@capybara-hq/kernel 0.1.0-rc.6 → 0.1.0-rc.8

package/bootstrap.json

@@ -3,7 +3,7 @@
   "schemaVersion": 1,
   "marketplace": {
     "url": "https://github.com/capybara-hq/plugins.git",
-    "commit": "77f0ac0c0bbb1e7e3ea66ae3bd7931f0ed06b777"
+    "commit": "0bd7fafa0572066198d64b5fde159f758123ef62"
   },
   "plugins": [
     {
@@ -38,6 +38,30 @@
       "integrity": "sha512-F714dJ023p8XcrPXYNZyjiow5BXza5KTdlJV4Uw8spgulgjPSF44n0SVMEA1iyYCwOFrr58NSvw51AqmOYg6Fw==",
       "required": false
     },
+    {
+      "name": "deepseek",
+      "source": "npm",
+      "npm": "@capybara-hq/plugin-deepseek",
+      "version": "0.1.0-rc.0",
+      "integrity": "sha512-/3+qpvDChcPpW6mL7EdMfdi6X56WDau2k725rXT79fvKI1P7q8tD5e7VVAn7eOKJuiNRx8UiH/704SzbmcVR6A==",
+      "required": false
+    },
+    {
+      "name": "bailian",
+      "source": "npm",
+      "npm": "@capybara-hq/plugin-bailian",
+      "version": "0.1.0-rc.0",
+      "integrity": "sha512-ggAM/56wS7bEEwM/ZYQOQeLtH8QvWAFZyd2BPgSBvkOECZXwggavY6357SoPEmLevyNQH6PxR42uwxF8EuvJNg==",
+      "required": false
+    },
+    {
+      "name": "ark",
+      "source": "npm",
+      "npm": "@capybara-hq/plugin-ark",
+      "version": "0.1.0-rc.0",
+      "integrity": "sha512-LqLgUj1MjtzBX9t6NR9YMEVOHSGTobQjtbbU1c0ifcKxEpxFg/2LqK12wyhV6eSaZJQGj9TPhkUfh14Y49PXwg==",
+      "required": false
+    },
     {
       "name": "connector-mcp",
       "source": "npm",
@@ -66,8 +90,8 @@
       "name": "sandbox-docker",
       "source": "npm",
       "npm": "@capybara-hq/plugin-sandbox-docker",
-      "version": "0.1.0-rc.2",
-      "integrity": "sha512-f5BiecQQvRLI8NaGHUy3l+nNvcCLXTQnHQ8od93PAbBpg6q0EkAvZ7R/M4yZ7dK7PeIan61VB+QfwlnpLLw27Q==",
+      "version": "0.1.0-rc.5",
+      "integrity": "sha512-Q+4s3lG/kii5cHaIfBStCqvK2Z1IVpjeAWUN3cuxIwhQHc2HNTYSpKO5R9JfC8J3ajC8KEO+LkED4iI9oCCcGg==",
       "required": false
     },
     {

