@dudousxd/nestjs-agent-dashboard 0.5.0 → 0.6.0

package/dist/client/agent-client.d.ts

@@ -99,6 +99,36 @@ export interface RecentRunRow {
     errorMessage: string | null;
     retries: number;
     startedAt: string;
+    /** sha256 hex of the run's resolved (pre-RAG) system prompt; `null` for a run recorded before this shipped. */
+    promptHash: string | null;
+}
+/** One tool call awaiting a HITL decision, for the cross-thread approvals inbox. */
+export interface PendingApprovalRow {
+    toolCallId: string;
+    toolName: string;
+    input: unknown;
+    threadId: string;
+    threadTitle: string;
+    /** Who asked — the run's actor. */
+    actorRef: string;
+    agentName: string | null;
+    /** ISO timestamp. */
+    requestedAt: string;
+}
+/** Body for `POST <api>/approvals/:toolCallId` — decide a pending HITL tool call. */
+export interface ApprovalDecisionInput {
+    approved: boolean;
+    reason?: string;
+}
+/** Governance rollup for one tool over a range, for the Tools section. */
+export interface ToolStatRow {
+    toolName: string;
+    toolType: string;
+    calls: number;
+    failed: number;
+    rejected: number;
+    /** p95 of executionMs across executed calls; null when none carry it. */
+    p95ExecutionMs: number | null;
 }
 /** The `GET <api>/reliability` response. */
 export interface ReliabilityOverview {
@@ -155,6 +185,16 @@ export declare const agentClient: {
     runs(limit?: number): Promise<RecentRunRow[]>;
     /** Most recent tool calls (default 50). */
     toolCalls(limit?: number): Promise<ToolCallActivityRow[]>;
+    /** Tool calls sitting `pending_approval`, oldest first (default 50) — the approvals inbox. */
+    approvals(limit?: number): Promise<PendingApprovalRow[]>;
+    /**
+     * Decide a pending HITL tool call. 501s (a plain `Error` whose message starts with `501`, like
+     * `upsertPrice` below) if the host has no `AGENT_APPROVAL_PORT` bound — the approvals inbox reads
+     * that as "render read-only".
+     */
+    decideApproval(toolCallId: string, input: ApprovalDecisionInput): Promise<void>;
+    /** Per-tool call/failure/rejection/latency rollup for a day range (the Tools section). */
+    toolStats(range: GovernanceRange): Promise<ToolStatRow[]>;
     /** Most recent threads (default 50). */
     threads(limit?: number): Promise<ThreadActivityRow[]>;
     /** Current price row per model. 501s if the host has no pricing store bound. */

package/dist/client/agent-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-client.d.ts","sourceRoot":"","sources":["../../src/client/agent-client.ts"],"names":[],"mappings":"AAIA,kDAAkD;AAClD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,uDAAuD;AACvD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,0EAA0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,0GAA0G;IAC1G,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,wDAAwD;AACxD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,0GAA0G;IAC1G,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,+CAA+C;AAC/C,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,gDAAgD;AAChD,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,+CAA+C;AAC/C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,0GAA0G;IAC1G,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,+CAA+C;AAC/C,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,qDAAqD;AACrD,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qDAAqD;AACrD,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,gDAAgD;AAChD,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,0DAA0D;AAC1D,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,4CAA4C;AAC5C,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,UAAU,CAAC;IACpB,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAChC,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/B,KAAK,EAAE,aAAa,EAAE,CAAC;CACxB;AAED,0EAA0E;AAC1E,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,oEAAoE;AACpE,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,sCAAsC;AACtC,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,KAAK,EAAE,eAAe,EAAE,CAAC;CAC1B;AAED,+CAA+C;AAC/C,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd,qGAAqG;QACrG,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,wGAAwG;QACxG,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB;CACF;AAcD,eAAO,MAAM,WAAW;IACtB,2EAA2E;iBAC9D,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC;IAIrD,wDAAwD;sBACtC,eAAe,mBAAe,OAAO,CAAC,cAAc,EAAE,CAAC;IAIzE,8EAA8E;uBAC3D,eAAe,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIjE,qCAAqC;0BACnB,OAAO,CAAC,YAAY,EAAE,CAAC;IAGzC,2CAA2C;+BACpB,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAGrD,wCAAwC;6BACnB,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAGjD,gFAAgF;eACrE,OAAO,CAAC,UAAU,EAAE,CAAC;IAGhC,gFAAgF;uBACvD,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ9D;;;OAGG;0BACmB,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,GAAG,MAAM,IAAI;CAWnE,CAAC"}
+{"version":3,"file":"agent-client.d.ts","sourceRoot":"","sources":["../../src/client/agent-client.ts"],"names":[],"mappings":"AAIA,kDAAkD;AAClD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,uDAAuD;AACvD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,0EAA0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,0GAA0G;IAC1G,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,wDAAwD;AACxD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,0GAA0G;IAC1G,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,+CAA+C;AAC/C,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,gDAAgD;AAChD,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,+CAA+C;AAC/C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,0GAA0G;IAC1G,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,+CAA+C;AAC/C,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,qDAAqD;AACrD,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qDAAqD;AACrD,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,gDAAgD;AAChD,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,0DAA0D;AAC1D,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,+GAA+G;IAC/G,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,oFAAoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,qBAAqB;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qFAAqF;AACrF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,4CAA4C;AAC5C,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,UAAU,CAAC;IACpB,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAChC,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/B,KAAK,EAAE,aAAa,EAAE,CAAC;CACxB;AAED,0EAA0E;AAC1E,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,oEAAoE;AACpE,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,sCAAsC;AACtC,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,KAAK,EAAE,eAAe,EAAE,CAAC;CAC1B;AAED,+CAA+C;AAC/C,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd,qGAAqG;QACrG,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,wGAAwG;QACxG,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB;CACF;AAcD,eAAO,MAAM,WAAW;IACtB,2EAA2E;iBAC9D,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC;IAIrD,wDAAwD;sBACtC,eAAe,mBAAe,OAAO,CAAC,cAAc,EAAE,CAAC;IAIzE,8EAA8E;uBAC3D,eAAe,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIjE,qCAAqC;0BACnB,OAAO,CAAC,YAAY,EAAE,CAAC;IAGzC,2CAA2C;+BACpB,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAGrD,8FAA8F;+BACvE,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAGpD;;;;OAIG;+BAC8B,MAAM,SAAS,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAQrF,0FAA0F;qBACzE,eAAe,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAIzD,wCAAwC;6BACnB,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAGjD,gFAAgF;eACrE,OAAO,CAAC,UAAU,EAAE,CAAC;IAGhC,gFAAgF;uBACvD,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ9D;;;OAGG;0BACmB,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,GAAG,MAAM,IAAI;CAWnE,CAAC"}

