@dudousxd/nestjs-agent-store-drizzle 0.24.0 → 0.25.0

package/dist/index.cjs

@@ -21,6 +21,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  DrizzleActionProposalStore: () => DrizzleActionProposalStore,
   DrizzleAgentStore: () => DrizzleAgentStore,
   DrizzleAgentStoreModule: () => DrizzleAgentStoreModule,
   DrizzleConfirmTokenStore: () => DrizzleConfirmTokenStore,
@@ -31,6 +32,7 @@ __export(index_exports, {
   DrizzleStreamFrameTable: () => DrizzleStreamFrameTable,
   DrizzleTokenStreamSink: () => DrizzleTokenStreamSink,
   RAG_INGESTION_LOG_PAGE_ORDER: () => RAG_INGESTION_LOG_PAGE_ORDER,
+  agentActionProposal: () => agentActionProposal,
   agentConfirmToken: () => agentConfirmToken,
   agentDialectOf: () => agentDialectOf,
   agentMemory: () => agentMemory,
@@ -90,6 +92,7 @@ var agentMessage = (0, import_sqlite_core.sqliteTable)("agent_message", {
     onDelete: "cascade"
   }),
   role: (0, import_sqlite_core.text)("role").$type().notNull(),
+  actionProposalOutcome: (0, import_sqlite_core.text)("action_proposal_outcome"),
   content: (0, import_sqlite_core.text)("content").notNull(),
   toolCalls: (0, import_sqlite_core.text)("tool_calls", {
     mode: "json"
@@ -134,6 +137,7 @@ var agentMessage = (0, import_sqlite_core.sqliteTable)("agent_message", {
   (0, import_sqlite_core.index)("agent_message_thread_created_idx").on(table.threadId, table.createdAt)
 ]);
 var agentToolCall = (0, import_sqlite_core.sqliteTable)("agent_tool_call", {
+  proposalId: (0, import_sqlite_core.text)("proposal_id"),
   id: (0, import_sqlite_core.text)("id").primaryKey(),
   messageId: (0, import_sqlite_core.text)("message_id").notNull().references(() => agentMessage.id, {
     onDelete: "cascade"
@@ -158,6 +162,10 @@ var agentToolCall = (0, import_sqlite_core.sqliteTable)("agent_tool_call", {
   }),
   /** The run (turn) this call belongs to, for a trace deep-link; null for a pre-rollout row. */
   runId: (0, import_sqlite_core.text)("run_id"),
+  /** Resolved per-call wording; null falls back to presentation templates. */
+  confirmation: (0, import_sqlite_core.text)("confirmation", {
+    mode: "json"
+  }).$type(),
   /** Who had to approve it (`requester` or a role); null for a call no policy put to anyone. */
   approver: (0, import_sqlite_core.text)("approver"),
   /** When the approval request lapses; null → never. */
@@ -174,6 +182,9 @@ var agentToolCall = (0, import_sqlite_core.sqliteTable)("agent_tool_call", {
   (0, import_sqlite_core.index)("agent_tool_call_message_idx").on(table.messageId)
 ]);
 var agentQueuedMessage = (0, import_sqlite_core.sqliteTable)("agent_queued_message", {
+  uiCapabilities: (0, import_sqlite_core.text)("ui_capabilities", {
+    mode: "json"
+  }).$type(),
   id: (0, import_sqlite_core.text)("id").primaryKey(),
   threadId: (0, import_sqlite_core.text)("thread_id").notNull().references(() => agentThread.id, {
     onDelete: "cascade"
@@ -351,7 +362,35 @@ var agentStreamFrame = (0, import_sqlite_core.sqliteTable)("agent_stream_frame",
     ]
   })
 ]);
+var agentActionProposal = (0, import_sqlite_core.sqliteTable)("agent_action_proposal", {
+  id: (0, import_sqlite_core.text)("id").primaryKey(),
+  scopeKey: (0, import_sqlite_core.text)("scope_key").notNull(),
+  decision: (0, import_sqlite_core.text)("decision").$type().notNull(),
+  logicalSort: (0, import_sqlite_core.text)("logical_sort").notNull(),
+  createFingerprint: (0, import_sqlite_core.text)("create_fingerprint").notNull(),
+  proposal: (0, import_sqlite_core.text)("proposal", {
+    mode: "json"
+  }).$type().notNull(),
+  version: (0, import_sqlite_core.integer)("version").notNull().default(0),
+  executionStatus: (0, import_sqlite_core.text)("execution_status").$type(),
+  leaseExpiresAt: (0, import_sqlite_core.integer)("lease_expires_at"),
+  deliveryStatus: (0, import_sqlite_core.text)("delivery_status"),
+  deliveryLeaseExpiresAt: (0, import_sqlite_core.integer)("delivery_lease_expires_at"),
+  replacementGroupKey: (0, import_sqlite_core.text)("replacement_group_key"),
+  outcomeIdKey: (0, import_sqlite_core.text)("outcome_id_key"),
+  proposalExpiresAt: (0, import_sqlite_core.integer)("proposal_expires_at"),
+  discoveryIndexVersion: (0, import_sqlite_core.integer)("discovery_index_version").notNull().default(0),
+  createdAt: (0, import_sqlite_core.integer)("created_at").notNull()
+}, (table) => [
+  (0, import_sqlite_core.index)("agent_action_proposal_execution_idx").on(table.discoveryIndexVersion, table.executionStatus, table.leaseExpiresAt, table.createdAt),
+  (0, import_sqlite_core.index)("agent_action_proposal_expiry_idx").on(table.discoveryIndexVersion, table.decision, table.proposalExpiresAt, table.createdAt),
+  (0, import_sqlite_core.index)("agent_action_proposal_replacement_idx").on(table.scopeKey, table.replacementGroupKey, table.decision),
+  (0, import_sqlite_core.index)("agent_action_proposal_delivery_idx").on(table.deliveryStatus, table.deliveryLeaseExpiresAt, table.createdAt),
+  (0, import_sqlite_core.uniqueIndex)("agent_action_proposal_outcome_idx").on(table.outcomeIdKey),
+  (0, import_sqlite_core.index)("agent_action_proposal_scope_idx").on(table.scopeKey, table.createdAt, table.id)
+]);
 var agentSchema = {
+  agentActionProposal,
   agentThread,
   agentMessage,
   agentQueuedMessage,
@@ -377,6 +416,7 @@ var import_mysql_core2 = require("drizzle-orm/mysql-core");
 var import_pg_core2 = require("drizzle-orm/pg-core");
 
 // src/schema-mysql.ts
+var import_nestjs_agent_core = require("@dudousxd/nestjs-agent-core");
 var import_mysql_core = require("drizzle-orm/mysql-core");
 var ts = /* @__PURE__ */ __name((name) => (0, import_mysql_core.datetime)(name, {
   mode: "date",
@@ -409,6 +449,7 @@ var agentMessage2 = (0, import_mysql_core.mysqlTable)("agent_message", {
     onDelete: "cascade"
   }),
   role: key("role").$type().notNull(),
+  actionProposalOutcome: (0, import_mysql_core.longtext)("action_proposal_outcome"),
   content: (0, import_mysql_core.longtext)("content").notNull(),
   toolCalls: (0, import_mysql_core.json)("tool_calls").$type(),
   toolResults: (0, import_mysql_core.json)("tool_results").$type(),
@@ -429,6 +470,7 @@ var agentMessage2 = (0, import_mysql_core.mysqlTable)("agent_message", {
   (0, import_mysql_core.index)("agent_message_thread_created_idx").on(table.threadId, table.createdAt)
 ]);
 var agentToolCall2 = (0, import_mysql_core.mysqlTable)("agent_tool_call", {
+  proposalId: key("proposal_id"),
   id: key("id").primaryKey(),
   messageId: key("message_id").notNull().references(() => agentMessage2.id, {
     onDelete: "cascade"
@@ -444,6 +486,7 @@ var agentToolCall2 = (0, import_mysql_core.mysqlTable)("agent_tool_call", {
   createdAt: ts("created_at").notNull(),
   executedAt: ts("executed_at"),
   runId: key("run_id"),
+  confirmation: (0, import_mysql_core.json)("confirmation").$type(),
   approver: key("approver"),
   expiresAt: ts("expires_at"),
   remember: (0, import_mysql_core.boolean)("remember"),
@@ -452,6 +495,7 @@ var agentToolCall2 = (0, import_mysql_core.mysqlTable)("agent_tool_call", {
   (0, import_mysql_core.index)("agent_tool_call_message_idx").on(table.messageId)
 ]);
 var agentQueuedMessage2 = (0, import_mysql_core.mysqlTable)("agent_queued_message", {
+  uiCapabilities: (0, import_mysql_core.json)("ui_capabilities").$type(),
   id: key("id").primaryKey(),
   threadId: key("thread_id").notNull().references(() => agentThread2.id, {
     onDelete: "cascade"
@@ -581,7 +625,52 @@ var agentStreamFrame2 = (0, import_mysql_core.mysqlTable)("agent_stream_frame",
     ]
   })
 ]);
+var proposalJson = (0, import_mysql_core.customType)({
+  dataType: /* @__PURE__ */ __name(() => "longtext", "dataType"),
+  toDriver: /* @__PURE__ */ __name((value) => (0, import_nestjs_agent_core.canonicalActionProposalJson)(value), "toDriver"),
+  fromDriver: /* @__PURE__ */ __name((value) => JSON.parse(value), "fromDriver")
+});
+var agentActionProposal2 = (0, import_mysql_core.mysqlTable)("agent_action_proposal", {
+  id: key("id").primaryKey(),
+  scopeKey: key("scope_key").notNull(),
+  decision: key("decision").$type().notNull(),
+  logicalSort: (0, import_mysql_core.varchar)("logical_sort", {
+    length: 1020
+  }).notNull(),
+  createFingerprint: (0, import_mysql_core.longtext)("create_fingerprint").notNull(),
+  proposal: proposalJson("proposal").notNull(),
+  version: (0, import_mysql_core.bigint)("version", {
+    mode: "number"
+  }).notNull().default(0),
+  executionStatus: key("execution_status").$type(),
+  leaseExpiresAt: (0, import_mysql_core.bigint)("lease_expires_at", {
+    mode: "number"
+  }),
+  deliveryStatus: key("delivery_status"),
+  deliveryLeaseExpiresAt: (0, import_mysql_core.bigint)("delivery_lease_expires_at", {
+    mode: "number"
+  }),
+  replacementGroupKey: key("replacement_group_key"),
+  outcomeIdKey: key("outcome_id_key"),
+  proposalExpiresAt: (0, import_mysql_core.bigint)("proposal_expires_at", {
+    mode: "number"
+  }),
+  discoveryIndexVersion: (0, import_mysql_core.bigint)("discovery_index_version", {
+    mode: "number"
+  }).notNull().default(0),
+  createdAt: (0, import_mysql_core.bigint)("created_at", {
+    mode: "number"
+  }).notNull()
+}, (table) => [
+  (0, import_mysql_core.index)("agent_action_proposal_execution_idx").on(table.discoveryIndexVersion, table.executionStatus, table.leaseExpiresAt, table.createdAt),
+  (0, import_mysql_core.index)("agent_action_proposal_expiry_idx").on(table.discoveryIndexVersion, table.decision, table.proposalExpiresAt, table.createdAt),
+  (0, import_mysql_core.index)("agent_action_proposal_replacement_idx").on(table.scopeKey, table.replacementGroupKey, table.decision),
+  (0, import_mysql_core.index)("agent_action_proposal_delivery_idx").on(table.deliveryStatus, table.deliveryLeaseExpiresAt, table.createdAt),
+  (0, import_mysql_core.uniqueIndex)("agent_action_proposal_outcome_idx").on(table.outcomeIdKey),
+  (0, import_mysql_core.index)("agent_action_proposal_scope_idx").on(table.scopeKey, table.createdAt, table.id)
+]);
 var mysqlAgentSchema = {
+  agentActionProposal: agentActionProposal2,
   agentThread: agentThread2,
   agentMessage: agentMessage2,
   agentQueuedMessage: agentQueuedMessage2,
@@ -596,6 +685,7 @@ var mysqlAgentSchema = {
 };
 
 // src/schema-pg.ts
+var import_nestjs_agent_core2 = require("@dudousxd/nestjs-agent-core");
 var import_pg_core = require("drizzle-orm/pg-core");
 var ts2 = /* @__PURE__ */ __name((name) => (0, import_pg_core.timestamp)(name, {
   withTimezone: true,
@@ -626,6 +716,7 @@ var agentMessage3 = (0, import_pg_core.pgTable)("agent_message", {
     onDelete: "cascade"
   }),
   role: (0, import_pg_core.text)("role").$type().notNull(),
+  actionProposalOutcome: (0, import_pg_core.text)("action_proposal_outcome"),
   content: (0, import_pg_core.text)("content").notNull(),
   toolCalls: (0, import_pg_core.jsonb)("tool_calls").$type(),
   toolResults: (0, import_pg_core.jsonb)("tool_results").$type(),
@@ -646,6 +737,7 @@ var agentMessage3 = (0, import_pg_core.pgTable)("agent_message", {
   (0, import_pg_core.index)("agent_message_thread_created_idx").on(table.threadId, table.createdAt)
 ]);
 var agentToolCall3 = (0, import_pg_core.pgTable)("agent_tool_call", {
+  proposalId: (0, import_pg_core.text)("proposal_id"),
   id: (0, import_pg_core.text)("id").primaryKey(),
   messageId: (0, import_pg_core.text)("message_id").notNull().references(() => agentMessage3.id, {
     onDelete: "cascade"
@@ -661,6 +753,7 @@ var agentToolCall3 = (0, import_pg_core.pgTable)("agent_tool_call", {
   createdAt: ts2("created_at").notNull(),
   executedAt: ts2("executed_at"),
   runId: (0, import_pg_core.text)("run_id"),
+  confirmation: (0, import_pg_core.jsonb)("confirmation").$type(),
   approver: (0, import_pg_core.text)("approver"),
   expiresAt: ts2("expires_at"),
   remember: (0, import_pg_core.boolean)("remember"),
@@ -669,6 +762,7 @@ var agentToolCall3 = (0, import_pg_core.pgTable)("agent_tool_call", {
   (0, import_pg_core.index)("agent_tool_call_message_idx").on(table.messageId)
 ]);
 var agentQueuedMessage3 = (0, import_pg_core.pgTable)("agent_queued_message", {
+  uiCapabilities: (0, import_pg_core.jsonb)("ui_capabilities").$type(),
   id: (0, import_pg_core.text)("id").primaryKey(),
   threadId: (0, import_pg_core.text)("thread_id").notNull().references(() => agentThread3.id, {
     onDelete: "cascade"
@@ -798,7 +892,50 @@ var agentStreamFrame3 = (0, import_pg_core.pgTable)("agent_stream_frame", {
     ]
   })
 ]);
+var proposalJson2 = (0, import_pg_core.customType)({
+  dataType: /* @__PURE__ */ __name(() => "text", "dataType"),
+  toDriver: /* @__PURE__ */ __name((value) => (0, import_nestjs_agent_core2.canonicalActionProposalJson)(value), "toDriver"),
+  fromDriver: /* @__PURE__ */ __name((value) => JSON.parse(value), "fromDriver")
+});
+var agentActionProposal3 = (0, import_pg_core.pgTable)("agent_action_proposal", {
+  id: (0, import_pg_core.text)("id").primaryKey(),
+  scopeKey: (0, import_pg_core.text)("scope_key").notNull(),
+  decision: (0, import_pg_core.text)("decision").$type().notNull(),
+  logicalSort: (0, import_pg_core.text)("logical_sort").notNull(),
+  createFingerprint: (0, import_pg_core.text)("create_fingerprint").notNull(),
+  proposal: proposalJson2("proposal").notNull(),
+  version: (0, import_pg_core.bigint)("version", {
+    mode: "number"
+  }).notNull().default(0),
+  executionStatus: (0, import_pg_core.text)("execution_status").$type(),
+  leaseExpiresAt: (0, import_pg_core.bigint)("lease_expires_at", {
+    mode: "number"
+  }),
+  deliveryStatus: (0, import_pg_core.text)("delivery_status"),
+  deliveryLeaseExpiresAt: (0, import_pg_core.bigint)("delivery_lease_expires_at", {
+    mode: "number"
+  }),
+  replacementGroupKey: (0, import_pg_core.text)("replacement_group_key"),
+  outcomeIdKey: (0, import_pg_core.text)("outcome_id_key"),
+  proposalExpiresAt: (0, import_pg_core.bigint)("proposal_expires_at", {
+    mode: "number"
+  }),
+  discoveryIndexVersion: (0, import_pg_core.bigint)("discovery_index_version", {
+    mode: "number"
+  }).notNull().default(0),
+  createdAt: (0, import_pg_core.bigint)("created_at", {
+    mode: "number"
+  }).notNull()
+}, (table) => [
+  (0, import_pg_core.index)("agent_action_proposal_execution_idx").on(table.discoveryIndexVersion, table.executionStatus, table.leaseExpiresAt, table.createdAt),
+  (0, import_pg_core.index)("agent_action_proposal_expiry_idx").on(table.discoveryIndexVersion, table.decision, table.proposalExpiresAt, table.createdAt),
+  (0, import_pg_core.index)("agent_action_proposal_replacement_idx").on(table.scopeKey, table.replacementGroupKey, table.decision),
+  (0, import_pg_core.index)("agent_action_proposal_delivery_idx").on(table.deliveryStatus, table.deliveryLeaseExpiresAt, table.createdAt),
+  (0, import_pg_core.uniqueIndex)("agent_action_proposal_outcome_idx").on(table.outcomeIdKey),
+  (0, import_pg_core.index)("agent_action_proposal_scope_idx").on(table.scopeKey, table.createdAt, table.id)
+]);
 var pgAgentSchema = {
+  agentActionProposal: agentActionProposal3,
   agentThread: agentThread3,
   agentMessage: agentMessage3,
   agentQueuedMessage: agentQueuedMessage3,
@@ -1050,8 +1187,514 @@ async function heal(db, dialect) {
