@capybara-hq/kernel 0.1.0-rc.19 → 0.1.0-rc.20

package/bootstrap.json

@@ -3,103 +3,103 @@
   "schemaVersion": 1,
   "marketplace": {
     "url": "https://github.com/capybara-hq/plugins.git",
-    "commit": "23106860bf79b5ab49ea3a0eeacd60b84142b463"
+    "commit": "14c73d5c51415223326d89414d62b7278ad60745"
   },
   "plugins": [
     {
       "name": "openai-compatible",
       "source": "npm",
       "npm": "@capybara-hq/plugin-openai-compatible",
-      "version": "0.1.0-rc.3",
-      "integrity": "sha512-7ygXLLB79afGG0fgEGzZxXpd2Xt9/rKL4X/1BIiWBKjNW+uWU0VEinw2PSGd3OS1NmonXn4BWpvYLh6wlXvVdg==",
+      "version": "0.1.0-rc.7",
+      "integrity": "sha512-EVsWj0bJns6DirtzTXIbXrrktoiJbZi+8NeLzYpZ53Gwo4hNoNAaIhnfHge9RBhSgZ0xMTKEAP/PlyQ6uasAVA==",
       "required": true
     },
     {
       "name": "object-store-s3",
       "source": "npm",
       "npm": "@capybara-hq/plugin-object-store-s3",
-      "version": "0.1.0-rc.2",
-      "integrity": "sha512-UEhE15+v/uzXVnilz2u4f1mRaBFp6fDVZujo5IfARSw83WEX6tdc+vCS333faAe1L8YJkzNsXZCHPgmxElE+pw==",
+      "version": "0.1.0-rc.6",
+      "integrity": "sha512-zoJ0DDzeZ1WHxZZyHL/D855FTI2Mdjb0Z5RCqWu745eHA4+5DbboBiHsxSwyzQHp7LixyVQLoWxjFgdXCOkcFw==",
       "required": true
     },
     {
       "name": "anthropic",
       "source": "npm",
       "npm": "@capybara-hq/plugin-anthropic",
-      "version": "0.1.0-rc.2",
-      "integrity": "sha512-9UPkGYwds/CDW3pY2Bf31W7/CRLN2jOsRxazFpo/Uu+/XwEtc15/phfe0kV0xJ+M76spH2SnewyJZ3hLtOnJCw==",
+      "version": "0.1.0-rc.6",
+      "integrity": "sha512-x3/vR09Rlcw+kikk9ztmD4fqG0ThscAjAP+R2IOfQxqMNLfcppF0S6zGAWibof3qJ0LG/dr3o0yyH3j20TGlRg==",
       "required": false
     },
     {
       "name": "openai",
       "source": "npm",
       "npm": "@capybara-hq/plugin-openai",
-      "version": "0.1.0-rc.2",
-      "integrity": "sha512-wb9HU+b6O62pObxgFNU/rF855tHwvAoXsCRzbZkuxY354tGxwjLdZjKgYfWdxgwmflkSY/18SGdG7TnyoeEdhA==",
+      "version": "0.1.0-rc.7",
+      "integrity": "sha512-67wjrPJd8/CUzTLOxK+rw1dBL2iCzQ5nj9Zg4R6M6K046i/yp8RGLJiYfFags8SFk3yHCBdQIigBWRsFF7HOfg==",
       "required": false
     },
     {
       "name": "deepseek",
       "source": "npm",
       "npm": "@capybara-hq/plugin-deepseek",
-      "version": "0.1.0-rc.1",
-      "integrity": "sha512-YibChobIRXmv2cIkWffFXHq2RN5HoWK9YrFlXrARAjqa5PhJ1cfQoQrKZQpIPArgCRL/Sb5irQBlHwpvcE1RIQ==",
+      "version": "0.1.0-rc.6",
+      "integrity": "sha512-MO04BQm08JexZ+Pns/I8x6zWG5lSlXuADM2tZaE6/61hA3L1qKnZly9vmE8H6tt+JgbPZda+lMrINhbQ4biv2A==",
       "required": false
     },
     {
       "name": "bailian",
       "source": "npm",
       "npm": "@capybara-hq/plugin-bailian",
-      "version": "0.1.0-rc.1",
-      "integrity": "sha512-grhvqO33R5ugbLHZUN3L5dJiGVL8cCKS3Kxy7IGGjbS5HKEU9LNU1SxXIq55M219RkanSbX7Rtc4wubEYRON1A==",