package/dist/client/agent-client.js

@@ -37,6 +37,29 @@ export const agentClient = {
     toolCalls(limit = 50) {
         return http(`/tool-calls?limit=${limit}`);
     },
+    /** Tool calls sitting `pending_approval`, oldest first (default 50) — the approvals inbox. */
+    approvals(limit = 50) {
+        return http(`/approvals?limit=${limit}`);
+    },
+    /**
+     * Decide a pending HITL tool call. 501s (a plain `Error` whose message starts with `501`, like
+     * `upsertPrice` below) if the host has no `AGENT_APPROVAL_PORT` bound — the approvals inbox reads
+     * that as "render read-only".
+     */
+    async decideApproval(toolCallId, input) {
+        const res = await fetch(`${apiBase()}/approvals/${encodeURIComponent(toolCallId)}`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(input),
+        });
+        if (!res.ok)
+            throw new Error(`${res.status} ${res.statusText}`);
+    },
+    /** Per-tool call/failure/rejection/latency rollup for a day range (the Tools section). */
+    toolStats(range) {
+        const q = new URLSearchParams({ from: range.fromDay, to: range.toDay });
+        return http(`/tools?${q.toString()}`);
+    },
     /** Most recent threads (default 50). */
     threads(limit = 50) {
         return http(`/threads?limit=${limit}`);

