@dudousxd/nestjs-agent 0.3.3 → 0.4.0

package/dist/durable/index.cjs

@@ -111,10 +111,12 @@ var AgentRunWorkflow = class _AgentRunWorkflow {
       }, "runAgent")
     };
     try {
-      return await (0, import_nestjs_agent_core.runAgentLoop)({
+      const result = await (0, import_nestjs_agent_core.runAgentLoop)({
         ...deps,
         day
       }, input, hooks);
+      await ctx.step("deactivate", () => this.store.setActiveStream(input.threadId, null));
+      return result;
     } catch (error) {
       if (error instanceof import_nestjs_durable_core.WorkflowSuspended || error instanceof import_nestjs_durable_core.ContinueAsNew) {
         throw error;
@@ -126,6 +128,7 @@ var AgentRunWorkflow = class _AgentRunWorkflow {
         code,
         message
       });
+      await ctx.step("deactivate", () => this.store.setActiveStream(input.threadId, null));
       const writer = await hooks.openSink();
       await writer.fail({
         code,
@@ -251,8 +254,8 @@ AgentDurableModule = _ts_decorate3([
 ], AgentDurableModule);
 
 // src/agent.module.ts
-var import_nestjs_agent_core15 = require("@dudousxd/nestjs-agent-core");
-var import_common14 = require("@nestjs/common");
+var import_nestjs_agent_core16 = require("@dudousxd/nestjs-agent-core");
+var import_common15 = require("@nestjs/common");
 var import_core3 = require("@nestjs/core");
 
 // src/agent-deps.factory.ts
@@ -293,7 +296,8 @@ var AgentDepsFactory2 = class {
   agents;
   promptContributors;
   quota;
-  constructor(options, model, store, sink, rolesPolicy, registry, agents, promptContributors, quota) {
+  pricingStore;
+  constructor(options, model, store, sink, rolesPolicy, registry, agents, promptContributors, quota, pricingStore) {
     this.options = options;
     this.model = model;
     this.store = store;
@@ -303,6 +307,7 @@ var AgentDepsFactory2 = class {
     this.agents = agents;
     this.promptContributors = promptContributors;
     this.quota = quota;
+    this.pricingStore = pricingStore;
   }
   /**
   * The agent a turn uses when the caller names none: the explicit `defaultAgent` option, else the
@@ -349,6 +354,9 @@ var AgentDepsFactory2 = class {
       ...this.quota !== void 0 ? {
         quota: this.quota
       } : {},
+      ...this.pricingStore !== void 0 ? {
+        pricingStore: this.pricingStore
+      } : {},
       ...toolAllowList !== void 0 ? {
         toolAllowList
       } : {},
@@ -389,6 +397,8 @@ AgentDepsFactory2 = _ts_decorate4([
   _ts_param2(6, (0, import_common4.Inject)(import_nestjs_agent_core3.AGENT_REGISTRY)),
   _ts_param2(7, (0, import_common4.Inject)(import_nestjs_agent_core3.AGENT_PROMPT_CONTRIBUTORS)),
   _ts_param2(8, (0, import_common4.Inject)(import_nestjs_agent_core3.AGENT_QUOTA_STORE)),
+  _ts_param2(9, (0, import_common4.Optional)()),
+  _ts_param2(9, (0, import_common4.Inject)(import_nestjs_agent_core3.AGENT_PRICING_STORE)),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
     typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
@@ -399,6 +409,7 @@ AgentDepsFactory2 = _ts_decorate4([
     typeof import_nestjs_agent_core3.ToolRegistry === "undefined" ? Object : import_nestjs_agent_core3.ToolRegistry,
     typeof import_nestjs_agent_core3.AgentRegistry === "undefined" ? Object : import_nestjs_agent_core3.AgentRegistry,
     Array,
+    Object,
     Object
   ])
 ], AgentDepsFactory2);
@@ -438,7 +449,7 @@ var AgentService = class {
     this.quota = quota;
   }
   async chat(params) {
-    const agentName = params.agentName ?? this.deps.defaultAgentName();
+    const agentName = await this.resolveAgentName(params.agentName, params.threadId);
     let threadId = params.threadId;
     if (threadId === void 0) {
       if (params.regenerate === true) {
@@ -499,12 +510,14 @@ var AgentService = class {
     await this.assertOwnsActiveStream(actor, runId);
     return this.runner.cancel(runId);
   }
-  listThreads(actorRef) {
-    return this.store.listThreads(actorRef);
+  async listThreads(actorRef) {
+    const threads = await this.store.listThreads(actorRef);
+    return Promise.all(threads.map((thread) => this.toSummaryView(thread)));
   }
   async getThread(actor, threadId) {
     await this.assertOwnsThread(actor, threadId);
-    return this.store.getThread(threadId);
+    const thread = await this.store.getThread(threadId);
+    return thread === null ? null : this.toDetailView(thread);
   }
   async deleteThread(actor, threadId) {
     await this.assertOwnsThread(actor, threadId);
@@ -514,7 +527,38 @@ var AgentService = class {
     await this.assertOwnsThread(actor, threadId);
     return this.store.forkThread(threadId, fromMessageId);
   }
+  /** Kept for source compatibility — a thin wrapper over the more general `updateThread`. */
   async renameThread(actor, threadId, title) {
+    return this.updateThread(actor, threadId, {
+      title
+    });
+  }
+  /**
+  * Rename a thread and/or set its default agent. Title-only patches work against ANY store (via
+  * the required `setTitle`); a `defaultAgent` change requires the bound store to implement the
+  * optional `updateThread` — 501 with a clear message when it doesn't, rather than silently
+  * dropping the field.
+  */
+  async updateThread(actor, threadId, patch) {
+    const title = patch.title !== void 0 ? this.validateTitle(patch.title) : void 0;
+    await this.assertOwnsThread(actor, threadId);
+    if (patch.defaultAgent === void 0) {
+      if (title !== void 0) {
+        await this.store.setTitle(threadId, title);
+      }
+      return;
+    }
+    if (this.store.updateThread === void 0) {
+      throw new import_common5.NotImplementedException("Setting a thread's defaultAgent requires an AgentStore that implements updateThread(); the bound store does not support it.");
+    }
+    await this.store.updateThread(threadId, {
+      ...title !== void 0 ? {
+        title
+      } : {},
+      defaultAgent: patch.defaultAgent
+    });
+  }
+  validateTitle(title) {
     const trimmed = title.trim();
     if (trimmed.length === 0) {
       throw new import_common5.BadRequestException("title must not be empty");
@@ -522,8 +566,41 @@ var AgentService = class {
     if (trimmed.length > 200) {
       throw new import_common5.BadRequestException("title must be at most 200 characters");
     }
-    await this.assertOwnsThread(actor, threadId);
-    return this.store.setTitle(threadId, trimmed);
+    return trimmed;
+  }
+  /**
+  * Agent-selection precedence for a `chat()` call with no explicit `agentName`: the thread's own
+  * `defaultAgent` (if the thread exists and one is set) wins over the module's configured default.
+  * Skips the thread lookup entirely when the caller already named an agent or there's no thread yet.
+  */
+  async resolveAgentName(agentName, threadId) {
+    if (agentName !== void 0) {
+      return agentName;
+    }
+    if (threadId !== void 0) {
+      const thread = await this.store.getThread(threadId);
+      if (thread?.defaultAgent !== void 0 && thread.defaultAgent !== null) {
+        return thread.defaultAgent;
+      }
+    }
+    return this.deps.defaultAgentName();
+  }
+  async toSummaryView(thread) {
+    return {
+      ...thread,
+      defaultAgent: thread.defaultAgent ?? null,
+      activeRunId: await this.store.activeRunForThread?.(thread.id) ?? null
+    };
+  }
+  async toDetailView(thread) {
+    const summary = await this.toSummaryView(thread);
+    return {
+      ...summary,
+      messages: thread.messages,
+      ...thread.activeStreamId !== void 0 ? {
+        activeStreamId: thread.activeStreamId
+      } : {}
+    };
   }
   async promoteThread(actor, threadId) {
     await this.assertOwnsThread(actor, threadId);
@@ -679,9 +756,10 @@ AgentsController = _ts_decorate6([
   ])
 ], AgentsController);
 
