@capybara-hq/kernel 0.1.0-rc.2 → 0.1.0-rc.20

package/dist/channels/inbound.js

@@ -10,6 +10,9 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 import { randomUUID } from "node:crypto";
 import { Inject, Injectable } from "@nestjs/common";
 import { ConversationsService } from "../conversations/conversations.service.js";
+import { imSenderContext, recipientLocale, } from "../conversations/message-context.js";
+import { DevicesService } from "../devices/devices.service.js";
+import { DEFAULT_DEVICE_ALIASES, deviceLabel } from "../devices/label.js";
 import { ApiError } from "../errors.js";
 import { IdentityBinding } from "../identity/binding.js";
 import { ExternalIdentities } from "../identity/external.js";
@@ -17,7 +20,6 @@ import { KernelDb } from "../infra/database/kernel-db.js";
 import { LockService } from "../infra/lock/lock.service.js";
 import { KERNEL_LOGGER, REDIS } from "../infra/tokens.js";
 import { DirectorySync } from "../orgs/directory-sync.js";
-import { readOrgSettings } from "../orgs/settings.service.js";
 import { parseSlashCommand } from "../skills/invoke.js";
 import { ApprovalsService } from "../tools/approvals.service.js";
 import { QuestionsService } from "../tools/questions.service.js";
@@ -73,6 +75,7 @@ let ChannelInbound = class ChannelInbound {
     directorySync;
     jobs;
     guests;
+    devices;
     log;
     actions;
     constructor(kdb, redis, 
@@ -83,7 +86,7 @@ let ChannelInbound = class ChannelInbound {
     /** The channel queue: inbound jobs (`onEvent` only dedupes and enqueues) and deliveries. */
     jobs, 
     /** 卡片操作：审批决定与提问回答（授权由这两个服务按点击者映射到的账号判定）。 */
-    approvals, questions, guests, log) {
+    approvals, questions, guests, devices, log) {
         this.kdb = kdb;
         this.redis = redis;
         this.locks = locks;
@@ -94,6 +97,7 @@ let ChannelInbound = class ChannelInbound {
         this.directorySync = directorySync;
         this.jobs = jobs;
         this.guests = guests;
+        this.devices = devices;
         this.log = log;
         this.actions = new ChannelCardActions({
             get db() {
@@ -182,16 +186,25 @@ let ChannelInbound = class ChannelInbound {
         const threadKey = threadKeyOf(e.target, e.sender.externalId, e.messageId);
         // 群里回在话题里（新话题以这条消息为根）
         const replyTarget = isGroup ? { ...e.target, threadId: threadKey } : e.target;
-        const { locale } = await readOrgSettings(db, row.orgId);
+        // the sender's zone and language as the platform gives them (run context spec §3.4)
+        const im = imSenderContext(e.sender);
+        // kernel text speaks the person's language (maintainer decision 2026-11-08): before the
+        // speaker is known, the platform's language, else the org's
+        let locale = await recipientLocale(db, { orgId: row.orgId, im: im.locale });
         // 回复带幂等键：任务重试时平台不会重复显示（一条消息至多一句回复）
         const replyKey = idempotencyKey(`${connectionId}-${e.messageId}-reply`);
-        const reply = async (key, cards) => {
-            await connections.send(connectionId, replyTarget, { text: phrase(key, locale), ...(cards !== undefined && { cards }) }, replyKey);
+        const replyText = async (text, cards) => {
+            await connections.send(connectionId, replyTarget, { text, ...(cards !== undefined && { cards }) }, replyKey, locale);
         };
+        const reply = (key, cards) => replyText(phrase(key, locale), cards);
         const speaker = await this.resolveSpeaker(connectionId, row, e.sender, isGroup, locale, reply);
         if (speaker === undefined)
             return;
         const { accountId, threadAccount } = speaker;
+        // a bound person without a platform language: their latest web message's, else the org's
+        if (im.locale === undefined && threadAccount !== null) {
+            locale = await recipientLocale(db, { orgId: row.orgId, accountId: threadAccount });
+        }
         const k = {
             connectionId,
             chatId: e.target.chatId,
@@ -203,11 +216,19 @@ let ChannelInbound = class ChannelInbound {
             await reply("newConversation");
             return;
         }
+        const deviceCommand = !isGroup && threadAccount !== null ? parseDeviceCommand(e.text) : null;
+        if (deviceCommand !== null) {
+            await this.deviceCommand(row.orgId, accountId, deviceCommand.name, locale, replyText);
+            return;
+        }
         let conversationId = await findThread(db, k);
         if (conversationId === undefined) {
             let created;
             try {
-                created = (await this.conversations.create(row.orgId, accountId, row.agentId)).id;
