@capybara-hq/kernel 0.1.0-rc.5 → 0.1.0-rc.7

package/bootstrap.json

@@ -3,7 +3,7 @@
   "schemaVersion": 1,
   "marketplace": {
     "url": "https://github.com/capybara-hq/plugins.git",
-    "commit": "77f0ac0c0bbb1e7e3ea66ae3bd7931f0ed06b777"
+    "commit": "0bd7fafa0572066198d64b5fde159f758123ef62"
   },
   "plugins": [
     {
@@ -38,6 +38,30 @@
       "integrity": "sha512-F714dJ023p8XcrPXYNZyjiow5BXza5KTdlJV4Uw8spgulgjPSF44n0SVMEA1iyYCwOFrr58NSvw51AqmOYg6Fw==",
       "required": false
     },
+    {
+      "name": "deepseek",
+      "source": "npm",
+      "npm": "@capybara-hq/plugin-deepseek",
+      "version": "0.1.0-rc.0",
+      "integrity": "sha512-/3+qpvDChcPpW6mL7EdMfdi6X56WDau2k725rXT79fvKI1P7q8tD5e7VVAn7eOKJuiNRx8UiH/704SzbmcVR6A==",
+      "required": false
+    },
+    {
+      "name": "bailian",
+      "source": "npm",
+      "npm": "@capybara-hq/plugin-bailian",
+      "version": "0.1.0-rc.0",
+      "integrity": "sha512-ggAM/56wS7bEEwM/ZYQOQeLtH8QvWAFZyd2BPgSBvkOECZXwggavY6357SoPEmLevyNQH6PxR42uwxF8EuvJNg==",
+      "required": false
+    },
+    {
+      "name": "ark",
+      "source": "npm",
+      "npm": "@capybara-hq/plugin-ark",
+      "version": "0.1.0-rc.0",
+      "integrity": "sha512-LqLgUj1MjtzBX9t6NR9YMEVOHSGTobQjtbbU1c0ifcKxEpxFg/2LqK12wyhV6eSaZJQGj9TPhkUfh14Y49PXwg==",
+      "required": false
+    },
     {
       "name": "connector-mcp",
       "source": "npm",
@@ -66,8 +90,8 @@
       "name": "sandbox-docker",
       "source": "npm",
       "npm": "@capybara-hq/plugin-sandbox-docker",
-      "version": "0.1.0-rc.2",
-      "integrity": "sha512-f5BiecQQvRLI8NaGHUy3l+nNvcCLXTQnHQ8od93PAbBpg6q0EkAvZ7R/M4yZ7dK7PeIan61VB+QfwlnpLLw27Q==",
+      "version": "0.1.0-rc.5",
+      "integrity": "sha512-Q+4s3lG/kii5cHaIfBStCqvK2Z1IVpjeAWUN3cuxIwhQHc2HNTYSpKO5R9JfC8J3ajC8KEO+LkED4iI9oCCcGg==",
       "required": false
     },
     {

