@dudousxd/nestjs-agent 1.1.2 → 1.3.0

package/dist/index.js

@@ -2,7 +2,7 @@ var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 
 // src/agent.module.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER8, AGENT_APPROVAL_PORT, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY4, AGENT_DURABLE_RUNNER, AGENT_MEMORY as AGENT_MEMORY3, AGENT_MODEL as AGENT_MODEL2, AGENT_OPTIONS as AGENT_OPTIONS4, AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS3, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE3, AGENT_REGISTRY as AGENT_REGISTRY5, AGENT_ROLES_POLICY as AGENT_ROLES_POLICY2, AGENT_RUNNER as AGENT_RUNNER2, AGENT_SINK as AGENT_SINK2, AGENT_SKILLS as AGENT_SKILLS3, AGENT_SKILL_SOURCES as AGENT_SKILL_SOURCES2, AGENT_STORE as AGENT_STORE4, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY3, AgentRegistry as AgentRegistry5, DefaultRolesPolicy, ToolRegistry as ToolRegistry3 } from "@dudousxd/nestjs-agent-core";
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER9, AGENT_APPROVAL_PORT, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY5, AGENT_DURABLE_RUNNER, AGENT_MEMORY as AGENT_MEMORY3, AGENT_MODEL as AGENT_MODEL2, AGENT_OPTIONS as AGENT_OPTIONS4, AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS3, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE3, AGENT_REGISTRY as AGENT_REGISTRY6, AGENT_ROLES_POLICY as AGENT_ROLES_POLICY2, AGENT_RUNNER as AGENT_RUNNER2, AGENT_SINK as AGENT_SINK2, AGENT_SKILLS as AGENT_SKILLS3, AGENT_SKILL_SOURCES as AGENT_SKILL_SOURCES2, AGENT_STORE as AGENT_STORE4, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY3, AgentRegistry as AgentRegistry6, DefaultRolesPolicy, ToolRegistry as ToolRegistry3 } from "@dudousxd/nestjs-agent-core";
 import { Global, Module } from "@nestjs/common";
 import { DiscoveryModule, RouterModule } from "@nestjs/core";
 
@@ -122,6 +122,9 @@ var AgentDepsFactory2 = class {
       store: this.store,
       sink: this.sink,
       rolesPolicy: this.rolesPolicy,
+      ...this.options.approvalPolicy !== void 0 ? {
+        approvalPolicy: this.options.approvalPolicy
+      } : {},
       registry: this.registry,
       promptContributors: this.promptContributors,
       systemPrompt: definition?.systemPrompt ?? "You are a helpful assistant.",
@@ -269,8 +272,8 @@ AgentDepsFactory2 = _ts_decorate([
 ], AgentDepsFactory2);
 
 // src/agent.service.ts
-import { AGENT_ATTACHMENT_STAGING, AGENT_DEPS_FACTORY, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE2, AGENT_RUNNER, AGENT_STORE as AGENT_STORE2 } from "@dudousxd/nestjs-agent-core";
-import { BadRequestException, ForbiddenException, Inject as Inject2, Injectable as Injectable2, NotFoundException, NotImplementedException, Optional as Optional2 } from "@nestjs/common";
+import { AGENT_ATTACHMENT_STAGING, AGENT_DEPS_FACTORY, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE2, AGENT_RUNNER, AGENT_STORE as AGENT_STORE2, REQUESTER_APPROVER, mayDecideApproval } from "@dudousxd/nestjs-agent-core";
+import { BadRequestException, ForbiddenException, GoneException, Inject as Inject2, Injectable as Injectable2, NotFoundException, NotImplementedException, Optional as Optional2 } from "@nestjs/common";
 
