@capybara-hq/kernel 0.1.0-rc.2 → 0.1.0-rc.20

package/dist/orgs/offboarding.d.ts

@@ -30,8 +30,8 @@ export interface OffboardResult {
     runs: InFlightRun[];
     /** 负责的 agent 转交给的所有者；没有转交时为 null。 */
     newOwnerId: string | null;
-    /** 此人在该组织的对话里还没销毁的沙箱（按对话 id），提交后投递销毁。 */
-    sandboxConversations: string[];
+    /** The person's devices in the org, soft-deleted here; destroyed by a job after commit. */
+    devices: string[];
     /** Conversations whose queued messages were deleted (`changed: queue` after commit). */
     queueConversations: string[];
 }
@@ -66,7 +66,7 @@ export declare class Offboarding {
     private readonly redis;
     private readonly registry;
     private readonly eventLog;
-    /** The departed member's sandboxes: one-off maintenance jobs, destroyed one by one by a worker. */
+    /** The departed member's devices: one-off maintenance jobs, destroyed by a worker. */
     private readonly sandboxJobs;
     /** Stops the departed member's runs (`by: null`, a system action). */
     private readonly runs;
@@ -75,7 +75,7 @@ export declare class Offboarding {
     private readonly questions;
     readonly log: KernelLogger;
     constructor(db: KernelDb, txHost: TransactionHost, sessions: Pick<SessionService, "markRevoked">, redis: Pick<Redis, "set" | "exists">, registry: Pick<ExtensionRegistry, "list">, eventLog: Pick<EventLog, "notify" | "publishChanged">, 
-    /** The departed member's sandboxes: one-off maintenance jobs, destroyed one by one by a worker. */
+    /** The departed member's devices: one-off maintenance jobs, destroyed by a worker. */
     sandboxJobs: Pick<SandboxJobs, "destroy">, 
     /** Stops the departed member's runs (`by: null`, a system action). */
     runs: OffboardingRunControl, credentials: Pick<Credentials, "clearAccount">, approvals: Pick<ApprovalsService, "cancelPendingFor">, questions: Pick<QuestionsService, "cancelPendingFor">, log: KernelLogger);
@@ -83,7 +83,9 @@ export declare class Offboarding {
      * In the caller's transaction (`mandatory`: the caller holds the org row lock, order org row →
      * membership, and did the "last owner" checks)：
      * 1. 删除成员关系（非成员 → `member.not_found`；删后组织没有 owner → `org.last_owner`），清空指向该组织的会话当前组织；
-     * 2. 吊销该账号**全部**会话与个人令牌（令牌与会话是账号级的，无法只吊销「该组织下」的，按保守处理）；
+     * 2. Removal and directory offboarding revoke **every** session and personal token of the
+     *    account (both are account-wide, so conservatively all); a person who leaves (`left`) keeps
+     *    them, and the session's current org is cleared (the membership check ends the access);
      * 3. 删除其在该组织所有连接器上的个人凭据；
      * 4. 取消其作为处理人的 pending 审批与提问（写 cancelled 事件），记下此人在该组织进行中的运行（提交后中止）；
      * 5. 其负责的该组织 agent 转给组织所有者（最早加入的 owner）并置 `needs_reassignment = true`；
@@ -93,7 +95,9 @@ export declare class Offboarding {
      *    以及成员关系自身的 `directory:<插件>` 来源，不论此人当初是不是由通讯录加入（手动重新加入后再被移出也不会被同步加回）；
      *    同步不再把此人加回，直到有人手动重新加入（{@link MembersService.add} 删除排除）；
      * 8. 审计 `org.member.offboarded`；
-     * 9. 记下此人在该组织对话里还没销毁的沙箱（提交后销毁，尽力而为）。
+     * 9. Soft-deletes the person's devices in the org and clears their default row (the
+     *    instances and files are destroyed after the commit, best effort; the hourly sweep finishes
+     *    any left).
      */
     offboard(orgId: string, accountId: string, reason: OffboardReason, actor?: {
         actorAccountId?: string;
@@ -104,8 +108,8 @@ export declare class Offboarding {
     /**
      * After the commit (callers register it with the infra `afterCommit` inside their transaction):
      * writes the session revocation markers, publishes the cancelled events, stops the person's
-     * runs in the org and schedules destroying their conversations' sandboxes. A failing step only
-     * logs a warning.
+     * runs in the org and schedules destroying their devices. A failing step only logs a
+     * warning.
      */
     afterOffboard(r: OffboardResult): Promise<void>;
     /**