package/dist/client/agent-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-client.js","sourceRoot":"","sources":["../../src/client/agent-client.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,uGAAuG;AACvG,gFAAgF;AAsKhF,SAAS,OAAO;IACd,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,aAAa;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC;IACvF,MAAM,IAAI,GAAG,CAAC,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,aAAa,CAAC;IACvF,OAAO,GAAG,IAAI,MAAM,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,IAAI,CAAI,IAAY,EAAE,IAAkB;IACrD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,2EAA2E;IAC3E,KAAK,CAAC,KAAsB;QAC1B,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAgB,UAAU,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,wDAAwD;IACxD,UAAU,CAAC,KAAsB,EAAE,KAAK,GAAG,EAAE;QAC3C,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3F,OAAO,IAAI,CAAmB,gBAAgB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,8EAA8E;IAC9E,WAAW,CAAC,KAAsB;QAChC,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAsB,gBAAgB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,qCAAqC;IACrC,IAAI,CAAC,KAAK,GAAG,EAAE;QACb,OAAO,IAAI,CAAiB,eAAe,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,2CAA2C;IAC3C,SAAS,CAAC,KAAK,GAAG,EAAE;QAClB,OAAO,IAAI,CAAwB,qBAAqB,KAAK,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,wCAAwC;IACxC,OAAO,CAAC,KAAK,GAAG,EAAE;QAChB,OAAO,IAAI,CAAsB,kBAAkB,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,gFAAgF;IAChF,OAAO;QACL,OAAO,IAAI,CAAe,UAAU,CAAC,CAAC;IACxC,CAAC;IACD,gFAAgF;IAChF,KAAK,CAAC,WAAW,CAAC,KAA4B;QAC5C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,EAAE,UAAU,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAClE,CAAC;IACD;;;OAGG;IACH,YAAY,CAAC,OAAwC;QACnD,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,OAAO,EAAE,SAAS,CAAC,CAAC;QACtD,MAAM,CAAC,SAAS,GAAG,CAAC,GAAG,EAAE,EAAE;YACzB,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAmB,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,4BAA4B;YAC9B,CAAC;QACH,CAAC,CAAC;QACF,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;CACF,CAAC"}
+{"version":3,"file":"agent-client.js","sourceRoot":"","sources":["../../src/client/agent-client.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,uGAAuG;AACvG,gFAAgF;AAuMhF,SAAS,OAAO;IACd,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,aAAa;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC;IACvF,MAAM,IAAI,GAAG,CAAC,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,aAAa,CAAC;IACvF,OAAO,GAAG,IAAI,MAAM,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,IAAI,CAAI,IAAY,EAAE,IAAkB;IACrD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,2EAA2E;IAC3E,KAAK,CAAC,KAAsB;QAC1B,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAgB,UAAU,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,wDAAwD;IACxD,UAAU,CAAC,KAAsB,EAAE,KAAK,GAAG,EAAE;QAC3C,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3F,OAAO,IAAI,CAAmB,gBAAgB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,8EAA8E;IAC9E,WAAW,CAAC,KAAsB;QAChC,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAsB,gBAAgB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,qCAAqC;IACrC,IAAI,CAAC,KAAK,GAAG,EAAE;QACb,OAAO,IAAI,CAAiB,eAAe,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,2CAA2C;IAC3C,SAAS,CAAC,KAAK,GAAG,EAAE;QAClB,OAAO,IAAI,CAAwB,qBAAqB,KAAK,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,8FAA8F;IAC9F,SAAS,CAAC,KAAK,GAAG,EAAE;QAClB,OAAO,IAAI,CAAuB,oBAAoB,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;IACD;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,KAA4B;QACnE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,EAAE,cAAc,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE;YAClF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,0FAA0F;IAC1F,SAAS,CAAC,KAAsB;QAC9B,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAgB,UAAU,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,wCAAwC;IACxC,OAAO,CAAC,KAAK,GAAG,EAAE;QAChB,OAAO,IAAI,CAAsB,kBAAkB,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,gFAAgF;IAChF,OAAO;QACL,OAAO,IAAI,CAAe,UAAU,CAAC,CAAC;IACxC,CAAC;IACD,gFAAgF;IAChF,KAAK,CAAC,WAAW,CAAC,KAA4B;QAC5C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,EAAE,UAAU,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAClE,CAAC;IACD;;;OAGG;IACH,YAAY,CAAC,OAAwC;QACnD,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,OAAO,EAAE,SAAS,CAAC,CAAC;QACtD,MAAM,CAAC,SAAS,GAAG,CAAC,GAAG,EAAE,EAAE;YACzB,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAmB,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,4BAA4B;YAC9B,CAAC;QACH,CAAC,CAAC;QACF,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;CACF,CAAC"}

package/dist/server/index.cjs

@@ -23,6 +23,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var index_exports = {};
 __export(index_exports, {
   AGENT_ACTOR_DIRECTORY: () => AGENT_ACTOR_DIRECTORY,
+  AGENT_APPROVAL_PORT: () => AGENT_APPROVAL_PORT,
   AGENT_GOVERNANCE_QUERIES: () => AGENT_GOVERNANCE_QUERIES,
   AGENT_PRICING_STORE: () => AGENT_PRICING_STORE,
   AgentApiController: () => AgentApiController,
@@ -30,6 +31,7 @@ __export(index_exports, {
   AgentDashboardModule: () => AgentDashboardModule,
   AgentUiController: () => AgentUiController,
   DASHBOARD_API_PATH: () => DASHBOARD_API_PATH,
+  DASHBOARD_APPROVAL_ACTOR_REF: () => DASHBOARD_APPROVAL_ACTOR_REF,
   DASHBOARD_BASE_PATH: () => DASHBOARD_BASE_PATH,
   DashboardService: () => DashboardService,
   agentDashboardMountPaths: () => agentDashboardMountPaths,
@@ -38,35 +40,57 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // src/server/agent-api.controller.ts
-var import_common3 = require("@nestjs/common");
+var import_common4 = require("@nestjs/common");
 