 // src/agent-deps.ts
 function utcDay(date = /* @__PURE__ */ new Date()) {
@@ -423,18 +426,35 @@ var AgentService = class {
     await this.assertOwnsActiveStream(actor, runId);
     return this.subscribe(runId);
   }
-  async approve(actor, toolCallId2) {
-    await this.assertOwnsToolCall(actor, toolCallId2);
+  /**
+  * Approve a parked action call as `actor`. Who may is the call's recorded approver's business
+  * (see {@link assertMayDecide}); `remember` approves later calls of the same tool in the same
+  * thread, and `via` names the surface the decision came through (`'web'`, `'slack'`, …) — both
+  * persisted with the call.
+  */
+  async approve(actor, toolCallId2, opts = {}) {
+    await this.assertMayDecide(actor, toolCallId2);
     return this.signalToolCall(toolCallId2, {
-      approved: true
+      approved: true,
+      executedByRef: actor.id,
+      ...opts.remember === true ? {
+        remember: true
+      } : {},
+      ...opts.via !== void 0 ? {
+        decidedVia: opts.via
+      } : {}
     });
   }
-  async reject(actor, toolCallId2, reason) {
-    await this.assertOwnsToolCall(actor, toolCallId2);
+  async reject(actor, toolCallId2, reason, opts = {}) {
+    await this.assertMayDecide(actor, toolCallId2);
     return this.signalToolCall(toolCallId2, {
       approved: false,
+      executedByRef: actor.id,
       ...reason !== void 0 ? {
         reason
+      } : {},
+      ...opts.via !== void 0 ? {
+        decidedVia: opts.via
       } : {}
     });
   }
@@ -475,6 +495,7 @@ var AgentService = class {
   * not the thread's own actor).
   */
   async signalToolCall(toolCallId2, reply) {
+    await this.assertNotExpired(toolCallId2);
     const runId = await this.resolveRunForToolCall(toolCallId2);
     return this.runner.signal(runId, toolCallId2, reply);
   }
@@ -713,6 +734,47 @@ var AgentService = class {
     }
   }
   /**
+  * Authorization seam for approve/reject. The call's recorded approver decides who may settle it:
+  * the requester (the default, and every call recorded before approvers existed) is the thread's
+  * own actor — the ownership check this always was; any other approver goes through the policy's
+  * `canDecide`, which by default asks whether the actor holds that role.
+  */
+  async assertMayDecide(actor, toolCallId2) {
+    const approval = await this.store.toolCallApproval?.(toolCallId2);
+    const approver = approval?.approver ?? REQUESTER_APPROVER;
+    if (approver === REQUESTER_APPROVER) {
+      return this.assertOwnsToolCall(actor, toolCallId2);
+    }
+    const requesterRef = await this.store.ownerOfToolCall(toolCallId2);
+    if (requesterRef === null) {
+      throw new NotFoundException(`tool call ${toolCallId2} not found`);
+    }
+    const allowed = await mayDecideApproval(this.deps.forAgent().approvalPolicy, actor, {
+      toolCallId: toolCallId2,
+      approver,
+      requesterRef
+    });
+    if (!allowed) {
+      throw new ForbiddenException(`this approval is for ${approver}`);
+    }
+  }
+  /**
+  * Refuse a decision on a request that has already lapsed — recorded `expired`, or past its
+  * `expiresAt` with the run's own timer about to fire. Signalling it anyway would race the timeout:
+  * a durable runtime buffers a signal nobody is waiting on, and a late approval must not be what a
+  * later replay of the run reads back.
+  */
+  async assertNotExpired(toolCallId2) {
+    const approval = await this.store.toolCallApproval?.(toolCallId2);
+    if (approval === null || approval === void 0) {
+      return;
+    }
+    const lapsed = approval.status === "expired" || approval.status === "pending_approval" && approval.expiresAt !== null && Date.parse(approval.expiresAt) <= Date.now();
+    if (lapsed) {
+      throw new GoneException(`the approval request for tool call ${toolCallId2} has expired`);
+    }
+  }
+  /**
   * Resolve the run awaiting `toolCallId`. Derived server-side from the tool call alone — the client
   * never knows or supplies a runId, and that run is the sub-agent's own child run when the pending
   * call belongs to a delegated agent. The store answers from the CALL'S OWN `runId` where it has
@@ -790,6 +852,12 @@ var AgentApprovalPortAdapter = class {
       approved: true,
       ...opts?.executedByRef !== void 0 ? {
         executedByRef: opts.executedByRef
+      } : {},
+      ...opts?.remember === true ? {
+        remember: true
+      } : {},
+      ...opts?.decidedVia !== void 0 ? {
+        decidedVia: opts.decidedVia
       } : {}
     });
   }
@@ -801,6 +869,9 @@ var AgentApprovalPortAdapter = class {
       } : {},
       ...opts?.reason !== void 0 ? {
         reason: opts.reason
+      } : {},
+      ...opts?.decidedVia !== void 0 ? {
+        decidedVia: opts.decidedVia
       } : {}
     });
   }
@@ -1720,6 +1791,8 @@ var MAX_ANSWERED_QUESTIONS = 100;
 var MAX_VALUES_PER_QUESTION = 100;
 var MAX_ANSWER_VALUE_LENGTH = 4096;
 var MAX_REJECT_REASON_LENGTH = 4096;
+var MAX_VIA_LENGTH = 64;
+var DEFAULT_VIA = "web";
 function toolCallId(claimed) {
   if (typeof claimed !== "string" || claimed.length === 0) {
     throw new BadRequestException4("toolCallId must be a non-empty string");
@@ -1740,6 +1813,26 @@ function rejectReason(claimed) {
   return claimed;
 }
 __name(rejectReason, "rejectReason");
+function remember(claimed) {
+  if (claimed === void 0) {
+    return false;
+  }
+  if (typeof claimed !== "boolean") {
+    throw new BadRequestException4("remember must be a boolean");
+  }
+  return claimed;
+}
+__name(remember, "remember");
+function via(claimed) {
+  if (claimed === void 0) {
+    return DEFAULT_VIA;
+  }
+  if (typeof claimed !== "string" || claimed.length === 0 || claimed.length > MAX_VIA_LENGTH) {
+    throw new BadRequestException4(`via must be a string of 1-${MAX_VIA_LENGTH} characters`);
+  }
+  return claimed;
+}
+__name(via, "via");
 function answers(claimed) {
   if (claimed === void 0) {
     return void 0;
@@ -1784,14 +1877,19 @@ var ToolCallController = class {
   }
   async approve(req, body) {
     const actor = await this.actorResolver.resolve(req);
-    await this.agent.approve(actor, toolCallId(body.toolCallId));
+    await this.agent.approve(actor, toolCallId(body.toolCallId), {
+      remember: remember(body.remember),
+      via: via(body.via)
+    });
     return {
       ok: true
     };
   }
   async reject(req, body) {
     const actor = await this.actorResolver.resolve(req);
-    await this.agent.reject(actor, toolCallId(body.toolCallId), rejectReason(body.reason));
+    await this.agent.reject(actor, toolCallId(body.toolCallId), rejectReason(body.reason), {
+      via: via(body.via)
+    });
     return {
       ok: true
     };
@@ -1857,7 +1955,7 @@ _ts_decorate11([
   _ts_metadata11("design:type", Function),
   _ts_metadata11("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
-    typeof ApproveBody === "undefined" ? Object : ApproveBody
+    Object
   ]),
   _ts_metadata11("design:returntype", Promise)
 ], ToolCallController.prototype, "skip", null);
@@ -1871,9 +1969,90 @@ ToolCallController = _ts_decorate11([
   ])
 ], ToolCallController);
 
