@capybara-hq/kernel 0.1.0-rc.5 → 0.1.0-rc.7

package/dist/evals/sets.service.js

@@ -152,8 +152,8 @@ let EvalSetsService = EvalSetsService_1 = class EvalSetsService {
             throw setNotFound();
         return EvalSetsService_1.toView(r);
     }
-    async create(orgId, actor, input, actorTokenId) {
-        const id = await this.createIn(orgId, actor, input, actorTokenId);
+    async create(orgId, actor, input, actorTokenId, auditDetail) {
+        const id = await this.createIn(orgId, actor, input, actorTokenId, auditDetail);
         return this.view(orgId, id);
     }
     async list(orgId) {
@@ -175,22 +175,22 @@ let EvalSetsService = EvalSetsService_1 = class EvalSetsService {
             .execute();
         return { ...set, cases: cases.map(toCaseView) };
     }
-    async update(orgId, actor, setId, patch, actorTokenId) {
+    async update(orgId, actor, setId, patch, actorTokenId, auditDetail) {
         if (!UUID.test(setId))
             throw setNotFound();
-        await this.updateIn(orgId, actor, setId, patch, actorTokenId);
+        await this.updateIn(orgId, actor, setId, patch, actorTokenId, auditDetail);
         return this.view(orgId, setId);
     }
     /**
      * 删除评测集（Ruling S1-a）：集合行软删除，留作审计存根；用例（含快照）硬删，结果随之级联删除，不留复制来的对话内容；
      * 在执行的运行取消，运行行保留（无入口）。
      */
-    async remove(orgId, actor, setId, actorTokenId) {
+    async remove(orgId, actor, setId, actorTokenId, auditDetail) {
         if (!UUID.test(setId))
             throw setNotFound();
-        await this.removeIn(orgId, actor, setId, actorTokenId);
+        await this.removeIn(orgId, actor, setId, actorTokenId, auditDetail);
     }
-    async createIn(orgId, actor, input, actorTokenId) {
+    async createIn(orgId, actor, input, actorTokenId, auditDetail) {
         await this.orgLock.lockAndAuthorize(orgId, actor, "evals.manage");
         const agent = await this.db
             .selectFrom("agents")
@@ -219,11 +219,11 @@ let EvalSetsService = EvalSetsService_1 = class EvalSetsService {
             orgId,
             action: "eval.set_created",
             target: row.id,
-            detail: { agentId: input.agentId, name: input.name },
+            detail: { agentId: input.agentId, name: input.name, ...auditDetail },
         });
         return row.id;
     }
-    async updateIn(orgId, actor, setId, patch, actorTokenId) {
+    async updateIn(orgId, actor, setId, patch, actorTokenId, auditDetail) {
         await this.orgLock.lockAndAuthorize(orgId, actor, "evals.manage");
         const r = await this.db
             .updateTable("eval_sets")
@@ -248,10 +248,11 @@ let EvalSetsService = EvalSetsService_1 = class EvalSetsService {
             // 只记改了哪些字段（评分标准可能很长，不进审计）
             detail: {
                 fields: ["name", "description", "rubric"].filter((f) => patch[f] !== undefined),
+                ...auditDetail,
             },
         });
     }
-    async removeIn(orgId, actor, setId, actorTokenId) {
+    async removeIn(orgId, actor, setId, actorTokenId, auditDetail) {
         await this.orgLock.lockAndAuthorize(orgId, actor, "evals.manage");
         const r = await this.db
             .updateTable("eval_sets")
@@ -269,6 +270,7 @@ let EvalSetsService = EvalSetsService_1 = class EvalSetsService {
             orgId,
             action: "eval.set_deleted",
             target: setId,
+            ...(auditDetail !== undefined && { detail: auditDetail }),
         });
     }
     async insertCaseIn(orgId, actor, setId, snapshot, extra, prepared) {
@@ -319,11 +321,12 @@ let EvalSetsService = EvalSetsService_1 = class EvalSetsService {
                 conversationId: snapshot.conversationId,
                 runId: snapshot.runId,
                 ...(extra.sampled && { sampled: true }),
+                ...extra.auditDetail,
             },
         });
         return toCaseView(row);
     }
