@capybara-hq/kernel 0.1.0-rc.11 → 0.1.0-rc.13

package/dist/platform/ops/org-settings.ops.js

@@ -39,7 +39,7 @@ let OrgSettingsOperations = class OrgSettingsOperations {
         this.registry.register([
             defineOperation({
                 id: "org-settings.get",
-                description: "Read this org's settings: toolSearch, locale, sandboxToolPolicy, platformTool (on, read-only or off), sandboxEgress and wakeOnBackgroundTask (absent means it follows the deployment), theme (the org's default theme id, null or absent following the platform, and personal: allowed or locked), the deployment's sandbox egress default and the sandbox cpu / memory limits in effect.",
+                description: "Read this org's settings: toolSearch, locale, sandboxToolPolicy, platformTool (on, read-only or off), sandboxEgress and wakeOnBackgroundTask (absent means it follows the deployment), theme (the org's default theme id, null or absent following the platform, and personal: allowed or locked), uiArrangement (per UI slot, the extension contributions the org hides and their order; a slot not listed follows the platform), the deployment's sandbox egress default and the sandbox cpu / memory limits in effect.",
                 input: z.object({}).strict(),
                 example: {},
                 authz: { orgAction: "org.read" },
@@ -53,7 +53,7 @@ let OrgSettingsOperations = class OrgSettingsOperations {
             }),
             defineOperation({
                 id: "org-settings.update",
-                description: "Change this org's settings (org admins). Give only the settings to change; null clears sandboxEgress or wakeOnBackgroundTask so they follow the deployment again. theme: { id, personal } sets the org's default theme (a theme id from themes.list, or null to follow the platform) and whether members may pick their own (allowed) or not (locked); null clears it. Setting platformTool to off or read-only takes effect from the next call and cuts this Platform tool off in the org, so say so before asking; an org admin switches it back on in the web settings.",
+                description: "Change this org's settings (org admins). Give only the settings to change; null clears sandboxEgress or wakeOnBackgroundTask so they follow the deployment again. theme: { id, personal } sets the org's default theme (a theme id from themes.list, or null to follow the platform) and whether members may pick their own (allowed) or not (locked); null clears it. uiArrangement: { <slot>: { hidden, order } } replaces that slot's entry, where hidden and order list contribution keys <extension>/<contribution> (hidden ones are not listed in the web UI but their pages still open by URL); null for a slot makes it follow the platform again; platform.page is refused. Setting platformTool to off or read-only takes effect from the next call and cuts this Platform tool off in the org, so say so before asking; an org admin switches it back on in the web settings.",
                 input: OrgSettingsPatchSchema.refine((i) => Object.values(i).some((v) => v !== undefined), {
                     message: "give at least one setting",
                 }),

package/dist/platform/ops/orgs.ops.js

@@ -159,6 +159,7 @@ let OrgsOperations = class OrgsOperations {
                     "customSkills",
                     "orgMarketplaceBrowse",
                     "uiTheme",
+                    "uiArrangement",
                 ],
                 extras: ["orgId", "runConcurrency", "sandbox", "subagents"],
                 confirm: "platform",

package/dist/platform/ops/ui.ops.d.ts

@@ -0,0 +1,8 @@
+import { type OnModuleInit } from "@nestjs/common";
+import { PlatformOperations } from "../registry.js";
+/** UI operations of the `Platform` tool (UI slots spec §3): the slot catalog. */
+export declare class UiOperations implements OnModuleInit {
+    private readonly registry;
+    constructor(registry: PlatformOperations);
+    onModuleInit(): void;
+}

package/dist/platform/ops/ui.ops.js

@@ -0,0 +1,41 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { UI_SLOTS } from "@capybara-hq/plugin-sdk";
+import { Inject, Injectable } from "@nestjs/common";
+import { z } from "zod";
+import { defineOperation } from "../operation.js";
+import { PlatformOperations } from "../registry.js";
+/** UI operations of the `Platform` tool (UI slots spec §3): the slot catalog. */
+let UiOperations = class UiOperations {
+    registry;
+    constructor(registry) {
+        this.registry = registry;
+    }
+    onModuleInit() {
+        this.registry.register([
+            defineOperation({
+                id: "ui.slots",
+                description: "List the UI slots an extension can contribute to (id, version, where it is, scope and args, accepted kinds view / embed, minimum role, anchors). Use a slot id as a ui contribution's `slot` in a plugin manifest.",
+                input: z.object({}).strict(),
+                example: {},
+                // any signed-in person may call the route; every run's actor is a member of this org
+                authz: { orgAction: "agents.use" },
+                mirrors: ["GET /api/v1/ui/slots"],
+                confirm: "read",
+                run: async () => ({ slots: UI_SLOTS }),
+            }),
+        ]);
+    }
+};
+UiOperations = __decorate([
+    Injectable(),
+    __param(0, Inject(PlatformOperations))
+], UiOperations);
+export { UiOperations };