+// src/controller/tools.controller.ts
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER8, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY3, AGENT_REGISTRY as AGENT_REGISTRY3, AgentRegistry as AgentRegistry4 } from "@dudousxd/nestjs-agent-core";
+import { Controller as Controller9, Get as Get8, Inject as Inject11, NotFoundException as NotFoundException3, Query as Query3, Req as Req8 } from "@nestjs/common";
+function _ts_decorate12(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+    r = Reflect.decorate(decorators, target, key, desc);
+  } else {
+    for (var i = decorators.length - 1; i >= 0; i--) {
+      if (d = decorators[i]) {
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+      }
+    }
+  }
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate12, "_ts_decorate");
+function _ts_metadata12(metadataKey, metadataValue) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+    return Reflect.metadata(metadataKey, metadataValue);
+  }
+}
+__name(_ts_metadata12, "_ts_metadata");
+function _ts_param11(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param11, "_ts_param");
+var ToolsController = class {
+  static {
+    __name(this, "ToolsController");
+  }
+  actorResolver;
+  depsFactory;
+  agents;
+  constructor(actorResolver, depsFactory, agents) {
+    this.actorResolver = actorResolver;
+    this.depsFactory = depsFactory;
+    this.agents = agents;
+  }
+  async list(req, agent) {
+    if (agent !== void 0 && this.agents.get(agent) === void 0) {
+      throw new NotFoundException3(`No agent named "${agent}"`);
+    }
+    const actor = await this.actorResolver.resolve(req);
+    const deps = this.depsFactory.forAgent(agent);
+    const specs = await deps.registry.visibleSpecs(actor, deps.rolesPolicy, deps.toolAllowList);
+    return specs.map((spec) => ({
+      name: spec.name,
+      kind: spec.kind,
+      ...spec.presentation !== void 0 ? {
+        presentation: spec.presentation
+      } : {}
+    }));
+  }
+};
+_ts_decorate12([
+  Get8(),
+  _ts_param11(0, Req8()),
+  _ts_param11(1, Query3("agent")),
+  _ts_metadata12("design:type", Function),
+  _ts_metadata12("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
+    String
+  ]),
+  _ts_metadata12("design:returntype", Promise)
+], ToolsController.prototype, "list", null);
+ToolsController = _ts_decorate12([
+  Controller9("tools"),
+  _ts_param11(0, Inject11(AGENT_ACTOR_RESOLVER8)),
+  _ts_param11(1, Inject11(AGENT_DEPS_FACTORY3)),
+  _ts_param11(2, Inject11(AGENT_REGISTRY3)),
+  _ts_metadata12("design:type", Function),
+  _ts_metadata12("design:paramtypes", [
+    typeof ActorResolver === "undefined" ? Object : ActorResolver,
+    typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
+    typeof AgentRegistry4 === "undefined" ? Object : AgentRegistry4
+  ])
+], ToolsController);
+
 // src/discovery/agent-discovery.service.ts
-import { AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS2, AGENT_REGISTRY as AGENT_REGISTRY3, AgentRegistry as AgentRegistry4 } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject11, Injectable as Injectable4, Logger } from "@nestjs/common";
+import { AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS2, AGENT_REGISTRY as AGENT_REGISTRY4, AgentRegistry as AgentRegistry5 } from "@dudousxd/nestjs-agent-core";
+import { Inject as Inject12, Injectable as Injectable4, Logger } from "@nestjs/common";
 import { DiscoveryService, MetadataScanner } from "@nestjs/core";
 
