@capybara-hq/kernel 0.1.0-rc.3 → 0.1.0-rc.5

package/dist/conversations/conversations.service.js

@@ -11,6 +11,9 @@ import { randomUUID } from "node:crypto";
 import { Inject, Injectable } from "@nestjs/common";
 import { sql } from "kysely";
 import { AgentLookup, visibleTo } from "../agents/agent-lookup.js";
+import { BackgroundTaskStopper } from "../background/stop.js";
+import { unbindConversation } from "../channels/threads.js";
+import { ConversationEnvironments, } from "../environments/conversation-environments.js";
 import { ApiError } from "../errors.js";
 import { KernelDb } from "../infra/database/kernel-db.js";
 import { TransactionHost } from "../infra/database/transaction-host.js";
@@ -18,13 +21,37 @@ import { Transactional } from "../infra/database/transactional.decorator.js";
 import { KERNEL_LOGGER } from "../infra/tokens.js";
 import { ProviderRegistry } from "../runtime/providers.js";
 import { RunControl as RunControlService } from "../runtime/run-control.js";
+import { rootConversationOf } from "../runtime/subagents/child.js";
 import { SkillInvoker } from "../skills/invoke.js";
 import { ConnectorContent } from "../tools/connector-content.js";
 import { ConversationAccess, parentReachable } from "./access.js";
+import { readAgentTree } from "./agent-tree.js";
 import { AttachmentsService } from "./attachments.service.js";
 import { EventLog } from "./event-log.js";
 import { userMessageIdemKey } from "./idem-keys.js";
 import { NO_SELECTION, planSelection, readSelection } from "./selection.js";
+import { conversationTree } from "./tree.js";
+/** Escapes `\`, `%` and `_` so user text is matched literally by `LIKE … ESCAPE '\'`. */
+export function escapeLike(s) {
+    return s.replace(/[\\%_]/g, (ch) => `\\${ch}`);
+}
+/**
+ * SQL for the activity of the conversation row aliased/named `ref` (a correlated subquery).
+ * A run waiting on its sub-agents (status waiting with `wait_expires_at`, set only for a
+ * `subagents` wait) is still working, so it reports `running`; only a wait for a person
+ * (approval, input) reports `waiting`.
+ */
+function activitySql(ref) {
+    const id = sql.ref(`${ref}.id`);
+    return sql `(
+    SELECT CASE
+      WHEN lr.status IN ('queued', 'running') THEN 'running'
+      WHEN lr.status = 'waiting' AND lr.wait_expires_at IS NOT NULL THEN 'running'
+      WHEN lr.status = 'waiting' THEN 'waiting' END
+    FROM capybara.runs lr WHERE lr.conversation_id = ${id}
+    ORDER BY lr.created_at DESC, lr.id DESC LIMIT 1
+  )`;
+}
 const notFound = () => new ApiError("conversation.not_found", "Conversation not found");
 export { userMessageIdemKey } from "./idem-keys.js";
 const COLUMNS = [
@@ -40,6 +67,8 @@ const COLUMNS = [
     "updated_at",
     "parent_conversation_id",
     "subagent_type",
+    "archived_at",
+    "environment_id",
 ];
 function toView(r) {
     return {
@@ -55,10 +84,18 @@ function toView(r) {
         updatedAt: r.updated_at,
         parentConversationId: r.parent_conversation_id,
         subagentType: r.subagent_type,
+        archivedAt: r.archived_at,
+        environmentId: r.environment_id,
+        activity: r.activity ?? null,
     };
 }
 /** The longest conversation title (characters, after trimming). */
 export const CONVERSATION_TITLE_MAX_CHARS = 120;
+/**
+ * How far back a `before` page of events reaches past its `limit` for the start of a turn (history
+ * paging spec §2); a longer run starts mid-run.
