@capybara-hq/kernel 0.1.0-rc.22 → 0.1.0-rc.24

package/dist/overrides.d.ts

@@ -5,14 +5,19 @@ import { CHANNEL_WEBHOOK_TIMINGS, type ChannelWebhookTimings } from "./channels/
 import type { EvalReplayHooks } from "./evals/run-replay.js";
 import { EVAL_REPLAY_HOOKS } from "./evals/worker.js";
 import { BOOTSTRAP_LOCK_TTL } from "./extensions/bootstrap.js";
+import { USAGE_SUBSCRIBERS_CLOCK } from "./extensions/usage-subscribers.js";
 import { FILE_PREVIEW_TIMEOUT } from "./files/previewers.js";
+import { OUTBOX_DISPATCH_FAILS } from "./infra/outbox/outbox.dispatcher.js";
+import { OUTBOX_FAST_PATH_SETTLED } from "./infra/outbox/outbox.module.js";
+import { OUTBOX_STRICT_CONFLICTS } from "./infra/outbox/outbox.service.js";
 import { PRESENCE_INTERVAL_MS } from "./infra/presence/replica-presence.js";
+import type { KernelQueueName } from "./infra/queue/queue-names.js";
 import { LIST_MODELS_TIMEOUT } from "./runtime/providers.js";
 import { RUN_CONTEXT_CLOCK } from "./runtime/run-context.service.js";
+import { ENSURE_RUN_FAILS } from "./runtime/run-queue.js";
 import { AGENT_LOOP_FACTORY, type AgentLoopFactory } from "./runtime/run-steps.js";
 import { RUN_HOOKS, type RunHooks } from "./runtime/run-worker.js";
 import { SUBAGENT_MESSAGES_HOOKS, type SubagentMessagesHooks } from "./runtime/subagents/messages.js";
-import { USAGE_REPORT_RETRY, type UsageReportRetry } from "./runtime/usage-report.js";
 import { SANDBOX_LEASE_TIMINGS, type SandboxLeaseTimings } from "./sandbox/leases.js";
 import { SETUP_CHECK_TIMEOUT } from "./setup/setup-checks.service.js";
 import { TOOL_PIPELINE_HOOKS, type ToolPipelineHooks } from "./tools/pipeline.js";
@@ -26,13 +31,21 @@ import { EMBED_TOKEN_CLOCK } from "./ui/embed-token.js";
  * - `EVAL_REPLAY_HOOKS`: the hooks of the eval full-run replay and the judge;
  * - `TOOL_PIPELINE_HOOKS`: the tool pipeline's hooks and policy decision;
  * - `SUBAGENT_MESSAGES_HOOKS`: the sub-agent message tools' hooks (a send raced by a run's end);
- * - `BOOTSTRAP_LOCK_TTL`, `FILE_PREVIEW_TIMEOUT`, `LIST_MODELS_TIMEOUT`, `USAGE_REPORT_RETRY`,
+ * - `BOOTSTRAP_LOCK_TTL`, `FILE_PREVIEW_TIMEOUT`, `LIST_MODELS_TIMEOUT`,
  *   `SANDBOX_LEASE_TIMINGS`, `CHANNEL_WEBHOOK_TIMINGS`, `SETUP_CHECK_TIMEOUT`,
  *   `PRESENCE_INTERVAL_MS`: shorter timings;
  * - `ADMIN_USAGE_TIMINGS`: the usage aggregate's statement timeout and clock;
  * - `EMBED_TOKEN_CLOCK`: the clock embed tokens are issued and checked with;
  * - `RUN_CONTEXT_CLOCK`: the clock run start reads the run context's date from, and the
  *   `CurrentTime` builtin the time;
+ * - `OUTBOX_STRICT_CONFLICTS`: a reused outbox job id with different data throws (tests) instead
+ *   of logging an error;
+ * - `OUTBOX_DISPATCH_FAILS`: returns true to make the outbox dispatcher's adds to the given queue
+ *   fail (a Redis outage);
+ * - `USAGE_SUBSCRIBERS_CLOCK`: the clock the `usage.report` subscriber cache ages with;
+ * - `OUTBOX_FAST_PATH_SETTLED`: receives each detached outbox fast-path pass (a test awaits them);
+ * - `ENSURE_RUN_FAILS`: returns true to make `RunQueue.ensureRun` throw (Redis unreachable, or the
+ *   direct call after a commit skipped by a crash);
  * - `APP_INTERCEPTOR`: one more global interceptor (a probe of the matched routes).
  */
 interface KernelSeams {
@@ -44,7 +57,6 @@ interface KernelSeams {
     [BOOTSTRAP_LOCK_TTL]: number;
     [FILE_PREVIEW_TIMEOUT]: number;
     [LIST_MODELS_TIMEOUT]: number;
-    [USAGE_REPORT_RETRY]: UsageReportRetry;
     [SANDBOX_LEASE_TIMINGS]: Partial<SandboxLeaseTimings>;
     [CHANNEL_WEBHOOK_TIMINGS]: Partial<ChannelWebhookTimings>;
     [SETUP_CHECK_TIMEOUT]: number;
@@ -52,6 +64,11 @@ interface KernelSeams {
     [ADMIN_USAGE_TIMINGS]: Partial<AdminUsageTimings>;
     [EMBED_TOKEN_CLOCK]: () => number;
     [RUN_CONTEXT_CLOCK]: () => number;
+    [OUTBOX_STRICT_CONFLICTS]: boolean;
+    [OUTBOX_DISPATCH_FAILS]: (queue: KernelQueueName) => boolean;
+    [USAGE_SUBSCRIBERS_CLOCK]: () => number;
+    [OUTBOX_FAST_PATH_SETTLED]: (pass: Promise<void>) => void;
+    [ENSURE_RUN_FAILS]: () => boolean;
     [APP_INTERCEPTOR]: NestInterceptor;
 }
 /**