package/dist/orgs/offboarding.js

@@ -10,6 +10,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 import { DIRECTORY_EXTENSION_POINT } from "@capybara-hq/plugin-sdk";
 import { Inject, Injectable } from "@nestjs/common";
 import { sql } from "kysely";
+import { retargetSetupRequests } from "../agents/pending-connector-requests.js";
 import { EventLog } from "../conversations/event-log.js";
 import { ApiError } from "../errors.js";
 import { enabledExtensionsQuery } from "../extensions/enabled.js";
@@ -62,7 +63,7 @@ let Offboarding = class Offboarding {
     questions;
     log;
     constructor(db, txHost, sessions, redis, registry, eventLog, 
-    /** The departed member's sandboxes: one-off maintenance jobs, destroyed one by one by a worker. */
+    /** The departed member's devices: one-off maintenance jobs, destroyed by a worker. */
     sandboxJobs, 
     /** Stops the departed member's runs (`by: null`, a system action). */
     runs, credentials, approvals, questions, log) {
@@ -83,7 +84,9 @@ let Offboarding = class Offboarding {
      * In the caller's transaction (`mandatory`: the caller holds the org row lock, order org row →
      * membership, and did the "last owner" checks)：
      * 1. 删除成员关系（非成员 → `member.not_found`；删后组织没有 owner → `org.last_owner`），清空指向该组织的会话当前组织；
-     * 2. 吊销该账号**全部**会话与个人令牌（令牌与会话是账号级的，无法只吊销「该组织下」的，按保守处理）；
+     * 2. Removal and directory offboarding revoke **every** session and personal token of the
+     *    account (both are account-wide, so conservatively all); a person who leaves (`left`) keeps
+     *    them, and the session's current org is cleared (the membership check ends the access);
      * 3. 删除其在该组织所有连接器上的个人凭据；
      * 4. 取消其作为处理人的 pending 审批与提问（写 cancelled 事件），记下此人在该组织进行中的运行（提交后中止）；
      * 5. 其负责的该组织 agent 转给组织所有者（最早加入的 owner）并置 `needs_reassignment = true`；
@@ -93,7 +96,9 @@ let Offboarding = class Offboarding {
      *    以及成员关系自身的 `directory:<插件>` 来源，不论此人当初是不是由通讯录加入（手动重新加入后再被移出也不会被同步加回）；
      *    同步不再把此人加回，直到有人手动重新加入（{@link MembersService.add} 删除排除）；
      * 8. 审计 `org.member.offboarded`；
-     * 9. 记下此人在该组织对话里还没销毁的沙箱（提交后销毁，尽力而为）。
+     * 9. Soft-deletes the person's devices in the org and clears their default row (the
+     *    instances and files are destroyed after the commit, best effort; the hourly sweep finishes
+     *    any left).
      */
     async offboard(orgId, accountId, reason, actor = {}) {
         const deleted = await this.db
@@ -150,21 +155,29 @@ let Offboarding = class Offboarding {
             .where("account_id", "=", accountId)
             .where("current_org_id", "=", orgId)
             .execute();
-        const sessions = await this.db
-            .updateTable("sessions")
-            .set({ revoked_at: sql `now()` })
-            .where("account_id", "=", accountId)
-            .where("revoked_at", "is", null)
-            .returning("id")
-            .execute();
-        const tokens = await this.db
-            .updateTable("api_tokens")
-            .set({ revoked_at: sql `now()` })
-            .where("kind", "=", "personal")
-            .where("account_id", "=", accountId)
-            .where("revoked_at", "is", null)
-            .returning("id")
-            .execute();
+        // A person who leaves keeps their sign-in and personal tokens: the org guard reads the
+        // membership on every request, so access to this org ends with the row above, and their other
+        // orgs keep working. Removal and directory offboarding revoke both (account-wide, conservative).
+        const revoke = reason !== "left";
+        const sessions = revoke
+            ? await this.db
+                .updateTable("sessions")
+                .set({ revoked_at: sql `now()` })
+                .where("account_id", "=", accountId)
+                .where("revoked_at", "is", null)
+                .returning("id")
+                .execute()
+            : [];
+        const tokens = revoke
+            ? await this.db
+                .updateTable("api_tokens")
+                .set({ revoked_at: sql `now()` })
+                .where("kind", "=", "personal")
+                .where("account_id", "=", accountId)
+                .where("revoked_at", "is", null)
+                .returning("id")
+                .execute()
