@dudousxd/nestjs-agent 0.3.3 → 0.4.1

package/dist/index.cjs

@@ -32,6 +32,9 @@ __export(index_exports, {
   AgentService: () => AgentService,
   AiTool: () => AiTool,
   AiToolDiscoveryService: () => AiToolDiscoveryService,
+  AttachmentsController: () => AttachmentsController,
+  DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES: () => DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES,
+  DEFAULT_MAX_ATTACHMENT_BYTES: () => DEFAULT_MAX_ATTACHMENT_BYTES,
   HeaderActorResolver: () => HeaderActorResolver,
   InProcessTokenStreamSink: () => InProcessTokenStreamSink,
   InlineAgentRunner: () => InlineAgentRunner,
@@ -49,8 +52,8 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // src/agent.module.ts
-var import_nestjs_agent_core13 = require("@dudousxd/nestjs-agent-core");
-var import_common11 = require("@nestjs/common");
+var import_nestjs_agent_core14 = require("@dudousxd/nestjs-agent-core");
+var import_common12 = require("@nestjs/common");
 var import_core3 = require("@nestjs/core");
 
 // src/agent-deps.factory.ts
@@ -91,7 +94,8 @@ var AgentDepsFactory2 = class {
   agents;
   promptContributors;
   quota;
-  constructor(options, model, store, sink, rolesPolicy, registry, agents, promptContributors, quota) {
+  pricingStore;
+  constructor(options, model, store, sink, rolesPolicy, registry, agents, promptContributors, quota, pricingStore) {
     this.options = options;
     this.model = model;
     this.store = store;
@@ -101,6 +105,7 @@ var AgentDepsFactory2 = class {
     this.agents = agents;
     this.promptContributors = promptContributors;
     this.quota = quota;
+    this.pricingStore = pricingStore;
   }
   /**
   * The agent a turn uses when the caller names none: the explicit `defaultAgent` option, else the
@@ -147,6 +152,9 @@ var AgentDepsFactory2 = class {
       ...this.quota !== void 0 ? {
         quota: this.quota
       } : {},
+      ...this.pricingStore !== void 0 ? {
+        pricingStore: this.pricingStore
+      } : {},
       ...toolAllowList !== void 0 ? {
         toolAllowList
       } : {},
@@ -187,6 +195,8 @@ AgentDepsFactory2 = _ts_decorate([
   _ts_param(6, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_REGISTRY)),
   _ts_param(7, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_PROMPT_CONTRIBUTORS)),
   _ts_param(8, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_QUOTA_STORE)),
+  _ts_param(9, (0, import_common.Optional)()),
+  _ts_param(9, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_PRICING_STORE)),
   _ts_metadata("design:type", Function),
   _ts_metadata("design:paramtypes", [
     typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
@@ -197,6 +207,7 @@ AgentDepsFactory2 = _ts_decorate([
     typeof import_nestjs_agent_core.ToolRegistry === "undefined" ? Object : import_nestjs_agent_core.ToolRegistry,
     typeof import_nestjs_agent_core.AgentRegistry === "undefined" ? Object : import_nestjs_agent_core.AgentRegistry,
     Array,
+    Object,
     Object
   ])
 ], AgentDepsFactory2);
@@ -254,7 +265,7 @@ var AgentService = class {
     this.quota = quota;
   }
   async chat(params) {
-    const agentName = params.agentName ?? this.deps.defaultAgentName();
+    const agentName = await this.resolveAgentName(params.agentName, params.threadId);
     let threadId = params.threadId;
     if (threadId === void 0) {
       if (params.regenerate === true) {
@@ -315,12 +326,14 @@ var AgentService = class {
     await this.assertOwnsActiveStream(actor, runId);
     return this.runner.cancel(runId);
   }
-  listThreads(actorRef) {
-    return this.store.listThreads(actorRef);
+  async listThreads(actorRef) {
+    const threads = await this.store.listThreads(actorRef);
+    return Promise.all(threads.map((thread) => this.toSummaryView(thread)));
   }
   async getThread(actor, threadId) {
     await this.assertOwnsThread(actor, threadId);
-    return this.store.getThread(threadId);
+    const thread = await this.store.getThread(threadId);
+    return thread === null ? null : this.toDetailView(thread);
   }
   async deleteThread(actor, threadId) {
     await this.assertOwnsThread(actor, threadId);
@@ -330,7 +343,38 @@ var AgentService = class {
     await this.assertOwnsThread(actor, threadId);
     return this.store.forkThread(threadId, fromMessageId);
   }
+  /** Kept for source compatibility — a thin wrapper over the more general `updateThread`. */
   async renameThread(actor, threadId, title) {
+    return this.updateThread(actor, threadId, {
+      title
+    });
+  }
+  /**
+  * Rename a thread and/or set its default agent. Title-only patches work against ANY store (via
+  * the required `setTitle`); a `defaultAgent` change requires the bound store to implement the
+  * optional `updateThread` — 501 with a clear message when it doesn't, rather than silently
+  * dropping the field.
+  */
+  async updateThread(actor, threadId, patch) {
+    const title = patch.title !== void 0 ? this.validateTitle(patch.title) : void 0;
+    await this.assertOwnsThread(actor, threadId);
+    if (patch.defaultAgent === void 0) {
+      if (title !== void 0) {
+        await this.store.setTitle(threadId, title);
+      }
+      return;
+    }
+    if (this.store.updateThread === void 0) {
+      throw new import_common2.NotImplementedException("Setting a thread's defaultAgent requires an AgentStore that implements updateThread(); the bound store does not support it.");
+    }
+    await this.store.updateThread(threadId, {
+      ...title !== void 0 ? {
+        title
+      } : {},
+      defaultAgent: patch.defaultAgent
+    });
+  }
+  validateTitle(title) {
     const trimmed = title.trim();
     if (trimmed.length === 0) {
       throw new import_common2.BadRequestException("title must not be empty");
@@ -338,8 +382,41 @@ var AgentService = class {
     if (trimmed.length > 200) {
       throw new import_common2.BadRequestException("title must be at most 200 characters");
     }
-    await this.assertOwnsThread(actor, threadId);
-    return this.store.setTitle(threadId, trimmed);
+    return trimmed;
+  }
+  /**
+  * Agent-selection precedence for a `chat()` call with no explicit `agentName`: the thread's own
+  * `defaultAgent` (if the thread exists and one is set) wins over the module's configured default.
+  * Skips the thread lookup entirely when the caller already named an agent or there's no thread yet.
+  */
+  async resolveAgentName(agentName, threadId) {
+    if (agentName !== void 0) {
+      return agentName;
+    }
+    if (threadId !== void 0) {
+      const thread = await this.store.getThread(threadId);
+      if (thread?.defaultAgent !== void 0 && thread.defaultAgent !== null) {
+        return thread.defaultAgent;
+      }
+    }
+    return this.deps.defaultAgentName();
+  }
+  async toSummaryView(thread) {
+    return {
+      ...thread,
+      defaultAgent: thread.defaultAgent ?? null,
+      activeRunId: await this.store.activeRunForThread?.(thread.id) ?? null
+    };
+  }
+  async toDetailView(thread) {
+    const summary = await this.toSummaryView(thread);
+    return {
+      ...summary,
+      messages: thread.messages,
+      ...thread.activeStreamId !== void 0 ? {
+        activeStreamId: thread.activeStreamId
+      } : {}
+    };
   }
   async promoteThread(actor, threadId) {
     await this.assertOwnsThread(actor, threadId);
@@ -495,9 +572,10 @@ AgentsController = _ts_decorate3([
   ])
 ], AgentsController);
 
