@capybara-hq/kernel 0.1.0-rc.2 → 0.1.0-rc.21

package/dist/agents/org-templates.js

@@ -0,0 +1,876 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+// Org agent templates (plugin scope phase 4, spec §15, rulings P4-9 to P4-13): 另存为模板 writes
+// an org row (`agent_templates`, no plugin, a bare `<name>`, version 1) from an agent, the template
+// detail reads any template usable in the org, and the owner org's admins write new versions.
+// Deleting and 可共享 are `OwnedItems`' (the P3 owner rules). No in-process state.
+import { AGENT_TEMPLATE_LIMITS, extensionToolKey, parseAgentTemplate, parseToolKey, } from "@capybara-hq/plugin-sdk";
+import { Inject, Injectable } from "@nestjs/common";
+import { offeredNamed } from "../catalog/component-state.js";
+import { ownerOf, ownersOf } from "../catalog/ownership.js";
+import { ApiError } from "../errors.js";
+import { audit } from "../identity/audit.js";
+import { notifySharedUpdate } from "../inbox/org-notices.js";
+import { KernelDb } from "../infra/database/kernel-db.js";
+import { TransactionHost } from "../infra/database/transaction-host.js";
+import { Transactional } from "../infra/database/transactional.decorator.js";
+import { OrgLock } from "../orgs/org-lock.js";
+import { skillVersionsById } from "../skills/usable.js";
+import { isRemovedBuiltinKey } from "../tools/builtin-names.js";
+import { canonicalJson } from "../tools/canonical-json.js";
+import { ToolRegistry } from "../tools/registry.js";
+import { AgentLookup } from "./agent-lookup.js";
+import { loadTemplates, putTemplateVersionIn, readOwnTemplate, templateTypeOf, templateViewOf, usableTemplates, } from "./templates.js";
+/**
+ * Roster names no template may take (ruling T4-R15): `general-purpose`, always the roster's first
+ * entry. Claude Code's other built-in types (`Explore`, `Plan`) are capitalized, which the
+ * template name rule already refuses.
+ */
+export const RESERVED_TEMPLATE_NAMES = new Set(["general-purpose"]);
+const EFFORTS = ["low", "medium", "high", "xhigh", "max"];
+const TOOL_KEY_RE = /^[a-zA-Z0-9_-]{1,64}$/;
+const notFound = () => new ApiError("component.not_found", "Agent template not found");
+const agentNotFound = () => new ApiError("agent.not_found", "Agent not found");
+/**
+ * A connector's URL as a template may record it (ruling P4-11): userinfo, query and fragment
+ * removed (they may carry credentials). Null when it is no absolute http(s) URL.
+ */
+export function sanitizeEndpoint(raw) {
+    let u;
+    try {
+        u = new URL(raw);
+    }
+    catch {
+        return null;
+    }
+    if (u.protocol !== "https:" && u.protocol !== "http:")
+        return null;
+    u.username = "";
+    u.password = "";
+    u.search = "";
+    u.hash = "";
+    const out = u.toString();
+    return out.length <= 2048 ? out : null;
+}
+/** The URL a hand-configured connector's endpoint names: MCP `url`, OpenAPI `specUrl` / `baseUrl`. */
+function endpointUrl(endpoint) {
+    if (endpoint === null || typeof endpoint !== "object" || Array.isArray(endpoint))
+        return null;
+    const e = endpoint;
+    for (const k of ["url", "specUrl", "baseUrl"]) {
+        if (typeof e[k] === "string")
+            return sanitizeEndpoint(e[k]);
+    }
+    return null;
+}
+/**
+ * Validates a template definition the way an `agents/<name>.md` file is (the SDK parser, so the
+ * two never drift): the definition minus `instructions` as the frontmatter (JSON is YAML), then
+ * the instructions as the body. Problems -> 400 `validation_failed` naming each.
+ */
+export function parseTemplateDefinition(definition) {
+    const { instructions, ...front } = definition;
+    if (typeof instructions !== "string") {
+        throw new ApiError("validation_failed", "Invalid agent template: instructions is required", [
+            { path: "definition.instructions", message: "instructions must be a string" },
+        ]);
+    }
+    const parsed = parseAgentTemplate(`---\n${JSON.stringify(front)}\n---\n${instructions}`);
+    if ("errors" in parsed) {
+        throw new ApiError("validation_failed", `Invalid agent template: ${parsed.errors[0] ?? "unknown problem"}`, parsed.errors.map((message) => ({ path: "definition", message })));
+    }
+    return parsed.template;
+}
+/**
+ * Ruling P4-11 on an edit: a `connectors[].needs.endpoint` that carries userinfo, a query or a
+ * fragment, or is no http(s) URL of at most 2048 characters, is refused with 400
+ * `validation_failed` naming the field and what it carries (an edit is never stripped silently).
