@dudousxd/nestjs-agent 1.11.0 → 1.12.0

package/dist/index.cjs

@@ -36,13 +36,14 @@ __export(index_exports, {
   AiToolDiscoveryService: () => AiToolDiscoveryService,
   AnonymousActorResolver: () => AnonymousActorResolver,
   AttachmentsController: () => AttachmentsController,
+  ConfigController: () => ConfigController,
   DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES: () => DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES,
   DEFAULT_MAX_ATTACHMENT_BYTES: () => DEFAULT_MAX_ATTACHMENT_BYTES,
   HeaderActorResolver: () => HeaderActorResolver,
   InProcessTokenStreamSink: () => InProcessTokenStreamSink,
   InlineAgentRunner: () => InlineAgentRunner,
   LedgerQuotaProvider: () => LedgerQuotaProvider,
-  LedgerQuotaStore: () => LedgerQuotaStore,
+  MAX_ATTACHMENTS_PER_MESSAGE: () => MAX_ATTACHMENTS_PER_MESSAGE,
   MemoriesController: () => MemoriesController,
   MessagesController: () => MessagesController,
   ModelsController: () => ModelsController,
@@ -55,6 +56,7 @@ __export(index_exports, {
   SystemPrompt: () => SystemPrompt,
   SystemPromptContributor: () => SystemPromptContributor,
   ToolsController: () => ToolsController,
+  attachmentLimits: () => attachmentLimits,
   declaredSkillProvider: () => declaredSkillProvider,
   defaultRequestUserMapper: () => defaultRequestUserMapper,
   delegateToolName: () => delegateToolName,
@@ -72,8 +74,8 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // src/agent.module.ts
-var import_nestjs_agent_core23 = require("@dudousxd/nestjs-agent-core");
-var import_common19 = require("@nestjs/common");
+var import_nestjs_agent_core24 = require("@dudousxd/nestjs-agent-core");
+var import_common20 = require("@nestjs/common");
 var import_core4 = require("@nestjs/core");
 
 // src/agent-deps.factory.ts
@@ -123,11 +125,10 @@ var AgentDepsFactory2 = class {
   registry;
   agents;
   promptContributors;
-  quota;
   pricingStore;
   skills;
   memory;
-  constructor(options, model, store, sink, rolesPolicy, registry, agents, promptContributors, quota, pricingStore, skills, memory) {
+  constructor(options, model, store, sink, rolesPolicy, registry, agents, promptContributors, pricingStore, skills, memory) {
     this.options = options;
     this.model = model;
     this.store = store;
@@ -136,7 +137,6 @@ var AgentDepsFactory2 = class {
     this.registry = registry;
     this.agents = agents;
     this.promptContributors = promptContributors;
-    this.quota = quota;
     this.pricingStore = pricingStore;
     this.skills = skills;
     this.memory = memory;
@@ -208,9 +208,6 @@ var AgentDepsFactory2 = class {
       ...definition?.modelId !== void 0 ? {
         modelId: definition.modelId
       } : {},
-      ...this.quota !== void 0 ? {
-        quota: this.quota
-      } : {},
       ...this.pricingStore !== void 0 ? {
         pricingStore: this.pricingStore
       } : {},
@@ -317,13 +314,12 @@ AgentDepsFactory2 = _ts_decorate([
   _ts_param(5, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_TOOL_REGISTRY)),
   _ts_param(6, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_REGISTRY)),
   _ts_param(7, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_PROMPT_CONTRIBUTORS)),
-  _ts_param(8, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_QUOTA_STORE)),
+  _ts_param(8, (0, import_common.Optional)()),
+  _ts_param(8, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_PRICING_STORE)),
   _ts_param(9, (0, import_common.Optional)()),
-  _ts_param(9, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_PRICING_STORE)),
+  _ts_param(9, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_SKILLS)),
   _ts_param(10, (0, import_common.Optional)()),
-  _ts_param(10, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_SKILLS)),
-  _ts_param(11, (0, import_common.Optional)()),
-  _ts_param(11, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_MEMORY)),
+  _ts_param(10, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_MEMORY)),
   _ts_metadata("design:type", Function),
   _ts_metadata("design:paramtypes", [
     typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
@@ -336,7 +332,6 @@ AgentDepsFactory2 = _ts_decorate([
     Array,
     Object,
     Object,
-    Object,
     Object
   ])
 ], AgentDepsFactory2);
@@ -395,16 +390,14 @@ var AgentService = class {
   runner;
   store;
   deps;
-  quota;
   staging;
   models;
   quotaProvider;
   options;
-  constructor(runner, store, deps, quota, staging, models, quotaProvider, options) {
+  constructor(runner, store, deps, staging, models, quotaProvider, options) {
     this.runner = runner;
     this.store = store;
     this.deps = deps;
-    this.quota = quota;
     this.staging = staging;
     this.models = models;
     this.quotaProvider = quotaProvider;
@@ -420,33 +413,23 @@ var AgentService = class {
         actor
       });
     }
-    const today = await this.quotaToday(actor.id);
+    const { usedTokens, costUsd } = await this.store.quotaToday(actor.id, utcDay());
     return {
       windows: [
         {
           period: "day",
-          usedTokens: today.usedTokens,
-          ...today.limitTokens !== null ? {
-            limitTokens: today.limitTokens
-          } : {},
-          usedUsd: today.costUsd
-        }
-      ],
-      ...today.withinLimit ? {} : {
-        blocked: {
-          period: "day"
+          usedTokens,
+          usedUsd: costUsd
         }
-      }
+      ]
     };
   }
   /**
   * Refuse a turn the actor's budget no longer covers — only when the host configured one
-  * (`quotaProvider` or `quotaLimits`): the default report is informational, and the daily token
-  * quota the loop enforces keeps working as it always has.
+  * (`quota`): the default report is informational.
   */
   async assertWithinQuota(actor) {
-    const gated = this.options?.quotaProvider !== void 0 || this.options?.quotaLimits !== void 0;
-    if (!gated || this.quotaProvider === void 0) {
+    if (this.options?.quota === void 0 || this.quotaProvider === void 0) {
       return;
     }
     const { blocked } = await this.quotaProvider.report({
@@ -697,7 +680,7 @@ var AgentService = class {
   async getThread(actor, threadId) {
     await this.assertOwnsThread(actor, threadId);
     const thread = await this.store.getThread(threadId);
-    return thread === null ? null : this.toDetailView(thread);
+    return thread === null ? null : this.toDetailView(thread, actor);
   }
   async deleteThread(actor, threadId) {
     await this.assertOwnsThread(actor, threadId);
@@ -789,19 +772,46 @@ var AgentService = class {
       ...thread,
       defaultAgent: thread.defaultAgent ?? null,
       model: thread.model ?? null,
-      activeRunId: await this.store.activeRunForThread?.(thread.id) ?? null
+      activeRunId: await this.store.activeRunForThread?.(thread.id) ?? thread.activeRunId ?? null
     };
   }
-  async toDetailView(thread) {
+  async toDetailView(thread, actor) {
     const summary = await this.toSummaryView(thread);
     return {
       ...summary,
-      messages: thread.messages,
-      ...thread.activeStreamId !== void 0 ? {
-        activeStreamId: thread.activeStreamId
-      } : {}
+      messages: await this.freshAttachmentUrls(thread.messages, actor)
     };
   }
+  /**
+  * Re-mint each replayed attachment's url from the staging store, by `mediaId`: the url persisted
+  * with the message was minted for THAT turn (a presigned url with an expiry), so an old turn would
+  * otherwise show a dead link. The store's own access check applies — an attachment it will not
+  * resolve for this actor keeps the url it was stored with.
+  */
+  async freshAttachmentUrls(messages, actor) {
+    const staging = this.staging;
+    if (staging === void 0 || !messages.some((message) => message.attachments?.length)) {
+      return messages;
+    }
+    return Promise.all(messages.map(async (message) => {
+      if (message.attachments === void 0 || message.attachments.length === 0) return message;
+      const attachments = await Promise.all(message.attachments.map(async (attachment) => {
+        try {
+          const fresh = await staging.resolve({
+            mediaId: attachment.mediaId,
+            actor
+          });
+          return fresh ?? attachment;
+        } catch {
+          return attachment;
+        }
+      }));
+      return {
+        ...message,
+        attachments
+      };
+    }));
+  }
   async promoteThread(actor, threadId) {
     await this.assertOwnsThread(actor, threadId);
     return this.store.promoteThread(threadId);
@@ -911,30 +921,6 @@ var AgentService = class {
     return list;
   }
   /**
-  * The day's usage for the badge: tokens + summed USD cost from the store, and the configured
-  * limit from the quota store (null → unlimited). `withinLimit` comes from the quota store so it
-  * can never drift from what enforcement uses.
-  */
-  async quotaToday(actorRef) {
-    const day = utcDay();
-    const { usedTokens, costUsd } = await this.store.quotaToday(actorRef, day);
-    if (this.quota === void 0) {
-      return {
-        usedTokens,
-        costUsd,
-        limitTokens: null,
-        withinLimit: true
-      };
-    }
-    const state = await this.quota.check(actorRef, day);
-    return {
-      usedTokens: state.usedTokens,
-      costUsd,
-      limitTokens: state.limitTokens,
-      withinLimit: state.withinLimit
-    };
-  }
-  /**
   * Authorization seam for thread-scoped endpoints: the caller must own the thread. A missing
   * thread is a 404; someone else's thread is a 403 — one actor never touches another's thread.
   */
@@ -1053,21 +1039,19 @@ AgentService = _ts_decorate2([
   _ts_param2(0, (0, import_common2.Inject)(import_nestjs_agent_core3.AGENT_RUNNER)),
   _ts_param2(1, (0, import_common2.Inject)(import_nestjs_agent_core3.AGENT_STORE)),
   _ts_param2(2, (0, import_common2.Inject)(import_nestjs_agent_core3.AGENT_DEPS_FACTORY)),
-  _ts_param2(3, (0, import_common2.Inject)(import_nestjs_agent_core3.AGENT_QUOTA_STORE)),
+  _ts_param2(3, (0, import_common2.Optional)()),
+  _ts_param2(3, (0, import_common2.Inject)(import_nestjs_agent_core3.AGENT_ATTACHMENT_STAGING)),
   _ts_param2(4, (0, import_common2.Optional)()),
-  _ts_param2(4, (0, import_common2.Inject)(import_nestjs_agent_core3.AGENT_ATTACHMENT_STAGING)),
+  _ts_param2(4, (0, import_common2.Inject)(import_nestjs_agent_core3.AGENT_MODEL_CATALOG)),
   _ts_param2(5, (0, import_common2.Optional)()),
-  _ts_param2(5, (0, import_common2.Inject)(import_nestjs_agent_core3.AGENT_MODEL_CATALOG)),
+  _ts_param2(5, (0, import_common2.Inject)(import_nestjs_agent_core3.AGENT_QUOTA_PROVIDER)),
   _ts_param2(6, (0, import_common2.Optional)()),
-  _ts_param2(6, (0, import_common2.Inject)(import_nestjs_agent_core3.AGENT_QUOTA_PROVIDER)),
-  _ts_param2(7, (0, import_common2.Optional)()),
-  _ts_param2(7, (0, import_common2.Inject)(import_nestjs_agent_core3.AGENT_OPTIONS)),
+  _ts_param2(6, (0, import_common2.Inject)(import_nestjs_agent_core3.AGENT_OPTIONS)),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     typeof AgentRunner === "undefined" ? Object : AgentRunner,
     typeof AgentStore === "undefined" ? Object : AgentStore,
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
-    Object,
     typeof AttachmentStagingStore === "undefined" ? Object : AttachmentStagingStore,
     typeof ModelCatalog === "undefined" ? Object : ModelCatalog,
     typeof QuotaProvider === "undefined" ? Object : QuotaProvider,
@@ -1213,6 +1197,33 @@ AgentsController = _ts_decorate4([
 var import_nestjs_agent_core5 = require("@dudousxd/nestjs-agent-core");
 var import_common5 = require("@nestjs/common");
 var import_platform_express = require("@nestjs/platform-express");
+
+// src/attachment-limits.ts
+var DEFAULT_MAX_ATTACHMENT_BYTES = 20 * 1024 * 1024;
+var DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES = [
+  "image/png",
+  "image/jpeg",
+  "image/gif",
+  "image/webp",
+  "application/pdf",
+  "text/plain",
+  "text/csv"
+];
+var MAX_ATTACHMENTS_PER_MESSAGE = 10;
+function attachmentLimits(options, staging) {
+  const declared = staging?.describe?.();
+  const own = options?.attachments;
+  return {
+    enabled: staging !== void 0,
+    upload: staging === void 0 ? null : declared?.upload ?? "multipart",
+    maxBytes: declared?.maxBytes ?? own?.maxBytes ?? DEFAULT_MAX_ATTACHMENT_BYTES,
+    allowedContentTypes: declared?.allowedContentTypes ?? own?.allowedContentTypes ?? DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES,
+    maxPerMessage: MAX_ATTACHMENTS_PER_MESSAGE
+  };
+}
+__name(attachmentLimits, "attachmentLimits");
+
+// src/controller/attachments.controller.ts
 function _ts_decorate5(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -1239,18 +1250,8 @@ function _ts_param4(paramIndex, decorator) {
   };
 }
 __name(_ts_param4, "_ts_param");
-var DEFAULT_MAX_ATTACHMENT_BYTES = 20 * 1024 * 1024;
 var HARD_MAX_ATTACHMENT_BYTES = 32 * 1024 * 1024;
 var ATTACHMENT_PAGE_SIZE = 50;
-var DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES = [
-  "image/png",
-  "image/jpeg",
-  "image/gif",
-  "image/webp",
-  "application/pdf",
-  "text/plain",
-  "text/csv"
-];
 var AttachmentsController = class {
   static {
     __name(this, "AttachmentsController");
@@ -1266,17 +1267,6 @@ var AttachmentsController = class {
     this.staging = staging;
   }
   /**
-  * `attachments.upload: true` is what mounts this controller at all (see `agent.module.ts`), so by
-  * the time an instance exists the host clearly intends uploads to work. Fail boot loudly rather
-  * than mounting a controller that would 501 on every single request because nobody bound
-  * `AGENT_ATTACHMENT_STAGING`.
-  */
-  onModuleInit() {
-    if (this.options.attachments?.upload === true && this.staging === void 0) {
-      throw new Error("AgentModule: attachments.upload is true but no AGENT_ATTACHMENT_STAGING provider is bound. Bind one (e.g. `{ provide: AGENT_ATTACHMENT_STAGING, useClass: MyStagingStore }`) in a module imported alongside AgentModule, or set attachments.upload to false.");
-    }
-  }
-  /**
   * The caller's own staged files, newest first — the one question `GET /agent/threads/:id` cannot
   * answer, since an upload that was never sent belongs to no thread.
   *
@@ -1293,16 +1283,15 @@ var AttachmentsController = class {
   }
   async upload(req, file) {
     if (this.staging === void 0) {
-      throw new import_common5.NotImplementedException("Attachment upload is not configured on this server.");
+      throw new import_common5.NotImplementedException("Attachment upload is not configured on this server: bind AGENT_ATTACHMENT_STAGING (e.g. import AgentMediaAttachmentsModule).");
     }
     if (file === void 0) {
       throw new import_common5.BadRequestException('multipart field "file" is required');
     }
-    const allowedContentTypes = this.options.attachments?.allowedContentTypes ?? DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES;
+    const { allowedContentTypes, maxBytes } = attachmentLimits(this.options, this.staging);
     if (!allowedContentTypes.includes(file.mimetype)) {
       throw new import_common5.UnsupportedMediaTypeException(`content type "${file.mimetype}" is not allowed (allowed: ${allowedContentTypes.join(", ")})`);
     }
-    const maxBytes = this.options.attachments?.maxBytes ?? DEFAULT_MAX_ATTACHMENT_BYTES;
     if (file.size > maxBytes) {
       throw new import_common5.PayloadTooLargeException(`file exceeds the ${maxBytes}-byte limit`);
     }
@@ -1385,7 +1374,6 @@ function _ts_param5(paramIndex, decorator) {
   };
 }
 __name(_ts_param5, "_ts_param");
-var MAX_ATTACHMENTS_PER_MESSAGE = 10;
 function attachmentRefs(claimed) {
   if (claimed === void 0) {
     return [];
@@ -1400,6 +1388,9 @@ function attachmentRefs(claimed) {
     if (typeof entry !== "object" || entry === null || !("mediaId" in entry)) {
       throw new import_common6.BadRequestException("each attachment must be an object with a mediaId");
     }
+    if (Object.keys(entry).some((key) => key !== "mediaId")) {
+      throw new import_common6.BadRequestException("attachments are { mediaId } refs \u2014 send nothing but the id");
+    }
     const { mediaId } = entry;
     if (typeof mediaId !== "string" || mediaId.length === 0) {
       throw new import_common6.BadRequestException("each attachment must carry a non-empty string mediaId");
@@ -1595,9 +1586,98 @@ function parseCursor(raw) {
 }
 __name(parseCursor, "parseCursor");
 
