@dudousxd/nestjs-agent 1.10.0 → 1.11.0

package/dist/index.cjs

@@ -34,6 +34,7 @@ __export(index_exports, {
   AgentService: () => AgentService,
   AiTool: () => AiTool,
   AiToolDiscoveryService: () => AiToolDiscoveryService,
+  AnonymousActorResolver: () => AnonymousActorResolver,
   AttachmentsController: () => AttachmentsController,
   DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES: () => DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES,
   DEFAULT_MAX_ATTACHMENT_BYTES: () => DEFAULT_MAX_ATTACHMENT_BYTES,
@@ -55,14 +56,17 @@ __export(index_exports, {
   SystemPromptContributor: () => SystemPromptContributor,
   ToolsController: () => ToolsController,
   declaredSkillProvider: () => declaredSkillProvider,
+  defaultRequestUserMapper: () => defaultRequestUserMapper,
   delegateToolName: () => delegateToolName,
   provideAgentTool: () => provideAgentTool,
   provideAgentTools: () => provideAgentTools,
   readAgentMetadata: () => readAgentMetadata,
   readAiToolMetadata: () => readAiToolMetadata,
   readSkillMetadata: () => readSkillMetadata,
+  requestUserActorResolver: () => requestUserActorResolver,
   resolveSkillsConfig: () => resolveSkillsConfig,
   skillScope: () => skillScope,
+  toolNameFromClass: () => toolNameFromClass,
   utcDay: () => utcDay
 });
 module.exports = __toCommonJS(index_exports);
@@ -193,7 +197,7 @@ var AgentDepsFactory2 = class {
       } : {},
       registry: this.registry,
       promptContributors: this.promptContributors,
-      systemPrompt: definition?.systemPrompt ?? "You are a helpful assistant.",
+      systemPrompt: definition?.systemPrompt ?? this.options.systemPrompt ?? "You are a helpful assistant.",
       maxSteps: definition?.maxSteps ?? 8,
       ...definition?.maxDelegationDepth !== void 0 ? {
         maxDelegationDepth: definition.maxDelegationDepth
@@ -2718,9 +2722,23 @@ var import_zod = require("zod");
 // src/decorator/ai-tool.decorator.ts
 var import_reflect_metadata3 = require("reflect-metadata");
 var AI_TOOL_METADATA = /* @__PURE__ */ Symbol("nestjs-agent:ai-tool");
+function toolNameFromClass(className) {
+  const base = className.replace(/Tool$/, "") || className;
+  const leadingCaps = /^[A-Z]+(?=[A-Z][a-z]|$)/.exec(base)?.[0];
+  if (leadingCaps !== void 0 && leadingCaps.length > 1) {
+    return leadingCaps.toLowerCase() + base.slice(leadingCaps.length);
+  }
+  return base.charAt(0).toLowerCase() + base.slice(1);
+}
+__name(toolNameFromClass, "toolNameFromClass");
 function AiTool(options) {
   return (target) => {
-    Reflect.defineMetadata(AI_TOOL_METADATA, options, target);
+    const resolved = {
+      ...options,
+      name: options.name ?? toolNameFromClass(target.name),
+      kind: options.kind ?? "read"
+    };
+    Reflect.defineMetadata(AI_TOOL_METADATA, resolved, target);
   };
 }
 __name(AiTool, "AiTool");
@@ -3209,6 +3227,93 @@ var LedgerQuotaStore = class {
   }
 };
 
+// src/resolver/anonymous-actor-resolver.ts
+var import_node_crypto = require("crypto");
+var TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/;
+var MINTED = /* @__PURE__ */ Symbol("nestjs-agent:anonymous-token");
+function readCookie(req, name) {
+  const header = req.headers?.cookie;
+  const raw = Array.isArray(header) ? header.join("; ") : header;
+  if (raw === void 0) return void 0;
+  for (const pair of raw.split(";")) {
+    const index = pair.indexOf("=");
+    if (index === -1) continue;
+    if (pair.slice(0, index).trim() === name) {
+      try {
+        return decodeURIComponent(pair.slice(index + 1).trim());
+      } catch {
+        return void 0;
+      }
+    }
+  }
+  return void 0;
+}
+__name(readCookie, "readCookie");
+function isHttps(req) {
+  if (req.secure === true) return true;