package/dist/overrides.js

@@ -3,14 +3,18 @@ import { ADMIN_USAGE_TIMINGS } from "./admin/usage.service.js";
 import { CHANNEL_WEBHOOK_TIMINGS } from "./channels/webhook.js";
 import { EVAL_REPLAY_HOOKS } from "./evals/worker.js";
 import { BOOTSTRAP_LOCK_TTL } from "./extensions/bootstrap.js";
+import { USAGE_SUBSCRIBERS_CLOCK } from "./extensions/usage-subscribers.js";
 import { FILE_PREVIEW_TIMEOUT } from "./files/previewers.js";
+import { OUTBOX_DISPATCH_FAILS } from "./infra/outbox/outbox.dispatcher.js";
+import { OUTBOX_FAST_PATH_SETTLED } from "./infra/outbox/outbox.module.js";
+import { OUTBOX_STRICT_CONFLICTS } from "./infra/outbox/outbox.service.js";
 import { PRESENCE_INTERVAL_MS } from "./infra/presence/replica-presence.js";
 import { LIST_MODELS_TIMEOUT } from "./runtime/providers.js";
 import { RUN_CONTEXT_CLOCK } from "./runtime/run-context.service.js";
+import { ENSURE_RUN_FAILS } from "./runtime/run-queue.js";
 import { AGENT_LOOP_FACTORY } from "./runtime/run-steps.js";
 import { RUN_HOOKS } from "./runtime/run-worker.js";
 import { SUBAGENT_MESSAGES_HOOKS, } from "./runtime/subagents/messages.js";
-import { USAGE_REPORT_RETRY } from "./runtime/usage-report.js";
 import { SANDBOX_LEASE_TIMINGS } from "./sandbox/leases.js";
 import { SETUP_CHECK_TIMEOUT } from "./setup/setup-checks.service.js";
 import { TOOL_PIPELINE_HOOKS } from "./tools/pipeline.js";
@@ -24,7 +28,7 @@ const SEAM_TOKENS = [
     BOOTSTRAP_LOCK_TTL,
     FILE_PREVIEW_TIMEOUT,
     LIST_MODELS_TIMEOUT,
-    USAGE_REPORT_RETRY,
+    USAGE_SUBSCRIBERS_CLOCK,
     SANDBOX_LEASE_TIMINGS,
     CHANNEL_WEBHOOK_TIMINGS,
     SETUP_CHECK_TIMEOUT,
@@ -32,6 +36,10 @@ const SEAM_TOKENS = [
     ADMIN_USAGE_TIMINGS,
     EMBED_TOKEN_CLOCK,
     RUN_CONTEXT_CLOCK,
+    OUTBOX_STRICT_CONFLICTS,
+    OUTBOX_DISPATCH_FAILS,
+    OUTBOX_FAST_PATH_SETTLED,
+    ENSURE_RUN_FAILS,
     APP_INTERCEPTOR,
 ];
 const allSeamsListed = true;

package/dist/platform/exclusions.js

@@ -95,6 +95,11 @@ export const PLATFORM_EXCLUSIONS = [
         category: "human-only",
         reason: "Confirms an import review, an approval decision by the super admin",
     },
+    {
+        route: "POST /api/v1/admin/catalog/imports/:stagingId/update",
+        category: "human-only",
+        reason: "Confirms an import review together with the platform update it applies, an approval decision by the super admin",
+    },
     {
         route: "GET /api/v1/admin/catalog/items/:id/icon",
         category: "transport",