 // src/decorator/agent.decorator.ts
@@ -1908,7 +2087,7 @@ function SystemPromptContributor() {
 __name(SystemPromptContributor, "SystemPromptContributor");
 
 // src/discovery/agent-discovery.service.ts
-function _ts_decorate12(decorators, target, key, desc) {
+function _ts_decorate13(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1921,19 +2100,19 @@ function _ts_decorate12(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate12, "_ts_decorate");
-function _ts_metadata12(metadataKey, metadataValue) {
+__name(_ts_decorate13, "_ts_decorate");
+function _ts_metadata13(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata12, "_ts_metadata");
-function _ts_param11(paramIndex, decorator) {
+__name(_ts_metadata13, "_ts_metadata");
+function _ts_param12(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param11, "_ts_param");
+__name(_ts_param12, "_ts_param");
 var AgentDiscoveryService = class _AgentDiscoveryService {
   static {
     __name(this, "AgentDiscoveryService");
@@ -2060,22 +2239,22 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
     return (ctx) => candidate.call(instance, ctx);
   }
 };
-AgentDiscoveryService = _ts_decorate12([
+AgentDiscoveryService = _ts_decorate13([
   Injectable4(),
-  _ts_param11(2, Inject11(AGENT_REGISTRY3)),
-  _ts_param11(3, Inject11(AGENT_PROMPT_CONTRIBUTORS2)),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+  _ts_param12(2, Inject12(AGENT_REGISTRY4)),
+  _ts_param12(3, Inject12(AGENT_PROMPT_CONTRIBUTORS2)),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof DiscoveryService === "undefined" ? Object : DiscoveryService,
     typeof MetadataScanner === "undefined" ? Object : MetadataScanner,
-    typeof AgentRegistry4 === "undefined" ? Object : AgentRegistry4,
+    typeof AgentRegistry5 === "undefined" ? Object : AgentRegistry5,
     Array
   ])
 ], AgentDiscoveryService);
 