 // src/server/dashboard.service.ts
 var import_node_diagnostics_channel = require("diagnostics_channel");
 var import_nestjs_diagnostics = require("@dudousxd/nestjs-diagnostics");
-var import_common2 = require("@nestjs/common");
+var import_common3 = require("@nestjs/common");
 var import_rxjs = require("rxjs");
 
-// src/server/parse-price-input.ts
+// src/server/parse-approval-decision.ts
 var import_common = require("@nestjs/common");
-function parsePriceInput(body) {
+function parseApprovalDecision(body) {
   if (typeof body !== "object" || body === null) {
     throw new import_common.BadRequestException("Expected a JSON object body.");
   }
+  const { approved, reason } = body;
+  if (typeof approved !== "boolean") {
+    throw new import_common.BadRequestException('"approved" must be a boolean.');
+  }
+  if (reason !== void 0 && typeof reason !== "string") {
+    throw new import_common.BadRequestException('"reason" must be a string when present.');
+  }
+  return {
+    approved,
+    ...reason !== void 0 ? {
+      reason
+    } : {}
+  };
+}
+__name(parseApprovalDecision, "parseApprovalDecision");
+
+// src/server/parse-price-input.ts
+var import_common2 = require("@nestjs/common");
+function parsePriceInput(body) {
+  if (typeof body !== "object" || body === null) {
+    throw new import_common2.BadRequestException("Expected a JSON object body.");
+  }
   const { modelId, inputPricePer1m, outputPricePer1m, cacheWritePricePer1m, cacheReadPricePer1m } = body;
   if (typeof modelId !== "string" || modelId.trim().length === 0) {
-    throw new import_common.BadRequestException('"modelId" must be a non-empty string.');
+    throw new import_common2.BadRequestException('"modelId" must be a non-empty string.');
   }
   if (!isFiniteNonNegative(inputPricePer1m)) {
-    throw new import_common.BadRequestException('"inputPricePer1m" must be a non-negative number.');
+    throw new import_common2.BadRequestException('"inputPricePer1m" must be a non-negative number.');
   }
   if (!isFiniteNonNegative(outputPricePer1m)) {
-    throw new import_common.BadRequestException('"outputPricePer1m" must be a non-negative number.');
+    throw new import_common2.BadRequestException('"outputPricePer1m" must be a non-negative number.');
   }
   if (cacheWritePricePer1m !== void 0 && !isFiniteNonNegative(cacheWritePricePer1m)) {
-    throw new import_common.BadRequestException('"cacheWritePricePer1m" must be a non-negative number when present.');
+    throw new import_common2.BadRequestException('"cacheWritePricePer1m" must be a non-negative number when present.');
   }
   if (cacheReadPricePer1m !== void 0 && !isFiniteNonNegative(cacheReadPricePer1m)) {
-    throw new import_common.BadRequestException('"cacheReadPricePer1m" must be a non-negative number when present.');
+    throw new import_common2.BadRequestException('"cacheReadPricePer1m" must be a non-negative number when present.');
   }
   return {
     modelId,
@@ -90,8 +114,10 @@ __name(isFiniteNonNegative, "isFiniteNonNegative");
 var AGENT_GOVERNANCE_QUERIES = Symbol.for("@dudousxd/nestjs-agent:governance-queries");
 var AGENT_ACTOR_DIRECTORY = Symbol.for("@dudousxd/nestjs-agent:actor-directory");
 var AGENT_PRICING_STORE = Symbol.for("@dudousxd/nestjs-agent:pricing-store");
+var AGENT_APPROVAL_PORT = Symbol.for("@dudousxd/nestjs-agent:approval-port");
 var DASHBOARD_BASE_PATH = Symbol.for("@dudousxd/nestjs-agent-dashboard:base-path");
 var DASHBOARD_API_PATH = Symbol.for("@dudousxd/nestjs-agent-dashboard:api-path");
+var DASHBOARD_APPROVAL_ACTOR_REF = Symbol.for("@dudousxd/nestjs-agent-dashboard:approval-actor-ref");
 