+ * One that differs only by normalization (a trailing slash, the host's case) is accepted:
+ * returns the template with each such endpoint in its canonical {@link sanitizeEndpoint} form.
+ */
+export function canonicalEndpoints(template) {
+    const details = [];
+    const connectors = (template.connectors ?? []).map((c, i) => {
+        if (!("needs" in c))
+            return c;
+        const raw = c.needs.endpoint;
+        const clean = sanitizeEndpoint(raw);
+        const path = `definition.connectors.${i}.needs.endpoint`;
+        if (clean === null) {
+            details.push({ path, message: "must be an http(s) URL of at most 2048 characters" });
+            return c;
+        }
+        const u = new URL(raw);
+        const carries = [
+            ...(u.username !== "" || u.password !== "" ? ["userinfo"] : []),
+            ...(u.search !== "" ? ["a query"] : []),
+            ...(u.hash !== "" ? ["a fragment"] : []),
+        ];
+        if (carries.length > 0) {
+            details.push({
+                path,
+                message: `must not carry ${carries.join(", ")} (they may hold credentials); use ${clean}`,
+            });
+            return c;
+        }
+        return clean === raw ? c : { ...c, needs: { ...c.needs, endpoint: clean } };
+    });
+    if (details.length > 0) {
+        throw new ApiError("validation_failed", "A connector endpoint in an agent template must be a plain http(s) URL (no userinfo, query or fragment)", details);
+    }
+    return template.connectors === undefined ? template : { ...template, connectors };
+}
+/**
+ * The template an agent is saved as (rulings P4-10, P4-11), with what was left out. Pure reads of
+ * the org's state through `db`.
+ */
+export async function templateFromAgent(db, orgId, agent, meta, 
+/** The extension tools loaded on this replica (a wholly turned-off extension's tools). */
+extensionTools = []) {
+    const def = agent.definition;
+    const omitted = [];
+    const L = AGENT_TEMPLATE_LIMITS;
+    const blank = (s) => typeof s !== "string" || s.trim() === "";
+    // Model: `modelRef` and `effort` only; every other parameter and the fallback are listed
+    const effortParam = def.modelParams?.effort;
+    const effort = typeof effortParam === "string" && EFFORTS.includes(effortParam)
+        ? effortParam
+        : undefined;
+    for (const key of Object.keys(def.modelParams ?? {})) {
+        if (key === "effort" && effort !== undefined)
+            continue;
+        omitted.push({ kind: "model_param", name: key, reason: "model_param" });
+    }
+    if (def.fallback != null) {
+        omitted.push({
+            kind: "fallback_model",
+            name: `${def.fallback.provider}/${def.fallback.model}`,
+            reason: "fallback",
+        });
+    }
+    // Tools (tools default-on spec §3): the template turns off what the agent turns off
+    // (`disallowedTools`, builtin and extension tool keys; a wholly turned-off extension as all its
+    // loaded tools); every connector on for the agent becomes a `connectors` entry
+    const disabled = def.disabledTools ?? [];
+    const disallowedTools = [];
+    const disallow = (key) => {
+        if (!TOOL_KEY_RE.test(key) || disallowedTools.includes(key))
+            return;
+        if (disallowedTools.length >= L.tools) {
+            omitted.push({ kind: "tool", name: key, reason: "limit" });
+            return;
+        }
+        disallowedTools.push(key);
+    };
+    for (const r of disabled) {
+        if (r.kind === "builtin")
+            disallow(r.name);
+        else if (r.kind === "plugin") {
+            const names = r.tools === "all"
+                ? extensionTools.filter((x) => x.plugin === r.plugin).map((x) => x.name)
+                : r.tools;
+            for (const n of names)
+                disallow(extensionToolKey(r.plugin, n));
+        }
+    }
+    const liveConnectors = await db
+        .selectFrom("connectors")
+        .select(["id"])
+        .where("org_id", "=", orgId)
+        .where("status", "=", "active")
+        .where("deleted_at", "is", null)
+        .orderBy("created_at")
+        .orderBy("id")
+        .execute();
+    const connectorRefs = [];
+    for (const c of liveConnectors) {
+        const entry = disabled.find((r) => r.kind === "connector" && r.connectorId === c.id);
+        if (entry?.tools === "all")
+            continue;
+        connectorRefs.push({ connectorId: c.id, off: entry === undefined ? [] : entry.tools });
+    }
+    // builtin / plugin keys stay keys; a connector tool's policy goes to its connector entry by
+    // tool name (`policies`), since the key embeds this org's connector slug
+    const toolPolicies = {};
+    const connectorPolicies = new Map();
+    for (const [k, v] of Object.entries(def.toolPolicies ?? {})) {
+        // a template only tightens: an agent's `allow` (a connector tool's, decision 2026-11-09)
+        // is not carried into it
+        if (v === "allow")
+            continue;
+        // a removed builtin's policy left in a stored definition is not carried
+        if (isRemovedBuiltinKey(k))