+            : [];
         // in this transaction (the approvals and questions services join it: `mandatory`)
         const credentials = await this.credentials.clearAccount(orgId, accountId);
         const approvals = await this.approvals.cancelPendingFor(orgId, accountId);
@@ -200,6 +213,8 @@ let Offboarding = class Offboarding {
             .where("deleted_at", "is", null)
             .returning("id")
             .execute();
+        // their connector setup requests follow them to the org owner (ruling P4-T6-4)
+        await retargetSetupRequests(this.db.db, agents.map((a) => a.id), owner.account_id);
         const threads = await this.db
             .updateTable("channel_threads")
             .set({ archived_at: sql `now()` })
@@ -244,13 +259,19 @@ let Offboarding = class Offboarding {
                 .where("id", "in", queueConversations)
                 .execute();
         }
-        const sandboxes = await this.db
-            .selectFrom("sandboxes")
-            .innerJoin("conversations", "conversations.id", "sandboxes.conversation_id")
-            .select("sandboxes.conversation_id")
-            .where("conversations.org_id", "=", orgId)
-            .where("conversations.account_id", "=", accountId)
-            .where("sandboxes.status", "<>", "destroyed")
+        const devices = await this.db
+            .updateTable("devices")
+            .set({ deleted_at: sql `now()`, updated_at: sql `now()` })
+            .where("org_id", "=", orgId)
+            .where("owner_kind", "=", "personal")
+            .where("owner_account_id", "=", accountId)
+            .where("deleted_at", "is", null)
+            .returning("id")
+            .execute();
+        await this.db
+            .deleteFrom("device_defaults")
+            .where("org_id", "=", orgId)
+            .where("account_id", "=", accountId)
             .execute();
         await audit(this.db.db, {
             ...(actor.actorAccountId !== undefined && { actorAccountId: actor.actorAccountId }),
@@ -272,7 +293,7 @@ let Offboarding = class Offboarding {
                 channelThreadsArchived: Number(threads.numUpdatedRows),
                 toolGrantsDeleted: Number(grants.numDeletedRows),
                 ...(excluded.length > 0 && { directoryExcluded: excluded }),
-                ...(sandboxes.length > 0 && { sandboxesToDestroy: sandboxes.length }),
+                ...(devices.length > 0 && { devicesDeleted: devices.length }),
                 ...(queued.length > 0 && { queuedMessagesDeleted: queued.length }),
             },
         });
@@ -286,7 +307,7 @@ let Offboarding = class Offboarding {
                 status: r.status,
             })),
             newOwnerId: agents.length > 0 ? owner.account_id : null,
-            sandboxConversations: sandboxes.map((r) => r.conversation_id),
+            devices: devices.map((r) => r.id),
             queueConversations,
         };
     }
@@ -315,8 +336,8 @@ let Offboarding = class Offboarding {
     /**
      * After the commit (callers register it with the infra `afterCommit` inside their transaction):
      * writes the session revocation markers, publishes the cancelled events, stops the person's
-     * runs in the org and schedules destroying their conversations' sandboxes. A failing step only
-     * logs a warning.
+     * runs in the org and schedules destroying their devices. A failing step only logs a
+     * warning.
      */
     async afterOffboard(r) {
         const { sessions, log, eventLog } = this;
@@ -344,13 +365,13 @@ let Offboarding = class Offboarding {
         }
         for (const run of r.runs)
             await this.stopRun(run);
-        if (r.sandboxConversations.length > 0) {
+        if (r.devices.length > 0) {
             try {
-                await this.sandboxJobs.destroy(r.sandboxConversations);
+                await this.sandboxJobs.destroy(r.devices);
             }
             catch (err) {
-                log.warn("offboarding: cannot schedule sandbox destruction", {
-                    count: r.sandboxConversations.length,
+                log.warn("offboarding: cannot schedule device destruction", {
+                    count: r.devices.length,
                     err,
                 });
             }

