@dudousxd/nestjs-agent 1.11.0 → 1.12.1

package/dist/index.js

@@ -2,12 +2,12 @@ var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 
 // src/agent.module.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER11, AGENT_APPROVAL_PORT, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY5, AGENT_DURABLE_RUNNER, AGENT_MEMORY as AGENT_MEMORY3, AGENT_MODEL as AGENT_MODEL2, AGENT_MODEL_CATALOG as AGENT_MODEL_CATALOG2, AGENT_OPTIONS as AGENT_OPTIONS5, AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS3, AGENT_QUOTA_PROVIDER as AGENT_QUOTA_PROVIDER2, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE3, AGENT_REGISTRY as AGENT_REGISTRY6, AGENT_ROLES_POLICY as AGENT_ROLES_POLICY2, AGENT_RUNNER as AGENT_RUNNER2, AGENT_SINK as AGENT_SINK2, AGENT_SKILLS as AGENT_SKILLS3, AGENT_SKILL_SOURCES as AGENT_SKILL_SOURCES2, AGENT_STORE as AGENT_STORE4, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY3, AgentRegistry as AgentRegistry6, DefaultRolesPolicy, InMemoryAgentStore, ToolRegistry as ToolRegistry3 } from "@dudousxd/nestjs-agent-core";
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER12, AGENT_APPROVAL_PORT, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY5, AGENT_DURABLE_RUNNER, AGENT_MEMORY as AGENT_MEMORY3, AGENT_MODEL as AGENT_MODEL2, AGENT_MODEL_CATALOG as AGENT_MODEL_CATALOG3, AGENT_OPTIONS as AGENT_OPTIONS6, AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS3, AGENT_QUOTA_PROVIDER as AGENT_QUOTA_PROVIDER2, AGENT_REGISTRY as AGENT_REGISTRY6, AGENT_ROLES_POLICY as AGENT_ROLES_POLICY2, AGENT_RUNNER as AGENT_RUNNER2, AGENT_SINK as AGENT_SINK2, AGENT_SKILLS as AGENT_SKILLS3, AGENT_SKILL_SOURCES as AGENT_SKILL_SOURCES2, AGENT_STORE as AGENT_STORE4, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY3, AgentRegistry as AgentRegistry6, DefaultRolesPolicy, InMemoryAgentStore, ToolRegistry as ToolRegistry3 } from "@dudousxd/nestjs-agent-core";
 import { Global, Logger as Logger5, Module } from "@nestjs/common";
 import { DiscoveryModule, ModulesContainer, RouterModule } from "@nestjs/core";
 
 // src/agent-deps.factory.ts
-import { AGENT_MEMORY, AGENT_MODEL, AGENT_PRICING_STORE, AGENT_PROMPT_CONTRIBUTORS, AGENT_QUOTA_STORE, AGENT_REGISTRY, AGENT_ROLES_POLICY, AGENT_SINK, AGENT_SKILLS, AGENT_STORE, AGENT_TOOL_REGISTRY, AgentRegistry as AgentRegistry2, ToolRegistry as ToolRegistry2, normalizeDelegation, summarizeWithModel, windowHistory } from "@dudousxd/nestjs-agent-core";
+import { AGENT_MEMORY, AGENT_MODEL, AGENT_PRICING_STORE, AGENT_PROMPT_CONTRIBUTORS, AGENT_REGISTRY, AGENT_ROLES_POLICY, AGENT_SINK, AGENT_SKILLS, AGENT_STORE, AGENT_TOOL_REGISTRY, AgentRegistry as AgentRegistry2, ToolRegistry as ToolRegistry2, normalizeDelegation, summarizeWithModel, windowHistory } from "@dudousxd/nestjs-agent-core";
 import { AGENT_OPTIONS } from "@dudousxd/nestjs-agent-core";
 import { Inject, Injectable, Optional } from "@nestjs/common";
 function _ts_decorate(decorators, target, key, desc) {
@@ -53,11 +53,10 @@ var AgentDepsFactory2 = class {
   registry;
   agents;
   promptContributors;
-  quota;
   pricingStore;
   skills;
   memory;
-  constructor(options, model, store, sink, rolesPolicy, registry, agents, promptContributors, quota, pricingStore, skills, memory) {
+  constructor(options, model, store, sink, rolesPolicy, registry, agents, promptContributors, pricingStore, skills, memory) {
     this.options = options;
     this.model = model;
     this.store = store;
@@ -66,7 +65,6 @@ var AgentDepsFactory2 = class {
     this.registry = registry;
     this.agents = agents;
     this.promptContributors = promptContributors;
-    this.quota = quota;
     this.pricingStore = pricingStore;
     this.skills = skills;
     this.memory = memory;
@@ -138,9 +136,6 @@ var AgentDepsFactory2 = class {
       ...definition?.modelId !== void 0 ? {
         modelId: definition.modelId
       } : {},
-      ...this.quota !== void 0 ? {
-        quota: this.quota
-      } : {},
       ...this.pricingStore !== void 0 ? {
         pricingStore: this.pricingStore
       } : {},
@@ -247,13 +242,12 @@ AgentDepsFactory2 = _ts_decorate([
   _ts_param(5, Inject(AGENT_TOOL_REGISTRY)),
   _ts_param(6, Inject(AGENT_REGISTRY)),
   _ts_param(7, Inject(AGENT_PROMPT_CONTRIBUTORS)),
-  _ts_param(8, Inject(AGENT_QUOTA_STORE)),
+  _ts_param(8, Optional()),
+  _ts_param(8, Inject(AGENT_PRICING_STORE)),
   _ts_param(9, Optional()),
-  _ts_param(9, Inject(AGENT_PRICING_STORE)),
+  _ts_param(9, Inject(AGENT_SKILLS)),
   _ts_param(10, Optional()),
-  _ts_param(10, Inject(AGENT_SKILLS)),
-  _ts_param(11, Optional()),
-  _ts_param(11, Inject(AGENT_MEMORY)),
+  _ts_param(10, Inject(AGENT_MEMORY)),
   _ts_metadata("design:type", Function),
   _ts_metadata("design:paramtypes", [
     typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
@@ -266,13 +260,12 @@ AgentDepsFactory2 = _ts_decorate([
     Array,
     Object,
     Object,
-    Object,
     Object
   ])
 ], AgentDepsFactory2);
 
 // src/agent.service.ts
-import { AGENT_ATTACHMENT_STAGING, AGENT_DEPS_FACTORY, AGENT_MODEL_CATALOG, AGENT_OPTIONS as AGENT_OPTIONS2, AGENT_QUOTA_PROVIDER, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE2, AGENT_RUNNER, AGENT_STORE as AGENT_STORE2, REQUESTER_APPROVER, findCatalogModel, mayDecideApproval, readElicitationQuestions, validateElicitationAnswer } from "@dudousxd/nestjs-agent-core";
+import { AGENT_ATTACHMENT_STAGING, AGENT_DEPS_FACTORY, AGENT_MODEL_CATALOG, AGENT_OPTIONS as AGENT_OPTIONS2, AGENT_QUOTA_PROVIDER, AGENT_RUNNER, AGENT_STORE as AGENT_STORE2, REQUESTER_APPROVER, findCatalogModel, mayDecideApproval, readElicitationQuestions, validateElicitationAnswer } from "@dudousxd/nestjs-agent-core";
 import { BadRequestException, ForbiddenException, GoneException, HttpException, HttpStatus, Inject as Inject2, Injectable as Injectable2, NotFoundException, NotImplementedException, Optional as Optional2 } from "@nestjs/common";
 
