@capybara-hq/kernel 0.1.0-rc.1 → 0.1.0-rc.3

package/dist/admin/admin.controller.d.ts

@@ -1,15 +1,15 @@
 import type { Logger } from "@capybara-hq/plugin-sdk";
 import { z } from "zod";
-import type { CatalogRequestsService } from "../catalog/requests.service.js";
-import type { ExtensionAdmin } from "../extensions/admin-view.js";
-import type { Account, AccountsService } from "../identity/accounts.js";
+import { CatalogRequestsService } from "../catalog/requests.service.js";
+import { ExtensionAdmin } from "../extensions/admin-view.js";
+import { type Account, AccountsService } from "../identity/accounts.js";
 import { type Principal } from "../identity/principal.js";
-import type { SessionService } from "../identity/sessions.js";
-import { type DeploymentSettings, type SettingsService } from "../identity/settings.js";
-import { type ModelPrice, type ModelPricePut, type PricesService } from "../models/prices.js";
-import { type ModelPurposesService, type PurposePut, type PurposeView } from "../models/purposes.js";
-import type { Org, OrgsService } from "../orgs/orgs.service.js";
-import type { ProviderRegistry, ProviderStatus } from "../runtime/providers.js";
+import { SessionService } from "../identity/sessions.js";
+import { type DeploymentSettings, SettingsService } from "../identity/settings.js";
+import { type ModelPrice, type ModelPricePut, PricesService } from "../models/prices.js";
+import { ModelPurposesService, type PurposePut, type PurposeView } from "../models/purposes.js";
+import { type Org, OrgsService } from "../orgs/orgs.service.js";
+import { ProviderRegistry, type ProviderStatus } from "../runtime/providers.js";
 /** 后台概览（`GET /api/v1/admin/overview`）的计数。 */
 export interface AdminOverview {
     /**
@@ -22,18 +22,18 @@ export interface AdminOverview {
     orgs: number;
     accounts: number;
 }
-declare const ListQuery: z.ZodObject<{
+declare const ListQuerySchema: z.ZodObject<{
     after: z.ZodOptional<z.ZodString>;
     limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
 }, z.core.$strip>;
-declare const CreateAccountBody: z.ZodObject<{
+declare const CreateAccountSchema: z.ZodObject<{
     login: z.ZodString;
     password: z.ZodString;
     displayName: z.ZodString;
     email: z.ZodOptional<z.ZodEmail>;
     enterpriseAdmin: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
-declare const UpdateAccountBody: z.ZodObject<{
+declare const UpdateAccountSchema: z.ZodObject<{
     displayName: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
         active: "active";
@@ -42,7 +42,7 @@ declare const UpdateAccountBody: z.ZodObject<{
     isEnterpriseAdmin: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 /** 至少给出一个键；`runConcurrencyOverrides` 按组织合并，值为 null 删除该组织的覆盖。 */
-declare const SettingsBody: z.ZodObject<{
+declare const SettingsSchema: z.ZodObject<{
     orgCreation: z.ZodOptional<z.ZodEnum<{
         anyone: "anyone";
         enterprise_admin: "enterprise_admin";
@@ -89,15 +89,15 @@ export declare class AdminController {
      * 全部账号，按 id 升序分页：`next` 为下一页的游标（作为 `after` 传回），没有更多时为 null。
      * 多取一条判断是否还有下一页。
      */
-    listAccounts(q: z.infer<typeof ListQuery>): Promise<{
+    listAccounts(q: z.infer<typeof ListQuerySchema>): Promise<{
         accounts: Account[];
         next: string | null;
     }>;
-    createAccount(principal: Principal, body: z.infer<typeof CreateAccountBody>): Promise<{
+    createAccount(principal: Principal, body: z.infer<typeof CreateAccountSchema>): Promise<{
         account: Account;
     }>;
     /** 改显示名 / 状态 / 企业管理员；停用时同时吊销该账号的全部会话与个人令牌。 */
-    updateAccount(principal: Principal, accountId: string, body: z.infer<typeof UpdateAccountBody>): Promise<{
+    updateAccount(principal: Principal, accountId: string, body: z.infer<typeof UpdateAccountSchema>): Promise<{
         account: Account;
     }>;
     /** 全部组织的元数据与成员数（不含成员明细）。 */
@@ -107,7 +107,7 @@ export declare class AdminController {
         })[];
     }>;
     getSettings(): Promise<DeploymentSettings>;
-    putSettings(principal: Principal, body: z.infer<typeof SettingsBody>): Promise<DeploymentSettings>;
+    putSettings(principal: Principal, body: z.infer<typeof SettingsSchema>): Promise<DeploymentSettings>;
     /**
      * 模型供应商与模型（后台「模型」页）：每个供应商带状态，列模型失败的标 `error`，不影响其他供应商；
      * 一并返回价格表与币种（改价仍走 `PUT /admin/model-prices`）。