 __name(heal, "heal");
 
 // src/drizzle-agent-store.ts
-var import_nestjs_agent_core = require("@dudousxd/nestjs-agent-core");
+var import_nestjs_agent_core4 = require("@dudousxd/nestjs-agent-core");
+var import_drizzle_orm4 = require("drizzle-orm");
+
+// src/drizzle-action-proposal-store.ts
+var import_node_crypto = require("crypto");
+var import_nestjs_agent_core3 = require("@dudousxd/nestjs-agent-core");
 var import_drizzle_orm3 = require("drizzle-orm");
+
+// src/action-proposal-transaction-mode.ts
+function actionProposalTransactionMode(kind) {
+  if (kind === "BetterSQLite3Database" || kind === "BetterSQLiteTransaction") return "sync";
+  if (kind !== void 0 && [
+    "NodePgDatabase",
+    "NodePgTransaction",
+    "MySql2Database",
+    "MySql2Transaction",
+    "LibSQLDatabase",
+    "LibSQLTransaction"
+  ].includes(kind)) return "async";
+  return "unsupported";
+}
+__name(actionProposalTransactionMode, "actionProposalTransactionMode");
+
+// src/drizzle-action-proposal-store.ts
+var DrizzleActionProposalStore = class {
+  static {
+    __name(this, "DrizzleActionProposalStore");
+  }
+  db;
+  rawDb;
+  actionProposalAdmissionSupported;
+  synchronousSqlite;
+  dialect;
+  table;
+  clock;
+  constructor(db, options = {}) {
+    this.rawDb = db;
+    const kind = db.constructor[import_drizzle_orm3.entityKind];
+    const transactionMode = actionProposalTransactionMode(kind);
+    this.synchronousSqlite = transactionMode === "sync";
+    this.actionProposalAdmissionSupported = transactionMode !== "unsupported";
+    this.dialect = agentDialectOf(db);
+    this.table = agentTablesFor(this.dialect).agentActionProposal;
+    this.db = asBuilder(db);
+    this.clock = options.clock ?? Date.now;
+  }
+  async createActionProposal(input) {
+    const proposal = (0, import_nestjs_agent_core3.initialActionProposal)(input, this.clock());
+    const row = {
+      id: physicalId(input.id),
+      scopeKey: scopeKey(input),
+      decision: proposal.decision,
+      logicalSort: logicalSort(input.id),
+      createFingerprint: (0, import_nestjs_agent_core3.canonicalActionProposalJson)(input),
+      proposal,
+      ...discoveryMetadata(proposal),
+      version: 0,
+      createdAt: proposal.createdAt
+    };
+    const table = this.table;
+    const insert = this.db.insert(table);
+    const inserted = this.dialect === "mysql" ? mysqlAffectedRows(await insert.ignore().values(row)) : await affectedRows(this.dialect, insert.values(row).onConflictDoNothing(), table.id);
+    const stored = await this.read(input, input.id);
+    if (!stored) return {
+      status: "conflict"
+    };
+    if (inserted === 1) return {
+      status: "created",
+      proposal: stored.proposal
+    };
+    return {
+      status: stored.createFingerprint === row.createFingerprint ? "unchanged" : "conflict",
+      proposal: stored.proposal
+    };
+  }
+  createReplacingActionProposal(input) {
+    if (!input.replacementKey) return this.createActionProposal(input);
+    const proposal = (0, import_nestjs_agent_core3.initialActionProposal)(input, this.clock());
+    return this.transactionSteps((db) => this.replacementSteps(db, input, proposal));
+  }
+  async supersedeActionProposal(scope, id, command) {
+    const replacement = await this.getActionProposal(scope, command.replacementProposalId);
+    if (!replacement) return {
+      status: "not_found"
+    };
+    return this.mutate(scope, id, (row, now) => (0, import_nestjs_agent_core3.transitionActionProposalSupersession)(row, replacement, command, now));
+  }
+  *replacementSteps(db, input, proposal) {
+    const table = this.table;
+    const thread = agentTablesFor(this.dialect).agentThread;
+    if (this.dialect === "sqlite") yield {
+      kind: "write",
+      query: db.update(thread).set({
+        updatedAt: import_drizzle_orm3.sql`${thread.updatedAt}`
+      }).where((0, import_drizzle_orm3.eq)(thread.id, input.threadId))
+    };
+    const threads = yield {
+      kind: "read",
+      query: lockQuery(db.select().from(thread).where((0, import_drizzle_orm3.eq)(thread.id, input.threadId)).limit(1), this.dialect)
+    };
+    const owner = threads[0];
+    if (!owner || owner.id !== input.threadId || owner.deletedAt || owner.actorRef !== input.actorRef || owner.tenantRef !== input.tenantRef) return {
+      status: "conflict"
+    };
+    const existingRows = yield {
+      kind: "read",
+      query: db.select().from(table).where((0, import_drizzle_orm3.eq)(table.id, physicalId(input.id))).limit(1)
+    };
+    const existing = existingRows[0];
+    if (existing) {
+      if (existing.proposal.id !== input.id || !(0, import_nestjs_agent_core3.actionProposalScopeMatches)(existing.proposal, input)) return {
+        status: "conflict"
+      };
+      return {
+        status: existing.createFingerprint === (0, import_nestjs_agent_core3.canonicalActionProposalJson)(input) ? "unchanged" : "conflict",
+        proposal: existing.proposal
+      };
+    }
+    const groupKey = replacementGroupKey(input);
+    if (groupKey === null) throw new Error("Missing explicit replacement identity");
+    const pending = yield {
+      kind: "read",
+      query: lockQuery(db.select().from(table).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(table.scopeKey, scopeKey(input)), (0, import_drizzle_orm3.eq)(table.replacementGroupKey, groupKey), (0, import_drizzle_orm3.eq)(table.decision, "pending"))), this.dialect)
+    };
+    const row = {
+      id: physicalId(input.id),
+      scopeKey: scopeKey(input),
+      decision: proposal.decision,
+      logicalSort: logicalSort(input.id),
+      createFingerprint: (0, import_nestjs_agent_core3.canonicalActionProposalJson)(input),
+      proposal,
+      ...discoveryMetadata(proposal),
+      version: 0,
+      createdAt: proposal.createdAt
+    };
+    const insert = db.insert(table);
+    const inserted = yield {
+      kind: "read",
+      query: this.dialect === "mysql" ? insert.ignore().values(row) : insert.values(row).onConflictDoNothing().returning({
+        id: table.id
+      })
+    };
+    const count3 = this.dialect === "mysql" ? mysqlAffectedRows(inserted) : inserted.length;
+    if (count3 !== 1) return {
+      status: "conflict"
+    };
+    for (const old of pending) {
+      const result = (0, import_nestjs_agent_core3.transitionActionProposalSupersession)(old.proposal, proposal, {
+        replacementProposalId: proposal.id,
+        actorRef: proposal.actorRef,
+        via: "replacement"
+      }, this.clock());
+      if (!result.proposal || (0, import_nestjs_agent_core3.canonicalActionProposalJson)(result.proposal) === (0, import_nestjs_agent_core3.canonicalActionProposalJson)(old.proposal)) continue;
+      const next = result.proposal;
+      const update = db.update(table).set({
+        proposal: next,
+        decision: next.decision,
+        ...discoveryMetadata(next),
+        version: old.version + 1
+      }).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(table.id, old.id), (0, import_drizzle_orm3.eq)(table.version, old.version)));
+      const updated = yield {
+        kind: "read",
+        query: this.dialect === "mysql" ? update : update.returning({
+          id: table.id
+        })
+      };
+      if ((this.dialect === "mysql" ? mysqlAffectedRows(updated) : updated.length) !== 1) throw new Error("Replacement lost its locked proposal fence");
+    }
+    return {
+      status: "created",
+      proposal
+    };
+  }
+  async getActionProposal(scope, id) {
+    return (await this.read(scope, id))?.proposal ?? null;
+  }
+  async listActionProposals(scope, query = {}) {
+    const limit = (0, import_nestjs_agent_core3.validateActionProposalListQuery)(query);
+    const rows = await this.db.select().from(this.table).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.table.scopeKey, scopeKey(scope)), query.after === void 0 ? void 0 : (0, import_drizzle_orm3.or)((0, import_drizzle_orm3.gt)(this.table.createdAt, query.after.createdAt), (0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.table.createdAt, query.after.createdAt), (0, import_drizzle_orm3.gt)(this.table.logicalSort, logicalSort(query.after.id)))), query.decision === void 0 ? void 0 : (0, import_drizzle_orm3.eq)(this.table.decision, query.decision))).orderBy((0, import_drizzle_orm3.asc)(this.table.createdAt), (0, import_drizzle_orm3.asc)(this.table.logicalSort)).limit(limit);
+    return rows.map((row) => row.proposal).filter((proposal) => (0, import_nestjs_agent_core3.actionProposalScopeMatches)(proposal, scope));
+  }
+  decideActionProposal(scope, id, command) {
+    return this.mutate(scope, id, (row, now) => (0, import_nestjs_agent_core3.transitionActionProposalDecision)(row, command, now));
+  }
+  claimActionProposal(scope, id, command) {
+    return this.mutate(scope, id, (row, now) => (0, import_nestjs_agent_core3.transitionActionProposalClaim)(row, command, now, (0, import_node_crypto.randomUUID)()));
+  }
+  extendActionProposalLease(scope, id, command) {
+    return this.mutate(scope, id, (row, now) => (0, import_nestjs_agent_core3.transitionActionProposalLease)(row, command, now));
+  }
+  settleActionProposal(scope, id, command) {
+    return this.mutate(scope, id, (row, now) => (0, import_nestjs_agent_core3.transitionActionProposalSettlement)(row, command, now));
+  }
+  async claimNextActionProposal(command) {
+    const now = this.clock();
+    (0, import_nestjs_agent_core3.validateActionProposalWorkerClaim)(command, now);
+    const table = this.table;
+    const candidates = await this.db.select().from(table).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(table.discoveryIndexVersion, 1), (0, import_drizzle_orm3.eq)(table.decision, "approved"), (0, import_drizzle_orm3.or)((0, import_drizzle_orm3.eq)(table.executionStatus, "queued"), (0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(table.executionStatus, "executing"), (0, import_drizzle_orm3.lte)(table.leaseExpiresAt, now))))).orderBy((0, import_drizzle_orm3.asc)(table.createdAt), (0, import_drizzle_orm3.asc)(table.logicalSort)).limit(32);
+    for (const candidate of candidates) {
+      const result = await this.claimActionProposal(candidate.proposal, candidate.proposal.id, command);
+      if (result.status === "applied" && result.proposal) return result.proposal;
+    }
+    return null;
+  }
+  async expireActionProposals(command) {
+    const now = this.clock();
+    (0, import_nestjs_agent_core3.validateActionProposalExpiryBatch)(command, now);
+    const table = this.table;
+    const candidates = await this.db.select().from(table).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(table.discoveryIndexVersion, 1), (0, import_drizzle_orm3.eq)(table.decision, "pending"), (0, import_drizzle_orm3.lte)(table.proposalExpiresAt, now))).orderBy((0, import_drizzle_orm3.asc)(table.createdAt), (0, import_drizzle_orm3.asc)(table.logicalSort)).limit(command.limit);
+    let expired = 0;
+    for (const candidate of candidates) {
+      const result = await this.decideActionProposal(candidate.proposal, candidate.proposal.id, {
+        decision: "expired",
+        actorRef: "system",
+        via: "expiry"
+      });
+      if (result.status === "applied") expired++;
+    }
+    return expired;
+  }
+  async backfillActionProposalDiscoveryIndex(command) {
+    (0, import_nestjs_agent_core3.validateActionProposalDiscoveryIndexBatch)(command);
+    const table = this.table;
+    const candidates = await this.db.select().from(table).where((0, import_drizzle_orm3.eq)(table.discoveryIndexVersion, 0)).orderBy((0, import_drizzle_orm3.asc)(table.createdAt), (0, import_drizzle_orm3.asc)(table.logicalSort)).limit(command.limit);
+    let changed = 0;
+    for (const row of candidates) {
+      changed += await affectedRows(this.dialect, this.db.update(table).set({
+        ...discoveryMetadata(row.proposal),
+        version: row.version + 1
+      }).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(table.id, row.id), (0, import_drizzle_orm3.eq)(table.scopeKey, row.scopeKey), (0, import_drizzle_orm3.eq)(table.version, row.version), (0, import_drizzle_orm3.eq)(table.discoveryIndexVersion, 0))), table.id);
+    }
+    return changed;
+  }
+  async rememberedActionProposalApprovals(scope) {
+    const table = this.table;
+    const rows = await this.db.select().from(table).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(table.scopeKey, scopeKey(scope)), (0, import_drizzle_orm3.eq)(table.decision, "approved"), (0, import_drizzle_orm3.or)((0, import_drizzle_orm3.eq)(table.executionStatus, "succeeded"), (0, import_drizzle_orm3.eq)(table.executionStatus, "failed"))));
+    return [
+      ...new Set(rows.filter((row) => (0, import_nestjs_agent_core3.actionProposalScopeMatches)(row.proposal, scope) && row.proposal.decisionAudit?.remember === true).map((row) => row.proposal.toolName))
+    ];
+  }
+  async getThreadActionProposalScope(threadId) {
+    const thread = agentTablesFor(this.dialect).agentThread;
+    const [row] = await this.db.select().from(thread).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(thread.id, threadId), (0, import_drizzle_orm3.isNull)(thread.deletedAt))).limit(1);
+    return row?.id === threadId ? {
+      actorRef: row.actorRef,
+      tenantRef: row.tenantRef,
+      threadId: row.id
+    } : null;
+  }
+  async claimNextActionProposalOutcome(command) {
+    const now = this.clock();
+    (0, import_nestjs_agent_core3.validateActionProposalWorkerClaim)(command, now);
+    const table = this.table;
+    const candidates = await this.db.select().from(table).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(table.deliveryStatus, "pending"), (0, import_drizzle_orm3.or)((0, import_drizzle_orm3.isNull)(table.deliveryLeaseExpiresAt), (0, import_drizzle_orm3.lte)(table.deliveryLeaseExpiresAt, now)))).orderBy((0, import_drizzle_orm3.asc)(table.createdAt), (0, import_drizzle_orm3.asc)(table.logicalSort)).limit(32);
+    for (const row of candidates) {
+      const result = await this.mutate(row.proposal, row.proposal.id, (proposal, time) => {
+        const claimed2 = (0, import_nestjs_agent_core3.claimActionProposalOutcome)(proposal, command, time, (0, import_node_crypto.randomUUID)());
+        return claimed2 ? {
+          status: "applied",
+          proposal: claimed2
+        } : {
+          status: "conflict",
+          proposal
+        };
+      });
+      const claimed = result.proposal;
+      if (result.status === "applied" && claimed?.outcome && claimed.outcomeDelivery?.lease) {
+        return {
+          outcome: claimed.outcome,
+          lease: {
+            outcomeId: claimed.outcome.id,
+            token: claimed.outcomeDelivery.lease.token,
+            generation: claimed.outcomeDelivery.generation
+          }
+        };
+      }
+    }
+    return null;
+  }
+  async admitActionProposalOutcome(command) {
+    return this.transactionSteps((db) => this.admissionSteps(db, command));
+  }
+  async transactionSteps(factory) {
+    if (!this.actionProposalAdmissionSupported) throw new Error("Independent actions require a certified transactional Drizzle driver (better-sqlite3, node-postgres, mysql2 or libsql)");
+    if (this.synchronousSqlite) {
+      const database2 = this.rawDb;