package/dist/admin/admin.controller.d.ts

@@ -1,5 +1,5 @@
 import type { LocalizedName, Logger } from "@capybara-hq/plugin-sdk";
-import { z } from "zod";
+import type { z } from "zod";
 import { CatalogRequestsService } from "../catalog/requests.service.js";
 import { ExtensionAdmin } from "../extensions/admin-view.js";
 import { ExtensionDisplayNames } from "../extensions/display-name.js";
@@ -8,11 +8,14 @@ import { type Principal } from "../identity/principal.js";
 import { SessionService } from "../identity/sessions.js";
 import { type DeploymentSettings, SettingsService } from "../identity/settings.js";
 import { KernelConfigService } from "../infra/config/kernel-config.service.js";
+import { type ModelDisabledPatch, type ModelProviderParams } from "../models/enablement.controller.js";
+import { type ModelDisableResult, ModelEnablement } from "../models/enablement.js";
 import { type ModelPrice, type ModelPricePut, PricesService } from "../models/prices.js";
 import { ModelPurposesService, type PurposeListing, type PurposePut } from "../models/purposes.js";
 import { type Org, OrgsService } from "../orgs/orgs.service.js";
 import { ProviderRegistry, type ProviderStatus } from "../runtime/providers.js";
-import type { SubagentLimits } from "../runtime/subagents/limits.js";
+import { AccountListQuery, AccountParams, CreateAccountBody, DeploymentSettingsBody, PurposeParams, UpdateAccountBody } from "./admin.schemas.js";
+import { type LimitDefaults } from "./limit-defaults.js";
 /** 后台概览（`GET /api/v1/admin/overview`）的计数。 */
 export interface AdminOverview {
     /**
@@ -25,69 +28,6 @@ export interface AdminOverview {
     orgs: number;
     accounts: number;
 }
-/**
- * The deployment's defaults of the per-org limits (with `GET /api/v1/admin/orgs`): what an
- * organization without an override gets, from the live config. `subagents.maxDispatchesPerRun` and
- * `maxTokensPerRun` of 0 mean no limit.
- */
-export interface LimitDefaults {
-    /** `runtime.orgConcurrency`. */
-    runConcurrency: number;
-    /** `sandbox.limits.cpu` / `memoryMb`. */
-    sandbox: {
-        cpu: number;
-        memoryMb: number;
-    };
-    /** `subagents.*`. */
-    subagents: SubagentLimits;
-}
-declare const ListQuerySchema: z.ZodObject<{
-    after: z.ZodOptional<z.ZodString>;
-    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
-}, z.core.$strip>;
-declare const CreateAccountSchema: z.ZodObject<{
-    login: z.ZodString;
-    password: z.ZodString;
-    displayName: z.ZodString;
-    email: z.ZodOptional<z.ZodEmail>;
-    superAdmin: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strip>;
-declare const UpdateAccountSchema: z.ZodObject<{
-    displayName: z.ZodOptional<z.ZodString>;
-    status: z.ZodOptional<z.ZodEnum<{
-        active: "active";
-        disabled: "disabled";
-    }>>;
-    isSuperAdmin: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strip>;
-/** 至少给出一个键；`runConcurrencyOverrides` 按组织合并，值为 null 删除该组织的覆盖。 */
-declare const SettingsSchema: z.ZodObject<{
-    orgCreation: z.ZodOptional<z.ZodEnum<{
-        anyone: "anyone";
-        super_admin: "super_admin";
-    }>>;
-    runConcurrencyOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodNumber>>>;
-    priceCurrency: z.ZodOptional<z.ZodString>;
-    sandboxLimitOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodObject<{
-        cpu: z.ZodOptional<z.ZodNumber>;
-        memoryMb: z.ZodOptional<z.ZodNumber>;
-    }, z.core.$strict>>>>;
-    subagentLimitOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodObject<{
-        maxDepth: z.ZodOptional<z.ZodNumber>;
-        maxConcurrentPerConversation: z.ZodOptional<z.ZodNumber>;
-        maxDispatchesPerRun: z.ZodOptional<z.ZodNumber>;
-        maxTokensPerRun: z.ZodOptional<z.ZodNumber>;
-    }, z.core.$strict>>>>;
-    customConnectors: z.ZodOptional<z.ZodEnum<{
-        allow: "allow";
-        deny: "deny";
-    }>>;
-    customSkills: z.ZodOptional<z.ZodEnum<{
-        allow: "allow";
-        deny: "deny";
-    }>>;
-    orgMarketplaceBrowse: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strict>;
