@capybara-hq/kernel 0.1.0-rc.10 → 0.1.0-rc.11

package/dist/orgs/settings.service.js

@@ -17,6 +17,7 @@ import { KernelConfigService } from "../infra/config/kernel-config.service.js";
 import { KernelDb } from "../infra/database/kernel-db.js";
 import { TransactionHost } from "../infra/database/transaction-host.js";
 import { Transactional } from "../infra/database/transactional.decorator.js";
+import { assertThemeOnIn } from "../themes/theme-state.js";
 import { IanaTimeZone } from "../time-zone.js";
 import { OrgLock } from "./org-lock.js";
 /**
@@ -33,6 +34,8 @@ import { OrgLock } from "./org-lock.js";
  *   `read-only` (writes listed as unavailable) or `off` (default `on`).
  * - `timeZone`: the org's default time zone (IANA; absent = UTC) for senders without one of their
  *   own (run context spec §3.3); an invalid stored value reads as absent.
+ * - `theme`: the org's default theme and whether members may pick their own (themes spec §7);
+ *   absent (or an invalid stored value) = follow the platform, personal picks allowed.
  */
 /** 组织沙箱出站白名单的主机数上限。 */
 export const ORG_SANDBOX_ALLOW_HOSTS_MAX = 200;
@@ -59,6 +62,19 @@ export const SandboxEgressSettingSchema = z
         .optional(),
 })
     .strict();
+/**
+ * The org's theme setting (themes spec §7): `id` a theme on in the org (a `platform_themes` id),
+ * null = follow the platform's default; `personal: "locked"` hides the personal picker in the org
+ * and resolution ignores personal picks there.
+ */
+export const OrgThemeSettingSchema = z
+    .object({
+    id: z.string().min(1).max(200).nullable(),
+    personal: z.enum(["allowed", "locked"]),
+})
+    .strict();
+/** The theme setting of an org that has none: follow the platform, personal picks allowed. */
+export const DEFAULT_ORG_THEME = { id: null, personal: "allowed" };
 export const OrgSettingsSchema = z.object({
     toolSearch: z.enum(["on", "off"]).default("on").catch("on"),
     locale: z.enum(["zh", "en"]).default("en").catch("en"),
@@ -69,6 +85,8 @@ export const OrgSettingsSchema = z.object({
     wakeOnBackgroundTask: z.boolean().optional().catch(undefined),
     /** The org's default time zone (run context spec §3.3); absent = UTC. */
     timeZone: IanaTimeZone.optional().catch(undefined),
+    /** The org's default theme and personal lock (themes spec §7); absent = {@link DEFAULT_ORG_THEME}. */
+    theme: OrgThemeSettingSchema.optional().catch(undefined),
 });
 /** PATCH 体：只改给出的字段；未知字段 → 400。 */
 export const OrgSettingsPatchSchema = z
@@ -83,6 +101,11 @@ export const OrgSettingsPatchSchema = z
     sandboxEgress: SandboxEgressSettingSchema.nullable().optional(),
     /** The org's default time zone (IANA); null clears it (UTC). */
     timeZone: IanaTimeZone.nullable().optional(),
+    /**
+     * The org's default theme (`id`: a theme on in the org, else 400 `theme.not_available`; null
+     * follows the platform) and whether members may pick their own; null clears it.
+     */
+    theme: OrgThemeSettingSchema.nullable().optional(),
 })
     .strict();
 /**
@@ -204,10 +227,17 @@ let OrgSettingsService = class OrgSettingsService {
             delete after.wakeOnBackgroundTask;
         if (after.timeZone === undefined)
             delete after.timeZone;
+        if (after.theme === undefined)
+            delete after.theme;
         if (sameSettings(before, after))
             return before;
+        // Lock order: the org row (orgLock above), then the theme's catalog item and its row FOR
+        // SHARE (assertThemeOnIn), then the check, so no scope writer changes what it read first
+        if (patch.theme?.id != null && patch.theme.id !== before.theme?.id) {
+            await assertThemeOnIn(this.db.db, orgId, patch.theme.id);
+        }
         // 与存量合并：保留本版本不认识的键（清除的 sandboxEgress 不留在存量里）
-        const { sandboxEgress: _old, wakeOnBackgroundTask: _oldWake, timeZone: _oldZone, ...rest } = stored;
+        const { sandboxEgress: _old, wakeOnBackgroundTask: _oldWake, timeZone: _oldZone, theme: _oldTheme, ...rest } = stored;
         await this.db
             .updateTable("orgs")
             .set({ settings: JSON.stringify({ ...rest, ...after }) })

