@dudousxd/nestjs-agent 1.12.0 → 1.13.0

package/dist/index.d.cts

@@ -1,6 +1,6 @@
 import { DynamicModule, Type, OnApplicationBootstrap, OnModuleInit } from '@nestjs/common';
-import { b as AgentModuleOptions, c as AgentModuleAsyncOptions, A as AgentDepsFactory, d as AgentSkillsOptions } from './agent-deps.factory-pqv_qTmJ.cjs';
-export { e as AGENT_TOOL_BRAND, f as AgentAttachmentsOptions, g as AgentDeps, h as AgentMemoryOptions, a as AgentSurface, F as FunctionalTool, L as LedgerQuotaProvider, Q as QuotaLimits, i as QuotaWindowLimits, j as delegateToolName, p as provideAgentTool, k as provideAgentTools, u as utcDay } from './agent-deps.factory-pqv_qTmJ.cjs';
+import { b as AgentModuleOptions, c as AgentModuleAsyncOptions, A as AgentDepsFactory, d as AgentSkillsOptions } from './agent-deps.factory-DkWvoWbD.cjs';
+export { e as AGENT_TOOL_BRAND, f as AgentAttachmentsOptions, g as AgentDeps, h as AgentMemoryOptions, a as AgentSurface, F as FunctionalTool, L as LedgerQuotaProvider, Q as QuotaLimits, i as QuotaWindowLimits, j as delegateToolName, p as provideAgentTool, k as provideAgentTools, u as utcDay } from './agent-deps.factory-DkWvoWbD.cjs';
 import { AgentRunner, AgentStore, AttachmentStagingStore, ModelCatalog, QuotaProvider, Actor, QuotaReport, ModelCatalogView, AttachmentRef, PageContext, HumanReply, ThreadSummary, ThreadDetail, UpdateThreadInput, MessageFeedbackValue, MessageFeedback, StagedAttachment, AgentApprovalPort, ActorResolver, MessageAttachment, AgentAttachmentConfig, AgentClientConfig, ToolPresentation, AgentHistoryWindow, AgentIntake, SkillContext, ToolRegistry, AgentRegistry, PromptContributor, SkillsConfig, SkillCatalogEntry, ToolCatalogEntry, MemoryConfig, MemoryDigestEntry, SkillProvider, AgentRunInput, TokenStreamSink, SinkWriter } from '@dudousxd/nestjs-agent-core';
 export * from '@dudousxd/nestjs-agent-core';
 import { Request } from 'express';
@@ -82,7 +82,11 @@ declare class AgentService {
      * pinned and again at every turn that runs on it (availability can change in between).
      */
     private assertModelAllowed;
-    /** The model a turn runs on: the send's own, else the thread's pinned one, else none. */
+    /**
+     * The model a turn runs on: the send's own (that turn only — it is never stored on the thread),
+     * else the thread's pinned one, else none. An agent the catalog locks to one model runs on it
+     * whatever was sent or pinned, and a send naming another model is refused.
+     */
     private resolveModel;
     private threadModel;
     chat(params: ChatParams): Promise<{
@@ -134,13 +138,17 @@ declare class AgentService {
      * "the user picked exactly the defaults" persist as the same answers, and no client has to
      * re-send what it was shown.
      */
-    answer(actor: Actor, toolCallId: string, answers?: Record<string, string[]>): Promise<void>;
+    answer(actor: Actor, toolCallId: string, answers?: Record<string, string[]>, opts?: {
+        via?: string;
+    }): Promise<void>;
     /**
      * Decline to answer and let the agent proceed on its own assumptions. NOT the same as confirming
      * them: the run records this as a rejection, so a reader auditing what the agent was told can
      * tell a choice the user made from one they refused to make.
      */
-    skip(actor: Actor, toolCallId: string): Promise<void>;
+    skip(actor: Actor, toolCallId: string, opts?: {
+        via?: string;
+    }): Promise<void>;
     /**
      * The decision core behind approve/reject, WITHOUT an ownership check: resolves the run
      * currently awaiting `toolCallId` and signals it. `approve`/`reject` above call this after their

