@dudousxd/nestjs-agent 0.3.2 → 0.4.0

package/dist/index.js

@@ -2,14 +2,14 @@ var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 
 // src/agent.module.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER5, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY4, AGENT_DURABLE_RUNNER, AGENT_MODEL as AGENT_MODEL2, AGENT_OPTIONS as AGENT_OPTIONS3, AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS3, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE3, AGENT_REGISTRY as AGENT_REGISTRY5, AGENT_ROLES_POLICY as AGENT_ROLES_POLICY2, AGENT_RUNNER as AGENT_RUNNER2, AGENT_SINK as AGENT_SINK2, AGENT_STORE as AGENT_STORE4, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY3, AgentRegistry as AgentRegistry5, DefaultRolesPolicy, ToolRegistry as ToolRegistry3 } from "@dudousxd/nestjs-agent-core";
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER6, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY4, AGENT_DURABLE_RUNNER, AGENT_MODEL as AGENT_MODEL2, AGENT_OPTIONS as AGENT_OPTIONS4, AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS3, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE3, AGENT_REGISTRY as AGENT_REGISTRY5, AGENT_ROLES_POLICY as AGENT_ROLES_POLICY2, AGENT_RUNNER as AGENT_RUNNER2, AGENT_SINK as AGENT_SINK2, AGENT_STORE as AGENT_STORE4, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY3, AgentRegistry as AgentRegistry5, DefaultRolesPolicy, ToolRegistry as ToolRegistry3 } from "@dudousxd/nestjs-agent-core";
 import { Global, Module } from "@nestjs/common";
 import { DiscoveryModule, RouterModule } from "@nestjs/core";
 
 // src/agent-deps.factory.ts
-import { AGENT_MODEL, AGENT_PROMPT_CONTRIBUTORS, AGENT_QUOTA_STORE, AGENT_REGISTRY, AGENT_ROLES_POLICY, AGENT_SINK, AGENT_STORE, AGENT_TOOL_REGISTRY, AgentRegistry as AgentRegistry2, ToolRegistry as ToolRegistry2 } from "@dudousxd/nestjs-agent-core";
+import { AGENT_MODEL, AGENT_PRICING_STORE, AGENT_PROMPT_CONTRIBUTORS, AGENT_QUOTA_STORE, AGENT_REGISTRY, AGENT_ROLES_POLICY, AGENT_SINK, AGENT_STORE, AGENT_TOOL_REGISTRY, AgentRegistry as AgentRegistry2, ToolRegistry as ToolRegistry2 } from "@dudousxd/nestjs-agent-core";
 import { AGENT_OPTIONS } from "@dudousxd/nestjs-agent-core";
-import { Inject, Injectable } from "@nestjs/common";
+import { Inject, Injectable, Optional } from "@nestjs/common";
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -44,7 +44,8 @@ var AgentDepsFactory2 = class {
   agents;
   promptContributors;
   quota;
-  constructor(options, model, store, sink, rolesPolicy, registry, agents, promptContributors, quota) {
+  pricingStore;
+  constructor(options, model, store, sink, rolesPolicy, registry, agents, promptContributors, quota, pricingStore) {
     this.options = options;
     this.model = model;
     this.store = store;
@@ -54,6 +55,7 @@ var AgentDepsFactory2 = class {
     this.agents = agents;
     this.promptContributors = promptContributors;
     this.quota = quota;
+    this.pricingStore = pricingStore;
   }
   /**
   * The agent a turn uses when the caller names none: the explicit `defaultAgent` option, else the
@@ -100,6 +102,9 @@ var AgentDepsFactory2 = class {
       ...this.quota !== void 0 ? {
         quota: this.quota
       } : {},
+      ...this.pricingStore !== void 0 ? {
+        pricingStore: this.pricingStore
+      } : {},
       ...toolAllowList !== void 0 ? {
         toolAllowList
       } : {},
@@ -140,6 +145,8 @@ AgentDepsFactory2 = _ts_decorate([
   _ts_param(6, Inject(AGENT_REGISTRY)),
   _ts_param(7, Inject(AGENT_PROMPT_CONTRIBUTORS)),
   _ts_param(8, Inject(AGENT_QUOTA_STORE)),
+  _ts_param(9, Optional()),
+  _ts_param(9, Inject(AGENT_PRICING_STORE)),
   _ts_metadata("design:type", Function),
   _ts_metadata("design:paramtypes", [
     typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
@@ -150,13 +157,14 @@ AgentDepsFactory2 = _ts_decorate([
     typeof ToolRegistry2 === "undefined" ? Object : ToolRegistry2,
     typeof AgentRegistry2 === "undefined" ? Object : AgentRegistry2,
     Array,
+    Object,
     Object
   ])
 ], AgentDepsFactory2);
 
 // src/agent.service.ts
 import { AGENT_DEPS_FACTORY, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE2, AGENT_RUNNER, AGENT_STORE as AGENT_STORE2 } from "@dudousxd/nestjs-agent-core";
-import { BadRequestException, ForbiddenException, Inject as Inject2, Injectable as Injectable2, NotFoundException } from "@nestjs/common";
+import { BadRequestException, ForbiddenException, Inject as Inject2, Injectable as Injectable2, NotFoundException, NotImplementedException } from "@nestjs/common";
 