package/dist/platform/platform-ops.module.d.ts

@@ -10,7 +10,7 @@ import { ChannelsOperations } from "./ops/channels.ops.js";
 import { ComponentsOperations } from "./ops/components.ops.js";
 import { ConnectorsOperations } from "./ops/connectors.ops.js";
 import { ConversationsOperations } from "./ops/conversations.ops.js";
-import { EnvironmentsOperations } from "./ops/environments.ops.js";
+import { DevicesOperations } from "./ops/devices.ops.js";
 import { EvalsOperations } from "./ops/evals.ops.js";
 import { ExtensionsOperations } from "./ops/extensions.ops.js";
 import { ExtensionsAdminOperations } from "./ops/extensions-admin.ops.js";
@@ -26,11 +26,12 @@ import { PreviewersOperations } from "./ops/previewers.ops.js";
 import { RequestsOperations } from "./ops/requests.ops.js";
 import { SkillsOperations } from "./ops/skills.ops.js";
 import { ThemesOperations } from "./ops/themes.ops.js";
+import { UiOperations } from "./ops/ui.ops.js";
 /**
  * One provider per domain, each taking `PlatformOperations` as its first constructor argument:
  * the parity test in `tools/checks` builds the operations from it without a Nest app.
  */
-export declare const PLATFORM_OPERATION_PROVIDERS: readonly [typeof PlatformOperationsProvider, typeof SkillsOperations, typeof AgentsOperations, typeof AgentTemplatesOperations, typeof PluginsOperations, typeof MarketplacesOperations, typeof RequestsOperations, typeof ConnectorsOperations, typeof ExtensionsOperations, typeof ConversationsOperations, typeof ComponentsOperations, typeof AccountsOperations, typeof OrgsOperations, typeof AdminOperations, typeof CatalogAdminOperations, typeof OrgPluginsOperations, typeof ExtensionsAdminOperations, typeof ModelsOperations, typeof InboxOperations, typeof ApprovalsOperations, typeof ChannelsOperations, typeof OrgSettingsOperations, typeof EvalsOperations, typeof BackgroundOperations, typeof PreviewersOperations, typeof EnvironmentsOperations, typeof AgentSkillsOperations, typeof ThemesOperations];
+export declare const PLATFORM_OPERATION_PROVIDERS: readonly [typeof PlatformOperationsProvider, typeof SkillsOperations, typeof AgentsOperations, typeof AgentTemplatesOperations, typeof PluginsOperations, typeof MarketplacesOperations, typeof RequestsOperations, typeof ConnectorsOperations, typeof ExtensionsOperations, typeof ConversationsOperations, typeof ComponentsOperations, typeof AccountsOperations, typeof OrgsOperations, typeof AdminOperations, typeof CatalogAdminOperations, typeof OrgPluginsOperations, typeof ExtensionsAdminOperations, typeof ModelsOperations, typeof InboxOperations, typeof ApprovalsOperations, typeof ChannelsOperations, typeof OrgSettingsOperations, typeof EvalsOperations, typeof BackgroundOperations, typeof PreviewersOperations, typeof DevicesOperations, typeof AgentSkillsOperations, typeof ThemesOperations, typeof UiOperations];
 /**
  * The `Platform` tool's operations (ruling P2): one provider per domain, each registering its
  * operations into `PlatformOperations` from `onModuleInit`. It imports the domain modules, which