+            continue;
+        const parsed = parseToolKey(k);
+        if (parsed !== null && parsed.kind !== "connector" && TOOL_KEY_RE.test(k)) {
+            toolPolicies[k] = v;
+            continue;
+        }
+        if (parsed?.kind === "connector") {
+            const list = connectorPolicies.get(parsed.slug) ?? [];
+            list.push({ key: k, tool: parsed.tool, policy: v });
+            connectorPolicies.set(parsed.slug, list);
+        }
+    }
+    const usedSlugs = new Set();
+    /** The `policies` of the entry of connector `slug` (tool names of at most 128 characters). */
+    const policiesOf = (slug) => {
+        const list = connectorPolicies.get(slug) ?? [];
+        if (list.length === 0)
+            return {};
+        usedSlugs.add(slug);
+        // capped with the entry's tools when it is pushed
+        return { policies: Object.fromEntries(list.map((p) => [p.tool, p.policy])) };
+    };
+    // Skills: ids -> names (pinned -> `skills`, the other selected ones -> `selectedSkills`)
+    const pinned = def.skills?.pinned ?? [];
+    const selected = def.skills?.orgSkills ?? [];
+    const inlineSkillIds = (def.subagents?.inline ?? []).flatMap((t) => t.skills ?? []);
+    const byId = await skillVersionsById(db, orgId, [...pinned, ...selected, ...inlineSkillIds]);
+    const agentSkillNames = new Map((await db
+        .selectFrom("skills")
+        .select(["id", "name"])
+        .where("org_id", "=", orgId)
+        .where("scope", "=", "agent")
+        .where("id", "in", ["", ...pinned, ...selected, ...inlineSkillIds])
+        .execute()).map((r) => [r.id, r.name]));
+    const reportedSkills = new Set();
+    const skillName = (id, report) => {
+        const s = byId.get(id);
+        if (s && s.scope === "org")
+            return s.name;
+        if (report && !reportedSkills.has(id)) {
+            reportedSkills.add(id);
+            const own = agentSkillNames.get(id) ?? s?.name;
+            omitted.push(own !== undefined
+                ? { kind: "skill", name: own, id, reason: "agent_skill" }
+                : { kind: "skill", name: id, id, reason: "unavailable" });
+        }
+        return null;
+    };
+    const skills = [];
+    for (const id of pinned) {
+        const n = skillName(id, true);
+        if (n !== null && !skills.includes(n) && skills.length < L.skills)
+            skills.push(n);
+    }
+    const selectedSkills = [];
+    for (const id of selected) {
+        if (pinned.includes(id))
+            continue;
+        const n = skillName(id, true);
+        if (n === null || skills.includes(n) || selectedSkills.includes(n))
+            continue;
+        if (selectedSkills.length >= L.selectedSkills) {
+            omitted.push({ kind: "skill", name: n, id, reason: "limit" });
+            continue;
+        }
+        selectedSkills.push(n);
+    }
+    // Connectors (P4-11), then the agent's pending connectors as they are
+    const connectors = [];
+    const pushConnector = (entry, name, id) => {
+        if (connectors.length >= L.connectors) {
+            omitted.push({ kind: "connector", name, ...(id !== undefined && { id }), reason: "limit" });
+            return;
+        }
+        let c = entry;
+        // an entry names at most `connectorTools` tools, its `tools` and its policy keys together
+        // (the SDK's limit): policies past that room are listed, never written
+        if (c.policies !== undefined) {
+            const named = "needs" in c ? c.needs.tools.length : (c.tools?.length ?? 0);
+            const valid = Object.entries(c.policies).filter(([tool]) => tool.trim() !== "" && [...tool].length <= 128);
+            const room = Math.max(0, L.connectorTools - named);
+            for (const [tool] of valid.slice(room)) {
+                omitted.push({
+                    kind: "tool_policy",
+                    name: tool,
+                    ...(id !== undefined && { id }),
+                    reason: "limit",
+                });
+            }
+            const kept = valid.slice(0, room);
+            const { policies: _all, ...rest } = c;
+            c = kept.length > 0 ? { ...rest, policies: Object.fromEntries(kept) } : rest;
+        }
+        connectors.push(c);
+    };
+    const ids = [...new Set(connectorRefs.map((r) => r.connectorId))];
+    const rows = ids.length === 0
+        ? []
+        : await db
+            .selectFrom("connectors as c")
+            .leftJoin("platform_connector_templates as p", (j) => j.onRef("p.id", "=", "c.platform_template_id").on("p.deleted_at", "is", null))
+            .select(["c.id", "c.name", "c.slug", "c.connector", "c.endpoint", "p.id as template_id"])
+            .where("c.org_id", "=", orgId)
+            .where("c.deleted_at", "is", null)
+            .where("c.id", "in", ids)
+            .execute();
+    const connectorById = new Map(rows.map((r) => [r.id, r]));
+    for (const id of ids) {
+        const c = connectorById.get(id);
+        if (!c) {
+            omitted.push({ kind: "connector", name: id, id, reason: "unavailable" });
+            continue;
+        }