 // src/agent-deps.ts
 function utcDay(date = /* @__PURE__ */ new Date()) {
@@ -207,7 +215,7 @@ var AgentService = class {
     this.quota = quota;
   }
   async chat(params) {
-    const agentName = params.agentName ?? this.deps.defaultAgentName();
+    const agentName = await this.resolveAgentName(params.agentName, params.threadId);
     let threadId = params.threadId;
     if (threadId === void 0) {
       if (params.regenerate === true) {
@@ -232,6 +240,9 @@ var AgentService = class {
       ...params.regenerate === true ? {
         regenerate: true
       } : {},
+      ...params.attachments !== void 0 ? {
+        attachments: params.attachments
+      } : {},
       ...params.pageContext !== void 0 ? {
         pageContext: params.pageContext
       } : {}
@@ -265,12 +276,14 @@ var AgentService = class {
     await this.assertOwnsActiveStream(actor, runId);
     return this.runner.cancel(runId);
   }
-  listThreads(actorRef) {
-    return this.store.listThreads(actorRef);
+  async listThreads(actorRef) {
+    const threads = await this.store.listThreads(actorRef);
+    return Promise.all(threads.map((thread) => this.toSummaryView(thread)));
   }
   async getThread(actor, threadId) {
     await this.assertOwnsThread(actor, threadId);
-    return this.store.getThread(threadId);
+    const thread = await this.store.getThread(threadId);
+    return thread === null ? null : this.toDetailView(thread);
   }
   async deleteThread(actor, threadId) {
     await this.assertOwnsThread(actor, threadId);
@@ -280,7 +293,38 @@ var AgentService = class {
     await this.assertOwnsThread(actor, threadId);
     return this.store.forkThread(threadId, fromMessageId);
   }
+  /** Kept for source compatibility — a thin wrapper over the more general `updateThread`. */
   async renameThread(actor, threadId, title) {
+    return this.updateThread(actor, threadId, {
+      title
+    });
+  }
+  /**
+  * Rename a thread and/or set its default agent. Title-only patches work against ANY store (via
+  * the required `setTitle`); a `defaultAgent` change requires the bound store to implement the
+  * optional `updateThread` — 501 with a clear message when it doesn't, rather than silently
+  * dropping the field.
+  */
+  async updateThread(actor, threadId, patch) {
+    const title = patch.title !== void 0 ? this.validateTitle(patch.title) : void 0;
+    await this.assertOwnsThread(actor, threadId);
+    if (patch.defaultAgent === void 0) {
+      if (title !== void 0) {
+        await this.store.setTitle(threadId, title);
+      }
+      return;
+    }
+    if (this.store.updateThread === void 0) {
+      throw new NotImplementedException("Setting a thread's defaultAgent requires an AgentStore that implements updateThread(); the bound store does not support it.");
+    }
+    await this.store.updateThread(threadId, {
+      ...title !== void 0 ? {
+        title
+      } : {},
+      defaultAgent: patch.defaultAgent
+    });
+  }
+  validateTitle(title) {
     const trimmed = title.trim();
     if (trimmed.length === 0) {
       throw new BadRequestException("title must not be empty");
@@ -288,8 +332,41 @@ var AgentService = class {
     if (trimmed.length > 200) {
       throw new BadRequestException("title must be at most 200 characters");
     }
-    await this.assertOwnsThread(actor, threadId);
-    return this.store.setTitle(threadId, trimmed);
+    return trimmed;
+  }
+  /**
+  * Agent-selection precedence for a `chat()` call with no explicit `agentName`: the thread's own
+  * `defaultAgent` (if the thread exists and one is set) wins over the module's configured default.
+  * Skips the thread lookup entirely when the caller already named an agent or there's no thread yet.
+  */
+  async resolveAgentName(agentName, threadId) {
+    if (agentName !== void 0) {
+      return agentName;
+    }
+    if (threadId !== void 0) {
+      const thread = await this.store.getThread(threadId);
+      if (thread?.defaultAgent !== void 0 && thread.defaultAgent !== null) {
+        return thread.defaultAgent;
+      }
+    }
+    return this.deps.defaultAgentName();
+  }
+  async toSummaryView(thread) {
+    return {
+      ...thread,
+      defaultAgent: thread.defaultAgent ?? null,
+      activeRunId: await this.store.activeRunForThread?.(thread.id) ?? null
+    };
+  }
+  async toDetailView(thread) {
+    const summary = await this.toSummaryView(thread);
+    return {
+      ...summary,
+      messages: thread.messages,
+      ...thread.activeStreamId !== void 0 ? {
+        activeStreamId: thread.activeStreamId
+      } : {}
+    };
   }
   async promoteThread(actor, threadId) {
     await this.assertOwnsThread(actor, threadId);
@@ -445,9 +522,10 @@ AgentsController = _ts_decorate3([
   ])
 ], AgentsController);
 
