@dudousxd/nestjs-agent 1.10.0 → 1.11.0

package/dist/index.js

@@ -2,9 +2,9 @@ var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 
 // src/agent.module.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER11, AGENT_APPROVAL_PORT, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY5, AGENT_DURABLE_RUNNER, AGENT_MEMORY as AGENT_MEMORY3, AGENT_MODEL as AGENT_MODEL2, AGENT_MODEL_CATALOG as AGENT_MODEL_CATALOG2, AGENT_OPTIONS as AGENT_OPTIONS5, AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS3, AGENT_QUOTA_PROVIDER as AGENT_QUOTA_PROVIDER2, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE3, AGENT_REGISTRY as AGENT_REGISTRY6, AGENT_ROLES_POLICY as AGENT_ROLES_POLICY2, AGENT_RUNNER as AGENT_RUNNER2, AGENT_SINK as AGENT_SINK2, AGENT_SKILLS as AGENT_SKILLS3, AGENT_SKILL_SOURCES as AGENT_SKILL_SOURCES2, AGENT_STORE as AGENT_STORE4, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY3, AgentRegistry as AgentRegistry6, DefaultRolesPolicy, ToolRegistry as ToolRegistry3 } from "@dudousxd/nestjs-agent-core";
-import { Global, Module } from "@nestjs/common";
-import { DiscoveryModule, RouterModule } from "@nestjs/core";
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER11, AGENT_APPROVAL_PORT, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY5, AGENT_DURABLE_RUNNER, AGENT_MEMORY as AGENT_MEMORY3, AGENT_MODEL as AGENT_MODEL2, AGENT_MODEL_CATALOG as AGENT_MODEL_CATALOG2, AGENT_OPTIONS as AGENT_OPTIONS5, AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS3, AGENT_QUOTA_PROVIDER as AGENT_QUOTA_PROVIDER2, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE3, AGENT_REGISTRY as AGENT_REGISTRY6, AGENT_ROLES_POLICY as AGENT_ROLES_POLICY2, AGENT_RUNNER as AGENT_RUNNER2, AGENT_SINK as AGENT_SINK2, AGENT_SKILLS as AGENT_SKILLS3, AGENT_SKILL_SOURCES as AGENT_SKILL_SOURCES2, AGENT_STORE as AGENT_STORE4, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY3, AgentRegistry as AgentRegistry6, DefaultRolesPolicy, InMemoryAgentStore, ToolRegistry as ToolRegistry3 } from "@dudousxd/nestjs-agent-core";
+import { Global, Logger as Logger5, Module } from "@nestjs/common";
+import { DiscoveryModule, ModulesContainer, RouterModule } from "@nestjs/core";
 
 // src/agent-deps.factory.ts
 import { AGENT_MEMORY, AGENT_MODEL, AGENT_PRICING_STORE, AGENT_PROMPT_CONTRIBUTORS, AGENT_QUOTA_STORE, AGENT_REGISTRY, AGENT_ROLES_POLICY, AGENT_SINK, AGENT_SKILLS, AGENT_STORE, AGENT_TOOL_REGISTRY, AgentRegistry as AgentRegistry2, ToolRegistry as ToolRegistry2, normalizeDelegation, summarizeWithModel, windowHistory } from "@dudousxd/nestjs-agent-core";
@@ -127,7 +127,7 @@ var AgentDepsFactory2 = class {
       } : {},
       registry: this.registry,
       promptContributors: this.promptContributors,
-      systemPrompt: definition?.systemPrompt ?? "You are a helpful assistant.",
+      systemPrompt: definition?.systemPrompt ?? this.options.systemPrompt ?? "You are a helpful assistant.",
       maxSteps: definition?.maxSteps ?? 8,
       ...definition?.maxDelegationDepth !== void 0 ? {
         maxDelegationDepth: definition.maxDelegationDepth
@@ -2652,9 +2652,23 @@ import { z } from "zod";
 // src/decorator/ai-tool.decorator.ts
 import "reflect-metadata";
 var AI_TOOL_METADATA = /* @__PURE__ */ Symbol("nestjs-agent:ai-tool");
+function toolNameFromClass(className) {
+  const base = className.replace(/Tool$/, "") || className;
+  const leadingCaps = /^[A-Z]+(?=[A-Z][a-z]|$)/.exec(base)?.[0];
+  if (leadingCaps !== void 0 && leadingCaps.length > 1) {
+    return leadingCaps.toLowerCase() + base.slice(leadingCaps.length);
+  }
+  return base.charAt(0).toLowerCase() + base.slice(1);
+}
+__name(toolNameFromClass, "toolNameFromClass");
 function AiTool(options) {
   return (target) => {
-    Reflect.defineMetadata(AI_TOOL_METADATA, options, target);
+    const resolved = {
+      ...options,
