@dudousxd/nestjs-agent 2.0.1 → 2.1.0

package/dist/index.d.cts

@@ -1,6 +1,6 @@
 import { DynamicModule, OnModuleInit, Type, OnApplicationBootstrap, ConflictException, OnModuleDestroy } from '@nestjs/common';
-import { b as AgentModuleOptions, c as AgentModuleAsyncOptions, d as AgentProtocolAdapter, A as AgentDepsFactory, e as AgentSkillsOptions, C as ChatQueueService } from './chat-queue.service-C49HIuEV.cjs';
-export { f as AGENT_TOOL_BRAND, g as AgentAttachmentsOptions, h as AgentDeps, i as AgentDurableOptions, j as AgentEngine, k as AgentFunctionCaller, l as AgentMemoryOptions, a as AgentSurface, F as FunctionalTool, L as LedgerQuotaProvider, Q as QueuePlan, m as QueueSettleOutcome, n as QueuedTurn, o as QueuedTurnStarter, p as QuotaLimits, q as QuotaWindowLimits, r as defaultAgentFunctionCaller, s as defineTool, t as delegateToolName, u as durableEngineOf, v as provideAgentTool, w as provideAgentTools, x as utcDay } from './chat-queue.service-C49HIuEV.cjs';
+import { b as AgentModuleOptions, c as AgentModuleAsyncOptions, d as AgentProtocolAdapter, A as AgentDepsFactory, e as AgentSkillsOptions, C as ChatQueueService } from './chat-queue.service-OY6mUgB9.cjs';
+export { f as AGENT_TOOL_BRAND, g as AgentAttachmentsOptions, h as AgentDeps, i as AgentDurableOptions, j as AgentEngine, k as AgentFunctionCaller, l as AgentMemoryOptions, a as AgentSurface, F as FunctionalTool, L as LedgerQuotaProvider, Q as QueuePlan, m as QueueSettleOutcome, n as QueuedTurn, o as QueuedTurnStarter, p as QuotaLimits, q as QuotaWindowLimits, r as defaultAgentFunctionCaller, s as defineTool, t as delegateToolName, u as durableEngineOf, v as provideAgentTool, w as provideAgentTools, x as utcDay } from './chat-queue.service-OY6mUgB9.cjs';
 import * as _dudousxd_nestjs_agent_core from '@dudousxd/nestjs-agent-core';
 import { ModelProvider, ModelCatalog, ModelTurnArgs, ModelTurnResult, DescribedModel, PriceCatalogEntry, ToolPresentation, ToolSpec, RolesPolicy, Actor, ActorResolver, AttachmentStagingStore, AgentApprovalPort, AgentStore, StagedAttachment, MessageAttachment, AgentClientConfig, ToolCanRequirement, AgentHistoryWindow, AgentIntake, Persona, SkillContext, ToolRegistry, AgentRegistry, PromptContributor, SkillsConfig, SkillCatalogEntry, MessageFeedbackValue, MessageFeedback, ModelCatalogView, ToolCatalogEntry, MemoryConfig, MemoryDigestEntry, SkillProvider, AgentRunner, AgentRunInput, AgentRunStartOptions, HumanReply, ChatQueueState, TokenStreamSink, SinkWriter, SubscribeOptions, ActionProposalOutcome, ActionProposal, PageContext, AgentCatalogEntry } from '@dudousxd/nestjs-agent-core';
 export * from '@dudousxd/nestjs-agent-core';
@@ -11,8 +11,8 @@ import { ResilienceService } from '@nestjs/resilience';
 import { AuthorizationService } from '@nestjs/authorization';
 import { A2uiOptions } from '@dudousxd/nestjs-agent-core/a2ui';
 import { Request, Response } from 'express';
-import { A as AgentService, a as ActionProposalService } from './index-BBkyvNUi.cjs';
-export { b as A2uiAdapterOptions, c as A2uiRunHandler, d as AttachmentLimits, C as ChatParams, e as ChatSendMode, f as ChatSendResult, D as DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES, g as DEFAULT_MAX_ATTACHMENT_BYTES, F as ForkThreadParams, M as MAX_ATTACHMENTS_PER_MESSAGE, N as NO_USER_MESSAGE_CODE, Q as QueuedSend, T as ThreadDefaultAgentReader, h as ThreadModelReader, i as a2uiAdapter, j as attachmentLimits } from './index-BBkyvNUi.cjs';
+import { A as AgentService, a as ActionProposalService } from './index-QYQiIXCI.cjs';
+export { b as A2uiAdapterOptions, c as A2uiRunHandler, d as AttachmentLimits, C as ChatParams, e as ChatSendMode, f as ChatSendResult, D as DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES, g as DEFAULT_MAX_ATTACHMENT_BYTES, F as ForkThreadParams, M as MAX_ATTACHMENTS_PER_MESSAGE, N as NO_USER_MESSAGE_CODE, Q as QueuedSend, T as ThreadDefaultAgentReader, h as ThreadModelReader, i as a2uiAdapter, j as attachmentLimits } from './index-QYQiIXCI.cjs';
 import { AgentGenui } from './genui/index.cjs';
 import { StandardSchemaV1 } from '@standard-schema/spec';
 import '@dudousxd/nestjs-agent-core/genui';
@@ -228,7 +228,8 @@ declare function agUiAdapter(options?: AgUiAdapterOptions): AgentProtocolAdapter
  * Deliberately WITHOUT `AgentService.approve`/`reject`'s ownership check: a console caller reaches
  * this port only through the dashboard's own guards (already authorized), not as the thread's own
  * actor — re-deriving "does this actor own the thread" here would reject a legitimate operator
- * decision. `opts.executedByRef` is an OPAQUE decider ref, not re-authorized against anything: it
+ * decision. With the agent's tenancy on, a tool call outside the request's context tenant is not
+ * found (`404`). `opts.executedByRef` is an OPAQUE decider ref, not re-authorized against anything: it
  * rides the `Decision` and the loop records it as the tool call's decider
  * (`decision.executedByRef ?? input.actor.id`, on both the executed and rejected paths).
  */