-// src/controller/chat.controller.ts
-import { AGENT_ACTOR_RESOLVER, AgentStreamError } from "@dudousxd/nestjs-agent-core";
-import { Body, Controller as Controller2, Get as Get2, Inject as Inject4, Param, Post, Req, Res } from "@nestjs/common";
+// src/controller/attachments.controller.ts
+import { AGENT_ACTOR_RESOLVER, AGENT_ATTACHMENT_STAGING, AGENT_OPTIONS as AGENT_OPTIONS2 } from "@dudousxd/nestjs-agent-core";
+import { BadRequestException as BadRequestException2, Controller as Controller2, Inject as Inject4, NotImplementedException as NotImplementedException2, Optional as Optional2, PayloadTooLargeException, Post, Req, UnsupportedMediaTypeException, UploadedFile, UseInterceptors } from "@nestjs/common";
+import { FileInterceptor } from "@nestjs/platform-express";
 function _ts_decorate4(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -465,6 +543,110 @@ function _ts_param4(paramIndex, decorator) {
   };
 }
 __name(_ts_param4, "_ts_param");
+var DEFAULT_MAX_ATTACHMENT_BYTES = 20 * 1024 * 1024;
+var DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES = [
+  "image/png",
+  "image/jpeg",
+  "image/gif",
+  "image/webp",
+  "application/pdf",
+  "text/plain",
+  "text/csv"
+];
+var AttachmentsController = class {
+  static {
+    __name(this, "AttachmentsController");
+  }
+  options;
+  actorResolver;
+  staging;
+  constructor(options, actorResolver, staging) {
+    this.options = options;
+    this.actorResolver = actorResolver;
+    this.staging = staging;
+  }
+  /**
+  * `attachments.upload: true` is what mounts this controller at all (see `agent.module.ts`), so by
+  * the time an instance exists the host clearly intends uploads to work. Fail boot loudly rather
+  * than mounting a controller that would 501 on every single request because nobody bound
+  * `AGENT_ATTACHMENT_STAGING`.
+  */
+  onModuleInit() {
+    if (this.options.attachments?.upload === true && this.staging === void 0) {
+      throw new Error("AgentModule: attachments.upload is true but no AGENT_ATTACHMENT_STAGING provider is bound. Bind one (e.g. `{ provide: AGENT_ATTACHMENT_STAGING, useClass: MyStagingStore }`) in a module imported alongside AgentModule, or set attachments.upload to false.");
+    }
+  }
+  async upload(req, file) {
+    if (this.staging === void 0) {
+      throw new NotImplementedException2("Attachment upload is not configured on this server.");
+    }
+    if (file === void 0) {
+      throw new BadRequestException2('multipart field "file" is required');
+    }
+    const allowedContentTypes = this.options.attachments?.allowedContentTypes ?? DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES;
+    if (!allowedContentTypes.includes(file.mimetype)) {
+      throw new UnsupportedMediaTypeException(`content type "${file.mimetype}" is not allowed (allowed: ${allowedContentTypes.join(", ")})`);
+    }
+    const maxBytes = this.options.attachments?.maxBytes ?? DEFAULT_MAX_ATTACHMENT_BYTES;
+    if (file.size > maxBytes) {
+      throw new PayloadTooLargeException(`file exceeds the ${maxBytes}-byte limit`);
+    }
+    const actor = await this.actorResolver.resolve(req);
+    return this.staging.stage({
+      data: file.buffer,
+      filename: file.originalname,
+      contentType: file.mimetype,
+      sizeBytes: file.size,
+      actor
+    });
+  }
+};
+_ts_decorate4([
+  Post(),
+  UseInterceptors(FileInterceptor("file")),
+  _ts_param4(0, Req()),
+  _ts_param4(1, UploadedFile()),
+  _ts_metadata4("design:type", Function),
+  _ts_metadata4("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
+    Object
+  ]),
+  _ts_metadata4("design:returntype", Promise)
+], AttachmentsController.prototype, "upload", null);
+AttachmentsController = _ts_decorate4([
+  Controller2("attachments"),
+  _ts_param4(0, Inject4(AGENT_OPTIONS2)),
+  _ts_param4(1, Inject4(AGENT_ACTOR_RESOLVER)),
+  _ts_param4(2, Optional2()),
+  _ts_param4(2, Inject4(AGENT_ATTACHMENT_STAGING)),
+  _ts_metadata4("design:type", Function),
+  _ts_metadata4("design:paramtypes", [
+    typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
+    typeof ActorResolver === "undefined" ? Object : ActorResolver,
+    Object
+  ])
+], AttachmentsController);
+
+// src/controller/chat.controller.ts
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER2, AgentStreamError } from "@dudousxd/nestjs-agent-core";
+import { Body, Controller as Controller3, Get as Get2, Inject as Inject5, Param, Post as Post2, Req as Req2, Res } from "@nestjs/common";
+function _ts_decorate5(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate5, "_ts_decorate");
+function _ts_metadata5(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata5, "_ts_metadata");
+function _ts_param5(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param5, "_ts_param");
 var ChatController = class {
   static {
     __name(this, "ChatController");
@@ -486,6 +668,9 @@ var ChatController = class {
       ...body.agent !== void 0 ? {
         agentName: body.agent
       } : {},
+      ...body.attachments !== void 0 ? {
+        attachments: body.attachments
+      } : {},
       ...body.pageContext !== void 0 ? {
         pageContext: body.pageContext
       } : {},
@@ -524,11 +709,26 @@ data: ${JSON.stringify({
 
 `);
     const decoder = new TextDecoder();
+    let buffer = "";
     try {
       for await (const chunk of this.agent.subscribe(runId)) {
-        res.write(`data: ${JSON.stringify({
-          delta: decoder.decode(chunk)
-        })}
+        buffer += decoder.decode(chunk, {
+          stream: true
+        });
+        let newline = buffer.indexOf("\n");
+        while (newline !== -1) {
+          const line = buffer.slice(0, newline);
+          buffer = buffer.slice(newline + 1);
+          if (line.length > 0) {
+            res.write(`data: ${line}
+
+`);
+          }
+          newline = buffer.indexOf("\n");
+        }
+      }
+      if (buffer.length > 0) {
+        res.write(`data: ${buffer}
 