 // src/discovery/ai-tool-discovery.service.ts
-import { AGENT_OPTIONS as AGENT_OPTIONS3, AGENT_REGISTRY as AGENT_REGISTRY4, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY2, normalizeDelegation as normalizeDelegation2 } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject12, Injectable as Injectable5, Logger as Logger2 } from "@nestjs/common";
+import { AGENT_OPTIONS as AGENT_OPTIONS3, AGENT_REGISTRY as AGENT_REGISTRY5, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY2, normalizeDelegation as normalizeDelegation2 } from "@dudousxd/nestjs-agent-core";
+import { Inject as Inject13, Injectable as Injectable5, Logger as Logger2 } from "@nestjs/common";
 import { DiscoveryService as DiscoveryService2 } from "@nestjs/core";
 import { z } from "zod";
 
@@ -2124,7 +2303,7 @@ function provideAgentTool(factoryOrTool, inject) {
 __name(provideAgentTool, "provideAgentTool");
 
 // src/discovery/ai-tool-discovery.service.ts
-function _ts_decorate13(decorators, target, key, desc) {
+function _ts_decorate14(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2137,19 +2316,19 @@ function _ts_decorate13(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate13, "_ts_decorate");
-function _ts_metadata13(metadataKey, metadataValue) {
+__name(_ts_decorate14, "_ts_decorate");
+function _ts_metadata14(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata13, "_ts_metadata");
-function _ts_param12(paramIndex, decorator) {
+__name(_ts_metadata14, "_ts_metadata");
+function _ts_param13(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param12, "_ts_param");
+__name(_ts_param13, "_ts_param");
 var AiToolDiscoveryService = class _AiToolDiscoveryService {
   static {
     __name(this, "AiToolDiscoveryService");
@@ -2203,6 +2382,9 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
         } : {},
         ...meta.enabled !== void 0 ? {
           enabled: meta.enabled
+        } : {},
+        ...meta.presentation !== void 0 ? {
+          presentation: meta.presentation
         } : {}
       }, {
         execute: /* @__PURE__ */ __name((input, ctx) => instance.execute(input, ctx), "execute"),
@@ -2276,13 +2458,13 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
     return true;
   }
 };
-AiToolDiscoveryService = _ts_decorate13([
+AiToolDiscoveryService = _ts_decorate14([
   Injectable5(),
-  _ts_param12(1, Inject12(AGENT_TOOL_REGISTRY2)),
-  _ts_param12(2, Inject12(AGENT_REGISTRY4)),
-  _ts_param12(3, Inject12(AGENT_OPTIONS3)),
-  _ts_metadata13("design:type", Function),
-  _ts_metadata13("design:paramtypes", [
+  _ts_param13(1, Inject13(AGENT_TOOL_REGISTRY2)),
+  _ts_param13(2, Inject13(AGENT_REGISTRY5)),
+  _ts_param13(3, Inject13(AGENT_OPTIONS3)),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
     typeof DiscoveryService2 === "undefined" ? Object : DiscoveryService2,
     typeof ToolRegistry === "undefined" ? Object : ToolRegistry,
     typeof AgentRegistry === "undefined" ? Object : AgentRegistry,
@@ -2292,7 +2474,7 @@ AiToolDiscoveryService = _ts_decorate13([
 