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { DynamicModule, OnModuleInit, Type, OnApplicationBootstrap, ConflictException, OnModuleDestroy } from '@nestjs/common';
-import { b as AgentModuleOptions, c as AgentModuleAsyncOptions, d as AgentProtocolAdapter, A as AgentDepsFactory, e as AgentSkillsOptions, C as ChatQueueService } from './chat-queue.service-BjPCw4Pf.js';
-export { f as AGENT_TOOL_BRAND, g as AgentAttachmentsOptions, h as AgentDeps, i as AgentDurableOptions, j as AgentEngine, k as AgentFunctionCaller, l as AgentMemoryOptions, a as AgentSurface, F as FunctionalTool, L as LedgerQuotaProvider, Q as QueuePlan, m as QueueSettleOutcome, n as QueuedTurn, o as QueuedTurnStarter, p as QuotaLimits, q as QuotaWindowLimits, r as defaultAgentFunctionCaller, s as defineTool, t as delegateToolName, u as durableEngineOf, v as provideAgentTool, w as provideAgentTools, x as utcDay } from './chat-queue.service-BjPCw4Pf.js';
+import { b as AgentModuleOptions, c as AgentModuleAsyncOptions, d as AgentProtocolAdapter, A as AgentDepsFactory, e as AgentSkillsOptions, C as ChatQueueService } from './chat-queue.service-MYNBAY3P.js';
+export { f as AGENT_TOOL_BRAND, g as AgentAttachmentsOptions, h as AgentDeps, i as AgentDurableOptions, j as AgentEngine, k as AgentFunctionCaller, l as AgentMemoryOptions, a as AgentSurface, F as FunctionalTool, L as LedgerQuotaProvider, Q as QueuePlan, m as QueueSettleOutcome, n as QueuedTurn, o as QueuedTurnStarter, p as QuotaLimits, q as QuotaWindowLimits, r as defaultAgentFunctionCaller, s as defineTool, t as delegateToolName, u as durableEngineOf, v as provideAgentTool, w as provideAgentTools, x as utcDay } from './chat-queue.service-MYNBAY3P.js';
 import * as _dudousxd_nestjs_agent_core from '@dudousxd/nestjs-agent-core';
 import { ModelProvider, ModelCatalog, ModelTurnArgs, ModelTurnResult, DescribedModel, PriceCatalogEntry, ToolPresentation, ToolSpec, RolesPolicy, Actor, ActorResolver, AttachmentStagingStore, AgentApprovalPort, AgentStore, StagedAttachment, MessageAttachment, AgentClientConfig, ToolCanRequirement, AgentHistoryWindow, AgentIntake, Persona, SkillContext, ToolRegistry, AgentRegistry, PromptContributor, SkillsConfig, SkillCatalogEntry, MessageFeedbackValue, MessageFeedback, ModelCatalogView, ToolCatalogEntry, MemoryConfig, MemoryDigestEntry, SkillProvider, AgentRunner, AgentRunInput, AgentRunStartOptions, HumanReply, ChatQueueState, TokenStreamSink, SinkWriter, SubscribeOptions, ActionProposalOutcome, ActionProposal, PageContext, AgentCatalogEntry } from '@dudousxd/nestjs-agent-core';
 export * from '@dudousxd/nestjs-agent-core';
@@ -11,8 +11,8 @@ import { ResilienceService } from '@nestjs/resilience';
 import { AuthorizationService } from '@nestjs/authorization';
 import { A2uiOptions } from '@dudousxd/nestjs-agent-core/a2ui';
 import { Request, Response } from 'express';
-import { A as AgentService, a as ActionProposalService } from './index-CRCbsO6E.js';
-export { b as A2uiAdapterOptions, c as A2uiRunHandler, d as AttachmentLimits, C as ChatParams, e as ChatSendMode, f as ChatSendResult, D as DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES, g as DEFAULT_MAX_ATTACHMENT_BYTES, F as ForkThreadParams, M as MAX_ATTACHMENTS_PER_MESSAGE, N as NO_USER_MESSAGE_CODE, Q as QueuedSend, T as ThreadDefaultAgentReader, h as ThreadModelReader, i as a2uiAdapter, j as attachmentLimits } from './index-CRCbsO6E.js';
+import { A as AgentService, a as ActionProposalService } from './index-Ba_0o9Ze.js';
+export { b as A2uiAdapterOptions, c as A2uiRunHandler, d as AttachmentLimits, C as ChatParams, e as ChatSendMode, f as ChatSendResult, D as DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES, g as DEFAULT_MAX_ATTACHMENT_BYTES, F as ForkThreadParams, M as MAX_ATTACHMENTS_PER_MESSAGE, N as NO_USER_MESSAGE_CODE, Q as QueuedSend, T as ThreadDefaultAgentReader, h as ThreadModelReader, i as a2uiAdapter, j as attachmentLimits } from './index-Ba_0o9Ze.js';
 import { AgentGenui } from './genui/index.js';
 import { StandardSchemaV1 } from '@standard-schema/spec';
 import '@dudousxd/nestjs-agent-core/genui';
@@ -228,7 +228,8 @@ declare function agUiAdapter(options?: AgUiAdapterOptions): AgentProtocolAdapter
  * Deliberately WITHOUT `AgentService.approve`/`reject`'s ownership check: a console caller reaches
  * this port only through the dashboard's own guards (already authorized), not as the thread's own
  * actor — re-deriving "does this actor own the thread" here would reject a legitimate operator
- * decision. `opts.executedByRef` is an OPAQUE decider ref, not re-authorized against anything: it
+ * decision. With the agent's tenancy on, a tool call outside the request's context tenant is not
+ * found (`404`). `opts.executedByRef` is an OPAQUE decider ref, not re-authorized against anything: it
  * rides the `Decision` and the loop records it as the tool call's decider
  * (`decision.executedByRef ?? input.actor.id`, on both the executed and rejected paths).
  */

package/dist/index.js

@@ -11079,7 +11079,7 @@ var require_cjs = __commonJS({
 });
 
