@capybara-hq/kernel 0.1.0-rc.10 → 0.1.0-rc.12

package/dist/orgs/settings.service.js

@@ -17,6 +17,7 @@ import { KernelConfigService } from "../infra/config/kernel-config.service.js";
 import { KernelDb } from "../infra/database/kernel-db.js";
 import { TransactionHost } from "../infra/database/transaction-host.js";
 import { Transactional } from "../infra/database/transactional.decorator.js";
+import { assertThemeOnIn } from "../themes/theme-state.js";
 import { IanaTimeZone } from "../time-zone.js";
 import { OrgLock } from "./org-lock.js";
 /**
@@ -33,6 +34,8 @@ import { OrgLock } from "./org-lock.js";
  *   `read-only` (writes listed as unavailable) or `off` (default `on`).
  * - `timeZone`: the org's default time zone (IANA; absent = UTC) for senders without one of their
  *   own (run context spec §3.3); an invalid stored value reads as absent.
+ * - `theme`: the org's default theme and whether members may pick their own (themes spec §7);
+ *   absent (or an invalid stored value) = follow the platform, personal picks allowed.
  */
 /** 组织沙箱出站白名单的主机数上限。 */
 export const ORG_SANDBOX_ALLOW_HOSTS_MAX = 200;
@@ -59,6 +62,19 @@ export const SandboxEgressSettingSchema = z
         .optional(),
 })
     .strict();
+/**
+ * The org's theme setting (themes spec §7): `id` a theme on in the org (a `platform_themes` id),
+ * null = follow the platform's default; `personal: "locked"` hides the personal picker in the org
+ * and resolution ignores personal picks there.
+ */
+export const OrgThemeSettingSchema = z
+    .object({
+    id: z.string().min(1).max(200).nullable(),
+    personal: z.enum(["allowed", "locked"]),
+})
+    .strict();
+/** The theme setting of an org that has none: follow the platform, personal picks allowed. */
+export const DEFAULT_ORG_THEME = { id: null, personal: "allowed" };
 export const OrgSettingsSchema = z.object({
     toolSearch: z.enum(["on", "off"]).default("on").catch("on"),
     locale: z.enum(["zh", "en"]).default("en").catch("en"),
@@ -69,6 +85,8 @@ export const OrgSettingsSchema = z.object({
     wakeOnBackgroundTask: z.boolean().optional().catch(undefined),
     /** The org's default time zone (run context spec §3.3); absent = UTC. */
     timeZone: IanaTimeZone.optional().catch(undefined),
+    /** The org's default theme and personal lock (themes spec §7); absent = {@link DEFAULT_ORG_THEME}. */
+    theme: OrgThemeSettingSchema.optional().catch(undefined),
 });
 /** PATCH 体：只改给出的字段；未知字段 → 400。 */
 export const OrgSettingsPatchSchema = z
@@ -83,6 +101,11 @@ export const OrgSettingsPatchSchema = z
     sandboxEgress: SandboxEgressSettingSchema.nullable().optional(),
     /** The org's default time zone (IANA); null clears it (UTC). */
     timeZone: IanaTimeZone.nullable().optional(),
+    /**
+     * The org's default theme (`id`: a theme on in the org, else 400 `theme.not_available`; null
+     * follows the platform) and whether members may pick their own; null clears it.
+     */
+    theme: OrgThemeSettingSchema.nullable().optional(),
 })
     .strict();
 /**
@@ -204,10 +227,17 @@ let OrgSettingsService = class OrgSettingsService {
             delete after.wakeOnBackgroundTask;
         if (after.timeZone === undefined)
             delete after.timeZone;
+        if (after.theme === undefined)
+            delete after.theme;
         if (sameSettings(before, after))
             return before;
+        // Lock order: the org row (orgLock above), then the theme's catalog item and its row FOR
+        // SHARE (assertThemeOnIn), then the check, so no scope writer changes what it read first
+        if (patch.theme?.id != null && patch.theme.id !== before.theme?.id) {
+            await assertThemeOnIn(this.db.db, orgId, patch.theme.id);
+        }
         // 与存量合并：保留本版本不认识的键（清除的 sandboxEgress 不留在存量里）
-        const { sandboxEgress: _old, wakeOnBackgroundTask: _oldWake, timeZone: _oldZone, ...rest } = stored;
+        const { sandboxEgress: _old, wakeOnBackgroundTask: _oldWake, timeZone: _oldZone, theme: _oldTheme, ...rest } = stored;
         await this.db
             .updateTable("orgs")
             .set({ settings: JSON.stringify({ ...rest, ...after }) })