+        const off = connectorRefs.find((r) => r.connectorId === id)?.off ?? [];
+        // some tools off: the entry names the connector's enabled tools that stay on
+        const named = off.length === 0
+            ? null
+            : (await db
+                .selectFrom("connector_tools")
+                .select("name")
+                .where("connector_id", "=", id)
+                .where("status", "=", "enabled")
+                .orderBy("name")
+                .execute())
+                .map((x) => x.name)
+                .filter((n) => !off.includes(n))
+                .slice(0, L.connectorTools);
+        if (c.template_id !== null) {
+            // only the platform connector template is recorded, not this connector: creating an agent
+            // from the template rebinds the entry to the org's oldest connector made from that
+            // template (P4-5 `several`), which may be another one than this
+            pushConnector({
+                template: c.template_id,
+                ...(named !== null && { tools: named }),
+                ...policiesOf(c.slug),
+            }, c.name, c.id);
+            continue;
+        }
+        if (c.connector !== "mcp" && c.connector !== "openapi") {
+            omitted.push({ kind: "connector", name: c.name, id: c.id, reason: "unsupported_protocol" });
+            continue;
+        }
+        const endpoint = endpointUrl(c.endpoint);
+        if (endpoint === null) {
+            omitted.push({ kind: "connector", name: c.name, id: c.id, reason: "no_endpoint" });
+            continue;
+        }
+        const enabled = named ??
+            (await db
+                .selectFrom("connector_tools")
+                .select("name")
+                .where("connector_id", "=", c.id)
+                .where("status", "=", "enabled")
+                .orderBy("name")
+                .execute())
+                .map((t) => t.name)
+                .slice(0, L.connectorTools);
+        pushConnector({
+            needs: {
+                protocol: c.connector,
+                endpoint,
+                tools: enabled.filter((t) => t.length <= 128),
+                label: [...c.name].slice(0, 80).join(""),
+            },
+            ...policiesOf(c.slug),
+        }, c.name, c.id);
+    }
+    // a policy of a connector the template does not carry (left out above) cannot go anywhere
+    for (const [slug, list] of connectorPolicies) {
+        if (usedSlugs.has(slug))
+            continue;
+        for (const p of list) {
+            omitted.push({ kind: "tool_policy", name: p.key, reason: "connector_tool" });
+        }
+    }
+    const pending = def.pendingConnectors;
+    for (const p of Array.isArray(pending) ? pending : []) {
+        const e = p;
+        const pendingPolicies = e.policies !== null && typeof e.policies === "object" && Object.keys(e.policies).length > 0
+            ? { policies: { ...e.policies } }
+            : {};
+        const label = typeof e.label === "string" ? e.label : "";
+        if (typeof e.source?.template === "string") {
+            pushConnector({
+                template: e.source.template,
+                ...(Array.isArray(e.tools) && { tools: e.tools }),
+                ...pendingPolicies,
+            }, label);
+        }
+        else if (e.source?.needs !== undefined) {
+            const n = e.source.needs;
+            const endpoint = sanitizeEndpoint(n.endpoint);
+            if (endpoint === null) {
+                omitted.push({ kind: "connector", name: label, reason: "no_endpoint" });
+                continue;
+            }
+            pushConnector({ needs: { ...n, endpoint }, ...pendingPolicies }, label);
+        }
+    }
+    // Sub-agents: template ids -> types, inline skill ids -> names; org agents are left out
+    const sub = def.subagents;
+    let subagents;
+    if (sub !== undefined) {
+        const types = [];
+        const inline = [];
+        const room = () => types.length + inline.length < L.subagentTypes;
+        const found = await loadTemplates(db, orgId, sub.templates ?? []);
+        for (const id of sub.templates ?? []) {
+            const t = found.get(id);
+            if (!t) {
+                omitted.push({ kind: "subagent_template", name: id, id, reason: "unavailable" });
+                continue;
+            }
+            const type = templateTypeOf(t.plugin, t.name);
+            if (types.includes(type))
+                continue;
+            if (!room()) {
+                omitted.push({ kind: "subagent_template", name: type, id, reason: "limit" });
+                continue;
+            }
+            types.push(type);
+        }
+        for (const t of sub.inline ?? []) {
+            // a template requires both texts non-blank (the SDK rule); the agent's schema does not
+            const empty = blank(t.description)
+                ? "description"
+                : blank(t.instructions)
+                    ? "instructions"
+                    : null;
+            if (empty !== null) {
+                omitted.push({ kind: "subagent_inline", name: t.name, field: empty, reason: "empty_text" });