+      name: options.name ?? toolNameFromClass(target.name),
+      kind: options.kind ?? "read"
+    };
+    Reflect.defineMetadata(AI_TOOL_METADATA, resolved, target);
   };
 }
 __name(AiTool, "AiTool");
@@ -3143,6 +3157,93 @@ var LedgerQuotaStore = class {
   }
 };
 
+// src/resolver/anonymous-actor-resolver.ts
+import { createHash, randomBytes } from "crypto";
+var TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/;
+var MINTED = /* @__PURE__ */ Symbol("nestjs-agent:anonymous-token");
+function readCookie(req, name) {
+  const header = req.headers?.cookie;
+  const raw = Array.isArray(header) ? header.join("; ") : header;
+  if (raw === void 0) return void 0;
+  for (const pair of raw.split(";")) {
+    const index = pair.indexOf("=");
+    if (index === -1) continue;
+    if (pair.slice(0, index).trim() === name) {
+      try {
+        return decodeURIComponent(pair.slice(index + 1).trim());
+      } catch {
+        return void 0;
+      }
+    }
+  }
+  return void 0;
+}
+__name(readCookie, "readCookie");
+function isHttps(req) {
+  if (req.secure === true) return true;
+  const forwarded = req.headers?.["x-forwarded-proto"];
+  const proto = Array.isArray(forwarded) ? forwarded[0] : forwarded;
+  return proto?.split(",")[0]?.trim() === "https";
+}
+__name(isHttps, "isHttps");
+var AnonymousActorResolver = class {
+  static {
+    __name(this, "AnonymousActorResolver");
+  }
+  options;
+  cookieName;
+  roles;
+  constructor(options = {}) {
+    this.options = options;
+    this.cookieName = options.cookieName ?? "agent_anon";
+    this.roles = options.roles ?? [
+      "anonymous"
+    ];
+  }
+  resolve(request) {
+    const req = typeof request === "object" && request !== null ? request : {};
+    let token = req[MINTED] ?? readCookie(req, this.cookieName);
+    if (token === void 0 || !TOKEN_PATTERN.test(token)) {
+      token = randomBytes(32).toString("base64url");
+      req[MINTED] = token;
+      this.setCookie(req, token);
+    }
+    const digest = createHash("sha256").update(token).digest("base64url").slice(0, 32);
+    return {
+      id: `anon:${digest}`,
+      roles: [
+        ...this.roles
+      ]
+    };
+  }
+  setCookie(req, token) {
+    const res = req.res;
+    if (res?.setHeader === void 0 || res.headersSent === true) return;
+    const sameSite = this.options.sameSite ?? "lax";
+    const secureOption = this.options.secure ?? "auto";
+    const secure = sameSite === "none" || (secureOption === "auto" ? isHttps(req) : secureOption);
+    const maxAge = Math.round((this.options.maxAgeDays ?? 365) * 24 * 60 * 60);
+    const cookie = [
+      `${this.cookieName}=${token}`,
+      `Path=${this.options.path ?? "/"}`,
+      `Max-Age=${maxAge}`,
+      "HttpOnly",
+      `SameSite=${sameSite === "none" ? "None" : sameSite === "strict" ? "Strict" : "Lax"}`,
+      ...secure ? [
+        "Secure"
+      ] : []
+    ].join("; ");
+    const existing = res.getHeader?.("Set-Cookie");
+    const list = Array.isArray(existing) ? existing.map(String) : existing !== void 0 ? [
+      String(existing)
+    ] : [];
+    res.setHeader("Set-Cookie", [
+      ...list,
+      cookie
+    ]);
+  }
+};
+
 // src/runner/inline-agent-runner.ts
 import { AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY4, AGENT_STORE as AGENT_STORE3, RunCancelledError, agentFailureCode, encodeStreamEvent, publishAgentRunFailed, runAgentLoop, settleAll, settleUnsettledDelegation } from "@dudousxd/nestjs-agent-core";
 import { Inject as Inject17, Injectable as Injectable7, Logger as Logger4 } from "@nestjs/common";
@@ -3617,7 +3718,51 @@ function _ts_decorate19(decorators, target, key, desc) {
 }
 __name(_ts_decorate19, "_ts_decorate");
 var DEFAULT_PATH = "agent";
-function sharedProviders(durable, includeStore) {
+var logger = new Logger5("AgentModule");
+function externalStoreWrapper(modules) {
+  for (const module of modules.values()) {