 /**
  * 超级管理员端点（`/api/v1/admin/*`）：只接受超级管理员的 Web 会话或个人令牌；
  * 服务令牌一律 `forbidden`（未标 `@AllowService`）。
@@ -104,23 +44,24 @@ export declare class AdminController {
     private readonly registry;
     private readonly catalogRequests;
     private readonly displayNames;
+    private readonly enablement;
     private readonly config;
-    constructor(accounts: AccountsService, sessions: SessionService, log: Logger, orgs: OrgsService, settings: SettingsService, prices: PricesService, purposes: ModelPurposesService, plugins: ExtensionAdmin, registry: ProviderRegistry, catalogRequests: CatalogRequestsService, displayNames: ExtensionDisplayNames, config: KernelConfigService);
+    constructor(accounts: AccountsService, sessions: SessionService, log: Logger, orgs: OrgsService, settings: SettingsService, prices: PricesService, purposes: ModelPurposesService, plugins: ExtensionAdmin, registry: ProviderRegistry, catalogRequests: CatalogRequestsService, displayNames: ExtensionDisplayNames, enablement: ModelEnablement, config: KernelConfigService);
     /** 后台概览的四个数字（只读计数，不含任何对话内容）。 */
     overview(): Promise<AdminOverview>;
     /**
      * 全部账号，按 id 升序分页：`next` 为下一页的游标（作为 `after` 传回），没有更多时为 null。
      * 多取一条判断是否还有下一页。
      */
-    listAccounts(q: z.infer<typeof ListQuerySchema>): Promise<{
+    listAccounts(q: z.infer<typeof AccountListQuery>): Promise<{
         accounts: Account[];
         next: string | null;
     }>;
-    createAccount(principal: Principal, body: z.infer<typeof CreateAccountSchema>): Promise<{
+    createAccount(principal: Principal, body: z.infer<typeof CreateAccountBody>): Promise<{
         account: Account;
     }>;
     /** 改显示名 / 状态 / 超级管理员；停用时同时吊销该账号的全部会话与个人令牌。 */
-    updateAccount(principal: Principal, accountId: string, body: z.infer<typeof UpdateAccountSchema>): Promise<{
+    updateAccount(principal: Principal, { accountId }: z.infer<typeof AccountParams>, body: z.infer<typeof UpdateAccountBody>): Promise<{
         account: Account;
     }>;
     /**
@@ -134,12 +75,12 @@ export declare class AdminController {
         limitDefaults: LimitDefaults;
     }>;
     getSettings(): Promise<DeploymentSettings>;
-    private limitDefaults;
-    putSettings(principal: Principal, body: z.infer<typeof SettingsSchema>): Promise<DeploymentSettings>;
+    putSettings(principal: Principal, body: z.infer<typeof DeploymentSettingsBody>): Promise<DeploymentSettings>;
     /**
      * 模型供应商与模型（后台「模型」页）：每个供应商带状态，列模型失败的标 `error`，不影响其他供应商；
      * 一并返回价格表与币种（改价仍走 `PUT /admin/model-prices`）。Each provider carries its extension's
-     * display name (null when it has none).
+     * display name (null when it has none); every model of the platform's list carries `disabled`
+     * (the platform's disabled list, spec B §5.3).
      */
     getModels(): Promise<{
         providers: (ProviderStatus & {
@@ -148,6 +89,13 @@ export declare class AdminController {
         prices: ModelPrice[];
         currency: string;
     }>;
+    /**
+     * The platform's disabled models of one provider (spec B §5.3): disables and enables the ids the
+     * body names (others keep their state); such a model is invisible to every org. The response
+     * lists the agents and purposes, across orgs, that now point at a newly disabled model (the
+     * disable is not refused for them).
+     */
+    patchModelsDisabled(principal: Principal, params: z.infer<typeof ModelProviderParams>, body: z.infer<typeof ModelDisabledPatch>): Promise<ModelDisableResult>;
     /** 模型价格表（每百万 token）与币种（部署设置 `priceCurrency`）。 */
     getModelPrices(): Promise<{
         prices: ModelPrice[];
@@ -163,8 +111,7 @@ export declare class AdminController {
         purposes: PurposeListing[];
     }>;
     /** 设置一个用途的部署默认，或 `target: null` 清除。 */
-    putModelPurpose(principal: Principal, purpose: string, body: PurposePut): Promise<{
+    putModelPurpose(principal: Principal, { purpose }: z.infer<typeof PurposeParams>, body: PurposePut): Promise<{
         purpose: PurposeListing;
     }>;
 }
-export {};