-// src/controller/chat.controller.ts
+// src/controller/attachments.controller.ts
 var import_nestjs_agent_core5 = require("@dudousxd/nestjs-agent-core");
 var import_common4 = require("@nestjs/common");
+var import_platform_express = require("@nestjs/platform-express");
 function _ts_decorate4(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -515,6 +593,110 @@ function _ts_param4(paramIndex, decorator) {
   };
 }
 __name(_ts_param4, "_ts_param");
+var DEFAULT_MAX_ATTACHMENT_BYTES = 20 * 1024 * 1024;
+var DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES = [
+  "image/png",
+  "image/jpeg",
+  "image/gif",
+  "image/webp",
+  "application/pdf",
+  "text/plain",
+  "text/csv"
+];
+var AttachmentsController = class {
+  static {
+    __name(this, "AttachmentsController");
+  }
+  options;
+  actorResolver;
+  staging;
+  constructor(options, actorResolver, staging) {
+    this.options = options;
+    this.actorResolver = actorResolver;
+    this.staging = staging;
+  }
+  /**
+  * `attachments.upload: true` is what mounts this controller at all (see `agent.module.ts`), so by
+  * the time an instance exists the host clearly intends uploads to work. Fail boot loudly rather
+  * than mounting a controller that would 501 on every single request because nobody bound
+  * `AGENT_ATTACHMENT_STAGING`.
+  */
+  onModuleInit() {
+    if (this.options.attachments?.upload === true && this.staging === void 0) {
+      throw new Error("AgentModule: attachments.upload is true but no AGENT_ATTACHMENT_STAGING provider is bound. Bind one (e.g. `{ provide: AGENT_ATTACHMENT_STAGING, useClass: MyStagingStore }`) in a module imported alongside AgentModule, or set attachments.upload to false.");
+    }
+  }
+  async upload(req, file) {
+    if (this.staging === void 0) {
+      throw new import_common4.NotImplementedException("Attachment upload is not configured on this server.");
+    }
+    if (file === void 0) {
+      throw new import_common4.BadRequestException('multipart field "file" is required');
+    }
+    const allowedContentTypes = this.options.attachments?.allowedContentTypes ?? DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES;
+    if (!allowedContentTypes.includes(file.mimetype)) {
+      throw new import_common4.UnsupportedMediaTypeException(`content type "${file.mimetype}" is not allowed (allowed: ${allowedContentTypes.join(", ")})`);
+    }
+    const maxBytes = this.options.attachments?.maxBytes ?? DEFAULT_MAX_ATTACHMENT_BYTES;
+    if (file.size > maxBytes) {
+      throw new import_common4.PayloadTooLargeException(`file exceeds the ${maxBytes}-byte limit`);
+    }
+    const actor = await this.actorResolver.resolve(req);
+    return this.staging.stage({
+      data: file.buffer,
+      filename: file.originalname,
+      contentType: file.mimetype,
+      sizeBytes: file.size,
+      actor
+    });
+  }
+};
+_ts_decorate4([
+  (0, import_common4.Post)(),
+  (0, import_common4.UseInterceptors)((0, import_platform_express.FileInterceptor)("file")),
+  _ts_param4(0, (0, import_common4.Req)()),
+  _ts_param4(1, (0, import_common4.UploadedFile)()),
+  _ts_metadata4("design:type", Function),
+  _ts_metadata4("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
+    Object
+  ]),
+  _ts_metadata4("design:returntype", Promise)
+], AttachmentsController.prototype, "upload", null);
+AttachmentsController = _ts_decorate4([
+  (0, import_common4.Controller)("attachments"),
+  _ts_param4(0, (0, import_common4.Inject)(import_nestjs_agent_core5.AGENT_OPTIONS)),
+  _ts_param4(1, (0, import_common4.Inject)(import_nestjs_agent_core5.AGENT_ACTOR_RESOLVER)),
+  _ts_param4(2, (0, import_common4.Optional)()),
+  _ts_param4(2, (0, import_common4.Inject)(import_nestjs_agent_core5.AGENT_ATTACHMENT_STAGING)),
+  _ts_metadata4("design:type", Function),
+  _ts_metadata4("design:paramtypes", [
+    typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
+    typeof ActorResolver === "undefined" ? Object : ActorResolver,
+    Object
+  ])
+], AttachmentsController);
+
+// src/controller/chat.controller.ts
+var import_nestjs_agent_core6 = require("@dudousxd/nestjs-agent-core");
+var import_common5 = require("@nestjs/common");
+function _ts_decorate5(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate5, "_ts_decorate");
+function _ts_metadata5(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata5, "_ts_metadata");
+function _ts_param5(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param5, "_ts_param");
 var ChatController = class {
   static {
     __name(this, "ChatController");
@@ -602,7 +784,7 @@ data: ${JSON.stringify({
       }
       res.write("event: done\ndata: {}\n\n");
     } catch (error) {
-      const payload = error instanceof import_nestjs_agent_core5.AgentStreamError ? {
+      const payload = error instanceof import_nestjs_agent_core6.AgentStreamError ? {
         code: error.code,
         message: error.message
       } : {
@@ -617,71 +799,71 @@ data: ${JSON.stringify(payload)}
     res.end();
   }
 };
-_ts_decorate4([
-  (0, import_common4.Post)("chat"),
-  _ts_param4(0, (0, import_common4.Req)()),
-  _ts_param4(1, (0, import_common4.Res)()),
-  _ts_param4(2, (0, import_common4.Body)()),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
+_ts_decorate5([
+  (0, import_common5.Post)("chat"),
+  _ts_param5(0, (0, import_common5.Req)()),
+  _ts_param5(1, (0, import_common5.Res)()),
+  _ts_param5(2, (0, import_common5.Body)()),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof Response === "undefined" ? Object : Response,
     typeof ChatBody === "undefined" ? Object : ChatBody
   ]),
-  _ts_metadata4("design:returntype", Promise)
+  _ts_metadata5("design:returntype", Promise)
 ], ChatController.prototype, "chat", null);
-_ts_decorate4([
-  (0, import_common4.Get)("chat/:runId/stream"),
-  _ts_param4(0, (0, import_common4.Param)("runId")),
-  _ts_param4(1, (0, import_common4.Res)()),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
+_ts_decorate5([
+  (0, import_common5.Get)("chat/:runId/stream"),
+  _ts_param5(0, (0, import_common5.Param)("runId")),
+  _ts_param5(1, (0, import_common5.Res)()),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
     String,
     typeof Response === "undefined" ? Object : Response
   ]),
-  _ts_metadata4("design:returntype", Promise)
+  _ts_metadata5("design:returntype", Promise)
 ], ChatController.prototype, "stream", null);
-_ts_decorate4([
-  (0, import_common4.Post)("chat/:runId/cancel"),
-  _ts_param4(0, (0, import_common4.Req)()),
-  _ts_param4(1, (0, import_common4.Param)("runId")),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
+_ts_decorate5([
+  (0, import_common5.Post)("chat/:runId/cancel"),
+  _ts_param5(0, (0, import_common5.Req)()),
+  _ts_param5(1, (0, import_common5.Param)("runId")),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata4("design:returntype", Promise)
+  _ts_metadata5("design:returntype", Promise)
 ], ChatController.prototype, "cancel", null);
-ChatController = _ts_decorate4([
-  (0, import_common4.Controller)(),
-  _ts_param4(1, (0, import_common4.Inject)(import_nestjs_agent_core5.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
+ChatController = _ts_decorate5([
+  (0, import_common5.Controller)(),
+  _ts_param5(1, (0, import_common5.Inject)(import_nestjs_agent_core6.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], ChatController);
 