-    async removeCaseIn(orgId, actor, setId, caseId, actorTokenId) {
+    async removeCaseIn(orgId, actor, setId, caseId, actorTokenId, auditDetail) {
         await this.orgLock.lockAndAuthorize(orgId, actor, "evals.manage");
         const set = await this.db
             .selectFrom("eval_sets")
@@ -354,6 +357,7 @@ let EvalSetsService = EvalSetsService_1 = class EvalSetsService {
                 caseId,
                 conversationId: r.source_conversation_id,
                 runId: r.source_run_id,
+                ...auditDetail,
             },
         });
     }
@@ -402,7 +406,7 @@ let EvalSetsService = EvalSetsService_1 = class EvalSetsService {
      * `eval.agent_mismatch`；已在集合里 → `eval.case_exists`；集合满了 → `eval.too_many_cases`；
      * 运行未终态 / 快照超大 → `eval.run_not_finished` / `eval.case_too_large`（`takeSnapshot`）。
      */
-    async addCase(orgId, actor, setId, input, actorTokenId) {
+    async addCase(orgId, actor, setId, input, actorTokenId, auditDetail) {
         const set = await this.liveSet(orgId, setId);
         const conv = await this.db
             .selectFrom("conversations")
@@ -434,6 +438,7 @@ let EvalSetsService = EvalSetsService_1 = class EvalSetsService {
         const r = await this.insertCase(orgId, actor, setId, snapshot, {
             sampled: false,
             ...(actorTokenId !== undefined && { actorTokenId }),
+            ...(auditDetail !== undefined && { auditDetail }),
         });
         if (r === "exists")
             throw caseExists();
@@ -446,7 +451,7 @@ let EvalSetsService = EvalSetsService_1 = class EvalSetsService {
      * `min(count, 剩余容量)` 个，逐个取快照写入。快照超大（或其间被删除 / 写入时已满 / 并发加入）的计入 `skipped`。
      * 集合已满 → `eval.too_many_cases`。逐个写入，内存里一次只有一份快照。
      */
-    async sample(orgId, actor, setId, input, actorTokenId) {
+    async sample(orgId, actor, setId, input, actorTokenId, auditDetail) {
         const set = await this.liveSet(orgId, setId);
         const { maxCasesPerSet, maxCaseBytes } = this.config.get().evals;
         const room = maxCasesPerSet - (await this.caseCount(this.db, setId));
@@ -497,6 +502,7 @@ let EvalSetsService = EvalSetsService_1 = class EvalSetsService {
             const r = await this.insertCase(orgId, actor, setId, snapshot, {
                 sampled: true,
                 ...(actorTokenId !== undefined && { actorTokenId }),
+                ...(auditDetail !== undefined && { auditDetail }),
             });
             if (typeof r === "string")
                 skipped++;
@@ -505,18 +511,18 @@ let EvalSetsService = EvalSetsService_1 = class EvalSetsService {
         }
         return { added, skipped };
     }
-    async removeCase(orgId, actor, setId, caseId, actorTokenId) {
+    async removeCase(orgId, actor, setId, caseId, actorTokenId, auditDetail) {
         if (!UUID.test(setId))
             throw setNotFound();
         if (!UUID.test(caseId))
             throw caseNotFound();
-        await this.removeCaseIn(orgId, actor, setId, caseId, actorTokenId);
+        await this.removeCaseIn(orgId, actor, setId, caseId, actorTokenId, auditDetail);
     }
     /**
      * 用例详情：由快照还原轨迹（原对话删除后照常可读）。快照即对话内容，每次查看写审计 `trajectory.viewed`
      * （target = 原对话 id，detail 带 `caseId` / `setId`）。
      */
-    async getCase(orgId, actor, setId, caseId, actorTokenId) {
+    async getCase(orgId, actor, setId, caseId, actorTokenId, auditDetail) {
         await this.liveSet(orgId, setId);
         if (!UUID.test(caseId))
             throw caseNotFound();
@@ -537,7 +543,7 @@ let EvalSetsService = EvalSetsService_1 = class EvalSetsService {
             orgId,
             action: "trajectory.viewed",
             target: row.source_conversation_id,
-            detail: { agentId: snapshot.agentId, caseId, setId },
+            detail: { agentId: snapshot.agentId, caseId, setId, ...auditDetail },
         });
         return {
             case: toCaseView(row),

