@dudousxd/nestjs-agent-dashboard 0.5.0 → 0.7.0

package/dist/server/index.cjs

@@ -23,6 +23,8 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var index_exports = {};
 __export(index_exports, {
   AGENT_ACTOR_DIRECTORY: () => AGENT_ACTOR_DIRECTORY,
+  AGENT_ACTOR_RESOLVER: () => AGENT_ACTOR_RESOLVER,
+  AGENT_APPROVAL_PORT: () => AGENT_APPROVAL_PORT,
   AGENT_GOVERNANCE_QUERIES: () => AGENT_GOVERNANCE_QUERIES,
   AGENT_PRICING_STORE: () => AGENT_PRICING_STORE,
   AgentApiController: () => AgentApiController,
@@ -30,6 +32,7 @@ __export(index_exports, {
   AgentDashboardModule: () => AgentDashboardModule,
   AgentUiController: () => AgentUiController,
   DASHBOARD_API_PATH: () => DASHBOARD_API_PATH,
+  DASHBOARD_APPROVAL_ACTOR_REF: () => DASHBOARD_APPROVAL_ACTOR_REF,
   DASHBOARD_BASE_PATH: () => DASHBOARD_BASE_PATH,
   DashboardService: () => DashboardService,
   agentDashboardMountPaths: () => agentDashboardMountPaths,
@@ -38,35 +41,57 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // src/server/agent-api.controller.ts
-var import_common3 = require("@nestjs/common");
+var import_common4 = require("@nestjs/common");
 
 // src/server/dashboard.service.ts
 var import_node_diagnostics_channel = require("diagnostics_channel");
 var import_nestjs_diagnostics = require("@dudousxd/nestjs-diagnostics");
-var import_common2 = require("@nestjs/common");
+var import_common3 = require("@nestjs/common");
 var import_rxjs = require("rxjs");
 
-// src/server/parse-price-input.ts
+// src/server/parse-approval-decision.ts
 var import_common = require("@nestjs/common");
-function parsePriceInput(body) {
+function parseApprovalDecision(body) {
   if (typeof body !== "object" || body === null) {
     throw new import_common.BadRequestException("Expected a JSON object body.");
   }
+  const { approved, reason } = body;
+  if (typeof approved !== "boolean") {
+    throw new import_common.BadRequestException('"approved" must be a boolean.');
+  }
+  if (reason !== void 0 && typeof reason !== "string") {
+    throw new import_common.BadRequestException('"reason" must be a string when present.');
+  }
+  return {
+    approved,
+    ...reason !== void 0 ? {
+      reason
+    } : {}
+  };
+}
+__name(parseApprovalDecision, "parseApprovalDecision");
+
+// src/server/parse-price-input.ts
+var import_common2 = require("@nestjs/common");
+function parsePriceInput(body) {
+  if (typeof body !== "object" || body === null) {
+    throw new import_common2.BadRequestException("Expected a JSON object body.");
+  }
   const { modelId, inputPricePer1m, outputPricePer1m, cacheWritePricePer1m, cacheReadPricePer1m } = body;
   if (typeof modelId !== "string" || modelId.trim().length === 0) {
-    throw new import_common.BadRequestException('"modelId" must be a non-empty string.');
+    throw new import_common2.BadRequestException('"modelId" must be a non-empty string.');
   }
   if (!isFiniteNonNegative(inputPricePer1m)) {
-    throw new import_common.BadRequestException('"inputPricePer1m" must be a non-negative number.');
+    throw new import_common2.BadRequestException('"inputPricePer1m" must be a non-negative number.');
   }
   if (!isFiniteNonNegative(outputPricePer1m)) {
-    throw new import_common.BadRequestException('"outputPricePer1m" must be a non-negative number.');
+    throw new import_common2.BadRequestException('"outputPricePer1m" must be a non-negative number.');
   }
   if (cacheWritePricePer1m !== void 0 && !isFiniteNonNegative(cacheWritePricePer1m)) {