package/dist/admin/admin.controller.d.ts

@@ -1,5 +1,5 @@
 import type { LocalizedName, Logger } from "@capybara-hq/plugin-sdk";
-import { z } from "zod";
+import type { z } from "zod";
 import { CatalogRequestsService } from "../catalog/requests.service.js";
 import { ExtensionAdmin } from "../extensions/admin-view.js";
 import { ExtensionDisplayNames } from "../extensions/display-name.js";
@@ -14,7 +14,8 @@ import { type ModelPrice, type ModelPricePut, PricesService } from "../models/pr
 import { ModelPurposesService, type PurposeListing, type PurposePut } from "../models/purposes.js";
 import { type Org, OrgsService } from "../orgs/orgs.service.js";
 import { ProviderRegistry, type ProviderStatus } from "../runtime/providers.js";
-import type { SubagentLimits } from "../runtime/subagents/limits.js";
+import { AccountListQuery, AccountParams, CreateAccountBody, DeploymentSettingsBody, PurposeParams, UpdateAccountBody } from "./admin.schemas.js";
+import { type LimitDefaults } from "./limit-defaults.js";
 /** 后台概览（`GET /api/v1/admin/overview`）的计数。 */
 export interface AdminOverview {
     /**
@@ -27,69 +28,6 @@ export interface AdminOverview {
     orgs: number;
     accounts: number;
 }
-/**
- * The deployment's defaults of the per-org limits (with `GET /api/v1/admin/orgs`): what an
- * organization without an override gets, from the live config. `subagents.maxDispatchesPerRun` and
- * `maxTokensPerRun` of 0 mean no limit.
- */
-export interface LimitDefaults {
-    /** `runtime.orgConcurrency`. */
-    runConcurrency: number;
-    /** `sandbox.limits.cpu` / `memoryMb`. */
-    sandbox: {
-        cpu: number;
-        memoryMb: number;
-    };
-    /** `subagents.*`. */
-    subagents: SubagentLimits;
-}
-declare const ListQuerySchema: z.ZodObject<{
-    after: z.ZodOptional<z.ZodString>;
-    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
-}, z.core.$strip>;
-declare const CreateAccountSchema: z.ZodObject<{
-    login: z.ZodString;
-    password: z.ZodString;
-    displayName: z.ZodString;
-    email: z.ZodOptional<z.ZodEmail>;
-    superAdmin: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strip>;
-declare const UpdateAccountSchema: z.ZodObject<{
-    displayName: z.ZodOptional<z.ZodString>;
-    status: z.ZodOptional<z.ZodEnum<{
-        active: "active";
-        disabled: "disabled";
-    }>>;
-    isSuperAdmin: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strip>;
-/** 至少给出一个键；`runConcurrencyOverrides` 按组织合并，值为 null 删除该组织的覆盖。 */
-declare const SettingsSchema: z.ZodObject<{
-    orgCreation: z.ZodOptional<z.ZodEnum<{
-        anyone: "anyone";
-        super_admin: "super_admin";
-    }>>;
-    runConcurrencyOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodNumber>>>;
-    priceCurrency: z.ZodOptional<z.ZodString>;
-    sandboxLimitOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodObject<{
-        cpu: z.ZodOptional<z.ZodNumber>;
-        memoryMb: z.ZodOptional<z.ZodNumber>;
-    }, z.core.$strict>>>>;
-    subagentLimitOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodObject<{
-        maxDepth: z.ZodOptional<z.ZodNumber>;
-        maxConcurrentPerConversation: z.ZodOptional<z.ZodNumber>;
-        maxDispatchesPerRun: z.ZodOptional<z.ZodNumber>;
-        maxTokensPerRun: z.ZodOptional<z.ZodNumber>;
-    }, z.core.$strict>>>>;
-    customConnectors: z.ZodOptional<z.ZodEnum<{
-        allow: "allow";
-        deny: "deny";
-    }>>;
-    customSkills: z.ZodOptional<z.ZodEnum<{
-        allow: "allow";
-        deny: "deny";
-    }>>;
-    orgMarketplaceBrowse: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strict>;
 /**
  * 超级管理员端点（`/api/v1/admin/*`）：只接受超级管理员的 Web 会话或个人令牌；
  * 服务令牌一律 `forbidden`（未标 `@AllowService`）。
@@ -115,15 +53,15 @@ export declare class AdminController {
      * 全部账号，按 id 升序分页：`next` 为下一页的游标（作为 `after` 传回），没有更多时为 null。
      * 多取一条判断是否还有下一页。
      */
-    listAccounts(q: z.infer<typeof ListQuerySchema>): Promise<{
+    listAccounts(q: z.infer<typeof AccountListQuery>): Promise<{
         accounts: Account[];
         next: string | null;
     }>;
-    createAccount(principal: Principal, body: z.infer<typeof CreateAccountSchema>): Promise<{
+    createAccount(principal: Principal, body: z.infer<typeof CreateAccountBody>): Promise<{
         account: Account;
     }>;
     /** 改显示名 / 状态 / 超级管理员；停用时同时吊销该账号的全部会话与个人令牌。 */
-    updateAccount(principal: Principal, accountId: string, body: z.infer<typeof UpdateAccountSchema>): Promise<{
+    updateAccount(principal: Principal, { accountId }: z.infer<typeof AccountParams>, body: z.infer<typeof UpdateAccountBody>): Promise<{
         account: Account;
     }>;
     /**
@@ -137,8 +75,7 @@ export declare class AdminController {
         limitDefaults: LimitDefaults;
     }>;
     getSettings(): Promise<DeploymentSettings>;
-    private limitDefaults;
-    putSettings(principal: Principal, body: z.infer<typeof SettingsSchema>): Promise<DeploymentSettings>;
+    putSettings(principal: Principal, body: z.infer<typeof DeploymentSettingsBody>): Promise<DeploymentSettings>;
     /**
      * 模型供应商与模型（后台「模型」页）：每个供应商带状态，列模型失败的标 `error`，不影响其他供应商；
      * 一并返回价格表与币种（改价仍走 `PUT /admin/model-prices`）。Each provider carries its extension's
@@ -174,8 +111,7 @@ export declare class AdminController {
         purposes: PurposeListing[];
     }>;
     /** 设置一个用途的部署默认，或 `target: null` 清除。 */
-    putModelPurpose(principal: Principal, purpose: string, body: PurposePut): Promise<{
+    putModelPurpose(principal: Principal, { purpose }: z.infer<typeof PurposeParams>, body: PurposePut): Promise<{
         purpose: PurposeListing;
     }>;
 }
-export {};

