@capybara-hq/kernel 0.1.0-rc.12 → 0.1.0-rc.14

package/dist/overrides.js

@@ -10,6 +10,7 @@ import { RUN_HOOKS } from "./runtime/run-worker.js";
 import { SUBAGENT_MESSAGES_HOOKS, } from "./runtime/subagents/messages.js";
 import { USAGE_REPORT_RETRY } from "./runtime/usage-report.js";
 import { SANDBOX_LEASE_TIMINGS } from "./sandbox/leases.js";
+import { SETUP_CHECK_TIMEOUT } from "./setup/setup-checks.service.js";
 import { TOOL_PIPELINE_HOOKS } from "./tools/pipeline.js";
 import { EMBED_TOKEN_CLOCK } from "./ui/embed-token.js";
 const SEAM_TOKENS = [
@@ -24,6 +25,7 @@ const SEAM_TOKENS = [
     USAGE_REPORT_RETRY,
     SANDBOX_LEASE_TIMINGS,
     CHANNEL_WEBHOOK_TIMINGS,
+    SETUP_CHECK_TIMEOUT,
     EMBED_TOKEN_CLOCK,
     RUN_CONTEXT_CLOCK,
     APP_INTERCEPTOR,

package/dist/platform/exclusions.js

@@ -95,6 +95,11 @@ export const PLATFORM_EXCLUSIONS = [
         category: "transport",
         reason: "Serves icon image bytes",
     },
+    {
+        route: "GET /api/v1/admin/catalog/:itemId/guides/:guideId",
+        category: "internal",
+        reason: "The super admin's preview of a plugin's setup guide for the admin console, with no org and no target; agents assist with the org guides an org member sees",
+    },
     {
         route: "POST /api/v1/admin/catalog/items/:id/confirm",
         category: "human-only",
@@ -128,11 +133,6 @@ export const PLATFORM_EXCLUSIONS = [
         category: "transport",
         reason: "Serves icon image bytes",
     },
-    {
-        route: "GET /api/v1/orgs/:orgId/catalog/:itemId/guides/:guideId",
-        category: "internal",
-        reason: "A plugin's setup guide (an app manifest, URLs, steps) for the web's setup section; a person pastes it into the third-party platform's console, which an agent cannot reach",
-    },
     {
         route: "POST /api/v1/orgs/:orgId/catalog/:itemId/install",
         category: "secret",
@@ -267,14 +267,14 @@ export const PLATFORM_EXCLUSIONS = [
         category: "transport",
         reason: "Serves sandbox file bytes",
     },
-    // environments (personal cloud environments, environments design phase 1)
+    // devices (personal cloud devices, environments design phase 1)
     // connected machines (environments design phase 2): device sign-in by the program and on the
     // confirmation page, and disconnecting a machine. The machine's WebSocket (`GET /device/connect`)
     // is a raw gateway-role route, not a Nest controller, so it is not listed (like the webhook)
     {
-        route: "DELETE /api/v1/orgs/:orgId/environments/:id/machine",
+        route: "DELETE /api/v1/orgs/:orgId/devices/:id/machine",
         category: "human-only",
-        reason: "Disconnects a person's own machine (revokes its credential); a trust decision taken on the environment's page",
+        reason: "Disconnects a person's own machine (revokes its credential); a trust decision taken on the device's page",
     },
     {
         route: "POST /api/v1/device/authorize",
@@ -593,6 +593,11 @@ export const PLATFORM_EXCLUSIONS = [
         category: "secret",
         reason: "Edits connector endpoint config that can carry credentials",
     },
+    {
+        route: "POST /api/v1/orgs/:orgId/connectors/:connectorId/guide-ack",
+        category: "human-only",
+        reason: "A person confirms they updated the app on the third-party platform after a connector template's setup guide changed; only that person knows it was done",
+    },
     {
         route: "POST /api/v1/orgs/:orgId/connectors/:connectorId/tools/:name/review",
         category: "human-only",
@@ -654,6 +659,11 @@ export const PLATFORM_EXCLUSIONS = [
         category: "internal",
         reason: "Navigation entries of the web shell (panels, pages, embeds); nothing an agent acts on",
     },
+    {
+        route: "GET /api/v1/orgs/:orgId/ui/arrangement",
+        category: "internal",
+        reason: "Listing for the 界面位置 page; the arrangement is read and written through org-settings / admin settings",
+    },
     {
         route: "GET /api/v1/orgs/:orgId/ui/views/:plugin/:id",
         category: "transport",
@@ -674,6 +684,36 @@ export const PLATFORM_EXCLUSIONS = [
         category: "transport",
         reason: "Server-sent event stream of UI invalidations",
     },
+    {
+        route: "GET /api/v1/admin/ui/contributions",
+        category: "internal",
+        reason: "Navigation entries of the admin console (platform pages)",
+    },
+    {
+        route: "GET /api/v1/admin/ui/arrangement",
+        category: "internal",
+        reason: "Listing for the 界面位置 page; the arrangement is read and written through org-settings / admin settings",
+    },
+    {
+        route: "GET /api/v1/admin/ui/views/:plugin/:id",
+        category: "transport",
+        reason: "Renders an extension UI view for the web app",
+    },
+    {
+        route: "POST /api/v1/admin/ui/actions/:plugin/:id",
+        category: "transport",
+        reason: "Runs an extension UI action from the web app",
+    },
+    {
+        route: "POST /api/v1/admin/ui/embeds/:plugin/:id/token",
+        category: "transport",
+        reason: "Issues an embed token for an iframe",
+    },
+    {
+        route: "GET /api/v1/admin/ui/stream",
+        category: "transport",
+        reason: "Server-sent event stream of UI invalidations",
+    },
     // themes (themes spec §8-§9)
     {
         route: "GET /api/v1/themes/:id/:version/theme.css",