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { DynamicModule, Type, OnApplicationBootstrap, OnModuleInit } from '@nestjs/common';
-import { b as AgentModuleOptions, c as AgentModuleAsyncOptions, A as AgentDepsFactory, d as AgentSkillsOptions } from './agent-deps.factory-pqv_qTmJ.js';
-export { e as AGENT_TOOL_BRAND, f as AgentAttachmentsOptions, g as AgentDeps, h as AgentMemoryOptions, a as AgentSurface, F as FunctionalTool, L as LedgerQuotaProvider, Q as QuotaLimits, i as QuotaWindowLimits, j as delegateToolName, p as provideAgentTool, k as provideAgentTools, u as utcDay } from './agent-deps.factory-pqv_qTmJ.js';
+import { b as AgentModuleOptions, c as AgentModuleAsyncOptions, A as AgentDepsFactory, d as AgentSkillsOptions } from './agent-deps.factory-DkWvoWbD.js';
+export { e as AGENT_TOOL_BRAND, f as AgentAttachmentsOptions, g as AgentDeps, h as AgentMemoryOptions, a as AgentSurface, F as FunctionalTool, L as LedgerQuotaProvider, Q as QuotaLimits, i as QuotaWindowLimits, j as delegateToolName, p as provideAgentTool, k as provideAgentTools, u as utcDay } from './agent-deps.factory-DkWvoWbD.js';
 import { AgentRunner, AgentStore, AttachmentStagingStore, ModelCatalog, QuotaProvider, Actor, QuotaReport, ModelCatalogView, AttachmentRef, PageContext, HumanReply, ThreadSummary, ThreadDetail, UpdateThreadInput, MessageFeedbackValue, MessageFeedback, StagedAttachment, AgentApprovalPort, ActorResolver, MessageAttachment, AgentAttachmentConfig, AgentClientConfig, ToolPresentation, AgentHistoryWindow, AgentIntake, SkillContext, ToolRegistry, AgentRegistry, PromptContributor, SkillsConfig, SkillCatalogEntry, ToolCatalogEntry, MemoryConfig, MemoryDigestEntry, SkillProvider, AgentRunInput, TokenStreamSink, SinkWriter } from '@dudousxd/nestjs-agent-core';
 export * from '@dudousxd/nestjs-agent-core';
 import { Request } from 'express';
@@ -82,7 +82,11 @@ declare class AgentService {
      * pinned and again at every turn that runs on it (availability can change in between).
      */
     private assertModelAllowed;
-    /** The model a turn runs on: the send's own, else the thread's pinned one, else none. */
+    /**
+     * The model a turn runs on: the send's own (that turn only — it is never stored on the thread),
+     * else the thread's pinned one, else none. An agent the catalog locks to one model runs on it
+     * whatever was sent or pinned, and a send naming another model is refused.
+     */
     private resolveModel;
     private threadModel;
     chat(params: ChatParams): Promise<{
@@ -134,13 +138,17 @@ declare class AgentService {
      * "the user picked exactly the defaults" persist as the same answers, and no client has to
      * re-send what it was shown.
      */
-    answer(actor: Actor, toolCallId: string, answers?: Record<string, string[]>): Promise<void>;
+    answer(actor: Actor, toolCallId: string, answers?: Record<string, string[]>, opts?: {
+        via?: string;
+    }): Promise<void>;
     /**
      * Decline to answer and let the agent proceed on its own assumptions. NOT the same as confirming
      * them: the run records this as a rejection, so a reader auditing what the agent was told can
      * tell a choice the user made from one they refused to make.
      */
-    skip(actor: Actor, toolCallId: string): Promise<void>;
+    skip(actor: Actor, toolCallId: string, opts?: {
+        via?: string;
+    }): Promise<void>;
     /**
      * The decision core behind approve/reject, WITHOUT an ownership check: resolves the run
      * currently awaiting `toolCallId` and signals it. `approve`/`reject` above call this after their