+      return database2.transaction((tx) => runSync(factory(asBuilder(tx))), {
+        behavior: "immediate"
+      });
+    }
+    const database = this.rawDb;
+    return database.transaction(async (tx) => runAsync(factory(asBuilder(tx))));
+  }
+  *admissionSteps(db, command) {
+    if (typeof command.outcomeId !== "string" || !command.outcomeId || typeof command.token !== "string" || !command.token || !Number.isSafeInteger(command.generation) || command.generation < 1) throw new TypeError("Invalid outcome fence");
+    const table = this.table;
+    const tables = agentTablesFor(this.dialect);
+    if (this.dialect === "sqlite") yield {
+      kind: "write",
+      query: db.update(table).set({
+        version: import_drizzle_orm3.sql`${table.version}`
+      }).where((0, import_drizzle_orm3.eq)(table.outcomeIdKey, physicalId(command.outcomeId)))
+    };
+    const query = db.select().from(table).where((0, import_drizzle_orm3.eq)(table.outcomeIdKey, physicalId(command.outcomeId))).limit(1);
+    const rows = yield {
+      kind: "read",
+      query: lockQuery(query, this.dialect)
+    };
+    const row = rows[0];
+    if (!row || row.proposal.outcome?.id !== command.outcomeId) return {
+      status: "not_found"
+    };
+    const proposal = row.proposal;
+    const outcome = proposal.outcome;
+    const delivery = proposal.outcomeDelivery;
+    if (!outcome || !delivery) return {
+      status: "not_found"
+    };
+    if (proposal.outcomeDelivery?.status === "admitted") return {
+      status: "unchanged",
+      ...proposal.outcomeDelivery.messageId !== void 0 ? {
+        messageId: proposal.outcomeDelivery.messageId
+      } : {}
+    };
+    if (proposal.outcomeDelivery?.status === "discarded") return {
+      status: "discarded"
+    };
+    if (!(0, import_nestjs_agent_core3.actionProposalOutcomeFenceValid)(proposal, command, this.clock())) return {
+      status: "conflict"
+    };
+    const threadQuery = db.select().from(tables.agentThread).where((0, import_drizzle_orm3.eq)(tables.agentThread.id, proposal.threadId)).limit(1);
+    const threads = yield {
+      kind: "read",
+      query: lockQuery(threadQuery, this.dialect)
+    };
+    const thread = threads[0];
+    const now = this.clock();
+    if (!(0, import_nestjs_agent_core3.actionProposalOutcomeFenceValid)(proposal, command, now)) return {
+      status: "conflict"
+    };
+    if (!thread || thread.id !== proposal.threadId || thread.deletedAt || thread.actorRef !== proposal.actorRef || thread.tenantRef !== proposal.tenantRef) {
+      const discarded = {
+        ...proposal,
+        outcomeDelivery: {
+          ...delivery,
+          status: "discarded",
+          lease: null
+        },
+        updatedAt: now
+      };
+      yield {
+        kind: "write",
+        query: db.update(table).set({
+          proposal: discarded,
+          ...discoveryMetadata(discarded),
+          version: row.version + 1
+        }).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(table.id, row.id), (0, import_drizzle_orm3.eq)(table.version, row.version)))
+      };
+      return {
+        status: "discarded"
+      };
+    }
+    if (thread.activeStreamId !== null) return {
+      status: "busy"
+    };
+    const seqRows = yield {
+      kind: "read",
+      query: db.select({
+        last: (0, import_drizzle_orm3.max)(tables.agentMessage.seq)
+      }).from(tables.agentMessage).where((0, import_drizzle_orm3.eq)(tables.agentMessage.threadId, thread.id))
+    };
+    const messageId = physicalId(command.outcomeId);
+    yield {
+      kind: "write",
+      query: db.insert(tables.agentMessage).values({
+        id: messageId,
+        threadId: thread.id,
+        role: "assistant",
+        content: (0, import_nestjs_agent_core3.actionProposalOutcomeText)(outcome),
+        actionProposalOutcome: (0, import_nestjs_agent_core3.canonicalActionProposalJson)(outcome),
+        ui: null,
+        seq: Number(seqRows[0]?.last ?? 0) + 1,
+        createdAt: new Date(now)
+      })
+    };
+    yield {
+      kind: "write",
+      query: db.update(tables.agentThread).set({
+        updatedAt: new Date(now)
+      }).where((0, import_drizzle_orm3.eq)(tables.agentThread.id, thread.id))
+    };
+    const admitted = {
+      ...proposal,
+      outcomeDelivery: {
+        ...delivery,
+        status: "admitted",
+        lease: null,
+        messageId
+      },
+      updatedAt: now
+    };
+    const update = db.update(table).set({
+      proposal: admitted,
+      ...discoveryMetadata(admitted),
+      version: row.version + 1
+    }).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(table.id, row.id), (0, import_drizzle_orm3.eq)(table.version, row.version)));
+    const changed = yield {
+      kind: "read",
+      query: this.dialect === "mysql" ? update : update.returning({
+        id: table.id
+      })
+    };
+    const count3 = this.dialect === "mysql" ? mysqlAffectedRows(changed) : changed.length;
+    if (count3 !== 1) throw new Error("Outcome admission lost its locked proposal fence");
+    return {
+      status: "applied",
+      messageId
+    };
+  }
+  async read(scope, id) {
+    const [row] = await this.db.select().from(this.table).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.table.id, physicalId(id)), (0, import_drizzle_orm3.eq)(this.table.scopeKey, scopeKey(scope)))).limit(1);
+    return row && row.proposal.id === id && (0, import_nestjs_agent_core3.actionProposalScopeMatches)(row.proposal, scope) ? row : void 0;
+  }
+  async mutate(scope, id, transition) {
+    for (let attempt = 0; attempt < 32; attempt++) {
+      const row2 = await this.read(scope, id);
+      if (!row2) return {
+        status: "not_found"
+      };
+      const result = transition(row2.proposal, this.clock());
+      if (!result.proposal || (0, import_nestjs_agent_core3.canonicalActionProposalJson)(result.proposal) === (0, import_nestjs_agent_core3.canonicalActionProposalJson)(row2.proposal)) return result;
+      const changed = await affectedRows(this.dialect, this.db.update(this.table).set({
+        proposal: result.proposal,
+        decision: result.proposal.decision,
+        ...discoveryMetadata(result.proposal),
+        version: row2.version + 1
+      }).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.table.id, physicalId(id)), (0, import_drizzle_orm3.eq)(this.table.scopeKey, scopeKey(scope)), (0, import_drizzle_orm3.eq)(this.table.version, row2.version))), this.table.id);
+      if (changed === 1) return result;
+    }
+    const row = await this.read(scope, id);
+    return row ? {
+      status: "conflict",
+      proposal: row.proposal
+    } : {
+      status: "not_found"
+    };
+  }
+};
+function scopeKey(scope) {
+  return (0, import_node_crypto.createHash)("sha256").update((0, import_nestjs_agent_core3.canonicalActionProposalJson)([
+    scope.tenantRef,
+    scope.actorRef,
+    scope.threadId
+  ])).digest("hex");
+}
+__name(scopeKey, "scopeKey");
+function physicalId(id) {
+  return (0, import_node_crypto.createHash)("sha256").update((0, import_nestjs_agent_core3.canonicalActionProposalJson)(id)).digest("hex");
+}
+__name(physicalId, "physicalId");
+function logicalSort(id) {
+  let sort = "";
+  for (let index4 = 0; index4 < id.length; index4++) sort += id.charCodeAt(index4).toString(16).padStart(4, "0");
+  return sort;
+}
+__name(logicalSort, "logicalSort");
+function discoveryMetadata(proposal) {
+  return {
+    replacementGroupKey: replacementGroupKey(proposal),
+    deliveryStatus: proposal.outcomeDelivery?.status ?? null,
+    deliveryLeaseExpiresAt: proposal.outcomeDelivery?.lease?.expiresAt ?? null,
+    outcomeIdKey: proposal.outcome ? physicalId(proposal.outcome.id) : null,
+    executionStatus: proposal.execution?.status ?? null,
+    leaseExpiresAt: proposal.execution?.lease?.expiresAt ?? null,
+    proposalExpiresAt: proposal.expiresAt,
+    discoveryIndexVersion: 1
+  };
+}
+__name(discoveryMetadata, "discoveryMetadata");
+function lockQuery(query, dialect) {
+  return dialect === "sqlite" ? query : query.for("update");
+}
+__name(lockQuery, "lockQuery");
+function runSync(steps) {
+  let next = steps.next();
+  while (!next.done) {
+    const { kind, query } = next.value;
+    const statement = query;
+    next = steps.next(kind === "read" ? statement.all() : statement.run());
+  }
+  return next.value;
+}
+__name(runSync, "runSync");
+async function runAsync(steps) {
+  let next = steps.next();
+  while (!next.done) next = steps.next(await next.value.query);
+  return next.value;
+}
+__name(runAsync, "runAsync");
+function replacementGroupKey(proposal) {
+  return proposal.replacementKey ? physicalId((0, import_nestjs_agent_core3.canonicalActionProposalJson)([
+    proposal.toolName,
+    proposal.replacementKey
+  ])) : null;
+}
+__name(replacementGroupKey, "replacementGroupKey");
+
+// src/drizzle-agent-store.ts
 function turnMessageColumns(message) {
   return {
     id: message.id,
@@ -1072,11 +1715,61 @@ var DrizzleAgentStore = class {
   db;
   dialect;
   t;
-  constructor(db) {
+  proposals;
+  constructor(db, options = {}) {
+    this.proposals = new DrizzleActionProposalStore(db, options);
     this.dialect = agentDialectOf(db);
     this.t = agentTablesFor(this.dialect);
     this.db = asBuilder(db);
   }
+  createActionProposal(...args) {
+    return this.proposals.createActionProposal(...args);
+  }
+  getActionProposal(...args) {
+    return this.proposals.getActionProposal(...args);
+  }
+  listActionProposals(...args) {
+    return this.proposals.listActionProposals(...args);
+  }
+  decideActionProposal(...args) {
+    return this.proposals.decideActionProposal(...args);
+  }
+  claimActionProposal(...args) {
+    return this.proposals.claimActionProposal(...args);
+  }
+  extendActionProposalLease(...args) {
+    return this.proposals.extendActionProposalLease(...args);
+  }
+  claimNextActionProposal(...args) {
+    return this.proposals.claimNextActionProposal(...args);
+  }
+  expireActionProposals(...args) {
+    return this.proposals.expireActionProposals(...args);
+  }
+  backfillActionProposalDiscoveryIndex(command) {
+    return this.proposals.backfillActionProposalDiscoveryIndex(command);
+  }
+  settleActionProposal(...args) {
+    return this.proposals.settleActionProposal(...args);
+  }
+  createReplacingActionProposal(...args) {
+    return this.proposals.createReplacingActionProposal(...args);
+  }
+  supersedeActionProposal(...args) {
+    return this.proposals.supersedeActionProposal(...args);
+  }
+  get actionProposalAdmissionSupported() {
+    return this.proposals.actionProposalAdmissionSupported;
+  }
+  getThreadActionProposalScope(threadId) {
+    return this.proposals.getThreadActionProposalScope(threadId);
+  }
+  claimNextActionProposalOutcome(...args) {
+    return this.proposals.claimNextActionProposalOutcome(...args);
+  }
+  admitActionProposalOutcome(...args) {
+    return this.proposals.admitActionProposalOutcome(...args);
+  }
   async createThread(input) {
     const now = /* @__PURE__ */ new Date();
     const thread = {
@@ -1098,11 +1791,11 @@ var DrizzleAgentStore = class {
     return this.toSummary(thread);
   }
   async getThread(threadId) {
-    const [thread] = await this.db.select().from(this.t.agentThread).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.t.agentThread.id, threadId), (0, import_drizzle_orm3.isNull)(this.t.agentThread.deletedAt)));
+    const [thread] = await this.db.select().from(this.t.agentThread).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentThread.id, threadId), (0, import_drizzle_orm4.isNull)(this.t.agentThread.deletedAt)));
     if (thread === void 0) {
       return null;
     }
-    const messages = await this.db.select().from(this.t.agentMessage).where((0, import_drizzle_orm3.eq)(this.t.agentMessage.threadId, threadId)).orderBy(...this.messageOrder());
+    const messages = await this.db.select().from(this.t.agentMessage).where((0, import_drizzle_orm4.eq)(this.t.agentMessage.threadId, threadId)).orderBy(...this.messageOrder());
     const last = messages[messages.length - 1];
     const approvals = await this.approvalsFor(messages.map((message) => message.id));
     return {
@@ -1137,14 +1830,14 @@ var DrizzleAgentStore = class {
     const [thread] = await this.db.select({
       title: this.t.agentThread.title,
       defaultAgent: this.t.agentThread.defaultAgent
-    }).from(this.t.agentThread).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.t.agentThread.id, query.threadId), (0, import_drizzle_orm3.isNull)(this.t.agentThread.deletedAt)));
+    }).from(this.t.agentThread).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentThread.id, query.threadId), (0, import_drizzle_orm4.isNull)(this.t.agentThread.deletedAt)));
     if (thread === void 0) {
       return null;
     }
     const messages = await this.loadTurnWindow(query.threadId, query.messageLimit);
     const [answered] = await this.db.select({
       id: this.t.agentMessage.id
-    }).from(this.t.agentMessage).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.t.agentMessage.threadId, query.threadId), (0, import_drizzle_orm3.eq)(this.t.agentMessage.role, "assistant"))).limit(1);
+    }).from(this.t.agentMessage).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentMessage.threadId, query.threadId), (0, import_drizzle_orm4.eq)(this.t.agentMessage.role, "assistant"))).limit(1);
     return {
       title: thread.title,
       defaultAgent: thread.defaultAgent,
@@ -1160,15 +1853,15 @@ var DrizzleAgentStore = class {
     if (limit !== void 0 && limit <= 0) {
       return [];
     }
-    const window = this.db.select(turnMessageColumns(this.t.agentMessage)).from(this.t.agentMessage).where((0, import_drizzle_orm3.eq)(this.t.agentMessage.threadId, threadId)).orderBy(...this.messageOrderNewestFirst());
+    const window = this.db.select(turnMessageColumns(this.t.agentMessage)).from(this.t.agentMessage).where((0, import_drizzle_orm4.eq)(this.t.agentMessage.threadId, threadId)).orderBy(...this.messageOrderNewestFirst());
     const rows = limit === void 0 ? await window : await window.limit(limit);
     return rows.reverse().map((row) => this.toStoredMessage(row));
   }
   async listThreads(actorRef, limit = 50) {
-    const threads = await this.db.select().from(this.t.agentThread).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.t.agentThread.actorRef, actorRef), (0, import_drizzle_orm3.eq)(this.t.agentThread.transient, false), (0, import_drizzle_orm3.isNull)(this.t.agentThread.deletedAt))).orderBy((0, import_drizzle_orm3.desc)(this.t.agentThread.updatedAt)).limit(limit);
+    const threads = await this.db.select().from(this.t.agentThread).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentThread.actorRef, actorRef), (0, import_drizzle_orm4.eq)(this.t.agentThread.transient, false), (0, import_drizzle_orm4.isNull)(this.t.agentThread.deletedAt))).orderBy((0, import_drizzle_orm4.desc)(this.t.agentThread.updatedAt)).limit(limit);
     const summaries = [];
     for (const thread of threads) {
-      const [last] = await this.db.select().from(this.t.agentMessage).where((0, import_drizzle_orm3.eq)(this.t.agentMessage.threadId, thread.id)).orderBy(...this.messageOrderNewestFirst()).limit(1);