package/dist/platform/operation.js

@@ -84,11 +84,19 @@ export const PLATFORM_DOMAINS = [
         description: "The org's settings (tool search, language, sandbox policy, the Platform tool switch, the default theme): read and change.",
     },
     {
-        id: "environments",
-        description: "Your own cloud environments (the workspaces your conversations run in): list, read, create, rename, delete, wipe the files.",
+        id: "devices",
+        description: "Your own cloud devices (the workspaces your conversations run in): list, read, create, rename, delete, wipe the files.",
+    },
+    {
+        id: "setup",
+        description: "Plugin setup guides: list the guides you may help with, read one as Markdown, the state of its checks for a channel connection or a connector, and running one check. Entering secrets, connecting an account and confirming the app was updated stay with the person on the web; read the docs topic `setup` first.",
     },
     {
         id: "themes",
         description: "The themes on in this org, the one in effect for you and the org's theme setting: list. Themes are set through your preferences, the org settings and the deployment settings.",
     },
+    {
+        id: "ui",
+        description: "The UI slots an extension can contribute to (the catalog): list. A slot id is a ui contribution's `slot` in a plugin manifest.",
+    },
 ];

package/dist/platform/ops/admin.ops.js

@@ -40,6 +40,7 @@ const SettingsInput = DEPLOYMENT_SETTINGS_PATCH.pick({
     customSkills: true,
     orgMarketplaceBrowse: true,
     uiTheme: true,
+    uiArrangement: true,
 }).strict();
 const ProviderId = ModelProviderParams.shape.provider.describe("The model provider (models.platform-list), e.g. the plugin name of its extension.");
 /** `provider/model` of a purpose target, or null. */
@@ -121,7 +122,7 @@ let AdminOperations = class AdminOperations {
             }),
             defineOperation({
                 id: "admin.update-settings",
-                description: "Change deployment settings (super admin); give only the keys to change: orgCreation (anyone or super_admin), priceCurrency (ISO 4217 code), customConnectors / customSkills (allow or deny: whether orgs may create their own instead of installing from the catalog), orgMarketplaceBrowse (true or false), uiTheme ({ id }: the platform default theme, a platform theme whose scope is all, or null for the built-in theme; it is what every org falls back to and what the sign-in pages show). Per-org limits are orgs.set-limits.",
+                description: "Change deployment settings (super admin); give only the keys to change: orgCreation (anyone or super_admin), priceCurrency (ISO 4217 code), customConnectors / customSkills (allow or deny: whether orgs may create their own instead of installing from the catalog), orgMarketplaceBrowse (true or false), uiTheme ({ id }: the platform default theme, a platform theme whose scope is all, or null for the built-in theme; it is what every org falls back to and what the sign-in pages show), uiArrangement ({ <slot>: { hidden, order } }: the platform default arrangement of UI slots, with contribution keys <extension>/<contribution>; hidden ones are not listed but still open by URL; null for a slot removes its entry). Per-org limits are orgs.set-limits.",