 // src/controller/quota.controller.ts
-var import_nestjs_agent_core6 = require("@dudousxd/nestjs-agent-core");
-var import_common5 = require("@nestjs/common");
-function _ts_decorate5(decorators, target, key, desc) {
+var import_nestjs_agent_core7 = require("@dudousxd/nestjs-agent-core");
+var import_common6 = require("@nestjs/common");
+function _ts_decorate6(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate5, "_ts_decorate");
-function _ts_metadata5(k, v) {
+__name(_ts_decorate6, "_ts_decorate");
+function _ts_metadata6(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata5, "_ts_metadata");
-function _ts_param5(paramIndex, decorator) {
+__name(_ts_metadata6, "_ts_metadata");
+function _ts_param6(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param5, "_ts_param");
+__name(_ts_param6, "_ts_param");
 var QuotaController = class {
   static {
     __name(this, "QuotaController");
@@ -697,45 +879,45 @@ var QuotaController = class {
     return this.agent.quotaToday(actor.id);
   }
 };
-_ts_decorate5([
-  (0, import_common5.Get)("today"),
-  _ts_param5(0, (0, import_common5.Req)()),
-  _ts_metadata5("design:type", Function),
-  _ts_metadata5("design:paramtypes", [
+_ts_decorate6([
+  (0, import_common6.Get)("today"),
+  _ts_param6(0, (0, import_common6.Req)()),
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request
   ]),
-  _ts_metadata5("design:returntype", Promise)
+  _ts_metadata6("design:returntype", Promise)
 ], QuotaController.prototype, "today", null);
-QuotaController = _ts_decorate5([
-  (0, import_common5.Controller)("quota"),
-  _ts_param5(1, (0, import_common5.Inject)(import_nestjs_agent_core6.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata5("design:type", Function),
-  _ts_metadata5("design:paramtypes", [
+QuotaController = _ts_decorate6([
+  (0, import_common6.Controller)("quota"),
+  _ts_param6(1, (0, import_common6.Inject)(import_nestjs_agent_core7.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], QuotaController);
 