package/dist/evals/snapshot.d.ts

@@ -59,8 +59,9 @@ export interface CaseSnapshot {
  */
 export declare function takeSnapshot(db: KernelSchemaDb, orgId: string, conversationId: string, runId: string, maxBytes: number): Promise<CaseSnapshot>;
 /**
- * 读出库里存的快照（`eval_cases.snapshot`）：把各版本定义里改名前（D17）的 `{ kind: "app" }` 工具引用规范化为
- * connector 形（C27）。整轮回放会把定义交给实时注册表，不规范化的话连接器工具全部失效。其余字段原样。
+ * Reads a stored snapshot (`eval_cases.snapshot`): each version's definition goes through
+ * `normalizeStoredDefinition` (rc tool keys, and an enabled tool list read as nothing turned off).
+ * Other fields as they are.
  */
 export declare function readSnapshot(raw: unknown): CaseSnapshot;
 /** 快照事件还原为日志事件（`createdAt` 转回 Date）。 */

package/dist/evals/snapshot.js

@@ -97,7 +97,7 @@ export async function takeSnapshot(db, orgId, conversationId, runId, maxBytes) {
         .orderBy("version")
         .execute();
     for (const r of defRows) {
-        definitions[String(r.version)] = normalizeStoredDefinition(r.definition);
+        definitions[String(r.version)] = snapshotDefinition(r.definition);
     }
     const toolSpecs = {};
     if (hashes.size > 0) {
@@ -151,14 +151,27 @@ export async function takeSnapshot(db, orgId, conversationId, runId, maxBytes) {
     return snapshot;
 }
 /**
- * 读出库里存的快照（`eval_cases.snapshot`）：把各版本定义里改名前（D17）的 `{ kind: "app" }` 工具引用规范化为
- * connector 形（C27）。整轮回放会把定义交给实时注册表，不规范化的话连接器工具全部失效。其余字段原样。
+ * A definition as a snapshot holds it: normalized (`normalizeStoredDefinition`), and one from
+ * before tools were on by default keeps its enabled list next to it: rc tool keys are read by its
+ * extension refs (`legacyScopeOf`); the runtime ignores it (tools default-on spec §2).
+ */
+function snapshotDefinition(d) {
+    const enabled = d?.tools;
+    return {
+        ...normalizeStoredDefinition(d),
+        ...(Array.isArray(enabled) && { tools: enabled }),
+    };
+}
+/**
+ * Reads a stored snapshot (`eval_cases.snapshot`): each version's definition goes through
+ * `normalizeStoredDefinition` (rc tool keys, and an enabled tool list read as nothing turned off).
+ * Other fields as they are.
  */
 export function readSnapshot(raw) {
     const s = raw;
     const definitions = {};
     for (const [v, d] of Object.entries(s.definitions ?? {})) {
-        definitions[v] = normalizeStoredDefinition(d);
+        definitions[v] = snapshotDefinition(d);
     }
     return {
         ...s,

package/dist/evals/step-replay.d.ts

@@ -92,7 +92,8 @@ export declare class ReplayAttemptError extends Error {
  * 否则带候选的定义、版本与参数——参数按候选模型的声明宽松处理，与运行时一致），用 `consumeModelStream` 收完。
  * 请求发出之前的错误原样抛出（`agent.model_unavailable`、取附件暂时失败为 `MediaUnavailableError`）；请求发出之后的
  * 错误包成 {@link ReplayAttemptError}（带估算用量，调用方计入预算后按 `cause` 分类重试）。
- * 模型按部署范围解析（与运行时一致；组织级模型准入若在第二段落地，须同样覆盖评测候选）。
+ * The candidate model resolves in the snapshot's org like the runtime (its effective provider
+ * config and disabled lists: a model disabled there is `agent.model_unavailable`, spec B §5.3).
  * 不另设单次请求的墙钟时限：与运行时一样只有流空闲看门狗（`streamIdleTimeoutMs` / `runtime.streamIdleMs`）。
  */
 export declare function replayStep(d: StepReplayDeps, s: CaseSnapshot, call: {

