@capybara-hq/kernel 0.1.0-rc.2 → 0.1.0-rc.20

package/dist/devices/dto.d.ts

@@ -0,0 +1,25 @@
+import { z } from "zod";
+/** A device's name: trimmed, 1-64 characters (unique per person, case-insensitive). */
+export declare const DeviceName: z.ZodString;
+export declare const DeviceNameBody: z.ZodObject<{
+    name: z.ZodString;
+}, z.core.$strict>;
+export declare const DeviceParams: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+declare const DeviceCreateBodyDto_base: import("../infra/validation/create-zod-dto.js").ZodDtoClass<z.ZodObject<{
+    name: z.ZodString;
+}, z.core.$strict>>;
+export declare class DeviceCreateBodyDto extends DeviceCreateBodyDto_base {
+}
+declare const DeviceRenameBodyDto_base: import("../infra/validation/create-zod-dto.js").ZodDtoClass<z.ZodObject<{
+    name: z.ZodString;
+}, z.core.$strict>>;
+export declare class DeviceRenameBodyDto extends DeviceRenameBodyDto_base {
+}
+declare const DeviceParamsDto_base: import("../infra/validation/create-zod-dto.js").ZodDtoClass<z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>>;
+export declare class DeviceParamsDto extends DeviceParamsDto_base {
+}
+export {};

package/dist/devices/dto.js

@@ -0,0 +1,12 @@
+import { z } from "zod";
+import { createZodDto } from "../infra/validation/create-zod-dto.js";
+/** A device's name: trimmed, 1-64 characters (unique per person, case-insensitive). */
+export const DeviceName = z.string().trim().min(1).max(64);
+export const DeviceNameBody = z.object({ name: DeviceName }).strict();
+export const DeviceParams = z.object({ id: z.string().min(1).max(100) });
+export class DeviceCreateBodyDto extends createZodDto(DeviceNameBody, "DeviceCreateBody") {
+}
+export class DeviceRenameBodyDto extends createZodDto(DeviceNameBody, "DeviceRenameBody") {
+}
+export class DeviceParamsDto extends createZodDto(DeviceParams, "DeviceParams") {
+}

package/dist/devices/label.d.ts

@@ -0,0 +1,11 @@
+import type { DeviceView } from "./devices.service.js";
+/**
+ * A device's name for people outside the web (the IM `/device` list, the `Platform` tool): its
+ * own name, else 「个人设备」 / "Personal" for the default, else for a default demoted by a provider
+ * switch the default's name plus the provider's display name (its plugin id when it has none),
+ * e.g. 「个人设备（Docker 沙箱）」 / "Personal (Docker sandbox)", with " 2", " 3", … after the
+ * first of the same provider. The web builds the same label from its own messages.
+ */
+export declare function deviceLabel(v: Pick<DeviceView, "name" | "demotedFrom">, locale: "zh" | "en"): string;
+/** The words the default device answers to in `/device <name>` besides its label. */
+export declare const DEFAULT_DEVICE_ALIASES: readonly string[];

package/dist/devices/label.js

@@ -0,0 +1,25 @@
+const PERSONAL = { zh: "个人设备", en: "Personal" };
+/**
+ * A device's name for people outside the web (the IM `/device` list, the `Platform` tool): its
+ * own name, else 「个人设备」 / "Personal" for the default, else for a default demoted by a provider
+ * switch the default's name plus the provider's display name (its plugin id when it has none),
+ * e.g. 「个人设备（Docker 沙箱）」 / "Personal (Docker sandbox)", with " 2", " 3", … after the
+ * first of the same provider. The web builds the same label from its own messages.