 // src/controller/threads.controller.ts
-var import_nestjs_agent_core7 = require("@dudousxd/nestjs-agent-core");
-var import_common6 = require("@nestjs/common");
-function _ts_decorate6(decorators, target, key, desc) {
+var import_nestjs_agent_core8 = require("@dudousxd/nestjs-agent-core");
+var import_common7 = require("@nestjs/common");
+function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate6, "_ts_decorate");
-function _ts_metadata6(k, v) {
+__name(_ts_decorate7, "_ts_decorate");
+function _ts_metadata7(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata6, "_ts_metadata");
-function _ts_param6(paramIndex, decorator) {
+__name(_ts_metadata7, "_ts_metadata");
+function _ts_param7(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param6, "_ts_param");
+__name(_ts_param7, "_ts_param");
 var ThreadsController = class {
   static {
     __name(this, "ThreadsController");
@@ -765,9 +947,21 @@ var ThreadsController = class {
     const actor = await this.actorResolver.resolve(req);
     return this.agent.forkThread(actor, id, messageId);
   }
-  async rename(req, id, body) {
+  /**
+  * Renames the thread and/or sets its default agent. `defaultAgent` is only present in the request
+  * body when the client actually sent the key (JSON has no `undefined`), so `'defaultAgent' in body`
+  * distinguishes "leave it alone" from "set it to null" (clear it) unambiguously.
+  */
+  async update(req, id, body) {
     const actor = await this.actorResolver.resolve(req);
-    await this.agent.renameThread(actor, id, body.title);
+    await this.agent.updateThread(actor, id, {
+      ...body.title !== void 0 ? {
+        title: body.title
+      } : {},
+      ..."defaultAgent" in body ? {
+        defaultAgent: body.defaultAgent ?? null
+      } : {}
+    });
     return {
       ok: true
     };
@@ -787,117 +981,117 @@ var ThreadsController = class {
     };
   }
 };
-_ts_decorate6([
-  (0, import_common6.Get)(),
-  _ts_param6(0, (0, import_common6.Req)()),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+_ts_decorate7([
+  (0, import_common7.Get)(),
+  _ts_param7(0, (0, import_common7.Req)()),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request
   ]),
-  _ts_metadata6("design:returntype", Promise)
+  _ts_metadata7("design:returntype", Promise)
 ], ThreadsController.prototype, "list", null);
-_ts_decorate6([
-  (0, import_common6.Get)(":id"),
-  _ts_param6(0, (0, import_common6.Req)()),
-  _ts_param6(1, (0, import_common6.Param)("id")),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+_ts_decorate7([
+  (0, import_common7.Get)(":id"),
+  _ts_param7(0, (0, import_common7.Req)()),
+  _ts_param7(1, (0, import_common7.Param)("id")),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata6("design:returntype", Promise)
+  _ts_metadata7("design:returntype", Promise)
 ], ThreadsController.prototype, "detail", null);
-_ts_decorate6([
-  (0, import_common6.Delete)(":id"),
-  _ts_param6(0, (0, import_common6.Req)()),
-  _ts_param6(1, (0, import_common6.Param)("id")),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+_ts_decorate7([
+  (0, import_common7.Delete)(":id"),
+  _ts_param7(0, (0, import_common7.Req)()),
+  _ts_param7(1, (0, import_common7.Param)("id")),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata6("design:returntype", Promise)
+  _ts_metadata7("design:returntype", Promise)
 ], ThreadsController.prototype, "remove", null);
-_ts_decorate6([
-  (0, import_common6.Post)(":id/fork-from/:messageId"),
-  _ts_param6(0, (0, import_common6.Req)()),
-  _ts_param6(1, (0, import_common6.Param)("id")),
-  _ts_param6(2, (0, import_common6.Param)("messageId")),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+_ts_decorate7([
+  (0, import_common7.Post)(":id/fork-from/:messageId"),
+  _ts_param7(0, (0, import_common7.Req)()),
+  _ts_param7(1, (0, import_common7.Param)("id")),
+  _ts_param7(2, (0, import_common7.Param)("messageId")),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     String
   ]),
-  _ts_metadata6("design:returntype", Promise)
+  _ts_metadata7("design:returntype", Promise)
 ], ThreadsController.prototype, "fork", null);
-_ts_decorate6([
-  (0, import_common6.Patch)(":id"),
-  _ts_param6(0, (0, import_common6.Req)()),
-  _ts_param6(1, (0, import_common6.Param)("id")),
-  _ts_param6(2, (0, import_common6.Body)()),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+_ts_decorate7([
+  (0, import_common7.Patch)(":id"),
+  _ts_param7(0, (0, import_common7.Req)()),
+  _ts_param7(1, (0, import_common7.Param)("id")),
+  _ts_param7(2, (0, import_common7.Body)()),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
-    typeof RenameThreadBody === "undefined" ? Object : RenameThreadBody
+    typeof UpdateThreadBody === "undefined" ? Object : UpdateThreadBody
   ]),
-  _ts_metadata6("design:returntype", Promise)
-], ThreadsController.prototype, "rename", null);
-_ts_decorate6([
-  (0, import_common6.Post)(":id/promote"),
-  _ts_param6(0, (0, import_common6.Req)()),
-  _ts_param6(1, (0, import_common6.Param)("id")),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+  _ts_metadata7("design:returntype", Promise)
+], ThreadsController.prototype, "update", null);
+_ts_decorate7([
+  (0, import_common7.Post)(":id/promote"),
+  _ts_param7(0, (0, import_common7.Req)()),
+  _ts_param7(1, (0, import_common7.Param)("id")),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata6("design:returntype", Promise)
+  _ts_metadata7("design:returntype", Promise)
 ], ThreadsController.prototype, "promote", null);
-_ts_decorate6([
-  (0, import_common6.Delete)(":id/from/:messageId"),
-  _ts_param6(0, (0, import_common6.Req)()),
-  _ts_param6(1, (0, import_common6.Param)("id")),
-  _ts_param6(2, (0, import_common6.Param)("messageId")),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+_ts_decorate7([
+  (0, import_common7.Delete)(":id/from/:messageId"),
+  _ts_param7(0, (0, import_common7.Req)()),
+  _ts_param7(1, (0, import_common7.Param)("id")),
+  _ts_param7(2, (0, import_common7.Param)("messageId")),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     String
   ]),
-  _ts_metadata6("design:returntype", Promise)
+  _ts_metadata7("design:returntype", Promise)
 ], ThreadsController.prototype, "truncateFrom", null);
-ThreadsController = _ts_decorate6([
-  (0, import_common6.Controller)("threads"),
-  _ts_param6(1, (0, import_common6.Inject)(import_nestjs_agent_core7.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+ThreadsController = _ts_decorate7([
+  (0, import_common7.Controller)("threads"),
+  _ts_param7(1, (0, import_common7.Inject)(import_nestjs_agent_core8.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], ThreadsController);
 