-// src/controller/memories.controller.ts
+// src/controller/config.controller.ts
 var import_nestjs_agent_core7 = require("@dudousxd/nestjs-agent-core");
 var import_common7 = require("@nestjs/common");
+
+// src/resolver/anonymous-actor-resolver.ts
+var import_node_crypto = require("crypto");
+var TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/;
+var MINTED = /* @__PURE__ */ Symbol("nestjs-agent:anonymous-token");
+function readCookie(req, name) {
+  const header = req.headers?.cookie;
+  const raw = Array.isArray(header) ? header.join("; ") : header;
+  if (raw === void 0) return void 0;
+  for (const pair of raw.split(";")) {
+    const index = pair.indexOf("=");
+    if (index === -1) continue;
+    if (pair.slice(0, index).trim() === name) {
+      try {
+        return decodeURIComponent(pair.slice(index + 1).trim());
+      } catch {
+        return void 0;
+      }
+    }
+  }
+  return void 0;
+}
+__name(readCookie, "readCookie");
+function isHttps(req) {
+  if (req.secure === true) return true;
+  const forwarded = req.headers?.["x-forwarded-proto"];
+  const proto = Array.isArray(forwarded) ? forwarded[0] : forwarded;
+  return proto?.split(",")[0]?.trim() === "https";
+}
+__name(isHttps, "isHttps");
+var AnonymousActorResolver = class {
+  static {
+    __name(this, "AnonymousActorResolver");
+  }
+  options;
+  cookieName;
+  roles;
+  constructor(options = {}) {
+    this.options = options;
+    this.cookieName = options.cookieName ?? "agent_anon";
+    this.roles = options.roles ?? [
+      "anonymous"
+    ];
+  }
+  resolve(request) {
+    const req = typeof request === "object" && request !== null ? request : {};
+    let token = req[MINTED] ?? readCookie(req, this.cookieName);
+    if (token === void 0 || !TOKEN_PATTERN.test(token)) {
+      token = (0, import_node_crypto.randomBytes)(32).toString("base64url");
+      req[MINTED] = token;
+      this.setCookie(req, token);
+    }
+    const digest = (0, import_node_crypto.createHash)("sha256").update(token).digest("base64url").slice(0, 32);
+    return {
+      id: `anon:${digest}`,
+      roles: [
+        ...this.roles
+      ]
+    };
+  }
+  setCookie(req, token) {
+    const res = req.res;
+    if (res?.setHeader === void 0 || res.headersSent === true) return;
+    const sameSite = this.options.sameSite ?? "lax";
+    const secureOption = this.options.secure ?? "auto";
+    const secure = sameSite === "none" || (secureOption === "auto" ? isHttps(req) : secureOption);
+    const maxAge = Math.round((this.options.maxAgeDays ?? 365) * 24 * 60 * 60);
+    const cookie = [
+      `${this.cookieName}=${token}`,
+      `Path=${this.options.path ?? "/"}`,
+      `Max-Age=${maxAge}`,
+      "HttpOnly",
+      `SameSite=${sameSite === "none" ? "None" : sameSite === "strict" ? "Strict" : "Lax"}`,
+      ...secure ? [
+        "Secure"
+      ] : []
+    ].join("; ");
+    const existing = res.getHeader?.("Set-Cookie");
+    const list = Array.isArray(existing) ? existing.map(String) : existing !== void 0 ? [
+      String(existing)
+    ] : [];
+    res.setHeader("Set-Cookie", [
+      ...list,
+      cookie
+    ]);
+  }
+};
+
+// src/controller/config.controller.ts
 function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -1624,6 +1704,91 @@ function _ts_param6(paramIndex, decorator) {
   };
 }
 __name(_ts_param6, "_ts_param");
+var ConfigController = class {
+  static {
+    __name(this, "ConfigController");
+  }
+  options;
+  actorResolver;
+  staging;
+  models;
+  constructor(options, actorResolver, staging, models) {
+    this.options = options;
+    this.actorResolver = actorResolver;
+    this.staging = staging;
+    this.models = models;
+  }
+  async config(req) {
+    await this.actorResolver.resolve(req);
+    return {
+      attachments: attachmentLimits(this.options, this.staging),
+      models: {
+        enabled: this.models !== void 0
+      },
+      quota: {
+        enforced: this.options.quota !== void 0
+      },
+      identity: {
+        anonymous: this.actorResolver instanceof AnonymousActorResolver
+      }
+    };
+  }
+};
+_ts_decorate7([
+  (0, import_common7.Get)(),
+  _ts_param6(0, (0, import_common7.Req)()),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request
+  ]),
+  _ts_metadata7("design:returntype", Promise)
+], ConfigController.prototype, "config", null);
+ConfigController = _ts_decorate7([
+  (0, import_common7.Controller)("config"),
+  _ts_param6(0, (0, import_common7.Inject)(import_nestjs_agent_core7.AGENT_OPTIONS)),
+  _ts_param6(1, (0, import_common7.Inject)(import_nestjs_agent_core7.AGENT_ACTOR_RESOLVER)),
+  _ts_param6(2, (0, import_common7.Optional)()),
+  _ts_param6(2, (0, import_common7.Inject)(import_nestjs_agent_core7.AGENT_ATTACHMENT_STAGING)),
+  _ts_param6(3, (0, import_common7.Optional)()),
+  _ts_param6(3, (0, import_common7.Inject)(import_nestjs_agent_core7.AGENT_MODEL_CATALOG)),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
+    typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
+    typeof ActorResolver === "undefined" ? Object : ActorResolver,
+    Object,
+    Object
+  ])
+], ConfigController);
+
+// src/controller/memories.controller.ts
+var import_nestjs_agent_core8 = require("@dudousxd/nestjs-agent-core");
+var import_common8 = require("@nestjs/common");
+function _ts_decorate8(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+    r = Reflect.decorate(decorators, target, key, desc);
+  } else {
+    for (var i = decorators.length - 1; i >= 0; i--) {
+      if (d = decorators[i]) {
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+      }
+    }
+  }
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate8, "_ts_decorate");
+function _ts_metadata8(metadataKey, metadataValue) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+    return Reflect.metadata(metadataKey, metadataValue);
+  }
+}
+__name(_ts_metadata8, "_ts_metadata");
+function _ts_param7(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param7, "_ts_param");
 var MemoriesController = class {
   static {
     __name(this, "MemoriesController");
@@ -1657,20 +1822,20 @@ var MemoriesController = class {
   */
   async forget(req, id) {
     if (this.memory === void 0) {
-      throw new import_common7.NotFoundException("No memory is configured in this deployment.");
+      throw new import_common8.NotFoundException("No memory is configured in this deployment.");
     }
     const actor = await this.actorResolver.resolve(req);
     const digest = await this.unbounded("", actor);
     const entry = digest.entries.find((candidate) => candidate.id === id);
     if (entry === void 0) {
-      throw new import_common7.NotFoundException(`No memory with id "${id}".`);
+      throw new import_common8.NotFoundException(`No memory with id "${id}".`);
     }
-    const verdict = (0, import_nestjs_agent_core7.memoryForgetVerdict)({
+    const verdict = (0, import_nestjs_agent_core8.memoryForgetVerdict)({
       record: entry,
       actor
     });
     if (!verdict.allowed) {
-      throw new import_common7.ForbiddenException(verdict.reason);
+      throw new import_common8.ForbiddenException(verdict.reason);
     }
     return {
       forgotten: await this.memory.provider.forget({
@@ -1684,7 +1849,7 @@ var MemoriesController = class {
   }
   async unbounded(threadId, actor) {
     const config = this.memory;
-    return await (0, import_nestjs_agent_core7.offerMemories)({
+    return await (0, import_nestjs_agent_core8.offerMemories)({
       config: {
         ...config,
         maxMemories: Number.POSITIVE_INFINITY
@@ -1696,44 +1861,44 @@ var MemoriesController = class {
     });
   }
 };
-_ts_decorate7([
-  (0, import_common7.Get)(),
-  _ts_param6(0, (0, import_common7.Req)()),
-  _ts_param6(1, (0, import_common7.Query)("threadId")),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+_ts_decorate8([
+  (0, import_common8.Get)(),
+  _ts_param7(0, (0, import_common8.Req)()),
+  _ts_param7(1, (0, import_common8.Query)("threadId")),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata7("design:returntype", Promise)
+  _ts_metadata8("design:returntype", Promise)
 ], MemoriesController.prototype, "list", null);
-_ts_decorate7([
-  (0, import_common7.Delete)(":id"),
-  _ts_param6(0, (0, import_common7.Req)()),
-  _ts_param6(1, (0, import_common7.Param)("id")),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+_ts_decorate8([
+  (0, import_common8.Delete)(":id"),
+  _ts_param7(0, (0, import_common8.Req)()),
+  _ts_param7(1, (0, import_common8.Param)("id")),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata7("design:returntype", Promise)
+  _ts_metadata8("design:returntype", Promise)
 ], MemoriesController.prototype, "forget", null);
-MemoriesController = _ts_decorate7([
-  (0, import_common7.Controller)("memories"),
-  _ts_param6(0, (0, import_common7.Inject)(import_nestjs_agent_core7.AGENT_ACTOR_RESOLVER)),
-  _ts_param6(1, (0, import_common7.Optional)()),
-  _ts_param6(1, (0, import_common7.Inject)(import_nestjs_agent_core7.AGENT_MEMORY)),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+MemoriesController = _ts_decorate8([
+  (0, import_common8.Controller)("memories"),
+  _ts_param7(0, (0, import_common8.Inject)(import_nestjs_agent_core8.AGENT_ACTOR_RESOLVER)),
+  _ts_param7(1, (0, import_common8.Optional)()),
+  _ts_param7(1, (0, import_common8.Inject)(import_nestjs_agent_core8.AGENT_MEMORY)),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof ActorResolver === "undefined" ? Object : ActorResolver,
     Object
   ])
 ], MemoriesController);
 