-// src/controller/chat.controller.ts
+// src/controller/attachments.controller.ts
 var import_nestjs_agent_core7 = require("@dudousxd/nestjs-agent-core");
 var import_common7 = require("@nestjs/common");
+var import_platform_express = require("@nestjs/platform-express");
 function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -699,6 +777,110 @@ function _ts_param5(paramIndex, decorator) {
   };
 }
 __name(_ts_param5, "_ts_param");
+var DEFAULT_MAX_ATTACHMENT_BYTES = 20 * 1024 * 1024;
+var DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES = [
+  "image/png",
+  "image/jpeg",
+  "image/gif",
+  "image/webp",
+  "application/pdf",
+  "text/plain",
+  "text/csv"
+];
+var AttachmentsController = class {
+  static {
+    __name(this, "AttachmentsController");
+  }
+  options;
+  actorResolver;
+  staging;
+  constructor(options, actorResolver, staging) {
+    this.options = options;
+    this.actorResolver = actorResolver;
+    this.staging = staging;
+  }
+  /**
+  * `attachments.upload: true` is what mounts this controller at all (see `agent.module.ts`), so by
+  * the time an instance exists the host clearly intends uploads to work. Fail boot loudly rather
+  * than mounting a controller that would 501 on every single request because nobody bound
+  * `AGENT_ATTACHMENT_STAGING`.
+  */
+  onModuleInit() {
+    if (this.options.attachments?.upload === true && this.staging === void 0) {
+      throw new Error("AgentModule: attachments.upload is true but no AGENT_ATTACHMENT_STAGING provider is bound. Bind one (e.g. `{ provide: AGENT_ATTACHMENT_STAGING, useClass: MyStagingStore }`) in a module imported alongside AgentModule, or set attachments.upload to false.");
+    }
+  }
+  async upload(req, file) {
+    if (this.staging === void 0) {
+      throw new import_common7.NotImplementedException("Attachment upload is not configured on this server.");
+    }
+    if (file === void 0) {
+      throw new import_common7.BadRequestException('multipart field "file" is required');
+    }
+    const allowedContentTypes = this.options.attachments?.allowedContentTypes ?? DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES;
+    if (!allowedContentTypes.includes(file.mimetype)) {
+      throw new import_common7.UnsupportedMediaTypeException(`content type "${file.mimetype}" is not allowed (allowed: ${allowedContentTypes.join(", ")})`);
+    }
+    const maxBytes = this.options.attachments?.maxBytes ?? DEFAULT_MAX_ATTACHMENT_BYTES;
+    if (file.size > maxBytes) {
+      throw new import_common7.PayloadTooLargeException(`file exceeds the ${maxBytes}-byte limit`);
+    }
+    const actor = await this.actorResolver.resolve(req);
+    return this.staging.stage({
+      data: file.buffer,
+      filename: file.originalname,
+      contentType: file.mimetype,
+      sizeBytes: file.size,
+      actor
+    });
+  }
+};
+_ts_decorate7([
+  (0, import_common7.Post)(),
+  (0, import_common7.UseInterceptors)((0, import_platform_express.FileInterceptor)("file")),
+  _ts_param5(0, (0, import_common7.Req)()),
+  _ts_param5(1, (0, import_common7.UploadedFile)()),
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
+    Object
+  ]),
+  _ts_metadata6("design:returntype", Promise)
+], AttachmentsController.prototype, "upload", null);
+AttachmentsController = _ts_decorate7([
+  (0, import_common7.Controller)("attachments"),
+  _ts_param5(0, (0, import_common7.Inject)(import_nestjs_agent_core7.AGENT_OPTIONS)),
+  _ts_param5(1, (0, import_common7.Inject)(import_nestjs_agent_core7.AGENT_ACTOR_RESOLVER)),
+  _ts_param5(2, (0, import_common7.Optional)()),
+  _ts_param5(2, (0, import_common7.Inject)(import_nestjs_agent_core7.AGENT_ATTACHMENT_STAGING)),
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
+    typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
+    typeof ActorResolver === "undefined" ? Object : ActorResolver,
+    Object
+  ])
+], AttachmentsController);
+
+// src/controller/chat.controller.ts
+var import_nestjs_agent_core8 = require("@dudousxd/nestjs-agent-core");
+var import_common8 = require("@nestjs/common");
+function _ts_decorate8(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate8, "_ts_decorate");
+function _ts_metadata7(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata7, "_ts_metadata");
+function _ts_param6(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param6, "_ts_param");
 var ChatController = class {
   static {
     __name(this, "ChatController");
@@ -786,7 +968,7 @@ data: ${JSON.stringify({
       }
       res.write("event: done\ndata: {}\n\n");
     } catch (error) {
-      const payload = error instanceof import_nestjs_agent_core7.AgentStreamError ? {
+      const payload = error instanceof import_nestjs_agent_core8.AgentStreamError ? {
         code: error.code,
         message: error.message
       } : {
@@ -801,71 +983,71 @@ data: ${JSON.stringify(payload)}
     res.end();
   }
 };
-_ts_decorate7([
-  (0, import_common7.Post)("chat"),
-  _ts_param5(0, (0, import_common7.Req)()),
-  _ts_param5(1, (0, import_common7.Res)()),
-  _ts_param5(2, (0, import_common7.Body)()),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+_ts_decorate8([
+  (0, import_common8.Post)("chat"),
+  _ts_param6(0, (0, import_common8.Req)()),
+  _ts_param6(1, (0, import_common8.Res)()),
+  _ts_param6(2, (0, import_common8.Body)()),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof Response === "undefined" ? Object : Response,
     typeof ChatBody === "undefined" ? Object : ChatBody
   ]),
-  _ts_metadata6("design:returntype", Promise)
+  _ts_metadata7("design:returntype", Promise)
 ], ChatController.prototype, "chat", null);
-_ts_decorate7([
-  (0, import_common7.Get)("chat/:runId/stream"),
-  _ts_param5(0, (0, import_common7.Param)("runId")),
-  _ts_param5(1, (0, import_common7.Res)()),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+_ts_decorate8([
+  (0, import_common8.Get)("chat/:runId/stream"),
+  _ts_param6(0, (0, import_common8.Param)("runId")),
+  _ts_param6(1, (0, import_common8.Res)()),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     String,
     typeof Response === "undefined" ? Object : Response
   ]),
-  _ts_metadata6("design:returntype", Promise)
+  _ts_metadata7("design:returntype", Promise)
 ], ChatController.prototype, "stream", null);
-_ts_decorate7([
-  (0, import_common7.Post)("chat/:runId/cancel"),
-  _ts_param5(0, (0, import_common7.Req)()),
-  _ts_param5(1, (0, import_common7.Param)("runId")),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+_ts_decorate8([
+  (0, import_common8.Post)("chat/:runId/cancel"),
+  _ts_param6(0, (0, import_common8.Req)()),
+  _ts_param6(1, (0, import_common8.Param)("runId")),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata6("design:returntype", Promise)
+  _ts_metadata7("design:returntype", Promise)
 ], ChatController.prototype, "cancel", null);
-ChatController = _ts_decorate7([
-  (0, import_common7.Controller)(),
-  _ts_param5(1, (0, import_common7.Inject)(import_nestjs_agent_core7.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+ChatController = _ts_decorate8([
+  (0, import_common8.Controller)(),
+  _ts_param6(1, (0, import_common8.Inject)(import_nestjs_agent_core8.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], ChatController);
 