+                // bound to the person's IM default device, else their default (environments spec
+                // §4.2 item 8); an anonymous sender's stays unbound (no sandbox)
+                created = (await this.conversations.create(row.orgId, accountId, row.agentId, { im: true }))
+                    .id;
             }
             catch (err) {
                 if (err instanceof ApiError && err.code === "agent.not_found") {
@@ -231,6 +252,11 @@ let ChannelInbound = class ChannelInbound {
             const posted = await this.post(row.orgId, conversationId, accountId, {
                 text: e.text,
                 clientMessageId: `${connectionId}:${e.messageId}`,
+                // run context spec §7: an anonymous guest is named by their IM profile name; a bound
+                // person by their account's name (the kernel reads it)
+                ...(threadAccount === null &&
+                    e.sender.displayName !== undefined && { senderName: e.sender.displayName }),
+                im,
             });
             seq = posted.event.seq;
             // best-effort (batch 5 review m4): a failed note must not fail the job before the thread
@@ -267,6 +293,51 @@ let ChannelInbound = class ChannelInbound {
             .execute();
         await this.jobs.enqueue(conversationId);
     }
+    /**
+     * Direct-message `/device` (environments spec §4.2 item 8): lists the person's usable devices,
+     * or with a name sets the IM default their next new conversation is bound to. The name matches
+     * case-insensitively against each label (`deviceLabel`: a former default demoted by a
+     * provider switch answers to e.g. "Personal (Docker sandbox)"); the default device also
+     * answers to 个人设备 / Personal.
+     */
+    async deviceCommand(orgId, accountId, name, locale, replyText) {
+        const { items, defaultId } = await this.devices.list(orgId, accountId);
+        const usable = items.filter((v) => v.available);
+        const labelOf = (v) => deviceLabel(v, locale);
+        const current = (await this.devices.imDefault(orgId, accountId)) ?? defaultId;
+        const list = usable
+            .map((v) => `- ${labelOf(v)}${v.id === current ? phrase("deviceCurrent", locale) : ""}`)
+            .join("\n");
+        const fill = (key, vars) => phrase(key, locale).replace(/\{(\w+)\}/g, (m, k) => vars[k] ?? m);
+        if (usable.length === 0)
+            return replyText(phrase("deviceNone", locale));
+        if (name === null)
+            return replyText(fill("deviceList", { list }));
+        const wanted = name.toLowerCase();
+        const is = (v) => labelOf(v).toLowerCase() === wanted;
+        // a name the person gave wins over a generated label, and both over the default's aliases
+        const hit = usable.find((v) => v.name !== null && is(v)) ??
+            usable.find(is) ??
+            usable.find((v) => v.isDefault && DEFAULT_DEVICE_ALIASES.includes(wanted));
+        if (hit === undefined) {
+            const unavailable = items.find((v) => !v.available && is(v));
+            if (unavailable !== undefined) {
+                return replyText(fill("deviceUnavailable", { name: labelOf(unavailable), list }));
+            }
+            return replyText(fill("deviceUnknown", { name, list }));
+        }
+        try {
+            await this.devices.setImDefault(orgId, accountId, hit.id);
+        }
+        catch (err) {
+            // deleted or made unusable since the list was read
+            if (err instanceof ApiError && err.code.startsWith("device.")) {
+                return replyText(fill("deviceUnknown", { name, list }));
+            }
+            throw err;
+        }
+        return replyText(fill("deviceSwitched", { name: labelOf(hit) }));
+    }
     /**
      * Posts the person's message: `/name args` as a skill invocation when the kernel accepts it, else
      * as typed (phase D spec §9). A retry of the job finds the first write by `clientMessageId`
@@ -393,6 +464,15 @@ ChannelInbound = __decorate([
     __param(9, Inject(ApprovalsService)),
     __param(10, Inject(QuestionsService)),
     __param(11, Inject(AnonymousGuests)),
-    __param(12, Inject(KERNEL_LOGGER))
+    __param(12, Inject(DevicesService)),
+    __param(13, Inject(KERNEL_LOGGER))
 ], ChannelInbound);
 export { ChannelInbound };
+/** `/device` or `/device <name>` (the exact command word, case-insensitive); anything else is null. */
+function parseDeviceCommand(text) {
+    const m = /^\/device(?:\s+([\s\S]*))?$/i.exec(text.trim());
+    if (m === null)
+        return null;
+    const name = m[1]?.trim();
+    return { name: name ? name : null };
+}