+ */
+export const EVENTS_TURN_EXTEND = 2000;
 /** The sums of the `usage` events matching `where` (over `conversation_events e`), one row. */
 const usageSums = (where) => sql `
   SELECT
@@ -90,6 +127,8 @@ let ConversationsService = class ConversationsService {
     content;
     attachments;
     invoker;
+    background;
+    environments;
     txHost;
     constructor(db, eventLog, agents, access, 
     /** Starts and stops the conversation's runs. */
@@ -101,7 +140,11 @@ let ConversationsService = class ConversationsService {
     /** Binds uploaded files to the conversation in the message's transaction. */
     attachments, 
     /** Renders a person's skill invocation (phase D). */
-    invoker, txHost) {
+    invoker, 
+    /** Stops a deleted conversation's background tasks. */
+    background, 
+    /** The environment a new conversation is bound to (environments spec §4.1 item 1). */
+    environments, txHost) {
         this.db = db;
         this.eventLog = eventLog;
         this.agents = agents;
@@ -112,6 +155,8 @@ let ConversationsService = class ConversationsService {
         this.content = content;
         this.attachments = attachments;
         this.invoker = invoker;
+        this.background = background;
+        this.environments = environments;
         this.txHost = txHost;
     }
     /**
@@ -123,12 +168,24 @@ let ConversationsService = class ConversationsService {
             .ensureRun(conversationId)
             .catch((err) => this.log.warn("ensureRun on conversation open failed", { conversationId, err }));
     }
-    /** 新建会话；agent 对该账号不可用 → `agent.not_found`。 */
-    async create(orgId, accountId, agentId) {
+    /**
+     * Creates an empty conversation bound to its environment (`pick`, see
+     * {@link ConversationEnvironments.forNew}); an agent the account cannot use →
+     * `agent.not_found`, an environment it may not use → `environment.not_found` /
+     * `environment.unavailable`, and nothing is created.
+     */
+    async create(orgId, accountId, agentId, pick = {}) {
         await this.agents.get(orgId, agentId, accountId);
+        const environmentId = await this.environments.forNew(orgId, accountId, pick);
         const row = await this.db
             .insertInto("conversations")
-            .values({ id: randomUUID(), org_id: orgId, agent_id: agentId, account_id: accountId })
+            .values({
+            id: randomUUID(),
+            org_id: orgId,
+            agent_id: agentId,
+            account_id: accountId,
+            environment_id: environmentId,
+        })
             .returning(COLUMNS)
             .executeTakeFirstOrThrow();
         return toView(row);
@@ -139,18 +196,22 @@ let ConversationsService = class ConversationsService {
      * message's `clientMessageId` (`create_request_id`), so a retried send returns the same
      * conversation and event with `created: false`. An agent the caller cannot use →
      * `agent.not_found` and nothing is written. Queues a run afterwards, like `postUserMessage`.
+     * `events` are every event the create wrote, in seq order from seq 1 (a `model_switched` before
+     * the message when the send switched), so a client can seed the new conversation's log whole.