package/dist/platform/ops/admin.ops.js

@@ -43,6 +43,7 @@ const SettingsInput = DEPLOYMENT_SETTINGS_PATCH.pick({
     uiTheme: true,
     uiArrangement: true,
     clientExtensions: true,
+    sandboxTiers: true,
 }).strict();
 const ProviderId = ModelProviderParams.shape.provider.describe("The model provider (models.platform-list), e.g. the plugin name of its extension.");
 /** `provider/model` of a purpose target, or null. */
@@ -77,6 +78,22 @@ function attentionRows(a) {
                     ? `Check the provider's deployment config and connection on its extension page (/admin/extensions/${p.plugin}); the models page (/admin/models) shows the list.`
                     : "The provider lists no chat model that is switched on: switch one on in the admin console (/admin/models) or check the provider's config.",
             })),
+            ...a.outbox.map((o) => ({
+                kind: "outbox",
+                id: o.kind,
+                name: "Background work that could not be queued",
+                state: "dead",
+                reason: `${o.count} dead outbox row(s), the oldest dead since ${o.oldestAt}`,
+                next: "List them with admin.outbox-list-dead, then retry each with admin.outbox-retry or drop it with admin.outbox-discard.",
+            })),
+            ...a.queue.map((q) => ({
+                kind: "queue",
+                id: q.kind,
+                name: "The queue lost background jobs",
+                state: "lost_jobs",
+                reason: `${q.count} queued run job(s) were missing from the queue, the last at ${q.lastAt}; they were queued again`,
+                next: "Redis lost data: check its persistence (AOF or snapshots) and whether it restarted or evicted keys. Nothing to do per run; the item clears a week after the last loss.",
+            })),
         ],
         more: a.more,
         unavailable: a.unavailable,
@@ -126,7 +143,7 @@ let AdminOperations = class AdminOperations {
         this.registry.register([
             defineOperation({
                 id: "admin.overview",
-                description: "The admin console's dashboard numbers (super admin): orgs, accounts and attentionTotal, everything waiting for a super admin (the platform inbox total plus the extensions, plugin updates and model providers admin.attention lists); partial is true when one of those lists could not be read right now (attentionTotal then leaves it out).",
+                description: "The admin console's dashboard numbers (super admin): orgs, accounts and attentionTotal, everything waiting for a super admin (the platform inbox total plus the extensions, plugin updates and model providers admin.attention lists, every dead outbox row and the lost-jobs item of the run queue); partial is true when one of those lists could not be read right now (attentionTotal then leaves it out).",
                 input: z.object({}).strict(),
                 example: {},
                 authz: { superAdmin: true },
@@ -136,7 +153,7 @@ let AdminOperations = class AdminOperations {
             }),
             defineOperation({
                 id: "admin.attention",
-                description: "What needs the super admin besides the platform inbox (super admin), one compact row each (kind, id, name, state, reason, next step): extensions (reason config, load_failed, approval, dependency, conflict, converging or legacy_format), platform plugins with a newer marketplace version (reason names both versions) and model providers (reason list_failed or no_chat_model). Each kind lists at most 20 rows; more counts the rest per kind. unavailable names a kind that could not be read right now (try again later). The platform inbox itself is inbox.platform-list.",
+                description: "What needs the super admin besides the platform inbox (super admin), one compact row each (kind, id, name, state, reason, next step): extensions (reason config, load_failed, approval, dependency, conflict, converging or legacy_format), platform plugins with a newer marketplace version (reason names both versions) model providers (reason list_failed or no_chat_model) background work the kernel could not queue (kind outbox: how many outbox rows are dead and since when) and run jobs the queue lost (kind queue: Redis lost data; the runs were queued again). Each kind lists at most 20 rows; more counts the rest per kind. unavailable names a kind that could not be read right now (try again later). The platform inbox itself is inbox.platform-list.",
                 input: z.object({}).strict(),
                 example: {},
                 authz: { superAdmin: true },
@@ -182,17 +199,17 @@ let AdminOperations = class AdminOperations {
             }),
             defineOperation({
                 id: "admin.settings",
-                description: "Read the deployment settings (super admin): who may create orgs (orgCreation), the price currency, whether orgs may create their own connectors and skills, whether org admins may browse the marketplaces, and the per-org limit overrides keyed by org id (orgs.get reads one org's).",
+                description: "Read the deployment settings (super admin): who may create orgs (orgCreation), the price currency, whether orgs may create their own connectors and skills, whether org admins may browse the marketplaces, the per-org limit overrides keyed by org id (orgs.get reads one org's), and the platform's sandbox levels in effect (sandboxTiers: max, default, allowUnsandboxed, with sources: env, file or nacos are set in the startup config and read-only, db chosen in the admin console, default).",
                 input: z.object({}).strict(),
                 example: {},
                 authz: { superAdmin: true },
                 mirrors: ["GET /api/v1/admin/settings"],
                 confirm: "read",
-                run: () => this.settings.get(),
+                run: () => this.settings.view(),
             }),
             defineOperation({
                 id: "admin.update-settings",
-                description: "Change deployment settings (super admin); give only the keys to change: orgCreation (anyone or super_admin), priceCurrency (ISO 4217 code), customConnectors / customSkills (allow or deny: whether orgs may create their own instead of installing from the catalog), orgMarketplaceBrowse (true or false), uiTheme ({ id }: the platform default theme, a platform theme whose scope is all, or null for the built-in theme; it is what every org falls back to and what the sign-in pages show), uiArrangement ({ <slot>: { hidden, order } } for a list slot, { <slot>: { use } } for a single slot: the platform default arrangement of UI slots, with contribution keys <extension>/<contribution>; hidden ones are not listed but still open by URL; use names the contribution that replaces the built-in, null for the built-in; null for a slot removes its entry), clientExtensions ({ enabled?, disabled? }: the kill switch of plugin client code; enabled false stops every plugin's interface code in every browser, disabled is the whole list of plugins whose interface code alone is stopped while their tools keep working; read the current list from admin.settings first). Per-org limits are orgs.set-limits.",
+                description: "Change deployment settings (super admin); give only the keys to change: orgCreation (anyone or super_admin), priceCurrency (ISO 4217 code), customConnectors / customSkills (allow or deny: whether orgs may create their own instead of installing from the catalog), orgMarketplaceBrowse (true or false), uiTheme ({ id }: the platform default theme, a platform theme whose scope is all, or null for the built-in theme; it is what every org falls back to and what the sign-in pages show), uiArrangement ({ <slot>: { hidden, order } } for a list slot, { <slot>: { use } } for a single slot: the platform default arrangement of UI slots, with contribution keys <extension>/<contribution>; hidden ones are not listed but still open by URL; use names the contribution that replaces the built-in, null for the built-in; null for a slot removes its entry), clientExtensions ({ enabled?, disabled? }: the kill switch of plugin client code; enabled false stops every plugin's interface code in every browser, disabled is the whole list of plugins whose interface code alone is stopped while their tools keep working; read the current list from admin.settings first), sandboxTiers ({ max?, default?, allowUnsandboxed? }: the platform's sandbox levels strict < dev < open; null clears a field back to its default; through this tool they may only be lowered, never raised, and fields set in the startup config are read-only). Per-org limits are orgs.set-limits.",
                 input: SettingsInput.refine((b) => Object.keys(b).length > 0, {
                     message: "at least one setting is required",
                 }),
@@ -207,6 +224,14 @@ let AdminOperations = class AdminOperations {
                         code: "validation_failed",
                         next: "Fix the values as the message says (admin.settings shows the current ones).",
                     },
+                    {
+                        code: "deployment.sandbox_tier_not_allowed",
+                        next: "Through this tool the platform's sandbox levels may only be lowered; to raise them, ask a super admin to change them in the admin console settings on the web.",
+                    },
+                    {
+                        code: "deployment.setting_readonly",
+                        next: "That sandbox level is set in the deployment's startup config (environment, file or Nacos; admin.settings shows the source); it can only be changed there, by the operator.",
+                    },
                     {
                         code: "theme.not_available",
                         next: "The platform default must be a platform theme whose scope is all, not disabled, and on in every organization. When the details list orgs, the theme is off in those organizations: tell the person their names, then choose another theme (plugins.components with kind theme lists them) or have it switched on in those organizations first; { id: null } sets the built-in theme.",
@@ -214,13 +239,27 @@ let AdminOperations = class AdminOperations {
                 ],
                 precheck: async (i) => {
                     const r = DeploymentSettingsBody.safeParse(i);
-                    return r.success
+                    if (!r.success) {
+                        return {
+                            ok: false,
+                            code: "validation_failed",
+                            message: r.error.issues[0]?.message ?? "",
+                        };
+                    }
+                    const tiers = i.sandboxTiers;
+                    return tiers === undefined
                         ? { ok: true }
-                        : { ok: false, code: "validation_failed", message: r.error.issues[0]?.message ?? "" };
+                        : precheckBy(() => this.settings.checkSandboxTiers(tiers, { onlyNarrows: true }));
                 },
                 summary: async (i) => {
-                    const { uiTheme, uiArrangement, clientExtensions, ...rest } = i;
+                    const { uiTheme, uiArrangement, clientExtensions, sandboxTiers, ...rest } = i;
                     const parts = Object.entries(rest).map(([k, v]) => `${k}=${String(v)}`);
+                    if (sandboxTiers !== undefined) {
+                        parts.push(`sandboxTiers=${Object.entries(sandboxTiers)
+                            .filter(([, v]) => v !== undefined)
+                            .map(([k, v]) => `${k}:${String(v)}`)
+                            .join(" ")}`);
+                    }
                     const zh = [...parts];
                     const en = [...parts];
                     if (uiTheme !== undefined) {
@@ -253,7 +292,9 @@ let AdminOperations = class AdminOperations {
                         en: `Change the deployment settings: ${en.join(", ")}`,
                     };
                 },
-                run: (input, ctx) => this.settings.update(input, ctx.actorAccountId, undefined, viaAgent("admin.update-settings", ctx)),
+                run: (input, ctx) => this.settings.update(input, ctx.actorAccountId, undefined, viaAgent("admin.update-settings", ctx), 
+                // a person raises the platform's sandbox levels, never an agent (dev tiers spec §2)
+                { onlyNarrows: true }),
             }),
             defineOperation({
                 id: "models.platform-list",

