@capybara-hq/kernel 0.1.0-rc.5 → 0.1.0-rc.7

package/dist/channels/connections.controller.d.ts

@@ -1,35 +1,9 @@
-import { z } from "zod";
+import type { z } from "zod";
 import type { JsonSchema } from "../extensions/config-json-schema.js";
 import { type Principal } from "../identity/principal.js";
 import { type OrgContext } from "../orgs/org.guard.js";
+import { ChannelCreateSchema as CreateBody, ChannelPatchSchema as PatchBody } from "./channels.schemas.js";
 import { ChannelConnections, type ChannelConnectionView } from "./connections.service.js";
-declare const CreateBody: z.ZodObject<{
-    plugin: z.ZodString;
-    name: z.ZodString;
-    agentId: z.ZodString;
-    config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-    unboundPolicy: z.ZodOptional<z.ZodEnum<{
-        anonymous: "anonymous";
-        bind: "bind";
-    }>>;
-}, z.core.$strict>;
-declare const PatchBody: z.ZodObject<{
-    name: z.ZodOptional<z.ZodString>;
-    agentId: z.ZodOptional<z.ZodString>;
-    unboundPolicy: z.ZodOptional<z.ZodEnum<{
-        anonymous: "anonymous";
-        bind: "bind";
-    }>>;
-    status: z.ZodOptional<z.ZodEnum<{
-        active: "active";
-        disabled: "disabled";
-    }>>;
-    inboundMode: z.ZodOptional<z.ZodEnum<{
-        long_connection: "long_connection";
-        webhook: "webhook";
-    }>>;
-    config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-}, z.core.$strict>;
 /**
  * 组织的渠道连接（`/api/v1/orgs/:orgId/channels`），全部需要 `channels.manage`（admin，仅限人）。
  * 响应只回显非密钥配置与密钥是否已设置。
@@ -56,4 +30,3 @@ export declare class ChannelConnectionsController {
     }>;
     remove(principal: Principal, org: OrgContext, id: string): Promise<void>;
 }
-export {};

package/dist/channels/connections.controller.js

@@ -8,34 +8,12 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
 import { Controller, Delete, Get, HttpCode, Inject, Param, Patch, Post } from "@nestjs/common";
-import { z } from "zod";
 import { CurrentPrincipal, patTokenId, requireUser, } from "../identity/principal.js";
 import { createZodDto } from "../infra/validation/create-zod-dto.js";
 import { ZBody } from "../infra/validation/zod-params.js";
 import { CurrentOrg, OrgAction } from "../orgs/org.guard.js";
+import { ChannelCreateSchema as CreateBody, ChannelPatchSchema as PatchBody, } from "./channels.schemas.js";
 import { ChannelConnections } from "./connections.service.js";
-const Config = z.record(z.string().max(200), z.unknown());
-const Policy = z.enum(["bind", "anonymous"]);
-const CreateBody = z
-    .object({
-    plugin: z.string().min(1).max(214),
-    name: z.string().trim().min(1).max(100),
-    agentId: z.string().min(1).max(100),
-    config: Config,
-    unboundPolicy: Policy.optional(),
-})
-    .strict();
-const PatchBody = z
-    .object({
-    name: z.string().trim().min(1).max(100).optional(),
-    agentId: z.string().min(1).max(100).optional(),
-    unboundPolicy: Policy.optional(),
-    status: z.enum(["active", "disabled"]).optional(),
-    // webhook needs plugin support and channels.webhookBaseUrl (409 channel.webhook_unavailable)
-    inboundMode: z.enum(["long_connection", "webhook"]).optional(),
-    config: Config.optional(),
-})
-    .strict();
 class ChannelCreateBody extends createZodDto(CreateBody, "ChannelCreateBody") {
 }
 class ChannelPatchBody extends createZodDto(PatchBody, "ChannelPatchBody") {