+      const [last] = await this.db.select().from(this.t.agentMessage).where((0, import_drizzle_orm4.eq)(this.t.agentMessage.threadId, thread.id)).orderBy(...this.messageOrderNewestFirst()).limit(1);
       summaries.push(this.toSummary(thread, last?.content));
     }
     return summaries;
@@ -1176,14 +1869,14 @@ var DrizzleAgentStore = class {
   async softDeleteThread(threadId) {
     await this.db.update(this.t.agentThread).set({
       deletedAt: /* @__PURE__ */ new Date()
-    }).where((0, import_drizzle_orm3.eq)(this.t.agentThread.id, threadId));
+    }).where((0, import_drizzle_orm4.eq)(this.t.agentThread.id, threadId));
   }
   async forkThread(threadId, fromMessageId) {
-    const [source] = await this.db.select().from(this.t.agentThread).where((0, import_drizzle_orm3.eq)(this.t.agentThread.id, threadId));
+    const [source] = await this.db.select().from(this.t.agentThread).where((0, import_drizzle_orm4.eq)(this.t.agentThread.id, threadId));
     if (source === void 0) {
       throw new Error(`thread ${threadId} not found`);
     }
-    const messages = await this.db.select().from(this.t.agentMessage).where((0, import_drizzle_orm3.eq)(this.t.agentMessage.threadId, threadId)).orderBy(...this.messageOrder());
+    const messages = await this.db.select().from(this.t.agentMessage).where((0, import_drizzle_orm4.eq)(this.t.agentMessage.threadId, threadId)).orderBy(...this.messageOrder());
     const cutoff = messages.findIndex((message) => message.id === fromMessageId);
     const kept = cutoff >= 0 ? messages.slice(0, cutoff + 1) : messages;
     const now = /* @__PURE__ */ new Date();
@@ -1226,6 +1919,7 @@ var DrizzleAgentStore = class {
         reasoning: message.reasoning,
         reasoningMs: message.reasoningMs,
         ui: message.ui,
+        actionProposalOutcome: message.actionProposalOutcome,
         createdAt: message.createdAt
       })));
     }
@@ -1234,20 +1928,20 @@ var DrizzleAgentStore = class {
   async ownerOfThread(threadId) {
     const [thread] = await this.db.select({
       actorRef: this.t.agentThread.actorRef
-    }).from(this.t.agentThread).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.t.agentThread.id, threadId), (0, import_drizzle_orm3.isNull)(this.t.agentThread.deletedAt)));
+    }).from(this.t.agentThread).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentThread.id, threadId), (0, import_drizzle_orm4.isNull)(this.t.agentThread.deletedAt)));
     return thread?.actorRef ?? null;
   }
   async ownerOfToolCall(toolCallId) {
     const [row] = await this.db.select({
       actorRef: this.t.agentThread.actorRef
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, (0, import_drizzle_orm3.eq)(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, (0, import_drizzle_orm3.eq)(this.t.agentMessage.threadId, this.t.agentThread.id)).where((0, import_drizzle_orm3.eq)(this.t.agentToolCall.id, toolCallId));
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, (0, import_drizzle_orm4.eq)(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, (0, import_drizzle_orm4.eq)(this.t.agentMessage.threadId, this.t.agentThread.id)).where((0, import_drizzle_orm4.eq)(this.t.agentToolCall.id, toolCallId));
     return row?.actorRef ?? null;
   }
   async runForToolCall(toolCallId) {
     const [row] = await this.db.select({
       runId: this.t.agentToolCall.runId,
       activeStreamId: this.t.agentThread.activeStreamId
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, (0, import_drizzle_orm3.eq)(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, (0, import_drizzle_orm3.eq)(this.t.agentMessage.threadId, this.t.agentThread.id)).where((0, import_drizzle_orm3.eq)(this.t.agentToolCall.id, toolCallId));
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, (0, import_drizzle_orm4.eq)(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, (0, import_drizzle_orm4.eq)(this.t.agentMessage.threadId, this.t.agentThread.id)).where((0, import_drizzle_orm4.eq)(this.t.agentToolCall.id, toolCallId));
     return row?.runId ?? row?.activeStreamId ?? null;
   }
   /**
@@ -1265,14 +1959,15 @@ var DrizzleAgentStore = class {
       messageId: this.t.agentToolCall.messageId,
       status: this.t.agentToolCall.status,
       approver: this.t.agentToolCall.approver,
+      confirmation: this.t.agentToolCall.confirmation,
       expiresAt: this.t.agentToolCall.expiresAt,
       remember: this.t.agentToolCall.remember,
       executedByRef: this.t.agentToolCall.executedByRef,
       decidedVia: this.t.agentToolCall.decidedVia,
       error: this.t.agentToolCall.error
-    }).from(this.t.agentToolCall).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.inArray)(this.t.agentToolCall.messageId, messageIds), (0, import_drizzle_orm3.isNotNull)(this.t.agentToolCall.approver))).orderBy((0, import_drizzle_orm3.asc)(this.t.agentToolCall.createdAt), (0, import_drizzle_orm3.asc)(this.t.agentToolCall.id));
+    }).from(this.t.agentToolCall).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.inArray)(this.t.agentToolCall.messageId, messageIds), (0, import_drizzle_orm4.isNotNull)(this.t.agentToolCall.approver))).orderBy((0, import_drizzle_orm4.asc)(this.t.agentToolCall.createdAt), (0, import_drizzle_orm4.asc)(this.t.agentToolCall.id));
     for (const row of rows) {
-      const approval = (0, import_nestjs_agent_core.toolCallApprovalFromRow)({
+      const approval = (0, import_nestjs_agent_core4.toolCallApprovalFromRow)({
         ...row,
         toolCallId: row.id
       });
@@ -1289,13 +1984,20 @@ var DrizzleAgentStore = class {
   async rememberedApprovals(threadId) {
     const rows = await this.db.selectDistinct({
       toolName: this.t.agentToolCall.toolName
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, (0, import_drizzle_orm3.eq)(this.t.agentToolCall.messageId, this.t.agentMessage.id)).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.t.agentMessage.threadId, threadId), (0, import_drizzle_orm3.eq)(this.t.agentToolCall.remember, true)));
-    return rows.map((row) => row.toolName);
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, (0, import_drizzle_orm4.eq)(this.t.agentToolCall.messageId, this.t.agentMessage.id)).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentMessage.threadId, threadId), (0, import_drizzle_orm4.eq)(this.t.agentToolCall.remember, true)));
+    const scope = await this.getThreadActionProposalScope(threadId);
+    const proposalNames = scope ? await this.proposals.rememberedActionProposalApprovals(scope) : [];
+    return [
+      .../* @__PURE__ */ new Set([
+        ...rows.map((row) => row.toolName),
+        ...proposalNames
+      ])
+    ];
   }
   async toolCallInput(toolCallId) {
     const [row] = await this.db.select({
       input: this.t.agentToolCall.input
-    }).from(this.t.agentToolCall).where((0, import_drizzle_orm3.eq)(this.t.agentToolCall.id, toolCallId));
+    }).from(this.t.agentToolCall).where((0, import_drizzle_orm4.eq)(this.t.agentToolCall.id, toolCallId));
     return row?.input ?? null;
   }
   async toolCallApproval(toolCallId) {
@@ -1303,7 +2005,7 @@ var DrizzleAgentStore = class {
       status: this.t.agentToolCall.status,
       approver: this.t.agentToolCall.approver,
       expiresAt: this.t.agentToolCall.expiresAt
-    }).from(this.t.agentToolCall).where((0, import_drizzle_orm3.eq)(this.t.agentToolCall.id, toolCallId));
+    }).from(this.t.agentToolCall).where((0, import_drizzle_orm4.eq)(this.t.agentToolCall.id, toolCallId));
     if (row === void 0) {
       return null;
     }
@@ -1316,26 +2018,26 @@ var DrizzleAgentStore = class {
   async ownerOfActiveStream(runId) {
     const [thread] = await this.db.select({
       actorRef: this.t.agentThread.actorRef
-    }).from(this.t.agentThread).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.t.agentThread.activeStreamId, runId), (0, import_drizzle_orm3.isNull)(this.t.agentThread.deletedAt)));
+    }).from(this.t.agentThread).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentThread.activeStreamId, runId), (0, import_drizzle_orm4.isNull)(this.t.agentThread.deletedAt)));
     return thread?.actorRef ?? null;
   }
   async setTitle(threadId, title) {
     await this.db.update(this.t.agentThread).set({
       title,
       updatedAt: /* @__PURE__ */ new Date()
-    }).where((0, import_drizzle_orm3.eq)(this.t.agentThread.id, threadId));
+    }).where((0, import_drizzle_orm4.eq)(this.t.agentThread.id, threadId));
   }
   async promoteThread(threadId) {
     await this.db.update(this.t.agentThread).set({
       transient: false,
       updatedAt: /* @__PURE__ */ new Date()
-    }).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.t.agentThread.id, threadId), (0, import_drizzle_orm3.eq)(this.t.agentThread.transient, true)));
+    }).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentThread.id, threadId), (0, import_drizzle_orm4.eq)(this.t.agentThread.transient, true)));
   }
   /** Who holds the thread's stream right now, deleted or not. */
   async activeHolder(threadId) {
     const [thread] = await this.db.select({
       activeStreamId: this.t.agentThread.activeStreamId
-    }).from(this.t.agentThread).where((0, import_drizzle_orm3.eq)(this.t.agentThread.id, threadId));
+    }).from(this.t.agentThread).where((0, import_drizzle_orm4.eq)(this.t.agentThread.id, threadId));
     return thread?.activeStreamId ?? null;
   }
   /**
@@ -1347,18 +2049,18 @@ var DrizzleAgentStore = class {
   messageOrder() {
     const message = this.t.agentMessage;
     return [
-      (0, import_drizzle_orm3.asc)(import_drizzle_orm3.sql`coalesce(${message.seq}, 0)`),
-      (0, import_drizzle_orm3.asc)(message.createdAt),
-      (0, import_drizzle_orm3.asc)(message.id)
+      (0, import_drizzle_orm4.asc)(import_drizzle_orm4.sql`coalesce(${message.seq}, 0)`),
+      (0, import_drizzle_orm4.asc)(message.createdAt),
+      (0, import_drizzle_orm4.asc)(message.id)
     ];
   }
   /** {@link messageOrder}, newest first. */
   messageOrderNewestFirst() {
     const message = this.t.agentMessage;
     return [
-      (0, import_drizzle_orm3.desc)(import_drizzle_orm3.sql`coalesce(${message.seq}, 0)`),
-      (0, import_drizzle_orm3.desc)(message.createdAt),
-      (0, import_drizzle_orm3.desc)(message.id)
+      (0, import_drizzle_orm4.desc)(import_drizzle_orm4.sql`coalesce(${message.seq}, 0)`),
+      (0, import_drizzle_orm4.desc)(message.createdAt),
+      (0, import_drizzle_orm4.desc)(message.id)
     ];
   }
   /**
@@ -1367,15 +2069,15 @@ var DrizzleAgentStore = class {
   */
   async nextMessageSeq(threadId) {
     const [row] = await this.db.select({
-      last: (0, import_drizzle_orm3.max)(this.t.agentMessage.seq)
-    }).from(this.t.agentMessage).where((0, import_drizzle_orm3.eq)(this.t.agentMessage.threadId, threadId));
+      last: (0, import_drizzle_orm4.max)(this.t.agentMessage.seq)
+    }).from(this.t.agentMessage).where((0, import_drizzle_orm4.eq)(this.t.agentMessage.threadId, threadId));
     return Number(row?.last ?? 0) + 1;
   }
   /** The run streaming the thread, or `null` — a projection of the one column. */
   async activeRunForThread(threadId) {
     const [thread] = await this.db.select({
       activeStreamId: this.t.agentThread.activeStreamId
-    }).from(this.t.agentThread).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.t.agentThread.id, threadId), (0, import_drizzle_orm3.isNull)(this.t.agentThread.deletedAt)));
+    }).from(this.t.agentThread).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentThread.id, threadId), (0, import_drizzle_orm4.isNull)(this.t.agentThread.deletedAt)));
     return thread?.activeStreamId ?? null;
   }
   /**
@@ -1384,15 +2086,15 @@ var DrizzleAgentStore = class {
   */
   async claimActiveStream(threadId, runId, options = {}) {
     const holders = [
-      (0, import_drizzle_orm3.isNull)(this.t.agentThread.activeStreamId),
-      (0, import_drizzle_orm3.eq)(this.t.agentThread.activeStreamId, runId),
+      (0, import_drizzle_orm4.isNull)(this.t.agentThread.activeStreamId),
+      (0, import_drizzle_orm4.eq)(this.t.agentThread.activeStreamId, runId),
       ...options.replacing !== void 0 ? [
-        (0, import_drizzle_orm3.eq)(this.t.agentThread.activeStreamId, options.replacing)
+        (0, import_drizzle_orm4.eq)(this.t.agentThread.activeStreamId, options.replacing)
       ] : []
     ];
     const claimed = await affectedRows(this.dialect, this.db.update(this.t.agentThread).set({
       activeStreamId: runId
-    }).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.t.agentThread.id, threadId), (0, import_drizzle_orm3.or)(...holders))), this.t.agentThread.id);
+    }).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentThread.id, threadId), (0, import_drizzle_orm4.or)(...holders))), this.t.agentThread.id);
     if (claimed > 0) {
       return true;
     }
@@ -1401,21 +2103,22 @@ var DrizzleAgentStore = class {
   async releaseActiveStream(threadId, runId) {
     const released = await affectedRows(this.dialect, this.db.update(this.t.agentThread).set({
       activeStreamId: null
-    }).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.t.agentThread.id, threadId), (0, import_drizzle_orm3.eq)(this.t.agentThread.activeStreamId, runId))), this.t.agentThread.id);
+    }).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentThread.id, threadId), (0, import_drizzle_orm4.eq)(this.t.agentThread.activeStreamId, runId))), this.t.agentThread.id);
     return released > 0;
   }
   async enqueueMessage(input) {
     const now = /* @__PURE__ */ new Date();
     const [edge] = await this.db.select({
-      first: (0, import_drizzle_orm3.min)(this.t.agentQueuedMessage.position),
-      last: (0, import_drizzle_orm3.max)(this.t.agentQueuedMessage.position)
-    }).from(this.t.agentQueuedMessage).where((0, import_drizzle_orm3.eq)(this.t.agentQueuedMessage.threadId, input.threadId));
+      first: (0, import_drizzle_orm4.min)(this.t.agentQueuedMessage.position),
+      last: (0, import_drizzle_orm4.max)(this.t.agentQueuedMessage.position)
+    }).from(this.t.agentQueuedMessage).where((0, import_drizzle_orm4.eq)(this.t.agentQueuedMessage.threadId, input.threadId));
     const position = input.at === "head" ? (edge?.first ?? 1) - 1 : (edge?.last ?? -1) + 1;
     const row = {
       id: crypto.randomUUID(),
       threadId: input.threadId,
       actor: input.actor,
       content: input.content,
+      uiCapabilities: input.uiCapabilities ?? null,
       attachments: input.attachments !== void 0 && input.attachments.length > 0 ? input.attachments : null,
       agentName: input.agentName ?? null,
       persona: input.persona ?? null,
@@ -1430,11 +2133,11 @@ var DrizzleAgentStore = class {
     return toQueuedMessage(row);
   }
   async listQueue(threadId) {
-    const rows = await this.db.select().from(this.t.agentQueuedMessage).where((0, import_drizzle_orm3.eq)(this.t.agentQueuedMessage.threadId, threadId)).orderBy((0, import_drizzle_orm3.asc)(this.t.agentQueuedMessage.position), (0, import_drizzle_orm3.asc)(this.t.agentQueuedMessage.createdAt));
+    const rows = await this.db.select().from(this.t.agentQueuedMessage).where((0, import_drizzle_orm4.eq)(this.t.agentQueuedMessage.threadId, threadId)).orderBy((0, import_drizzle_orm4.asc)(this.t.agentQueuedMessage.position), (0, import_drizzle_orm4.asc)(this.t.agentQueuedMessage.createdAt));