+                continue;
+            }
+            if (!room()) {
+                omitted.push({ kind: "subagent_inline", name: t.name, reason: "limit" });
+                continue;
+            }
+            // no allowlist stays none (all of the agent's tools); a list, even `[]`, is written
+            const listed = t.tools ?? [];
+            const ownTools = listed.filter((k) => TOOL_KEY_RE.test(k) && parseToolKey(k)?.kind !== "connector");
+            // a connector key embeds this org's slug: an allowlist cannot carry it elsewhere
+            if (listed.some((k) => parseToolKey(k)?.kind === "connector")) {
+                omitted.push({
+                    kind: "subagent_inline",
+                    name: t.name,
+                    field: "tools",
+                    reason: "connector_tool",
+                });
+            }
+            for (const field of ["disallowedTools", "toolPolicies", "effort", "maxSteps"]) {
+                if (t[field] !== undefined) {
+                    omitted.push({
+                        kind: "subagent_inline",
+                        name: t.name,
+                        field,
+                        reason: "unsupported_field",
+                    });
+                }
+            }
+            const inlineSkills = [];
+            for (const id of t.skills ?? []) {
+                const n = skillName(id, true);
+                if (n === null || inlineSkills.includes(n))
+                    continue;
+                if (inlineSkills.length >= L.skills) {
+                    omitted.push({ kind: "skill", name: n, id, reason: "limit" });
+                    continue;
+                }
+                inlineSkills.push(n);
+            }
+            inline.push({
+                name: t.name,
+                description: t.description,
+                instructions: t.instructions,
+                ...(t.tools !== undefined && { tools: [...new Set(ownTools)].slice(0, L.tools) }),
+                skills: inlineSkills,
+                model: t.model ?? "inherit",
+            });
+        }
+        for (const a of sub.agents ?? []) {
+            omitted.push({ kind: "subagent_agent", name: a.as, id: a.agentId, reason: "org_agent" });
+        }
+        subagents = {
+            ...(sub.general !== undefined && { general: sub.general }),
+            ...(types.length > 0 && { types }),
+            ...(inline.length > 0 && { inline }),
+        };
+    }
+    const quickActions = [];
+    for (const q of agent.profile.quickActions) {
+        if (blank(q.title) || blank(q.body)) {
+            omitted.push({ kind: "quick_action", name: q.title, reason: "empty_text" });
+            continue;
+        }
+        quickActions.push({ title: q.title, body: q.body });
+    }
+    const template = {
+        name: meta.name,
+        description: meta.description,
+        instructions: def.instructions ?? "",
+        ...(disallowedTools.length > 0 && { disallowedTools }),
+        ...(Object.keys(toolPolicies).length > 0 && { toolPolicies }),
+        model: "standard",
+        modelRef: `${def.model.provider}/${def.model.model}`,
+        ...(effort !== undefined && { effort }),
+        ...(skills.length > 0 && { skills }),
+        ...(selectedSkills.length > 0 && { selectedSkills }),
+        ...(connectors.length > 0 && { connectors }),
+        ...(subagents !== undefined && { subagents }),
+        ...(quickActions.length > 0 && { quickActions }),
+        ...(def.instructionFiles !== undefined && {
+            instructionFiles: def.instructionFiles.map((f) => ({ name: f.name, content: f.content })),
+        }),
+    };
+    // the same rules as a template file: a template that would not load is never written
+    return {
+        template: parseTemplateDefinition(template),
+        omitted,
+    };
+}
+/**
+ * The org's agent templates beyond the plugin ones (rulings P4-9 to P4-12): 另存为模板, the detail
+ * of a usable template and the owner's new versions. Writes run under the org row lock, with
+ * `agents.manage` re-checked there.
+ */
+let OrgAgentTemplates = class OrgAgentTemplates {
+    kdb;
+    orgLock;
+    agents;
+    txHost;
+    tools;
+    constructor(kdb, orgLock, agents, txHost, 
+    /** The extension tools loaded here (a wholly turned-off extension saved as its tool keys). */
+    tools) {
+        this.kdb = kdb;
+        this.orgLock = orgLock;
+        this.agents = agents;
+        this.txHost = txHost;
+        this.tools = tools;
+    }
+    get db() {
+        return this.kdb.db;
+    }
+    /**
+     * 另存为模板 (ruling P4-9): the org's live agent `agentId` (any one: an org admin may edit every
+     * agent of the org) saved as the org template `name` (version 1, `plugin_name` null), mapped
+     * by {@link templateFromAgent}. The bare name must be free in the org (rule 10): a usable
+     * template of that type, one of the org's own rows of that name, or a live platform template
+     * the org created under that name -> 409 `agent_template.name_taken` naming its owner (details
+     * `[{ owner, templateId }]`). Audits `agent_template.created`.
