@capybara-hq/kernel 0.1.0-rc.2 → 0.1.0-rc.20

package/dist/conversations/sandbox-status.js

@@ -1,52 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-import { Inject, Injectable } from "@nestjs/common";
-import { ApiError } from "../errors.js";
-import { SandboxService } from "../sandbox/sandbox.service.js";
-import { UUID_RE } from "../ui/registry.js";
-import { ConversationAccess } from "./access.js";
-import { ConversationsService } from "./conversations.service.js";
-/**
- * 对话沙箱的状态（网页上下文标签，M5 T11）：会话不可见 → `conversation.not_found`；
- * 没有可用的沙箱（未创建、已销毁、正在创建）→ `sandbox.not_found`（界面显示「未创建」）。
- */
-let ConversationSandboxStatus = class ConversationSandboxStatus {
-    access;
-    conversations;
-    sandbox;
-    constructor(
-    /** 会话可见性（与会话 SSE 流同一判定）。 */
-    access, 
-    /** The conversation whose sandbox it works in: a sub-agent's parent, else itself. */
-    conversations, sandbox) {
-        this.access = access;
-        this.conversations = conversations;
-        this.sandbox = sandbox;
-    }
-    async get(orgId, conversationId, viewerAccountId) {
-        if (!UUID_RE.test(conversationId) ||
-            !(await this.access.isAccessible(orgId, conversationId, viewerAccountId))) {
-            throw new ApiError("conversation.not_found", "Conversation not found");
-        }
-        // a sub-agent works in its parent conversation's sandbox (sub-agents spec §10.1)
-        const sandboxConv = await this.conversations.sandboxConversationOf(orgId, conversationId);
-        const s = await this.sandbox.status(orgId, sandboxConv);
-        if (!s)
-            throw new ApiError("sandbox.not_found", "This conversation has no sandbox");
-        return { status: s.status, lastUsedAt: s.lastUsedAt.toISOString() };
-    }
-};
-ConversationSandboxStatus = __decorate([
-    Injectable(),
-    __param(0, Inject(ConversationAccess)),
-    __param(1, Inject(ConversationsService)),
-    __param(2, Inject(SandboxService))
-], ConversationSandboxStatus);
-export { ConversationSandboxStatus };

package/dist/extensions/org-config.controller.d.ts

@@ -1,24 +0,0 @@
-import { z } from "zod";
-import { type Principal } from "../identity/principal.js";
-import { type OrgContext } from "../orgs/org.guard.js";
-import { OrgExtensionConfigs, type OrgExtensionView } from "./org-config.js";
-declare const PutBody: z.ZodObject<{
-    enabled: z.ZodOptional<z.ZodBoolean>;
-    config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    force: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strict>;
-/**
- * Org-level extension enablement and config (`/api/v1/orgs/:orgId/extensions`); responses echo only
- * non-secret config and whether each secret is set.
- */
-export declare class OrgExtensionConfigsController {
-    private readonly configs;
-    constructor(configs: OrgExtensionConfigs);
-    list(org: OrgContext): Promise<{
-        extensions: OrgExtensionView[];
-    }>;
-    put(principal: Principal, org: OrgContext, extension: string, body: z.infer<typeof PutBody>): Promise<{
-        extension: OrgExtensionView;
-    }>;
-}
-export {};