-    throw new import_common.BadRequestException('"cacheWritePricePer1m" must be a non-negative number when present.');
+    throw new import_common2.BadRequestException('"cacheWritePricePer1m" must be a non-negative number when present.');
   }
   if (cacheReadPricePer1m !== void 0 && !isFiniteNonNegative(cacheReadPricePer1m)) {
-    throw new import_common.BadRequestException('"cacheReadPricePer1m" must be a non-negative number when present.');
+    throw new import_common2.BadRequestException('"cacheReadPricePer1m" must be a non-negative number when present.');
   }
   return {
     modelId,
@@ -90,8 +115,11 @@ __name(isFiniteNonNegative, "isFiniteNonNegative");
 var AGENT_GOVERNANCE_QUERIES = Symbol.for("@dudousxd/nestjs-agent:governance-queries");
 var AGENT_ACTOR_DIRECTORY = Symbol.for("@dudousxd/nestjs-agent:actor-directory");
 var AGENT_PRICING_STORE = Symbol.for("@dudousxd/nestjs-agent:pricing-store");
+var AGENT_APPROVAL_PORT = Symbol.for("@dudousxd/nestjs-agent:approval-port");
+var AGENT_ACTOR_RESOLVER = Symbol.for("@dudousxd/nestjs-agent:actor-resolver");
 var DASHBOARD_BASE_PATH = Symbol.for("@dudousxd/nestjs-agent-dashboard:base-path");
 var DASHBOARD_API_PATH = Symbol.for("@dudousxd/nestjs-agent-dashboard:api-path");
+var DASHBOARD_APPROVAL_ACTOR_REF = Symbol.for("@dudousxd/nestjs-agent-dashboard:approval-actor-ref");
 
 // src/server/dashboard.service.ts
 function _ts_decorate(decorators, target, key, desc) {
@@ -112,6 +140,7 @@ function _ts_param(paramIndex, decorator) {
 }
 __name(_ts_param, "_ts_param");
 var PRICING_STORE_UNBOUND_MESSAGE = "Pricing CRUD is unavailable: no AGENT_PRICING_STORE is bound. Bind a pricing store (e.g. MikroOrmPricingStore from @dudousxd/nestjs-agent-store-mikro-orm) to enable it.";
+var APPROVAL_PORT_UNBOUND_MESSAGE = "Approve/reject is unavailable: no AGENT_APPROVAL_PORT is bound. Import AgentModule from @dudousxd/nestjs-agent alongside this dashboard to enable it \u2014 the approvals inbox stays read-only until then.";
 var AGENT_EVENTS = [
   "run.started",
   "message",
@@ -131,10 +160,12 @@ var DashboardService = class {
   queries;
   actorDirectory;
   pricingStore;
-  constructor(queries, actorDirectory, pricingStore) {
+  approvalPort;
+  constructor(queries, actorDirectory, pricingStore, approvalPort) {
     this.queries = queries;
     this.actorDirectory = actorDirectory;
     this.pricingStore = pricingStore;
+    this.approvalPort = approvalPort;
   }
   /** Spend/usage overview for a day range: by-model + by-actor spend and the daily trend, in parallel. */
   async spend(range) {
@@ -178,6 +209,41 @@ var DashboardService = class {
   recentToolCalls(limit) {
     return this.queries.recentToolCalls(limit);
   }
+  /** Tool calls sitting `pending_approval`, oldest first, for the cross-thread approvals inbox. */
+  pendingApprovals(limit) {
+    return this.queries.pendingApprovals(limit);
+  }
+  /** Per-tool call/failure/rejection/latency rollup for a day range, for the Tools section. */
+  toolStats(range) {
+    return this.queries.toolStats(range);
+  }
+  /**
+  * Decide a pending HITL tool call from the console. Routes through the OPTIONAL
+  * {@link AGENT_APPROVAL_PORT} — bound by `@dudousxd/nestjs-agent` to the SAME signal path chat
+  * approvals use — so a 501 here (checked BEFORE body validation, same ordering as
+  * {@link upsertPrice}) means "no approval port bound", not "your body was invalid". `executedByRef`
+  * is an OPAQUE decider ref the caller resolved from the live request (see
+  * `AgentDashboardOptions.approvalActorRef`); omitted when the host didn't configure one.