package/dist/platform/exclusions.js

@@ -608,6 +608,16 @@ export const PLATFORM_EXCLUSIONS = [
         category: "secret",
         reason: "Writes the caller's connector credentials",
     },
+    {
+        route: "GET /api/v1/orgs/:orgId/connectors/:connectorId/tool-policies/me",
+        category: "internal",
+        reason: "Display list of the connector card's 权限 sheet; connectors.get gives an agent the tools and their org defaults",
+    },
+    {
+        route: "PUT /api/v1/orgs/:orgId/connectors/:connectorId/tool-policies/me",
+        category: "human-only",
+        reason: "A member's own tool policies decide what agents may call with their connection without asking; an agent must never loosen them for itself",
+    },
     {
         route: "DELETE /api/v1/orgs/:orgId/connectors/:connectorId/credentials/me",
         category: "secret",
@@ -664,4 +674,20 @@ export const PLATFORM_EXCLUSIONS = [
         category: "transport",
         reason: "Server-sent event stream of UI invalidations",
     },
+    // themes (themes spec §8-§9)
+    {
+        route: "GET /api/v1/themes/:id/:version/theme.css",
+        category: "transport",
+        reason: "Serves a theme version's stylesheet to the browser; an agent reads themes.list",
+    },
+    {
+        route: "GET /api/v1/themes/:id/:version/assets/:file",
+        category: "transport",
+        reason: "Serves a theme version's font and logo bytes to the browser",
+    },
+    {
+        route: "GET /api/v1/platform/theme",
+        category: "transport",
+        reason: "The platform default theme for the web's pages before sign-in; no session to act for",
+    },
 ];

package/dist/platform/operation.js

@@ -12,7 +12,7 @@ export const operationDomain = (id) => id.slice(0, id.indexOf("."));
 export const PLATFORM_DOMAINS = [
     {
         id: "platform",
-        description: "What this platform is, its tool families, what you and this agent can do, and your own preferences (time zone).",
+        description: "What this platform is, its tool families, what you and this agent can do, and your own preferences (time zone, theme).",
     },
     { id: "skills", description: "The org's skill library: list, read, create, switch on or off." },
     {
@@ -81,10 +81,14 @@ export const PLATFORM_DOMAINS = [
     },
     {
         id: "org-settings",
-        description: "The org's settings (tool search, language, sandbox policy, the Platform tool switch): read and change.",
+        description: "The org's settings (tool search, language, sandbox policy, the Platform tool switch, the default theme): read and change.",
     },
     {
         id: "environments",
         description: "Your own cloud environments (the workspaces your conversations run in): list, read, create, rename, delete, wipe the files.",
     },
+    {
+        id: "themes",
+        description: "The themes on in this org, the one in effect for you and the org's theme setting: list. Themes are set through your preferences, the org settings and the deployment settings.",
+    },
 ];

package/dist/platform/ops/admin.ops.d.ts

@@ -10,6 +10,7 @@ import { PricesService } from "../../models/prices.js";
 import { ModelPurposesService } from "../../models/purposes.js";
 import { OrgsService } from "../../orgs/orgs.service.js";
 import { ProviderRegistry } from "../../runtime/providers.js";
+import { ThemesService } from "../../themes/themes.service.js";
 import { PlatformOperations } from "../registry.js";
 /**
  * Admin console operations of the `Platform` tool (spec §14.2): the dashboard totals, the
@@ -30,7 +31,8 @@ export declare class AdminOperations implements OnModuleInit {
     private readonly enablement;
     private readonly prices;
     private readonly purposes;
-    constructor(registry: PlatformOperations, extensions: ExtensionAdmin, orgs: OrgsService, accounts: AccountsService, catalogRequests: CatalogRequestsService, settings: SettingsService, providers: ProviderRegistry, displayNames: ExtensionDisplayNames, extensionRegistry: ExtensionRegistry, enablement: ModelEnablement, prices: PricesService, purposes: ModelPurposesService);
+    private readonly themes;
+    constructor(registry: PlatformOperations, extensions: ExtensionAdmin, orgs: OrgsService, accounts: AccountsService, catalogRequests: CatalogRequestsService, settings: SettingsService, providers: ProviderRegistry, displayNames: ExtensionDisplayNames, extensionRegistry: ExtensionRegistry, enablement: ModelEnablement, prices: PricesService, purposes: ModelPurposesService, themes: ThemesService);
     private assertProvider;
     onModuleInit(): void;
 }

