@capybara-hq/kernel 0.1.0-rc.20 → 0.1.0-rc.22

package/dist/extensions/bootstrap.d.ts

@@ -1,6 +1,7 @@
-import { type BootstrapManifest, type Logger } from "@capybara-hq/plugin-sdk";
+import { type BootstrapEntry, type BootstrapManifest, type Logger } from "@capybara-hq/plugin-sdk";
 import { type PluginImport } from "../catalog/plugin-import.js";
 import type { KernelConfig } from "../config/schema.js";
+import { ApiError } from "../errors.js";
 import { KernelConfigService } from "../infra/config/kernel-config.service.js";
 import { KernelDb } from "../infra/database/kernel-db.js";
 import { TransactionHost } from "../infra/database/transaction-host.js";
@@ -35,9 +36,15 @@ import type { SingleProviderNote } from "./single-provider.js";
  *   until expiry) aborts the run at its next step. "Done" is a `bootstrap_runs` row for the
  *   manifest's sha256 (written with the audit `bootstrap.completed` only when every entry
  *   succeeded; otherwise the next start runs it again, which is idempotent).
+ * - Two passes per start: the first runs before the extensions load (no object store yet), the
+ *   second after them. A `builtin` entry (not required, but builtin in the catalog) is deferred by
+ *   the first pass (`deferBuiltin`: skipped, not a failure; the run is then not recorded and the
+ *   start runs the second pass), so it may ship skills and templates. A required entry is imported
+ *   by the first pass and must succeed; a builtin one that fails is logged like an optional one.
  * - Only entries new to the manifest are installed (Ruling 5): an optional entry that the last
  *   completed run already handled and that is not installed now (a super admin uninstalled
- *   it) stays uninstalled -> `kept`. A required entry is always installed.
+ *   it) stays uninstalled -> `kept`. A required or builtin entry is always installed (a
+ *   declarative one imported again when its catalog item is gone).
  * - Per entry, by the installed state of its extension:
  *   - not installed (and new, or required): imported into the catalog (source `bootstrap`, ref
  *     `bootstrap:<name>@<version>`, like a marketplace import), installed, approved (snapshot
@@ -65,7 +72,8 @@ import type { SingleProviderNote } from "./single-provider.js";
  * never needed again. A plugin's icons and setup guide files are kept in PG too (`catalog_files`),
  * so they never need it either; its skills, connector templates and agent templates do (an entry
  * shipping them fails while no object store runs; an optional one is retried after the extensions
- * loaded).
+ * loaded, and a plugin that must be builtin and ships them is a `builtin` entry, which only the
+ * pass after the extensions load imports).
  */
 /** The bootstrap manifest that ships with the kernel package. */
 export declare const BOOTSTRAP_MANIFEST_FILE: string;
@@ -93,15 +101,23 @@ export interface BootstrapFailure {
     code: string;
     message: string;
 }
-/** Some entries failed (the others were done); the run is not recorded as done. */
+/**
+ * Some entries failed or were deferred (the others were done); the run is not recorded as done.
+ */
 export declare class BootstrapFailedError extends Error {
     readonly failures: BootstrapFailure[];
     readonly results: BootstrapEntryResult[];
+    readonly deferred: string[];
+    readonly packages: ReadonlyMap<string, Uint8Array>;
     /**
      * @param results what the entries that did not fail did (pass them as `carry` to a later run in
      * the same start, so its record keeps `installed` instead of `kept`).
+     * @param deferred the builtin entries a first pass skipped (`deferBuiltin`): not failures, the
+     * later pass of the same start imports them.
+     * @param packages the packages this run obtained, by entry name (pass them as `packages` to the
+     * later pass of the same start, so nothing is downloaded twice).
      */
-    constructor(failures: BootstrapFailure[], results?: BootstrapEntryResult[]);
+    constructor(failures: BootstrapFailure[], results?: BootstrapEntryResult[], deferred?: string[], packages?: ReadonlyMap<string, Uint8Array>);
     /** A required entry failed: the kernel must not serve without it. */
     get requiredFailed(): boolean;
 }
@@ -121,13 +137,21 @@ export interface BootstrapResolveOptions {
     log?: Pick<Logger, "warn">;
     /** The npm download (default {@link fetchNpmPackage}; tests replace it). */
     fetch?: typeof fetchNpmPackage;
+    /**
+     * Entries whose package failing to be obtained is that entry's failure only: the error goes into
+     * `failed` (by entry name) and the other entries are still obtained. Every other entry's failure
+     * throws, so nothing is written.
+     */
+    soft?: (e: BootstrapEntry) => boolean;
+    failed?: Map<string, ApiError>;
 }
 /**
  * Obtains every entry's tgz, checked against its pinned sha512: from the offline directory when a
  * file there has that sha512, else (a `source: "npm"` entry) downloaded from the npm registry and
  * verified against the pin (the packument's `dist.integrity` is not consulted). Throws an
  * {@link ApiError} naming the plugin for the first entry it cannot obtain
- * (`bootstrap.missing_file`, `bootstrap.download_failed`, `bootstrap.integrity_mismatch`).
+ * (`bootstrap.missing_file`, `bootstrap.download_failed`, `bootstrap.integrity_mismatch`), except
+ * for the `soft` entries (recorded in `failed`, left out of the result).
  */
 export declare function resolveBootstrapPackages(manifest: BootstrapManifest, o: BootstrapResolveOptions): Promise<Map<string, Uint8Array>>;
 /** The lock around a whole run (`lock:bootstrap`). */
@@ -181,6 +205,17 @@ export declare class BootstrapService {
         dir?: string;
         signal?: AbortSignal;
         carry?: readonly BootstrapEntryResult[];
+        /**
+         * The first pass of a start (before the extensions load, so no object store): builtin entries
+         * are skipped, and the run throws {@link BootstrapFailedError} with them as `deferred` instead
+         * of being recorded as done.
+         */
+        deferBuiltin?: boolean;
+        /**
+         * Packages an earlier pass of the same start obtained ({@link BootstrapFailedError.packages});
+         * one whose sha512 still equals its entry's pin is used instead of obtaining it again.
+         */
+        packages?: ReadonlyMap<string, Uint8Array>;
         /** The plugin import a declarative entry (or an entry's catalog version) goes through. */
         imports: BootstrapImports;
     }): Promise<BootstrapResult>;
@@ -201,11 +236,15 @@ export declare class BootstrapService {
     /** The entry names the last completed run handled (undefined before any run completed). */
     private lastRunNames;
     private entry;
+    /** Whether a live (not deleted) platform catalog item has this name. */
+    private hasLiveItem;
     /**
-     * The catalog item of a bootstrap entry follows `required`: a required entry is builtin, offered
-     * to every org (scope `all`) and not disabled (migration 0075 could leave a required plugin
-     * disabled); an entry that stops being required is no longer builtin and keeps scope `all` (the
-     * admin may change it from then on).
+     * The catalog item of a bootstrap entry follows `required` / `builtin`: such an entry is builtin,
+     * offered to every org (scope `all`, which an org admin cannot switch off) and not disabled
+     * (migration 0075 could leave a required plugin disabled); an entry that stops being required or
+     * builtin is no longer builtin and keeps scope `all` (the admin may change it from then on).
+     * Only the platform item: an org-owned item of the same name (the entry then fails with
+     * `plugin.name_taken`) is never touched.
      */
     private markBuiltin;
     /** A declarative plugin: catalog only. Returns false when that version is already imported. */

