@capybara-hq/kernel 0.1.0-rc.23 → 0.1.0-rc.25

package/dist/platform/ops/platform.ops.js

@@ -10,6 +10,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 import { Inject, Injectable } from "@nestjs/common";
 import { z } from "zod";
 import { AgentsService } from "../../agents/agents.service.js";
+import { conversationSourceOf } from "../../conversations/source.js";
 import { AccountsService } from "../../identity/accounts.js";
 import { PreferencesSchema } from "../../identity/me.schemas.js";
 import { KernelDb } from "../../infra/database/kernel-db.js";
@@ -81,12 +82,14 @@ let PlatformOperationsProvider = class PlatformOperationsProvider {
      * default-on spec §8): every tool the org offers that the definition does not turn off, builtins
      * by name, extension tools as `plugin__<plugin>__<tool>`, connector tools as
      * `mcp__<slug>__<tool>`; the ones that cannot load now are listed with the registry's reason.
+     * Listed for the source of the conversation the operation runs in (memory plugin spec §6.2).
      */
-    async toolKeys(orgId, d) {
-        const resolved = await this.tools.forAgent(orgId, {
+    async toolKeys(ctx, d) {
+        const resolved = await this.tools.forAgent(ctx.orgId, {
             disabledTools: d.disabledTools ?? [],
             subagentTools: d.subagentTools,
             subagents: d.subagents,
+            source: await conversationSourceOf(this.db.db, ctx.conversationId),
         });
         return {
             keys: [...new Set(resolved.tools.map((t) => t.key))],
@@ -142,7 +145,7 @@ let PlatformOperationsProvider = class PlatformOperationsProvider {
                     const agent = await this.agents.get(ctx.orgId, ctx.agentId, ctx.actorAccountId);
                     const d = agent.definition;
                     const [{ keys: toolKeys, unavailable }, skills] = await Promise.all([
-                        this.toolKeys(ctx.orgId, d),
+                        this.toolKeys(ctx, d),
                         this.skillNames(ctx, d),
                     ]);
                     const sandbox = toolKeys.some((k) => SANDBOX_TOOL_NAMES.includes(k));

package/dist/platform/ops/schedules.ops.js

@@ -10,7 +10,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 import { Inject, Injectable } from "@nestjs/common";
 import { z } from "zod";
 import { ScheduledTasksService, } from "../../schedules/scheduled-tasks.service.js";
-import { createInputOf, grantsOf, ScheduleChatTargetsQuery, ScheduleCreateBody, ScheduleGrantableQuery, ScheduleGrantParams, ScheduleGrantsBody, ScheduleListQuery, ScheduleParams, ScheduleRunBody, ScheduleRunsQuery, ScheduleUpdateBody, updateInputOf, } from "../../schedules/schedules.schemas.js";
+import { calendarInputOf, createInputOf, grantsOf, ScheduleCalendarQuery, ScheduleChatTargetsQuery, ScheduleCreateBody, ScheduleGrantableQuery, ScheduleGrantParams, ScheduleGrantsBody, ScheduleListQuery, ScheduleParams, ScheduleRunBody, ScheduleRunsQuery, ScheduleUpdateBody, updateInputOf, } from "../../schedules/schedules.schemas.js";
 import { defineOperation } from "../operation.js";
 import { PlatformOperations } from "../registry.js";
 import { named, orElse } from "./summary.js";
@@ -98,6 +98,45 @@ let SchedulesOperations = class SchedulesOperations {
                     return { items: items.map(row) };
                 },
             }),
+            defineOperation({
+                id: "schedules.calendar",
+                description: "Your scheduled task runs and planned occurrences between two instants (at most 43 days): recorded runs with their status, planned runs computed from each active task's schedule up to 42 days ahead, and dense tasks summarized per day. Org admins see every task with all=true. from and to are ISO instants with an offset; timeZone (IANA) sets the local days used to summarize dense tasks; taskId lists one task's items, never summarized (then at most 2 days). truncated means a limit cut the range at horizon.",
+                input: ScheduleCalendarQuery,
+                example: {
+                    from: "2026-11-09T00:00:00+08:00",
+                    to: "2026-11-16T00:00:00+08:00",
+                    timeZone: "Asia/Shanghai",
+                },
+                authz: { orgAction: "org.read" },
+                mirrors: ["GET /api/v1/orgs/:orgId/schedules/calendar"],
+                confirm: "read",
+                errors: [
+                    {
+                        code: "validation_failed",
+                        next: "Narrow the range to 43 days or less (2 days with taskId), with from before to.",
+                    },
+                    {
+                        code: "forbidden",
+                        next: "Reading every task needs the org admin role: call without all, or ask an org admin.",
+                    },
+                    {
+                        code: "schedule.not_found",
+                        next: "Check taskId with schedules.list: members see only their own tasks; an org admin finds another member's task id with schedules.list all=true, then reads it here by taskId (all is not needed).",
+                    },
+                ],
+                run: async (input, ctx) => {
+                    const answer = await this.tasks.calendar(ctx.orgId, this.actor(ctx), calendarInputOf(input));
+                    return {
+                        ...answer,
+                        tasks: answer.tasks.map((t) => ({
+                            id: t.id,
+                            name: t.name,
+                            agentId: t.agentId,
+                            status: t.status,
+                        })),
+                    };
+                },
+            }),
             defineOperation({
                 id: "schedules.chat-targets",
                 description: "The IM chats you can point a chat-mode scheduled task at: your direct chats with each active channel connection's bot (one you have messaged before), and the groups you have talked in when the channel has threads. Each gives { connectionId, chatId, chatType } for schedules.create, and the connection's agentId, which the task must use.",