+  const forwarded = req.headers?.["x-forwarded-proto"];
+  const proto = Array.isArray(forwarded) ? forwarded[0] : forwarded;
+  return proto?.split(",")[0]?.trim() === "https";
+}
+__name(isHttps, "isHttps");
+var AnonymousActorResolver = class {
+  static {
+    __name(this, "AnonymousActorResolver");
+  }
+  options;
+  cookieName;
+  roles;
+  constructor(options = {}) {
+    this.options = options;
+    this.cookieName = options.cookieName ?? "agent_anon";
+    this.roles = options.roles ?? [
+      "anonymous"
+    ];
+  }
+  resolve(request) {
+    const req = typeof request === "object" && request !== null ? request : {};
+    let token = req[MINTED] ?? readCookie(req, this.cookieName);
+    if (token === void 0 || !TOKEN_PATTERN.test(token)) {
+      token = (0, import_node_crypto.randomBytes)(32).toString("base64url");
+      req[MINTED] = token;
+      this.setCookie(req, token);
+    }
+    const digest = (0, import_node_crypto.createHash)("sha256").update(token).digest("base64url").slice(0, 32);
+    return {
+      id: `anon:${digest}`,
+      roles: [
+        ...this.roles
+      ]
+    };
+  }
+  setCookie(req, token) {
+    const res = req.res;
+    if (res?.setHeader === void 0 || res.headersSent === true) return;
+    const sameSite = this.options.sameSite ?? "lax";
+    const secureOption = this.options.secure ?? "auto";
+    const secure = sameSite === "none" || (secureOption === "auto" ? isHttps(req) : secureOption);
+    const maxAge = Math.round((this.options.maxAgeDays ?? 365) * 24 * 60 * 60);
+    const cookie = [
+      `${this.cookieName}=${token}`,
+      `Path=${this.options.path ?? "/"}`,
+      `Max-Age=${maxAge}`,
+      "HttpOnly",
+      `SameSite=${sameSite === "none" ? "None" : sameSite === "strict" ? "Strict" : "Lax"}`,
+      ...secure ? [
+        "Secure"
+      ] : []
+    ].join("; ");
+    const existing = res.getHeader?.("Set-Cookie");
+    const list = Array.isArray(existing) ? existing.map(String) : existing !== void 0 ? [
+      String(existing)
+    ] : [];
+    res.setHeader("Set-Cookie", [
+      ...list,
+      cookie
+    ]);
+  }
+};
+
 // src/runner/inline-agent-runner.ts
 var import_nestjs_agent_core21 = require("@dudousxd/nestjs-agent-core");
 var import_common18 = require("@nestjs/common");
@@ -3683,7 +3788,51 @@ function _ts_decorate19(decorators, target, key, desc) {
 }
 __name(_ts_decorate19, "_ts_decorate");
 var DEFAULT_PATH = "agent";
-function sharedProviders(durable, includeStore) {
+var logger = new import_common19.Logger("AgentModule");
+function externalStoreWrapper(modules) {
+  for (const module2 of modules.values()) {
+    if (module2.metatype === AgentModule) continue;
+    const wrapper = module2.providers.get(import_nestjs_agent_core23.AGENT_STORE);
+    if (wrapper !== void 0) return wrapper;
+  }
+  return void 0;
+}
+__name(externalStoreWrapper, "externalStoreWrapper");
+function forwardingStore(wrapper) {
+  const target = /* @__PURE__ */ __name(() => {
+    const instance = wrapper.instance;
+    if (instance === void 0 || instance === null) {
+      throw new Error("AgentModule: the AGENT_STORE bound by another module is not ready yet");
+    }
+    return instance;
+  }, "target");
+  return new Proxy({}, {
+    get(_, property) {
+      const store = target();
+      const value = store[property];
+      return typeof value === "function" ? value.bind(store) : value;
+    },
+    has(_, property) {
+      return property in target();
+    }
+  });
+}
+__name(forwardingStore, "forwardingStore");
+function resolveStore(options, modules) {
+  if (options.store !== void 0) return options.store;
+  const external = externalStoreWrapper(modules);
+  if (external !== void 0) return forwardingStore(external);