 `);
       }
@@ -549,71 +749,71 @@ data: ${JSON.stringify(payload)}
     res.end();
   }
 };
-_ts_decorate4([
-  Post("chat"),
-  _ts_param4(0, Req()),
-  _ts_param4(1, Res()),
-  _ts_param4(2, Body()),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
+_ts_decorate5([
+  Post2("chat"),
+  _ts_param5(0, Req2()),
+  _ts_param5(1, Res()),
+  _ts_param5(2, Body()),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof Response === "undefined" ? Object : Response,
     typeof ChatBody === "undefined" ? Object : ChatBody
   ]),
-  _ts_metadata4("design:returntype", Promise)
+  _ts_metadata5("design:returntype", Promise)
 ], ChatController.prototype, "chat", null);
-_ts_decorate4([
+_ts_decorate5([
   Get2("chat/:runId/stream"),
-  _ts_param4(0, Param("runId")),
-  _ts_param4(1, Res()),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
+  _ts_param5(0, Param("runId")),
+  _ts_param5(1, Res()),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
     String,
     typeof Response === "undefined" ? Object : Response
   ]),
-  _ts_metadata4("design:returntype", Promise)
+  _ts_metadata5("design:returntype", Promise)
 ], ChatController.prototype, "stream", null);
-_ts_decorate4([
-  Post("chat/:runId/cancel"),
-  _ts_param4(0, Req()),
-  _ts_param4(1, Param("runId")),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
+_ts_decorate5([
+  Post2("chat/:runId/cancel"),
+  _ts_param5(0, Req2()),
+  _ts_param5(1, Param("runId")),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata4("design:returntype", Promise)
+  _ts_metadata5("design:returntype", Promise)
 ], ChatController.prototype, "cancel", null);
-ChatController = _ts_decorate4([
-  Controller2(),
-  _ts_param4(1, Inject4(AGENT_ACTOR_RESOLVER)),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
+ChatController = _ts_decorate5([
+  Controller3(),
+  _ts_param5(1, Inject5(AGENT_ACTOR_RESOLVER2)),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], ChatController);
 
 // src/controller/quota.controller.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER2 } from "@dudousxd/nestjs-agent-core";
-import { Controller as Controller3, Get as Get3, Inject as Inject5, Req as Req2 } from "@nestjs/common";
-function _ts_decorate5(decorators, target, key, desc) {
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER3 } from "@dudousxd/nestjs-agent-core";
+import { Controller as Controller4, Get as Get3, Inject as Inject6, Req as Req3 } from "@nestjs/common";
+function _ts_decorate6(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate5, "_ts_decorate");
-function _ts_metadata5(k, v) {
+__name(_ts_decorate6, "_ts_decorate");
+function _ts_metadata6(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata5, "_ts_metadata");
-function _ts_param5(paramIndex, decorator) {
+__name(_ts_metadata6, "_ts_metadata");
+function _ts_param6(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param5, "_ts_param");
+__name(_ts_param6, "_ts_param");
 var QuotaController = class {
   static {
     __name(this, "QuotaController");
@@ -629,45 +829,45 @@ var QuotaController = class {
     return this.agent.quotaToday(actor.id);
   }
 };
-_ts_decorate5([
+_ts_decorate6([
   Get3("today"),
-  _ts_param5(0, Req2()),
-  _ts_metadata5("design:type", Function),
-  _ts_metadata5("design:paramtypes", [
+  _ts_param6(0, Req3()),
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request
   ]),
-  _ts_metadata5("design:returntype", Promise)
+  _ts_metadata6("design:returntype", Promise)
 ], QuotaController.prototype, "today", null);
-QuotaController = _ts_decorate5([
-  Controller3("quota"),
-  _ts_param5(1, Inject5(AGENT_ACTOR_RESOLVER2)),
-  _ts_metadata5("design:type", Function),
-  _ts_metadata5("design:paramtypes", [
+QuotaController = _ts_decorate6([
+  Controller4("quota"),
+  _ts_param6(1, Inject6(AGENT_ACTOR_RESOLVER3)),
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], QuotaController);
 