package/dist/platform/platform-ops.module.d.ts

@@ -21,6 +21,7 @@ import { ModelsOperations } from "./ops/models.ops.js";
 import { OrgPluginsOperations } from "./ops/org-plugins.ops.js";
 import { OrgSettingsOperations } from "./ops/org-settings.ops.js";
 import { OrgsOperations } from "./ops/orgs.ops.js";
+import { OutboxOperations } from "./ops/outbox.ops.js";
 import { PlatformOperationsProvider } from "./ops/platform.ops.js";
 import { PluginsOperations } from "./ops/plugins.ops.js";
 import { PreviewersOperations } from "./ops/previewers.ops.js";
@@ -34,7 +35,7 @@ import { UiOperations } from "./ops/ui.ops.js";
  * One provider per domain, each taking `PlatformOperations` as its first constructor argument:
  * the parity test in `tools/checks` builds the operations from it without a Nest app.
  */
-export declare const PLATFORM_OPERATION_PROVIDERS: readonly [typeof PlatformOperationsProvider, typeof SkillsOperations, typeof AgentsOperations, typeof AgentTemplatesOperations, typeof PluginsOperations, typeof MarketplacesOperations, typeof RequestsOperations, typeof ConnectorsOperations, typeof ExtensionsOperations, typeof ConversationsOperations, typeof ComponentsOperations, typeof AccountsOperations, typeof OrgsOperations, typeof AdminOperations, typeof CatalogAdminOperations, typeof OrgPluginsOperations, typeof ExtensionsAdminOperations, typeof ModelsOperations, typeof InboxOperations, typeof ApprovalsOperations, typeof ChannelsOperations, typeof OrgSettingsOperations, typeof EvalsOperations, typeof BackgroundOperations, typeof PreviewersOperations, typeof DevicesOperations, typeof AgentSkillsOperations, typeof ThemesOperations, typeof SetupOperations, typeof UiOperations, typeof AdminItemsOperations, typeof SchedulesOperations];
+export declare const PLATFORM_OPERATION_PROVIDERS: readonly [typeof PlatformOperationsProvider, typeof SkillsOperations, typeof AgentsOperations, typeof AgentTemplatesOperations, typeof PluginsOperations, typeof MarketplacesOperations, typeof RequestsOperations, typeof ConnectorsOperations, typeof ExtensionsOperations, typeof ConversationsOperations, typeof ComponentsOperations, typeof AccountsOperations, typeof OrgsOperations, typeof AdminOperations, typeof CatalogAdminOperations, typeof OrgPluginsOperations, typeof ExtensionsAdminOperations, typeof ModelsOperations, typeof InboxOperations, typeof ApprovalsOperations, typeof ChannelsOperations, typeof OrgSettingsOperations, typeof EvalsOperations, typeof BackgroundOperations, typeof PreviewersOperations, typeof DevicesOperations, typeof AgentSkillsOperations, typeof ThemesOperations, typeof SetupOperations, typeof UiOperations, typeof AdminItemsOperations, typeof SchedulesOperations, typeof OutboxOperations];
 /**
  * The `Platform` tool's operations (ruling P2): one provider per domain, each registering its
  * operations into `PlatformOperations` from `onModuleInit`. It imports the domain modules, which

package/dist/platform/platform-ops.module.js

@@ -49,6 +49,7 @@ import { ModelsOperations } from "./ops/models.ops.js";
 import { OrgPluginsOperations } from "./ops/org-plugins.ops.js";
 import { OrgSettingsOperations } from "./ops/org-settings.ops.js";
 import { OrgsOperations } from "./ops/orgs.ops.js";
+import { OutboxOperations } from "./ops/outbox.ops.js";
 import { PlatformOperationsProvider } from "./ops/platform.ops.js";
 import { PluginsOperations } from "./ops/plugins.ops.js";
 import { PreviewersOperations } from "./ops/previewers.ops.js";
@@ -107,6 +108,8 @@ export const PLATFORM_OPERATION_PROVIDERS = [
     AdminItemsOperations,
     // scheduled tasks (scheduled tasks spec §10)
     SchedulesOperations,
+    // dead outbox rows (transactional outbox spec §3.4)
+    OutboxOperations,
 ];
 /**
  * The `Platform` tool's operations (ruling P2): one provider per domain, each registering its