 // src/controller/quota.controller.ts
-var import_nestjs_agent_core8 = require("@dudousxd/nestjs-agent-core");
-var import_common8 = require("@nestjs/common");
-function _ts_decorate8(decorators, target, key, desc) {
+var import_nestjs_agent_core9 = require("@dudousxd/nestjs-agent-core");
+var import_common9 = require("@nestjs/common");
+function _ts_decorate9(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate8, "_ts_decorate");
-function _ts_metadata7(k, v) {
+__name(_ts_decorate9, "_ts_decorate");
+function _ts_metadata8(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata7, "_ts_metadata");
-function _ts_param6(paramIndex, decorator) {
+__name(_ts_metadata8, "_ts_metadata");
+function _ts_param7(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param6, "_ts_param");
+__name(_ts_param7, "_ts_param");
 var QuotaController = class {
   static {
     __name(this, "QuotaController");
@@ -881,45 +1063,45 @@ var QuotaController = class {
     return this.agent.quotaToday(actor.id);
   }
 };
-_ts_decorate8([
-  (0, import_common8.Get)("today"),
-  _ts_param6(0, (0, import_common8.Req)()),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+_ts_decorate9([
+  (0, import_common9.Get)("today"),
+  _ts_param7(0, (0, import_common9.Req)()),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request
   ]),
-  _ts_metadata7("design:returntype", Promise)
+  _ts_metadata8("design:returntype", Promise)
 ], QuotaController.prototype, "today", null);
-QuotaController = _ts_decorate8([
-  (0, import_common8.Controller)("quota"),
-  _ts_param6(1, (0, import_common8.Inject)(import_nestjs_agent_core8.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+QuotaController = _ts_decorate9([
+  (0, import_common9.Controller)("quota"),
+  _ts_param7(1, (0, import_common9.Inject)(import_nestjs_agent_core9.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], QuotaController);
 