+ */
+export function deviceLabel(v, locale) {
+    if (v.name !== null)
+        return v.name;
+    const d = v.demotedFrom;
+    if (d === null)
+        return PERSONAL[locale];
+    const provider = d.displayName?.[locale] ?? d.provider;
+    const nth = d.ordinal > 1 ? ` ${d.ordinal}` : "";
+    return locale === "zh"
+        ? `${PERSONAL.zh}（${provider}）${nth}`
+        : `${PERSONAL.en} (${provider})${nth}`;
+}
+/** The words the default device answers to in `/device <name>` besides its label. */
+export const DEFAULT_DEVICE_ALIASES = [
+    PERSONAL.zh.toLowerCase(),
+    PERSONAL.en.toLowerCase(),
+];

package/dist/devices/legacy-cleanup.job.d.ts

@@ -0,0 +1,34 @@
+import { KernelConfigService } from "../infra/config/kernel-config.service.js";
+import { KernelDb } from "../infra/database/kernel-db.js";
+import { LockService } from "../infra/lock/lock.service.js";
+import type { KernelLogger } from "../log.js";
+import { SandboxProviders } from "../sandbox/providers.js";
+/** The job's name (`@LockedInterval`, run lock `cron:devices-legacy-cleanup`). */
+export declare const LEGACY_CLEANUP_JOB = "devices-legacy-cleanup";
+/** What one run did: rows destroyed and deleted, rows kept because their provider is not loaded. */
+export interface LegacyCleanupResult {
+    destroyed: number;
+    kept: number;
+}
+/**
+ * The cleanup of the per-conversation sandboxes of before devices (spec
+ * 2026-11-07-environments-design §4.2 item 9): for up to {@link BATCH} rows of the legacy
+ * `sandboxes` table per tick, the row's provider destroys the instance and the file system named
+ * `cap-<conversationId>` (`destroyByName`, `destroyFileSystemByName`; also the instance of the
+ * provider it replaced, `prev_provider`, when that one is loaded), then the row is deleted. No
+ * lease is taken: nothing holds a legacy row after the upgrade. A row whose provider is not loaded
+ * is kept (warned once per hour: on the tick in the first {@link PERIOD_MS} of each hour); a row
+ * whose destruction failed is retried at a later tick, after the others (`sweep_failed_at`). With
+ * no rows left a tick is one `SELECT … LIMIT 1`. The table is dropped by a later migration.
+ */
+export declare class LegacySandboxCleanupJob {
+    private readonly db;
+    private readonly providers;
+    readonly config: KernelConfigService;
+    readonly lockService: LockService;
+    readonly log: KernelLogger;
+    constructor(db: KernelDb, providers: Pick<SandboxProviders, "forName">, config: KernelConfigService, lockService: LockService, log: KernelLogger);
+    tick(signal?: AbortSignal): Promise<void>;
+    /** One run (see the class); `signal` (the stop, or a lost run lock) is read between rows. */
+    runOnce(now?: Date, signal?: AbortSignal): Promise<LegacyCleanupResult>;
+}

package/dist/devices/legacy-cleanup.job.js

@@ -0,0 +1,141 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Inject, Injectable } from "@nestjs/common";
+import { KernelConfigService } from "../infra/config/kernel-config.service.js";
+import { KernelDb } from "../infra/database/kernel-db.js";
+import { LockService } from "../infra/lock/lock.service.js";
+import { LockedInterval } from "../infra/schedule/locked-interval.js";
+import { KERNEL_LOGGER } from "../infra/tokens.js";
+import { SandboxProviders } from "../sandbox/providers.js";
+/** The job's name (`@LockedInterval`, run lock `cron:devices-legacy-cleanup`). */
+export const LEGACY_CLEANUP_JOB = "devices-legacy-cleanup";
+/** Every 5 minutes, once per tick across replicas. */
+const PERIOD_MS = 5 * 60_000;
+/** Rows handled per tick. */
+const BATCH = 50;
+/** The time limit of one provider call. */
+const CALL_TIMEOUT_MS = 120_000;
+/**
+ * The cleanup of the per-conversation sandboxes of before devices (spec
+ * 2026-11-07-environments-design §4.2 item 9): for up to {@link BATCH} rows of the legacy
+ * `sandboxes` table per tick, the row's provider destroys the instance and the file system named
+ * `cap-<conversationId>` (`destroyByName`, `destroyFileSystemByName`; also the instance of the
+ * provider it replaced, `prev_provider`, when that one is loaded), then the row is deleted. No
+ * lease is taken: nothing holds a legacy row after the upgrade. A row whose provider is not loaded
+ * is kept (warned once per hour: on the tick in the first {@link PERIOD_MS} of each hour); a row
+ * whose destruction failed is retried at a later tick, after the others (`sweep_failed_at`). With
+ * no rows left a tick is one `SELECT … LIMIT 1`. The table is dropped by a later migration.