package/dist/extensions/bootstrap.js

@@ -57,9 +57,15 @@ import { ExtensionRegistry } from "./registry.js";
  *   until expiry) aborts the run at its next step. "Done" is a `bootstrap_runs` row for the
  *   manifest's sha256 (written with the audit `bootstrap.completed` only when every entry
  *   succeeded; otherwise the next start runs it again, which is idempotent).
+ * - Two passes per start: the first runs before the extensions load (no object store yet), the
+ *   second after them. A `builtin` entry (not required, but builtin in the catalog) is deferred by
+ *   the first pass (`deferBuiltin`: skipped, not a failure; the run is then not recorded and the
+ *   start runs the second pass), so it may ship skills and templates. A required entry is imported
+ *   by the first pass and must succeed; a builtin one that fails is logged like an optional one.
  * - Only entries new to the manifest are installed (Ruling 5): an optional entry that the last
  *   completed run already handled and that is not installed now (a super admin uninstalled
- *   it) stays uninstalled -> `kept`. A required entry is always installed.
+ *   it) stays uninstalled -> `kept`. A required or builtin entry is always installed (a
+ *   declarative one imported again when its catalog item is gone).
  * - Per entry, by the installed state of its extension:
  *   - not installed (and new, or required): imported into the catalog (source `bootstrap`, ref
  *     `bootstrap:<name>@<version>`, like a marketplace import), installed, approved (snapshot
@@ -87,22 +93,35 @@ import { ExtensionRegistry } from "./registry.js";
  * never needed again. A plugin's icons and setup guide files are kept in PG too (`catalog_files`),
  * so they never need it either; its skills, connector templates and agent templates do (an entry
  * shipping them fails while no object store runs; an optional one is retried after the extensions
- * loaded).
+ * loaded, and a plugin that must be builtin and ships them is a `builtin` entry, which only the
+ * pass after the extensions load imports).
  */
 /** The bootstrap manifest that ships with the kernel package. */
 export const BOOTSTRAP_MANIFEST_FILE = fileURLToPath(new URL("../../bootstrap.json", import.meta.url));
-/** Some entries failed (the others were done); the run is not recorded as done. */
+/**
+ * Some entries failed or were deferred (the others were done); the run is not recorded as done.
+ */
 export class BootstrapFailedError extends Error {
     failures;
     results;
+    deferred;
+    packages;
     /**
      * @param results what the entries that did not fail did (pass them as `carry` to a later run in
      * the same start, so its record keeps `installed` instead of `kept`).
+     * @param deferred the builtin entries a first pass skipped (`deferBuiltin`): not failures, the
+     * later pass of the same start imports them.
+     * @param packages the packages this run obtained, by entry name (pass them as `packages` to the
+     * later pass of the same start, so nothing is downloaded twice).
      */
-    constructor(failures, results = []) {
-        super(`bootstrap failed for ${failures.map((f) => `${f.name}${f.required ? " (required)" : ""}: ${f.message}`).join("; ")}`);
+    constructor(failures, results = [], deferred = [], packages = new Map()) {
+        super(failures.length > 0
+            ? `bootstrap failed for ${failures.map((f) => `${f.name}${f.required ? " (required)" : ""}: ${f.message}`).join("; ")}`
+            : `bootstrap deferred the builtin plugins ${deferred.join(", ")} to the pass after the extensions load`);
         this.failures = failures;
         this.results = results;
+        this.deferred = deferred;
+        this.packages = packages;
         this.name = "BootstrapFailedError";
     }
     /** A required entry failed: the kernel must not serve without it. */
@@ -128,7 +147,8 @@ const integrityOf = (bytes) => `sha512-${createHash("sha512").update(bytes).dige
  * file there has that sha512, else (a `source: "npm"` entry) downloaded from the npm registry and
  * verified against the pin (the packument's `dist.integrity` is not consulted). Throws an
  * {@link ApiError} naming the plugin for the first entry it cannot obtain
- * (`bootstrap.missing_file`, `bootstrap.download_failed`, `bootstrap.integrity_mismatch`).
+ * (`bootstrap.missing_file`, `bootstrap.download_failed`, `bootstrap.integrity_mismatch`), except
+ * for the `soft` entries (recorded in `failed`, left out of the result).
  */
 export async function resolveBootstrapPackages(manifest, o) {
     const out = new Map();
@@ -141,11 +161,20 @@ export async function resolveBootstrapPackages(manifest, o) {
     const where = o.dir !== undefined ? o.dir : "the bootstrap directory (config bootstrap.dir)";
     for (const e of manifest.plugins) {
         signal.throwIfAborted();
-        const found = offline.get(e.integrity);
-        if (found !== undefined) {
-            out.set(e.name, found);
-            continue;
+        try {
+            out.set(e.name, await obtain(e));
         }
+        catch (err) {