package/dist/channels/outbound.d.ts

@@ -1,6 +1,7 @@
 import { type ChannelTarget, type Logger } from "@capybara-hq/plugin-sdk";
 import { type Job, type Worker } from "bullmq";
 import { EventLog } from "../conversations/event-log.js";
+import type { KernelSchemaDb } from "../db/kernel-schema.js";
 import { KernelConfigService } from "../infra/config/kernel-config.service.js";
 import { KernelDb } from "../infra/database/kernel-db.js";
 import { TransactionHost } from "../infra/database/transaction-host.js";
@@ -8,6 +9,7 @@ import { ConversationLock } from "../runtime/conversation-lock.js";
 import type { StreamBus } from "../runtime/stream.js";
 import { ApprovalsService } from "../tools/approvals.service.js";
 import { QuestionsService } from "../tools/questions.service.js";
+import { ToolRegistry } from "../tools/registry.js";
 import { ChannelConnections } from "./connections.service.js";
 import { ChannelInbound } from "./inbound.js";
 import { type ChannelJobData, ChannelJobs } from "./jobs.js";
@@ -31,6 +33,17 @@ export declare const DELIVER_LOCK_PREFIX = "capk:channel-deliver:";
 export declare const DRAFT_INTERVAL_MS = 1000;
 /** 同一事件不可重试地失败这么多次后跳过它（Ruling A14）。 */
 export declare const POISON_FAILURES = 3;
+/**
+ * The language of the kernel text a conversation's IM thread gets (cards, notices; maintainer
+ * decision 2026-11-08: in IM, language is per person). The person who triggered the run speaks:
+ * the `locale` recorded on the conversation's latest `user_message` at or before `uptoSeq`, which
+ * already follows the order IM language, latest web message language, org language
+ * (`readMessageContext`). In a group thread that is whoever wrote last, i.e. the requester of the
+ * approvals and questions that follow. A message from an older log without one: its author's
+ * language by {@link recipientLocale}; no user message at all: the conversation owner's.
+ * Read from PG, so any replica derives the same value.
+ */
+export declare function conversationLocale(db: KernelSchemaDb, orgId: string, conversationId: string, uptoSeq: number): Promise<ChannelLocale>;
 /** BullMQ 退避：平台给了等待时长就用它，否则指数退避。 */
 export declare function deliverBackoff(attemptsMade: number, err?: Error): number;
 /** One `last_seq` advance of a delivery (see {@link ChannelOutbound.advanceIn}). */
@@ -79,7 +92,7 @@ export declare class ChannelOutbound {
     private readonly d;
     constructor(kdb: KernelDb, bus: StreamBus, eventLog: Pick<EventLog, "readAfter">, 
     /** The conversation lock provider; delivery takes it under its own key prefix. */
-    lock: Pick<ConversationLock, "scoped">, connections: Pick<ChannelConnections, "outbound">, approvals: Pick<ApprovalsService, "describe">, questions: Pick<QuestionsService, "forCall">, 
+    lock: Pick<ConversationLock, "scoped">, connections: Pick<ChannelConnections, "outbound">, approvals: Pick<ApprovalsService, "describe">, questions: Pick<QuestionsService, "forCall">, registry: Pick<ToolRegistry, "builtinSpecs" | "extensionToolSpecs">, 
     /** 入站任务的处理（worker 上执行 `ChannelInbound.handle`）；失败抛错由 BullMQ 重试。 */
     inbound: Pick<ChannelInbound, "handle">, jobs: Pick<ChannelJobs, "enqueue">, config: Pick<KernelConfigService, "get">, log: Pick<Logger, "error" | "warn" | "info">, txHost: TransactionHost);
     /**