+  logger.warn("No `store` configured and no store module imported \u2014 using the in-memory store. Threads are lost on restart and not shared between processes: not for production. Pass `store`, or import a store module (e.g. MikroOrmAgentStoreModule.forFeature()).");
+  return new import_nestjs_agent_core23.InMemoryAgentStore();
+}
+__name(resolveStore, "resolveStore");
+function resolveCatalog(options) {
+  if (options.models !== void 0) return options.models;
+  const carried = options.model.catalog;
+  return carried !== void 0 && typeof carried.list === "function" ? carried : void 0;
+}
+__name(resolveCatalog, "resolveCatalog");
+function sharedProviders(durable) {
   const providers = [
     {
       provide: import_nestjs_agent_core23.AGENT_TOOL_REGISTRY,
@@ -3741,7 +3890,11 @@ function sharedProviders(durable, includeStore) {
     },
     {
       provide: import_nestjs_agent_core23.AGENT_ACTOR_RESOLVER,
-      useFactory: /* @__PURE__ */ __name((options) => options.actorResolver, "useFactory"),
+      useFactory: /* @__PURE__ */ __name((options) => {
+        if (options.actorResolver !== void 0) return options.actorResolver;
+        logger.warn("No `actorResolver` configured \u2014 the agent endpoints are PUBLIC: every browser gets its own anonymous identity (an HttpOnly cookie). Set `actorResolver: requestUserActorResolver()` (or your own) to require login.");
+        return new AnonymousActorResolver();
+      }, "useFactory"),
       inject: [
         import_nestjs_agent_core23.AGENT_OPTIONS
       ]
@@ -3775,7 +3928,7 @@ function sharedProviders(durable, includeStore) {
     },
     {
       provide: import_nestjs_agent_core23.AGENT_MODEL_CATALOG,
-      useFactory: /* @__PURE__ */ __name((o) => o.models, "useFactory"),
+      useFactory: /* @__PURE__ */ __name((o) => resolveCatalog(o), "useFactory"),
       inject: [
         import_nestjs_agent_core23.AGENT_OPTIONS
       ]
@@ -3800,15 +3953,14 @@ function sharedProviders(durable, includeStore) {
       useExisting: AgentApprovalPortAdapter
     }
   ];
-  if (includeStore) {
-    providers.push({
-      provide: import_nestjs_agent_core23.AGENT_STORE,
-      useFactory: /* @__PURE__ */ __name((o) => o.store, "useFactory"),
-      inject: [
-        import_nestjs_agent_core23.AGENT_OPTIONS
-      ]
-    });
-  }
+  providers.push({
+    provide: import_nestjs_agent_core23.AGENT_STORE,
+    useFactory: /* @__PURE__ */ __name((o, modules) => resolveStore(o, modules), "useFactory"),
+    inject: [
+      import_nestjs_agent_core23.AGENT_OPTIONS,
+      import_core4.ModulesContainer
+    ]
+  });
   if (durable) {
     providers.push({
       provide: import_nestjs_agent_core23.AGENT_RUNNER,
@@ -3834,7 +3986,7 @@ function sharedProviders(durable, includeStore) {
   return providers;
 }
 __name(sharedProviders, "sharedProviders");
-function exportsFor(includeStore) {
+function exportsFor() {
   return [
     import_nestjs_agent_core23.AGENT_OPTIONS,
     import_nestjs_agent_core23.AGENT_TOOL_REGISTRY,
@@ -3843,9 +3995,7 @@ function exportsFor(includeStore) {
     import_nestjs_agent_core23.AGENT_ROLES_POLICY,
     import_nestjs_agent_core23.AGENT_ACTOR_RESOLVER,
     import_nestjs_agent_core23.AGENT_MODEL,
-    ...includeStore ? [
-      import_nestjs_agent_core23.AGENT_STORE
-    ] : [],
+    import_nestjs_agent_core23.AGENT_STORE,
     import_nestjs_agent_core23.AGENT_QUOTA_STORE,
     import_nestjs_agent_core23.AGENT_MODEL_CATALOG,
     import_nestjs_agent_core23.AGENT_QUOTA_PROVIDER,
@@ -3916,7 +4066,6 @@ var AgentModule = class _AgentModule {
   }
   static forRoot(options) {
     const path = options.path ?? DEFAULT_PATH;
-    const includeStore = options.store !== void 0;