+            if (signal.aborted || !(err instanceof ApiError) || o.soft?.(e) !== true)
+                throw err;
+            o.failed?.set(e.name, err);
+        }
+    }
+    return out;
+    async function obtain(e) {
+        const found = offline.get(e.integrity);
+        if (found !== undefined)
+            return found;
         if (e.source === "workspace") {
             throw new ApiError("bootstrap.missing_file", `Bootstrap plugin ${e.name} ${e.version}: no file in ${where} has its pinned sha512 (${e.integrity.slice(0, 19)}…), and a workspace entry cannot be downloaded; put its package tgz (pnpm pack-plugin ${e.path}) in that directory`);
         }
@@ -153,7 +182,7 @@ export async function resolveBootstrapPackages(manifest, o) {
         const offlineHint = `to install offline, put the package tgz (npm pack ${e.npm}@${e.version}, any file name) in ${where}`;
         try {
             const r = await fetchPackage({ registry: npmRegistry, ...(npmToken !== undefined && { token: npmToken }), maxBytes }, e.npm, e.version, signal, { expectedIntegrity: e.integrity });
-            out.set(e.name, r.bytes);
+            return r.bytes;
         }
         catch (err) {
             if (signal.aborted)
@@ -169,7 +198,6 @@ export async function resolveBootstrapPackages(manifest, o) {
             throw new ApiError("bootstrap.download_failed", `Bootstrap plugin ${e.name} ${e.version}: cannot download ${e.npm}@${e.version} from ${registry} (${reason}); ${offlineHint}, or set packages.npmRegistry to a reachable mirror`);
         }
     }
-    return out;
 }
 /** The registry's origin, for messages (never its credentials or path). */
 function registryOrigin(registry) {
@@ -298,20 +326,47 @@ let BootstrapService = class BootstrapService {
             const done = await recorded();
             if (done)
                 return done;
-            // Every package is obtained and checked before the first write
-            const files = await resolveBootstrapPackages(o.manifest, {
+            const deferBuiltin = o.deferBuiltin === true;
+            const isDeferred = (e) => deferBuiltin && e.builtin === true;
+            // Every package is obtained and checked before the first write (a deferred entry's by the
+            // later pass). The first pass refuses to write anything when one is missing or tampered;
+            // the later pass only fails that entry unless it is required.
+            const files = new Map();
+            const fetchFailed = new Map();
+            const toObtain = [];
+            for (const e of o.manifest.plugins) {
+                if (isDeferred(e))
+                    continue;
+                const kept = o.packages?.get(e.name);
+                if (kept !== undefined && integrityOf(kept) === e.integrity)
+                    files.set(e.name, kept);
+                else
+                    toObtain.push(e);
+            }
+            const obtained = await resolveBootstrapPackages({ ...o.manifest, plugins: toObtain }, {
                 ...(o.dir !== undefined && { dir: o.dir }),
                 config: this.config(),
                 signal,
                 log: this.log,
+                ...(!deferBuiltin && { soft: (e) => !e.required, failed: fetchFailed }),
             });
+            for (const [name, bytes] of obtained)
+                files.set(name, bytes);
             const handled = await this.lastRunNames();
             const results = [];
             const failures = [];
+            const deferred = [];
             for (const e of o.manifest.plugins) {
                 signal.throwIfAborted();
+                if (isDeferred(e)) {
+                    deferred.push(e.name);
+                    continue;
+                }
                 await this.warnIfHeld(e);
                 try {
+                    const fetchErr = fetchFailed.get(e.name);
+                    if (fetchErr !== undefined)
+                        throw fetchErr;
                     const r = await this.entry(e, files.get(e.name), handled, o.imports);
                     results.push(carried(r, o.carry));
                 }
@@ -320,6 +375,7 @@ let BootstrapService = class BootstrapService {
                         plugin: e.name,
                         version: e.version,
                         required: e.required,
+                        ...(e.builtin === true && { builtin: true }),
                         err,
                     });
                     failures.push({
@@ -331,8 +387,9 @@ let BootstrapService = class BootstrapService {
                 }
             }
             results.push(...(await this.clearRemoved(o.manifest)));
-            if (failures.length > 0)
-                throw new BootstrapFailedError(failures, results);
+            if (failures.length > 0 || deferred.length > 0) {
+                throw new BootstrapFailedError(failures, results, deferred, files);
+            }
             signal.throwIfAborted();
             await this.recordDone(manifestSha256, results);
             this.log.info("bootstrap completed", { manifestSha256, results });
@@ -421,12 +478,15 @@ let BootstrapService = class BootstrapService {
