@dudousxd/nestjs-agent-dashboard 0.22.0 → 0.23.0

package/dist/server/index.cjs

@@ -38,6 +38,7 @@ __export(index_exports, {
   AGENT_CONSOLE_ID: () => AGENT_CONSOLE_ID,
   AGENT_DASHBOARD_CONFIG_ID: () => AGENT_DASHBOARD_CONFIG_ID,
   AGENT_GOVERNANCE_QUERIES: () => AGENT_GOVERNANCE_QUERIES,
+  AGENT_OPTIONS: () => AGENT_OPTIONS,
   AGENT_PRICING_STORE: () => AGENT_PRICING_STORE,
   AVIARY_CONSOLES_SLOT: () => AVIARY_CONSOLES_SLOT,
   AgentApiController: () => AgentApiController,
@@ -51,6 +52,7 @@ __export(index_exports, {
   CONSOLE_GATE: () => CONSOLE_GATE,
   CONSOLE_PAGE_METADATA: () => CONSOLE_PAGE_METADATA,
   CONSOLE_PROBE_TIMEOUT_MS: () => CONSOLE_PROBE_TIMEOUT_MS,
+  CONTEXT_ACCESSOR: () => CONTEXT_ACCESSOR,
   ConsoleAccessDenied: () => ConsoleAccessDenied,
   ConsoleAuthorizeFilter: () => ConsoleAuthorizeFilter,
   ConsoleAuthorizeGuard: () => ConsoleAuthorizeGuard,
@@ -147,12 +149,37 @@ function isFiniteNonNegative(value) {
 }
 __name(isFiniteNonNegative, "isFiniteNonNegative");
 
+// src/server/tenancy.ts
+var SLOT = /* @__PURE__ */ Symbol.for("@dudousxd/nestjs-diagnostics:accessor");
+function consoleTenantFilter(option = "inherit", accessor) {
+  const slot = globalThis[SLOT];
+  const a = accessor ?? slot?.current;
+  if (option === false || typeof a?.tenancy !== "function" || !a.tenantFilter) return void 0;
+  const own = typeof option === "object" ? option : {};
+  const inherit = own.enabled === void 0 || own.enabled === "inherit";
+  if (!(inherit ? a.tenancy().enabled : own.enabled)) return void 0;
+  const filter = a.tenantFilter(own.kinds ? {
+    kinds: own.kinds
+  } : void 0);
+  if (filter.mode === "system" || filter.mode === "all") return void 0;
+  if (filter.mode === "tenantless") return {
+    nulls: true
+  };
+  return {
+    tenant: filter.tenant.id,
+    nulls: own.nullRows === "shared"
+  };
+}
+__name(consoleTenantFilter, "consoleTenantFilter");
+
 // src/server/tokens.ts
 var AGENT_GOVERNANCE_QUERIES = /* @__PURE__ */ Symbol.for("@dudousxd/nestjs-agent:governance-queries");
 var AGENT_ACTOR_DIRECTORY = /* @__PURE__ */ Symbol.for("@dudousxd/nestjs-agent:actor-directory");
 var AGENT_PRICING_STORE = /* @__PURE__ */ Symbol.for("@dudousxd/nestjs-agent:pricing-store");
 var AGENT_APPROVAL_PORT = /* @__PURE__ */ Symbol.for("@dudousxd/nestjs-agent:approval-port");
 var AGENT_ACTOR_RESOLVER = /* @__PURE__ */ Symbol.for("@dudousxd/nestjs-agent:actor-resolver");
+var AGENT_OPTIONS = /* @__PURE__ */ Symbol.for("@dudousxd/nestjs-agent:options");
+var CONTEXT_ACCESSOR = /* @__PURE__ */ Symbol.for("@dudousxd/nestjs-context:accessor");
 var DASHBOARD_BASE_PATH = /* @__PURE__ */ Symbol.for("@dudousxd/nestjs-agent-dashboard:base-path");
 var DASHBOARD_API_PATH = /* @__PURE__ */ Symbol.for("@dudousxd/nestjs-agent-dashboard:api-path");
 var DASHBOARD_APPROVAL_ACTOR_REF = /* @__PURE__ */ Symbol.for("@dudousxd/nestjs-agent-dashboard:approval-actor-ref");
@@ -188,6 +215,7 @@ function _ts_param(paramIndex, decorator) {
 __name(_ts_param, "_ts_param");
 var PRICING_STORE_UNBOUND_MESSAGE = "Pricing CRUD is unavailable: no AGENT_PRICING_STORE is bound. Bind a pricing store (e.g. MikroOrmPricingStore from @dudousxd/nestjs-agent-store-mikro-orm) to enable it.";
 var APPROVAL_PORT_UNBOUND_MESSAGE = "Approve/reject is unavailable: no AGENT_APPROVAL_PORT is bound. Import AgentModule from @dudousxd/nestjs-agent alongside this dashboard to enable it \u2014 the approvals inbox stays read-only until then.";
+var TENANT_SCOPE_UNSUPPORTED_MESSAGE = "The agent console is tenant-scoped (AgentModule tenancy is on), and the bound AGENT_GOVERNANCE_QUERIES store does not implement forTenant. Use a store adapter that does (Drizzle, MikroORM, in-memory) or set AgentModule `tenancy: false`.";
 var GENUI_STATS_UNSUPPORTED_MESSAGE = "Generative UI telemetry is unavailable: the bound AGENT_GOVERNANCE_QUERIES store does not implement genuiStats. Use a store adapter that records generative-UI calls (recordGenuiCalls) to enable it.";
