@dudousxd/nestjs-agent 1.3.0 → 1.4.0

package/dist/index.d.cts

@@ -204,6 +204,15 @@ declare class AgentService {
      * adapter can resolve+signal a decision WITHOUT this check — it is authorized upstream instead.
      */
     private assertOwnsToolCall;
+    /**
+     * Check a reply against the questions it answers before it is signalled: every submitted value a
+     * question's own rules accept (a typed input's type, bounds and pattern; a pick from the offered
+     * options), and every `required` question answered — by the reply, or by the defaults an omitted
+     * question falls back to. A reply the loop would have to drop parts of is refused here instead, so
+     * the person who typed it hears why. Needs the store to hand back the call's recorded questions;
+     * without that seam the loop's own filtering is the only check.
+     */
+    private assertAnswersFit;
     /**
      * Authorization seam for approve/reject. The call's recorded approver decides who may settle it:
      * the requester (the default, and every call recorded before approvers existed) is the thread's

package/dist/index.d.ts

@@ -204,6 +204,15 @@ declare class AgentService {
      * adapter can resolve+signal a decision WITHOUT this check — it is authorized upstream instead.
      */
     private assertOwnsToolCall;
+    /**
+     * Check a reply against the questions it answers before it is signalled: every submitted value a
+     * question's own rules accept (a typed input's type, bounds and pattern; a pick from the offered
+     * options), and every `required` question answered — by the reply, or by the defaults an omitted
+     * question falls back to. A reply the loop would have to drop parts of is refused here instead, so
+     * the person who typed it hears why. Needs the store to hand back the call's recorded questions;
+     * without that seam the loop's own filtering is the only check.
+     */
+    private assertAnswersFit;
     /**
      * Authorization seam for approve/reject. The call's recorded approver decides who may settle it:
      * the requester (the default, and every call recorded before approvers existed) is the thread's

package/dist/index.js

@@ -272,7 +272,7 @@ AgentDepsFactory2 = _ts_decorate([
 ], AgentDepsFactory2);
 
 // src/agent.service.ts
-import { AGENT_ATTACHMENT_STAGING, AGENT_DEPS_FACTORY, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE2, AGENT_RUNNER, AGENT_STORE as AGENT_STORE2, REQUESTER_APPROVER, mayDecideApproval } from "@dudousxd/nestjs-agent-core";
+import { AGENT_ATTACHMENT_STAGING, AGENT_DEPS_FACTORY, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE2, AGENT_RUNNER, AGENT_STORE as AGENT_STORE2, REQUESTER_APPROVER, mayDecideApproval, readElicitationQuestions, validateElicitationAnswer } from "@dudousxd/nestjs-agent-core";
 import { BadRequestException, ForbiddenException, GoneException, Inject as Inject2, Injectable as Injectable2, NotFoundException, NotImplementedException, Optional as Optional2 } from "@nestjs/common";
 
 // src/agent-deps.ts
@@ -466,6 +466,7 @@ var AgentService = class {
   */
   async answer(actor, toolCallId2, answers2 = {}) {
     await this.assertOwnsToolCall(actor, toolCallId2);
+    await this.assertAnswersFit(toolCallId2, answers2);
     const reply = {
       answers: answers2,
       answeredByRef: actor.id
@@ -734,6 +735,27 @@ var AgentService = class {
     }
   }
   /**
+  * Check a reply against the questions it answers before it is signalled: every submitted value a
+  * question's own rules accept (a typed input's type, bounds and pattern; a pick from the offered
+  * options), and every `required` question answered — by the reply, or by the defaults an omitted
+  * question falls back to. A reply the loop would have to drop parts of is refused here instead, so
+  * the person who typed it hears why. Needs the store to hand back the call's recorded questions;
+  * without that seam the loop's own filtering is the only check.
+  */
+  async assertAnswersFit(toolCallId2, answers2) {
+    if (this.store.toolCallInput === void 0) {
+      return;
+    }
+    const questions = readElicitationQuestions(await this.store.toolCallInput(toolCallId2));
+    for (const question of questions) {
+      const submitted = Object.hasOwn(answers2, question.id) ? answers2[question.id] : void 0;
+      const problem = validateElicitationAnswer(question, submitted ?? question.defaults ?? []);
+      if (problem !== null) {
+        throw new BadRequestException(`answers["${question.id}"] ${problem}`);
+      }
+    }
+  }
+  /**
   * Authorization seam for approve/reject. The call's recorded approver decides who may settle it:
   * the requester (the default, and every call recorded before approvers existed) is the thread's
   * own actor — the ownership check this always was; any other approver goes through the policy's