package/dist/channels/outbound.js

@@ -13,16 +13,17 @@ import { Inject, Injectable } from "@nestjs/common";
 import { DelayedError, UnrecoverableError } from "bullmq";
 import { sql } from "kysely";
 import { conversationTopic, EventLog, } from "../conversations/event-log.js";
+import { recipientLocale } from "../conversations/message-context.js";
 import { ApiError } from "../errors.js";
 import { KernelConfigService } from "../infra/config/kernel-config.service.js";
 import { KernelDb } from "../infra/database/kernel-db.js";
 import { TransactionHost } from "../infra/database/transaction-host.js";
 import { Transactional } from "../infra/database/transactional.decorator.js";
 import { KERNEL_BUS, KERNEL_LOGGER } from "../infra/tokens.js";
-import { readOrgSettings } from "../orgs/settings.service.js";
 import { ConversationLock, } from "../runtime/conversation-lock.js";
 import { ApprovalsService } from "../tools/approvals.service.js";
 import { QuestionsService } from "../tools/questions.service.js";
+import { ToolRegistry } from "../tools/registry.js";
 import { approvalCard, cardMessage, connectUrl, conversationUrl, questionCard, webBase, } from "./cards.js";
 import { ChannelConnections } from "./connections.service.js";
 import { ChannelInbound } from "./inbound.js";
@@ -96,6 +97,42 @@ function isBusMessage(m) {
         return typeof m.toSeq === "number";
     return k === "delta" && typeof m.runId === "string";
 }
+/**
+ * The language of the kernel text a conversation's IM thread gets (cards, notices; maintainer
+ * decision 2026-11-08: in IM, language is per person). The person who triggered the run speaks:
+ * the `locale` recorded on the conversation's latest `user_message` at or before `uptoSeq`, which
+ * already follows the order IM language, latest web message language, org language
+ * (`readMessageContext`). In a group thread that is whoever wrote last, i.e. the requester of the
+ * approvals and questions that follow. A message from an older log without one: its author's
+ * language by {@link recipientLocale}; no user message at all: the conversation owner's.
+ * Read from PG, so any replica derives the same value.
+ */
+export async function conversationLocale(db, orgId, conversationId, uptoSeq) {
+    const m = await db
+        .selectFrom("conversation_events")
+        .select([
+        sql `payload->>'locale'`.as("locale"),
+        sql `payload->>'authorAccountId'`.as("author"),
+    ])
+        .where("conversation_id", "=", conversationId)
+        .where("type", "=", "user_message")
+        .where("seq", "<=", String(uptoSeq))
+        .orderBy("seq", "desc")
+        .limit(1)
+        .executeTakeFirst();
+    if (m?.locale === "zh" || m?.locale === "en")
+        return m.locale;
+    let accountId = m?.author ?? null;
+    if (accountId === null) {
+        const c = await db
+            .selectFrom("conversations")
+            .select("account_id")
+            .where("id", "=", conversationId)
+            .executeTakeFirst();
+        accountId = c?.account_id ?? null;
+    }
+    return recipientLocale(db, { orgId, accountId });
+}
 /** BullMQ 退避：平台给了等待时长就用它，否则指数退避。 */
 export function deliverBackoff(attemptsMade, err) {
     if (err instanceof RetryableDeliveryError && err.retryAfterMs !== undefined) {
@@ -133,7 +170,7 @@ let ChannelOutbound = class ChannelOutbound {
     d;
     constructor(kdb, bus, eventLog, 
     /** The conversation lock provider; delivery takes it under its own key prefix. */
-    lock, connections, approvals, questions, 
+    lock, connections, approvals, questions, registry, 
     /** 入站任务的处理（worker 上执行 `ChannelInbound.handle`）；失败抛错由 BullMQ 重试。 */
     inbound, jobs, config, log, txHost) {
         this.kdb = kdb;
@@ -151,6 +188,7 @@ let ChannelOutbound = class ChannelOutbound {
             eventLog,
             connections,
             approvals,
+            registry,
             questions,
             config,
             log,
@@ -383,11 +421,12 @@ ChannelOutbound = __decorate([
     __param(4, Inject(ChannelConnections)),
     __param(5, Inject(ApprovalsService)),
     __param(6, Inject(QuestionsService)),
-    __param(7, Inject(ChannelInbound)),
-    __param(8, Inject(ChannelJobs)),
-    __param(9, Inject(KernelConfigService)),
-    __param(10, Inject(KERNEL_LOGGER)),
-    __param(11, Inject(TransactionHost))