     return rows.map(toQueuedMessage);
   }
   async getQueuedMessage(id) {
-    const [row] = await this.db.select().from(this.t.agentQueuedMessage).where((0, import_drizzle_orm3.eq)(this.t.agentQueuedMessage.id, id));
+    const [row] = await this.db.select().from(this.t.agentQueuedMessage).where((0, import_drizzle_orm4.eq)(this.t.agentQueuedMessage.id, id));
     return row === void 0 ? null : toQueuedMessage(row);
   }
   async updateQueuedMessage(id, patch) {
@@ -1450,7 +2153,7 @@ var DrizzleAgentStore = class {
     if (patch.interrupt !== void 0) {
       updates.interrupt = patch.interrupt;
     }
-    await this.db.update(this.t.agentQueuedMessage).set(updates).where((0, import_drizzle_orm3.eq)(this.t.agentQueuedMessage.id, id));
+    await this.db.update(this.t.agentQueuedMessage).set(updates).where((0, import_drizzle_orm4.eq)(this.t.agentQueuedMessage.id, id));
     return this.getQueuedMessage(id);
   }
   /** Rewrites the thread's positions as 0..n-1 in the new order — a queue is a handful of rows. */
@@ -1465,32 +2168,32 @@ var DrizzleAgentStore = class {
     for (const [position, message] of order.entries()) {
       await this.db.update(this.t.agentQueuedMessage).set({
         position
-      }).where((0, import_drizzle_orm3.eq)(this.t.agentQueuedMessage.id, message.id));
+      }).where((0, import_drizzle_orm4.eq)(this.t.agentQueuedMessage.id, message.id));
     }
     return true;
   }
   async removeQueuedMessage(id) {
-    const removed = await affectedRows(this.dialect, this.db.delete(this.t.agentQueuedMessage).where((0, import_drizzle_orm3.eq)(this.t.agentQueuedMessage.id, id)), this.t.agentQueuedMessage.id);
+    const removed = await affectedRows(this.dialect, this.db.delete(this.t.agentQueuedMessage).where((0, import_drizzle_orm4.eq)(this.t.agentQueuedMessage.id, id)), this.t.agentQueuedMessage.id);
     return removed > 0;
   }
   async clearQueue(threadId) {
-    return affectedRows(this.dialect, this.db.delete(this.t.agentQueuedMessage).where((0, import_drizzle_orm3.eq)(this.t.agentQueuedMessage.threadId, threadId)), this.t.agentQueuedMessage.id);
+    return affectedRows(this.dialect, this.db.delete(this.t.agentQueuedMessage).where((0, import_drizzle_orm4.eq)(this.t.agentQueuedMessage.threadId, threadId)), this.t.agentQueuedMessage.id);
   }
   async queuePause(threadId) {
     const [thread] = await this.db.select({
       queuePause: this.t.agentThread.queuePause
-    }).from(this.t.agentThread).where((0, import_drizzle_orm3.eq)(this.t.agentThread.id, threadId));
+    }).from(this.t.agentThread).where((0, import_drizzle_orm4.eq)(this.t.agentThread.id, threadId));
     return thread?.queuePause ?? null;
   }
   async setQueuePause(threadId, pause) {
     await this.db.update(this.t.agentThread).set({
       queuePause: pause
-    }).where((0, import_drizzle_orm3.eq)(this.t.agentThread.id, threadId));
+    }).where((0, import_drizzle_orm4.eq)(this.t.agentThread.id, threadId));
   }
   async setActiveStream(threadId, runId) {
     await this.db.update(this.t.agentThread).set({
       activeStreamId: runId
-    }).where((0, import_drizzle_orm3.eq)(this.t.agentThread.id, threadId));
+    }).where((0, import_drizzle_orm4.eq)(this.t.agentThread.id, threadId));
   }
   /**
   * Patch a thread's `title` and/or `defaultAgent`. Each field is only touched when PRESENT in
@@ -1516,7 +2219,7 @@ var DrizzleAgentStore = class {
       return;
     }
     updates.updatedAt = /* @__PURE__ */ new Date();
-    await this.db.update(this.t.agentThread).set(updates).where((0, import_drizzle_orm3.eq)(this.t.agentThread.id, threadId));
+    await this.db.update(this.t.agentThread).set(updates).where((0, import_drizzle_orm4.eq)(this.t.agentThread.id, threadId));
   }
   /**
   * The thread's default agent, projected — the caller wants one nullable scalar to decide which
@@ -1527,20 +2230,20 @@ var DrizzleAgentStore = class {
   async modelForThread(threadId) {
     const [thread] = await this.db.select({
       model: this.t.agentThread.model
-    }).from(this.t.agentThread).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.t.agentThread.id, threadId), (0, import_drizzle_orm3.isNull)(this.t.agentThread.deletedAt)));
+    }).from(this.t.agentThread).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentThread.id, threadId), (0, import_drizzle_orm4.isNull)(this.t.agentThread.deletedAt)));
     return thread?.model ?? null;
   }
   /** The thread's pinned persona, projected like {@link defaultAgentForThread}. */
   async personaForThread(threadId) {
     const [thread] = await this.db.select({
       persona: this.t.agentThread.persona
-    }).from(agentThread).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.t.agentThread.id, threadId), (0, import_drizzle_orm3.isNull)(this.t.agentThread.deletedAt)));
+    }).from(agentThread).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentThread.id, threadId), (0, import_drizzle_orm4.isNull)(this.t.agentThread.deletedAt)));
     return thread?.persona ?? null;
   }
   async defaultAgentForThread(threadId) {
     const [thread] = await this.db.select({
       defaultAgent: this.t.agentThread.defaultAgent
-    }).from(this.t.agentThread).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.t.agentThread.id, threadId), (0, import_drizzle_orm3.isNull)(this.t.agentThread.deletedAt)));
+    }).from(this.t.agentThread).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentThread.id, threadId), (0, import_drizzle_orm4.isNull)(this.t.agentThread.deletedAt)));
     return thread?.defaultAgent ?? null;
   }
   /**
@@ -1582,16 +2285,16 @@ var DrizzleAgentStore = class {
     if (end.errorMessage !== void 0) {
       updates.errorMessage = end.errorMessage;
     }
-    await this.db.update(this.t.agentRun).set(updates).where((0, import_drizzle_orm3.eq)(this.t.agentRun.id, end.runId));
+    await this.db.update(this.t.agentRun).set(updates).where((0, import_drizzle_orm4.eq)(this.t.agentRun.id, end.runId));
   }
   /** Bump the run's llm-step retry counter. Atomic `retries = retries + 1`, no read-modify-write. */
   async bumpRunRetries(runId) {
     await this.db.update(this.t.agentRun).set({
-      retries: import_drizzle_orm3.sql`${this.t.agentRun.retries} + 1`
-    }).where((0, import_drizzle_orm3.eq)(this.t.agentRun.id, runId));
+      retries: import_drizzle_orm4.sql`${this.t.agentRun.retries} + 1`
+    }).where((0, import_drizzle_orm4.eq)(this.t.agentRun.id, runId));
   }
   async appendMessage(input) {
-    const [thread] = await this.db.select().from(this.t.agentThread).where((0, import_drizzle_orm3.eq)(this.t.agentThread.id, input.threadId));
+    const [thread] = await this.db.select().from(this.t.agentThread).where((0, import_drizzle_orm4.eq)(this.t.agentThread.id, input.threadId));
     if (thread === void 0) {
       throw new Error(`thread ${input.threadId} not found`);
     }
@@ -1601,6 +2304,7 @@ var DrizzleAgentStore = class {
       threadId: input.threadId,
       role: input.role,
       content: input.content,
+      actionProposalOutcome: input.actionProposalOutcome ? (0, import_nestjs_agent_core4.canonicalActionProposalJson)(input.actionProposalOutcome) : null,
       toolCalls: input.toolCalls ?? null,
       toolResults: input.toolResults ?? null,
       attachments: input.attachments ?? null,
@@ -1619,43 +2323,44 @@ var DrizzleAgentStore = class {
     await this.db.insert(this.t.agentMessage).values(message);
     await this.db.update(this.t.agentThread).set({
       updatedAt: now
-    }).where((0, import_drizzle_orm3.eq)(this.t.agentThread.id, input.threadId));
+    }).where((0, import_drizzle_orm4.eq)(this.t.agentThread.id, input.threadId));
     return this.toStoredMessage(message);
   }
   async setMessageToolResults(messageId, results) {
     await this.db.update(this.t.agentMessage).set({
       toolResults: results
-    }).where((0, import_drizzle_orm3.eq)(this.t.agentMessage.id, messageId));
+    }).where((0, import_drizzle_orm4.eq)(this.t.agentMessage.id, messageId));
   }
   async setMessageUi(messageId, ui) {
     await this.db.update(this.t.agentMessage).set({
       ui: ui.length > 0 ? ui : null
-    }).where((0, import_drizzle_orm3.eq)(this.t.agentMessage.id, messageId));
+    }).where((0, import_drizzle_orm4.eq)(this.t.agentMessage.id, messageId));
   }
   async threadOfMessage(messageId) {
     const [row] = await this.db.select({
       threadId: this.t.agentMessage.threadId
-    }).from(this.t.agentMessage).where((0, import_drizzle_orm3.eq)(this.t.agentMessage.id, messageId)).limit(1);
+    }).from(this.t.agentMessage).where((0, import_drizzle_orm4.eq)(this.t.agentMessage.id, messageId)).limit(1);
     return row?.threadId ?? null;
   }
   async setMessageFeedback(messageId, feedback) {
     await this.db.update(this.t.agentMessage).set({
       feedback
-    }).where((0, import_drizzle_orm3.eq)(this.t.agentMessage.id, messageId));
+    }).where((0, import_drizzle_orm4.eq)(this.t.agentMessage.id, messageId));
   }
   async truncateFrom(threadId, messageId) {
-    const messages = await this.db.select().from(this.t.agentMessage).where((0, import_drizzle_orm3.eq)(this.t.agentMessage.threadId, threadId)).orderBy(...this.messageOrder());
+    const messages = await this.db.select().from(this.t.agentMessage).where((0, import_drizzle_orm4.eq)(this.t.agentMessage.threadId, threadId)).orderBy(...this.messageOrder());
     const cutoff = messages.findIndex((message) => message.id === messageId);
     if (cutoff < 0) {
       return;
     }
     const doomedIds = messages.slice(cutoff).map((message) => message.id);
-    await this.db.delete(this.t.agentToolCall).where((0, import_drizzle_orm3.inArray)(this.t.agentToolCall.messageId, doomedIds));
-    await this.db.delete(this.t.agentMessage).where((0, import_drizzle_orm3.inArray)(this.t.agentMessage.id, doomedIds));
+    await this.db.delete(this.t.agentToolCall).where((0, import_drizzle_orm4.inArray)(this.t.agentToolCall.messageId, doomedIds));
+    await this.db.delete(this.t.agentMessage).where((0, import_drizzle_orm4.inArray)(this.t.agentMessage.id, doomedIds));
   }
   async recordToolCall(input) {
     await this.db.insert(this.t.agentToolCall).values({
       id: input.toolCallId,
+      proposalId: input.proposalId ?? null,
       messageId: input.messageId,
       toolName: input.toolName,
       toolType: input.toolType,
@@ -1669,6 +2374,7 @@ var DrizzleAgentStore = class {
       executedAt: null,
       runId: input.runId ?? null,
       approver: input.approver ?? null,
+      confirmation: input.confirmation ?? null,
       expiresAt: input.expiresAt !== void 0 ? new Date(input.expiresAt) : null,
       remember: null,
       decidedVia: null
@@ -1699,7 +2405,7 @@ var DrizzleAgentStore = class {
     if (input.status === "executed" || input.status === "auto_executed") {
       updates.executedAt = /* @__PURE__ */ new Date();
     }
-    await this.db.update(this.t.agentToolCall).set(updates).where((0, import_drizzle_orm3.eq)(this.t.agentToolCall.id, input.toolCallId));
+    await this.db.update(this.t.agentToolCall).set(updates).where((0, import_drizzle_orm4.eq)(this.t.agentToolCall.id, input.toolCallId));
   }
   async toolCallOutcomes(toolCallIds) {
     if (toolCallIds.length === 0) {
@@ -1710,7 +2416,7 @@ var DrizzleAgentStore = class {
       status: this.t.agentToolCall.status,
       output: this.t.agentToolCall.output,
       error: this.t.agentToolCall.error
-    }).from(this.t.agentToolCall).where((0, import_drizzle_orm3.inArray)(this.t.agentToolCall.id, [
+    }).from(this.t.agentToolCall).where((0, import_drizzle_orm4.inArray)(this.t.agentToolCall.id, [
       ...toolCallIds
     ]));
     return rows.map((row) => ({
@@ -1725,7 +2431,7 @@ var DrizzleAgentStore = class {
     }));
   }
   async failUnsettledToolCalls(runId, error) {
-    const pending = (0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.t.agentToolCall.runId, runId), (0, import_drizzle_orm3.eq)(this.t.agentToolCall.status, "pending_approval"));
+    const pending = (0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentToolCall.runId, runId), (0, import_drizzle_orm4.eq)(this.t.agentToolCall.status, "pending_approval"));
     const rows = await this.db.select({
       id: this.t.agentToolCall.id
     }).from(this.t.agentToolCall).where(pending);
@@ -1758,10 +2464,10 @@ var DrizzleAgentStore = class {
     }
     const rows = await this.db.select({
       attachments: this.t.agentMessage.attachments
-    }).from(this.t.agentMessage).innerJoin(this.t.agentThread, (0, import_drizzle_orm3.eq)(this.t.agentMessage.threadId, this.t.agentThread.id)).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.t.agentThread.actorRef, actorRef), (0, import_drizzle_orm3.isNotNull)(this.t.agentMessage.attachments)));
+    }).from(this.t.agentMessage).innerJoin(this.t.agentThread, (0, import_drizzle_orm4.eq)(this.t.agentMessage.threadId, this.t.agentThread.id)).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentThread.actorRef, actorRef), (0, import_drizzle_orm4.isNotNull)(this.t.agentMessage.attachments)));
     const queued = await this.db.select({
       attachments: this.t.agentQueuedMessage.attachments
-    }).from(this.t.agentQueuedMessage).innerJoin(this.t.agentThread, (0, import_drizzle_orm3.eq)(this.t.agentQueuedMessage.threadId, this.t.agentThread.id)).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.t.agentThread.actorRef, actorRef), (0, import_drizzle_orm3.isNotNull)(this.t.agentQueuedMessage.attachments)));
+    }).from(this.t.agentQueuedMessage).innerJoin(this.t.agentThread, (0, import_drizzle_orm4.eq)(this.t.agentQueuedMessage.threadId, this.t.agentThread.id)).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentThread.actorRef, actorRef), (0, import_drizzle_orm4.isNotNull)(this.t.agentQueuedMessage.attachments)));
     const wanted = new Set(mediaIds);
     const found = /* @__PURE__ */ new Set();
     for (const row of [
@@ -1800,7 +2506,7 @@ var DrizzleAgentStore = class {
   async usageBetween(actorRef, fromDay, toDay) {
     const start = /* @__PURE__ */ new Date(`${fromDay}T00:00:00.000Z`);
     const end = /* @__PURE__ */ new Date(`${toDay}T23:59:59.999Z`);
-    const rows = await this.db.select().from(this.t.agentTokenUsage).where((0, import_drizzle_orm3.and)((0, import_drizzle_orm3.eq)(this.t.agentTokenUsage.actorRef, actorRef), (0, import_drizzle_orm3.gte)(this.t.agentTokenUsage.createdAt, start), (0, import_drizzle_orm3.lte)(this.t.agentTokenUsage.createdAt, end)));
+    const rows = await this.db.select().from(this.t.agentTokenUsage).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentTokenUsage.actorRef, actorRef), (0, import_drizzle_orm4.gte)(this.t.agentTokenUsage.createdAt, start), (0, import_drizzle_orm4.lte)(this.t.agentTokenUsage.createdAt, end)));
     const usedTokens = rows.reduce((sum2, row) => sum2 + row.inputTokens + row.outputTokens, 0);
     const costUsd = rows.reduce((sum2, row) => sum2 + (row.costUsd ?? 0), 0);
     return {
@@ -1826,7 +2532,12 @@ var DrizzleAgentStore = class {
     };
   }
   toStoredMessage(message) {
+    const outcome = message.actionProposalOutcome ? JSON.parse(message.actionProposalOutcome) : void 0;