package/dist/platform/platform-ops.module.js

@@ -10,7 +10,7 @@ import { BackgroundModule } from "../background/background.module.js";
 import { CatalogModule } from "../catalog/catalog.module.js";
 import { ChannelsModule } from "../channels/channels.module.js";
 import { ConversationsModule } from "../conversations/conversations.module.js";
-import { EnvironmentsModule } from "../environments/environments.module.js";
+import { DevicesModule } from "../devices/devices.module.js";
 import { EvalsModule } from "../evals/evals.module.js";
 import { ExtensionsModule } from "../extensions/extensions.module.js";
 import { FilesModule } from "../files/files.module.js";
@@ -34,7 +34,7 @@ import { ChannelsOperations } from "./ops/channels.ops.js";
 import { ComponentsOperations } from "./ops/components.ops.js";
 import { ConnectorsOperations } from "./ops/connectors.ops.js";
 import { ConversationsOperations } from "./ops/conversations.ops.js";
-import { EnvironmentsOperations } from "./ops/environments.ops.js";
+import { DevicesOperations } from "./ops/devices.ops.js";
 import { EvalsOperations } from "./ops/evals.ops.js";
 import { ExtensionsOperations } from "./ops/extensions.ops.js";
 import { ExtensionsAdminOperations } from "./ops/extensions-admin.ops.js";
@@ -50,6 +50,7 @@ import { PreviewersOperations } from "./ops/previewers.ops.js";
 import { RequestsOperations } from "./ops/requests.ops.js";
 import { SkillsOperations } from "./ops/skills.ops.js";
 import { ThemesOperations } from "./ops/themes.ops.js";
+import { UiOperations } from "./ops/ui.ops.js";
 import { PlatformModule } from "./platform.module.js";
 /**
  * One provider per domain, each taking `PlatformOperations` as its first constructor argument:
@@ -86,11 +87,13 @@ export const PLATFORM_OPERATION_PROVIDERS = [
     EvalsOperations,
     BackgroundOperations,
     PreviewersOperations,
-    // Task 11b: environments, agent skills
-    EnvironmentsOperations,
+    // Task 11b: devices, agent skills
+    DevicesOperations,
     AgentSkillsOperations,
     // themes (themes spec §9)
     ThemesOperations,
+    // UI slot catalog (UI slots spec §3)
+    UiOperations,
 ];
 /**
  * The `Platform` tool's operations (ruling P2): one provider per domain, each registering its
@@ -116,7 +119,7 @@ PlatformOpsModule = __decorate([
             InboxModule,
             ChannelsModule,
             EvalsModule,
-            EnvironmentsModule,
+            DevicesModule,
             BackgroundModule,
             FilesModule,
             ThemesModule,

package/dist/platform/route-schemas.js

@@ -11,7 +11,7 @@ import { ORG_EXTENSION_ROUTES } from "../catalog/org-extension.schemas.js";
 import { ORG_PLUGIN_UPLOAD_ROUTES } from "../catalog/org-plugin-uploads.schemas.js";
 import { CHANNEL_ROUTES } from "../channels/channels.schemas.js";
 import { CONVERSATION_ROUTES } from "../conversations/conversations.schemas.js";
-import { ENVIRONMENT_ROUTES } from "../environments/environments.schemas.js";
+import { DEVICE_ROUTES } from "../devices/devices.schemas.js";
 import { EVAL_ROUTES } from "../evals/evals.schemas.js";
 import { EXTENSION_POINT_ROUTES } from "../extensions/point-defaults.schemas.js";
 import { FILE_PREVIEWER_ROUTES } from "../files/previewers.schemas.js";
@@ -23,6 +23,7 @@ import { SKILL_ROUTES } from "../skills/skills.schemas.js";
 import { THEME_ROUTES } from "../themes/themes.schemas.js";
 import { APPROVAL_ROUTES } from "../tools/approvals.schemas.js";
 import { CONNECTOR_ROUTES } from "../tools/connectors.schemas.js";
+import { UI_ROUTES } from "../ui/ui.schemas.js";
 /**
  * Every route a Platform operation mirrors, from the exported `<domain>.schemas.ts` next to each
  * controller. An operation builds its input from these (`pick` / `omit` / `extend`); the parity
@@ -57,10 +58,12 @@ export const ROUTE_SCHEMAS = [
     ...EVAL_ROUTES,
     ...BACKGROUND_ROUTES,
     ...FILE_PREVIEWER_ROUTES,
-    // Task 11b: environments
-    ...ENVIRONMENT_ROUTES,
+    // Task 11b: devices
+    ...DEVICE_ROUTES,
     // personal preferences (run context spec §3.4)
     ...ME_ROUTES,
     // themes (themes spec §9)
     ...THEME_ROUTES,
+    // UI slots (UI slots spec §3)
+    ...UI_ROUTES,
 ];

package/dist/roles/gateway-role.d.ts

@@ -1,15 +1,15 @@
 import type { ExtensionContext } from "@capybara-hq/plugin-sdk";
 import { ChannelSupervisor } from "../channels/supervisor.js";
 import { ChannelWebhooks } from "../channels/webhook.js";
-import { DeviceGateway } from "../devices/device-gateway.js";
 import { ExtensionHost } from "../extensions/host.js";
 import type { GatewayRoutes } from "../http/gateway-routes.js";
 import { KernelConfigService } from "../infra/config/kernel-config.service.js";
+import { LocalDeviceGateway } from "../local-devices/local-device-gateway.js";
 /**
  * The gateway role's parts, driven by `KernelLifecycle` at fixed points of its start order and
  * stop phases: the channel long-connection supervisor (leader election and share) and the webhook
  * inbound (its raw Fastify route, {@link routes}, and its runtime cache's invalidation), and the
- * device connections ({@link DeviceGateway}, `GET /device/connect`). Provided
+ * device connections ({@link LocalDeviceGateway}, `GET /device/connect`). Provided
  * only by `GatewayModule`, so a process without the gateway role has none of them.
  */
 export declare class GatewayRole {
@@ -26,7 +26,7 @@ export declare class GatewayRole {
     private unsubscribeWebhooks;
     /** The supervisor was started: the runs phase stops it. */
     private supervisorStarted;
-    constructor(config: KernelConfigService, host: ExtensionHost, bus: Pick<ExtensionContext["bus"], "subscribe">, supervisor: ChannelSupervisor, webhooks: ChannelWebhooks, devices: DeviceGateway);
+    constructor(config: KernelConfigService, host: ExtensionHost, bus: Pick<ExtensionContext["bus"], "subscribe">, supervisor: ChannelSupervisor, webhooks: ChannelWebhooks, devices: LocalDeviceGateway);
     /**
      * The gateway role's HTTP routes (the channel webhook, the device connection), registered when
      * the app is built.