      */
-    async createWithMessage(orgId, accountId, agentId, input) {
+    async createWithMessage(orgId, accountId, agentId, input, pick = {}) {
         const agent = await this.agents.get(orgId, agentId, accountId);
         const prior = await this.findCreated(orgId, accountId, agentId, input.clientMessageId);
         if (prior)
             return prior;
+        const environmentId = await this.environments.forNew(orgId, accountId, pick);
         const next = await this.planSwitch(agent.definition, NO_SELECTION, input);
         const extra = await this.resolveExtra(orgId, accountId, input);
         const invoked = await this.prepareSkill(orgId, agentId, undefined, agent.definition, input);
         const id = randomUUID();
-        const written = await this.createIn(id, orgId, accountId, agentId, input, next, extra, invoked);
-        if (!written) {
+        const all = await this.createIn({ id, orgId, accountId, agentId, environmentId }, input, next, extra, invoked);
+        const written = all?.at(-1);
+        if (!all || !written) {
             const raced = await this.findCreated(orgId, accountId, agentId, input.clientMessageId);
             if (!raced)
                 throw new ApiError("conflict", "The conversation is being created; retry");
@@ -158,18 +219,20 @@ let ConversationsService = class ConversationsService {
         }
         await this.eventLog.notify(id, written.seq);
         await this.runs.ensureRun(id);
-        return { conversation: await this.rowView(id), event: written, created: true };
+        return { conversation: await this.rowView(id), event: written, events: all, created: true };
     }
     /** The conversation row and its first message (undefined: a concurrent retry committed first). */
     // its own transaction: the caller notifies and publishes after the commit
-    async createIn(id, orgId, accountId, agentId, input, next, extra, invoked) {
+    async createIn(conv, input, next, extra, invoked) {
+        const { id, orgId, accountId } = conv;
         const row = await this.db
             .insertInto("conversations")
             .values({
             id,
             org_id: orgId,
-            agent_id: agentId,
+            agent_id: conv.agentId,
             account_id: accountId,
+            environment_id: conv.environmentId,
             create_request_id: input.clientMessageId,
         })
             .onConflict((oc) => oc
@@ -206,8 +269,10 @@ let ConversationsService = class ConversationsService {
         const event = await this.eventLog.findByIdem(row.id, userMessageIdemKey(clientMessageId));
         if (!event)
             return null;
+        // what the first send wrote: the log from its start up to the message
+        const events = (await this.eventLog.readAfter(row.id, 0, event.seq)).filter((e) => e.seq <= event.seq);
         await this.runs.ensureRun(row.id);
-        return { conversation: toView(row), event, created: false };
+        return { conversation: toView(row), event, events, created: false };
     }
     async rowView(id) {
         return toView(await this.db
@@ -231,6 +296,65 @@ let ConversationsService = class ConversationsService {
         await this.eventLog.publishChanged(conversationId, "title");
         return toView(row);
     }
+    /**
+     * Archives or unarchives a conversation (owner only, as {@link rename}). An archived
+     * conversation leaves the default lists but stays readable. Publishes `changed: archived`.
+     */
+    async setArchived(orgId, conversationId, accountId, archived) {
+        await this.writable(orgId, conversationId, accountId);
+        const row = await this.db
+            .updateTable("conversations")
+            .set({ archived_at: archived ? sql `now()` : null })
+            .where("id", "=", conversationId)
+            .returning(COLUMNS)
+            .executeTakeFirstOrThrow();
+        await this.eventLog.publishChanged(conversationId, "archived");
+        return toView(row);
+    }
+    /**
+     * Soft-deletes a conversation (owner only; a sub-agent's conversation is `conversation.read_only`):
+     * stops an active run, hides the conversation everywhere for its owner and drops its channel
+     * bindings, stops every running background task in its sandbox (its sub-agents' too; outside
+     * the delete's transaction, a task whose sandbox cannot be reached ends `lost` with
+     * `kill_pending`), then every active run of its sub-agent tree (agent map spec §10). The tasks
+     * are stopped after the conversation is marked deleted, so no finish
+     * (the stops' own, or one the poller writes meanwhile) can wake a run on it: `ensureRun` refuses a
+     * deleted conversation (the stops' finishes carry `stoppedBy: "deletion"` as well). The event
+     * log, runs and trajectory stay (super admins still see them).