     applyGuards(options.guards);
     return {
       module: _AgentModule,
@@ -3931,15 +4080,14 @@ var AgentModule = class _AgentModule {
           provide: import_nestjs_agent_core23.AGENT_OPTIONS,
           useValue: options
         },
-        ...sharedProviders(options.durable ?? false, includeStore),
+        ...sharedProviders(options.durable ?? false),
         ...guardProviders(options.guards)
       ],
-      exports: exportsFor(includeStore)
+      exports: exportsFor()
     };
   }
   static forRootAsync(options) {
     const path = options.path ?? DEFAULT_PATH;
-    const includeStore = options.externalStore !== true;
     applyGuards(options.guards);
     return {
       module: _AgentModule,
@@ -3966,10 +4114,10 @@ var AgentModule = class _AgentModule {
           }), "useFactory"),
           inject: options.inject ?? []
         },
-        ...sharedProviders(options.durable ?? false, includeStore),
+        ...sharedProviders(options.durable ?? false),
         ...guardProviders(options.guards)
       ],
-      exports: exportsFor(includeStore)
+      exports: exportsFor()
     };
   }
 };
@@ -4009,6 +4157,49 @@ var HeaderActorResolver = class {
   }
 };
 
+// src/resolver/request-user-actor-resolver.ts
+var import_common21 = require("@nestjs/common");
+function field(user, ...names) {
+  for (const name of names) {
+    const value = user[name];
+    if (value !== void 0 && value !== null && value !== "") return value;
+  }
+  return void 0;
+}
+__name(field, "field");
+function defaultRequestUserMapper(user) {
+  const id = field(user, "id", "sub", "_id", "userId");
+  if (id === void 0) {
+    throw new import_common21.UnauthorizedException("requestUserActorResolver: req.user has no id/sub/_id/userId \u2014 pass a mapper: requestUserActorResolver((user) => ({ id: \u2026, roles: \u2026 }))");
+  }
+  const rawRoles = field(user, "roles", "role");
+  const roles = Array.isArray(rawRoles) ? rawRoles.map(String) : typeof rawRoles === "string" ? [
+    rawRoles
+  ] : [];
+  const tenant = field(user, "tenantRef", "tenantId", "orgId");
+  return {
+    id: String(id),
+    roles,
+    ...tenant !== void 0 ? {
+      tenantRef: String(tenant)
+    } : {}
+  };
+}
+__name(defaultRequestUserMapper, "defaultRequestUserMapper");
+function requestUserActorResolver(map) {
+  return {
+    async resolve(req) {
+      const user = typeof req === "object" && req !== null ? req.user : void 0;
+      if (user === void 0 || user === null || user === false) {
+        throw new import_common21.UnauthorizedException("Sign in to use the agent.");
+      }
+      if (map !== void 0) return map(user, req);
+      return defaultRequestUserMapper(user);
+    }
+  };
+}
+__name(requestUserActorResolver, "requestUserActorResolver");
+
 // src/index.ts
 __reExport(index_exports, require("@dudousxd/nestjs-agent-core"), module.exports);
 // Annotate the CommonJS export names for ESM import in node:
@@ -4025,6 +4216,7 @@ __reExport(index_exports, require("@dudousxd/nestjs-agent-core"), module.exports
   AgentService,
   AiTool,
   AiToolDiscoveryService,
+  AnonymousActorResolver,
   AttachmentsController,
   DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES,
   DEFAULT_MAX_ATTACHMENT_BYTES,
@@ -4046,14 +4238,17 @@ __reExport(index_exports, require("@dudousxd/nestjs-agent-core"), module.exports
   SystemPromptContributor,
   ToolsController,
   declaredSkillProvider,
+  defaultRequestUserMapper,
   delegateToolName,
   provideAgentTool,
   provideAgentTools,
   readAgentMetadata,
   readAiToolMetadata,
   readSkillMetadata,
+  requestUserActorResolver,
   resolveSkillsConfig,
   skillScope,
+  toolNameFromClass,
   utcDay,
   ...require("@dudousxd/nestjs-agent-core")
 });