@dudousxd/nestjs-agent 1.33.0 → 1.35.0

package/dist/durable/index.d.cts

@@ -1,7 +1,7 @@
 import { AgentStore, AgentRunInput, AgentLoopResult, LlmStepEnvelope, BufferedModelTurnResult, ToolStepEnvelope, AgentRunner, TokenStreamSink, AgentRunStartOptions, HumanReply } from '@dudousxd/nestjs-agent-core';
 import { WorkflowService } from '@dudousxd/nestjs-durable';
 import { RunGateway, WorkflowCtx } from '@dudousxd/nestjs-durable-core';
-import { A as AgentDepsFactory, C as ChatQueueService, a as AgentSurface, b as AgentModuleOptions } from '../chat-queue.service-QIuTS-5c.cjs';
+import { A as AgentDepsFactory, C as ChatQueueService, a as AgentSurface, b as AgentModuleOptions } from '../chat-queue.service-CF2fcJDx.cjs';
 import { DynamicModule } from '@nestjs/common';
 import '@dudousxd/nestjs-agent-core/genui';
 import '@standard-schema/spec';

package/dist/durable/index.d.ts

@@ -1,7 +1,7 @@
 import { AgentStore, AgentRunInput, AgentLoopResult, LlmStepEnvelope, BufferedModelTurnResult, ToolStepEnvelope, AgentRunner, TokenStreamSink, AgentRunStartOptions, HumanReply } from '@dudousxd/nestjs-agent-core';
 import { WorkflowService } from '@dudousxd/nestjs-durable';
 import { RunGateway, WorkflowCtx } from '@dudousxd/nestjs-durable-core';
-import { A as AgentDepsFactory, C as ChatQueueService, a as AgentSurface, b as AgentModuleOptions } from '../chat-queue.service-wNWaoUN8.js';
+import { A as AgentDepsFactory, C as ChatQueueService, a as AgentSurface, b as AgentModuleOptions } from '../chat-queue.service-CzXsKVb1.js';
 import { DynamicModule } from '@nestjs/common';
 import '@dudousxd/nestjs-agent-core/genui';
 import '@standard-schema/spec';

package/dist/durable/index.js

@@ -102,7 +102,7 @@ var AGENT_CHAT_QUEUE = /* @__PURE__ */ Symbol.for("@dudousxd/nestjs-agent:chat-q
 // src/durable/agent-run.steps.ts
 import { createNegotiatedUiCollector } from "@dudousxd/nestjs-agent-core";
 import { prepareActionProposal, resolveActionProposalApproval } from "@dudousxd/nestjs-agent-core";
-import { AGENT_DEPS_FACTORY, createFrameBuffer, createNoopEmitUi, encodeStreamEvent, intersectAllowLists, invokeWithTransientRetry, isControlFlowSignal, isReplayIntegrityError, observeTurnFrames, previewToolInputs, publishAgentToolRetry, registryInputPreviews, stampToolKinds, toolCallContext, traceLlmTurn, traceToolExecution, withAskTool, withChannelDelivery, withMemoryTool, withSkillTool, withToolTimeout, withTurnFrames, wrapToolPreflightDenied, wrapToolStepOutput } from "@dudousxd/nestjs-agent-core";
+import { AGENT_DEPS_FACTORY, announcedToolCalls, createFrameBuffer, createNoopEmitUi, encodeStreamEvent, intersectAllowLists, invokeWithTransientRetry, isControlFlowSignal, isReplayIntegrityError, observeTurnFrames, previewToolInputs, publishAgentToolRetry, registryInputPreviews, stampToolKinds, toolCallContext, traceLlmTurn, traceToolExecution, withAskTool, withChannelDelivery, withMemoryTool, withSkillTool, withToolTimeout, withTurnFrames, wrapToolPreflightDenied, wrapToolStepOutput } from "@dudousxd/nestjs-agent-core";
 import { turnChannel } from "@dudousxd/nestjs-agent-core/genui";
 import { Step } from "@dudousxd/nestjs-durable";
 import { Inject, Injectable } from "@nestjs/common";
@@ -188,9 +188,9 @@ var AgentRunSteps = class {
           ),
           ask: deps.ask
         }),
-        enabled: deps.skills !== void 0
+        enabled: deps.skills !== void 0 && input.builtins?.skills !== false
       }),
-      enabled: deps.memory?.provider.write !== void 0
+      enabled: deps.memory?.provider.write !== void 0 && input.builtins?.memory !== false
     });
     const buffer = input.bufferOutput === true ? createFrameBuffer() : void 0;
     let writer;
@@ -200,7 +200,8 @@ var AgentRunSteps = class {
       const opened = await deps.sink.open(input.sinkRunId);
       writer = input.childSink ? childSinkWriter(opened) : opened;
     }
-    const previews = previewToolInputs(writer, registryInputPreviews(deps.registry, tools, {
+    const announced = announcedToolCalls(writer);
+    const previews = previewToolInputs(announced.writer, registryInputPreviews(deps.registry, tools, {
       actor: input.actor,
       ...input.threadId !== void 0 ? {
         threadId: input.threadId
@@ -224,6 +225,7 @@ var AgentRunSteps = class {
       } : {}
     })), frames.summary());
     const stamped = stampToolKinds(turn, deps);
+    await announced.announceRest(stamped.toolCalls, tools);
     const allowedTools = intersectAllowLists(deps.toolAllowList, input.personaAllowedTools);
     for (const call of stamped.toolCalls) {
       if (call.kind !== "action") continue;
@@ -1259,7 +1261,7 @@ AgentDurableModule = _ts_decorate4([
 ], AgentDurableModule);
 