         const ref = `bootstrap:${e.name}@${e.version}`;
         // Not new to the manifest: an optional entry left out on purpose stays out (Ruling 5)
         const isNew = handled === undefined || !handled.has(e.name);
+        // Required and builtin entries are builtin in the catalog and put back when missing
+        const builtin = e.required || e.builtin === true;
         if (!pkg.manifest.extension) {
-            await this.markBuiltin(e.name, e.required);
-            if (!isNew)
+            await this.markBuiltin(e.name, builtin);
+            if (!isNew && !(builtin && !(await this.hasLiveItem(e.name)))) {
                 return { name: e.name, action: "kept", version: e.version };
+            }
             const imported = await this.importOnly(e, bytes, ref, imports);
-            await this.markBuiltin(e.name, e.required);
+            await this.markBuiltin(e.name, builtin);
             return { name: e.name, action: imported ? "imported" : "kept", version: e.version };
         }
         if (this.registry.declared().has(e.name)) {
@@ -438,7 +498,7 @@ let BootstrapService = class BootstrapService {
             .select(["version", "source", "required", "desired_state", "sha256"])
             .where("name", "=", e.name)
             .executeTakeFirst();
-        if (!row && !isNew && !e.required) {
+        if (!row && !isNew && !builtin) {
             this.log.info("bootstrap: an optional plugin that is not installed stays uninstalled", {
                 plugin: e.name,
             });
@@ -476,18 +536,31 @@ let BootstrapService = class BootstrapService {
         if (e.required && row?.desired_state === "disabled") {
             leftDisabled = await this.enableOrWarn(e);
         }
-        await this.markBuiltin(e.name, e.required);
+        await this.markBuiltin(e.name, builtin);
         return leftDisabled === undefined ? result : { ...result, leftDisabled };
     }
+    /** Whether a live (not deleted) platform catalog item has this name. */
+    async hasLiveItem(name) {
+        const row = await this.db
+            .selectFrom("catalog_items")
+            .select("id")
+            .where("name", "=", name)
+            .where("owner_org_id", "is", null)
+            .where("deleted_at", "is", null)
+            .executeTakeFirst();
+        return row !== undefined;
+    }
     /**
-     * The catalog item of a bootstrap entry follows `required`: a required entry is builtin, offered
-     * to every org (scope `all`) and not disabled (migration 0075 could leave a required plugin
-     * disabled); an entry that stops being required is no longer builtin and keeps scope `all` (the
-     * admin may change it from then on).
+     * The catalog item of a bootstrap entry follows `required` / `builtin`: such an entry is builtin,
+     * offered to every org (scope `all`, which an org admin cannot switch off) and not disabled
+     * (migration 0075 could leave a required plugin disabled); an entry that stops being required or
+     * builtin is no longer builtin and keeps scope `all` (the admin may change it from then on).
+     * Only the platform item: an org-owned item of the same name (the entry then fails with
+     * `plugin.name_taken`) is never touched.
      */
-    async markBuiltin(name, required) {
+    async markBuiltin(name, builtin) {
         const touch = { updated_at: sql `now()` };
-        if (required) {
+        if (builtin) {
             await this.db
                 .updateTable("catalog_items")
                 .set({
@@ -498,6 +571,7 @@ let BootstrapService = class BootstrapService {
                 ...touch,
             })
                 .where("name", "=", name)
+                .where("owner_org_id", "is", null)
                 .where("deleted_at", "is", null)
                 .where((eb) => eb.or([eb("builtin", "=", false), eb("scope", "<>", "all"), eb("disabled", "=", true)]))
                 .execute();
@@ -507,6 +581,7 @@ let BootstrapService = class BootstrapService {
             .updateTable("catalog_items")
             .set({ builtin: false, ...touch })
             .where("name", "=", name)
+            .where("owner_org_id", "is", null)
             .where("deleted_at", "is", null)
             .where("builtin", "=", true)
             .execute();
@@ -582,6 +657,7 @@ let BootstrapService = class BootstrapService {
             .selectFrom("catalog_items")
             .select("id")
             .where("name", "=", e.name)
+            .where("owner_org_id", "is", null)
             .where("deleted_at", "is", null)
             .executeTakeFirst();
         const installed = await this.ops.install(e.name, review.sha256, null, undefined, item ? { catalogItemId: item.id } : {});
@@ -650,6 +726,7 @@ let BootstrapService = class BootstrapService {
             .updateTable("catalog_items")
             .set({ builtin: false, updated_at: sql `now()` })
             .where("builtin", "=", true)
+            .where("owner_org_id", "is", null)
             .where("deleted_at", "is", null);
         if (names.length > 0)
             items = items.where("name", "not in", names);

