@dudousxd/nestjs-agent-store-drizzle 0.20.2 → 0.21.0

package/dist/index.js

@@ -266,6 +266,15 @@ var ragIngestionLog = sqliteTable("rag_ingestion_log", {
 }, (table) => [
   index("rag_ingestion_log_collection_idx").on(table.collection, table.updatedAt)
 ]);
+var agentConfirmToken = sqliteTable("agent_confirm_token", {
+  hash: text("hash").primaryKey(),
+  actorRef: text("actor_ref").notNull(),
+  tool: text("tool").notNull(),
+  expiresAt: integer("expires_at").notNull(),
+  createdAt: integer("created_at").notNull()
+}, (table) => [
+  index("agent_confirm_token_expires_idx").on(table.expiresAt)
+]);
 var agentSchema = {
   agentThread,
   agentMessage,
@@ -275,7 +284,8 @@ var agentSchema = {
   agentModelPricing,
   agentRun,
   agentMemory,
-  ragIngestionLog
+  ragIngestionLog,
+  agentConfirmToken
 };
 
 // src/ensure-schema.ts
@@ -430,7 +440,16 @@ var statements = [
     updated_at INTEGER NOT NULL
   )`,
   `CREATE INDEX IF NOT EXISTS rag_ingestion_log_collection_idx
-    ON rag_ingestion_log (collection, updated_at)`
+    ON rag_ingestion_log (collection, updated_at)`,
+  `CREATE TABLE IF NOT EXISTS agent_confirm_token (
+    hash TEXT PRIMARY KEY NOT NULL,
+    actor_ref TEXT NOT NULL,
+    tool TEXT NOT NULL,
+    expires_at INTEGER NOT NULL,
+    created_at INTEGER NOT NULL
+  )`,
+  `CREATE INDEX IF NOT EXISTS agent_confirm_token_expires_idx
+    ON agent_confirm_token (expires_at)`
 ];
 var additiveColumns = [
   {
@@ -2131,10 +2150,43 @@ var DrizzlePricingStore = class {
   }
 };
 
+// src/drizzle-confirm-token-store.ts
+import { eq as eq5, lt } from "drizzle-orm";
+var DrizzleConfirmTokenStore = class {
+  static {
+    __name(this, "DrizzleConfirmTokenStore");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async claim(input) {
+    const inserted = await this.db.insert(agentConfirmToken).values({
+      hash: input.hash,
+      actorRef: input.actorRef,
+      tool: input.tool,
+      expiresAt: input.expiresAt,
+      createdAt: Date.now()
+    }).onConflictDoNothing().returning({
+      hash: agentConfirmToken.hash
+    });
+    return inserted.length === 1;
+  }
+  async release(hash) {
+    await this.db.delete(agentConfirmToken).where(eq5(agentConfirmToken.hash, hash));
+  }
+  async purgeExpired(now = Date.now()) {
+    const purged = await this.db.delete(agentConfirmToken).where(lt(agentConfirmToken.expiresAt, now)).returning({
+      hash: agentConfirmToken.hash
+    });
+    return purged.length;
+  }
+};
+
 // src/drizzle-rag-ingestion-log.ts
 import { subscribe, unsubscribe } from "diagnostics_channel";
 import { Injectable, Logger } from "@nestjs/common";
-import { and as and5, asc as asc3, count as count2, desc as desc3, eq as eq5, gt, lt, or as or2 } from "drizzle-orm";
+import { and as and5, asc as asc3, count as count2, desc as desc3, eq as eq6, gt, lt as lt2, or as or2 } from "drizzle-orm";
 function _ts_decorate(decorators, target, key, desc4) {
   var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -2326,19 +2378,19 @@ var DrizzleRagIngestionLog = class _DrizzleRagIngestionLog {
   }
   /** The latest recorded outcome for one document, or null if it was never attempted. */
   async get(documentId) {
-    const [row] = await this.db.select().from(ragIngestionLog).where(eq5(ragIngestionLog.documentId, documentId));
+    const [row] = await this.db.select().from(ragIngestionLog).where(eq6(ragIngestionLog.documentId, documentId));
     return row ?? null;
   }
   /** Forget one document's record. Returns whether a row was actually removed. */
   async remove(documentId) {
-    const removed = await this.db.delete(ragIngestionLog).where(eq5(ragIngestionLog.documentId, documentId)).returning({
+    const removed = await this.db.delete(ragIngestionLog).where(eq6(ragIngestionLog.documentId, documentId)).returning({
       documentId: ragIngestionLog.documentId
     });
     return removed.length > 0;
   }
   /** Forget every record for a collection — for when the collection itself is deleted. */
   async removeByCollection(collection) {
-    const removed = await this.db.delete(ragIngestionLog).where(eq5(ragIngestionLog.collection, collection)).returning({
+    const removed = await this.db.delete(ragIngestionLog).where(eq6(ragIngestionLog.collection, collection)).returning({
       documentId: ragIngestionLog.documentId
     });
     return removed.length;
@@ -2370,7 +2422,7 @@ var DrizzleRagIngestionLog = class _DrizzleRagIngestionLog {
     }
   }
   where(query) {
-    return and5(query.collection !== void 0 ? eq5(ragIngestionLog.collection, query.collection) : void 0, query.status !== void 0 ? eq5(ragIngestionLog.status, query.status) : void 0);
+    return and5(query.collection !== void 0 ? eq6(ragIngestionLog.collection, query.collection) : void 0, query.status !== void 0 ? eq6(ragIngestionLog.status, query.status) : void 0);
   }
   /**
   * The coordinates filter AND'd with "strictly after `cursor` in
@@ -2385,7 +2437,7 @@ var DrizzleRagIngestionLog = class _DrizzleRagIngestionLog {
     if (cursor === void 0) {
       return base;
     }
-    return and5(base, or2(lt(ragIngestionLog.updatedAt, cursor.updatedAt), and5(eq5(ragIngestionLog.updatedAt, cursor.updatedAt), gt(ragIngestionLog.documentId, cursor.documentId))));
+    return and5(base, or2(lt2(ragIngestionLog.updatedAt, cursor.updatedAt), and5(eq6(ragIngestionLog.updatedAt, cursor.updatedAt), gt(ragIngestionLog.documentId, cursor.documentId))));
   }
   /**
   * Upsert one outcome. Keyed by document id so the row always reflects the *current* state — a
@@ -2461,7 +2513,7 @@ DrizzleRagIngestionLog = _ts_decorate([
 ], DrizzleRagIngestionLog);
 