package/dist/admin/admin.controller.js

@@ -7,17 +7,15 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Controller, Get, HttpCode, Inject, Param, Patch, Post, Put } from "@nestjs/common";
-import { z } from "zod";
+import { Controller, Get, HttpCode, Inject, Patch, Post, Put } from "@nestjs/common";
 import { CatalogRequestsService } from "../catalog/requests.service.js";
 import { ExtensionAdmin } from "../extensions/admin-view.js";
 import { ExtensionDisplayNames } from "../extensions/display-name.js";
 import { extensionNeedsAction } from "../extensions/permission-view.js";
 import { AccountsService } from "../identity/accounts.js";
-import { MAX_PASSWORD_LENGTH } from "../identity/login.js";
 import { CurrentPrincipal, patTokenId, requireUser, SuperAdmin, } from "../identity/principal.js";
 import { SessionService } from "../identity/sessions.js";
-import { DEPLOYMENT_SETTINGS_PATCH, SettingsService, } from "../identity/settings.js";
+import { SettingsService } from "../identity/settings.js";
 import { KernelConfigService } from "../infra/config/kernel-config.service.js";
 import { KERNEL_LOGGER } from "../infra/tokens.js";
 import { createZodDto } from "../infra/validation/create-zod-dto.js";
@@ -29,33 +27,19 @@ import { purposeTargetOf } from "../models/purposes.controller.js";
 import { ModelPurposesService, PurposePutDto, withDeclaredByNames, } from "../models/purposes.js";
 import { OrgsService } from "../orgs/orgs.service.js";
 import { ProviderRegistry } from "../runtime/providers.js";
-const ListQuerySchema = z.object({
-    after: z.string().min(1).optional(),
-    limit: z.coerce.number().int().min(1).max(200).default(50),
-});
-class AccountListQuery extends createZodDto(ListQuerySchema, "AccountListQuery") {
+import { AccountListQuery, AccountParams, CreateAccountBody, DeploymentSettingsBody, PurposeParams, UpdateAccountBody, } from "./admin.schemas.js";
+import { limitDefaults } from "./limit-defaults.js";
+class AccountListQueryDto extends createZodDto(AccountListQuery, "AccountListQuery") {
 }
-const CreateAccountSchema = z.object({
-    login: z.string().min(1).max(64),
-    password: z.string().min(1).max(MAX_PASSWORD_LENGTH),
-    displayName: z.string().trim().min(1).max(100),
-    email: z.email().max(254).optional(),
-    superAdmin: z.boolean().optional(),
-});
-class CreateAccountBody extends createZodDto(CreateAccountSchema, "CreateAccountBody") {
+class CreateAccountBodyDto extends createZodDto(CreateAccountBody, "CreateAccountBody") {
 }
-const UpdateAccountSchema = z.object({
-    displayName: z.string().trim().min(1).max(100).optional(),
-    status: z.enum(["active", "disabled"]).optional(),
-    isSuperAdmin: z.boolean().optional(),
-});
-class UpdateAccountBody extends createZodDto(UpdateAccountSchema, "UpdateAccountBody") {
+class UpdateAccountBodyDto extends createZodDto(UpdateAccountBody, "UpdateAccountBody") {
 }
-/** 至少给出一个键；`runConcurrencyOverrides` 按组织合并，值为 null 删除该组织的覆盖。 */
-const SettingsSchema = DEPLOYMENT_SETTINGS_PATCH.refine((b) => Object.keys(b).length > 0, {
-    message: "at least one setting is required",
-});
-class DeploymentSettingsBody extends createZodDto(SettingsSchema, "DeploymentSettingsPatch") {
+class AccountParamsDto extends createZodDto(AccountParams, "AccountParams") {
+}
+class PurposeParamsDto extends createZodDto(PurposeParams, "PurposeParams") {
+}
+class DeploymentSettingsBodyDto extends createZodDto(DeploymentSettingsBody, "DeploymentSettingsPatch") {
 }
 // a union schema: a DTO value rather than a class (a class cannot extend a union instance type)