 // src/controller/messages.controller.ts
-var import_nestjs_agent_core8 = require("@dudousxd/nestjs-agent-core");
-var import_common8 = require("@nestjs/common");
-function _ts_decorate8(decorators, target, key, desc) {
+var import_nestjs_agent_core9 = require("@dudousxd/nestjs-agent-core");
+var import_common9 = require("@nestjs/common");
+function _ts_decorate9(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1746,19 +1911,19 @@ function _ts_decorate8(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate8, "_ts_decorate");
-function _ts_metadata8(metadataKey, metadataValue) {
+__name(_ts_decorate9, "_ts_decorate");
+function _ts_metadata9(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata8, "_ts_metadata");
-function _ts_param7(paramIndex, decorator) {
+__name(_ts_metadata9, "_ts_metadata");
+function _ts_param8(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param7, "_ts_param");
+__name(_ts_param8, "_ts_param");
 var MessagesController = class {
   static {
     __name(this, "MessagesController");
@@ -1786,34 +1951,34 @@ var MessagesController = class {
     };
   }
 };
-_ts_decorate8([
-  (0, import_common8.Post)(":id/feedback"),
-  (0, import_common8.HttpCode)(200),
-  _ts_param7(0, (0, import_common8.Req)()),
-  _ts_param7(1, (0, import_common8.Param)("id")),
-  _ts_param7(2, (0, import_common8.Body)()),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate9([
+  (0, import_common9.Post)(":id/feedback"),
+  (0, import_common9.HttpCode)(200),
+  _ts_param8(0, (0, import_common9.Req)()),
+  _ts_param8(1, (0, import_common9.Param)("id")),
+  _ts_param8(2, (0, import_common9.Body)()),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     typeof FeedbackBody === "undefined" ? Object : FeedbackBody
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata9("design:returntype", Promise)
 ], MessagesController.prototype, "feedback", null);
-MessagesController = _ts_decorate8([
-  (0, import_common8.Controller)("messages"),
-  _ts_param7(1, (0, import_common8.Inject)(import_nestjs_agent_core8.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+MessagesController = _ts_decorate9([
+  (0, import_common9.Controller)("messages"),
+  _ts_param8(1, (0, import_common9.Inject)(import_nestjs_agent_core9.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], MessagesController);
 
 // src/controller/models.controller.ts
-var import_nestjs_agent_core9 = require("@dudousxd/nestjs-agent-core");
-var import_common9 = require("@nestjs/common");
-function _ts_decorate9(decorators, target, key, desc) {
+var import_nestjs_agent_core10 = require("@dudousxd/nestjs-agent-core");
+var import_common10 = require("@nestjs/common");
+function _ts_decorate10(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1826,19 +1991,19 @@ function _ts_decorate9(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate9, "_ts_decorate");
-function _ts_metadata9(metadataKey, metadataValue) {
+__name(_ts_decorate10, "_ts_decorate");
+function _ts_metadata10(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata9, "_ts_metadata");
-function _ts_param8(paramIndex, decorator) {
+__name(_ts_metadata10, "_ts_metadata");
+function _ts_param9(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param8, "_ts_param");
+__name(_ts_param9, "_ts_param");
 var ModelsController = class {
   static {
     __name(this, "ModelsController");
@@ -1858,31 +2023,31 @@ var ModelsController = class {
     return this.agent.listModels(actor, agent);
   }
 };
-_ts_decorate9([
-  (0, import_common9.Get)(),
-  _ts_param8(0, (0, import_common9.Req)()),
-  _ts_param8(1, (0, import_common9.Query)("agent")),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+_ts_decorate10([
+  (0, import_common10.Get)(),
+  _ts_param9(0, (0, import_common10.Req)()),
+  _ts_param9(1, (0, import_common10.Query)("agent")),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata9("design:returntype", Promise)
+  _ts_metadata10("design:returntype", Promise)
 ], ModelsController.prototype, "list", null);
-ModelsController = _ts_decorate9([
-  (0, import_common9.Controller)("models"),
-  _ts_param8(1, (0, import_common9.Inject)(import_nestjs_agent_core9.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+ModelsController = _ts_decorate10([
+  (0, import_common10.Controller)("models"),
+  _ts_param9(1, (0, import_common10.Inject)(import_nestjs_agent_core10.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], ModelsController);
 
 // src/controller/quota.controller.ts
-var import_nestjs_agent_core10 = require("@dudousxd/nestjs-agent-core");
-var import_common10 = require("@nestjs/common");
-function _ts_decorate10(decorators, target, key, desc) {
+var import_nestjs_agent_core11 = require("@dudousxd/nestjs-agent-core");
+var import_common11 = require("@nestjs/common");
+function _ts_decorate11(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1895,19 +2060,19 @@ function _ts_decorate10(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate10, "_ts_decorate");
-function _ts_metadata10(metadataKey, metadataValue) {
+__name(_ts_decorate11, "_ts_decorate");
+function _ts_metadata11(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata10, "_ts_metadata");
-function _ts_param9(paramIndex, decorator) {
+__name(_ts_metadata11, "_ts_metadata");
+function _ts_param10(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param9, "_ts_param");
+__name(_ts_param10, "_ts_param");
 var QuotaController = class {
   static {
     __name(this, "QuotaController");
@@ -1926,43 +2091,30 @@ var QuotaController = class {
     const actor = await this.actorResolver.resolve(req);
     return this.agent.quotaReport(actor);
   }
-  async today(req) {
-    const actor = await this.actorResolver.resolve(req);
-    return this.agent.quotaToday(actor.id);
-  }
 };
-_ts_decorate10([
-  (0, import_common10.Get)(),
-  _ts_param9(0, (0, import_common10.Req)()),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
+_ts_decorate11([
+  (0, import_common11.Get)(),
+  _ts_param10(0, (0, import_common11.Req)()),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request
   ]),
-  _ts_metadata10("design:returntype", Promise)
+  _ts_metadata11("design:returntype", Promise)
 ], QuotaController.prototype, "report", null);
-_ts_decorate10([
-  (0, import_common10.Get)("today"),
-  _ts_param9(0, (0, import_common10.Req)()),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
-    typeof Request === "undefined" ? Object : Request
-  ]),
-  _ts_metadata10("design:returntype", Promise)
-], QuotaController.prototype, "today", null);
-QuotaController = _ts_decorate10([
-  (0, import_common10.Controller)("quota"),
-  _ts_param9(1, (0, import_common10.Inject)(import_nestjs_agent_core10.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
+QuotaController = _ts_decorate11([
+  (0, import_common11.Controller)("quota"),
+  _ts_param10(1, (0, import_common11.Inject)(import_nestjs_agent_core11.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], QuotaController);
 
 // src/controller/skills.controller.ts
-var import_nestjs_agent_core11 = require("@dudousxd/nestjs-agent-core");
-var import_common11 = require("@nestjs/common");
-function _ts_decorate11(decorators, target, key, desc) {
+var import_nestjs_agent_core12 = require("@dudousxd/nestjs-agent-core");
+var import_common12 = require("@nestjs/common");
+function _ts_decorate12(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1975,19 +2127,19 @@ function _ts_decorate11(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate11, "_ts_decorate");
-function _ts_metadata11(metadataKey, metadataValue) {
+__name(_ts_decorate12, "_ts_decorate");
+function _ts_metadata12(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata11, "_ts_metadata");
-function _ts_param10(paramIndex, decorator) {
+__name(_ts_metadata12, "_ts_metadata");
+function _ts_param11(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param10, "_ts_param");
+__name(_ts_param11, "_ts_param");
 var SkillsController = class {
   static {
     __name(this, "SkillsController");
@@ -2003,40 +2155,40 @@ var SkillsController = class {
       return [];
     }
     const actor = await this.actorResolver.resolve(req);
-    const offer = await (0, import_nestjs_agent_core11.offerSkills)(this.skills, {
+    const offer = await (0, import_nestjs_agent_core12.offerSkills)(this.skills, {
       actor,
       threadId: threadId ?? ""
     });
     return offer.entries;
   }
 };
-_ts_decorate11([
-  (0, import_common11.Get)(),
-  _ts_param10(0, (0, import_common11.Req)()),
-  _ts_param10(1, (0, import_common11.Query)("threadId")),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+_ts_decorate12([
+  (0, import_common12.Get)(),
+  _ts_param11(0, (0, import_common12.Req)()),
+  _ts_param11(1, (0, import_common12.Query)("threadId")),
+  _ts_metadata12("design:type", Function),
+  _ts_metadata12("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata11("design:returntype", Promise)
+  _ts_metadata12("design:returntype", Promise)
 ], SkillsController.prototype, "list", null);
-SkillsController = _ts_decorate11([
-  (0, import_common11.Controller)("skills"),
-  _ts_param10(0, (0, import_common11.Inject)(import_nestjs_agent_core11.AGENT_ACTOR_RESOLVER)),
-  _ts_param10(1, (0, import_common11.Optional)()),
-  _ts_param10(1, (0, import_common11.Inject)(import_nestjs_agent_core11.AGENT_SKILLS)),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+SkillsController = _ts_decorate12([
+  (0, import_common12.Controller)("skills"),
+  _ts_param11(0, (0, import_common12.Inject)(import_nestjs_agent_core12.AGENT_ACTOR_RESOLVER)),
+  _ts_param11(1, (0, import_common12.Optional)()),
+  _ts_param11(1, (0, import_common12.Inject)(import_nestjs_agent_core12.AGENT_SKILLS)),
+  _ts_metadata12("design:type", Function),
+  _ts_metadata12("design:paramtypes", [
     typeof ActorResolver === "undefined" ? Object : ActorResolver,
     Object
   ])
 ], SkillsController);
 