 // src/agent-deps.ts
@@ -325,16 +318,14 @@ var AgentService = class {
   runner;
   store;
   deps;
-  quota;
   staging;
   models;
   quotaProvider;
   options;
-  constructor(runner, store, deps, quota, staging, models, quotaProvider, options) {
+  constructor(runner, store, deps, staging, models, quotaProvider, options) {
     this.runner = runner;
     this.store = store;
     this.deps = deps;
-    this.quota = quota;
     this.staging = staging;
     this.models = models;
     this.quotaProvider = quotaProvider;
@@ -350,33 +341,23 @@ var AgentService = class {
         actor
       });
     }
-    const today = await this.quotaToday(actor.id);
+    const { usedTokens, costUsd } = await this.store.quotaToday(actor.id, utcDay());
     return {
       windows: [
         {
           period: "day",
-          usedTokens: today.usedTokens,
-          ...today.limitTokens !== null ? {
-            limitTokens: today.limitTokens
-          } : {},
-          usedUsd: today.costUsd
-        }
-      ],
-      ...today.withinLimit ? {} : {
-        blocked: {
-          period: "day"
+          usedTokens,
+          usedUsd: costUsd
         }
-      }
+      ]
     };
   }
   /**
   * Refuse a turn the actor's budget no longer covers — only when the host configured one
-  * (`quotaProvider` or `quotaLimits`): the default report is informational, and the daily token
-  * quota the loop enforces keeps working as it always has.
+  * (`quota`): the default report is informational.
   */
   async assertWithinQuota(actor) {
-    const gated = this.options?.quotaProvider !== void 0 || this.options?.quotaLimits !== void 0;
-    if (!gated || this.quotaProvider === void 0) {
+    if (this.options?.quota === void 0 || this.quotaProvider === void 0) {
       return;
     }
     const { blocked } = await this.quotaProvider.report({
@@ -627,7 +608,7 @@ var AgentService = class {
   async getThread(actor, threadId) {
     await this.assertOwnsThread(actor, threadId);
     const thread = await this.store.getThread(threadId);
-    return thread === null ? null : this.toDetailView(thread);
+    return thread === null ? null : this.toDetailView(thread, actor);
   }
   async deleteThread(actor, threadId) {
     await this.assertOwnsThread(actor, threadId);
@@ -719,19 +700,46 @@ var AgentService = class {
       ...thread,
       defaultAgent: thread.defaultAgent ?? null,
       model: thread.model ?? null,
-      activeRunId: await this.store.activeRunForThread?.(thread.id) ?? null
+      activeRunId: await this.store.activeRunForThread?.(thread.id) ?? thread.activeRunId ?? null
     };
   }
-  async toDetailView(thread) {
+  async toDetailView(thread, actor) {
     const summary = await this.toSummaryView(thread);
     return {
       ...summary,
-      messages: thread.messages,
-      ...thread.activeStreamId !== void 0 ? {
-        activeStreamId: thread.activeStreamId
-      } : {}
+      messages: await this.freshAttachmentUrls(thread.messages, actor)
     };
   }
+  /**
+  * Re-mint each replayed attachment's url from the staging store, by `mediaId`: the url persisted
+  * with the message was minted for THAT turn (a presigned url with an expiry), so an old turn would
+  * otherwise show a dead link. The store's own access check applies — an attachment it will not
+  * resolve for this actor keeps the url it was stored with.
+  */
+  async freshAttachmentUrls(messages, actor) {
+    const staging = this.staging;
+    if (staging === void 0 || !messages.some((message) => message.attachments?.length)) {
+      return messages;
+    }
+    return Promise.all(messages.map(async (message) => {
+      if (message.attachments === void 0 || message.attachments.length === 0) return message;
+      const attachments = await Promise.all(message.attachments.map(async (attachment) => {
+        try {
+          const fresh = await staging.resolve({
+            mediaId: attachment.mediaId,
+            actor
+          });
+          return fresh ?? attachment;
+        } catch {
+          return attachment;
+        }
+      }));
+      return {
+        ...message,
+        attachments
+      };
+    }));
+  }
   async promoteThread(actor, threadId) {
     await this.assertOwnsThread(actor, threadId);
     return this.store.promoteThread(threadId);
@@ -841,30 +849,6 @@ var AgentService = class {
     return list;
   }
   /**
-  * The day's usage for the badge: tokens + summed USD cost from the store, and the configured
-  * limit from the quota store (null → unlimited). `withinLimit` comes from the quota store so it
-  * can never drift from what enforcement uses.
-  */
-  async quotaToday(actorRef) {
-    const day = utcDay();
-    const { usedTokens, costUsd } = await this.store.quotaToday(actorRef, day);
-    if (this.quota === void 0) {
-      return {
-        usedTokens,
-        costUsd,
-        limitTokens: null,
-        withinLimit: true
-      };
-    }
-    const state = await this.quota.check(actorRef, day);
-    return {
-      usedTokens: state.usedTokens,
-      costUsd,
-      limitTokens: state.limitTokens,
-      withinLimit: state.withinLimit
-    };
-  }
-  /**
   * Authorization seam for thread-scoped endpoints: the caller must own the thread. A missing
   * thread is a 404; someone else's thread is a 403 — one actor never touches another's thread.
   */
@@ -983,21 +967,19 @@ AgentService = _ts_decorate2([
   _ts_param2(0, Inject2(AGENT_RUNNER)),
   _ts_param2(1, Inject2(AGENT_STORE2)),
   _ts_param2(2, Inject2(AGENT_DEPS_FACTORY)),
-  _ts_param2(3, Inject2(AGENT_QUOTA_STORE2)),
+  _ts_param2(3, Optional2()),
+  _ts_param2(3, Inject2(AGENT_ATTACHMENT_STAGING)),
   _ts_param2(4, Optional2()),
-  _ts_param2(4, Inject2(AGENT_ATTACHMENT_STAGING)),
+  _ts_param2(4, Inject2(AGENT_MODEL_CATALOG)),
   _ts_param2(5, Optional2()),
-  _ts_param2(5, Inject2(AGENT_MODEL_CATALOG)),
+  _ts_param2(5, Inject2(AGENT_QUOTA_PROVIDER)),
   _ts_param2(6, Optional2()),
-  _ts_param2(6, Inject2(AGENT_QUOTA_PROVIDER)),
-  _ts_param2(7, Optional2()),
-  _ts_param2(7, Inject2(AGENT_OPTIONS2)),
+  _ts_param2(6, Inject2(AGENT_OPTIONS2)),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     typeof AgentRunner === "undefined" ? Object : AgentRunner,
     typeof AgentStore === "undefined" ? Object : AgentStore,
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
-    Object,
     typeof AttachmentStagingStore === "undefined" ? Object : AttachmentStagingStore,
     typeof ModelCatalog === "undefined" ? Object : ModelCatalog,
     typeof QuotaProvider === "undefined" ? Object : QuotaProvider,
@@ -1143,6 +1125,33 @@ AgentsController = _ts_decorate4([
 import { AGENT_ACTOR_RESOLVER, AGENT_ATTACHMENT_STAGING as AGENT_ATTACHMENT_STAGING2, AGENT_OPTIONS as AGENT_OPTIONS3 } from "@dudousxd/nestjs-agent-core";
 import { BadRequestException as BadRequestException2, Controller as Controller2, Get as Get2, Inject as Inject4, NotImplementedException as NotImplementedException2, Optional as Optional3, PayloadTooLargeException, Post, Req, UnsupportedMediaTypeException, UploadedFile, UseInterceptors } from "@nestjs/common";
 import { FileInterceptor } from "@nestjs/platform-express";
+
+// src/attachment-limits.ts
+var DEFAULT_MAX_ATTACHMENT_BYTES = 20 * 1024 * 1024;
+var DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES = [
+  "image/png",
+  "image/jpeg",
+  "image/gif",
+  "image/webp",
+  "application/pdf",
+  "text/plain",
+  "text/csv"
+];
+var MAX_ATTACHMENTS_PER_MESSAGE = 10;
+function attachmentLimits(options, staging) {
+  const declared = staging?.describe?.();
+  const own = options?.attachments;
+  return {
+    enabled: staging !== void 0,
+    upload: staging === void 0 ? null : declared?.upload ?? "multipart",
+    maxBytes: declared?.maxBytes ?? own?.maxBytes ?? DEFAULT_MAX_ATTACHMENT_BYTES,
+    allowedContentTypes: declared?.allowedContentTypes ?? own?.allowedContentTypes ?? DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES,
+    maxPerMessage: MAX_ATTACHMENTS_PER_MESSAGE
+  };
+}
+__name(attachmentLimits, "attachmentLimits");
+
+// src/controller/attachments.controller.ts
 function _ts_decorate5(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -1169,18 +1178,8 @@ function _ts_param4(paramIndex, decorator) {
   };
 }
 __name(_ts_param4, "_ts_param");
-var DEFAULT_MAX_ATTACHMENT_BYTES = 20 * 1024 * 1024;
 var HARD_MAX_ATTACHMENT_BYTES = 32 * 1024 * 1024;
 var ATTACHMENT_PAGE_SIZE = 50;
-var DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES = [
-  "image/png",
-  "image/jpeg",
-  "image/gif",
-  "image/webp",
-  "application/pdf",
-  "text/plain",
-  "text/csv"
-];
 var AttachmentsController = class {
   static {
     __name(this, "AttachmentsController");
@@ -1196,17 +1195,6 @@ var AttachmentsController = class {
     this.staging = staging;
   }
   /**
-  * `attachments.upload: true` is what mounts this controller at all (see `agent.module.ts`), so by
-  * the time an instance exists the host clearly intends uploads to work. Fail boot loudly rather
-  * than mounting a controller that would 501 on every single request because nobody bound
-  * `AGENT_ATTACHMENT_STAGING`.
-  */
-  onModuleInit() {
-    if (this.options.attachments?.upload === true && this.staging === void 0) {
-      throw new Error("AgentModule: attachments.upload is true but no AGENT_ATTACHMENT_STAGING provider is bound. Bind one (e.g. `{ provide: AGENT_ATTACHMENT_STAGING, useClass: MyStagingStore }`) in a module imported alongside AgentModule, or set attachments.upload to false.");
-    }
-  }
-  /**
   * The caller's own staged files, newest first — the one question `GET /agent/threads/:id` cannot
   * answer, since an upload that was never sent belongs to no thread.
   *
@@ -1223,16 +1211,15 @@ var AttachmentsController = class {
   }
   async upload(req, file) {
     if (this.staging === void 0) {
-      throw new NotImplementedException2("Attachment upload is not configured on this server.");
+      throw new NotImplementedException2("Attachment upload is not configured on this server: bind AGENT_ATTACHMENT_STAGING (e.g. import AgentMediaAttachmentsModule).");
     }
     if (file === void 0) {
       throw new BadRequestException2('multipart field "file" is required');
     }
-    const allowedContentTypes = this.options.attachments?.allowedContentTypes ?? DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES;
+    const { allowedContentTypes, maxBytes } = attachmentLimits(this.options, this.staging);
     if (!allowedContentTypes.includes(file.mimetype)) {
       throw new UnsupportedMediaTypeException(`content type "${file.mimetype}" is not allowed (allowed: ${allowedContentTypes.join(", ")})`);
     }
-    const maxBytes = this.options.attachments?.maxBytes ?? DEFAULT_MAX_ATTACHMENT_BYTES;
     if (file.size > maxBytes) {
       throw new PayloadTooLargeException(`file exceeds the ${maxBytes}-byte limit`);
     }
@@ -1315,7 +1302,6 @@ function _ts_param5(paramIndex, decorator) {
   };
 }
 __name(_ts_param5, "_ts_param");
-var MAX_ATTACHMENTS_PER_MESSAGE = 10;
 function attachmentRefs(claimed) {
   if (claimed === void 0) {
     return [];
@@ -1330,6 +1316,9 @@ function attachmentRefs(claimed) {
     if (typeof entry !== "object" || entry === null || !("mediaId" in entry)) {
       throw new BadRequestException3("each attachment must be an object with a mediaId");
     }
+    if (Object.keys(entry).some((key) => key !== "mediaId")) {
+      throw new BadRequestException3("attachments are { mediaId } refs \u2014 send nothing but the id");
+    }
     const { mediaId } = entry;
     if (typeof mediaId !== "string" || mediaId.length === 0) {
       throw new BadRequestException3("each attachment must carry a non-empty string mediaId");
@@ -1525,9 +1514,98 @@ function parseCursor(raw) {
 }
 __name(parseCursor, "parseCursor");
 