+  */
+  async decideApproval(toolCallId, body, executedByRef) {
+    if (this.approvalPort === void 0) {
+      throw new import_common3.NotImplementedException(APPROVAL_PORT_UNBOUND_MESSAGE);
+    }
+    const decision = parseApprovalDecision(body);
+    const opts = executedByRef !== void 0 ? {
+      executedByRef
+    } : {};
+    if (decision.approved) {
+      await this.approvalPort.approve(toolCallId, opts);
+      return;
+    }
+    await this.approvalPort.reject(toolCallId, {
+      ...opts,
+      ...decision.reason !== void 0 ? {
+        reason: decision.reason
+      } : {}
+    });
+  }
   /** Most recent threads with rolled-up message/token counts. */
   async recentThreads(limit) {
     const rows = await this.queries.recentThreads(limit);
@@ -210,7 +276,7 @@ var DashboardService = class {
   /** Current price row per model, for the pricing tab. 501s when no `AGENT_PRICING_STORE` is bound. */
   async listPrices() {
     if (this.pricingStore === void 0) {
-      throw new import_common2.NotImplementedException(PRICING_STORE_UNBOUND_MESSAGE);
+      throw new import_common3.NotImplementedException(PRICING_STORE_UNBOUND_MESSAGE);
     }
     return this.pricingStore.listCurrentPrices();
   }
@@ -221,7 +287,7 @@ var DashboardService = class {
   */
   async upsertPrice(body) {
     if (this.pricingStore === void 0) {
-      throw new import_common2.NotImplementedException(PRICING_STORE_UNBOUND_MESSAGE);
+      throw new import_common3.NotImplementedException(PRICING_STORE_UNBOUND_MESSAGE);
     }
     await this.pricingStore.upsertModelPrice(parsePriceInput(body));
   }
@@ -257,17 +323,20 @@ var DashboardService = class {
   }
 };
 DashboardService = _ts_decorate([
-  (0, import_common2.Injectable)(),
-  _ts_param(0, (0, import_common2.Inject)(AGENT_GOVERNANCE_QUERIES)),
-  _ts_param(1, (0, import_common2.Optional)()),
-  _ts_param(1, (0, import_common2.Inject)(AGENT_ACTOR_DIRECTORY)),
-  _ts_param(2, (0, import_common2.Optional)()),
-  _ts_param(2, (0, import_common2.Inject)(AGENT_PRICING_STORE)),
+  (0, import_common3.Injectable)(),
+  _ts_param(0, (0, import_common3.Inject)(AGENT_GOVERNANCE_QUERIES)),
+  _ts_param(1, (0, import_common3.Optional)()),
+  _ts_param(1, (0, import_common3.Inject)(AGENT_ACTOR_DIRECTORY)),
+  _ts_param(2, (0, import_common3.Optional)()),
+  _ts_param(2, (0, import_common3.Inject)(AGENT_PRICING_STORE)),
+  _ts_param(3, (0, import_common3.Optional)()),
+  _ts_param(3, (0, import_common3.Inject)(AGENT_APPROVAL_PORT)),
   _ts_metadata("design:type", Function),
   _ts_metadata("design:paramtypes", [
     typeof AgentGovernanceQueries === "undefined" ? Object : AgentGovernanceQueries,
     typeof ActorDirectory === "undefined" ? Object : ActorDirectory,
-    typeof AgentPricingStore === "undefined" ? Object : AgentPricingStore
+    typeof AgentPricingStore === "undefined" ? Object : AgentPricingStore,
+    typeof AgentApprovalPort === "undefined" ? Object : AgentApprovalPort
   ])
 ], DashboardService);
 
@@ -317,8 +386,12 @@ var AgentApiController = class {
     __name(this, "AgentApiController");
   }
   dashboard;
-  constructor(dashboard) {
+  approvalActorRef;
+  actorResolver;
+  constructor(dashboard, approvalActorRef, actorResolver) {
     this.dashboard = dashboard;
+    this.approvalActorRef = approvalActorRef;
+    this.actorResolver = actorResolver;
   }
   /** `{ byModel, byActor, trend }` for a day range (defaults to the last 30 days). */
   spend(from, to) {
@@ -340,6 +413,42 @@ var AgentApiController = class {
