@capybara-hq/kernel 0.1.0-rc.2 → 0.1.0-rc.20

package/dist/admin/admin.controller.js

@@ -7,56 +7,46 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Controller, Get, HttpCode, Inject, Param, Patch, Post, Put } from "@nestjs/common";
-import { z } from "zod";
-import { CatalogRequestsService } from "../catalog/requests.service.js";
-import { ExtensionAdmin } from "../extensions/admin-view.js";
-import { extensionNeedsAction } from "../extensions/permission-view.js";
+import { Controller, Get, HttpCode, Inject, Patch, Post, Put } from "@nestjs/common";
+import { ApiError } from "../errors.js";
+import { ExtensionDisplayNames } from "../extensions/display-name.js";
+import { PluginIcons } from "../extensions/plugin-icons.js";
 import { AccountsService } from "../identity/accounts.js";
-import { MAX_PASSWORD_LENGTH } from "../identity/login.js";
-import { CurrentPrincipal, EnterpriseAdmin, patTokenId, requireUser, } from "../identity/principal.js";
+import { CurrentPrincipal, patTokenId, requireUser, SuperAdmin, } from "../identity/principal.js";
 import { SessionService } from "../identity/sessions.js";
-import { DEPLOYMENT_SETTINGS_PATCH, SettingsService, } from "../identity/settings.js";
+import { SettingsService } from "../identity/settings.js";
+import { KernelConfigService } from "../infra/config/kernel-config.service.js";
 import { KERNEL_LOGGER } from "../infra/tokens.js";
 import { createZodDto } from "../infra/validation/create-zod-dto.js";
-import { ZBody, ZQuery } from "../infra/validation/zod-params.js";
+import { ZBody, ZParam, ZQuery } from "../infra/validation/zod-params.js";
+import { ModelDisabledPatchDto, ModelProviderParamsDto, } from "../models/enablement.controller.js";
+import { ModelEnablement } from "../models/enablement.js";
 import { MODEL_PRICE_PUT, PricesService, } from "../models/prices.js";
 import { purposeTargetOf } from "../models/purposes.controller.js";
-import { ModelPurposesService, PurposePutDto, } from "../models/purposes.js";
+import { ModelPurposesService, PurposePutDto, withDeclaredByNames, } from "../models/purposes.js";
+import { MembersService } from "../orgs/members.service.js";
 import { OrgsService } from "../orgs/orgs.service.js";
 import { ProviderRegistry } from "../runtime/providers.js";
-const ListQuerySchema = z.object({
-    after: z.string().min(1).optional(),
-    limit: z.coerce.number().int().min(1).max(200).default(50),
-});
-class AccountListQuery extends createZodDto(ListQuerySchema, "AccountListQuery") {
+import { AccountListQuery, AccountParams, AdminOrgParams, CreateAccountBody, DeploymentSettingsBody, PurposeParams, UpdateAccountBody, } from "./admin.schemas.js";
+import { limitDefaults } from "./limit-defaults.js";
+class AccountListQueryDto extends createZodDto(AccountListQuery, "AccountListQuery") {
 }
-const CreateAccountSchema = z.object({
-    login: z.string().min(1).max(64),
-    password: z.string().min(1).max(MAX_PASSWORD_LENGTH),
-    displayName: z.string().trim().min(1).max(100),
-    email: z.email().max(254).optional(),
-    enterpriseAdmin: z.boolean().optional(),
-});
-class CreateAccountBody extends createZodDto(CreateAccountSchema, "CreateAccountBody") {
+class CreateAccountBodyDto extends createZodDto(CreateAccountBody, "CreateAccountBody") {
 }
-const UpdateAccountSchema = z.object({
-    displayName: z.string().trim().min(1).max(100).optional(),
-    status: z.enum(["active", "disabled"]).optional(),
-    isEnterpriseAdmin: z.boolean().optional(),
-});
-class UpdateAccountBody extends createZodDto(UpdateAccountSchema, "UpdateAccountBody") {