 // src/controller/tool-call.controller.ts
-var import_nestjs_agent_core8 = require("@dudousxd/nestjs-agent-core");
-var import_common7 = require("@nestjs/common");
-function _ts_decorate7(decorators, target, key, desc) {
+var import_nestjs_agent_core9 = require("@dudousxd/nestjs-agent-core");
+var import_common8 = require("@nestjs/common");
+function _ts_decorate8(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate7, "_ts_decorate");
-function _ts_metadata7(k, v) {
+__name(_ts_decorate8, "_ts_decorate");
+function _ts_metadata8(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata7, "_ts_metadata");
-function _ts_param7(paramIndex, decorator) {
+__name(_ts_metadata8, "_ts_metadata");
+function _ts_param8(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param7, "_ts_param");
+__name(_ts_param8, "_ts_param");
 var ToolCallController = class {
   static {
     __name(this, "ToolCallController");
@@ -923,41 +1117,41 @@ var ToolCallController = class {
     };
   }
 };
-_ts_decorate7([
-  (0, import_common7.Post)("approve"),
-  _ts_param7(0, (0, import_common7.Req)()),
-  _ts_param7(1, (0, import_common7.Body)()),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+_ts_decorate8([
+  (0, import_common8.Post)("approve"),
+  _ts_param8(0, (0, import_common8.Req)()),
+  _ts_param8(1, (0, import_common8.Body)()),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof ApproveBody === "undefined" ? Object : ApproveBody
   ]),
-  _ts_metadata7("design:returntype", Promise)
+  _ts_metadata8("design:returntype", Promise)
 ], ToolCallController.prototype, "approve", null);
-_ts_decorate7([
-  (0, import_common7.Post)("reject"),
-  _ts_param7(0, (0, import_common7.Req)()),
-  _ts_param7(1, (0, import_common7.Body)()),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+_ts_decorate8([
+  (0, import_common8.Post)("reject"),
+  _ts_param8(0, (0, import_common8.Req)()),
+  _ts_param8(1, (0, import_common8.Body)()),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof RejectBody === "undefined" ? Object : RejectBody
   ]),
-  _ts_metadata7("design:returntype", Promise)
+  _ts_metadata8("design:returntype", Promise)
 ], ToolCallController.prototype, "reject", null);
-ToolCallController = _ts_decorate7([
-  (0, import_common7.Controller)("tool-call"),
-  _ts_param7(1, (0, import_common7.Inject)(import_nestjs_agent_core8.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+ToolCallController = _ts_decorate8([
+  (0, import_common8.Controller)("tool-call"),
+  _ts_param8(1, (0, import_common8.Inject)(import_nestjs_agent_core9.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], ToolCallController);
 
 // src/discovery/agent-discovery.service.ts
-var import_nestjs_agent_core9 = require("@dudousxd/nestjs-agent-core");
-var import_common8 = require("@nestjs/common");
+var import_nestjs_agent_core10 = require("@dudousxd/nestjs-agent-core");
+var import_common9 = require("@nestjs/common");
 var import_core = require("@nestjs/core");
 
 // src/decorator/agent.decorator.ts
@@ -992,23 +1186,23 @@ function SystemPromptContributor() {
 __name(SystemPromptContributor, "SystemPromptContributor");
 
 // src/discovery/agent-discovery.service.ts
-function _ts_decorate8(decorators, target, key, desc) {
+function _ts_decorate9(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate8, "_ts_decorate");
-function _ts_metadata8(k, v) {
+__name(_ts_decorate9, "_ts_decorate");
+function _ts_metadata9(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata8, "_ts_metadata");
-function _ts_param8(paramIndex, decorator) {
+__name(_ts_metadata9, "_ts_metadata");
+function _ts_param9(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param8, "_ts_param");
+__name(_ts_param9, "_ts_param");
 var AgentDiscoveryService = class _AgentDiscoveryService {
   static {
     __name(this, "AgentDiscoveryService");
@@ -1017,7 +1211,7 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
   scanner;
   registry;
   contributors;
-  logger = new import_common8.Logger(_AgentDiscoveryService.name);
+  logger = new import_common9.Logger(_AgentDiscoveryService.name);
   constructor(discovery, scanner, registry, contributors) {
     this.discovery = discovery;
     this.scanner = scanner;
@@ -1105,22 +1299,22 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
     return (ctx) => candidate.call(instance, ctx);
   }
 };
-AgentDiscoveryService = _ts_decorate8([
-  (0, import_common8.Injectable)(),
-  _ts_param8(2, (0, import_common8.Inject)(import_nestjs_agent_core9.AGENT_REGISTRY)),
-  _ts_param8(3, (0, import_common8.Inject)(import_nestjs_agent_core9.AGENT_PROMPT_CONTRIBUTORS)),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+AgentDiscoveryService = _ts_decorate9([
+  (0, import_common9.Injectable)(),
+  _ts_param9(2, (0, import_common9.Inject)(import_nestjs_agent_core10.AGENT_REGISTRY)),
+  _ts_param9(3, (0, import_common9.Inject)(import_nestjs_agent_core10.AGENT_PROMPT_CONTRIBUTORS)),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof import_core.DiscoveryService === "undefined" ? Object : import_core.DiscoveryService,
     typeof import_core.MetadataScanner === "undefined" ? Object : import_core.MetadataScanner,
-    typeof import_nestjs_agent_core9.AgentRegistry === "undefined" ? Object : import_nestjs_agent_core9.AgentRegistry,
+    typeof import_nestjs_agent_core10.AgentRegistry === "undefined" ? Object : import_nestjs_agent_core10.AgentRegistry,
     Array
   ])
 ], AgentDiscoveryService);
 
 // src/discovery/ai-tool-discovery.service.ts
-var import_nestjs_agent_core10 = require("@dudousxd/nestjs-agent-core");
-var import_common9 = require("@nestjs/common");
+var import_nestjs_agent_core11 = require("@dudousxd/nestjs-agent-core");
+var import_common10 = require("@nestjs/common");
 var import_core2 = require("@nestjs/core");
 var import_zod = require("zod");
 
@@ -1169,23 +1363,23 @@ function provideAgentTool(factoryOrTool, inject) {
 __name(provideAgentTool, "provideAgentTool");
 