 var AGENT_EVENTS = [
   "run.started",
@@ -211,19 +239,37 @@ var DashboardService = class {
   actorDirectory;
   pricingStore;
   approvalPort;
-  constructor(queries, actorDirectory, pricingStore, approvalPort) {
+  agentOptions;
+  contextAccessor;
+  constructor(queries, actorDirectory, pricingStore, approvalPort, agentOptions, contextAccessor) {
     this.queries = queries;
     this.actorDirectory = actorDirectory;
     this.pricingStore = pricingStore;
     this.approvalPort = approvalPort;
+    this.agentOptions = agentOptions;
+    this.contextAccessor = contextAccessor;
+  }
+  /**
+  * The read-model for this request: with the agent's tenancy on, narrowed to the viewer's context
+  * tenant (another tenant's thread or run is not found). A store without `forTenant` cannot be
+  * narrowed, so the console refuses (`501`) rather than show every tenant's rows.
+  */
+  scoped() {
+    const filter = consoleTenantFilter(this.agentOptions?.tenancy ?? "inherit", this.contextAccessor);
+    if (filter === void 0) return this.queries;
+    if (typeof this.queries.forTenant !== "function") {
+      throw new import_common3.NotImplementedException(TENANT_SCOPE_UNSUPPORTED_MESSAGE);
+    }
+    return this.queries.forTenant(filter);
   }
   /** Spend/usage overview for a day range: by-model + by-actor spend and the daily trend, in parallel. */
   async spend(range) {
+    const queries = this.scoped();
     const [byModel, byActorRaw, trend, byFeature] = await Promise.all([
-      this.queries.spendByModel(range),
-      this.queries.spendByActor(range),
-      this.queries.usageTrend(range),
-      this.queries.spendByFeature?.(range)
+      queries.spendByModel(range),
+      queries.spendByActor(range),
+      queries.usageTrend(range),
+      queries.spendByFeature?.(range)
     ]);
     const byActor = await this.withActorLabels(byActorRaw);
     return {
@@ -237,16 +283,17 @@ var DashboardService = class {
   }
   /** Top threads by cost for a day range (default 10, highest cost first). */
   async topThreads(range, limit2 = 10) {
-    const rows = await this.queries.spendByThread(range, limit2);
+    const rows = await this.scoped().spendByThread(range, limit2);
     return this.withActorLabels(rows);
   }
   /** Run reliability for a day range: metrics, by-agent/by-error breakdowns and the trend, in parallel. */
   async reliability(range) {
+    const queries = this.scoped();
     const [metrics, byAgent, errors, trend] = await Promise.all([
-      this.queries.runMetrics(range),
-      this.queries.runsByAgent(range),
-      this.queries.runErrors(range),
-      this.queries.runTrend(range)
+      queries.runMetrics(range),
+      queries.runsByAgent(range),
+      queries.runErrors(range),
+      queries.runTrend(range)
     ]);
     return {
       metrics,
@@ -257,19 +304,19 @@ var DashboardService = class {
   }
   /** Most recent runs (status/agent/duration/error) for the Reliability recent-runs table. */
   recentRuns(limit2) {
-    return this.queries.recentRuns(limit2);
+    return this.scoped().recentRuns(limit2);
   }
   /** Most recent tool calls (status/type/thread) for the Runs & tools activity feed. */
   recentToolCalls(limit2) {
-    return this.queries.recentToolCalls(limit2);
+    return this.scoped().recentToolCalls(limit2);
   }
   /** Paged, filterable tool calls for the Runs & tools activity table. */
   toolCallsPage(query) {
-    return this.queries.toolCallsPage(query);
+    return this.scoped().toolCallsPage(query);
   }
   /** Paged, filterable runs for the Reliability recent-runs table. */
   runsPage(query) {
-    return this.queries.runsPage(query);
+    return this.scoped().runsPage(query);
   }
   /**
   * Tool calls sitting `pending_approval`, oldest first, for the cross-thread approvals inbox.
@@ -277,11 +324,11 @@ var DashboardService = class {
   * {@link approvalsPage}, which reports how much of the backlog the cap hid.