+      "version": "0.1.0-rc.6",
+      "integrity": "sha512-dqj7fnUkjs5PnsJsqolkZMZ/a+MWz2yMSORiecyRPoM5hNNgc1LY0jtoTLTOFxG6b5sMJJ0iqyISDrZeV4ScyQ==",
       "required": false
     },
     {
       "name": "ark",
       "source": "npm",
       "npm": "@capybara-hq/plugin-ark",
-      "version": "0.1.0-rc.1",
-      "integrity": "sha512-DjOopE1yTX2nE67QcKUA7T7FofxOXtvIyUOezwjS41dt8mCkDuhjJR5jrPbpHO2wJfL5OJ+OfZm1y96DV9cBGw==",
+      "version": "0.1.0-rc.6",
+      "integrity": "sha512-VamP4U4zU6d9uvSAIo9KLxqh0Vt05EnexOF+78W3oY35YrNRXevk/ABFGMVwGEflq9LiJYJ6xisl38t3Aq5fDA==",
       "required": false
     },
     {
       "name": "connector-mcp",
       "source": "npm",
       "npm": "@capybara-hq/plugin-connector-mcp",
-      "version": "0.1.0-rc.2",
-      "integrity": "sha512-23q0VIUYG4Svmoqx4WIA4TWjW3/rpvGv1hZ+aaDED97VfIgVfWByvPxSs7LdKiq+uvaxS20+Nf3Tx4Cqd9cXew==",
+      "version": "0.1.0-rc.6",
+      "integrity": "sha512-p8YmmutRTdj5auF5Ua5ox77S1tht+2URguehopjFaK8Cl34rURM4hY0f7WSJ5Xj884156HBua4AmsBTaDMiasQ==",
       "required": false
     },
     {
       "name": "connector-openapi",
       "source": "npm",
       "npm": "@capybara-hq/plugin-connector-openapi",
-      "version": "0.1.0-rc.3",
-      "integrity": "sha512-bBhV2ugPPRCGxDnbTI5rukw+GjVaDF3nwfGo6eLDI2SgENurGK9rHHz2w1kI+fM43Om/FZqZYtHYc46MkN62rQ==",
+      "version": "0.1.0-rc.7",
+      "integrity": "sha512-hcLe9Ay6ho6C1dFXtVk7VU6kL9NYmjjbh2+7dXl4BJYglGwrGbfVr0FN7TNRQ+Bsy2ni4BuSsJSGv6BYOp6/EA==",
       "required": false
     },
     {
       "name": "jina",
       "source": "npm",
       "npm": "@capybara-hq/plugin-jina",
-      "version": "0.1.0-rc.2",
-      "integrity": "sha512-r+HrV7hCgWPbqWKl7baL0aP+xS6wvec747HbA6ktV/CsO695UYJUsjfYkkyV4NMsiF/hKRWPvE1nkPswRcQNFw==",
+      "version": "0.1.0-rc.6",
+      "integrity": "sha512-ViVwzmq4Ic4iJ7vnwYFSRHm3ON96npVDvcLQH7CqIkpUAKabt8GNBVuD5yAeadKmXY3Gn76VkfjjfmHzJgbOMw==",
       "required": false
     },
     {
       "name": "sandbox-docker",
       "source": "npm",
       "npm": "@capybara-hq/plugin-sandbox-docker",
-      "version": "0.1.0-rc.6",
-      "integrity": "sha512-5eOix8ks7kh0QHtvbdb9PM90drSb4rmdHDtr291FpH+0rbMy4F3/v1Tcmc7bnjqpC++Z870fPG9+1rBdKIGwhQ==",
+      "version": "0.1.0-rc.10",
+      "integrity": "sha512-nDdaWCgrGoAfOiaKMVGheCLTlbFtSo10+8sgPSmJCO4z2LJW0qDMuN7rPwd3QnFsBReNeBwDB5fT6eHscNWDqw==",
       "required": false
     },
     {
       "name": "todo",
       "source": "npm",
       "npm": "@capybara-hq/plugin-todo",
-      "version": "0.1.0-rc.2",
-      "integrity": "sha512-hmBgFEfn7rymz9ZybSLDhiZt8p5Giuo73S1g2NKobGggtSEhPzi6F/JB/Dd0qRfdmCYR7PhZA4DzSj/bQ4B0YA==",
+      "version": "0.1.0-rc.6",
+      "integrity": "sha512-AOKLpoaBfOQUWnP9nszg9DQWR+6z5gl+ZHoTlHysA9LAeC2h/zipjGE9hY69HF9rueSHzM2kGESJLvXIuQODAA==",
       "required": false
     }
   ]