 // src/agent.module.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER14, AGENT_APPROVAL_PORT, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY7, AGENT_DURABLE_RUNNER, AGENT_MEMORY as AGENT_MEMORY3, AGENT_MODEL as AGENT_MODEL3, AGENT_MODEL_CATALOG as AGENT_MODEL_CATALOG3, AGENT_OPTIONS as AGENT_OPTIONS11, AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS3, AGENT_QUOTA_PROVIDER as AGENT_QUOTA_PROVIDER3, AGENT_REGISTRY as AGENT_REGISTRY6, AGENT_ROLES_POLICY as AGENT_ROLES_POLICY2, AGENT_RUNNER as AGENT_RUNNER2, AGENT_SINK as AGENT_SINK3, AGENT_SKILLS as AGENT_SKILLS3, AGENT_SKILL_SOURCES as AGENT_SKILL_SOURCES2, AGENT_STORE as AGENT_STORE7, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY3, AGENT_WORKFLOWS_RUNNER, AgentRegistry as AgentRegistry6, ClosedRolesPolicy, DefaultRolesPolicy, InMemoryAgentStore, ToolRegistry as ToolRegistry3, personalAgentGate, personalAgentScopes, withControllerDecorators } from "@dudousxd/nestjs-agent-core";
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER14, AGENT_APPROVAL_PORT, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY7, AGENT_DURABLE_RUNNER, AGENT_MEMORY as AGENT_MEMORY3, AGENT_MODEL as AGENT_MODEL3, AGENT_MODEL_CATALOG as AGENT_MODEL_CATALOG3, AGENT_OPTIONS as AGENT_OPTIONS11, AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS3, AGENT_QUOTA_PROVIDER as AGENT_QUOTA_PROVIDER3, AGENT_REGISTRY as AGENT_REGISTRY6, AGENT_ROLES_POLICY as AGENT_ROLES_POLICY2, AGENT_RUNNER as AGENT_RUNNER2, AGENT_SINK as AGENT_SINK3, AGENT_SKILLS as AGENT_SKILLS3, AGENT_SKILL_SOURCES as AGENT_SKILL_SOURCES2, AGENT_STORE as AGENT_STORE7, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY3, AGENT_WORKFLOWS_RUNNER, AgentRegistry as AgentRegistry6, CONTEXT_ACCESSOR as CONTEXT_ACCESSOR3, ClosedRolesPolicy, DefaultRolesPolicy, InMemoryAgentStore, ToolRegistry as ToolRegistry3, personalAgentGate, personalAgentScopes, withControllerDecorators } from "@dudousxd/nestjs-agent-core";
 import { Global, Logger as Logger11, Module as Module2 } from "@nestjs/common";
 import { DiscoveryModule, ModulesContainer, RouterModule } from "@nestjs/core";
 
@@ -11825,8 +11825,8 @@ function durableEngineOf(durable) {
 __name(durableEngineOf, "durableEngineOf");
 
 // src/agent.service.ts
-import { AGENT_ATTACHMENT_STAGING as AGENT_ATTACHMENT_STAGING2, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY2, AGENT_MODEL_CATALOG, AGENT_OPTIONS as AGENT_OPTIONS4, AGENT_QUOTA_PROVIDER as AGENT_QUOTA_PROVIDER2, AGENT_RUNNER, AGENT_STORE as AGENT_STORE4, DEFAULT_TEXT_ACTION_PROPOSAL_VOCABULARY as DEFAULT_TEXT_ACTION_PROPOSAL_VOCABULARY2, REQUESTER_APPROVER, findCatalogModel, mayDecideApproval as mayDecideApproval2, readElicitationQuestions, recordAiUsage, settleDeadRun, textActionProposalReply as textActionProposalReply2, validateElicitationAnswer } from "@dudousxd/nestjs-agent-core";
-import { BadRequestException as BadRequestException2, ConflictException as ConflictException2, ForbiddenException as ForbiddenException2, GoneException, HttpException, HttpStatus, Inject as Inject5, Injectable as Injectable4, Logger as Logger2, NotFoundException as NotFoundException2, NotImplementedException as NotImplementedException3, Optional as Optional3, PayloadTooLargeException, UnsupportedMediaTypeException } from "@nestjs/common";
+import { AGENT_ATTACHMENT_STAGING as AGENT_ATTACHMENT_STAGING2, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY2, AGENT_MODEL_CATALOG, AGENT_OPTIONS as AGENT_OPTIONS4, AGENT_QUOTA_PROVIDER as AGENT_QUOTA_PROVIDER2, AGENT_RUNNER, AGENT_STORE as AGENT_STORE4, CONTEXT_ACCESSOR as CONTEXT_ACCESSOR2, DEFAULT_TEXT_ACTION_PROPOSAL_VOCABULARY as DEFAULT_TEXT_ACTION_PROPOSAL_VOCABULARY2, REQUESTER_APPROVER, contextTenantRef, findCatalogModel, mayDecideApproval as mayDecideApproval2, readElicitationQuestions, readTenancy as readTenancy2, recordAiUsage, settleDeadRun, tenantRowFilter as tenantRowFilter2, tenantRowVisible as tenantRowVisible2, textActionProposalReply as textActionProposalReply2, validateElicitationAnswer } from "@dudousxd/nestjs-agent-core";
+import { BadRequestException as BadRequestException2, ConflictException as ConflictException2, ForbiddenException as ForbiddenException2, GoneException, HttpException, HttpStatus, Inject as Inject5, Injectable as Injectable4, Logger as Logger2, NotFoundException as NotFoundException2, NotImplementedException as NotImplementedException3, Optional as Optional4, PayloadTooLargeException, UnsupportedMediaTypeException } from "@nestjs/common";
 
 // src/agent-deps.ts
 function utcDay(date = /* @__PURE__ */ new Date()) {
@@ -11876,8 +11876,8 @@ function attachmentLimits(options, staging) {
 __name(attachmentLimits, "attachmentLimits");
 