 // src/server/dashboard.service.ts
 function _ts_decorate(decorators, target, key, desc) {
@@ -112,6 +138,7 @@ function _ts_param(paramIndex, decorator) {
 }
 __name(_ts_param, "_ts_param");
 var PRICING_STORE_UNBOUND_MESSAGE = "Pricing CRUD is unavailable: no AGENT_PRICING_STORE is bound. Bind a pricing store (e.g. MikroOrmPricingStore from @dudousxd/nestjs-agent-store-mikro-orm) to enable it.";
+var APPROVAL_PORT_UNBOUND_MESSAGE = "Approve/reject is unavailable: no AGENT_APPROVAL_PORT is bound. Import AgentModule from @dudousxd/nestjs-agent alongside this dashboard to enable it \u2014 the approvals inbox stays read-only until then.";
 var AGENT_EVENTS = [
   "run.started",
   "message",
@@ -131,10 +158,12 @@ var DashboardService = class {
   queries;
   actorDirectory;
   pricingStore;
-  constructor(queries, actorDirectory, pricingStore) {
+  approvalPort;
+  constructor(queries, actorDirectory, pricingStore, approvalPort) {
     this.queries = queries;
     this.actorDirectory = actorDirectory;
     this.pricingStore = pricingStore;
+    this.approvalPort = approvalPort;
   }
   /** Spend/usage overview for a day range: by-model + by-actor spend and the daily trend, in parallel. */
   async spend(range) {
@@ -178,6 +207,41 @@ var DashboardService = class {
   recentToolCalls(limit) {
     return this.queries.recentToolCalls(limit);
   }
+  /** Tool calls sitting `pending_approval`, oldest first, for the cross-thread approvals inbox. */
+  pendingApprovals(limit) {
+    return this.queries.pendingApprovals(limit);
+  }
+  /** Per-tool call/failure/rejection/latency rollup for a day range, for the Tools section. */
+  toolStats(range) {
+    return this.queries.toolStats(range);
+  }
+  /**
+  * Decide a pending HITL tool call from the console. Routes through the OPTIONAL
+  * {@link AGENT_APPROVAL_PORT} — bound by `@dudousxd/nestjs-agent` to the SAME signal path chat
+  * approvals use — so a 501 here (checked BEFORE body validation, same ordering as
+  * {@link upsertPrice}) means "no approval port bound", not "your body was invalid". `executedByRef`
+  * is an OPAQUE decider ref the caller resolved from the live request (see
+  * `AgentDashboardOptions.approvalActorRef`); omitted when the host didn't configure one.
+  */
+  async decideApproval(toolCallId, body, executedByRef) {
+    if (this.approvalPort === void 0) {
+      throw new import_common3.NotImplementedException(APPROVAL_PORT_UNBOUND_MESSAGE);
+    }
+    const decision = parseApprovalDecision(body);
+    const opts = executedByRef !== void 0 ? {
+      executedByRef
+    } : {};
+    if (decision.approved) {
+      await this.approvalPort.approve(toolCallId, opts);
+      return;
+    }
+    await this.approvalPort.reject(toolCallId, {
+      ...opts,
+      ...decision.reason !== void 0 ? {
+        reason: decision.reason
+      } : {}
+    });
+  }
   /** Most recent threads with rolled-up message/token counts. */
   async recentThreads(limit) {
     const rows = await this.queries.recentThreads(limit);
@@ -210,7 +274,7 @@ var DashboardService = class {
   /** Current price row per model, for the pricing tab. 501s when no `AGENT_PRICING_STORE` is bound. */
   async listPrices() {
     if (this.pricingStore === void 0) {
-      throw new import_common2.NotImplementedException(PRICING_STORE_UNBOUND_MESSAGE);
+      throw new import_common3.NotImplementedException(PRICING_STORE_UNBOUND_MESSAGE);
     }
     return this.pricingStore.listCurrentPrices();
   }
@@ -221,7 +285,7 @@ var DashboardService = class {
   */
   async upsertPrice(body) {
     if (this.pricingStore === void 0) {
-      throw new import_common2.NotImplementedException(PRICING_STORE_UNBOUND_MESSAGE);
+      throw new import_common3.NotImplementedException(PRICING_STORE_UNBOUND_MESSAGE);
     }
     await this.pricingStore.upsertModelPrice(parsePriceInput(body));
   }
@@ -257,17 +321,20 @@ var DashboardService = class {
   }
 };
 DashboardService = _ts_decorate([
-  (0, import_common2.Injectable)(),
-  _ts_param(0, (0, import_common2.Inject)(AGENT_GOVERNANCE_QUERIES)),
-  _ts_param(1, (0, import_common2.Optional)()),
-  _ts_param(1, (0, import_common2.Inject)(AGENT_ACTOR_DIRECTORY)),
-  _ts_param(2, (0, import_common2.Optional)()),
-  _ts_param(2, (0, import_common2.Inject)(AGENT_PRICING_STORE)),
+  (0, import_common3.Injectable)(),
+  _ts_param(0, (0, import_common3.Inject)(AGENT_GOVERNANCE_QUERIES)),
+  _ts_param(1, (0, import_common3.Optional)()),
+  _ts_param(1, (0, import_common3.Inject)(AGENT_ACTOR_DIRECTORY)),
+  _ts_param(2, (0, import_common3.Optional)()),
+  _ts_param(2, (0, import_common3.Inject)(AGENT_PRICING_STORE)),
+  _ts_param(3, (0, import_common3.Optional)()),
+  _ts_param(3, (0, import_common3.Inject)(AGENT_APPROVAL_PORT)),
   _ts_metadata("design:type", Function),
   _ts_metadata("design:paramtypes", [
     typeof AgentGovernanceQueries === "undefined" ? Object : AgentGovernanceQueries,
     typeof ActorDirectory === "undefined" ? Object : ActorDirectory,
-    typeof AgentPricingStore === "undefined" ? Object : AgentPricingStore
+    typeof AgentPricingStore === "undefined" ? Object : AgentPricingStore,
+    typeof AgentApprovalPort === "undefined" ? Object : AgentApprovalPort
   ])
 ], DashboardService);
 