package/dist/evals/step-replay.js

@@ -126,12 +126,13 @@ function baselineOf(s, call) {
  * 否则带候选的定义、版本与参数——参数按候选模型的声明宽松处理，与运行时一致），用 `consumeModelStream` 收完。
  * 请求发出之前的错误原样抛出（`agent.model_unavailable`、取附件暂时失败为 `MediaUnavailableError`）；请求发出之后的
  * 错误包成 {@link ReplayAttemptError}（带估算用量，调用方计入预算后按 `cause` 分类重试）。
- * 模型按部署范围解析（与运行时一致；组织级模型准入若在第二段落地，须同样覆盖评测候选）。
+ * The candidate model resolves in the snapshot's org like the runtime (its effective provider
+ * config and disabled lists: a model disabled there is `agent.model_unavailable`, spec B §5.3).
  * 不另设单次请求的墙钟时限：与运行时一样只有流空闲看门狗（`streamIdleTimeoutMs` / `runtime.streamIdleMs`）。
  */
 export async function replayStep(d, s, call, candidate, signal) {
     const baseline = baselineOf(s, call);
-    const { provider, info } = await d.registry.resolve(candidate.model);
+    const { provider, info } = await d.registry.resolve(s.orgId, candidate.model);
     let media;
     if (d.media) {
         try {

package/dist/extensions/admin-ops.d.ts

@@ -120,14 +120,16 @@ export declare class ExtensionAdminOps {
     }): Promise<AdminExtensionView>;
     private writeInstall;
     /** Enable on the deployment (audit `extension.enabled`); no change when already enabled. Org enablement is unchanged. */
-    enable(name: string, actor: string | null, actorTokenId?: string, owner?: ExtensionOpsOwner): Promise<AdminExtensionView>;
+    enable(name: string, actor: string | null, actorTokenId?: string, owner?: ExtensionOpsOwner, 
+    /** Merged into the audit detail (a write made through the Platform tool). */
+    auditDetail?: Record<string, unknown>): Promise<AdminExtensionView>;
     /**
      * Disables on the deployment (audit `extension.disabled`); no change when already disabled. Every
      * replica unloads it (draining in-flight calls), and the extensions that `requires` it unload with
      * it; the org enablement switch is unchanged and the org page shows it as unavailable. A required
      * bootstrap plugin -> `extension.required`.
      */
-    disable(name: string, actor: string | null, actorTokenId?: string, owner?: ExtensionOpsOwner): Promise<AdminExtensionView>;
+    disable(name: string, actor: string | null, actorTokenId?: string, owner?: ExtensionOpsOwner, auditDetail?: Record<string, unknown>): Promise<AdminExtensionView>;
     /**
      * Uninstall: a required bootstrap plugin -> `extension.required`; must be disabled first
      * (otherwise `extension.not_disabled`); deletes the install record
@@ -136,7 +138,7 @@ export declare class ExtensionAdminOps {
      * permission snapshot and the package in the package store are untouched (a reinstall picks them
      * up).
      */
-    uninstall(name: string, actor: string | null, actorTokenId?: string, owner?: ExtensionOpsOwner): Promise<void>;
+    uninstall(name: string, actor: string | null, actorTokenId?: string, owner?: ExtensionOpsOwner, auditDetail?: Record<string, unknown>): Promise<void>;
     private writeUninstall;
     private setState;
     private writeState;