package/dist/admin/admin.controller.js

@@ -7,53 +7,39 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Controller, Get, HttpCode, Inject, Param, Patch, Post, Put } from "@nestjs/common";
-import { z } from "zod";
+import { Controller, Get, HttpCode, Inject, Patch, Post, Put } from "@nestjs/common";
 import { CatalogRequestsService } from "../catalog/requests.service.js";
 import { ExtensionAdmin } from "../extensions/admin-view.js";
 import { ExtensionDisplayNames } from "../extensions/display-name.js";
 import { extensionNeedsAction } from "../extensions/permission-view.js";
 import { AccountsService } from "../identity/accounts.js";
-import { MAX_PASSWORD_LENGTH } from "../identity/login.js";
 import { CurrentPrincipal, patTokenId, requireUser, SuperAdmin, } from "../identity/principal.js";
 import { SessionService } from "../identity/sessions.js";
-import { DEPLOYMENT_SETTINGS_PATCH, SettingsService, } from "../identity/settings.js";
+import { SettingsService } from "../identity/settings.js";
 import { KernelConfigService } from "../infra/config/kernel-config.service.js";
 import { KERNEL_LOGGER } from "../infra/tokens.js";
 import { createZodDto } from "../infra/validation/create-zod-dto.js";
-import { ZBody, ZQuery } from "../infra/validation/zod-params.js";
+import { ZBody, ZParam, ZQuery } from "../infra/validation/zod-params.js";
+import { ModelDisabledPatchDto, ModelProviderParamsDto, } from "../models/enablement.controller.js";
+import { ModelEnablement } from "../models/enablement.js";
 import { MODEL_PRICE_PUT, PricesService, } from "../models/prices.js";
 import { purposeTargetOf } from "../models/purposes.controller.js";
 import { ModelPurposesService, PurposePutDto, withDeclaredByNames, } from "../models/purposes.js";
 import { OrgsService } from "../orgs/orgs.service.js";
 import { ProviderRegistry } from "../runtime/providers.js";
-const ListQuerySchema = z.object({
-    after: z.string().min(1).optional(),
-    limit: z.coerce.number().int().min(1).max(200).default(50),
-});
-class AccountListQuery extends createZodDto(ListQuerySchema, "AccountListQuery") {
+import { AccountListQuery, AccountParams, CreateAccountBody, DeploymentSettingsBody, PurposeParams, UpdateAccountBody, } from "./admin.schemas.js";
+import { limitDefaults } from "./limit-defaults.js";
+class AccountListQueryDto extends createZodDto(AccountListQuery, "AccountListQuery") {
 }
-const CreateAccountSchema = z.object({
-    login: z.string().min(1).max(64),
-    password: z.string().min(1).max(MAX_PASSWORD_LENGTH),
-    displayName: z.string().trim().min(1).max(100),
-    email: z.email().max(254).optional(),
-    superAdmin: z.boolean().optional(),
-});
-class CreateAccountBody extends createZodDto(CreateAccountSchema, "CreateAccountBody") {
+class CreateAccountBodyDto extends createZodDto(CreateAccountBody, "CreateAccountBody") {
 }
-const UpdateAccountSchema = z.object({
-    displayName: z.string().trim().min(1).max(100).optional(),
-    status: z.enum(["active", "disabled"]).optional(),
-    isSuperAdmin: z.boolean().optional(),
-});
-class UpdateAccountBody extends createZodDto(UpdateAccountSchema, "UpdateAccountBody") {
+class UpdateAccountBodyDto extends createZodDto(UpdateAccountBody, "UpdateAccountBody") {
 }
-/** 至少给出一个键；`runConcurrencyOverrides` 按组织合并，值为 null 删除该组织的覆盖。 */
-const SettingsSchema = DEPLOYMENT_SETTINGS_PATCH.refine((b) => Object.keys(b).length > 0, {
-    message: "at least one setting is required",
-});
-class DeploymentSettingsBody extends createZodDto(SettingsSchema, "DeploymentSettingsPatch") {
+class AccountParamsDto extends createZodDto(AccountParams, "AccountParams") {
+}
+class PurposeParamsDto extends createZodDto(PurposeParams, "PurposeParams") {
+}
+class DeploymentSettingsBodyDto extends createZodDto(DeploymentSettingsBody, "DeploymentSettingsPatch") {
 }
 // a union schema: a DTO value rather than a class (a class cannot extend a union instance type)
 const ModelPriceBody = createZodDto(MODEL_PRICE_PUT, "ModelPricePut");
@@ -73,8 +59,9 @@ let AdminController = class AdminController {
     registry;
     catalogRequests;
     displayNames;
+    enablement;
     config;
-    constructor(accounts, sessions, log, orgs, settings, prices, purposes, plugins, registry, catalogRequests, displayNames, config) {
+    constructor(accounts, sessions, log, orgs, settings, prices, purposes, plugins, registry, catalogRequests, displayNames, enablement, config) {
         this.accounts = accounts;
         this.sessions = sessions;
         this.log = log;
@@ -86,6 +73,7 @@ let AdminController = class AdminController {
         this.registry = registry;
         this.catalogRequests = catalogRequests;
         this.displayNames = displayNames;
+        this.enablement = enablement;
         this.config = config;
     }
     /** 后台概览的四个数字（只读计数，不含任何对话内容）。 */
@@ -128,7 +116,7 @@ let AdminController = class AdminController {
         return { account };
     }
     /** 改显示名 / 状态 / 超级管理员；停用时同时吊销该账号的全部会话与个人令牌。 */
-    async updateAccount(principal, accountId, body) {
+    async updateAccount(principal, { accountId }, body) {
         const actor = requireUser(principal);
         const patch = {
             ...(body.displayName !== undefined && { displayName: body.displayName }),
@@ -154,20 +142,11 @@ let AdminController = class AdminController {