+ */
+let LegacySandboxCleanupJob = class LegacySandboxCleanupJob {
+    db;
+    providers;
+    config;
+    lockService;
+    log;
+    constructor(db, providers, config, lockService, log) {
+        this.db = db;
+        this.providers = providers;
+        this.config = config;
+        this.lockService = lockService;
+        this.log = log;
+    }
+    async tick(signal) {
+        const res = await this.runOnce(new Date(), signal);
+        if (res.destroyed > 0)
+            this.log.info("legacy sandboxes destroyed", { ...res });
+    }
+    /** One run (see the class); `signal` (the stop, or a lost run lock) is read between rows. */
+    async runOnce(now = new Date(), signal) {
+        const any = await this.db
+            .selectFrom("sandboxes")
+            .select("conversation_id")
+            .limit(1)
+            .executeTakeFirst();
+        if (any === undefined)
+            return { destroyed: 0, kept: 0 };
+        const byProvider = await this.db
+            .selectFrom("sandboxes")
+            .select(["provider", (eb) => eb.fn.countAll().as("n")])
+            .groupBy("provider")
+            .execute();
+        const loaded = byProvider.filter((p) => this.providers.forName(p.provider) !== undefined);
+        const unloaded = byProvider.filter((p) => this.providers.forName(p.provider) === undefined);
+        const kept = unloaded.reduce((sum, p) => sum + Number(p.n), 0);
+        if (unloaded.length > 0 && now.getTime() % 3_600_000 < PERIOD_MS) {
+            this.log.warn("legacy sandboxes kept: their provider is not loaded", {
+                providers: unloaded.map((p) => p.provider),
+                count: kept,
+            });
+        }
+        if (loaded.length === 0)
+            return { destroyed: 0, kept };
+        const rows = await this.db
+            .selectFrom("sandboxes")
+            .select(["conversation_id", "provider", "prev_provider"])
+            .where("provider", "in", loaded.map((p) => p.provider))
+            .orderBy("sweep_failed_at", (o) => o.asc().nullsFirst())
+            .orderBy("conversation_id")
+            .limit(BATCH)
+            .execute();
+        let destroyed = 0;
+        for (const row of rows) {
+            if (signal?.aborted)
+                break;
+            const name = `cap-${row.conversation_id}`;
+            const impl = this.providers.forName(row.provider)?.impl;
+            if (impl === undefined)
+                continue; // unloaded since the query: kept for a later tick
+            const callSignal = () => signal
+                ? AbortSignal.any([signal, AbortSignal.timeout(CALL_TIMEOUT_MS)])
+                : AbortSignal.timeout(CALL_TIMEOUT_MS);
+            try {
+                await impl.destroyByName(name, callSignal());
+                await impl.destroyFileSystemByName(name, callSignal());
+                if (row.prev_provider !== null && row.prev_provider !== row.provider) {
+                    const prev = this.providers.forName(row.prev_provider)?.impl;
+                    if (prev !== undefined)
+                        await prev.destroyByName(name, callSignal());
+                    else {
+                        this.log.warn("legacy sandbox of a replaced provider left: provider not loaded", {
+                            name,
+                            provider: row.prev_provider,
+                        });
+                    }
+                }
+                await this.db
+                    .deleteFrom("sandboxes")
+                    .where("conversation_id", "=", row.conversation_id)
+                    .execute();
+                destroyed++;
+            }
+            catch (err) {
+                this.log.warn("cannot destroy legacy sandbox; will retry", { name, err });
+                await this.db
+                    .updateTable("sandboxes")