package/dist/channels/connections.service.d.ts

@@ -159,18 +159,24 @@ export declare class ChannelConnections implements OnApplicationShutdown {
     create(orgId: string, input: CreateChannelInput, actorAccountId: string, actorTokenId?: string): Promise<ChannelConnectionView>;
     /** The rows of {@link create}, in their own transaction (the caller publishes after the commit). */
     private insertIn;
+    /** The read-only refusals of {@link update} that need no write (the Platform tool's precheck). */
+    checkUpdate(orgId: string, id: string, patch: UpdateChannelInput): Promise<void>;
     /**
      * 修改名称、agent、未绑定策略、启停，或轮换凭据（新配置同样先 `verify`，失败什么都不改）。
      * 插件在该组织停用时仍可轮换凭据，此时不 verify，返回 `verifySkipped: true`。
      */
-    update(orgId: string, id: string, patch: UpdateChannelInput, actorAccountId: string, actorTokenId?: string): Promise<{
+    update(orgId: string, id: string, patch: UpdateChannelInput, actorAccountId: string, actorTokenId?: string, 
+    /** Merged into the audit detail (the Platform tool's `via: "agent"`). */
+    auditDetail?: Record<string, unknown>): Promise<{
         channel: ChannelConnectionView;
         verifySkipped: boolean;
     }>;
     /** The rows of {@link update}, in their own transaction (the caller publishes after the commit). */
     private updateIn;
     /** 删除（软删除，同一事务删掉密钥）；持有长连接的副本收到广播后断开。 */
-    remove(orgId: string, id: string, actorAccountId: string, actorTokenId?: string): Promise<void>;
+    remove(orgId: string, id: string, actorAccountId: string, actorTokenId?: string, 
+    /** Merged into the audit detail (the Platform tool's `via: "agent"`). */
+    auditDetail?: Record<string, unknown>): Promise<void>;
     /** The rows of {@link remove}, in their own transaction (the caller publishes after the commit). */
     private removeIn;
     /** 提交后广播；失败只记日志（持有方每轮续租时也会复核连接状态）。 */

package/dist/channels/connections.service.js

@@ -376,11 +376,24 @@ let ChannelConnections = class ChannelConnections {
         });
         return inserted;
     }
+    /** The read-only refusals of {@link update} that need no write (the Platform tool's precheck). */
+    async checkUpdate(orgId, id, patch) {
+        const current = await this.live(orgId).where("id", "=", id).executeTakeFirst();
+        if (!current)
+            throw notFound();
+        if (patch.agentId !== undefined)
+            await this.assertAgent(orgId, patch.agentId);
+        if (patch.inboundMode === "webhook" && patch.inboundMode !== current.inbound_mode) {
+            this.assertWebhookAvailable(current.plugin);
+        }
+    }
     /**
      * 修改名称、agent、未绑定策略、启停，或轮换凭据（新配置同样先 `verify`，失败什么都不改）。
      * 插件在该组织停用时仍可轮换凭据，此时不 verify，返回 `verifySkipped: true`。
      */
-    async update(orgId, id, patch, actorAccountId, actorTokenId) {
+    async update(orgId, id, patch, actorAccountId, actorTokenId, 
+    /** Merged into the audit detail (the Platform tool's `via: "agent"`). */
+    auditDetail) {
         const current = await this.live(orgId).where("id", "=", id).executeTakeFirst();
         if (!current)
             throw notFound();
@@ -421,6 +434,7 @@ let ChannelConnections = class ChannelConnections {
             verified,
             actorAccountId,
             actorTokenId,
+            auditDetail,
         });
         if (rotated)
             this.reportSecrets(rotated.schema, rotated.full);
@@ -443,7 +457,7 @@ let ChannelConnections = class ChannelConnections {
     }
     /** The rows of {@link update}, in their own transaction (the caller publishes after the commit). */
     async updateIn(a) {
-        const { orgId, id, patch, rotated, verified, actorAccountId, actorTokenId } = a;
+        const { orgId, id, patch, rotated, verified, actorAccountId, actorTokenId, auditDetail } = a;
         await this.orgLock.lockAndAuthorize(orgId, actorAccountId, "channels.manage");
         if (patch.agentId !== undefined)
             await this.assertAgent(orgId, patch.agentId);
@@ -488,17 +502,20 @@ let ChannelConnections = class ChannelConnections {
                     ...Object.keys(patch).filter((k) => k !== "config" && patch[k] !== undefined),
                     ...(rotated ? ["config"] : []),
                 ],
+                ...auditDetail,
             },
         });
         return updated;
     }
     /** 删除（软删除，同一事务删掉密钥）；持有长连接的副本收到广播后断开。 */
-    async remove(orgId, id, actorAccountId, actorTokenId) {
-        await this.removeIn(orgId, id, actorAccountId, actorTokenId);
+    async remove(orgId, id, actorAccountId, actorTokenId, 
+    /** Merged into the audit detail (the Platform tool's `via: "agent"`). */
+    auditDetail) {
+        await this.removeIn(orgId, id, actorAccountId, actorTokenId, auditDetail);
         await this.changed(id, true);
     }
     /** The rows of {@link remove}, in their own transaction (the caller publishes after the commit). */
-    async removeIn(orgId, id, actorAccountId, actorTokenId) {
+    async removeIn(orgId, id, actorAccountId, actorTokenId, auditDetail) {
         await this.orgLock.lockAndAuthorize(orgId, actorAccountId, "channels.manage");
         const r = await this.db
             .updateTable("channel_connections")
@@ -516,6 +533,7 @@ let ChannelConnections = class ChannelConnections {
             orgId,
             action: "channel.deleted",
             target: id,
+            ...(auditDetail !== undefined && { detail: auditDetail }),
         });
     }
     /** 提交后广播；失败只记日志（持有方每轮续租时也会复核连接状态）。 */