package/dist/platform/ops/catalog-admin.ops.d.ts

@@ -2,6 +2,7 @@ import { type OnModuleInit } from "@nestjs/common";
 import { type AppearanceResult, AppearanceService } from "../../catalog/appearance.service.js";
 import { CatalogService } from "../../catalog/catalog.service.js";
 import { CatalogScopeService } from "../../catalog/catalog-scope.service.js";
+import { PlatformImportUpdate } from "../../catalog/platform-import-update.js";
 import { PluginImport, type PluginReview } from "../../catalog/plugin-import.js";
 import { KernelDb } from "../../infra/database/kernel-db.js";
 import { ThemesService } from "../../themes/themes.service.js";
@@ -70,10 +71,11 @@ export declare class CatalogAdminOperations implements OnModuleInit {
     private readonly catalog;
     private readonly scope;
     private readonly pluginImport;
+    private readonly importUpdate;
     private readonly kdb;
     private readonly appearance;
     private readonly themes;
-    constructor(registry: PlatformOperations, catalog: CatalogService, scope: CatalogScopeService, pluginImport: PluginImport, kdb: KernelDb, appearance: AppearanceService, themes: ThemesService);
+    constructor(registry: PlatformOperations, catalog: CatalogService, scope: CatalogScopeService, pluginImport: PluginImport, importUpdate: PlatformImportUpdate, kdb: KernelDb, appearance: AppearanceService, themes: ThemesService);
     /** The precheck refusal of another org's private plugin (the phase-1 rule), else null. */
     private otherOrgs;
     /** Whether an org owns the item (its owner org manages it, not the super admin's agent). */