package/dist/admin/admin.controller.js

@@ -7,37 +7,54 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Body, Controller, Get, HttpCode, Inject, Param, Patch, Post, Put, Query, } from "@nestjs/common";
+import { Controller, Get, HttpCode, Inject, Param, Patch, Post, Put } from "@nestjs/common";
 import { z } from "zod";
+import { CatalogRequestsService } from "../catalog/requests.service.js";
+import { ExtensionAdmin } from "../extensions/admin-view.js";
 import { extensionNeedsAction } from "../extensions/permission-view.js";
-import { ACCOUNTS, CATALOG_REQUESTS, EXTENSION_ADMIN, KERNEL_LOG, MODEL_PURPOSES, ORGS, PRICES, PROVIDER_REGISTRY, SESSIONS, SETTINGS, } from "../http/tokens.js";
-import { ZodPipe } from "../http/zod.pipe.js";
+import { AccountsService } from "../identity/accounts.js";
 import { MAX_PASSWORD_LENGTH } from "../identity/login.js";
 import { CurrentPrincipal, EnterpriseAdmin, patTokenId, requireUser, } from "../identity/principal.js";
-import { DEPLOYMENT_SETTINGS_PATCH, } from "../identity/settings.js";
-import { MODEL_PRICE_PUT, } from "../models/prices.js";
+import { SessionService } from "../identity/sessions.js";
+import { DEPLOYMENT_SETTINGS_PATCH, SettingsService, } from "../identity/settings.js";
+import { KERNEL_LOGGER } from "../infra/tokens.js";
+import { createZodDto } from "../infra/validation/create-zod-dto.js";
+import { ZBody, ZQuery } from "../infra/validation/zod-params.js";
+import { MODEL_PRICE_PUT, PricesService, } from "../models/prices.js";
 import { purposeTargetOf } from "../models/purposes.controller.js";
-import { PURPOSE_PUT, } from "../models/purposes.js";
-const ListQuery = z.object({
+import { ModelPurposesService, PurposePutDto, } from "../models/purposes.js";
+import { OrgsService } from "../orgs/orgs.service.js";
+import { ProviderRegistry } from "../runtime/providers.js";
+const ListQuerySchema = z.object({
     after: z.string().min(1).optional(),
     limit: z.coerce.number().int().min(1).max(200).default(50),
 });
-const CreateAccountBody = z.object({
+class AccountListQuery extends createZodDto(ListQuerySchema, "AccountListQuery") {
+}
+const CreateAccountSchema = z.object({
     login: z.string().min(1).max(64),
     password: z.string().min(1).max(MAX_PASSWORD_LENGTH),
     displayName: z.string().trim().min(1).max(100),
     email: z.email().max(254).optional(),
     enterpriseAdmin: z.boolean().optional(),
 });
-const UpdateAccountBody = z.object({
+class CreateAccountBody extends createZodDto(CreateAccountSchema, "CreateAccountBody") {
+}
+const UpdateAccountSchema = z.object({
     displayName: z.string().trim().min(1).max(100).optional(),
     status: z.enum(["active", "disabled"]).optional(),
     isEnterpriseAdmin: z.boolean().optional(),
 });
+class UpdateAccountBody extends createZodDto(UpdateAccountSchema, "UpdateAccountBody") {
+}
 /** 至少给出一个键；`runConcurrencyOverrides` 按组织合并，值为 null 删除该组织的覆盖。 */
-const SettingsBody = DEPLOYMENT_SETTINGS_PATCH.refine((b) => Object.keys(b).length > 0, {
+const SettingsSchema = DEPLOYMENT_SETTINGS_PATCH.refine((b) => Object.keys(b).length > 0, {
