@dudousxd/nestjs-agent 2.0.1 → 2.1.0

package/dist/{index-BBkyvNUi.d.cts → index-Ba_0o9Ze.d.ts}

@@ -2,7 +2,8 @@ import { A2uiStreamOptions, a2uiThreadReplay } from '@dudousxd/nestjs-agent-core
 import { AgentAttachmentConfig, AttachmentStagingStore, AgentStore, Actor, ListActionProposals, ActionProposalView, ActionProposalMutationView, TextActionProposalVocabulary, AgentRunner, ModelCatalog, QuotaProvider, ActionApprovalMode, MessageAttachment, QuotaReport, ModelCatalogView, AgentHostContext, AttachmentRef, PageContext, ChatQueueState, SubscribeOptions, HumanReply, ThreadSummary, ThreadDetail, UpdateThreadInput, MessageFeedbackValue, MessageFeedback, StagedAttachment, AiUsageInput, AiUsageOptions, AiUsageResult, ActorResolver } from '@dudousxd/nestjs-agent-core';
 import { Request, Response } from 'express';
 import { UiCapabilities } from '@dudousxd/nestjs-agent-core/genui';
-import { b as AgentModuleOptions, A as AgentDepsFactory, C as ChatQueueService, d as AgentProtocolAdapter } from './chat-queue.service-C49HIuEV.cjs';
+import { OnApplicationBootstrap } from '@nestjs/common';
+import { b as AgentModuleOptions, A as AgentDepsFactory, C as ChatQueueService, d as AgentProtocolAdapter } from './chat-queue.service-MYNBAY3P.js';
 
 /** Default per-file size cap (20 MiB). */
 declare const DEFAULT_MAX_ATTACHMENT_BYTES: number;
@@ -21,7 +22,8 @@ declare function attachmentLimits(options: Pick<AgentModuleOptions, 'attachments
 declare class ActionProposalService {
     private readonly store;
     private readonly options;
-    constructor(store: AgentStore, options: Pick<AgentModuleOptions, 'approvalPolicy' | 'actionProposalText'>);
+    private readonly contextAccessor?;
+    constructor(store: AgentStore, options: Pick<AgentModuleOptions, 'approvalPolicy' | 'actionProposalText' | 'tenancy'>, contextAccessor?: unknown | undefined);
     /** The words a text decision is made of, and what the agent answers — English unless configured. */
     private readonly vocabulary;
     private readonly replies;
@@ -188,7 +190,7 @@ interface ThreadModelReader {
     modelForThread(threadId: string): Promise<string | null>;
 }
 /** The orchestration facade the controllers call. */
-declare class AgentService {
+declare class AgentService implements OnApplicationBootstrap {
     private readonly runner;
     private readonly store;
     private readonly deps;
@@ -198,7 +200,28 @@ declare class AgentService {
     private readonly options?;
     private readonly queue?;
     private readonly proposals?;
-    constructor(runner: AgentRunner, store: AgentStore, deps: AgentDepsFactory, staging?: AttachmentStagingStore | undefined, models?: ModelCatalog | undefined, quotaProvider?: QuotaProvider | undefined, options?: Pick<AgentModuleOptions, "quota" | "actionApprovalMode" | "attachments"> | undefined, queue?: ChatQueueService | undefined, proposals?: ActionProposalService | undefined);
+    private readonly contextAccessor?;
+    constructor(runner: AgentRunner, store: AgentStore, deps: AgentDepsFactory, staging?: AttachmentStagingStore | undefined, models?: ModelCatalog | undefined, quotaProvider?: QuotaProvider | undefined, options?: Pick<AgentModuleOptions, "quota" | "actionApprovalMode" | "attachments" | "tenancy"> | undefined, queue?: ChatQueueService | undefined, proposals?: ActionProposalService | undefined, contextAccessor?: unknown | undefined);
+    /**
+     * With tenancy on, the store must be able to tell a thread's tenant: fail the boot with the fix
+     * rather than answer every thread read `404` at runtime. Tenancy enabled explicitly with no
+     * context accessor to read the tenant from fails the boot too.
+     */
+    onApplicationBootstrap(): void;
+    /**
+     * The matching rule for a decision that comes from outside the thread's own actor (the console's
+     * approvals inbox): with tenancy on, a tool call on a thread the request's context tenant may not
+     * see is not found. A no-op with tenancy off.
+     */
+    assertToolCallInRequestTenant(toolCallId: string): Promise<void>;
+    /** The agent's tenancy, read per call: the context's switch can be flipped at any time. */
+    private tenancy;
+    /**
+     * The matching rule for one thread, run or tool call: with tenancy on, a row of another tenant
+     * (or, for a request with a tenant, one with no tenant unless `nullRows: 'shared'`) is not found.
+     * The request's tenant is `actor.tenantRef` (the resolver's, else the context's), else none.
+     */
+    private assertTenantVisible;
     /**
      * Decide one independent proposal through the scoped proposal service — what the native
      * `action-proposals/:id/approve|reject` routes call — and the reply to show for it. `404` when
@@ -443,7 +466,12 @@ declare class AgentService {
     /** Everything {@link answer} checks before it signals, without signalling — see {@link checkDecision}. */
     checkAnswer(actor: Actor, toolCallId: string, answers: Record<string, string[]>): Promise<void>;
     cancel(actor: Actor, runId: string): Promise<void>;
-    listThreads(actorRef: string): Promise<ThreadSummary[]>;
+    /**
+     * The actor's threads. With tenancy on, only those the request's tenant may see: pass the
+     * {@link Actor} so a `tenantRef` its resolver set is the tenant; a bare `actorRef` uses the
+     * context's.
+     */
+    listThreads(actor: Actor | string): Promise<ThreadSummary[]>;
     getThread(actor: Actor, threadId: string): Promise<ThreadDetail | null>;
     deleteThread(actor: Actor, threadId: string): Promise<void>;
     /**