 // src/drizzle-agent-store.module.ts
-import { AGENT_GOVERNANCE_QUERIES, AGENT_PRICING_STORE, AGENT_STORE } from "@dudousxd/nestjs-agent-core";
+import { AGENT_CONFIRM_TOKEN_STORE, AGENT_GOVERNANCE_QUERIES, AGENT_PRICING_STORE, AGENT_STORE } from "@dudousxd/nestjs-agent-core";
 import { Module } from "@nestjs/common";
 function _ts_decorate2(decorators, target, key, desc4) {
   var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
@@ -2531,6 +2583,15 @@ var DrizzleAgentStoreModule = class _DrizzleAgentStoreModule {
         {
           provide: AGENT_GOVERNANCE_QUERIES,
           useExisting: DrizzleGovernanceQueries
+        },
+        // What makes a `defineConfirmedTool` confirmation single use across replicas.
+        {
+          provide: DrizzleConfirmTokenStore,
+          useFactory: /* @__PURE__ */ __name(() => new DrizzleConfirmTokenStore(options.db), "useFactory")
+        },
+        {
+          provide: AGENT_CONFIRM_TOKEN_STORE,
+          useExisting: DrizzleConfirmTokenStore
         }
       ],
       exports: [
@@ -2543,7 +2604,9 @@ var DrizzleAgentStoreModule = class _DrizzleAgentStoreModule {
         DrizzleGovernanceQueries,
         AGENT_GOVERNANCE_QUERIES,
         DrizzlePricingStore,
-        AGENT_PRICING_STORE
+        AGENT_PRICING_STORE,
+        DrizzleConfirmTokenStore,
+        AGENT_CONFIRM_TOKEN_STORE
       ]
     };
   }
@@ -2554,11 +2617,13 @@ DrizzleAgentStoreModule = _ts_decorate2([
 export {
   DrizzleAgentStore,
   DrizzleAgentStoreModule,
+  DrizzleConfirmTokenStore,
   DrizzleGovernanceQueries,
   DrizzleMemoryProvider,
   DrizzlePricingStore,
   DrizzleRagIngestionLog,
   RAG_INGESTION_LOG_PAGE_ORDER,
+  agentConfirmToken,
   agentMemory,
   agentMessage,
   agentModelPricing,