package/dist/admin/admin-agents.controller.d.ts

@@ -0,0 +1,28 @@
+import type { z } from "zod";
+import { type AdminAgentDetail, type AdminAgentRow, AdminAgents } from "../agents/admin-agents.js";
+import { AgentsService } from "../agents/agents.service.js";
+import { type Principal } from "../identity/principal.js";
+import { AdminAgentListQuery, AgentIdParams, OwnerBody } from "./admin-items.schemas.js";
+/**
+ * Every org's agents for the super admin (admin agents and connectors spec §4.1): read any agent,
+ * transfer its owner, delete it. The super admin need not be a member of the agent's org; each
+ * write is audited in that org with `detail.via = "platform"`.
+ */
+export declare class AdminAgentsController {
+    private readonly admin;
+    private readonly agents;
+    constructor(admin: AdminAgents, agents: AgentsService);
+    /** Live agents of live orgs by id; `next` is the `after` of the next page, null at the end. */
+    list(q: z.infer<typeof AdminAgentListQuery>): Promise<{
+        agents: AdminAgentRow[];
+        next: string | null;
+    }>;
+    get({ agentId }: z.infer<typeof AgentIdParams>): Promise<{
+        agent: AdminAgentDetail;
+    }>;
+    /** Gives the agent to another member of its org; clears `needsReassignment`. */
+    transfer(principal: Principal, { agentId }: z.infer<typeof AgentIdParams>, body: z.infer<typeof OwnerBody>): Promise<{
+        agent: AdminAgentDetail;
+    }>;
+    remove(principal: Principal, { agentId }: z.infer<typeof AgentIdParams>): Promise<void>;
+}

package/dist/admin/admin-agents.controller.js

@@ -0,0 +1,79 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Controller, Delete, Get, HttpCode, Inject, Post } from "@nestjs/common";
+import { AdminAgents } from "../agents/admin-agents.js";
+import { AgentsService } from "../agents/agents.service.js";
+import { CurrentPrincipal, SuperAdmin } from "../identity/principal.js";
+import { writeActorOf } from "../identity/write-actor.js";
+import { createZodDto } from "../infra/validation/create-zod-dto.js";
+import { ZBody, ZParam, ZQuery } from "../infra/validation/zod-params.js";
+import { AdminAgentListQuery, AgentIdParams, OwnerBody } from "./admin-items.schemas.js";
+class AdminAgentListQueryDto extends createZodDto(AdminAgentListQuery, "AdminAgentListQuery") {
+}
+class AdminAgentIdParamsDto extends createZodDto(AgentIdParams, "AdminAgentIdParams") {
+}
+class AdminOwnerBodyDto extends createZodDto(OwnerBody, "AdminAgentOwnerBody") {
+}
+/**
+ * Every org's agents for the super admin (admin agents and connectors spec §4.1): read any agent,
+ * transfer its owner, delete it. The super admin need not be a member of the agent's org; each
+ * write is audited in that org with `detail.via = "platform"`.
+ */
+let AdminAgentsController = class AdminAgentsController {
+    admin;
+    agents;
+    constructor(admin, agents) {
+        this.admin = admin;
+        this.agents = agents;
+    }
+    /** Live agents of live orgs by id; `next` is the `after` of the next page, null at the end. */
+    list(q) {
+        return this.admin.list(q);
+    }
+    async get({ agentId }) {
+        return { agent: await this.admin.get(agentId) };
+    }
+    /** Gives the agent to another member of its org; clears `needsReassignment`. */
+    async transfer(principal, { agentId }, body) {
+        await this.agents.reassignOwnerAsPlatform(agentId, body.accountId, writeActorOf(principal));
+        return { agent: await this.admin.get(agentId) };
+    }
+    async remove(principal, { agentId }) {
+        await this.agents.softDeleteAsPlatform(agentId, writeActorOf(principal));
+    }
+};
+__decorate([
+    Get(),
+    __param(0, ZQuery(AdminAgentListQueryDto))
+], AdminAgentsController.prototype, "list", null);
+__decorate([
+    Get(":agentId"),
+    __param(0, ZParam(AdminAgentIdParamsDto))
+], AdminAgentsController.prototype, "get", null);
+__decorate([
+    Post(":agentId/owner"),
+    HttpCode(200),
+    __param(0, CurrentPrincipal()),
+    __param(1, ZParam(AdminAgentIdParamsDto)),
+    __param(2, ZBody(AdminOwnerBodyDto))
+], AdminAgentsController.prototype, "transfer", null);
+__decorate([
+    Delete(":agentId"),
+    HttpCode(204),
+    __param(0, CurrentPrincipal()),
+    __param(1, ZParam(AdminAgentIdParamsDto))
+], AdminAgentsController.prototype, "remove", null);
+AdminAgentsController = __decorate([
+    Controller("api/v1/admin/agents"),
+    SuperAdmin(),
+    __param(0, Inject(AdminAgents)),
+    __param(1, Inject(AgentsService))
+], AdminAgentsController);
+export { AdminAgentsController };