 // src/controller/threads.controller.ts
-var import_nestjs_agent_core9 = require("@dudousxd/nestjs-agent-core");
-var import_common9 = require("@nestjs/common");
-function _ts_decorate9(decorators, target, key, desc) {
+var import_nestjs_agent_core10 = require("@dudousxd/nestjs-agent-core");
+var import_common10 = require("@nestjs/common");
+function _ts_decorate10(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate9, "_ts_decorate");
-function _ts_metadata8(k, v) {
+__name(_ts_decorate10, "_ts_decorate");
+function _ts_metadata9(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata8, "_ts_metadata");
-function _ts_param7(paramIndex, decorator) {
+__name(_ts_metadata9, "_ts_metadata");
+function _ts_param8(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param7, "_ts_param");
+__name(_ts_param8, "_ts_param");
 var ThreadsController = class {
   static {
     __name(this, "ThreadsController");
@@ -949,9 +1131,21 @@ var ThreadsController = class {
     const actor = await this.actorResolver.resolve(req);
     return this.agent.forkThread(actor, id, messageId);
   }
-  async rename(req, id, body) {
+  /**
+  * Renames the thread and/or sets its default agent. `defaultAgent` is only present in the request
+  * body when the client actually sent the key (JSON has no `undefined`), so `'defaultAgent' in body`
+  * distinguishes "leave it alone" from "set it to null" (clear it) unambiguously.
+  */
+  async update(req, id, body) {
     const actor = await this.actorResolver.resolve(req);
-    await this.agent.renameThread(actor, id, body.title);
+    await this.agent.updateThread(actor, id, {
+      ...body.title !== void 0 ? {
+        title: body.title
+      } : {},
+      ..."defaultAgent" in body ? {
+        defaultAgent: body.defaultAgent ?? null
+      } : {}
+    });
     return {
       ok: true
     };
@@ -971,117 +1165,117 @@ var ThreadsController = class {
     };
   }
 };
-_ts_decorate9([
-  (0, import_common9.Get)(),
-  _ts_param7(0, (0, import_common9.Req)()),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate10([
+  (0, import_common10.Get)(),
+  _ts_param8(0, (0, import_common10.Req)()),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata9("design:returntype", Promise)
 ], ThreadsController.prototype, "list", null);
-_ts_decorate9([
-  (0, import_common9.Get)(":id"),
-  _ts_param7(0, (0, import_common9.Req)()),
-  _ts_param7(1, (0, import_common9.Param)("id")),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate10([
+  (0, import_common10.Get)(":id"),
+  _ts_param8(0, (0, import_common10.Req)()),
+  _ts_param8(1, (0, import_common10.Param)("id")),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata9("design:returntype", Promise)
 ], ThreadsController.prototype, "detail", null);
-_ts_decorate9([
-  (0, import_common9.Delete)(":id"),
-  _ts_param7(0, (0, import_common9.Req)()),
-  _ts_param7(1, (0, import_common9.Param)("id")),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate10([
+  (0, import_common10.Delete)(":id"),
+  _ts_param8(0, (0, import_common10.Req)()),
+  _ts_param8(1, (0, import_common10.Param)("id")),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata9("design:returntype", Promise)
 ], ThreadsController.prototype, "remove", null);
-_ts_decorate9([
-  (0, import_common9.Post)(":id/fork-from/:messageId"),
-  _ts_param7(0, (0, import_common9.Req)()),
-  _ts_param7(1, (0, import_common9.Param)("id")),
-  _ts_param7(2, (0, import_common9.Param)("messageId")),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate10([
+  (0, import_common10.Post)(":id/fork-from/:messageId"),
+  _ts_param8(0, (0, import_common10.Req)()),
+  _ts_param8(1, (0, import_common10.Param)("id")),
+  _ts_param8(2, (0, import_common10.Param)("messageId")),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     String
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata9("design:returntype", Promise)
 ], ThreadsController.prototype, "fork", null);
-_ts_decorate9([
-  (0, import_common9.Patch)(":id"),
-  _ts_param7(0, (0, import_common9.Req)()),
-  _ts_param7(1, (0, import_common9.Param)("id")),
-  _ts_param7(2, (0, import_common9.Body)()),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate10([
+  (0, import_common10.Patch)(":id"),
+  _ts_param8(0, (0, import_common10.Req)()),
+  _ts_param8(1, (0, import_common10.Param)("id")),
+  _ts_param8(2, (0, import_common10.Body)()),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
-    typeof RenameThreadBody === "undefined" ? Object : RenameThreadBody
+    typeof UpdateThreadBody === "undefined" ? Object : UpdateThreadBody
   ]),
-  _ts_metadata8("design:returntype", Promise)
-], ThreadsController.prototype, "rename", null);
-_ts_decorate9([
-  (0, import_common9.Post)(":id/promote"),
-  _ts_param7(0, (0, import_common9.Req)()),
-  _ts_param7(1, (0, import_common9.Param)("id")),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+  _ts_metadata9("design:returntype", Promise)
+], ThreadsController.prototype, "update", null);
+_ts_decorate10([
+  (0, import_common10.Post)(":id/promote"),
+  _ts_param8(0, (0, import_common10.Req)()),
+  _ts_param8(1, (0, import_common10.Param)("id")),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata9("design:returntype", Promise)
 ], ThreadsController.prototype, "promote", null);
-_ts_decorate9([
-  (0, import_common9.Delete)(":id/from/:messageId"),
-  _ts_param7(0, (0, import_common9.Req)()),
-  _ts_param7(1, (0, import_common9.Param)("id")),
-  _ts_param7(2, (0, import_common9.Param)("messageId")),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate10([
+  (0, import_common10.Delete)(":id/from/:messageId"),
+  _ts_param8(0, (0, import_common10.Req)()),
+  _ts_param8(1, (0, import_common10.Param)("id")),
+  _ts_param8(2, (0, import_common10.Param)("messageId")),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     String
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata9("design:returntype", Promise)
 ], ThreadsController.prototype, "truncateFrom", null);
-ThreadsController = _ts_decorate9([
-  (0, import_common9.Controller)("threads"),
-  _ts_param7(1, (0, import_common9.Inject)(import_nestjs_agent_core9.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+ThreadsController = _ts_decorate10([
+  (0, import_common10.Controller)("threads"),
+  _ts_param8(1, (0, import_common10.Inject)(import_nestjs_agent_core10.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], ThreadsController);
 