package/dist/extensions/admin-ops.js

@@ -222,8 +222,10 @@ let ExtensionAdminOps = class ExtensionAdminOps {
         return { changed: true, state: row?.desired_state ?? "disabled" };
     }
     /** Enable on the deployment (audit `extension.enabled`); no change when already enabled. Org enablement is unchanged. */
-    enable(name, actor, actorTokenId, owner) {
-        return this.setState(name, "enabled", actor, actorTokenId, owner);
+    enable(name, actor, actorTokenId, owner, 
+    /** Merged into the audit detail (a write made through the Platform tool). */
+    auditDetail) {
+        return this.setState(name, "enabled", actor, actorTokenId, owner, auditDetail);
     }
     /**
      * Disables on the deployment (audit `extension.disabled`); no change when already disabled. Every
@@ -231,8 +233,8 @@ let ExtensionAdminOps = class ExtensionAdminOps {
      * it; the org enablement switch is unchanged and the org page shows it as unavailable. A required
      * bootstrap plugin -> `extension.required`.
      */
-    disable(name, actor, actorTokenId, owner) {
-        return this.setState(name, "disabled", actor, actorTokenId, owner);
+    disable(name, actor, actorTokenId, owner, auditDetail) {
+        return this.setState(name, "disabled", actor, actorTokenId, owner, auditDetail);
     }
     /**
      * Uninstall: a required bootstrap plugin -> `extension.required`; must be disabled first
@@ -242,11 +244,11 @@ let ExtensionAdminOps = class ExtensionAdminOps {
      * permission snapshot and the package in the package store are untouched (a reinstall picks them
      * up).
      */
-    async uninstall(name, actor, actorTokenId, owner) {
+    async uninstall(name, actor, actorTokenId, owner, auditDetail) {
         this.assertInstallable(name);
-        await this.writeUninstall(name, actor, actorTokenId, owner);
+        await this.writeUninstall(name, actor, actorTokenId, owner, auditDetail);
     }
-    async writeUninstall(name, actor, actorTokenId, owner) {
+    async writeUninstall(name, actor, actorTokenId, owner, auditDetail) {
         const db = this.db;
         await this.authorize(actor, owner);
         const row = await this.lockRow(name);
@@ -260,19 +262,22 @@ let ExtensionAdminOps = class ExtensionAdminOps {
         await db.deleteFrom("extension_installs").where("name", "=", name).execute();
         // 来源条目随安装记录一起删：之后不经目录重新安装时不再受旧条目的策略约束（T26 裁决）
         await db.deleteFrom("extension_catalog_sources").where("plugin", "=", name).execute();
-        await this.audit(actor, actorTokenId, "extension.uninstalled", name, row.version, row.sha256, ownerDetail(owner));
+        await this.audit(actor, actorTokenId, "extension.uninstalled", name, row.version, row.sha256, {
+            ...ownerDetail(owner),
+            ...auditDetail,
+        });
         afterCommit(() => this.notify(name));
     }
-    async setState(name, state, actor, actorTokenId, owner) {
+    async setState(name, state, actor, actorTokenId, owner, auditDetail) {
         this.assertInstallable(name);
-        const result = await this.writeState(name, state, actor, actorTokenId, owner);
+        const result = await this.writeState(name, state, actor, actorTokenId, owner, auditDetail);
         return this.viewAfterCommit(name, {
             version: result.row.version,
             sha256: result.row.sha256,
             state,
         });
     }
-    async writeState(name, state, actor, actorTokenId, owner) {
+    async writeState(name, state, actor, actorTokenId, owner, auditDetail) {
         const db = this.db;
         await this.authorize(actor, owner);
         const row = await this.lockRow(name);
@@ -291,7 +296,7 @@ let ExtensionAdminOps = class ExtensionAdminOps {
         })
             .where("name", "=", name)
             .execute();
-        await this.audit(actor, actorTokenId, state === "enabled" ? "extension.enabled" : "extension.disabled", name, row.version, row.sha256, ownerDetail(owner));
+        await this.audit(actor, actorTokenId, state === "enabled" ? "extension.enabled" : "extension.disabled", name, row.version, row.sha256, { ...ownerDetail(owner), ...auditDetail });
         afterCommit(() => this.notify(name));
         return { row, changed: true };
     }

package/dist/extensions/config-hash.d.ts

@@ -0,0 +1,10 @@
+import type { core } from "zod";
+/**
+ * 插件部署配置（校验后）中非密钥部分的摘要：先把 schema 里所有 secret 叶子（`configFields` 可达路径，
+ * 加载时 `assertSecretsReachable` 已保证密钥都在这些路径上）换成固定占位值，再取 sha256(键排序 JSON) 前 16 位十六进制。
+ * 给需要「配置变了就失效」的缓存键用（如模型列表）。密钥不参与摘要：不加盐的短摘要写进 Redis 键名后，
+ * 低熵密钥可被离线猜测、泄露的密钥可被确认；代价是轮换密钥不会让缓存失效（缓存内容本来就不该依赖密钥）。
+ * 没有部署配置 schema 时无从得知哪些是密钥，摘要不按配置区分。同一份配置在各副本上得到同一摘要。
+ * 函数自己按 schema 遮蔽，调用方不必（也不能忘记）先打码。
+ */
+export declare function deploymentConfigHash(schema: core.$ZodType | undefined, config: unknown): string;