                 input: SettingsInput.refine((b) => Object.keys(b).length > 0, {
                     message: "at least one setting is required",
                 }),
@@ -148,7 +149,7 @@ let AdminOperations = class AdminOperations {
                         : { ok: false, code: "validation_failed", message: r.error.issues[0]?.message ?? "" };
                 },
                 summary: async (i) => {
-                    const { uiTheme, ...rest } = i;
+                    const { uiTheme, uiArrangement, ...rest } = i;
                     const parts = Object.entries(rest).map(([k, v]) => `${k}=${String(v)}`);
                     const zh = [...parts];
                     const en = [...parts];
@@ -158,6 +159,11 @@ let AdminOperations = class AdminOperations {
                         zh.push(`uiTheme=${uiTheme.id === null ? "内置主题" : (name?.zh ?? uiTheme.id)}`);
                         en.push(`uiTheme=${uiTheme.id === null ? "built-in theme" : (name?.en ?? uiTheme.id)}`);
                     }
+                    if (uiArrangement !== undefined) {
+                        const slots = Object.keys(uiArrangement).join(", ");
+                        zh.push(`uiArrangement（${slots}）`);
+                        en.push(`uiArrangement (${slots})`);
+                    }
                     return {
                         zh: `修改平台部署设置：${zh.join("，")}`,
                         en: `Change the deployment settings: ${en.join(", ")}`,

package/dist/platform/ops/connectors.ops.js

@@ -120,6 +120,8 @@ let ConnectorsOperations = class ConnectorsOperations {
                         on: t.on,
                         switchable: t.switchable,
                         owner: t.owner,
+                        // where the template's setup guide is (catalog item and guide id), null without one
+                        guide: t.guide ?? null,
                     }));
                     return pageOf(templates, startOf(input.cursor), PAGE);
                 },

package/dist/platform/ops/conversations.ops.d.ts

@@ -1,6 +1,6 @@
 import { type OnModuleInit } from "@nestjs/common";
 import { ConversationsService } from "../../conversations/conversations.service.js";
-import { ConversationEnvironmentStatus } from "../../conversations/environment-status.js";
+import { ConversationDeviceStatus } from "../../conversations/device-status.js";
 import { ConversationFiles } from "../../conversations/files.js";
 import { KernelDb } from "../../infra/database/kernel-db.js";
 import { PlatformOperations } from "../registry.js";
@@ -14,9 +14,9 @@ export declare class ConversationsOperations implements OnModuleInit {
     private readonly registry;
     private readonly conversations;
     private readonly files;
-    private readonly environment;
+    private readonly device;
     private readonly kdb;
-    constructor(registry: PlatformOperations, conversations: ConversationsService, files: ConversationFiles, environment: ConversationEnvironmentStatus, kdb: KernelDb);
+    constructor(registry: PlatformOperations, conversations: ConversationsService, files: ConversationFiles, device: ConversationDeviceStatus, kdb: KernelDb);
     /**
      * Whether `id` is the conversation this run belongs to: its ROOT (the Platform tool also runs in
      * sub-agents, whose own id is not the person's conversation). Stopping or deleting it would end

