@dudousxd/nestjs-agent-store-drizzle 0.20.2 → 0.22.0

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import * as drizzle_orm_sqlite_core from 'drizzle-orm/sqlite-core';
 import { BaseSQLiteDatabase } from 'drizzle-orm/sqlite-core';
-import { MessageRole, ToolCallRequest, ToolResult, MessageAttachment, MessageUsage, AgentUiComponent, MessageFeedback, Actor, PageContext, QueuePause, ToolKind, ToolCallStatus, UsagePurpose, AgentStore, ThreadTurnReader, ChatQueueStore, CreateThreadInput, ThreadSummary, ThreadDetail, ThreadTurnQuery, ThreadTurnPage, ToolCallApprovalState, EnqueueMessageInput, QueuedMessage, QueuedMessagePatch, UpdateThreadInput, RecordRunStartInput, AppendMessageInput, StoredMessage, RecordToolCallInput, UpdateToolCallInput, ToolCallOutcome, RecordUsageInput, AgentGovernanceQueries, AgentPricingStore, GovernanceRange, ModelSpendRow, ActorSpendRow, ThreadSpendRow, UsageTrendPoint, ToolCallActivityRow, ThreadActivityRow, RunMetrics, RunAgentBreakdownRow, RunErrorBreakdownRow, RunTrendPoint, RecentRunRow, PendingApprovalRow, ToolStatRow, GovernancePageQuery, ToolCallWhere, GovernancePage, ThreadWhere, RunWhere, ApprovalWhere, GovernanceRunDetail, GovernanceThreadDetailQuery, GovernanceThreadDetail, MemoryProvider, ListMemoriesInput, MemoryRecord, ForgetMemoryInput, StoreMemoryInput, ModelPriceInput, CurrentModelPrice } from '@dudousxd/nestjs-agent-core';
+import { MessageRole, ToolCallRequest, ToolResult, MessageAttachment, MessageUsage, AgentUiComponent, MessageFeedback, Actor, PageContext, QueuePause, ToolKind, ToolCallStatus, UsagePurpose, AgentStore, ThreadTurnReader, ChatQueueStore, CreateThreadInput, ThreadSummary, ThreadDetail, ThreadTurnQuery, ThreadTurnPage, ToolCallApprovalState, EnqueueMessageInput, QueuedMessage, QueuedMessagePatch, UpdateThreadInput, RecordRunStartInput, AppendMessageInput, StoredMessage, RecordToolCallInput, UpdateToolCallInput, ToolCallOutcome, RecordUsageInput, AgentGovernanceQueries, AgentPricingStore, GovernanceRange, ModelSpendRow, ActorSpendRow, ThreadSpendRow, UsageTrendPoint, ToolCallActivityRow, ThreadActivityRow, RunMetrics, RunAgentBreakdownRow, RunErrorBreakdownRow, RunTrendPoint, RecentRunRow, PendingApprovalRow, ToolStatRow, GovernancePageQuery, ToolCallWhere, GovernancePage, ThreadWhere, RunWhere, ApprovalWhere, GovernanceRunDetail, GovernanceThreadDetailQuery, GovernanceThreadDetail, MemoryProvider, ListMemoriesInput, MemoryRecord, ForgetMemoryInput, StoreMemoryInput, ModelPriceInput, CurrentModelPrice, StreamFrameTable, StreamFrameRow, SqlTokenStreamSink, SqlTokenStreamSinkOptions, ConfirmTokenStore, ConfirmTokenClaim } from '@dudousxd/nestjs-agent-core';
 export { ThreadTurnPage, ThreadTurnQuery } from '@dudousxd/nestjs-agent-core';
 import { TablesRelationalConfig, SQL } from 'drizzle-orm';
 import { OnModuleInit, OnModuleDestroy, Type, DynamicModule } from '@nestjs/common';
@@ -2243,6 +2243,213 @@ declare const ragIngestionLog: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
     };
     dialect: "sqlite";
 }>;
+/**
+ * Spent confirm tokens (`defineConfirmedTool`), one row per token, keyed by its SHA-256 — the
+ * primary key is the lock that makes a confirmation single use across replicas. Only the hash, the
+ * actor and the tool are kept, never an argument. `expires_at` is epoch-ms; past it the row is dead
+ * weight for `DrizzleConfirmTokenStore.purgeExpired`.