 const ModelPriceBody = createZodDto(MODEL_PRICE_PUT, "ModelPricePut");
@@ -132,7 +116,7 @@ let AdminController = class AdminController {
         return { account };
     }
     /** 改显示名 / 状态 / 超级管理员；停用时同时吊销该账号的全部会话与个人令牌。 */
-    async updateAccount(principal, accountId, body) {
+    async updateAccount(principal, { accountId }, body) {
         const actor = requireUser(principal);
         const patch = {
             ...(body.displayName !== undefined && { displayName: body.displayName }),
@@ -158,20 +142,11 @@ let AdminController = class AdminController {
      * can be given its own value of (the org limits dialog shows them for the values left empty).
      */
     async listOrgs() {
-        return { orgs: await this.orgs.listAll(), limitDefaults: this.limitDefaults() };
+        return { orgs: await this.orgs.listAll(), limitDefaults: limitDefaults(this.config) };
     }
     async getSettings() {
         return this.settings.get();
     }
-    limitDefaults() {
-        const cfg = this.config.get();
-        const { maxDepth, maxConcurrentPerConversation, maxDispatchesPerRun, maxTokensPerRun } = cfg.subagents;
-        return {
-            runConcurrency: cfg.runtime.orgConcurrency,
-            sandbox: { cpu: cfg.sandbox.limits.cpu, memoryMb: cfg.sandbox.limits.memoryMb },
-            subagents: { maxDepth, maxConcurrentPerConversation, maxDispatchesPerRun, maxTokensPerRun },
-        };
-    }
     async putSettings(principal, body) {
         const actor = requireUser(principal);
         return this.settings.update(body, actor.account.id, patTokenId(actor));
@@ -222,7 +197,7 @@ let AdminController = class AdminController {
         return { purposes: await withDeclaredByNames(await this.purposes.list(), this.displayNames) };
     }
     /** 设置一个用途的部署默认，或 `target: null` 清除。 */
-    async putModelPurpose(principal, purpose, body) {
+    async putModelPurpose(principal, { purpose }, body) {
         const actor = requireUser(principal);
         const view = await this.purposes.setDefault(purpose, purposeTargetOf(body), actor.account.id, patTokenId(actor));
         const [listing] = await withDeclaredByNames([view], this.displayNames);
@@ -234,19 +209,19 @@ __decorate([
 ], AdminController.prototype, "overview", null);
 __decorate([
     Get("accounts"),
-    __param(0, ZQuery(AccountListQuery))
+    __param(0, ZQuery(AccountListQueryDto))
 ], AdminController.prototype, "listAccounts", null);
 __decorate([
     Post("accounts"),
     HttpCode(201),
     __param(0, CurrentPrincipal()),
-    __param(1, ZBody(CreateAccountBody))
+    __param(1, ZBody(CreateAccountBodyDto))
 ], AdminController.prototype, "createAccount", null);
 __decorate([
     Patch("accounts/:accountId"),
     __param(0, CurrentPrincipal()),
-    __param(1, Param("accountId")),
-    __param(2, ZBody(UpdateAccountBody))
+    __param(1, ZParam(AccountParamsDto)),
+    __param(2, ZBody(UpdateAccountBodyDto))
 ], AdminController.prototype, "updateAccount", null);
 __decorate([
     Get("orgs")
@@ -257,7 +232,7 @@ __decorate([
 __decorate([
     Put("settings"),
     __param(0, CurrentPrincipal()),
-    __param(1, ZBody(DeploymentSettingsBody))
+    __param(1, ZBody(DeploymentSettingsBodyDto))
 ], AdminController.prototype, "putSettings", null);
 __decorate([
     Get("models")
@@ -282,7 +257,7 @@ __decorate([
 __decorate([
     Put("model-purposes/:purpose"),
     __param(0, CurrentPrincipal()),
-    __param(1, Param("purpose")),
+    __param(1, ZParam(PurposeParamsDto)),
     __param(2, ZBody(PurposePutDto))
 ], AdminController.prototype, "putModelPurpose", null);
 AdminController = __decorate([