+    if (module.metatype === AgentModule) continue;
+    const wrapper = module.providers.get(AGENT_STORE4);
+    if (wrapper !== void 0) return wrapper;
+  }
+  return void 0;
+}
+__name(externalStoreWrapper, "externalStoreWrapper");
+function forwardingStore(wrapper) {
+  const target = /* @__PURE__ */ __name(() => {
+    const instance = wrapper.instance;
+    if (instance === void 0 || instance === null) {
+      throw new Error("AgentModule: the AGENT_STORE bound by another module is not ready yet");
+    }
+    return instance;
+  }, "target");
+  return new Proxy({}, {
+    get(_, property) {
+      const store = target();
+      const value = store[property];
+      return typeof value === "function" ? value.bind(store) : value;
+    },
+    has(_, property) {
+      return property in target();
+    }
+  });
+}
+__name(forwardingStore, "forwardingStore");
+function resolveStore(options, modules) {
+  if (options.store !== void 0) return options.store;
+  const external = externalStoreWrapper(modules);
+  if (external !== void 0) return forwardingStore(external);
+  logger.warn("No `store` configured and no store module imported \u2014 using the in-memory store. Threads are lost on restart and not shared between processes: not for production. Pass `store`, or import a store module (e.g. MikroOrmAgentStoreModule.forFeature()).");
+  return new InMemoryAgentStore();
+}
+__name(resolveStore, "resolveStore");
+function resolveCatalog(options) {
+  if (options.models !== void 0) return options.models;
+  const carried = options.model.catalog;
+  return carried !== void 0 && typeof carried.list === "function" ? carried : void 0;
+}
+__name(resolveCatalog, "resolveCatalog");
+function sharedProviders(durable) {
   const providers = [
     {
       provide: AGENT_TOOL_REGISTRY3,
@@ -3675,7 +3820,11 @@ function sharedProviders(durable, includeStore) {
     },
     {
       provide: AGENT_ACTOR_RESOLVER11,
-      useFactory: /* @__PURE__ */ __name((options) => options.actorResolver, "useFactory"),
+      useFactory: /* @__PURE__ */ __name((options) => {
+        if (options.actorResolver !== void 0) return options.actorResolver;
+        logger.warn("No `actorResolver` configured \u2014 the agent endpoints are PUBLIC: every browser gets its own anonymous identity (an HttpOnly cookie). Set `actorResolver: requestUserActorResolver()` (or your own) to require login.");
+        return new AnonymousActorResolver();
+      }, "useFactory"),
       inject: [
         AGENT_OPTIONS5
       ]
@@ -3709,7 +3858,7 @@ function sharedProviders(durable, includeStore) {
     },
     {
       provide: AGENT_MODEL_CATALOG2,
-      useFactory: /* @__PURE__ */ __name((o) => o.models, "useFactory"),
+      useFactory: /* @__PURE__ */ __name((o) => resolveCatalog(o), "useFactory"),
       inject: [
         AGENT_OPTIONS5
       ]
@@ -3734,15 +3883,14 @@ function sharedProviders(durable, includeStore) {
       useExisting: AgentApprovalPortAdapter
     }
   ];
-  if (includeStore) {
-    providers.push({
-      provide: AGENT_STORE4,
-      useFactory: /* @__PURE__ */ __name((o) => o.store, "useFactory"),
-      inject: [
-        AGENT_OPTIONS5
-      ]
-    });
-  }
+  providers.push({
+    provide: AGENT_STORE4,
+    useFactory: /* @__PURE__ */ __name((o, modules) => resolveStore(o, modules), "useFactory"),
+    inject: [
+      AGENT_OPTIONS5,
+      ModulesContainer
+    ]
+  });
   if (durable) {
     providers.push({
       provide: AGENT_RUNNER2,
@@ -3768,7 +3916,7 @@ function sharedProviders(durable, includeStore) {
   return providers;
 }
 __name(sharedProviders, "sharedProviders");
-function exportsFor(includeStore) {
+function exportsFor() {
   return [
     AGENT_OPTIONS5,
     AGENT_TOOL_REGISTRY3,
@@ -3777,9 +3925,7 @@ function exportsFor(includeStore) {
     AGENT_ROLES_POLICY2,
