@dudousxd/nestjs-agent 0.5.0 → 0.7.0

package/dist/index.cjs

@@ -26,6 +26,7 @@ __export(index_exports, {
   AGENT_TOOL_BRAND: () => AGENT_TOOL_BRAND,
   AI_TOOL_METADATA: () => AI_TOOL_METADATA,
   Agent: () => Agent,
+  AgentApprovalPortAdapter: () => AgentApprovalPortAdapter,
   AgentDepsFactory: () => AgentDepsFactory2,
   AgentDiscoveryService: () => AgentDiscoveryService,
   AgentModule: () => AgentModule,
@@ -53,7 +54,7 @@ module.exports = __toCommonJS(index_exports);
 
 // src/agent.module.ts
 var import_nestjs_agent_core14 = require("@dudousxd/nestjs-agent-core");
-var import_common12 = require("@nestjs/common");
+var import_common13 = require("@nestjs/common");
 var import_core3 = require("@nestjs/core");
 
 // src/agent-deps.factory.ts
@@ -308,20 +309,32 @@ var AgentService = class {
     return this.deps.forAgent().sink.subscribe(runId);
   }
   async approve(actor, toolCallId) {
-    const runId = await this.runForOwnedToolCall(actor, toolCallId);
-    return this.runner.signal(runId, toolCallId, {
+    await this.assertOwnsToolCall(actor, toolCallId);
+    return this.signalToolCall(toolCallId, {
       approved: true
     });
   }
   async reject(actor, toolCallId, reason) {
-    const runId = await this.runForOwnedToolCall(actor, toolCallId);
-    return this.runner.signal(runId, toolCallId, {
+    await this.assertOwnsToolCall(actor, toolCallId);
+    return this.signalToolCall(toolCallId, {
       approved: false,
       ...reason !== void 0 ? {
         reason
       } : {}
     });
   }
+  /**
+  * The decision core behind approve/reject, WITHOUT an ownership check: resolves the run
+  * currently awaiting `toolCallId` and signals it. `approve`/`reject` above call this after their
+  * own `assertOwnsToolCall` gate; the console `AgentApprovalPort` adapter (bound by `AgentModule`)
+  * calls it directly — a console caller is already authorized by the dashboard's own guards, and
+  * re-deriving thread ownership here would reject a legitimate operator decision (an operator is
+  * not the thread's own actor).
+  */
+  async signalToolCall(toolCallId, decision) {
+    const runId = await this.resolveRunForToolCall(toolCallId);
+    return this.runner.signal(runId, toolCallId, decision);
+  }
   async cancel(actor, runId) {
     await this.assertOwnsActiveStream(actor, runId);
     return this.runner.cancel(runId);
@@ -469,12 +482,11 @@ var AgentService = class {
     }
   }
   /**
-  * Authorization + routing seam for HITL approve/reject: assert the caller owns the tool call's
-  * thread, then resolve the run currently awaiting that call (its thread's active stream). That run
-  * is the sub-agent's own child run when the pending call belongs to a delegated agent — the client
-  * never knows or supplies a runId; it is derived here from the tool call alone.
+  * Authorization seam for HITL approve/reject: the caller must own the tool call's thread. Split
+  * out from run resolution (see {@link resolveRunForToolCall}) so the console `AgentApprovalPort`
+  * adapter can resolve+signal a decision WITHOUT this check — it is authorized upstream instead.
   */
-  async runForOwnedToolCall(actor, toolCallId) {
+  async assertOwnsToolCall(actor, toolCallId) {
     const owner = await this.store.ownerOfToolCall(toolCallId);
     if (owner === null) {
       throw new import_common2.NotFoundException(`tool call ${toolCallId} not found`);
@@ -482,6 +494,13 @@ var AgentService = class {
     if (owner !== actor.id) {
       throw new import_common2.ForbiddenException("tool call belongs to another actor");
     }
+  }
+  /**
+  * Resolve the run currently awaiting `toolCallId` (its thread's active stream). That run is the
+  * sub-agent's own child run when the pending call belongs to a delegated agent — the client never
+  * knows or supplies a runId; it is derived here from the tool call alone.
+  */
+  async resolveRunForToolCall(toolCallId) {
     const runId = await this.store.runForToolCall(toolCallId);
     if (runId === null) {
       throw new import_common2.NotFoundException(`tool call ${toolCallId} has no active run to signal`);
@@ -514,8 +533,7 @@ AgentService = _ts_decorate2([
   ])
 ], AgentService);
 