package/dist/platform/exclusions.js

@@ -664,4 +664,20 @@ export const PLATFORM_EXCLUSIONS = [
         category: "transport",
         reason: "Server-sent event stream of UI invalidations",
     },
+    // themes (themes spec §8-§9)
+    {
+        route: "GET /api/v1/themes/:id/:version/theme.css",
+        category: "transport",
+        reason: "Serves a theme version's stylesheet to the browser; an agent reads themes.list",
+    },
+    {
+        route: "GET /api/v1/themes/:id/:version/assets/:file",
+        category: "transport",
+        reason: "Serves a theme version's font and logo bytes to the browser",
+    },
+    {
+        route: "GET /api/v1/platform/theme",
+        category: "transport",
+        reason: "The platform default theme for the web's pages before sign-in; no session to act for",
+    },
 ];

package/dist/platform/operation.js

@@ -12,7 +12,7 @@ export const operationDomain = (id) => id.slice(0, id.indexOf("."));
 export const PLATFORM_DOMAINS = [
     {
         id: "platform",
-        description: "What this platform is, its tool families, what you and this agent can do, and your own preferences (time zone).",
+        description: "What this platform is, its tool families, what you and this agent can do, and your own preferences (time zone, theme).",
     },
     { id: "skills", description: "The org's skill library: list, read, create, switch on or off." },
     {
@@ -81,10 +81,14 @@ export const PLATFORM_DOMAINS = [
     },
     {
         id: "org-settings",
-        description: "The org's settings (tool search, language, sandbox policy, the Platform tool switch): read and change.",
+        description: "The org's settings (tool search, language, sandbox policy, the Platform tool switch, the default theme): read and change.",
     },
     {
         id: "environments",
         description: "Your own cloud environments (the workspaces your conversations run in): list, read, create, rename, delete, wipe the files.",
     },
+    {
+        id: "themes",
+        description: "The themes on in this org, the one in effect for you and the org's theme setting: list. Themes are set through your preferences, the org settings and the deployment settings.",
+    },
 ];

package/dist/platform/ops/admin.ops.d.ts

@@ -10,6 +10,7 @@ import { PricesService } from "../../models/prices.js";
 import { ModelPurposesService } from "../../models/purposes.js";
 import { OrgsService } from "../../orgs/orgs.service.js";
 import { ProviderRegistry } from "../../runtime/providers.js";
+import { ThemesService } from "../../themes/themes.service.js";
 import { PlatformOperations } from "../registry.js";
 /**
  * Admin console operations of the `Platform` tool (spec §14.2): the dashboard totals, the
@@ -30,7 +31,8 @@ export declare class AdminOperations implements OnModuleInit {
     private readonly enablement;
     private readonly prices;
     private readonly purposes;
-    constructor(registry: PlatformOperations, extensions: ExtensionAdmin, orgs: OrgsService, accounts: AccountsService, catalogRequests: CatalogRequestsService, settings: SettingsService, providers: ProviderRegistry, displayNames: ExtensionDisplayNames, extensionRegistry: ExtensionRegistry, enablement: ModelEnablement, prices: PricesService, purposes: ModelPurposesService);
+    private readonly themes;
+    constructor(registry: PlatformOperations, extensions: ExtensionAdmin, orgs: OrgsService, accounts: AccountsService, catalogRequests: CatalogRequestsService, settings: SettingsService, providers: ProviderRegistry, displayNames: ExtensionDisplayNames, extensionRegistry: ExtensionRegistry, enablement: ModelEnablement, prices: PricesService, purposes: ModelPurposesService, themes: ThemesService);
     private assertProvider;
     onModuleInit(): void;
 }