package/dist/channels/inbound.js

@@ -243,6 +243,10 @@ let ChannelInbound = class ChannelInbound {
             const posted = await this.post(row.orgId, conversationId, accountId, {
                 text: e.text,
                 clientMessageId: `${connectionId}:${e.messageId}`,
+                // run context spec §7: an anonymous guest is named by their IM profile name; a bound
+                // person by their account's name (the kernel reads it)
+                ...(threadAccount === null &&
+                    e.sender.displayName !== undefined && { senderName: e.sender.displayName }),
             });
             seq = posted.event.seq;
             // best-effort (batch 5 review m4): a failed note must not fail the job before the thread

package/dist/config/schema.d.ts

@@ -232,6 +232,10 @@ export declare const KernelConfigSchema: z.ZodObject<{
         judgeMaxOutputTokens: z.ZodDefault<z.ZodNumber>;
         maxConsecutiveErrors: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strip>>;
+    models: z.ZodPrefault<z.ZodObject<{
+        listTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        embedTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
     hooks: z.ZodPrefault<z.ZodObject<{
         timeoutMs: z.ZodDefault<z.ZodNumber>;
         usageReportConcurrency: z.ZodDefault<z.ZodNumber>;

package/dist/config/schema.js

@@ -1252,6 +1252,30 @@ export const KernelConfigSchema = z.object({
         path: ["defaultTokenCap"],
     })
         .prefault({}),
+    models: z
+        .object({
+        listTimeoutMs: z
+            .number()
+            .int()
+            .positive()
+            .max(300_000)
+            .default(10_000)
+            .meta(meta({
+            hot: true,
+            description: "Time limit in milliseconds for one model provider's model list (listModels, which may page through a large platform catalog); a provider that exceeds it is treated as failing to list",
+        })),
+        embedTimeoutMs: z
+            .number()
+            .int()
+            .positive()
+            .max(600_000)
+            .default(60_000)
+            .meta(meta({
+            hot: true,
+            description: "Time limit in milliseconds for one embed call to a model provider (one batch of an extension's ctx.models.embed); the call is aborted and fails with a timeout model error",
+        })),
+    })
+        .prefault({}),
     hooks: z
         .object({
         timeoutMs: z