+class UpdateAccountBodyDto extends createZodDto(UpdateAccountBody, "UpdateAccountBody") {
 }
-/** 至少给出一个键；`runConcurrencyOverrides` 按组织合并，值为 null 删除该组织的覆盖。 */
-const SettingsSchema = DEPLOYMENT_SETTINGS_PATCH.refine((b) => Object.keys(b).length > 0, {
-    message: "at least one setting is required",
-});
-class DeploymentSettingsBody extends createZodDto(SettingsSchema, "DeploymentSettingsPatch") {
+class AccountParamsDto extends createZodDto(AccountParams, "AccountParams") {
+}
+class AdminOrgParamsDto extends createZodDto(AdminOrgParams, "AdminOrgParams") {
+}
+class PurposeParamsDto extends createZodDto(PurposeParams, "PurposeParams") {
+}
+class DeploymentSettingsBodyDto extends createZodDto(DeploymentSettingsBody, "DeploymentSettingsPatch") {
 }
 // a union schema: a DTO value rather than a class (a class cannot extend a union instance type)
 const ModelPriceBody = createZodDto(MODEL_PRICE_PUT, "ModelPricePut");
 /**
- * 企业管理员端点（`/api/v1/admin/*`）：只接受企业管理员的 Web 会话或个人令牌；
+ * 超级管理员端点（`/api/v1/admin/*`）：只接受超级管理员的 Web 会话或个人令牌；
  * 服务令牌一律 `forbidden`（未标 `@AllowService`）。
  */
 let AdminController = class AdminController {
@@ -67,10 +57,13 @@ let AdminController = class AdminController {
     settings;
     prices;
     purposes;
-    plugins;
     registry;
-    catalogRequests;
-    constructor(accounts, sessions, log, orgs, settings, prices, purposes, plugins, registry, catalogRequests) {
+    displayNames;
+    enablement;
+    config;
+    icons;
+    members;
+    constructor(accounts, sessions, log, orgs, settings, prices, purposes, registry, displayNames, enablement, config, icons, members) {
         this.accounts = accounts;
         this.sessions = sessions;
         this.log = log;
@@ -78,24 +71,12 @@ let AdminController = class AdminController {
         this.settings = settings;
         this.prices = prices;
         this.purposes = purposes;
-        this.plugins = plugins;
         this.registry = registry;
-        this.catalogRequests = catalogRequests;
-    }
-    /** 后台概览的四个数字（只读计数，不含任何对话内容）。 */
-    async overview() {
-        const [plugins, orgs, accounts, catalogRequestsPending] = await Promise.all([
-            this.plugins.list(),
-            this.orgs.listAll(),
-            this.accounts.count(),
-            this.catalogRequests.countPendingDeployment(),
-        ]);
-        return {
-            extensionsNeedingAction: plugins.filter((p) => extensionNeedsAction(p.status)).length,
-            catalogRequestsPending,
-            orgs: orgs.length,
-            accounts,
-        };
+        this.displayNames = displayNames;
+        this.enablement = enablement;
+        this.config = config;
+        this.icons = icons;
+        this.members = members;
     }
     /**
      * 全部账号，按 id 升序分页：`next` 为下一页的游标（作为 `after` 传回），没有更多时为 null。
@@ -117,17 +98,17 @@ let AdminController = class AdminController {
             password: body.password,
             displayName: body.displayName,
             ...(body.email !== undefined && { email: body.email }),
-            ...(body.enterpriseAdmin !== undefined && { enterpriseAdmin: body.enterpriseAdmin }),
+            ...(body.superAdmin !== undefined && { superAdmin: body.superAdmin }),
         }, actor.account.id, patTokenId(actor));
         return { account };
     }
-    /** 改显示名 / 状态 / 企业管理员；停用时同时吊销该账号的全部会话与个人令牌。 */
-    async updateAccount(principal, accountId, body) {
+    /** 改显示名 / 状态 / 超级管理员；停用时同时吊销该账号的全部会话与个人令牌。 */
+    async updateAccount(principal, { accountId }, body) {
         const actor = requireUser(principal);
         const patch = {
             ...(body.displayName !== undefined && { displayName: body.displayName }),