package/dist/admin/admin.schemas.d.ts

@@ -0,0 +1,57 @@
+import { z } from "zod";
+import type { RouteSchemas } from "../platform/route-schemas.js";
+/** `GET /api/v1/admin/accounts`: keyset paging by account id. */
+export declare const AccountListQuery: z.ZodObject<{
+    after: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strip>;
+export declare const CreateAccountBody: z.ZodObject<{
+    login: z.ZodString;
+    password: z.ZodString;
+    displayName: z.ZodString;
+    email: z.ZodOptional<z.ZodEmail>;
+    superAdmin: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export declare const AccountParams: z.ZodObject<{
+    accountId: z.ZodString;
+}, z.core.$strip>;
+export declare const UpdateAccountBody: z.ZodObject<{
+    displayName: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        active: "active";
+        disabled: "disabled";
+    }>>;
+    isSuperAdmin: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+/** At least one key; `runConcurrencyOverrides` merges by org, a null value drops that org's. */
+export declare const DeploymentSettingsBody: z.ZodObject<{
+    orgCreation: z.ZodOptional<z.ZodEnum<{
+        anyone: "anyone";
+        super_admin: "super_admin";
+    }>>;
+    runConcurrencyOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodNumber>>>;
+    priceCurrency: z.ZodOptional<z.ZodString>;
+    sandboxLimitOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodObject<{
+        cpu: z.ZodOptional<z.ZodNumber>;
+        memoryMb: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>>>;
+    subagentLimitOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodObject<{
+        maxDepth: z.ZodOptional<z.ZodNumber>;
+        maxConcurrentPerConversation: z.ZodOptional<z.ZodNumber>;
+        maxDispatchesPerRun: z.ZodOptional<z.ZodNumber>;
+        maxTokensPerRun: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>>>;
+    customConnectors: z.ZodOptional<z.ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+    }>>;
+    customSkills: z.ZodOptional<z.ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+    }>>;
+    orgMarketplaceBrowse: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const PurposeParams: z.ZodObject<{
+    purpose: z.ZodString;
+}, z.core.$strip>;
+export declare const ADMIN_ROUTES: readonly RouteSchemas[];

package/dist/admin/admin.schemas.js

@@ -0,0 +1,50 @@
+import { z } from "zod";
+import { MAX_PASSWORD_LENGTH } from "../identity/login.js";
+import { DEPLOYMENT_SETTINGS_PATCH } from "../identity/settings.js";
+import { ModelDisabledPatch, ModelProviderParams } from "../models/enablement.controller.js";
+import { MODEL_PRICE_PUT } from "../models/prices.js";
+import { PURPOSE_PUT } from "../models/purposes.js";
+/** `GET /api/v1/admin/accounts`: keyset paging by account id. */
+export const AccountListQuery = z.object({
+    after: z.string().min(1).optional(),
+    limit: z.coerce.number().int().min(1).max(200).default(50),
+});
+export const CreateAccountBody = z.object({
+    login: z.string().min(1).max(64),
+    password: z.string().min(1).max(MAX_PASSWORD_LENGTH),
+    displayName: z.string().trim().min(1).max(100),
+    email: z.email().max(254).optional(),
+    superAdmin: z.boolean().optional(),
+});
+export const AccountParams = z.object({ accountId: z.string().min(1).max(100) });
+export const UpdateAccountBody = z.object({
+    displayName: z.string().trim().min(1).max(100).optional(),
+    status: z.enum(["active", "disabled"]).optional(),
+    isSuperAdmin: z.boolean().optional(),
+});
+/** At least one key; `runConcurrencyOverrides` merges by org, a null value drops that org's. */
+export const DeploymentSettingsBody = DEPLOYMENT_SETTINGS_PATCH.refine((b) => Object.keys(b).length > 0, { message: "at least one setting is required" });
+export const PurposeParams = z.object({ purpose: z.string().min(1).max(100) });
+export const ADMIN_ROUTES = [
+    { route: "GET /api/v1/admin/overview" },
+    { route: "GET /api/v1/admin/accounts", query: AccountListQuery },
+    { route: "POST /api/v1/admin/accounts", body: CreateAccountBody },
+    {
+        route: "PATCH /api/v1/admin/accounts/:accountId",
+        params: AccountParams,
+        body: UpdateAccountBody,
+    },
+    { route: "GET /api/v1/admin/orgs" },
+    { route: "GET /api/v1/admin/settings" },
+    { route: "PUT /api/v1/admin/settings", body: DeploymentSettingsBody },
+    { route: "GET /api/v1/admin/models" },
+    {
+        route: "PATCH /api/v1/admin/models/:provider/disabled",
+        params: ModelProviderParams,
+        body: ModelDisabledPatch,
+    },
+    { route: "GET /api/v1/admin/model-prices" },
+    { route: "PUT /api/v1/admin/model-prices", body: MODEL_PRICE_PUT },
+    { route: "GET /api/v1/admin/model-purposes" },
+    { route: "PUT /api/v1/admin/model-purposes/:purpose", params: PurposeParams, body: PURPOSE_PUT },
+];