package/dist/admin/admin-connectors.controller.d.ts

@@ -0,0 +1,29 @@
+import type { z } from "zod";
+import { type Principal } from "../identity/principal.js";
+import { type AdminConnectorDetail, type AdminConnectorRow, AdminConnectors } from "../tools/admin-connectors.js";
+import { ConnectorsService } from "../tools/connectors.service.js";
+import { AdminConnectorListQuery, ConnectorIdParams, ConnectorStatusBody } from "./admin-items.schemas.js";
+/**
+ * Every org's connectors for the super admin (admin agents and connectors spec §4.1): read any
+ * connector without its credentials, disable or enable it, delete it. The super admin need not be
+ * a member of the connector's org; each write is audited there with `detail.via = "platform"`.
+ */
+export declare class AdminConnectorsController {
+    private readonly admin;
+    private readonly connectors;
+    constructor(admin: AdminConnectors, connectors: ConnectorsService);
+    /** Live connectors of live orgs by id; `next` is the `after` of the next page, null at the end. */
+    list(q: z.infer<typeof AdminConnectorListQuery>): Promise<{
+        connectors: AdminConnectorRow[];
+        next: string | null;
+    }>;
+    get({ connectorId }: z.infer<typeof ConnectorIdParams>): Promise<{
+        connector: AdminConnectorDetail;
+    }>;
+    /** Disables or enables the connector (its endpoint and auth stay the org's to edit). */
+    setStatus(principal: Principal, { connectorId }: z.infer<typeof ConnectorIdParams>, body: z.infer<typeof ConnectorStatusBody>): Promise<{
+        connector: AdminConnectorDetail;
+    }>;
+    /** Deletes the connector and every credential of it. */
+    remove(principal: Principal, { connectorId }: z.infer<typeof ConnectorIdParams>): Promise<void>;
+}