 // src/controller/threads.controller.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER3 } from "@dudousxd/nestjs-agent-core";
-import { Body as Body2, Controller as Controller4, Delete, Get as Get4, Inject as Inject6, Param as Param2, Patch, Post as Post2, Req as Req3 } from "@nestjs/common";
-function _ts_decorate6(decorators, target, key, desc) {
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER4 } from "@dudousxd/nestjs-agent-core";
+import { Body as Body2, Controller as Controller5, Delete, Get as Get4, Inject as Inject7, Param as Param2, Patch, Post as Post3, Req as Req4 } from "@nestjs/common";
+function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate6, "_ts_decorate");
-function _ts_metadata6(k, v) {
+__name(_ts_decorate7, "_ts_decorate");
+function _ts_metadata7(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata6, "_ts_metadata");
-function _ts_param6(paramIndex, decorator) {
+__name(_ts_metadata7, "_ts_metadata");
+function _ts_param7(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param6, "_ts_param");
+__name(_ts_param7, "_ts_param");
 var ThreadsController = class {
   static {
     __name(this, "ThreadsController");
@@ -697,9 +897,21 @@ var ThreadsController = class {
     const actor = await this.actorResolver.resolve(req);
     return this.agent.forkThread(actor, id, messageId);
   }
-  async rename(req, id, body) {
+  /**
+  * Renames the thread and/or sets its default agent. `defaultAgent` is only present in the request
+  * body when the client actually sent the key (JSON has no `undefined`), so `'defaultAgent' in body`
+  * distinguishes "leave it alone" from "set it to null" (clear it) unambiguously.
+  */
+  async update(req, id, body) {
     const actor = await this.actorResolver.resolve(req);
-    await this.agent.renameThread(actor, id, body.title);
+    await this.agent.updateThread(actor, id, {
+      ...body.title !== void 0 ? {
+        title: body.title
+      } : {},
+      ..."defaultAgent" in body ? {
+        defaultAgent: body.defaultAgent ?? null
+      } : {}
+    });
     return {
       ok: true
     };
@@ -719,117 +931,117 @@ var ThreadsController = class {
     };
   }
 };
-_ts_decorate6([
+_ts_decorate7([
   Get4(),
-  _ts_param6(0, Req3()),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+  _ts_param7(0, Req4()),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request
   ]),
-  _ts_metadata6("design:returntype", Promise)
+  _ts_metadata7("design:returntype", Promise)
 ], ThreadsController.prototype, "list", null);
-_ts_decorate6([
+_ts_decorate7([
   Get4(":id"),
-  _ts_param6(0, Req3()),
-  _ts_param6(1, Param2("id")),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+  _ts_param7(0, Req4()),
+  _ts_param7(1, Param2("id")),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata6("design:returntype", Promise)
+  _ts_metadata7("design:returntype", Promise)
 ], ThreadsController.prototype, "detail", null);
-_ts_decorate6([
+_ts_decorate7([
   Delete(":id"),
-  _ts_param6(0, Req3()),
-  _ts_param6(1, Param2("id")),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+  _ts_param7(0, Req4()),
+  _ts_param7(1, Param2("id")),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata6("design:returntype", Promise)
+  _ts_metadata7("design:returntype", Promise)
 ], ThreadsController.prototype, "remove", null);
-_ts_decorate6([
-  Post2(":id/fork-from/:messageId"),
-  _ts_param6(0, Req3()),
-  _ts_param6(1, Param2("id")),
-  _ts_param6(2, Param2("messageId")),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+_ts_decorate7([
+  Post3(":id/fork-from/:messageId"),
+  _ts_param7(0, Req4()),
+  _ts_param7(1, Param2("id")),
+  _ts_param7(2, Param2("messageId")),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     String
   ]),
-  _ts_metadata6("design:returntype", Promise)
+  _ts_metadata7("design:returntype", Promise)
 ], ThreadsController.prototype, "fork", null);
-_ts_decorate6([
+_ts_decorate7([
   Patch(":id"),
-  _ts_param6(0, Req3()),
-  _ts_param6(1, Param2("id")),
-  _ts_param6(2, Body2()),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+  _ts_param7(0, Req4()),
+  _ts_param7(1, Param2("id")),
+  _ts_param7(2, Body2()),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
-    typeof RenameThreadBody === "undefined" ? Object : RenameThreadBody
+    typeof UpdateThreadBody === "undefined" ? Object : UpdateThreadBody
   ]),
-  _ts_metadata6("design:returntype", Promise)
-], ThreadsController.prototype, "rename", null);
-_ts_decorate6([
-  Post2(":id/promote"),
-  _ts_param6(0, Req3()),
-  _ts_param6(1, Param2("id")),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+  _ts_metadata7("design:returntype", Promise)
+], ThreadsController.prototype, "update", null);
+_ts_decorate7([
+  Post3(":id/promote"),
+  _ts_param7(0, Req4()),
+  _ts_param7(1, Param2("id")),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata6("design:returntype", Promise)
+  _ts_metadata7("design:returntype", Promise)
 ], ThreadsController.prototype, "promote", null);
-_ts_decorate6([
+_ts_decorate7([
   Delete(":id/from/:messageId"),
-  _ts_param6(0, Req3()),
-  _ts_param6(1, Param2("id")),
-  _ts_param6(2, Param2("messageId")),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+  _ts_param7(0, Req4()),
+  _ts_param7(1, Param2("id")),
+  _ts_param7(2, Param2("messageId")),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     String
   ]),
-  _ts_metadata6("design:returntype", Promise)
+  _ts_metadata7("design:returntype", Promise)
 ], ThreadsController.prototype, "truncateFrom", null);
-ThreadsController = _ts_decorate6([
-  Controller4("threads"),
-  _ts_param6(1, Inject6(AGENT_ACTOR_RESOLVER3)),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+ThreadsController = _ts_decorate7([
+  Controller5("threads"),
+  _ts_param7(1, Inject7(AGENT_ACTOR_RESOLVER4)),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], ThreadsController);
 