     return {
+      ...outcome ? {
+        actionProposalOutcome: outcome,
+        ui: outcome.ui
+      } : {},
       id: message.id,
       role: message.role,
       content: message.content,
@@ -1872,6 +2583,9 @@ var DrizzleAgentStore = class {
 };
 function toQueuedMessage(row) {
   return {
+    ...row.uiCapabilities !== null ? {
+      uiCapabilities: row.uiCapabilities
+    } : {},
     id: row.id,
     threadId: row.threadId,
     actor: row.actor,
@@ -1901,8 +2615,8 @@ function toQueuedMessage(row) {
 __name(toQueuedMessage, "toQueuedMessage");
 
 // src/drizzle-governance-queries.ts
-var import_nestjs_agent_core2 = require("@dudousxd/nestjs-agent-core");
-var import_drizzle_orm4 = require("drizzle-orm");
+var import_nestjs_agent_core5 = require("@dudousxd/nestjs-agent-core");
+var import_drizzle_orm5 = require("drizzle-orm");
 var UNCLASSIFIED_ERROR_CODE = "unknown";
 var DEFAULT_AGENT_BUCKET = "(default)";
 var TOOL_CALL_STATUSES = [
@@ -1937,14 +2651,14 @@ function isRunStatus(value) {
 }
 __name(isRunStatus, "isRunStatus");
 function dayStartUtc(day) {
-  return (0, import_nestjs_agent_core2.dayBoundsUtc)({
+  return (0, import_nestjs_agent_core5.dayBoundsUtc)({
     fromDay: day,
     toDay: day
   }).start;
 }
 __name(dayStartUtc, "dayStartUtc");
 function dayEndUtc(day) {
-  return (0, import_nestjs_agent_core2.dayBoundsUtc)({
+  return (0, import_nestjs_agent_core5.dayBoundsUtc)({
     fromDay: day,
     toDay: day
   }).end;
@@ -2039,17 +2753,17 @@ var DrizzleGovernanceQueries = class {
     return pricing;
   }
   async usageInRange(range) {
-    const { start, end } = (0, import_nestjs_agent_core2.dayBoundsUtc)(range);
-    const rows = await this.db.select().from(this.t.agentTokenUsage).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.gte)(this.t.agentTokenUsage.createdAt, start), (0, import_drizzle_orm4.lte)(this.t.agentTokenUsage.createdAt, end)));
+    const { start, end } = (0, import_nestjs_agent_core5.dayBoundsUtc)(range);
+    const rows = await this.db.select().from(this.t.agentTokenUsage).where((0, import_drizzle_orm5.and)((0, import_drizzle_orm5.gte)(this.t.agentTokenUsage.createdAt, start), (0, import_drizzle_orm5.lte)(this.t.agentTokenUsage.createdAt, end)));
     return rows.map(toUsageInput);
   }
   async spendByModel(range) {
     const pricing = await this.loadPricing();
-    return (0, import_nestjs_agent_core2.bucketByModel)(await this.usageInRange(range), pricing);
+    return (0, import_nestjs_agent_core5.bucketByModel)(await this.usageInRange(range), pricing);
   }
   async spendByActor(range) {
     const pricing = await this.loadPricing();
-    return (0, import_nestjs_agent_core2.bucketByActor)(await this.usageInRange(range), pricing);
+    return (0, import_nestjs_agent_core5.bucketByActor)(await this.usageInRange(range), pricing);
   }
   /**
   * Top threads by spend within the range, highest cost first, capped at `limit`. Usage rows for a
@@ -2065,7 +2779,7 @@ var DrizzleGovernanceQueries = class {
     if (threadIds.length === 0) {
       return [];
     }
-    const threads = await this.db.select().from(this.t.agentThread).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.inArray)(this.t.agentThread.id, threadIds), (0, import_drizzle_orm4.isNull)(this.t.agentThread.deletedAt)));
+    const threads = await this.db.select().from(this.t.agentThread).where((0, import_drizzle_orm5.and)((0, import_drizzle_orm5.inArray)(this.t.agentThread.id, threadIds), (0, import_drizzle_orm5.isNull)(this.t.agentThread.deletedAt)));
     const threadsById = new Map(threads.map((thread) => [
       thread.id,
       {
@@ -2073,14 +2787,14 @@ var DrizzleGovernanceQueries = class {
         actorRef: thread.actorRef
       }
     ]));
-    return (0, import_nestjs_agent_core2.bucketByThread)(rows, pricing, threadsById, {
+    return (0, import_nestjs_agent_core5.bucketByThread)(rows, pricing, threadsById, {
       limit,
       includeUnknownThreads: false
     });
   }
   async usageTrend(range) {
     const pricing = await this.loadPricing();
-    return (0, import_nestjs_agent_core2.bucketUsageTrend)(await this.usageInRange(range), pricing);
+    return (0, import_nestjs_agent_core5.bucketUsageTrend)(await this.usageInRange(range), pricing);
   }
   async recentToolCalls(limit) {
     const rows = await this.db.select({
@@ -2091,7 +2805,7 @@ var DrizzleGovernanceQueries = class {
       threadId: this.t.agentMessage.threadId,
       createdAt: this.t.agentToolCall.createdAt,
       runId: this.t.agentToolCall.runId
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, (0, import_drizzle_orm4.eq)(this.t.agentToolCall.messageId, this.t.agentMessage.id)).orderBy((0, import_drizzle_orm4.desc)(this.t.agentToolCall.createdAt), (0, import_drizzle_orm4.desc)(this.t.agentToolCall.id)).limit(limit);
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, (0, import_drizzle_orm5.eq)(this.t.agentToolCall.messageId, this.t.agentMessage.id)).orderBy((0, import_drizzle_orm5.desc)(this.t.agentToolCall.createdAt), (0, import_drizzle_orm5.desc)(this.t.agentToolCall.id)).limit(limit);
     return rows.map((row) => ({
       toolCallId: row.toolCallId,
       toolName: row.toolName,
@@ -2120,8 +2834,8 @@ var DrizzleGovernanceQueries = class {
     }
     const messageCounts = await this.db.select({
       threadId: this.t.agentMessage.threadId,
-      value: (0, import_drizzle_orm4.count)()
-    }).from(this.t.agentMessage).where((0, import_drizzle_orm4.inArray)(this.t.agentMessage.threadId, threadIds)).groupBy(this.t.agentMessage.threadId);
+      value: (0, import_drizzle_orm5.count)()
+    }).from(this.t.agentMessage).where((0, import_drizzle_orm5.inArray)(this.t.agentMessage.threadId, threadIds)).groupBy(this.t.agentMessage.threadId);
     for (const row of messageCounts) {
       const bucket = rollups.get(row.threadId);
       if (bucket !== void 0) {
@@ -2130,9 +2844,9 @@ var DrizzleGovernanceQueries = class {
     }
     const usageTotals = await this.db.select({
       threadId: this.t.agentTokenUsage.threadId,
-      inputTokens: (0, import_drizzle_orm4.sum)(this.t.agentTokenUsage.inputTokens),
-      outputTokens: (0, import_drizzle_orm4.sum)(this.t.agentTokenUsage.outputTokens)
-    }).from(this.t.agentTokenUsage).where((0, import_drizzle_orm4.inArray)(this.t.agentTokenUsage.threadId, threadIds)).groupBy(this.t.agentTokenUsage.threadId);
+      inputTokens: (0, import_drizzle_orm5.sum)(this.t.agentTokenUsage.inputTokens),
+      outputTokens: (0, import_drizzle_orm5.sum)(this.t.agentTokenUsage.outputTokens)
+    }).from(this.t.agentTokenUsage).where((0, import_drizzle_orm5.inArray)(this.t.agentTokenUsage.threadId, threadIds)).groupBy(this.t.agentTokenUsage.threadId);
     for (const row of usageTotals) {
       const bucket = rollups.get(row.threadId);
       if (bucket !== void 0) {
@@ -2157,12 +2871,12 @@ var DrizzleGovernanceQueries = class {
     });
   }
   async recentThreads(limit) {
-    const threads = await this.db.select().from(this.t.agentThread).where((0, import_drizzle_orm4.isNull)(this.t.agentThread.deletedAt)).orderBy((0, import_drizzle_orm4.desc)(this.t.agentThread.updatedAt), (0, import_drizzle_orm4.desc)(this.t.agentThread.id)).limit(limit);
+    const threads = await this.db.select().from(this.t.agentThread).where((0, import_drizzle_orm5.isNull)(this.t.agentThread.deletedAt)).orderBy((0, import_drizzle_orm5.desc)(this.t.agentThread.updatedAt), (0, import_drizzle_orm5.desc)(this.t.agentThread.id)).limit(limit);
     return this.toThreadActivityRows(threads);
   }
   async runsInRange(range) {
-    const { start, end } = (0, import_nestjs_agent_core2.dayBoundsUtc)(range);
-    return this.db.select().from(this.t.agentRun).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.gte)(this.t.agentRun.startedAt, start), (0, import_drizzle_orm4.lte)(this.t.agentRun.startedAt, end)));
+    const { start, end } = (0, import_nestjs_agent_core5.dayBoundsUtc)(range);
+    return this.db.select().from(this.t.agentRun).where((0, import_drizzle_orm5.and)((0, import_drizzle_orm5.gte)(this.t.agentRun.startedAt, start), (0, import_drizzle_orm5.lte)(this.t.agentRun.startedAt, end)));
   }
   async runMetrics(range) {
     const runs = await this.runsInRange(range);
@@ -2218,8 +2932,8 @@ var DrizzleGovernanceQueries = class {
     return result;
   }
   async runErrors(range) {
-    const { start, end } = (0, import_nestjs_agent_core2.dayBoundsUtc)(range);
-    const runs = await this.db.select().from(this.t.agentRun).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.gte)(this.t.agentRun.startedAt, start), (0, import_drizzle_orm4.lte)(this.t.agentRun.startedAt, end), (0, import_drizzle_orm4.eq)(this.t.agentRun.status, "failed")));
+    const { start, end } = (0, import_nestjs_agent_core5.dayBoundsUtc)(range);
+    const runs = await this.db.select().from(this.t.agentRun).where((0, import_drizzle_orm5.and)((0, import_drizzle_orm5.gte)(this.t.agentRun.startedAt, start), (0, import_drizzle_orm5.lte)(this.t.agentRun.startedAt, end), (0, import_drizzle_orm5.eq)(this.t.agentRun.status, "failed")));
     const byError = /* @__PURE__ */ new Map();
     for (const run of runs) {
       const errorCode = run.errorCode ?? UNCLASSIFIED_ERROR_CODE;
@@ -2259,7 +2973,7 @@ var DrizzleGovernanceQueries = class {
     return result;
   }
   async recentRuns(limit) {
-    const runs = await this.db.select().from(this.t.agentRun).orderBy((0, import_drizzle_orm4.desc)(this.t.agentRun.startedAt), (0, import_drizzle_orm4.desc)(this.t.agentRun.id)).limit(limit);
+    const runs = await this.db.select().from(this.t.agentRun).orderBy((0, import_drizzle_orm5.desc)(this.t.agentRun.startedAt), (0, import_drizzle_orm5.desc)(this.t.agentRun.id)).limit(limit);
     return runs.map(toRecentRunRow);
   }
   /**
@@ -2278,7 +2992,7 @@ var DrizzleGovernanceQueries = class {
       agentName: this.t.agentMessage.agentName,
       requestedAt: this.t.agentToolCall.createdAt,
       runId: this.t.agentToolCall.runId
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, (0, import_drizzle_orm4.eq)(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, (0, import_drizzle_orm4.eq)(this.t.agentMessage.threadId, this.t.agentThread.id)).where((0, import_drizzle_orm4.eq)(this.t.agentToolCall.status, "pending_approval")).orderBy(this.t.agentToolCall.createdAt, this.t.agentToolCall.id).limit(limit);
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, (0, import_drizzle_orm5.eq)(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, (0, import_drizzle_orm5.eq)(this.t.agentMessage.threadId, this.t.agentThread.id)).where((0, import_drizzle_orm5.eq)(this.t.agentToolCall.status, "pending_approval")).orderBy(this.t.agentToolCall.createdAt, this.t.agentToolCall.id).limit(limit);
     return rows.map((row) => ({
       toolCallId: row.toolCallId,
       toolName: row.toolName,
@@ -2299,8 +3013,8 @@ var DrizzleGovernanceQueries = class {
   * `PERCENTILE_CONT` and one portable implementation beats three dialect-specific ones.
   */
   async toolStats(range) {
-    const { start, end } = (0, import_nestjs_agent_core2.dayBoundsUtc)(range);
-    const calls = await this.db.select().from(this.t.agentToolCall).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.gte)(this.t.agentToolCall.createdAt, start), (0, import_drizzle_orm4.lte)(this.t.agentToolCall.createdAt, end)));
+    const { start, end } = (0, import_nestjs_agent_core5.dayBoundsUtc)(range);
+    const calls = await this.db.select().from(this.t.agentToolCall).where((0, import_drizzle_orm5.and)((0, import_drizzle_orm5.gte)(this.t.agentToolCall.createdAt, start), (0, import_drizzle_orm5.lte)(this.t.agentToolCall.createdAt, end)));
     const byTool = /* @__PURE__ */ new Map();
     for (const call of calls) {
       const key2 = `${call.toolName} ${call.toolType}`;
@@ -2350,10 +3064,10 @@ var DrizzleGovernanceQueries = class {
     if (filters?.toolType !== void 0 && !isToolKind(filters.toolType)) {
       return emptyPage(query);
     }
-    const whereClause = (0, import_drizzle_orm4.and)(filters?.toolName !== void 0 ? (0, import_drizzle_orm4.eq)(this.t.agentToolCall.toolName, filters.toolName) : void 0, filters?.toolType !== void 0 && isToolKind(filters.toolType) ? (0, import_drizzle_orm4.eq)(this.t.agentToolCall.toolType, filters.toolType) : void 0, filters?.status !== void 0 && isToolCallStatus(filters.status) ? (0, import_drizzle_orm4.eq)(this.t.agentToolCall.status, filters.status) : void 0, filters?.threadId !== void 0 ? (0, import_drizzle_orm4.eq)(this.t.agentMessage.threadId, filters.threadId) : void 0, filters?.fromDay !== void 0 ? (0, import_drizzle_orm4.gte)(this.t.agentToolCall.createdAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? (0, import_drizzle_orm4.lte)(this.t.agentToolCall.createdAt, dayEndUtc(filters.toDay)) : void 0);
+    const whereClause = (0, import_drizzle_orm5.and)(filters?.toolName !== void 0 ? (0, import_drizzle_orm5.eq)(this.t.agentToolCall.toolName, filters.toolName) : void 0, filters?.toolType !== void 0 && isToolKind(filters.toolType) ? (0, import_drizzle_orm5.eq)(this.t.agentToolCall.toolType, filters.toolType) : void 0, filters?.status !== void 0 && isToolCallStatus(filters.status) ? (0, import_drizzle_orm5.eq)(this.t.agentToolCall.status, filters.status) : void 0, filters?.threadId !== void 0 ? (0, import_drizzle_orm5.eq)(this.t.agentMessage.threadId, filters.threadId) : void 0, filters?.fromDay !== void 0 ? (0, import_drizzle_orm5.gte)(this.t.agentToolCall.createdAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? (0, import_drizzle_orm5.lte)(this.t.agentToolCall.createdAt, dayEndUtc(filters.toDay)) : void 0);
     const [totalRow] = await this.db.select({
-      value: (0, import_drizzle_orm4.count)()
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, (0, import_drizzle_orm4.eq)(this.t.agentToolCall.messageId, this.t.agentMessage.id)).where(whereClause);
+      value: (0, import_drizzle_orm5.count)()
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, (0, import_drizzle_orm5.eq)(this.t.agentToolCall.messageId, this.t.agentMessage.id)).where(whereClause);
     const rows = await this.db.select({
       toolCallId: this.t.agentToolCall.id,
       toolName: this.t.agentToolCall.toolName,
@@ -2362,7 +3076,7 @@ var DrizzleGovernanceQueries = class {
       threadId: this.t.agentMessage.threadId,
       createdAt: this.t.agentToolCall.createdAt,
       runId: this.t.agentToolCall.runId
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, (0, import_drizzle_orm4.eq)(this.t.agentToolCall.messageId, this.t.agentMessage.id)).where(whereClause).orderBy((0, import_drizzle_orm4.desc)(this.t.agentToolCall.createdAt), (0, import_drizzle_orm4.desc)(this.t.agentToolCall.id)).limit(query.pageSize).offset((query.page - 1) * query.pageSize);
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, (0, import_drizzle_orm5.eq)(this.t.agentToolCall.messageId, this.t.agentMessage.id)).where(whereClause).orderBy((0, import_drizzle_orm5.desc)(this.t.agentToolCall.createdAt), (0, import_drizzle_orm5.desc)(this.t.agentToolCall.id)).limit(query.pageSize).offset((query.page - 1) * query.pageSize);
     return {
       rows: rows.map((row) => ({
         toolCallId: row.toolCallId,