 // src/discovery/skill-discovery.service.ts
 import { AGENT_SKILL_SOURCES } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject13, Injectable as Injectable6, Logger as Logger3 } from "@nestjs/common";
+import { Inject as Inject14, Injectable as Injectable6, Logger as Logger3 } from "@nestjs/common";
 import { DiscoveryService as DiscoveryService3 } from "@nestjs/core";
 
 // src/decorator/skill.decorator.ts
@@ -2315,7 +2497,7 @@ function skillScope(options) {
 __name(skillScope, "skillScope");
 
 // src/discovery/skill-discovery.service.ts
-function _ts_decorate14(decorators, target, key, desc) {
+function _ts_decorate15(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2328,19 +2510,19 @@ function _ts_decorate14(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate14, "_ts_decorate");
-function _ts_metadata14(metadataKey, metadataValue) {
+__name(_ts_decorate15, "_ts_decorate");
+function _ts_metadata15(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata14, "_ts_metadata");
-function _ts_param13(paramIndex, decorator) {
+__name(_ts_metadata15, "_ts_metadata");
+function _ts_param14(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param13, "_ts_param");
+__name(_ts_param14, "_ts_param");
 var SkillDiscoveryService = class _SkillDiscoveryService {
   static {
     __name(this, "SkillDiscoveryService");
@@ -2384,11 +2566,11 @@ var SkillDiscoveryService = class _SkillDiscoveryService {
     return flat === void 0 ? void 0 : () => flat;
   }
 };
-SkillDiscoveryService = _ts_decorate14([
+SkillDiscoveryService = _ts_decorate15([
   Injectable6(),
-  _ts_param13(1, Inject13(AGENT_SKILL_SOURCES)),
-  _ts_metadata14("design:type", Function),
-  _ts_metadata14("design:paramtypes", [
+  _ts_param14(1, Inject14(AGENT_SKILL_SOURCES)),
+  _ts_metadata15("design:type", Function),
+  _ts_metadata15("design:paramtypes", [
     typeof DiscoveryService3 === "undefined" ? Object : DiscoveryService3,
     Array
   ])
@@ -2486,9 +2668,9 @@ var LedgerQuotaStore = class {
 };
 