     message: "at least one setting is required",
 });
+class DeploymentSettingsBody extends createZodDto(SettingsSchema, "DeploymentSettingsPatch") {
+}
+// a union schema: a DTO value rather than a class (a class cannot extend a union instance type)
+const ModelPriceBody = createZodDto(MODEL_PRICE_PUT, "ModelPricePut");
 /**
  * 企业管理员端点（`/api/v1/admin/*`）：只接受企业管理员的 Web 会话或个人令牌；
  * 服务令牌一律 `forbidden`（未标 `@AllowService`）。
@@ -176,19 +193,19 @@ __decorate([
 ], AdminController.prototype, "overview", null);
 __decorate([
     Get("accounts"),
-    __param(0, Query(new ZodPipe(ListQuery)))
+    __param(0, ZQuery(AccountListQuery))
 ], AdminController.prototype, "listAccounts", null);
 __decorate([
     Post("accounts"),
     HttpCode(201),
     __param(0, CurrentPrincipal()),
-    __param(1, Body(new ZodPipe(CreateAccountBody)))
+    __param(1, ZBody(CreateAccountBody))
 ], AdminController.prototype, "createAccount", null);
 __decorate([
     Patch("accounts/:accountId"),
     __param(0, CurrentPrincipal()),
     __param(1, Param("accountId")),
-    __param(2, Body(new ZodPipe(UpdateAccountBody)))
+    __param(2, ZBody(UpdateAccountBody))
 ], AdminController.prototype, "updateAccount", null);
 __decorate([
     Get("orgs")
@@ -199,7 +216,7 @@ __decorate([
 __decorate([
     Put("settings"),
     __param(0, CurrentPrincipal()),
-    __param(1, Body(new ZodPipe(SettingsBody)))
+    __param(1, ZBody(DeploymentSettingsBody))
 ], AdminController.prototype, "putSettings", null);
 __decorate([
     Get("models")
@@ -210,7 +227,7 @@ __decorate([
 __decorate([
     Put("model-prices"),
     __param(0, CurrentPrincipal()),
-    __param(1, Body(new ZodPipe(MODEL_PRICE_PUT)))
+    __param(1, ZBody(ModelPriceBody))
 ], AdminController.prototype, "putModelPrice", null);
 __decorate([
     Get("model-purposes")
@@ -219,20 +236,20 @@ __decorate([
     Put("model-purposes/:purpose"),
     __param(0, CurrentPrincipal()),
     __param(1, Param("purpose")),
-    __param(2, Body(new ZodPipe(PURPOSE_PUT)))
+    __param(2, ZBody(PurposePutDto))
 ], AdminController.prototype, "putModelPurpose", null);
 AdminController = __decorate([
     Controller("api/v1/admin"),
     EnterpriseAdmin(),
-    __param(0, Inject(ACCOUNTS)),
-    __param(1, Inject(SESSIONS)),
-    __param(2, Inject(KERNEL_LOG)),
-    __param(3, Inject(ORGS)),
-    __param(4, Inject(SETTINGS)),
-    __param(5, Inject(PRICES)),
-    __param(6, Inject(MODEL_PURPOSES)),
-    __param(7, Inject(EXTENSION_ADMIN)),
-    __param(8, Inject(PROVIDER_REGISTRY)),
-    __param(9, Inject(CATALOG_REQUESTS))
+    __param(0, Inject(AccountsService)),
+    __param(1, Inject(SessionService)),
+    __param(2, Inject(KERNEL_LOGGER)),
+    __param(3, Inject(OrgsService)),
+    __param(4, Inject(SettingsService)),
+    __param(5, Inject(PricesService)),
+    __param(6, Inject(ModelPurposesService)),
+    __param(7, Inject(ExtensionAdmin)),
+    __param(8, Inject(ProviderRegistry)),
+    __param(9, Inject(CatalogRequestsService))
 ], AdminController);
 export { AdminController };