package/dist/platform/ops/conversations.ops.js

@@ -11,7 +11,7 @@ import { Inject, Injectable } from "@nestjs/common";
 import { z } from "zod";
 import { EventsQuery, FilesQuery, IdParams, ListQuery, PatchBody, SubagentsQuery, } from "../../conversations/conversations.schemas.js";
 import { ConversationsService, } from "../../conversations/conversations.service.js";
-import { ConversationEnvironmentStatus } from "../../conversations/environment-status.js";
+import { ConversationDeviceStatus } from "../../conversations/device-status.js";
 import { ConversationFiles } from "../../conversations/files.js";
 import { KernelDb } from "../../infra/database/kernel-db.js";
 import { rootConversationOf } from "../../runtime/subagents/child.js";
@@ -41,13 +41,13 @@ let ConversationsOperations = class ConversationsOperations {
     registry;
     conversations;
     files;
-    environment;
+    device;
     kdb;
-    constructor(registry, conversations, files, environment, kdb) {
+    constructor(registry, conversations, files, device, kdb) {
         this.registry = registry;
         this.conversations = conversations;
         this.files = files;
-        this.environment = environment;
+        this.device = device;
         this.kdb = kdb;
     }
     /**
@@ -348,12 +348,12 @@ let ConversationsOperations = class ConversationsOperations {
                 },
             }),
             defineOperation({
-                id: "conversations.environment",
-                description: "Read the environment one of your conversations works in and whether its instance is running or suspended; environment is null while the conversation has none. Takes the id from conversations.list.",
+                id: "conversations.device",
+                description: "Read the device one of your conversations works in and whether its instance is running or suspended; device is null while the conversation has none. Takes the id from conversations.list.",
                 input: Id,
                 example: { conversationId: "3f2b8a40-6c1d-4e0b-9a77-5d1e2c8b9f10" },
                 authz: { orgAction: "agents.use" },
-                mirrors: ["GET /api/v1/orgs/:orgId/conversations/:id/environment"],
+                mirrors: ["GET /api/v1/orgs/:orgId/conversations/:id/device"],
                 renames: { conversationId: "id" },
                 errors: [
                     {
@@ -363,7 +363,7 @@ let ConversationsOperations = class ConversationsOperations {
                 ],
                 confirm: "read",
                 run: async (input, ctx) => ({
-                    environment: await this.environment.get(ctx.orgId, input.conversationId, ctx.actorAccountId),
+                    device: await this.device.get(ctx.orgId, input.conversationId, ctx.actorAccountId),
                 }),
             }),
             defineOperation({
@@ -464,7 +464,7 @@ ConversationsOperations = __decorate([
     __param(0, Inject(PlatformOperations)),
     __param(1, Inject(ConversationsService)),
     __param(2, Inject(ConversationFiles)),
-    __param(3, Inject(ConversationEnvironmentStatus)),
+    __param(3, Inject(ConversationDeviceStatus)),
     __param(4, Inject(KernelDb))
 ], ConversationsOperations);
 export { ConversationsOperations };

package/dist/platform/ops/devices.ops.d.ts

@@ -0,0 +1,26 @@
+import { type OnModuleInit } from "@nestjs/common";
+import { DevicesService } from "../../devices/devices.service.js";
+import { KernelDb } from "../../infra/database/kernel-db.js";
+import { PlatformOperations } from "../registry.js";
+/**
+ * Device operations of the `Platform` tool (environments design, phase 1): a person's own
+ * cloud devices. Phase 1 has personal devices only, visible to their owner alone, so
+ * these are `personal` writes. A cloud device carries no credentials or device connection;
+ * deleting one and wiping its files are `personal` writes that are never remembered.
+ */
+export declare class DevicesOperations implements OnModuleInit {
+    private readonly registry;
+    private readonly devices;
+    private readonly kdb;
+    constructor(registry: PlatformOperations, devices: DevicesService, kdb: KernelDb);
+    /**
+     * Whether `id` is the device the run works in: the one its root conversation is bound to
+     * (sub-agents use the root's). Deleting or wiping it would pull the sandbox from under the run.
+     */
+    private isRunsDevice;
+    /** The precheck of a destructive write: never the run's own device, then the service's. */
+    private precheckDestructive;
+    /** The device's name for a card; its id when it cannot be read. */
+    private label;
+    onModuleInit(): void;
+}