 // src/controller/threads.controller.ts
-var import_nestjs_agent_core12 = require("@dudousxd/nestjs-agent-core");
-var import_common12 = require("@nestjs/common");
-function _ts_decorate12(decorators, target, key, desc) {
+var import_nestjs_agent_core13 = require("@dudousxd/nestjs-agent-core");
+var import_common13 = require("@nestjs/common");
+function _ts_decorate13(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2049,19 +2201,19 @@ function _ts_decorate12(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate12, "_ts_decorate");
-function _ts_metadata12(metadataKey, metadataValue) {
+__name(_ts_decorate13, "_ts_decorate");
+function _ts_metadata13(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata12, "_ts_metadata");
-function _ts_param11(paramIndex, decorator) {
+__name(_ts_metadata13, "_ts_metadata");
+function _ts_param12(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param11, "_ts_param");
+__name(_ts_param12, "_ts_param");
 var ThreadsController = class {
   static {
     __name(this, "ThreadsController");
@@ -2128,101 +2280,101 @@ var ThreadsController = class {
     };
   }
 };
-_ts_decorate12([
-  (0, import_common12.Get)(),
-  _ts_param11(0, (0, import_common12.Req)()),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+_ts_decorate13([
+  (0, import_common13.Get)(),
+  _ts_param12(0, (0, import_common13.Req)()),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request
   ]),
-  _ts_metadata12("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "list", null);
-_ts_decorate12([
-  (0, import_common12.Get)(":id"),
-  _ts_param11(0, (0, import_common12.Req)()),
-  _ts_param11(1, (0, import_common12.Param)("id")),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+_ts_decorate13([
+  (0, import_common13.Get)(":id"),
+  _ts_param12(0, (0, import_common13.Req)()),
+  _ts_param12(1, (0, import_common13.Param)("id")),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata12("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "detail", null);
-_ts_decorate12([
-  (0, import_common12.Delete)(":id"),
-  _ts_param11(0, (0, import_common12.Req)()),
-  _ts_param11(1, (0, import_common12.Param)("id")),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+_ts_decorate13([
+  (0, import_common13.Delete)(":id"),
+  _ts_param12(0, (0, import_common13.Req)()),
+  _ts_param12(1, (0, import_common13.Param)("id")),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata12("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "remove", null);
-_ts_decorate12([
-  (0, import_common12.Post)(":id/fork-from/:messageId"),
-  _ts_param11(0, (0, import_common12.Req)()),
-  _ts_param11(1, (0, import_common12.Param)("id")),
-  _ts_param11(2, (0, import_common12.Param)("messageId")),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+_ts_decorate13([
+  (0, import_common13.Post)(":id/fork-from/:messageId"),
+  _ts_param12(0, (0, import_common13.Req)()),
+  _ts_param12(1, (0, import_common13.Param)("id")),
+  _ts_param12(2, (0, import_common13.Param)("messageId")),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     String
   ]),
-  _ts_metadata12("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "fork", null);
-_ts_decorate12([
-  (0, import_common12.Patch)(":id"),
-  _ts_param11(0, (0, import_common12.Req)()),
-  _ts_param11(1, (0, import_common12.Param)("id")),
-  _ts_param11(2, (0, import_common12.Body)()),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+_ts_decorate13([
+  (0, import_common13.Patch)(":id"),
+  _ts_param12(0, (0, import_common13.Req)()),
+  _ts_param12(1, (0, import_common13.Param)("id")),
+  _ts_param12(2, (0, import_common13.Body)()),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     typeof UpdateThreadBody === "undefined" ? Object : UpdateThreadBody
   ]),
-  _ts_metadata12("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "update", null);
-_ts_decorate12([
-  (0, import_common12.Post)(":id/promote"),
-  _ts_param11(0, (0, import_common12.Req)()),
-  _ts_param11(1, (0, import_common12.Param)("id")),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+_ts_decorate13([
+  (0, import_common13.Post)(":id/promote"),
+  _ts_param12(0, (0, import_common13.Req)()),
+  _ts_param12(1, (0, import_common13.Param)("id")),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata12("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "promote", null);
-_ts_decorate12([
-  (0, import_common12.Delete)(":id/from/:messageId"),
-  _ts_param11(0, (0, import_common12.Req)()),
-  _ts_param11(1, (0, import_common12.Param)("id")),
-  _ts_param11(2, (0, import_common12.Param)("messageId")),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+_ts_decorate13([
+  (0, import_common13.Delete)(":id/from/:messageId"),
+  _ts_param12(0, (0, import_common13.Req)()),
+  _ts_param12(1, (0, import_common13.Param)("id")),
+  _ts_param12(2, (0, import_common13.Param)("messageId")),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     String
   ]),
-  _ts_metadata12("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "truncateFrom", null);
-ThreadsController = _ts_decorate12([
-  (0, import_common12.Controller)("threads"),
-  _ts_param11(1, (0, import_common12.Inject)(import_nestjs_agent_core12.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+ThreadsController = _ts_decorate13([
+  (0, import_common13.Controller)("threads"),
+  _ts_param12(1, (0, import_common13.Inject)(import_nestjs_agent_core13.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], ThreadsController);
 
 // src/controller/tool-call.controller.ts
-var import_nestjs_agent_core13 = require("@dudousxd/nestjs-agent-core");
-var import_common13 = require("@nestjs/common");
-function _ts_decorate13(decorators, target, key, desc) {
+var import_nestjs_agent_core14 = require("@dudousxd/nestjs-agent-core");
+var import_common14 = require("@nestjs/common");
+function _ts_decorate14(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2235,19 +2387,19 @@ function _ts_decorate13(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate13, "_ts_decorate");
-function _ts_metadata13(metadataKey, metadataValue) {
+__name(_ts_decorate14, "_ts_decorate");
+function _ts_metadata14(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata13, "_ts_metadata");
-function _ts_param12(paramIndex, decorator) {
+__name(_ts_metadata14, "_ts_metadata");
+function _ts_param13(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param12, "_ts_param");
+__name(_ts_param13, "_ts_param");
 var MAX_ANSWERED_QUESTIONS = 100;
 var MAX_VALUES_PER_QUESTION = 100;
 var MAX_ANSWER_VALUE_LENGTH = 4096;
@@ -2256,7 +2408,7 @@ var MAX_VIA_LENGTH = 64;
 var DEFAULT_VIA = "web";
 function toolCallId(claimed) {
   if (typeof claimed !== "string" || claimed.length === 0) {
-    throw new import_common13.BadRequestException("toolCallId must be a non-empty string");
+    throw new import_common14.BadRequestException("toolCallId must be a non-empty string");
   }
   return claimed;
 }
@@ -2266,10 +2418,10 @@ function rejectReason(claimed) {
     return void 0;
   }
   if (typeof claimed !== "string") {
-    throw new import_common13.BadRequestException("reason must be a string");
+    throw new import_common14.BadRequestException("reason must be a string");
   }
   if (claimed.length > MAX_REJECT_REASON_LENGTH) {
-    throw new import_common13.BadRequestException(`reason must be at most ${MAX_REJECT_REASON_LENGTH} characters`);
+    throw new import_common14.BadRequestException(`reason must be at most ${MAX_REJECT_REASON_LENGTH} characters`);
   }
   return claimed;
 }
@@ -2279,7 +2431,7 @@ function remember(claimed) {
     return false;
   }
   if (typeof claimed !== "boolean") {
-    throw new import_common13.BadRequestException("remember must be a boolean");
+    throw new import_common14.BadRequestException("remember must be a boolean");
   }
   return claimed;
 }
@@ -2289,7 +2441,7 @@ function via(claimed) {
     return DEFAULT_VIA;
   }
   if (typeof claimed !== "string" || claimed.length === 0 || claimed.length > MAX_VIA_LENGTH) {
-    throw new import_common13.BadRequestException(`via must be a string of 1-${MAX_VIA_LENGTH} characters`);
+    throw new import_common14.BadRequestException(`via must be a string of 1-${MAX_VIA_LENGTH} characters`);
   }
   return claimed;
 }
@@ -2299,26 +2451,26 @@ function answers(claimed) {
     return void 0;
   }
   if (typeof claimed !== "object" || claimed === null || Array.isArray(claimed)) {
-    throw new import_common13.BadRequestException("answers must be an object of questionId \u2192 chosen values");
+    throw new import_common14.BadRequestException("answers must be an object of questionId \u2192 chosen values");
   }
   const entries = Object.entries(claimed);
   if (entries.length > MAX_ANSWERED_QUESTIONS) {
-    throw new import_common13.BadRequestException(`answers may cover at most ${MAX_ANSWERED_QUESTIONS} questions`);
+    throw new import_common14.BadRequestException(`answers may cover at most ${MAX_ANSWERED_QUESTIONS} questions`);
   }
   const validated = /* @__PURE__ */ Object.create(null);
   for (const [questionId, values] of entries) {
     if (!Array.isArray(values)) {
-      throw new import_common13.BadRequestException(`answers["${questionId}"] must be an array of chosen values`);
+      throw new import_common14.BadRequestException(`answers["${questionId}"] must be an array of chosen values`);
     }
     if (values.length > MAX_VALUES_PER_QUESTION) {
-      throw new import_common13.BadRequestException(`answers["${questionId}"] may carry at most ${MAX_VALUES_PER_QUESTION} values`);
+      throw new import_common14.BadRequestException(`answers["${questionId}"] may carry at most ${MAX_VALUES_PER_QUESTION} values`);
     }
     for (const value of values) {
       if (typeof value !== "string") {
-        throw new import_common13.BadRequestException(`answers["${questionId}"] must contain only strings`);
+        throw new import_common14.BadRequestException(`answers["${questionId}"] must contain only strings`);
       }
       if (value.length > MAX_ANSWER_VALUE_LENGTH) {
-        throw new import_common13.BadRequestException(`answers["${questionId}"] values must be at most ${MAX_ANSWER_VALUE_LENGTH} characters`);
+        throw new import_common14.BadRequestException(`answers["${questionId}"] values must be at most ${MAX_ANSWER_VALUE_LENGTH} characters`);
       }
     }
     validated[questionId] = values;
@@ -2376,64 +2528,64 @@ var ToolCallController = class {
     };
   }
 };
-_ts_decorate13([
-  (0, import_common13.Post)("approve"),
-  _ts_param12(0, (0, import_common13.Req)()),
-  _ts_param12(1, (0, import_common13.Body)()),
-  _ts_metadata13("design:type", Function),
-  _ts_metadata13("design:paramtypes", [
+_ts_decorate14([
+  (0, import_common14.Post)("approve"),
+  _ts_param13(0, (0, import_common14.Req)()),
+  _ts_param13(1, (0, import_common14.Body)()),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof ApproveBody === "undefined" ? Object : ApproveBody
   ]),
-  _ts_metadata13("design:returntype", Promise)
+  _ts_metadata14("design:returntype", Promise)
 ], ToolCallController.prototype, "approve", null);
-_ts_decorate13([
-  (0, import_common13.Post)("reject"),
-  _ts_param12(0, (0, import_common13.Req)()),
-  _ts_param12(1, (0, import_common13.Body)()),
-  _ts_metadata13("design:type", Function),
-  _ts_metadata13("design:paramtypes", [
+_ts_decorate14([
+  (0, import_common14.Post)("reject"),
+  _ts_param13(0, (0, import_common14.Req)()),
+  _ts_param13(1, (0, import_common14.Body)()),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof RejectBody === "undefined" ? Object : RejectBody
   ]),
-  _ts_metadata13("design:returntype", Promise)
+  _ts_metadata14("design:returntype", Promise)
 ], ToolCallController.prototype, "reject", null);
-_ts_decorate13([
-  (0, import_common13.Post)("answer"),
-  _ts_param12(0, (0, import_common13.Req)()),
-  _ts_param12(1, (0, import_common13.Body)()),
-  _ts_metadata13("design:type", Function),
-  _ts_metadata13("design:paramtypes", [
+_ts_decorate14([
+  (0, import_common14.Post)("answer"),
+  _ts_param13(0, (0, import_common14.Req)()),
+  _ts_param13(1, (0, import_common14.Body)()),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof AnswerBody === "undefined" ? Object : AnswerBody
   ]),
-  _ts_metadata13("design:returntype", Promise)
+  _ts_metadata14("design:returntype", Promise)
 ], ToolCallController.prototype, "answer", null);
-_ts_decorate13([
-  (0, import_common13.Post)("skip"),
-  _ts_param12(0, (0, import_common13.Req)()),
-  _ts_param12(1, (0, import_common13.Body)()),
-  _ts_metadata13("design:type", Function),
-  _ts_metadata13("design:paramtypes", [
+_ts_decorate14([
+  (0, import_common14.Post)("skip"),
+  _ts_param13(0, (0, import_common14.Req)()),
+  _ts_param13(1, (0, import_common14.Body)()),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     Object
   ]),
-  _ts_metadata13("design:returntype", Promise)
+  _ts_metadata14("design:returntype", Promise)
 ], ToolCallController.prototype, "skip", null);
-ToolCallController = _ts_decorate13([
-  (0, import_common13.Controller)("tool-call"),
-  _ts_param12(1, (0, import_common13.Inject)(import_nestjs_agent_core13.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata13("design:type", Function),
-  _ts_metadata13("design:paramtypes", [
+ToolCallController = _ts_decorate14([
+  (0, import_common14.Controller)("tool-call"),
+  _ts_param13(1, (0, import_common14.Inject)(import_nestjs_agent_core14.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], ToolCallController);
 