+    __param(7, Inject(ToolRegistry)),
+    __param(8, Inject(ChannelInbound)),
+    __param(9, Inject(ChannelJobs)),
+    __param(10, Inject(KernelConfigService)),
+    __param(11, Inject(KERNEL_LOGGER)),
+    __param(12, Inject(TransactionHost))
 ], ChannelOutbound);
 export { ChannelOutbound };
 /** 一次投递任务（本进程持有）：订阅、补读、草稿节流。 */
@@ -478,7 +517,7 @@ class Delivery {
             this.seen = Number(row.last_seq);
             this.persisted = this.seen;
             this.draftId = row.draft_message_id;
-            this.locale = (await readOrgSettings(this.d.db, this.s.row.orgId)).locale;
+            this.locale = await conversationLocale(this.d.db, this.s.row.orgId, this.conversationId, this.seen);
             this.base = webBase(this.d.config.get().http.publicUrl);
             return await this.loop();
         }
@@ -734,10 +773,17 @@ class Delivery {
             .execute();
     }
     send(message, idempotencyKey) {
-        return this.s.send(this.target, message, idempotencyKey);
+        return this.s.send(this.target, message, idempotencyKey, this.locale);
     }
     async handle(e) {
         switch (e.type) {
+            case "user_message": {
+                // a new message: what follows speaks its author's language (see conversationLocale)
+                const l = e.payload.locale;
+                if (l === "zh" || l === "en")
+                    this.locale = l;
+                return;
+            }
             case "assistant_message":
                 return this.finalize(e.runId, e.payload.step, e.payload.content, e.seq);
             case "approval_requested":
@@ -848,7 +894,10 @@ class Delivery {
             await this.send({ text: phrase("handleOnWeb", this.locale) }, this.key(seq));
             return this.advance(seq);
         }
-        const card = questionCard(questionId, form, "pending", this.questionUrl(this.base, child));
+        // the person can skip the conversation's own question by replying; a sub-agent's question
+        // stays answerable on its card only (reply-while-question spec §4.3)
+        const textReply = child === undefined ? (this.target.chatType === "dm" ? "plain" : "mention") : undefined;
+        const card = questionCard(questionId, form, "pending", this.questionUrl(this.base, child), null, textReply);
         await this.recordCard("question", card.id);
         const { messageId } = await this.send(cardMessage(phrase("questionTitle", this.locale), card), this.key(seq));
         return this.advance(seq, { card: { kind: "question", id: card.id, messageId } });
@@ -926,7 +975,7 @@ class Delivery {
                 await this.send({ text: marker }, this.key(seq, `-close-${how}`));
             }
             else {
-                await this.s.update(this.target, this.draftId, { text }, this.key(seq, `-close-${how}`));
+                await this.s.update(this.target, this.draftId, { text }, this.key(seq, `-close-${how}`), this.locale);
             }
         }
         return true;
@@ -974,10 +1023,10 @@ class Delivery {
      */
     async replaceCard(at, message, idempotencyKey) {
         if (this.s.features.edit) {
-            await this.s.update(at.target, at.messageId, message, idempotencyKey);
+            await this.s.update(at.target, at.messageId, message, idempotencyKey, this.locale);
         }
         else {
-            await this.s.send(at.target, message, idempotencyKey);
+            await this.s.send(at.target, message, idempotencyKey, this.locale);
         }
     }
     /** `assistant_message`：以完整文本定稿（更新草稿或新发）；不发送 thinking。 */
@@ -1003,7 +1052,7 @@ class Delivery {
         }
         if (useDraft && !this.draftBroken) {
             try {
-                await this.s.update(this.target, this.draftId, { text }, this.key(seq));
+                await this.s.update(this.target, this.draftId, { text }, this.key(seq), this.locale);
             }
             catch (err) {
                 if (!editRejected(err))
@@ -1078,7 +1127,7 @@ class Delivery {
             if (now - this.lastDraftAt < interval)
                 return;
             try {
-                await this.s.update(this.target, this.draftId, { text: cur.text });
+                await this.s.update(this.target, this.draftId, { text: cur.text }, undefined, this.locale);
             }
             catch (err) {
                 if (!editRejected(err))