@@ -317,8 +384,10 @@ var AgentApiController = class {
     __name(this, "AgentApiController");
   }
   dashboard;
-  constructor(dashboard) {
+  approvalActorRef;
+  constructor(dashboard, approvalActorRef) {
     this.dashboard = dashboard;
+    this.approvalActorRef = approvalActorRef;
   }
   /** `{ byModel, byActor, trend }` for a day range (defaults to the last 30 days). */
   spend(from, to) {
@@ -340,6 +409,22 @@ var AgentApiController = class {
   toolCalls(limit) {
     return this.dashboard.recentToolCalls(parseLimit(limit, 50));
   }
+  /** Tool calls sitting `pending_approval` (default 50, max 200), oldest first — the approvals inbox. */
+  approvals(limit) {
+    return this.dashboard.pendingApprovals(parseLimit(limit, 50));
+  }
+  /**
+  * Decide a pending HITL tool call. Body `{ approved: boolean; reason?: string }`. 501s (via
+  * `DashboardService.decideApproval`) when no `AGENT_APPROVAL_PORT` is bound. `executedByRef`
+  * comes from the host's `approvalActorRef` extractor run against the live request, when configured.
+  */
+  async decideApproval(toolCallId, body, req) {
+    await this.dashboard.decideApproval(toolCallId, body, this.approvalActorRef?.(req));
+  }
+  /** Per-tool call/failure/rejection/latency rollup for a day range (defaults to the last 30 days). */
+  tools(from, to) {
+    return this.dashboard.toolStats(resolveRange(from, to));
+  }
   /** Most recent threads (default 50, max 200) with rolled-up counts. */
   threads(limit) {
     return this.dashboard.recentThreads(parseLimit(limit, 50));
@@ -365,9 +450,9 @@ var AgentApiController = class {
   }
 };
 _ts_decorate2([
-  (0, import_common3.Get)("spend"),
-  _ts_param2(0, (0, import_common3.Query)("from")),
-  _ts_param2(1, (0, import_common3.Query)("to")),
+  (0, import_common4.Get)("spend"),
+  _ts_param2(0, (0, import_common4.Query)("from")),
+  _ts_param2(1, (0, import_common4.Query)("to")),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     String,
@@ -376,10 +461,10 @@ _ts_decorate2([
   _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], AgentApiController.prototype, "spend", null);
 _ts_decorate2([
-  (0, import_common3.Get)("top-threads"),
-  _ts_param2(0, (0, import_common3.Query)("from")),
-  _ts_param2(1, (0, import_common3.Query)("to")),
-  _ts_param2(2, (0, import_common3.Query)("limit")),
+  (0, import_common4.Get)("top-threads"),
+  _ts_param2(0, (0, import_common4.Query)("from")),
+  _ts_param2(1, (0, import_common4.Query)("to")),
+  _ts_param2(2, (0, import_common4.Query)("limit")),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     String,
@@ -389,9 +474,9 @@ _ts_decorate2([
   _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], AgentApiController.prototype, "topThreads", null);
 _ts_decorate2([
-  (0, import_common3.Get)("reliability"),
-  _ts_param2(0, (0, import_common3.Query)("from")),
-  _ts_param2(1, (0, import_common3.Query)("to")),
+  (0, import_common4.Get)("reliability"),
+  _ts_param2(0, (0, import_common4.Query)("from")),
+  _ts_param2(1, (0, import_common4.Query)("to")),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     String,
@@ -400,8 +485,8 @@ _ts_decorate2([
   _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], AgentApiController.prototype, "reliability", null);
 _ts_decorate2([
-  (0, import_common3.Get)("runs"),
-  _ts_param2(0, (0, import_common3.Query)("limit")),
+  (0, import_common4.Get)("runs"),
+  _ts_param2(0, (0, import_common4.Query)("limit")),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     String