 // src/controller/tools.controller.ts
-var import_nestjs_agent_core14 = require("@dudousxd/nestjs-agent-core");
-var import_common14 = require("@nestjs/common");
-function _ts_decorate14(decorators, target, key, desc) {
+var import_nestjs_agent_core15 = require("@dudousxd/nestjs-agent-core");
+var import_common15 = require("@nestjs/common");
+function _ts_decorate15(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2446,19 +2598,19 @@ function _ts_decorate14(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate14, "_ts_decorate");
-function _ts_metadata14(metadataKey, metadataValue) {
+__name(_ts_decorate15, "_ts_decorate");
+function _ts_metadata15(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata14, "_ts_metadata");
-function _ts_param13(paramIndex, decorator) {
+__name(_ts_metadata15, "_ts_metadata");
+function _ts_param14(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param13, "_ts_param");
+__name(_ts_param14, "_ts_param");
 var ToolsController = class {
   static {
     __name(this, "ToolsController");
@@ -2473,7 +2625,7 @@ var ToolsController = class {
   }
   async list(req, agent) {
     if (agent !== void 0 && this.agents.get(agent) === void 0) {
-      throw new import_common14.NotFoundException(`No agent named "${agent}"`);
+      throw new import_common15.NotFoundException(`No agent named "${agent}"`);
     }
     const actor = await this.actorResolver.resolve(req);
     const deps = this.depsFactory.forAgent(agent);
@@ -2487,33 +2639,33 @@ var ToolsController = class {
     }));
   }
 };
-_ts_decorate14([
-  (0, import_common14.Get)(),
-  _ts_param13(0, (0, import_common14.Req)()),
-  _ts_param13(1, (0, import_common14.Query)("agent")),
-  _ts_metadata14("design:type", Function),
-  _ts_metadata14("design:paramtypes", [
+_ts_decorate15([
+  (0, import_common15.Get)(),
+  _ts_param14(0, (0, import_common15.Req)()),
+  _ts_param14(1, (0, import_common15.Query)("agent")),
+  _ts_metadata15("design:type", Function),
+  _ts_metadata15("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata14("design:returntype", Promise)
+  _ts_metadata15("design:returntype", Promise)
 ], ToolsController.prototype, "list", null);
-ToolsController = _ts_decorate14([
-  (0, import_common14.Controller)("tools"),
-  _ts_param13(0, (0, import_common14.Inject)(import_nestjs_agent_core14.AGENT_ACTOR_RESOLVER)),
-  _ts_param13(1, (0, import_common14.Inject)(import_nestjs_agent_core14.AGENT_DEPS_FACTORY)),
-  _ts_param13(2, (0, import_common14.Inject)(import_nestjs_agent_core14.AGENT_REGISTRY)),
-  _ts_metadata14("design:type", Function),
-  _ts_metadata14("design:paramtypes", [
+ToolsController = _ts_decorate15([
+  (0, import_common15.Controller)("tools"),
+  _ts_param14(0, (0, import_common15.Inject)(import_nestjs_agent_core15.AGENT_ACTOR_RESOLVER)),
+  _ts_param14(1, (0, import_common15.Inject)(import_nestjs_agent_core15.AGENT_DEPS_FACTORY)),
+  _ts_param14(2, (0, import_common15.Inject)(import_nestjs_agent_core15.AGENT_REGISTRY)),
+  _ts_metadata15("design:type", Function),
+  _ts_metadata15("design:paramtypes", [
     typeof ActorResolver === "undefined" ? Object : ActorResolver,
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
-    typeof import_nestjs_agent_core14.AgentRegistry === "undefined" ? Object : import_nestjs_agent_core14.AgentRegistry
+    typeof import_nestjs_agent_core15.AgentRegistry === "undefined" ? Object : import_nestjs_agent_core15.AgentRegistry
   ])
 ], ToolsController);
 
 // src/discovery/agent-discovery.service.ts
-var import_nestjs_agent_core15 = require("@dudousxd/nestjs-agent-core");
-var import_common15 = require("@nestjs/common");
+var import_nestjs_agent_core16 = require("@dudousxd/nestjs-agent-core");
+var import_common16 = require("@nestjs/common");
 var import_core = require("@nestjs/core");
 
 // src/decorator/agent.decorator.ts
@@ -2548,7 +2700,7 @@ function SystemPromptContributor() {
 __name(SystemPromptContributor, "SystemPromptContributor");
 
 // src/discovery/agent-discovery.service.ts
-function _ts_decorate15(decorators, target, key, desc) {
+function _ts_decorate16(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2561,19 +2713,19 @@ function _ts_decorate15(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate15, "_ts_decorate");
-function _ts_metadata15(metadataKey, metadataValue) {
+__name(_ts_decorate16, "_ts_decorate");
+function _ts_metadata16(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata15, "_ts_metadata");
-function _ts_param14(paramIndex, decorator) {
+__name(_ts_metadata16, "_ts_metadata");
+function _ts_param15(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param14, "_ts_param");
+__name(_ts_param15, "_ts_param");
 var AgentDiscoveryService = class _AgentDiscoveryService {
   static {
     __name(this, "AgentDiscoveryService");
@@ -2582,7 +2734,7 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
   scanner;
   registry;
   contributors;
-  logger = new import_common15.Logger(_AgentDiscoveryService.name);
+  logger = new import_common16.Logger(_AgentDiscoveryService.name);
   constructor(discovery, scanner, registry, contributors) {
     this.discovery = discovery;
     this.scanner = scanner;
@@ -2700,22 +2852,22 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
     return (ctx) => candidate.call(instance, ctx);
   }
 };
-AgentDiscoveryService = _ts_decorate15([
-  (0, import_common15.Injectable)(),
-  _ts_param14(2, (0, import_common15.Inject)(import_nestjs_agent_core15.AGENT_REGISTRY)),
-  _ts_param14(3, (0, import_common15.Inject)(import_nestjs_agent_core15.AGENT_PROMPT_CONTRIBUTORS)),
-  _ts_metadata15("design:type", Function),
-  _ts_metadata15("design:paramtypes", [
+AgentDiscoveryService = _ts_decorate16([
+  (0, import_common16.Injectable)(),
+  _ts_param15(2, (0, import_common16.Inject)(import_nestjs_agent_core16.AGENT_REGISTRY)),
+  _ts_param15(3, (0, import_common16.Inject)(import_nestjs_agent_core16.AGENT_PROMPT_CONTRIBUTORS)),
+  _ts_metadata16("design:type", Function),
+  _ts_metadata16("design:paramtypes", [
     typeof import_core.DiscoveryService === "undefined" ? Object : import_core.DiscoveryService,
     typeof import_core.MetadataScanner === "undefined" ? Object : import_core.MetadataScanner,
-    typeof import_nestjs_agent_core15.AgentRegistry === "undefined" ? Object : import_nestjs_agent_core15.AgentRegistry,
+    typeof import_nestjs_agent_core16.AgentRegistry === "undefined" ? Object : import_nestjs_agent_core16.AgentRegistry,
     Array
   ])
 ], AgentDiscoveryService);
 
 // src/discovery/ai-tool-discovery.service.ts
-var import_nestjs_agent_core16 = require("@dudousxd/nestjs-agent-core");
-var import_common16 = require("@nestjs/common");
+var import_nestjs_agent_core17 = require("@dudousxd/nestjs-agent-core");
+var import_common17 = require("@nestjs/common");
 var import_core2 = require("@nestjs/core");
 var import_zod = require("zod");
 
@@ -2786,7 +2938,7 @@ function provideAgentTools(factory, inject) {
 __name(provideAgentTools, "provideAgentTools");
 
 // src/discovery/ai-tool-discovery.service.ts
-function _ts_decorate16(decorators, target, key, desc) {
+function _ts_decorate17(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2799,19 +2951,19 @@ function _ts_decorate16(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate16, "_ts_decorate");
-function _ts_metadata16(metadataKey, metadataValue) {
+__name(_ts_decorate17, "_ts_decorate");
+function _ts_metadata17(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata16, "_ts_metadata");
-function _ts_param15(paramIndex, decorator) {
+__name(_ts_metadata17, "_ts_metadata");
+function _ts_param16(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param15, "_ts_param");
+__name(_ts_param16, "_ts_param");
 var AiToolDiscoveryService = class _AiToolDiscoveryService {
   static {
     __name(this, "AiToolDiscoveryService");
@@ -2820,7 +2972,7 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
   registry;
   agents;
   options;
-  logger = new import_common16.Logger(_AiToolDiscoveryService.name);
+  logger = new import_common17.Logger(_AiToolDiscoveryService.name);
   constructor(discovery, registry, agents, options) {
     this.discovery = discovery;
     this.registry = registry;
@@ -2905,7 +3057,7 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
     let delegates = 0;
     for (const definition of this.agents.list()) {
       for (const edge of definition.delegatesTo ?? []) {
-        const { agent: target, detached } = (0, import_nestjs_agent_core16.normalizeDelegation)(edge);
+        const { agent: target, detached } = (0, import_nestjs_agent_core17.normalizeDelegation)(edge);
         const targetDefinition = this.agents.get(target);
         if (targetDefinition === void 0) {
           throw new Error(`Agent "${definition.name}" hands off to "${target}", which is not a registered @Agent. Declare it as an @Agent provider or fix the reference.`);
@@ -2955,13 +3107,13 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
     return true;
   }
 };
-AiToolDiscoveryService = _ts_decorate16([
-  (0, import_common16.Injectable)(),
-  _ts_param15(1, (0, import_common16.Inject)(import_nestjs_agent_core16.AGENT_TOOL_REGISTRY)),
-  _ts_param15(2, (0, import_common16.Inject)(import_nestjs_agent_core16.AGENT_REGISTRY)),
-  _ts_param15(3, (0, import_common16.Inject)(import_nestjs_agent_core16.AGENT_OPTIONS)),
-  _ts_metadata16("design:type", Function),
-  _ts_metadata16("design:paramtypes", [
+AiToolDiscoveryService = _ts_decorate17([
+  (0, import_common17.Injectable)(),
+  _ts_param16(1, (0, import_common17.Inject)(import_nestjs_agent_core17.AGENT_TOOL_REGISTRY)),
+  _ts_param16(2, (0, import_common17.Inject)(import_nestjs_agent_core17.AGENT_REGISTRY)),
+  _ts_param16(3, (0, import_common17.Inject)(import_nestjs_agent_core17.AGENT_OPTIONS)),
+  _ts_metadata17("design:type", Function),
+  _ts_metadata17("design:paramtypes", [
     typeof import_core2.DiscoveryService === "undefined" ? Object : import_core2.DiscoveryService,
     typeof ToolRegistry === "undefined" ? Object : ToolRegistry,
     typeof AgentRegistry === "undefined" ? Object : AgentRegistry,
@@ -2970,13 +3122,13 @@ AiToolDiscoveryService = _ts_decorate16([
 ], AiToolDiscoveryService);
 
 // src/discovery/skill-discovery.service.ts
-var import_nestjs_agent_core18 = require("@dudousxd/nestjs-agent-core");
-var import_common17 = require("@nestjs/common");
+var import_nestjs_agent_core19 = require("@dudousxd/nestjs-agent-core");
+var import_common18 = require("@nestjs/common");
 var import_core3 = require("@nestjs/core");
 
 // src/decorator/skill.decorator.ts
 var import_reflect_metadata4 = require("reflect-metadata");
-var import_nestjs_agent_core17 = require("@dudousxd/nestjs-agent-core");
+var import_nestjs_agent_core18 = require("@dudousxd/nestjs-agent-core");
 var SKILL_METADATA = /* @__PURE__ */ Symbol.for("@dudousxd/nestjs-agent:skill-metadata");
 function Skill(options) {
   return (target) => {
@@ -2989,12 +3141,12 @@ function readSkillMetadata(target) {
 }
 __name(readSkillMetadata, "readSkillMetadata");
 function skillScope(options) {
-  return options.scope ?? import_nestjs_agent_core17.GLOBAL_SCOPE;
+  return options.scope ?? import_nestjs_agent_core18.GLOBAL_SCOPE;
 }
 __name(skillScope, "skillScope");
 
 // src/discovery/skill-discovery.service.ts
-function _ts_decorate17(decorators, target, key, desc) {
+function _ts_decorate18(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -3007,26 +3159,26 @@ function _ts_decorate17(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate17, "_ts_decorate");
-function _ts_metadata17(metadataKey, metadataValue) {
+__name(_ts_decorate18, "_ts_decorate");
+function _ts_metadata18(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata17, "_ts_metadata");
-function _ts_param16(paramIndex, decorator) {
+__name(_ts_metadata18, "_ts_metadata");
+function _ts_param17(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param16, "_ts_param");
+__name(_ts_param17, "_ts_param");
 var SkillDiscoveryService = class _SkillDiscoveryService {
   static {
     __name(this, "SkillDiscoveryService");
   }
   discovery;
   declared;
-  logger = new import_common17.Logger(_SkillDiscoveryService.name);
+  logger = new import_common18.Logger(_SkillDiscoveryService.name);
   constructor(discovery, declared) {
     this.discovery = discovery;
     this.declared = declared;
@@ -3063,18 +3215,18 @@ var SkillDiscoveryService = class _SkillDiscoveryService {
     return flat === void 0 ? void 0 : () => flat;
   }
 };
-SkillDiscoveryService = _ts_decorate17([
-  (0, import_common17.Injectable)(),
-  _ts_param16(1, (0, import_common17.Inject)(import_nestjs_agent_core18.AGENT_SKILL_SOURCES)),
-  _ts_metadata17("design:type", Function),
-  _ts_metadata17("design:paramtypes", [
+SkillDiscoveryService = _ts_decorate18([
+  (0, import_common18.Injectable)(),
+  _ts_param17(1, (0, import_common18.Inject)(import_nestjs_agent_core19.AGENT_SKILL_SOURCES)),
+  _ts_metadata18("design:type", Function),
+  _ts_metadata18("design:paramtypes", [
     typeof import_core3.DiscoveryService === "undefined" ? Object : import_core3.DiscoveryService,
     Array
   ])
 ], SkillDiscoveryService);
 