package/dist/conversations/conversations.controller.d.ts

@@ -6,6 +6,7 @@ import { type OrgContext } from "../orgs/org.guard.js";
 import { ConversationToolInfo, type ToolInfo } from "../tools/info.js";
 import type { AgentTreeNode } from "./agent-tree.js";
 import { type ArtifactPreview, ConversationArtifacts } from "./artifacts.js";
+import { EventsQuery, FilesQuery, IdParams, ListQuery, PatchBody, SubagentsQuery } from "./conversations.schemas.js";
 import { type ConversationGroup, ConversationsService, type ConversationView, type SubagentView, type UsageTotals } from "./conversations.service.js";
 import { ConversationEnvironmentStatus } from "./environment-status.js";
 import type { ConversationEvent } from "./events.js";
@@ -13,19 +14,6 @@ import { ConversationFiles, type FileOutput } from "./files.js";
 import { ConversationOutputs, type OutputPage } from "./outputs-read.js";
 import type { QueueItem, QueuePauseReason } from "./queue.js";
 import { ConversationQueue } from "./queue.service.js";
-declare const ListQuery: z.ZodObject<{
-    q: z.ZodOptional<z.ZodString>;
-    state: z.ZodOptional<z.ZodEnum<{
-        running: "running";
-        waiting: "waiting";
-    }>>;
-    archived: z.ZodOptional<z.ZodEnum<{
-        1: "1";
-    }>>;
-    after: z.ZodOptional<z.ZodString>;
-    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
-    agentId: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
 declare const GroupsQuery: z.ZodObject<{
     q: z.ZodOptional<z.ZodString>;
     state: z.ZodOptional<z.ZodEnum<{
@@ -39,15 +27,6 @@ declare const GroupsQuery: z.ZodObject<{
     limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     after: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
-declare const SubagentsQuery: z.ZodObject<{
-    after: z.ZodOptional<z.ZodString>;
-    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
-}, z.core.$strip>;
-declare const EventsQuery: z.ZodObject<{
-    after: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
-    before: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"end">, z.ZodCoercedNumber<unknown>]>>;
-    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
-}, z.core.$strip>;
 /** `?keys=a,b`: 1–100 comma-separated tool keys of 1–200 characters each. */
 declare const ToolsQuery: z.ZodObject<{
     keys: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string[], string>>, z.ZodArray<z.ZodString>>;
@@ -56,10 +35,6 @@ declare const OutputQuery: z.ZodObject<{
     offset: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
 }, z.core.$strip>;
-declare const FilesQuery: z.ZodObject<{
-    after: z.ZodOptional<z.ZodString>;
-    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
-}, z.core.$strip>;
 declare const FileContentQuery: z.ZodObject<{
     limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
 }, z.core.$strip>;
@@ -93,6 +68,11 @@ declare const MessageBody: z.ZodObject<{
     skill: z.ZodOptional<z.ZodObject<{
         name: z.ZodString;
     }, z.core.$strict>>;
+    timeZone: z.ZodOptional<z.ZodString>;
+    locale: z.ZodOptional<z.ZodEnum<{
+        en: "en";
+        zh: "zh";
+    }>>;
 }, z.core.$strict>;
 /**
  * `POST /conversations`: `message` creates the conversation with its first message (create on
@@ -125,6 +105,11 @@ declare const CreateBody: z.ZodObject<{
         skill: z.ZodOptional<z.ZodObject<{
             name: z.ZodString;
         }, z.core.$strict>>;
+        timeZone: z.ZodOptional<z.ZodString>;
+        locale: z.ZodOptional<z.ZodEnum<{
+            en: "en";
+            zh: "zh";
+        }>>;
         clientMessageId: z.ZodString;
     }, z.core.$strict>>;
 }, z.core.$strict>;
@@ -152,23 +137,17 @@ declare const QueueBody: z.ZodObject<{
     skill: z.ZodOptional<z.ZodObject<{
         name: z.ZodString;
     }, z.core.$strict>>;
+    timeZone: z.ZodOptional<z.ZodString>;
+    locale: z.ZodOptional<z.ZodEnum<{
+        en: "en";
+        zh: "zh";
+    }>>;
     clientMessageId: z.ZodString;
 }, z.core.$strict>;
 /** `PATCH …/queue/:itemId`: only the text changes (the text rule is checked against the item). */
 declare const QueueEditBody: z.ZodObject<{
     text: z.ZodString;
 }, z.core.$strict>;
-/**
- * A rename: 1–120 characters counted in code points after trimming, with no control or format
- * (bidi, zero-width) characters, the same rule generated and tool titles follow.
- */
-declare const PatchBody: z.ZodObject<{
-    title: z.ZodOptional<z.ZodString>;
-    archived: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strict>;
-declare const IdParams: z.ZodObject<{
-    id: z.ZodString;
-}, z.core.$strip>;
 /**
  * 会话（`/api/v1/orgs/:orgId/conversations`）：`agents.use`（访客以上），只接受人类用户；
  * 服务令牌 → 403 `forbidden`。只有会话所有者可见，其他人一律 `conversation.not_found`。