+                    .set({ sweep_failed_at: now })
+                    .where("conversation_id", "=", row.conversation_id)
+                    .execute();
+            }
+        }
+        return { destroyed, kept };
+    }
+};
+__decorate([
+    LockedInterval(LEGACY_CLEANUP_JOB, () => PERIOD_MS, { ttl: CALL_TIMEOUT_MS })
+], LegacySandboxCleanupJob.prototype, "tick", null);
+LegacySandboxCleanupJob = __decorate([
+    Injectable(),
+    __param(0, Inject(KernelDb)),
+    __param(1, Inject(SandboxProviders)),
+    __param(2, Inject(KernelConfigService)),
+    __param(3, Inject(LockService)),
+    __param(4, Inject(KERNEL_LOGGER))
+], LegacySandboxCleanupJob);
+export { LegacySandboxCleanupJob };

package/dist/errors.d.ts

@@ -14,7 +14,9 @@ export declare const ERROR_CODES: {
     readonly rate_limited: 429;
     readonly "account.login_taken": 409;
     readonly "account.not_found": 404;
-    readonly "account.last_enterprise_admin": 409;
+    readonly "account.last_super_admin": 409;
+    readonly "account.initial_password_unavailable": 404;
+    readonly "account.create_needs_approval": 409;
     readonly "auth.account_disabled": 403;
     readonly "auth.required": 401;
     readonly "auth.token_expired": 401;
@@ -25,6 +27,7 @@ export declare const ERROR_CODES: {
     readonly "auth.csrf": 403;
     readonly "auth.rate_limited": 429;
     readonly "auth.session_required": 403;
+    readonly "auth.password_change_required": 403;
     readonly "token.not_found": 404;
     readonly "org.not_found": 404;
     readonly "org.creation_disabled": 403;
@@ -39,10 +42,15 @@ export declare const ERROR_CODES: {
     readonly "invitation.expired": 410;
     readonly "invitation.used": 409;
     readonly "extension.not_found": 404;
+    /** The extension registers no tool of that name (org tool switches, layering spec A §7). */
+    readonly "extension.tool_not_found": 404;
     readonly "extension.unavailable": 503;
     readonly "extension.no_org_config": 400;
     readonly "extension.config_invalid": 400;
     readonly "extension.config_readonly": 409;
+    readonly "extension.field_not_overridable": 400;
+    readonly "extension.no_org_override": 404;
+    readonly "extension.needs_config": 409;
     readonly "extension.dependency_missing": 409;
     readonly "extension.has_dependents": 409;
     readonly "extension.not_enabled": 409;
@@ -60,6 +68,16 @@ export declare const ERROR_CODES: {
     readonly "extension.name_mismatch": 409;
     readonly "extension.downgrade_unsupported": 409;
     readonly "extension.not_disabled": 409;
+    /**
+     * Another enabled extension provides a single-provider extension point this one provides
+     * (details `[{ extensionPoint, enabled: { name, displayName } }]`): disable it first.
+     */
+    readonly "extension.single_provider_enabled": 409;
+    /**
+     * A required bootstrap plugin provides a single-provider extension point this one provides
+     * (details as above, `required: true`): it cannot be disabled, so it cannot be replaced.
+     */
+    readonly "extension.single_provider_required": 409;
     readonly "packages.npm_failed": 502;
     readonly "bootstrap.integrity_mismatch": 500;
     readonly "bootstrap.download_failed": 502;
@@ -72,15 +90,106 @@ export declare const ERROR_CODES: {
     readonly "catalog.dependency_cycle": 409;
     readonly "catalog.version_exists": 409;
     readonly "catalog.item_not_found": 404;
+    /** An org-owned item its owner has not made shareable cannot be shown or associated (P3-16). */
+    readonly "catalog.not_shareable": 409;
+    /** The owner org cannot be removed from its own item's list (P3-17). */
+    readonly "catalog.owner_required": 409;
+    /**
+     * Only the org's own rows can be made shareable: not an agent's skill, not a copy linked to a
+     * platform item another owner has (P3-6).