+     */
+    async remove(orgId, conversationId, accountId) {
+        await this.writable(orgId, conversationId, accountId);
+        try {
+            await this.abort(orgId, conversationId, accountId);
+        }
+        catch (e) {
+            if (!(e instanceof ApiError && e.code === "run.not_active"))
+                throw e;
+        }
+        await this.markDeleted(conversationId);
+        // after the mark, so no finish or delivery of the stops below can start a run on the deleted
+        // root (`ensureRun` refuses it). The sandbox's tasks stop first, so the sub-agents' tasks end
+        // as a deletion; the tree stop then only stops a task a sub-agent started in between
+        // (`stoppedBy: "subagent_end"`, which never wakes either)
+        await this.background.stopForDeletedConversation(conversationId);
+        // the whole tree stops (agent map spec §10)
+        await this.runs.stopTree(conversationId, accountId, { includeSelf: false });
+        await this.eventLog.publishChanged(conversationId, "deleted");
+    }
+    // the publish happens after the commit, in the caller
+    async markDeleted(conversationId) {
+        await this.db
+            .updateTable("conversations")
+            .set({ deleted_at: sql `now()` })
+            .where("id", "=", conversationId)
+            .execute();
+        // Queued messages must not start a run on a deleted conversation
+        await this.db
+            .deleteFrom("conversation_queue")
+            .where("conversation_id", "=", conversationId)
+            .execute();
+        await unbindConversation(this.db.db, conversationId);
+    }
     /** 读会话：非所有者、或 agent 已对所有者不可用 → `conversation.not_found`。 */
     async get(orgId, conversationId, viewerAccountId) {
         const { kind: _kind, ...row } = await this.readable(orgId, conversationId, viewerAccountId);
@@ -255,6 +379,7 @@ let ConversationsService = class ConversationsService {
             .where("id", "=", conversationId)
             .where("org_id", "=", orgId)
             .where("account_id", "=", viewerAccountId)
+            .where("deleted_at", "is", null)
             // Hidden eval replay conversations (kind 'eval') are not reachable here (only the trajectory
             // viewer shows them); a sub-agent's conversation is, for its owner (sub-agents spec §6.1)
             .where("kind", "in", ["chat", "subagent"])
@@ -284,10 +409,13 @@ let ConversationsService = class ConversationsService {
         let q = this.db
             .selectFrom("conversations")
             .select(COLUMNS)
+            .select(activitySql("conversations").as("activity"))
             .where("org_id", "=", orgId)
             .where("account_id", "=", accountId)
             // 评测回放的隐藏对话（kind = 'eval'）不在「我的对话」里
             .where("kind", "=", "chat")
+            .where("deleted_at", "is", null)
+            .where("archived_at", opts.archived === true ? "is not" : "is", null)
             .where((eb) => eb.exists(eb
             .selectFrom("agents")
             .select(sql `1`.as("one"))
@@ -299,6 +427,12 @@ let ConversationsService = class ConversationsService {
             .limit(opts.limit);
         if (opts.agentId !== undefined)
             q = q.where("agent_id", "=", opts.agentId);
+        if (opts.q !== undefined) {
+            q = q.where(sql `conversations.title ILIKE ${`%${escapeLike(opts.q)}%`} ESCAPE '\\'`);
+        }
+        if (opts.state !== undefined) {
+            q = q.where(sql `${activitySql("conversations")} = ${opts.state}`);
+        }
         if (opts.after !== undefined) {
             const after = opts.after;
             q = q.where((eb) => sql `(${eb.ref("updated_at")}, ${eb.ref("id")}) < (
@@ -322,6 +456,11 @@ let ConversationsService = class ConversationsService {
             .where("agents.org_id", "=", orgId)
             .where("agents.deleted_at", "is", null)
             .where(visibleTo(accountId));
+        const archivedFilter = opts.archived === true ? sql `c.archived_at IS NOT NULL` : sql `c.archived_at IS NULL`;
+        const searchFilter = opts.q === undefined
+            ? sql ``
+            : sql `AND c.title ILIKE ${`%${escapeLike(opts.q)}%`} ESCAPE '\\'`;