 // src/controller/tool-call.controller.ts
-var import_nestjs_agent_core10 = require("@dudousxd/nestjs-agent-core");
-var import_common10 = require("@nestjs/common");
-function _ts_decorate10(decorators, target, key, desc) {
+var import_nestjs_agent_core11 = require("@dudousxd/nestjs-agent-core");
+var import_common11 = require("@nestjs/common");
+function _ts_decorate11(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate10, "_ts_decorate");
-function _ts_metadata9(k, v) {
+__name(_ts_decorate11, "_ts_decorate");
+function _ts_metadata10(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata9, "_ts_metadata");
-function _ts_param8(paramIndex, decorator) {
+__name(_ts_metadata10, "_ts_metadata");
+function _ts_param9(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param8, "_ts_param");
+__name(_ts_param9, "_ts_param");
 var ToolCallController = class {
   static {
     __name(this, "ToolCallController");
@@ -1107,41 +1301,41 @@ var ToolCallController = class {
     };
   }
 };
-_ts_decorate10([
-  (0, import_common10.Post)("approve"),
-  _ts_param8(0, (0, import_common10.Req)()),
-  _ts_param8(1, (0, import_common10.Body)()),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+_ts_decorate11([
+  (0, import_common11.Post)("approve"),
+  _ts_param9(0, (0, import_common11.Req)()),
+  _ts_param9(1, (0, import_common11.Body)()),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof ApproveBody === "undefined" ? Object : ApproveBody
   ]),
-  _ts_metadata9("design:returntype", Promise)
+  _ts_metadata10("design:returntype", Promise)
 ], ToolCallController.prototype, "approve", null);
-_ts_decorate10([
-  (0, import_common10.Post)("reject"),
-  _ts_param8(0, (0, import_common10.Req)()),
-  _ts_param8(1, (0, import_common10.Body)()),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+_ts_decorate11([
+  (0, import_common11.Post)("reject"),
+  _ts_param9(0, (0, import_common11.Req)()),
+  _ts_param9(1, (0, import_common11.Body)()),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof RejectBody === "undefined" ? Object : RejectBody
   ]),
-  _ts_metadata9("design:returntype", Promise)
+  _ts_metadata10("design:returntype", Promise)
 ], ToolCallController.prototype, "reject", null);
-ToolCallController = _ts_decorate10([
-  (0, import_common10.Controller)("tool-call"),
-  _ts_param8(1, (0, import_common10.Inject)(import_nestjs_agent_core10.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+ToolCallController = _ts_decorate11([
+  (0, import_common11.Controller)("tool-call"),
+  _ts_param9(1, (0, import_common11.Inject)(import_nestjs_agent_core11.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], ToolCallController);
 
 // src/discovery/agent-discovery.service.ts
-var import_nestjs_agent_core11 = require("@dudousxd/nestjs-agent-core");
-var import_common11 = require("@nestjs/common");
+var import_nestjs_agent_core12 = require("@dudousxd/nestjs-agent-core");
+var import_common12 = require("@nestjs/common");
 var import_core = require("@nestjs/core");
 
 // src/decorator/agent.decorator.ts
@@ -1158,23 +1352,23 @@ var SYSTEM_PROMPT_METADATA = Symbol.for("@dudousxd/nestjs-agent:system-prompt");
 var SYSTEM_PROMPT_CONTRIBUTOR_METADATA = Symbol.for("@dudousxd/nestjs-agent:system-prompt-contributor");
 
 // src/discovery/agent-discovery.service.ts
-function _ts_decorate11(decorators, target, key, desc) {
+function _ts_decorate12(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate11, "_ts_decorate");
-function _ts_metadata10(k, v) {
+__name(_ts_decorate12, "_ts_decorate");
+function _ts_metadata11(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata10, "_ts_metadata");
-function _ts_param9(paramIndex, decorator) {
+__name(_ts_metadata11, "_ts_metadata");
+function _ts_param10(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param9, "_ts_param");
+__name(_ts_param10, "_ts_param");
 var AgentDiscoveryService = class _AgentDiscoveryService {
   static {
     __name(this, "AgentDiscoveryService");
@@ -1183,7 +1377,7 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
   scanner;
   registry;
   contributors;
-  logger = new import_common11.Logger(_AgentDiscoveryService.name);
+  logger = new import_common12.Logger(_AgentDiscoveryService.name);
   constructor(discovery, scanner, registry, contributors) {
     this.discovery = discovery;
     this.scanner = scanner;
@@ -1271,22 +1465,22 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
     return (ctx) => candidate.call(instance, ctx);
   }
 };
-AgentDiscoveryService = _ts_decorate11([
-  (0, import_common11.Injectable)(),
-  _ts_param9(2, (0, import_common11.Inject)(import_nestjs_agent_core11.AGENT_REGISTRY)),
-  _ts_param9(3, (0, import_common11.Inject)(import_nestjs_agent_core11.AGENT_PROMPT_CONTRIBUTORS)),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
+AgentDiscoveryService = _ts_decorate12([
+  (0, import_common12.Injectable)(),
+  _ts_param10(2, (0, import_common12.Inject)(import_nestjs_agent_core12.AGENT_REGISTRY)),
+  _ts_param10(3, (0, import_common12.Inject)(import_nestjs_agent_core12.AGENT_PROMPT_CONTRIBUTORS)),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
     typeof import_core.DiscoveryService === "undefined" ? Object : import_core.DiscoveryService,
     typeof import_core.MetadataScanner === "undefined" ? Object : import_core.MetadataScanner,
-    typeof import_nestjs_agent_core11.AgentRegistry === "undefined" ? Object : import_nestjs_agent_core11.AgentRegistry,
+    typeof import_nestjs_agent_core12.AgentRegistry === "undefined" ? Object : import_nestjs_agent_core12.AgentRegistry,
     Array
   ])
 ], AgentDiscoveryService);
 
 // src/discovery/ai-tool-discovery.service.ts
-var import_nestjs_agent_core12 = require("@dudousxd/nestjs-agent-core");
-var import_common12 = require("@nestjs/common");
+var import_nestjs_agent_core13 = require("@dudousxd/nestjs-agent-core");
+var import_common13 = require("@nestjs/common");
 var import_core2 = require("@nestjs/core");
 var import_zod = require("zod");
 
@@ -1306,23 +1500,23 @@ function isBrandedFunctionalTool(value) {
 __name(isBrandedFunctionalTool, "isBrandedFunctionalTool");
 