+     */
+    readonly "catalog.not_owned": 409;
+    /** The item (or the version asked for) waits for the super admin's confirmation (P3-9). */
+    readonly "catalog.item_pending": 409;
+    /** Deleting a platform plugin whose extension is still enabled on the deployment. */
+    readonly "catalog.extension_enabled": 409;
+    /** A super admin confirmation raced the item's removal (P3-21). */
+    readonly "catalog.item_removed": 409;
+    /** What deleting an org's own plugin does changed since its preview (P3-19). */
+    readonly "catalog.preview_stale": 409;
     readonly "catalog.name_conflict": 409;
+    /** A theme of an imported plugin fails its file or asset checks (themes spec §4, §5). */
+    readonly "theme.invalid": 400;
+    /** A theme of an imported plugin fails the readability checks of its merged schemes (§5). */
+    readonly "theme.unreadable": 400;
+    /**
+     * A settings write names a theme that is not available where it is set (§7, §9): an org default
+     * off in the org, a platform default that is not a platform theme with scope `all`, or a
+     * person's pick on in none of their orgs; details `[{ theme }]`.
+     */
+    readonly "theme.not_available": 400;
+    /**
+     * The change would take the platform default theme (`uiTheme`) away from an org: narrowing,
+     * disabling, removing it or its plugin (§7); details `[{ theme, setting: "uiTheme" }]`.
+     */
+    readonly "theme.platform_default": 409;
+    /**
+     * Another theme with the same id is already on in an org the change would turn this one on in
+     * (§6, rule 10); details `[{ theme, orgId, themes, plugins }]`.
+     */
+    readonly "theme.id_taken": 409;
+    /**
+     * A theme delivery URL names no stored theme version, or a file that version does not name (§8);
+     * a removed theme's versions are still served.
+     */
+    readonly "theme.not_found": 404;
+    /**
+     * An `extension.client` section whose extension manifest lacks `permissions.client: true`
+     * (client extensions spec §5.4: client code is always declared and reviewed).
+     */
+    readonly "client.undeclared": 400;
+    /**
+     * A client file's sha384 is not the integrity its plugin.json records (spec §9.1); details
+     * `[{ file }]` (the manifest key).
+     */
+    readonly "client.integrity_mismatch": 400;
+    /**
+     * The client section or a client file fails the import checks (spec §4.1, §9.1: a listed file
+     * missing, a file not listed, a key that cannot be looked up exactly, a size limit, a stylesheet
+     * not wrapped in `@layer extensions` or with `@import` / an absolute `url()`); details
+     * `[{ file, reason }]`.
+     */
+    readonly "client.invalid": 400;
+    /**
+     * The client section's `apiVersion` is newer than the deployment's `CLIENT_API_VERSION` (spec
+     * §4.2): the web host could not run the bundle; details `[{ apiVersion, supported }]`.
+     */
+    readonly "client.api_unsupported": 400;
+    /**
+     * A client file URL (`/api/v1/client/<plugin>/<build>/<file>`, spec §9.3) the caller may not
+     * fetch: an unknown or old build, a file the build does not list (by its exact key), an extension
+     * not running or not approved, not enabled in any live org the caller belongs to, or stopped by
+     * the kill switch. One code for all, so nothing tells them apart.