package/dist/platform/ops/admin.ops.js

@@ -25,6 +25,7 @@ import { purposeTargetOf } from "../../models/purposes.controller.js";
 import { ModelPurposesService, PURPOSE_PUT, withDeclaredByNames } from "../../models/purposes.js";
 import { OrgsService } from "../../orgs/orgs.service.js";
 import { ProviderRegistry } from "../../runtime/providers.js";
+import { ThemesService } from "../../themes/themes.service.js";
 import { defineOperation } from "../operation.js";
 import { PlatformOperations } from "../registry.js";
 import { precheckBy, viaAgent } from "./errors.js";
@@ -38,6 +39,7 @@ const SettingsInput = DEPLOYMENT_SETTINGS_PATCH.pick({
     customConnectors: true,
     customSkills: true,
     orgMarketplaceBrowse: true,
+    uiTheme: true,
 }).strict();
 const ProviderId = ModelProviderParams.shape.provider.describe("The model provider (models.platform-list), e.g. the plugin name of its extension.");
 /** `provider/model` of a purpose target, or null. */
@@ -61,7 +63,8 @@ let AdminOperations = class AdminOperations {
     enablement;
     prices;
     purposes;
-    constructor(registry, extensions, orgs, accounts, catalogRequests, settings, providers, displayNames, extensionRegistry, enablement, prices, purposes) {
+    themes;
+    constructor(registry, extensions, orgs, accounts, catalogRequests, settings, providers, displayNames, extensionRegistry, enablement, prices, purposes, themes) {
         this.registry = registry;
         this.extensions = extensions;
         this.orgs = orgs;
@@ -74,6 +77,7 @@ let AdminOperations = class AdminOperations {
         this.enablement = enablement;
         this.prices = prices;
         this.purposes = purposes;
+        this.themes = themes;
     }
     assertProvider(provider) {
         if (!this.extensionRegistry.list("model-provider").some((e) => e.plugin === provider)) {
@@ -117,7 +121,7 @@ let AdminOperations = class AdminOperations {
             }),
             defineOperation({
                 id: "admin.update-settings",
-                description: "Change deployment settings (super admin); give only the keys to change: orgCreation (anyone or super_admin), priceCurrency (ISO 4217 code), customConnectors / customSkills (allow or deny: whether orgs may create their own instead of installing from the catalog), orgMarketplaceBrowse (true or false). Per-org limits are orgs.set-limits.",
+                description: "Change deployment settings (super admin); give only the keys to change: orgCreation (anyone or super_admin), priceCurrency (ISO 4217 code), customConnectors / customSkills (allow or deny: whether orgs may create their own instead of installing from the catalog), orgMarketplaceBrowse (true or false), uiTheme ({ id }: the platform default theme, a platform theme whose scope is all, or null for the built-in theme; it is what every org falls back to and what the sign-in pages show). Per-org limits are orgs.set-limits.",
                 input: SettingsInput.refine((b) => Object.keys(b).length > 0, {
                     message: "at least one setting is required",
                 }),
@@ -132,6 +136,10 @@ let AdminOperations = class AdminOperations {
                         code: "validation_failed",
                         next: "Fix the values as the message says (admin.settings shows the current ones).",
                     },
+                    {
+                        code: "theme.not_available",
+                        next: "The platform default must be a platform theme whose scope is all, not disabled, and on in every organization. When the details list orgs, the theme is off in those organizations: tell the person their names, then choose another theme (plugins.components with kind theme lists them) or have it switched on in those organizations first; { id: null } sets the built-in theme.",
+                    },
                 ],
                 precheck: async (i) => {
                     const r = DeploymentSettingsBody.safeParse(i);
@@ -139,11 +147,20 @@ let AdminOperations = class AdminOperations {
                         ? { ok: true }
                         : { ok: false, code: "validation_failed", message: r.error.issues[0]?.message ?? "" };
                 },
-                summary: (i) => {
-                    const parts = Object.entries(i).map(([k, v]) => `${k}=${String(v)}`);
+                summary: async (i) => {
+                    const { uiTheme, ...rest } = i;
+                    const parts = Object.entries(rest).map(([k, v]) => `${k}=${String(v)}`);
+                    const zh = [...parts];
+                    const en = [...parts];
+                    if (uiTheme !== undefined) {
+                        // the theme by its name (the super admin sees every theme), the built-in one by name
+                        const name = uiTheme.id === null ? null : await this.themes.nameOf(uiTheme.id);
+                        zh.push(`uiTheme=${uiTheme.id === null ? "内置主题" : (name?.zh ?? uiTheme.id)}`);
+                        en.push(`uiTheme=${uiTheme.id === null ? "built-in theme" : (name?.en ?? uiTheme.id)}`);
+                    }
                     return {
-                        zh: `修改平台部署设置：${parts.join("，")}`,
-                        en: `Change the deployment settings: ${parts.join(", ")}`,
+                        zh: `修改平台部署设置：${zh.join("，")}`,
+                        en: `Change the deployment settings: ${en.join(", ")}`,
                     };
                 },
                 run: (input, ctx) => this.settings.update(input, ctx.actorAccountId, undefined, viaAgent("admin.update-settings", ctx)),
@@ -384,6 +401,7 @@ AdminOperations = __decorate([
     __param(8, Inject(ExtensionRegistry)),
     __param(9, Inject(ModelEnablement)),
     __param(10, Inject(PricesService)),
-    __param(11, Inject(ModelPurposesService))
+    __param(11, Inject(ModelPurposesService)),
+    __param(12, Inject(ThemesService))
 ], AdminOperations);
 export { AdminOperations };

package/dist/platform/ops/components.ops.js

@@ -32,6 +32,7 @@ const LABEL = {
     skill: { en: "platform skill", zh: "平台技能" },
     agent_template: { en: "platform agent template", zh: "平台智能体模板" },
     connector_template: { en: "platform connector template", zh: "平台连接器模板" },
+    theme: { en: "platform theme", zh: "平台主题" },
 };
 const REFUSED = {
     "plugin.disabled": "This component is disabled by the super admin and cannot be switched on",