package/dist/platform/ops/catalog-admin.ops.js

@@ -14,6 +14,7 @@ import { CatalogDisabledBody, CatalogGitImportBody, CatalogIdPathParams, Catalog
 import { AppearanceService } from "../../catalog/appearance.service.js";
 import { CatalogService } from "../../catalog/catalog.service.js";
 import { CatalogScopeService } from "../../catalog/catalog-scope.service.js";
+import { PlatformImportUpdate } from "../../catalog/platform-import-update.js";
 import { PluginImport } from "../../catalog/plugin-import.js";
 import { ApiError } from "../../errors.js";
 import { KernelDb } from "../../infra/database/kernel-db.js";
@@ -125,14 +126,16 @@ let CatalogAdminOperations = class CatalogAdminOperations {
     catalog;
     scope;
     pluginImport;
+    importUpdate;
     kdb;
     appearance;
     themes;
-    constructor(registry, catalog, scope, pluginImport, kdb, appearance, themes) {
+    constructor(registry, catalog, scope, pluginImport, importUpdate, kdb, appearance, themes) {
         this.registry = registry;
         this.catalog = catalog;
         this.scope = scope;
         this.pluginImport = pluginImport;
+        this.importUpdate = importUpdate;
         this.kdb = kdb;
         this.appearance = appearance;
         this.themes = themes;
@@ -313,6 +316,30 @@ let CatalogAdminOperations = class CatalogAdminOperations {
                     };
                 },
             }),
+            defineOperation({
+                id: "plugins.import-update-preview",
+                description: "Preview what a staged new version of an installed platform plugin does as the platform update (super admin): every component's change, the extension step and the org connectors it touches. Nothing is imported or changed; the person confirms the review and the update together on the web (reviewUrl).",
+                input: z.object({ stagingId: StagingId }).strict(),
+                example: { stagingId: "3f1c2a9e-5b7d-4e21-9c0a-1d2e3f4a5b6c" },
+                authz: { superAdmin: true },
+                mirrors: ["GET /api/v1/admin/catalog/imports/:stagingId/update-preview"],
+                confirm: "read",
+                errors: [
+                    {
+                        code: "plugin.staging_not_found",
+                        next: "The staged import expired (24 hours) or was confirmed already: prepare it again with plugins.import-npm or plugins.import-git.",
+                    },
+                    {
+                        code: "plugin.upgrade_target_invalid",
+                        next: "The plugin is not installed on the platform yet (reason not_installed: the review installs it), or the platform cannot move to this version (the details say why).",
+                    },
+                ],
+                run: async (input) => ({
+                    preview: await this.importUpdate.preview(input.stagingId),
+                    reviewUrl: reviewUrl(input.stagingId),
+                    next: CONFIRM_ON_WEB,
+                }),
+            }),
             defineOperation({
                 id: "plugins.scope-preview",
                 description: "Preview changing where a platform plugin is on (super admin): a scope (all: every org; optional: orgs switch it on; named: only the orgs listed, with orgs) or disabled: true (off everywhere). Returns the orgs that lose it (with the agents there), the components it takes back, name conflicts, and the scopeHash plugins.set-scope or plugins.set-disabled needs. Nothing is written; show the preview to the person first.",
@@ -675,8 +702,9 @@ CatalogAdminOperations = __decorate([
     __param(1, Inject(CatalogService)),
     __param(2, Inject(CatalogScopeService)),
     __param(3, Inject(PluginImport)),
-    __param(4, Inject(KernelDb)),
-    __param(5, Inject(AppearanceService)),
-    __param(6, Inject(ThemesService))
+    __param(4, Inject(PlatformImportUpdate)),
+    __param(5, Inject(KernelDb)),
+    __param(6, Inject(AppearanceService)),
+    __param(7, Inject(ThemesService))
 ], CatalogAdminOperations);
 export { CatalogAdminOperations };

package/dist/platform/ops/org-settings.ops.js

@@ -47,7 +47,7 @@ let OrgSettingsOperations = class OrgSettingsOperations {
                 confirm: "read",
                 run: async (_input, ctx) => ({
                     settings: await this.settings.get(ctx.orgId),
-                    deployment: this.settings.deployment(),
+                    deployment: await this.settings.deployment(),
                     sandboxLimits: await this.settings.sandboxLimits(ctx.orgId),
                 }),
             }),
@@ -80,8 +80,8 @@ let OrgSettingsOperations = class OrgSettingsOperations {
                     },
                 ],
                 precheck: (i, ctx) => precheckBy(async () => {
-                    this.settings.check(i);
-                    this.settings.assertOnlyNarrows(await this.settings.get(ctx.orgId), i);
+                    await this.settings.check(i);
+                    await this.settings.assertOnlyNarrows(await this.settings.get(ctx.orgId), i);
                 }),
                 summary: async (i, ctx) => {
                     const { theme, ...rest } = i;