package/dist/platform/ops/devices.ops.js

@@ -0,0 +1,311 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Inject, Injectable } from "@nestjs/common";
+import { z } from "zod";
+import { DevicesService } from "../../devices/devices.service.js";
+import { DeviceNameBody, DeviceParams } from "../../devices/dto.js";
+import { deviceLabel } from "../../devices/label.js";
+import { KernelDb } from "../../infra/database/kernel-db.js";
+import { rootConversationOf } from "../../runtime/subagents/child.js";
+import { defineOperation } from "../operation.js";
+import { PlatformOperations } from "../registry.js";
+import { precheckBy, viaAgent } from "./errors.js";
+import { named, orElse } from "./summary.js";
+const DeviceId = z.object({ deviceId: DeviceParams.shape.id }).strict();
+const Name = z.object({ name: DeviceNameBody.shape.name }).strict();
+/**
+ * Model-facing names are English: the default is "Personal", a default demoted by a provider
+ * switch "Personal (Docker sandbox)" (the web shows 「个人设备」 / 「个人设备（Docker 沙箱）」).
+ */
+const labelOf = (e) => deviceLabel(e, "en");
+/** A row's state: why it cannot be used now, else whether its instance runs. */
+function stateOf(e) {
+    if (!e.available) {
+        return {
+            state: "unavailable",
+            reason: "Its sandbox provider is no longer the deployment's current one.",
+            next: "Ask an org admin; use another device meanwhile.",
+        };
+    }
+    if (e.filesLost && e.source === "local") {
+        return {
+            state: "files_lost",
+            reason: "Its directory is gone from the connected machine.",
+            next: "Ask the person to run capybara-device logout, then capybara-device login into this device, on that machine.",
+        };
+    }
+    if (e.filesLost) {
+        return {
+            state: "files_lost",
+            reason: "Its file system is gone at the provider.",
+            next: "Wipe its files with devices.reset-files to use it again.",
+        };
+    }
+    return { state: e.instance?.status ?? "ready" };
+}
+const row = (e) => ({
+    id: e.id,
+    name: labelOf(e),
+    ...stateOf(e),
+    isDefault: e.isDefault,
+    source: e.source,
+    provider: e.provider,
+    online: e.online,
+    machine: e.machine && {
+        name: e.machine.name,
+        os: e.machine.os,
+        lastSeenAt: e.machine.lastSeenAt,
+    },
+    lastUsedAt: e.instance?.lastUsedAt ?? null,
+});
+/**
+ * Device operations of the `Platform` tool (environments design, phase 1): a person's own
+ * cloud devices. Phase 1 has personal devices only, visible to their owner alone, so
+ * these are `personal` writes. A cloud device carries no credentials or device connection;
+ * deleting one and wiping its files are `personal` writes that are never remembered.
+ */
+let DevicesOperations = class DevicesOperations {
+    registry;
+    devices;
+    kdb;
+    constructor(registry, devices, kdb) {
+        this.registry = registry;
+        this.devices = devices;
+        this.kdb = kdb;
+    }
+    /**
+     * Whether `id` is the device the run works in: the one its root conversation is bound to
+     * (sub-agents use the root's). Deleting or wiping it would pull the sandbox from under the run.
+     */
+    async isRunsDevice(id, ctx) {
+        const root = await rootConversationOf(this.kdb.db, ctx.conversationId);
+        const row = await this.kdb.db
+            .selectFrom("conversations")
+            .select("device_id")
+            .where("id", "=", root)
+            .where("org_id", "=", ctx.orgId)
+            .executeTakeFirst();
+        return row?.device_id === id;
+    }
+    /** The precheck of a destructive write: never the run's own device, then the service's. */
+    async precheckDestructive(id, ctx, verb, read) {
+        if (await this.isRunsDevice(id, ctx)) {
+            return {
+                ok: false,
+                code: "device.current",
+                message: `The device you are running in cannot be ${verb} from here.`,
+            };
+        }
+        return precheckBy(read);
+    }
+    /** The device's name for a card; its id when it cannot be read. */
+    label(ctx, id) {
+        return orElse(async () => named(labelOf(await this.devices.get(ctx.orgId, ctx.actorAccountId, id))), id);
+    }
+    onModuleInit() {
+        this.registry.register([
+            defineOperation({
+                id: "devices.list",
+                description: "List your own devices in this org: one compact row each (name, state, whether it is the default, source: cloud or local, provider, whether a local one is online and its machine, last use), plus the default and last used ids and whether new cloud devices can be made. The default device is shown as Personal; a former default left behind by a sandbox provider switch is shown as Personal (<provider>) and becomes the default again when that provider is back.",
+                input: z.object({}).strict(),
+                example: {},
+                authz: { orgAction: "agents.use" },
+                mirrors: ["GET /api/v1/orgs/:orgId/devices"],
+                confirm: "read",
+                run: async (_input, ctx) => {
+                    const l = await this.devices.list(ctx.orgId, ctx.actorAccountId);
+                    return {
+                        items: l.items.map(row),
+                        defaultId: l.defaultId,
+                        lastUsedId: l.lastUsedId,
+                        cloudAvailable: l.cloudAvailable,