package/dist/platform/ops/admin.ops.js

@@ -25,6 +25,7 @@ import { purposeTargetOf } from "../../models/purposes.controller.js";
 import { ModelPurposesService, PURPOSE_PUT, withDeclaredByNames } from "../../models/purposes.js";
 import { OrgsService } from "../../orgs/orgs.service.js";
 import { ProviderRegistry } from "../../runtime/providers.js";
+import { ThemesService } from "../../themes/themes.service.js";
 import { defineOperation } from "../operation.js";
 import { PlatformOperations } from "../registry.js";
 import { precheckBy, viaAgent } from "./errors.js";
@@ -38,6 +39,7 @@ const SettingsInput = DEPLOYMENT_SETTINGS_PATCH.pick({
     customConnectors: true,
     customSkills: true,
     orgMarketplaceBrowse: true,
+    uiTheme: true,
 }).strict();
 const ProviderId = ModelProviderParams.shape.provider.describe("The model provider (models.platform-list), e.g. the plugin name of its extension.");
 /** `provider/model` of a purpose target, or null. */
@@ -61,7 +63,8 @@ let AdminOperations = class AdminOperations {
     enablement;
     prices;
     purposes;
-    constructor(registry, extensions, orgs, accounts, catalogRequests, settings, providers, displayNames, extensionRegistry, enablement, prices, purposes) {
+    themes;
+    constructor(registry, extensions, orgs, accounts, catalogRequests, settings, providers, displayNames, extensionRegistry, enablement, prices, purposes, themes) {
         this.registry = registry;
         this.extensions = extensions;
         this.orgs = orgs;
@@ -74,6 +77,7 @@ let AdminOperations = class AdminOperations {
         this.enablement = enablement;
         this.prices = prices;
         this.purposes = purposes;
+        this.themes = themes;
     }
     assertProvider(provider) {
         if (!this.extensionRegistry.list("model-provider").some((e) => e.plugin === provider)) {
@@ -117,7 +121,7 @@ let AdminOperations = class AdminOperations {
             }),
             defineOperation({
                 id: "admin.update-settings",
-                description: "Change deployment settings (super admin); give only the keys to change: orgCreation (anyone or super_admin), priceCurrency (ISO 4217 code), customConnectors / customSkills (allow or deny: whether orgs may create their own instead of installing from the catalog), orgMarketplaceBrowse (true or false). Per-org limits are orgs.set-limits.",
+                description: "Change deployment settings (super admin); give only the keys to change: orgCreation (anyone or super_admin), priceCurrency (ISO 4217 code), customConnectors / customSkills (allow or deny: whether orgs may create their own instead of installing from the catalog), orgMarketplaceBrowse (true or false), uiTheme ({ id }: the platform default theme, a platform theme whose scope is all, or null for the built-in theme; it is what every org falls back to and what the sign-in pages show). Per-org limits are orgs.set-limits.",
                 input: SettingsInput.refine((b) => Object.keys(b).length > 0, {
                     message: "at least one setting is required",
                 }),
@@ -132,6 +136,10 @@ let AdminOperations = class AdminOperations {
                         code: "validation_failed",
                         next: "Fix the values as the message says (admin.settings shows the current ones).",
                     },
+                    {
+                        code: "theme.not_available",
+                        next: "The platform default must be a platform theme whose scope is all, not disabled, and on in every organization. When the details list orgs, the theme is off in those organizations: tell the person their names, then choose another theme (plugins.components with kind theme lists them) or have it switched on in those organizations first; { id: null } sets the built-in theme.",
+                    },
                 ],
                 precheck: async (i) => {
                     const r = DeploymentSettingsBody.safeParse(i);
@@ -139,11 +147,20 @@ let AdminOperations = class AdminOperations {
                         ? { ok: true }
                         : { ok: false, code: "validation_failed", message: r.error.issues[0]?.message ?? "" };
                 },
-                summary: (i) => {
-                    const parts = Object.entries(i).map(([k, v]) => `${k}=${String(v)}`);
+                summary: async (i) => {
+                    const { uiTheme, ...rest } = i;
+                    const parts = Object.entries(rest).map(([k, v]) => `${k}=${String(v)}`);
+                    const zh = [...parts];
+                    const en = [...parts];
+                    if (uiTheme !== undefined) {
+                        // the theme by its name (the super admin sees every theme), the built-in one by name
+                        const name = uiTheme.id === null ? null : await this.themes.nameOf(uiTheme.id);
+                        zh.push(`uiTheme=${uiTheme.id === null ? "内置主题" : (name?.zh ?? uiTheme.id)}`);
+                        en.push(`uiTheme=${uiTheme.id === null ? "built-in theme" : (name?.en ?? uiTheme.id)}`);
+                    }
                     return {
-                        zh: `修改平台部署设置：${parts.join("，")}`,
-                        en: `Change the deployment settings: ${parts.join(", ")}`,
+                        zh: `修改平台部署设置：${zh.join("，")}`,
+                        en: `Change the deployment settings: ${en.join(", ")}`,
                     };
                 },
                 run: (input, ctx) => this.settings.update(input, ctx.actorAccountId, undefined, viaAgent("admin.update-settings", ctx)),
@@ -384,6 +401,7 @@ AdminOperations = __decorate([
     __param(8, Inject(ExtensionRegistry)),
     __param(9, Inject(ModelEnablement)),
     __param(10, Inject(PricesService)),
-    __param(11, Inject(ModelPurposesService))
+    __param(11, Inject(ModelPurposesService)),
+    __param(12, Inject(ThemesService))
 ], AdminOperations);
 export { AdminOperations };