@@ -2386,11 +3100,11 @@ var DrizzleGovernanceQueries = class {
   */
   async threadsPage(query) {
     const filters = query.where;
-    const whereClause = (0, import_drizzle_orm4.and)((0, import_drizzle_orm4.isNull)(this.t.agentThread.deletedAt), filters?.actorRef !== void 0 ? (0, import_drizzle_orm4.eq)(this.t.agentThread.actorRef, filters.actorRef) : void 0, filters?.title !== void 0 ? (0, import_drizzle_orm4.like)(import_drizzle_orm4.sql`lower(${this.t.agentThread.title})`, `%${filters.title.toLowerCase()}%`) : void 0, filters?.fromDay !== void 0 ? (0, import_drizzle_orm4.gte)(this.t.agentThread.updatedAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? (0, import_drizzle_orm4.lte)(this.t.agentThread.updatedAt, dayEndUtc(filters.toDay)) : void 0);
+    const whereClause = (0, import_drizzle_orm5.and)((0, import_drizzle_orm5.isNull)(this.t.agentThread.deletedAt), filters?.actorRef !== void 0 ? (0, import_drizzle_orm5.eq)(this.t.agentThread.actorRef, filters.actorRef) : void 0, filters?.title !== void 0 ? (0, import_drizzle_orm5.like)(import_drizzle_orm5.sql`lower(${this.t.agentThread.title})`, `%${filters.title.toLowerCase()}%`) : void 0, filters?.fromDay !== void 0 ? (0, import_drizzle_orm5.gte)(this.t.agentThread.updatedAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? (0, import_drizzle_orm5.lte)(this.t.agentThread.updatedAt, dayEndUtc(filters.toDay)) : void 0);
     const [totalRow] = await this.db.select({
-      value: (0, import_drizzle_orm4.count)()
+      value: (0, import_drizzle_orm5.count)()
     }).from(this.t.agentThread).where(whereClause);
-    const threads = await this.db.select().from(this.t.agentThread).where(whereClause).orderBy((0, import_drizzle_orm4.desc)(this.t.agentThread.updatedAt), (0, import_drizzle_orm4.desc)(this.t.agentThread.id)).limit(query.pageSize).offset((query.page - 1) * query.pageSize);
+    const threads = await this.db.select().from(this.t.agentThread).where(whereClause).orderBy((0, import_drizzle_orm5.desc)(this.t.agentThread.updatedAt), (0, import_drizzle_orm5.desc)(this.t.agentThread.id)).limit(query.pageSize).offset((query.page - 1) * query.pageSize);
     const rows = await this.toThreadActivityRows(threads);
     return {
       rows,
@@ -2408,11 +3122,11 @@ var DrizzleGovernanceQueries = class {
     if (filters?.status !== void 0 && !isRunStatus(filters.status)) {
       return emptyPage(query);
     }
-    const whereClause = (0, import_drizzle_orm4.and)(filters?.agentName !== void 0 ? (0, import_drizzle_orm4.eq)(this.t.agentRun.agentName, filters.agentName) : void 0, filters?.status !== void 0 && isRunStatus(filters.status) ? (0, import_drizzle_orm4.eq)(this.t.agentRun.status, filters.status) : void 0, filters?.errorCode !== void 0 ? (0, import_drizzle_orm4.eq)(this.t.agentRun.errorCode, filters.errorCode) : void 0, filters?.threadId !== void 0 ? (0, import_drizzle_orm4.eq)(this.t.agentRun.threadId, filters.threadId) : void 0, filters?.fromDay !== void 0 ? (0, import_drizzle_orm4.gte)(this.t.agentRun.startedAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? (0, import_drizzle_orm4.lte)(this.t.agentRun.startedAt, dayEndUtc(filters.toDay)) : void 0);
+    const whereClause = (0, import_drizzle_orm5.and)(filters?.agentName !== void 0 ? (0, import_drizzle_orm5.eq)(this.t.agentRun.agentName, filters.agentName) : void 0, filters?.status !== void 0 && isRunStatus(filters.status) ? (0, import_drizzle_orm5.eq)(this.t.agentRun.status, filters.status) : void 0, filters?.errorCode !== void 0 ? (0, import_drizzle_orm5.eq)(this.t.agentRun.errorCode, filters.errorCode) : void 0, filters?.threadId !== void 0 ? (0, import_drizzle_orm5.eq)(this.t.agentRun.threadId, filters.threadId) : void 0, filters?.fromDay !== void 0 ? (0, import_drizzle_orm5.gte)(this.t.agentRun.startedAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? (0, import_drizzle_orm5.lte)(this.t.agentRun.startedAt, dayEndUtc(filters.toDay)) : void 0);
     const [totalRow] = await this.db.select({
-      value: (0, import_drizzle_orm4.count)()
+      value: (0, import_drizzle_orm5.count)()
     }).from(this.t.agentRun).where(whereClause);
-    const runs = await this.db.select().from(this.t.agentRun).where(whereClause).orderBy((0, import_drizzle_orm4.desc)(this.t.agentRun.startedAt), (0, import_drizzle_orm4.desc)(this.t.agentRun.id)).limit(query.pageSize).offset((query.page - 1) * query.pageSize);
+    const runs = await this.db.select().from(this.t.agentRun).where(whereClause).orderBy((0, import_drizzle_orm5.desc)(this.t.agentRun.startedAt), (0, import_drizzle_orm5.desc)(this.t.agentRun.id)).limit(query.pageSize).offset((query.page - 1) * query.pageSize);
     return {
       rows: runs.map(toRecentRunRow),
       total: totalRow?.value ?? 0,
@@ -2432,10 +3146,10 @@ var DrizzleGovernanceQueries = class {
   */
   async approvalsPage(query) {
     const filters = query.where;
-    const whereClause = (0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(this.t.agentToolCall.status, "pending_approval"), filters?.toolName !== void 0 ? (0, import_drizzle_orm4.eq)(this.t.agentToolCall.toolName, filters.toolName) : void 0, filters?.threadId !== void 0 ? (0, import_drizzle_orm4.eq)(this.t.agentThread.id, filters.threadId) : void 0, filters?.actorRef !== void 0 ? (0, import_drizzle_orm4.eq)(this.t.agentThread.actorRef, filters.actorRef) : void 0, filters?.agentName !== void 0 ? (0, import_drizzle_orm4.eq)(this.t.agentMessage.agentName, filters.agentName) : void 0, filters?.fromDay !== void 0 ? (0, import_drizzle_orm4.gte)(this.t.agentToolCall.createdAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? (0, import_drizzle_orm4.lte)(this.t.agentToolCall.createdAt, dayEndUtc(filters.toDay)) : void 0);
+    const whereClause = (0, import_drizzle_orm5.and)((0, import_drizzle_orm5.eq)(this.t.agentToolCall.status, "pending_approval"), filters?.toolName !== void 0 ? (0, import_drizzle_orm5.eq)(this.t.agentToolCall.toolName, filters.toolName) : void 0, filters?.threadId !== void 0 ? (0, import_drizzle_orm5.eq)(this.t.agentThread.id, filters.threadId) : void 0, filters?.actorRef !== void 0 ? (0, import_drizzle_orm5.eq)(this.t.agentThread.actorRef, filters.actorRef) : void 0, filters?.agentName !== void 0 ? (0, import_drizzle_orm5.eq)(this.t.agentMessage.agentName, filters.agentName) : void 0, filters?.fromDay !== void 0 ? (0, import_drizzle_orm5.gte)(this.t.agentToolCall.createdAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? (0, import_drizzle_orm5.lte)(this.t.agentToolCall.createdAt, dayEndUtc(filters.toDay)) : void 0);
     const [totalRow] = await this.db.select({
-      value: (0, import_drizzle_orm4.count)()
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, (0, import_drizzle_orm4.eq)(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, (0, import_drizzle_orm4.eq)(this.t.agentMessage.threadId, this.t.agentThread.id)).where(whereClause);
+      value: (0, import_drizzle_orm5.count)()
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, (0, import_drizzle_orm5.eq)(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, (0, import_drizzle_orm5.eq)(this.t.agentMessage.threadId, this.t.agentThread.id)).where(whereClause);
     const rows = await this.db.select({
       toolCallId: this.t.agentToolCall.id,
       toolName: this.t.agentToolCall.toolName,
@@ -2446,7 +3160,7 @@ var DrizzleGovernanceQueries = class {
       agentName: this.t.agentMessage.agentName,
       requestedAt: this.t.agentToolCall.createdAt,
       runId: this.t.agentToolCall.runId
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, (0, import_drizzle_orm4.eq)(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, (0, import_drizzle_orm4.eq)(this.t.agentMessage.threadId, this.t.agentThread.id)).where(whereClause).orderBy((0, import_drizzle_orm4.asc)(this.t.agentToolCall.createdAt), (0, import_drizzle_orm4.asc)(this.t.agentToolCall.id)).limit(query.pageSize).offset((query.page - 1) * query.pageSize);
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, (0, import_drizzle_orm5.eq)(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, (0, import_drizzle_orm5.eq)(this.t.agentMessage.threadId, this.t.agentThread.id)).where(whereClause).orderBy((0, import_drizzle_orm5.asc)(this.t.agentToolCall.createdAt), (0, import_drizzle_orm5.asc)(this.t.agentToolCall.id)).limit(query.pageSize).offset((query.page - 1) * query.pageSize);
     return {
       rows: rows.map((row) => ({
         toolCallId: row.toolCallId,
@@ -2473,11 +3187,11 @@ var DrizzleGovernanceQueries = class {
     const [row] = await this.db.select({
       run: this.t.agentRun,
       thread: this.t.agentThread
-    }).from(this.t.agentRun).innerJoin(this.t.agentThread, (0, import_drizzle_orm4.eq)(this.t.agentRun.threadId, this.t.agentThread.id)).where((0, import_drizzle_orm4.eq)(this.t.agentRun.id, runId)).limit(1);
+    }).from(this.t.agentRun).innerJoin(this.t.agentThread, (0, import_drizzle_orm5.eq)(this.t.agentRun.threadId, this.t.agentThread.id)).where((0, import_drizzle_orm5.eq)(this.t.agentRun.id, runId)).limit(1);
     if (row === void 0) {
       return null;
     }
-    const toolCalls = await this.db.select().from(this.t.agentToolCall).where((0, import_drizzle_orm4.eq)(this.t.agentToolCall.runId, runId)).orderBy((0, import_drizzle_orm4.asc)(this.t.agentToolCall.createdAt), (0, import_drizzle_orm4.asc)(this.t.agentToolCall.id));
+    const toolCalls = await this.db.select().from(this.t.agentToolCall).where((0, import_drizzle_orm5.eq)(this.t.agentToolCall.runId, runId)).orderBy((0, import_drizzle_orm5.asc)(this.t.agentToolCall.createdAt), (0, import_drizzle_orm5.asc)(this.t.agentToolCall.id));
     return {
       run: toRecentRunRow(row.run),
       thread: {
@@ -2496,27 +3210,27 @@ var DrizzleGovernanceQueries = class {
   * message. Soft-deleted threads are returned with `deleted: true`; an audit still needs them.
   */
   async threadDetail(query) {
-    const [thread] = await this.db.select().from(this.t.agentThread).where((0, import_drizzle_orm4.eq)(this.t.agentThread.id, query.threadId)).limit(1);
+    const [thread] = await this.db.select().from(this.t.agentThread).where((0, import_drizzle_orm5.eq)(this.t.agentThread.id, query.threadId)).limit(1);
     if (thread === void 0) {
       return null;
     }
     const pricing = await this.loadPricing();
-    const usageRows = await this.db.select().from(this.t.agentTokenUsage).where((0, import_drizzle_orm4.eq)(this.t.agentTokenUsage.threadId, thread.id));
-    const usage = (0, import_nestjs_agent_core2.rollupThreadUsage)(usageRows.map(toUsageInput), pricing);
+    const usageRows = await this.db.select().from(this.t.agentTokenUsage).where((0, import_drizzle_orm5.eq)(this.t.agentTokenUsage.threadId, thread.id));
+    const usage = (0, import_nestjs_agent_core5.rollupThreadUsage)(usageRows.map(toUsageInput), pricing);
     const [messageCountRow] = await this.db.select({
-      value: (0, import_drizzle_orm4.count)()
-    }).from(this.t.agentMessage).where((0, import_drizzle_orm4.eq)(this.t.agentMessage.threadId, thread.id));
-    const messages = await this.db.select().from(this.t.agentMessage).where((0, import_drizzle_orm4.eq)(this.t.agentMessage.threadId, thread.id)).orderBy(
+      value: (0, import_drizzle_orm5.count)()
+    }).from(this.t.agentMessage).where((0, import_drizzle_orm5.eq)(this.t.agentMessage.threadId, thread.id));
+    const messages = await this.db.select().from(this.t.agentMessage).where((0, import_drizzle_orm5.eq)(this.t.agentMessage.threadId, thread.id)).orderBy(
       // Append order (see DrizzleAgentStore's message order), newest first.
-      (0, import_drizzle_orm4.desc)(import_drizzle_orm4.sql`coalesce(${this.t.agentMessage.seq}, 0)`),
-      (0, import_drizzle_orm4.desc)(this.t.agentMessage.createdAt),
-      (0, import_drizzle_orm4.desc)(this.t.agentMessage.id)
+      (0, import_drizzle_orm5.desc)(import_drizzle_orm5.sql`coalesce(${this.t.agentMessage.seq}, 0)`),
+      (0, import_drizzle_orm5.desc)(this.t.agentMessage.createdAt),
+      (0, import_drizzle_orm5.desc)(this.t.agentMessage.id)
     ).limit(query.messageLimit);
     const toolCallCounts = await this.toolCallCountsByMessage(messages.map((message) => message.id));
     const [runTotalRow] = await this.db.select({
-      value: (0, import_drizzle_orm4.count)()
-    }).from(this.t.agentRun).where((0, import_drizzle_orm4.eq)(this.t.agentRun.threadId, thread.id));
-    const runs = await this.db.select().from(this.t.agentRun).where((0, import_drizzle_orm4.eq)(this.t.agentRun.threadId, thread.id)).orderBy((0, import_drizzle_orm4.desc)(this.t.agentRun.startedAt), (0, import_drizzle_orm4.desc)(this.t.agentRun.id)).limit(query.runLimit);
+      value: (0, import_drizzle_orm5.count)()
+    }).from(this.t.agentRun).where((0, import_drizzle_orm5.eq)(this.t.agentRun.threadId, thread.id));
+    const runs = await this.db.select().from(this.t.agentRun).where((0, import_drizzle_orm5.eq)(this.t.agentRun.threadId, thread.id)).orderBy((0, import_drizzle_orm5.desc)(this.t.agentRun.startedAt), (0, import_drizzle_orm5.desc)(this.t.agentRun.id)).limit(query.runLimit);
     return {
       thread: {
         threadId: thread.id,
@@ -2531,7 +3245,7 @@ var DrizzleGovernanceQueries = class {
       runs: runs.map(toRecentRunRow),
       runTotal: runTotalRow?.value ?? 0,
       messages: messages.map((message) => {
-        const { content, truncated } = (0, import_nestjs_agent_core2.truncateDetailContent)(message.content);
+        const { content, truncated } = (0, import_nestjs_agent_core5.truncateDetailContent)(message.content);
         return {
           messageId: message.id,
           role: message.role,
@@ -2552,8 +3266,8 @@ var DrizzleGovernanceQueries = class {
     }
     const rows = await this.db.select({
       messageId: this.t.agentToolCall.messageId,
-      value: (0, import_drizzle_orm4.count)()
-    }).from(this.t.agentToolCall).where((0, import_drizzle_orm4.inArray)(this.t.agentToolCall.messageId, messageIds)).groupBy(this.t.agentToolCall.messageId);
+      value: (0, import_drizzle_orm5.count)()
+    }).from(this.t.agentToolCall).where((0, import_drizzle_orm5.inArray)(this.t.agentToolCall.messageId, messageIds)).groupBy(this.t.agentToolCall.messageId);
     for (const row of rows) {
       counts.set(row.messageId, row.value);
     }
@@ -2562,8 +3276,8 @@ var DrizzleGovernanceQueries = class {
 };
 
 // src/drizzle-memory-provider.ts
-var import_nestjs_agent_core3 = require("@dudousxd/nestjs-agent-core");
-var import_drizzle_orm5 = require("drizzle-orm");
+var import_nestjs_agent_core6 = require("@dudousxd/nestjs-agent-core");
+var import_drizzle_orm6 = require("drizzle-orm");
 function toRecord(row) {
   return {
     id: row.id,
@@ -2611,7 +3325,7 @@ var DrizzleMemoryProvider = class {
     if (scopes.length === 0) {
       return [];
     }
-    const rows = await this.db.select().from(this.t.agentMemory).where((0, import_drizzle_orm5.inArray)(this.t.agentMemory.scope, [
+    const rows = await this.db.select().from(this.t.agentMemory).where((0, import_drizzle_orm6.inArray)(this.t.agentMemory.scope, [
       ...scopes
     ]));
     return rows.map(toRecord);
@@ -2627,7 +3341,7 @@ var DrizzleMemoryProvider = class {
   * answer cannot be used to find out which memories exist about other people.