+ */
+declare const agentConfirmToken: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
+    name: "agent_confirm_token";
+    schema: undefined;
+    columns: {
+        hash: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "hash";
+            tableName: "agent_confirm_token";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        actorRef: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "actor_ref";
+            tableName: "agent_confirm_token";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        tool: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "tool";
+            tableName: "agent_confirm_token";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        expiresAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "expires_at";
+            tableName: "agent_confirm_token";
+            dataType: "number";
+            columnType: "SQLiteInteger";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "created_at";
+            tableName: "agent_confirm_token";
+            dataType: "number";
+            columnType: "SQLiteInteger";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "sqlite";
+}>;
+/**
+ * One row per frame of a run's live stream (`DrizzleTokenStreamSink`), numbered per run from 1 with
+ * no gaps. `frame` is one NDJSON line; `null` marks the end, with `error` set when the run failed.
+ * `created_at` (epoch-ms) is what the TTL counts from — a run's LAST row.
+ */
+declare const agentStreamFrame: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
+    name: "agent_stream_frame";
+    schema: undefined;
+    columns: {
+        runId: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "run_id";
+            tableName: "agent_stream_frame";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        seq: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "seq";
+            tableName: "agent_stream_frame";
+            dataType: "number";
+            columnType: "SQLiteInteger";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        frame: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "frame";
+            tableName: "agent_stream_frame";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        error: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "error";
+            tableName: "agent_stream_frame";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        createdAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "created_at";
+            tableName: "agent_stream_frame";
+            dataType: "number";
+            columnType: "SQLiteInteger";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "sqlite";
+}>;
 /** The tables this store owns, as one schema object, ready for `drizzle(client, { schema })`. */
 declare const agentSchema: {
     agentThread: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
@@ -4401,6 +4608,104 @@ declare const agentSchema: {
         };
         dialect: "sqlite";
     }>;
+    agentConfirmToken: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
+        name: "agent_confirm_token";
+        schema: undefined;
+        columns: {
+            hash: drizzle_orm_sqlite_core.SQLiteColumn<{
+                name: "hash";
+                tableName: "agent_confirm_token";
+                dataType: "string";
+                columnType: "SQLiteText";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: true;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {
+                length: number | undefined;
+            }>;
+            actorRef: drizzle_orm_sqlite_core.SQLiteColumn<{
+                name: "actor_ref";
+                tableName: "agent_confirm_token";
+                dataType: "string";
+                columnType: "SQLiteText";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {
+                length: number | undefined;
+            }>;
+            tool: drizzle_orm_sqlite_core.SQLiteColumn<{
+                name: "tool";
+                tableName: "agent_confirm_token";
+                dataType: "string";
+                columnType: "SQLiteText";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {
+                length: number | undefined;
+            }>;
+            expiresAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+                name: "expires_at";
+                tableName: "agent_confirm_token";
+                dataType: "number";
+                columnType: "SQLiteInteger";
+                data: number;
+                driverParam: number;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: undefined;
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {}>;
+            createdAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+                name: "created_at";
+                tableName: "agent_confirm_token";
+                dataType: "number";
+                columnType: "SQLiteInteger";
+                data: number;
+                driverParam: number;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: undefined;
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {}>;
+        };
+        dialect: "sqlite";
+    }>;
 };
 /**
  * The dialect-portable Drizzle SQLite database handle the store operates on. Accepts any SQLite
@@ -4745,6 +5050,53 @@ declare class DrizzlePricingStore implements AgentPricingStore {
     listCurrentPrices(): Promise<CurrentModelPrice[]>;
 }
 
+/** {@link StreamFrameTable} over `agent_stream_frame`, through a Drizzle SQLite handle. */
+declare class DrizzleStreamFrameTable implements StreamFrameTable {
+    private readonly db;
+    constructor(db: AgentDrizzleDb);
+    append(runId: string, row: {
+        frame: string | null;
+        error: string | null;
+        createdAt: number;
+    }): Promise<void>;
+    read(runId: string, after: number, limit: number): Promise<StreamFrameRow[]>;
+    has(runId: string): Promise<boolean>;
+    remove(runIds: readonly string[]): Promise<void>;
+    lapsedRuns(cutoff: number): Promise<string[]>;
+    isUniqueViolation(error: unknown): boolean;
+}
+/**
+ * A multi-replica `TokenStreamSink` over the app's Drizzle database — several replicas, no Redis.
+ * Polled, with streamed text coalesced into one row per `flushMs`; see `SqlTokenStreamSink` for the
+ * trade-offs. The `agent_stream_frame` table comes from `ensureAgentSchema` (or your migration).