package/dist/admin/admin.module.d.ts

@@ -0,0 +1,3 @@
+/** Deployment administration: the setup wizard (its controllers are the api role's, `ApiModule`). */
+export declare class AdminModule {
+}

package/dist/admin/admin.module.js

@@ -0,0 +1,22 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { Module } from "@nestjs/common";
+import { IdentityModule } from "../identity/identity.module.js";
+import { OrgsModule } from "../orgs/orgs.module.js";
+import { SetupService } from "./setup.service.js";
+import { SetupLockModule } from "./setup-lock.js";
+/** Deployment administration: the setup wizard (its controllers are the api role's, `ApiModule`). */
+let AdminModule = class AdminModule {
+};
+AdminModule = __decorate([
+    Module({
+        imports: [IdentityModule, OrgsModule, SetupLockModule],
+        providers: [SetupService],
+        exports: [SetupService],
+    })
+], AdminModule);
+export { AdminModule };

package/dist/admin/extensions.controller.d.ts

@@ -1,22 +1,22 @@
 import { z } from "zod";
-import type { KernelConfig } from "../config/schema.js";
-import type { ExtensionAdminOps } from "../extensions/admin-ops.js";
-import type { ExtensionAdmin } from "../extensions/admin-view.js";
-import type { DeploymentConfigView, ExtensionDeploymentConfigService } from "../extensions/deployment-config.js";
-import type { ExtensionInstalls, PackageReview } from "../extensions/installs.js";
+import { ExtensionAdminOps } from "../extensions/admin-ops.js";
+import { ExtensionAdmin } from "../extensions/admin-view.js";
+import { type DeploymentConfigView, ExtensionDeploymentConfigService } from "../extensions/deployment-config.js";
+import { ExtensionInstalls, type PackageReview } from "../extensions/installs.js";
 import type { AdminExtensionView } from "../extensions/permission-view.js";
 import { type Principal } from "../identity/principal.js";
-declare const ApproveBody: z.ZodObject<{
+import { KernelConfigService } from "../infra/config/kernel-config.service.js";
+declare const ApproveSchema: z.ZodObject<{
     sha256: z.ZodNullable<z.ZodString>;
     reviewHash: z.ZodString;
 }, z.core.$strip>;
-declare const InstallBody: z.ZodObject<{
+declare const InstallSchema: z.ZodObject<{
     sha256: z.ZodString;
 }, z.core.$strip>;
-declare const ConfigBody: z.ZodObject<{
+declare const ConfigSchema: z.ZodObject<{
     values: z.ZodRecord<z.ZodString, z.ZodUnknown>;
 }, z.core.$strip>;
-declare const NpmBody: z.ZodObject<{
+declare const NpmSchema: z.ZodObject<{
     package: z.ZodString;
     version: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
@@ -33,7 +33,7 @@ export declare class AdminExtensionsController {
     private readonly ops;
     private readonly deploymentConfigs;
     private readonly kernelConfig;
-    constructor(installs: ExtensionInstalls, admin: ExtensionAdmin, ops: ExtensionAdminOps, deploymentConfigs: ExtensionDeploymentConfigService, kernelConfig: () => KernelConfig);
+    constructor(installs: ExtensionInstalls, admin: ExtensionAdmin, ops: ExtensionAdminOps, deploymentConfigs: ExtensionDeploymentConfigService, kernelConfig: KernelConfigService);
     /**
      * 部署上的全部插件（内置、配置声明、安装记录）及其状态、权限与快照；`drainSeconds` 为停用 / 升级时
      * 在途工具调用最多等待的秒数（`extensionHost.drainSeconds`，界面提示用）。
@@ -59,14 +59,14 @@ export declare class AdminExtensionsController {
      * hot fields are replaced in place, other fields reload the extension, and a pending extension
      * loads (no restart).
      */
-    putConfig(principal: Principal, name: string, body: z.infer<typeof ConfigBody>): Promise<DeploymentConfigView>;
+    putConfig(principal: Principal, name: string, body: z.infer<typeof ConfigSchema>): Promise<DeploymentConfigView>;
     /**
      * Web approval: writes the snapshot (source web), audits `extension.permissions_approved` and
      * publishes `kernel.plugins.changed`. Package or
      * permissions changed after the review -> 409 `extension.approval_stale`; nothing to approve ->
      * 409 `extension.not_pending`.
      */
-    approve(principal: Principal, name: string, body: z.infer<typeof ApproveBody>): Promise<AdminExtensionView>;
+    approve(principal: Principal, name: string, body: z.infer<typeof ApproveSchema>): Promise<AdminExtensionView>;
     /**
      * New install or version change (upgrade / downgrade): the install record points at `sha256` in the
      * package store; the desired state is unchanged (a new install is disabled).
@@ -76,7 +76,7 @@ export declare class AdminExtensionsController {
      * `extension.name_conflict`; downgrade to a version with unrun migrations -> 409
      * `extension.downgrade_unsupported`.
      */
-    install(principal: Principal, name: string, body: z.infer<typeof InstallBody>): Promise<AdminExtensionView>;
+    install(principal: Principal, name: string, body: z.infer<typeof InstallSchema>): Promise<AdminExtensionView>;
     /** Enable on the deployment; not installed -> 404 `extension.not_found`; config-declared -> 409. */
     enable(principal: Principal, name: string): Promise<AdminExtensionView>;
     /**
@@ -95,6 +95,6 @@ export declare class AdminExtensionsController {
         body?: unknown;
     }): Promise<PackageReview>;
     /** 从配置的 npm registry 拉取（`version` 可以是版本、dist-tag 或范围，缺省 latest）。下载失败 → 502。 */
-    fromNpm(principal: Principal, body: z.infer<typeof NpmBody>): Promise<PackageReview>;
+    fromNpm(principal: Principal, body: z.infer<typeof NpmSchema>): Promise<PackageReview>;
 }
 export {};