package/dist/orgs/org-lock.d.ts

@@ -35,6 +35,11 @@ export declare class OrgLock {
         org: LockedOrg;
         role: OrgRole;
     }>;
+    /**
+     * {@link lockAndAuthorize} for an account; for the kernel itself (`null`: a job acting for no
+     * person, such as the plugin scope sync) only the lock, since no role applies.
+     */
+    lockFor(orgId: string, actor: string | null, action: OrgAction): Promise<void>;
 }
 /** The one {@link OrgLock}: identity (service tokens), orgs and the other domains import it. */
 export declare class OrgLockModule {

package/dist/orgs/org-lock.js

@@ -67,6 +67,16 @@ let OrgLock = class OrgLock {
         }
         return { org, role: m.role };
     }
+    /**
+     * {@link lockAndAuthorize} for an account; for the kernel itself (`null`: a job acting for no
+     * person, such as the plugin scope sync) only the lock, since no role applies.
+     */
+    async lockFor(orgId, actor, action) {
+        if (actor === null)
+            await this.lock(orgId);
+        else
+            await this.lockAndAuthorize(orgId, actor, action);
+    }
 };
 __decorate([
     Transactional({ propagation: "mandatory" })
@@ -77,6 +87,9 @@ __decorate([
 __decorate([
     Transactional({ propagation: "mandatory" })
 ], OrgLock.prototype, "lockAndAuthorize", null);
+__decorate([
+    Transactional({ propagation: "mandatory" })
+], OrgLock.prototype, "lockFor", null);
 OrgLock = __decorate([
     Injectable(),
     __param(0, Inject(KernelDb)),

package/dist/orgs/org.guard.d.ts

@@ -1,5 +1,7 @@
 import { type CanActivate, type ExecutionContext } from "@nestjs/common";
 import { Reflector } from "@nestjs/core";
+import type { KernelSchemaDb } from "../db/kernel-schema.js";
+import { type Principal } from "../identity/principal.js";
 import { KernelDb } from "../infra/database/kernel-db.js";
 import { type OrgAction as Action, type OrgRole } from "./roles.js";
 /** OrgGuard 放在请求上的组织上下文。 */
@@ -21,6 +23,14 @@ export declare const ORG_ACTION_KEY = "capybara:org:action";
 export declare function OrgAction(action: Action): MethodDecorator & ClassDecorator;
 /** 参数装饰器：取 OrgGuard 放在 `req.org` 上的 `{ orgId, role }`。 */
 export declare const CurrentOrg: () => ParameterDecorator;
+/**
+ * The org role check of {@link OrgGuard}, read live from PG: the caller's role in `orgId` (a
+ * person's membership, a service token's own org and role) allows `action`, else 404
+ * `org.not_found` (missing, soft-deleted, not a member: existence is not disclosed) or 403
+ * `forbidden` (HUMAN_ONLY for a service token, role too low). Also run before the body of an org
+ * package upload is read (ruling P3-29).
+ */
+export declare function authorizeOrgAction(db: Pick<KernelSchemaDb, "selectFrom">, p: Principal, orgId: string, action: Action): Promise<OrgRole>;
 /**
  * 组织守卫：每个请求实时从 PG 读组织与成员角色（不缓存）。
  * - 组织不存在、已软删除、或调用者不是成员 → 404 `org.not_found`（不泄露组织是否存在）。