package/dist/{index-CRCbsO6E.d.ts → index-QYQiIXCI.d.cts}

@@ -2,7 +2,8 @@ import { A2uiStreamOptions, a2uiThreadReplay } from '@dudousxd/nestjs-agent-core
 import { AgentAttachmentConfig, AttachmentStagingStore, AgentStore, Actor, ListActionProposals, ActionProposalView, ActionProposalMutationView, TextActionProposalVocabulary, AgentRunner, ModelCatalog, QuotaProvider, ActionApprovalMode, MessageAttachment, QuotaReport, ModelCatalogView, AgentHostContext, AttachmentRef, PageContext, ChatQueueState, SubscribeOptions, HumanReply, ThreadSummary, ThreadDetail, UpdateThreadInput, MessageFeedbackValue, MessageFeedback, StagedAttachment, AiUsageInput, AiUsageOptions, AiUsageResult, ActorResolver } from '@dudousxd/nestjs-agent-core';
 import { Request, Response } from 'express';
 import { UiCapabilities } from '@dudousxd/nestjs-agent-core/genui';
-import { b as AgentModuleOptions, A as AgentDepsFactory, C as ChatQueueService, d as AgentProtocolAdapter } from './chat-queue.service-BjPCw4Pf.js';
+import { OnApplicationBootstrap } from '@nestjs/common';
+import { b as AgentModuleOptions, A as AgentDepsFactory, C as ChatQueueService, d as AgentProtocolAdapter } from './chat-queue.service-OY6mUgB9.cjs';
 