-// src/controller/memories.controller.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER3, AGENT_MEMORY as AGENT_MEMORY2, memoryForgetVerdict, offerMemories } from "@dudousxd/nestjs-agent-core";
-import { Controller as Controller4, Delete, ForbiddenException as ForbiddenException2, Get as Get4, Inject as Inject6, NotFoundException as NotFoundException2, Optional as Optional4, Param as Param2, Query as Query2, Req as Req3 } from "@nestjs/common";
+// src/controller/config.controller.ts
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER3, AGENT_ATTACHMENT_STAGING as AGENT_ATTACHMENT_STAGING3, AGENT_MODEL_CATALOG as AGENT_MODEL_CATALOG2, AGENT_OPTIONS as AGENT_OPTIONS4 } from "@dudousxd/nestjs-agent-core";
+import { Controller as Controller4, Get as Get4, Inject as Inject6, Optional as Optional4, Req as Req3 } from "@nestjs/common";
+
+// src/resolver/anonymous-actor-resolver.ts
+import { createHash, randomBytes } from "crypto";
+var TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/;
+var MINTED = /* @__PURE__ */ Symbol("nestjs-agent:anonymous-token");
+function readCookie(req, name) {
+  const header = req.headers?.cookie;
+  const raw = Array.isArray(header) ? header.join("; ") : header;
+  if (raw === void 0) return void 0;
+  for (const pair of raw.split(";")) {
+    const index = pair.indexOf("=");
+    if (index === -1) continue;
+    if (pair.slice(0, index).trim() === name) {
+      try {
+        return decodeURIComponent(pair.slice(index + 1).trim());
+      } catch {
+        return void 0;
+      }
+    }
+  }
+  return void 0;
+}
+__name(readCookie, "readCookie");
+function isHttps(req) {
+  if (req.secure === true) return true;
+  const forwarded = req.headers?.["x-forwarded-proto"];
+  const proto = Array.isArray(forwarded) ? forwarded[0] : forwarded;
+  return proto?.split(",")[0]?.trim() === "https";
+}
+__name(isHttps, "isHttps");
+var AnonymousActorResolver = class {
+  static {
+    __name(this, "AnonymousActorResolver");
+  }
+  options;
+  cookieName;
+  roles;
+  constructor(options = {}) {
+    this.options = options;
+    this.cookieName = options.cookieName ?? "agent_anon";
+    this.roles = options.roles ?? [
+      "anonymous"
+    ];
+  }
+  resolve(request) {
+    const req = typeof request === "object" && request !== null ? request : {};
+    let token = req[MINTED] ?? readCookie(req, this.cookieName);
+    if (token === void 0 || !TOKEN_PATTERN.test(token)) {
+      token = randomBytes(32).toString("base64url");
+      req[MINTED] = token;
+      this.setCookie(req, token);
+    }
+    const digest = createHash("sha256").update(token).digest("base64url").slice(0, 32);
+    return {
+      id: `anon:${digest}`,
+      roles: [
+        ...this.roles
+      ]
+    };
+  }
+  setCookie(req, token) {
+    const res = req.res;
+    if (res?.setHeader === void 0 || res.headersSent === true) return;
+    const sameSite = this.options.sameSite ?? "lax";
+    const secureOption = this.options.secure ?? "auto";
+    const secure = sameSite === "none" || (secureOption === "auto" ? isHttps(req) : secureOption);
+    const maxAge = Math.round((this.options.maxAgeDays ?? 365) * 24 * 60 * 60);
+    const cookie = [
+      `${this.cookieName}=${token}`,
+      `Path=${this.options.path ?? "/"}`,
+      `Max-Age=${maxAge}`,
+      "HttpOnly",
+      `SameSite=${sameSite === "none" ? "None" : sameSite === "strict" ? "Strict" : "Lax"}`,
+      ...secure ? [
+        "Secure"
+      ] : []
+    ].join("; ");
+    const existing = res.getHeader?.("Set-Cookie");
+    const list = Array.isArray(existing) ? existing.map(String) : existing !== void 0 ? [
+      String(existing)
+    ] : [];
+    res.setHeader("Set-Cookie", [
+      ...list,
+      cookie
+    ]);
+  }
+};
+
+// src/controller/config.controller.ts
 function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -1554,6 +1632,91 @@ function _ts_param6(paramIndex, decorator) {
   };
 }
 __name(_ts_param6, "_ts_param");
+var ConfigController = class {
+  static {
+    __name(this, "ConfigController");
+  }
+  options;
+  actorResolver;
+  staging;
+  models;
+  constructor(options, actorResolver, staging, models) {
+    this.options = options;
+    this.actorResolver = actorResolver;
+    this.staging = staging;
+    this.models = models;
+  }
+  async config(req) {
+    await this.actorResolver.resolve(req);
+    return {
+      attachments: attachmentLimits(this.options, this.staging),
+      models: {
+        enabled: this.models !== void 0
+      },
+      quota: {
+        enforced: this.options.quota !== void 0
+      },
+      identity: {
+        anonymous: this.actorResolver instanceof AnonymousActorResolver
+      }
+    };
+  }
+};
+_ts_decorate7([
+  Get4(),
+  _ts_param6(0, Req3()),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request
+  ]),
+  _ts_metadata7("design:returntype", Promise)
+], ConfigController.prototype, "config", null);
+ConfigController = _ts_decorate7([
+  Controller4("config"),
+  _ts_param6(0, Inject6(AGENT_OPTIONS4)),
+  _ts_param6(1, Inject6(AGENT_ACTOR_RESOLVER3)),
+  _ts_param6(2, Optional4()),
+  _ts_param6(2, Inject6(AGENT_ATTACHMENT_STAGING3)),
+  _ts_param6(3, Optional4()),
+  _ts_param6(3, Inject6(AGENT_MODEL_CATALOG2)),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
+    typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
+    typeof ActorResolver === "undefined" ? Object : ActorResolver,
+    Object,
+    Object
+  ])
+], ConfigController);
+
+// src/controller/memories.controller.ts
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER4, AGENT_MEMORY as AGENT_MEMORY2, memoryForgetVerdict, offerMemories } from "@dudousxd/nestjs-agent-core";
+import { Controller as Controller5, Delete, ForbiddenException as ForbiddenException2, Get as Get5, Inject as Inject7, NotFoundException as NotFoundException2, Optional as Optional5, Param as Param2, Query as Query2, Req as Req4 } from "@nestjs/common";
+function _ts_decorate8(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+    r = Reflect.decorate(decorators, target, key, desc);
+  } else {
+    for (var i = decorators.length - 1; i >= 0; i--) {
+      if (d = decorators[i]) {
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+      }
+    }
+  }
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate8, "_ts_decorate");
+function _ts_metadata8(metadataKey, metadataValue) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+    return Reflect.metadata(metadataKey, metadataValue);
+  }
+}
+__name(_ts_metadata8, "_ts_metadata");
+function _ts_param7(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param7, "_ts_param");
 var MemoriesController = class {
   static {
     __name(this, "MemoriesController");
@@ -1626,44 +1789,44 @@ var MemoriesController = class {
     });
   }
 };
-_ts_decorate7([
-  Get4(),
-  _ts_param6(0, Req3()),
-  _ts_param6(1, Query2("threadId")),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+_ts_decorate8([
+  Get5(),
+  _ts_param7(0, Req4()),
+  _ts_param7(1, Query2("threadId")),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata7("design:returntype", Promise)
+  _ts_metadata8("design:returntype", Promise)
 ], MemoriesController.prototype, "list", null);
-_ts_decorate7([
+_ts_decorate8([
   Delete(":id"),
-  _ts_param6(0, Req3()),
-  _ts_param6(1, Param2("id")),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+  _ts_param7(0, Req4()),
+  _ts_param7(1, Param2("id")),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata7("design:returntype", Promise)
+  _ts_metadata8("design:returntype", Promise)
 ], MemoriesController.prototype, "forget", null);
-MemoriesController = _ts_decorate7([
-  Controller4("memories"),
-  _ts_param6(0, Inject6(AGENT_ACTOR_RESOLVER3)),
-  _ts_param6(1, Optional4()),
-  _ts_param6(1, Inject6(AGENT_MEMORY2)),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+MemoriesController = _ts_decorate8([
+  Controller5("memories"),
+  _ts_param7(0, Inject7(AGENT_ACTOR_RESOLVER4)),
+  _ts_param7(1, Optional5()),
+  _ts_param7(1, Inject7(AGENT_MEMORY2)),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
     typeof ActorResolver === "undefined" ? Object : ActorResolver,
     Object
   ])
 ], MemoriesController);
 