   toolCalls(limit) {
     return this.dashboard.recentToolCalls(parseLimit(limit, 50));
   }
+  /** Tool calls sitting `pending_approval` (default 50, max 200), oldest first — the approvals inbox. */
+  approvals(limit) {
+    return this.dashboard.pendingApprovals(parseLimit(limit, 50));
+  }
+  /**
+  * Decide a pending HITL tool call. Body `{ approved: boolean; reason?: string }`. 501s (via
+  * `DashboardService.decideApproval`) when no `AGENT_APPROVAL_PORT` is bound. `executedByRef`
+  * comes from {@link deciderRef} run against the live request.
+  */
+  async decideApproval(toolCallId, body, req) {
+    await this.dashboard.decideApproval(toolCallId, body, await this.deciderRef(req));
+  }
+  /**
+  * WHO decided, as an opaque ref: an explicit `approvalActorRef` override wins outright (no
+  * resolver fallback, even when it returns `undefined`); otherwise the AgentModule-configured
+  * actor resolver — the same identity seam chat requests use. A resolver that throws is an
+  * unauthenticated/unreadable request, not an error to surface: the decision itself was already
+  * authorized by the dashboard's guards, so the ref is simply omitted.
+  */
+  async deciderRef(req) {
+    if (this.approvalActorRef !== void 0) {
+      return this.approvalActorRef(req);
+    }
+    if (this.actorResolver === void 0) {
+      return void 0;
+    }
+    try {
+      return (await this.actorResolver.resolve(req)).id;
+    } catch {
+      return void 0;
+    }
+  }
+  /** Per-tool call/failure/rejection/latency rollup for a day range (defaults to the last 30 days). */
+  tools(from, to) {
+    return this.dashboard.toolStats(resolveRange(from, to));
+  }
   /** Most recent threads (default 50, max 200) with rolled-up counts. */
   threads(limit) {
     return this.dashboard.recentThreads(parseLimit(limit, 50));
@@ -365,9 +474,9 @@ var AgentApiController = class {
   }
 };
 _ts_decorate2([
-  (0, import_common3.Get)("spend"),
-  _ts_param2(0, (0, import_common3.Query)("from")),
-  _ts_param2(1, (0, import_common3.Query)("to")),
+  (0, import_common4.Get)("spend"),
+  _ts_param2(0, (0, import_common4.Query)("from")),
+  _ts_param2(1, (0, import_common4.Query)("to")),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     String,
@@ -376,10 +485,10 @@ _ts_decorate2([
   _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], AgentApiController.prototype, "spend", null);
 _ts_decorate2([
-  (0, import_common3.Get)("top-threads"),
-  _ts_param2(0, (0, import_common3.Query)("from")),
-  _ts_param2(1, (0, import_common3.Query)("to")),
-  _ts_param2(2, (0, import_common3.Query)("limit")),
+  (0, import_common4.Get)("top-threads"),
+  _ts_param2(0, (0, import_common4.Query)("from")),
+  _ts_param2(1, (0, import_common4.Query)("to")),
+  _ts_param2(2, (0, import_common4.Query)("limit")),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     String,
@@ -389,9 +498,9 @@ _ts_decorate2([
   _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], AgentApiController.prototype, "topThreads", null);
 _ts_decorate2([
-  (0, import_common3.Get)("reliability"),
-  _ts_param2(0, (0, import_common3.Query)("from")),
-  _ts_param2(1, (0, import_common3.Query)("to")),
+  (0, import_common4.Get)("reliability"),
+  _ts_param2(0, (0, import_common4.Query)("from")),
+  _ts_param2(1, (0, import_common4.Query)("to")),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     String,
@@ -400,8 +509,8 @@ _ts_decorate2([
   _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], AgentApiController.prototype, "reliability", null);