package/dist/platform/ops/agents.ops.js

@@ -40,6 +40,15 @@ const RouteSkills = Def.skills.unwrap();
 const Skills = RouteSkills.pick({ pinned: true })
     .extend({ orgSkills: RouteSkills.shape.orgSkills.unwrap() })
     .strict();
+/**
+ * Whether `next` sets an `allow` that `current` does not have (decision 2026-11-09: `allow` on a
+ * connector tool lets an agent call it without asking). Such a change is confirmed every time and
+ * never remembered, so an agent can never loosen its own policies on a grant the person remembered
+ * for ordinary edits.
+ */
+function addsAllow(next, current) {
+    return Object.entries(next ?? {}).some(([k, v]) => v === "allow" && current?.[k] !== "allow");
+}
 /** The definition fields an agent can set through the tool; the rest keep the web's defaults. */
 const Fields = {
     name: Def.name,
@@ -156,8 +165,10 @@ let AgentsOperations = class AgentsOperations {
      * `agents.update`'s class (spec §13): `personal` (may be remembered) only on a private agent the
      * actor owns; any other agent the actor may edit is shared, so each change is confirmed.
      */
-    async updateClass(agentId, ctx) {
+    async updateClass(agentId, toolPolicies, ctx) {
         const a = await this.agents.get(ctx.orgId, agentId, ctx.actorAccountId);
+        if (addsAllow(toolPolicies, a.definition.toolPolicies))
+            return "org";
         return a.visibility === "private" && a.ownerAccountId === ctx.actorAccountId
             ? "personal"
             : "org";
@@ -221,6 +232,8 @@ let AgentsOperations = class AgentsOperations {
                 omits: ["memberIds", "profile"],
                 loosens: { visibility: "optional: the operation creates private agents only" },
                 confirm: "personal",
+                // an `allow` loosens: never on a remembered grant
+                confirmFor: async (i) => addsAllow(i.definition.toolPolicies, undefined) ? "org" : "personal",
                 summary: (i) => ({
                     zh: `新建私有智能体「${i.definition.name}」`,
                     en: `Create private agent "${i.definition.name}"`,
@@ -246,7 +259,7 @@ let AgentsOperations = class AgentsOperations {
             }),
             defineOperation({
                 id: "agents.update",
-                description: 'Change an agent you may edit: your own, private or shared, and as an org admin any agent of the org. Send the version you read from agents.get and only the fields to change; the others keep their value. The description (one short paragraph, "" removes it) is saved with the definition; the avatar and quick actions are changed with agents.update-profile. disabledTools replaces the whole list of turned-off tools (send [] to turn every tool on). A version that is no longer current is refused, so read the agent again first. The visibility cannot be changed here (that is done on the agents page of the web app). A change to your own private agent may be remembered by the person; a change to a shared agent is confirmed every time.',
+                description: 'Change an agent you may edit: your own, private or shared, and as an org admin any agent of the org. Send the version you read from agents.get and only the fields to change; the others keep their value. The description (one short paragraph, "" removes it) is saved with the definition; the avatar and quick actions are changed with agents.update-profile. disabledTools replaces the whole list of turned-off tools (send [] to turn every tool on). A version that is no longer current is refused, so read the agent again first. The visibility cannot be changed here (that is done on the agents page of the web app). A change to your own private agent may be remembered by the person; a change to a shared agent, or one that sets a tool policy to allow, is confirmed every time.',
                 input: z
                     .object({
                     agentId: AgentId,
@@ -289,7 +302,7 @@ let AgentsOperations = class AgentsOperations {
                         next: "The agent changed since you read it: read it again with agents.get, then send its current version.",
                     },
                 ],
-                confirmFor: (i, ctx) => this.updateClass(i.agentId, ctx),
+                confirmFor: (i, ctx) => this.updateClass(i.agentId, i.toolPolicies, ctx),
                 summary: async (i, ctx) => {
                     const a = await this.agents.get(ctx.orgId, i.agentId, ctx.actorAccountId);
                     const name = named(a.definition.name);
@@ -353,7 +366,7 @@ let AgentsOperations = class AgentsOperations {
                 // needs no declaration: an input that accepts less than the route passes the parity test.
                 omits: ["expectedUpdatedAt"],
                 confirm: "personal",
-                confirmFor: (i, ctx) => this.updateClass(i.agentId, ctx),
+                confirmFor: (i, ctx) => this.updateClass(i.agentId, undefined, ctx),
                 errors: [
                     {
                         code: "agent.not_found",
@@ -493,7 +506,7 @@ let AgentsOperations = class AgentsOperations {
                 confirm: "personal",
                 // destructive: asked every time and never remembered, a shared agent as an org write
                 rememberable: false,
-                confirmFor: (i, ctx) => this.updateClass(i.agentId, ctx),
+                confirmFor: (i, ctx) => this.updateClass(i.agentId, undefined, ctx),
                 errors: [
                     {
                         code: "agent.not_found",
@@ -578,7 +591,7 @@ let AgentsOperations = class AgentsOperations {
                 authz: { orgAction: "agents.create" },
                 mirrors: ["POST /api/v1/orgs/:orgId/agents/:agentId/pending-connectors/:key/bind"],
                 confirm: "personal",
-                confirmFor: (i, ctx) => this.updateClass(i.agentId, ctx),
+                confirmFor: (i, ctx) => this.updateClass(i.agentId, undefined, ctx),
                 errors: [
                     {
                         code: "agent.pending_connector_not_found",