package/dist/extensions/org-config.controller.js

@@ -1,62 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-import { Controller, Get, Inject, Param, Put } from "@nestjs/common";
-import { z } from "zod";
-import { CurrentPrincipal, patTokenId, requireUser, } from "../identity/principal.js";
-import { createZodDto } from "../infra/validation/create-zod-dto.js";
-import { ZBody } from "../infra/validation/zod-params.js";
-import { CurrentOrg, OrgAction } from "../orgs/org.guard.js";
-import { OrgExtensionConfigs } from "./org-config.js";
-const PutBody = z
-    .object({
-    enabled: z.boolean().optional(),
-    config: z.record(z.string(), z.unknown()).optional(),
-    force: z.boolean().optional(),
-})
-    .strict();
-class OrgExtensionPutBody extends createZodDto(PutBody, "OrgExtensionPutBody") {
-}
-/**
- * Org-level extension enablement and config (`/api/v1/orgs/:orgId/extensions`); responses echo only
- * non-secret config and whether each secret is set.
- */
-let OrgExtensionConfigsController = class OrgExtensionConfigsController {
-    configs;
-    constructor(configs) {
-        this.configs = configs;
-    }
-    async list(org) {
-        return { extensions: await this.configs.list(org.orgId) };
-    }
-    async put(principal, org, extension, body) {
-        const p = requireUser(principal);
-        return {
-            extension: await this.configs.put(org.orgId, extension, body, p.account.id, patTokenId(p)),
-        };
-    }
-};
-__decorate([
-    Get(),
-    OrgAction("org.extensions.manage"),
-    __param(0, CurrentOrg())
-], OrgExtensionConfigsController.prototype, "list", null);
-__decorate([
-    Put(":extension"),
-    OrgAction("org.extensions.manage"),
-    __param(0, CurrentPrincipal()),
-    __param(1, CurrentOrg()),
-    __param(2, Param("extension")),
-    __param(3, ZBody(OrgExtensionPutBody))
-], OrgExtensionConfigsController.prototype, "put", null);
-OrgExtensionConfigsController = __decorate([
-    Controller("api/v1/orgs/:orgId/extensions"),
-    __param(0, Inject(OrgExtensionConfigs))
-], OrgExtensionConfigsController);
-export { OrgExtensionConfigsController };

package/dist/tools/builtins/sandbox/names.d.ts

@@ -1,7 +0,0 @@
-/**
- * 沙箱内置工具的名字（M5 T8，Ruling M12：工具 key 只能含字母数字、`_`、`-`，所以是 `sandbox_<动作>`）。
- * 单独成文件：注册表与策略判定只需要名字，不引入工具实现。
- */
-export declare const SANDBOX_TOOL_NAMES: readonly ["sandbox_bash", "sandbox_read", "sandbox_write", "sandbox_edit", "sandbox_glob", "sandbox_grep", "sandbox_deliver"];
-/** 组织设置 `sandboxToolPolicy` 为 `ask` 时需要审批的沙箱工具（只读的 read / glob / grep 除外）。 */
-export declare const SANDBOX_ASK_TOOL_NAMES: ReadonlySet<string>;

package/dist/tools/builtins/sandbox/names.js

@@ -1,20 +0,0 @@
-/**
- * 沙箱内置工具的名字（M5 T8，Ruling M12：工具 key 只能含字母数字、`_`、`-`，所以是 `sandbox_<动作>`）。
- * 单独成文件：注册表与策略判定只需要名字，不引入工具实现。
- */
-export const SANDBOX_TOOL_NAMES = [
-    "sandbox_bash",
-    "sandbox_read",
-    "sandbox_write",
-    "sandbox_edit",
-    "sandbox_glob",
-    "sandbox_grep",
-    "sandbox_deliver",
-];
-/** 组织设置 `sandboxToolPolicy` 为 `ask` 时需要审批的沙箱工具（只读的 read / glob / grep 除外）。 */
-export const SANDBOX_ASK_TOOL_NAMES = new Set([
-    "sandbox_bash",
-    "sandbox_write",
-    "sandbox_edit",
-    "sandbox_deliver",
-]);