 // src/proposals/action-proposal.service.ts
-import { AGENT_OPTIONS as AGENT_OPTIONS2, AGENT_STORE as AGENT_STORE2, DEFAULT_TEXT_ACTION_PROPOSAL_REPLIES, DEFAULT_TEXT_ACTION_PROPOSAL_VOCABULARY, mayDecideApproval, parseTextActionProposalCommand, resolveTextActionProposalDecision, textActionProposalReply, toActionProposalMutationView, toActionProposalView } from "@dudousxd/nestjs-agent-core";
-import { ForbiddenException, Inject as Inject3, Injectable as Injectable2, NotFoundException, NotImplementedException } from "@nestjs/common";
+import { AGENT_OPTIONS as AGENT_OPTIONS2, AGENT_STORE as AGENT_STORE2, CONTEXT_ACCESSOR, DEFAULT_TEXT_ACTION_PROPOSAL_REPLIES, DEFAULT_TEXT_ACTION_PROPOSAL_VOCABULARY, mayDecideApproval, parseTextActionProposalCommand, readTenancy, resolveTextActionProposalDecision, tenantRowFilter, tenantRowVisible, textActionProposalReply, toActionProposalMutationView, toActionProposalView } from "@dudousxd/nestjs-agent-core";
+import { ForbiddenException, Inject as Inject3, Injectable as Injectable2, NotFoundException, NotImplementedException, Optional as Optional2 } from "@nestjs/common";
 function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -11910,9 +11910,11 @@ var ActionProposalService = class {
   }
   store;
   options;
-  constructor(store, options) {
+  contextAccessor;
+  constructor(store, options, contextAccessor) {
     this.store = store;
     this.options = options;
+    this.contextAccessor = contextAccessor;
     const text = options.actionProposalText;
     this.vocabulary = {
       ...DEFAULT_TEXT_ACTION_PROPOSAL_VOCABULARY,
@@ -11938,6 +11940,8 @@ var ActionProposalService = class {
   async scope(threadId, actor) {
     const scope = await this.capability().getThreadActionProposalScope(threadId);
     if (!scope) throw new NotFoundException("Thread not found");
+    const filter = tenantRowFilter(readTenancy(this.options.tenancy ?? "inherit", this.contextAccessor), actor.tenantRef);
+    if (filter !== void 0 && !tenantRowVisible(filter, scope.tenantRef)) throw new NotFoundException("Thread not found");
     if (scope.tenantRef !== (actor.tenantRef ?? null)) throw new ForbiddenException("Wrong proposal tenant");
     return scope;
   }
@@ -12057,16 +12061,19 @@ ActionProposalService = _ts_decorate3([
   Injectable2(),
   _ts_param2(0, Inject3(AGENT_STORE2)),
   _ts_param2(1, Inject3(AGENT_OPTIONS2)),
+  _ts_param2(2, Optional2()),
+  _ts_param2(2, Inject3(CONTEXT_ACCESSOR)),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     typeof AgentStore === "undefined" ? Object : AgentStore,
-    typeof Pick === "undefined" ? Object : Pick
+    typeof Pick === "undefined" ? Object : Pick,
+    Object
   ])
 ], ActionProposalService);
 
 // src/queue/chat-queue.service.ts
 import { AGENT_ATTACHMENT_STAGING, AGENT_DEPS_FACTORY, AGENT_OPTIONS as AGENT_OPTIONS3, AGENT_QUOTA_PROVIDER, AGENT_SINK as AGENT_SINK2, AGENT_STORE as AGENT_STORE3, encodeStreamEvent, isChatQueueStore, queuedMessageView } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject4, Injectable as Injectable3, Logger, NotImplementedException as NotImplementedException2, Optional as Optional2 } from "@nestjs/common";
+import { Inject as Inject4, Injectable as Injectable3, Logger, NotImplementedException as NotImplementedException2, Optional as Optional3 } from "@nestjs/common";
 