             ...(body.status !== undefined && { status: body.status }),
-            ...(body.isEnterpriseAdmin !== undefined && { isEnterpriseAdmin: body.isEnterpriseAdmin }),
+            ...(body.isSuperAdmin !== undefined && { isSuperAdmin: body.isSuperAdmin }),
         };
         // 停用时账号状态、会话与个人令牌的吊销在同一个 PG 事务里完成
         const { account, revokedSessionIds } = await this.accounts.updateAccount(accountId, patch, actor.account.id, patTokenId(actor));
@@ -143,9 +124,22 @@ let AdminController = class AdminController {
         }
         return { account };
     }
-    /** 全部组织的元数据与成员数（不含成员明细）。 */
+    /**
+     * 全部组织的元数据与成员数（不含成员明细）, with the deployment's defaults of the limits an org
+     * can be given its own value of (the org limits dialog shows them for the values left empty).
+     */
     async listOrgs() {
-        return { orgs: await this.orgs.listAll() };
+        return { orgs: await this.orgs.listAll(), limitDefaults: limitDefaults(this.config) };
+    }
+    /**
+     * The members of any live org (the agent owner transfer picks the new owner from them); the super
+     * admin need not be a member. A missing or deleted org → `org.not_found`.
+     */
+    async orgMembers({ orgId }) {
+        if ((await this.orgs.get(orgId)) === undefined) {
+            throw new ApiError("org.not_found", "Organization not found");
+        }
+        return { members: await this.members.list(orgId) };
     }
     async getSettings() {
         return this.settings.get();
@@ -156,14 +150,41 @@ let AdminController = class AdminController {
     }
     /**
      * 模型供应商与模型（后台「模型」页）：每个供应商带状态，列模型失败的标 `error`，不影响其他供应商；
-     * 一并返回价格表与币种（改价仍走 `PUT /admin/model-prices`）。
+     * 一并返回价格表与币种（改价仍走 `PUT /admin/model-prices`）。Each provider carries its extension's
+     * display name (null when it has none); every model of the platform's list carries `disabled`
+     * (the platform's disabled list, spec B §5.3).
      */
     async getModels() {
         const [providers, prices] = await Promise.all([
             this.registry.listWithStatus(),
             this.getModelPrices(),
         ]);
-        return { providers, ...prices };
+        const plugins = providers.map((p) => p.plugin);
+        const [names, icons] = await Promise.all([
+            this.displayNames.many(plugins),
+            this.icons.many(plugins, { kind: "admin" }),
+        ]);
+        return {
+            providers: providers.map((p) => ({
+                ...p,
+                displayName: names.get(p.plugin) ?? null,
+                icon: icons.get(p.plugin) ?? null,
+            })),
+            ...prices,
+        };
+    }
+    /**
+     * The platform's disabled models of one provider (spec B §5.3): disables and enables the ids the
+     * body names (others keep their state); such a model is invisible to every org. The response
+     * lists the agents and purposes, across orgs, that now point at a newly disabled model (the
+     * disable is not refused for them).
+     */
+    async patchModelsDisabled(principal, params, body) {
+        const actor = requireUser(principal);
+        return this.enablement.setPlatform(params.provider, body, {
+            accountId: actor.account.id,
+            tokenId: patTokenId(actor),
+        });
     }
     /** 模型价格表（每百万 token）与币种（部署设置 `priceCurrency`）。 */
     async getModelPrices() {
@@ -178,49 +199,56 @@ let AdminController = class AdminController {
     }
     /** 模型用途与部署默认映射（`override` 一律为 null；组织覆盖在组织侧接口）。 */
     async getModelPurposes() {
-        return { purposes: await this.purposes.list() };