      * can be given its own value of (the org limits dialog shows them for the values left empty).
      */
     async listOrgs() {
-        return { orgs: await this.orgs.listAll(), limitDefaults: this.limitDefaults() };
+        return { orgs: await this.orgs.listAll(), limitDefaults: limitDefaults(this.config) };
     }
     async getSettings() {
         return this.settings.get();
     }
-    limitDefaults() {
-        const cfg = this.config.get();
-        const { maxDepth, maxConcurrentPerConversation, maxDispatchesPerRun, maxTokensPerRun } = cfg.subagents;
-        return {
-            runConcurrency: cfg.runtime.orgConcurrency,
-            sandbox: { cpu: cfg.sandbox.limits.cpu, memoryMb: cfg.sandbox.limits.memoryMb },
-            subagents: { maxDepth, maxConcurrentPerConversation, maxDispatchesPerRun, maxTokensPerRun },
-        };
-    }
     async putSettings(principal, body) {
         const actor = requireUser(principal);
         return this.settings.update(body, actor.account.id, patTokenId(actor));
@@ -175,7 +154,8 @@ let AdminController = class AdminController {
     /**
      * 模型供应商与模型（后台「模型」页）：每个供应商带状态，列模型失败的标 `error`，不影响其他供应商；
      * 一并返回价格表与币种（改价仍走 `PUT /admin/model-prices`）。Each provider carries its extension's
-     * display name (null when it has none).
+     * display name (null when it has none); every model of the platform's list carries `disabled`
+     * (the platform's disabled list, spec B §5.3).
      */
     async getModels() {
         const [providers, prices] = await Promise.all([
@@ -188,6 +168,19 @@ let AdminController = class AdminController {
             ...prices,
         };
     }
+    /**
+     * The platform's disabled models of one provider (spec B §5.3): disables and enables the ids the
+     * body names (others keep their state); such a model is invisible to every org. The response
+     * lists the agents and purposes, across orgs, that now point at a newly disabled model (the
+     * disable is not refused for them).
+     */
+    async patchModelsDisabled(principal, params, body) {
+        const actor = requireUser(principal);
+        return this.enablement.setPlatform(params.provider, body, {
+            accountId: actor.account.id,
+            tokenId: patTokenId(actor),
+        });
+    }
     /** 模型价格表（每百万 token）与币种（部署设置 `priceCurrency`）。 */
     async getModelPrices() {
         const [prices, settings] = await Promise.all([this.prices.list(), this.settings.get()]);
@@ -204,7 +197,7 @@ let AdminController = class AdminController {
         return { purposes: await withDeclaredByNames(await this.purposes.list(), this.displayNames) };
     }
     /** 设置一个用途的部署默认，或 `target: null` 清除。 */
-    async putModelPurpose(principal, purpose, body) {
+    async putModelPurpose(principal, { purpose }, body) {
         const actor = requireUser(principal);
         const view = await this.purposes.setDefault(purpose, purposeTargetOf(body), actor.account.id, patTokenId(actor));
         const [listing] = await withDeclaredByNames([view], this.displayNames);
@@ -216,19 +209,19 @@ __decorate([
 ], AdminController.prototype, "overview", null);
 __decorate([
     Get("accounts"),
-    __param(0, ZQuery(AccountListQuery))
+    __param(0, ZQuery(AccountListQueryDto))
 ], AdminController.prototype, "listAccounts", null);
 __decorate([
     Post("accounts"),
     HttpCode(201),
     __param(0, CurrentPrincipal()),
-    __param(1, ZBody(CreateAccountBody))
+    __param(1, ZBody(CreateAccountBodyDto))
 ], AdminController.prototype, "createAccount", null);
 __decorate([
     Patch("accounts/:accountId"),
     __param(0, CurrentPrincipal()),
-    __param(1, Param("accountId")),
-    __param(2, ZBody(UpdateAccountBody))
+    __param(1, ZParam(AccountParamsDto)),
+    __param(2, ZBody(UpdateAccountBodyDto))
 ], AdminController.prototype, "updateAccount", null);
 __decorate([
     Get("orgs")
@@ -239,11 +232,17 @@ __decorate([
 __decorate([
     Put("settings"),
     __param(0, CurrentPrincipal()),
-    __param(1, ZBody(DeploymentSettingsBody))
+    __param(1, ZBody(DeploymentSettingsBodyDto))
 ], AdminController.prototype, "putSettings", null);
 __decorate([
     Get("models")
 ], AdminController.prototype, "getModels", null);
+__decorate([
+    Patch("models/:provider/disabled"),
+    __param(0, CurrentPrincipal()),
+    __param(1, ZParam(ModelProviderParamsDto)),
+    __param(2, ZBody(ModelDisabledPatchDto))
+], AdminController.prototype, "patchModelsDisabled", null);
 __decorate([
     Get("model-prices")
 ], AdminController.prototype, "getModelPrices", null);
@@ -258,7 +257,7 @@ __decorate([
 __decorate([
     Put("model-purposes/:purpose"),
     __param(0, CurrentPrincipal()),
-    __param(1, Param("purpose")),
+    __param(1, ZParam(PurposeParamsDto)),
     __param(2, ZBody(PurposePutDto))
 ], AdminController.prototype, "putModelPurpose", null);
 AdminController = __decorate([
@@ -275,6 +274,7 @@ AdminController = __decorate([
     __param(8, Inject(ProviderRegistry)),
     __param(9, Inject(CatalogRequestsService)),
     __param(10, Inject(ExtensionDisplayNames)),
-    __param(11, Inject(KernelConfigService))
+    __param(11, Inject(ModelEnablement)),
+    __param(12, Inject(KernelConfigService))
 ], AdminController);
 export { AdminController };