package/dist/conversations/conversations.controller.js

@@ -14,28 +14,15 @@ import { CurrentPrincipal, requireUser } from "../identity/principal.js";
 import { createZodDto } from "../infra/validation/create-zod-dto.js";
 import { ZBody, ZParam, ZQuery } from "../infra/validation/zod-params.js";
 import { CurrentOrg, OrgAction } from "../orgs/org.guard.js";
-import { CONTROL_OR_HIDDEN_RE } from "../text.js";
 import { MAX_ATTACHMENTS } from "../tools/connector-content.js";
 import { ConversationToolInfo, TOOL_INFO_KEY_MAX, TOOL_INFO_MAX_KEYS, } from "../tools/info.js";
 import { ARTIFACT_DOWNLOAD_CACHE_SECONDS, ConversationArtifacts, } from "./artifacts.js";
-import { CONVERSATION_TITLE_MAX_CHARS, ConversationsService, } from "./conversations.service.js";
+import { EventsQuery, FilesQuery, IdParams, ListQuery, PatchBody, SubagentsQuery, searchFields, } from "./conversations.schemas.js";
+import { ConversationsService, } from "./conversations.service.js";
 import { ConversationEnvironmentStatus } from "./environment-status.js";
-import { ConversationFiles, FILE_CONTENT_MAX_BYTES, FILES_PAGE_MAX, } from "./files.js";
+import { ConversationFiles, FILE_CONTENT_MAX_BYTES } from "./files.js";
 import { ConversationOutputs, OUTPUT_PAGE_MAX_CHARS } from "./outputs-read.js";
 import { ConversationQueue } from "./queue.service.js";
-/** Shared by the list and groups queries: title search, run activity and the archived list. */
-const searchFields = {
-    q: z.string().min(1).max(100).optional(),
-    state: z.enum(["running", "waiting"]).optional(),
-    archived: z.enum(["1"]).optional(),
-};
-const ListQuery = z.object({
-    after: z.string().min(1).max(100).optional(),
-    limit: z.coerce.number().int().min(1).max(200).default(50),
-    /** Only this agent's conversations (the sidebar's per-group "More"). */
-    agentId: z.string().min(1).max(100).optional(),
-    ...searchFields,
-});
 const GroupsQuery = z.object({
     perGroup: z.coerce.number().int().min(1).max(20).default(5),
     limit: z.coerce.number().int().min(1).max(50).default(20),
@@ -43,22 +30,6 @@ const GroupsQuery = z.object({
     after: z.string().min(1).max(100).optional(),
     ...searchFields,
 });
-const SubagentsQuery = z.object({
-    /** The previous page's last sub-agent id (`next`). */
-    after: z.string().min(1).max(100).optional(),
-    limit: z.coerce.number().int().min(1).max(100).default(50),
-});
-const EventsQuery = z
-    .object({
-    after: z.coerce.number().int().min(0).optional(),
-    /** The page before this seq, or the log's last page (`end`); exclusive with `after`. */
-    before: z.union([z.literal("end"), z.coerce.number().int().min(1)]).optional(),
-    limit: z.coerce.number().int().min(1).max(500).default(500),
-})
-    .refine((q) => q.after === undefined || q.before === undefined, {
-    message: "after and before are exclusive",
-    path: ["before"],
-});
 /** `?keys=a,b`: 1–100 comma-separated tool keys of 1–200 characters each. */
 const ToolsQuery = z.object({
     keys: z
@@ -71,10 +42,6 @@ const OutputQuery = z.object({
     offset: z.coerce.number().int().min(0).default(0),
     limit: z.coerce.number().int().min(1).max(OUTPUT_PAGE_MAX_CHARS).default(OUTPUT_PAGE_MAX_CHARS),
 });
-const FilesQuery = z.object({
-    after: z.string().min(1).max(100).optional(),
-    limit: z.coerce.number().int().min(1).max(FILES_PAGE_MAX).default(50),
-});
 const FileContentQuery = z.object({
     limit: z.coerce.number().int().min(1).max(FILE_CONTENT_MAX_BYTES).default(FILE_CONTENT_MAX_BYTES),
 });
@@ -114,6 +81,13 @@ const MessageFields = z.object({
