {
         if (!sniffMatches(view.contentType, data.subarray(0, SNIFF_BYTES))) {
             await reject(new ApiError("attachment.type_not_allowed", `Uploaded file content is not ${view.contentType}`));
         }
-        await this.d.db
+        await this.db
             .updateTable("attachments")
             .set({ status: "ready", etag: got?.head.etag ?? head.etag ?? null, pages })
             .where("id", "=", id)
@@ -225,8 +254,8 @@ export class AttachmentsService {
      * （即使存储里的类型被改成 text/html 也不会在页面里渲染）；响应类型按 finalize 核对过的类型返回。
      */
     async downloadUrl(orgId, accountId, id) {
-        this.d.storage.assertAvailable();
-        const row = await this.d.db
+        this.storage.assertAvailable();
+        const row = await this.db
             .selectFrom("attachments")
             .select(["account_id", "conversation_id", "name", "content_type", "object_key", "etag"])
             .where("id", "=", id)
@@ -238,10 +267,10 @@ export class AttachmentsService {
             throw notFound();
         const allowed = row.conversation_id === null
             ? row.account_id === accountId
-            : await this.d.canAccessConversation(orgId, row.conversation_id, accountId);
+            : await this.access.isAccessible(orgId, row.conversation_id, accountId);
         if (!allowed)
             throw notFound();
-        const store = this.d.storage.kernel(orgId);
+        const store = this.storage.kernel(orgId);
         const head = await store.head(row.object_key);
         if (!head || !this.sameContent(row.etag, head.etag, { orgId, attachmentId: id })) {
             throw notFound();
@@ -258,7 +287,7 @@ export class AttachmentsService {
      * 绑定在该会话、已 ready 的附件（id 与原始文件名），按上传时间、id 排序（沙箱同步按这个顺序分配文件名）。
      */
     async listForConversation(orgId, conversationId) {
-        return this.d.db
+        return this.db
             .selectFrom("attachments")
             .select(["id", "name"])
             .where("org_id", "=", orgId)
@@ -274,7 +303,7 @@ export class AttachmentsService {
      * 大小或 etag 与 finalize 时不符 → null。其余错误（存储不可用等）照常抛出。调用方负责读完或取消 `body`。
      */
     async openForConversation(orgId, conversationId, attachmentId) {
-        const row = await this.d.db
+        const row = await this.db
             .selectFrom("attachments")
             .select(["name", "content_type", "object_key", "size", "etag"])
             .where("id", "=", attachmentId)
@@ -285,7 +314,7 @@ export class AttachmentsService {
             .executeTakeFirst();
         if (!row)
             return null;
-        const got = await this.d.storage.kernel(orgId).get(row.object_key);
+        const got = await this.storage.kernel(orgId).get(row.object_key);
         if (!got)
             return null;
         const size = Number(row.size);
@@ -304,9 +333,9 @@ export class AttachmentsService {
      * 后两种的 details 为 `[{ path: "files", message, attachmentId }]`，网页据此标出对应条目。
      * 已绑定到本会话的（重试）照常返回块。
      */
-    async bindForMessage(trx, orgId, conversationId, accountId, ids) {
+    async bindForMessage(orgId, conversationId, accountId, ids) {
         const unique = [...new Set(ids)];
-        const max = this.d.config().attachments.maxPerMessage;
+        const max = this.config.get().attachments.maxPerMessage;
         if (ids.length > max) {
             throw new ApiError("validation_failed", "Request validation failed", [
                 { path: "files", message: `At most ${max} files per message` },
@@ -319,6 +348,7 @@ export class AttachmentsService {
         }
         if (unique.length === 0)
             return [];
+        const trx = this.db.db;
         const rows = await trx
             .selectFrom("attachments")
             .select([
@@ -383,7 +413,7 @@ export class AttachmentsService {
     sameContent(recorded, current, where) {
         if (recorded === null || recorded === (current ?? null))