package/dist/platform/ops/components.ops.js

@@ -32,6 +32,7 @@ const LABEL = {
     skill: { en: "platform skill", zh: "平台技能" },
     agent_template: { en: "platform agent template", zh: "平台智能体模板" },
     connector_template: { en: "platform connector template", zh: "平台连接器模板" },
+    theme: { en: "platform theme", zh: "平台主题" },
 };
 const REFUSED = {
     "plugin.disabled": "This component is disabled by the super admin and cannot be switched on",

package/dist/platform/ops/org-settings.ops.d.ts

@@ -1,5 +1,6 @@
 import { type OnModuleInit } from "@nestjs/common";
 import { OrgSettingsService } from "../../orgs/settings.service.js";
+import { ThemesService } from "../../themes/themes.service.js";
 import { PlatformOperations } from "../registry.js";
 /**
  * Org settings operations of the `Platform` tool (spec §14): read the settings every member sees,
@@ -11,6 +12,7 @@ import { PlatformOperations } from "../registry.js";
 export declare class OrgSettingsOperations implements OnModuleInit {
     private readonly registry;
     private readonly settings;
-    constructor(registry: PlatformOperations, settings: OrgSettingsService);
+    private readonly themes;
+    constructor(registry: PlatformOperations, settings: OrgSettingsService, themes: ThemesService);
     onModuleInit(): void;
 }