 // src/agent.module.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER14, AGENT_APPROVAL_PORT, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY9, AGENT_DURABLE_RUNNER as AGENT_DURABLE_RUNNER2, AGENT_MEMORY as AGENT_MEMORY3, AGENT_MODEL as AGENT_MODEL3, AGENT_MODEL_CATALOG as AGENT_MODEL_CATALOG3, AGENT_OPTIONS as AGENT_OPTIONS10, AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS3, AGENT_QUOTA_PROVIDER as AGENT_QUOTA_PROVIDER3, AGENT_REGISTRY as AGENT_REGISTRY6, AGENT_ROLES_POLICY as AGENT_ROLES_POLICY2, AGENT_RUNNER as AGENT_RUNNER2, AGENT_SINK as AGENT_SINK4, AGENT_SKILLS as AGENT_SKILLS3, AGENT_SKILL_SOURCES as AGENT_SKILL_SOURCES2, AGENT_STORE as AGENT_STORE9, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY3, AgentRegistry as AgentRegistry6, ClosedRolesPolicy, DefaultRolesPolicy, InMemoryAgentStore, ToolRegistry as ToolRegistry3 } from "@dudousxd/nestjs-agent-core";
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER14, AGENT_APPROVAL_PORT, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY9, AGENT_DURABLE_RUNNER as AGENT_DURABLE_RUNNER2, AGENT_MEMORY as AGENT_MEMORY3, AGENT_MODEL as AGENT_MODEL3, AGENT_MODEL_CATALOG as AGENT_MODEL_CATALOG3, AGENT_OPTIONS as AGENT_OPTIONS10, AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS3, AGENT_QUOTA_PROVIDER as AGENT_QUOTA_PROVIDER3, AGENT_REGISTRY as AGENT_REGISTRY6, AGENT_ROLES_POLICY as AGENT_ROLES_POLICY2, AGENT_RUNNER as AGENT_RUNNER2, AGENT_SINK as AGENT_SINK4, AGENT_SKILLS as AGENT_SKILLS3, AGENT_SKILL_SOURCES as AGENT_SKILL_SOURCES2, AGENT_STORE as AGENT_STORE9, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY3, AgentRegistry as AgentRegistry6, ClosedRolesPolicy, DefaultRolesPolicy, InMemoryAgentStore, ToolRegistry as ToolRegistry3, personalAgentGate, personalAgentScopes } from "@dudousxd/nestjs-agent-core";
 import { Global as Global2, Logger as Logger10, Module as Module3 } from "@nestjs/common";
 import { DiscoveryModule, ModulesContainer, RouterModule } from "@nestjs/core";
 