package/dist/admin/admin.schemas.d.ts

@@ -0,0 +1,57 @@
+import { z } from "zod";
+import type { RouteSchemas } from "../platform/route-schemas.js";
+/** `GET /api/v1/admin/accounts`: keyset paging by account id. */
+export declare const AccountListQuery: z.ZodObject<{
+    after: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strip>;
+export declare const CreateAccountBody: z.ZodObject<{
+    login: z.ZodString;
+    password: z.ZodString;
+    displayName: z.ZodString;
+    email: z.ZodOptional<z.ZodEmail>;
+    superAdmin: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export declare const AccountParams: z.ZodObject<{
+    accountId: z.ZodString;
+}, z.core.$strip>;
+export declare const UpdateAccountBody: z.ZodObject<{
+    displayName: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        active: "active";
+        disabled: "disabled";
+    }>>;
+    isSuperAdmin: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+/** At least one key; `runConcurrencyOverrides` merges by org, a null value drops that org's. */
+export declare const DeploymentSettingsBody: z.ZodObject<{
+    orgCreation: z.ZodOptional<z.ZodEnum<{
+        anyone: "anyone";
+        super_admin: "super_admin";
+    }>>;
+    runConcurrencyOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodNumber>>>;
+    priceCurrency: z.ZodOptional<z.ZodString>;
+    sandboxLimitOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodObject<{
+        cpu: z.ZodOptional<z.ZodNumber>;
+        memoryMb: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>>>;
+    subagentLimitOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodObject<{
+        maxDepth: z.ZodOptional<z.ZodNumber>;
+        maxConcurrentPerConversation: z.ZodOptional<z.ZodNumber>;
+        maxDispatchesPerRun: z.ZodOptional<z.ZodNumber>;
+        maxTokensPerRun: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>>>;
+    customConnectors: z.ZodOptional<z.ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+    }>>;
+    customSkills: z.ZodOptional<z.ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+    }>>;
+    orgMarketplaceBrowse: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const PurposeParams: z.ZodObject<{
+    purpose: z.ZodString;
+}, z.core.$strip>;
+export declare const ADMIN_ROUTES: readonly RouteSchemas[];