package/dist/index.js

@@ -411,8 +411,22 @@ var AgentService = class {
     }
     return entry.id;
   }
-  /** The model a turn runs on: the send's own, else the thread's pinned one, else none. */
+  /**
+  * The model a turn runs on: the send's own (that turn only — it is never stored on the thread),
+  * else the thread's pinned one, else none. An agent the catalog locks to one model runs on it
+  * whatever was sent or pinned, and a send naming another model is refused.
+  */
   async resolveModel(actor, agent, requested, threadId) {
+    const locked = this.models !== void 0 ? (await this.models.list({
+      actor,
+      agent
+    })).locked : void 0;
+    if (locked !== void 0) {
+      if (requested !== void 0 && requested !== locked.model) {
+        throw new BadRequestException(`model "${requested}" cannot be selected: ${locked.reason ?? `this agent always uses "${locked.model}"`}`);
+      }
+      return locked.model;
+    }
     const model = requested ?? (threadId !== void 0 ? await this.threadModel(threadId) : null);
     if (model === null || model === void 0) {
       return void 0;
@@ -561,12 +575,15 @@ var AgentService = class {
   * "the user picked exactly the defaults" persist as the same answers, and no client has to
   * re-send what it was shown.
   */
-  async answer(actor, toolCallId2, answers2 = {}) {
+  async answer(actor, toolCallId2, answers2 = {}, opts = {}) {
     await this.assertOwnsToolCall(actor, toolCallId2);
     await this.assertAnswersFit(toolCallId2, answers2);
     const reply = {
       answers: answers2,
-      answeredByRef: actor.id
+      answeredByRef: actor.id,
+      ...opts.via !== void 0 ? {
+        answeredVia: opts.via
+      } : {}
     };
     return this.signalToolCall(toolCallId2, reply);
   }
@@ -575,12 +592,15 @@ var AgentService = class {
   * them: the run records this as a rejection, so a reader auditing what the agent was told can
   * tell a choice the user made from one they refused to make.
   */
-  async skip(actor, toolCallId2) {
+  async skip(actor, toolCallId2, opts = {}) {
     await this.assertOwnsToolCall(actor, toolCallId2);
     const reply = {
       answers: {},
       skipped: true,
-      answeredByRef: actor.id
+      answeredByRef: actor.id,
+      ...opts.via !== void 0 ? {
+        answeredVia: opts.via
+      } : {}
     };
     return this.signalToolCall(toolCallId2, reply);
   }
@@ -2442,7 +2462,9 @@ var ToolCallController = class {
   */
   async answer(req, body) {
     const actor = await this.actorResolver.resolve(req);
-    await this.agent.answer(actor, toolCallId(body.toolCallId), answers(body.answers));
+    await this.agent.answer(actor, toolCallId(body.toolCallId), answers(body.answers), {
+      via: via(body.via)
+    });
     return {
       ok: true
     };
@@ -2450,7 +2472,9 @@ var ToolCallController = class {
   /** Decline to answer and let the agent proceed on the answers it pre-picked. */
   async skip(req, body) {
     const actor = await this.actorResolver.resolve(req);
-    await this.agent.skip(actor, toolCallId(body.toolCallId));
+    await this.agent.skip(actor, toolCallId(body.toolCallId), {
+      via: via(body.via)
+    });
     return {
       ok: true
     };
@@ -3222,16 +3246,18 @@ var InProcessTokenStreamSink = class {
 };
 
 // src/ledger-quota-provider.ts
-import { exhaustedWindow, quotaPeriodRange } from "@dudousxd/nestjs-agent-core";
+import { exhaustedWindow, quotaPeriodRange, quotaWarning } from "@dudousxd/nestjs-agent-core";
 var LedgerQuotaProvider = class {
   static {
     __name(this, "LedgerQuotaProvider");
   }
   store;
   limits;
-  constructor(store, limits = {}) {
+  options;
+  constructor(store, limits = {}, options = {}) {
     this.store = store;
     this.limits = limits;
+    this.options = options;
   }
   async report(query) {
     const now = query.now ?? /* @__PURE__ */ new Date();
@@ -3245,10 +3271,14 @@ var LedgerQuotaProvider = class {
       windows.push(this.window("month", used.usedTokens, used.costUsd, range.resetsAt));
     }
     const blocked = exhaustedWindow(windows);
+    const warning = quotaWarning(windows);
     return {
       windows,
       ...blocked !== void 0 ? {
         blocked
+      } : {},
+      ...warning !== void 0 ? {
+        warning
       } : {}
     };
   }
@@ -3269,7 +3299,10 @@ var LedgerQuotaProvider = class {
       ...limits.usd !== void 0 ? {
         limitUsd: limits.usd
       } : {},
-      resetsAt
+      resetsAt,
+      ...this.options.warnAt !== void 0 && (limits.tokens !== void 0 || limits.usd !== void 0) ? {
+        warnAt: this.options.warnAt
+      } : {}
     };
   }
 };
@@ -3874,7 +3907,9 @@ function sharedProviders(durable) {
       // `quota` is either a provider of the host's own or ceilings for the built-in ledger one;
       // omitted, the ledger provider still reports usage, with no ceiling to block on.
       provide: AGENT_QUOTA_PROVIDER2,
-      useFactory: /* @__PURE__ */ __name((o, store) => isQuotaProvider(o.quota) ? o.quota : new LedgerQuotaProvider(store, o.quota?.limits), "useFactory"),
+      useFactory: /* @__PURE__ */ __name((o, store) => isQuotaProvider(o.quota) ? o.quota : new LedgerQuotaProvider(store, o.quota?.limits, o.quota?.warnAt !== void 0 ? {
+        warnAt: o.quota.warnAt
+      } : {}), "useFactory"),
       inject: [
         AGENT_OPTIONS6,
         AGENT_STORE4