package/dist/tools/builtins/skill-write.d.ts

@@ -1,59 +0,0 @@
-import type { SkillManifest } from "../../db/kernel-schema.js";
-import type { SkillChangesService } from "../../skills/changes.service.js";
-import type { BuiltinTool } from "../registry.js";
-/**
- * 内置工具 `skill_write`（M5 T15，R4）：agent 新建或更新它自己的技能（`scope = agent`）。
- * - 输入 `{ name, description, files: [{ path, content }] }`，只收文本文件，整个技能 ≤ {@link SKILL_WRITE_MAX_BYTES}；
- * - the kernel generates SKILL.md ({@link buildSkillWrite}): its frontmatter is `name` / `description`
- *   plus the invocation keys (`disable-model-invocation`, `context`, ... phase D) of the frontmatter
- *   of the `SKILL.md` entry in `files`, whose other keys are dropped; its body is that entry's body
- *   (empty without the entry);
- * - 每次调用写一个完整的新版本（上一版有、这次没给的文件不再属于新版本）；
- * - 私有 agent 直接生成新版本并立即生效；共享 agent 由触发对话的人先确认这次调用（R3 固定 ask，见 tools/policy.ts），
- *   再生成变更申请等负责人批准，期间只有本对话试用新版本（见 skills/changes.service.ts）；
- * - 成功后立即在日志追加技能目录快照（`skills_catalog`，Ruling M17），同一运行的下一步就能 `skill_load`。
- */
-/** 一个技能（含合成的 SKILL.md）的总大小上限（UTF-8 字节）。 */
-export declare const SKILL_WRITE_MAX_BYTES: number;
-/** 一次最多的文件数（含 SKILL.md）。 */
-export declare const SKILL_WRITE_MAX_FILES = 200;
-/** `skill_write` 的输入（已按 inputSchema 校验）。 */
-export interface SkillWriteInput {
-    name: string;
-    description: string;
-    files: {
-        path: string;
-        content: string;
-    }[];
-}
-/** 一个待写入的文件。 */
-export interface BuiltSkillFile {
-    path: string;
-    data: Uint8Array;
-    size: number;
-    sha256: string;
-}
-/** {@link buildSkillWrite} 成功的结果。 */
-export interface BuiltSkill {
-    name: string;
-    description: string;
-    files: BuiltSkillFile[];
-    manifest: SkillManifest;
-}
-/**
- * 由工具输入合成技能文件（纯函数）：
- * - SKILL.md = `---\n<yaml name/description>---\n\n<正文>\n`，正文为 `files` 里 `SKILL.md` 的内容去掉 frontmatter、
- *   去掉首尾空行；合成结果再用 `parseSkillMd` 校验（名字规则、描述长度、不含 XML 标签）；
- * - 其余文件按 `validateSkillPackage` 校验路径（不能越出 `/skills/<name>/`、不能重复、大小写冲突等）；
- * - 只收文本：内容含 NUL 视为二进制，拒绝；全部文件（含 SKILL.md）的 UTF-8 字节数之和 ≤ {@link SKILL_WRITE_MAX_BYTES}。
- * 返回合成结果或全部问题（英文，直接给模型）。
- */
-export declare function buildSkillWrite(input: SkillWriteInput): BuiltSkill | {
-    errors: string[];
-};
-/** 依赖：技能变更服务。 */
-export interface SkillWriteDeps {
-    changes: Pick<SkillChangesService, "write">;
-}
-/** 内置工具 `skill_write`（见文件头）。 */
-export declare function skillWriteTool(deps: SkillWriteDeps): BuiltinTool;