package/dist/roles/gateway-role.js

@@ -11,15 +11,15 @@ import { Inject, Injectable } from "@nestjs/common";
 import { CHANNEL_CHANGED_TOPIC } from "../channels/connections.service.js";
 import { ChannelSupervisor } from "../channels/supervisor.js";
 import { ChannelWebhooks } from "../channels/webhook.js";
-import { DeviceGateway } from "../devices/device-gateway.js";
 import { ExtensionHost } from "../extensions/host.js";
 import { KernelConfigService } from "../infra/config/kernel-config.service.js";
 import { KERNEL_BUS } from "../infra/tokens.js";
+import { LocalDeviceGateway } from "../local-devices/local-device-gateway.js";
 /**
  * The gateway role's parts, driven by `KernelLifecycle` at fixed points of its start order and
  * stop phases: the channel long-connection supervisor (leader election and share) and the webhook
  * inbound (its raw Fastify route, {@link routes}, and its runtime cache's invalidation), and the
- * device connections ({@link DeviceGateway}, `GET /device/connect`). Provided
+ * device connections ({@link LocalDeviceGateway}, `GET /device/connect`). Provided
  * only by `GatewayModule`, so a process without the gateway role has none of them.
  */
 let GatewayRole = class GatewayRole {
@@ -55,7 +55,7 @@ let GatewayRole = class GatewayRole {
             webhookMaxBodyBytes: config.channels.webhookMaxBodyBytes,
             devices: {
                 gateway: this.devices,
-                maxFrameBytes: config.environments.device.maxFrameBytes,
+                maxFrameBytes: config.devices.local.maxFrameBytes,
             },
         };
     }
@@ -113,6 +113,6 @@ GatewayRole = __decorate([
     __param(2, Inject(KERNEL_BUS)),
     __param(3, Inject(ChannelSupervisor)),
     __param(4, Inject(ChannelWebhooks)),
-    __param(5, Inject(DeviceGateway))
+    __param(5, Inject(LocalDeviceGateway))
 ], GatewayRole);
 export { GatewayRole };

package/dist/roles/gateway.module.d.ts

@@ -1,7 +1,7 @@
 /**
  * The gateway role (nest kernel spec §2), imported by `KernelModule` only when `roles` includes
  * `gateway`: the channel long-connection supervisor, the webhook inbound (served as a raw Fastify
- * route, `http/gateway-routes.ts`), the device connections ({@link DeviceGateway}, `GET
+ * route, `http/gateway-routes.ts`), the device connections ({@link LocalDeviceGateway}, `GET
  * /device/connect`) and {@link GatewayRole}, which `KernelLifecycle` drives. It runs
  * no cron and no queue consumer (those are the worker role's).
  */

package/dist/roles/gateway.module.js

@@ -8,14 +8,14 @@ import { Module } from "@nestjs/common";
 import { ChannelsModule } from "../channels/channels.module.js";
 import { ChannelSupervisor } from "../channels/supervisor.js";
 import { ChannelWebhooks } from "../channels/webhook.js";
-import { DeviceGateway } from "../devices/device-gateway.js";
-import { DevicesModule } from "../devices/devices.module.js";
 import { ExtensionsModule } from "../extensions/extensions.module.js";
+import { LocalDeviceGateway } from "../local-devices/local-device-gateway.js";
+import { LocalDevicesModule } from "../local-devices/local-devices.module.js";
 import { GatewayRole } from "./gateway-role.js";
 /**
  * The gateway role (nest kernel spec §2), imported by `KernelModule` only when `roles` includes
  * `gateway`: the channel long-connection supervisor, the webhook inbound (served as a raw Fastify
- * route, `http/gateway-routes.ts`), the device connections ({@link DeviceGateway}, `GET
+ * route, `http/gateway-routes.ts`), the device connections ({@link LocalDeviceGateway}, `GET
  * /device/connect`) and {@link GatewayRole}, which `KernelLifecycle` drives. It runs
  * no cron and no queue consumer (those are the worker role's).
  */
@@ -23,8 +23,8 @@ let GatewayModule = class GatewayModule {
 };
 GatewayModule = __decorate([
     Module({
-        imports: [ChannelsModule, ExtensionsModule, DevicesModule],
-        providers: [ChannelSupervisor, ChannelWebhooks, DeviceGateway, GatewayRole],
+        imports: [ChannelsModule, ExtensionsModule, LocalDevicesModule],
+        providers: [ChannelSupervisor, ChannelWebhooks, LocalDeviceGateway, GatewayRole],
         exports: [GatewayRole],
     })
 ], GatewayModule);