 _ts_decorate2([
-  (0, import_common3.Get)("runs"),
-  _ts_param2(0, (0, import_common3.Query)("limit")),
+  (0, import_common4.Get)("runs"),
+  _ts_param2(0, (0, import_common4.Query)("limit")),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     String
@@ -409,8 +518,8 @@ _ts_decorate2([
   _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], AgentApiController.prototype, "runs", null);
 _ts_decorate2([
-  (0, import_common3.Get)("tool-calls"),
-  _ts_param2(0, (0, import_common3.Query)("limit")),
+  (0, import_common4.Get)("tool-calls"),
+  _ts_param2(0, (0, import_common4.Query)("limit")),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     String
@@ -418,8 +527,42 @@ _ts_decorate2([
   _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], AgentApiController.prototype, "toolCalls", null);
 _ts_decorate2([
-  (0, import_common3.Get)("threads"),
-  _ts_param2(0, (0, import_common3.Query)("limit")),
+  (0, import_common4.Get)("approvals"),
+  _ts_param2(0, (0, import_common4.Query)("limit")),
+  _ts_metadata2("design:type", Function),
+  _ts_metadata2("design:paramtypes", [
+    String
+  ]),
+  _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+], AgentApiController.prototype, "approvals", null);
+_ts_decorate2([
+  (0, import_common4.Post)("approvals/:toolCallId"),
+  (0, import_common4.HttpCode)(204),
+  _ts_param2(0, (0, import_common4.Param)("toolCallId")),
+  _ts_param2(1, (0, import_common4.Body)()),
+  _ts_param2(2, (0, import_common4.Req)()),
+  _ts_metadata2("design:type", Function),
+  _ts_metadata2("design:paramtypes", [
+    String,
+    Object,
+    Object
+  ]),
+  _ts_metadata2("design:returntype", Promise)
+], AgentApiController.prototype, "decideApproval", null);
+_ts_decorate2([
+  (0, import_common4.Get)("tools"),
+  _ts_param2(0, (0, import_common4.Query)("from")),
+  _ts_param2(1, (0, import_common4.Query)("to")),
+  _ts_metadata2("design:type", Function),
+  _ts_metadata2("design:paramtypes", [
+    String,
+    String
+  ]),
+  _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+], AgentApiController.prototype, "tools", null);
+_ts_decorate2([
+  (0, import_common4.Get)("threads"),
+  _ts_param2(0, (0, import_common4.Query)("limit")),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     String
@@ -427,14 +570,14 @@ _ts_decorate2([
   _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], AgentApiController.prototype, "threads", null);
 _ts_decorate2([
-  (0, import_common3.Get)("pricing"),
+  (0, import_common4.Get)("pricing"),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", []),
   _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], AgentApiController.prototype, "listPrices", null);
 _ts_decorate2([
-  (0, import_common3.Post)("pricing"),
-  _ts_param2(0, (0, import_common3.Body)()),
+  (0, import_common4.Post)("pricing"),
+  _ts_param2(0, (0, import_common4.Body)()),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     Object
@@ -442,16 +585,21 @@ _ts_decorate2([
   _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
 ], AgentApiController.prototype, "upsertPrice", null);
 _ts_decorate2([
-  (0, import_common3.Sse)("stream"),
+  (0, import_common4.Sse)("stream"),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", []),
   _ts_metadata2("design:returntype", typeof Observable === "undefined" ? Object : Observable)
 ], AgentApiController.prototype, "stream", null);
 AgentApiController = _ts_decorate2([
-  (0, import_common3.Controller)(),