+                    };
+                },
+            }),
+            defineOperation({
+                id: "devices.get",
+                description: "Read one of your devices with its source (cloud or local), provider, state, instance, the machine of a local one and whether it is online, limits and creation time. Takes the id from devices.list.",
+                input: DeviceId,
+                example: { deviceId: "4e8a0c1d-6b2f-4a37-8d19-3c5e7f9a1b20" },
+                authz: { orgAction: "agents.use" },
+                mirrors: ["GET /api/v1/orgs/:orgId/devices/:id"],
+                renames: { deviceId: "id" },
+                confirm: "read",
+                errors: [
+                    {
+                        code: "device.not_found",
+                        next: "Check the id with devices.list: you only see your own devices.",
+                    },
+                ],
+                run: async (input, ctx) => {
+                    const e = await this.devices.get(ctx.orgId, ctx.actorAccountId, input.deviceId);
+                    return { device: { ...e, name: labelOf(e), ...stateOf(e) } };
+                },
+            }),
+            defineOperation({
+                id: "devices.create",
+                description: "Create a personal cloud device with a name (1-64 characters, unique among yours, case-insensitive). It is ready at once; its instance and files are made on first use. It needs a sandbox provider and is limited per person.",
+                input: Name,
+                example: { name: "Data analysis" },
+                authz: { orgAction: "agents.use" },
+                mirrors: ["POST /api/v1/orgs/:orgId/devices"],
+                confirm: "personal",
+                errors: [
+                    {
+                        code: "device.name_taken",
+                        next: "You have a device with this name: pick another name, or read yours with devices.list.",
+                    },
+                    {
+                        code: "device.limit_reached",
+                        next: "You are at the limit: delete a device you no longer need with devices.delete, or use an existing one.",
+                    },
+                    {
+                        code: "device.current",
+                        next: "This conversation works in it: ask the person to wipe it on the web, or wipe a different one.",
+                    },
+                    {
+                        code: "device.unavailable",
+                        next: {
+                            superAdmin: "No sandbox provider is current: set one up in the admin console under extensions, then call again.",
+                            orgAdmin: "No sandbox provider is set up; ask the super admin.",
+                            member: "No sandbox provider is set up in this deployment; ask an org admin.",
+                        },
+                    },
+                ],
+                precheck: (i, ctx) => precheckBy(() => this.devices.checkCreate(ctx.orgId, ctx.actorAccountId, i.name)),
+                summary: (i) => ({
+                    zh: `新建个人云端设备「${named(i.name)}」`,
+                    en: `Create personal cloud device "${named(i.name)}"`,
+                }),
+                run: async (input, ctx) => {
+                    const e = await this.devices.create(ctx.orgId, ctx.actorAccountId, { name: input.name }, undefined, viaAgent("devices.create", ctx));
+                    return { device: row(e) };
+                },
+            }),
+            defineOperation({
+                id: "devices.delete",
+                description: "Delete one of your devices, the default one included: its instance and ALL its files are destroyed after the response and cannot be recovered. Conversations bound to it keep pointing at it and their sandbox tools then fail. The person confirms every delete; it is never remembered. The device this conversation works in cannot be deleted. Takes the id from devices.list.",
+                input: DeviceId,
+                example: { deviceId: "4e8a0c1d-6b2f-4a37-8d19-3c5e7f9a1b20" },
+                authz: { orgAction: "agents.use" },
+                mirrors: ["DELETE /api/v1/orgs/:orgId/devices/:id"],
+                renames: { deviceId: "id" },
+                confirm: "personal",
+                // destructive: asked every time and never remembered
+                rememberable: false,
+                errors: [
+                    {
+                        code: "device.not_found",
+                        next: "Check the id with devices.list: you only see your own devices.",
+                    },
+                    {
+                        code: "device.current",
+                        next: "This conversation works in it: ask the person to delete it on the web, or delete a different one.",
+                    },
+                ],
+                precheck: (i, ctx) => this.precheckDestructive(i.deviceId, ctx, "deleted", () => this.devices.get(ctx.orgId, ctx.actorAccountId, i.deviceId)),
+                summary: async (i, ctx) => {
+                    const n = await this.label(ctx, i.deviceId);
+                    const c = await orElse(() => this.devices.boundConversations(ctx.orgId, ctx.actorAccountId, i.deviceId), 0);
+                    return {
+                        zh: `删除设备「${n}」：其中所有文件将被销毁且无法恢复；使用它的 ${c} 个对话将失去沙箱（沙箱工具会失败）`,