 // src/discovery/ai-tool-discovery.service.ts
-function _ts_decorate9(decorators, target, key, desc) {
+function _ts_decorate10(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate9, "_ts_decorate");
-function _ts_metadata9(k, v) {
+__name(_ts_decorate10, "_ts_decorate");
+function _ts_metadata10(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata9, "_ts_metadata");
-function _ts_param9(paramIndex, decorator) {
+__name(_ts_metadata10, "_ts_metadata");
+function _ts_param10(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param9, "_ts_param");
+__name(_ts_param10, "_ts_param");
 var AiToolDiscoveryService = class _AiToolDiscoveryService {
   static {
     __name(this, "AiToolDiscoveryService");
@@ -1194,7 +1388,7 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
   registry;
   agents;
   options;
-  logger = new import_common9.Logger(_AiToolDiscoveryService.name);
+  logger = new import_common10.Logger(_AiToolDiscoveryService.name);
   constructor(discovery, registry, agents, options) {
     this.discovery = discovery;
     this.registry = registry;
@@ -1292,13 +1486,13 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
     return true;
   }
 };
-AiToolDiscoveryService = _ts_decorate9([
-  (0, import_common9.Injectable)(),
-  _ts_param9(1, (0, import_common9.Inject)(import_nestjs_agent_core10.AGENT_TOOL_REGISTRY)),
-  _ts_param9(2, (0, import_common9.Inject)(import_nestjs_agent_core10.AGENT_REGISTRY)),
-  _ts_param9(3, (0, import_common9.Inject)(import_nestjs_agent_core10.AGENT_OPTIONS)),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+AiToolDiscoveryService = _ts_decorate10([
+  (0, import_common10.Injectable)(),
+  _ts_param10(1, (0, import_common10.Inject)(import_nestjs_agent_core11.AGENT_TOOL_REGISTRY)),
+  _ts_param10(2, (0, import_common10.Inject)(import_nestjs_agent_core11.AGENT_REGISTRY)),
+  _ts_param10(3, (0, import_common10.Inject)(import_nestjs_agent_core11.AGENT_OPTIONS)),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof import_core2.DiscoveryService === "undefined" ? Object : import_core2.DiscoveryService,
     typeof ToolRegistry === "undefined" ? Object : ToolRegistry,
     typeof AgentRegistry === "undefined" ? Object : AgentRegistry,
@@ -1307,7 +1501,7 @@ AiToolDiscoveryService = _ts_decorate9([
 ], AiToolDiscoveryService);
 
 // src/in-process-sink.ts
-var import_nestjs_agent_core11 = require("@dudousxd/nestjs-agent-core");
+var import_nestjs_agent_core12 = require("@dudousxd/nestjs-agent-core");
 var InProcessTokenStreamSink = class {
   static {
     __name(this, "InProcessTokenStreamSink");
@@ -1362,7 +1556,7 @@ var InProcessTokenStreamSink = class {
       }
       if (buf.ended) {
         if (buf.failure !== void 0) {
-          throw new import_nestjs_agent_core11.AgentStreamError(buf.failure);
+          throw new import_nestjs_agent_core12.AgentStreamError(buf.failure);
         }
         return;
       }
@@ -1398,32 +1592,32 @@ var LedgerQuotaStore = class {
 };
 
 // src/runner/inline-agent-runner.ts
-var import_nestjs_agent_core12 = require("@dudousxd/nestjs-agent-core");
-var import_common10 = require("@nestjs/common");
-function _ts_decorate10(decorators, target, key, desc) {
+var import_nestjs_agent_core13 = require("@dudousxd/nestjs-agent-core");
+var import_common11 = require("@nestjs/common");
+function _ts_decorate11(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate10, "_ts_decorate");
-function _ts_metadata10(k, v) {
+__name(_ts_decorate11, "_ts_decorate");
+function _ts_metadata11(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata10, "_ts_metadata");
-function _ts_param10(paramIndex, decorator) {
+__name(_ts_metadata11, "_ts_metadata");
+function _ts_param11(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param10, "_ts_param");
+__name(_ts_param11, "_ts_param");
 var InlineAgentRunner = class _InlineAgentRunner {
   static {
     __name(this, "InlineAgentRunner");
   }
   factory;
   store;
-  logger = new import_common10.Logger(_InlineAgentRunner.name);
+  logger = new import_common11.Logger(_InlineAgentRunner.name);
   pending = /* @__PURE__ */ new Map();
   constructor(factory, store) {
     this.factory = factory;
@@ -1434,18 +1628,19 @@ var InlineAgentRunner = class _InlineAgentRunner {
     const day = input.day ?? utcDay();
     const deps = this.factory.forAgent(input.agentName);
     const hooks = this.topLevelHooks(runId, deps, input.actor, day);
-    void (0, import_nestjs_agent_core12.runAgentLoop)({
+    void (0, import_nestjs_agent_core13.runAgentLoop)({
       ...deps,
       day
-    }, input, hooks).catch(async (error) => {
+    }, input, hooks).then(() => this.store.setActiveStream(input.threadId, null)).catch(async (error) => {
       const message = error instanceof Error ? error.message : String(error);
-      const code = error instanceof import_nestjs_agent_core12.QuotaExceededError ? "quota_exceeded" : "run_failed";
+      const code = error instanceof import_nestjs_agent_core13.QuotaExceededError ? "quota_exceeded" : "run_failed";
       this.logger.error(`agent run ${runId} failed (${code}): ${message}`);
-      (0, import_nestjs_agent_core12.publishAgentRunFailed)({
+      (0, import_nestjs_agent_core13.publishAgentRunFailed)({
         runId,
         code,
         message
       });
+      await this.store.setActiveStream(input.threadId, null);
       const writer = await deps.sink.open(runId);
       await writer.fail({
         code,
@@ -1503,98 +1698,102 @@ var InlineAgentRunner = class _InlineAgentRunner {
       step: /* @__PURE__ */ __name((_name, fn) => fn(), "step"),
       runAgent: /* @__PURE__ */ __name((childName, childTask) => this.runNested(childName, childTask, actor, day, depth + 1, sinkRunId), "runAgent")
     };
-    return (0, import_nestjs_agent_core12.runAgentLoop)({
-      ...deps,
-      day
-    }, {
-      threadId: subThread.id,
-      actor,
-      userText: task,
-      agentName,
-      day,
-      delegationDepth: depth,
-      sinkRunId
-    }, hooks);
+    try {
+      return await (0, import_nestjs_agent_core13.runAgentLoop)({
+        ...deps,
+        day
+      }, {
+        threadId: subThread.id,
+        actor,
+        userText: task,
+        agentName,
+        day,
+        delegationDepth: depth,
+        sinkRunId
+      }, hooks);
+    } finally {
+      await this.store.setActiveStream(subThread.id, null);
+    }
   }
 };
-InlineAgentRunner = _ts_decorate10([
-  (0, import_common10.Injectable)(),
-  _ts_param10(0, (0, import_common10.Inject)(import_nestjs_agent_core12.AGENT_DEPS_FACTORY)),
-  _ts_param10(1, (0, import_common10.Inject)(import_nestjs_agent_core12.AGENT_STORE)),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
+InlineAgentRunner = _ts_decorate11([
+  (0, import_common11.Injectable)(),
+  _ts_param11(0, (0, import_common11.Inject)(import_nestjs_agent_core13.AGENT_DEPS_FACTORY)),
+  _ts_param11(1, (0, import_common11.Inject)(import_nestjs_agent_core13.AGENT_STORE)),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
     typeof AgentStore === "undefined" ? Object : AgentStore
   ])
 ], InlineAgentRunner);
 