             return true;
-        this.d.log.warn("attachment content changed after finalize; treating it as unavailable", where);
+        this.log.warn("attachment content changed after finalize; treating it as unavailable", where);
         return false;
     }
     /**
@@ -393,7 +423,7 @@ export class AttachmentsService {
     async mediaInfo(orgId, conversationId, ids) {
         if (ids.length === 0)
             return new Map();
-        const rows = await this.d.db
+        const rows = await this.db
             .selectFrom("attachments")
             .select(["id", "size", "pages", "etag"])
             .where("org_id", "=", orgId)
@@ -413,7 +443,7 @@ export class AttachmentsService {
         const out = new Map();
         if (ids.length === 0)
             return out;
-        const rows = await this.d.db
+        const rows = await this.db
             .selectFrom("attachments")
             .select(["id", "content_type", "object_key", "size", "etag"])
             .where("org_id", "=", orgId)
@@ -423,7 +453,7 @@ export class AttachmentsService {
             .where("id", "in", [...ids])
             .execute();
         const byId = new Map(rows.map((r) => [r.id, r]));
-        const store = this.d.storage.kernel(orgId);
+        const store = this.storage.kernel(orgId);
         await Promise.all(ids.map(async (id) => {
             const r = byId.get(id);
             if (!r)
@@ -436,7 +466,7 @@ export class AttachmentsService {
             const where = { orgId, conversationId, attachmentId: id };
             if (got.head.size !== Number(r.size) || !this.sameContent(r.etag, got.head.etag, where)) {
                 if (got.head.size !== Number(r.size)) {
-                    this.d.log.warn("attachment size changed after finalize; treating it as unavailable", where);
+                    this.log.warn("attachment size changed after finalize; treating it as unavailable", where);
                 }
                 await got.body.cancel().catch(() => { });
                 return out.set(id, null);
@@ -455,8 +485,8 @@ export class AttachmentsService {
      * 对象已不在或内容与 finalize 时不符 → `attachment.not_found`。
      */
     async readSkillPackage(orgId, accountId, id) {
-        this.d.storage.assertAvailable();
-        const row = await this.d.db
+        this.storage.assertAvailable();
+        const row = await this.db
             .selectFrom("attachments")
             .select(["status", "purpose", sql `expires_at <= now()`.as("expired")])
             .where("id", "=", id)
@@ -468,7 +498,7 @@ export class AttachmentsService {
         }
         if (row.status === "pending")
             await this.finalize(orgId, accountId, id);
-        const live = await this.d.db
+        const live = await this.db
             .updateTable("attachments")
             .set({ expires_at: sql `now() + make_interval(hours => ${SKILL_PACKAGE_TTL_HOURS})` })
             .where("id", "=", id)
@@ -478,7 +508,7 @@ export class AttachmentsService {
             .executeTakeFirst();
         if (!live)
             throw notFound();
-        const got = await this.d.storage.kernel(orgId).get(live.object_key);
+        const got = await this.storage.kernel(orgId).get(live.object_key);
         if (!got)
             throw notFound();
         if (got.head.size !== Number(live.size) ||
@@ -492,7 +522,8 @@ export class AttachmentsService {
      * 在调用方事务里把技能包上传标记为已用掉（行锁；之后由清理任务删 zip，解出的文件因被版本引用而保留）。
      * 不是该账号的 ready 技能包（如已被并发的请求用掉）→ `attachment.not_found`。
      */
-    async consumeSkillPackage(trx, orgId, accountId, id) {
+    async consumeSkillPackage(orgId, accountId, id) {
+        const trx = this.db.db;
         const row = await trx
             .selectFrom("attachments")
             .select("status")
@@ -518,15 +549,15 @@ export class AttachmentsService {