 // src/controller/messages.controller.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER4 } from "@dudousxd/nestjs-agent-core";
-import { Body as Body2, Controller as Controller5, HttpCode, Inject as Inject7, Param as Param3, Post as Post3, Req as Req4 } from "@nestjs/common";
-function _ts_decorate8(decorators, target, key, desc) {
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER5 } from "@dudousxd/nestjs-agent-core";
+import { Body as Body2, Controller as Controller6, HttpCode, Inject as Inject8, Param as Param3, Post as Post3, Req as Req5 } from "@nestjs/common";
+function _ts_decorate9(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1676,19 +1839,19 @@ function _ts_decorate8(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate8, "_ts_decorate");
-function _ts_metadata8(metadataKey, metadataValue) {
+__name(_ts_decorate9, "_ts_decorate");
+function _ts_metadata9(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata8, "_ts_metadata");
-function _ts_param7(paramIndex, decorator) {
+__name(_ts_metadata9, "_ts_metadata");
+function _ts_param8(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param7, "_ts_param");
+__name(_ts_param8, "_ts_param");
 var MessagesController = class {
   static {
     __name(this, "MessagesController");
@@ -1716,34 +1879,34 @@ var MessagesController = class {
     };
   }
 };
-_ts_decorate8([
+_ts_decorate9([
   Post3(":id/feedback"),
   HttpCode(200),
-  _ts_param7(0, Req4()),
-  _ts_param7(1, Param3("id")),
-  _ts_param7(2, Body2()),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+  _ts_param8(0, Req5()),
+  _ts_param8(1, Param3("id")),
+  _ts_param8(2, Body2()),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     typeof FeedbackBody === "undefined" ? Object : FeedbackBody
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata9("design:returntype", Promise)
 ], MessagesController.prototype, "feedback", null);
-MessagesController = _ts_decorate8([
-  Controller5("messages"),
-  _ts_param7(1, Inject7(AGENT_ACTOR_RESOLVER4)),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+MessagesController = _ts_decorate9([
+  Controller6("messages"),
+  _ts_param8(1, Inject8(AGENT_ACTOR_RESOLVER5)),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], MessagesController);
 
 // src/controller/models.controller.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER5 } from "@dudousxd/nestjs-agent-core";
-import { Controller as Controller6, Get as Get5, Inject as Inject8, Query as Query3, Req as Req5 } from "@nestjs/common";
-function _ts_decorate9(decorators, target, key, desc) {
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER6 } from "@dudousxd/nestjs-agent-core";
+import { Controller as Controller7, Get as Get6, Inject as Inject9, Query as Query3, Req as Req6 } from "@nestjs/common";
+function _ts_decorate10(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1756,19 +1919,19 @@ function _ts_decorate9(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate9, "_ts_decorate");
-function _ts_metadata9(metadataKey, metadataValue) {
+__name(_ts_decorate10, "_ts_decorate");
+function _ts_metadata10(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata9, "_ts_metadata");
-function _ts_param8(paramIndex, decorator) {
+__name(_ts_metadata10, "_ts_metadata");
+function _ts_param9(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param8, "_ts_param");
+__name(_ts_param9, "_ts_param");
 var ModelsController = class {
   static {
     __name(this, "ModelsController");
@@ -1788,31 +1951,31 @@ var ModelsController = class {
     return this.agent.listModels(actor, agent);
   }
 };
-_ts_decorate9([
-  Get5(),
-  _ts_param8(0, Req5()),
-  _ts_param8(1, Query3("agent")),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+_ts_decorate10([
+  Get6(),
+  _ts_param9(0, Req6()),
+  _ts_param9(1, Query3("agent")),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata9("design:returntype", Promise)
+  _ts_metadata10("design:returntype", Promise)
 ], ModelsController.prototype, "list", null);
-ModelsController = _ts_decorate9([
-  Controller6("models"),
-  _ts_param8(1, Inject8(AGENT_ACTOR_RESOLVER5)),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+ModelsController = _ts_decorate10([
+  Controller7("models"),
+  _ts_param9(1, Inject9(AGENT_ACTOR_RESOLVER6)),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], ModelsController);
 
 // src/controller/quota.controller.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER6 } from "@dudousxd/nestjs-agent-core";
-import { Controller as Controller7, Get as Get6, Inject as Inject9, Req as Req6 } from "@nestjs/common";
-function _ts_decorate10(decorators, target, key, desc) {
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER7 } from "@dudousxd/nestjs-agent-core";
+import { Controller as Controller8, Get as Get7, Inject as Inject10, Req as Req7 } from "@nestjs/common";
+function _ts_decorate11(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1825,19 +1988,19 @@ function _ts_decorate10(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate10, "_ts_decorate");
-function _ts_metadata10(metadataKey, metadataValue) {
+__name(_ts_decorate11, "_ts_decorate");
+function _ts_metadata11(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata10, "_ts_metadata");
-function _ts_param9(paramIndex, decorator) {
+__name(_ts_metadata11, "_ts_metadata");
+function _ts_param10(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param9, "_ts_param");
+__name(_ts_param10, "_ts_param");
 var QuotaController = class {
   static {
     __name(this, "QuotaController");
@@ -1856,43 +2019,30 @@ var QuotaController = class {
     const actor = await this.actorResolver.resolve(req);
     return this.agent.quotaReport(actor);
   }
-  async today(req) {
-    const actor = await this.actorResolver.resolve(req);
-    return this.agent.quotaToday(actor.id);
-  }
 };
-_ts_decorate10([
-  Get6(),
-  _ts_param9(0, Req6()),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
+_ts_decorate11([
+  Get7(),
+  _ts_param10(0, Req7()),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request
   ]),
-  _ts_metadata10("design:returntype", Promise)
+  _ts_metadata11("design:returntype", Promise)
 ], QuotaController.prototype, "report", null);
-_ts_decorate10([
-  Get6("today"),
-  _ts_param9(0, Req6()),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
-    typeof Request === "undefined" ? Object : Request
-  ]),
-  _ts_metadata10("design:returntype", Promise)
-], QuotaController.prototype, "today", null);
-QuotaController = _ts_decorate10([
-  Controller7("quota"),
-  _ts_param9(1, Inject9(AGENT_ACTOR_RESOLVER6)),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
+QuotaController = _ts_decorate11([
+  Controller8("quota"),
+  _ts_param10(1, Inject10(AGENT_ACTOR_RESOLVER7)),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], QuotaController);
 
 // src/controller/skills.controller.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER7, AGENT_SKILLS as AGENT_SKILLS2, offerSkills } from "@dudousxd/nestjs-agent-core";
-import { Controller as Controller8, Get as Get7, Inject as Inject10, Optional as Optional5, Query as Query4, Req as Req7 } from "@nestjs/common";
-function _ts_decorate11(decorators, target, key, desc) {
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER8, AGENT_SKILLS as AGENT_SKILLS2, offerSkills } from "@dudousxd/nestjs-agent-core";
+import { Controller as Controller9, Get as Get8, Inject as Inject11, Optional as Optional6, Query as Query4, Req as Req8 } from "@nestjs/common";
+function _ts_decorate12(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1905,19 +2055,19 @@ function _ts_decorate11(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate11, "_ts_decorate");
-function _ts_metadata11(metadataKey, metadataValue) {
+__name(_ts_decorate12, "_ts_decorate");
+function _ts_metadata12(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata11, "_ts_metadata");
-function _ts_param10(paramIndex, decorator) {
+__name(_ts_metadata12, "_ts_metadata");
+function _ts_param11(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param10, "_ts_param");
+__name(_ts_param11, "_ts_param");
 var SkillsController = class {
   static {
     __name(this, "SkillsController");
@@ -1940,33 +2090,33 @@ var SkillsController = class {
     return offer.entries;
   }
 };
-_ts_decorate11([
-  Get7(),
-  _ts_param10(0, Req7()),
-  _ts_param10(1, Query4("threadId")),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+_ts_decorate12([
+  Get8(),
+  _ts_param11(0, Req8()),
+  _ts_param11(1, Query4("threadId")),
+  _ts_metadata12("design:type", Function),
+  _ts_metadata12("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata11("design:returntype", Promise)
+  _ts_metadata12("design:returntype", Promise)
 ], SkillsController.prototype, "list", null);
-SkillsController = _ts_decorate11([
-  Controller8("skills"),
-  _ts_param10(0, Inject10(AGENT_ACTOR_RESOLVER7)),
-  _ts_param10(1, Optional5()),
-  _ts_param10(1, Inject10(AGENT_SKILLS2)),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+SkillsController = _ts_decorate12([
+  Controller9("skills"),
+  _ts_param11(0, Inject11(AGENT_ACTOR_RESOLVER8)),
+  _ts_param11(1, Optional6()),
+  _ts_param11(1, Inject11(AGENT_SKILLS2)),
+  _ts_metadata12("design:type", Function),
+  _ts_metadata12("design:paramtypes", [
     typeof ActorResolver === "undefined" ? Object : ActorResolver,
     Object
   ])
 ], SkillsController);
 