package/dist/extensions/config-hash.js

@@ -0,0 +1,38 @@
+import { createHash } from "node:crypto";
+import { configFields, getPath, setPath } from "../config/fields.js";
+/** 键排序后的 JSON（对象键顺序不影响结果）；undefined 字段与 JSON.stringify 一样省略。 */
+const canonicalJson = (v) => {
+    if (Array.isArray(v))
+        return `[${v.map((x) => (x === undefined ? "null" : canonicalJson(x))).join(",")}]`;
+    if (v !== null && typeof v === "object") {
+        const entries = Object.entries(v)
+            .filter(([, x]) => x !== undefined)
+            .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+        return `{${entries.map(([k, x]) => `${JSON.stringify(k)}:${canonicalJson(x)}`).join(",")}}`;
+    }
+    return JSON.stringify(v) ?? "null";
+};
+/** 遮蔽 secret 字段后参与摘要的固定占位值。 */
+const SECRET_PLACEHOLDER = "<secret>";
+/**
+ * 插件部署配置（校验后）中非密钥部分的摘要：先把 schema 里所有 secret 叶子（`configFields` 可达路径，
+ * 加载时 `assertSecretsReachable` 已保证密钥都在这些路径上）换成固定占位值，再取 sha256(键排序 JSON) 前 16 位十六进制。
+ * 给需要「配置变了就失效」的缓存键用（如模型列表）。密钥不参与摘要：不加盐的短摘要写进 Redis 键名后，
+ * 低熵密钥可被离线猜测、泄露的密钥可被确认；代价是轮换密钥不会让缓存失效（缓存内容本来就不该依赖密钥）。
+ * 没有部署配置 schema 时无从得知哪些是密钥，摘要不按配置区分。同一份配置在各副本上得到同一摘要。
+ * 函数自己按 schema 遮蔽，调用方不必（也不能忘记）先打码。
+ */
+export function deploymentConfigHash(schema, config) {
+    let redacted = null;
+    if (schema) {
+        redacted = structuredClone(config);
+        if (redacted !== null && typeof redacted === "object") {
+            for (const f of configFields(schema)) {
+                if (f.meta?.secret && getPath(redacted, f.path) !== undefined) {
+                    setPath(redacted, f.path, SECRET_PLACEHOLDER);
+                }
+            }
+        }
+    }
+    return createHash("sha256").update(canonicalJson(redacted)).digest("hex").slice(0, 16);
+}

package/dist/extensions/deployment-config.d.ts

@@ -59,7 +59,7 @@ export interface SecretEntry {
     value?: string | null | undefined;
     renameFrom?: string | undefined;
 }
-/** The response of `GET / PUT /api/v1/admin/extensions/:name/config`. */
+/** The response of `GET / PUT / DELETE /api/v1/admin/extensions/:name/config`. */
 export interface DeploymentConfigView {
     plugin: string;
     /** The plugin's display name (`ExtensionDisplayNames`); null when it has none. */
@@ -159,6 +159,21 @@ export declare class ExtensionDeploymentConfigService {
      * applies it on this replica right away.
      */
     put(plugin: string, values: Record<string, unknown>, actor: string, actorTokenId?: string, secretEntries?: readonly SecretEntry[]): Promise<DeploymentConfigView>;
+    /**
+     * Clears the deployment config stored in PG: the `extension_deployment_configs` row and every
+     * secret stored for the extension (any path, also ones an older version declared). Fields from
+     * the startup config (file / Nacos / env) are untouched and stay in effect (they stay
+     * `readonly` in the view; only the startup config changes them). Unknown to the deployment ->
+     * `extension.not_found`.
+     * In a transaction: `lockAndAuthorize` (re-checks the super admin under the lock), the advisory
+     * lock per extension, audit `extension.config_cleared` (detail `clearedPaths`: the stored field
+     * paths, never values; nothing stored -> no audit, no publish). After the commit publishes
+     * {@link PLUGIN_DEPLOYMENT_CONFIG_TOPIC} and applies it on this replica: every replica re-reads,
+     * and the extension loads from what remains, or is unloaded and becomes pending configuration
+     * when that is missing or invalid (`ExtensionHost.applyDeploymentConfig`), without a restart.
+     */
+    clear(plugin: string, actor: string, actorTokenId?: string): Promise<DeploymentConfigView>;
+    private clearStored;
     /**
      * Secret entries name a secret record field some hint names (else 400 `validation_failed`, also
      * for a path given in `values` too, an entry with neither `value` nor `renameFrom`, or a key