      * 没有对象存储时什么也不做。返回删除的附件数。
      */
     async deleteExpired() {
-        if (!this.d.storage.available)
+        if (!this.storage.available)
             return 0;
         let deleted = 0;
         const failed = [];
         for (;;) {
-            const claimed = await this.d.db
+            const claimed = await this.db
                 .updateTable("attachments")
                 .set({ status: "deleting" })
-                .where("id", "in", this.d.db
+                .where("id", "in", this.db
                 .selectFrom("attachments")
                 .select("id")
                 .where("conversation_id", "is", null)
@@ -542,12 +573,12 @@ export class AttachmentsService {
                 return deleted;
             for (const r of claimed) {
                 try {
-                    const store = this.d.storage.kernel(r.org_id);
+                    const store = this.storage.kernel(r.org_id);
                     await store.delete(r.object_key);
                     if (r.purpose === "skill-package") {
                         // 解出的文件没被任何版本引用（处理中途失败、或从未用掉）才删
                         const prefix = skillFilesPrefix(r.id);
-                        const used = await this.d.db
+                        const used = await this.db
                             .selectFrom("skill_versions")
                             .select("skill_id")
                             .where("object_prefix", "=", prefix)
@@ -555,7 +586,7 @@ export class AttachmentsService {
                         if (!used)
                             await store.deletePrefix(prefix);
                     }
-                    await this.d.db
+                    await this.db
                         .deleteFrom("attachments")
                         .where("id", "=", r.id)
                         .where("conversation_id", "is", null)
@@ -564,7 +595,7 @@ export class AttachmentsService {
                 }
                 catch (err) {
                     failed.push(r.id);
-                    this.d.log.warn("cannot delete expired attachment; will retry", {
+                    this.log.warn("cannot delete expired attachment; will retry", {
                         orgId: r.org_id,
                         attachmentId: r.id,
                         err,
@@ -575,4 +606,46 @@ export class AttachmentsService {
                 return deleted;
         }
     }
-}
+};
+__decorate([
+    Transactional({ propagation: "mandatory" })
+], AttachmentsService.prototype, "bindForMessage", null);
+__decorate([
+    Transactional({ propagation: "mandatory" })
+], AttachmentsService.prototype, "consumeSkillPackage", null);
+AttachmentsService = __decorate([
+    Injectable(),
+    __param(0, Inject(KernelDb)),
+    __param(1, Inject(StorageService)),
+    __param(2, Inject(KernelConfigService)),
+    __param(3, Inject(ConversationAccess)),
+    __param(4, Inject(KERNEL_LOGGER)),
+    __param(5, Inject(TransactionHost))
+], AttachmentsService);
+export { AttachmentsService };
+/** The hourly cleanup of expired unbound attachments, once per tick across replicas. */
+let AttachmentCleanupJob = class AttachmentCleanupJob {
+    attachments;
+    lockService;
+    log;
+    constructor(attachments, lockService, log) {
+        this.attachments = attachments;
+        this.lockService = lockService;
+        this.log = log;
+    }
+    async run() {
+        const n = await this.attachments.deleteExpired();
+        if (n > 0)
+            this.log.info("expired attachments deleted", { count: n });
+    }
+};
+__decorate([
+    LockedCron("0 * * * *", { name: ATTACHMENT_CLEANUP_JOB })
+], AttachmentCleanupJob.prototype, "run", null);
+AttachmentCleanupJob = __decorate([
+    Injectable(),
+    __param(0, Inject(AttachmentsService)),
+    __param(1, Inject(LockService)),
+    __param(2, Inject(KERNEL_LOGGER))
+], AttachmentCleanupJob);