@@ -409,8 +494,8 @@ _ts_decorate2([
   _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], AgentApiController.prototype, "runs", null);
 _ts_decorate2([
-  (0, import_common3.Get)("tool-calls"),
-  _ts_param2(0, (0, import_common3.Query)("limit")),
+  (0, import_common4.Get)("tool-calls"),
+  _ts_param2(0, (0, import_common4.Query)("limit")),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     String
@@ -418,8 +503,42 @@ _ts_decorate2([
   _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], AgentApiController.prototype, "toolCalls", null);
 _ts_decorate2([
-  (0, import_common3.Get)("threads"),
-  _ts_param2(0, (0, import_common3.Query)("limit")),
+  (0, import_common4.Get)("approvals"),
+  _ts_param2(0, (0, import_common4.Query)("limit")),
+  _ts_metadata2("design:type", Function),
+  _ts_metadata2("design:paramtypes", [
+    String
+  ]),
+  _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+], AgentApiController.prototype, "approvals", null);
+_ts_decorate2([
+  (0, import_common4.Post)("approvals/:toolCallId"),
+  (0, import_common4.HttpCode)(204),
+  _ts_param2(0, (0, import_common4.Param)("toolCallId")),
+  _ts_param2(1, (0, import_common4.Body)()),
+  _ts_param2(2, (0, import_common4.Req)()),
+  _ts_metadata2("design:type", Function),
+  _ts_metadata2("design:paramtypes", [
+    String,
+    Object,
+    Object
+  ]),
+  _ts_metadata2("design:returntype", Promise)
+], AgentApiController.prototype, "decideApproval", null);
+_ts_decorate2([
+  (0, import_common4.Get)("tools"),
+  _ts_param2(0, (0, import_common4.Query)("from")),
+  _ts_param2(1, (0, import_common4.Query)("to")),
+  _ts_metadata2("design:type", Function),
+  _ts_metadata2("design:paramtypes", [
+    String,
+    String
+  ]),
+  _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+], AgentApiController.prototype, "tools", null);
+_ts_decorate2([
+  (0, import_common4.Get)("threads"),
+  _ts_param2(0, (0, import_common4.Query)("limit")),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     String
@@ -427,14 +546,14 @@ _ts_decorate2([
   _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], AgentApiController.prototype, "threads", null);
 _ts_decorate2([
-  (0, import_common3.Get)("pricing"),
+  (0, import_common4.Get)("pricing"),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", []),
   _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], AgentApiController.prototype, "listPrices", null);
 _ts_decorate2([
-  (0, import_common3.Post)("pricing"),
-  _ts_param2(0, (0, import_common3.Body)()),
+  (0, import_common4.Post)("pricing"),
+  _ts_param2(0, (0, import_common4.Body)()),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     Object
@@ -442,16 +561,18 @@ _ts_decorate2([
   _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], AgentApiController.prototype, "upsertPrice", null);
 _ts_decorate2([
-  (0, import_common3.Sse)("stream"),
+  (0, import_common4.Sse)("stream"),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", []),
   _ts_metadata2("design:returntype", typeof Observable === "undefined" ? Object : Observable)
 ], AgentApiController.prototype, "stream", null);
 AgentApiController = _ts_decorate2([
-  (0, import_common3.Controller)(),
+  (0, import_common4.Controller)(),
+  _ts_param2(1, (0, import_common4.Inject)(DASHBOARD_APPROVAL_ACTOR_REF)),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
-    typeof DashboardService === "undefined" ? Object : DashboardService
+    typeof DashboardService === "undefined" ? Object : DashboardService,
+    Object
   ])
 ], AgentApiController);
 