 // src/quota-exceeded.ts
 import { publishAgentQuotaExceeded } from "@dudousxd/nestjs-agent-core";
@@ -12542,13 +12549,13 @@ ChatQueueService = _ts_decorate4([
   Injectable3(),
   _ts_param3(0, Inject4(AGENT_STORE3)),
   _ts_param3(1, Inject4(AGENT_SINK2)),
-  _ts_param3(2, Optional2()),
+  _ts_param3(2, Optional3()),
   _ts_param3(2, Inject4(AGENT_QUOTA_PROVIDER)),
-  _ts_param3(3, Optional2()),
+  _ts_param3(3, Optional3()),
   _ts_param3(3, Inject4(AGENT_OPTIONS3)),
-  _ts_param3(4, Optional2()),
+  _ts_param3(4, Optional3()),
   _ts_param3(4, Inject4(AGENT_ATTACHMENT_STAGING)),
-  _ts_param3(5, Optional2()),
+  _ts_param3(5, Optional3()),
   _ts_param3(5, Inject4(AGENT_DEPS_FACTORY)),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
@@ -12695,7 +12702,8 @@ var AgentService2 = class {
   options;
   queue;
   proposals;
-  constructor(runner, store, deps, staging, models, quotaProvider, options, queue, proposals) {
+  contextAccessor;
+  constructor(runner, store, deps, staging, models, quotaProvider, options, queue, proposals, contextAccessor) {
     this.runner = runner;
     this.store = store;
     this.deps = deps;
@@ -12705,6 +12713,58 @@ var AgentService2 = class {
     this.options = options;
     this.queue = queue;
     this.proposals = proposals;
+    this.contextAccessor = contextAccessor;
+  }
+  /**
+  * With tenancy on, the store must be able to tell a thread's tenant: fail the boot with the fix
+  * rather than answer every thread read `404` at runtime. Tenancy enabled explicitly with no
+  * context accessor to read the tenant from fails the boot too.
+  */
+  onApplicationBootstrap() {
+    if (!this.tenancy().enabled) {
+      const option = this.options?.tenancy;
+      if (typeof option === "object" && option.enabled === true) {
+        throw new Error("AgentModule tenancy is enabled explicitly, but no `@dudousxd/nestjs-context` accessor (1.2.0 or later) is available to read the tenant from, so every read would be unscoped. Import `ContextModule`, or remove `tenancy.enabled: true`.");
+      }
+      return;
+    }
+    const missing = [
+      "tenantOf",
+      "listThreadsForTenant"
+    ].filter((method) => typeof this.store[method] !== "function");
+    if (missing.length > 0) {
+      throw new Error(`AgentModule tenancy is on, and ${this.store.constructor.name} does not implement ${missing.join(" / ")}, so thread reads cannot be scoped by tenant. Use a store that does (in-memory, Drizzle, MikroORM), implement them, or set AgentModule's \`tenancy: false\`.`);
+    }
+  }
+  /**
+  * The matching rule for a decision that comes from outside the thread's own actor (the console's
+  * approvals inbox): with tenancy on, a tool call on a thread the request's context tenant may not
+  * see is not found. A no-op with tenancy off.
+  */
+  async assertToolCallInRequestTenant(toolCallId2) {
+    const filter = tenantRowFilter2(this.tenancy());
+    if (filter === void 0) return;
+    const row = typeof this.store.tenantOf === "function" ? await this.store.tenantOf({
+      toolCallId: toolCallId2
+    }) : null;
+    if (row === null || !tenantRowVisible2(filter, row.tenantRef)) {
+      throw new NotFoundException2(`tool call ${toolCallId2} not found`);
+    }
+  }
+  /** The agent's tenancy, read per call: the context's switch can be flipped at any time. */
+  tenancy() {
+    return readTenancy2(this.options?.tenancy ?? "inherit", this.contextAccessor);
+  }
+  /**
+  * The matching rule for one thread, run or tool call: with tenancy on, a row of another tenant
+  * (or, for a request with a tenant, one with no tenant unless `nullRows: 'shared'`) is not found.
+  * The request's tenant is `actor.tenantRef` (the resolver's, else the context's), else none.
+  */
+  async assertTenantVisible(actor, target, notFound) {
+    const filter = tenantRowFilter2(this.tenancy(), actor.tenantRef);
+    if (filter === void 0) return;
+    const row = typeof this.store.tenantOf === "function" ? await this.store.tenantOf(target) : null;
+    if (row === null || !tenantRowVisible2(filter, row.tenantRef)) throw notFound();
   }
   /**
   * Decide one independent proposal through the scoped proposal service — what the native
@@ -13442,6 +13502,9 @@ var AgentService2 = class {
     if (owner === null) {
       throw new RunNotActiveException(runId);
     }
+    await this.assertTenantVisible(actor, {
+      runId
+    }, () => new RunNotActiveException(runId));
     if (owner !== actor.id) {
       throw new ForbiddenException2("run belongs to another actor");
     }
@@ -13464,8 +13527,15 @@ var AgentService2 = class {
     await this.assertOwnsActiveStream(actor, runId);
     return this.runner.cancel(runId);
   }
-  async listThreads(actorRef) {
-    const threads = await this.store.listThreads(actorRef);
+  /**
+  * The actor's threads. With tenancy on, only those the request's tenant may see: pass the
+  * {@link Actor} so a `tenantRef` its resolver set is the tenant; a bare `actorRef` uses the
+  * context's.
+  */
+  async listThreads(actor) {
+    const actorRef = typeof actor === "string" ? actor : actor.id;
+    const filter = tenantRowFilter2(this.tenancy(), typeof actor === "string" ? void 0 : actor.tenantRef);
+    const threads = filter === void 0 ? await this.store.listThreads(actorRef) : typeof this.store.listThreadsForTenant === "function" ? await this.store.listThreadsForTenant(actorRef, filter) : [];
     return Promise.all(threads.map((thread) => this.toSummaryView(thread)));
   }
   async getThread(actor, threadId) {
@@ -13487,6 +13557,9 @@ var AgentService2 = class {
       if (await this.store.ownerOfThread(threadId) === null) {
         throw new NotFoundException2(`thread ${threadId} not found`);
       }
+      await this.assertTenantVisible(actor, {
+        threadId
+      }, () => new NotFoundException2(`thread ${threadId} not found`));
     } else {
       await this.assertOwnsThread(actor, threadId);
     }
@@ -13789,6 +13862,9 @@ var AgentService2 = class {
     if (owner === null) {
       throw new NotFoundException2(`thread ${threadId} not found`);
     }
+    await this.assertTenantVisible(actor, {
+      threadId
+    }, () => new NotFoundException2(`thread ${threadId} not found`));
     if (owner !== actor.id) {
       throw new ForbiddenException2("thread belongs to another actor");
     }
@@ -13803,6 +13879,9 @@ var AgentService2 = class {
     if (owner === null) {
       throw new NotFoundException2(`tool call ${toolCallId2} not found`);
     }
+    await this.assertTenantVisible(actor, {
+      toolCallId: toolCallId2
+    }, () => new NotFoundException2(`tool call ${toolCallId2} not found`));
     if (owner !== actor.id) {
       throw new ForbiddenException2("tool call belongs to another actor");
     }
@@ -13844,6 +13923,9 @@ var AgentService2 = class {
     if (requesterRef === null) {
       throw new NotFoundException2(`tool call ${toolCallId2} not found`);
     }
+    await this.assertTenantVisible(actor, {
+      toolCallId: toolCallId2
+    }, () => new NotFoundException2(`tool call ${toolCallId2} not found`));
     const allowed = await mayDecideApproval2(this.deps.forAgent().approvalPolicy, actor, {
       toolCallId: toolCallId2,
       approver,
@@ -13889,6 +13971,9 @@ var AgentService2 = class {
     if (owner === null) {
       throw new NotFoundException2(`no active run ${runId}`);
     }
+    await this.assertTenantVisible(actor, {
+      runId
+    }, () => new NotFoundException2(`no active run ${runId}`));
     if (owner !== actor.id) {
       throw new ForbiddenException2("run belongs to another actor");
     }
@@ -13909,11 +13994,15 @@ var AgentService2 = class {
   * against nobody.
   */
   recordUsage(input, options = {}) {
+    const tenantRef = input.tenantRef ?? contextTenantRef(this.tenancy());
     return recordAiUsage({
       store: this.store,
       quota: this.deps.forAgent().quota,
       day: utcDay(),
-      input,
+      input: tenantRef !== void 0 && input.tenantRef === void 0 ? {
+        ...input,
+        tenantRef
+      } : input,
       options,
       warn: /* @__PURE__ */ __name((message) => usageLogger.warn(message), "warn")
     });
@@ -13924,16 +14013,18 @@ AgentService2 = _ts_decorate5([
   _ts_param4(0, Inject5(AGENT_RUNNER)),
   _ts_param4(1, Inject5(AGENT_STORE4)),
   _ts_param4(2, Inject5(AGENT_DEPS_FACTORY2)),
-  _ts_param4(3, Optional3()),
+  _ts_param4(3, Optional4()),
   _ts_param4(3, Inject5(AGENT_ATTACHMENT_STAGING2)),
-  _ts_param4(4, Optional3()),
+  _ts_param4(4, Optional4()),
   _ts_param4(4, Inject5(AGENT_MODEL_CATALOG)),
-  _ts_param4(5, Optional3()),
+  _ts_param4(5, Optional4()),
   _ts_param4(5, Inject5(AGENT_QUOTA_PROVIDER2)),
-  _ts_param4(6, Optional3()),
+  _ts_param4(6, Optional4()),
   _ts_param4(6, Inject5(AGENT_OPTIONS4)),
-  _ts_param4(7, Optional3()),
-  _ts_param4(8, Optional3()),
+  _ts_param4(7, Optional4()),
+  _ts_param4(8, Optional4()),
+  _ts_param4(9, Optional4()),
+  _ts_param4(9, Inject5(CONTEXT_ACCESSOR2)),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     typeof AgentRunner === "undefined" ? Object : AgentRunner,
@@ -13944,12 +14035,13 @@ AgentService2 = _ts_decorate5([
     typeof QuotaProvider === "undefined" ? Object : QuotaProvider,
     typeof Pick === "undefined" ? Object : Pick,
     typeof ChatQueueService === "undefined" ? Object : ChatQueueService,
-    typeof ActionProposalService === "undefined" ? Object : ActionProposalService
+    typeof ActionProposalService === "undefined" ? Object : ActionProposalService,
+    Object
   ])
 ], AgentService2);
 