package/dist/platform/ops/org-settings.ops.d.ts

@@ -1,5 +1,6 @@
 import { type OnModuleInit } from "@nestjs/common";
 import { OrgSettingsService } from "../../orgs/settings.service.js";
+import { ThemesService } from "../../themes/themes.service.js";
 import { PlatformOperations } from "../registry.js";
 /**
  * Org settings operations of the `Platform` tool (spec §14): read the settings every member sees,
@@ -11,6 +12,7 @@ import { PlatformOperations } from "../registry.js";
 export declare class OrgSettingsOperations implements OnModuleInit {
     private readonly registry;
     private readonly settings;
-    constructor(registry: PlatformOperations, settings: OrgSettingsService);
+    private readonly themes;
+    constructor(registry: PlatformOperations, settings: OrgSettingsService, themes: ThemesService);
     onModuleInit(): void;
 }

package/dist/platform/ops/org-settings.ops.js

@@ -10,6 +10,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 import { Inject, Injectable } from "@nestjs/common";
 import { z } from "zod";
 import { OrgSettingsPatchSchema, OrgSettingsService } from "../../orgs/settings.service.js";
+import { ThemesService } from "../../themes/themes.service.js";
 import { defineOperation } from "../operation.js";
 import { PlatformOperations } from "../registry.js";
 import { precheckBy, viaAgent } from "./errors.js";
@@ -28,15 +29,17 @@ const show = (v) => (v === null ? "default" : JSON.stringify(v));
 let OrgSettingsOperations = class OrgSettingsOperations {
     registry;
     settings;
-    constructor(registry, settings) {
+    themes;
+    constructor(registry, settings, themes) {
         this.registry = registry;
         this.settings = settings;
+        this.themes = themes;
     }
     onModuleInit() {
         this.registry.register([
             defineOperation({
                 id: "org-settings.get",
-                description: "Read this org's settings: toolSearch, locale, sandboxToolPolicy, platformTool (on, read-only or off), sandboxEgress and wakeOnBackgroundTask (absent means it follows the deployment), the deployment's sandbox egress default and the sandbox cpu / memory limits in effect.",
+                description: "Read this org's settings: toolSearch, locale, sandboxToolPolicy, platformTool (on, read-only or off), sandboxEgress and wakeOnBackgroundTask (absent means it follows the deployment), theme (the org's default theme id, null or absent following the platform, and personal: allowed or locked), the deployment's sandbox egress default and the sandbox cpu / memory limits in effect.",
                 input: z.object({}).strict(),
                 example: {},
                 authz: { orgAction: "org.read" },
@@ -50,7 +53,7 @@ let OrgSettingsOperations = class OrgSettingsOperations {
             }),
             defineOperation({
                 id: "org-settings.update",
-                description: "Change this org's settings (org admins). Give only the settings to change; null clears sandboxEgress or wakeOnBackgroundTask so they follow the deployment again. Setting platformTool to off or read-only takes effect from the next call and cuts this Platform tool off in the org, so say so before asking; an org admin switches it back on in the web settings.",
+                description: "Change this org's settings (org admins). Give only the settings to change; null clears sandboxEgress or wakeOnBackgroundTask so they follow the deployment again. theme: { id, personal } sets the org's default theme (a theme id from themes.list, or null to follow the platform) and whether members may pick their own (allowed) or not (locked); null clears it. Setting platformTool to off or read-only takes effect from the next call and cuts this Platform tool off in the org, so say so before asking; an org admin switches it back on in the web settings.",
                 input: OrgSettingsPatchSchema.refine((i) => Object.values(i).some((v) => v !== undefined), {
                     message: "give at least one setting",
                 }),
@@ -63,22 +66,43 @@ let OrgSettingsOperations = class OrgSettingsOperations {
                         code: "org.sandbox_egress_not_allowed",
                         next: "This deployment disables sandbox network access, so the org can only set sandboxEgress to none; ask the super admin to change sandbox.limits.egress.",
                     },
+                    {
+                        code: "theme.not_available",
+                        next: "Pick a theme id that themes.list shows for this org, or null to follow the platform.",
+                    },
                     {
                         code: "validation_failed",
                         next: "Fix the setting as the message says (org-settings.get shows the current values).",
                     },
                 ],
                 precheck: (i) => precheckBy(async () => this.settings.check(i)),
-                summary: (i) => {
-                    const parts = Object.entries(i)
+                summary: async (i, ctx) => {
+                    const { theme, ...rest } = i;
+                    const parts = Object.entries(rest)
                         .filter(([, v]) => v !== undefined)
                         .map(([k, v]) => `${k} → ${show(v)}`);
+                    const zhParts = [...parts];
+                    const enParts = [...parts];
+                    if (theme !== undefined) {
+                        // the theme by its name when it is on in this org; any other id is shown as given
+                        const name = theme?.id == null ? null : await this.themes.nameIn(ctx.orgId, theme.id);
+                        if (theme === null) {
+                            zhParts.push("theme → 清除（跟随平台，允许个人选择）");
+                            enParts.push("theme → cleared (follow the platform, personal picks allowed)");
+                        }
+                        else {
+                            const zh = theme.id === null ? "跟随平台" : (name?.zh ?? theme.id);
+                            const en = theme.id === null ? "follow the platform" : (name?.en ?? theme.id);
+                            zhParts.push(`theme → ${zh}（个人选择：${theme.personal === "locked" ? "锁定" : "允许"}）`);
+                            enParts.push(`theme → ${en} (personal picks ${theme.personal === "locked" ? "locked" : "allowed"})`);
+                        }
+                    }
                     const warn = i.platformTool === "off" || i.platformTool === "read-only";
                     return {
-                        zh: `修改组织设置：${parts.join("，")}${warn
+                        zh: `修改组织设置：${zhParts.join("，")}${warn
                             ? "（之后智能体不能再用平台工具" + (i.platformTool === "off" ? "" : "写入") + "）"
                             : ""}`,
-                        en: `Update the org settings: ${parts.join(", ")}${warn
+                        en: `Update the org settings: ${enParts.join(", ")}${warn
                             ? `; from the next call the Platform tool is ${i.platformTool === "off" ? "off" : "read-only"} in this org`
                             : ""}`,
                     };
@@ -97,6 +121,7 @@ let OrgSettingsOperations = class OrgSettingsOperations {
 OrgSettingsOperations = __decorate([
     Injectable(),
     __param(0, Inject(PlatformOperations)),
-    __param(1, Inject(OrgSettingsService))
+    __param(1, Inject(OrgSettingsService)),
+    __param(2, Inject(ThemesService))
 ], OrgSettingsOperations);
 export { OrgSettingsOperations };