package/dist/admin/admin.schemas.js

@@ -0,0 +1,50 @@
+import { z } from "zod";
+import { MAX_PASSWORD_LENGTH } from "../identity/login.js";
+import { DEPLOYMENT_SETTINGS_PATCH } from "../identity/settings.js";
+import { ModelDisabledPatch, ModelProviderParams } from "../models/enablement.controller.js";
+import { MODEL_PRICE_PUT } from "../models/prices.js";
+import { PURPOSE_PUT } from "../models/purposes.js";
+/** `GET /api/v1/admin/accounts`: keyset paging by account id. */
+export const AccountListQuery = z.object({
+    after: z.string().min(1).optional(),
+    limit: z.coerce.number().int().min(1).max(200).default(50),
+});
+export const CreateAccountBody = z.object({
+    login: z.string().min(1).max(64),
+    password: z.string().min(1).max(MAX_PASSWORD_LENGTH),
+    displayName: z.string().trim().min(1).max(100),
+    email: z.email().max(254).optional(),
+    superAdmin: z.boolean().optional(),
+});
+export const AccountParams = z.object({ accountId: z.string().min(1).max(100) });
+export const UpdateAccountBody = z.object({
+    displayName: z.string().trim().min(1).max(100).optional(),
+    status: z.enum(["active", "disabled"]).optional(),
+    isSuperAdmin: z.boolean().optional(),
+});
+/** At least one key; `runConcurrencyOverrides` merges by org, a null value drops that org's. */
+export const DeploymentSettingsBody = DEPLOYMENT_SETTINGS_PATCH.refine((b) => Object.keys(b).length > 0, { message: "at least one setting is required" });
+export const PurposeParams = z.object({ purpose: z.string().min(1).max(100) });
+export const ADMIN_ROUTES = [
+    { route: "GET /api/v1/admin/overview" },
+    { route: "GET /api/v1/admin/accounts", query: AccountListQuery },
+    { route: "POST /api/v1/admin/accounts", body: CreateAccountBody },
+    {
+        route: "PATCH /api/v1/admin/accounts/:accountId",
+        params: AccountParams,
+        body: UpdateAccountBody,
+    },
+    { route: "GET /api/v1/admin/orgs" },
+    { route: "GET /api/v1/admin/settings" },
+    { route: "PUT /api/v1/admin/settings", body: DeploymentSettingsBody },
+    { route: "GET /api/v1/admin/models" },
+    {
+        route: "PATCH /api/v1/admin/models/:provider/disabled",
+        params: ModelProviderParams,
+        body: ModelDisabledPatch,
+    },
+    { route: "GET /api/v1/admin/model-prices" },
+    { route: "PUT /api/v1/admin/model-prices", body: MODEL_PRICE_PUT },
+    { route: "GET /api/v1/admin/model-purposes" },
+    { route: "PUT /api/v1/admin/model-purposes/:purpose", params: PurposeParams, body: PURPOSE_PUT },
+];

package/dist/admin/extensions.controller.d.ts

@@ -81,6 +81,16 @@ export declare class AdminExtensionsController {
      * config UI hint draws per item (a path no hint names -> 400 `validation_failed`).
      */
     putConfig(principal: Principal, name: string, body: z.infer<typeof ConfigSchema>): Promise<DeploymentConfigView>;
+    /**
+     * Clears the deployment config saved here: the stored fields and every stored secret value of
+     * the extension; audits `extension.config_cleared`. Fields from the startup config (file / Nacos
+     * / env) cannot be removed here: they stay in effect and the returned view still shows them
+     * (`readonly`, with their `source`). Every replica re-reads, the same way as after a PUT: the
+     * extension loads from what remains, or becomes pending configuration when that is missing or
+     * invalid (no restart). Nothing stored -> no change (no audit). Unknown -> 404
+     * `extension.not_found`.
+     */
+    clearConfig(principal: Principal, name: string): Promise<DeploymentConfigView>;
     /**
      * Web approval: writes the snapshot (source web), audits `extension.permissions_approved` and
      * publishes `kernel.plugins.changed`. Package or