 // src/controller/tool-call.controller.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER4 } from "@dudousxd/nestjs-agent-core";
-import { Body as Body3, Controller as Controller5, Inject as Inject7, Post as Post3, Req as Req4 } from "@nestjs/common";
-function _ts_decorate7(decorators, target, key, desc) {
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER5 } from "@dudousxd/nestjs-agent-core";
+import { Body as Body3, Controller as Controller6, Inject as Inject8, Post as Post4, Req as Req5 } from "@nestjs/common";
+function _ts_decorate8(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate7, "_ts_decorate");
-function _ts_metadata7(k, v) {
+__name(_ts_decorate8, "_ts_decorate");
+function _ts_metadata8(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata7, "_ts_metadata");
-function _ts_param7(paramIndex, decorator) {
+__name(_ts_metadata8, "_ts_metadata");
+function _ts_param8(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param7, "_ts_param");
+__name(_ts_param8, "_ts_param");
 var ToolCallController = class {
   static {
     __name(this, "ToolCallController");
@@ -855,33 +1067,33 @@ var ToolCallController = class {
     };
   }
 };
-_ts_decorate7([
-  Post3("approve"),
-  _ts_param7(0, Req4()),
-  _ts_param7(1, Body3()),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+_ts_decorate8([
+  Post4("approve"),
+  _ts_param8(0, Req5()),
+  _ts_param8(1, Body3()),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof ApproveBody === "undefined" ? Object : ApproveBody
   ]),
-  _ts_metadata7("design:returntype", Promise)
+  _ts_metadata8("design:returntype", Promise)
 ], ToolCallController.prototype, "approve", null);
-_ts_decorate7([
-  Post3("reject"),
-  _ts_param7(0, Req4()),
-  _ts_param7(1, Body3()),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+_ts_decorate8([
+  Post4("reject"),
+  _ts_param8(0, Req5()),
+  _ts_param8(1, Body3()),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof RejectBody === "undefined" ? Object : RejectBody
   ]),
-  _ts_metadata7("design:returntype", Promise)
+  _ts_metadata8("design:returntype", Promise)
 ], ToolCallController.prototype, "reject", null);
-ToolCallController = _ts_decorate7([
-  Controller5("tool-call"),
-  _ts_param7(1, Inject7(AGENT_ACTOR_RESOLVER4)),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+ToolCallController = _ts_decorate8([
+  Controller6("tool-call"),
+  _ts_param8(1, Inject8(AGENT_ACTOR_RESOLVER5)),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
@@ -889,7 +1101,7 @@ ToolCallController = _ts_decorate7([
 
 // src/discovery/agent-discovery.service.ts
 import { AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS2, AGENT_REGISTRY as AGENT_REGISTRY3, AgentRegistry as AgentRegistry4 } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject8, Injectable as Injectable3, Logger } from "@nestjs/common";
+import { Inject as Inject9, Injectable as Injectable3, Logger } from "@nestjs/common";
 import { DiscoveryService, MetadataScanner } from "@nestjs/core";
 
 // src/decorator/agent.decorator.ts
@@ -924,23 +1136,23 @@ function SystemPromptContributor() {
 __name(SystemPromptContributor, "SystemPromptContributor");
 
 // src/discovery/agent-discovery.service.ts
-function _ts_decorate8(decorators, target, key, desc) {
+function _ts_decorate9(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate8, "_ts_decorate");
-function _ts_metadata8(k, v) {
+__name(_ts_decorate9, "_ts_decorate");
+function _ts_metadata9(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata8, "_ts_metadata");
-function _ts_param8(paramIndex, decorator) {
+__name(_ts_metadata9, "_ts_metadata");
+function _ts_param9(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param8, "_ts_param");
+__name(_ts_param9, "_ts_param");
 var AgentDiscoveryService = class _AgentDiscoveryService {
   static {
     __name(this, "AgentDiscoveryService");
@@ -1037,12 +1249,12 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
     return (ctx) => candidate.call(instance, ctx);
   }
 };
-AgentDiscoveryService = _ts_decorate8([
+AgentDiscoveryService = _ts_decorate9([
   Injectable3(),
-  _ts_param8(2, Inject8(AGENT_REGISTRY3)),
-  _ts_param8(3, Inject8(AGENT_PROMPT_CONTRIBUTORS2)),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+  _ts_param9(2, Inject9(AGENT_REGISTRY3)),
+  _ts_param9(3, Inject9(AGENT_PROMPT_CONTRIBUTORS2)),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof DiscoveryService === "undefined" ? Object : DiscoveryService,
     typeof MetadataScanner === "undefined" ? Object : MetadataScanner,
     typeof AgentRegistry4 === "undefined" ? Object : AgentRegistry4,
@@ -1051,8 +1263,8 @@ AgentDiscoveryService = _ts_decorate8([
 ], AgentDiscoveryService);
 
 // src/discovery/ai-tool-discovery.service.ts
-import { AGENT_OPTIONS as AGENT_OPTIONS2, AGENT_REGISTRY as AGENT_REGISTRY4, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY2 } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject9, Injectable as Injectable4, Logger as Logger2 } from "@nestjs/common";
+import { AGENT_OPTIONS as AGENT_OPTIONS3, AGENT_REGISTRY as AGENT_REGISTRY4, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY2 } from "@dudousxd/nestjs-agent-core";
+import { Inject as Inject10, Injectable as Injectable4, Logger as Logger2 } from "@nestjs/common";
 import { DiscoveryService as DiscoveryService2 } from "@nestjs/core";
 import { z } from "zod";
 
@@ -1101,23 +1313,23 @@ function provideAgentTool(factoryOrTool, inject) {
 __name(provideAgentTool, "provideAgentTool");
 
 // src/discovery/ai-tool-discovery.service.ts
-function _ts_decorate9(decorators, target, key, desc) {
+function _ts_decorate10(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate9, "_ts_decorate");
-function _ts_metadata9(k, v) {
+__name(_ts_decorate10, "_ts_decorate");
+function _ts_metadata10(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata9, "_ts_metadata");
-function _ts_param9(paramIndex, decorator) {
+__name(_ts_metadata10, "_ts_metadata");
+function _ts_param10(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param9, "_ts_param");
+__name(_ts_param10, "_ts_param");
 var AiToolDiscoveryService = class _AiToolDiscoveryService {
   static {
     __name(this, "AiToolDiscoveryService");
@@ -1224,13 +1436,13 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
     return true;
   }
 };
-AiToolDiscoveryService = _ts_decorate9([
+AiToolDiscoveryService = _ts_decorate10([
   Injectable4(),
-  _ts_param9(1, Inject9(AGENT_TOOL_REGISTRY2)),
-  _ts_param9(2, Inject9(AGENT_REGISTRY4)),
-  _ts_param9(3, Inject9(AGENT_OPTIONS2)),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+  _ts_param10(1, Inject10(AGENT_TOOL_REGISTRY2)),
+  _ts_param10(2, Inject10(AGENT_REGISTRY4)),
+  _ts_param10(3, Inject10(AGENT_OPTIONS3)),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof DiscoveryService2 === "undefined" ? Object : DiscoveryService2,
     typeof ToolRegistry === "undefined" ? Object : ToolRegistry,
     typeof AgentRegistry === "undefined" ? Object : AgentRegistry,
@@ -1331,24 +1543,24 @@ var LedgerQuotaStore = class {
 