+                        en: `Delete device "${n}": all its files are destroyed and cannot be recovered; the ${c} conversations using it lose their sandbox (their sandbox tools fail)`,
+                    };
+                },
+                run: async (input, ctx) => {
+                    await this.devices.remove(ctx.orgId, ctx.actorAccountId, input.deviceId, undefined, viaAgent("devices.delete", ctx));
+                    return { id: input.deviceId, deleted: true };
+                },
+            }),
+            defineOperation({
+                id: "devices.reset-files",
+                description: "Wipe one of your devices' files so it starts empty: ALL its files are destroyed (after running commands finish) and cannot be recovered; the next use creates a fresh workspace. Use it when a device reports its files are lost (not for a connected machine's device: its files are on the machine). The person confirms every reset; it is never remembered. The device this conversation works in cannot be wiped. Takes the id from devices.list.",
+                input: DeviceId,
+                example: { deviceId: "4e8a0c1d-6b2f-4a37-8d19-3c5e7f9a1b20" },
+                authz: { orgAction: "agents.use" },
+                mirrors: ["POST /api/v1/orgs/:orgId/devices/:id/files/reset"],
+                renames: { deviceId: "id" },
+                confirm: "personal",
+                rememberable: false,
+                errors: [
+                    {
+                        code: "device.not_found",
+                        next: "Check the id with devices.list: you only see your own devices.",
+                    },
+                    {
+                        code: "device.current",
+                        next: "This conversation works in it: ask the person to wipe it on the web, or wipe a different one.",
+                    },
+                    {
+                        code: "device.files_on_device",
+                        next: "Its files are on its connected machine: ask the person to run capybara-device logout, then capybara-device login into this device, on that machine.",
+                    },
+                    {
+                        code: "device.unavailable",
+                        next: {
+                            orgAdmin: "Its sandbox provider is no longer the current one: use another device, or ask the super admin about the provider.",
+                            member: "Its sandbox provider is no longer the current one: use another device, or ask an org admin.",
+                        },
+                    },
+                ],
+                precheck: (i, ctx) => this.precheckDestructive(i.deviceId, ctx, "wiped", () => this.devices.checkReset(ctx.orgId, ctx.actorAccountId, i.deviceId)),
+                summary: async (i, ctx) => {
+                    const n = await this.label(ctx, i.deviceId);
+                    return {
+                        zh: `清空设备「${n}」的文件：所有文件将被销毁且无法恢复`,
+                        en: `Wipe the files of device "${n}": all files are destroyed and cannot be recovered`,
+                    };
+                },
+                run: async (input, ctx) => {
+                    await this.devices.resetFiles(ctx.orgId, ctx.actorAccountId, input.deviceId, undefined, viaAgent("devices.reset-files", ctx));
+                    return { id: input.deviceId, reset: true };
+                },
+            }),
+            defineOperation({
+                id: "devices.rename",
+                description: "Rename one of your devices, the default one included (it then has a name). The new name is 1-64 characters and unique among yours, case-insensitive. Takes the id from devices.list.",
+                input: DeviceId.extend({ name: DeviceNameBody.shape.name }).strict(),
+                example: { deviceId: "4e8a0c1d-6b2f-4a37-8d19-3c5e7f9a1b20", name: "Reports" },
+                authz: { orgAction: "agents.use" },
+                mirrors: ["PATCH /api/v1/orgs/:orgId/devices/:id"],
+                renames: { deviceId: "id" },
+                confirm: "personal",
+                errors: [
+                    {
+                        code: "device.not_found",
+                        next: "Check the id with devices.list: you only see your own devices.",
+                    },
+                    {
+                        code: "device.name_taken",
+                        next: "You have a device with this name: pick another name.",
+                    },
+                ],
+                precheck: (i, ctx) => precheckBy(() => this.devices.checkRename(ctx.orgId, ctx.actorAccountId, i.deviceId, i.name)),
+                summary: async (i, ctx) => {
+                    const from = await orElse(async () => named(labelOf(await this.devices.get(ctx.orgId, ctx.actorAccountId, i.deviceId))), i.deviceId);
+                    return {
+                        zh: `将设备「${from}」重命名为「${named(i.name)}」`,
+                        en: `Rename device "${from}" to "${named(i.name)}"`,
+                    };
+                },
+                run: async (input, ctx) => ({
+                    device: row(await this.devices.rename(ctx.orgId, ctx.actorAccountId, input.deviceId, input.name, undefined, viaAgent("devices.rename", ctx))),
+                }),
+            }),
+        ]);
+    }
+};
+DevicesOperations = __decorate([
+    Injectable(),
+    __param(0, Inject(PlatformOperations)),
+    __param(1, Inject(DevicesService)),
+    __param(2, Inject(KernelDb))
+], DevicesOperations);
+export { DevicesOperations };