 // src/in-process-sink.ts
-var import_nestjs_agent_core19 = require("@dudousxd/nestjs-agent-core");
+var import_nestjs_agent_core20 = require("@dudousxd/nestjs-agent-core");
 var InProcessTokenStreamSink = class {
   static {
     __name(this, "InProcessTokenStreamSink");
@@ -3129,7 +3281,7 @@ var InProcessTokenStreamSink = class {
       }
       if (buf.ended) {
         if (buf.failure !== void 0) {
-          throw new import_nestjs_agent_core19.AgentStreamError(buf.failure);
+          throw new import_nestjs_agent_core20.AgentStreamError(buf.failure);
         }
         return;
       }
@@ -3142,17 +3294,15 @@ var InProcessTokenStreamSink = class {
 };
 
 // src/ledger-quota-provider.ts
-var import_nestjs_agent_core20 = require("@dudousxd/nestjs-agent-core");
+var import_nestjs_agent_core21 = require("@dudousxd/nestjs-agent-core");
 var LedgerQuotaProvider = class {
   static {
     __name(this, "LedgerQuotaProvider");
   }
   store;
-  quota;
   limits;
-  constructor(store, quota, limits = {}) {
+  constructor(store, limits = {}) {
     this.store = store;
-    this.quota = quota;
     this.limits = limits;
   }
   async report(query) {
@@ -3162,11 +3312,11 @@ var LedgerQuotaProvider = class {
       await this.dayWindow(actorRef, now)
     ];
     if (this.store.usageBetween !== void 0) {
-      const range = (0, import_nestjs_agent_core20.quotaPeriodRange)("month", now);
+      const range = (0, import_nestjs_agent_core21.quotaPeriodRange)("month", now);
       const used = await this.store.usageBetween(actorRef, range.fromDay, range.toDay);
       windows.push(this.window("month", used.usedTokens, used.costUsd, range.resetsAt));
     }
-    const blocked = (0, import_nestjs_agent_core20.exhaustedWindow)(windows);
+    const blocked = (0, import_nestjs_agent_core21.exhaustedWindow)(windows);
     return {
       windows,
       ...blocked !== void 0 ? {
@@ -3175,17 +3325,9 @@ var LedgerQuotaProvider = class {
     };
   }
   async dayWindow(actorRef, now) {
-    const range = (0, import_nestjs_agent_core20.quotaPeriodRange)("day", now);
+    const range = (0, import_nestjs_agent_core21.quotaPeriodRange)("day", now);
     const { usedTokens, costUsd } = await this.store.quotaToday(actorRef, range.fromDay);
-    if (this.quota === void 0) {
-      return this.window("day", usedTokens, costUsd, range.resetsAt);
-    }
-    const state = await this.quota.check(actorRef, range.fromDay);
-    const window = this.window("day", state.usedTokens, costUsd, range.resetsAt);
-    if (window.limitTokens === void 0) {
-      window.limitTokens = state.limitTokens;
-    }
-    return window;
+    return this.window("day", usedTokens, costUsd, range.resetsAt);
   }
   window(period, usedTokens, usedUsd, resetsAt) {
     const limits = this.limits[period] ?? {};
@@ -3204,120 +3346,10 @@ var LedgerQuotaProvider = class {
   }
 };
 
-// src/ledger-quota-store.ts
-var LedgerQuotaStore = class {
-  static {
-    __name(this, "LedgerQuotaStore");
-  }
-  store;
-  limitTokens;
-  constructor(store, limitTokens) {
-    this.store = store;
-    this.limitTokens = limitTokens;
-  }
-  async check(actorRef, day) {
-    const { usedTokens } = await this.store.quotaToday(actorRef, day);
-    return {
-      usedTokens,
-      limitTokens: this.limitTokens,
-      withinLimit: usedTokens < this.limitTokens
-    };
-  }
-  async bump(_actorRef, _day, _tokens) {
-  }
-};
-
-// src/resolver/anonymous-actor-resolver.ts
-var import_node_crypto = require("crypto");
-var TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/;
-var MINTED = /* @__PURE__ */ Symbol("nestjs-agent:anonymous-token");
-function readCookie(req, name) {
-  const header = req.headers?.cookie;
-  const raw = Array.isArray(header) ? header.join("; ") : header;
-  if (raw === void 0) return void 0;
-  for (const pair of raw.split(";")) {
-    const index = pair.indexOf("=");
-    if (index === -1) continue;
-    if (pair.slice(0, index).trim() === name) {
-      try {
-        return decodeURIComponent(pair.slice(index + 1).trim());
-      } catch {
-        return void 0;
-      }
-    }
-  }
-  return void 0;
-}
-__name(readCookie, "readCookie");
-function isHttps(req) {
-  if (req.secure === true) return true;
-  const forwarded = req.headers?.["x-forwarded-proto"];
-  const proto = Array.isArray(forwarded) ? forwarded[0] : forwarded;
-  return proto?.split(",")[0]?.trim() === "https";
-}
-__name(isHttps, "isHttps");
-var AnonymousActorResolver = class {
-  static {
-    __name(this, "AnonymousActorResolver");
-  }
-  options;
-  cookieName;
-  roles;
-  constructor(options = {}) {
-    this.options = options;
-    this.cookieName = options.cookieName ?? "agent_anon";
-    this.roles = options.roles ?? [
-      "anonymous"
-    ];
-  }
-  resolve(request) {
-    const req = typeof request === "object" && request !== null ? request : {};
-    let token = req[MINTED] ?? readCookie(req, this.cookieName);
-    if (token === void 0 || !TOKEN_PATTERN.test(token)) {
-      token = (0, import_node_crypto.randomBytes)(32).toString("base64url");
-      req[MINTED] = token;
-      this.setCookie(req, token);
-    }
-    const digest = (0, import_node_crypto.createHash)("sha256").update(token).digest("base64url").slice(0, 32);
-    return {
-      id: `anon:${digest}`,
-      roles: [
-        ...this.roles
-      ]
-    };
-  }
-  setCookie(req, token) {
-    const res = req.res;
-    if (res?.setHeader === void 0 || res.headersSent === true) return;
-    const sameSite = this.options.sameSite ?? "lax";
-    const secureOption = this.options.secure ?? "auto";
-    const secure = sameSite === "none" || (secureOption === "auto" ? isHttps(req) : secureOption);
-    const maxAge = Math.round((this.options.maxAgeDays ?? 365) * 24 * 60 * 60);
-    const cookie = [
-      `${this.cookieName}=${token}`,
-      `Path=${this.options.path ?? "/"}`,
-      `Max-Age=${maxAge}`,
-      "HttpOnly",
-      `SameSite=${sameSite === "none" ? "None" : sameSite === "strict" ? "Strict" : "Lax"}`,
-      ...secure ? [
-        "Secure"
-      ] : []
-    ].join("; ");
-    const existing = res.getHeader?.("Set-Cookie");
-    const list = Array.isArray(existing) ? existing.map(String) : existing !== void 0 ? [
-      String(existing)
-    ] : [];
-    res.setHeader("Set-Cookie", [
-      ...list,
-      cookie
-    ]);
-  }
-};
-
 // src/runner/inline-agent-runner.ts
-var import_nestjs_agent_core21 = require("@dudousxd/nestjs-agent-core");
-var import_common18 = require("@nestjs/common");
-function _ts_decorate18(decorators, target, key, desc) {
+var import_nestjs_agent_core22 = require("@dudousxd/nestjs-agent-core");
+var import_common19 = require("@nestjs/common");
+function _ts_decorate19(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -3330,26 +3362,26 @@ function _ts_decorate18(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate18, "_ts_decorate");
-function _ts_metadata18(metadataKey, metadataValue) {
+__name(_ts_decorate19, "_ts_decorate");
+function _ts_metadata19(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata18, "_ts_metadata");
-function _ts_param17(paramIndex, decorator) {
+__name(_ts_metadata19, "_ts_metadata");
+function _ts_param18(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param17, "_ts_param");
+__name(_ts_param18, "_ts_param");
 var InlineAgentRunner = class _InlineAgentRunner {
   static {
     __name(this, "InlineAgentRunner");
   }
   factory;
   store;
-  logger = new import_common18.Logger(_InlineAgentRunner.name);
+  logger = new import_common19.Logger(_InlineAgentRunner.name);
   pending = /* @__PURE__ */ new Map();
   /**
   * Runs someone has asked to stop. In-process, like `pending`, and for the same reason: this runner
@@ -3378,18 +3410,18 @@ var InlineAgentRunner = class _InlineAgentRunner {
         ] : []
       ]
     });
-    void (0, import_nestjs_agent_core21.runAgentLoop)({
+    void (0, import_nestjs_agent_core22.runAgentLoop)({
       ...deps,
       day
     }, input, hooks).then(() => this.store.setActiveStream(input.threadId, null)).catch(async (error) => {
-      if (error instanceof import_nestjs_agent_core21.RunCancelledError) {
+      if (error instanceof import_nestjs_agent_core22.RunCancelledError) {
         await this.settleCancelled(runId, input.threadId, deps);
         return;
       }
       const message = error instanceof Error ? error.message : String(error);
-      const code = (0, import_nestjs_agent_core21.agentFailureCode)(error);
+      const code = (0, import_nestjs_agent_core22.agentFailureCode)(error);
       this.logger.error(`agent run ${runId} failed (${code}): ${message}`);
-      (0, import_nestjs_agent_core21.publishAgentRunFailed)({
+      (0, import_nestjs_agent_core22.publishAgentRunFailed)({
         runId,
         code,
         message
@@ -3438,7 +3470,7 @@ var InlineAgentRunner = class _InlineAgentRunner {
     for (const [key, waiter] of this.pending) {
       if (key.startsWith(`${runId}:`)) {
         this.pending.delete(key);
-        waiter.reject(new import_nestjs_agent_core21.RunCancelledError());
+        waiter.reject(new import_nestjs_agent_core22.RunCancelledError());
       }
     }
     await Promise.resolve();
@@ -3453,7 +3485,7 @@ var InlineAgentRunner = class _InlineAgentRunner {
     this.logger.log(`agent run ${runId} cancelled`);
     await this.store.setActiveStream(threadId, null);
     const writer = await deps.sink.open(runId);
-    await writer.write((0, import_nestjs_agent_core21.encodeStreamEvent)({
+    await writer.write((0, import_nestjs_agent_core22.encodeStreamEvent)({
       kind: "cancelled"
     }));
     await writer.end();
@@ -3514,7 +3546,7 @@ var InlineAgentRunner = class _InlineAgentRunner {
       awaitApproval: /* @__PURE__ */ __name((call, _ctx, opts) => this.parkApproval(runId, call.id, opts?.timeoutMs), "awaitApproval"),
       awaitAnswers: /* @__PURE__ */ __name((request) => this.park(runId, request.id), "awaitAnswers"),
       step: /* @__PURE__ */ __name((_name, fn) => fn(), "step"),
-      parallel: import_nestjs_agent_core21.settleAll,
+      parallel: import_nestjs_agent_core22.settleAll,
       cancelled: /* @__PURE__ */ __name(async () => this.cancelled.has(runId), "cancelled"),
       runAgent: /* @__PURE__ */ __name((agentName, task) => this.runNested({
         agentName,
@@ -3565,7 +3597,7 @@ var InlineAgentRunner = class _InlineAgentRunner {
       awaitApproval: /* @__PURE__ */ __name((call, _ctx, opts) => this.parkApproval(runId, call.id, opts?.timeoutMs), "awaitApproval"),
       awaitAnswers: /* @__PURE__ */ __name((request) => this.park(runId, request.id), "awaitAnswers"),
       step: /* @__PURE__ */ __name((_name, fn) => fn(), "step"),
-      parallel: import_nestjs_agent_core21.settleAll,
+      parallel: import_nestjs_agent_core22.settleAll,
       cancelled: /* @__PURE__ */ __name(async () => this.cancelled.has(runId), "cancelled"),
       runAgent: /* @__PURE__ */ __name((childName, childTask) => this.runNested({
         agentName: childName,
@@ -3598,7 +3630,7 @@ var InlineAgentRunner = class _InlineAgentRunner {
         }
       }), "startAgent")
     };
-    void (0, import_nestjs_agent_core21.runAgentLoop)({
+    void (0, import_nestjs_agent_core22.runAgentLoop)({
       ...deps,
       day
     }, {
@@ -3612,13 +3644,13 @@ var InlineAgentRunner = class _InlineAgentRunner {
       parentRunId,
       deliverTo
     }, hooks).catch(async (error) => {
-      const cancelled = error instanceof import_nestjs_agent_core21.RunCancelledError;
+      const cancelled = error instanceof import_nestjs_agent_core22.RunCancelledError;
       const message = error instanceof Error ? error.message : String(error);
       if (!cancelled) {
         this.logger.error(`detached agent run ${runId} failed: ${message}`);
-        (0, import_nestjs_agent_core21.publishAgentRunFailed)({
+        (0, import_nestjs_agent_core22.publishAgentRunFailed)({
           runId,
-          code: (0, import_nestjs_agent_core21.agentFailureCode)(error),
+          code: (0, import_nestjs_agent_core22.agentFailureCode)(error),
           message
         });
       }
@@ -3626,11 +3658,11 @@ var InlineAgentRunner = class _InlineAgentRunner {
         runId,
         status: cancelled ? "cancelled" : "failed",
         ...cancelled ? {} : {
-          errorCode: (0, import_nestjs_agent_core21.agentFailureCode)(error),
+          errorCode: (0, import_nestjs_agent_core22.agentFailureCode)(error),
           errorMessage: message
         }
       });
-      await (0, import_nestjs_agent_core21.settleUnsettledDelegation)({
+      await (0, import_nestjs_agent_core22.settleUnsettledDelegation)({
         store: this.store,
         delivery: deliverTo,
         agent: agentName,
@@ -3669,7 +3701,7 @@ var InlineAgentRunner = class _InlineAgentRunner {
       awaitApproval: /* @__PURE__ */ __name((call, _ctx, opts) => this.parkApproval(runId, call.id, opts?.timeoutMs), "awaitApproval"),
       awaitAnswers: /* @__PURE__ */ __name((request) => this.park(runId, request.id), "awaitAnswers"),
       step: /* @__PURE__ */ __name((_name, fn) => fn(), "step"),
-      parallel: import_nestjs_agent_core21.settleAll,
+      parallel: import_nestjs_agent_core22.settleAll,
       // A child stops when it is cancelled OR when the run a human is actually watching is: the
       // canceller names the top-level run, which is the only id that ever left the server.
       cancelled: /* @__PURE__ */ __name(async () => this.cancelled.has(runId) || this.cancelled.has(sinkRunId), "cancelled"),
@@ -3704,7 +3736,7 @@ var InlineAgentRunner = class _InlineAgentRunner {
       }), "startAgent")
     };
     try {
-      return await (0, import_nestjs_agent_core21.runAgentLoop)({
+      return await (0, import_nestjs_agent_core22.runAgentLoop)({
         ...deps,
         day
       }, {
@@ -3723,19 +3755,19 @@ var InlineAgentRunner = class _InlineAgentRunner {
     }
   }
 };
-InlineAgentRunner = _ts_decorate18([
-  (0, import_common18.Injectable)(),
-  _ts_param17(0, (0, import_common18.Inject)(import_nestjs_agent_core21.AGENT_DEPS_FACTORY)),
-  _ts_param17(1, (0, import_common18.Inject)(import_nestjs_agent_core21.AGENT_STORE)),
-  _ts_metadata18("design:type", Function),
-  _ts_metadata18("design:paramtypes", [
+InlineAgentRunner = _ts_decorate19([
+  (0, import_common19.Injectable)(),
+  _ts_param18(0, (0, import_common19.Inject)(import_nestjs_agent_core22.AGENT_DEPS_FACTORY)),
+  _ts_param18(1, (0, import_common19.Inject)(import_nestjs_agent_core22.AGENT_STORE)),
+  _ts_metadata19("design:type", Function),
+  _ts_metadata19("design:paramtypes", [
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
     typeof AgentStore === "undefined" ? Object : AgentStore
   ])
 ], InlineAgentRunner);
 