     })
         .strict()
         .optional(),
+    /**
+     * The browser's IANA time zone (run context spec §3.4). An unknown name is ignored, never a
+     * 400; the sender's account setting overrides it.
+     */
+    timeZone: z.string().min(1).max(64).optional(),
+    /** The sender's UI language (run context spec §3.4). */
+    locale: z.enum(["zh", "en"]).optional(),
 });
 // The body of `@` resource i is `content[i + 1]`, so `content[0]` must be the user's text: with
 // `@` resources the text must not be empty. A skill invocation's `content[0]` is the rendered
@@ -155,26 +129,6 @@ const QueueBody = MessageFields.omit({ retryOf: true })
     .refine(...textRule);
 /** `PATCH …/queue/:itemId`: only the text changes (the text rule is checked against the item). */
 const QueueEditBody = z.object({ text: z.string().max(100_000) }).strict();
-/**
- * A rename: 1–120 characters counted in code points after trimming, with no control or format
- * (bidi, zero-width) characters, the same rule generated and tool titles follow.
- */
-const PatchBody = z
-    .object({
-    title: z
-        .string()
-        .max(CONVERSATION_TITLE_MAX_CHARS * 2 + 100)
-        .trim()
-        .refine((t) => t.length > 0, "title must not be empty")
-        .refine((t) => Array.from(t).length <= CONVERSATION_TITLE_MAX_CHARS, `title must be at most ${CONVERSATION_TITLE_MAX_CHARS} characters`)
-        .refine((t) => !CONTROL_OR_HIDDEN_RE.test(t), "title must not contain control or format characters")
-        .optional(),
-    /** true archives (hidden from the default lists), false unarchives. */
-    archived: z.boolean().optional(),
-})
-    .strict()
-    .refine((b) => b.title !== undefined || b.archived !== undefined, "title or archived is required");
-const IdParams = z.object({ id: z.string().min(1).max(100) });
 class ConversationCreateBodyDto extends createZodDto(CreateBody, "ConversationCreateBody") {
 }
 class ConversationPatchBodyDto extends createZodDto(PatchBody, "ConversationPatchBody") {
@@ -248,6 +202,8 @@ let ConversationsController = class ConversationsController {
             ...(m.model !== undefined && { model: m.model }),
             ...(m.effort !== undefined && { effort: m.effort }),
             ...(m.skill !== undefined && { skill: m.skill }),
+            ...(m.timeZone !== undefined && { timeZone: m.timeZone }),
+            ...(m.locale !== undefined && { locale: m.locale }),
         }, pick);
         reply.status(out.created ? 201 : 200);
         return { conversation: out.conversation, event: out.event, events: out.events };
@@ -443,6 +399,8 @@ let ConversationsController = class ConversationsController {
                 ...(body.effort !== undefined && { effort: body.effort }),
                 ...(body.retryOf !== undefined && { retryOf: body.retryOf }),
                 ...(body.skill !== undefined && { skill: body.skill }),
+                ...(body.timeZone !== undefined && { timeZone: body.timeZone }),
+                ...(body.locale !== undefined && { locale: body.locale }),
             }),
         };
     }
@@ -470,6 +428,8 @@ let ConversationsController = class ConversationsController {
                 ...(body.model !== undefined && { model: body.model }),
                 ...(body.effort !== undefined && { effort: body.effort }),
                 ...(body.skill !== undefined && { skill: body.skill }),
+                ...(body.timeZone !== undefined && { timeZone: body.timeZone }),
+                ...(body.locale !== undefined && { locale: body.locale }),
             }),
         };
     }