 // src/discovery/ai-tool-discovery.service.ts
-function _ts_decorate12(decorators, target, key, desc) {
+function _ts_decorate13(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate12, "_ts_decorate");
-function _ts_metadata11(k, v) {
+__name(_ts_decorate13, "_ts_decorate");
+function _ts_metadata12(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata11, "_ts_metadata");
-function _ts_param10(paramIndex, decorator) {
+__name(_ts_metadata12, "_ts_metadata");
+function _ts_param11(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param10, "_ts_param");
+__name(_ts_param11, "_ts_param");
 var AiToolDiscoveryService = class _AiToolDiscoveryService {
   static {
     __name(this, "AiToolDiscoveryService");
@@ -1331,7 +1525,7 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
   registry;
   agents;
   options;
-  logger = new import_common12.Logger(_AiToolDiscoveryService.name);
+  logger = new import_common13.Logger(_AiToolDiscoveryService.name);
   constructor(discovery, registry, agents, options) {
     this.discovery = discovery;
     this.registry = registry;
@@ -1429,13 +1623,13 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
     return true;
   }
 };
-AiToolDiscoveryService = _ts_decorate12([
-  (0, import_common12.Injectable)(),
-  _ts_param10(1, (0, import_common12.Inject)(import_nestjs_agent_core12.AGENT_TOOL_REGISTRY)),
-  _ts_param10(2, (0, import_common12.Inject)(import_nestjs_agent_core12.AGENT_REGISTRY)),
-  _ts_param10(3, (0, import_common12.Inject)(import_nestjs_agent_core12.AGENT_OPTIONS)),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+AiToolDiscoveryService = _ts_decorate13([
+  (0, import_common13.Injectable)(),
+  _ts_param11(1, (0, import_common13.Inject)(import_nestjs_agent_core13.AGENT_TOOL_REGISTRY)),
+  _ts_param11(2, (0, import_common13.Inject)(import_nestjs_agent_core13.AGENT_REGISTRY)),
+  _ts_param11(3, (0, import_common13.Inject)(import_nestjs_agent_core13.AGENT_OPTIONS)),
+  _ts_metadata12("design:type", Function),
+  _ts_metadata12("design:paramtypes", [
     typeof import_core2.DiscoveryService === "undefined" ? Object : import_core2.DiscoveryService,
     typeof ToolRegistry === "undefined" ? Object : ToolRegistry,
     typeof AgentRegistry === "undefined" ? Object : AgentRegistry,
@@ -1444,7 +1638,7 @@ AiToolDiscoveryService = _ts_decorate12([
 ], AiToolDiscoveryService);
 
 // src/in-process-sink.ts
-var import_nestjs_agent_core13 = require("@dudousxd/nestjs-agent-core");
+var import_nestjs_agent_core14 = require("@dudousxd/nestjs-agent-core");
 var InProcessTokenStreamSink = class {
   static {
     __name(this, "InProcessTokenStreamSink");
@@ -1499,7 +1693,7 @@ var InProcessTokenStreamSink = class {
       }
       if (buf.ended) {
         if (buf.failure !== void 0) {
-          throw new import_nestjs_agent_core13.AgentStreamError(buf.failure);
+          throw new import_nestjs_agent_core14.AgentStreamError(buf.failure);
         }
         return;
       }
@@ -1535,32 +1729,32 @@ var LedgerQuotaStore = class {
 };
 
 // src/runner/inline-agent-runner.ts
-var import_nestjs_agent_core14 = require("@dudousxd/nestjs-agent-core");
-var import_common13 = require("@nestjs/common");
-function _ts_decorate13(decorators, target, key, desc) {
+var import_nestjs_agent_core15 = require("@dudousxd/nestjs-agent-core");
+var import_common14 = require("@nestjs/common");
+function _ts_decorate14(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate13, "_ts_decorate");
-function _ts_metadata12(k, v) {
+__name(_ts_decorate14, "_ts_decorate");
+function _ts_metadata13(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata12, "_ts_metadata");
-function _ts_param11(paramIndex, decorator) {
+__name(_ts_metadata13, "_ts_metadata");
+function _ts_param12(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param11, "_ts_param");
+__name(_ts_param12, "_ts_param");
 var InlineAgentRunner = class _InlineAgentRunner {
   static {
     __name(this, "InlineAgentRunner");
   }
   factory;
   store;
-  logger = new import_common13.Logger(_InlineAgentRunner.name);
+  logger = new import_common14.Logger(_InlineAgentRunner.name);
   pending = /* @__PURE__ */ new Map();
   constructor(factory, store) {
     this.factory = factory;
@@ -1571,18 +1765,19 @@ var InlineAgentRunner = class _InlineAgentRunner {
     const day = input.day ?? utcDay();
     const deps = this.factory.forAgent(input.agentName);
     const hooks = this.topLevelHooks(runId, deps, input.actor, day);
-    void (0, import_nestjs_agent_core14.runAgentLoop)({
+    void (0, import_nestjs_agent_core15.runAgentLoop)({
       ...deps,
       day
-    }, input, hooks).catch(async (error) => {
+    }, input, hooks).then(() => this.store.setActiveStream(input.threadId, null)).catch(async (error) => {
       const message = error instanceof Error ? error.message : String(error);
-      const code = error instanceof import_nestjs_agent_core14.QuotaExceededError ? "quota_exceeded" : "run_failed";
+      const code = error instanceof import_nestjs_agent_core15.QuotaExceededError ? "quota_exceeded" : "run_failed";
       this.logger.error(`agent run ${runId} failed (${code}): ${message}`);
-      (0, import_nestjs_agent_core14.publishAgentRunFailed)({
+      (0, import_nestjs_agent_core15.publishAgentRunFailed)({
         runId,
         code,
         message
       });
+      await this.store.setActiveStream(input.threadId, null);
       const writer = await deps.sink.open(runId);
       await writer.fail({
         code,
@@ -1640,98 +1835,102 @@ var InlineAgentRunner = class _InlineAgentRunner {
       step: /* @__PURE__ */ __name((_name, fn) => fn(), "step"),
       runAgent: /* @__PURE__ */ __name((childName, childTask) => this.runNested(childName, childTask, actor, day, depth + 1, sinkRunId), "runAgent")
     };
-    return (0, import_nestjs_agent_core14.runAgentLoop)({
-      ...deps,
-      day
-    }, {
-      threadId: subThread.id,
-      actor,
-      userText: task,
-      agentName,
-      day,
-      delegationDepth: depth,
-      sinkRunId
-    }, hooks);
+    try {
+      return await (0, import_nestjs_agent_core15.runAgentLoop)({
+        ...deps,
+        day
+      }, {
+        threadId: subThread.id,
+        actor,
+        userText: task,
+        agentName,
+        day,
+        delegationDepth: depth,
+        sinkRunId
+      }, hooks);
+    } finally {
+      await this.store.setActiveStream(subThread.id, null);
+    }
   }
 };
-InlineAgentRunner = _ts_decorate13([
-  (0, import_common13.Injectable)(),
-  _ts_param11(0, (0, import_common13.Inject)(import_nestjs_agent_core14.AGENT_DEPS_FACTORY)),
-  _ts_param11(1, (0, import_common13.Inject)(import_nestjs_agent_core14.AGENT_STORE)),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+InlineAgentRunner = _ts_decorate14([
+  (0, import_common14.Injectable)(),
+  _ts_param12(0, (0, import_common14.Inject)(import_nestjs_agent_core15.AGENT_DEPS_FACTORY)),
+  _ts_param12(1, (0, import_common14.Inject)(import_nestjs_agent_core15.AGENT_STORE)),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
     typeof AgentStore === "undefined" ? Object : AgentStore
   ])
 ], InlineAgentRunner);
 