-// src/controller/agents.controller.ts
-var import_nestjs_agent_core4 = require("@dudousxd/nestjs-agent-core");
+// src/approval-port.adapter.ts
 var import_common3 = require("@nestjs/common");
 function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -528,6 +546,56 @@ function _ts_metadata3(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
 __name(_ts_metadata3, "_ts_metadata");
+var AgentApprovalPortAdapter = class {
+  static {
+    __name(this, "AgentApprovalPortAdapter");
+  }
+  agent;
+  constructor(agent) {
+    this.agent = agent;
+  }
+  async approve(toolCallId, opts) {
+    await this.agent.signalToolCall(toolCallId, {
+      approved: true,
+      ...opts?.executedByRef !== void 0 ? {
+        executedByRef: opts.executedByRef
+      } : {}
+    });
+  }
+  async reject(toolCallId, opts) {
+    await this.agent.signalToolCall(toolCallId, {
+      approved: false,
+      ...opts?.executedByRef !== void 0 ? {
+        executedByRef: opts.executedByRef
+      } : {},
+      ...opts?.reason !== void 0 ? {
+        reason: opts.reason
+      } : {}
+    });
+  }
+};
+AgentApprovalPortAdapter = _ts_decorate3([
+  (0, import_common3.Injectable)(),
+  _ts_metadata3("design:type", Function),
+  _ts_metadata3("design:paramtypes", [
+    typeof AgentService === "undefined" ? Object : AgentService
+  ])
+], AgentApprovalPortAdapter);
+
+// src/controller/agents.controller.ts
+var import_nestjs_agent_core4 = require("@dudousxd/nestjs-agent-core");
+var import_common4 = require("@nestjs/common");
+function _ts_decorate4(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate4, "_ts_decorate");
+function _ts_metadata4(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata4, "_ts_metadata");
 function _ts_param3(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
@@ -555,18 +623,18 @@ var AgentsController = class {
     }));
   }
 };
-_ts_decorate3([
-  (0, import_common3.Get)(),
-  _ts_metadata3("design:type", Function),
-  _ts_metadata3("design:paramtypes", []),
-  _ts_metadata3("design:returntype", Array)
+_ts_decorate4([
+  (0, import_common4.Get)(),
+  _ts_metadata4("design:type", Function),
+  _ts_metadata4("design:paramtypes", []),
+  _ts_metadata4("design:returntype", Array)
 ], AgentsController.prototype, "list", null);
-AgentsController = _ts_decorate3([
-  (0, import_common3.Controller)("agents"),
-  _ts_param3(0, (0, import_common3.Inject)(import_nestjs_agent_core4.AGENT_REGISTRY)),
-  _ts_param3(1, (0, import_common3.Inject)(import_nestjs_agent_core4.AGENT_DEPS_FACTORY)),
-  _ts_metadata3("design:type", Function),
-  _ts_metadata3("design:paramtypes", [
+AgentsController = _ts_decorate4([
+  (0, import_common4.Controller)("agents"),
+  _ts_param3(0, (0, import_common4.Inject)(import_nestjs_agent_core4.AGENT_REGISTRY)),
+  _ts_param3(1, (0, import_common4.Inject)(import_nestjs_agent_core4.AGENT_DEPS_FACTORY)),
+  _ts_metadata4("design:type", Function),
+  _ts_metadata4("design:paramtypes", [
     typeof import_nestjs_agent_core4.AgentRegistry === "undefined" ? Object : import_nestjs_agent_core4.AgentRegistry,
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory
   ])
@@ -574,19 +642,19 @@ AgentsController = _ts_decorate3([
 