+export { AttachmentCleanupJob };

package/dist/conversations/conversations.controller.d.ts

@@ -2,14 +2,15 @@ import type { FastifyReply } from "fastify";
 import { z } from "zod";
 import { type Principal } from "../identity/principal.js";
 import { type OrgContext } from "../orgs/org.guard.js";
-import { type ConversationToolInfo, type ToolInfo } from "../tools/info.js";
-import { type ArtifactPreview, type ConversationArtifacts } from "./artifacts.js";
-import { type ConversationGroup, type ConversationsService, type ConversationView, type SubagentView, type UsageTotals } from "./conversations.service.js";
+import { ConversationToolInfo, type ToolInfo } from "../tools/info.js";
+import { type ArtifactPreview, ConversationArtifacts } from "./artifacts.js";
+import { type ConversationGroup, ConversationsService, type ConversationView, type SubagentView, type UsageTotals } from "./conversations.service.js";
 import type { ConversationEvent } from "./events.js";
-import { type ConversationFiles, type FileOutput } from "./files.js";
-import { type ConversationOutputs, type OutputPage } from "./outputs-read.js";
-import type { ConversationQueue, QueueItem, QueuePauseReason } from "./queue.js";
-import type { ConversationSandboxStatus, SandboxStatusView } from "./sandbox-status.js";
+import { ConversationFiles, type FileOutput } from "./files.js";
+import { ConversationOutputs, type OutputPage } from "./outputs-read.js";
+import type { QueueItem, QueuePauseReason } from "./queue.js";
+import { ConversationQueue } from "./queue.service.js";
+import { ConversationSandboxStatus, type SandboxStatusView } from "./sandbox-status.js";
 declare const ListQuery: z.ZodObject<{
     after: z.ZodOptional<z.ZodString>;
     limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;

package/dist/conversations/conversations.controller.js

@@ -7,20 +7,22 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Body, Controller, Delete, Get, Header, HttpCode, Inject, Param, Patch, Post, Query, Res, } from "@nestjs/common";
+import { Controller, Delete, Get, Header, HttpCode, Inject, Param, Patch, Post, Res, } from "@nestjs/common";
 import { z } from "zod";
 import { ModelRef } from "../agents/definition.js";
-import { CONVERSATION_ARTIFACTS, CONVERSATION_FILES, CONVERSATION_OUTPUTS, CONVERSATION_QUEUE, CONVERSATION_SANDBOX, CONVERSATION_TOOLS, CONVERSATIONS, } from "../http/tokens.js";
-import { ZodPipe } from "../http/zod.pipe.js";
 import { CurrentPrincipal, requireUser } from "../identity/principal.js";
+import { createZodDto } from "../infra/validation/create-zod-dto.js";
+import { ZBody, ZQuery } from "../infra/validation/zod-params.js";
 import { CurrentOrg, OrgAction } from "../orgs/org.guard.js";
 import { CONTROL_OR_HIDDEN_RE } from "../text.js";
 import { MAX_ATTACHMENTS } from "../tools/connector-content.js";
-import { TOOL_INFO_KEY_MAX, TOOL_INFO_MAX_KEYS, } from "../tools/info.js";
-import { ARTIFACT_DOWNLOAD_CACHE_SECONDS, } from "./artifacts.js";
-import { CONVERSATION_TITLE_MAX_CHARS, } from "./conversations.service.js";
-import { FILE_CONTENT_MAX_BYTES, FILES_PAGE_MAX, } from "./files.js";
-import { OUTPUT_PAGE_MAX_CHARS, } from "./outputs-read.js";
+import { ConversationToolInfo, TOOL_INFO_KEY_MAX, TOOL_INFO_MAX_KEYS, } from "../tools/info.js";
+import { ARTIFACT_DOWNLOAD_CACHE_SECONDS, ConversationArtifacts, } from "./artifacts.js";
+import { CONVERSATION_TITLE_MAX_CHARS, ConversationsService, } from "./conversations.service.js";
+import { ConversationFiles, FILE_CONTENT_MAX_BYTES, FILES_PAGE_MAX, } from "./files.js";
+import { ConversationOutputs, OUTPUT_PAGE_MAX_CHARS } from "./outputs-read.js";
+import { ConversationQueue } from "./queue.service.js";
+import { ConversationSandboxStatus } from "./sandbox-status.js";
 const ListQuery = z.object({
     after: z.string().min(1).max(100).optional(),