package/dist/extensions/deployment-config.js

@@ -16,6 +16,7 @@ import { ApiError } from "../errors.js";
 import { audit } from "../identity/audit.js";
 import { SuperAdminLock } from "../identity/super-admin.js";
 import { KernelConfigService } from "../infra/config/kernel-config.service.js";
+import { afterCommit } from "../infra/database/after-commit.js";
 import { KernelDb } from "../infra/database/kernel-db.js";
 import { TransactionHost } from "../infra/database/transaction-host.js";
 import { Transactional } from "../infra/database/transactional.decorator.js";
@@ -193,6 +194,85 @@ let ExtensionDeploymentConfigService = class ExtensionDeploymentConfigService {
         }
         return this.render(plugin, info, stored, await this.displayNames.get(plugin));
     }
+    /**
+     * Clears the deployment config stored in PG: the `extension_deployment_configs` row and every
+     * secret stored for the extension (any path, also ones an older version declared). Fields from
+     * the startup config (file / Nacos / env) are untouched and stay in effect (they stay
+     * `readonly` in the view; only the startup config changes them). Unknown to the deployment ->
+     * `extension.not_found`.
+     * In a transaction: `lockAndAuthorize` (re-checks the super admin under the lock), the advisory
+     * lock per extension, audit `extension.config_cleared` (detail `clearedPaths`: the stored field
+     * paths, never values; nothing stored -> no audit, no publish). After the commit publishes
+     * {@link PLUGIN_DEPLOYMENT_CONFIG_TOPIC} and applies it on this replica: every replica re-reads,
+     * and the extension loads from what remains, or is unloaded and becomes pending configuration
+     * when that is missing or invalid (`ExtensionHost.applyDeploymentConfig`), without a restart.
+     */
+    async clear(plugin, actor, actorTokenId) {
+        const info = await this.info(plugin);
+        await this.clearStored(plugin, info.fields.map((f) => f.path), actor, actorTokenId);
+        return this.render(plugin, info, {}, await this.displayNames.get(plugin));
+    }
+    async clearStored(plugin, fieldPaths, actor, actorTokenId) {
+        const t = this.db;
+        await this.adminLock.lockAndAuthorize(actor);
+        await this.configLock.lock(plugin);
+        const row = await t
+            .selectFrom("extension_deployment_configs")
+            .select("config")
+            .where("plugin", "=", plugin)
+            .forUpdate()
+            .executeTakeFirst();
+        const prefix = secretKey(plugin, "");
+        const secretKeys = (await t
+            .selectFrom("secrets")
+            .select("key")
+            .where("namespace", "=", SECRETS_NAMESPACE)
+            .where("org_id", "=", DEPLOYMENT_SECRETS_ORG)
+            .execute())
+            .map((r) => r.key)
+            .filter((k) => k.startsWith(prefix));
+        if (row === undefined && secretKeys.length === 0)
+            return;
+        if (secretKeys.length > 0) {
+            await t
+                .deleteFrom("secrets")
+                .where("namespace", "=", SECRETS_NAMESPACE)
+                .where("org_id", "=", DEPLOYMENT_SECRETS_ORG)
+                .where("key", "in", secretKeys)
+                .execute();
+        }
+        await t.deleteFrom("extension_deployment_configs").where("plugin", "=", plugin).execute();
+        const clearedPaths = [
+            ...new Set([
+                ...fieldPaths.filter((p) => getPath(row?.config ?? {}, p) !== undefined),
+                ...secretKeys.map((k) => k.slice(prefix.length)),
+            ]),
+        ].sort();
+        await audit(t, {
+            actorAccountId: actor,
+            ...(actorTokenId !== undefined && { actorTokenId }),
+            action: "extension.config_cleared",
+            target: plugin,
+            detail: { clearedPaths },
+        });
+        afterCommit(async () => {
+            try {
+                await this.bus.publish(PLUGIN_DEPLOYMENT_CONFIG_TOPIC, { plugin });
+            }
+            catch (err) {
+                this.log.warn("cannot publish plugin-deployment-config after clearing", { plugin, err });
+            }
+            try {
+                await this.lifecycle.applyConfig(plugin);
+            }
+            catch (err) {
+                this.log.error("applying the cleared plugin deployment config on this replica failed", {
+                    plugin,
+                    err,
+                });
+            }
+        });
+    }
     /**
      * Secret entries name a secret record field some hint names (else 400 `validation_failed`, also
      * for a path given in `values` too, an entry with neither `value` nor `renameFrom`, or a key
@@ -405,6 +485,9 @@ __decorate([
         accessMode: "read only",
     })
 ], ExtensionDeploymentConfigService.prototype, "readStored", null);
+__decorate([
+    Transactional()
+], ExtensionDeploymentConfigService.prototype, "clearStored", null);
 __decorate([
     Transactional()
 ], ExtensionDeploymentConfigService.prototype, "write", null);