 // src/controller/attachments.controller.ts
 var import_nestjs_agent_core5 = require("@dudousxd/nestjs-agent-core");
-var import_common4 = require("@nestjs/common");
+var import_common5 = require("@nestjs/common");
 var import_platform_express = require("@nestjs/platform-express");
-function _ts_decorate4(decorators, target, key, desc) {
+function _ts_decorate5(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate4, "_ts_decorate");
-function _ts_metadata4(k, v) {
+__name(_ts_decorate5, "_ts_decorate");
+function _ts_metadata5(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata4, "_ts_metadata");
+__name(_ts_metadata5, "_ts_metadata");
 function _ts_param4(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
@@ -628,18 +696,18 @@ var AttachmentsController = class {
   }
   async upload(req, file) {
     if (this.staging === void 0) {
-      throw new import_common4.NotImplementedException("Attachment upload is not configured on this server.");
+      throw new import_common5.NotImplementedException("Attachment upload is not configured on this server.");
     }
     if (file === void 0) {
-      throw new import_common4.BadRequestException('multipart field "file" is required');
+      throw new import_common5.BadRequestException('multipart field "file" is required');
     }
     const allowedContentTypes = this.options.attachments?.allowedContentTypes ?? DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES;
     if (!allowedContentTypes.includes(file.mimetype)) {
-      throw new import_common4.UnsupportedMediaTypeException(`content type "${file.mimetype}" is not allowed (allowed: ${allowedContentTypes.join(", ")})`);
+      throw new import_common5.UnsupportedMediaTypeException(`content type "${file.mimetype}" is not allowed (allowed: ${allowedContentTypes.join(", ")})`);
     }
     const maxBytes = this.options.attachments?.maxBytes ?? DEFAULT_MAX_ATTACHMENT_BYTES;
     if (file.size > maxBytes) {
-      throw new import_common4.PayloadTooLargeException(`file exceeds the ${maxBytes}-byte limit`);
+      throw new import_common5.PayloadTooLargeException(`file exceeds the ${maxBytes}-byte limit`);
     }
     const actor = await this.actorResolver.resolve(req);
     return this.staging.stage({
@@ -651,26 +719,26 @@ var AttachmentsController = class {
     });
   }
 };
-_ts_decorate4([
-  (0, import_common4.Post)(),
-  (0, import_common4.UseInterceptors)((0, import_platform_express.FileInterceptor)("file")),
-  _ts_param4(0, (0, import_common4.Req)()),
-  _ts_param4(1, (0, import_common4.UploadedFile)()),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
+_ts_decorate5([
+  (0, import_common5.Post)(),
+  (0, import_common5.UseInterceptors)((0, import_platform_express.FileInterceptor)("file")),
+  _ts_param4(0, (0, import_common5.Req)()),
+  _ts_param4(1, (0, import_common5.UploadedFile)()),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     Object
   ]),
-  _ts_metadata4("design:returntype", Promise)
+  _ts_metadata5("design:returntype", Promise)
 ], AttachmentsController.prototype, "upload", null);
-AttachmentsController = _ts_decorate4([
-  (0, import_common4.Controller)("attachments"),
-  _ts_param4(0, (0, import_common4.Inject)(import_nestjs_agent_core5.AGENT_OPTIONS)),
-  _ts_param4(1, (0, import_common4.Inject)(import_nestjs_agent_core5.AGENT_ACTOR_RESOLVER)),
-  _ts_param4(2, (0, import_common4.Optional)()),
-  _ts_param4(2, (0, import_common4.Inject)(import_nestjs_agent_core5.AGENT_ATTACHMENT_STAGING)),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
+AttachmentsController = _ts_decorate5([
+  (0, import_common5.Controller)("attachments"),
+  _ts_param4(0, (0, import_common5.Inject)(import_nestjs_agent_core5.AGENT_OPTIONS)),
+  _ts_param4(1, (0, import_common5.Inject)(import_nestjs_agent_core5.AGENT_ACTOR_RESOLVER)),
+  _ts_param4(2, (0, import_common5.Optional)()),
+  _ts_param4(2, (0, import_common5.Inject)(import_nestjs_agent_core5.AGENT_ATTACHMENT_STAGING)),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
     typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
     typeof ActorResolver === "undefined" ? Object : ActorResolver,
     Object
@@ -679,18 +747,18 @@ AttachmentsController = _ts_decorate4([
 