package/dist/tools/builtins/skill-write.js

@@ -1,244 +0,0 @@
-import { createHash } from "node:crypto";
-import { isSkillName, parseSkillMd, SKILL_ENTRY_FILE, SKILL_LIMITS, skillInvocation, ToolError, validateSkillPackage, } from "@capybara-hq/plugin-sdk";
-import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
-import { storedInvocation } from "../../skills/package.js";
-import { display } from "./sandbox/common.js";
-/**
- * 内置工具 `skill_write`（M5 T15，R4）：agent 新建或更新它自己的技能（`scope = agent`）。
- * - 输入 `{ name, description, files: [{ path, content }] }`，只收文本文件，整个技能 ≤ {@link SKILL_WRITE_MAX_BYTES}；
- * - the kernel generates SKILL.md ({@link buildSkillWrite}): its frontmatter is `name` / `description`
- *   plus the invocation keys (`disable-model-invocation`, `context`, ... phase D) of the frontmatter
- *   of the `SKILL.md` entry in `files`, whose other keys are dropped; its body is that entry's body
- *   (empty without the entry);
- * - 每次调用写一个完整的新版本（上一版有、这次没给的文件不再属于新版本）；
- * - 私有 agent 直接生成新版本并立即生效；共享 agent 由触发对话的人先确认这次调用（R3 固定 ask，见 tools/policy.ts），
- *   再生成变更申请等负责人批准，期间只有本对话试用新版本（见 skills/changes.service.ts）；
- * - 成功后立即在日志追加技能目录快照（`skills_catalog`，Ruling M17），同一运行的下一步就能 `skill_load`。
- */
-/** 一个技能（含合成的 SKILL.md）的总大小上限（UTF-8 字节）。 */
-export const SKILL_WRITE_MAX_BYTES = 1024 * 1024;
-/** 一次最多的文件数（含 SKILL.md）。 */
-export const SKILL_WRITE_MAX_FILES = 200;
-const SPEC = {
-    name: "skill_write",
-    description: "Create or update one of this agent's own skills: reusable instructions plus optional text files " +
-        "(scripts, templates, reference notes) that you or later conversations can load with skill_load. " +
-        "Each call writes a complete new version. SKILL.md is generated for you: its frontmatter comes from " +
-        "`name` and `description`, and its body is the content of the `SKILL.md` entry in `files` if you " +
-        "include one (its frontmatter is dropped, except the invocation keys disable-model-invocation, " +
-        "user-invocable, context, agent, argument-hint and arguments, which are kept; with " +
-        "disable-model-invocation: true only a person can invoke the skill and you cannot load it). " +
-        "Every other entry in `files` is stored at " +
-        "/skills/<name>/<path>. Files of the previous version that you leave out are not part of the new " +
-        "version. Text files only, at most 1 MB per skill in total. Use an existing skill's name to update " +
-        "it; an organization skill with the same name is shadowed by this agent's own skill. On a private " +
-        "agent the new version takes effect immediately. On a shared agent the change is sent to the " +
-        "agent's owner for approval and is usable only in this conversation until approved.",
-    inputSchema: {
-        type: "object",
-        properties: {
-            name: {
-                type: "string",
-                minLength: 1,
-                maxLength: SKILL_LIMITS.nameMaxChars,
-                description: 'Skill name: lowercase letters, digits and single hyphens, e.g. "weekly-report". Also the folder name under /skills/.',
-            },
-            description: {
-                type: "string",
-                minLength: 1,
-                maxLength: SKILL_LIMITS.descriptionMaxChars,
-                description: "What the skill does and when to use it, in one or two sentences (shown in the skills list). No XML tags.",
-            },
-            files: {
-                type: "array",
-                maxItems: SKILL_WRITE_MAX_FILES,
-                description: 'The skill\'s files. Include {"path": "SKILL.md", "content": "<instructions in Markdown>"} for the body; other paths are relative, e.g. "scripts/build.sh".',
-                items: {
-                    type: "object",
-                    properties: {
-                        path: { type: "string", minLength: 1, maxLength: SKILL_LIMITS.pathMaxChars },
-                        content: { type: "string", description: "The full text content of the file." },
-                    },