package/dist/platform/ops/orgs.ops.js

@@ -161,6 +161,7 @@ let OrgsOperations = class OrgsOperations {
                     "uiTheme",
                     "uiArrangement",
                     "clientExtensions",
+                    "sandboxTiers",
                 ],
                 extras: ["orgId", "runConcurrency", "sandbox", "subagents"],
                 confirm: "platform",

package/dist/platform/ops/outbox.ops.d.ts

@@ -0,0 +1,21 @@
+import { type OnModuleInit } from "@nestjs/common";
+import { OutboxDeadService } from "../../admin/outbox-dead.service.js";
+import { KernelDb } from "../../infra/database/kernel-db.js";
+import { PlatformOperations } from "../registry.js";
+/**
+ * The super admin's dead outbox rows through the `Platform` tool (transactional outbox spec
+ * §3.4): the list, retry and discard of `/api/v1/admin/outbox/dead*`, run through the same
+ * service. Dead rows are the deployment's, not an org's: the operations act on all of them.
+ */
+export declare class OutboxOperations implements OnModuleInit {
+    private readonly registry;
+    private readonly dead;
+    private readonly kdb;
+    constructor(registry: PlatformOperations, dead: OutboxDeadService, kdb: KernelDb);
+    /** The dead row's job (queue and name) for a card, or null when no dead row has the id. */
+    private jobOf;
+    private precheck;
+    /** "job-name on queue" for a card, or the bare id when the row is gone. */
+    private label;
+    onModuleInit(): void;
+}

package/dist/platform/ops/outbox.ops.js

@@ -0,0 +1,125 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Inject, Injectable } from "@nestjs/common";
+import { z } from "zod";
+import { OutboxDeadParams } from "../../admin/outbox-dead.schemas.js";
+import { OutboxDeadService } from "../../admin/outbox-dead.service.js";
+import { KernelDb } from "../../infra/database/kernel-db.js";
+import { defineOperation } from "../operation.js";
+import { PlatformOperations } from "../registry.js";
+import { viaAgent } from "./errors.js";
+const DeadIdInput = OutboxDeadParams.strict();
+/**
+ * The super admin's dead outbox rows through the `Platform` tool (transactional outbox spec
+ * §3.4): the list, retry and discard of `/api/v1/admin/outbox/dead*`, run through the same
+ * service. Dead rows are the deployment's, not an org's: the operations act on all of them.
+ */
+let OutboxOperations = class OutboxOperations {
+    registry;
+    dead;
+    kdb;
+    constructor(registry, dead, kdb) {
+        this.registry = registry;
+        this.dead = dead;
+        this.kdb = kdb;
+    }
+    /** The dead row's job (queue and name) for a card, or null when no dead row has the id. */
+    async jobOf(id) {
+        const row = await this.kdb.db
+            .selectFrom("outbox")
+            .select(["queue", "job_name"])
+            .where("id", "=", id)
+            .where("dead_at", "is not", null)
+            .executeTakeFirst();
+        return row ?? null;
+    }
+    async precheck(id) {
+        return (await this.jobOf(id)) === null
+            ? { ok: false, code: "outbox.not_found", message: `No dead outbox row ${id}.` }
+            : { ok: true };
+    }
+    /** "job-name on queue" for a card, or the bare id when the row is gone. */
+    async label(id) {
+        const job = await this.jobOf(id);
+        return job === null ? `#${id}` : `${job.job_name} (${job.queue}, #${id})`;
+    }
+    onModuleInit() {
+        this.registry.register([
+            defineOperation({
+                id: "admin.outbox-list-dead",
+                description: "List background work the kernel could not queue (super admin): outbox rows dead after their last delivery attempt, oldest first (at most 200), each with its id, queue, job name, job id, org (null for platform work), attempts, last error and when it died. Retry one with admin.outbox-retry or drop it with admin.outbox-discard.",
+                input: z.object({}).strict(),
+                example: {},
+                authz: { superAdmin: true },
+                mirrors: ["GET /api/v1/admin/outbox/dead"],
+                confirm: "read",
+                run: () => this.dead.list(),
+            }),
+            defineOperation({
+                id: "admin.outbox-retry",
+                description: "Queue a dead outbox row again (super admin): it gets fresh attempts and is delivered right away. When the same job is already owed by a pending row, the dead copy is discarded instead; outcome says which (retried or already_owed). A job whose subject is gone since is harmless: it finds nothing to do. The platform audit log records it.",
+                input: DeadIdInput,
+                example: { id: "42" },
+                authz: { superAdmin: true },
+                mirrors: ["POST /api/v1/admin/outbox/dead/:id/retry"],
+                confirm: "platform",
+                errors: [
+                    {
+                        code: "outbox.not_found",
+                        next: "The row is no longer dead (retried, discarded or delivered): list the dead rows again with admin.outbox-list-dead.",
+                    },
+                ],
+                precheck: (i) => this.precheck(i.id),
+                summary: async (i) => {
+                    const job = await this.label(i.id);
+                    return {
+                        zh: `重新排入无法排入队列的后台任务 ${job}`,
+                        en: `Queue background work that could not be queued again: ${job}`,
+                    };
+                },
+                run: (input, ctx) => this.dead.retry(input.id, { accountId: ctx.actorAccountId }, viaAgent("admin.outbox-retry", ctx)),
+            }),
+            defineOperation({
+                id: "admin.outbox-discard",
+                description: "Discard a dead outbox row (super admin): its job is never run. Use it only when the work is no longer wanted; to run it, use admin.outbox-retry. The platform audit log records it.",
+                input: DeadIdInput,
+                example: { id: "42" },
+                authz: { superAdmin: true },
+                mirrors: ["DELETE /api/v1/admin/outbox/dead/:id"],
+                confirm: "platform",
+                errors: [
+                    {
+                        code: "outbox.not_found",
+                        next: "The row is no longer dead (retried, discarded or delivered): list the dead rows again with admin.outbox-list-dead.",
+                    },
+                ],
+                precheck: (i) => this.precheck(i.id),
+                summary: async (i) => {
+                    const job = await this.label(i.id);
+                    return {
+                        zh: `丢弃无法排入队列的后台任务 ${job}，它不会再运行`,
+                        en: `Discard background work that could not be queued: ${job}; it will never run`,
+                    };
+                },
+                run: async (input, ctx) => {
+                    await this.dead.discard(input.id, { accountId: ctx.actorAccountId }, viaAgent("admin.outbox-discard", ctx));
+                    return { id: input.id, discarded: true };
+                },
+            }),
+        ]);
+    }
+};
+OutboxOperations = __decorate([
+    Injectable(),
+    __param(0, Inject(PlatformOperations)),
+    __param(1, Inject(OutboxDeadService)),
+    __param(2, Inject(KernelDb))
+], OutboxOperations);
+export { OutboxOperations };