package/dist/extensions/package.js

@@ -2,7 +2,7 @@ import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
 import { dirname, join, posix, relative, resolve as resolvePath } from "node:path";
 import { checkEntryImports, isSafePackagePath, PLUGIN_MANIFEST_FILE, parsePluginManifest, } from "@capybara-hq/plugin-sdk";
 import { init as lexerInit, parse as lexerParse } from "es-module-lexer";
-import { PluginPackageError, readPluginPackage } from "../catalog/plugin-package.js";
+import { PluginPackageError, readPluginPackage, withoutRemovedManifestFields, } from "../catalog/plugin-package.js";
 import { pluginSchemaName } from "../ctx/create-ctx.js";
 import { MIGRATION_FILE_RE } from "../db/migrator.js";
 import { ApiError } from "../errors.js";
@@ -252,7 +252,7 @@ export async function declaredDisplayName(dir, name) {
     const named = json?.name;
     if (typeof named === "string" && named !== name)
         return {};
-    const m = parsePluginManifest(json);
+    const m = parsePluginManifest(withoutRemovedManifestFields(text));
     if ("errors" in m)
         return { problem: m.errors.slice(0, 3).join("; ") };
     if (m.name !== name)

package/dist/http/api.module.js

@@ -68,6 +68,8 @@ import { OrgsModule } from "../orgs/orgs.module.js";
 import { OrgSettingsController } from "../orgs/settings.controller.js";
 import { RuntimeModule } from "../runtime/runtime.module.js";
 import { ConversationStreamController } from "../runtime/stream.controller.js";
+import { SchedulesController } from "../schedules/schedules.controller.js";
+import { SchedulesModule } from "../schedules/schedules.module.js";
 import { SetupModule } from "../setup/setup.module.js";
 import { SetupChecksController } from "../setup/setup-checks.controller.js";
 import { SetupGuidesController } from "../setup/setup-guides.controller.js";
@@ -123,6 +125,7 @@ const CONTROLLERS = [
     ConversationsController,
     BackgroundController,
     DevicesController,
+    SchedulesController,
     AttachmentsController,
     SkillsController,
     SkillChangesController,
@@ -204,6 +207,8 @@ ApiModule = __decorate([
             ThemesModule,
             ClientModule,
             SetupModule,
+            // scheduled tasks (the controller comes with the HTTP routes)
+            SchedulesModule,
         ],
         controllers: CONTROLLERS,
         providers: [{ provide: APP_GUARD, useClass: AuthGuard }],

package/dist/inbox/inbox.module.js

@@ -6,6 +6,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 };
 import { Module } from "@nestjs/common";
 import { CatalogModule } from "../catalog/catalog.module.js";
+import { SchedulesModule } from "../schedules/schedules.module.js";
 import { SkillsModule } from "../skills/skills.module.js";
 import { ToolsModule } from "../tools/tools.module.js";
 import { InboxService } from "./inbox.service.js";
@@ -18,7 +19,7 @@ let InboxModule = class InboxModule {
 };
 InboxModule = __decorate([
     Module({
-        imports: [ToolsModule, SkillsModule, CatalogModule],
+        imports: [ToolsModule, SkillsModule, CatalogModule, SchedulesModule],
         providers: [InboxService, PlatformInboxService],
         exports: [InboxService, PlatformInboxService],
     })

package/dist/inbox/inbox.service.d.ts

@@ -1,5 +1,6 @@
 import { CatalogRequestsService, type CatalogRequestView } from "../catalog/requests.service.js";
 import { KernelDb } from "../infra/database/kernel-db.js";
+import { type ScheduleAttention, ScheduledTasksService } from "../schedules/scheduled-tasks.service.js";