+ *
+ * ```ts
+ * AgentModule.forRoot({ model, sink: new DrizzleTokenStreamSink(db) });
+ * ```
+ */
+declare class DrizzleTokenStreamSink extends SqlTokenStreamSink {
+    constructor(db: AgentDrizzleDb, options?: SqlTokenStreamSinkOptions);
+}
+
+/**
+ * A production `ConfirmTokenStore` (`defineConfirmedTool`) over the `agent_confirm_token` table —
+ * what makes a confirmed write single use across replicas.
+ *
+ * `claim` is one `INSERT … ON CONFLICT DO NOTHING RETURNING`, so the primary key is the lock: of two
+ * concurrent confirmations one inserts and the other touches no row. A statement that does not FAIL
+ * on the duplicate, rather than an insert whose violation is caught, so it never aborts a
+ * surrounding transaction. Only the token's SHA-256, the actor and the tool name are stored; call
+ * {@link purgeExpired} from a scheduled job to drop the dead rows. The table comes from
+ * `ensureAgentSchema` (or your own migration).
+ */
+declare class DrizzleConfirmTokenStore implements ConfirmTokenStore {
+    private readonly db;
+    constructor(db: AgentDrizzleDb);
+    claim(input: ConfirmTokenClaim): Promise<boolean>;
+    release(hash: string): Promise<void>;
+    purgeExpired(now?: number): Promise<number>;
+}
+
 /**
  * The paging order: newest first, tiebroken on the primary key.
  *
@@ -4956,7 +5308,8 @@ interface DrizzleAgentStoreModuleOptions {
  * Binds {@link DrizzleAgentStore} to the {@link AGENT_STORE} token consumed by
  * `@dudousxd/nestjs-agent`, plus {@link DrizzleGovernanceQueries} to
  * {@link AGENT_GOVERNANCE_QUERIES} (the read-model the dashboard/telescope surfaces consume) and
- * {@link DrizzlePricingStore} to {@link AGENT_PRICING_STORE} (the write side of that pricing table).
+ * {@link DrizzlePricingStore} to {@link AGENT_PRICING_STORE} (the write side of that pricing table),
+ * and {@link DrizzleConfirmTokenStore} to {@link AGENT_CONFIRM_TOKEN_STORE} (confirmed writes).
  * The host app supplies an already-opened Drizzle db — this module never opens a connection itself.
  *
  * The returned module is global, so {@link AGENT_STORE}, {@link AGENT_GOVERNANCE_QUERIES} and
@@ -4973,4 +5326,4 @@ declare class DrizzleAgentStoreModule {
     static forRoot(options: DrizzleAgentStoreModuleOptions): DynamicModule;
 }
 
-export { type AgentDrizzleDb, type AgentMemoryRow, type AgentMessageRow, type AgentQueuedMessageRow, type AgentRunRow, type AgentRunStatus, type AgentThreadRow, DrizzleAgentStore, DrizzleAgentStoreModule, type DrizzleAgentStoreModuleOptions, DrizzleGovernanceQueries, DrizzleMemoryProvider, DrizzlePricingStore, DrizzleRagIngestionLog, RAG_INGESTION_LOG_PAGE_ORDER, type RagIngestionLogCursor, type RagIngestionLogIterateOptions, type RagIngestionLogQuery, type RagIngestionLogRow, type RagIngestionLogWhere, type RagIngestionStatus, agentMemory, agentMessage, agentModelPricing, agentQueuedMessage, agentRun, agentSchema, agentThread, agentTokenUsage, agentToolCall, ensureAgentSchema, ragIngestionLog };
+export { type AgentDrizzleDb, type AgentMemoryRow, type AgentMessageRow, type AgentQueuedMessageRow, type AgentRunRow, type AgentRunStatus, type AgentThreadRow, DrizzleAgentStore, DrizzleAgentStoreModule, type DrizzleAgentStoreModuleOptions, DrizzleConfirmTokenStore, DrizzleGovernanceQueries, DrizzleMemoryProvider, DrizzlePricingStore, DrizzleRagIngestionLog, DrizzleStreamFrameTable, DrizzleTokenStreamSink, RAG_INGESTION_LOG_PAGE_ORDER, type RagIngestionLogCursor, type RagIngestionLogIterateOptions, type RagIngestionLogQuery, type RagIngestionLogRow, type RagIngestionLogWhere, type RagIngestionStatus, agentConfirmToken, agentMemory, agentMessage, agentModelPricing, agentQueuedMessage, agentRun, agentSchema, agentStreamFrame, agentThread, agentTokenUsage, agentToolCall, ensureAgentSchema, ragIngestionLog };