package/dist/admin/extensions.controller.d.ts

@@ -81,6 +81,16 @@ export declare class AdminExtensionsController {
      * config UI hint draws per item (a path no hint names -> 400 `validation_failed`).
      */
     putConfig(principal: Principal, name: string, body: z.infer<typeof ConfigSchema>): Promise<DeploymentConfigView>;
+    /**
+     * Clears the deployment config saved here: the stored fields and every stored secret value of
+     * the extension; audits `extension.config_cleared`. Fields from the startup config (file / Nacos
+     * / env) cannot be removed here: they stay in effect and the returned view still shows them
+     * (`readonly`, with their `source`). Every replica re-reads, the same way as after a PUT: the
+     * extension loads from what remains, or becomes pending configuration when that is missing or
+     * invalid (no restart). Nothing stored -> no change (no audit). Unknown -> 404
+     * `extension.not_found`.
+     */
+    clearConfig(principal: Principal, name: string): Promise<DeploymentConfigView>;
     /**
      * Web approval: writes the snapshot (source web), audits `extension.permissions_approved` and
      * publishes `kernel.plugins.changed`. Package or

package/dist/admin/extensions.controller.js

@@ -138,6 +138,19 @@ let AdminExtensionsController = class AdminExtensionsController {
         const actor = requireUser(principal);
         return this.deploymentConfigs.put(name, body.values, actor.account.id, patTokenId(actor), body.secretEntries);
     }
+    /**
+     * Clears the deployment config saved here: the stored fields and every stored secret value of
+     * the extension; audits `extension.config_cleared`. Fields from the startup config (file / Nacos
+     * / env) cannot be removed here: they stay in effect and the returned view still shows them
+     * (`readonly`, with their `source`). Every replica re-reads, the same way as after a PUT: the
+     * extension loads from what remains, or becomes pending configuration when that is missing or
+     * invalid (no restart). Nothing stored -> no change (no audit). Unknown -> 404
+     * `extension.not_found`.
+     */
+    clearConfig(principal, name) {
+        const actor = requireUser(principal);
+        return this.deploymentConfigs.clear(name, actor.account.id, patTokenId(actor));
+    }
     /**
      * Web approval: writes the snapshot (source web), audits `extension.permissions_approved` and
      * publishes `kernel.plugins.changed`. Package or
@@ -222,6 +235,11 @@ __decorate([
     __param(1, Param("name")),
     __param(2, ZBody(ExtensionConfigBody))
 ], AdminExtensionsController.prototype, "putConfig", null);
+__decorate([
+    Delete(":name/config"),
+    __param(0, CurrentPrincipal()),
+    __param(1, Param("name"))
+], AdminExtensionsController.prototype, "clearConfig", null);
 __decorate([
     Post(":name/approve"),
     HttpCode(200),

package/dist/admin/extensions.schemas.d.ts

@@ -0,0 +1,7 @@
+import { z } from "zod";
+import type { RouteSchemas } from "../platform/route-schemas.js";
+/** `:name` as the lifecycle and detail routes take it (`@Param`). */
+export declare const AdminExtensionNamePathParams: z.ZodObject<{
+    name: z.ZodString;
+}, z.core.$strip>;
+export declare const ADMIN_EXTENSION_ROUTES: readonly RouteSchemas[];