 // src/controller/chat.controller.ts
 var import_nestjs_agent_core6 = require("@dudousxd/nestjs-agent-core");
-var import_common5 = require("@nestjs/common");
-function _ts_decorate5(decorators, target, key, desc) {
+var import_common6 = require("@nestjs/common");
+function _ts_decorate6(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate5, "_ts_decorate");
-function _ts_metadata5(k, v) {
+__name(_ts_decorate6, "_ts_decorate");
+function _ts_metadata6(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata5, "_ts_metadata");
+__name(_ts_metadata6, "_ts_metadata");
 function _ts_param5(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
@@ -799,46 +867,46 @@ data: ${JSON.stringify(payload)}
     res.end();
   }
 };
-_ts_decorate5([
-  (0, import_common5.Post)("chat"),
-  _ts_param5(0, (0, import_common5.Req)()),
-  _ts_param5(1, (0, import_common5.Res)()),
-  _ts_param5(2, (0, import_common5.Body)()),
-  _ts_metadata5("design:type", Function),
-  _ts_metadata5("design:paramtypes", [
+_ts_decorate6([
+  (0, import_common6.Post)("chat"),
+  _ts_param5(0, (0, import_common6.Req)()),
+  _ts_param5(1, (0, import_common6.Res)()),
+  _ts_param5(2, (0, import_common6.Body)()),
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof Response === "undefined" ? Object : Response,
     typeof ChatBody === "undefined" ? Object : ChatBody
   ]),
-  _ts_metadata5("design:returntype", Promise)
+  _ts_metadata6("design:returntype", Promise)
 ], ChatController.prototype, "chat", null);
-_ts_decorate5([
-  (0, import_common5.Get)("chat/:runId/stream"),
-  _ts_param5(0, (0, import_common5.Param)("runId")),
-  _ts_param5(1, (0, import_common5.Res)()),
-  _ts_metadata5("design:type", Function),
-  _ts_metadata5("design:paramtypes", [
+_ts_decorate6([
+  (0, import_common6.Get)("chat/:runId/stream"),
+  _ts_param5(0, (0, import_common6.Param)("runId")),
+  _ts_param5(1, (0, import_common6.Res)()),
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
     String,
     typeof Response === "undefined" ? Object : Response
   ]),
-  _ts_metadata5("design:returntype", Promise)
+  _ts_metadata6("design:returntype", Promise)
 ], ChatController.prototype, "stream", null);
-_ts_decorate5([
-  (0, import_common5.Post)("chat/:runId/cancel"),
-  _ts_param5(0, (0, import_common5.Req)()),
-  _ts_param5(1, (0, import_common5.Param)("runId")),
-  _ts_metadata5("design:type", Function),
-  _ts_metadata5("design:paramtypes", [
+_ts_decorate6([
+  (0, import_common6.Post)("chat/:runId/cancel"),
+  _ts_param5(0, (0, import_common6.Req)()),
+  _ts_param5(1, (0, import_common6.Param)("runId")),
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata5("design:returntype", Promise)
+  _ts_metadata6("design:returntype", Promise)
 ], ChatController.prototype, "cancel", null);
-ChatController = _ts_decorate5([
-  (0, import_common5.Controller)(),
-  _ts_param5(1, (0, import_common5.Inject)(import_nestjs_agent_core6.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata5("design:type", Function),
-  _ts_metadata5("design:paramtypes", [
+ChatController = _ts_decorate6([
+  (0, import_common6.Controller)(),
+  _ts_param5(1, (0, import_common6.Inject)(import_nestjs_agent_core6.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
@@ -846,18 +914,18 @@ ChatController = _ts_decorate5([
 
 // src/controller/quota.controller.ts
 var import_nestjs_agent_core7 = require("@dudousxd/nestjs-agent-core");
-var import_common6 = require("@nestjs/common");
-function _ts_decorate6(decorators, target, key, desc) {
+var import_common7 = require("@nestjs/common");
+function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate6, "_ts_decorate");
-function _ts_metadata6(k, v) {
+__name(_ts_decorate7, "_ts_decorate");
+function _ts_metadata7(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata6, "_ts_metadata");
+__name(_ts_metadata7, "_ts_metadata");
 function _ts_param6(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
@@ -879,20 +947,20 @@ var QuotaController = class {
     return this.agent.quotaToday(actor.id);
   }
 };
-_ts_decorate6([
-  (0, import_common6.Get)("today"),
-  _ts_param6(0, (0, import_common6.Req)()),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+_ts_decorate7([
+  (0, import_common7.Get)("today"),
+  _ts_param6(0, (0, import_common7.Req)()),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request
   ]),
-  _ts_metadata6("design:returntype", Promise)
+  _ts_metadata7("design:returntype", Promise)
 ], QuotaController.prototype, "today", null);
-QuotaController = _ts_decorate6([
-  (0, import_common6.Controller)("quota"),
-  _ts_param6(1, (0, import_common6.Inject)(import_nestjs_agent_core7.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+QuotaController = _ts_decorate7([
+  (0, import_common7.Controller)("quota"),
+  _ts_param6(1, (0, import_common7.Inject)(import_nestjs_agent_core7.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
@@ -900,18 +968,18 @@ QuotaController = _ts_decorate6([
 