 // src/runner/inline-agent-runner.ts
-import { AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY3, AGENT_STORE as AGENT_STORE3, RunCancelledError, agentFailureCode, encodeStreamEvent, publishAgentRunFailed, runAgentLoop, settleAll, settleUnsettledDelegation } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject14, Injectable as Injectable7, Logger as Logger4 } from "@nestjs/common";
-function _ts_decorate15(decorators, target, key, desc) {
+import { AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY4, AGENT_STORE as AGENT_STORE3, RunCancelledError, agentFailureCode, encodeStreamEvent, publishAgentRunFailed, runAgentLoop, settleAll, settleUnsettledDelegation } from "@dudousxd/nestjs-agent-core";
+import { Inject as Inject15, Injectable as Injectable7, Logger as Logger4 } from "@nestjs/common";
+function _ts_decorate16(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2501,19 +2683,19 @@ function _ts_decorate15(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate15, "_ts_decorate");
-function _ts_metadata15(metadataKey, metadataValue) {
+__name(_ts_decorate16, "_ts_decorate");
+function _ts_metadata16(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata15, "_ts_metadata");
-function _ts_param14(paramIndex, decorator) {
+__name(_ts_metadata16, "_ts_metadata");
+function _ts_param15(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param14, "_ts_param");
+__name(_ts_param15, "_ts_param");
 var InlineAgentRunner = class _InlineAgentRunner {
   static {
     __name(this, "InlineAgentRunner");
@@ -2639,6 +2821,36 @@ var InlineAgentRunner = class _InlineAgentRunner {
   * shape it is delivering — the loop asked for one and only ever gets what the caller sent. A
   * cancel settles the wait too, by rejecting it.
   */
+  /**
+  * {@link park} for an approval, bounded by the policy's time to live when it has one: the timer
+  * settles the wait as `expired` — the same Decision the durable runner builds from its signal
+  * timeout — and a decision that arrives first disarms it.
+  */
+  parkApproval(runId, toolCallId2, timeoutMs) {
+    const waiting = this.park(runId, toolCallId2);
+    if (timeoutMs === void 0) {
+      return waiting;
+    }
+    const key = `${runId}:${toolCallId2}`;
+    let timer;
+    const lapse = new Promise((resolve) => {
+      timer = setTimeout(() => {
+        const entry = this.pending.get(key);
+        if (entry !== void 0) {
+          this.pending.delete(key);
+          resolve({
+            approved: false,
+            expired: true
+          });
+        }
+      }, timeoutMs);
+      timer.unref?.();
+    });
+    return Promise.race([
+      waiting,
+      lapse
+    ]).finally(() => clearTimeout(timer));
+  }
   park(runId, toolCallId2) {
     return new Promise((resolve, reject) => {
       this.pending.set(`${runId}:${toolCallId2}`, {
@@ -2652,7 +2864,7 @@ var InlineAgentRunner = class _InlineAgentRunner {
     return {
       runId,
       openSink: /* @__PURE__ */ __name(() => deps.sink.open(runId), "openSink"),
-      awaitApproval: /* @__PURE__ */ __name((call) => this.park(runId, call.id), "awaitApproval"),
+      awaitApproval: /* @__PURE__ */ __name((call, _ctx, opts) => this.parkApproval(runId, call.id, opts?.timeoutMs), "awaitApproval"),
       awaitAnswers: /* @__PURE__ */ __name((request) => this.park(runId, request.id), "awaitAnswers"),
       step: /* @__PURE__ */ __name((_name, fn) => fn(), "step"),
       parallel: settleAll,
@@ -2703,7 +2915,7 @@ var InlineAgentRunner = class _InlineAgentRunner {
     const hooks = {
       runId,
       openSink: /* @__PURE__ */ __name(() => deps.sink.open(runId), "openSink"),
-      awaitApproval: /* @__PURE__ */ __name((call) => this.park(runId, call.id), "awaitApproval"),
+      awaitApproval: /* @__PURE__ */ __name((call, _ctx, opts) => this.parkApproval(runId, call.id, opts?.timeoutMs), "awaitApproval"),
       awaitAnswers: /* @__PURE__ */ __name((request) => this.park(runId, request.id), "awaitAnswers"),
       step: /* @__PURE__ */ __name((_name, fn) => fn(), "step"),
       parallel: settleAll,
@@ -2807,7 +3019,7 @@ var InlineAgentRunner = class _InlineAgentRunner {
       runId,
       // Forward into the top-level stream; the top-level run owns end/fail on that shared sink.
       openSink: /* @__PURE__ */ __name(async () => childSinkWriter(await deps.sink.open(sinkRunId)), "openSink"),
-      awaitApproval: /* @__PURE__ */ __name((call) => this.park(runId, call.id), "awaitApproval"),
+      awaitApproval: /* @__PURE__ */ __name((call, _ctx, opts) => this.parkApproval(runId, call.id, opts?.timeoutMs), "awaitApproval"),
       awaitAnswers: /* @__PURE__ */ __name((request) => this.park(runId, request.id), "awaitAnswers"),
       step: /* @__PURE__ */ __name((_name, fn) => fn(), "step"),
       parallel: settleAll,
@@ -2864,12 +3076,12 @@ var InlineAgentRunner = class _InlineAgentRunner {
     }
   }
 };
-InlineAgentRunner = _ts_decorate15([
+InlineAgentRunner = _ts_decorate16([
   Injectable7(),
-  _ts_param14(0, Inject14(AGENT_DEPS_FACTORY3)),
-  _ts_param14(1, Inject14(AGENT_STORE3)),
-  _ts_metadata15("design:type", Function),
-  _ts_metadata15("design:paramtypes", [
+  _ts_param15(0, Inject15(AGENT_DEPS_FACTORY4)),
+  _ts_param15(1, Inject15(AGENT_STORE3)),
+  _ts_metadata16("design:type", Function),
+  _ts_metadata16("design:paramtypes", [
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
     typeof AgentStore === "undefined" ? Object : AgentStore
   ])
@@ -2914,7 +3126,7 @@ function resolveSkillsConfig(options, declared) {
 __name(resolveSkillsConfig, "resolveSkillsConfig");
 