+     */
+    readonly "client.not_found": 404;
     readonly "directory.not_configured": 409;
     readonly "catalog.item_disabled": 403;
+    readonly "plugin.disabled": 409;
+    readonly "plugin.scope_locked": 409;
+    readonly "plugin.switch_stale": 409;
+    readonly "plugin.builtin": 409;
+    readonly "plugin.scope_stale": 409;
+    readonly "component.not_found": 404;
+    readonly "component.version_stale": 409;
+    /** A platform component offered to the org but off there (one more connector from a template). */
+    readonly "component.off": 409;
     readonly "catalog.approval_required": 403;
     readonly "catalog.request_not_found": 404;
+    /** No open org notice with that id for an admin of the org (inbox). */
+    readonly "inbox.notice_not_found": 404;
     readonly "catalog.request_decided": 409;
+    /** A pending request of the same kind for the same item or entry exists (spec §5.1 rule 5). */
+    readonly "catalog.request_pending": 409;
+    /** The item is not in the state the request kind asks to change (already offered, on, ...). */
+    readonly "catalog.request_invalid": 409;
+    /** The deployment setting `orgMarketplaceBrowse` is off: no marketplace requests. */
+    readonly "catalog.marketplace_browse_disabled": 409;
     readonly "catalog.custom_disabled": 403;
     readonly "catalog.not_deployed": 409;
     readonly "catalog.icon_not_found": 404;
+    readonly "catalog.guide_not_found": 404;
+    /** The check is not in the setup guide rendered for that mode and audience (setup guides v2 §10.3). */
+    readonly "catalog.check_not_found": 404;
     readonly "marketplace.not_found": 404;
     readonly "marketplace.entry_not_found": 404;
     readonly "marketplace.fetch_failed": 502;
@@ -89,6 +198,7 @@ export declare const ERROR_CODES: {
     readonly "marketplace.private_address": 422;
     readonly "marketplace.redirect": 422;
     readonly "marketplace.incompatible": 409;
+    readonly "marketplace.entry_deprecated": 409;
     readonly "marketplace.package_mismatch": 409;
     readonly "marketplace.builtin": 409;
     readonly "marketplace.git_failed": 502;
@@ -97,6 +207,10 @@ export declare const ERROR_CODES: {
     readonly "marketplace.host_not_allowed": 403;
     readonly "marketplace.path_unsupported": 422;
     readonly "plugin.review_stale": 409;
+    readonly "plugin.name_taken": 409;
+    readonly "plugin.name_reserved": 409;
+    readonly "plugin.dependency_unavailable": 409;
+    readonly "plugin.extension_upload_pending": 501;
     readonly "plugin.staging_not_found": 404;
     readonly "plugin.install_failed": 502;
     readonly "plugin.install_not_found": 404;
@@ -108,9 +222,15 @@ export declare const ERROR_CODES: {
     readonly "plugin.upgrade_failed": 502;
     readonly "setup.already_completed": 409;
     readonly "setup.token_invalid": 403;
+    /** The admin overview's seven-day usage aggregate ran past its statement timeout (spec §5.5). */
+    readonly "admin.usage_unavailable": 503;
     readonly "agent.not_found": 404;
     readonly "agent.version_conflict": 409;
+    /** The profile was changed since the client read it (`expectedUpdatedAt` is stale). */
+    readonly "agent.profile_conflict": 409;
     readonly "agent.model_unavailable": 400;
+    /** A save gave `instructionFiles` and an `instructions` that is not their join. */
+    readonly "agent.instructions_mismatch": 400;
     /**
      * `skills.pinned` of an agent definition is refused (details: `{ skill, reason, totalBytes? }`;
      * reasons `not_selected`, `not_found`, `duplicate`, `too_many`, `too_large`, `manual_only`).