+        const stateFilter = opts.state === undefined ? sql `` : sql `AND ${activitySql("c")} = ${opts.state}`;
         const cursor = opts.after === undefined
             ? sql ``
             : sql `WHERE (g.latest_at, g.agent_id) < (
@@ -332,6 +471,7 @@ let ConversationsService = class ConversationsService {
         SELECT c.agent_id, max(c.updated_at) AS latest_at
         FROM capybara.conversations c
         WHERE c.org_id = ${orgId} AND c.account_id = ${accountId} AND c.kind = 'chat'
+          AND c.deleted_at IS NULL AND ${archivedFilter} ${searchFilter} ${stateFilter}
           AND c.agent_id IN ${visibleAgents}
         GROUP BY c.agent_id
       ), page AS (
@@ -342,15 +482,18 @@ let ConversationsService = class ConversationsService {
       )
       SELECT page.agent_id, page.latest_at, v.definition ->> 'name' AS agent_name,
         cs.id, cs.org_id, cs.account_id, cs.title, cs.title_source, cs.selection, cs.last_seq,
-        cs.created_at, cs.updated_at, cs.parent_conversation_id, cs.subagent_type
+        cs.created_at, cs.updated_at, cs.parent_conversation_id, cs.subagent_type,
+        cs.archived_at, cs.environment_id, cs.activity
       FROM page
       JOIN capybara.agents a ON a.id = page.agent_id
       JOIN capybara.agent_versions v ON v.agent_id = a.id AND v.version = a.current_version
       CROSS JOIN LATERAL (
         SELECT c.id, c.org_id, c.account_id, c.title, c.title_source, c.selection, c.last_seq,
-          c.created_at, c.updated_at, c.parent_conversation_id, c.subagent_type
+          c.created_at, c.updated_at, c.parent_conversation_id, c.subagent_type,
+          c.archived_at, c.environment_id, ${activitySql("c")} AS activity
         FROM capybara.conversations c
         WHERE c.org_id = ${orgId} AND c.account_id = ${accountId} AND c.kind = 'chat'
+          AND c.deleted_at IS NULL AND ${archivedFilter} ${searchFilter} ${stateFilter}
           AND c.agent_id = page.agent_id
         ORDER BY c.updated_at DESC, c.id DESC
         LIMIT ${opts.perGroup + 1}
@@ -377,7 +520,14 @@ let ConversationsService = class ConversationsService {
         }
         const page = groups.slice(0, opts.limit);
         const next = groups.length > opts.limit ? (page.at(-1)?.agent.id ?? null) : null;
-        return { groups: page, next };
+        // The archived entry's count ignores `q` and `state`
+        const counted = await sql `
+      SELECT count(*) AS n FROM capybara.conversations c
+      WHERE c.org_id = ${orgId} AND c.account_id = ${accountId} AND c.kind = 'chat'
+        AND c.deleted_at IS NULL AND c.archived_at IS NOT NULL
+        AND c.agent_id IN ${visibleAgents}
+    `.execute(this.db.db);
+        return { groups: page, next, archivedCount: Number(counted.rows[0]?.n ?? 0) };
     }
     /**
      * The sub-agents of a conversation, newest first (sub-agents spec §14.3); owner only, as
@@ -459,26 +609,38 @@ let ConversationsService = class ConversationsService {
         return { subagents, next };
     }
     /**
-     * A conversation's token usage: its own `usage` events (compaction included) plus those of its
-     * sub-agents (sub-agents spec §8.3), whose logs keep their own. Owner only, as {@link get}.
+     * The agent tree of a root conversation (agent map spec §8, §9.2): the root and every sub-agent
+     * below it with status, model, time, tokens and tool calls. Owner only, as {@link isAccessible};
+     * a sub-agent's id (not a root) is `conversation.not_found` too.
+     */
+    async agentTree(orgId, conversationId, viewerAccountId) {
+        if (!(await this.isAccessible(orgId, conversationId, viewerAccountId)))
+            throw notFound();
+        const root = await readAgentTree(this.db.db, orgId, conversationId);
+        if (!root)
+            throw notFound();
+        return { root };
+    }
+    /**
+     * A conversation's token usage: its own `usage` events (compaction included) plus those of every
+     * sub-agent below it, at any depth (sub-agents spec §8.3, agent map spec §6: every descendant
+     * counts toward the root; `conversationTree`), whose logs keep their own. Owner only, as
+     * {@link get}.