 // src/agent.module.ts
-function _ts_decorate16(decorators, target, key, desc) {
+function _ts_decorate17(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2927,7 +3139,7 @@ function _ts_decorate16(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate16, "_ts_decorate");
+__name(_ts_decorate17, "_ts_decorate");
 var DEFAULT_PATH = "agent";
 function sharedProviders(durable, includeStore) {
   const providers = [
@@ -2937,8 +3149,8 @@ function sharedProviders(durable, includeStore) {
     },
     // Starts empty; AgentDiscoveryService populates it from `@Agent`-decorated providers at boot.
     {
-      provide: AGENT_REGISTRY5,
-      useFactory: /* @__PURE__ */ __name(() => new AgentRegistry5(), "useFactory")
+      provide: AGENT_REGISTRY6,
+      useFactory: /* @__PURE__ */ __name(() => new AgentRegistry6(), "useFactory")
     },
     // A shared, mutable list AgentDiscoveryService fills with `@SystemPromptContributor()` methods.
     {
@@ -2986,7 +3198,7 @@ function sharedProviders(durable, includeStore) {
       ]
     },
     {
-      provide: AGENT_ACTOR_RESOLVER8,
+      provide: AGENT_ACTOR_RESOLVER9,
       useFactory: /* @__PURE__ */ __name((options) => options.actorResolver, "useFactory"),
       inject: [
         AGENT_OPTIONS4
@@ -3012,7 +3224,7 @@ function sharedProviders(durable, includeStore) {
     },
     AgentDepsFactory2,
     {
-      provide: AGENT_DEPS_FACTORY4,
+      provide: AGENT_DEPS_FACTORY5,
       useExisting: AgentDepsFactory2
     },
     // Populates the registry + contributors (onModuleInit) BEFORE AiToolDiscoveryService synthesizes
@@ -3068,10 +3280,10 @@ function exportsFor(includeStore) {
   return [
     AGENT_OPTIONS4,
     AGENT_TOOL_REGISTRY3,
-    AGENT_REGISTRY5,
+    AGENT_REGISTRY6,
     AGENT_SINK2,
     AGENT_ROLES_POLICY2,
-    AGENT_ACTOR_RESOLVER8,
+    AGENT_ACTOR_RESOLVER9,
     AGENT_MODEL2,
     ...includeStore ? [
       AGENT_STORE4
@@ -3080,7 +3292,7 @@ function exportsFor(includeStore) {
     AGENT_PROMPT_CONTRIBUTORS3,
     AGENT_SKILLS3,
     AGENT_MEMORY3,
-    AGENT_DEPS_FACTORY4,
+    AGENT_DEPS_FACTORY5,
     AgentDepsFactory2,
     AgentService,
     InlineAgentRunner,
@@ -3095,7 +3307,8 @@ var BASE_CONTROLLERS = [
   QuotaController,
   AgentsController,
   SkillsController,
-  MemoriesController
+  MemoriesController,
+  ToolsController
 ];
 var GUARDABLE_CONTROLLERS = [
   ...BASE_CONTROLLERS,
@@ -3198,7 +3411,7 @@ var AgentModule = class _AgentModule {
     };
   }
 };
-AgentModule = _ts_decorate16([
+AgentModule = _ts_decorate17([
   Global(),
   Module({})
 ], AgentModule);
@@ -3265,6 +3478,7 @@ export {
   SkillsController,
   SystemPrompt,
   SystemPromptContributor,
+  ToolsController,
   declaredSkillProvider,
   delegateToolName,
   provideAgentTool,