+     */
+    async saveAs(orgId, actor, agentId, meta, actorTokenId, auditDetail) {
+        const t = this.db;
+        await this.orgLock.lockAndAuthorize(orgId, actor, "agents.manage");
+        const live = await t
+            .selectFrom("agents")
+            .select("id")
+            .where("id", "=", agentId)
+            .where("org_id", "=", orgId)
+            .where("deleted_at", "is", null)
+            .executeTakeFirst();
+        if (!live)
+            throw agentNotFound();
+        const agent = await this.agents.view(agentId);
+        await this.assertNameFree(orgId, meta.name);
+        const { template, omitted } = await templateFromAgent(t, orgId, agent, meta, this.tools.extensionToolSpecs().map((x) => ({ plugin: x.plugin, name: x.spec.name })));
+        const put = await putTemplateVersionIn(t, { orgId, plugin: null, catalogItemId: null, catalogVersion: null, sourceFormat: "capybara" }, template);
+        await audit(t, {
+            actorAccountId: actor,
+            ...(actorTokenId !== undefined && { actorTokenId }),
+            orgId,
+            action: "agent_template.created",
+            target: put.id,
+            detail: {
+                name: template.name,
+                fromAgent: agentId,
+                omitted: omitted.length,
+                ...auditDetail,
+            },
+        });
+        return { template: await this.detail(orgId, put.id), omitted };
+    }
+    /**
+     * Rule 10 for a new org template named `name` (a bare type): refused for a reserved roster name
+     * (details `[{ reserved: true }]`), and while the org's usable set has that type, the org has a
+     * live row of that name without a plugin (an unusable copy too: the live-name index), a
+     * plugin-less platform template of that name is offered to the org (ruling P2-3's alignment),
+     * or the platform has a live template the org created under that name (promotion would clash).
+     */
+    async assertNameFree(orgId, name) {
+        const t = this.db;
+        const clash = (owner, templateId) => {
+            throw new ApiError("agent_template.name_taken", owner.kind === "platform"
+                ? `An agent template named ${name} is already used in this organization (the platform's)`
+                : owner.orgId === orgId
+                    ? `An agent template named ${name} already exists in this organization`
+                    : `An agent template named ${name} is already used in this organization (from organization ${owner.name})`, [{ owner, templateId }]);
+        };
+        if (RESERVED_TEMPLATE_NAMES.has(name)) {
+            throw new ApiError("agent_template.name_taken", `${name} is a built-in sub-agent type; choose another name`, [{ reserved: true }]);
+        }
+        const own = await t
+            .selectFrom("agent_templates")
+            .select("id")
+            .where("org_id", "=", orgId)
+            .where("plugin_name", "is", null)
+            .where("name", "=", name)
+            .where("deleted_at", "is", null)
+            .executeTakeFirst();
+        const self = ownerOf(orgId, await ownersOf(t, [orgId]));
+        if (own)
+            clash(self, own.id);
+        const usable = (await usableTemplates(t, orgId)).find((u) => templateTypeOf(u.plugin, u.name) === name);
+        if (usable)
+            clash(await this.ownerOfRow(orgId, usable), usable.id);
+        // offered to the org but not on (a switch away, as ruling P2-3 for skills): switching it on
+        // later would put the name in the org twice
+        const offered = (await offeredNamed(t, orgId, "agent_template", name)).find((c) => c.plugin === null);
+        if (offered) {
+            const ids = offered.ownerOrgId === null ? [] : [offered.ownerOrgId];
+            clash(ownerOf(offered.ownerOrgId, await ownersOf(t, ids)), offered.id);
+        }
+        const origin = await t
+            .selectFrom("platform_agent_templates")
+            .select(["id", "owner_org_id"])
+            .where("origin_org_id", "=", orgId)
+            .where("plugin_name", "is", null)
+            .where("name", "=", name)
+            .where("deleted_at", "is", null)
+            .executeTakeFirst();
+        if (origin) {
+            const ids = origin.owner_org_id === null ? [] : [origin.owner_org_id];
+            clash(ownerOf(origin.owner_org_id, await ownersOf(t, ids)), origin.id);
+        }
+    }
+    /**
+     * A template usable in the org by id ({@link loadTemplates}: an org row, a linked copy, a
+     * platform template on in the org), or the org's own template whatever its switch, with its
+     * definition, owner and the org's flags. Otherwise -> 404 `component.not_found`.