   */
   async forget({ id, ctx }) {
-    const deleted = await affectedRows(this.dialect, this.db.delete(this.t.agentMemory).where((0, import_drizzle_orm5.and)((0, import_drizzle_orm5.eq)(this.t.agentMemory.id, id), (0, import_drizzle_orm5.eq)(this.t.agentMemory.scope, (0, import_nestjs_agent_core3.actorScope)(ctx.actor)))), this.t.agentMemory.id);
+    const deleted = await affectedRows(this.dialect, this.db.delete(this.t.agentMemory).where((0, import_drizzle_orm6.and)((0, import_drizzle_orm6.eq)(this.t.agentMemory.id, id), (0, import_drizzle_orm6.eq)(this.t.agentMemory.scope, (0, import_nestjs_agent_core6.actorScope)(ctx.actor)))), this.t.agentMemory.id);
     return deleted > 0;
   }
   /**
@@ -2676,7 +3390,7 @@ var DrizzleMemoryProvider = class {
         memory.scope,
         memory.key
       ], set);
-      [row] = await this.db.select().from(memory).where((0, import_drizzle_orm5.and)((0, import_drizzle_orm5.eq)(memory.scope, scope), (0, import_drizzle_orm5.eq)(memory.key, key2)));
+      [row] = await this.db.select().from(memory).where((0, import_drizzle_orm6.and)((0, import_drizzle_orm6.eq)(memory.scope, scope), (0, import_drizzle_orm6.eq)(memory.key, key2)));
     } else {
       [row] = await insert.onConflictDoUpdate({
         target: [
@@ -2703,12 +3417,12 @@ var DrizzleMemoryProvider = class {
     const updated = await affectedRows(this.dialect, this.db.update(this.t.agentMemory).set({
       pinned,
       updatedAt: /* @__PURE__ */ new Date()
-    }).where((0, import_drizzle_orm5.eq)(this.t.agentMemory.id, id)), this.t.agentMemory.id);
+    }).where((0, import_drizzle_orm6.eq)(this.t.agentMemory.id, id)), this.t.agentMemory.id);
     return updated > 0;
   }
 };
 function assertAuthorMayWriteScope({ scope, origin, ctx }) {
-  const own = (0, import_nestjs_agent_core3.actorScope)(ctx.actor);
+  const own = (0, import_nestjs_agent_core6.actorScope)(ctx.actor);
   if (origin.author !== "human" && scope !== own) {
     throw new Error(`DrizzleMemoryProvider: refusing to write an agent-authored memory at "${scope}"; an agent may write only at "${own}"`);
   }
@@ -2716,7 +3430,7 @@ function assertAuthorMayWriteScope({ scope, origin, ctx }) {
 __name(assertAuthorMayWriteScope, "assertAuthorMayWriteScope");
 
 // src/drizzle-pricing-store.ts
-var import_drizzle_orm6 = require("drizzle-orm");
+var import_drizzle_orm7 = require("drizzle-orm");
 var DrizzlePricingStore = class {
   static {
     __name(this, "DrizzlePricingStore");
@@ -2732,7 +3446,7 @@ var DrizzlePricingStore = class {
   async upsertModelPrice(input) {
     await this.db.update(this.t.agentModelPricing).set({
       isCurrent: false
-    }).where((0, import_drizzle_orm6.and)((0, import_drizzle_orm6.eq)(this.t.agentModelPricing.modelId, input.modelId), (0, import_drizzle_orm6.eq)(this.t.agentModelPricing.isCurrent, true)));
+    }).where((0, import_drizzle_orm7.and)((0, import_drizzle_orm7.eq)(this.t.agentModelPricing.modelId, input.modelId), (0, import_drizzle_orm7.eq)(this.t.agentModelPricing.isCurrent, true)));
     await this.db.insert(this.t.agentModelPricing).values({
       id: crypto.randomUUID(),
       modelId: input.modelId,
@@ -2745,7 +3459,7 @@ var DrizzlePricingStore = class {
     });
   }
   async listCurrentPrices() {
-    const rows = await this.db.select().from(this.t.agentModelPricing).where((0, import_drizzle_orm6.eq)(this.t.agentModelPricing.isCurrent, true));
+    const rows = await this.db.select().from(this.t.agentModelPricing).where((0, import_drizzle_orm7.eq)(this.t.agentModelPricing.isCurrent, true));
     return rows.map((row) => ({
       modelId: row.modelId,
       inputPricePer1m: row.inputPricePer1m,
@@ -2762,8 +3476,8 @@ var DrizzlePricingStore = class {
 };
 
 // src/drizzle-token-stream-sink.ts
-var import_nestjs_agent_core4 = require("@dudousxd/nestjs-agent-core");
-var import_drizzle_orm7 = require("drizzle-orm");
+var import_nestjs_agent_core7 = require("@dudousxd/nestjs-agent-core");
+var import_drizzle_orm8 = require("drizzle-orm");
 var DrizzleStreamFrameTable = class {
   static {
     __name(this, "DrizzleStreamFrameTable");
@@ -2777,7 +3491,7 @@ var DrizzleStreamFrameTable = class {
     this.db = asBuilder(db);
   }
   async append(runId, row) {
-    await runSql(this.db, this.dialect, import_drizzle_orm7.sql`INSERT INTO agent_stream_frame (run_id, seq, frame, error, created_at)
+    await runSql(this.db, this.dialect, import_drizzle_orm8.sql`INSERT INTO agent_stream_frame (run_id, seq, frame, error, created_at)
           SELECT ${runId}, COALESCE(MAX(seq), 0) + 1, ${row.frame}, ${row.error}, ${row.createdAt}
           FROM agent_stream_frame WHERE run_id = ${runId}`);
   }
@@ -2786,31 +3500,31 @@ var DrizzleStreamFrameTable = class {
       seq: this.t.agentStreamFrame.seq,
       frame: this.t.agentStreamFrame.frame,
       error: this.t.agentStreamFrame.error
-    }).from(this.t.agentStreamFrame).where((0, import_drizzle_orm7.and)((0, import_drizzle_orm7.eq)(this.t.agentStreamFrame.runId, runId), (0, import_drizzle_orm7.gt)(this.t.agentStreamFrame.seq, after))).orderBy((0, import_drizzle_orm7.asc)(this.t.agentStreamFrame.seq)).limit(limit);
+    }).from(this.t.agentStreamFrame).where((0, import_drizzle_orm8.and)((0, import_drizzle_orm8.eq)(this.t.agentStreamFrame.runId, runId), (0, import_drizzle_orm8.gt)(this.t.agentStreamFrame.seq, after))).orderBy((0, import_drizzle_orm8.asc)(this.t.agentStreamFrame.seq)).limit(limit);
   }
   async has(runId) {
     const rows = await this.db.select({
       seq: this.t.agentStreamFrame.seq
-    }).from(this.t.agentStreamFrame).where((0, import_drizzle_orm7.eq)(this.t.agentStreamFrame.runId, runId)).limit(1);
+    }).from(this.t.agentStreamFrame).where((0, import_drizzle_orm8.eq)(this.t.agentStreamFrame.runId, runId)).limit(1);
     return rows.length > 0;
   }
   async remove(runIds) {
     if (runIds.length === 0) return;
-    await this.db.delete(this.t.agentStreamFrame).where((0, import_drizzle_orm7.inArray)(this.t.agentStreamFrame.runId, [
+    await this.db.delete(this.t.agentStreamFrame).where((0, import_drizzle_orm8.inArray)(this.t.agentStreamFrame.runId, [
       ...runIds
     ]));
   }
   async lapsedRuns(cutoff) {
     const rows = await this.db.select({
       runId: this.t.agentStreamFrame.runId
-    }).from(this.t.agentStreamFrame).groupBy(this.t.agentStreamFrame.runId).having((0, import_drizzle_orm7.lt)((0, import_drizzle_orm7.max)(this.t.agentStreamFrame.createdAt), cutoff));
+    }).from(this.t.agentStreamFrame).groupBy(this.t.agentStreamFrame.runId).having((0, import_drizzle_orm8.lt)((0, import_drizzle_orm8.max)(this.t.agentStreamFrame.createdAt), cutoff));
     return rows.map((row) => row.runId);
   }
   isUniqueViolation(error) {
     return isUniqueViolation(error);
   }
 };
-var DrizzleTokenStreamSink = class extends import_nestjs_agent_core4.SqlTokenStreamSink {
+var DrizzleTokenStreamSink = class extends import_nestjs_agent_core7.SqlTokenStreamSink {
   static {
     __name(this, "DrizzleTokenStreamSink");
   }
@@ -2820,7 +3534,7 @@ var DrizzleTokenStreamSink = class extends import_nestjs_agent_core4.SqlTokenStr
 };
 
 // src/drizzle-confirm-token-store.ts
-var import_drizzle_orm8 = require("drizzle-orm");
+var import_drizzle_orm9 = require("drizzle-orm");
 var DrizzleConfirmTokenStore = class {
   static {
     __name(this, "DrizzleConfirmTokenStore");
@@ -2850,18 +3564,18 @@ var DrizzleConfirmTokenStore = class {
     return inserted === 1;
   }
   async release(hash) {
-    await this.db.delete(this.t.agentConfirmToken).where((0, import_drizzle_orm8.eq)(this.t.agentConfirmToken.hash, hash));
+    await this.db.delete(this.t.agentConfirmToken).where((0, import_drizzle_orm9.eq)(this.t.agentConfirmToken.hash, hash));
   }
   async purgeExpired(now = Date.now()) {
     const table = this.t.agentConfirmToken;
-    return affectedRows(this.dialect, this.db.delete(table).where((0, import_drizzle_orm8.lt)(table.expiresAt, now)), table.hash);
+    return affectedRows(this.dialect, this.db.delete(table).where((0, import_drizzle_orm9.lt)(table.expiresAt, now)), table.hash);
   }
 };
 
 // src/drizzle-rag-ingestion-log.ts
 var import_node_diagnostics_channel = require("diagnostics_channel");
 var import_common = require("@nestjs/common");
-var import_drizzle_orm9 = require("drizzle-orm");
+var import_drizzle_orm10 = require("drizzle-orm");
 function _ts_decorate(decorators, target, key2, desc4) {
   var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key2) : desc4, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -2909,8 +3623,8 @@ function num(value) {
 }
 __name(num, "num");
 var RAG_INGESTION_LOG_PAGE_ORDER = [
-  (0, import_drizzle_orm9.desc)(ragIngestionLog.updatedAt),
-  (0, import_drizzle_orm9.asc)(ragIngestionLog.documentId)
+  (0, import_drizzle_orm10.desc)(ragIngestionLog.updatedAt),
+  (0, import_drizzle_orm10.asc)(ragIngestionLog.documentId)
 ];
 var DEFAULT_PAGE_SIZE = 200;
 var DEFAULT_BATCH_SIZE = 200;
@@ -2981,7 +3695,7 @@ var DrizzleRagIngestionLog = class _DrizzleRagIngestionLog {
   */
   async listPage(query = {}) {
     const [totalRow] = await this.db.select({
-      value: (0, import_drizzle_orm9.count)()
+      value: (0, import_drizzle_orm10.count)()
     }).from(this.t.ragIngestionLog).where(this.where(query));
     return {
       rows: await this.list(query),
@@ -3060,17 +3774,17 @@ var DrizzleRagIngestionLog = class _DrizzleRagIngestionLog {
   }
   /** The latest recorded outcome for one document, or null if it was never attempted. */
   async get(documentId) {
-    const [row] = await this.db.select().from(this.t.ragIngestionLog).where((0, import_drizzle_orm9.eq)(this.t.ragIngestionLog.documentId, documentId));
+    const [row] = await this.db.select().from(this.t.ragIngestionLog).where((0, import_drizzle_orm10.eq)(this.t.ragIngestionLog.documentId, documentId));
     return row ?? null;
   }
   /** Forget one document's record. Returns whether a row was actually removed. */
   async remove(documentId) {
-    const removed = await affectedRows(this.dialect, this.db.delete(this.t.ragIngestionLog).where((0, import_drizzle_orm9.eq)(this.t.ragIngestionLog.documentId, documentId)), this.t.ragIngestionLog.documentId);
+    const removed = await affectedRows(this.dialect, this.db.delete(this.t.ragIngestionLog).where((0, import_drizzle_orm10.eq)(this.t.ragIngestionLog.documentId, documentId)), this.t.ragIngestionLog.documentId);
     return removed > 0;
   }
   /** Forget every record for a collection — for when the collection itself is deleted. */
   async removeByCollection(collection) {
-    const removed = await affectedRows(this.dialect, this.db.delete(this.t.ragIngestionLog).where((0, import_drizzle_orm9.eq)(this.t.ragIngestionLog.collection, collection)), this.t.ragIngestionLog.documentId);
+    const removed = await affectedRows(this.dialect, this.db.delete(this.t.ragIngestionLog).where((0, import_drizzle_orm10.eq)(this.t.ragIngestionLog.collection, collection)), this.t.ragIngestionLog.documentId);
     return removed;
   }
   /**
@@ -3100,7 +3814,7 @@ var DrizzleRagIngestionLog = class _DrizzleRagIngestionLog {
     }
   }
   where(query) {
-    return (0, import_drizzle_orm9.and)(query.collection !== void 0 ? (0, import_drizzle_orm9.eq)(this.t.ragIngestionLog.collection, query.collection) : void 0, query.status !== void 0 ? (0, import_drizzle_orm9.eq)(this.t.ragIngestionLog.status, query.status) : void 0);
+    return (0, import_drizzle_orm10.and)(query.collection !== void 0 ? (0, import_drizzle_orm10.eq)(this.t.ragIngestionLog.collection, query.collection) : void 0, query.status !== void 0 ? (0, import_drizzle_orm10.eq)(this.t.ragIngestionLog.status, query.status) : void 0);
   }
   /**
   * The coordinates filter AND'd with "strictly after `cursor` in
@@ -3115,7 +3829,7 @@ var DrizzleRagIngestionLog = class _DrizzleRagIngestionLog {
     if (cursor === void 0) {
       return base;
     }
-    return (0, import_drizzle_orm9.and)(base, (0, import_drizzle_orm9.or)((0, import_drizzle_orm9.lt)(this.t.ragIngestionLog.updatedAt, cursor.updatedAt), (0, import_drizzle_orm9.and)((0, import_drizzle_orm9.eq)(this.t.ragIngestionLog.updatedAt, cursor.updatedAt), (0, import_drizzle_orm9.gt)(this.t.ragIngestionLog.documentId, cursor.documentId))));
+    return (0, import_drizzle_orm10.and)(base, (0, import_drizzle_orm10.or)((0, import_drizzle_orm10.lt)(this.t.ragIngestionLog.updatedAt, cursor.updatedAt), (0, import_drizzle_orm10.and)((0, import_drizzle_orm10.eq)(this.t.ragIngestionLog.updatedAt, cursor.updatedAt), (0, import_drizzle_orm10.gt)(this.t.ragIngestionLog.documentId, cursor.documentId))));
   }
   /**
   * Upsert one outcome. Keyed by document id so the row always reflects the *current* state — a
@@ -3188,7 +3902,7 @@ DrizzleRagIngestionLog = _ts_decorate([
 ], DrizzleRagIngestionLog);
 
 // src/drizzle-agent-store.module.ts
-var import_nestjs_agent_core5 = require("@dudousxd/nestjs-agent-core");
+var import_nestjs_agent_core8 = require("@dudousxd/nestjs-agent-core");
 var import_common2 = require("@nestjs/common");
 function _ts_decorate2(decorators, target, key2, desc4) {
   var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key2) : desc4, d;
@@ -3225,7 +3939,7 @@ var DrizzleAgentStoreModule = class _DrizzleAgentStoreModule {
           useFactory: /* @__PURE__ */ __name(() => new DrizzleAgentStore(options.db), "useFactory")
         },
         {
-          provide: import_nestjs_agent_core5.AGENT_STORE,
+          provide: import_nestjs_agent_core8.AGENT_STORE,
           useExisting: DrizzleAgentStore
         },
         // Exported, never bound to AGENT_MEMORY: that token's PRESENCE is what turns memory on, so
@@ -3242,21 +3956,21 @@ var DrizzleAgentStoreModule = class _DrizzleAgentStoreModule {
         // AGENT_PRICING_STORE: the host's own store when supplied, else the default Drizzle one.
         // DrizzleGovernanceQueries prices usage against whatever is bound here.
         options.pricingStore ? {
-          provide: import_nestjs_agent_core5.AGENT_PRICING_STORE,
+          provide: import_nestjs_agent_core8.AGENT_PRICING_STORE,
           useClass: options.pricingStore
         } : {
-          provide: import_nestjs_agent_core5.AGENT_PRICING_STORE,
+          provide: import_nestjs_agent_core8.AGENT_PRICING_STORE,
           useExisting: DrizzlePricingStore
         },
         {
           provide: DrizzleGovernanceQueries,
           useFactory: /* @__PURE__ */ __name((pricingStore) => new DrizzleGovernanceQueries(options.db, pricingStore), "useFactory"),
           inject: [
-            import_nestjs_agent_core5.AGENT_PRICING_STORE
+            import_nestjs_agent_core8.AGENT_PRICING_STORE
           ]
         },
         {
-          provide: import_nestjs_agent_core5.AGENT_GOVERNANCE_QUERIES,
+          provide: import_nestjs_agent_core8.AGENT_GOVERNANCE_QUERIES,
           useExisting: DrizzleGovernanceQueries
         },
         // What makes a `defineConfirmedTool` confirmation single use across replicas.
@@ -3265,7 +3979,7 @@ var DrizzleAgentStoreModule = class _DrizzleAgentStoreModule {
           useFactory: /* @__PURE__ */ __name(() => new DrizzleConfirmTokenStore(options.db), "useFactory")
         },
         {
-          provide: import_nestjs_agent_core5.AGENT_CONFIRM_TOKEN_STORE,
+          provide: import_nestjs_agent_core8.AGENT_CONFIRM_TOKEN_STORE,
           useExisting: DrizzleConfirmTokenStore
         }
       ],
@@ -3274,14 +3988,14 @@ var DrizzleAgentStoreModule = class _DrizzleAgentStoreModule {
           DrizzleRagIngestionLog
         ],
         DrizzleAgentStore,
-        import_nestjs_agent_core5.AGENT_STORE,
+        import_nestjs_agent_core8.AGENT_STORE,
         DrizzleMemoryProvider,
         DrizzleGovernanceQueries,
-        import_nestjs_agent_core5.AGENT_GOVERNANCE_QUERIES,
+        import_nestjs_agent_core8.AGENT_GOVERNANCE_QUERIES,
         DrizzlePricingStore,
-        import_nestjs_agent_core5.AGENT_PRICING_STORE,
+        import_nestjs_agent_core8.AGENT_PRICING_STORE,
         DrizzleConfirmTokenStore,
-        import_nestjs_agent_core5.AGENT_CONFIRM_TOKEN_STORE
+        import_nestjs_agent_core8.AGENT_CONFIRM_TOKEN_STORE
       ]
     };
   }
@@ -3291,6 +4005,7 @@ DrizzleAgentStoreModule = _ts_decorate2([
 ], DrizzleAgentStoreModule);
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  DrizzleActionProposalStore,
   DrizzleAgentStore,
   DrizzleAgentStoreModule,
   DrizzleConfirmTokenStore,
@@ -3301,6 +4016,7 @@ DrizzleAgentStoreModule = _ts_decorate2([
   DrizzleStreamFrameTable,
   DrizzleTokenStreamSink,
   RAG_INGESTION_LOG_PAGE_ORDER,
+  agentActionProposal,
   agentConfirmToken,
   agentDialectOf,
   agentMemory,