package/dist/platform/ops/platform.ops.js

@@ -148,7 +148,7 @@ let PlatformOperationsProvider = class PlatformOperationsProvider {
                     const sandbox = toolKeys.some((k) => SANDBOX_TOOL_NAMES.includes(k));
                     const org = await this.settings.get(ctx.orgId);
                     // a new device's level: the org's default tier and its network
-                    const policy = this.settings.sandboxPolicy(org, null);
+                    const policy = await this.settings.sandboxPolicy(org, null);
                     return {
                         id: agent.id,
                         name: d.name,

package/dist/platform/ops/schedules.ops.js

@@ -10,7 +10,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 import { Inject, Injectable } from "@nestjs/common";
 import { z } from "zod";
 import { ScheduledTasksService, } from "../../schedules/scheduled-tasks.service.js";
-import { createInputOf, grantsOf, ScheduleChatTargetsQuery, ScheduleCreateBody, ScheduleGrantableQuery, ScheduleGrantParams, ScheduleGrantsBody, ScheduleListQuery, ScheduleParams, ScheduleRunBody, ScheduleRunsQuery, ScheduleUpdateBody, updateInputOf, } from "../../schedules/schedules.schemas.js";
+import { calendarInputOf, createInputOf, grantsOf, ScheduleCalendarQuery, ScheduleChatTargetsQuery, ScheduleCreateBody, ScheduleGrantableQuery, ScheduleGrantParams, ScheduleGrantsBody, ScheduleListQuery, ScheduleParams, ScheduleRunBody, ScheduleRunsQuery, ScheduleUpdateBody, updateInputOf, } from "../../schedules/schedules.schemas.js";
 import { defineOperation } from "../operation.js";
 import { PlatformOperations } from "../registry.js";
 import { named, orElse } from "./summary.js";
@@ -98,6 +98,45 @@ let SchedulesOperations = class SchedulesOperations {
                     return { items: items.map(row) };
                 },
             }),
+            defineOperation({
+                id: "schedules.calendar",
+                description: "Your scheduled task runs and planned occurrences between two instants (at most 43 days): recorded runs with their status, planned runs computed from each active task's schedule up to 42 days ahead, and dense tasks summarized per day. Org admins see every task with all=true. from and to are ISO instants with an offset; timeZone (IANA) sets the local days used to summarize dense tasks; taskId lists one task's items, never summarized (then at most 2 days). truncated means a limit cut the range at horizon.",
+                input: ScheduleCalendarQuery,
+                example: {
+                    from: "2026-11-09T00:00:00+08:00",
+                    to: "2026-11-16T00:00:00+08:00",
+                    timeZone: "Asia/Shanghai",
+                },
+                authz: { orgAction: "org.read" },
+                mirrors: ["GET /api/v1/orgs/:orgId/schedules/calendar"],
+                confirm: "read",
+                errors: [
+                    {
+                        code: "validation_failed",
+                        next: "Narrow the range to 43 days or less (2 days with taskId), with from before to.",
+                    },
+                    {
+                        code: "forbidden",
+                        next: "Reading every task needs the org admin role: call without all, or ask an org admin.",
+                    },
+                    {
+                        code: "schedule.not_found",
+                        next: "Check taskId with schedules.list: members see only their own tasks; an org admin finds another member's task id with schedules.list all=true, then reads it here by taskId (all is not needed).",
+                    },
+                ],
+                run: async (input, ctx) => {
+                    const answer = await this.tasks.calendar(ctx.orgId, this.actor(ctx), calendarInputOf(input));
+                    return {
+                        ...answer,
+                        tasks: answer.tasks.map((t) => ({
+                            id: t.id,
+                            name: t.name,
+                            agentId: t.agentId,
+                            status: t.status,
+                        })),
+                    };
+                },
+            }),
             defineOperation({
                 id: "schedules.chat-targets",
                 description: "The IM chats you can point a chat-mode scheduled task at: your direct chats with each active channel connection's bot (one you have messaged before), and the groups you have talked in when the channel has threads. Each gives { connectionId, chatId, chatType } for schedules.create, and the connection's agentId, which the task must use.",