package/dist/roles/worker.module.js

@@ -18,7 +18,7 @@ import { AttachmentsModule } from "../conversations/attachments.module.js";
 import { AttachmentCleanupJob } from "../conversations/attachments.service.js";
 import { EventLogModule } from "../conversations/event-log.js";
 import { TitlesModule } from "../conversations/titles.js";
-import { LegacySandboxCleanupJob } from "../environments/legacy-cleanup.job.js";
+import { LegacySandboxCleanupJob } from "../devices/legacy-cleanup.job.js";
 import { EvalWorkersModule } from "../evals/evals.module.js";
 import { ExtensionsModule } from "../extensions/extensions.module.js";
 import { PluginsReconcileJob } from "../extensions/lifecycle.js";

package/dist/runtime/context/build.d.ts

@@ -233,7 +233,7 @@ export declare function summaryText(summary: string): string;
  *   `user_message` / `assistant_message`（content 原样，含 opaque；aborted 的也回放；媒体引用按
  *   {@link resolveMedia} 换成 base64 或文字占位）/ `reminder`
  *   （`role: "system"`，放在它所在的位置）/ `tools_changed` (`role: "system"`, the text of {@link toolsChangedText}, at its position) /
- *   `environment_paths` (`role: "system"` at its position, `environmentPathsText`; covered by the
+ *   `device_paths` (`role: "system"` at its position, `devicePathsText`; covered by the
  *   summary: the latest one follows the summary) /
  *   `run_context` (`role: "system"` at its position, `runContextText`; covered by the summary: the
  *   current context follows the summary whole; a user message's sender line by `senderLines`) /

package/dist/runtime/context/build.js

@@ -4,7 +4,7 @@ import { renderBackgroundFinished } from "../../background/render.js";
 import { isAbsorbable, } from "../../conversations/events.js";
 import { catalogText, isAlwaysLoaded } from "../../tools/builtins/tool-search.js";
 import { renderSubagentDelivery } from "../subagents/render.js";
-import { environmentPathsAt, environmentPathsText } from "./environment-paths.js";
+import { devicePathsAt, devicePathsText } from "./device-paths.js";
 import { LEGACY_CATALOG_HEADER, LEGACY_SKILL_TEXTS, usesLegacyToolNames } from "./legacy-text.js";
 import { currentRunContext, runContextEvents, runContextFullText, runContextText, senderLines, } from "./run-context.js";
 import { invokedSkillNames, invokedSkillsText, SKILL_TEXTS, skillsCatalogEvents, snapshotChangeText, snapshotCurrentText, snapshotSystemText, systemSkillsCatalog, } from "./skills.js";
@@ -337,7 +337,7 @@ export function summaryText(summary) {
  *   `user_message` / `assistant_message`（content 原样，含 opaque；aborted 的也回放；媒体引用按
  *   {@link resolveMedia} 换成 base64 或文字占位）/ `reminder`
  *   （`role: "system"`，放在它所在的位置）/ `tools_changed` (`role: "system"`, the text of {@link toolsChangedText}, at its position) /
- *   `environment_paths` (`role: "system"` at its position, `environmentPathsText`; covered by the
+ *   `device_paths` (`role: "system"` at its position, `devicePathsText`; covered by the
  *   summary: the latest one follows the summary) /
  *   `run_context` (`role: "system"` at its position, `runContextText`; covered by the summary: the
  *   current context follows the summary whole; a user message's sender line by `senderLines`) /
@@ -552,9 +552,9 @@ export function buildModelRequest(input) {
         }
         // environments spec §13.1: the instance's directories told before the boundary follow the
         // summary again (the model keeps using the real paths)
-        const paths = environmentPathsAt(events, after);
+        const paths = devicePathsAt(events, after);
         if (paths) {
-            messages.push({ role: "system", content: environmentPathsText(paths.payload.roots) });
+            messages.push({ role: "system", content: devicePathsText(paths.payload.roots) });
         }
         // 被摘要覆盖的变更提醒不再发送：摘要时生效的目录与 system 里的不同 → 紧随摘要补上完整的当前目录
         const covered = skillSnaps.filter((e) => e.seq <= after).at(-1);
@@ -631,8 +631,8 @@ export function buildModelRequest(input) {
                 break;
             // the instance's directories (environments spec §13.1): logged during a step's tool call,
             // so rendered after that step's tool results
-            case "environment_paths":
-                messages.push({ role: "system", content: environmentPathsText(e.payload.roots) });
+            case "device_paths":
+                messages.push({ role: "system", content: devicePathsText(e.payload.roots) });
                 break;
             // hook_denied is not model-visible: the model sees only the denied tool call's tool_result
             // (and nothing for a denied model request), so request building skips it