 // src/runner/inline-agent-runner.ts
 import { AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY3, AGENT_STORE as AGENT_STORE3, QuotaExceededError, publishAgentRunFailed, runAgentLoop } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject10, Injectable as Injectable5, Logger as Logger3 } from "@nestjs/common";
-function _ts_decorate10(decorators, target, key, desc) {
+import { Inject as Inject11, Injectable as Injectable5, Logger as Logger3 } from "@nestjs/common";
+function _ts_decorate11(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate10, "_ts_decorate");
-function _ts_metadata10(k, v) {
+__name(_ts_decorate11, "_ts_decorate");
+function _ts_metadata11(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata10, "_ts_metadata");
-function _ts_param10(paramIndex, decorator) {
+__name(_ts_metadata11, "_ts_metadata");
+function _ts_param11(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param10, "_ts_param");
+__name(_ts_param11, "_ts_param");
 var InlineAgentRunner = class _InlineAgentRunner {
   static {
     __name(this, "InlineAgentRunner");
@@ -1369,7 +1581,7 @@ var InlineAgentRunner = class _InlineAgentRunner {
     void runAgentLoop({
       ...deps,
       day
-    }, input, hooks).catch(async (error) => {
+    }, input, hooks).then(() => this.store.setActiveStream(input.threadId, null)).catch(async (error) => {
       const message = error instanceof Error ? error.message : String(error);
       const code = error instanceof QuotaExceededError ? "quota_exceeded" : "run_failed";
       this.logger.error(`agent run ${runId} failed (${code}): ${message}`);
@@ -1378,6 +1590,7 @@ var InlineAgentRunner = class _InlineAgentRunner {
         code,
         message
       });
+      await this.store.setActiveStream(input.threadId, null);
       const writer = await deps.sink.open(runId);
       await writer.fail({
         code,
@@ -1435,39 +1648,43 @@ var InlineAgentRunner = class _InlineAgentRunner {
       step: /* @__PURE__ */ __name((_name, fn) => fn(), "step"),
       runAgent: /* @__PURE__ */ __name((childName, childTask) => this.runNested(childName, childTask, actor, day, depth + 1, sinkRunId), "runAgent")
     };
-    return runAgentLoop({
-      ...deps,
-      day
-    }, {
-      threadId: subThread.id,
-      actor,
-      userText: task,
-      agentName,
-      day,
-      delegationDepth: depth,
-      sinkRunId
-    }, hooks);
+    try {
+      return await runAgentLoop({
+        ...deps,
+        day
+      }, {
+        threadId: subThread.id,
+        actor,
+        userText: task,
+        agentName,
+        day,
+        delegationDepth: depth,
+        sinkRunId
+      }, hooks);
+    } finally {
+      await this.store.setActiveStream(subThread.id, null);
+    }
   }
 };
-InlineAgentRunner = _ts_decorate10([
+InlineAgentRunner = _ts_decorate11([
   Injectable5(),
-  _ts_param10(0, Inject10(AGENT_DEPS_FACTORY3)),
-  _ts_param10(1, Inject10(AGENT_STORE3)),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
+  _ts_param11(0, Inject11(AGENT_DEPS_FACTORY3)),
+  _ts_param11(1, Inject11(AGENT_STORE3)),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
     typeof AgentStore === "undefined" ? Object : AgentStore
   ])
 ], InlineAgentRunner);
 