 import { SkillChangesService, type SkillChangeView } from "../skills/changes.service.js";
 import { ApprovalsService, type ApprovalView } from "../tools/approvals.service.js";
 import type { OrgNoticeDetails } from "./org-notices.js";
@@ -40,11 +41,16 @@ export declare const INBOX_MAX_ITEMS = 100;
  * - `tool_approval`：当前用户能处理的待处理工具调用审批（与 `GET /approvals?status=pending` 同一视图）；
  * - `skill_change`: pending skill share requests and proposed versions of shared skills, when the
  *   current user is an org admin (`skillChange.kind`; spec §5.4, §5.5);
- * - `catalog_request`: pending `enable` requests from members and pending `connector_setup`
- *   requests (`request.kind`; `request.agent` and `request.connectors` set, `item` null; ruling
- *   P4-T6-5), when the current user is an org admin (M6 T26, C22; plugin scope spec §5.1);
+ * - `catalog_request`: pending `enable` and `network_allowlist` requests from members and pending
+ *   `connector_setup` requests (`request.kind`; for `connector_setup` `request.agent` and
+ *   `request.connectors` set, `item` null, ruling P4-T6-5; for `network_allowlist`
+ *   `request.network` set, network ask-to-allow spec §5.3), when the current user is an org admin
+ *   (M6 T26, C22; plugin scope spec §5.1);
  * - `catalog_request_decided`: the current user's own requests in this org that were approved or
  *   rejected (with the reason), until dismissed (`POST catalog-requests/:id/dismiss`);
+ * - `schedule_attention`: the current user's own scheduled task that needs them (spec §8): paused
+ *   for any reason but their own pause, its latest run failed, or its latest run was refused tools
+ *   or connections; derived live, gone once the task is resumed or runs clean;
  * - the org notices (`skill_renamed`, `item_shared`, `shared_item_updated`, `upload_confirmed`,
  *   `upload_rejected`; `type` = the notice's kind): for org admins, until one dismisses it
  *   (`POST inbox/notices/:id/dismiss`).
@@ -70,12 +76,20 @@ export type InboxItem = {
     /** When it was decided. */
     createdAt: string;
     request: CatalogRequestView;
+} | {
+    type: "schedule_attention";
+    /** `<taskId>:paused`, `<taskId>:failed` or `<taskId>:grants`. */
+    id: string;
+    createdAt: string;
+    attention: ScheduleAttentionView;
 } | {
     type: OrgNoticeView["kind"];
     id: string;
     createdAt: string;
     notice: OrgNoticeView;
 };
+/** A scheduled task that needs its creator ({@link ScheduleAttention}, dates as ISO strings). */
+export type ScheduleAttentionView = Omit<ScheduleAttention, "at">;
 /** `GET /inbox` 的结果：新的在前，最多 {@link INBOX_MAX_ITEMS} 项；`truncated` 为 true 表示还有更多。 */
 export interface InboxView {
     items: InboxItem[];
@@ -87,7 +101,8 @@ export declare class InboxService {
     private readonly skillChanges;
     private readonly kdb;
     private readonly catalogRequests;
-    constructor(approvals: Pick<ApprovalsService, "list">, skillChanges: Pick<SkillChangesService, "listPending">, kdb: KernelDb, catalogRequests: Pick<CatalogRequestsService, "listForOrgAdmin" | "listDecidedForRequester">);
+    private readonly schedules;
+    constructor(approvals: Pick<ApprovalsService, "list">, skillChanges: Pick<SkillChangesService, "listPending">, kdb: KernelDb, catalogRequests: Pick<CatalogRequestsService, "listForOrgAdmin" | "listDecidedForRequester">, schedules: Pick<ScheduledTasksService, "attentionFor">);
     list(orgId: string, accountId: string): Promise<InboxView>;
     /** The org's open notices when the account is an org admin (else none), newest first. */
     private notices;