package/dist/admin/extensions.controller.js

@@ -138,6 +138,19 @@ let AdminExtensionsController = class AdminExtensionsController {
         const actor = requireUser(principal);
         return this.deploymentConfigs.put(name, body.values, actor.account.id, patTokenId(actor), body.secretEntries);
     }
+    /**
+     * Clears the deployment config saved here: the stored fields and every stored secret value of
+     * the extension; audits `extension.config_cleared`. Fields from the startup config (file / Nacos
+     * / env) cannot be removed here: they stay in effect and the returned view still shows them
+     * (`readonly`, with their `source`). Every replica re-reads, the same way as after a PUT: the
+     * extension loads from what remains, or becomes pending configuration when that is missing or
+     * invalid (no restart). Nothing stored -> no change (no audit). Unknown -> 404
+     * `extension.not_found`.
+     */
+    clearConfig(principal, name) {
+        const actor = requireUser(principal);
+        return this.deploymentConfigs.clear(name, actor.account.id, patTokenId(actor));
+    }
     /**
      * Web approval: writes the snapshot (source web), audits `extension.permissions_approved` and
      * publishes `kernel.plugins.changed`. Package or
@@ -222,6 +235,11 @@ __decorate([
     __param(1, Param("name")),
     __param(2, ZBody(ExtensionConfigBody))
 ], AdminExtensionsController.prototype, "putConfig", null);
+__decorate([
+    Delete(":name/config"),
+    __param(0, CurrentPrincipal()),
+    __param(1, Param("name"))
+], AdminExtensionsController.prototype, "clearConfig", null);
 __decorate([
     Post(":name/approve"),
     HttpCode(200),

package/dist/admin/extensions.schemas.d.ts

@@ -0,0 +1,7 @@
+import { z } from "zod";
+import type { RouteSchemas } from "../platform/route-schemas.js";
+/** `:name` as the lifecycle and detail routes take it (`@Param`). */
+export declare const AdminExtensionNamePathParams: z.ZodObject<{
+    name: z.ZodString;
+}, z.core.$strip>;
+export declare const ADMIN_EXTENSION_ROUTES: readonly RouteSchemas[];

package/dist/admin/extensions.schemas.js

@@ -0,0 +1,10 @@
+import { z } from "zod";
+/** `:name` as the lifecycle and detail routes take it (`@Param`). */
+export const AdminExtensionNamePathParams = z.object({ name: z.string().min(1) });
+export const ADMIN_EXTENSION_ROUTES = [
+    { route: "GET /api/v1/admin/extensions" },
+    { route: "GET /api/v1/admin/extensions/:name", params: AdminExtensionNamePathParams },
+    { route: "POST /api/v1/admin/extensions/:name/enable", params: AdminExtensionNamePathParams },
+    { route: "POST /api/v1/admin/extensions/:name/disable", params: AdminExtensionNamePathParams },
+    { route: "DELETE /api/v1/admin/extensions/:name", params: AdminExtensionNamePathParams },
+];

package/dist/admin/limit-defaults.d.ts

@@ -0,0 +1,20 @@
+import type { KernelConfigService } from "../infra/config/kernel-config.service.js";
+import type { SubagentLimits } from "../runtime/subagents/limits.js";
+/**
+ * The deployment's defaults of the per-org limits (with `GET /api/v1/admin/orgs`): what an
+ * organization without an override gets, from the live config. `subagents.maxDispatchesPerRun` and
+ * `maxTokensPerRun` of 0 mean no limit.
+ */
+export interface LimitDefaults {
+    /** `runtime.orgConcurrency`. */
+    runConcurrency: number;
+    /** `sandbox.limits.cpu` / `memoryMb`. */
+    sandbox: {
+        cpu: number;
+        memoryMb: number;
+    };
+    /** `subagents.*`. */
+    subagents: SubagentLimits;
+}
+/** {@link LimitDefaults} from the live config. */
+export declare function limitDefaults(config: KernelConfigService): LimitDefaults;

package/dist/admin/limit-defaults.js

@@ -0,0 +1,10 @@
+/** {@link LimitDefaults} from the live config. */
+export function limitDefaults(config) {
+    const cfg = config.get();
+    const { maxDepth, maxConcurrentPerConversation, maxDispatchesPerRun, maxTokensPerRun } = cfg.subagents;
+    return {
+        runConcurrency: cfg.runtime.orgConcurrency,
+        sandbox: { cpu: cfg.sandbox.limits.cpu, memoryMb: cfg.sandbox.limits.memoryMb },
+        subagents: { maxDepth, maxConcurrentPerConversation, maxDispatchesPerRun, maxTokensPerRun },
+    };
+}