package/dist/orgs/org.guard.js

@@ -24,6 +24,48 @@ export function OrgAction(action) {
 /** 参数装饰器：取 OrgGuard 放在 `req.org` 上的 `{ orgId, role }`。 */
 export const CurrentOrg = createParamDecorator((_data, ctx) => ctx.switchToHttp().getRequest().org);
 const notFound = () => new ApiError("org.not_found", "Organization not found");
+/**
+ * The org role check of {@link OrgGuard}, read live from PG: the caller's role in `orgId` (a
+ * person's membership, a service token's own org and role) allows `action`, else 404
+ * `org.not_found` (missing, soft-deleted, not a member: existence is not disclosed) or 403
+ * `forbidden` (HUMAN_ONLY for a service token, role too low). Also run before the body of an org
+ * package upload is read (ruling P3-29).
+ */
+export async function authorizeOrgAction(db, p, orgId, action) {
+    let role;
+    if (p.kind === "service") {
+        if (p.orgId !== orgId)
+            throw notFound();
+        const live = await db
+            .selectFrom("orgs")
+            .select("id")
+            .where("id", "=", orgId)
+            .where("deleted_at", "is", null)
+            .executeTakeFirst();
+        if (!live)
+            throw notFound();
+        if (HUMAN_ONLY.has(action)) {
+            throw new ApiError("forbidden", "Service tokens cannot perform this action");
+        }
+        role = p.role;
+    }
+    else {
+        const m = await db
+            .selectFrom("memberships")
+            .innerJoin("orgs", "orgs.id", "memberships.org_id")
+            .select("memberships.role")
+            .where("memberships.org_id", "=", orgId)
+            .where("memberships.account_id", "=", p.account.id)
+            .where("orgs.deleted_at", "is", null)
+            .executeTakeFirst();
+        if (!m)
+            throw notFound();
+        role = m.role;
+    }
+    if (!can(role, action))
+        throw new ApiError("forbidden", "Insufficient organization role");
+    return role;
+}
 /**
  * 组织守卫：每个请求实时从 PG 读组织与成员角色（不缓存）。
  * - 组织不存在、已软删除、或调用者不是成员 → 404 `org.not_found`（不泄露组织是否存在）。
@@ -51,38 +93,7 @@ let OrgGuard = class OrgGuard {
         const orgId = req.params.orgId;
         if (!orgId)
             throw new Error("OrgGuard: route has no :orgId parameter");
-        let role;
-        if (p.kind === "service") {
-            if (p.orgId !== orgId)
-                throw notFound();
-            const live = await this.db
-                .selectFrom("orgs")
-                .select("id")
-                .where("id", "=", orgId)
-                .where("deleted_at", "is", null)
-                .executeTakeFirst();
-            if (!live)
-                throw notFound();
-            if (HUMAN_ONLY.has(action)) {
-                throw new ApiError("forbidden", "Service tokens cannot perform this action");
-            }
-            role = p.role;
-        }
-        else {
-            const m = await this.db
-                .selectFrom("memberships")
-                .innerJoin("orgs", "orgs.id", "memberships.org_id")
-                .select("memberships.role")
-                .where("memberships.org_id", "=", orgId)
-                .where("memberships.account_id", "=", p.account.id)
-                .where("orgs.deleted_at", "is", null)
-                .executeTakeFirst();
-            if (!m)
-                throw notFound();
-            role = m.role;
-        }
-        if (!can(role, action))
-            throw new ApiError("forbidden", "Insufficient organization role");
+        const role = await authorizeOrgAction(this.db.db, p, orgId, action);
         req.org = { orgId, role };
         return true;
     }

package/dist/orgs/orgs.controller.d.ts

@@ -3,16 +3,13 @@ import { type ApiTokenRecord, ApiTokenService } from "../identity/api-tokens.js"
 import { type Principal } from "../identity/principal.js";
 import { type Member, MembersService } from "./members.service.js";
 import { type OrgContext } from "./org.guard.js";
+import { OrgUpdateBody } from "./orgs.schemas.js";
 import { type Org, OrgsService } from "./orgs.service.js";
 import { type OrgRole } from "./roles.js";
 declare const CreateSchema: z.ZodObject<{
     name: z.ZodString;
     slug: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
-declare const UpdateSchema: z.ZodObject<{
-    name: z.ZodOptional<z.ZodString>;
-    slug: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
 declare const TransferSchema: z.ZodObject<{
     toAccountId: z.ZodString;
 }, z.core.$strip>;
@@ -52,7 +49,7 @@ export declare class OrgsController {
         org: Org;
         role: OrgRole;
     }>;
-    update(principal: Principal, org: OrgContext, body: z.infer<typeof UpdateSchema>): Promise<{
+    update(principal: Principal, org: OrgContext, body: z.infer<typeof OrgUpdateBody>): Promise<{
         org: Org;
     }>;
     remove(principal: Principal, org: OrgContext): Promise<void>;