 // src/controller/threads.controller.ts
 var import_nestjs_agent_core8 = require("@dudousxd/nestjs-agent-core");
-var import_common7 = require("@nestjs/common");
-function _ts_decorate7(decorators, target, key, desc) {
+var import_common8 = require("@nestjs/common");
+function _ts_decorate8(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate7, "_ts_decorate");
-function _ts_metadata7(k, v) {
+__name(_ts_decorate8, "_ts_decorate");
+function _ts_metadata8(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata7, "_ts_metadata");
+__name(_ts_metadata8, "_ts_metadata");
 function _ts_param7(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
@@ -981,92 +1049,92 @@ var ThreadsController = class {
     };
   }
 };
-_ts_decorate7([
-  (0, import_common7.Get)(),
-  _ts_param7(0, (0, import_common7.Req)()),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+_ts_decorate8([
+  (0, import_common8.Get)(),
+  _ts_param7(0, (0, import_common8.Req)()),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request
   ]),
-  _ts_metadata7("design:returntype", Promise)
+  _ts_metadata8("design:returntype", Promise)
 ], ThreadsController.prototype, "list", null);
-_ts_decorate7([
-  (0, import_common7.Get)(":id"),
-  _ts_param7(0, (0, import_common7.Req)()),
-  _ts_param7(1, (0, import_common7.Param)("id")),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+_ts_decorate8([
+  (0, import_common8.Get)(":id"),
+  _ts_param7(0, (0, import_common8.Req)()),
+  _ts_param7(1, (0, import_common8.Param)("id")),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata7("design:returntype", Promise)
+  _ts_metadata8("design:returntype", Promise)
 ], ThreadsController.prototype, "detail", null);
-_ts_decorate7([
-  (0, import_common7.Delete)(":id"),
-  _ts_param7(0, (0, import_common7.Req)()),
-  _ts_param7(1, (0, import_common7.Param)("id")),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+_ts_decorate8([
+  (0, import_common8.Delete)(":id"),
+  _ts_param7(0, (0, import_common8.Req)()),
+  _ts_param7(1, (0, import_common8.Param)("id")),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata7("design:returntype", Promise)
+  _ts_metadata8("design:returntype", Promise)
 ], ThreadsController.prototype, "remove", null);
-_ts_decorate7([
-  (0, import_common7.Post)(":id/fork-from/:messageId"),
-  _ts_param7(0, (0, import_common7.Req)()),
-  _ts_param7(1, (0, import_common7.Param)("id")),
-  _ts_param7(2, (0, import_common7.Param)("messageId")),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+_ts_decorate8([
+  (0, import_common8.Post)(":id/fork-from/:messageId"),
+  _ts_param7(0, (0, import_common8.Req)()),
+  _ts_param7(1, (0, import_common8.Param)("id")),
+  _ts_param7(2, (0, import_common8.Param)("messageId")),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     String
   ]),
-  _ts_metadata7("design:returntype", Promise)
+  _ts_metadata8("design:returntype", Promise)
 ], ThreadsController.prototype, "fork", null);
-_ts_decorate7([
-  (0, import_common7.Patch)(":id"),
-  _ts_param7(0, (0, import_common7.Req)()),
-  _ts_param7(1, (0, import_common7.Param)("id")),
-  _ts_param7(2, (0, import_common7.Body)()),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+_ts_decorate8([
+  (0, import_common8.Patch)(":id"),
+  _ts_param7(0, (0, import_common8.Req)()),
+  _ts_param7(1, (0, import_common8.Param)("id")),
+  _ts_param7(2, (0, import_common8.Body)()),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     typeof UpdateThreadBody === "undefined" ? Object : UpdateThreadBody
   ]),
-  _ts_metadata7("design:returntype", Promise)
+  _ts_metadata8("design:returntype", Promise)
 ], ThreadsController.prototype, "update", null);
-_ts_decorate7([
-  (0, import_common7.Post)(":id/promote"),
-  _ts_param7(0, (0, import_common7.Req)()),
-  _ts_param7(1, (0, import_common7.Param)("id")),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+_ts_decorate8([
+  (0, import_common8.Post)(":id/promote"),
+  _ts_param7(0, (0, import_common8.Req)()),
+  _ts_param7(1, (0, import_common8.Param)("id")),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata7("design:returntype", Promise)
+  _ts_metadata8("design:returntype", Promise)
 ], ThreadsController.prototype, "promote", null);
-_ts_decorate7([
-  (0, import_common7.Delete)(":id/from/:messageId"),
-  _ts_param7(0, (0, import_common7.Req)()),
-  _ts_param7(1, (0, import_common7.Param)("id")),
-  _ts_param7(2, (0, import_common7.Param)("messageId")),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+_ts_decorate8([
+  (0, import_common8.Delete)(":id/from/:messageId"),
+  _ts_param7(0, (0, import_common8.Req)()),
+  _ts_param7(1, (0, import_common8.Param)("id")),
+  _ts_param7(2, (0, import_common8.Param)("messageId")),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     String
   ]),
-  _ts_metadata7("design:returntype", Promise)
+  _ts_metadata8("design:returntype", Promise)
 ], ThreadsController.prototype, "truncateFrom", null);
-ThreadsController = _ts_decorate7([
-  (0, import_common7.Controller)("threads"),
-  _ts_param7(1, (0, import_common7.Inject)(import_nestjs_agent_core8.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+ThreadsController = _ts_decorate8([
+  (0, import_common8.Controller)("threads"),
+  _ts_param7(1, (0, import_common8.Inject)(import_nestjs_agent_core8.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
@@ -1074,18 +1142,18 @@ ThreadsController = _ts_decorate7([
 