package/dist/admin/admin-connectors.controller.js

@@ -0,0 +1,79 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Controller, Delete, Get, HttpCode, Inject, Patch } from "@nestjs/common";
+import { CurrentPrincipal, SuperAdmin } from "../identity/principal.js";
+import { writeActorOf } from "../identity/write-actor.js";
+import { createZodDto } from "../infra/validation/create-zod-dto.js";
+import { ZBody, ZParam, ZQuery } from "../infra/validation/zod-params.js";
+import { AdminConnectors, } from "../tools/admin-connectors.js";
+import { ConnectorsService } from "../tools/connectors.service.js";
+import { AdminConnectorListQuery, ConnectorIdParams, ConnectorStatusBody, } from "./admin-items.schemas.js";
+class AdminConnectorListQueryDto extends createZodDto(AdminConnectorListQuery, "AdminConnectorListQuery") {
+}
+class AdminConnectorIdParamsDto extends createZodDto(ConnectorIdParams, "AdminConnectorIdParams") {
+}
+class ConnectorStatusBodyDto extends createZodDto(ConnectorStatusBody, "AdminConnectorStatusBody") {
+}
+/**
+ * Every org's connectors for the super admin (admin agents and connectors spec §4.1): read any
+ * connector without its credentials, disable or enable it, delete it. The super admin need not be
+ * a member of the connector's org; each write is audited there with `detail.via = "platform"`.
+ */
+let AdminConnectorsController = class AdminConnectorsController {
+    admin;
+    connectors;
+    constructor(admin, connectors) {
+        this.admin = admin;
+        this.connectors = connectors;
+    }
+    /** Live connectors of live orgs by id; `next` is the `after` of the next page, null at the end. */
+    list(q) {
+        return this.admin.list(q);
+    }
+    async get({ connectorId }) {
+        return { connector: await this.admin.get(connectorId) };
+    }
+    /** Disables or enables the connector (its endpoint and auth stay the org's to edit). */
+    async setStatus(principal, { connectorId }, body) {
+        await this.connectors.setStatusAsPlatform(connectorId, body.status, writeActorOf(principal));
+        return { connector: await this.admin.get(connectorId) };
+    }
+    /** Deletes the connector and every credential of it. */
+    async remove(principal, { connectorId }) {
+        await this.connectors.removeAsPlatform(connectorId, writeActorOf(principal));
+    }
+};
+__decorate([
+    Get(),
+    __param(0, ZQuery(AdminConnectorListQueryDto))
+], AdminConnectorsController.prototype, "list", null);
+__decorate([
+    Get(":connectorId"),
+    __param(0, ZParam(AdminConnectorIdParamsDto))
+], AdminConnectorsController.prototype, "get", null);
+__decorate([
+    Patch(":connectorId"),
+    __param(0, CurrentPrincipal()),
+    __param(1, ZParam(AdminConnectorIdParamsDto)),
+    __param(2, ZBody(ConnectorStatusBodyDto))
+], AdminConnectorsController.prototype, "setStatus", null);
+__decorate([
+    Delete(":connectorId"),
+    HttpCode(204),
+    __param(0, CurrentPrincipal()),
+    __param(1, ZParam(AdminConnectorIdParamsDto))
+], AdminConnectorsController.prototype, "remove", null);
+AdminConnectorsController = __decorate([
+    Controller("api/v1/admin/connectors"),
+    SuperAdmin(),
+    __param(0, Inject(AdminConnectors)),
+    __param(1, Inject(ConnectorsService))
+], AdminConnectorsController);
+export { AdminConnectorsController };

package/dist/admin/admin-items.schemas.d.ts

@@ -0,0 +1,42 @@
+import { z } from "zod";
+import type { RouteSchemas } from "../platform/route-schemas.js";
+/** `GET /api/v1/admin/agents`: org filter, name search, id paging. */
+export declare const AdminAgentListQuery: z.ZodObject<{
+    after: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    orgId: z.ZodOptional<z.ZodString>;
+    q: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** `GET /api/v1/admin/connectors`: org and status filters, name search, id paging. */
+export declare const AdminConnectorListQuery: z.ZodObject<{
+    after: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    orgId: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        active: "active";
+        disabled: "disabled";
+    }>>;
+    q: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const AgentIdParams: z.ZodObject<{
+    agentId: z.ZodString;
+}, z.core.$strip>;
+export declare const ConnectorIdParams: z.ZodObject<{
+    connectorId: z.ZodString;
+}, z.core.$strip>;
+/** The new owner: a member of the agent's org, not its anonymous guest. */
+export declare const OwnerBody: z.ZodObject<{
+    accountId: z.ZodString;
+}, z.core.$strict>;
+/** Only the status: a connector's endpoint and auth stay the org's. */
+export declare const ConnectorStatusBody: z.ZodObject<{
+    status: z.ZodEnum<{
+        active: "active";
+        disabled: "disabled";
+    }>;
+}, z.core.$strict>;
+/**
+ * The routes a Platform operation mirrors. The owner transfer is excluded (human-only, as the org's
+ * own transfer route), so it is not listed.
+ */
+export declare const ADMIN_ITEM_ROUTES: readonly RouteSchemas[];