package/dist/platform/route-schemas.js

@@ -2,6 +2,7 @@ import { ADMIN_ROUTES } from "../admin/admin.schemas.js";
 import { ADMIN_ITEM_ROUTES } from "../admin/admin-items.schemas.js";
 import { AUDIT_ROUTES } from "../admin/audit.schemas.js";
 import { ADMIN_EXTENSION_ROUTES } from "../admin/extensions.schemas.js";
+import { OUTBOX_DEAD_ROUTES } from "../admin/outbox-dead.schemas.js";
 import { OVERVIEW_ROUTES } from "../admin/overview.schemas.js";
 import { AGENT_ROUTES } from "../agents/agents.schemas.js";
 import { AGENT_TEMPLATE_ROUTES } from "../agents/templates.schemas.js";
@@ -85,4 +86,6 @@ export const ROUTE_SCHEMAS = [
     // the admin overview and the platform-level audit log (admin overview spec §5.2)
     ...OVERVIEW_ROUTES,
     ...AUDIT_ROUTES,
+    // dead outbox rows (transactional outbox spec §3.4)
+    ...OUTBOX_DEAD_ROUTES,
 ];

package/dist/roles/worker-role.d.ts

@@ -1,9 +1,10 @@
-import { PluginScopeSyncProcessor } from "../catalog/scope-sync.js";
+import { PluginScopeSyncProcessor } from "../catalog/scope-sync-workers.js";
 import { ChannelsProcessor } from "../channels/channels.module.js";
 import { ChannelOutbound } from "../channels/outbound.js";
 import { TitleQueue } from "../conversations/titles.js";
 import { EvalsProcessor } from "../evals/evals.module.js";
 import { EvalWorker } from "../evals/worker.js";
+import { LifecycleHooksProcessor } from "../extensions/lifecycle-hooks.js";
 import { KernelConfigService } from "../infra/config/kernel-config.service.js";
 import { LockedIntervalScheduler } from "../infra/schedule/locked-interval.js";
 import { ScheduledRuns } from "../infra/schedule/scheduled-runs.js";
@@ -15,8 +16,8 @@ import { UsageReporter } from "../runtime/usage-report.js";
 /**
  * The worker role's parts, driven by `KernelLifecycle` at fixed points of its start order and stop
  * phases (so they stay ordered after the extension load and before the extension host closes): the
- * queue consumers (runs, sub-agent runs, evals, maintenance, the plugin scope sync, channel
- * deliveries, `usage.report`, titles) and the schedulers of the `@LockedCron` / `@LockedInterval` jobs. Provided only by
+ * queue consumers (runs, sub-agent runs, evals, maintenance, the plugin scope sync, lifecycle
+ * hook deliveries, channel deliveries, `usage.report`, titles) and the schedulers of the `@LockedCron` / `@LockedInterval` jobs. Provided only by
  * `WorkerModule`, so a process without the worker role has none of them.
  */
 export declare class WorkerRole {
@@ -36,13 +37,14 @@ export declare class WorkerRole {
     private readonly evalsProcessor;
     private readonly maintenanceProcessor;
     private readonly scopeProcessor;
+    private readonly lifecycleProcessor;
     /** The startup config (the roles). */
     private readonly config;
     /** The run worker was started: the runs phase drains it. */
     private runsStarted;
     /** The eval worker was started: the runs phase drains it. */
     private evalsStarted;
-    constructor(config: KernelConfigService, log: KernelLogger, intervals: LockedIntervalScheduler, scheduledRuns: ScheduledRuns, runWorker: RunWorker, evalWorker: EvalWorker, usageReport: UsageReporter, titles: TitleQueue, channelOutbound: ChannelOutbound, runsProcessor: RunsProcessor, subagentRunsProcessor: SubagentRunsProcessor, usageProcessor: UsageReportProcessor, titleProcessor: TitleProcessor, channelsProcessor: ChannelsProcessor, evalsProcessor: EvalsProcessor, maintenanceProcessor: MaintenanceProcessor, scopeProcessor: PluginScopeSyncProcessor);
+    constructor(config: KernelConfigService, log: KernelLogger, intervals: LockedIntervalScheduler, scheduledRuns: ScheduledRuns, runWorker: RunWorker, evalWorker: EvalWorker, usageReport: UsageReporter, titles: TitleQueue, channelOutbound: ChannelOutbound, runsProcessor: RunsProcessor, subagentRunsProcessor: SubagentRunsProcessor, usageProcessor: UsageReportProcessor, titleProcessor: TitleProcessor, channelsProcessor: ChannelsProcessor, evalsProcessor: EvalsProcessor, maintenanceProcessor: MaintenanceProcessor, scopeProcessor: PluginScopeSyncProcessor, lifecycleProcessor: LifecycleHooksProcessor);
     /**
      * Starts the queue consumers (after the extension load), then opens the schedules' start gate:
      * the cron and interval timers were armed at application bootstrap, but every tick before this
@@ -60,6 +62,9 @@ export declare class WorkerRole {
     drainRuns(budgetMs: number): Promise<void> | undefined;
     /** The eval cases in progress stop (undefined: never started). */
     drainEvals(budgetMs: number): Promise<void> | undefined;
-    /** Closes the maintenance queue's worker and the plugin scope sync's (it stops between pairs). */
+    /**
+     * Closes the maintenance queue's worker, the plugin scope sync's (it stops between pairs) and
+     * the lifecycle hook deliveries' (calls in flight are aborted and retried).
+     */
     closeMaintenance(): Promise<void>;
 }