package/dist/channels/phrases.d.ts

@@ -1,7 +1,8 @@
-/** 组织默认语言（`orgs.settings.locale`）。 */
+/** The language of kernel IM text: the recipient's, else the org's (`orgs.settings.locale`). */
 export type ChannelLocale = "zh" | "en";
 /**
- * 机器人在 IM 里说的固定话术（全部集中在这里，zh / en 同步）：按连接所属组织的默认语言选择。
+ * 机器人在 IM 里说的固定话术（全部集中在这里，zh / en 同步）. Chosen per recipient (run context spec
+ * §3.4): the sender's platform language, else their latest web language, else the org's.
  * 模型回复不经过这里，原样转换为 IM 富文本、不翻译。
  */
 export declare const CHANNEL_PHRASES: {
@@ -10,6 +11,36 @@ export declare const CHANNEL_PHRASES: {
         readonly zh: "已开始新对话";
         readonly en: "Started a new conversation.";
     };
+    /** Direct message `/device`: lists the usable devices (`{list}` one per line, the current one marked). */
+    readonly deviceList: {
+        readonly zh: "你的设备：\n{list}\n发送 /device <名称> 选择下一个新对话使用的设备。";
+        readonly en: "Your devices:\n{list}\nSend /device <name> to choose the one your next new conversation uses.";
+    };
+    /** After a direct message `/device <name>` (`{name}` is the device's name). */
+    readonly deviceSwitched: {
+        readonly zh: "下一个新对话将使用设备「{name}」，发送 /new 开始。";
+        readonly en: "Your next new conversation will use the device “{name}”; send /new to start one.";
+    };
+    /** `/device <name>` matches no usable device (`{list}` as in deviceList). */
+    readonly deviceUnknown: {
+        readonly zh: "没有找到名为「{name}」的设备。你的设备：\n{list}";
+        readonly en: "No device named “{name}”. Your devices:\n{list}";
+    };
+    /** `/device <name>` names an existing device that is unavailable now (`{list}` as in deviceList). */
+    readonly deviceUnavailable: {
+        readonly zh: "设备「{name}」当前不可用（它的文件由未启用的沙箱提供方保存）。你的设备：\n{list}";
+        readonly en: "The device “{name}” is unavailable: its files are kept by a sandbox provider that is not active. Your devices:\n{list}";
+    };
+    /** Direct message `/device` when the person has no usable device (no cloud sandbox in the deployment). */
+    readonly deviceNone: {
+        readonly zh: "你目前没有可用的设备。";
+        readonly en: "You have no usable devices.";
+    };
+    /** The mark of the current IM default device in the device list. */
+    readonly deviceCurrent: {
+        readonly zh: "（当前）";
+        readonly en: " (current)";
+    };
     /** 未绑定的人在私聊里发消息：附绑定卡片。 */
     readonly bindPrompt: {
         readonly zh: "请先绑定你的 Capybara 账号，再与我对话。";