 // src/controller/tool-call.controller.ts
 var import_nestjs_agent_core9 = require("@dudousxd/nestjs-agent-core");
-var import_common8 = require("@nestjs/common");
-function _ts_decorate8(decorators, target, key, desc) {
+var import_common9 = require("@nestjs/common");
+function _ts_decorate9(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate8, "_ts_decorate");
-function _ts_metadata8(k, v) {
+__name(_ts_decorate9, "_ts_decorate");
+function _ts_metadata9(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata8, "_ts_metadata");
+__name(_ts_metadata9, "_ts_metadata");
 function _ts_param8(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
@@ -1117,33 +1185,33 @@ var ToolCallController = class {
     };
   }
 };
-_ts_decorate8([
-  (0, import_common8.Post)("approve"),
-  _ts_param8(0, (0, import_common8.Req)()),
-  _ts_param8(1, (0, import_common8.Body)()),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate9([
+  (0, import_common9.Post)("approve"),
+  _ts_param8(0, (0, import_common9.Req)()),
+  _ts_param8(1, (0, import_common9.Body)()),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof ApproveBody === "undefined" ? Object : ApproveBody
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata9("design:returntype", Promise)
 ], ToolCallController.prototype, "approve", null);
-_ts_decorate8([
-  (0, import_common8.Post)("reject"),
-  _ts_param8(0, (0, import_common8.Req)()),
-  _ts_param8(1, (0, import_common8.Body)()),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate9([
+  (0, import_common9.Post)("reject"),
+  _ts_param8(0, (0, import_common9.Req)()),
+  _ts_param8(1, (0, import_common9.Body)()),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof RejectBody === "undefined" ? Object : RejectBody
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata9("design:returntype", Promise)
 ], ToolCallController.prototype, "reject", null);
-ToolCallController = _ts_decorate8([
-  (0, import_common8.Controller)("tool-call"),
-  _ts_param8(1, (0, import_common8.Inject)(import_nestjs_agent_core9.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+ToolCallController = _ts_decorate9([
+  (0, import_common9.Controller)("tool-call"),
+  _ts_param8(1, (0, import_common9.Inject)(import_nestjs_agent_core9.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
@@ -1151,7 +1219,7 @@ ToolCallController = _ts_decorate8([
 
 // src/discovery/agent-discovery.service.ts
 var import_nestjs_agent_core10 = require("@dudousxd/nestjs-agent-core");
-var import_common9 = require("@nestjs/common");
+var import_common10 = require("@nestjs/common");
 var import_core = require("@nestjs/core");
 
 // src/decorator/agent.decorator.ts
@@ -1186,17 +1254,17 @@ function SystemPromptContributor() {
 __name(SystemPromptContributor, "SystemPromptContributor");
 