 // src/agent.module.ts
-function _ts_decorate14(decorators, target, key, desc) {
+function _ts_decorate15(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate14, "_ts_decorate");
+__name(_ts_decorate15, "_ts_decorate");
 var DEFAULT_PATH = "agent";
 function sharedProviders(durable, includeStore) {
   const providers = [
     {
-      provide: import_nestjs_agent_core15.AGENT_TOOL_REGISTRY,
-      useFactory: /* @__PURE__ */ __name(() => new import_nestjs_agent_core15.ToolRegistry(), "useFactory")
+      provide: import_nestjs_agent_core16.AGENT_TOOL_REGISTRY,
+      useFactory: /* @__PURE__ */ __name(() => new import_nestjs_agent_core16.ToolRegistry(), "useFactory")
     },
     // Starts empty; AgentDiscoveryService populates it from `@Agent`-decorated providers at boot.
     {
-      provide: import_nestjs_agent_core15.AGENT_REGISTRY,
-      useFactory: /* @__PURE__ */ __name(() => new import_nestjs_agent_core15.AgentRegistry(), "useFactory")
+      provide: import_nestjs_agent_core16.AGENT_REGISTRY,
+      useFactory: /* @__PURE__ */ __name(() => new import_nestjs_agent_core16.AgentRegistry(), "useFactory")
     },
     // A shared, mutable list AgentDiscoveryService fills with `@SystemPromptContributor()` methods.
     {
-      provide: import_nestjs_agent_core15.AGENT_PROMPT_CONTRIBUTORS,
+      provide: import_nestjs_agent_core16.AGENT_PROMPT_CONTRIBUTORS,
       useFactory: /* @__PURE__ */ __name(() => [], "useFactory")
     },
     {
-      provide: import_nestjs_agent_core15.AGENT_SINK,
+      provide: import_nestjs_agent_core16.AGENT_SINK,
       useFactory: /* @__PURE__ */ __name((options) => options.sink ?? new InProcessTokenStreamSink(), "useFactory"),
       inject: [
-        import_nestjs_agent_core15.AGENT_OPTIONS
+        import_nestjs_agent_core16.AGENT_OPTIONS
       ]
     },
     {
-      provide: import_nestjs_agent_core15.AGENT_ROLES_POLICY,
-      useFactory: /* @__PURE__ */ __name((options) => options.rolesPolicy ?? new import_nestjs_agent_core15.DefaultRolesPolicy(options.defaultRoles), "useFactory"),
+      provide: import_nestjs_agent_core16.AGENT_ROLES_POLICY,
+      useFactory: /* @__PURE__ */ __name((options) => options.rolesPolicy ?? new import_nestjs_agent_core16.DefaultRolesPolicy(options.defaultRoles), "useFactory"),
       inject: [
-        import_nestjs_agent_core15.AGENT_OPTIONS
+        import_nestjs_agent_core16.AGENT_OPTIONS
       ]
     },
     {
-      provide: import_nestjs_agent_core15.AGENT_ACTOR_RESOLVER,
+      provide: import_nestjs_agent_core16.AGENT_ACTOR_RESOLVER,
       useFactory: /* @__PURE__ */ __name((options) => options.actorResolver, "useFactory"),
       inject: [
-        import_nestjs_agent_core15.AGENT_OPTIONS
+        import_nestjs_agent_core16.AGENT_OPTIONS
       ]
     },
     {
-      provide: import_nestjs_agent_core15.AGENT_MODEL,
+      provide: import_nestjs_agent_core16.AGENT_MODEL,
       useFactory: /* @__PURE__ */ __name((o) => o.model, "useFactory"),
       inject: [
-        import_nestjs_agent_core15.AGENT_OPTIONS
+        import_nestjs_agent_core16.AGENT_OPTIONS
       ]
     },
     {
       // An explicit `quota` wins; otherwise `quotaLimitTokens` binds the built-in ledger-backed
       // store; otherwise quotas are off (undefined). The ledger store reads the same usage rows
       // the loop already writes, so enforcement needs no extra shared state across replicas.
-      provide: import_nestjs_agent_core15.AGENT_QUOTA_STORE,
+      provide: import_nestjs_agent_core16.AGENT_QUOTA_STORE,
       useFactory: /* @__PURE__ */ __name((o, store) => o.quota ?? (o.quotaLimitTokens !== void 0 ? new LedgerQuotaStore(store, o.quotaLimitTokens) : void 0), "useFactory"),
       inject: [
-        import_nestjs_agent_core15.AGENT_OPTIONS,
-        import_nestjs_agent_core15.AGENT_STORE
+        import_nestjs_agent_core16.AGENT_OPTIONS,
+        import_nestjs_agent_core16.AGENT_STORE
       ]
     },
     AgentDepsFactory2,
     {
-      provide: import_nestjs_agent_core15.AGENT_DEPS_FACTORY,
+      provide: import_nestjs_agent_core16.AGENT_DEPS_FACTORY,
       useExisting: AgentDepsFactory2
     },
     // Populates the registry + contributors (onModuleInit) BEFORE AiToolDiscoveryService synthesizes
@@ -1743,16 +1942,16 @@ function sharedProviders(durable, includeStore) {
   ];
   if (includeStore) {
     providers.push({
-      provide: import_nestjs_agent_core15.AGENT_STORE,
+      provide: import_nestjs_agent_core16.AGENT_STORE,
       useFactory: /* @__PURE__ */ __name((o) => o.store, "useFactory"),
       inject: [
-        import_nestjs_agent_core15.AGENT_OPTIONS
+        import_nestjs_agent_core16.AGENT_OPTIONS
       ]
     });
   }
   if (durable) {
     providers.push({
-      provide: import_nestjs_agent_core15.AGENT_RUNNER,
+      provide: import_nestjs_agent_core16.AGENT_RUNNER,
       useFactory: /* @__PURE__ */ __name((durableRunner) => {
         if (durableRunner === void 0) {
           throw new Error("AgentModule.forRoot({ durable: true }) requires importing AgentDurableModule from '@dudousxd/nestjs-agent/durable' (alongside a configured DurableModule). It was not found.");