   */
   pendingApprovals(limit2) {
-    return this.queries.pendingApprovals(limit2);
+    return this.scoped().pendingApprovals(limit2);
   }
   /** Paged, filterable approvals inbox with a total — the backlog-safe read of the HITL queue. */
   approvalsPage(query) {
-    return this.queries.approvalsPage(query);
+    return this.scoped().approvalsPage(query);
   }
   /**
   * One run with its thread and its tool calls. 404s on an unknown id rather than returning an empty
@@ -289,7 +336,7 @@ var DashboardService = class {
   * that conflates them sends an operator looking for a bug that isn't there.
   */
   async runDetail(runId) {
-    const detail = await this.queries.runDetail(runId);
+    const detail = await this.scoped().runDetail(runId);
     if (detail === null) {
       throw new import_common3.NotFoundException(`No run "${runId}".`);
     }
@@ -306,7 +353,7 @@ var DashboardService = class {
   }
   /** One thread with its usage rollup, runs and messages. 404s on an unknown id, like {@link runDetail}. */
   async threadDetail(query) {
-    const detail = await this.queries.threadDetail(query);
+    const detail = await this.scoped().threadDetail(query);
     if (detail === null) {
       throw new import_common3.NotFoundException(`No thread "${query.threadId}".`);
     }
@@ -323,7 +370,7 @@ var DashboardService = class {
   }
   /** Per-tool call/failure/rejection/latency rollup for a day range, for the Tools section. */
   toolStats(range) {
-    return this.queries.toolStats(range);
+    return this.scoped().toolStats(range);
   }
   /**
   * Generative-UI telemetry for a day range — first-try success per tool/model, common errors, UI
@@ -332,10 +379,11 @@ var DashboardService = class {
   * same posture as an unbound pricing store — the console renders that as its own state.
   */
   async genuiStats(range) {
-    if (this.queries.genuiStats === void 0) {
+    const queries = this.scoped();
+    if (queries.genuiStats === void 0) {
       throw new import_common3.NotImplementedException(GENUI_STATS_UNSUPPORTED_MESSAGE);
     }
-    return this.queries.genuiStats(range);
+    return queries.genuiStats(range);
   }
   /**
   * Decide a pending HITL tool call from the console. Routes through the OPTIONAL
@@ -366,7 +414,7 @@ var DashboardService = class {
   }
   /** Most recent threads with rolled-up message/token counts. */
   async recentThreads(limit2) {
-    const rows = await this.queries.recentThreads(limit2);
+    const rows = await this.scoped().recentThreads(limit2);
     return this.withActorLabels(rows);
   }
   /**
@@ -374,7 +422,7 @@ var DashboardService = class {
   * {@link recentThreads} is.
   */
   async threadsPage(query) {
-    const page2 = await this.queries.threadsPage(query);
+    const page2 = await this.scoped().threadsPage(query);
     const rows = await this.withActorLabels(page2.rows);
     return {
       ...page2,
@@ -463,12 +511,18 @@ DashboardService = _ts_decorate([
   _ts_param(2, (0, import_common3.Inject)(AGENT_PRICING_STORE)),
   _ts_param(3, (0, import_common3.Optional)()),
   _ts_param(3, (0, import_common3.Inject)(AGENT_APPROVAL_PORT)),
+  _ts_param(4, (0, import_common3.Optional)()),
+  _ts_param(4, (0, import_common3.Inject)(AGENT_OPTIONS)),
+  _ts_param(5, (0, import_common3.Optional)()),
+  _ts_param(5, (0, import_common3.Inject)(CONTEXT_ACCESSOR)),
   _ts_metadata("design:type", Function),
   _ts_metadata("design:paramtypes", [
     typeof AgentGovernanceQueries === "undefined" ? Object : AgentGovernanceQueries,
     typeof ActorDirectory === "undefined" ? Object : ActorDirectory,
     typeof AgentPricingStore === "undefined" ? Object : AgentPricingStore,
-    typeof AgentApprovalPort === "undefined" ? Object : AgentApprovalPort
+    typeof AgentApprovalPort === "undefined" ? Object : AgentApprovalPort,
+    Object,
+    Object
   ])
 ], DashboardService);
 
@@ -2398,6 +2452,7 @@ AgentDashboardModule = _ts_decorate7([
   AGENT_CONSOLE_ID,
   AGENT_DASHBOARD_CONFIG_ID,
   AGENT_GOVERNANCE_QUERIES,
+  AGENT_OPTIONS,
   AGENT_PRICING_STORE,
   AVIARY_CONSOLES_SLOT,
   AgentApiController,
@@ -2411,6 +2466,7 @@ AgentDashboardModule = _ts_decorate7([
   CONSOLE_GATE,
   CONSOLE_PAGE_METADATA,
   CONSOLE_PROBE_TIMEOUT_MS,
+  CONTEXT_ACCESSOR,
   ConsoleAccessDenied,
   ConsoleAuthorizeFilter,
   ConsoleAuthorizeGuard,