package/dist/roles/worker-role.js

@@ -8,12 +8,13 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
 import { Inject, Injectable } from "@nestjs/common";
-import { PluginScopeSyncProcessor } from "../catalog/scope-sync.js";
+import { PluginScopeSyncProcessor } from "../catalog/scope-sync-workers.js";
 import { ChannelsProcessor } from "../channels/channels.module.js";
 import { ChannelOutbound } from "../channels/outbound.js";
 import { TitleQueue } from "../conversations/titles.js";
 import { EvalsProcessor } from "../evals/evals.module.js";
 import { EvalWorker } from "../evals/worker.js";
+import { LifecycleHooksProcessor } from "../extensions/lifecycle-hooks.js";
 import { KernelConfigService } from "../infra/config/kernel-config.service.js";
 import { LockedIntervalScheduler } from "../infra/schedule/locked-interval.js";
 import { ScheduledRuns } from "../infra/schedule/scheduled-runs.js";
@@ -25,8 +26,8 @@ import { UsageReporter } from "../runtime/usage-report.js";
 /**
  * The worker role's parts, driven by `KernelLifecycle` at fixed points of its start order and stop
  * phases (so they stay ordered after the extension load and before the extension host closes): the
- * queue consumers (runs, sub-agent runs, evals, maintenance, the plugin scope sync, channel
- * deliveries, `usage.report`, titles) and the schedulers of the `@LockedCron` / `@LockedInterval` jobs. Provided only by
+ * queue consumers (runs, sub-agent runs, evals, maintenance, the plugin scope sync, lifecycle
+ * hook deliveries, channel deliveries, `usage.report`, titles) and the schedulers of the `@LockedCron` / `@LockedInterval` jobs. Provided only by
  * `WorkerModule`, so a process without the worker role has none of them.
  */
 let WorkerRole = class WorkerRole {
@@ -46,13 +47,14 @@ let WorkerRole = class WorkerRole {
     evalsProcessor;
     maintenanceProcessor;
     scopeProcessor;
+    lifecycleProcessor;
     /** The startup config (the roles). */
     config;
     /** The run worker was started: the runs phase drains it. */
     runsStarted = false;
     /** The eval worker was started: the runs phase drains it. */
     evalsStarted = false;
-    constructor(config, log, intervals, scheduledRuns, runWorker, evalWorker, usageReport, titles, channelOutbound, runsProcessor, subagentRunsProcessor, usageProcessor, titleProcessor, channelsProcessor, evalsProcessor, maintenanceProcessor, scopeProcessor) {
+    constructor(config, log, intervals, scheduledRuns, runWorker, evalWorker, usageReport, titles, channelOutbound, runsProcessor, subagentRunsProcessor, usageProcessor, titleProcessor, channelsProcessor, evalsProcessor, maintenanceProcessor, scopeProcessor, lifecycleProcessor) {
         this.log = log;
         this.intervals = intervals;
         this.scheduledRuns = scheduledRuns;
@@ -69,6 +71,7 @@ let WorkerRole = class WorkerRole {
         this.evalsProcessor = evalsProcessor;
         this.maintenanceProcessor = maintenanceProcessor;
         this.scopeProcessor = scopeProcessor;
+        this.lifecycleProcessor = lifecycleProcessor;
         this.config = config.get();
     }
     /**
@@ -96,6 +99,7 @@ let WorkerRole = class WorkerRole {
         checkpoint();
         this.maintenanceProcessor.start();
         this.scopeProcessor.start();
+        this.lifecycleProcessor.start();
         this.channelOutbound.startWorker(this.channelsProcessor.worker);
         this.usageReport.startWorker(this.usageProcessor.worker);
         this.titles.startWorker(this.titleProcessor.worker);
@@ -105,8 +109,6 @@ let WorkerRole = class WorkerRole {
         // The gate opens: from here on ticks run; the runOnStart jobs run once now, in the background
         this.scheduledRuns.open();
         this.intervals.runStartJobs();
-        // Every plugin's scope converges once per worker start (a failed or lost sync is retried)
-        this.scopeProcessor.resync();
     }
     /**
      * Closes the start gate and stops the schedulers (no new tick; the runs in progress get the stop
@@ -123,9 +125,16 @@ let WorkerRole = class WorkerRole {
     drainEvals(budgetMs) {
         return this.evalsStarted ? this.evalWorker.close(budgetMs) : undefined;
     }
-    /** Closes the maintenance queue's worker and the plugin scope sync's (it stops between pairs). */
+    /**
+     * Closes the maintenance queue's worker, the plugin scope sync's (it stops between pairs) and
+     * the lifecycle hook deliveries' (calls in flight are aborted and retried).
+     */
     async closeMaintenance() {
-        await Promise.all([this.maintenanceProcessor.worker.close(), this.scopeProcessor.close()]);
+        await Promise.all([
+            this.maintenanceProcessor.worker.close(),
+            this.scopeProcessor.close(),
+            this.lifecycleProcessor.close(),
+        ]);
     }
 };
 WorkerRole = __decorate([
@@ -146,6 +155,7 @@ WorkerRole = __decorate([
     __param(13, Inject(ChannelsProcessor)),
     __param(14, Inject(EvalsProcessor)),
     __param(15, Inject(MaintenanceProcessor)),
-    __param(16, Inject(PluginScopeSyncProcessor))
+    __param(16, Inject(PluginScopeSyncProcessor)),
+    __param(17, Inject(LifecycleHooksProcessor))
 ], WorkerRole);
 export { WorkerRole };