+  (0, import_common4.Controller)(),
+  _ts_param2(1, (0, import_common4.Inject)(DASHBOARD_APPROVAL_ACTOR_REF)),
+  _ts_param2(2, (0, import_common4.Optional)()),
+  _ts_param2(2, (0, import_common4.Inject)(AGENT_ACTOR_RESOLVER)),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
-    typeof DashboardService === "undefined" ? Object : DashboardService
+    typeof DashboardService === "undefined" ? Object : DashboardService,
+    Object,
+    typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], AgentApiController);
 
@@ -482,14 +630,14 @@ __name(agentDashboardMountPaths, "agentDashboardMountPaths");
 
 // src/server/agent-dashboard.module.ts
 var import_reflect_metadata = require("reflect-metadata");
-var import_common5 = require("@nestjs/common");
+var import_common6 = require("@nestjs/common");
 var import_core = require("@nestjs/core");
 
 // src/server/agent-ui.controller.ts
 var import_node_fs = require("fs");
 var import_node_path = require("path");
 var import_node_url = require("url");
-var import_common4 = require("@nestjs/common");
+var import_common5 = require("@nestjs/common");
 function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -534,10 +682,15 @@ var AgentUiController = class {
   }
   // index.html references hash-named bundles, so it MUST NOT be cached (stale bundle = the classic
   // "stuck loading after a deploy"). The hashed assets below are immutable.
-  index() {
+  index(req, res) {
+    if (req.headers["x-inertia"] !== void 0) {
+      res.status(409);
+      res.setHeader("X-Inertia-Location", req.originalUrl);
+      return "";
+    }
     const indexPath = (0, import_node_path.join)(this.dir, "index.html");
     if (!(0, import_node_fs.existsSync)(indexPath)) {
-      throw new import_common4.NotFoundException("Dashboard is not built. Run the package build.");
+      throw new import_common5.NotFoundException("Dashboard is not built. Run the package build.");
     }
     const html = (0, import_node_fs.readFileSync)(indexPath, "utf8").replaceAll(`="${BUILD_BASE}/`, `="${this.basePath}/`);
     const inject = `<script>window.__AGENT_BASE__='${this.basePath}';window.__AGENT_API__='${this.apiBasePath}';</script>`;
@@ -545,40 +698,47 @@ var AgentUiController = class {
   }
   asset(file) {
     const safe = (0, import_node_path.basename)(file);
-    if (safe !== file) throw new import_common4.NotFoundException();
+    if (safe !== file) throw new import_common5.NotFoundException();
     const root = (0, import_node_path.resolve)(this.dir, "assets");
     const assetPath = (0, import_node_path.resolve)(root, safe);
     if (!assetPath.startsWith(root + import_node_path.sep) || !(0, import_node_fs.existsSync)(assetPath)) {
-      throw new import_common4.NotFoundException();
+      throw new import_common5.NotFoundException();
     }
     const type = CONTENT_TYPES[(0, import_node_path.extname)(safe)] ?? "application/octet-stream";
-    return new import_common4.StreamableFile((0, import_node_fs.readFileSync)(assetPath), {
+    return new import_common5.StreamableFile((0, import_node_fs.readFileSync)(assetPath), {
       type
     });
   }
 };
 _ts_decorate3([
-  (0, import_common4.Get)(),
-  (0, import_common4.Header)("Content-Type", "text/html; charset=utf-8"),
-  (0, import_common4.Header)("Cache-Control", "no-store, must-revalidate"),
+  (0, import_common5.Get)(),
+  (0, import_common5.Header)("Content-Type", "text/html; charset=utf-8"),
+  (0, import_common5.Header)("Cache-Control", "no-store, must-revalidate"),