@@ -1761,14 +1960,14 @@ function sharedProviders(durable, includeStore) {
       }, "useFactory"),
       inject: [
         {
-          token: import_nestjs_agent_core15.AGENT_DURABLE_RUNNER,
+          token: import_nestjs_agent_core16.AGENT_DURABLE_RUNNER,
           optional: true
         }
       ]
     });
   } else {
     providers.push({
-      provide: import_nestjs_agent_core15.AGENT_RUNNER,
+      provide: import_nestjs_agent_core16.AGENT_RUNNER,
       useExisting: InlineAgentRunner
     });
   }
@@ -1777,32 +1976,57 @@ function sharedProviders(durable, includeStore) {
 __name(sharedProviders, "sharedProviders");
 function exportsFor(includeStore) {
   return [
-    import_nestjs_agent_core15.AGENT_OPTIONS,
-    import_nestjs_agent_core15.AGENT_TOOL_REGISTRY,
-    import_nestjs_agent_core15.AGENT_REGISTRY,
-    import_nestjs_agent_core15.AGENT_SINK,
-    import_nestjs_agent_core15.AGENT_ROLES_POLICY,
-    import_nestjs_agent_core15.AGENT_ACTOR_RESOLVER,
-    import_nestjs_agent_core15.AGENT_MODEL,
+    import_nestjs_agent_core16.AGENT_OPTIONS,
+    import_nestjs_agent_core16.AGENT_TOOL_REGISTRY,
+    import_nestjs_agent_core16.AGENT_REGISTRY,
+    import_nestjs_agent_core16.AGENT_SINK,
+    import_nestjs_agent_core16.AGENT_ROLES_POLICY,
+    import_nestjs_agent_core16.AGENT_ACTOR_RESOLVER,
+    import_nestjs_agent_core16.AGENT_MODEL,
     ...includeStore ? [
-      import_nestjs_agent_core15.AGENT_STORE
+      import_nestjs_agent_core16.AGENT_STORE
     ] : [],
-    import_nestjs_agent_core15.AGENT_QUOTA_STORE,
-    import_nestjs_agent_core15.AGENT_PROMPT_CONTRIBUTORS,
-    import_nestjs_agent_core15.AGENT_DEPS_FACTORY,
+    import_nestjs_agent_core16.AGENT_QUOTA_STORE,
+    import_nestjs_agent_core16.AGENT_PROMPT_CONTRIBUTORS,
+    import_nestjs_agent_core16.AGENT_DEPS_FACTORY,
     AgentDepsFactory2,
     AgentService,
     InlineAgentRunner
   ];
 }
 __name(exportsFor, "exportsFor");
-var CONTROLLERS = [
+var BASE_CONTROLLERS = [
   ChatController,
   ThreadsController,
   ToolCallController,
   QuotaController,
   AgentsController
 ];
+var GUARDABLE_CONTROLLERS = [
+  ...BASE_CONTROLLERS,
+  AttachmentsController
+];
+function controllersFor(mountAttachments) {
+  return mountAttachments ? [
+    ...BASE_CONTROLLERS,
+    AttachmentsController
+  ] : BASE_CONTROLLERS;
+}
+__name(controllersFor, "controllersFor");
+var GUARDS_METADATA = "__guards__";
+function applyGuards(guards) {
+  const resolved = guards ?? [];
+  for (const controller of GUARDABLE_CONTROLLERS) {
+    Reflect.defineMetadata(GUARDS_METADATA, resolved, controller);
+  }
+}
+__name(applyGuards, "applyGuards");
+function guardProviders(guards) {
+  return [
+    ...new Set(guards ?? [])
+  ];
+}
+__name(guardProviders, "guardProviders");
 function routerFor(path) {
   return import_core3.RouterModule.register([
     {
@@ -1819,6 +2043,7 @@ var AgentModule = class _AgentModule {
   static forRoot(options) {
     const path = options.path ?? DEFAULT_PATH;
     const includeStore = options.store !== void 0;
+    applyGuards(options.guards);
     return {
       module: _AgentModule,
       global: true,
@@ -1826,13 +2051,14 @@ var AgentModule = class _AgentModule {
         import_core3.DiscoveryModule,
         routerFor(path)
       ],
-      controllers: CONTROLLERS,
+      controllers: controllersFor(options.attachments?.upload === true),
       providers: [
         {
-          provide: import_nestjs_agent_core15.AGENT_OPTIONS,
+          provide: import_nestjs_agent_core16.AGENT_OPTIONS,
           useValue: options
         },
-        ...sharedProviders(options.durable ?? false, includeStore)
+        ...sharedProviders(options.durable ?? false, includeStore),
+        ...guardProviders(options.guards)
       ],
       exports: exportsFor(includeStore)
     };
@@ -1840,6 +2066,7 @@ var AgentModule = class _AgentModule {
   static forRootAsync(options) {
     const path = options.path ?? DEFAULT_PATH;
     const includeStore = options.externalStore !== true;
+    applyGuards(options.guards);
     return {
       module: _AgentModule,
       global: true,
@@ -1848,22 +2075,23 @@ var AgentModule = class _AgentModule {
         routerFor(path),
         ...options.imports ?? []
       ],
-      controllers: CONTROLLERS,
+      controllers: controllersFor(options.attachmentsUpload === true),
       providers: [
         {
-          provide: import_nestjs_agent_core15.AGENT_OPTIONS,
+          provide: import_nestjs_agent_core16.AGENT_OPTIONS,
           useFactory: options.useFactory,
           inject: options.inject ?? []
         },
-        ...sharedProviders(options.durable ?? false, includeStore)
+        ...sharedProviders(options.durable ?? false, includeStore),
+        ...guardProviders(options.guards)
       ],
       exports: exportsFor(includeStore)
     };
   }
 };
-AgentModule = _ts_decorate14([
-  (0, import_common14.Global)(),
-  (0, import_common14.Module)({})
+AgentModule = _ts_decorate15([
+  (0, import_common15.Global)(),
+  (0, import_common15.Module)({})
 ], AgentModule);
 
 // src/durable/agent-durable.ts