      */
     async usage(orgId, conversationId, viewerAccountId) {
         if (!(await this.isAccessible(orgId, conversationId, viewerAccountId)))
             throw notFound();
-        const { rows } = await sql `${usageSums(sql `e.conversation_id IN (
-        SELECT ${conversationId}::text
-        UNION ALL
-        SELECT c.id FROM capybara.conversations c
-        WHERE c.parent_conversation_id = ${conversationId} AND c.kind = 'subagent'
-      )`)}`.execute(this.db.db);
+        const ids = (await conversationTree(this.db.db, conversationId)).map((c) => c.id);
+        const { rows } = await sql `${usageSums(sql `e.conversation_id IN (${sql.join(ids.length > 0 ? ids : [conversationId])})`)}`.execute(this.db.db);
         const row = rows[0];
         return row
             ? toUsage(row)
             : { inputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheWriteTokens: 0 };
     }
     /**
-     * The conversation whose sandbox `conversationId` works in: a sub-agent's is its parent's
-     * (sub-agents spec §10.1), any other its own. Call only after an access check.
+     * The conversation whose sandbox `conversationId` works in: a sub-agent's is its root
+     * conversation's at any depth (sub-agents spec §10.1, agent map spec §6), any other its own. Call
+     * only after an access check.
      */
     async sandboxConversationOf(orgId, conversationId) {
         const row = await this.db
@@ -487,7 +649,9 @@ let ConversationsService = class ConversationsService {
             .where("id", "=", conversationId)
             .where("org_id", "=", orgId)
             .executeTakeFirst();
-        return row?.parent_conversation_id ?? conversationId;
+        if (!row?.parent_conversation_id)
+            return conversationId;
+        return rootConversationOf(this.db.db, row.parent_conversation_id);
     }
     /** 读事件（先做 `get` 的可见性判定）；顺带不阻塞地 {@link kickRun}。 */
     async listEvents(orgId, conversationId, viewerAccountId, afterSeq, limit) {
@@ -495,6 +659,16 @@ let ConversationsService = class ConversationsService {
         this.kickRun(conversationId);
         return this.eventLog.readAfter(conversationId, afterSeq, limit);
     }
+    /**
+     * The turn-aligned page of events before `beforeSeq` (`null`: the log's last page), with how
+     * many runs started before it ({@link EventLog.readTurnPageBefore}; history paging spec §2).
+     * Visibility as {@link get}; kicks a stalled run as {@link listEvents} does.
+     */
+    async listEventsBefore(orgId, conversationId, viewerAccountId, beforeSeq, limit) {
+        await this.get(orgId, conversationId, viewerAccountId);
+        this.kickRun(conversationId);
+        return this.eventLog.readTurnPageBefore(conversationId, beforeSeq, limit, EVENTS_TURN_EXTEND);
+    }
     /**
      * 追加一条用户消息；带 `clientMessageId` 时重复提交返回同一事件。写入后调用 `ensureRun`：
      * 没有进行中的运行时投递一轮；运行中则由当前运行在步骤间隙吸收，或在它结束时再次 `ensureRun`。
@@ -544,6 +718,15 @@ let ConversationsService = class ConversationsService {
                 this.userMessage(accountId, input, extra, [], invoked),
             ]);
         }
+        // The message is written: it brings an archived conversation back into the default lists
+        if (conv.archivedAt !== null) {
+            await this.db
+                .updateTable("conversations")
+                .set({ archived_at: null })
+                .where("id", "=", conversationId)
+                .execute();
+            await this.eventLog.publishChanged(conversationId, "archived");
+        }
         await this.runs.ensureRun(conversationId);
         return event;
     }
@@ -551,7 +734,8 @@ let ConversationsService = class ConversationsService {
     // its own transaction: the caller notifies and publishes after the commit
     async postIn(orgId, conversationId, accountId, input, next, extra, invoked) {
         const blocks = await this.bindIn(orgId, conversationId, accountId, input.files ?? []);
-        return this.writeMessage(conversationId, accountId, input, next, extra, blocks, invoked);
+        const written = await this.writeMessage(conversationId, accountId, input, next, extra, blocks, invoked);
+        return written.at(-1);
     }
     /**
      * The selection a message switches to, or null when it changes nothing. A model equal to the
@@ -591,7 +775,8 @@ let ConversationsService = class ConversationsService {
     }
     /**
      * Writes the message (preceded by its `model_switched` when it switches) inside `t` and updates
-     * `conversations.selection`; returns the `user_message` event. The caller notifies after commit.