package/dist/conversations/conversations.schemas.d.ts

@@ -0,0 +1,52 @@
+import { z } from "zod";
+import type { RouteSchemas } from "../platform/route-schemas.js";
+/** Shared by the list and groups queries: title search, run activity and the archived list. */
+export declare const searchFields: {
+    q: z.ZodOptional<z.ZodString>;
+    state: z.ZodOptional<z.ZodEnum<{
+        running: "running";
+        waiting: "waiting";
+    }>>;
+    archived: z.ZodOptional<z.ZodEnum<{
+        1: "1";
+    }>>;
+};
+export declare const ListQuery: z.ZodObject<{
+    q: z.ZodOptional<z.ZodString>;
+    state: z.ZodOptional<z.ZodEnum<{
+        running: "running";
+        waiting: "waiting";
+    }>>;
+    archived: z.ZodOptional<z.ZodEnum<{
+        1: "1";
+    }>>;
+    after: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    agentId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const EventsQuery: z.ZodObject<{
+    after: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+    before: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"end">, z.ZodCoercedNumber<unknown>]>>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strip>;
+/**
+ * A rename: 1–120 characters counted in code points after trimming, with no control or format
+ * (bidi, zero-width) characters, the same rule generated and tool titles follow.
+ */
+export declare const PatchBody: z.ZodObject<{
+    title: z.ZodOptional<z.ZodString>;
+    archived: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const IdParams: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+export declare const SubagentsQuery: z.ZodObject<{
+    after: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strip>;
+export declare const FilesQuery: z.ZodObject<{
+    after: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strip>;
+/** The conversation routes a Platform operation mirrors (spec §14, conversations). */
+export declare const CONVERSATION_ROUTES: readonly RouteSchemas[];