package/dist/platform/ops/orgs.ops.js

@@ -158,6 +158,7 @@ let OrgsOperations = class OrgsOperations {
                     "customConnectors",
                     "customSkills",
                     "orgMarketplaceBrowse",
+                    "uiTheme",
                 ],
                 extras: ["orgId", "runConcurrency", "sandbox", "subagents"],
                 confirm: "platform",

package/dist/platform/ops/platform.ops.d.ts

@@ -2,6 +2,7 @@ import { type OnModuleInit } from "@nestjs/common";
 import { AgentsService } from "../../agents/agents.service.js";
 import { AccountsService } from "../../identity/accounts.js";
 import { OrgSettingsService } from "../../orgs/settings.service.js";
+import { ThemesService } from "../../themes/themes.service.js";
 import { ToolRegistry } from "../../tools/registry.js";
 import { PlatformActor } from "../actor.js";
 import { PlatformOperations } from "../registry.js";
@@ -16,7 +17,8 @@ export declare class PlatformOperationsProvider implements OnModuleInit {
     private readonly settings;
     private readonly tools;
     private readonly accounts;
-    constructor(registry: PlatformOperations, actor: PlatformActor, agents: AgentsService, settings: OrgSettingsService, tools: ToolRegistry, accounts: AccountsService);
+    private readonly themes;
+    constructor(registry: PlatformOperations, actor: PlatformActor, agents: AgentsService, settings: OrgSettingsService, tools: ToolRegistry, accounts: AccountsService, themes: ThemesService);
     /**
      * The agent's tools by the keys the model sees, as the registry resolves them for a run (tools
      * default-on spec §8): every tool the org offers that the definition does not turn off, builtins