+     * `conversations.selection`; returns the events written, in seq order (the `user_message`
+     * last). The caller notifies after commit.
      */
     async writeMessage(conversationId, accountId, input, next, extra, blocks, invoked) {
         const events = [];
@@ -616,7 +801,7 @@ let ConversationsService = class ConversationsService {
                 .where("id", "=", conversationId)
                 .execute();
         }
-        return written.at(-1);
+        return written;
     }
     /**
      * Renders the message's skill invocation (phase D), or undefined when it has none. Resolved
@@ -688,9 +873,26 @@ let ConversationsService = class ConversationsService {
      * 中止会话当前的运行（queued / running / waiting）：返回 runId；没有 → `run.not_active`。
      * 等人处理的运行没有 worker：直接取消等待并写终态。其余经 Redis 广播，运行所在的任意副本都会收到；
      * 运行已是孤儿（没有任何 worker 在执行）时直接写终态。
+     *
+     * A root conversation's stop stops only its own run: its background sub-agents keep working
+     * (agent map spec §6). A sub-agent's conversation (its owner, from the agent map) stops that
+     * sub-agent with every descendant (`RunControl.stopTree`); `run.not_active` when nothing in that
+     * subtree runs, else the sub-agent's latest run id.
      */
     async abort(orgId, conversationId, accountId) {
-        await this.get(orgId, conversationId, accountId);
+        const conv = await this.get(orgId, conversationId, accountId);
+        if (conv.parentConversationId !== null) {
+            const latest = await this.db
+                .selectFrom("runs")
+                .select("id")
+                .where("conversation_id", "=", conversationId)
+                .orderBy("created_at", "desc")
+                .executeTakeFirst();
+            const n = await this.runs.stopTree(conversationId, accountId);
+            if (n === 0 || !latest)
+                throw new ApiError("run.not_active", "No active run to abort");
+            return latest.id;
+        }
         const run = await this.db
             .selectFrom("runs")
             .select(["id", "status"])
@@ -718,6 +920,9 @@ let ConversationsService = class ConversationsService {
 __decorate([
     Transactional({ propagation: "requires_new" })
 ], ConversationsService.prototype, "createIn", null);
+__decorate([
+    Transactional()
+], ConversationsService.prototype, "markDeleted", null);
 __decorate([
     Transactional({ propagation: "requires_new" })
 ], ConversationsService.prototype, "postIn", null);
@@ -739,6 +944,8 @@ ConversationsService = __decorate([
     __param(7, Inject(ConnectorContent)),
     __param(8, Inject(AttachmentsService)),
     __param(9, Inject(SkillInvoker)),
-    __param(10, Inject(TransactionHost))
+    __param(10, Inject(BackgroundTaskStopper)),
+    __param(11, Inject(ConversationEnvironments)),
+    __param(12, Inject(TransactionHost))
 ], ConversationsService);
 export { ConversationsService };

package/dist/conversations/environment-status.d.ts

@@ -0,0 +1,24 @@
+import { EnvironmentsService, type EnvironmentView } from "../environments/environments.service.js";
+import { KernelDb } from "../infra/database/kernel-db.js";
+import { ConversationAccess } from "./access.js";
+import { ConversationsService } from "./conversations.service.js";
+/**
+ * The environment a conversation works in, for its page (environments spec §9: shown read only):
+ * a conversation the viewer may not see → `conversation.not_found`. A sub-agent shows its root
+ * conversation's environment. Null while the conversation is unbound, or when its environment is
+ * deleted or no longer its owner's (its sandbox tools then fail).