@@ -118,6 +238,27 @@ export declare const ERROR_CODES: {
     readonly "agent.pinned_invalid": 400;
     /** `subagents` of an agent definition is refused (details: `{ reason, path, value? }`). */
     readonly "agent.subagents_invalid": 400;
+    /** Creating from a template with a visibility other than `private` without `agents.manage`. */
+    readonly "agent.visibility_forbidden": 403;
+    /** Creating from a template: the template or the org changed since the preview (P4-3). */
+    readonly "agent.template_preview_stale": 409;
+    /** The agent has no pending connector with that key (ruling P4-6). */
+    readonly "agent.pending_connector_not_found": 404;
+    /**
+     * The connector does not fit the pending entry (ruling P4-T6-1; details `[{ reason }]`:
+     * `template` another or no connector template, `protocol` another kind, `tools` none of the
+     * entry's tools, `not_synced` no tool snapshot yet: an OAuth connector to authorize first).
+     */
+    readonly "agent.pending_connector_mismatch": 400;
+    /** Requesting connector setup for an agent with no pending connectors (ruling P4-T6-7). */
+    readonly "agent.no_pending_connectors": 409;
+    /**
+     * An org template's bare name is a type the org can already use (spec §5 rule 10, ruling
+     * P4-9; details `[{ owner, templateId }]`, `owner` as `plugin.name_taken`'s).
+     */
+    readonly "agent_template.name_taken": 409;
+    /** An org template was saved since the editor read it (`expectedVersion` is stale, P4-12). */
+    readonly "agent_template.version_conflict": 409;
     readonly "conversation.not_found": 404;
     readonly "conversation.output_not_found": 404;
     readonly "conversation.artifact_not_found": 404;
@@ -130,14 +271,26 @@ export declare const ERROR_CODES: {
     /** A sub-agent's conversation takes no messages from people (sub-agents spec §6.1). */
     readonly "conversation.read_only": 409;
     readonly "run.not_active": 409;
+    /** A run that is not one of the conversation's (the live draft route, spec 2026-11-07 §3.2). */
+    readonly "run.not_found": 404;
+    /** A background task that is not in this conversation (or its sub-agents), or does not exist. */
+    readonly "background_task.not_found": 404;
+    /** The task's output cannot be read now (its sandbox is not running and no finish recorded it). */
+    readonly "background_task.output_unavailable": 409;
     readonly "connector.not_found": 404;
     readonly "connector.slug_taken": 409;
+    /** The connector template's setup guide moved on since the person was shown it (guide-ack). */
+    readonly "connector.guide_changed": 409;
+    readonly "connector.kind_unavailable": 409;
     readonly "connector.connect_failed": 502;
     readonly "connector.tool_not_found": 404;
     readonly "connector.tool_not_pending": 409;
     readonly "connector.resources_disabled": 409;
+    /** Per-member tool policies on a connector with one org credential (decision 2026-11-09). */
+    readonly "connector.not_personal": 409;
     readonly "approval.not_found": 404;
     readonly "approval.already_decided": 409;
+    readonly "approval.scope_not_allowed": 409;
     readonly "question.not_found": 404;
     readonly "question.already_answered": 409;
     readonly "tool_output.not_found": 404;
@@ -151,6 +304,7 @@ export declare const ERROR_CODES: {
     readonly "channel.webhook_not_found": 404;
     readonly "channel.webhook_unavailable": 409;
     readonly "channel.webhook_retry": 503;
+    readonly "channel.guide_changed": 409;
     readonly "ui.not_found": 404;
     readonly "ui.render_failed": 502;
     readonly "ui.action_failed": 502;
@@ -164,17 +318,72 @@ export declare const ERROR_CODES: {
     readonly "attachment.too_many_pending": 429;
     readonly "sandbox.unavailable": 503;
     readonly "sandbox.busy": 409;
-    readonly "sandbox.not_found": 404;
+    /** A sandbox file path the kernel reads is not absolute or not under the sandbox roots. */
+    readonly "sandbox.file_invalid_path": 422;
+    /** No file at the sandbox path the kernel reads. */
+    readonly "sandbox.file_not_found": 422;
+    /** The sandbox path the kernel reads is a directory, not one file. */
+    readonly "sandbox.file_is_directory": 422;
+    /** The sandbox file the kernel reads is over the caller's size limit. */
+    readonly "sandbox.file_too_large": 422;
+    /** The device is missing, deleted, or not the caller's (never 403, so ids cannot be probed). */
+    readonly "device.not_found": 404;
+    /** The cloud device's file system is gone at the provider; reset its files to start empty. */
+    readonly "device.files_lost": 409;
+    /** The caller may see the device but not use it (shared devices, later phases). */
+    readonly "device.forbidden": 403;
+    /** The device's provider is not the deployment's current one, or there is none. */
+    readonly "device.unavailable": 503;
+    /** The person already has a live device with this name (case-insensitive). */
+    readonly "device.name_taken": 409;
+    /** The person already has `devices.maxPersonal` live personal devices. */
+    readonly "device.limit_reached": 409;
+    /**
+     * A local device's files are on its machine: they cannot be reset from the platform; run
+     * `capybara-device logout`, then `capybara-device login` into the device, on the machine
+     * (ruling R24).