package/dist/roles/worker.module.js

@@ -10,7 +10,6 @@ import { BackgroundModule } from "../background/background.module.js";
 import { BackgroundTaskPollJob } from "../background/poll.job.js";
 import { CatalogModule } from "../catalog/catalog.module.js";
 import { CatalogJobs } from "../catalog/jobs.js";
-import { PlatformMigration } from "../catalog/platform-migration.js";
 import { PluginScopeWorkersModule } from "../catalog/scope-sync-workers.js";
 import { ChannelsModule, ChannelWorkersModule } from "../channels/channels.module.js";
 import { GatewayCheckJob } from "../channels/supervisor.js";
@@ -24,17 +23,19 @@ import { LegacySandboxCleanupJob } from "../devices/legacy-cleanup.job.js";
 import { EvalWorkersModule } from "../evals/evals.module.js";
 import { ExtensionsModule } from "../extensions/extensions.module.js";
 import { PluginsReconcileJob } from "../extensions/lifecycle.js";
+import { LifecycleHookWorkersModule } from "../extensions/lifecycle-hooks.js";
 import { InitialPasswordCleanupJob } from "../identity/initial-passwords.job.js";
+import { OutboxRelayModule } from "../infra/outbox/outbox-relay.module.js";
 import { KernelScheduleModule } from "../infra/schedule/schedule.module.js";
 import { DirectoryScanJob } from "../orgs/directory-sync.js";
-import { OffboardSweepJob } from "../orgs/offboarding.js";
 import { OrgLockModule } from "../orgs/org-lock.js";
 import { OrgsModule } from "../orgs/orgs.module.js";
 import { MaintenanceModule } from "../runtime/maintenance.js";
+import { RunJobsModule } from "../runtime/run-jobs.js";
+import { RunOrphanCheck } from "../runtime/run-orphan-check.job.js";
 import { RuntimeWorkersModule } from "../runtime/run-processors.js";
 import { RuntimeModule } from "../runtime/runtime.module.js";
-import { UsageReportModule, UsageSweepJob } from "../runtime/usage-report.js";
-import { WaitSweepJob } from "../runtime/waits.js";
+import { UsageReportModule } from "../runtime/usage-report.js";
 import { SandboxSweepJobs } from "../sandbox/jobs.js";
 import { SandboxModule } from "../sandbox/sandbox.module.js";
 import { ScheduledTaskFireModule } from "../schedules/fire.js";
@@ -58,6 +59,8 @@ let WorkerModule = WorkerModule_1 = class WorkerModule {
             module: WorkerModule_1,
             imports: [
                 KernelScheduleModule,
+                // the outbox relay (`@LockedInterval`): delivers what the fast path did not
+                OutboxRelayModule,
                 ClientModule,
                 // the queue consumers (their worker options come from the startup config)
                 RuntimeWorkersModule.forRoot(config),
@@ -65,8 +68,10 @@ let WorkerModule = WorkerModule_1 = class WorkerModule {
                 ChannelWorkersModule.forRoot(config),
                 MaintenanceModule,
                 PluginScopeWorkersModule,
+                LifecycleHookWorkersModule,
                 // the domains the fixed-period jobs call
                 RuntimeModule,
+                RunJobsModule,
                 UsageReportModule,
                 TitlesModule,
                 AttachmentsModule,
@@ -84,8 +89,8 @@ let WorkerModule = WorkerModule_1 = class WorkerModule {
                 ScheduledTaskFireModule,
             ],
             providers: [
-                WaitSweepJob,
-                UsageSweepJob,
+                // the one repair of a run nobody runs (transactional outbox spec §8.3)
+                RunOrphanCheck,
                 AttachmentCleanupJob,
                 StoragePurgeJob,
                 SandboxSweepJobs,
@@ -95,9 +100,7 @@ let WorkerModule = WorkerModule_1 = class WorkerModule {
                 InitialPasswordCleanupJob,
                 ClientReportsCron,
                 CatalogJobs,
-                PlatformMigration,
                 DirectoryScanJob,
-                OffboardSweepJob,
                 PluginsReconcileJob,
                 GatewayCheckJob,
                 WorkerRole,

package/dist/runtime/context/build.d.ts

@@ -237,6 +237,9 @@ export declare function summaryText(summary: string): string;
  *   summary: the latest one follows the summary) /
  *   `run_context` (`role: "system"` at its position, `runContextText`; covered by the summary: the
  *   current context follows the summary whole; a user message's sender line by `senderLines`) /
+ *   `plugin_context` (`role: "system"` at its position, `pluginContextText`, nothing for empty
+ *   text; covered by the summary: the latest non-empty one per plugin, in plugin-name order,
+ *   follows the summary after `device_paths`) /
  *   `background_task_finished`（`role: "system"`, the text of
  *   {@link renderBackgroundFinished}, placed like a user_message）/ `subagent_delivery` (likewise,
  *   the text of {@link renderSubagentDelivery})；`tool_result` 事件还原为紧随其 assistant 消息之后的一条 user 消息