 // src/skills-config.ts
-var import_nestjs_agent_core22 = require("@dudousxd/nestjs-agent-core");
+var import_nestjs_agent_core23 = require("@dudousxd/nestjs-agent-core");
 function declaredSkillProvider(declared) {
   return {
     list: /* @__PURE__ */ __name(({ scopes }) => declared.filter((skill) => scopes.includes(skill.scope)).map(({ name, description, scope }) => ({
@@ -3761,7 +3793,7 @@ function resolveSkillsConfig(options, declared) {
     declaredSkillProvider(declared)
   ];
   return {
-    provider: providers.length === 1 ? providers[0] : (0, import_nestjs_agent_core22.compositeSkillProvider)(providers),
+    provider: providers.length === 1 ? providers[0] : (0, import_nestjs_agent_core23.compositeSkillProvider)(providers),
     ...options.scopes !== void 0 ? {
       scopes: options.scopes
     } : {},
@@ -3773,7 +3805,7 @@ function resolveSkillsConfig(options, declared) {
 __name(resolveSkillsConfig, "resolveSkillsConfig");
 
 // src/agent.module.ts
-function _ts_decorate19(decorators, target, key, desc) {
+function _ts_decorate20(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -3786,13 +3818,13 @@ function _ts_decorate19(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate19, "_ts_decorate");
+__name(_ts_decorate20, "_ts_decorate");
 var DEFAULT_PATH = "agent";
-var logger = new import_common19.Logger("AgentModule");
+var logger = new import_common20.Logger("AgentModule");
 function externalStoreWrapper(modules) {
   for (const module2 of modules.values()) {
     if (module2.metatype === AgentModule) continue;
-    const wrapper = module2.providers.get(import_nestjs_agent_core23.AGENT_STORE);
+    const wrapper = module2.providers.get(import_nestjs_agent_core24.AGENT_STORE);
     if (wrapper !== void 0) return wrapper;
   }
   return void 0;
@@ -3823,9 +3855,13 @@ function resolveStore(options, modules) {
   const external = externalStoreWrapper(modules);
   if (external !== void 0) return forwardingStore(external);
   logger.warn("No `store` configured and no store module imported \u2014 using the in-memory store. Threads are lost on restart and not shared between processes: not for production. Pass `store`, or import a store module (e.g. MikroOrmAgentStoreModule.forFeature()).");
-  return new import_nestjs_agent_core23.InMemoryAgentStore();
+  return new import_nestjs_agent_core24.InMemoryAgentStore();
 }
 __name(resolveStore, "resolveStore");
+function isQuotaProvider(quota) {
+  return quota !== void 0 && typeof quota.report === "function";
+}
+__name(isQuotaProvider, "isQuotaProvider");
 function resolveCatalog(options) {
   if (options.models !== void 0) return options.models;
   const carried = options.model.catalog;
@@ -3835,107 +3871,97 @@ __name(resolveCatalog, "resolveCatalog");
 function sharedProviders(durable) {
   const providers = [
     {
-      provide: import_nestjs_agent_core23.AGENT_TOOL_REGISTRY,
-      useFactory: /* @__PURE__ */ __name(() => new import_nestjs_agent_core23.ToolRegistry(), "useFactory")
+      provide: import_nestjs_agent_core24.AGENT_TOOL_REGISTRY,
+      useFactory: /* @__PURE__ */ __name(() => new import_nestjs_agent_core24.ToolRegistry(), "useFactory")
     },
     // Starts empty; AgentDiscoveryService populates it from `@Agent`-decorated providers at boot.
     {
-      provide: import_nestjs_agent_core23.AGENT_REGISTRY,
-      useFactory: /* @__PURE__ */ __name(() => new import_nestjs_agent_core23.AgentRegistry(), "useFactory")
+      provide: import_nestjs_agent_core24.AGENT_REGISTRY,
+      useFactory: /* @__PURE__ */ __name(() => new import_nestjs_agent_core24.AgentRegistry(), "useFactory")
     },
     // A shared, mutable list AgentDiscoveryService fills with `@SystemPromptContributor()` methods.
     {
-      provide: import_nestjs_agent_core23.AGENT_PROMPT_CONTRIBUTORS,
+      provide: import_nestjs_agent_core24.AGENT_PROMPT_CONTRIBUTORS,
       useFactory: /* @__PURE__ */ __name(() => [], "useFactory")
     },
     // Likewise for `@Skill`-decorated providers — filled by SkillDiscoveryService at onModuleInit,
     // read lazily by the AGENT_SKILLS provider below (which DI builds before discovery has run).
     {
-      provide: import_nestjs_agent_core23.AGENT_SKILL_SOURCES,
+      provide: import_nestjs_agent_core24.AGENT_SKILL_SOURCES,
       useFactory: /* @__PURE__ */ __name(() => [], "useFactory")
     },
     {
       // One resolution, shared by the loop's deps and the listing endpoint: a second one would
       // drift, and a user would be offered a skill the agent cannot reach. `undefined` when the
       // host configured none — which is what keeps the turn's checkpoint sequence unchanged.
-      provide: import_nestjs_agent_core23.AGENT_SKILLS,
+      provide: import_nestjs_agent_core24.AGENT_SKILLS,
       useFactory: /* @__PURE__ */ __name((options, declared) => resolveSkillsConfig(options.skills, declared), "useFactory"),
       inject: [
-        import_nestjs_agent_core23.AGENT_OPTIONS,
-        import_nestjs_agent_core23.AGENT_SKILL_SOURCES
+        import_nestjs_agent_core24.AGENT_OPTIONS,
+        import_nestjs_agent_core24.AGENT_SKILL_SOURCES
       ]
     },
     {
       // One resolution, shared by the loop's deps and the read-back endpoint: a person has to be
       // shown what the model was shown, and two resolutions would eventually disagree about that.
-      provide: import_nestjs_agent_core23.AGENT_MEMORY,
+      provide: import_nestjs_agent_core24.AGENT_MEMORY,
       useFactory: /* @__PURE__ */ __name((options) => options.memory, "useFactory"),
       inject: [
-        import_nestjs_agent_core23.AGENT_OPTIONS
+        import_nestjs_agent_core24.AGENT_OPTIONS
       ]
     },
     {
-      provide: import_nestjs_agent_core23.AGENT_SINK,
+      provide: import_nestjs_agent_core24.AGENT_SINK,
       useFactory: /* @__PURE__ */ __name((options) => options.sink ?? new InProcessTokenStreamSink(), "useFactory"),
       inject: [
-        import_nestjs_agent_core23.AGENT_OPTIONS
+        import_nestjs_agent_core24.AGENT_OPTIONS
       ]
     },
     {
-      provide: import_nestjs_agent_core23.AGENT_ROLES_POLICY,
-      useFactory: /* @__PURE__ */ __name((options) => options.rolesPolicy ?? new import_nestjs_agent_core23.DefaultRolesPolicy(options.defaultRoles), "useFactory"),
+      provide: import_nestjs_agent_core24.AGENT_ROLES_POLICY,
+      useFactory: /* @__PURE__ */ __name((options) => options.rolesPolicy ?? new import_nestjs_agent_core24.DefaultRolesPolicy(options.defaultRoles), "useFactory"),
       inject: [
-        import_nestjs_agent_core23.AGENT_OPTIONS
+        import_nestjs_agent_core24.AGENT_OPTIONS
       ]
     },
     {
-      provide: import_nestjs_agent_core23.AGENT_ACTOR_RESOLVER,
+      provide: import_nestjs_agent_core24.AGENT_ACTOR_RESOLVER,
       useFactory: /* @__PURE__ */ __name((options) => {
         if (options.actorResolver !== void 0) return options.actorResolver;
         logger.warn("No `actorResolver` configured \u2014 the agent endpoints are PUBLIC: every browser gets its own anonymous identity (an HttpOnly cookie). Set `actorResolver: requestUserActorResolver()` (or your own) to require login.");
         return new AnonymousActorResolver();
       }, "useFactory"),
       inject: [
-        import_nestjs_agent_core23.AGENT_OPTIONS
+        import_nestjs_agent_core24.AGENT_OPTIONS
       ]
     },
     {
-      provide: import_nestjs_agent_core23.AGENT_MODEL,
+      provide: import_nestjs_agent_core24.AGENT_MODEL,
       useFactory: /* @__PURE__ */ __name((o) => o.model, "useFactory"),
       inject: [
-        import_nestjs_agent_core23.AGENT_OPTIONS
+        import_nestjs_agent_core24.AGENT_OPTIONS
       ]
     },
     {
-      // An explicit `quota` wins; otherwise `quotaLimitTokens` binds the built-in ledger-backed
-      // store; otherwise quotas are off (undefined). The ledger store reads the same usage rows
-      // the loop already writes, so enforcement needs no extra shared state across replicas.
-      provide: import_nestjs_agent_core23.AGENT_QUOTA_STORE,
-      useFactory: /* @__PURE__ */ __name((o, store) => o.quota ?? (o.quotaLimitTokens !== void 0 ? new LedgerQuotaStore(store, o.quotaLimitTokens) : void 0), "useFactory"),
+      // `quota` is either a provider of the host's own or ceilings for the built-in ledger one;
+      // omitted, the ledger provider still reports usage, with no ceiling to block on.
+      provide: import_nestjs_agent_core24.AGENT_QUOTA_PROVIDER,
+      useFactory: /* @__PURE__ */ __name((o, store) => isQuotaProvider(o.quota) ? o.quota : new LedgerQuotaProvider(store, o.quota?.limits), "useFactory"),
       inject: [
-        import_nestjs_agent_core23.AGENT_OPTIONS,
-        import_nestjs_agent_core23.AGENT_STORE
+        import_nestjs_agent_core24.AGENT_OPTIONS,
+        import_nestjs_agent_core24.AGENT_STORE
       ]
     },
     {
-      provide: import_nestjs_agent_core23.AGENT_QUOTA_PROVIDER,
-      useFactory: /* @__PURE__ */ __name((o, store, quota) => o.quotaProvider ?? new LedgerQuotaProvider(store, quota, o.quotaLimits), "useFactory"),
-      inject: [
-        import_nestjs_agent_core23.AGENT_OPTIONS,
-        import_nestjs_agent_core23.AGENT_STORE,
-        import_nestjs_agent_core23.AGENT_QUOTA_STORE
-      ]
-    },
-    {
-      provide: import_nestjs_agent_core23.AGENT_MODEL_CATALOG,
+      provide: import_nestjs_agent_core24.AGENT_MODEL_CATALOG,
       useFactory: /* @__PURE__ */ __name((o) => resolveCatalog(o), "useFactory"),
       inject: [
-        import_nestjs_agent_core23.AGENT_OPTIONS
+        import_nestjs_agent_core24.AGENT_OPTIONS
       ]
     },
     AgentDepsFactory2,
     {
-      provide: import_nestjs_agent_core23.AGENT_DEPS_FACTORY,