 // src/controller/threads.controller.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER8 } from "@dudousxd/nestjs-agent-core";
-import { Body as Body3, Controller as Controller9, Delete as Delete2, Get as Get8, Inject as Inject11, Param as Param4, Patch, Post as Post4, Req as Req8 } from "@nestjs/common";
-function _ts_decorate12(decorators, target, key, desc) {
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER9 } from "@dudousxd/nestjs-agent-core";
+import { Body as Body3, Controller as Controller10, Delete as Delete2, Get as Get9, Inject as Inject12, Param as Param4, Patch, Post as Post4, Req as Req9 } from "@nestjs/common";
+function _ts_decorate13(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1979,19 +2129,19 @@ function _ts_decorate12(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate12, "_ts_decorate");
-function _ts_metadata12(metadataKey, metadataValue) {
+__name(_ts_decorate13, "_ts_decorate");
+function _ts_metadata13(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata12, "_ts_metadata");
-function _ts_param11(paramIndex, decorator) {
+__name(_ts_metadata13, "_ts_metadata");
+function _ts_param12(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param11, "_ts_param");
+__name(_ts_param12, "_ts_param");
 var ThreadsController = class {
   static {
     __name(this, "ThreadsController");
@@ -2058,101 +2208,101 @@ var ThreadsController = class {
     };
   }
 };
-_ts_decorate12([
-  Get8(),
-  _ts_param11(0, Req8()),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+_ts_decorate13([
+  Get9(),
+  _ts_param12(0, Req9()),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request
   ]),
-  _ts_metadata12("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "list", null);
-_ts_decorate12([
-  Get8(":id"),
-  _ts_param11(0, Req8()),
-  _ts_param11(1, Param4("id")),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+_ts_decorate13([
+  Get9(":id"),
+  _ts_param12(0, Req9()),
+  _ts_param12(1, Param4("id")),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata12("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "detail", null);
-_ts_decorate12([
+_ts_decorate13([
   Delete2(":id"),
-  _ts_param11(0, Req8()),
-  _ts_param11(1, Param4("id")),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+  _ts_param12(0, Req9()),
+  _ts_param12(1, Param4("id")),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata12("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "remove", null);
-_ts_decorate12([
+_ts_decorate13([
   Post4(":id/fork-from/:messageId"),
-  _ts_param11(0, Req8()),
-  _ts_param11(1, Param4("id")),
-  _ts_param11(2, Param4("messageId")),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+  _ts_param12(0, Req9()),
+  _ts_param12(1, Param4("id")),
+  _ts_param12(2, Param4("messageId")),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     String
   ]),
-  _ts_metadata12("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "fork", null);
-_ts_decorate12([
+_ts_decorate13([
   Patch(":id"),
-  _ts_param11(0, Req8()),
-  _ts_param11(1, Param4("id")),
-  _ts_param11(2, Body3()),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+  _ts_param12(0, Req9()),
+  _ts_param12(1, Param4("id")),
+  _ts_param12(2, Body3()),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     typeof UpdateThreadBody === "undefined" ? Object : UpdateThreadBody
   ]),
-  _ts_metadata12("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "update", null);
-_ts_decorate12([
+_ts_decorate13([
   Post4(":id/promote"),
-  _ts_param11(0, Req8()),
-  _ts_param11(1, Param4("id")),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+  _ts_param12(0, Req9()),
+  _ts_param12(1, Param4("id")),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata12("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "promote", null);
-_ts_decorate12([
+_ts_decorate13([
   Delete2(":id/from/:messageId"),
-  _ts_param11(0, Req8()),
-  _ts_param11(1, Param4("id")),
-  _ts_param11(2, Param4("messageId")),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+  _ts_param12(0, Req9()),
+  _ts_param12(1, Param4("id")),
+  _ts_param12(2, Param4("messageId")),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     String
   ]),
-  _ts_metadata12("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "truncateFrom", null);
-ThreadsController = _ts_decorate12([
-  Controller9("threads"),
-  _ts_param11(1, Inject11(AGENT_ACTOR_RESOLVER8)),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+ThreadsController = _ts_decorate13([
+  Controller10("threads"),
+  _ts_param12(1, Inject12(AGENT_ACTOR_RESOLVER9)),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], ThreadsController);
 
 // src/controller/tool-call.controller.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER9 } from "@dudousxd/nestjs-agent-core";
-import { BadRequestException as BadRequestException4, Body as Body4, Controller as Controller10, Inject as Inject12, Post as Post5, Req as Req9 } from "@nestjs/common";
-function _ts_decorate13(decorators, target, key, desc) {
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER10 } from "@dudousxd/nestjs-agent-core";
+import { BadRequestException as BadRequestException4, Body as Body4, Controller as Controller11, Inject as Inject13, Post as Post5, Req as Req10 } from "@nestjs/common";
+function _ts_decorate14(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2165,19 +2315,19 @@ function _ts_decorate13(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate13, "_ts_decorate");
-function _ts_metadata13(metadataKey, metadataValue) {
+__name(_ts_decorate14, "_ts_decorate");
+function _ts_metadata14(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata13, "_ts_metadata");
-function _ts_param12(paramIndex, decorator) {
+__name(_ts_metadata14, "_ts_metadata");
+function _ts_param13(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param12, "_ts_param");
+__name(_ts_param13, "_ts_param");
 var MAX_ANSWERED_QUESTIONS = 100;
 var MAX_VALUES_PER_QUESTION = 100;
 var MAX_ANSWER_VALUE_LENGTH = 4096;
@@ -2306,64 +2456,64 @@ var ToolCallController = class {
     };
   }
 };
-_ts_decorate13([
+_ts_decorate14([
   Post5("approve"),
-  _ts_param12(0, Req9()),
-  _ts_param12(1, Body4()),
-  _ts_metadata13("design:type", Function),
-  _ts_metadata13("design:paramtypes", [
+  _ts_param13(0, Req10()),
+  _ts_param13(1, Body4()),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof ApproveBody === "undefined" ? Object : ApproveBody
   ]),
-  _ts_metadata13("design:returntype", Promise)
+  _ts_metadata14("design:returntype", Promise)
 ], ToolCallController.prototype, "approve", null);
-_ts_decorate13([
+_ts_decorate14([
   Post5("reject"),
-  _ts_param12(0, Req9()),
-  _ts_param12(1, Body4()),
-  _ts_metadata13("design:type", Function),
-  _ts_metadata13("design:paramtypes", [
+  _ts_param13(0, Req10()),
+  _ts_param13(1, Body4()),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof RejectBody === "undefined" ? Object : RejectBody
   ]),
-  _ts_metadata13("design:returntype", Promise)
+  _ts_metadata14("design:returntype", Promise)
 ], ToolCallController.prototype, "reject", null);
-_ts_decorate13([
+_ts_decorate14([
   Post5("answer"),
-  _ts_param12(0, Req9()),
-  _ts_param12(1, Body4()),
-  _ts_metadata13("design:type", Function),
-  _ts_metadata13("design:paramtypes", [
+  _ts_param13(0, Req10()),
+  _ts_param13(1, Body4()),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof AnswerBody === "undefined" ? Object : AnswerBody
   ]),
-  _ts_metadata13("design:returntype", Promise)
+  _ts_metadata14("design:returntype", Promise)
 ], ToolCallController.prototype, "answer", null);
-_ts_decorate13([
+_ts_decorate14([
   Post5("skip"),
-  _ts_param12(0, Req9()),
-  _ts_param12(1, Body4()),
-  _ts_metadata13("design:type", Function),
-  _ts_metadata13("design:paramtypes", [
+  _ts_param13(0, Req10()),
+  _ts_param13(1, Body4()),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     Object
   ]),
-  _ts_metadata13("design:returntype", Promise)
+  _ts_metadata14("design:returntype", Promise)
 ], ToolCallController.prototype, "skip", null);
-ToolCallController = _ts_decorate13([
-  Controller10("tool-call"),
-  _ts_param12(1, Inject12(AGENT_ACTOR_RESOLVER9)),
-  _ts_metadata13("design:type", Function),
-  _ts_metadata13("design:paramtypes", [
+ToolCallController = _ts_decorate14([
+  Controller11("tool-call"),
+  _ts_param13(1, Inject13(AGENT_ACTOR_RESOLVER10)),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], ToolCallController);
 