     limit: z.coerce.number().int().min(1).max(200).default(50),
@@ -152,6 +154,34 @@ const RenameBody = z
         .refine((t) => !CONTROL_OR_HIDDEN_RE.test(t), "title must not contain control or format characters"),
 })
     .strict();
+class ConversationCreateBodyDto extends createZodDto(CreateBody, "ConversationCreateBody") {
+}
+class ConversationRenameBodyDto extends createZodDto(RenameBody, "ConversationRenameBody") {
+}
+class ConversationListQueryDto extends createZodDto(ListQuery, "ConversationListQuery") {
+}
+class ConversationGroupsQueryDto extends createZodDto(GroupsQuery, "ConversationGroupsQuery") {
+}
+class ConversationEventsQueryDto extends createZodDto(EventsQuery, "ConversationEventsQuery") {
+}
+class ConversationSubagentsQueryDto extends createZodDto(SubagentsQuery, "ConversationSubagentsQuery") {
+}
+class ConversationOutputQueryDto extends createZodDto(OutputQuery, "ConversationOutputQuery") {
+}
+class ConversationDownloadQueryDto extends createZodDto(DownloadQuery, "ConversationDownloadQuery") {
+}
+class ConversationFilesQueryDto extends createZodDto(FilesQuery, "ConversationFilesQuery") {
+}
+class ConversationFileContentQueryDto extends createZodDto(FileContentQuery, "ConversationFileContentQuery") {
+}
+class ConversationToolsQueryDto extends createZodDto(ToolsQuery, "ConversationToolsQuery") {
+}
+class ConversationMessageBodyDto extends createZodDto(MessageBody, "ConversationMessageBody") {
+}
+class ConversationQueueBodyDto extends createZodDto(QueueBody, "ConversationQueueBody") {
+}
+class ConversationQueueEditBodyDto extends createZodDto(QueueEditBody, "ConversationQueueEditBody") {
+}
 /**
  * 会话（`/api/v1/orgs/:orgId/conversations`）：`agents.use`（访客以上），只接受人类用户；
  * 服务令牌 → 403 `forbidden`。只有会话所有者可见，其他人一律 `conversation.not_found`。
@@ -404,7 +434,7 @@ __decorate([
     OrgAction("agents.use"),
     __param(0, CurrentPrincipal()),
     __param(1, CurrentOrg()),
-    __param(2, Body(new ZodPipe(CreateBody))),
+    __param(2, ZBody(ConversationCreateBodyDto)),
     __param(3, Res({ passthrough: true }))
 ], ConversationsController.prototype, "create", null);
 __decorate([
@@ -413,21 +443,21 @@ __decorate([
     __param(0, CurrentPrincipal()),
     __param(1, CurrentOrg()),
     __param(2, Param("id")),
-    __param(3, Body(new ZodPipe(RenameBody)))
+    __param(3, ZBody(ConversationRenameBodyDto))
 ], ConversationsController.prototype, "rename", null);
 __decorate([
     Get(),
     OrgAction("agents.use"),
     __param(0, CurrentPrincipal()),
     __param(1, CurrentOrg()),
-    __param(2, Query(new ZodPipe(ListQuery)))
+    __param(2, ZQuery(ConversationListQueryDto))
 ], ConversationsController.prototype, "list", null);
 __decorate([
     Get("groups"),
     OrgAction("agents.use"),
     __param(0, CurrentPrincipal()),
     __param(1, CurrentOrg()),
-    __param(2, Query(new ZodPipe(GroupsQuery)))
+    __param(2, ZQuery(ConversationGroupsQueryDto))
 ], ConversationsController.prototype, "groups", null);
 __decorate([
     Get(":id"),
@@ -442,7 +472,7 @@ __decorate([
     __param(0, CurrentPrincipal()),
     __param(1, CurrentOrg()),
     __param(2, Param("id")),
-    __param(3, Query(new ZodPipe(EventsQuery)))
+    __param(3, ZQuery(ConversationEventsQueryDto))
 ], ConversationsController.prototype, "events", null);
 __decorate([
     Get(":id/subagents"),
@@ -451,7 +481,7 @@ __decorate([
     __param(0, CurrentPrincipal()),
     __param(1, CurrentOrg()),
     __param(2, Param("id")),
-    __param(3, Query(new ZodPipe(SubagentsQuery)))
+    __param(3, ZQuery(ConversationSubagentsQueryDto))
 ], ConversationsController.prototype, "subagents", null);
 __decorate([
     Get(":id/usage"),
@@ -468,7 +498,7 @@ __decorate([
     __param(1, CurrentOrg()),
     __param(2, Param("id")),
     __param(3, Param("outputId")),
-    __param(4, Query(new ZodPipe(OutputQuery)))
+    __param(4, ZQuery(ConversationOutputQueryDto))