package/dist/inbox/inbox.service.js

@@ -13,6 +13,7 @@ import { CATALOG_REQUESTS_LIST_MAX, CatalogRequestsService, } from "../catalog/r
 import { ApiError } from "../errors.js";
 import { KernelDb } from "../infra/database/kernel-db.js";
 import { roleAtLeast } from "../orgs/roles.js";
+import { ScheduledTasksService, } from "../schedules/scheduled-tasks.service.js";
 import { SKILL_CHANGES_LIST_MAX, SkillChangesService, } from "../skills/changes.service.js";
 import { APPROVALS_LIST_MAX, ApprovalsService, } from "../tools/approvals.service.js";
 /** The most open org notices one inbox read returns. */
@@ -25,19 +26,22 @@ let InboxService = class InboxService {
     skillChanges;
     kdb;
     catalogRequests;
-    constructor(approvals, skillChanges, kdb, catalogRequests) {
+    schedules;
+    constructor(approvals, skillChanges, kdb, catalogRequests, schedules) {
         this.approvals = approvals;
         this.skillChanges = skillChanges;
         this.kdb = kdb;
         this.catalogRequests = catalogRequests;
+        this.schedules = schedules;
     }
     async list(orgId, accountId) {
-        const [approvals, changes, requests, decided, notices] = await Promise.all([
+        const [approvals, changes, requests, decided, notices, attention] = await Promise.all([
             this.approvals.list(orgId, accountId, "pending"),
             this.skillChanges.listPending(orgId, accountId),
             this.catalogRequests.listForOrgAdmin(orgId, accountId),
             this.catalogRequests.listDecidedForRequester(orgId, accountId),
             this.notices(orgId, accountId),
+            this.schedules.attentionFor(orgId, accountId),
         ]);
         const all = [
             ...approvals.map((a) => ({
@@ -64,6 +68,12 @@ let InboxService = class InboxService {
                 createdAt: r.decidedAt ?? r.createdAt,
                 request: r,
             })),
+            ...attention.map(({ at, ...view }) => ({
+                type: "schedule_attention",
+                id: `${view.taskId}:${view.reason === "missing_grants" ? "grants" : view.reason === "failed" ? "failed" : "paused"}`,
+                createdAt: at.toISOString(),
+                attention: view,
+            })),
             ...notices.map((n) => ({ type: n.kind, id: n.id, createdAt: n.createdAt, notice: n })),
         ];
         // 新的在前；同一时刻按 id 定序（结果稳定）
@@ -142,7 +152,8 @@ InboxService = __decorate([
     __param(0, Inject(ApprovalsService)),
     __param(1, Inject(SkillChangesService)),
     __param(2, Inject(KernelDb)),
-    __param(3, Inject(CatalogRequestsService))
+    __param(3, Inject(CatalogRequestsService)),
+    __param(4, Inject(ScheduledTasksService))
 ], InboxService);
 export { InboxService };
 const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;

