@dudousxd/nestjs-agent 1.18.0 → 1.19.0

package/dist/{chat-queue.service-5LIogd9K.d.cts → chat-queue.service-CKZkjlMK.d.cts}

@@ -1,4 +1,4 @@
-import { ModelProvider, AgentStore, ToolRegistry, RolesPolicy, ApprovalPolicy, QuotaStore, TokenStreamSink, PromptBuilder, PromptContributor, ToolTransientRetrySetting, Retriever, AgentPricingStore, HistoryPolicy, InputProcessor, OutputProcessor, AgentIntake, SkillsConfig, MemoryConfig, ToolSpec, ToolHandler, QuotaProvider, QuotaQuery, QuotaReport, ModelCatalog, ActorResolver, AgentHistoryWindow, SkillProvider, ScopeResolver, MemoryProvider, AgentRegistry, AttachmentStagingStore, ChatQueueStore, ChatQueueState, AgentRunner, AgentRunInput, AgentStreamEvent, QueuePauseReason, Actor } from '@dudousxd/nestjs-agent-core';
+import { ModelProvider, AgentStore, ToolRegistry, RolesPolicy, ApprovalPolicy, QuotaStore, TokenStreamSink, PromptBuilder, PromptContributor, ToolTransientRetrySetting, Retriever, AgentPricingStore, HistoryPolicy, InputProcessor, OutputProcessor, AgentIntake, SkillsConfig, MemoryConfig, ToolSpec, ToolHandler, QuotaProvider, QuotaQuery, QuotaReport, ModelCatalog, EmptyRoles, ActorResolver, AgentHistoryWindow, SkillProvider, ScopeResolver, MemoryProvider, AgentRegistry, AttachmentStagingStore, ChatQueueStore, ChatQueueState, AgentRunner, AgentRunInput, AgentStreamEvent, QueuePauseReason, Actor } from '@dudousxd/nestjs-agent-core';
 import { StandardSchemaV1 } from '@standard-schema/spec';
 import { Provider, FactoryProvider, Type, CanActivate, ModuleMetadata, InjectionToken, OptionalFactoryDependency } from '@nestjs/common';
 
@@ -292,6 +292,14 @@ interface AgentModuleOptions {
      * configured). `action` tools still park on approval regardless.
      */
     defaultRoles?: string[];
+    /**
+     * What an empty roles list means to the default `RolesPolicy`: `'allow'` (default) — no
+     * restriction, so a tool that names no roles reaches every resolved actor; `'deny'` — nobody, so a
+     * tool needs `roles` (or a non-empty `defaultRoles`) to be reachable. For an app where `[]` means
+     * "no one" — a `roles` computed from permissions that can come out empty. Binds
+     * `ClosedRolesPolicy`. Ignored when `rolesPolicy` is set.
+     */
+    emptyRoles?: EmptyRoles;
     /**
      * Resolves the acting actor for each request (the identity seam). Omit → the endpoints are public
      * and every browser is its own anonymous actor (`AnonymousActorResolver`: an `HttpOnly` cookie,

package/dist/{chat-queue.service-5LIogd9K.d.ts → chat-queue.service-CKZkjlMK.d.ts}

@@ -1,4 +1,4 @@
-import { ModelProvider, AgentStore, ToolRegistry, RolesPolicy, ApprovalPolicy, QuotaStore, TokenStreamSink, PromptBuilder, PromptContributor, ToolTransientRetrySetting, Retriever, AgentPricingStore, HistoryPolicy, InputProcessor, OutputProcessor, AgentIntake, SkillsConfig, MemoryConfig, ToolSpec, ToolHandler, QuotaProvider, QuotaQuery, QuotaReport, ModelCatalog, ActorResolver, AgentHistoryWindow, SkillProvider, ScopeResolver, MemoryProvider, AgentRegistry, AttachmentStagingStore, ChatQueueStore, ChatQueueState, AgentRunner, AgentRunInput, AgentStreamEvent, QueuePauseReason, Actor } from '@dudousxd/nestjs-agent-core';
+import { ModelProvider, AgentStore, ToolRegistry, RolesPolicy, ApprovalPolicy, QuotaStore, TokenStreamSink, PromptBuilder, PromptContributor, ToolTransientRetrySetting, Retriever, AgentPricingStore, HistoryPolicy, InputProcessor, OutputProcessor, AgentIntake, SkillsConfig, MemoryConfig, ToolSpec, ToolHandler, QuotaProvider, QuotaQuery, QuotaReport, ModelCatalog, EmptyRoles, ActorResolver, AgentHistoryWindow, SkillProvider, ScopeResolver, MemoryProvider, AgentRegistry, AttachmentStagingStore, ChatQueueStore, ChatQueueState, AgentRunner, AgentRunInput, AgentStreamEvent, QueuePauseReason, Actor } from '@dudousxd/nestjs-agent-core';
 import { StandardSchemaV1 } from '@standard-schema/spec';
 import { Provider, FactoryProvider, Type, CanActivate, ModuleMetadata, InjectionToken, OptionalFactoryDependency } from '@nestjs/common';
 
@@ -292,6 +292,14 @@ interface AgentModuleOptions {
      * configured). `action` tools still park on approval regardless.
      */
     defaultRoles?: string[];
+    /**
+     * What an empty roles list means to the default `RolesPolicy`: `'allow'` (default) — no
+     * restriction, so a tool that names no roles reaches every resolved actor; `'deny'` — nobody, so a
+     * tool needs `roles` (or a non-empty `defaultRoles`) to be reachable. For an app where `[]` means
+     * "no one" — a `roles` computed from permissions that can come out empty. Binds
+     * `ClosedRolesPolicy`. Ignored when `rolesPolicy` is set.
+     */
+    emptyRoles?: EmptyRoles;
     /**
      * Resolves the acting actor for each request (the identity seam). Omit → the endpoints are public
      * and every browser is its own anonymous actor (`AnonymousActorResolver`: an `HttpOnly` cookie,

package/dist/durable/index.cjs

@@ -5770,7 +5770,7 @@ function sharedProviders(durable) {
     },
     {
       provide: import_nestjs_agent_core31.AGENT_ROLES_POLICY,
-      useFactory: /* @__PURE__ */ __name((options) => options.rolesPolicy ?? new import_nestjs_agent_core31.DefaultRolesPolicy(options.defaultRoles), "useFactory"),
+      useFactory: /* @__PURE__ */ __name((options) => options.rolesPolicy ?? (options.emptyRoles === "deny" ? new import_nestjs_agent_core31.ClosedRolesPolicy(options.defaultRoles) : new import_nestjs_agent_core31.DefaultRolesPolicy(options.defaultRoles)), "useFactory"),
       inject: [
         import_nestjs_agent_core31.AGENT_OPTIONS
       ]