package/dist/admin/extensions.controller.js

@@ -7,13 +7,18 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Body, Controller, Delete, Get, HttpCode, Inject, Param, Post, Put, Req, } from "@nestjs/common";
+import { Controller, Delete, Get, HttpCode, Inject, Param, Post, Put, Req } from "@nestjs/common";
 import { z } from "zod";
 import { ApiError } from "../errors.js";
-import { EXTENSION_ADMIN, EXTENSION_ADMIN_OPS, EXTENSION_DEPLOYMENT_CONFIGS, EXTENSION_INSTALLS, KERNEL_CONFIG, } from "../http/tokens.js";
-import { ZodPipe } from "../http/zod.pipe.js";
+import { ExtensionAdminOps } from "../extensions/admin-ops.js";
+import { ExtensionAdmin } from "../extensions/admin-view.js";
+import { ExtensionDeploymentConfigService, } from "../extensions/deployment-config.js";
+import { ExtensionInstalls } from "../extensions/installs.js";
 import { CurrentPrincipal, EnterpriseAdmin, patTokenId, requireUser, } from "../identity/principal.js";
-const ApproveBody = z.object({
+import { KernelConfigService } from "../infra/config/kernel-config.service.js";
+import { createZodDto } from "../infra/validation/create-zod-dto.js";
+import { ZBody } from "../infra/validation/zod-params.js";
+const ApproveSchema = z.object({
     /** 安装记录的包（审阅时的 sha256）；配置声明的插件为 null。 */
     sha256: z
         .string()
@@ -21,18 +26,26 @@ const ApproveBody = z.object({
         .nullable(),
     reviewHash: z.string().regex(/^[0-9a-f]{16}$/),
 });
-const InstallBody = z.object({
+const InstallSchema = z.object({
     /** 包存储里的包（上传 / npm 导入返回的 sha256）。 */
     sha256: z.string().regex(/^[0-9a-f]{64}$/),
 });
-const ConfigBody = z.object({
+const ConfigSchema = z.object({
     /** 字段点路径 → 新值（`null` 清除）。 */
     values: z.record(z.string().min(1).max(256), z.unknown()),
 });
-const NpmBody = z.object({
+const NpmSchema = z.object({
     package: z.string().min(1).max(214),
     version: z.string().min(1).max(256).optional(),
 });
+class ExtensionApproveBody extends createZodDto(ApproveSchema, "ExtensionApproveBody") {
+}
+class ExtensionInstallBody extends createZodDto(InstallSchema, "ExtensionInstallBody") {
+}
+class ExtensionConfigBody extends createZodDto(ConfigSchema, "ExtensionConfigBody") {
+}
+class ExtensionNpmImportBody extends createZodDto(NpmSchema, "ExtensionNpmImportBody") {
+}
 /**
  * Deployment-level extension management (`/api/v1/admin/extensions/*`, enterprise admins): package
  * import (upload / npm, returns the review), the extension list and detail, web permission approval
@@ -62,7 +75,7 @@ let AdminExtensionsController = class AdminExtensionsController {
     async list() {
         return {
             extensions: await this.admin.list(),
-            drainSeconds: this.kernelConfig().extensionHost.drainSeconds,