package/dist/platform/ops/org-settings.ops.js

@@ -10,6 +10,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 import { Inject, Injectable } from "@nestjs/common";
 import { z } from "zod";
 import { OrgSettingsPatchSchema, OrgSettingsService } from "../../orgs/settings.service.js";
+import { ThemesService } from "../../themes/themes.service.js";
 import { defineOperation } from "../operation.js";
 import { PlatformOperations } from "../registry.js";
 import { precheckBy, viaAgent } from "./errors.js";
@@ -28,15 +29,17 @@ const show = (v) => (v === null ? "default" : JSON.stringify(v));
 let OrgSettingsOperations = class OrgSettingsOperations {
     registry;
     settings;
-    constructor(registry, settings) {
+    themes;
+    constructor(registry, settings, themes) {
         this.registry = registry;
         this.settings = settings;
+        this.themes = themes;
     }
     onModuleInit() {
         this.registry.register([
             defineOperation({
                 id: "org-settings.get",
-                description: "Read this org's settings: toolSearch, locale, sandboxToolPolicy, platformTool (on, read-only or off), sandboxEgress and wakeOnBackgroundTask (absent means it follows the deployment), the deployment's sandbox egress default and the sandbox cpu / memory limits in effect.",
+                description: "Read this org's settings: toolSearch, locale, sandboxToolPolicy, platformTool (on, read-only or off), sandboxEgress and wakeOnBackgroundTask (absent means it follows the deployment), theme (the org's default theme id, null or absent following the platform, and personal: allowed or locked), the deployment's sandbox egress default and the sandbox cpu / memory limits in effect.",
                 input: z.object({}).strict(),
                 example: {},
                 authz: { orgAction: "org.read" },
@@ -50,7 +53,7 @@ let OrgSettingsOperations = class OrgSettingsOperations {
             }),
             defineOperation({
                 id: "org-settings.update",
-                description: "Change this org's settings (org admins). Give only the settings to change; null clears sandboxEgress or wakeOnBackgroundTask so they follow the deployment again. Setting platformTool to off or read-only takes effect from the next call and cuts this Platform tool off in the org, so say so before asking; an org admin switches it back on in the web settings.",
+                description: "Change this org's settings (org admins). Give only the settings to change; null clears sandboxEgress or wakeOnBackgroundTask so they follow the deployment again. theme: { id, personal } sets the org's default theme (a theme id from themes.list, or null to follow the platform) and whether members may pick their own (allowed) or not (locked); null clears it. Setting platformTool to off or read-only takes effect from the next call and cuts this Platform tool off in the org, so say so before asking; an org admin switches it back on in the web settings.",
                 input: OrgSettingsPatchSchema.refine((i) => Object.values(i).some((v) => v !== undefined), {
                     message: "give at least one setting",
                 }),
@@ -63,22 +66,43 @@ let OrgSettingsOperations = class OrgSettingsOperations {
                         code: "org.sandbox_egress_not_allowed",
                         next: "This deployment disables sandbox network access, so the org can only set sandboxEgress to none; ask the super admin to change sandbox.limits.egress.",
                     },
+                    {
+                        code: "theme.not_available",
+                        next: "Pick a theme id that themes.list shows for this org, or null to follow the platform.",
+                    },
                     {
                         code: "validation_failed",
                         next: "Fix the setting as the message says (org-settings.get shows the current values).",
                     },
                 ],
                 precheck: (i) => precheckBy(async () => this.settings.check(i)),
-                summary: (i) => {
-                    const parts = Object.entries(i)
+                summary: async (i, ctx) => {
+                    const { theme, ...rest } = i;
+                    const parts = Object.entries(rest)
                         .filter(([, v]) => v !== undefined)
                         .map(([k, v]) => `${k} → ${show(v)}`);
+                    const zhParts = [...parts];
+                    const enParts = [...parts];
+                    if (theme !== undefined) {
+                        // the theme by its name when it is on in this org; any other id is shown as given
+                        const name = theme?.id == null ? null : await this.themes.nameIn(ctx.orgId, theme.id);
+                        if (theme === null) {
+                            zhParts.push("theme → 清除（跟随平台，允许个人选择）");
+                            enParts.push("theme → cleared (follow the platform, personal picks allowed)");
+                        }
+                        else {
+                            const zh = theme.id === null ? "跟随平台" : (name?.zh ?? theme.id);
+                            const en = theme.id === null ? "follow the platform" : (name?.en ?? theme.id);
+                            zhParts.push(`theme → ${zh}（个人选择：${theme.personal === "locked" ? "锁定" : "允许"}）`);
+                            enParts.push(`theme → ${en} (personal picks ${theme.personal === "locked" ? "locked" : "allowed"})`);
+                        }
+                    }
                     const warn = i.platformTool === "off" || i.platformTool === "read-only";
                     return {
-                        zh: `修改组织设置：${parts.join("，")}${warn
+                        zh: `修改组织设置：${zhParts.join("，")}${warn
                             ? "（之后智能体不能再用平台工具" + (i.platformTool === "off" ? "" : "写入") + "）"
                             : ""}`,
-                        en: `Update the org settings: ${parts.join(", ")}${warn
+                        en: `Update the org settings: ${enParts.join(", ")}${warn
                             ? `; from the next call the Platform tool is ${i.platformTool === "off" ? "off" : "read-only"} in this org`
                             : ""}`,
                     };
@@ -97,6 +121,7 @@ let OrgSettingsOperations = class OrgSettingsOperations {
 OrgSettingsOperations = __decorate([
     Injectable(),
     __param(0, Inject(PlatformOperations)),
-    __param(1, Inject(OrgSettingsService))
+    __param(1, Inject(OrgSettingsService)),
+    __param(2, Inject(ThemesService))
 ], OrgSettingsOperations);
 export { OrgSettingsOperations };