 // src/approval-port.adapter.ts
-import { Injectable as Injectable5, NotImplementedException as NotImplementedException4, Optional as Optional4 } from "@nestjs/common";
+import { Injectable as Injectable5, NotImplementedException as NotImplementedException4, Optional as Optional5 } from "@nestjs/common";
 function _ts_decorate6(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -14007,6 +14099,7 @@ var AgentApprovalPortAdapter = class {
     });
   }
   async approve(toolCallId2, opts) {
+    await this.agent.assertToolCallInRequestTenant(toolCallId2);
     await this.agent.signalToolCall(toolCallId2, {
       approved: true,
       ...opts?.executedByRef !== void 0 ? {
@@ -14021,6 +14114,7 @@ var AgentApprovalPortAdapter = class {
     });
   }
   async reject(toolCallId2, opts) {
+    await this.agent.assertToolCallInRequestTenant(toolCallId2);
     await this.agent.signalToolCall(toolCallId2, {
       approved: false,
       ...opts?.executedByRef !== void 0 ? {
@@ -14037,7 +14131,7 @@ var AgentApprovalPortAdapter = class {
 };
 AgentApprovalPortAdapter = _ts_decorate6([
   Injectable5(),
-  _ts_param5(1, Optional4()),
+  _ts_param5(1, Optional5()),
   _ts_metadata5("design:type", Function),
   _ts_metadata5("design:paramtypes", [
     typeof AgentService2 === "undefined" ? Object : AgentService2,
@@ -14124,7 +14218,7 @@ AgentsController = _ts_decorate7([
 
 // src/controller/attachments.controller.ts
 import { AGENT_ACTOR_RESOLVER, AGENT_ATTACHMENT_STAGING as AGENT_ATTACHMENT_STAGING3, AGENT_OPTIONS as AGENT_OPTIONS5, CanAnyone as CanAnyone2 } from "@dudousxd/nestjs-agent-core";
-import { BadRequestException as BadRequestException3, Controller as Controller2, Get as Get2, Inject as Inject7, NotImplementedException as NotImplementedException5, Optional as Optional5, PayloadTooLargeException as PayloadTooLargeException2, Post, Req, UnsupportedMediaTypeException as UnsupportedMediaTypeException2, UploadedFile, UseInterceptors } from "@nestjs/common";
+import { BadRequestException as BadRequestException3, Controller as Controller2, Get as Get2, Inject as Inject7, NotImplementedException as NotImplementedException5, Optional as Optional6, PayloadTooLargeException as PayloadTooLargeException2, Post, Req, UnsupportedMediaTypeException as UnsupportedMediaTypeException2, UploadedFile, UseInterceptors } from "@nestjs/common";
 import { FileInterceptor } from "@nestjs/platform-express";
 function _ts_decorate8(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -14237,7 +14331,7 @@ AttachmentsController = _ts_decorate8([
   Controller2("attachments"),
   _ts_param7(0, Inject7(AGENT_OPTIONS5)),
   _ts_param7(1, Inject7(AGENT_ACTOR_RESOLVER)),
-  _ts_param7(3, Optional5()),
+  _ts_param7(3, Optional6()),
   _ts_param7(3, Inject7(AGENT_ATTACHMENT_STAGING3)),
   _ts_metadata7("design:type", Function),
   _ts_metadata7("design:paramtypes", [
@@ -14558,7 +14652,7 @@ __name(parseCursor, "parseCursor");
 
 // src/controller/config.controller.ts
 import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER3, AGENT_ATTACHMENT_STAGING as AGENT_ATTACHMENT_STAGING4, AGENT_MODEL_CATALOG as AGENT_MODEL_CATALOG2, AGENT_OPTIONS as AGENT_OPTIONS6, CanAnyone as CanAnyone4 } from "@dudousxd/nestjs-agent-core";
-import { Controller as Controller4, Get as Get4, Inject as Inject9, Optional as Optional6, Req as Req3 } from "@nestjs/common";
+import { Controller as Controller4, Get as Get4, Inject as Inject9, Optional as Optional7, Req as Req3 } from "@nestjs/common";
 
 // src/resolver/anonymous-actor-resolver.ts
 import { createHash, randomBytes } from "crypto";
@@ -14725,11 +14819,11 @@ ConfigController = _ts_decorate10([
   Controller4("config"),
   _ts_param9(0, Inject9(AGENT_OPTIONS6)),
   _ts_param9(1, Inject9(AGENT_ACTOR_RESOLVER3)),
-  _ts_param9(2, Optional6()),
+  _ts_param9(2, Optional7()),
   _ts_param9(2, Inject9(AGENT_ATTACHMENT_STAGING4)),
-  _ts_param9(3, Optional6()),
+  _ts_param9(3, Optional7()),
   _ts_param9(3, Inject9(AGENT_MODEL_CATALOG2)),
-  _ts_param9(4, Optional6()),
+  _ts_param9(4, Optional7()),
   _ts_param9(4, Inject9(AGENT_GENUI)),
   _ts_metadata9("design:type", Function),
   _ts_metadata9("design:paramtypes", [
@@ -14743,7 +14837,7 @@ ConfigController = _ts_decorate10([
 
 // src/controller/memories.controller.ts
 import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER4, AGENT_MEMORY as AGENT_MEMORY2, CanAnyone as CanAnyone5, memoryForgetVerdict, offerMemories } from "@dudousxd/nestjs-agent-core";
-import { Controller as Controller5, Delete, ForbiddenException as ForbiddenException3, Get as Get5, Inject as Inject10, NotFoundException as NotFoundException3, Optional as Optional7, Param as Param2, Query as Query2, Req as Req4 } from "@nestjs/common";
+import { Controller as Controller5, Delete, ForbiddenException as ForbiddenException3, Get as Get5, Inject as Inject10, NotFoundException as NotFoundException3, Optional as Optional8, Param as Param2, Query as Query2, Req as Req4 } from "@nestjs/common";
 function _ts_decorate11(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -14868,7 +14962,7 @@ MemoriesController = _ts_decorate11([
   CanAnyone5(),
   Controller5("memories"),
   _ts_param10(0, Inject10(AGENT_ACTOR_RESOLVER4)),
-  _ts_param10(1, Optional7()),
+  _ts_param10(1, Optional8()),
   _ts_param10(1, Inject10(AGENT_MEMORY2)),
   _ts_metadata10("design:type", Function),
   _ts_metadata10("design:paramtypes", [
@@ -15259,7 +15353,7 @@ QuotaController = _ts_decorate15([
 