-                    required: ["path", "content"],
-                    additionalProperties: false,
-                },
-            },
-        },
-        required: ["name", "description", "files"],
-        additionalProperties: false,
-    },
-};
-/**
- * Splits off a leading YAML frontmatter (the same rule as `parseSkillMd`: a first line `---`, then a
- * later `---` line): the body after it and the frontmatter text (null when there is none).
- */
-function splitFrontmatter(text) {
-    const src = (text.startsWith("\uFEFF") ? text.slice(1) : text).replace(/\r\n?/g, "\n");
-    const lines = src.split("\n");
-    if (lines[0]?.trimEnd() !== "---")
-        return { body: src, front: null };
-    const end = lines.findIndex((l, i) => i > 0 && l.trimEnd() === "---");
-    if (end < 0)
-        return { body: src, front: null };
-    return { body: lines.slice(end + 1).join("\n"), front: lines.slice(1, end).join("\n") };
-}
-/** The invocation keys (phase D) kept from the frontmatter of the `SKILL.md` entry. */
-const INVOCATION_KEYS = [
-    "disable-model-invocation",
-    "user-invocable",
-    "context",
-    "agent",
-    "argument-hint",
-    "arguments",
-];
-/** The invocation keys of a frontmatter text; unparsable YAML or a non-mapping keeps none. */
-function invocationKeysOf(front) {
-    if (front === null)
-        return {};
-    let data;
-    try {
-        data = parseYaml(front, { maxAliasCount: 50 });
-    }
-    catch {
-        return {};
-    }
-    if (data === null || typeof data !== "object" || Array.isArray(data))
-        return {};
-    const out = {};
-    for (const key of INVOCATION_KEYS) {
-        const v = data[key];
-        if (v !== undefined)
-            out[key] = v;
-    }
-    return out;
-}
-const enc = new TextEncoder();
-const sha256 = (b) => createHash("sha256").update(b).digest("hex");
-/**
- * 由工具输入合成技能文件（纯函数）：
- * - SKILL.md = `---\n<yaml name/description>---\n\n<正文>\n`，正文为 `files` 里 `SKILL.md` 的内容去掉 frontmatter、
- *   去掉首尾空行；合成结果再用 `parseSkillMd` 校验（名字规则、描述长度、不含 XML 标签）；
- * - 其余文件按 `validateSkillPackage` 校验路径（不能越出 `/skills/<name>/`、不能重复、大小写冲突等）；
- * - 只收文本：内容含 NUL 视为二进制，拒绝；全部文件（含 SKILL.md）的 UTF-8 字节数之和 ≤ {@link SKILL_WRITE_MAX_BYTES}。
- * 返回合成结果或全部问题（英文，直接给模型）。
- */
-export function buildSkillWrite(input) {
-    const errors = [];
-    if (!isSkillName(input.name)) {
-        errors.push(`name "${String(input.name).slice(0, 80)}" is invalid: use 1-64 lowercase letters, digits and single hyphens (no leading or trailing hyphen)`);
-    }
-    if (input.description.includes("\u0000")) {
-        errors.push("description: only text is supported (it contains NUL bytes)");
-    }
-    const entries = input.files.filter((f) => f.path === SKILL_ENTRY_FILE);
-    if (entries.length > 1)
-        errors.push(`${SKILL_ENTRY_FILE}: duplicate path`);
-    const split = splitFrontmatter(entries[0]?.content ?? "");
-    const body = split.body.replace(/^\n+|\s+$/g, "");
-    const keys = invocationKeysOf(split.front);
-    const front = stringifyYaml({ name: input.name, description: input.description.trim(), ...keys }, { lineWidth: 0 });
-    const md = `---\n${front}---\n${body === "" ? "" : `\n${body}\n`}`;
-    let invocation;
-    if (errors.length === 0) {
-        const parsed = parseSkillMd(md);
-        if ("errors" in parsed)
-            errors.push(...parsed.errors);
-        else
-            invocation = storedInvocation(skillInvocation(parsed.frontmatter));
-    }
-    const others = input.files.filter((f) => f.path !== SKILL_ENTRY_FILE);
-    const files = [];
-    const mdData = enc.encode(md);
-    files.push({
-        path: SKILL_ENTRY_FILE,
-        data: mdData,
-        size: mdData.byteLength,
-        sha256: sha256(mdData),
-    });
-    for (const f of input.files) {
-        if (!f.content.includes("\u0000"))
-            continue;
-        errors.push(`${f.path.slice(0, 200)}: only text files are supported (the content contains NUL bytes)`);
-    }
-    for (const f of others) {
-        if (f.content.includes("\u0000"))
-            continue;