+     */
+    readonly "device.files_on_device": 409;
+    /** The local device's machine is not connected now (no replica holds its lease). */
+    readonly "device.offline": 503;
+    /** The local device's machine runs a `capybara-device` too old for this kernel; update it. */
+    readonly "device.program_outdated": 426;
+    /** Device sign-in (RFC 8628 style): the person has not approved the code yet; keep polling. */
+    readonly "device_sign_in.authorization_pending": 400;
+    /** Device sign-in: the program polls faster than the interval; add 5 seconds and keep polling. */
+    readonly "device_sign_in.slow_down": 400;
+    /** Device sign-in: the code expired before it was approved; start over. */
+    readonly "device_sign_in.expired": 400;
+    /** Device sign-in: the person denied the code. */
+    readonly "device_sign_in.denied": 400;
+    /** Device sign-in: no pending code matches the one given. */
+    readonly "device_sign_in.code_invalid": 404;
+    /** Device sign-in: the confirmation could not hand the credential to the program; start over. */
+    readonly "device_sign_in.unavailable": 503;
+    /** The machine credential is unknown or revoked. */
+    readonly "device.credential_invalid": 401;
     readonly "skill.not_found": 404;
     /** Also a skill neither the model nor a person could use (phase D: both invocation flags off). */
     readonly "skill.invalid_package": 400;
+    /** An agent already has `AGENT_SKILLS_MAX` own skills. */
+    readonly "skill.agent_cap": 409;
+    /** Sharing this agent skill with the org is already waiting for an org admin. */
+    readonly "skill.share_pending": 409;
+    /** Another conversation's proposed version of this shared skill is waiting for an org admin. */
+    readonly "skill.proposal_pending_elsewhere": 409;
+    /** A sub-agent conversation tried to register a skill on its agent (only the root registers). */
+    readonly "skill.subagent_register": 403;
     /**
      * A person invoked a skill (`/name`, phase D) that is not one of the agent's effective skills
      * (`details: [{ reason: "not_found" }]`) or is hidden from the menu (`not_user_invocable`).
      */
     readonly "skill.not_invocable": 400;
+    /**
+     * Uploading or sharing a skill: an org-level skill with this name already exists in the org
+     * (P3-24, F18).
+     */
+    readonly "skill.name_exists": 409;
     readonly "skill_change.not_found": 404;
-    readonly "skill_change.not_owner": 403;
     readonly "skill_change.already_decided": 409;
     readonly "trajectory.not_found": 404;
     readonly "eval.run_not_finished": 409;
@@ -192,6 +401,9 @@ export declare const ERROR_CODES: {
     readonly "eval.candidate_invalid": 400;
     readonly "model.unconfigured": 409;
     readonly "model.purpose_unknown": 404;
+    readonly "model.provider_not_found": 404;
+    /** An extension's `ctx.models.embed` call was denied by a `model.request` policy hook. */
+    readonly "model.hook_denied": 403;
     readonly "eval.result_not_found": 404;
 };
 export type ErrorCode = keyof typeof ERROR_CODES;