+ */
+export declare class ConversationEnvironmentStatus {
+    /** Who may see the conversation (the rule of its event stream). */
+    private readonly access;
+    /** The conversation whose environment it works in: a sub-agent's root, else itself. */
+    private readonly conversations;
+    private readonly environments;
+    private readonly db;
+    constructor(
+    /** Who may see the conversation (the rule of its event stream). */
+    access: Pick<ConversationAccess, "isAccessible">, 
+    /** The conversation whose environment it works in: a sub-agent's root, else itself. */
+    conversations: Pick<ConversationsService, "sandboxConversationOf">, environments: Pick<EnvironmentsService, "get">, db: KernelDb);
+    get(orgId: string, conversationId: string, viewerAccountId: string): Promise<EnvironmentView | null>;
+}

package/dist/conversations/environment-status.js

@@ -0,0 +1,71 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Inject, Injectable } from "@nestjs/common";
+import { EnvironmentsService } from "../environments/environments.service.js";
+import { ApiError } from "../errors.js";
+import { KernelDb } from "../infra/database/kernel-db.js";
+import { UUID_RE } from "../ui/registry.js";
+import { ConversationAccess } from "./access.js";
+import { ConversationsService } from "./conversations.service.js";
+/**
+ * The environment a conversation works in, for its page (environments spec §9: shown read only):
+ * a conversation the viewer may not see → `conversation.not_found`. A sub-agent shows its root
+ * conversation's environment. Null while the conversation is unbound, or when its environment is
+ * deleted or no longer its owner's (its sandbox tools then fail).
+ */
+let ConversationEnvironmentStatus = class ConversationEnvironmentStatus {
+    access;
+    conversations;
+    environments;
+    db;
+    constructor(
+    /** Who may see the conversation (the rule of its event stream). */
+    access, 
+    /** The conversation whose environment it works in: a sub-agent's root, else itself. */
+    conversations, environments, db) {
+        this.access = access;
+        this.conversations = conversations;
+        this.environments = environments;
+        this.db = db;
+    }
+    async get(orgId, conversationId, viewerAccountId) {
+        if (!UUID_RE.test(conversationId) ||
+            !(await this.access.isAccessible(orgId, conversationId, viewerAccountId))) {
+            throw new ApiError("conversation.not_found", "Conversation not found");
+        }
+        // a sub-agent works in its root conversation's environment (at every depth)
+        const root = await this.conversations.sandboxConversationOf(orgId, conversationId);
+        const conv = await this.db
+            .selectFrom("conversations")
+            .select(["account_id", "environment_id"])
+            .where("id", "=", root)
+            .where("org_id", "=", orgId)
+            .executeTakeFirst();
+        if (!conv?.environment_id)
+            return null;
+        try {
+            // the environment as its owner sees it (only the owner may use a personal environment)
+            return await this.environments.get(orgId, conv.account_id, conv.environment_id);
+        }
+        catch (e) {
+            if (e instanceof ApiError && e.code === "environment.not_found")
+                return null;
+            throw e;
+        }
+    }
+};
+ConversationEnvironmentStatus = __decorate([
+    Injectable(),
+    __param(0, Inject(ConversationAccess)),
+    __param(1, Inject(ConversationsService)),
+    __param(2, Inject(EnvironmentsService)),
+    __param(3, Inject(KernelDb))
+], ConversationEnvironmentStatus);
+export { ConversationEnvironmentStatus };