package/dist/index.js

@@ -2,7 +2,7 @@ var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 
 // src/schema.ts
-import { index, integer, real, sqliteTable, text, uniqueIndex } from "drizzle-orm/sqlite-core";
+import { index, integer, primaryKey, real, sqliteTable, text, uniqueIndex } from "drizzle-orm/sqlite-core";
 var agentThread = sqliteTable("agent_thread", {
   id: text("id").primaryKey(),
   actorRef: text("actor_ref").notNull(),
@@ -266,6 +266,29 @@ var ragIngestionLog = sqliteTable("rag_ingestion_log", {
 }, (table) => [
   index("rag_ingestion_log_collection_idx").on(table.collection, table.updatedAt)
 ]);
+var agentConfirmToken = sqliteTable("agent_confirm_token", {
+  hash: text("hash").primaryKey(),
+  actorRef: text("actor_ref").notNull(),
+  tool: text("tool").notNull(),
+  expiresAt: integer("expires_at").notNull(),
+  createdAt: integer("created_at").notNull()
+}, (table) => [
+  index("agent_confirm_token_expires_idx").on(table.expiresAt)
+]);
+var agentStreamFrame = sqliteTable("agent_stream_frame", {
+  runId: text("run_id").notNull(),
+  seq: integer("seq").notNull(),
+  frame: text("frame"),
+  error: text("error"),
+  createdAt: integer("created_at").notNull()
+}, (table) => [
+  primaryKey({
+    columns: [
+      table.runId,
+      table.seq
+    ]
+  })
+]);
 var agentSchema = {
   agentThread,
   agentMessage,
@@ -275,7 +298,8 @@ var agentSchema = {
   agentModelPricing,
   agentRun,
   agentMemory,
-  ragIngestionLog
+  ragIngestionLog,
+  agentConfirmToken
 };
 
 // src/ensure-schema.ts
@@ -430,7 +454,24 @@ var statements = [
     updated_at INTEGER NOT NULL
   )`,
   `CREATE INDEX IF NOT EXISTS rag_ingestion_log_collection_idx
-    ON rag_ingestion_log (collection, updated_at)`
+    ON rag_ingestion_log (collection, updated_at)`,
+  `CREATE TABLE IF NOT EXISTS agent_stream_frame (
+    run_id TEXT NOT NULL,
+    seq INTEGER NOT NULL,
+    frame TEXT,
+    error TEXT,
+    created_at INTEGER NOT NULL,
+    PRIMARY KEY (run_id, seq)
+  )`,
+  `CREATE TABLE IF NOT EXISTS agent_confirm_token (
+    hash TEXT PRIMARY KEY NOT NULL,
+    actor_ref TEXT NOT NULL,
+    tool TEXT NOT NULL,
+    expires_at INTEGER NOT NULL,
+    created_at INTEGER NOT NULL
+  )`,
+  `CREATE INDEX IF NOT EXISTS agent_confirm_token_expires_idx
+    ON agent_confirm_token (expires_at)`
 ];
 var additiveColumns = [
   {
@@ -2131,10 +2172,106 @@ var DrizzlePricingStore = class {
   }
 };
 
+// src/drizzle-token-stream-sink.ts
+import { SqlTokenStreamSink } from "@dudousxd/nestjs-agent-core";
+import { and as and5, asc as asc3, eq as eq5, gt, inArray as inArray4, lt, max as max2, sql as sql4 } from "drizzle-orm";
+function isUniqueViolation(error) {
+  for (let current = error; current !== null && typeof current === "object"; ) {
+    const code = current.code;
+    if (typeof code === "string" && code.startsWith("SQLITE_CONSTRAINT")) return true;
+    current = current.cause;
+  }
+  return false;
+}
+__name(isUniqueViolation, "isUniqueViolation");
+var DrizzleStreamFrameTable = class {
+  static {
+    __name(this, "DrizzleStreamFrameTable");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async append(runId, row) {
+    await this.db.run(sql4`INSERT INTO agent_stream_frame (run_id, seq, frame, error, created_at)
+          SELECT ${runId}, COALESCE(MAX(seq), 0) + 1, ${row.frame}, ${row.error}, ${row.createdAt}
+          FROM agent_stream_frame WHERE run_id = ${runId}`);
+  }
+  async read(runId, after, limit) {
+    return this.db.select({
+      seq: agentStreamFrame.seq,
+      frame: agentStreamFrame.frame,
+      error: agentStreamFrame.error