package/dist/infra/config/kernel-config.service.js

@@ -33,6 +33,10 @@ const HOT_APPLIERS = {
     "models.embedTimeoutMs": () => { },
     // SandboxService reads the shared-lease cap at every acquisition.
     "sandbox.maxConcurrentCommands": () => { },
+    // Sandbox tiers are read at every device use, org settings read and Platform call.
+    "sandbox.tiers.max": () => { },
+    "sandbox.tiers.default": () => { },
+    "sandbox.tiers.allowUnsandboxed": () => { },
     // The devices service reads the personal limit at every create.
     "devices.maxPersonal": () => { },
     // The local device relay reads the reconnect grace at every disconnect and token response.
@@ -48,6 +52,13 @@ const HOT_APPLIERS = {
     "web.fetch.maxAnswerTokens": () => { },
     "web.fetch.cacheSeconds": () => { },
     "web.fetch.timeoutMs": () => { },
+    // Scheduled-task settings are clamped to these bounds on every read.
+    "schedules.minIntervalFloorMinutes": () => { },
+    "schedules.maxTasksPerMemberCap": () => { },
+    "schedules.maxTasksPerOrgCap": () => { },
+    "schedules.maxRunsPerHourCap": () => { },
+    // Run start reads the skills catalog budget when it records a snapshot.
+    "skills.catalogBudgetChars": () => { },
 };
 /**
  * Environment variables of renamed config keys, with their replacements: warned about once when

package/dist/infra/events/kernel-events.d.ts

@@ -31,7 +31,8 @@ export interface KernelEventMap {
         orgId: string;
         conversationId: string;
         runId: string;
-        status: "approved" | "denied";
+        /** `skipped`: a network ask closed by the run's starter's message (network ask-to-allow §6.7). */
+        status: "approved" | "denied" | "skipped";
     };
     /**
      * A person answered a tool call's input request, or skipped it with a message (after the commit,

package/dist/lifecycle/kernel-lifecycle.d.ts

@@ -99,6 +99,8 @@ export declare class KernelLifecycle implements OnApplicationBootstrap, BeforeAp
     private unwatchConfig;
     /** What the first bootstrap pass did, carried into the second one. */
     private bootstrapCarry;
+    /** The packages the first bootstrap pass obtained, so the second downloads nothing again. */
+    private bootstrapPackages;
     constructor(accounts: AccountsService, configService: KernelConfigService, log: KernelLogger, options: KernelAppOptions, pool: Kysely<any>, redis: Redis, kdb: KernelDb, shutdown: GracefulShutdown, host: ExtensionHost, registry: ExtensionRegistry, installs: ExtensionInstalls, blobs: ExtensionBlobs, extensionLifecycle: ExtensionLifecycle, replicaStatus: ReplicaStatusStore, bootstrap: BootstrapService, marketplaces: MarketplacesService, pluginImport: PluginImport, bus: Pick<ExtensionContext["bus"], "publish" | "subscribe">, usageReport: UsageReporter, titles: TitleQueue, channelJobs: ChannelJobs, channelOutbound: ChannelOutbound, presence: ReplicaPresence, worker?: WorkerRole | undefined, gateway?: GatewayRole | undefined);
     /** The kernel HTTP application (set up by `buildKernelApp` before `init()`). */
     get http(): KernelHttpApp;
@@ -122,7 +124,9 @@ export declare class KernelLifecycle implements OnApplicationBootstrap, BeforeAp
      * kernel never serves without a required plugin. A failed optional entry is logged and returns
      * true: the start runs the step once more after the extensions loaded (a declarative entry's
      * catalog files need the object store, which on a fresh deployment is itself a bootstrap plugin),
-     * and the next start tries again while it stays incomplete.
+     * and the next start tries again while it stays incomplete. The first pass skips the `builtin`
+     * entries (they may ship skills and templates, which need the object store) and returns true for
+     * them too; the final pass imports them, and one that fails is logged like an optional entry.
      */
     private runBootstrap;
     /** 部署尚无活跃超级管理员时提示去初始化；查询失败只记日志，不影响启动。 */