+     */
+    async detail(orgId, id) {
+        const own = await this.ownRow(orgId, id, false);
+        // the owner opens its own template even while it is switched off in its own org (a promoted
+        // one whose platform row the org switched off is not in its usable set)
+        const inSet = (await loadTemplates(this.db, orgId, [id])).get(id);
+        const t = inSet ?? (own && (await this.ownServed(own)));
+        if (!t)
+            throw notFound();
+        let linked = [];
+        if (t.origin === "platform" && !t.ownedCopy && t.id === t.platformTemplateId) {
+            linked = (await this.db
+                .selectFrom("agent_templates")
+                .select("id")
+                .where("org_id", "=", orgId)
+                .where("deleted_at", "is", null)
+                .where("pinned_version", "is", null)
+                .where("platform_template_id", "=", t.id)
+                .orderBy("id")
+                .execute()).map((r) => r.id);
+        }
+        return {
+            ...templateViewOf(t, linked),
+            definition: t.template,
+            owner: own
+                ? ownerOf(orgId, await ownersOf(this.db, [orgId]))
+                : await this.ownerOfRow(orgId, t),
+            owned: own !== undefined,
+            shareable: own?.shareable ?? false,
+            promoted: own !== undefined && own.link !== null,
+            usable: inSet !== undefined,
+        };
+    }
+    /**
+     * A new version of the org's own template `id` (ruling P4-12; `agents.manage` re-checked under
+     * the org row lock): `definition` is validated like a template file and keeps its name;
+     * `expectedVersion` must be the version the editor read (else 409
+     * `agent_template.version_conflict`). An unshared template gets a new version of its org row; a
+     * promoted one a new version of its platform row (ruling P3-4), which the org row then serves
+     * (ruling P3-43), and the orgs using it are told (`shared_item_updated`). An unchanged
+     * definition writes nothing. Not the org's own -> 409 `catalog.not_owned`; missing -> 404.
+     * Agents created earlier are never touched. Audits `agent_template.updated`.
+     */
+    async update(orgId, actor, id, body, actorTokenId, auditDetail) {
+        const t = this.db;
+        await this.orgLock.lockAndAuthorize(orgId, actor, "agents.manage");
+        const row = await this.ownRow(orgId, id, true);
+        if (!row)
+            throw await this.notOwnedOrMissing(orgId, id);
+        const template = canonicalEndpoints(parseTemplateDefinition(body.definition));
+        if (template.name !== row.name) {
+            throw new ApiError("validation_failed", "The name of an agent template cannot change", [
+                { path: "definition.name", message: `must stay ${row.name}` },
+            ]);
+        }
+        const conflict = (now) => new ApiError("agent_template.version_conflict", `The agent template was changed by someone else (now version ${now}, expected ${body.expectedVersion}); reload it and apply your changes again`);
+        if (row.link === null) {
+            if (row.current_version !== body.expectedVersion)
+                throw conflict(row.current_version);
+            const put = await putTemplateVersionIn(t, {
+                orgId,
+                plugin: null,
+                catalogItemId: null,
+                catalogVersion: null,
+                sourceFormat: "capybara",
+            }, template);
+            if (put.changed) {
+                await audit(t, {
+                    actorAccountId: actor,
+                    ...(actorTokenId !== undefined && { actorTokenId }),
+                    orgId,
+                    action: "agent_template.updated",
+                    target: id,
+                    detail: { name: row.name, from: row.current_version, to: put.version, ...auditDetail },
+                });
+            }
+            return this.detail(orgId, id);
+        }
+        const p = await t
+            .selectFrom("platform_agent_templates as p")
+            .innerJoin("platform_agent_template_versions as v", (j) => j.onRef("v.template_id", "=", "p.id").onRef("v.version", "=", "p.current_version"))
+            .select(["p.current_version", "v.definition", "v.source_format"])
+            .where("p.id", "=", row.link)
+            .where("p.deleted_at", "is", null)
+            .forUpdate("p")
+            .executeTakeFirst();
+        if (!p)
+            throw notFound();
+        if (p.current_version !== body.expectedVersion)
+            throw conflict(p.current_version);
+        if (canonicalJson(p.definition) === canonicalJson(template))
+            return this.detail(orgId, id);
+        const to = p.current_version + 1;
+        await t
+            .updateTable("platform_agent_templates")
+            .set({ current_version: to, description: template.description, updated_at: new Date() })
+            .where("id", "=", row.link)
+            .execute();
+        await t
+            .insertInto("platform_agent_template_versions")
+            .values({
+            template_id: row.link,
+            version: to,
+            definition: JSON.stringify(template),
+            // an org template has no file: only its parsed definition is stored
+            object_prefix: null,
+            catalog_version: null,
+            source_format: p.source_format,
+            created_by: actor,
+        })
+            .execute();
+        await notifySharedUpdate(t, { kind: "agent_template", id: row.link }, { name: row.name, from: String(p.current_version), to: String(to) });
+        await audit(t, {
+            actorAccountId: actor,
+            ...(actorTokenId !== undefined && { actorTokenId }),
+            orgId,
+            action: "agent_template.updated",
+            target: id,
+            detail: { name: row.name, platformId: row.link, from: p.current_version, to, ...auditDetail },
+        });
+        return this.detail(orgId, id);
+    }
+    /**
+     * The org's own template `id` ({@link readOwnTemplate}, the predicate `OwnedItems` shares), or
+     * undefined: another org's, a plugin's, or a copy of a platform template it does not own.
