fix(api): honor agent allowedOrigins in HTTP CORS; bundle pending platform WIP

main.ts now resolves CORS per-request: for /api/agent/:agentId/* routes it
checks the request Origin against that agent's allowedOrigins (mirroring the
/ws/client handshake), so the embedded Bridle widget's transcript/message
HTTP calls are no longer CORS-blocked on whitelisted customer origins. The
static CORS_ORIGIN allowlist still covers dashboard/admin.

Also bundles in-progress changes across admin, api (agent/browser/integration/
pod/reins/usage) and the generated SDK clients.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: dmitriyzhuk

admin/slices/agent/agent/components/agent/Provider.vue

@@ -68,6 +68,11 @@ const { data: usage, pending: usagePending, refresh: refreshUsage } = useAsyncDa
   () => usageStore.fetchForAgent(props.id),
   { lazy: true },
 );
+const { data: metrics, pending: metricsPending, refresh: refreshMetrics } = useAsyncData(
+  `admin-agent-metrics-${props.id}`,
+  () => agentStore.fetchMetrics(props.id),
+  { lazy: true },
+);
 const { data: template, pending: templatePending } = useAsyncData(
   `admin-agent-template-${props.id}`,
   async () => {
@@ -160,6 +165,35 @@ function fmtUsd(n: number) {
   return '$' + n.toFixed(2);
 }
 
+function fmtBytes(bytes: number): string {
+  if (!bytes || bytes < 0) return '0 B';
+  const units = ['B', 'KiB', 'MiB', 'GiB', 'TiB'];
+  let i = 0;
+  let n = bytes;
+  while (n >= 1024 && i < units.length - 1) {
+    n /= 1024;
+    i += 1;
+  }
+  return `${n < 10 ? n.toFixed(1) : Math.round(n)} ${units[i]}`;
+}
+
+function fmtCpu(milli: number): string {
+  if (!milli || milli < 0) return '0';
+  if (milli < 1000) return `${Math.round(milli)}m`;
+  return `${(milli / 1000).toFixed(2)} CPU`;
+}
+
+function pct(used: number, total: number): number {
+  if (!total) return 0;
+  return Math.min(100, Math.max(0, Math.round((used / total) * 100)));
+}
+
+function pctClass(p: number): string {
+  if (p >= 90) return 'bg-destructive';
+  if (p >= 70) return 'bg-amber-500';
+  return 'bg-primary';
+}
+
 const restarting = ref(false);
 const restartError = ref<string | null>(null);
 
@@ -437,9 +471,37 @@ watch(activeTab, (tab) => {
   if (tab === 'overview') {
     refresh();
     refreshUsage();
+    refreshMetrics();
   }
 });
 
+// Metrics polling while the Overview tab is active. metrics-server samples on
+// a ~15s window — 10s polling gives the user near-live numbers without
+// hammering the API.
+let metricsTimer: ReturnType<typeof setInterval> | null = null;
+function stopMetricsPolling() {
+  if (metricsTimer) {
+    clearInterval(metricsTimer);
+    metricsTimer = null;
+  }
+}
+function startMetricsPolling() {
+  stopMetricsPolling();
+  metricsTimer = setInterval(() => refreshMetrics(), 10_000);
+}
+watch(
+  activeTab,
+  (tab) => {
+    if (tab === 'overview') {
+      startMetricsPolling();
+    } else {
+      stopMetricsPolling();
+    }
+  },
+  { immediate: true },
+);
+onBeforeUnmount(stopMetricsPolling);
+
 </script>
 
 <template>
@@ -865,6 +927,117 @@ watch(activeTab, (tab) => {
             </CardContent>
           </Card>
 