-        const data = enc.encode(f.content);
-        files.push({ path: f.path, data, size: data.byteLength, sha256: sha256(data) });
-    }
-    errors.push(...validateSkillPackage(files.map((f) => ({ path: f.path, size: f.size }))));
-    const total = files.reduce((n, f) => n + f.size, 0);
-    if (total > SKILL_WRITE_MAX_BYTES) {
-        errors.push(`the skill is ${total} bytes in total, over the 1 MB (${SKILL_WRITE_MAX_BYTES} bytes) limit; shorten the files or move large data out of the skill`);
-    }
-    if (errors.length > 0)
-        return { errors };
-    const description = input.description.trim();
-    return {
-        name: input.name,
-        description,
-        files,
-        manifest: {
-            name: input.name,
-            description,
-            files: files.map(({ path, size, sha256 }) => ({ path, size, sha256 })),
-            ...(invocation !== undefined && { invocation }),
-        },
-    };
-}
-/** 内置工具 `skill_write`（见文件头）。 */
-export function skillWriteTool(deps) {
-    return {
-        spec: SPEC,
-        // 私有 agent 不询问；共享 agent 由 R3 固定 ask 把关（tools/policy.ts 的 R3_SHARED_AGENT_ONLY_TOOL_KEYS）
-        defaultPolicy: "allow",
-        async run(input, ctx) {
-            const built = buildSkillWrite(input);
-            if ("errors" in built) {
-                throw new ToolError(`The skill was not written. Fix these problems and call skill_write again:\n- ${built.errors.slice(0, 20).join("\n- ")}`);
-            }
-            const r = await deps.changes.write({
-                orgId: ctx.orgId,
-                agentId: ctx.agentId,
-                accountId: ctx.accountId,
-                conversationId: ctx.conversationId,
-                ...(ctx.runId !== undefined && { runId: ctx.runId }),
-            }, built);
-            const name = built.name;
-            // A manual-only version (phase D) is not in the model's catalog, so skill_load cannot load it
-            const manualOnly = built.manifest.invocation?.model === false;
-            const manualText = `It is manual-only (disable-model-invocation: true): it is not in your skills catalog and ` +
-                `skill_load cannot load it; a person invokes it with /${name}.`;
-            if (r.kind === "version") {
-                const what = r.created ? "Created" : "Updated";
-                return {
-                    content: [
-                        {
-                            type: "text",
-                            text: `${what} skill "${name}" (version ${r.version}, ${built.files.length} files). ` +
-                                (manualOnly
-                                    ? `It is in effect now for every conversation with this agent. ${manualText}`
-                                    : "It is in effect now for every conversation with this agent; call skill_load to use it."),
-                        },
-                    ],
-                    display: display(`${r.created ? "新建" : "更新"}技能 ${name}（版本 ${r.version}）`, `${what} skill ${name} (version ${r.version})`),
-                };
-            }
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: `Saved skill "${name}" (version ${r.version}, ${built.files.length} files) as a change ` +
-                            "awaiting the owner's approval, because this agent is shared. Until the owner approves it, " +
-                            (manualOnly
-                                ? `the new version applies only in this conversation; other conversations keep the current version. ${manualText} `
-                                : "the new version is usable only in this conversation (call skill_load to use it); other " +
-                                    "conversations keep the current version. ") +
-                            "Tell the user the change needs the owner's approval.",
-                    },
-                ],
-                display: display(`技能 ${name} 的改动（版本 ${r.version}）已提交，等待负责人批准`, `Change to skill ${name} (version ${r.version}) awaits the owner's approval`),
-            };
-        },
-    };
-}