+     */
+    async ownRow(orgId, id, forUpdate) {
+        const r = await readOwnTemplate(this.db, orgId, id, forUpdate);
+        return r !== undefined && "link" in r ? r : undefined;
+    }
+    /**
+     * What the org's own template serves, read directly (its usable-set entry is missing while the
+     * org switched its promoted template off): the platform row's current version when it is newer
+     * than the org row's (ruling P3-43), else the org row's.
+     */
+    async ownServed(own) {
+        const db = this.db;
+        const platform = own.link === null
+            ? undefined
+            : await db
+                .selectFrom("platform_agent_templates as p")
+                .innerJoin("platform_agent_template_versions as v", (j) => j.onRef("v.template_id", "=", "p.id").onRef("v.version", "=", "p.current_version"))
+                .select(["p.current_version", "v.definition", "v.source_format"])
+                .where("p.id", "=", own.link)
+                .executeTakeFirst();
+        const row = platform !== undefined && platform.current_version !== own.current_version
+            ? platform
+            : await db
+                .selectFrom("agent_template_versions")
+                .select(["version as current_version", "definition", "source_format"])
+                .where("template_id", "=", own.id)
+                .where("version", "=", own.current_version)
+                .executeTakeFirst();
+        if (!row)
+            return undefined;
+        return {
+            id: own.id,
+            name: own.name,
+            plugin: null,
+            version: row.current_version,
+            template: row.definition,
+            sourceFormat: row.source_format,
+            catalogItemId: null,
+            catalogVersion: null,
+            origin: "org",
+        };
+    }
+    /** 409 `catalog.not_owned` for a template the org has but does not own, else 404. */
+    async notOwnedOrMissing(orgId, id) {
+        const t = (await loadTemplates(this.db, orgId, [id])).get(id);
+        if (!t)
+            return notFound();
+        return new ApiError("catalog.not_owned", `${t.name} is not this organization's own agent template; only its owner can change it`);
+    }
+    /**
+     * The owner of a usable template the org does not own itself: a platform template's (or a
+     * linked copy's) `owner_org_id`, a plugin template's catalog item owner, else the platform.
+     */
+    async ownerOfRow(orgId, t) {
+        const db = this.db;
+        let ownerOrgId = null;
+        if (t.platformTemplateId !== undefined || t.ownedCopy) {
+            const pid = t.platformTemplateId ??
+                (await db
+                    .selectFrom("agent_templates")
+                    .select("platform_template_id")
+                    .where("id", "=", t.id)
+                    .executeTakeFirst())?.platform_template_id ??
+                null;
+            if (pid !== null) {
+                ownerOrgId =
+                    (await db
+                        .selectFrom("platform_agent_templates")
+                        .select("owner_org_id")
+                        .where("id", "=", pid)
+                        .executeTakeFirst())?.owner_org_id ?? null;
+            }
+        }
+        else if (t.catalogItemId !== null) {
+            ownerOrgId =
+                (await db
+                    .selectFrom("catalog_items")
+                    .select("owner_org_id")
+                    .where("id", "=", t.catalogItemId)
+                    .executeTakeFirst())?.owner_org_id ?? null;
+        }
+        else if (t.plugin === null) {
+            // an org row without a plugin is the org's own
+            ownerOrgId = orgId;
+        }
+        return ownerOf(ownerOrgId, await ownersOf(db, ownerOrgId === null ? [] : [ownerOrgId]));
+    }
+};
+__decorate([
+    Transactional()
+], OrgAgentTemplates.prototype, "saveAs", null);
+__decorate([
+    Transactional()
+], OrgAgentTemplates.prototype, "update", null);
+OrgAgentTemplates = __decorate([
+    Injectable(),
+    __param(0, Inject(KernelDb)),
+    __param(1, Inject(OrgLock)),
+    __param(2, Inject(AgentLookup)),
+    __param(3, Inject(TransactionHost)),
+    __param(4, Inject(ToolRegistry))
+], OrgAgentTemplates);
+export { OrgAgentTemplates };