 // src/controller/tools.controller.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER10, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY3, AGENT_REGISTRY as AGENT_REGISTRY3, AgentRegistry as AgentRegistry4 } from "@dudousxd/nestjs-agent-core";
-import { Controller as Controller11, Get as Get9, Inject as Inject13, NotFoundException as NotFoundException3, Query as Query5, Req as Req10 } from "@nestjs/common";
-function _ts_decorate14(decorators, target, key, desc) {
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER11, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY3, AGENT_REGISTRY as AGENT_REGISTRY3, AgentRegistry as AgentRegistry4 } from "@dudousxd/nestjs-agent-core";
+import { Controller as Controller12, Get as Get10, Inject as Inject14, NotFoundException as NotFoundException3, Query as Query5, Req as Req11 } from "@nestjs/common";
+function _ts_decorate15(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2376,19 +2526,19 @@ function _ts_decorate14(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate14, "_ts_decorate");
-function _ts_metadata14(metadataKey, metadataValue) {
+__name(_ts_decorate15, "_ts_decorate");
+function _ts_metadata15(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata14, "_ts_metadata");
-function _ts_param13(paramIndex, decorator) {
+__name(_ts_metadata15, "_ts_metadata");
+function _ts_param14(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param13, "_ts_param");
+__name(_ts_param14, "_ts_param");
 var ToolsController = class {
   static {
     __name(this, "ToolsController");
@@ -2417,24 +2567,24 @@ var ToolsController = class {
     }));
   }
 };
-_ts_decorate14([
-  Get9(),
-  _ts_param13(0, Req10()),
-  _ts_param13(1, Query5("agent")),
-  _ts_metadata14("design:type", Function),
-  _ts_metadata14("design:paramtypes", [
+_ts_decorate15([
+  Get10(),
+  _ts_param14(0, Req11()),
+  _ts_param14(1, Query5("agent")),
+  _ts_metadata15("design:type", Function),
+  _ts_metadata15("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata14("design:returntype", Promise)
+  _ts_metadata15("design:returntype", Promise)
 ], ToolsController.prototype, "list", null);
-ToolsController = _ts_decorate14([
-  Controller11("tools"),
-  _ts_param13(0, Inject13(AGENT_ACTOR_RESOLVER10)),
-  _ts_param13(1, Inject13(AGENT_DEPS_FACTORY3)),
-  _ts_param13(2, Inject13(AGENT_REGISTRY3)),
-  _ts_metadata14("design:type", Function),
-  _ts_metadata14("design:paramtypes", [
+ToolsController = _ts_decorate15([
+  Controller12("tools"),
+  _ts_param14(0, Inject14(AGENT_ACTOR_RESOLVER11)),
+  _ts_param14(1, Inject14(AGENT_DEPS_FACTORY3)),
+  _ts_param14(2, Inject14(AGENT_REGISTRY3)),
+  _ts_metadata15("design:type", Function),
+  _ts_metadata15("design:paramtypes", [
     typeof ActorResolver === "undefined" ? Object : ActorResolver,
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
     typeof AgentRegistry4 === "undefined" ? Object : AgentRegistry4
@@ -2443,7 +2593,7 @@ ToolsController = _ts_decorate14([
 
 // src/discovery/agent-discovery.service.ts
 import { AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS2, AGENT_REGISTRY as AGENT_REGISTRY4, AgentRegistry as AgentRegistry5 } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject14, Injectable as Injectable4, Logger } from "@nestjs/common";
+import { Inject as Inject15, Injectable as Injectable4, Logger } from "@nestjs/common";
 import { DiscoveryService, MetadataScanner } from "@nestjs/core";
 
 // src/decorator/agent.decorator.ts
@@ -2478,7 +2628,7 @@ function SystemPromptContributor() {
 __name(SystemPromptContributor, "SystemPromptContributor");
 
 // src/discovery/agent-discovery.service.ts
-function _ts_decorate15(decorators, target, key, desc) {
+function _ts_decorate16(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2491,19 +2641,19 @@ function _ts_decorate15(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate15, "_ts_decorate");
-function _ts_metadata15(metadataKey, metadataValue) {
+__name(_ts_decorate16, "_ts_decorate");
+function _ts_metadata16(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata15, "_ts_metadata");
-function _ts_param14(paramIndex, decorator) {
+__name(_ts_metadata16, "_ts_metadata");
+function _ts_param15(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param14, "_ts_param");
+__name(_ts_param15, "_ts_param");
 var AgentDiscoveryService = class _AgentDiscoveryService {
   static {
     __name(this, "AgentDiscoveryService");
@@ -2630,12 +2780,12 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
     return (ctx) => candidate.call(instance, ctx);
   }
 };
-AgentDiscoveryService = _ts_decorate15([
+AgentDiscoveryService = _ts_decorate16([
   Injectable4(),
-  _ts_param14(2, Inject14(AGENT_REGISTRY4)),
-  _ts_param14(3, Inject14(AGENT_PROMPT_CONTRIBUTORS2)),
-  _ts_metadata15("design:type", Function),
-  _ts_metadata15("design:paramtypes", [
+  _ts_param15(2, Inject15(AGENT_REGISTRY4)),
+  _ts_param15(3, Inject15(AGENT_PROMPT_CONTRIBUTORS2)),
+  _ts_metadata16("design:type", Function),
+  _ts_metadata16("design:paramtypes", [
     typeof DiscoveryService === "undefined" ? Object : DiscoveryService,
     typeof MetadataScanner === "undefined" ? Object : MetadataScanner,
     typeof AgentRegistry5 === "undefined" ? Object : AgentRegistry5,
@@ -2644,8 +2794,8 @@ AgentDiscoveryService = _ts_decorate15([
 ], AgentDiscoveryService);
 
 // src/discovery/ai-tool-discovery.service.ts
-import { AGENT_OPTIONS as AGENT_OPTIONS4, AGENT_REGISTRY as AGENT_REGISTRY5, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY2, normalizeDelegation as normalizeDelegation2 } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject15, Injectable as Injectable5, Logger as Logger2 } from "@nestjs/common";
+import { AGENT_OPTIONS as AGENT_OPTIONS5, AGENT_REGISTRY as AGENT_REGISTRY5, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY2, normalizeDelegation as normalizeDelegation2 } from "@dudousxd/nestjs-agent-core";
+import { Inject as Inject16, Injectable as Injectable5, Logger as Logger2 } from "@nestjs/common";
 import { DiscoveryService as DiscoveryService2 } from "@nestjs/core";
 import { z } from "zod";
 
@@ -2716,7 +2866,7 @@ function provideAgentTools(factory, inject) {
 __name(provideAgentTools, "provideAgentTools");
 
 // src/discovery/ai-tool-discovery.service.ts
-function _ts_decorate16(decorators, target, key, desc) {
+function _ts_decorate17(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2729,19 +2879,19 @@ function _ts_decorate16(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate16, "_ts_decorate");
-function _ts_metadata16(metadataKey, metadataValue) {
+__name(_ts_decorate17, "_ts_decorate");
+function _ts_metadata17(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata16, "_ts_metadata");
-function _ts_param15(paramIndex, decorator) {
+__name(_ts_metadata17, "_ts_metadata");
+function _ts_param16(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param15, "_ts_param");
+__name(_ts_param16, "_ts_param");
 var AiToolDiscoveryService = class _AiToolDiscoveryService {
   static {
     __name(this, "AiToolDiscoveryService");
@@ -2885,13 +3035,13 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
     return true;
   }
 };
-AiToolDiscoveryService = _ts_decorate16([
+AiToolDiscoveryService = _ts_decorate17([
   Injectable5(),
-  _ts_param15(1, Inject15(AGENT_TOOL_REGISTRY2)),
-  _ts_param15(2, Inject15(AGENT_REGISTRY5)),
-  _ts_param15(3, Inject15(AGENT_OPTIONS4)),
-  _ts_metadata16("design:type", Function),
-  _ts_metadata16("design:paramtypes", [
+  _ts_param16(1, Inject16(AGENT_TOOL_REGISTRY2)),
+  _ts_param16(2, Inject16(AGENT_REGISTRY5)),
+  _ts_param16(3, Inject16(AGENT_OPTIONS5)),
+  _ts_metadata17("design:type", Function),
+  _ts_metadata17("design:paramtypes", [
     typeof DiscoveryService2 === "undefined" ? Object : DiscoveryService2,
     typeof ToolRegistry === "undefined" ? Object : ToolRegistry,
     typeof AgentRegistry === "undefined" ? Object : AgentRegistry,
@@ -2901,7 +3051,7 @@ AiToolDiscoveryService = _ts_decorate16([
 
 // src/discovery/skill-discovery.service.ts
 import { AGENT_SKILL_SOURCES } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject16, Injectable as Injectable6, Logger as Logger3 } from "@nestjs/common";
+import { Inject as Inject17, Injectable as Injectable6, Logger as Logger3 } from "@nestjs/common";
 import { DiscoveryService as DiscoveryService3 } from "@nestjs/core";
 