+        return { purposes: await withDeclaredByNames(await this.purposes.list(), this.displayNames) };
     }
     /** 设置一个用途的部署默认，或 `target: null` 清除。 */
-    async putModelPurpose(principal, purpose, body) {
+    async putModelPurpose(principal, { purpose }, body) {
         const actor = requireUser(principal);
-        return {
-            purpose: await this.purposes.setDefault(purpose, purposeTargetOf(body), actor.account.id, patTokenId(actor)),
-        };
+        const view = await this.purposes.setDefault(purpose, purposeTargetOf(body), actor.account.id, patTokenId(actor));
+        const [listing] = await withDeclaredByNames([view], this.displayNames);
+        return { purpose: listing };
     }
 };
-__decorate([
-    Get("overview")
-], AdminController.prototype, "overview", null);
 __decorate([
     Get("accounts"),
-    __param(0, ZQuery(AccountListQuery))
+    __param(0, ZQuery(AccountListQueryDto))
 ], AdminController.prototype, "listAccounts", null);
 __decorate([
     Post("accounts"),
     HttpCode(201),
     __param(0, CurrentPrincipal()),
-    __param(1, ZBody(CreateAccountBody))
+    __param(1, ZBody(CreateAccountBodyDto))
 ], AdminController.prototype, "createAccount", null);
 __decorate([
     Patch("accounts/:accountId"),
     __param(0, CurrentPrincipal()),
-    __param(1, Param("accountId")),
-    __param(2, ZBody(UpdateAccountBody))
+    __param(1, ZParam(AccountParamsDto)),
+    __param(2, ZBody(UpdateAccountBodyDto))
 ], AdminController.prototype, "updateAccount", null);
 __decorate([
     Get("orgs")
 ], AdminController.prototype, "listOrgs", null);
+__decorate([
+    Get("orgs/:orgId/members"),
+    __param(0, ZParam(AdminOrgParamsDto))
+], AdminController.prototype, "orgMembers", null);
 __decorate([
     Get("settings")
 ], AdminController.prototype, "getSettings", null);
 __decorate([
     Put("settings"),
     __param(0, CurrentPrincipal()),
-    __param(1, ZBody(DeploymentSettingsBody))
+    __param(1, ZBody(DeploymentSettingsBodyDto))
 ], AdminController.prototype, "putSettings", null);
 __decorate([
     Get("models")
 ], AdminController.prototype, "getModels", null);
+__decorate([
+    Patch("models/:provider/disabled"),
+    __param(0, CurrentPrincipal()),
+    __param(1, ZParam(ModelProviderParamsDto)),
+    __param(2, ZBody(ModelDisabledPatchDto))
+], AdminController.prototype, "patchModelsDisabled", null);
 __decorate([
     Get("model-prices")
 ], AdminController.prototype, "getModelPrices", null);
@@ -235,12 +263,12 @@ __decorate([
 __decorate([
     Put("model-purposes/:purpose"),
     __param(0, CurrentPrincipal()),
-    __param(1, Param("purpose")),
+    __param(1, ZParam(PurposeParamsDto)),
     __param(2, ZBody(PurposePutDto))
 ], AdminController.prototype, "putModelPurpose", null);
 AdminController = __decorate([
     Controller("api/v1/admin"),
-    EnterpriseAdmin(),
+    SuperAdmin(),
     __param(0, Inject(AccountsService)),
     __param(1, Inject(SessionService)),
     __param(2, Inject(KERNEL_LOGGER)),
@@ -248,8 +276,11 @@ AdminController = __decorate([
     __param(4, Inject(SettingsService)),
     __param(5, Inject(PricesService)),
     __param(6, Inject(ModelPurposesService)),
-    __param(7, Inject(ExtensionAdmin)),
-    __param(8, Inject(ProviderRegistry)),
-    __param(9, Inject(CatalogRequestsService))
+    __param(7, Inject(ProviderRegistry)),
+    __param(8, Inject(ExtensionDisplayNames)),
+    __param(9, Inject(ModelEnablement)),
+    __param(10, Inject(KernelConfigService)),
+    __param(11, Inject(PluginIcons)),
+    __param(12, Inject(MembersService))
 ], AdminController);
 export { AdminController };