 // src/agent.module.ts
-function _ts_decorate11(decorators, target, key, desc) {
+function _ts_decorate12(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate11, "_ts_decorate");
+__name(_ts_decorate12, "_ts_decorate");
 var DEFAULT_PATH = "agent";
 function sharedProviders(durable, includeStore) {
   const providers = [
@@ -1489,28 +1706,28 @@ function sharedProviders(durable, includeStore) {
       provide: AGENT_SINK2,
       useFactory: /* @__PURE__ */ __name((options) => options.sink ?? new InProcessTokenStreamSink(), "useFactory"),
       inject: [
-        AGENT_OPTIONS3
+        AGENT_OPTIONS4
       ]
     },
     {
       provide: AGENT_ROLES_POLICY2,
       useFactory: /* @__PURE__ */ __name((options) => options.rolesPolicy ?? new DefaultRolesPolicy(options.defaultRoles), "useFactory"),
       inject: [
-        AGENT_OPTIONS3
+        AGENT_OPTIONS4
       ]
     },
     {
-      provide: AGENT_ACTOR_RESOLVER5,
+      provide: AGENT_ACTOR_RESOLVER6,
       useFactory: /* @__PURE__ */ __name((options) => options.actorResolver, "useFactory"),
       inject: [
-        AGENT_OPTIONS3
+        AGENT_OPTIONS4
       ]
     },
     {
       provide: AGENT_MODEL2,
       useFactory: /* @__PURE__ */ __name((o) => o.model, "useFactory"),
       inject: [
-        AGENT_OPTIONS3
+        AGENT_OPTIONS4
       ]
     },
     {
@@ -1520,7 +1737,7 @@ function sharedProviders(durable, includeStore) {
       provide: AGENT_QUOTA_STORE3,
       useFactory: /* @__PURE__ */ __name((o, store) => o.quota ?? (o.quotaLimitTokens !== void 0 ? new LedgerQuotaStore(store, o.quotaLimitTokens) : void 0), "useFactory"),
       inject: [
-        AGENT_OPTIONS3,
+        AGENT_OPTIONS4,
         AGENT_STORE4
       ]
     },
@@ -1541,7 +1758,7 @@ function sharedProviders(durable, includeStore) {
       provide: AGENT_STORE4,
       useFactory: /* @__PURE__ */ __name((o) => o.store, "useFactory"),
       inject: [
-        AGENT_OPTIONS3
+        AGENT_OPTIONS4
       ]
     });
   }
@@ -1572,12 +1789,12 @@ function sharedProviders(durable, includeStore) {
 __name(sharedProviders, "sharedProviders");
 function exportsFor(includeStore) {
   return [
-    AGENT_OPTIONS3,
+    AGENT_OPTIONS4,
     AGENT_TOOL_REGISTRY3,
     AGENT_REGISTRY5,
     AGENT_SINK2,
     AGENT_ROLES_POLICY2,
-    AGENT_ACTOR_RESOLVER5,
+    AGENT_ACTOR_RESOLVER6,
     AGENT_MODEL2,
     ...includeStore ? [
       AGENT_STORE4
@@ -1591,13 +1808,38 @@ function exportsFor(includeStore) {
   ];
 }
 __name(exportsFor, "exportsFor");
-var CONTROLLERS = [
+var BASE_CONTROLLERS = [
   ChatController,
   ThreadsController,
   ToolCallController,
   QuotaController,
   AgentsController
 ];
+var GUARDABLE_CONTROLLERS = [
+  ...BASE_CONTROLLERS,
+  AttachmentsController
+];
+function controllersFor(mountAttachments) {
+  return mountAttachments ? [
+    ...BASE_CONTROLLERS,
+    AttachmentsController
+  ] : BASE_CONTROLLERS;
+}
+__name(controllersFor, "controllersFor");
+var GUARDS_METADATA = "__guards__";
+function applyGuards(guards) {
+  const resolved = guards ?? [];
+  for (const controller of GUARDABLE_CONTROLLERS) {
+    Reflect.defineMetadata(GUARDS_METADATA, resolved, controller);
+  }
+}
+__name(applyGuards, "applyGuards");
+function guardProviders(guards) {
+  return [
+    ...new Set(guards ?? [])
+  ];
+}
+__name(guardProviders, "guardProviders");
 function routerFor(path) {
   return RouterModule.register([
     {
@@ -1614,6 +1856,7 @@ var AgentModule = class _AgentModule {
   static forRoot(options) {
     const path = options.path ?? DEFAULT_PATH;
     const includeStore = options.store !== void 0;
+    applyGuards(options.guards);
     return {
       module: _AgentModule,
       global: true,
@@ -1621,19 +1864,22 @@ var AgentModule = class _AgentModule {
         DiscoveryModule,
         routerFor(path)
       ],
-      controllers: CONTROLLERS,
+      controllers: controllersFor(options.attachments?.upload === true),
       providers: [
         {
-          provide: AGENT_OPTIONS3,
+          provide: AGENT_OPTIONS4,
           useValue: options
         },
-        ...sharedProviders(options.durable ?? false, includeStore)
+        ...sharedProviders(options.durable ?? false, includeStore),
+        ...guardProviders(options.guards)
       ],
       exports: exportsFor(includeStore)
     };
   }
   static forRootAsync(options) {
     const path = options.path ?? DEFAULT_PATH;
+    const includeStore = options.externalStore !== true;
+    applyGuards(options.guards);
     return {
       module: _AgentModule,
       global: true,
@@ -1642,22 +1888,21 @@ var AgentModule = class _AgentModule {
         routerFor(path),
         ...options.imports ?? []
       ],
-      controllers: CONTROLLERS,
+      controllers: controllersFor(options.attachmentsUpload === true),
       providers: [
         {
-          provide: AGENT_OPTIONS3,
+          provide: AGENT_OPTIONS4,
           useFactory: options.useFactory,
           inject: options.inject ?? []
         },
-        // The async factory resolves too late to inspect `store`, so we always bind AGENT_STORE here
-        // (its factory reads the resolved options). Omit-and-import-a-store-module is a `forRoot` path.
-        ...sharedProviders(options.durable ?? false, true)
+        ...sharedProviders(options.durable ?? false, includeStore),
+        ...guardProviders(options.guards)
       ],
-      exports: exportsFor(true)
+      exports: exportsFor(includeStore)
     };
   }
 };
-AgentModule = _ts_decorate11([
+AgentModule = _ts_decorate12([
   Global(),
   Module({})
 ], AgentModule);
@@ -1705,6 +1950,9 @@ export {
   AgentService,
   AiTool,
   AiToolDiscoveryService,
+  AttachmentsController,
+  DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES,
+  DEFAULT_MAX_ATTACHMENT_BYTES,
   HeaderActorResolver,
   InProcessTokenStreamSink,
   InlineAgentRunner,