package/dist/conversations/conversations.schemas.js

@@ -0,0 +1,79 @@
+import { z } from "zod";
+import { CONTROL_OR_HIDDEN_RE } from "../text.js";
+import { CONVERSATION_TITLE_MAX_CHARS } from "./conversations.service.js";
+import { FILES_PAGE_MAX } from "./files.js";
+/** Shared by the list and groups queries: title search, run activity and the archived list. */
+export const searchFields = {
+    q: z.string().min(1).max(100).optional(),
+    state: z.enum(["running", "waiting"]).optional(),
+    archived: z.enum(["1"]).optional(),
+};
+export const ListQuery = z.object({
+    after: z.string().min(1).max(100).optional(),
+    limit: z.coerce.number().int().min(1).max(200).default(50),
+    /** Only this agent's conversations (the sidebar's per-group "More"). */
+    agentId: z.string().min(1).max(100).optional(),
+    ...searchFields,
+});
+export const EventsQuery = z
+    .object({
+    after: z.coerce.number().int().min(0).optional(),
+    /** The page before this seq, or the log's last page (`end`); exclusive with `after`. */
+    before: z.union([z.literal("end"), z.coerce.number().int().min(1)]).optional(),
+    limit: z.coerce.number().int().min(1).max(500).default(500),
+})
+    .refine((q) => q.after === undefined || q.before === undefined, {
+    message: "after and before are exclusive",
+    path: ["before"],
+});
+/**
+ * A rename: 1–120 characters counted in code points after trimming, with no control or format
+ * (bidi, zero-width) characters, the same rule generated and tool titles follow.
+ */
+export const PatchBody = z
+    .object({
+    title: z
+        .string()
+        .max(CONVERSATION_TITLE_MAX_CHARS * 2 + 100)
+        .trim()
+        .refine((t) => t.length > 0, "title must not be empty")
+        .refine((t) => Array.from(t).length <= CONVERSATION_TITLE_MAX_CHARS, `title must be at most ${CONVERSATION_TITLE_MAX_CHARS} characters`)
+        .refine((t) => !CONTROL_OR_HIDDEN_RE.test(t), "title must not contain control or format characters")
+        .optional(),
+    /** true archives (hidden from the default lists), false unarchives. */
+    archived: z.boolean().optional(),
+})
+    .strict()
+    .refine((b) => b.title !== undefined || b.archived !== undefined, "title or archived is required");
+export const IdParams = z.object({ id: z.string().min(1).max(100) });
+export const SubagentsQuery = z.object({
+    /** The previous page's last sub-agent id (`next`). */
+    after: z.string().min(1).max(100).optional(),
+    limit: z.coerce.number().int().min(1).max(100).default(50),
+});
+export const FilesQuery = z.object({
+    after: z.string().min(1).max(100).optional(),
+    limit: z.coerce.number().int().min(1).max(FILES_PAGE_MAX).default(50),
+});
+/** The conversation routes a Platform operation mirrors (spec §14, conversations). */
+export const CONVERSATION_ROUTES = [
+    { route: "GET /api/v1/orgs/:orgId/conversations", query: ListQuery },
+    { route: "GET /api/v1/orgs/:orgId/conversations/:id", params: IdParams },
+    {
+        route: "GET /api/v1/orgs/:orgId/conversations/:id/events",
+        params: IdParams,
+        query: EventsQuery,
+    },
+    { route: "PATCH /api/v1/orgs/:orgId/conversations/:id", params: IdParams, body: PatchBody },
+    { route: "DELETE /api/v1/orgs/:orgId/conversations/:id", params: IdParams },
+    {
+        route: "GET /api/v1/orgs/:orgId/conversations/:id/subagents",
+        params: IdParams,
+        query: SubagentsQuery,
+    },
+    { route: "GET /api/v1/orgs/:orgId/conversations/:id/agent-tree", params: IdParams },
+    { route: "GET /api/v1/orgs/:orgId/conversations/:id/usage", params: IdParams },
+    { route: "GET /api/v1/orgs/:orgId/conversations/:id/files", params: IdParams, query: FilesQuery },
+    { route: "GET /api/v1/orgs/:orgId/conversations/:id/environment", params: IdParams },
+    { route: "POST /api/v1/orgs/:orgId/conversations/:id/abort", params: IdParams },
+];

package/dist/conversations/conversations.service.d.ts

@@ -161,6 +161,11 @@ export interface UserMessageInput {
     skill?: {
         name: string;
     };
+    /** The browser's IANA time zone and UI language (run context spec §3.4); IM sends none. */
+    timeZone?: string;
+    locale?: "zh" | "en";
+    /** An anonymous IM guest's IM profile name (run context spec §7); other senders: none. */
+    senderName?: string;
 }
 /**
  * 会话：只有所有者可见；每次访问都实时复核 agent 对所有者仍可用（spec 3.6 R5），
@@ -366,15 +371,19 @@ export declare class ConversationsService {
      * `text` 为空时（只发附件，HTTP 层保证此时有 `files` 且没有 `@` 资源）不写文本块。
      */
     postUserMessage(orgId: string, conversationId: string, accountId: string, input: UserMessageInput): Promise<ConversationEvent>;
-    /** A message with files or a model switch: binds the files and writes it in one transaction. */
+    /**
+     * Writes a message in one transaction: binds its files, reads its sender context and appends it
+     * (after its `model_switched` when it switches).
+     */
     private postIn;
     /**
      * The selection a message switches to, or null when it changes nothing. A model equal to the
      * agent's means "back to the agent's model" (null); a model change without `effort` resets the
      * effort. The target model must resolve (`agent.model_unavailable`) and declare the effort
-     * (`validation_failed`). Resolving is the agent editor's check: providers are deployment-scoped
-     * and serve chat models only. If per-org provider enablement is added, this check and the run
-     * worker's `fallBackIfUnavailable` must follow it.
+     * (`validation_failed`). Resolving is the agent editor's check, for the org (its effective
+     * provider config, spec B §5.5) and its disabled lists: a model the platform or the org disabled,
+     * or a non-chat model, is refused (spec B §5.3), as the run worker's `fallBackIfUnavailable` falls
+     * back from it.
      */
     private planSwitch;
     /**