package/dist/runtime/context/compaction.js

@@ -134,7 +134,7 @@ function transcriptLine(e) {
         // phase D: a forked skill's report is user content of the request (build.ts)
         case "skill_fork_result":
             return `User: ${e.payload.text}`;
-        // environment_paths is left out too: the latest one follows the summary (build.ts)
+        // device_paths is left out too: the latest one follows the summary (build.ts)
         // run_context is left out: its current values follow the summary anyway (build.ts), and
         // stale names should not be summarised as current
         case "tool_result":

package/dist/runtime/context/{environment-paths.d.ts → device-paths.d.ts}

@@ -1,40 +1,40 @@
 import type { SandboxRoots } from "@capybara-hq/plugin-sdk";
 import type { ConversationEvent } from "../../conversations/events.js";
 /**
- * The `environment_paths` event (environments spec §13.1, ruling R22): the first sandbox tool call
+ * The `device_paths` event (environments spec §13.1, ruling R22): the first sandbox tool call
  * of every conversation records the instance's roots (the defaults included), and a later call
  * records them again whenever they differ from the conversation's latest recorded ones (a
  * connected machine's real paths, a mode switch back to the defaults). Model-visible: rendered at
  * its position as a system message; in the log, so it needs no `DriftReason`.
  */
-/** The system line of an `environment_paths` event (model-visible, English). */
-export declare function environmentPathsText(r: SandboxRoots): string;
+/** The system line of an `device_paths` event (model-visible, English). */
+export declare function devicePathsText(r: SandboxRoots): string;
 /** Whether two sets of roots are the same paths. */
 export declare const sameRoots: (a: SandboxRoots, b: SandboxRoots) => boolean;
 /**
- * The idempotency key of an `environment_paths` event for `r` that follows the conversation's
+ * The idempotency key of an `device_paths` event for `r` that follows the conversation's
  * event at `prevSeq` (0: none). Unique per change (A → B → A gets three events), while parallel
  * calls that saw the same latest event write it once.
  */
-export declare const environmentPathsIdemKey: (r: SandboxRoots, prevSeq: number) => string;
+export declare const devicePathsIdemKey: (r: SandboxRoots, prevSeq: number) => string;
 /**
- * The `environment_paths` event to append when a sandbox call holds an instance with `roots` and
+ * The `device_paths` event to append when a sandbox call holds an instance with `roots` and
  * the conversation's latest such event is `latest`; null when nothing changed.
  */
-export declare function environmentPathsChange(latest: {
+export declare function devicePathsChange(latest: {
     seq: number;
     payload: {
         roots: SandboxRoots;
     };
 } | undefined, roots: SandboxRoots, runId: string | undefined): {
-    type: "environment_paths";
+    type: "device_paths";
     runId?: string;
     idemKey: string;
     payload: {
         roots: SandboxRoots;
     };
 } | null;
-/** The latest `environment_paths` event at or before `seq`; undefined without one. */
-export declare function environmentPathsAt(events: readonly ConversationEvent[], seq: number): Extract<ConversationEvent, {
-    type: "environment_paths";
+/** The latest `device_paths` event at or before `seq`; undefined without one. */
+export declare function devicePathsAt(events: readonly ConversationEvent[], seq: number): Extract<ConversationEvent, {
+    type: "device_paths";
 }> | undefined;