 // src/agent.module.ts
-function _ts_decorate11(decorators, target, key, desc) {
+function _ts_decorate12(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate11, "_ts_decorate");
+__name(_ts_decorate12, "_ts_decorate");
 var DEFAULT_PATH = "agent";
 function sharedProviders(durable, includeStore) {
   const providers = [
     {
-      provide: import_nestjs_agent_core13.AGENT_TOOL_REGISTRY,
-      useFactory: /* @__PURE__ */ __name(() => new import_nestjs_agent_core13.ToolRegistry(), "useFactory")
+      provide: import_nestjs_agent_core14.AGENT_TOOL_REGISTRY,
+      useFactory: /* @__PURE__ */ __name(() => new import_nestjs_agent_core14.ToolRegistry(), "useFactory")
     },
     // Starts empty; AgentDiscoveryService populates it from `@Agent`-decorated providers at boot.
     {
-      provide: import_nestjs_agent_core13.AGENT_REGISTRY,
-      useFactory: /* @__PURE__ */ __name(() => new import_nestjs_agent_core13.AgentRegistry(), "useFactory")
+      provide: import_nestjs_agent_core14.AGENT_REGISTRY,
+      useFactory: /* @__PURE__ */ __name(() => new import_nestjs_agent_core14.AgentRegistry(), "useFactory")
     },
     // A shared, mutable list AgentDiscoveryService fills with `@SystemPromptContributor()` methods.
     {
-      provide: import_nestjs_agent_core13.AGENT_PROMPT_CONTRIBUTORS,
+      provide: import_nestjs_agent_core14.AGENT_PROMPT_CONTRIBUTORS,
       useFactory: /* @__PURE__ */ __name(() => [], "useFactory")
     },
     {
-      provide: import_nestjs_agent_core13.AGENT_SINK,
+      provide: import_nestjs_agent_core14.AGENT_SINK,
       useFactory: /* @__PURE__ */ __name((options) => options.sink ?? new InProcessTokenStreamSink(), "useFactory"),
       inject: [
-        import_nestjs_agent_core13.AGENT_OPTIONS
+        import_nestjs_agent_core14.AGENT_OPTIONS
       ]
     },
     {
-      provide: import_nestjs_agent_core13.AGENT_ROLES_POLICY,
-      useFactory: /* @__PURE__ */ __name((options) => options.rolesPolicy ?? new import_nestjs_agent_core13.DefaultRolesPolicy(options.defaultRoles), "useFactory"),
+      provide: import_nestjs_agent_core14.AGENT_ROLES_POLICY,
+      useFactory: /* @__PURE__ */ __name((options) => options.rolesPolicy ?? new import_nestjs_agent_core14.DefaultRolesPolicy(options.defaultRoles), "useFactory"),
       inject: [
-        import_nestjs_agent_core13.AGENT_OPTIONS
+        import_nestjs_agent_core14.AGENT_OPTIONS
       ]
     },
     {
-      provide: import_nestjs_agent_core13.AGENT_ACTOR_RESOLVER,
+      provide: import_nestjs_agent_core14.AGENT_ACTOR_RESOLVER,
       useFactory: /* @__PURE__ */ __name((options) => options.actorResolver, "useFactory"),
       inject: [
-        import_nestjs_agent_core13.AGENT_OPTIONS
+        import_nestjs_agent_core14.AGENT_OPTIONS
       ]
     },
     {
-      provide: import_nestjs_agent_core13.AGENT_MODEL,
+      provide: import_nestjs_agent_core14.AGENT_MODEL,
       useFactory: /* @__PURE__ */ __name((o) => o.model, "useFactory"),
       inject: [
-        import_nestjs_agent_core13.AGENT_OPTIONS
+        import_nestjs_agent_core14.AGENT_OPTIONS
       ]
     },
     {
       // An explicit `quota` wins; otherwise `quotaLimitTokens` binds the built-in ledger-backed
       // store; otherwise quotas are off (undefined). The ledger store reads the same usage rows
       // the loop already writes, so enforcement needs no extra shared state across replicas.
-      provide: import_nestjs_agent_core13.AGENT_QUOTA_STORE,
+      provide: import_nestjs_agent_core14.AGENT_QUOTA_STORE,
       useFactory: /* @__PURE__ */ __name((o, store) => o.quota ?? (o.quotaLimitTokens !== void 0 ? new LedgerQuotaStore(store, o.quotaLimitTokens) : void 0), "useFactory"),
       inject: [
-        import_nestjs_agent_core13.AGENT_OPTIONS,
-        import_nestjs_agent_core13.AGENT_STORE
+        import_nestjs_agent_core14.AGENT_OPTIONS,
+        import_nestjs_agent_core14.AGENT_STORE
       ]
     },
     AgentDepsFactory2,
     {
-      provide: import_nestjs_agent_core13.AGENT_DEPS_FACTORY,
+      provide: import_nestjs_agent_core14.AGENT_DEPS_FACTORY,
       useExisting: AgentDepsFactory2
     },
     // Populates the registry + contributors (onModuleInit) BEFORE AiToolDiscoveryService synthesizes
@@ -1606,16 +1805,16 @@ function sharedProviders(durable, includeStore) {
   ];
   if (includeStore) {
     providers.push({
-      provide: import_nestjs_agent_core13.AGENT_STORE,
+      provide: import_nestjs_agent_core14.AGENT_STORE,
       useFactory: /* @__PURE__ */ __name((o) => o.store, "useFactory"),
       inject: [
-        import_nestjs_agent_core13.AGENT_OPTIONS
+        import_nestjs_agent_core14.AGENT_OPTIONS
       ]
     });
   }
   if (durable) {
     providers.push({
-      provide: import_nestjs_agent_core13.AGENT_RUNNER,
+      provide: import_nestjs_agent_core14.AGENT_RUNNER,
       useFactory: /* @__PURE__ */ __name((durableRunner) => {
         if (durableRunner === void 0) {
           throw new Error("AgentModule.forRoot({ durable: true }) requires importing AgentDurableModule from '@dudousxd/nestjs-agent/durable' (alongside a configured DurableModule). It was not found.");
@@ -1624,14 +1823,14 @@ function sharedProviders(durable, includeStore) {
       }, "useFactory"),
       inject: [
         {