     AGENT_ACTOR_RESOLVER11,
     AGENT_MODEL2,
-    ...includeStore ? [
-      AGENT_STORE4
-    ] : [],
+    AGENT_STORE4,
     AGENT_QUOTA_STORE3,
     AGENT_MODEL_CATALOG2,
     AGENT_QUOTA_PROVIDER2,
@@ -3850,7 +3996,6 @@ var AgentModule = class _AgentModule {
   }
   static forRoot(options) {
     const path = options.path ?? DEFAULT_PATH;
-    const includeStore = options.store !== void 0;
     applyGuards(options.guards);
     return {
       module: _AgentModule,
@@ -3865,15 +4010,14 @@ var AgentModule = class _AgentModule {
           provide: AGENT_OPTIONS5,
           useValue: options
         },
-        ...sharedProviders(options.durable ?? false, includeStore),
+        ...sharedProviders(options.durable ?? false),
         ...guardProviders(options.guards)
       ],
-      exports: exportsFor(includeStore)
+      exports: exportsFor()
     };
   }
   static forRootAsync(options) {
     const path = options.path ?? DEFAULT_PATH;
-    const includeStore = options.externalStore !== true;
     applyGuards(options.guards);
     return {
       module: _AgentModule,
@@ -3900,10 +4044,10 @@ var AgentModule = class _AgentModule {
           }), "useFactory"),
           inject: options.inject ?? []
         },
-        ...sharedProviders(options.durable ?? false, includeStore),
+        ...sharedProviders(options.durable ?? false),
         ...guardProviders(options.guards)
       ],
-      exports: exportsFor(includeStore)
+      exports: exportsFor()
     };
   }
 };
@@ -3943,6 +4087,49 @@ var HeaderActorResolver = class {
   }
 };
 
+// src/resolver/request-user-actor-resolver.ts
+import { UnauthorizedException as UnauthorizedException2 } from "@nestjs/common";
+function field(user, ...names) {
+  for (const name of names) {
+    const value = user[name];
+    if (value !== void 0 && value !== null && value !== "") return value;
+  }
+  return void 0;
+}
+__name(field, "field");
+function defaultRequestUserMapper(user) {
+  const id = field(user, "id", "sub", "_id", "userId");
+  if (id === void 0) {
+    throw new UnauthorizedException2("requestUserActorResolver: req.user has no id/sub/_id/userId \u2014 pass a mapper: requestUserActorResolver((user) => ({ id: \u2026, roles: \u2026 }))");
+  }
+  const rawRoles = field(user, "roles", "role");
+  const roles = Array.isArray(rawRoles) ? rawRoles.map(String) : typeof rawRoles === "string" ? [
+    rawRoles
+  ] : [];
+  const tenant = field(user, "tenantRef", "tenantId", "orgId");
+  return {
+    id: String(id),
+    roles,
+    ...tenant !== void 0 ? {
+      tenantRef: String(tenant)
+    } : {}
+  };
+}
+__name(defaultRequestUserMapper, "defaultRequestUserMapper");
+function requestUserActorResolver(map) {
+  return {
+    async resolve(req) {
+      const user = typeof req === "object" && req !== null ? req.user : void 0;
+      if (user === void 0 || user === null || user === false) {
+        throw new UnauthorizedException2("Sign in to use the agent.");
+      }
+      if (map !== void 0) return map(user, req);
+      return defaultRequestUserMapper(user);
+    }
+  };
+}
+__name(requestUserActorResolver, "requestUserActorResolver");
+
 // src/index.ts
 export * from "@dudousxd/nestjs-agent-core";
 export {
@@ -3958,6 +4145,7 @@ export {
   AgentService,
   AiTool,
   AiToolDiscoveryService,
+  AnonymousActorResolver,
   AttachmentsController,
   DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES,
   DEFAULT_MAX_ATTACHMENT_BYTES,
@@ -3979,14 +4167,17 @@ export {
   SystemPromptContributor,
   ToolsController,
   declaredSkillProvider,
+  defaultRequestUserMapper,
   delegateToolName,
   provideAgentTool,
   provideAgentTools,
   readAgentMetadata,
   readAiToolMetadata,
   readSkillMetadata,
+  requestUserActorResolver,
   resolveSkillsConfig,
   skillScope,
+  toolNameFromClass,
   utcDay
 };
 //# sourceMappingURL=index.js.map