package/dist/channels/phrases.js

@@ -1,10 +1,38 @@
 /**
- * 机器人在 IM 里说的固定话术（全部集中在这里，zh / en 同步）：按连接所属组织的默认语言选择。
+ * 机器人在 IM 里说的固定话术（全部集中在这里，zh / en 同步）. Chosen per recipient (run context spec
+ * §3.4): the sender's platform language, else their latest web language, else the org's.
  * 模型回复不经过这里，原样转换为 IM 富文本、不翻译。
  */
 export const CHANNEL_PHRASES = {
     /** 私聊 `/new` 之后。 */
     newConversation: { zh: "已开始新对话", en: "Started a new conversation." },
+    /** Direct message `/device`: lists the usable devices (`{list}` one per line, the current one marked). */
+    deviceList: {
+        zh: "你的设备：\n{list}\n发送 /device <名称> 选择下一个新对话使用的设备。",
+        en: "Your devices:\n{list}\nSend /device <name> to choose the one your next new conversation uses.",
+    },
+    /** After a direct message `/device <name>` (`{name}` is the device's name). */
+    deviceSwitched: {
+        zh: "下一个新对话将使用设备「{name}」，发送 /new 开始。",
+        en: "Your next new conversation will use the device \u201c{name}\u201d; send /new to start one.",
+    },
+    /** `/device <name>` matches no usable device (`{list}` as in deviceList). */
+    deviceUnknown: {
+        zh: "没有找到名为「{name}」的设备。你的设备：\n{list}",
+        en: "No device named \u201c{name}\u201d. Your devices:\n{list}",
+    },
+    /** `/device <name>` names an existing device that is unavailable now (`{list}` as in deviceList). */
+    deviceUnavailable: {
+        zh: "设备「{name}」当前不可用（它的文件由未启用的沙箱提供方保存）。你的设备：\n{list}",
+        en: "The device \u201c{name}\u201d is unavailable: its files are kept by a sandbox provider that is not active. Your devices:\n{list}",
+    },
+    /** Direct message `/device` when the person has no usable device (no cloud sandbox in the deployment). */
+    deviceNone: {
+        zh: "你目前没有可用的设备。",
+        en: "You have no usable devices.",
+    },
+    /** The mark of the current IM default device in the device list. */
+    deviceCurrent: { zh: "（当前）", en: " (current)" },
     /** 未绑定的人在私聊里发消息：附绑定卡片。 */
     bindPrompt: {
         zh: "请先绑定你的 Capybara 账号，再与我对话。",

package/dist/channels/supervisor.d.ts

@@ -127,6 +127,8 @@ export declare class ChannelSupervisor {
      * written yet on the first round).
      */
     private targets;
+    /** How many long connections this process holds now (replica presence reports it). */
+    heldCount(): number;
     private heldOf;
     /**
      * Gives back the most recently connected connection of `plugin`, leaving a handoff marker first;

package/dist/channels/supervisor.js

@@ -305,6 +305,10 @@ let ChannelSupervisor = class ChannelSupervisor {
         }
         return out;
     }
+    /** How many long connections this process holds now (replica presence reports it). */
+    heldCount() {
+        return this.held.size;
+    }
     heldOf(plugin) {
         let n = 0;
         for (const h of this.held.values())

package/dist/channels/threads.d.ts

@@ -48,3 +48,8 @@ export declare function findThread(db: KernelSchemaDb, k: ThreadKey): Promise<st
 export declare function insertThread(db: KernelSchemaDb, k: ThreadKey, conversationId: string): Promise<string>;
 /** 私聊 `/new`：归档当前话题行（下一条消息新建对话）。返回是否归档了一行。 */
 export declare function archiveThread(db: KernelSchemaDb, k: ThreadKey): Promise<boolean>;
+/**
+ * Drops a conversation's channel bindings (its thread rows and its delivery target), so a deleted
+ * conversation neither receives inbound messages nor posts to the chat any more.
+ */
+export declare function unbindConversation(db: KernelSchemaDb, conversationId: string): Promise<void>;

package/dist/channels/threads.js

@@ -160,3 +160,11 @@ export async function archiveThread(db, k) {
         .executeTakeFirst();
     return r.numUpdatedRows > 0n;
 }
+/**
+ * Drops a conversation's channel bindings (its thread rows and its delivery target), so a deleted
+ * conversation neither receives inbound messages nor posts to the chat any more.
+ */
+export async function unbindConversation(db, conversationId) {
+    await db.deleteFrom("channel_threads").where("conversation_id", "=", conversationId).execute();
+    await db.deleteFrom("channel_deliveries").where("conversation_id", "=", conversationId).execute();
+}