package/dist/runtime/context/build.js

@@ -6,6 +6,7 @@ import { catalogText, isAlwaysLoaded } from "../../tools/builtins/tool-search.js
 import { renderSubagentDelivery } from "../subagents/render.js";
 import { devicePathsAt, devicePathsText } from "./device-paths.js";
 import { LEGACY_CATALOG_HEADER, LEGACY_SKILL_TEXTS, usesLegacyToolNames } from "./legacy-text.js";
+import { pluginContextsAfterSummary, pluginContextText } from "./plugin-context.js";
 import { currentRunContext, runContextEvents, runContextFullText, runContextText, scheduleHeader, senderLines, } from "./run-context.js";
 import { invokedSkillNames, invokedSkillsText, SKILL_TEXTS, skillsCatalogEvents, snapshotChangeText, snapshotCurrentText, snapshotSystemText, systemSkillsCatalog, } from "./skills.js";
 import { toolsChangedText } from "./tool-changes.js";
@@ -341,6 +342,9 @@ export function summaryText(summary) {
  *   summary: the latest one follows the summary) /
  *   `run_context` (`role: "system"` at its position, `runContextText`; covered by the summary: the
  *   current context follows the summary whole; a user message's sender line by `senderLines`) /
+ *   `plugin_context` (`role: "system"` at its position, `pluginContextText`, nothing for empty
+ *   text; covered by the summary: the latest non-empty one per plugin, in plugin-name order,
+ *   follows the summary after `device_paths`) /
  *   `background_task_finished`（`role: "system"`, the text of
  *   {@link renderBackgroundFinished}, placed like a user_message）/ `subagent_delivery` (likewise,
  *   the text of {@link renderSubagentDelivery})；`tool_result` 事件还原为紧随其 assistant 消息之后的一条 user 消息
@@ -561,6 +565,10 @@ export function buildModelRequest(input) {
         if (paths) {
             messages.push({ role: "system", content: devicePathsText(paths.payload) });
         }
+        // memory spec §6.1: each plugin's context in effect at the boundary follows the summary again
+        for (const text of pluginContextsAfterSummary(events, after)) {
+            messages.push({ role: "system", content: text });
+        }
         // 被摘要覆盖的变更提醒不再发送：摘要时生效的目录与 system 里的不同 → 紧随摘要补上完整的当前目录
         const covered = skillSnaps.filter((e) => e.seq <= after).at(-1);
         // (phase B: plus the current pinned skills and tool-name map when they differ from system's)
@@ -639,6 +647,13 @@ export function buildModelRequest(input) {
             case "device_paths":
                 messages.push({ role: "system", content: devicePathsText(e.payload) });
                 break;
+            // a context@1 provider's text (memory spec §6.1); empty text (nothing any more) renders nothing
+            case "plugin_context": {
+                const text = pluginContextText(e.payload);
+                if (text !== "")
+                    messages.push({ role: "system", content: text });
+                break;
+            }
             // hook_denied is not model-visible: the model sees only the denied tool call's tool_result
             // (and nothing for a denied model request), so request building skips it
             case "hook_denied":

package/dist/runtime/context/plugin-context.d.ts

@@ -0,0 +1,20 @@
+import type { ConversationEvent, EventPayload } from "../../conversations/events.js";
+/**
+ * The `plugin_context` event (memory spec §6.1): the text a `context@1` provider added to the
+ * conversation at a run start, written only when it changed. Model-visible: rendered at its
+ * position as a system message; after a summary that covers it, the latest non-empty one per
+ * plugin follows the summary again. Its text is in the log, so it needs no `DriftReason`.
+ */
+/** The payload of a `plugin_context` event. */
+export type PluginContextPayload = EventPayload<"plugin_context">;
+/** The idempotency key of a run's `plugin_context` event for `plugin`. */
+export declare const pluginContextIdemKey: (runId: string, plugin: string) => string;
+/** The system message of a `plugin_context` event (empty text renders nothing: ""). */
+export declare function pluginContextText(p: PluginContextPayload): string;
+/** The latest `plugin_context` payload of each plugin at or before `uptoSeq`. */
+export declare function latestPluginContexts(events: readonly ConversationEvent[], uptoSeq: number): Map<string, PluginContextPayload>;
+/**
+ * The system messages that follow a summary covering up to `after`: the latest non-empty
+ * `plugin_context` of each plugin, in plugin-name order.
+ */
+export declare function pluginContextsAfterSummary(events: readonly ConversationEvent[], after: number): string[];