package/dist/admin/admin.module.d.ts

@@ -1,3 +1,6 @@
-/** Deployment administration: the setup wizard (its controllers are the api role's, `ApiModule`). */
+/**
+ * Deployment administration: the setup wizard, the platform-level audit log and the admin overview
+ * with its health read and seven-day usage aggregate (its controllers are the api role's, `ApiModule`).
+ */
 export declare class AdminModule {
 }

package/dist/admin/admin.module.js

@@ -5,18 +5,64 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
 import { Module } from "@nestjs/common";
+import { CatalogModule } from "../catalog/catalog.module.js";
+import { ChannelsModule } from "../channels/channels.module.js";
+import { TitlesModule } from "../conversations/titles.js";
+import { EvalsModule } from "../evals/evals.module.js";
+import { ExtensionsModule } from "../extensions/extensions.module.js";
 import { IdentityModule } from "../identity/identity.module.js";
+import { InboxModule } from "../inbox/inbox.module.js";
+import { ModelsModule } from "../models/models.module.js";
 import { OrgsModule } from "../orgs/orgs.module.js";
+import { ProvidersModule } from "../runtime/providers.js";
+import { RunJobsModule } from "../runtime/run-jobs.js";
+import { UsageReportJobsModule } from "../runtime/usage-report-jobs.js";
+import { AdminHealthService } from "./health.service.js";
+import { AdminOverviewService } from "./overview.service.js";
+import { PlatformAuditService } from "./platform-audit.service.js";
 import { SetupService } from "./setup.service.js";
 import { SetupLockModule } from "./setup-lock.js";
-/** Deployment administration: the setup wizard (its controllers are the api role's, `ApiModule`). */
+import { AdminUsageService } from "./usage.service.js";
+/**
+ * Deployment administration: the setup wizard, the platform-level audit log and the admin overview
+ * with its health read and seven-day usage aggregate (its controllers are the api role's, `ApiModule`).
+ */
 let AdminModule = class AdminModule {
 };
 AdminModule = __decorate([
     Module({
-        imports: [IdentityModule, OrgsModule, SetupLockModule],
-        providers: [SetupService],
-        exports: [SetupService],
+        imports: [
+            IdentityModule,
+            OrgsModule,
+            SetupLockModule,
+            ExtensionsModule,
+            CatalogModule,
+            ProvidersModule,
+            InboxModule,
+            // the kernel queues the health overview counts, as their owners register them (shared
+            // instances: no queue connection of its own)
+            RunJobsModule,
+            ChannelsModule,
+            TitlesModule,
+            UsageReportJobsModule,
+            EvalsModule,
+            // the price table of the usage aggregate
+            ModelsModule,
+        ],
+        providers: [
+            SetupService,
+            PlatformAuditService,
+            AdminOverviewService,
+            AdminHealthService,
+            AdminUsageService,
+        ],
+        exports: [
+            SetupService,
+            PlatformAuditService,
+            AdminOverviewService,
+            AdminHealthService,
+            AdminUsageService,
+        ],
     })
 ], AdminModule);
 export { AdminModule };

package/dist/admin/admin.schemas.d.ts

@@ -0,0 +1,69 @@
+import { z } from "zod";
+import type { RouteSchemas } from "../platform/route-schemas.js";
+/** `GET /api/v1/admin/accounts`: keyset paging by account id. */
+export declare const AccountListQuery: z.ZodObject<{
+    after: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strip>;
+export declare const CreateAccountBody: z.ZodObject<{
+    login: z.ZodString;
+    password: z.ZodString;
+    displayName: z.ZodString;
+    email: z.ZodOptional<z.ZodEmail>;
+    superAdmin: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export declare const AccountParams: z.ZodObject<{
+    accountId: z.ZodString;
+}, z.core.$strip>;
+export declare const UpdateAccountBody: z.ZodObject<{
+    displayName: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        active: "active";
+        disabled: "disabled";
+    }>>;
+    isSuperAdmin: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+/** At least one key; `runConcurrencyOverrides` merges by org, a null value drops that org's. */
+export declare const DeploymentSettingsBody: z.ZodObject<{
+    orgCreation: z.ZodOptional<z.ZodEnum<{
+        anyone: "anyone";
+        super_admin: "super_admin";
+    }>>;
+    runConcurrencyOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodNumber>>>;
+    priceCurrency: z.ZodOptional<z.ZodString>;
+    sandboxLimitOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodObject<{
+        cpu: z.ZodOptional<z.ZodNumber>;
+        memoryMb: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>>>;
+    subagentLimitOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodObject<{
+        maxDepth: z.ZodOptional<z.ZodNumber>;
+        maxConcurrentPerConversation: z.ZodOptional<z.ZodNumber>;
+        maxDispatchesPerRun: z.ZodOptional<z.ZodNumber>;
+        maxTokensPerRun: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>>>;
+    customConnectors: z.ZodOptional<z.ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+    }>>;
+    customSkills: z.ZodOptional<z.ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+    }>>;
+    orgMarketplaceBrowse: z.ZodOptional<z.ZodBoolean>;
+    uiTheme: z.ZodOptional<z.ZodObject<{
+        id: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
+    uiArrangement: z.ZodOptional<z.ZodType<Partial<Record<"agent.detail.section" | "conversation.composer.frame" | "conversation.empty" | "conversation.panel" | "conversation.properties.section" | "conversation.tool-result.card" | "file.preview" | "org.page" | "org.settings.section" | "platform.page" | "shell.brand" | "shell.overlay", import("../ui/arrangement.js").UiArrangementEntry | null>>, unknown, z.core.$ZodTypeInternals<Partial<Record<"agent.detail.section" | "conversation.composer.frame" | "conversation.empty" | "conversation.panel" | "conversation.properties.section" | "conversation.tool-result.card" | "file.preview" | "org.page" | "org.settings.section" | "platform.page" | "shell.brand" | "shell.overlay", import("../ui/arrangement.js").UiArrangementEntry | null>>, unknown>>>;
+    clientExtensions: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        disabled: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const PurposeParams: z.ZodObject<{
+    purpose: z.ZodString;
+}, z.core.$strip>;
+/** `:orgId` of an admin route: any org, the super admin need not be a member. */
+export declare const AdminOrgParams: z.ZodObject<{
+    orgId: z.ZodString;
+}, z.core.$strip>;
+export declare const ADMIN_ROUTES: readonly RouteSchemas[];