package/dist/platform/platform-ops.module.d.ts

@@ -21,6 +21,7 @@ import { ModelsOperations } from "./ops/models.ops.js";
 import { OrgPluginsOperations } from "./ops/org-plugins.ops.js";
 import { OrgSettingsOperations } from "./ops/org-settings.ops.js";
 import { OrgsOperations } from "./ops/orgs.ops.js";
+import { OutboxOperations } from "./ops/outbox.ops.js";
 import { PlatformOperationsProvider } from "./ops/platform.ops.js";
 import { PluginsOperations } from "./ops/plugins.ops.js";
 import { PreviewersOperations } from "./ops/previewers.ops.js";
@@ -34,7 +35,7 @@ import { UiOperations } from "./ops/ui.ops.js";
  * One provider per domain, each taking `PlatformOperations` as its first constructor argument:
  * the parity test in `tools/checks` builds the operations from it without a Nest app.
  */
-export declare const PLATFORM_OPERATION_PROVIDERS: readonly [typeof PlatformOperationsProvider, typeof SkillsOperations, typeof AgentsOperations, typeof AgentTemplatesOperations, typeof PluginsOperations, typeof MarketplacesOperations, typeof RequestsOperations, typeof ConnectorsOperations, typeof ExtensionsOperations, typeof ConversationsOperations, typeof ComponentsOperations, typeof AccountsOperations, typeof OrgsOperations, typeof AdminOperations, typeof CatalogAdminOperations, typeof OrgPluginsOperations, typeof ExtensionsAdminOperations, typeof ModelsOperations, typeof InboxOperations, typeof ApprovalsOperations, typeof ChannelsOperations, typeof OrgSettingsOperations, typeof EvalsOperations, typeof BackgroundOperations, typeof PreviewersOperations, typeof DevicesOperations, typeof AgentSkillsOperations, typeof ThemesOperations, typeof SetupOperations, typeof UiOperations, typeof AdminItemsOperations, typeof SchedulesOperations];
+export declare const PLATFORM_OPERATION_PROVIDERS: readonly [typeof PlatformOperationsProvider, typeof SkillsOperations, typeof AgentsOperations, typeof AgentTemplatesOperations, typeof PluginsOperations, typeof MarketplacesOperations, typeof RequestsOperations, typeof ConnectorsOperations, typeof ExtensionsOperations, typeof ConversationsOperations, typeof ComponentsOperations, typeof AccountsOperations, typeof OrgsOperations, typeof AdminOperations, typeof CatalogAdminOperations, typeof OrgPluginsOperations, typeof ExtensionsAdminOperations, typeof ModelsOperations, typeof InboxOperations, typeof ApprovalsOperations, typeof ChannelsOperations, typeof OrgSettingsOperations, typeof EvalsOperations, typeof BackgroundOperations, typeof PreviewersOperations, typeof DevicesOperations, typeof AgentSkillsOperations, typeof ThemesOperations, typeof SetupOperations, typeof UiOperations, typeof AdminItemsOperations, typeof SchedulesOperations, typeof OutboxOperations];
 /**
  * The `Platform` tool's operations (ruling P2): one provider per domain, each registering its
  * operations into `PlatformOperations` from `onModuleInit`. It imports the domain modules, which

package/dist/platform/platform-ops.module.js

@@ -49,6 +49,7 @@ import { ModelsOperations } from "./ops/models.ops.js";
 import { OrgPluginsOperations } from "./ops/org-plugins.ops.js";
 import { OrgSettingsOperations } from "./ops/org-settings.ops.js";
 import { OrgsOperations } from "./ops/orgs.ops.js";
+import { OutboxOperations } from "./ops/outbox.ops.js";
 import { PlatformOperationsProvider } from "./ops/platform.ops.js";
 import { PluginsOperations } from "./ops/plugins.ops.js";
 import { PreviewersOperations } from "./ops/previewers.ops.js";
@@ -107,6 +108,8 @@ export const PLATFORM_OPERATION_PROVIDERS = [
     AdminItemsOperations,
     // scheduled tasks (scheduled tasks spec §10)
     SchedulesOperations,
+    // dead outbox rows (transactional outbox spec §3.4)
+    OutboxOperations,
 ];
 /**
  * The `Platform` tool's operations (ruling P2): one provider per domain, each registering its