+          <Card>
+            <CardHeader>
+              <div class="flex items-start justify-between gap-3">
+                <div>
+                  <CardTitle>Resource usage</CardTitle>
+                  <CardDescription>
+                    Live pod CPU / memory (metrics-server) and free disk on the
+                    K8s node hosting the pod. Refreshes every 10 seconds.
+                  </CardDescription>
+                </div>
+                <Button
+                  variant="outline"
+                  size="sm"
+                  :disabled="metricsPending"
+                  @click="refreshMetrics"
+                >
+                  <IconRefresh
+                    class="size-4"
+                    :class="{ 'animate-spin': metricsPending }"
+                  />
+                </Button>
+              </div>
+            </CardHeader>
+            <CardContent>
+              <div v-if="metricsPending && !metrics" class="space-y-4">
+                <Skeleton v-for="i in 3" :key="i" class="h-12 w-full" />
+              </div>
+              <div
+                v-else-if="!metrics"
+                class="text-sm text-muted-foreground"
+              >
+                No metrics available. Either no pod is running yet, or
+                <code>metrics-server</code> is not installed in the cluster.
+              </div>
+              <div v-else class="space-y-5">
+                <div>
+                  <div class="mb-1 flex items-baseline justify-between gap-2 text-sm">
+                    <span class="font-medium">CPU</span>
+                    <span class="font-mono text-xs text-muted-foreground">
+                      {{ fmtCpu(metrics.pod.cpuMilli) }} /
+                      {{ metrics.pod.cpuLimitMilli ? fmtCpu(metrics.pod.cpuLimitMilli) : '—' }}
+                      <span class="ml-1">({{ pct(metrics.pod.cpuMilli, metrics.pod.cpuLimitMilli) }}%)</span>
+                    </span>
+                  </div>
+                  <div class="h-2 w-full overflow-hidden rounded bg-muted">
+                    <div
+                      class="h-full transition-all"
+                      :class="pctClass(pct(metrics.pod.cpuMilli, metrics.pod.cpuLimitMilli))"
+                      :style="{ width: pct(metrics.pod.cpuMilli, metrics.pod.cpuLimitMilli) + '%' }"
+                    />
+                  </div>
+                </div>
+
+                <div>
+                  <div class="mb-1 flex items-baseline justify-between gap-2 text-sm">
+                    <span class="font-medium">Memory</span>
+                    <span class="font-mono text-xs text-muted-foreground">
+                      {{ fmtBytes(metrics.pod.memBytes) }} /
+                      {{ metrics.pod.memLimitBytes ? fmtBytes(metrics.pod.memLimitBytes) : '—' }}
+                      <span class="ml-1">({{ pct(metrics.pod.memBytes, metrics.pod.memLimitBytes) }}%)</span>
+                    </span>
+                  </div>
+                  <div class="h-2 w-full overflow-hidden rounded bg-muted">
+                    <div
+                      class="h-full transition-all"
+                      :class="pctClass(pct(metrics.pod.memBytes, metrics.pod.memLimitBytes))"
+                      :style="{ width: pct(metrics.pod.memBytes, metrics.pod.memLimitBytes) + '%' }"
+                    />
+                  </div>
+                </div>
+
+                <div>
+                  <div class="mb-1 flex items-baseline justify-between gap-2 text-sm">
+                    <span class="font-medium">
+                      Node disk
+                      <span class="ml-1 font-mono text-xs text-muted-foreground">
+                        {{ metrics.node.name }}
+                      </span>
+                    </span>
+                    <span class="font-mono text-xs text-muted-foreground">
+                      {{ fmtBytes(metrics.node.diskCapacityBytes - metrics.node.diskAvailBytes) }} /
+                      {{ fmtBytes(metrics.node.diskCapacityBytes) }}
+                      <span class="ml-1">
+                        ({{ pct(
+                          metrics.node.diskCapacityBytes - metrics.node.diskAvailBytes,
+                          metrics.node.diskCapacityBytes
+                        ) }}%)
+                      </span>
+                    </span>
+                  </div>
+                  <div class="h-2 w-full overflow-hidden rounded bg-muted">
+                    <div
+                      class="h-full transition-all"
+                      :class="pctClass(pct(
+                        metrics.node.diskCapacityBytes - metrics.node.diskAvailBytes,
+                        metrics.node.diskCapacityBytes
+                      ))"
+                      :style="{ width: pct(
+                        metrics.node.diskCapacityBytes - metrics.node.diskAvailBytes,
+                        metrics.node.diskCapacityBytes
+                      ) + '%' }"
+                    />
+                  </div>
+                  <p class="mt-1 text-xs text-muted-foreground">
+                    {{ fmtBytes(metrics.node.diskAvailBytes) }} free
+                  </p>
+                </div>
+              </div>
+            </CardContent>
+          </Card>
+
           <Card>
             <CardHeader>
               <CardTitle>Runtime</CardTitle>

admin/slices/agent/agent/stores/agent.ts

@@ -53,6 +53,20 @@ export interface IAgentResources {
   memory: string;
 }
 
+export interface IAgentMetrics {
+  pod: {
+    cpuMilli: number;
+    memBytes: number;
+    cpuLimitMilli: number;
+    memLimitBytes: number;
+  };
+  node: {
+    name: string;
+    diskAvailBytes: number;
+    diskCapacityBytes: number;
+  };
+}
+
 export interface IAgentData {
   id: string;
   name: string;
@@ -348,6 +362,12 @@ export const useAgentStore = defineStore('agent', () => {
     return env?.data ?? [];
   }
 