package/dist/runtime/context/{environment-paths.js → device-paths.js}

@@ -1,47 +1,47 @@
 import { createHash } from "node:crypto";
 /**
- * The `environment_paths` event (environments spec §13.1, ruling R22): the first sandbox tool call
+ * The `device_paths` event (environments spec §13.1, ruling R22): the first sandbox tool call
  * of every conversation records the instance's roots (the defaults included), and a later call
  * records them again whenever they differ from the conversation's latest recorded ones (a
  * connected machine's real paths, a mode switch back to the defaults). Model-visible: rendered at
  * its position as a system message; in the log, so it needs no `DriftReason`.
  */
-/** The system line of an `environment_paths` event (model-visible, English). */
-export function environmentPathsText(r) {
-    return `This environment's directories: workspace ${r.workspace}, skills ${r.skills} (read only), temporary files ${r.tmp}. Use these paths in commands and tool calls.`;
+/** The system line of an `device_paths` event (model-visible, English). */
+export function devicePathsText(r) {
+    return `This device's directories: workspace ${r.workspace}, skills ${r.skills} (read only), temporary files ${r.tmp}. Use these paths in commands and tool calls.`;
 }
 /** Whether two sets of roots are the same paths. */
 export const sameRoots = (a, b) => a.workspace === b.workspace && a.skills === b.skills && a.tmp === b.tmp;
 /**
- * The idempotency key of an `environment_paths` event for `r` that follows the conversation's
+ * The idempotency key of an `device_paths` event for `r` that follows the conversation's
  * event at `prevSeq` (0: none). Unique per change (A → B → A gets three events), while parallel
  * calls that saw the same latest event write it once.
  */
-export const environmentPathsIdemKey = (r, prevSeq) => `environment_paths:${createHash("sha256")
+export const devicePathsIdemKey = (r, prevSeq) => `device_paths:${createHash("sha256")
     .update(JSON.stringify([r.workspace, r.skills, r.tmp]))
     .digest("hex")
     .slice(0, 16)}:${prevSeq}`;
 /**
- * The `environment_paths` event to append when a sandbox call holds an instance with `roots` and
+ * The `device_paths` event to append when a sandbox call holds an instance with `roots` and
  * the conversation's latest such event is `latest`; null when nothing changed.
  */
-export function environmentPathsChange(latest, roots, runId) {
+export function devicePathsChange(latest, roots, runId) {
     if (latest && sameRoots(latest.payload.roots, roots))
         return null;
     return {
-        type: "environment_paths",
+        type: "device_paths",
         ...(runId !== undefined && { runId }),
-        idemKey: environmentPathsIdemKey(roots, latest?.seq ?? 0),
+        idemKey: devicePathsIdemKey(roots, latest?.seq ?? 0),
         payload: { roots: { workspace: roots.workspace, skills: roots.skills, tmp: roots.tmp } },
     };
 }
-/** The latest `environment_paths` event at or before `seq`; undefined without one. */
-export function environmentPathsAt(events, seq) {
+/** The latest `device_paths` event at or before `seq`; undefined without one. */
+export function devicePathsAt(events, seq) {
     let found;
     for (const e of events) {
         if (e.seq > seq)
             break;
-        if (e.type === "environment_paths")
+        if (e.type === "device_paths")
             found = e;
     }
     return found;

package/dist/runtime/maintenance.d.ts

@@ -32,7 +32,7 @@ export declare class MaintenanceProcessor extends WorkerHost<Worker> {
     private readonly scheduled;
     private readonly log;
     private readonly queue;
-    constructor(waits: Pick<Waits, "processTimeout">, sandbox: Pick<SandboxService, "destroyEnvironment" | "resetFileSystem">, drift: Pick<ToolDrift, "check">, directory: Pick<DirectorySync, "runSyncJob">, runs: Pick<RunQueue, "ensureRun">, ownedCleanup: Pick<OwnedPluginCleanup, "run">, scheduled: Pick<ScheduledRuns, "runNow">, log: Pick<KernelLogger, "error" | "warn">, queue: Pick<Queue, "removeJobScheduler">);
+    constructor(waits: Pick<Waits, "processTimeout">, sandbox: Pick<SandboxService, "destroyDevice" | "resetFileSystem">, drift: Pick<ToolDrift, "check">, directory: Pick<DirectorySync, "runSyncJob">, runs: Pick<RunQueue, "ensureRun">, ownedCleanup: Pick<OwnedPluginCleanup, "run">, scheduled: Pick<ScheduledRuns, "runNow">, log: Pick<KernelLogger, "error" | "warn">, queue: Pick<Queue, "removeJobScheduler">);
     /**
      * Removes the retired job schedulers (`RETIRED_SCHEDULER_IDS`, runtime/retired-schedulers.ts): every fixed-period
      * maintenance job is a `@LockedCron` / `@LockedInterval` now. Idempotent; called once when a

package/dist/runtime/subagents/definition.d.ts

@@ -34,9 +34,10 @@ export interface EffectiveDefinitionDeps {
 type Policy = "ask" | "deny";
 /**
  * `base` with `over` applied on top, the stricter value winning per key (`deny` > `ask`). Values
- * other than `ask` / `deny` (stored template data is not re-validated) are skipped on both sides.
+ * other than `ask` / `deny` (stored template data is not re-validated; an agent's connector-tool
+ * `allow`, which the policy check reads from the agent's current version) are skipped on both sides.
  */
-export declare function stricterPolicies(base: Record<string, Policy>, over: Record<string, Policy>): Record<string, Policy>;
+export declare function stricterPolicies(base: Record<string, string>, over: Record<string, string>): Record<string, Policy>;
 /** An org agent's version and definition as checked by its gates. */
 export interface CheckedOrgAgent {
     version: number;