+  _ts_param3(0, (0, import_common5.Req)()),
+  _ts_param3(1, (0, import_common5.Res)({
+    passthrough: true
+  })),
   _ts_metadata3("design:type", Function),
-  _ts_metadata3("design:paramtypes", []),
+  _ts_metadata3("design:paramtypes", [
+    typeof UiPageRequest === "undefined" ? Object : UiPageRequest,
+    typeof UiPageResponse === "undefined" ? Object : UiPageResponse
+  ]),
   _ts_metadata3("design:returntype", String)
 ], AgentUiController.prototype, "index", null);
 _ts_decorate3([
-  (0, import_common4.Get)("assets/:file"),
-  (0, import_common4.Header)("Cache-Control", "public, max-age=31536000, immutable"),
-  _ts_param3(0, (0, import_common4.Param)("file")),
+  (0, import_common5.Get)("assets/:file"),
+  (0, import_common5.Header)("Cache-Control", "public, max-age=31536000, immutable"),
+  _ts_param3(0, (0, import_common5.Param)("file")),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
     String
   ]),
-  _ts_metadata3("design:returntype", typeof import_common4.StreamableFile === "undefined" ? Object : import_common4.StreamableFile)
+  _ts_metadata3("design:returntype", typeof import_common5.StreamableFile === "undefined" ? Object : import_common5.StreamableFile)
 ], AgentUiController.prototype, "asset", null);
 AgentUiController = _ts_decorate3([
-  (0, import_common4.Controller)(),
-  _ts_param3(0, (0, import_common4.Inject)(DASHBOARD_BASE_PATH)),
-  _ts_param3(1, (0, import_common4.Inject)(DASHBOARD_API_PATH)),
+  (0, import_common5.Controller)(),
+  _ts_param3(0, (0, import_common5.Inject)(DASHBOARD_BASE_PATH)),
+  _ts_param3(1, (0, import_common5.Inject)(DASHBOARD_API_PATH)),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
     String,
@@ -620,7 +780,13 @@ var AgentApiModule = class _AgentApiModule {
       ],
       providers: [
         DashboardService,
-        ...options.guards ?? []
+        ...options.guards ?? [],
+        // `useValue` even when `options.approvalActorRef` is `undefined` — AgentApiController
+        // injects this WITHOUT `@Optional()` (same pattern as `AGENT_QUOTA_STORE`'s factory).
+        {
+          provide: DASHBOARD_APPROVAL_ACTOR_REF,
+          useValue: options.approvalActorRef
+        }
       ],
       exports: [
         DashboardService
@@ -629,7 +795,7 @@ var AgentApiModule = class _AgentApiModule {
   }
 };
 AgentApiModule = _ts_decorate4([
-  (0, import_common5.Module)({})
+  (0, import_common6.Module)({})
 ], AgentApiModule);
 var AgentDashboardModule = class _AgentDashboardModule {
   static {
@@ -652,6 +818,9 @@ var AgentDashboardModule = class _AgentDashboardModule {
           } : {},
           ...options.guards ? {
             guards: options.guards
+          } : {},
+          ...options.approvalActorRef ? {
+            approvalActorRef: options.approvalActorRef
           } : {}
         }),
         import_core.RouterModule.register([
@@ -688,11 +857,13 @@ var AgentDashboardModule = class _AgentDashboardModule {
   }
 };
 AgentDashboardModule = _ts_decorate4([
-  (0, import_common5.Module)({})
+  (0, import_common6.Module)({})
 ], AgentDashboardModule);
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AGENT_ACTOR_DIRECTORY,
+  AGENT_ACTOR_RESOLVER,
+  AGENT_APPROVAL_PORT,
   AGENT_GOVERNANCE_QUERIES,
   AGENT_PRICING_STORE,
   AgentApiController,
@@ -700,6 +871,7 @@ AgentDashboardModule = _ts_decorate4([
   AgentDashboardModule,
   AgentUiController,
   DASHBOARD_API_PATH,
+  DASHBOARD_APPROVAL_ACTOR_REF,
   DASHBOARD_BASE_PATH,
   DashboardService,
   agentDashboardMountPaths,