 /** Default per-file size cap (20 MiB). */
 declare const DEFAULT_MAX_ATTACHMENT_BYTES: number;
@@ -21,7 +22,8 @@ declare function attachmentLimits(options: Pick<AgentModuleOptions, 'attachments
 declare class ActionProposalService {
     private readonly store;
     private readonly options;
-    constructor(store: AgentStore, options: Pick<AgentModuleOptions, 'approvalPolicy' | 'actionProposalText'>);
+    private readonly contextAccessor?;
+    constructor(store: AgentStore, options: Pick<AgentModuleOptions, 'approvalPolicy' | 'actionProposalText' | 'tenancy'>, contextAccessor?: unknown | undefined);
     /** The words a text decision is made of, and what the agent answers — English unless configured. */
     private readonly vocabulary;
     private readonly replies;
@@ -188,7 +190,7 @@ interface ThreadModelReader {
     modelForThread(threadId: string): Promise<string | null>;
 }
 /** The orchestration facade the controllers call. */
-declare class AgentService {
+declare class AgentService implements OnApplicationBootstrap {
     private readonly runner;
     private readonly store;
     private readonly deps;
@@ -198,7 +200,28 @@ declare class AgentService {
     private readonly options?;
     private readonly queue?;
     private readonly proposals?;
-    constructor(runner: AgentRunner, store: AgentStore, deps: AgentDepsFactory, staging?: AttachmentStagingStore | undefined, models?: ModelCatalog | undefined, quotaProvider?: QuotaProvider | undefined, options?: Pick<AgentModuleOptions, "quota" | "actionApprovalMode" | "attachments"> | undefined, queue?: ChatQueueService | undefined, proposals?: ActionProposalService | undefined);
+    private readonly contextAccessor?;
+    constructor(runner: AgentRunner, store: AgentStore, deps: AgentDepsFactory, staging?: AttachmentStagingStore | undefined, models?: ModelCatalog | undefined, quotaProvider?: QuotaProvider | undefined, options?: Pick<AgentModuleOptions, "quota" | "actionApprovalMode" | "attachments" | "tenancy"> | undefined, queue?: ChatQueueService | undefined, proposals?: ActionProposalService | undefined, contextAccessor?: unknown | undefined);
+    /**
+     * With tenancy on, the store must be able to tell a thread's tenant: fail the boot with the fix
+     * rather than answer every thread read `404` at runtime. Tenancy enabled explicitly with no
+     * context accessor to read the tenant from fails the boot too.
+     */
+    onApplicationBootstrap(): void;
+    /**
+     * The matching rule for a decision that comes from outside the thread's own actor (the console's
+     * approvals inbox): with tenancy on, a tool call on a thread the request's context tenant may not
+     * see is not found. A no-op with tenancy off.
+     */
+    assertToolCallInRequestTenant(toolCallId: string): Promise<void>;
+    /** The agent's tenancy, read per call: the context's switch can be flipped at any time. */
+    private tenancy;
+    /**
+     * The matching rule for one thread, run or tool call: with tenancy on, a row of another tenant
+     * (or, for a request with a tenant, one with no tenant unless `nullRows: 'shared'`) is not found.
+     * The request's tenant is `actor.tenantRef` (the resolver's, else the context's), else none.
+     */
+    private assertTenantVisible;
     /**
      * Decide one independent proposal through the scoped proposal service — what the native
      * `action-proposals/:id/approve|reject` routes call — and the reply to show for it. `404` when
@@ -443,7 +466,12 @@ declare class AgentService {
     /** Everything {@link answer} checks before it signals, without signalling — see {@link checkDecision}. */
     checkAnswer(actor: Actor, toolCallId: string, answers: Record<string, string[]>): Promise<void>;
     cancel(actor: Actor, runId: string): Promise<void>;
-    listThreads(actorRef: string): Promise<ThreadSummary[]>;
+    /**
+     * The actor's threads. With tenancy on, only those the request's tenant may see: pass the
+     * {@link Actor} so a `tenantRef` its resolver set is the tenant; a bare `actorRef` uses the
+     * context's.
+     */
+    listThreads(actor: Actor | string): Promise<ThreadSummary[]>;
     getThread(actor: Actor, threadId: string): Promise<ThreadDetail | null>;
     deleteThread(actor: Actor, threadId: string): Promise<void>;
     /**