package/dist/platform/ops/platform.ops.js

@@ -14,6 +14,7 @@ import { AccountsService } from "../../identity/accounts.js";
 import { PreferencesSchema } from "../../identity/me.schemas.js";
 import { can } from "../../orgs/roles.js";
 import { effectiveSandboxEgress, OrgSettingsService } from "../../orgs/settings.service.js";
+import { ThemesService } from "../../themes/themes.service.js";
 import { SANDBOX_TOOL_NAMES } from "../../tools/builtin-names.js";
 import { ToolRegistry } from "../../tools/registry.js";
 import { PlatformActor } from "../actor.js";
@@ -47,13 +48,15 @@ let PlatformOperationsProvider = class PlatformOperationsProvider {
     settings;
     tools;
     accounts;
-    constructor(registry, actor, agents, settings, tools, accounts) {
+    themes;
+    constructor(registry, actor, agents, settings, tools, accounts, themes) {
         this.registry = registry;
         this.actor = actor;
         this.agents = agents;
         this.settings = settings;
         this.tools = tools;
         this.accounts = accounts;
+        this.themes = themes;
     }
     /**
      * The agent's tools by the keys the model sees, as the registry resolves them for a run (tools
@@ -152,7 +155,7 @@ let PlatformOperationsProvider = class PlatformOperationsProvider {
             }),
             defineOperation({
                 id: "platform.preferences",
-                description: "Read your own preferences: your time zone (an IANA name such as Asia/Shanghai), or null when it follows the time zone of the browser you send messages from. The run context already tells you the zone in effect for this message.",
+                description: "Read your own preferences: your time zone (an IANA name such as Asia/Shanghai, or null when it follows the time zone of the browser you send messages from; the run context already tells you the zone in effect for this message) and your theme (a theme id, or null when you follow the org's theme; themes.list names them).",
                 input: EMPTY,
                 example: {},
                 // any signed-in person may call the route; every run's actor is a member of this org
@@ -163,8 +166,10 @@ let PlatformOperationsProvider = class PlatformOperationsProvider {
             }),
             defineOperation({
                 id: "platform.set-preferences",
-                description: "Set your own time zone (an IANA name such as Europe/Berlin), or null to follow the time zone of the browser you send messages from. It applies to the messages you send afterwards, on the web and in IM; the current run keeps its zone.",
-                input: PreferencesSchema,
+                description: "Change your own preferences; give only the ones to change, the others keep their values. timeZone: an IANA name such as Europe/Berlin, or null to follow the time zone of the browser you send messages from; it applies to the messages you send afterwards, on the web and in IM (the current run keeps its zone). theme: a theme id from themes.list (it applies in every org where that theme is on and personal picks are allowed), or null to follow the org's theme.",
+                input: PreferencesSchema.refine((i) => Object.values(i).some((v) => v !== undefined), {
+                    message: "give timeZone, theme or both",
+                }),
                 example: { timeZone: "Asia/Shanghai" },
                 authz: { orgAction: "agents.use" },
                 mirrors: ["PUT /api/v1/me/preferences"],
@@ -174,20 +179,41 @@ let PlatformOperationsProvider = class PlatformOperationsProvider {
                         code: "validation_failed",
                         next: "Use an IANA time zone name such as Asia/Shanghai or America/New_York, or null.",
                     },
+                    {
+                        code: "theme.not_available",
+                        next: "Pick a theme id that themes.list shows for this org, or null to follow the org's theme.",
+                    },
                 ],
                 summary: async (input, ctx) => {
-                    const now = (await this.accounts.preferences(ctx.actorAccountId)).timeZone;
-                    const from = { zh: now ?? "跟随浏览器", en: now ?? "follow the browser" };
-                    const to = {
-                        zh: input.timeZone ?? "跟随浏览器",
-                        en: input.timeZone ?? "follow the browser",
-                    };
-                    return {
-                        zh: `把你的时区从「${from.zh}」改为「${to.zh}」`,
-                        en: `Change your time zone from "${from.en}" to "${to.en}"`,
-                    };
+                    const now = await this.accounts.preferences(ctx.actorAccountId);
+                    const zh = [];
+                    const en = [];
+                    if (input.timeZone !== undefined) {
+                        const from = now.timeZone;
+                        zh.push(`把你的时区从「${from ?? "跟随浏览器"}」改为「${input.timeZone ?? "跟随浏览器"}」`);
+                        en.push(`Change your time zone from "${from ?? "follow the browser"}" to "${input.timeZone ?? "follow the browser"}"`);
+                    }
+                    if (input.theme !== undefined) {
+                        // only themes on in one of your orgs are named; any other id is shown as given
+                        const name = async (id) => id === null
+                            ? null
+                            : ((await this.themes.nameForAccount(ctx.actorAccountId, id)) ?? {
+                                en: id,
+                                zh: id,
+                            });
+                        const from = await name(now.theme);
+                        const to = await name(input.theme);
+                        const inZh = (n) => (n === null ? "跟随组织" : n.zh);
+                        const inEn = (n) => (n === null ? "follow the org" : n.en);
+                        zh.push(`把你的主题从「${inZh(from)}」改为「${inZh(to)}」`);
+                        en.push(`Change your theme from "${inEn(from)}" to "${inEn(to)}"`);
+                    }
+                    return { zh: zh.join("；"), en: en.join("; ") };
                 },
-                run: async (input, ctx) => this.accounts.setPreferences(ctx.actorAccountId, { timeZone: input.timeZone }),
+                run: async (input, ctx) => this.accounts.setPreferences(ctx.actorAccountId, {
+                    timeZone: input.timeZone,
+                    theme: input.theme,
+                }),
             }),
         ]);
     }
@@ -199,6 +225,7 @@ PlatformOperationsProvider = __decorate([
     __param(2, Inject(AgentsService)),
     __param(3, Inject(OrgSettingsService)),
     __param(4, Inject(ToolRegistry)),
-    __param(5, Inject(AccountsService))
+    __param(5, Inject(AccountsService)),
+    __param(6, Inject(ThemesService))
 ], PlatformOperationsProvider);
 export { PlatformOperationsProvider };