 ], ConversationsController.prototype, "output", null);
 __decorate([
     Get(":id/artifacts/:artifactId/download"),
@@ -477,7 +507,7 @@ __decorate([
     __param(1, CurrentOrg()),
     __param(2, Param("id")),
     __param(3, Param("artifactId")),
-    __param(4, Query(new ZodPipe(DownloadQuery))),
+    __param(4, ZQuery(ConversationDownloadQueryDto)),
     __param(5, Res())
 ], ConversationsController.prototype, "downloadArtifact", null);
 __decorate([
@@ -496,7 +526,7 @@ __decorate([
     __param(0, CurrentPrincipal()),
     __param(1, CurrentOrg()),
     __param(2, Param("id")),
-    __param(3, Query(new ZodPipe(FilesQuery)))
+    __param(3, ZQuery(ConversationFilesQueryDto))
 ], ConversationsController.prototype, "listFiles", null);
 __decorate([
     Get(":id/files/:fileId/content"),
@@ -505,7 +535,7 @@ __decorate([
     __param(1, CurrentOrg()),
     __param(2, Param("id")),
     __param(3, Param("fileId")),
-    __param(4, Query(new ZodPipe(FileContentQuery))),
+    __param(4, ZQuery(ConversationFileContentQueryDto)),
     __param(5, Res())
 ], ConversationsController.prototype, "fileContent", null);
 __decorate([
@@ -523,7 +553,7 @@ __decorate([
     __param(0, CurrentPrincipal()),
     __param(1, CurrentOrg()),
     __param(2, Param("id")),
-    __param(3, Query(new ZodPipe(ToolsQuery)))
+    __param(3, ZQuery(ConversationToolsQueryDto))
 ], ConversationsController.prototype, "tools", null);
 __decorate([
     Post(":id/messages"),
@@ -532,7 +562,7 @@ __decorate([
     __param(0, CurrentPrincipal()),
     __param(1, CurrentOrg()),
     __param(2, Param("id")),
-    __param(3, Body(new ZodPipe(MessageBody)))
+    __param(3, ZBody(ConversationMessageBodyDto))
 ], ConversationsController.prototype, "postMessage", null);
 __decorate([
     Get(":id/queue"),
@@ -548,7 +578,7 @@ __decorate([
     __param(0, CurrentPrincipal()),
     __param(1, CurrentOrg()),
     __param(2, Param("id")),
-    __param(3, Body(new ZodPipe(QueueBody))),
+    __param(3, ZBody(ConversationQueueBodyDto)),
     __param(4, Res({ passthrough: true }))
 ], ConversationsController.prototype, "enqueue", null);
 __decorate([
@@ -566,7 +596,7 @@ __decorate([
     __param(1, CurrentOrg()),
     __param(2, Param("id")),
     __param(3, Param("itemId")),
-    __param(4, Body(new ZodPipe(QueueEditBody)))
+    __param(4, ZBody(ConversationQueueEditBodyDto))
 ], ConversationsController.prototype, "editQueued", null);
 __decorate([
     Delete(":id/queue/:itemId"),
@@ -596,12 +626,12 @@ __decorate([
 ], ConversationsController.prototype, "abort", null);
 ConversationsController = __decorate([
     Controller("api/v1/orgs/:orgId/conversations"),
-    __param(0, Inject(CONVERSATIONS)),
-    __param(1, Inject(CONVERSATION_OUTPUTS)),
-    __param(2, Inject(CONVERSATION_ARTIFACTS)),
-    __param(3, Inject(CONVERSATION_SANDBOX)),
-    __param(4, Inject(CONVERSATION_TOOLS)),
-    __param(5, Inject(CONVERSATION_QUEUE)),
-    __param(6, Inject(CONVERSATION_FILES))
+    __param(0, Inject(ConversationsService)),
+    __param(1, Inject(ConversationOutputs)),
+    __param(2, Inject(ConversationArtifacts)),
+    __param(3, Inject(ConversationSandboxStatus)),
+    __param(4, Inject(ConversationToolInfo)),
+    __param(5, Inject(ConversationQueue)),
+    __param(6, Inject(ConversationFiles))
 ], ConversationsController);
 export { ConversationsController };

package/dist/conversations/conversations.module.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Conversations: the one {@link ConversationsService} (messages, model switches, skill
+ * invocations, sub-agent views, abort), the queue, the file / artifact / output reads and the
+ * sandbox status. The event log, the access check and the attachments are their own modules (the
+ * skills and tools use them too) and are re-exported here.
+ */
+export declare class ConversationsModule {
+}