package/dist/orgs/orgs.controller.js

@@ -16,6 +16,7 @@ import { createZodDto } from "../infra/validation/create-zod-dto.js";
 import { ZBody } from "../infra/validation/zod-params.js";
 import { MembersService } from "./members.service.js";
 import { CurrentOrg, OrgAction } from "./org.guard.js";
+import { OrgUpdateBody } from "./orgs.schemas.js";
 import { OrgsService } from "./orgs.service.js";
 import { ORG_ROLES } from "./roles.js";
 const CreateSchema = z.object({
@@ -24,11 +25,7 @@ const CreateSchema = z.object({
 });
 class OrgCreateBody extends createZodDto(CreateSchema, "OrgCreateBody") {
 }
-const UpdateSchema = z.object({
-    name: z.string().min(1).max(100).optional(),
-    slug: z.string().min(1).max(40).optional(),
-});
-class OrgUpdateBody extends createZodDto(UpdateSchema, "OrgUpdateBody") {
+class OrgUpdateBodyDto extends createZodDto(OrgUpdateBody, "OrgUpdateBody") {
 }
 const TransferSchema = z.object({ toAccountId: z.string().min(1) });
 class OrgTransferBody extends createZodDto(TransferSchema, "OrgTransferBody") {
@@ -127,7 +124,7 @@ __decorate([
     OrgAction("org.update"),
     __param(0, CurrentPrincipal()),
     __param(1, CurrentOrg()),
-    __param(2, ZBody(OrgUpdateBody))
+    __param(2, ZBody(OrgUpdateBodyDto))
 ], OrgsController.prototype, "update", null);
 __decorate([
     Delete(":orgId"),

package/dist/orgs/orgs.module.js

@@ -5,6 +5,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
 import { Module } from "@nestjs/common";
+import { CatalogModule } from "../catalog/catalog.module.js";
 import { EventLogModule } from "../conversations/event-log.js";
 import { EvalBudgetModule } from "../evals/budget.js";
 import { ExtensionsModule } from "../extensions/extensions.module.js";
@@ -43,6 +44,8 @@ OrgsModule = __decorate([
             SandboxModule,
             // cancels the deleted org's eval runs
             EvalBudgetModule,
+            // a new org's plugin scope sync (the producer; the worker role consumes it)
+            CatalogModule,
             // the producer side of directory-sync jobs (the maintenance processor consumes them)
             QueueModule.registerQueue(MAINTENANCE_QUEUE_NAME),
         ],

package/dist/orgs/orgs.schemas.d.ts

@@ -0,0 +1,8 @@
+import { z } from "zod";
+import type { RouteSchemas } from "../platform/route-schemas.js";
+export declare const OrgUpdateBody: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    slug: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const ORG_ROUTES: readonly RouteSchemas[];
+export declare const ORG_SETTINGS_ROUTES: readonly RouteSchemas[];

package/dist/orgs/orgs.schemas.js

@@ -0,0 +1,16 @@
+import { z } from "zod";
+import { OrgSettingsPatchSchema } from "./settings.service.js";
+export const OrgUpdateBody = z.object({
+    name: z.string().min(1).max(100).optional(),
+    slug: z.string().min(1).max(40).optional(),
+});
+export const ORG_ROUTES = [
+    { route: "GET /api/v1/orgs" },
+    { route: "GET /api/v1/orgs/:orgId" },
+    { route: "PATCH /api/v1/orgs/:orgId", body: OrgUpdateBody },
+    { route: "GET /api/v1/orgs/:orgId/members" },
+];
+export const ORG_SETTINGS_ROUTES = [
+    { route: "GET /api/v1/orgs/:orgId/settings" },
+    { route: "PATCH /api/v1/orgs/:orgId/settings", body: OrgSettingsPatchSchema },
+];