package/dist/runtime/subagents/definition.js

@@ -23,7 +23,8 @@ const RANK = { ask: 1, deny: 2 };
 const isPolicy = (p) => p === "ask" || p === "deny";
 /**
  * `base` with `over` applied on top, the stricter value winning per key (`deny` > `ask`). Values
- * other than `ask` / `deny` (stored template data is not re-validated) are skipped on both sides.
+ * other than `ask` / `deny` (stored template data is not re-validated; an agent's connector-tool
+ * `allow`, which the policy check reads from the agent's current version) are skipped on both sides.
  */
 export function stricterPolicies(base, over) {
     const out = {};

package/dist/sandbox/jobs.d.ts

@@ -7,20 +7,20 @@ export declare const SANDBOX_SUSPEND_JOB = "sandbox-suspend-idle";
 /** The inactivity destruction sweep (hourly, once per tick across replicas). */
 export declare const SANDBOX_DESTROY_JOB = "sandbox-destroy-inactive";
 /**
- * One-off job: destroy a batch of environments now, instance and file system (environment
- * deletion, offboarding; data `{ environmentIds }`).
+ * One-off job: destroy a batch of devices now, instance and file system (device
+ * deletion, offboarding; data `{ deviceIds }`).
  */
 export declare const SANDBOX_DESTROY_FOR_JOB = "sandbox-destroy-for";
 /**
- * One-off job: start an environment over with empty files (`resetFileSystem`; data
- * `{ environmentId }`, job id {@link resetFilesJobId}).
+ * One-off job: start a device over with empty files (`resetFileSystem`; data
+ * `{ deviceId }`, job id {@link resetFilesJobId}).
  */
 export declare const SANDBOX_RESET_FILES_JOB = "sandbox-reset-files";
 /**
- * The deterministic id of an environment's reset job: a second request while one is waiting or
+ * The deterministic id of a device's reset job: a second request while one is waiting or
  * running joins it (that reset still empties the files); once it ended, a new request is a new job.
  */
-export declare const resetFilesJobId: (environmentId: string) => string;
+export declare const resetFilesJobId: (deviceId: string) => string;
 /**
  * The producer of the sandbox maintenance jobs: {@link SANDBOX_DESTROY_FOR_JOB} (BullMQ's own job
  * ids, as before: every enqueue is a new job, also after a batch failed all its attempts) and
@@ -30,16 +30,16 @@ export declare class SandboxJobs {
     private readonly queue;
     constructor(queue: Pick<Queue, "add">);
     /**
-     * Enqueues the destruction of these environments: a failed batch is retried whole (destroying
+     * Enqueues the destruction of these devices: a failed batch is retried whole (destroying
      * one already destroyed does nothing).
      */
-    destroy(environmentIds: string[]): Promise<void>;
+    destroy(deviceIds: string[]): Promise<void>;
     /**
-     * Enqueues the reset of an environment's files (see {@link resetFilesJobId}): retried on failure
+     * Enqueues the reset of a device's files (see {@link resetFilesJobId}): retried on failure
      * (the exclusive lease not obtained in time, the provider failing); a job that failed all its
      * attempts is removed, so the id never blocks a later request.
      */
-    resetFiles(environmentId: string): Promise<void>;
+    resetFiles(deviceId: string): Promise<void>;
 }
 /**
  * The worker side of {@link SANDBOX_RESET_FILES_JOB}: `resetFileSystem` under the exclusive lease;
@@ -47,14 +47,14 @@ export declare class SandboxJobs {
  */
 export declare function runSandboxResetFiles(sandbox: Pick<SandboxService, "resetFileSystem">, job: Pick<Job, "data">): Promise<void>;
 /**
- * The worker side of {@link SANDBOX_DESTROY_FOR_JOB}: `destroyEnvironment` one by one; a failure is
+ * The worker side of {@link SANDBOX_DESTROY_FOR_JOB}: `destroyDevice` one by one; a failure is
  * warned and fails the job (the whole batch is retried) after the others were destroyed.
  */
-export declare function runSandboxDestroyFor(sandbox: Pick<SandboxService, "destroyEnvironment">, log: Pick<KernelLogger, "warn">, job: Pick<Job, "data">): Promise<void>;
+export declare function runSandboxDestroyFor(sandbox: Pick<SandboxService, "destroyDevice">, log: Pick<KernelLogger, "warn">, job: Pick<Job, "data">): Promise<void>;
 /**
  * The sandbox sweeps (exactly once per tick across replicas): every minute the idle and overdue
  * running instances are suspended, every hour the inactive instances are destroyed (files kept)
- * and deleted environments, or those of deleted orgs, are destroyed with their files. Both do nothing without a sandbox provider. They replace the
+ * and deleted devices, or those of deleted orgs, are destroyed with their files. Both do nothing without a sandbox provider. They replace the
  * maintenance schedulers `sandbox-suspend-idle-every-minute` and `sandbox-destroy-inactive-hourly`
  * (retired at worker start).
  */