package/dist/admin/admin-items.schemas.js

@@ -0,0 +1,48 @@
+import { z } from "zod";
+/**
+ * Schemas of the super admin's routes for every org's agents and connectors (admin agents and
+ * connectors spec §4.1). Ids are `text` columns, so a malformed id cannot fail the query: it is
+ * bounded here (400 `validation_failed` past 100 characters) and otherwise reads as not found.
+ */
+const Id = z.string().min(1).max(100);
+const Paging = {
+    /** The last id of the previous page (the `next` of the previous response). */
+    after: Id.optional(),
+    limit: z.coerce.number().int().min(1).max(200).default(50),
+};
+/** `GET /api/v1/admin/agents`: org filter, name search, id paging. */
+export const AdminAgentListQuery = z.object({
+    orgId: Id.optional(),
+    q: z.string().max(200).optional(),
+    ...Paging,
+});
+/** `GET /api/v1/admin/connectors`: org and status filters, name search, id paging. */
+export const AdminConnectorListQuery = z.object({
+    orgId: Id.optional(),
+    status: z.enum(["active", "disabled"]).optional(),
+    q: z.string().max(200).optional(),
+    ...Paging,
+});
+export const AgentIdParams = z.object({ agentId: Id });
+export const ConnectorIdParams = z.object({ connectorId: Id });
+/** The new owner: a member of the agent's org, not its anonymous guest. */
+export const OwnerBody = z.object({ accountId: Id }).strict();
+/** Only the status: a connector's endpoint and auth stay the org's. */
+export const ConnectorStatusBody = z.object({ status: z.enum(["active", "disabled"]) }).strict();
+/**
+ * The routes a Platform operation mirrors. The owner transfer is excluded (human-only, as the org's
+ * own transfer route), so it is not listed.
+ */
+export const ADMIN_ITEM_ROUTES = [
+    { route: "GET /api/v1/admin/agents", query: AdminAgentListQuery },
+    { route: "GET /api/v1/admin/agents/:agentId", params: AgentIdParams },
+    { route: "DELETE /api/v1/admin/agents/:agentId", params: AgentIdParams },
+    { route: "GET /api/v1/admin/connectors", query: AdminConnectorListQuery },
+    { route: "GET /api/v1/admin/connectors/:connectorId", params: ConnectorIdParams },
+    {
+        route: "PATCH /api/v1/admin/connectors/:connectorId",
+        params: ConnectorIdParams,
+        body: ConnectorStatusBody,
+    },
+    { route: "DELETE /api/v1/admin/connectors/:connectorId", params: ConnectorIdParams },
+];

package/dist/admin/admin.controller.d.ts

@@ -1,7 +1,5 @@
 import type { LocalizedName, Logger } from "@capybara-hq/plugin-sdk";
 import type { z } from "zod";
-import { CatalogRequestsService } from "../catalog/requests.service.js";
-import { ExtensionAdmin } from "../extensions/admin-view.js";
 import { ExtensionDisplayNames } from "../extensions/display-name.js";
 import { PluginIcons } from "../extensions/plugin-icons.js";
 import { type Account, AccountsService } from "../identity/accounts.js";
@@ -13,22 +11,11 @@ import { type ModelDisabledPatch, type ModelProviderParams } from "../models/ena
 import { type ModelDisableResult, ModelEnablement } from "../models/enablement.js";
 import { type ModelPrice, type ModelPricePut, PricesService } from "../models/prices.js";