package/dist/orgs/orgs.service.d.ts

@@ -1,3 +1,5 @@
+import { OwnedItems } from "../catalog/owned-items.js";
+import { PluginScopeSync } from "../catalog/scope-sync.js";
 import { EvalBudget } from "../evals/budget.js";
 import type { Account } from "../identity/accounts.js";
 import { ApiTokenService } from "../identity/api-tokens.js";
@@ -18,8 +20,8 @@ export declare const SLUG_RE: RegExp;
 /** 由名字生成 slug：转小写、非字母数字换 `-`、去首尾 `-`；为空则 `org-<6 位随机>`。 */
 export declare function slugFromName(name: string): string;
 /**
- * Organizations: create, read, update and soft delete. A soft delete emits `org.deleted` on
- * {@link KernelEvents} after the commit.
+ * Organizations: create, read, update and soft delete. A new org's plugin scope sync is enqueued
+ * after the commit; a soft delete emits `org.deleted` on {@link KernelEvents} after the commit.
  */
 export declare class OrgsService {
     private readonly db;
@@ -30,9 +32,17 @@ export declare class OrgsService {
     private readonly events;
     /** Cancels the deleted org's running eval runs (in the delete's transaction). */
     private readonly evalBudget;
+    /** A new org gets the plugins its scope offers it (the scope sync, after the commit). */
+    private readonly scopeSync;
+    /** What the deleted org owns is transferred or removed in the delete's transaction (P3-20). */
+    private readonly ownedItems;
     constructor(db: KernelDb, txHost: TransactionHost, settings: SettingsService, apiTokens: ApiTokenService, orgLock: OrgLock, events: KernelEvents, 
     /** Cancels the deleted org's running eval runs (in the delete's transaction). */
-    evalBudget: Pick<EvalBudget, "cancelRuns">);
+    evalBudget: Pick<EvalBudget, "cancelRuns">, 
+    /** A new org gets the plugins its scope offers it (the scope sync, after the commit). */
+    scopeSync: Pick<PluginScopeSync, "enqueueOrg">, 
+    /** What the deleted org owns is transferred or removed in the delete's transaction (P3-20). */
+    ownedItems: Pick<OwnedItems, "onOrgDeleted">);
     /**
      * Creates an org with the actor as owner, in the caller's transaction when there is one (the
      * setup wizard creates it with the account); a slug conflict is `org.slug_taken` either way, but
@@ -49,7 +59,7 @@ export declare class OrgsService {
     listForAccount(accountId: string): Promise<(Org & {
         role: OrgRole;
     })[]>;
-    /** 全部（未软删除的）组织及成员数（企业管理员用）。 */
+    /** 全部（未软删除的）组织及成员数（超级管理员用）。 */
     listAll(): Promise<(Org & {
         memberCount: number;
     })[]>;
@@ -59,13 +69,18 @@ export declare class OrgsService {
     update(orgId: string, patch: {
         name?: string | undefined;
         slug?: string | undefined;
-    }, actor: Account, actorTokenId?: string): Promise<Org>;
+    }, actor: Account, actorTokenId?: string, 
+    /** Merged into the audit detail (the Platform tool's `via: "agent"`). */
+    auditDetail?: Record<string, unknown>): Promise<Org>;
     private updateIn;
     /**
      * Soft delete (needs owner, decided live under the org lock): in the same transaction revokes
-     * the org's service tokens, cancels its running eval runs and pending catalog requests, and
-     * clears sessions' current org pointing at it; after the commit emits `org.deleted` (channel
-     * connections go with the org: the runtime's connection reads filter deleted orgs).
+     * the org's service tokens, cancels its running eval runs and pending catalog requests, clears
+     * sessions' current org pointing at it, and transfers or removes the plugins and promoted
+     * components it owns ({@link OwnedItems.onOrgDeleted}, P3-20: shared ones become the platform's,
+     * the others are removed, a removed plugin's extension taken out by its cleanup job after the
+     * commit); after the commit emits `org.deleted` (channel connections go with the org: the
+     * runtime's connection reads filter deleted orgs).
      */
     softDelete(orgId: string, actor: Account, actorTokenId?: string): Promise<void>;
     private softDeleteIn;