 // src/decorator/skill.decorator.ts
@@ -2924,7 +3074,7 @@ function skillScope(options) {
 __name(skillScope, "skillScope");
 
 // src/discovery/skill-discovery.service.ts
-function _ts_decorate17(decorators, target, key, desc) {
+function _ts_decorate18(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2937,19 +3087,19 @@ function _ts_decorate17(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate17, "_ts_decorate");
-function _ts_metadata17(metadataKey, metadataValue) {
+__name(_ts_decorate18, "_ts_decorate");
+function _ts_metadata18(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata17, "_ts_metadata");
-function _ts_param16(paramIndex, decorator) {
+__name(_ts_metadata18, "_ts_metadata");
+function _ts_param17(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param16, "_ts_param");
+__name(_ts_param17, "_ts_param");
 var SkillDiscoveryService = class _SkillDiscoveryService {
   static {
     __name(this, "SkillDiscoveryService");
@@ -2993,11 +3143,11 @@ var SkillDiscoveryService = class _SkillDiscoveryService {
     return flat === void 0 ? void 0 : () => flat;
   }
 };
-SkillDiscoveryService = _ts_decorate17([
+SkillDiscoveryService = _ts_decorate18([
   Injectable6(),
-  _ts_param16(1, Inject16(AGENT_SKILL_SOURCES)),
-  _ts_metadata17("design:type", Function),
-  _ts_metadata17("design:paramtypes", [
+  _ts_param17(1, Inject17(AGENT_SKILL_SOURCES)),
+  _ts_metadata18("design:type", Function),
+  _ts_metadata18("design:paramtypes", [
     typeof DiscoveryService3 === "undefined" ? Object : DiscoveryService3,
     Array
   ])
@@ -3078,11 +3228,9 @@ var LedgerQuotaProvider = class {
     __name(this, "LedgerQuotaProvider");
   }
   store;
-  quota;
   limits;
-  constructor(store, quota, limits = {}) {
+  constructor(store, limits = {}) {
     this.store = store;
-    this.quota = quota;
     this.limits = limits;
   }
   async report(query) {
@@ -3107,15 +3255,7 @@ var LedgerQuotaProvider = class {
   async dayWindow(actorRef, now) {
     const range = quotaPeriodRange("day", now);
     const { usedTokens, costUsd } = await this.store.quotaToday(actorRef, range.fromDay);
-    if (this.quota === void 0) {
-      return this.window("day", usedTokens, costUsd, range.resetsAt);
-    }
-    const state = await this.quota.check(actorRef, range.fromDay);
-    const window = this.window("day", state.usedTokens, costUsd, range.resetsAt);
-    if (window.limitTokens === void 0) {
-      window.limitTokens = state.limitTokens;
-    }
-    return window;
+    return this.window("day", usedTokens, costUsd, range.resetsAt);
   }
   window(period, usedTokens, usedUsd, resetsAt) {
     const limits = this.limits[period] ?? {};
@@ -3134,120 +3274,10 @@ var LedgerQuotaProvider = class {
   }
 };
 
-// src/ledger-quota-store.ts
-var LedgerQuotaStore = class {
-  static {
-    __name(this, "LedgerQuotaStore");
-  }
-  store;
-  limitTokens;
-  constructor(store, limitTokens) {
-    this.store = store;
-    this.limitTokens = limitTokens;
-  }
-  async check(actorRef, day) {
-    const { usedTokens } = await this.store.quotaToday(actorRef, day);
-    return {
-      usedTokens,
-      limitTokens: this.limitTokens,
-      withinLimit: usedTokens < this.limitTokens
-    };
-  }
-  async bump(_actorRef, _day, _tokens) {
-  }
-};
-
-// src/resolver/anonymous-actor-resolver.ts
-import { createHash, randomBytes } from "crypto";
-var TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/;
-var MINTED = /* @__PURE__ */ Symbol("nestjs-agent:anonymous-token");
-function readCookie(req, name) {
-  const header = req.headers?.cookie;
-  const raw = Array.isArray(header) ? header.join("; ") : header;
-  if (raw === void 0) return void 0;
-  for (const pair of raw.split(";")) {
-    const index = pair.indexOf("=");
-    if (index === -1) continue;
-    if (pair.slice(0, index).trim() === name) {
-      try {
-        return decodeURIComponent(pair.slice(index + 1).trim());
-      } catch {
-        return void 0;
-      }
-    }
-  }
-  return void 0;
-}
-__name(readCookie, "readCookie");
-function isHttps(req) {
-  if (req.secure === true) return true;
-  const forwarded = req.headers?.["x-forwarded-proto"];
-  const proto = Array.isArray(forwarded) ? forwarded[0] : forwarded;
-  return proto?.split(",")[0]?.trim() === "https";
-}
-__name(isHttps, "isHttps");
-var AnonymousActorResolver = class {
-  static {
-    __name(this, "AnonymousActorResolver");
-  }
-  options;
-  cookieName;
-  roles;
-  constructor(options = {}) {
-    this.options = options;
-    this.cookieName = options.cookieName ?? "agent_anon";
-    this.roles = options.roles ?? [
-      "anonymous"
-    ];
-  }
-  resolve(request) {
-    const req = typeof request === "object" && request !== null ? request : {};
-    let token = req[MINTED] ?? readCookie(req, this.cookieName);
-    if (token === void 0 || !TOKEN_PATTERN.test(token)) {
-      token = randomBytes(32).toString("base64url");
-      req[MINTED] = token;
-      this.setCookie(req, token);
-    }
-    const digest = createHash("sha256").update(token).digest("base64url").slice(0, 32);
-    return {
-      id: `anon:${digest}`,
-      roles: [
-        ...this.roles
-      ]
-    };
-  }
-  setCookie(req, token) {
-    const res = req.res;
-    if (res?.setHeader === void 0 || res.headersSent === true) return;
-    const sameSite = this.options.sameSite ?? "lax";
-    const secureOption = this.options.secure ?? "auto";
-    const secure = sameSite === "none" || (secureOption === "auto" ? isHttps(req) : secureOption);
-    const maxAge = Math.round((this.options.maxAgeDays ?? 365) * 24 * 60 * 60);
-    const cookie = [
-      `${this.cookieName}=${token}`,
-      `Path=${this.options.path ?? "/"}`,
-      `Max-Age=${maxAge}`,
-      "HttpOnly",
-      `SameSite=${sameSite === "none" ? "None" : sameSite === "strict" ? "Strict" : "Lax"}`,
-      ...secure ? [
-        "Secure"
-      ] : []
-    ].join("; ");
-    const existing = res.getHeader?.("Set-Cookie");
-    const list = Array.isArray(existing) ? existing.map(String) : existing !== void 0 ? [
-      String(existing)
-    ] : [];
-    res.setHeader("Set-Cookie", [
-      ...list,
-      cookie
-    ]);
-  }
-};
-
 // src/runner/inline-agent-runner.ts
 import { AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY4, AGENT_STORE as AGENT_STORE3, RunCancelledError, agentFailureCode, encodeStreamEvent, publishAgentRunFailed, runAgentLoop, settleAll, settleUnsettledDelegation } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject17, Injectable as Injectable7, Logger as Logger4 } from "@nestjs/common";
-function _ts_decorate18(decorators, target, key, desc) {
+import { Inject as Inject18, Injectable as Injectable7, Logger as Logger4 } from "@nestjs/common";
+function _ts_decorate19(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -3260,19 +3290,19 @@ function _ts_decorate18(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate18, "_ts_decorate");
-function _ts_metadata18(metadataKey, metadataValue) {
+__name(_ts_decorate19, "_ts_decorate");
+function _ts_metadata19(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata18, "_ts_metadata");
-function _ts_param17(paramIndex, decorator) {
+__name(_ts_metadata19, "_ts_metadata");
+function _ts_param18(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param17, "_ts_param");
+__name(_ts_param18, "_ts_param");
 var InlineAgentRunner = class _InlineAgentRunner {
   static {
     __name(this, "InlineAgentRunner");
@@ -3653,12 +3683,12 @@ var InlineAgentRunner = class _InlineAgentRunner {
     }
   }
 };
-InlineAgentRunner = _ts_decorate18([
+InlineAgentRunner = _ts_decorate19([
   Injectable7(),
-  _ts_param17(0, Inject17(AGENT_DEPS_FACTORY4)),
-  _ts_param17(1, Inject17(AGENT_STORE3)),
-  _ts_metadata18("design:type", Function),
-  _ts_metadata18("design:paramtypes", [
+  _ts_param18(0, Inject18(AGENT_DEPS_FACTORY4)),
+  _ts_param18(1, Inject18(AGENT_STORE3)),
+  _ts_metadata19("design:type", Function),
+  _ts_metadata19("design:paramtypes", [
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
     typeof AgentStore === "undefined" ? Object : AgentStore
   ])
@@ -3703,7 +3733,7 @@ function resolveSkillsConfig(options, declared) {
 __name(resolveSkillsConfig, "resolveSkillsConfig");
 