package/dist/platform/ops/org-settings.ops.js

@@ -39,7 +39,7 @@ let OrgSettingsOperations = class OrgSettingsOperations {
         this.registry.register([
             defineOperation({
                 id: "org-settings.get",
-                description: "Read this org's settings: toolSearch, locale, sandboxToolPolicy, platformTool (on, read-only or off), sandboxEgress and wakeOnBackgroundTask (absent means it follows the deployment), theme (the org's default theme id, null or absent following the platform, and personal: allowed or locked), the deployment's sandbox egress default and the sandbox cpu / memory limits in effect.",
+                description: "Read this org's settings: toolSearch, locale, sandboxToolPolicy, platformTool (on, read-only or off), sandboxEgress and wakeOnBackgroundTask (absent means it follows the deployment), theme (the org's default theme id, null or absent following the platform, and personal: allowed or locked), uiArrangement (per UI slot, the extension contributions the org hides and their order; a slot not listed follows the platform), the deployment's sandbox egress default and the sandbox cpu / memory limits in effect.",
                 input: z.object({}).strict(),
                 example: {},
                 authz: { orgAction: "org.read" },
@@ -53,7 +53,7 @@ let OrgSettingsOperations = class OrgSettingsOperations {
             }),
             defineOperation({
                 id: "org-settings.update",
-                description: "Change this org's settings (org admins). Give only the settings to change; null clears sandboxEgress or wakeOnBackgroundTask so they follow the deployment again. theme: { id, personal } sets the org's default theme (a theme id from themes.list, or null to follow the platform) and whether members may pick their own (allowed) or not (locked); null clears it. Setting platformTool to off or read-only takes effect from the next call and cuts this Platform tool off in the org, so say so before asking; an org admin switches it back on in the web settings.",
+                description: "Change this org's settings (org admins). Give only the settings to change; null clears sandboxEgress or wakeOnBackgroundTask so they follow the deployment again. theme: { id, personal } sets the org's default theme (a theme id from themes.list, or null to follow the platform) and whether members may pick their own (allowed) or not (locked); null clears it. uiArrangement: { <slot>: { hidden, order } } replaces that slot's entry, where hidden and order list contribution keys <extension>/<contribution> (hidden ones are not listed in the web UI but their pages still open by URL); null for a slot makes it follow the platform again; platform.page is refused. Setting platformTool to off or read-only takes effect from the next call and cuts this Platform tool off in the org, so say so before asking; an org admin switches it back on in the web settings.",
                 input: OrgSettingsPatchSchema.refine((i) => Object.values(i).some((v) => v !== undefined), {
                     message: "give at least one setting",
                 }),

package/dist/platform/ops/orgs.ops.js

@@ -159,6 +159,7 @@ let OrgsOperations = class OrgsOperations {
                     "customSkills",
                     "orgMarketplaceBrowse",
                     "uiTheme",
+                    "uiArrangement",
                 ],
                 extras: ["orgId", "runConcurrency", "sandbox", "subagents"],
                 confirm: "platform",