+            drainSeconds: this.kernelConfig.get().extensionHost.drainSeconds,
         };
     }
     /** A single extension; unknown -> 404 `extension.not_found`. */
@@ -168,21 +181,21 @@ __decorate([
     Put(":name/config"),
     __param(0, CurrentPrincipal()),
     __param(1, Param("name")),
-    __param(2, Body(new ZodPipe(ConfigBody)))
+    __param(2, ZBody(ExtensionConfigBody))
 ], AdminExtensionsController.prototype, "putConfig", null);
 __decorate([
     Post(":name/approve"),
     HttpCode(200),
     __param(0, CurrentPrincipal()),
     __param(1, Param("name")),
-    __param(2, Body(new ZodPipe(ApproveBody)))
+    __param(2, ZBody(ExtensionApproveBody))
 ], AdminExtensionsController.prototype, "approve", null);
 __decorate([
     Post(":name/install"),
     HttpCode(200),
     __param(0, CurrentPrincipal()),
     __param(1, Param("name")),
-    __param(2, Body(new ZodPipe(InstallBody)))
+    __param(2, ZBody(ExtensionInstallBody))
 ], AdminExtensionsController.prototype, "install", null);
 __decorate([
     Post(":name/enable"),
@@ -212,15 +225,15 @@ __decorate([
     Post("packages/npm"),
     HttpCode(200),
     __param(0, CurrentPrincipal()),
-    __param(1, Body(new ZodPipe(NpmBody)))
+    __param(1, ZBody(ExtensionNpmImportBody))
 ], AdminExtensionsController.prototype, "fromNpm", null);
 AdminExtensionsController = __decorate([
     Controller("api/v1/admin/extensions"),
     EnterpriseAdmin(),
-    __param(0, Inject(EXTENSION_INSTALLS)),
-    __param(1, Inject(EXTENSION_ADMIN)),
-    __param(2, Inject(EXTENSION_ADMIN_OPS)),
-    __param(3, Inject(EXTENSION_DEPLOYMENT_CONFIGS)),
-    __param(4, Inject(KERNEL_CONFIG))
+    __param(0, Inject(ExtensionInstalls)),
+    __param(1, Inject(ExtensionAdmin)),
+    __param(2, Inject(ExtensionAdminOps)),
+    __param(3, Inject(ExtensionDeploymentConfigService)),
+    __param(4, Inject(KernelConfigService))
 ], AdminExtensionsController);
 export { AdminExtensionsController };

package/dist/admin/setup-lock.d.ts

@@ -0,0 +1,16 @@
+import { TransactionHost } from "../infra/database/transaction-host.js";
+import { XactLock } from "../infra/database/xact-lock.js";
+/**
+ * The deployment setup lock (one provider per transaction-scoped lock): serializes the web setup
+ * wizard and the CLI's `admin create --if-none`, so concurrent runs create exactly one enterprise
+ * admin. Joins the caller's transaction (`mandatory`), which holds it until it ends.
+ */
+export declare class SetupLock {
+    private readonly xactLock;
+    readonly txHost: TransactionHost;
+    constructor(xactLock: XactLock, txHost: TransactionHost);
+    lock(): Promise<void>;
+}
+/** The one {@link SetupLock}: identity (the CLI's admin creation) and admin import it. */
+export declare class SetupLockModule {
+}