package/dist/platform/ops/themes.ops.d.ts

@@ -0,0 +1,14 @@
+import { type OnModuleInit } from "@nestjs/common";
+import { ThemesService } from "../../themes/themes.service.js";
+import { PlatformOperations } from "../registry.js";
+/**
+ * Theme operations of the `Platform` tool (themes spec §9): the org's theme listing. Setting a
+ * theme goes through the settings operations (`platform.set-preferences`, `org-settings.update`,
+ * `admin.update-settings`).
+ */
+export declare class ThemesOperations implements OnModuleInit {
+    private readonly registry;
+    private readonly themes;
+    constructor(registry: PlatformOperations, themes: ThemesService);
+    onModuleInit(): void;
+}

package/dist/platform/ops/themes.ops.js

@@ -0,0 +1,47 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Inject, Injectable } from "@nestjs/common";
+import { z } from "zod";
+import { ThemesService } from "../../themes/themes.service.js";
+import { defineOperation } from "../operation.js";
+import { PlatformOperations } from "../registry.js";
+/**
+ * Theme operations of the `Platform` tool (themes spec §9): the org's theme listing. Setting a
+ * theme goes through the settings operations (`platform.set-preferences`, `org-settings.update`,
+ * `admin.update-settings`).
+ */
+let ThemesOperations = class ThemesOperations {
+    registry;
+    themes;
+    constructor(registry, themes) {
+        this.registry = registry;
+        this.themes = themes;
+    }
+    onModuleInit() {
+        this.registry.register([
+            defineOperation({
+                id: "themes.list",
+                description: "List the themes on in this org (id, version, name, schemes, logo and the bg / panel / ink / accent swatches per scheme), the theme in effect for you here (resolved; null is the built-in theme) and the org's setting (its default theme id, null following the platform, and whether personal picks are allowed or locked). Use a theme id with platform.set-preferences to change your own theme, or with org-settings.update to change the org's default.",
+                input: z.object({}).strict(),
+                example: {},
+                authz: { orgAction: "org.read" },
+                mirrors: ["GET /api/v1/orgs/:orgId/themes"],
+                confirm: "read",
+                run: async (_input, ctx) => this.themes.forOrg(ctx.orgId, ctx.actorAccountId),
+            }),
+        ]);
+    }
+};
+ThemesOperations = __decorate([
+    Injectable(),
+    __param(0, Inject(PlatformOperations)),
+    __param(1, Inject(ThemesService))
+], ThemesOperations);
+export { ThemesOperations };

package/dist/platform/platform-ops.module.d.ts

@@ -25,11 +25,12 @@ import { PluginsOperations } from "./ops/plugins.ops.js";
 import { PreviewersOperations } from "./ops/previewers.ops.js";
 import { RequestsOperations } from "./ops/requests.ops.js";
 import { SkillsOperations } from "./ops/skills.ops.js";
+import { ThemesOperations } from "./ops/themes.ops.js";
 /**
  * One provider per domain, each taking `PlatformOperations` as its first constructor argument:
  * the parity test in `tools/checks` builds the operations from it without a Nest app.
  */
-export declare const PLATFORM_OPERATION_PROVIDERS: readonly [typeof PlatformOperationsProvider, typeof SkillsOperations, typeof AgentsOperations, typeof AgentTemplatesOperations, typeof PluginsOperations, typeof MarketplacesOperations, typeof RequestsOperations, typeof ConnectorsOperations, typeof ExtensionsOperations, typeof ConversationsOperations, typeof ComponentsOperations, typeof AccountsOperations, typeof OrgsOperations, typeof AdminOperations, typeof CatalogAdminOperations, typeof OrgPluginsOperations, typeof ExtensionsAdminOperations, typeof ModelsOperations, typeof InboxOperations, typeof ApprovalsOperations, typeof ChannelsOperations, typeof OrgSettingsOperations, typeof EvalsOperations, typeof BackgroundOperations, typeof PreviewersOperations, typeof EnvironmentsOperations, typeof AgentSkillsOperations];
+export declare const PLATFORM_OPERATION_PROVIDERS: readonly [typeof PlatformOperationsProvider, typeof SkillsOperations, typeof AgentsOperations, typeof AgentTemplatesOperations, typeof PluginsOperations, typeof MarketplacesOperations, typeof RequestsOperations, typeof ConnectorsOperations, typeof ExtensionsOperations, typeof ConversationsOperations, typeof ComponentsOperations, typeof AccountsOperations, typeof OrgsOperations, typeof AdminOperations, typeof CatalogAdminOperations, typeof OrgPluginsOperations, typeof ExtensionsAdminOperations, typeof ModelsOperations, typeof InboxOperations, typeof ApprovalsOperations, typeof ChannelsOperations, typeof OrgSettingsOperations, typeof EvalsOperations, typeof BackgroundOperations, typeof PreviewersOperations, typeof EnvironmentsOperations, typeof AgentSkillsOperations, typeof ThemesOperations];
 /**
  * The `Platform` tool's operations (ruling P2): one provider per domain, each registering its
  * operations into `PlatformOperations` from `onModuleInit`. It imports the domain modules, which