@@ -6027,9 +6029,19 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
         this.logger.warn(`Agent "${meta.name}" hands off to ${target.name}, which is not an @Agent \u2014 skipped.`);
         continue;
       }
-      edges.push(detached ? {
+      const roles = typeof entry === "function" ? void 0 : entry.roles;
+      const ability = typeof entry === "function" ? void 0 : entry.ability;
+      edges.push(detached || roles !== void 0 || ability !== void 0 ? {
         agent: targetMeta.name,
-        detached: true
+        ...detached ? {
+          detached: true
+        } : {},
+        ...roles !== void 0 ? {
+          roles
+        } : {},
+        ...ability !== void 0 ? {
+          ability
+        } : {}
       } : targetMeta.name);
     }
     return edges;
@@ -6221,7 +6233,7 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
     let delegates = 0;
     for (const definition of this.agents.list()) {
       for (const edge of definition.delegatesTo ?? []) {
-        const { agent: target, detached } = normalizeDelegation2(edge);
+        const { agent: target, detached, roles, ability } = normalizeDelegation2(edge);
         const targetDefinition = this.agents.get(target);
         if (targetDefinition === void 0) {
           throw new Error(`Agent "${definition.name}" hands off to "${target}", which is not a registered @Agent. Declare it as an @Agent provider or fix the reference.`);
@@ -6243,6 +6255,12 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
             ...detached ? {
               detached: true
             } : {},
+            ...roles !== void 0 ? {
+              roles
+            } : {},
+            ...ability !== void 0 ? {
+              ability
+            } : {},
             description,
             inputSchema: z.object({
               task: z.string()
@@ -6581,6 +6599,35 @@ var ActionProposalWorkerService = class _ActionProposalWorkerService {
   worker;
   logger = new Logger8(_ActionProposalWorkerService.name);
   settledListeners = /* @__PURE__ */ new Set();
+  admittedListeners = /* @__PURE__ */ new Set();
+  /**
+  * Run `listener` once a settled proposal's outcome is written to its thread by this process's
+  * worker (the thread was free) — what a module uses to CONTINUE a conversation once an action it
+  * proposed ran (a Poppy connect: the next turn goes on with what was asked). Next to
+  * `actionProposalWorker.onAdmitted`; a listener that throws is logged and does not stop the
+  * others. Returns the unsubscribe.
+  */
+  onAdmitted(listener) {
+    this.admittedListeners.add(listener);
+    return () => {
+      this.admittedListeners.delete(listener);
+    };
+  }
+  async admitted(outcome) {
+    const configured = this.options.actionProposalWorker?.onAdmitted;
+    for (const listener of [
+      ...configured ? [
+        configured
+      ] : [],
+      ...this.admittedListeners
+    ]) {
+      try {
+        await listener(outcome);
+      } catch (error) {
+        this.logger.error(error);
+      }
+    }
+  }
   /**
   * Run `listener` after every proposal this process's worker settles — how a module relays an
   * outcome somewhere the turn's stream no longer reaches (a text channel's conversation). Next to
@@ -6624,6 +6671,7 @@ var ActionProposalWorkerService = class _ActionProposalWorkerService {
       workerId: randomUUID2(),
       ...this.options.actionProposalWorker,
       onSettled: /* @__PURE__ */ __name((proposal) => this.settled(proposal), "onSettled"),
+      onAdmitted: /* @__PURE__ */ __name((outcome) => this.admitted(outcome), "onAdmitted"),
       executor: new ActionProposalExecutor({
         resolver,
         resolveExecution: /* @__PURE__ */ __name(async (proposal, actor) => {
@@ -7439,6 +7487,13 @@ function forwardingPolicy(wrapper) {
         throw new Error("AgentModule: the AGENT_ROLES_POLICY bound by another module is not ready yet");
       }
       return policy.can(actor, tool);
+    },
+    canOffer(actor, tool) {
+      const policy = wrapper.instance;
+      if (policy === void 0 || policy === null) {
+        throw new Error("AgentModule: the AGENT_ROLES_POLICY bound by another module is not ready yet");
+      }
+      return policy.canOffer ? policy.canOffer(actor, tool) : policy.can(actor, tool);
     }
   };
 }
@@ -7480,7 +7535,14 @@ function sharedProviders(durable, engine) {
       // drift, and a user would be offered a skill the agent cannot reach. `undefined` when the
       // host configured none — which is what keeps the turn's checkpoint sequence unchanged.
       provide: AGENT_SKILLS3,
-      useFactory: /* @__PURE__ */ __name((options, declared) => resolveSkillsConfig(options.skills, declared), "useFactory"),
+      // Personal agents resolve no skill scope (`personalAgentScopes`): nothing of the app's to load.
+      useFactory: /* @__PURE__ */ __name((options, declared) => {
+        const skills = resolveSkillsConfig(options.skills, declared);
+        return skills === void 0 ? void 0 : {
+          ...skills,
+          scopes: personalAgentScopes(skills.scopes)
+        };
+      }, "useFactory"),
       inject: [
         AGENT_OPTIONS10,
         AGENT_SKILL_SOURCES2
@@ -7490,7 +7552,12 @@ function sharedProviders(durable, engine) {
       // One resolution, shared by the loop's deps and the read-back endpoint: a person has to be
       // shown what the model was shown, and two resolutions would eventually disagree about that.
       provide: AGENT_MEMORY3,
-      useFactory: /* @__PURE__ */ __name((options) => options.memory, "useFactory"),
+      // Personal agents resolve no memory scope (`personalAgentScopes`): under a signed-in Poppy
+      // conversation the actor is the account, and it must neither read nor write its memories.
+      useFactory: /* @__PURE__ */ __name((options) => options.memory === void 0 ? void 0 : {
+        ...options.memory,
+        scopes: personalAgentScopes(options.memory.scopes)
+      }, "useFactory"),
       inject: [
         AGENT_OPTIONS10
       ]
@@ -7504,7 +7571,10 @@ function sharedProviders(durable, engine) {
     },
     {
       provide: AGENT_ROLES_POLICY2,
-      useFactory: /* @__PURE__ */ __name((options, modules) => resolveRolesPolicy(options, modules), "useFactory"),
+      // Personal agents (a Poppy conversation, a Poppy session's MCP token) reach only the tools
+      // written for them, and run only those of the scopes their user granted. A no-op for every
+      // other actor.
+      useFactory: /* @__PURE__ */ __name((options, modules) => personalAgentGate(resolveRolesPolicy(options, modules)), "useFactory"),
       inject: [
         AGENT_OPTIONS10,
         ModulesContainer