-          token: import_nestjs_agent_core13.AGENT_DURABLE_RUNNER,
+          token: import_nestjs_agent_core14.AGENT_DURABLE_RUNNER,
           optional: true
         }
       ]
     });
   } else {
     providers.push({
-      provide: import_nestjs_agent_core13.AGENT_RUNNER,
+      provide: import_nestjs_agent_core14.AGENT_RUNNER,
       useExisting: InlineAgentRunner
     });
   }
@@ -1640,32 +1839,57 @@ function sharedProviders(durable, includeStore) {
 __name(sharedProviders, "sharedProviders");
 function exportsFor(includeStore) {
   return [
-    import_nestjs_agent_core13.AGENT_OPTIONS,
-    import_nestjs_agent_core13.AGENT_TOOL_REGISTRY,
-    import_nestjs_agent_core13.AGENT_REGISTRY,
-    import_nestjs_agent_core13.AGENT_SINK,
-    import_nestjs_agent_core13.AGENT_ROLES_POLICY,
-    import_nestjs_agent_core13.AGENT_ACTOR_RESOLVER,
-    import_nestjs_agent_core13.AGENT_MODEL,
+    import_nestjs_agent_core14.AGENT_OPTIONS,
+    import_nestjs_agent_core14.AGENT_TOOL_REGISTRY,
+    import_nestjs_agent_core14.AGENT_REGISTRY,
+    import_nestjs_agent_core14.AGENT_SINK,
+    import_nestjs_agent_core14.AGENT_ROLES_POLICY,
+    import_nestjs_agent_core14.AGENT_ACTOR_RESOLVER,
+    import_nestjs_agent_core14.AGENT_MODEL,
     ...includeStore ? [
-      import_nestjs_agent_core13.AGENT_STORE
+      import_nestjs_agent_core14.AGENT_STORE
     ] : [],
-    import_nestjs_agent_core13.AGENT_QUOTA_STORE,
-    import_nestjs_agent_core13.AGENT_PROMPT_CONTRIBUTORS,
-    import_nestjs_agent_core13.AGENT_DEPS_FACTORY,
+    import_nestjs_agent_core14.AGENT_QUOTA_STORE,
+    import_nestjs_agent_core14.AGENT_PROMPT_CONTRIBUTORS,
+    import_nestjs_agent_core14.AGENT_DEPS_FACTORY,
     AgentDepsFactory2,
     AgentService,
     InlineAgentRunner
   ];
 }
 __name(exportsFor, "exportsFor");
-var CONTROLLERS = [
+var BASE_CONTROLLERS = [
   ChatController,
   ThreadsController,
   ToolCallController,
   QuotaController,
   AgentsController
 ];
+var GUARDABLE_CONTROLLERS = [
+  ...BASE_CONTROLLERS,
+  AttachmentsController
+];
+function controllersFor(mountAttachments) {
+  return mountAttachments ? [
+    ...BASE_CONTROLLERS,
+    AttachmentsController
+  ] : BASE_CONTROLLERS;
+}
+__name(controllersFor, "controllersFor");
+var GUARDS_METADATA = "__guards__";
+function applyGuards(guards) {
+  const resolved = guards ?? [];
+  for (const controller of GUARDABLE_CONTROLLERS) {
+    Reflect.defineMetadata(GUARDS_METADATA, resolved, controller);
+  }
+}
+__name(applyGuards, "applyGuards");
+function guardProviders(guards) {
+  return [
+    ...new Set(guards ?? [])
+  ];
+}
+__name(guardProviders, "guardProviders");
 function routerFor(path) {
   return import_core3.RouterModule.register([
     {
@@ -1682,6 +1906,7 @@ var AgentModule = class _AgentModule {
   static forRoot(options) {
     const path = options.path ?? DEFAULT_PATH;
     const includeStore = options.store !== void 0;
+    applyGuards(options.guards);
     return {
       module: _AgentModule,
       global: true,
@@ -1689,13 +1914,14 @@ var AgentModule = class _AgentModule {
         import_core3.DiscoveryModule,
         routerFor(path)
       ],
-      controllers: CONTROLLERS,
+      controllers: controllersFor(options.attachments?.upload === true),
       providers: [
         {
-          provide: import_nestjs_agent_core13.AGENT_OPTIONS,
+          provide: import_nestjs_agent_core14.AGENT_OPTIONS,
           useValue: options
         },
-        ...sharedProviders(options.durable ?? false, includeStore)
+        ...sharedProviders(options.durable ?? false, includeStore),
+        ...guardProviders(options.guards)
       ],
       exports: exportsFor(includeStore)
     };
@@ -1703,6 +1929,7 @@ var AgentModule = class _AgentModule {
   static forRootAsync(options) {
     const path = options.path ?? DEFAULT_PATH;
     const includeStore = options.externalStore !== true;
+    applyGuards(options.guards);
     return {
       module: _AgentModule,
       global: true,
@@ -1711,22 +1938,23 @@ var AgentModule = class _AgentModule {
         routerFor(path),
         ...options.imports ?? []
       ],
-      controllers: CONTROLLERS,
+      controllers: controllersFor(options.attachmentsUpload === true),
       providers: [
         {
-          provide: import_nestjs_agent_core13.AGENT_OPTIONS,
+          provide: import_nestjs_agent_core14.AGENT_OPTIONS,
           useFactory: options.useFactory,
           inject: options.inject ?? []
         },
-        ...sharedProviders(options.durable ?? false, includeStore)
+        ...sharedProviders(options.durable ?? false, includeStore),
+        ...guardProviders(options.guards)
       ],
       exports: exportsFor(includeStore)
     };
   }
 };
-AgentModule = _ts_decorate11([
-  (0, import_common11.Global)(),
-  (0, import_common11.Module)({})
+AgentModule = _ts_decorate12([
+  (0, import_common12.Global)(),
+  (0, import_common12.Module)({})
 ], AgentModule);
 
 // src/resolver/header-actor-resolver.ts
@@ -1773,6 +2001,9 @@ __reExport(index_exports, require("@dudousxd/nestjs-agent-core"), module.exports
   AgentService,
   AiTool,
   AiToolDiscoveryService,
+  AttachmentsController,
+  DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES,
+  DEFAULT_MAX_ATTACHMENT_BYTES,
   HeaderActorResolver,
   InProcessTokenStreamSink,
   InlineAgentRunner,