 import { ModelPurposesService, type PurposeListing, type PurposePut } from "../models/purposes.js";
+import { type Member, MembersService } from "../orgs/members.service.js";
 import { type Org, OrgsService } from "../orgs/orgs.service.js";
 import { ProviderRegistry, type ProviderStatus } from "../runtime/providers.js";
-import { AccountListQuery, AccountParams, CreateAccountBody, DeploymentSettingsBody, PurposeParams, UpdateAccountBody } from "./admin.schemas.js";
+import { AccountListQuery, AccountParams, AdminOrgParams, CreateAccountBody, DeploymentSettingsBody, PurposeParams, UpdateAccountBody } from "./admin.schemas.js";
 import { type LimitDefaults } from "./limit-defaults.js";
-/** 后台概览（`GET /api/v1/admin/overview`）的计数。 */
-export interface AdminOverview {
-    /**
-     * Extensions a super admin has to act on (pending approval or configuration, failed, missing
-     * dependency, replicas disagree); see `extensionNeedsAction`.
-     */
-    extensionsNeedingAction: number;
-    /** Catalog requests waiting for a super admin (stage deployment, pending). */
-    catalogRequestsPending: number;
-    orgs: number;
-    accounts: number;
-}
 /**
  * 超级管理员端点（`/api/v1/admin/*`）：只接受超级管理员的 Web 会话或个人令牌；
  * 服务令牌一律 `forbidden`（未标 `@AllowService`）。
@@ -41,16 +28,13 @@ export declare class AdminController {
     private readonly settings;
     private readonly prices;
     private readonly purposes;
-    private readonly plugins;
     private readonly registry;
-    private readonly catalogRequests;
     private readonly displayNames;
     private readonly enablement;
     private readonly config;
     private readonly icons;
-    constructor(accounts: AccountsService, sessions: SessionService, log: Logger, orgs: OrgsService, settings: SettingsService, prices: PricesService, purposes: ModelPurposesService, plugins: ExtensionAdmin, registry: ProviderRegistry, catalogRequests: CatalogRequestsService, displayNames: ExtensionDisplayNames, enablement: ModelEnablement, config: KernelConfigService, icons: PluginIcons);
-    /** 后台概览的四个数字（只读计数，不含任何对话内容）。 */
-    overview(): Promise<AdminOverview>;
+    private readonly members;
+    constructor(accounts: AccountsService, sessions: SessionService, log: Logger, orgs: OrgsService, settings: SettingsService, prices: PricesService, purposes: ModelPurposesService, registry: ProviderRegistry, displayNames: ExtensionDisplayNames, enablement: ModelEnablement, config: KernelConfigService, icons: PluginIcons, members: MembersService);
     /**
      * 全部账号，按 id 升序分页：`next` 为下一页的游标（作为 `after` 传回），没有更多时为 null。
      * 多取一条判断是否还有下一页。
@@ -76,6 +60,13 @@ export declare class AdminController {
         })[];
         limitDefaults: LimitDefaults;
     }>;
+    /**
+     * The members of any live org (the agent owner transfer picks the new owner from them); the super
+     * admin need not be a member. A missing or deleted org → `org.not_found`.
+     */
+    orgMembers({ orgId }: z.infer<typeof AdminOrgParams>): Promise<{
+        members: Member[];
+    }>;
     getSettings(): Promise<DeploymentSettings>;
     putSettings(principal: Principal, body: z.infer<typeof DeploymentSettingsBody>): Promise<DeploymentSettings>;
     /**