+    }).from(agentStreamFrame).where(and5(eq5(agentStreamFrame.runId, runId), gt(agentStreamFrame.seq, after))).orderBy(asc3(agentStreamFrame.seq)).limit(limit);
+  }
+  async has(runId) {
+    const rows = await this.db.select({
+      seq: agentStreamFrame.seq
+    }).from(agentStreamFrame).where(eq5(agentStreamFrame.runId, runId)).limit(1);
+    return rows.length > 0;
+  }
+  async remove(runIds) {
+    if (runIds.length === 0) return;
+    await this.db.delete(agentStreamFrame).where(inArray4(agentStreamFrame.runId, [
+      ...runIds
+    ]));
+  }
+  async lapsedRuns(cutoff) {
+    const rows = await this.db.select({
+      runId: agentStreamFrame.runId
+    }).from(agentStreamFrame).groupBy(agentStreamFrame.runId).having(lt(max2(agentStreamFrame.createdAt), cutoff));
+    return rows.map((row) => row.runId);
+  }
+  isUniqueViolation(error) {
+    return isUniqueViolation(error);
+  }
+};
+var DrizzleTokenStreamSink = class extends SqlTokenStreamSink {
+  static {
+    __name(this, "DrizzleTokenStreamSink");
+  }
+  constructor(db, options = {}) {
+    super(new DrizzleStreamFrameTable(db), options);
+  }
+};
+
+// src/drizzle-confirm-token-store.ts
+import { eq as eq6, lt as lt2 } from "drizzle-orm";
+var DrizzleConfirmTokenStore = class {
+  static {
+    __name(this, "DrizzleConfirmTokenStore");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async claim(input) {
+    const inserted = await this.db.insert(agentConfirmToken).values({
+      hash: input.hash,
+      actorRef: input.actorRef,
+      tool: input.tool,
+      expiresAt: input.expiresAt,
+      createdAt: Date.now()
+    }).onConflictDoNothing().returning({
+      hash: agentConfirmToken.hash
+    });
+    return inserted.length === 1;
+  }
+  async release(hash) {
+    await this.db.delete(agentConfirmToken).where(eq6(agentConfirmToken.hash, hash));
+  }
+  async purgeExpired(now = Date.now()) {
+    const purged = await this.db.delete(agentConfirmToken).where(lt2(agentConfirmToken.expiresAt, now)).returning({
+      hash: agentConfirmToken.hash
+    });
+    return purged.length;
+  }
+};
+
 // src/drizzle-rag-ingestion-log.ts
 import { subscribe, unsubscribe } from "diagnostics_channel";
 import { Injectable, Logger } from "@nestjs/common";
-import { and as and5, asc as asc3, count as count2, desc as desc3, eq as eq5, gt, lt, or as or2 } from "drizzle-orm";
+import { and as and6, asc as asc4, count as count2, desc as desc3, eq as eq7, gt as gt2, lt as lt3, or as or2 } from "drizzle-orm";
 function _ts_decorate(decorators, target, key, desc4) {
   var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -2183,7 +2320,7 @@ function num(value) {
 __name(num, "num");
 var RAG_INGESTION_LOG_PAGE_ORDER = [
   desc3(ragIngestionLog.updatedAt),
-  asc3(ragIngestionLog.documentId)
+  asc4(ragIngestionLog.documentId)
 ];
 var DEFAULT_PAGE_SIZE = 200;
 var DEFAULT_BATCH_SIZE = 200;
@@ -2326,19 +2463,19 @@ var DrizzleRagIngestionLog = class _DrizzleRagIngestionLog {
   }
   /** The latest recorded outcome for one document, or null if it was never attempted. */
   async get(documentId) {
-    const [row] = await this.db.select().from(ragIngestionLog).where(eq5(ragIngestionLog.documentId, documentId));
+    const [row] = await this.db.select().from(ragIngestionLog).where(eq7(ragIngestionLog.documentId, documentId));
     return row ?? null;
   }
   /** Forget one document's record. Returns whether a row was actually removed. */
   async remove(documentId) {
-    const removed = await this.db.delete(ragIngestionLog).where(eq5(ragIngestionLog.documentId, documentId)).returning({
+    const removed = await this.db.delete(ragIngestionLog).where(eq7(ragIngestionLog.documentId, documentId)).returning({
       documentId: ragIngestionLog.documentId