 // src/discovery/agent-discovery.service.ts
-function _ts_decorate9(decorators, target, key, desc) {
+function _ts_decorate10(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate9, "_ts_decorate");
-function _ts_metadata9(k, v) {
+__name(_ts_decorate10, "_ts_decorate");
+function _ts_metadata10(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata9, "_ts_metadata");
+__name(_ts_metadata10, "_ts_metadata");
 function _ts_param9(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
@@ -1211,7 +1279,7 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
   scanner;
   registry;
   contributors;
-  logger = new import_common9.Logger(_AgentDiscoveryService.name);
+  logger = new import_common10.Logger(_AgentDiscoveryService.name);
   constructor(discovery, scanner, registry, contributors) {
     this.discovery = discovery;
     this.scanner = scanner;
@@ -1299,12 +1367,12 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
     return (ctx) => candidate.call(instance, ctx);
   }
 };
-AgentDiscoveryService = _ts_decorate9([
-  (0, import_common9.Injectable)(),
-  _ts_param9(2, (0, import_common9.Inject)(import_nestjs_agent_core10.AGENT_REGISTRY)),
-  _ts_param9(3, (0, import_common9.Inject)(import_nestjs_agent_core10.AGENT_PROMPT_CONTRIBUTORS)),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+AgentDiscoveryService = _ts_decorate10([
+  (0, import_common10.Injectable)(),
+  _ts_param9(2, (0, import_common10.Inject)(import_nestjs_agent_core10.AGENT_REGISTRY)),
+  _ts_param9(3, (0, import_common10.Inject)(import_nestjs_agent_core10.AGENT_PROMPT_CONTRIBUTORS)),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof import_core.DiscoveryService === "undefined" ? Object : import_core.DiscoveryService,
     typeof import_core.MetadataScanner === "undefined" ? Object : import_core.MetadataScanner,
     typeof import_nestjs_agent_core10.AgentRegistry === "undefined" ? Object : import_nestjs_agent_core10.AgentRegistry,
@@ -1314,7 +1382,7 @@ AgentDiscoveryService = _ts_decorate9([
 
 // src/discovery/ai-tool-discovery.service.ts
 var import_nestjs_agent_core11 = require("@dudousxd/nestjs-agent-core");
-var import_common10 = require("@nestjs/common");
+var import_common11 = require("@nestjs/common");
 var import_core2 = require("@nestjs/core");
 var import_zod = require("zod");
 
@@ -1363,17 +1431,17 @@ function provideAgentTool(factoryOrTool, inject) {
 __name(provideAgentTool, "provideAgentTool");
 
 // src/discovery/ai-tool-discovery.service.ts
-function _ts_decorate10(decorators, target, key, desc) {
+function _ts_decorate11(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate10, "_ts_decorate");
-function _ts_metadata10(k, v) {
+__name(_ts_decorate11, "_ts_decorate");
+function _ts_metadata11(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata10, "_ts_metadata");
+__name(_ts_metadata11, "_ts_metadata");
 function _ts_param10(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
@@ -1388,7 +1456,7 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
   registry;
   agents;
   options;
-  logger = new import_common10.Logger(_AiToolDiscoveryService.name);
+  logger = new import_common11.Logger(_AiToolDiscoveryService.name);
   constructor(discovery, registry, agents, options) {
     this.discovery = discovery;
     this.registry = registry;
@@ -1486,13 +1554,13 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
     return true;
   }
 };
-AiToolDiscoveryService = _ts_decorate10([
-  (0, import_common10.Injectable)(),
-  _ts_param10(1, (0, import_common10.Inject)(import_nestjs_agent_core11.AGENT_TOOL_REGISTRY)),
-  _ts_param10(2, (0, import_common10.Inject)(import_nestjs_agent_core11.AGENT_REGISTRY)),
-  _ts_param10(3, (0, import_common10.Inject)(import_nestjs_agent_core11.AGENT_OPTIONS)),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
+AiToolDiscoveryService = _ts_decorate11([
+  (0, import_common11.Injectable)(),
+  _ts_param10(1, (0, import_common11.Inject)(import_nestjs_agent_core11.AGENT_TOOL_REGISTRY)),
+  _ts_param10(2, (0, import_common11.Inject)(import_nestjs_agent_core11.AGENT_REGISTRY)),
+  _ts_param10(3, (0, import_common11.Inject)(import_nestjs_agent_core11.AGENT_OPTIONS)),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
     typeof import_core2.DiscoveryService === "undefined" ? Object : import_core2.DiscoveryService,
     typeof ToolRegistry === "undefined" ? Object : ToolRegistry,
     typeof AgentRegistry === "undefined" ? Object : AgentRegistry,
@@ -1593,18 +1661,18 @@ var LedgerQuotaStore = class {
 