package/dist/admin/admin.controller.js

@@ -8,10 +8,8 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
 import { Controller, Get, HttpCode, Inject, Patch, Post, Put } from "@nestjs/common";
-import { CatalogRequestsService } from "../catalog/requests.service.js";
-import { ExtensionAdmin } from "../extensions/admin-view.js";
+import { ApiError } from "../errors.js";
 import { ExtensionDisplayNames } from "../extensions/display-name.js";
-import { extensionNeedsAction } from "../extensions/permission-view.js";
 import { PluginIcons } from "../extensions/plugin-icons.js";
 import { AccountsService } from "../identity/accounts.js";
 import { CurrentPrincipal, patTokenId, requireUser, SuperAdmin, } from "../identity/principal.js";
@@ -26,9 +24,10 @@ import { ModelEnablement } from "../models/enablement.js";
 import { MODEL_PRICE_PUT, PricesService, } from "../models/prices.js";
 import { purposeTargetOf } from "../models/purposes.controller.js";
 import { ModelPurposesService, PurposePutDto, withDeclaredByNames, } from "../models/purposes.js";
+import { MembersService } from "../orgs/members.service.js";
 import { OrgsService } from "../orgs/orgs.service.js";
 import { ProviderRegistry } from "../runtime/providers.js";
-import { AccountListQuery, AccountParams, CreateAccountBody, DeploymentSettingsBody, PurposeParams, UpdateAccountBody, } from "./admin.schemas.js";
+import { AccountListQuery, AccountParams, AdminOrgParams, CreateAccountBody, DeploymentSettingsBody, PurposeParams, UpdateAccountBody, } from "./admin.schemas.js";
 import { limitDefaults } from "./limit-defaults.js";
 class AccountListQueryDto extends createZodDto(AccountListQuery, "AccountListQuery") {
 }
@@ -38,6 +37,8 @@ class UpdateAccountBodyDto extends createZodDto(UpdateAccountBody, "UpdateAccoun
 }
 class AccountParamsDto extends createZodDto(AccountParams, "AccountParams") {
 }
+class AdminOrgParamsDto extends createZodDto(AdminOrgParams, "AdminOrgParams") {
+}
 class PurposeParamsDto extends createZodDto(PurposeParams, "PurposeParams") {
 }
 class DeploymentSettingsBodyDto extends createZodDto(DeploymentSettingsBody, "DeploymentSettingsPatch") {
@@ -56,14 +57,13 @@ let AdminController = class AdminController {
     settings;
     prices;
     purposes;
-    plugins;
     registry;
-    catalogRequests;
     displayNames;
     enablement;
     config;
     icons;
-    constructor(accounts, sessions, log, orgs, settings, prices, purposes, plugins, registry, catalogRequests, displayNames, enablement, config, icons) {
+    members;
+    constructor(accounts, sessions, log, orgs, settings, prices, purposes, registry, displayNames, enablement, config, icons, members) {
         this.accounts = accounts;
         this.sessions = sessions;
         this.log = log;
@@ -71,28 +71,12 @@ let AdminController = class AdminController {
         this.settings = settings;
         this.prices = prices;
         this.purposes = purposes;
-        this.plugins = plugins;
         this.registry = registry;
-        this.catalogRequests = catalogRequests;
         this.displayNames = displayNames;
         this.enablement = enablement;
         this.config = config;
         this.icons = icons;
-    }
-    /** 后台概览的四个数字（只读计数，不含任何对话内容）。 */
-    async overview() {
-        const [plugins, orgs, accounts, catalogRequestsPending] = await Promise.all([
-            this.plugins.list(),
-            this.orgs.listAll(),
-            this.accounts.count(),
-            this.catalogRequests.countPendingDeployment(),
-        ]);
-        return {
-            extensionsNeedingAction: plugins.filter((p) => extensionNeedsAction(p.status)).length,
-            catalogRequestsPending,
-            orgs: orgs.length,
-            accounts,
-        };
+        this.members = members;
     }
     /**
      * 全部账号，按 id 升序分页：`next` 为下一页的游标（作为 `after` 传回），没有更多时为 null。
@@ -147,6 +131,16 @@ let AdminController = class AdminController {
     async listOrgs() {
         return { orgs: await this.orgs.listAll(), limitDefaults: limitDefaults(this.config) };
     }
+    /**
+     * The members of any live org (the agent owner transfer picks the new owner from them); the super
+     * admin need not be a member. A missing or deleted org → `org.not_found`.
+     */
+    async orgMembers({ orgId }) {
+        if ((await this.orgs.get(orgId)) === undefined) {
+            throw new ApiError("org.not_found", "Organization not found");
+        }
+        return { members: await this.members.list(orgId) };
+    }
     async getSettings() {
         return this.settings.get();
     }
@@ -215,9 +209,6 @@ let AdminController = class AdminController {
         return { purpose: listing };
     }
 };
-__decorate([
-    Get("overview")
-], AdminController.prototype, "overview", null);
 __decorate([
     Get("accounts"),
     __param(0, ZQuery(AccountListQueryDto))
@@ -237,6 +228,10 @@ __decorate([
 __decorate([
     Get("orgs")
 ], AdminController.prototype, "listOrgs", null);
+__decorate([
+    Get("orgs/:orgId/members"),
+    __param(0, ZParam(AdminOrgParamsDto))
+], AdminController.prototype, "orgMembers", null);
 __decorate([
     Get("settings")
 ], AdminController.prototype, "getSettings", null);
@@ -281,12 +276,11 @@ AdminController = __decorate([
     __param(4, Inject(SettingsService)),
     __param(5, Inject(PricesService)),
     __param(6, Inject(ModelPurposesService)),
-    __param(7, Inject(ExtensionAdmin)),
-    __param(8, Inject(ProviderRegistry)),
-    __param(9, Inject(CatalogRequestsService)),
-    __param(10, Inject(ExtensionDisplayNames)),
-    __param(11, Inject(ModelEnablement)),
-    __param(12, Inject(KernelConfigService)),
-    __param(13, Inject(PluginIcons))
+    __param(7, Inject(ProviderRegistry)),
+    __param(8, Inject(ExtensionDisplayNames)),
+    __param(9, Inject(ModelEnablement)),
+    __param(10, Inject(KernelConfigService)),
+    __param(11, Inject(PluginIcons)),
+    __param(12, Inject(MembersService))
 ], AdminController);
 export { AdminController };

package/dist/admin/admin.module.d.ts

@@ -1,3 +1,6 @@
-/** Deployment administration: the setup wizard (its controllers are the api role's, `ApiModule`). */
+/**
+ * Deployment administration: the setup wizard, the platform-level audit log and the admin overview
+ * with its health read and seven-day usage aggregate (its controllers are the api role's, `ApiModule`).
+ */
 export declare class AdminModule {
 }