package/dist/platform/ops/orgs.ops.js

@@ -158,6 +158,7 @@ let OrgsOperations = class OrgsOperations {
                     "customConnectors",
                     "customSkills",
                     "orgMarketplaceBrowse",
+                    "uiTheme",
                 ],
                 extras: ["orgId", "runConcurrency", "sandbox", "subagents"],
                 confirm: "platform",

package/dist/platform/ops/platform.ops.d.ts

@@ -2,6 +2,7 @@ import { type OnModuleInit } from "@nestjs/common";
 import { AgentsService } from "../../agents/agents.service.js";
 import { AccountsService } from "../../identity/accounts.js";
 import { OrgSettingsService } from "../../orgs/settings.service.js";
+import { ThemesService } from "../../themes/themes.service.js";
 import { ToolRegistry } from "../../tools/registry.js";
 import { PlatformActor } from "../actor.js";
 import { PlatformOperations } from "../registry.js";
@@ -16,7 +17,8 @@ export declare class PlatformOperationsProvider implements OnModuleInit {
     private readonly settings;
     private readonly tools;
     private readonly accounts;
-    constructor(registry: PlatformOperations, actor: PlatformActor, agents: AgentsService, settings: OrgSettingsService, tools: ToolRegistry, accounts: AccountsService);
+    private readonly themes;
+    constructor(registry: PlatformOperations, actor: PlatformActor, agents: AgentsService, settings: OrgSettingsService, tools: ToolRegistry, accounts: AccountsService, themes: ThemesService);
     /**
      * The agent's tools by the keys the model sees, as the registry resolves them for a run (tools
      * default-on spec §8): every tool the org offers that the definition does not turn off, builtins