+  async function fetchMetrics(id: string): Promise<IAgentMetrics | null> {
+    const res = await client.instance.get(`/agents/${id}/metrics`);
+    const env = res.data as ApiEnvelope<IAgentMetrics | null> | undefined;
+    return env?.data ?? null;
+  }
+
   return {
     agents,
     fetchAll,
@@ -361,6 +381,7 @@ export const useAgentStore = defineStore('agent', () => {
     demoteAdmin,
     fetchLogs,
     fetchEnv,
+    fetchMetrics,
     isPendingRestart,
     markPendingRestart,
     clearPendingRestart,

admin/slices/agent/template/components/template/Form.vue

@@ -35,10 +35,10 @@ const form = reactive<{
 }>({
   name: props.initialValues?.name ?? '',
   description: props.initialValues?.description ?? '',
-  image: props.initialValues?.image ?? '',
+  image: props.initialValues?.image ?? 'ghcr.io/cleanslice/runtime:latest',
   defaultResources: {
-    cpu: props.initialValues?.defaultResources?.cpu ?? '500m',
-    memory: props.initialValues?.defaultResources?.memory ?? '512Mi',
+    cpu: props.initialValues?.defaultResources?.cpu ?? '2000m',
+    memory: props.initialValues?.defaultResources?.memory ?? '2Gi',
   },
   defaultKnowledgeIds: [...(props.initialValues?.defaultKnowledgeIds ?? [])],
 });
@@ -70,8 +70,8 @@ function onSubmit(): void {
     description: form.description.trim(),
     image: form.image.trim(),
     defaultResources: {
-      cpu: form.defaultResources.cpu.trim() || '500m',
-      memory: form.defaultResources.memory.trim() || '512Mi',
+      cpu: form.defaultResources.cpu.trim() || '2000m',
+      memory: form.defaultResources.memory.trim() || '2Gi',
     },
     defaultKnowledgeIds: [...form.defaultKnowledgeIds],
   });

admin/slices/setup/api/data/repositories/api/schemas.gen.ts

@@ -572,6 +572,36 @@ export const CreateSourceDtoSchema = {
   required: ["type", "name"],
 } as const;
 
+export const AddFromSitemapDtoSchema = {
+  type: "object",
+  properties: {
+    sitemapUrl: {
+      type: "string",
+      example: "https://developer.paypal.com/sitemap.xml",
+    },
+    urlPrefix: {
+      type: "string",
+      example: "https://developer.paypal.com/docs/checkout/",
+    },
+  },
+  required: ["sitemapUrl"],
+} as const;
+
+export const AddFromSitemapResultDtoSchema = {
+  type: "object",
+  properties: {
+    added: {
+      type: "number",
+      example: 47,
+    },
+    discovered: {
+      type: "number",
+      example: 51,
+    },
+  },
+  required: ["added", "discovered"],
+} as const;
+
 export const AgentPodStatusDtoSchema = {
   type: "object",
   properties: {
@@ -655,6 +685,65 @@ export const AgentStatusDtoSchema = {
   required: ["agent", "pod"],
 } as const;
 
+export const AgentPodMetricsDtoSchema = {
+  type: "object",
+  properties: {
+    cpuMilli: {
+      type: "number",
+      example: 234,
+      description: "Current CPU usage in millicores",
+    },
+    memBytes: {
+      type: "number",
+      example: 471859200,
+      description: "Current memory usage in bytes",
+    },
+    cpuLimitMilli: {
+      type: "number",
+      example: 2000,
+      description: "CPU limit in millicores",
+    },
+    memLimitBytes: {
+      type: "number",
+      example: 2147483648,
+      description: "Memory limit in bytes",
+    },
+  },
+  required: ["cpuMilli", "memBytes", "cpuLimitMilli", "memLimitBytes"],
+} as const;
+
+export const AgentNodeMetricsDtoSchema = {
+  type: "object",
+  properties: {
+    name: {
+      type: "string",
+      example: "k3s-agent-gnk",
+    },
+    diskAvailBytes: {
+      type: "number",
+      example: 157109764096,
+    },
+    diskCapacityBytes: {
+      type: "number",
+      example: 163817959424,
+    },
+  },
+  required: ["name", "diskAvailBytes", "diskCapacityBytes"],
+} as const;
+
+export const AgentMetricsDtoSchema = {
+  type: "object",
+  properties: {
+    pod: {
+      $ref: "#/components/schemas/AgentPodMetricsDto",
+    },
+    node: {
+      $ref: "#/components/schemas/AgentNodeMetricsDto",
+    },
+  },
+  required: ["pod", "node"],
+} as const;
+
 export const AgentEnvVarDtoSchema = {
   type: "object",
   properties: {
@@ -1053,6 +1142,11 @@ export const ImportSkillUrlDtoSchema = {
     name: {
       type: "string",
     },
+    overwrite: {
+      type: "boolean",
+      description:
+        "If true and a skill with the same slug already exists, fully replace it instead of returning 409.",
+    },
   },
   required: ["url"],
 } as const;
@@ -1075,6 +1169,11 @@ export const ImportSkillDtoSchema = {
       description:
         "Override the auto-derived slug. Lowercase letters, digits and dashes.",
     },
+    overwrite: {
+      type: "boolean",
+      description:
+        "If true and a skill with the same slug already exists, fully replace it instead of returning 409.",
+    },
   },
   required: ["repo", "path"],
 } as const;