 // src/controller/skills.controller.ts
 import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER9, AGENT_SKILLS as AGENT_SKILLS2, CanAnyone as CanAnyone10, offerSkills } from "@dudousxd/nestjs-agent-core";
-import { Controller as Controller10, Get as Get9, Inject as Inject15, Optional as Optional8, Query as Query4, Req as Req9 } from "@nestjs/common";
+import { Controller as Controller10, Get as Get9, Inject as Inject15, Optional as Optional9, Query as Query4, Req as Req9 } from "@nestjs/common";
 function _ts_decorate16(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -15323,7 +15417,7 @@ SkillsController = _ts_decorate16([
   CanAnyone10(),
   Controller10("skills"),
   _ts_param15(0, Inject15(AGENT_ACTOR_RESOLVER9)),
-  _ts_param15(1, Optional8()),
+  _ts_param15(1, Optional9()),
   _ts_param15(1, Inject15(AGENT_SKILLS2)),
   _ts_metadata15("design:type", Function),
   _ts_metadata15("design:paramtypes", [
@@ -15373,7 +15467,7 @@ var ThreadsController = class {
   }
   async list(req) {
     const actor = await this.actorResolver.resolve(req);
-    return this.agent.listThreads(actor.id);
+    return this.agent.listThreads(actor);
   }
   async detail(req, id) {
     const actor = await this.actorResolver.resolve(req);
@@ -16940,6 +17034,10 @@ var LedgerQuotaProvider = class {
     this.store = store;
     this.limits = limits;
     this.options = options;
+    const per = options.per ?? "actor";
+    if (per !== "actor" && typeof store.usageWindowsForTenant !== "function") {
+      throw new Error(`quota.per: '${per}' sums the usage ledger by tenant, and ${store.constructor.name} does not implement usageWindowsForTenant. Use a store that does (in-memory, Drizzle, MikroORM) or a QuotaProvider of your own.`);
+    }
   }
   async report(query) {
     const now = query.now ?? /* @__PURE__ */ new Date();
@@ -16947,7 +17045,16 @@ var LedgerQuotaProvider = class {
     const day = quotaPeriodRange("day", now);
     const month = quotaPeriodRange("month", now);
     const windows = [];
-    if (this.store.usageWindows !== void 0) {
+    const per = this.options.per ?? "actor";
+    const tenantRef = query.actor.tenantRef;
+    if (per !== "actor" && typeof tenantRef === "string" && tenantRef !== "" && this.store.usageWindowsForTenant !== void 0) {
+      const [dayUsed, monthUsed] = await this.store.usageWindowsForTenant(tenantRef, [
+        day,
+        month
+      ], per === "actor-in-tenant" ? actorRef : void 0);
+      windows.push(this.usedWindow("day", dayUsed, day.resetsAt));
+      windows.push(this.usedWindow("month", monthUsed, month.resetsAt));
+    } else if (this.store.usageWindows !== void 0) {
       const [dayUsed, monthUsed] = await this.store.usageWindows(actorRef, [
         day,
         month
@@ -17592,7 +17699,7 @@ NestAiModelsBinding = _ts_decorate24([
 
 // src/pricing-boot.service.ts
 import { AGENT_MODEL as AGENT_MODEL2, AGENT_OPTIONS as AGENT_OPTIONS9, AGENT_PRICING_STORE as AGENT_PRICING_STORE2, ensureModelPricing } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject23, Injectable as Injectable11, Logger as Logger8, Optional as Optional9 } from "@nestjs/common";
+import { Inject as Inject23, Injectable as Injectable11, Logger as Logger8, Optional as Optional10 } from "@nestjs/common";
 function _ts_decorate25(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -17677,9 +17784,9 @@ var PricingBootService = class {
 PricingBootService = _ts_decorate25([
   Injectable11(),
   _ts_param23(0, Inject23(AGENT_OPTIONS9)),
-  _ts_param23(1, Optional9()),
+  _ts_param23(1, Optional10()),
   _ts_param23(1, Inject23(AGENT_MODEL2)),
-  _ts_param23(2, Optional9()),
+  _ts_param23(2, Optional10()),
   _ts_param23(2, Inject23(AGENT_PRICING_STORE2)),
   _ts_metadata24("design:type", Function),
   _ts_metadata24("design:paramtypes", [
@@ -17987,9 +18094,22 @@ ActionProposalController = _ts_decorate27([
 // src/queue/chat-queue.token.ts
 var AGENT_CHAT_QUEUE = /* @__PURE__ */ Symbol.for("@dudousxd/nestjs-agent:chat-queue");
 