package/dist/admin/extensions.schemas.js

@@ -0,0 +1,10 @@
+import { z } from "zod";
+/** `:name` as the lifecycle and detail routes take it (`@Param`). */
+export const AdminExtensionNamePathParams = z.object({ name: z.string().min(1) });
+export const ADMIN_EXTENSION_ROUTES = [
+    { route: "GET /api/v1/admin/extensions" },
+    { route: "GET /api/v1/admin/extensions/:name", params: AdminExtensionNamePathParams },
+    { route: "POST /api/v1/admin/extensions/:name/enable", params: AdminExtensionNamePathParams },
+    { route: "POST /api/v1/admin/extensions/:name/disable", params: AdminExtensionNamePathParams },
+    { route: "DELETE /api/v1/admin/extensions/:name", params: AdminExtensionNamePathParams },
+];

package/dist/admin/limit-defaults.d.ts

@@ -0,0 +1,20 @@
+import type { KernelConfigService } from "../infra/config/kernel-config.service.js";
+import type { SubagentLimits } from "../runtime/subagents/limits.js";
+/**
+ * The deployment's defaults of the per-org limits (with `GET /api/v1/admin/orgs`): what an
+ * organization without an override gets, from the live config. `subagents.maxDispatchesPerRun` and
+ * `maxTokensPerRun` of 0 mean no limit.
+ */
+export interface LimitDefaults {
+    /** `runtime.orgConcurrency`. */
+    runConcurrency: number;
+    /** `sandbox.limits.cpu` / `memoryMb`. */
+    sandbox: {
+        cpu: number;
+        memoryMb: number;
+    };
+    /** `subagents.*`. */
+    subagents: SubagentLimits;
+}
+/** {@link LimitDefaults} from the live config. */
+export declare function limitDefaults(config: KernelConfigService): LimitDefaults;

package/dist/admin/limit-defaults.js

@@ -0,0 +1,10 @@
+/** {@link LimitDefaults} from the live config. */
+export function limitDefaults(config) {
+    const cfg = config.get();
+    const { maxDepth, maxConcurrentPerConversation, maxDispatchesPerRun, maxTokensPerRun } = cfg.subagents;
+    return {
+        runConcurrency: cfg.runtime.orgConcurrency,
+        sandbox: { cpu: cfg.sandbox.limits.cpu, memoryMb: cfg.sandbox.limits.memoryMb },
+        subagents: { maxDepth, maxConcurrentPerConversation, maxDispatchesPerRun, maxTokensPerRun },
+    };
+}

package/dist/agents/agent-profile.service.d.ts

@@ -3,10 +3,11 @@ import { KernelDb } from "../infra/database/kernel-db.js";
 import { TransactionHost } from "../infra/database/transaction-host.js";
 import { AgentLookup } from "./agent-lookup.js";
 import { AgentsService } from "./agents.service.js";
-import type { AgentProfile, ProfileInput } from "./profile.js";
+import type { AgentProfile, ProfilePatch } from "./profile.js";
 /**
- * Writes an agent's profile (avatar, description, quick actions): display data stored beside the
- * agent, never model-visible, so a change creates no agent version. The permission is the one of
+ * Writes an agent's profile (avatar, quick actions): display data stored beside the agent, never
+ * model-visible, so a change creates no agent version. The description is part of the definition
+ * (run context spec §3.5). The permission is the one of
  * `AgentsService.update` (owner or org admin, checked under the org row lock).
  */
 export declare class AgentProfileService {
@@ -19,11 +20,12 @@ export declare class AgentProfileService {
     /**
      * Applies `patch` (only the given fields) when `expectedUpdatedAt` is still the profile's
      * `updatedAt`, else 409 `agent.profile_conflict` (never a silent overwrite). Audit
-     * `agent.profile_updated` `{ fields, channel }`: `api` for a personal access token, else `web`.
+     * `agent.profile_updated` `{ fields, channel, ...auditDetail }`: `api` for a personal access
+     * token, `agent` for a write through the `Platform` tool (`auditDetail` given), else `web`.
      * An `upload` avatar must be the actor's own upload that no other agent uses (else 404
      * `attachment.not_found`): it is finalized first (outside the transaction, it reads the object
      * store; 503 `storage.unavailable` without one) and bound to the agent inside it.
      */
-    update(orgId: string, agentId: string, actorAccountId: string, patch: ProfileInput, expectedUpdatedAt: string, actorTokenId?: string): Promise<AgentProfile>;
+    update(orgId: string, agentId: string, actorAccountId: string, patch: ProfilePatch, expectedUpdatedAt: string, actorTokenId?: string, auditDetail?: Record<string, unknown>): Promise<AgentProfile>;
     private updateIn;
 }