package/dist/channels/webhook.d.ts

@@ -1,4 +1,6 @@
 import type { ChannelWebhookRequest, ChannelWebhookResponse, Logger } from "@capybara-hq/plugin-sdk";
+import type { Redis } from "ioredis";
+import { LockService } from "../infra/lock/lock.service.js";
 import { ChannelConnections } from "./connections.service.js";
 import { ChannelInbound } from "./inbound.js";
 /**
@@ -19,6 +21,10 @@ export interface ChannelWebhookTimings {
 export declare const CHANNEL_WEBHOOK_TIMINGS: unique symbol;
 /** Most connections whose runtime is cached in one process. */
 export declare const WEBHOOK_RUNTIME_CACHE_MAX = 1000;
+/** How long a connection's last accepted webhook is remembered (`capybara:webhook-received`). */
+export declare const WEBHOOK_SEEN_TTL_SECONDS: number;
+/** When the gateway last accepted a verified webhook for the connection (ISO time, TTL 7 days). */
+export declare const webhookSeenKey: (connectionId: string) => string;
 /**
  * Headers every webhook response carries; a plugin cannot override them (the body is never meant to
  * be rendered or sniffed by a browser).
@@ -49,6 +55,10 @@ export declare const WEBHOOK_SECURITY_HEADERS: Readonly<Record<string, string>>;
  *   for it (`extensionHost.drainSeconds`) before `dispose`; past that the call is aborted → 503
  *   `channel.webhook_retry`.
  * Every response carries {@link WEBHOOK_SECURITY_HEADERS}.
+ * - An accepted `events` result (every event handed to `onEvent`) sets the marker
+ *   {@link webhookSeenKey} (the setup check `capybara:webhook-received`), at most once a minute per
+ *   connection (`LockService.lease`, `SET NX` with a 60 s TTL, on a minute key), in Redis with a TTL, never in PG; a Redis error
+ *   never fails the request.
  *
  * The decrypted runtime (plugin implementation + config) is cached per connection for a few seconds
  * (bounded, process local), so unauthenticated requests stay cheap before the signature check. It is
@@ -60,6 +70,9 @@ export declare class ChannelWebhooks {
     private readonly connections;
     private readonly inbound;
     private readonly log;
+    /** The minute gate of the seen marker (`SET NX` with a TTL). */
+    private readonly locks;
+    private readonly redis;
     private readonly runtimes;
     /** Bumped by {@link invalidateAll}: a fetch started before the bump is not stored. */
     private generation;
@@ -67,12 +80,19 @@ export declare class ChannelWebhooks {
     private readonly handleTimeoutMs;
     /** How long a connection's runtime is reused; 0 disables the cache. */
     private readonly runtimeCacheMs;
-    constructor(connections: Pick<ChannelConnections, "row" | "runtime">, inbound: Pick<ChannelInbound, "onEvent">, log: Pick<Logger, "warn">, timings?: Partial<ChannelWebhookTimings>);
+    constructor(connections: Pick<ChannelConnections, "row" | "runtime">, inbound: Pick<ChannelInbound, "onEvent">, log: Pick<Logger, "warn">, 
+    /** The minute gate of the seen marker (`SET NX` with a TTL). */
+    locks: Pick<LockService, "lease">, redis: Pick<Redis, "set">, timings?: Partial<ChannelWebhookTimings>);
     /** Drops the cached runtime of one connection (on `channel.changed`). */
     invalidate(connectionId: string): void;
     /** Drops every cached runtime (a plugin was replaced, revoked or reloaded). */
     invalidateAll(): void;
     handle(connectionId: string, request: ChannelWebhookRequest, signal: AbortSignal): Promise<ChannelWebhookResponse>;
+    /**
+     * Records that a verified webhook arrived for the connection: the minute gate first (`NX`), then
+     * the marker, both with a TTL. Failures are logged and swallowed (the platform got its ack).
+     */
+    private markSeen;
     private runtime;
     private respond;
     private respondBefore;