package/dist/runtime/context/plugin-context.js

@@ -0,0 +1,30 @@
+/** The idempotency key of a run's `plugin_context` event for `plugin`. */
+export const pluginContextIdemKey = (runId, plugin) => `plugin_context:${runId}:${plugin}`;
+/** The system message of a `plugin_context` event (empty text renders nothing: ""). */
+export function pluginContextText(p) {
+    if (p.text === "")
+        return "";
+    return `<plugin-context plugin="${p.plugin}">\n${p.text}\n</plugin-context>`;
+}
+/** The latest `plugin_context` payload of each plugin at or before `uptoSeq`. */
+export function latestPluginContexts(events, uptoSeq) {
+    const latest = new Map();
+    for (const e of events) {
+        if (e.type !== "plugin_context" || e.seq > uptoSeq)
+            continue;
+        const prev = latest.get(e.payload.plugin);
+        if (!prev || e.seq > prev.seq)
+            latest.set(e.payload.plugin, { seq: e.seq, payload: e.payload });
+    }
+    return new Map([...latest].map(([plugin, v]) => [plugin, v.payload]));
+}
+/**
+ * The system messages that follow a summary covering up to `after`: the latest non-empty
+ * `plugin_context` of each plugin, in plugin-name order.
+ */
+export function pluginContextsAfterSummary(events, after) {
+    return [...latestPluginContexts(events, after)]
+        .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
+        .map(([, p]) => pluginContextText(p))
+        .filter((text) => text !== "");
+}

package/dist/runtime/langgraph-loop.js

@@ -94,7 +94,8 @@ export class LangGraphLoop {
         const config = {
             configurable: { thread_id: ctx.runId },
             // 每步最多 3 个超步（prepare、model、tools），再加 wrapUp 与余量。
-            recursionLimit: ctx.limits.maxSteps * 3 + 10,
+            // no step limit: no recursion limit either (the loop ends when the model stops calling tools)
+            recursionLimit: ctx.limits.maxSteps === undefined ? Number.MAX_SAFE_INTEGER : ctx.limits.maxSteps * 3 + 10,
             durability: "sync",
         };
         const existing = await this.saver.getTuple({ configurable: { thread_id: ctx.runId } });
@@ -125,7 +126,12 @@ export class LangGraphLoop {
             : { kind: outcome, consumedUpToSeq: final.consumedUpToSeq };
     }
     build(ctx) {
-        const timedOut = () => Date.now() >= ctx.limits.deadline;
+        // an absent limit is no limit (`runtime.maxSteps` / `runtime.maxRunSeconds` 0)
+        const { maxSteps } = ctx.limits;
+        const timedOut = () => {
+            const deadline = ctx.limits.deadline;
+            return deadline !== undefined && Date.now() >= deadline;
+        };
         // 本次运行的附件字节缓存：各步共用，运行结束即丢弃（只是优化，见 MediaCache）
         const mediaCache = new MediaCache(this.stepDeps.config.get().attachments.requestMediaBytes);
         const input = (step, absorbedUpToSeq) => ({
@@ -138,10 +144,11 @@ export class LangGraphLoop {
             signal: ctx.signal,
             sink: ctx.sink,
             absorbedUpToSeq,
-            maxSteps: ctx.limits.maxSteps,
+            ...(maxSteps !== undefined && { maxSteps }),
             mediaCache,
             agentId: ctx.agentId,
             accountId: ctx.triggerAccountId,
+            source: ctx.source,
             ...(ctx.conversationKind !== undefined && { conversationKind: ctx.conversationKind }),
             ...(ctx.parent !== undefined && { parentRunId: ctx.parent.runId, parent: ctx.parent }),
             ...(ctx.subagent === true && { subagent: true }),
@@ -215,8 +222,11 @@ export class LangGraphLoop {
                 agentVersion: ctx.agentVersion,
                 agent: ctx.agent,
                 accountId: ctx.triggerAccountId,
+                source: ctx.source,
+                ownerAccountId: ctx.ownerAccountId,
+                role: ctx.role,
                 signal: ctx.signal,
-                deadline: ctx.limits.deadline,
+                ...(ctx.limits.deadline !== undefined && { deadline: ctx.limits.deadline }),
                 ...(ctx.conversationKind !== undefined && { conversationKind: ctx.conversationKind }),
                 ...(ctx.parent !== undefined && { parent: ctx.parent }),
             });
@@ -256,7 +266,9 @@ export class LangGraphLoop {
             // (aborted / completed: a fork invocation's run ended in its first prepare, phase D)
             if (s.outcome !== null)
                 return END;
-            return s.budgetWrapUp === true || s.step > ctx.limits.maxSteps ? "wrapUp" : "model";
+            return s.budgetWrapUp === true || (maxSteps !== undefined && s.step > maxSteps)
+                ? "wrapUp"
+                : "model";
         }, ["model", "wrapUp", END])
             .addConditionalEdges("model", (s) => (s.budgetWrapUp === true ? "wrapUp" : s.outcome === null ? "tools" : END), ["tools", "wrapUp", END])
             .addEdge("tools", "prepare")