package/dist/admin/setup-lock.js

@@ -0,0 +1,47 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Inject, Injectable, Module } from "@nestjs/common";
+import { TransactionHost } from "../infra/database/transaction-host.js";
+import { Transactional } from "../infra/database/transactional.decorator.js";
+import { XactLock } from "../infra/database/xact-lock.js";
+/** The transaction-scoped lock name of deployment setup. */
+const SETUP_LOCK = "capybara.setup";
+/**
+ * The deployment setup lock (one provider per transaction-scoped lock): serializes the web setup
+ * wizard and the CLI's `admin create --if-none`, so concurrent runs create exactly one enterprise
+ * admin. Joins the caller's transaction (`mandatory`), which holds it until it ends.
+ */
+let SetupLock = class SetupLock {
+    xactLock;
+    txHost;
+    constructor(xactLock, txHost) {
+        this.xactLock = xactLock;
+        this.txHost = txHost;
+    }
+    async lock() {
+        await this.xactLock.lock(SETUP_LOCK);
+    }
+};
+__decorate([
+    Transactional({ propagation: "mandatory" })
+], SetupLock.prototype, "lock", null);
+SetupLock = __decorate([
+    Injectable(),
+    __param(0, Inject(XactLock)),
+    __param(1, Inject(TransactionHost))
+], SetupLock);
+export { SetupLock };
+/** The one {@link SetupLock}: identity (the CLI's admin creation) and admin import it. */
+let SetupLockModule = class SetupLockModule {
+};
+SetupLockModule = __decorate([
+    Module({ providers: [SetupLock], exports: [SetupLock] })
+], SetupLockModule);
+export { SetupLockModule };

package/dist/admin/setup.controller.d.ts

@@ -1,12 +1,12 @@
 import type { FastifyReply, FastifyRequest } from "fastify";
 import { z } from "zod";
-import type { KernelConfig } from "../config/schema.js";
 import type { Account } from "../identity/accounts.js";
-import type { LoginRateLimiter } from "../identity/rate-limit.js";
-import type { SessionService } from "../identity/sessions.js";
+import { SessionService } from "../identity/sessions.js";
+import { KernelConfigService } from "../infra/config/kernel-config.service.js";
+import { CredentialThrottler } from "../infra/throttler/credential-throttler.js";
 import type { Org } from "../orgs/orgs.service.js";
-import type { SetupService } from "./setup.service.js";
-declare const SetupBody: z.ZodObject<{
+import { SetupService } from "./setup.service.js";
+declare const SetupSchema: z.ZodObject<{
     login: z.ZodString;
     password: z.ZodString;
     displayName: z.ZodString;
@@ -18,8 +18,8 @@ export declare class SetupController {
     private readonly setup;
     private readonly sessions;
     private readonly config;
-    private readonly limiter;
-    constructor(setup: SetupService, sessions: SessionService, config: () => KernelConfig, limiter: LoginRateLimiter);
+    private readonly throttler;
+    constructor(setup: SetupService, sessions: SessionService, config: KernelConfigService, throttler: CredentialThrottler);
     status(): Promise<{
         needsSetup: boolean;
     }>;
@@ -28,7 +28,7 @@ export declare class SetupController {
      * 配置了 `auth.setupToken` 时 body 中的 `setupToken` 必须与之相等，否则 `setup.token_invalid`；
      * 核对前先占用限流额度，超限 → 429 `auth.rate_limited`，核对通过后退还。
      */
-    complete(body: z.infer<typeof SetupBody>, req: FastifyRequest, reply: FastifyReply): Promise<{
+    complete(body: z.infer<typeof SetupSchema>, req: FastifyRequest, reply: FastifyReply): Promise<{
         account: Account;
         org?: Org;
     }>;