package/dist/agents/agent-profile.service.js

@@ -18,8 +18,9 @@ import { Transactional } from "../infra/database/transactional.decorator.js";
 import { AgentLookup } from "./agent-lookup.js";
 import { AgentsService } from "./agents.service.js";
 /**
- * Writes an agent's profile (avatar, description, quick actions): display data stored beside the
- * agent, never model-visible, so a change creates no agent version. The permission is the one of
+ * Writes an agent's profile (avatar, quick actions): display data stored beside the agent, never
+ * model-visible, so a change creates no agent version. The description is part of the definition
+ * (run context spec §3.5). The permission is the one of
  * `AgentsService.update` (owner or org admin, checked under the org row lock).
  */
 let AgentProfileService = class AgentProfileService {
@@ -38,18 +39,19 @@ let AgentProfileService = class AgentProfileService {
     /**
      * Applies `patch` (only the given fields) when `expectedUpdatedAt` is still the profile's
      * `updatedAt`, else 409 `agent.profile_conflict` (never a silent overwrite). Audit
-     * `agent.profile_updated` `{ fields, channel }`: `api` for a personal access token, else `web`.
+     * `agent.profile_updated` `{ fields, channel, ...auditDetail }`: `api` for a personal access
+     * token, `agent` for a write through the `Platform` tool (`auditDetail` given), else `web`.
      * An `upload` avatar must be the actor's own upload that no other agent uses (else 404
      * `attachment.not_found`): it is finalized first (outside the transaction, it reads the object
      * store; 503 `storage.unavailable` without one) and bound to the agent inside it.
      */
-    async update(orgId, agentId, actorAccountId, patch, expectedUpdatedAt, actorTokenId) {
+    async update(orgId, agentId, actorAccountId, patch, expectedUpdatedAt, actorTokenId, auditDetail) {
         if (patch.avatar?.kind === "upload") {
             await this.attachments.prepareAgentAvatar(orgId, actorAccountId, patch.avatar.uploadId, agentId);
         }
-        return this.updateIn(orgId, agentId, actorAccountId, patch, expectedUpdatedAt, actorTokenId);
+        return this.updateIn(orgId, agentId, actorAccountId, patch, expectedUpdatedAt, actorTokenId, auditDetail);
     }
-    async updateIn(orgId, agentId, actorAccountId, patch, expectedUpdatedAt, actorTokenId) {
+    async updateIn(orgId, agentId, actorAccountId, patch, expectedUpdatedAt, actorTokenId, auditDetail) {
         const t = this.db.db;
         await this.agents.lockForWrite(orgId, agentId, actorAccountId);
         const current = await t
@@ -63,7 +65,7 @@ let AgentProfileService = class AgentProfileService {
         if (patch.avatar?.kind === "upload") {
             await this.attachments.consumeAgentAvatar(orgId, actorAccountId, patch.avatar.uploadId, agentId);
         }
-        const fields = ["avatar", "description", "quickActions"].filter((f) => patch[f] !== undefined);
+        const fields = ["avatar", "quickActions"].filter((f) => patch[f] !== undefined);
         // nothing to write: no timestamp bump, no audit row
         if (fields.length === 0)
             return (await this.lookup.view(agentId)).profile;
@@ -73,7 +75,6 @@ let AgentProfileService = class AgentProfileService {
             ...(patch.avatar !== undefined && {
                 profile_avatar: patch.avatar === null ? sql `null` : JSON.stringify(patch.avatar),
             }),
-            ...(patch.description !== undefined && { profile_description: patch.description }),
             ...(patch.quickActions !== undefined && {
                 profile_quick_actions: JSON.stringify(patch.quickActions),
             }),
@@ -98,7 +99,11 @@ let AgentProfileService = class AgentProfileService {
             orgId,
             action: "agent.profile_updated",
             target: agentId,
-            detail: { fields, channel: actorTokenId !== undefined ? "api" : "web" },
+            detail: {
+                fields,
+                channel: actorTokenId !== undefined ? "api" : auditDetail !== undefined ? "agent" : "web",
+                ...auditDetail,
+            },
         });
         return (await this.lookup.view(agentId)).profile;
     }