 // src/agent.module.ts
-function _ts_decorate19(decorators, target, key, desc) {
+function _ts_decorate20(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -3716,7 +3746,7 @@ function _ts_decorate19(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate19, "_ts_decorate");
+__name(_ts_decorate20, "_ts_decorate");
 var DEFAULT_PATH = "agent";
 var logger = new Logger5("AgentModule");
 function externalStoreWrapper(modules) {
@@ -3756,6 +3786,10 @@ function resolveStore(options, modules) {
   return new InMemoryAgentStore();
 }
 __name(resolveStore, "resolveStore");
+function isQuotaProvider(quota) {
+  return quota !== void 0 && typeof quota.report === "function";
+}
+__name(isQuotaProvider, "isQuotaProvider");
 function resolveCatalog(options) {
   if (options.models !== void 0) return options.models;
   const carried = options.model.catalog;
@@ -3791,7 +3825,7 @@ function sharedProviders(durable) {
       provide: AGENT_SKILLS3,
       useFactory: /* @__PURE__ */ __name((options, declared) => resolveSkillsConfig(options.skills, declared), "useFactory"),
       inject: [
-        AGENT_OPTIONS5,
+        AGENT_OPTIONS6,
         AGENT_SKILL_SOURCES2
       ]
     },
@@ -3801,66 +3835,56 @@ function sharedProviders(durable) {
       provide: AGENT_MEMORY3,
       useFactory: /* @__PURE__ */ __name((options) => options.memory, "useFactory"),
       inject: [
-        AGENT_OPTIONS5
+        AGENT_OPTIONS6
       ]
     },
     {
       provide: AGENT_SINK2,
       useFactory: /* @__PURE__ */ __name((options) => options.sink ?? new InProcessTokenStreamSink(), "useFactory"),
       inject: [
-        AGENT_OPTIONS5
+        AGENT_OPTIONS6
       ]
     },
     {
       provide: AGENT_ROLES_POLICY2,
       useFactory: /* @__PURE__ */ __name((options) => options.rolesPolicy ?? new DefaultRolesPolicy(options.defaultRoles), "useFactory"),
       inject: [
-        AGENT_OPTIONS5
+        AGENT_OPTIONS6
       ]
     },
     {
-      provide: AGENT_ACTOR_RESOLVER11,
+      provide: AGENT_ACTOR_RESOLVER12,
       useFactory: /* @__PURE__ */ __name((options) => {
         if (options.actorResolver !== void 0) return options.actorResolver;
         logger.warn("No `actorResolver` configured \u2014 the agent endpoints are PUBLIC: every browser gets its own anonymous identity (an HttpOnly cookie). Set `actorResolver: requestUserActorResolver()` (or your own) to require login.");
         return new AnonymousActorResolver();
       }, "useFactory"),
       inject: [
-        AGENT_OPTIONS5
+        AGENT_OPTIONS6
       ]
     },
     {
       provide: AGENT_MODEL2,
       useFactory: /* @__PURE__ */ __name((o) => o.model, "useFactory"),
       inject: [
-        AGENT_OPTIONS5
-      ]
-    },
-    {
-      // An explicit `quota` wins; otherwise `quotaLimitTokens` binds the built-in ledger-backed
-      // store; otherwise quotas are off (undefined). The ledger store reads the same usage rows
-      // the loop already writes, so enforcement needs no extra shared state across replicas.
-      provide: AGENT_QUOTA_STORE3,
-      useFactory: /* @__PURE__ */ __name((o, store) => o.quota ?? (o.quotaLimitTokens !== void 0 ? new LedgerQuotaStore(store, o.quotaLimitTokens) : void 0), "useFactory"),
-      inject: [
-        AGENT_OPTIONS5,
-        AGENT_STORE4
+        AGENT_OPTIONS6
       ]
     },
     {
+      // `quota` is either a provider of the host's own or ceilings for the built-in ledger one;
+      // omitted, the ledger provider still reports usage, with no ceiling to block on.
       provide: AGENT_QUOTA_PROVIDER2,
-      useFactory: /* @__PURE__ */ __name((o, store, quota) => o.quotaProvider ?? new LedgerQuotaProvider(store, quota, o.quotaLimits), "useFactory"),
+      useFactory: /* @__PURE__ */ __name((o, store) => isQuotaProvider(o.quota) ? o.quota : new LedgerQuotaProvider(store, o.quota?.limits), "useFactory"),
       inject: [
-        AGENT_OPTIONS5,
-        AGENT_STORE4,
-        AGENT_QUOTA_STORE3
+        AGENT_OPTIONS6,
+        AGENT_STORE4
       ]
     },
     {
-      provide: AGENT_MODEL_CATALOG2,
+      provide: AGENT_MODEL_CATALOG3,
       useFactory: /* @__PURE__ */ __name((o) => resolveCatalog(o), "useFactory"),
       inject: [
-        AGENT_OPTIONS5
+        AGENT_OPTIONS6
       ]
     },
     AgentDepsFactory2,
@@ -3887,7 +3911,7 @@ function sharedProviders(durable) {
     provide: AGENT_STORE4,
     useFactory: /* @__PURE__ */ __name((o, modules) => resolveStore(o, modules), "useFactory"),
     inject: [
-      AGENT_OPTIONS5,
+      AGENT_OPTIONS6,
       ModulesContainer
     ]
   });
@@ -3918,16 +3942,15 @@ function sharedProviders(durable) {
 __name(sharedProviders, "sharedProviders");
 function exportsFor() {
   return [
-    AGENT_OPTIONS5,
+    AGENT_OPTIONS6,
     AGENT_TOOL_REGISTRY3,
     AGENT_REGISTRY6,
     AGENT_SINK2,
     AGENT_ROLES_POLICY2,
-    AGENT_ACTOR_RESOLVER11,
+    AGENT_ACTOR_RESOLVER12,
     AGENT_MODEL2,
     AGENT_STORE4,
-    AGENT_QUOTA_STORE3,
-    AGENT_MODEL_CATALOG2,
+    AGENT_MODEL_CATALOG3,
     AGENT_QUOTA_PROVIDER2,
     AGENT_PROMPT_CONTRIBUTORS3,
     AGENT_SKILLS3,
@@ -3950,21 +3973,13 @@ var BASE_CONTROLLERS = [
   MemoriesController,
   ToolsController,
   MessagesController,
-  ModelsController
-];
-var GUARDABLE_CONTROLLERS = [
-  ...BASE_CONTROLLERS,
+  ModelsController,
+  ConfigController,
   AttachmentsController
 ];
-function controllersFor(mountAttachments) {
-  return mountAttachments ? [
-    ...BASE_CONTROLLERS,
-    AttachmentsController
-  ] : BASE_CONTROLLERS;
-}
-__name(controllersFor, "controllersFor");
-function controllersForSurface(surface, mountAttachments) {
-  return surface === "engine" ? [] : controllersFor(mountAttachments);
+var GUARDABLE_CONTROLLERS = BASE_CONTROLLERS;
+function controllersForSurface(surface) {
+  return surface === "engine" ? [] : BASE_CONTROLLERS;
 }
 __name(controllersForSurface, "controllersForSurface");
 var GUARDS_METADATA = "__guards__";
@@ -4004,10 +4019,10 @@ var AgentModule = class _AgentModule {
         DiscoveryModule,
         routerFor(path)
       ],
-      controllers: controllersForSurface(options.surface, options.attachments?.upload === true),
+      controllers: controllersForSurface(options.surface),
       providers: [
         {
-          provide: AGENT_OPTIONS5,
+          provide: AGENT_OPTIONS6,
           useValue: options
         },
         ...sharedProviders(options.durable ?? false),
@@ -4027,10 +4042,10 @@ var AgentModule = class _AgentModule {
         routerFor(path),
         ...options.imports ?? []
       ],
-      controllers: controllersForSurface(options.surface, options.attachmentsUpload === true),
+      controllers: controllersForSurface(options.surface),
       providers: [
         {
-          provide: AGENT_OPTIONS5,
+          provide: AGENT_OPTIONS6,
           // Stamp the STATIC wiring flags onto the factory result: `durable`/`surface` are
           // authoritative on the async config object (they decided the actual wiring above), and
           // the durable module reads `durable` back off AGENT_OPTIONS. `surface` isn't read back by
@@ -4051,7 +4066,7 @@ var AgentModule = class _AgentModule {
     };
   }
 };
-AgentModule = _ts_decorate19([
+AgentModule = _ts_decorate20([
   Global(),
   Module({})
 ], AgentModule);
@@ -4147,13 +4162,14 @@ export {
   AiToolDiscoveryService,
   AnonymousActorResolver,
   AttachmentsController,
+  ConfigController,
   DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES,
   DEFAULT_MAX_ATTACHMENT_BYTES,
   HeaderActorResolver,
   InProcessTokenStreamSink,
   InlineAgentRunner,
   LedgerQuotaProvider,
-  LedgerQuotaStore,
+  MAX_ATTACHMENTS_PER_MESSAGE,
   MemoriesController,
   MessagesController,
   ModelsController,
@@ -4166,6 +4182,7 @@ export {
   SystemPrompt,
   SystemPromptContributor,
   ToolsController,
+  attachmentLimits,
   declaredSkillProvider,
   defaultRequestUserMapper,
   delegateToolName,