package/dist/runtime/limits.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Run limits where 0 means "no limit" (`runtime.maxSteps`, `runtime.maxRunSeconds`, a sub-agent's
+ * logged `maxSteps`): like Claude Code, a run without limits goes on until the model stops calling
+ * tools or someone stops it.
+ */
+/**
+ * The tightest of the given limits, ignoring absent and non-positive ones (0 = no limit);
+ * `undefined` when none of them limits anything.
+ */
+export declare function tightestLimit(...limits: (number | undefined)[]): number | undefined;
+/**
+ * The run's deadline (epoch ms) for `runtime.maxRunSeconds` counted from `startMs`; `undefined`
+ * when the run has no duration limit (0).
+ */
+export declare function runDeadline(startMs: number, maxRunSeconds: number): number | undefined;

package/dist/runtime/limits.js

@@ -0,0 +1,25 @@
+/**
+ * Run limits where 0 means "no limit" (`runtime.maxSteps`, `runtime.maxRunSeconds`, a sub-agent's
+ * logged `maxSteps`): like Claude Code, a run without limits goes on until the model stops calling
+ * tools or someone stops it.
+ */
+/**
+ * The tightest of the given limits, ignoring absent and non-positive ones (0 = no limit);
+ * `undefined` when none of them limits anything.
+ */
+export function tightestLimit(...limits) {
+    let out;
+    for (const l of limits) {
+        if (l === undefined || !(l > 0))
+            continue;
+        out = out === undefined ? l : Math.min(out, l);
+    }
+    return out;
+}
+/**
+ * The run's deadline (epoch ms) for `runtime.maxRunSeconds` counted from `startMs`; `undefined`
+ * when the run has no duration limit (0).
+ */
+export function runDeadline(startMs, maxRunSeconds) {
+    return maxRunSeconds > 0 ? startMs + maxRunSeconds * 1000 : undefined;
+}

package/dist/runtime/loop.d.ts

@@ -1,6 +1,8 @@
+import type { ConversationSource } from "@capybara-hq/plugin-sdk";
 import type { AgentDefinition } from "../agents/definition.js";
 import type { KernelConfig } from "../config/schema.js";
 import type { AbsorbableEvent } from "../conversations/events.js";
+import type { OrgRole } from "../orgs/roles.js";
 import type { StreamSink } from "./model-call.js";
 /** 一次运行交给 loop 的上下文（spec 4.4）。 */
 export interface LoopContext {
@@ -12,6 +14,12 @@ export interface LoopContext {
     agentId: string;
     /** 发起本次运行的人（对话发起人）：工具调用用其个人凭据，审计记为 actor。 */
     triggerAccountId: string;
+    /** The conversation's source, read once per run (memory plugin spec §6.2). */
+    source: ConversationSource;
+    /** The conversation's owner (`conversations.account_id`); plugin tool handlers receive it. */
+    ownerAccountId: string;
+    /** The trigger account's org role when the run starts; plugin tool handlers receive it. */
+    role: OrgRole;
     agent: AgentDefinition;
     agentVersion: number;
     /** 用户中止或到达 deadline 时触发：进行中的模型调用立即停下。 */
@@ -27,9 +35,13 @@ export interface LoopContext {
      * 即 seq 也大于会话的 `consumed_seq`），按 seq 升序。loop 记录吸收到的最大 seq 作为 `consumedUpToSeq`。
      */
     pendingAbsorbable(afterSeq: number): Promise<AbsorbableEvent[]>;
+    /**
+     * The run's limits; an absent one is no limit (`runtime.maxSteps` / `runtime.maxRunSeconds` 0):
+     * `maxSteps` model steps before the final wrap-up, `deadline` in epoch ms.
+     */
     limits: {
-        maxSteps: number;
-        deadline: number;
+        maxSteps?: number;
+        deadline?: number;
     };
     /**
      * Kind of the conversation: plugin hooks fire for `chat` and `subagent` (F10, P-18, sub-agents
@@ -124,6 +136,7 @@ export interface AgentLoop {
 /**
  * The wait of a step whose sub-agents still run (spec §7.2): id `sa-<runId>-<step>`, expiring after
  * the approval timeout plus one run's duration plus 10 minutes (a child may itself wait for an
- * approval); the timeout is a safety net.
+ * approval); the timeout is a safety net. Without a run duration limit (`runtime.maxRunSeconds` 0)
+ * it is the approval timeout plus 10 minutes.
  */
 export declare function subagentsWait(runId: string, step: number, config: Pick<KernelConfig, "tools" | "runtime">, now?: number): WaitingFor;

package/dist/runtime/loop.js

@@ -8,7 +8,8 @@ export const subagentsWaitId = (runId, step) => `sa-${runId}-${step}`;
 /**
  * The wait of a step whose sub-agents still run (spec §7.2): id `sa-<runId>-<step>`, expiring after
  * the approval timeout plus one run's duration plus 10 minutes (a child may itself wait for an
- * approval); the timeout is a safety net.
+ * approval); the timeout is a safety net. Without a run duration limit (`runtime.maxRunSeconds` 0)
+ * it is the approval timeout plus 10 minutes.
  */
 export function subagentsWait(runId, step, config, now = Date.now()) {
     const ms = config.tools.approvalTimeoutHours * 3_600_000 + config.runtime.maxRunSeconds * 1000 + 600_000;