+// src/resolver/tenant-filling-resolver.ts
+import { readTenancy as readTenancy3, withContextTenant } from "@dudousxd/nestjs-agent-core";
+function tenantFillingResolver(resolver, tenancy, contextAccessor) {
+  if (tenancy === false) return resolver;
+  const wrapper = Object.create(resolver);
+  Object.defineProperty(wrapper, "resolve", {
+    value: /* @__PURE__ */ __name(async (req) => withContextTenant(await resolver.resolve(req), readTenancy3(tenancy ?? "inherit", contextAccessor ?? void 0)), "value"),
+    enumerable: false
+  });
+  return wrapper;
+}
+__name(tenantFillingResolver, "tenantFillingResolver");
+
 // src/runner/inline-agent-runner.ts
 import { AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY6, AGENT_STORE as AGENT_STORE6, RUN_ENDED_BEFORE_TOOL_CALL, RunCancelledError, agentFailureCode, agentRunContext, encodeStreamEvent as encodeStreamEvent2, publishAgentRunCancelled, publishAgentRunFailed, releaseThreadRun, runAgentLoop, runDurationMs, runEndTimings, settleAll, settleUnsettledDelegation, streamFailure as streamFailure2 } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject26, Injectable as Injectable13, Logger as Logger10, Optional as Optional10 } from "@nestjs/common";
+import { Inject as Inject26, Injectable as Injectable13, Logger as Logger10, Optional as Optional11 } from "@nestjs/common";
 function _ts_decorate28(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -18536,7 +18656,7 @@ InlineAgentRunner = _ts_decorate28([
   Injectable13(),
   _ts_param26(0, Inject26(AGENT_DEPS_FACTORY6)),
   _ts_param26(1, Inject26(AGENT_STORE6)),
-  _ts_param26(2, Optional10()),
+  _ts_param26(2, Optional11()),
   _ts_metadata27("design:type", Function),
   _ts_metadata27("design:paramtypes", [
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
@@ -18761,13 +18881,20 @@ function sharedProviders(durable, engine) {
     },
     {
       provide: AGENT_ACTOR_RESOLVER14,
-      useFactory: /* @__PURE__ */ __name((options) => {
-        if (options.actorResolver !== void 0) return options.actorResolver;
+      // With tenancy on, an actor the resolver left without a `tenantRef` gets the context tenant's.
+      useFactory: /* @__PURE__ */ __name((options, contextAccessor) => {
+        if (options.actorResolver !== void 0) {
+          return tenantFillingResolver(options.actorResolver, options.tenancy, contextAccessor);
+        }
         logger4.warn("No `actorResolver` configured \u2014 the agent endpoints are PUBLIC: every browser gets its own anonymous identity (an HttpOnly cookie). Set `actorResolver: requestUserActorResolver()` (or your own) to require login.");
-        return new AnonymousActorResolver();
+        return tenantFillingResolver(new AnonymousActorResolver(), options.tenancy, contextAccessor);
       }, "useFactory"),
       inject: [
-        AGENT_OPTIONS11
+        AGENT_OPTIONS11,
+        {
+          token: CONTEXT_ACCESSOR3,
+          optional: true
+        }
       ]
     },
     // No `model` (and no `engine`): the turns run on `@nestjs/ai`'s `AiModule` models.
@@ -18790,6 +18917,9 @@ function sharedProviders(durable, engine) {
         } : {},
         ...o.quota?.countEstimatedCost !== void 0 ? {
           countEstimatedCost: o.quota.countEstimatedCost
+        } : {},
+        ...o.quota?.per !== void 0 ? {
+          per: o.quota.per
         } : {}
       }), "useFactory"),
       inject: [
@@ -19057,7 +19187,7 @@ import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER15, AGENT_ATTACHMENT_STAGIN
 import { A2UI_LEGACY_BASIC_CATALOG_ID, negotiateA2uiCatalog, readAgUiA2uiCatalogIds } from "@dudousxd/nestjs-agent-core/a2ui";
 import { AG_UI_CUSTOM, actionProposalDecisionEvents, agUiEvents, agUiFramesFromNdjson, agUiSse, parseRunInput, planResume, readAnswersPayload, readApprovalPayload, readContext, readForwardedProps, readUserTurn } from "@dudousxd/nestjs-agent-core/ag-ui";
 import { uiActionText } from "@dudousxd/nestjs-agent-core/genui";
-import { BadRequestException as BadRequestException8, Body as Body7, Controller as Controller15, ForbiddenException as ForbiddenException5, HttpCode as HttpCode2, Inject as Inject27, Optional as Optional11, Post as Post8, Req as Req14, Res as Res3 } from "@nestjs/common";
+import { BadRequestException as BadRequestException8, Body as Body7, Controller as Controller15, ForbiddenException as ForbiddenException5, HttpCode as HttpCode2, Inject as Inject27, Optional as Optional12, Post as Post8, Req as Req14, Res as Res3 } from "@nestjs/common";
 function _ts_decorate30(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -19484,9 +19614,9 @@ function agUiAdapter(options = {}) {
     _ts_param27(0, Inject27(AgentService2)),
     _ts_param27(1, Inject27(AGENT_ACTOR_RESOLVER15)),
     _ts_param27(2, Inject27(AGENT_OPTIONS12)),
-    _ts_param27(3, Optional11()),
+    _ts_param27(3, Optional12()),
     _ts_param27(3, Inject27(AGENT_ATTACHMENT_STAGING5)),
-    _ts_param27(4, Optional11()),
+    _ts_param27(4, Optional12()),
     _ts_param27(4, Inject27(GENUI_CATALOG)),
     _ts_metadata28("design:type", Function),
     _ts_metadata28("design:paramtypes", [
@@ -19519,7 +19649,7 @@ import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER16, CanAnyone as CanAnyone1
 import { A2UI_APPROVE_ACTION, A2UI_REJECT_ACTION, A2uiProjector, a2uiThreadReplay, negotiateA2uiCatalog as negotiateA2uiCatalog2, readA2uiAction, readA2uiClientCapabilities } from "@dudousxd/nestjs-agent-core/a2ui";
 import { agUiEvents as agUiEvents2, agUiFramesFromNdjson as agUiFramesFromNdjson2, decodeInterruptId } from "@dudousxd/nestjs-agent-core/ag-ui";
 import { uiActionText as uiActionText2, validateUiCapabilities as validateUiCapabilities2 } from "@dudousxd/nestjs-agent-core/genui";
-import { BadRequestException as BadRequestException9, Body as Body8, Controller as Controller16, ForbiddenException as ForbiddenException6, Get as Get13, HttpCode as HttpCode3, Inject as Inject28, Optional as Optional12, Param as Param7, Post as Post9, Query as Query7, Req as Req15, Res as Res4 } from "@nestjs/common";
+import { BadRequestException as BadRequestException9, Body as Body8, Controller as Controller16, ForbiddenException as ForbiddenException6, Get as Get13, HttpCode as HttpCode3, Inject as Inject28, Optional as Optional13, Param as Param7, Post as Post9, Query as Query7, Req as Req15, Res as Res4 } from "@nestjs/common";
 function _ts_decorate31(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -19842,7 +19972,7 @@ function a2uiAdapter(options = {}) {
     Controller16(),
     _ts_param28(0, Inject28(AGENT_SERVICE)),
     _ts_param28(1, Inject28(AGENT_ACTOR_RESOLVER16)),
-    _ts_param28(2, Optional12()),
+    _ts_param28(2, Optional13()),
     _ts_param28(2, Inject28(GENUI_CATALOG)),
     _ts_metadata29("design:type", Function),
     _ts_metadata29("design:paramtypes", [