+      provide: import_nestjs_agent_core24.AGENT_DEPS_FACTORY,
       useExisting: AgentDepsFactory2
     },
     // Populates the registry + contributors (onModuleInit) BEFORE AiToolDiscoveryService synthesizes
@@ -3949,21 +3975,21 @@ function sharedProviders(durable) {
     // through AgentService.signalToolCall, which reaches whichever AGENT_RUNNER is bound above.
     AgentApprovalPortAdapter,
     {
-      provide: import_nestjs_agent_core23.AGENT_APPROVAL_PORT,
+      provide: import_nestjs_agent_core24.AGENT_APPROVAL_PORT,
       useExisting: AgentApprovalPortAdapter
     }
   ];
   providers.push({
-    provide: import_nestjs_agent_core23.AGENT_STORE,
+    provide: import_nestjs_agent_core24.AGENT_STORE,
     useFactory: /* @__PURE__ */ __name((o, modules) => resolveStore(o, modules), "useFactory"),
     inject: [
-      import_nestjs_agent_core23.AGENT_OPTIONS,
+      import_nestjs_agent_core24.AGENT_OPTIONS,
       import_core4.ModulesContainer
     ]
   });
   if (durable) {
     providers.push({
-      provide: import_nestjs_agent_core23.AGENT_RUNNER,
+      provide: import_nestjs_agent_core24.AGENT_RUNNER,
       useFactory: /* @__PURE__ */ __name((durableRunner) => {
         if (durableRunner === void 0) {
           throw new Error("AgentModule.forRoot({ durable: true }) requires importing AgentDurableModule from '@dudousxd/nestjs-agent/durable' (alongside a configured DurableModule). It was not found.");
@@ -3972,14 +3998,14 @@ function sharedProviders(durable) {
       }, "useFactory"),
       inject: [
         {
-          token: import_nestjs_agent_core23.AGENT_DURABLE_RUNNER,
+          token: import_nestjs_agent_core24.AGENT_DURABLE_RUNNER,
           optional: true
         }
       ]
     });
   } else {
     providers.push({
-      provide: import_nestjs_agent_core23.AGENT_RUNNER,
+      provide: import_nestjs_agent_core24.AGENT_RUNNER,
       useExisting: InlineAgentRunner
     });
   }
@@ -3988,25 +4014,24 @@ function sharedProviders(durable) {
 __name(sharedProviders, "sharedProviders");
 function exportsFor() {
   return [
-    import_nestjs_agent_core23.AGENT_OPTIONS,
-    import_nestjs_agent_core23.AGENT_TOOL_REGISTRY,
-    import_nestjs_agent_core23.AGENT_REGISTRY,
-    import_nestjs_agent_core23.AGENT_SINK,
-    import_nestjs_agent_core23.AGENT_ROLES_POLICY,
-    import_nestjs_agent_core23.AGENT_ACTOR_RESOLVER,
-    import_nestjs_agent_core23.AGENT_MODEL,
-    import_nestjs_agent_core23.AGENT_STORE,
-    import_nestjs_agent_core23.AGENT_QUOTA_STORE,
-    import_nestjs_agent_core23.AGENT_MODEL_CATALOG,
-    import_nestjs_agent_core23.AGENT_QUOTA_PROVIDER,
-    import_nestjs_agent_core23.AGENT_PROMPT_CONTRIBUTORS,
-    import_nestjs_agent_core23.AGENT_SKILLS,
-    import_nestjs_agent_core23.AGENT_MEMORY,
-    import_nestjs_agent_core23.AGENT_DEPS_FACTORY,
+    import_nestjs_agent_core24.AGENT_OPTIONS,
+    import_nestjs_agent_core24.AGENT_TOOL_REGISTRY,
+    import_nestjs_agent_core24.AGENT_REGISTRY,
+    import_nestjs_agent_core24.AGENT_SINK,
+    import_nestjs_agent_core24.AGENT_ROLES_POLICY,
+    import_nestjs_agent_core24.AGENT_ACTOR_RESOLVER,
+    import_nestjs_agent_core24.AGENT_MODEL,
+    import_nestjs_agent_core24.AGENT_STORE,
+    import_nestjs_agent_core24.AGENT_MODEL_CATALOG,
+    import_nestjs_agent_core24.AGENT_QUOTA_PROVIDER,
+    import_nestjs_agent_core24.AGENT_PROMPT_CONTRIBUTORS,
+    import_nestjs_agent_core24.AGENT_SKILLS,
+    import_nestjs_agent_core24.AGENT_MEMORY,
+    import_nestjs_agent_core24.AGENT_DEPS_FACTORY,
     AgentDepsFactory2,
     AgentService,
     InlineAgentRunner,
-    import_nestjs_agent_core23.AGENT_APPROVAL_PORT
+    import_nestjs_agent_core24.AGENT_APPROVAL_PORT
   ];
 }
 __name(exportsFor, "exportsFor");
@@ -4020,21 +4045,13 @@ var BASE_CONTROLLERS = [
   MemoriesController,
   ToolsController,
   MessagesController,
-  ModelsController
-];
-var GUARDABLE_CONTROLLERS = [
-  ...BASE_CONTROLLERS,
+  ModelsController,
+  ConfigController,
   AttachmentsController
 ];
-function controllersFor(mountAttachments) {
-  return mountAttachments ? [
-    ...BASE_CONTROLLERS,
-    AttachmentsController
-  ] : BASE_CONTROLLERS;
-}
-__name(controllersFor, "controllersFor");
-function controllersForSurface(surface, mountAttachments) {
-  return surface === "engine" ? [] : controllersFor(mountAttachments);
+var GUARDABLE_CONTROLLERS = BASE_CONTROLLERS;
+function controllersForSurface(surface) {
+  return surface === "engine" ? [] : BASE_CONTROLLERS;
 }
 __name(controllersForSurface, "controllersForSurface");
 var GUARDS_METADATA = "__guards__";
@@ -4074,10 +4091,10 @@ var AgentModule = class _AgentModule {
         import_core4.DiscoveryModule,
         routerFor(path)
       ],
-      controllers: controllersForSurface(options.surface, options.attachments?.upload === true),
+      controllers: controllersForSurface(options.surface),
       providers: [
         {
-          provide: import_nestjs_agent_core23.AGENT_OPTIONS,
+          provide: import_nestjs_agent_core24.AGENT_OPTIONS,
           useValue: options
         },
         ...sharedProviders(options.durable ?? false),
@@ -4097,10 +4114,10 @@ var AgentModule = class _AgentModule {
         routerFor(path),
         ...options.imports ?? []
       ],
-      controllers: controllersForSurface(options.surface, options.attachmentsUpload === true),
+      controllers: controllersForSurface(options.surface),
       providers: [
         {
-          provide: import_nestjs_agent_core23.AGENT_OPTIONS,
+          provide: import_nestjs_agent_core24.AGENT_OPTIONS,
           // Stamp the STATIC wiring flags onto the factory result: `durable`/`surface` are
           // authoritative on the async config object (they decided the actual wiring above), and
           // the durable module reads `durable` back off AGENT_OPTIONS. `surface` isn't read back by
@@ -4121,13 +4138,13 @@ var AgentModule = class _AgentModule {
     };
   }
 };
-AgentModule = _ts_decorate19([
-  (0, import_common19.Global)(),
-  (0, import_common19.Module)({})
+AgentModule = _ts_decorate20([
+  (0, import_common20.Global)(),
+  (0, import_common20.Module)({})
 ], AgentModule);
 
 // src/resolver/header-actor-resolver.ts
-var import_common20 = require("@nestjs/common");
+var import_common21 = require("@nestjs/common");
 function readHeader(req, name) {
   if (typeof req !== "object" || req === null || !("headers" in req)) return void 0;
   const { headers } = req;
@@ -4143,7 +4160,7 @@ var HeaderActorResolver = class {
   resolve(req) {
     const id = readHeader(req, "x-actor-id");
     if (id === void 0 || id.length === 0) {
-      throw new import_common20.UnauthorizedException("HeaderActorResolver: missing x-actor-id header. No default actor is fabricated. Send x-actor-id from a trusted gateway, or configure AgentModule.forRoot({ actorResolver }) with a resolver that reads your authenticated principal.");
+      throw new import_common21.UnauthorizedException("HeaderActorResolver: missing x-actor-id header. No default actor is fabricated. Send x-actor-id from a trusted gateway, or configure AgentModule.forRoot({ actorResolver }) with a resolver that reads your authenticated principal.");
     }
     const roles = (readHeader(req, "x-actor-role") ?? "").split(",").map((role) => role.trim()).filter((role) => role.length > 0);
     const tenantRef = readHeader(req, "x-tenant-ref");
@@ -4158,7 +4175,7 @@ var HeaderActorResolver = class {
 };
 
 // src/resolver/request-user-actor-resolver.ts
-var import_common21 = require("@nestjs/common");
+var import_common22 = require("@nestjs/common");
 function field(user, ...names) {
   for (const name of names) {
     const value = user[name];
@@ -4170,7 +4187,7 @@ __name(field, "field");
 function defaultRequestUserMapper(user) {
   const id = field(user, "id", "sub", "_id", "userId");
   if (id === void 0) {
-    throw new import_common21.UnauthorizedException("requestUserActorResolver: req.user has no id/sub/_id/userId \u2014 pass a mapper: requestUserActorResolver((user) => ({ id: \u2026, roles: \u2026 }))");
+    throw new import_common22.UnauthorizedException("requestUserActorResolver: req.user has no id/sub/_id/userId \u2014 pass a mapper: requestUserActorResolver((user) => ({ id: \u2026, roles: \u2026 }))");
   }
   const rawRoles = field(user, "roles", "role");
   const roles = Array.isArray(rawRoles) ? rawRoles.map(String) : typeof rawRoles === "string" ? [
@@ -4191,7 +4208,7 @@ function requestUserActorResolver(map) {
     async resolve(req) {
       const user = typeof req === "object" && req !== null ? req.user : void 0;
       if (user === void 0 || user === null || user === false) {
-        throw new import_common21.UnauthorizedException("Sign in to use the agent.");
+        throw new import_common22.UnauthorizedException("Sign in to use the agent.");
       }
       if (map !== void 0) return map(user, req);
       return defaultRequestUserMapper(user);
@@ -4218,13 +4235,14 @@ __reExport(index_exports, require("@dudousxd/nestjs-agent-core"), module.exports
   AiToolDiscoveryService,
   AnonymousActorResolver,
   AttachmentsController,
+  ConfigController,
   DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES,
   DEFAULT_MAX_ATTACHMENT_BYTES,
   HeaderActorResolver,
   InProcessTokenStreamSink,
   InlineAgentRunner,
   LedgerQuotaProvider,
-  LedgerQuotaStore,
+  MAX_ATTACHMENTS_PER_MESSAGE,
   MemoriesController,
   MessagesController,
   ModelsController,
@@ -4237,6 +4255,7 @@ __reExport(index_exports, require("@dudousxd/nestjs-agent-core"), module.exports
   SystemPrompt,
   SystemPromptContributor,
   ToolsController,
+  attachmentLimits,
   declaredSkillProvider,
   defaultRequestUserMapper,
   delegateToolName,