package/dist/admin/admin.schemas.js

@@ -0,0 +1,53 @@
+import { z } from "zod";
+import { MAX_PASSWORD_LENGTH } from "../identity/login.js";
+import { DEPLOYMENT_SETTINGS_PATCH } from "../identity/settings.js";
+import { ModelDisabledPatch, ModelProviderParams } from "../models/enablement.controller.js";
+import { MODEL_PRICE_PUT } from "../models/prices.js";
+import { PURPOSE_PUT } from "../models/purposes.js";
+/** `GET /api/v1/admin/accounts`: keyset paging by account id. */
+export const AccountListQuery = z.object({
+    after: z.string().min(1).optional(),
+    limit: z.coerce.number().int().min(1).max(200).default(50),
+});
+export const CreateAccountBody = z.object({
+    login: z.string().min(1).max(64),
+    password: z.string().min(1).max(MAX_PASSWORD_LENGTH),
+    displayName: z.string().trim().min(1).max(100),
+    email: z.email().max(254).optional(),
+    superAdmin: z.boolean().optional(),
+});
+export const AccountParams = z.object({ accountId: z.string().min(1).max(100) });
+export const UpdateAccountBody = z.object({
+    displayName: z.string().trim().min(1).max(100).optional(),
+    status: z.enum(["active", "disabled"]).optional(),
+    isSuperAdmin: z.boolean().optional(),
+});
+/** At least one key; `runConcurrencyOverrides` merges by org, a null value drops that org's. */
+export const DeploymentSettingsBody = DEPLOYMENT_SETTINGS_PATCH.refine((b) => Object.keys(b).length > 0, { message: "at least one setting is required" });
+export const PurposeParams = z.object({ purpose: z.string().min(1).max(100) });
+/** `:orgId` of an admin route: any org, the super admin need not be a member. */
+export const AdminOrgParams = z.object({ orgId: z.string().min(1).max(100) });
+export const ADMIN_ROUTES = [
+    { route: "GET /api/v1/admin/accounts", query: AccountListQuery },
+    { route: "POST /api/v1/admin/accounts", body: CreateAccountBody },
+    {
+        route: "PATCH /api/v1/admin/accounts/:accountId",
+        params: AccountParams,
+        body: UpdateAccountBody,
+    },
+    { route: "GET /api/v1/admin/orgs" },
+    // `:orgId` is the conversation's org for the operation, so never an operation field
+    { route: "GET /api/v1/admin/orgs/:orgId/members" },
+    { route: "GET /api/v1/admin/settings" },
+    { route: "PUT /api/v1/admin/settings", body: DeploymentSettingsBody },
+    { route: "GET /api/v1/admin/models" },
+    {
+        route: "PATCH /api/v1/admin/models/:provider/disabled",
+        params: ModelProviderParams,
+        body: ModelDisabledPatch,
+    },
+    { route: "GET /api/v1/admin/model-prices" },
+    { route: "PUT /api/v1/admin/model-prices", body: MODEL_PRICE_PUT },
+    { route: "GET /api/v1/admin/model-purposes" },
+    { route: "PUT /api/v1/admin/model-purposes/:purpose", params: PurposeParams, body: PURPOSE_PUT },
+];