package/dist/platform/ops/platform.ops.js

@@ -14,6 +14,7 @@ import { AccountsService } from "../../identity/accounts.js";
 import { PreferencesSchema } from "../../identity/me.schemas.js";
 import { can } from "../../orgs/roles.js";
 import { effectiveSandboxEgress, OrgSettingsService } from "../../orgs/settings.service.js";
+import { ThemesService } from "../../themes/themes.service.js";
 import { SANDBOX_TOOL_NAMES } from "../../tools/builtin-names.js";
 import { ToolRegistry } from "../../tools/registry.js";
 import { PlatformActor } from "../actor.js";
@@ -47,13 +48,15 @@ let PlatformOperationsProvider = class PlatformOperationsProvider {
     settings;
     tools;
     accounts;
-    constructor(registry, actor, agents, settings, tools, accounts) {
+    themes;
+    constructor(registry, actor, agents, settings, tools, accounts, themes) {
         this.registry = registry;
         this.actor = actor;
         this.agents = agents;
         this.settings = settings;
         this.tools = tools;
         this.accounts = accounts;
+        this.themes = themes;
     }
     /**
      * The agent's tools by the keys the model sees, as the registry resolves them for a run (tools
@@ -152,7 +155,7 @@ let PlatformOperationsProvider = class PlatformOperationsProvider {
             }),
             defineOperation({
                 id: "platform.preferences",
-                description: "Read your own preferences: your time zone (an IANA name such as Asia/Shanghai), or null when it follows the time zone of the browser you send messages from. The run context already tells you the zone in effect for this message.",
+                description: "Read your own preferences: your time zone (an IANA name such as Asia/Shanghai, or null when it follows the time zone of the browser you send messages from; the run context already tells you the zone in effect for this message) and your theme (a theme id, or null when you follow the org's theme; themes.list names them).",
                 input: EMPTY,
                 example: {},
                 // any signed-in person may call the route; every run's actor is a member of this org
@@ -163,8 +166,10 @@ let PlatformOperationsProvider = class PlatformOperationsProvider {
             }),
             defineOperation({
                 id: "platform.set-preferences",
-                description: "Set your own time zone (an IANA name such as Europe/Berlin), or null to follow the time zone of the browser you send messages from. It applies to the messages you send afterwards, on the web and in IM; the current run keeps its zone.",
-                input: PreferencesSchema,
+                description: "Change your own preferences; give only the ones to change, the others keep their values. timeZone: an IANA name such as Europe/Berlin, or null to follow the time zone of the browser you send messages from; it applies to the messages you send afterwards, on the web and in IM (the current run keeps its zone). theme: a theme id from themes.list (it applies in every org where that theme is on and personal picks are allowed), or null to follow the org's theme.",
+                input: PreferencesSchema.refine((i) => Object.values(i).some((v) => v !== undefined), {
+                    message: "give timeZone, theme or both",
+                }),
                 example: { timeZone: "Asia/Shanghai" },
                 authz: { orgAction: "agents.use" },
                 mirrors: ["PUT /api/v1/me/preferences"],
@@ -174,20 +179,41 @@ let PlatformOperationsProvider = class PlatformOperationsProvider {
                         code: "validation_failed",
                         next: "Use an IANA time zone name such as Asia/Shanghai or America/New_York, or null.",
                     },
+                    {
+                        code: "theme.not_available",
+                        next: "Pick a theme id that themes.list shows for this org, or null to follow the org's theme.",
+                    },
                 ],
                 summary: async (input, ctx) => {
-                    const now = (await this.accounts.preferences(ctx.actorAccountId)).timeZone;
-                    const from = { zh: now ?? "跟随浏览器", en: now ?? "follow the browser" };
-                    const to = {
-                        zh: input.timeZone ?? "跟随浏览器",
-                        en: input.timeZone ?? "follow the browser",
-                    };
-                    return {
-                        zh: `把你的时区从「${from.zh}」改为「${to.zh}」`,
-                        en: `Change your time zone from "${from.en}" to "${to.en}"`,
-                    };
+                    const now = await this.accounts.preferences(ctx.actorAccountId);
+                    const zh = [];
+                    const en = [];
+                    if (input.timeZone !== undefined) {
+                        const from = now.timeZone;
+                        zh.push(`把你的时区从「${from ?? "跟随浏览器"}」改为「${input.timeZone ?? "跟随浏览器"}」`);
+                        en.push(`Change your time zone from "${from ?? "follow the browser"}" to "${input.timeZone ?? "follow the browser"}"`);
+                    }
+                    if (input.theme !== undefined) {
+                        // only themes on in one of your orgs are named; any other id is shown as given
+                        const name = async (id) => id === null
+                            ? null
+                            : ((await this.themes.nameForAccount(ctx.actorAccountId, id)) ?? {
+                                en: id,
+                                zh: id,
+                            });
+                        const from = await name(now.theme);
+                        const to = await name(input.theme);
+                        const inZh = (n) => (n === null ? "跟随组织" : n.zh);
+                        const inEn = (n) => (n === null ? "follow the org" : n.en);
+                        zh.push(`把你的主题从「${inZh(from)}」改为「${inZh(to)}」`);
+                        en.push(`Change your theme from "${inEn(from)}" to "${inEn(to)}"`);
+                    }
+                    return { zh: zh.join("；"), en: en.join("; ") };
                 },
-                run: async (input, ctx) => this.accounts.setPreferences(ctx.actorAccountId, { timeZone: input.timeZone }),
+                run: async (input, ctx) => this.accounts.setPreferences(ctx.actorAccountId, {
+                    timeZone: input.timeZone,
+                    theme: input.theme,
+                }),
             }),
         ]);
     }
@@ -199,6 +225,7 @@ PlatformOperationsProvider = __decorate([
     __param(2, Inject(AgentsService)),
     __param(3, Inject(OrgSettingsService)),
     __param(4, Inject(ToolRegistry)),
-    __param(5, Inject(AccountsService))
+    __param(5, Inject(AccountsService)),
+    __param(6, Inject(ThemesService))
 ], PlatformOperationsProvider);
 export { PlatformOperationsProvider };

package/dist/platform/ops/themes.ops.d.ts

@@ -0,0 +1,14 @@
+import { type OnModuleInit } from "@nestjs/common";
+import { ThemesService } from "../../themes/themes.service.js";
+import { PlatformOperations } from "../registry.js";
+/**
+ * Theme operations of the `Platform` tool (themes spec §9): the org's theme listing. Setting a
+ * theme goes through the settings operations (`platform.set-preferences`, `org-settings.update`,
+ * `admin.update-settings`).
+ */
+export declare class ThemesOperations implements OnModuleInit {
+    private readonly registry;
+    private readonly themes;
+    constructor(registry: PlatformOperations, themes: ThemesService);
+    onModuleInit(): void;
+}