package/dist/platform/platform-ops.module.js

@@ -20,6 +20,7 @@ import { ModelsModule } from "../models/models.module.js";
 import { OrgsModule } from "../orgs/orgs.module.js";
 import { ProvidersModule } from "../runtime/providers.js";
 import { SkillsModule } from "../skills/skills.module.js";
+import { ThemesModule } from "../themes/themes.module.js";
 import { ToolsModule } from "../tools/tools.module.js";
 import { AccountsOperations } from "./ops/accounts.ops.js";
 import { AdminOperations } from "./ops/admin.ops.js";
@@ -48,6 +49,7 @@ import { PluginsOperations } from "./ops/plugins.ops.js";
 import { PreviewersOperations } from "./ops/previewers.ops.js";
 import { RequestsOperations } from "./ops/requests.ops.js";
 import { SkillsOperations } from "./ops/skills.ops.js";
+import { ThemesOperations } from "./ops/themes.ops.js";
 import { PlatformModule } from "./platform.module.js";
 /**
  * One provider per domain, each taking `PlatformOperations` as its first constructor argument:
@@ -87,6 +89,8 @@ export const PLATFORM_OPERATION_PROVIDERS = [
     // Task 11b: environments, agent skills
     EnvironmentsOperations,
     AgentSkillsOperations,
+    // themes (themes spec §9)
+    ThemesOperations,
 ];
 /**
  * The `Platform` tool's operations (ruling P2): one provider per domain, each registering its
@@ -115,6 +119,7 @@ PlatformOpsModule = __decorate([
             EnvironmentsModule,
             BackgroundModule,
             FilesModule,
+            ThemesModule,
         ],
         providers: [...PLATFORM_OPERATION_PROVIDERS],
     })

package/dist/platform/route-schemas.js

@@ -20,6 +20,7 @@ import { INBOX_ROUTES } from "../inbox/inbox.schemas.js";
 import { ORG_MODEL_ROUTES } from "../models/org-models.schemas.js";
 import { ORG_ROUTES, ORG_SETTINGS_ROUTES } from "../orgs/orgs.schemas.js";
 import { SKILL_ROUTES } from "../skills/skills.schemas.js";
+import { THEME_ROUTES } from "../themes/themes.schemas.js";
 import { APPROVAL_ROUTES } from "../tools/approvals.schemas.js";
 import { CONNECTOR_ROUTES } from "../tools/connectors.schemas.js";
 /**
@@ -60,4 +61,6 @@ export const ROUTE_SCHEMAS = [
     ...ENVIRONMENT_ROUTES,
     // personal preferences (run context spec §3.4)
     ...ME_ROUTES,
+    // themes (themes spec §9)
+    ...THEME_ROUTES,
 ];

package/dist/themes/render-css.d.ts

@@ -0,0 +1,12 @@
+import { type ParsedTheme } from "@capybara-hq/plugin-sdk";
+/**
+ * The stylesheet of a stored theme (themes spec §8): each scheme's overrides under
+ * `:root[data-theme="<scheme>"]` (a single-scheme theme: its whole scheme, the same block under
+ * both selectors, with `color-scheme: <scheme>`), an `@font-face` per font (`src` from
+ * `assetUrl(<the font's path as stored>)`, the one URL builder), and each font role's stack with
+ * the theme's families first, then the built-in stack. Every stored value is re-validated (token
+ * names against the overridable list, values against the SDK grammar, radius 0-16, families,
+ * paths, weights, styles, roles); one that fails is left out, and `onSkipped` (when given and
+ * something was skipped) is called once with the paths of every skipped value.
+ */
+export declare function renderThemeCss(theme: ParsedTheme, assetUrl: (pluginPath: string) => string, onSkipped?: (paths: string[]) => void): string;