 // src/runner/inline-agent-runner.ts
 var import_nestjs_agent_core13 = require("@dudousxd/nestjs-agent-core");
-var import_common11 = require("@nestjs/common");
-function _ts_decorate11(decorators, target, key, desc) {
+var import_common12 = require("@nestjs/common");
+function _ts_decorate12(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate11, "_ts_decorate");
-function _ts_metadata11(k, v) {
+__name(_ts_decorate12, "_ts_decorate");
+function _ts_metadata12(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata11, "_ts_metadata");
+__name(_ts_metadata12, "_ts_metadata");
 function _ts_param11(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
@@ -1617,7 +1685,7 @@ var InlineAgentRunner = class _InlineAgentRunner {
   }
   factory;
   store;
-  logger = new import_common11.Logger(_InlineAgentRunner.name);
+  logger = new import_common12.Logger(_InlineAgentRunner.name);
   pending = /* @__PURE__ */ new Map();
   constructor(factory, store) {
     this.factory = factory;
@@ -1722,25 +1790,25 @@ var InlineAgentRunner = class _InlineAgentRunner {
     }
   }
 };
-InlineAgentRunner = _ts_decorate11([
-  (0, import_common11.Injectable)(),
-  _ts_param11(0, (0, import_common11.Inject)(import_nestjs_agent_core13.AGENT_DEPS_FACTORY)),
-  _ts_param11(1, (0, import_common11.Inject)(import_nestjs_agent_core13.AGENT_STORE)),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+InlineAgentRunner = _ts_decorate12([
+  (0, import_common12.Injectable)(),
+  _ts_param11(0, (0, import_common12.Inject)(import_nestjs_agent_core13.AGENT_DEPS_FACTORY)),
+  _ts_param11(1, (0, import_common12.Inject)(import_nestjs_agent_core13.AGENT_STORE)),
+  _ts_metadata12("design:type", Function),
+  _ts_metadata12("design:paramtypes", [
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
     typeof AgentStore === "undefined" ? Object : AgentStore
   ])
 ], InlineAgentRunner);
 
 // src/agent.module.ts
-function _ts_decorate12(decorators, target, key, desc) {
+function _ts_decorate13(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate12, "_ts_decorate");
+__name(_ts_decorate13, "_ts_decorate");
 var DEFAULT_PATH = "agent";
 function sharedProviders(durable, includeStore) {
   const providers = [
@@ -1807,7 +1875,14 @@ function sharedProviders(durable, includeStore) {
     AgentDiscoveryService,
     AiToolDiscoveryService,
     InlineAgentRunner,
-    AgentService
+    AgentService,
+    // Bound ALWAYS (durable or inline) — the console's cross-thread approvals inbox routes decisions
+    // through AgentService.signalToolCall, which reaches whichever AGENT_RUNNER is bound above.
+    AgentApprovalPortAdapter,
+    {
+      provide: import_nestjs_agent_core14.AGENT_APPROVAL_PORT,
+      useExisting: AgentApprovalPortAdapter
+    }
   ];
   if (includeStore) {
     providers.push({
@@ -1860,7 +1935,8 @@ function exportsFor(includeStore) {
     import_nestjs_agent_core14.AGENT_DEPS_FACTORY,
     AgentDepsFactory2,
     AgentService,
-    InlineAgentRunner
+    InlineAgentRunner,
+    import_nestjs_agent_core14.AGENT_APPROVAL_PORT
   ];
 }
 __name(exportsFor, "exportsFor");
@@ -1956,7 +2032,17 @@ var AgentModule = class _AgentModule {
       providers: [
         {
           provide: import_nestjs_agent_core14.AGENT_OPTIONS,
-          useFactory: options.useFactory,
+          // Stamp the STATIC wiring flags onto the factory result: `durable`/`dispatchedSteps` are
+          // authoritative on the async config object (they decided the actual wiring above), and
+          // `AgentDurableModule` derives the effective dispatched-steps value from AGENT_OPTIONS —
+          // without this stamp, an async host would get in-process localSteps despite durable: true.
+          useFactory: /* @__PURE__ */ __name(async (...args) => ({
+            ...await options.useFactory(...args),
+            durable: options.durable ?? false,
+            ...options.dispatchedSteps !== void 0 ? {
+              dispatchedSteps: options.dispatchedSteps
+            } : {}
+          }), "useFactory"),
           inject: options.inject ?? []
         },
         ...sharedProviders(options.durable ?? false, includeStore),
@@ -1966,9 +2052,9 @@ var AgentModule = class _AgentModule {
     };
   }
 };
-AgentModule = _ts_decorate12([
-  (0, import_common12.Global)(),
-  (0, import_common12.Module)({})
+AgentModule = _ts_decorate13([
+  (0, import_common13.Global)(),
+  (0, import_common13.Module)({})
 ], AgentModule);
 
 // src/resolver/header-actor-resolver.ts
@@ -2009,6 +2095,7 @@ __reExport(index_exports, require("@dudousxd/nestjs-agent-core"), module.exports
   AGENT_TOOL_BRAND,
   AI_TOOL_METADATA,
   Agent,
+  AgentApprovalPortAdapter,
   AgentDepsFactory,
   AgentDiscoveryService,
   AgentModule,