package/dist/extensions/extensions.module.js

@@ -6,19 +6,16 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 };
 import { Module } from "@nestjs/common";
 import { SuperAdminLockModule } from "../identity/super-admin.js";
+import { ModelsModule } from "../models/models.module.js";
 import { OrgLockModule } from "../orgs/org-lock.js";
 import { StorageModule } from "../storage/storage.module.js";
 import { EmbedTokensModule } from "../ui/embed-token.js";
 import { ExtensionAdminOps } from "./admin-ops.js";
 import { ExtensionAdmin } from "./admin-view.js";
-import { ExtensionApprovals } from "./approvals.js";
-import { ExtensionBlobs } from "./blobs.js";
 import { BootstrapService } from "./bootstrap.js";
 import { ExtensionDeploymentConfigService } from "./deployment-config.js";
 import { ExtensionDisplayNames } from "./display-name.js";
-import { EffectiveConfigs } from "./effective-config.js";
 import { ExtensionHost } from "./host.js";
-import { ExtensionInstalls } from "./installs.js";
 import { ExtensionLifecycle } from "./lifecycle.js";
 import { PluginApproveLock, PluginDeploymentConfigLock, PluginInstallLock } from "./locks.js";
 import { OrgExtensionConfigs } from "./org-config.js";
@@ -26,6 +23,8 @@ import { OrgOverrides } from "./org-overrides.js";
 import { ExtensionPointDefaults } from "./point-defaults.js";
 import { ExtensionRegistryModule } from "./registry.js";
 import { ReplicaStatusStore } from "./sources.js";
+import { ExtensionStateModule } from "./state.module.js";
+import { ExtensionAvailability } from "./unavailable.js";
 /**
  * The extensions domain: the extension host (it builds each `ctx` from the injected kernel
  * services), the package store and install records (the desired state the host converges to, one
@@ -43,14 +42,14 @@ ExtensionsModule = __decorate([
             StorageModule,
             // ctx.ui verifies embed tokens with the one provider the UI routes issue them with
             EmbedTokensModule,
+            ExtensionStateModule,
+            // ctx.models: the embeddings broker (models domain, below the host through ExtensionStateModule)
+            ModelsModule,
         ],
         providers: [
             PluginInstallLock,
             PluginApproveLock,
             PluginDeploymentConfigLock,
-            ExtensionApprovals,
-            ExtensionBlobs,
-            ExtensionInstalls,
             ReplicaStatusStore,
             ExtensionHost,
             ExtensionLifecycle,
@@ -58,19 +57,17 @@ ExtensionsModule = __decorate([
             ExtensionAdminOps,
             ExtensionDisplayNames,
             ExtensionDeploymentConfigService,
-            EffectiveConfigs,
             OrgExtensionConfigs,
             OrgOverrides,
             ExtensionPointDefaults,
             BootstrapService,
+            ExtensionAvailability,
         ],
         exports: [
             ExtensionRegistryModule,
+            ExtensionStateModule,
             PluginInstallLock,
             PluginApproveLock,
-            ExtensionApprovals,
-            ExtensionBlobs,
-            ExtensionInstalls,
             ReplicaStatusStore,
             ExtensionHost,
             ExtensionLifecycle,
@@ -78,11 +75,11 @@ ExtensionsModule = __decorate([
             ExtensionAdminOps,
             ExtensionDisplayNames,
             ExtensionDeploymentConfigService,
-            EffectiveConfigs,
             OrgExtensionConfigs,
             OrgOverrides,
             ExtensionPointDefaults,
             BootstrapService,
+            ExtensionAvailability,
         ],
     })
 ], ExtensionsModule);