@@ -482,14 +603,14 @@ __name(agentDashboardMountPaths, "agentDashboardMountPaths");
 
 // src/server/agent-dashboard.module.ts
 var import_reflect_metadata = require("reflect-metadata");
-var import_common5 = require("@nestjs/common");
+var import_common6 = require("@nestjs/common");
 var import_core = require("@nestjs/core");
 
 // src/server/agent-ui.controller.ts
 var import_node_fs = require("fs");
 var import_node_path = require("path");
 var import_node_url = require("url");
-var import_common4 = require("@nestjs/common");
+var import_common5 = require("@nestjs/common");
 function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -537,7 +658,7 @@ var AgentUiController = class {
   index() {
     const indexPath = (0, import_node_path.join)(this.dir, "index.html");
     if (!(0, import_node_fs.existsSync)(indexPath)) {
-      throw new import_common4.NotFoundException("Dashboard is not built. Run the package build.");
+      throw new import_common5.NotFoundException("Dashboard is not built. Run the package build.");
     }
     const html = (0, import_node_fs.readFileSync)(indexPath, "utf8").replaceAll(`="${BUILD_BASE}/`, `="${this.basePath}/`);
     const inject = `<script>window.__AGENT_BASE__='${this.basePath}';window.__AGENT_API__='${this.apiBasePath}';</script>`;
@@ -545,40 +666,40 @@ var AgentUiController = class {
   }
   asset(file) {
     const safe = (0, import_node_path.basename)(file);
-    if (safe !== file) throw new import_common4.NotFoundException();
+    if (safe !== file) throw new import_common5.NotFoundException();
     const root = (0, import_node_path.resolve)(this.dir, "assets");
     const assetPath = (0, import_node_path.resolve)(root, safe);
     if (!assetPath.startsWith(root + import_node_path.sep) || !(0, import_node_fs.existsSync)(assetPath)) {
-      throw new import_common4.NotFoundException();
+      throw new import_common5.NotFoundException();
     }
     const type = CONTENT_TYPES[(0, import_node_path.extname)(safe)] ?? "application/octet-stream";
-    return new import_common4.StreamableFile((0, import_node_fs.readFileSync)(assetPath), {
+    return new import_common5.StreamableFile((0, import_node_fs.readFileSync)(assetPath), {
       type
     });
   }
 };
 _ts_decorate3([
-  (0, import_common4.Get)(),
-  (0, import_common4.Header)("Content-Type", "text/html; charset=utf-8"),
-  (0, import_common4.Header)("Cache-Control", "no-store, must-revalidate"),
+  (0, import_common5.Get)(),
+  (0, import_common5.Header)("Content-Type", "text/html; charset=utf-8"),
+  (0, import_common5.Header)("Cache-Control", "no-store, must-revalidate"),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", []),
   _ts_metadata3("design:returntype", String)
 ], AgentUiController.prototype, "index", null);
 _ts_decorate3([
-  (0, import_common4.Get)("assets/:file"),
-  (0, import_common4.Header)("Cache-Control", "public, max-age=31536000, immutable"),
-  _ts_param3(0, (0, import_common4.Param)("file")),
+  (0, import_common5.Get)("assets/:file"),
+  (0, import_common5.Header)("Cache-Control", "public, max-age=31536000, immutable"),
+  _ts_param3(0, (0, import_common5.Param)("file")),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
     String
   ]),
-  _ts_metadata3("design:returntype", typeof import_common4.StreamableFile === "undefined" ? Object : import_common4.StreamableFile)
+  _ts_metadata3("design:returntype", typeof import_common5.StreamableFile === "undefined" ? Object : import_common5.StreamableFile)
 ], AgentUiController.prototype, "asset", null);
 AgentUiController = _ts_decorate3([
-  (0, import_common4.Controller)(),
-  _ts_param3(0, (0, import_common4.Inject)(DASHBOARD_BASE_PATH)),
-  _ts_param3(1, (0, import_common4.Inject)(DASHBOARD_API_PATH)),
+  (0, import_common5.Controller)(),
+  _ts_param3(0, (0, import_common5.Inject)(DASHBOARD_BASE_PATH)),
+  _ts_param3(1, (0, import_common5.Inject)(DASHBOARD_API_PATH)),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
     String,
@@ -620,7 +741,13 @@ var AgentApiModule = class _AgentApiModule {
       ],
       providers: [
         DashboardService,
-        ...options.guards ?? []
+        ...options.guards ?? [],
+        // `useValue` even when `options.approvalActorRef` is `undefined` — AgentApiController
+        // injects this WITHOUT `@Optional()` (same pattern as `AGENT_QUOTA_STORE`'s factory).
+        {
+          provide: DASHBOARD_APPROVAL_ACTOR_REF,
+          useValue: options.approvalActorRef
+        }
       ],
       exports: [
         DashboardService
@@ -629,7 +756,7 @@ var AgentApiModule = class _AgentApiModule {
   }
 };
 AgentApiModule = _ts_decorate4([
-  (0, import_common5.Module)({})
+  (0, import_common6.Module)({})
 ], AgentApiModule);
 var AgentDashboardModule = class _AgentDashboardModule {
   static {
@@ -652,6 +779,9 @@ var AgentDashboardModule = class _AgentDashboardModule {
           } : {},
           ...options.guards ? {
             guards: options.guards
+          } : {},
+          ...options.approvalActorRef ? {
+            approvalActorRef: options.approvalActorRef
           } : {}
         }),
         import_core.RouterModule.register([
@@ -688,11 +818,12 @@ var AgentDashboardModule = class _AgentDashboardModule {
   }
 };
 AgentDashboardModule = _ts_decorate4([
-  (0, import_common5.Module)({})
+  (0, import_common6.Module)({})
 ], AgentDashboardModule);
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AGENT_ACTOR_DIRECTORY,
+  AGENT_APPROVAL_PORT,
   AGENT_GOVERNANCE_QUERIES,
   AGENT_PRICING_STORE,
   AgentApiController,
@@ -700,6 +831,7 @@ AgentDashboardModule = _ts_decorate4([
   AgentDashboardModule,
   AgentUiController,
   DASHBOARD_API_PATH,
+  DASHBOARD_APPROVAL_ACTOR_REF,
   DASHBOARD_BASE_PATH,
   DashboardService,
   agentDashboardMountPaths,