package/dist/admin/audit.controller.d.ts

@@ -0,0 +1,14 @@
+import type { z } from "zod";
+import { AuditListQuery } from "./audit.schemas.js";
+import { type PlatformAuditPage, PlatformAuditService } from "./platform-audit.service.js";
+/**
+ * The platform-level audit log (`GET /api/v1/admin/audit`, admin overview spec §5.2, decision D2):
+ * events with no org, newest first, keyset paged; never an event's `detail`. Super admins only;
+ * the read itself is not audited (D5).
+ */
+export declare class AdminAuditController {
+    private readonly audit;
+    constructor(audit: PlatformAuditService);
+    /** `next` is the `after` of the next page, null at the end. */
+    list(q: z.infer<typeof AuditListQuery>): Promise<PlatformAuditPage>;
+}

package/dist/admin/audit.controller.js

@@ -0,0 +1,42 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Controller, Get, Inject } from "@nestjs/common";
+import { SuperAdmin } from "../identity/principal.js";
+import { createZodDto } from "../infra/validation/create-zod-dto.js";
+import { ZQuery } from "../infra/validation/zod-params.js";
+import { AuditListQuery } from "./audit.schemas.js";
+import { PlatformAuditService } from "./platform-audit.service.js";
+class AuditListQueryDto extends createZodDto(AuditListQuery, "AuditListQuery") {
+}
+/**
+ * The platform-level audit log (`GET /api/v1/admin/audit`, admin overview spec §5.2, decision D2):
+ * events with no org, newest first, keyset paged; never an event's `detail`. Super admins only;
+ * the read itself is not audited (D5).
+ */
+let AdminAuditController = class AdminAuditController {
+    audit;
+    constructor(audit) {
+        this.audit = audit;
+    }
+    /** `next` is the `after` of the next page, null at the end. */
+    list(q) {
+        return this.audit.list(q);
+    }
+};
+__decorate([
+    Get(),
+    __param(0, ZQuery(AuditListQueryDto))
+], AdminAuditController.prototype, "list", null);
+AdminAuditController = __decorate([
+    Controller("api/v1/admin/audit"),
+    SuperAdmin(),
+    __param(0, Inject(PlatformAuditService))
+], AdminAuditController);
+export { AdminAuditController };

package/dist/admin/audit.schemas.d.ts

@@ -0,0 +1,8 @@
+import { z } from "zod";
+import type { RouteSchemas } from "../platform/route-schemas.js";
+/** `GET /api/v1/admin/audit`: keyset paging by event id, newest first (admin overview spec §5.2). */
+export declare const AuditListQuery: z.ZodObject<{
+    after: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strip>;
+export declare const AUDIT_ROUTES: readonly RouteSchemas[];

package/dist/admin/audit.schemas.js

@@ -0,0 +1,17 @@
+import { z } from "zod";
+/** The largest `bigserial` id; a larger `after` would make PG refuse the comparison. */
+const MAX_BIGINT = 9223372036854775807n;
+/** `GET /api/v1/admin/audit`: keyset paging by event id, newest first (admin overview spec §5.2). */
+export const AuditListQuery = z.object({
+    after: z
+        .string()
+        .regex(/^\d{1,19}$/, "after must be an event id (digits)")
+        // checks do not abort: only digits reach BigInt
+        .refine((v) => !/^\d{1,19}$/.test(v) || BigInt(v) <= MAX_BIGINT, "after must be an event id")
+        .optional()
+        .describe("The id of the last event of the previous page (its next); absent: the newest."),
+    limit: z.coerce.number().int().min(1).max(100).default(20),
+});
+export const AUDIT_ROUTES = [
+    { route: "GET /api/v1/admin/audit", query: AuditListQuery },
+];