     });
     return removed.length > 0;
   }
   /** Forget every record for a collection — for when the collection itself is deleted. */
   async removeByCollection(collection) {
-    const removed = await this.db.delete(ragIngestionLog).where(eq5(ragIngestionLog.collection, collection)).returning({
+    const removed = await this.db.delete(ragIngestionLog).where(eq7(ragIngestionLog.collection, collection)).returning({
       documentId: ragIngestionLog.documentId
     });
     return removed.length;
@@ -2370,7 +2507,7 @@ var DrizzleRagIngestionLog = class _DrizzleRagIngestionLog {
     }
   }
   where(query) {
-    return and5(query.collection !== void 0 ? eq5(ragIngestionLog.collection, query.collection) : void 0, query.status !== void 0 ? eq5(ragIngestionLog.status, query.status) : void 0);
+    return and6(query.collection !== void 0 ? eq7(ragIngestionLog.collection, query.collection) : void 0, query.status !== void 0 ? eq7(ragIngestionLog.status, query.status) : void 0);
   }
   /**
   * The coordinates filter AND'd with "strictly after `cursor` in
@@ -2385,7 +2522,7 @@ var DrizzleRagIngestionLog = class _DrizzleRagIngestionLog {
     if (cursor === void 0) {
       return base;
     }
-    return and5(base, or2(lt(ragIngestionLog.updatedAt, cursor.updatedAt), and5(eq5(ragIngestionLog.updatedAt, cursor.updatedAt), gt(ragIngestionLog.documentId, cursor.documentId))));
+    return and6(base, or2(lt3(ragIngestionLog.updatedAt, cursor.updatedAt), and6(eq7(ragIngestionLog.updatedAt, cursor.updatedAt), gt2(ragIngestionLog.documentId, cursor.documentId))));
   }
   /**
   * Upsert one outcome. Keyed by document id so the row always reflects the *current* state — a
@@ -2461,7 +2598,7 @@ DrizzleRagIngestionLog = _ts_decorate([
 ], DrizzleRagIngestionLog);
 
 // src/drizzle-agent-store.module.ts
-import { AGENT_GOVERNANCE_QUERIES, AGENT_PRICING_STORE, AGENT_STORE } from "@dudousxd/nestjs-agent-core";
+import { AGENT_CONFIRM_TOKEN_STORE, AGENT_GOVERNANCE_QUERIES, AGENT_PRICING_STORE, AGENT_STORE } from "@dudousxd/nestjs-agent-core";
 import { Module } from "@nestjs/common";
 function _ts_decorate2(decorators, target, key, desc4) {
   var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
@@ -2531,6 +2668,15 @@ var DrizzleAgentStoreModule = class _DrizzleAgentStoreModule {
         {
           provide: AGENT_GOVERNANCE_QUERIES,
           useExisting: DrizzleGovernanceQueries
+        },
+        // What makes a `defineConfirmedTool` confirmation single use across replicas.
+        {
+          provide: DrizzleConfirmTokenStore,
+          useFactory: /* @__PURE__ */ __name(() => new DrizzleConfirmTokenStore(options.db), "useFactory")
+        },
+        {
+          provide: AGENT_CONFIRM_TOKEN_STORE,
+          useExisting: DrizzleConfirmTokenStore
         }
       ],
       exports: [
@@ -2543,7 +2689,9 @@ var DrizzleAgentStoreModule = class _DrizzleAgentStoreModule {
         DrizzleGovernanceQueries,
         AGENT_GOVERNANCE_QUERIES,
         DrizzlePricingStore,
-        AGENT_PRICING_STORE
+        AGENT_PRICING_STORE,
+        DrizzleConfirmTokenStore,
+        AGENT_CONFIRM_TOKEN_STORE
       ]
     };
   }
@@ -2554,17 +2702,22 @@ DrizzleAgentStoreModule = _ts_decorate2([
 export {
   DrizzleAgentStore,
   DrizzleAgentStoreModule,
+  DrizzleConfirmTokenStore,
   DrizzleGovernanceQueries,
   DrizzleMemoryProvider,
   DrizzlePricingStore,
   DrizzleRagIngestionLog,
+  DrizzleStreamFrameTable,
+  DrizzleTokenStreamSink,
   RAG_INGESTION_LOG_PAGE_ORDER,
+  agentConfirmToken,
   agentMemory,
   agentMessage,
   agentModelPricing,
   agentQueuedMessage,
   agentRun,
   agentSchema,
+  agentStreamFrame,
   agentThread,
   agentTokenUsage,
   agentToolCall,