@dudousxd/nestjs-agent-store-drizzle 0.24.0 → 0.25.0

package/dist/index.js

@@ -40,6 +40,7 @@ var agentMessage = sqliteTable("agent_message", {
     onDelete: "cascade"
   }),
   role: text("role").$type().notNull(),
+  actionProposalOutcome: text("action_proposal_outcome"),
   content: text("content").notNull(),
   toolCalls: text("tool_calls", {
     mode: "json"
@@ -84,6 +85,7 @@ var agentMessage = sqliteTable("agent_message", {
   index("agent_message_thread_created_idx").on(table.threadId, table.createdAt)
 ]);
 var agentToolCall = sqliteTable("agent_tool_call", {
+  proposalId: text("proposal_id"),
   id: text("id").primaryKey(),
   messageId: text("message_id").notNull().references(() => agentMessage.id, {
     onDelete: "cascade"
@@ -108,6 +110,10 @@ var agentToolCall = sqliteTable("agent_tool_call", {
   }),
   /** The run (turn) this call belongs to, for a trace deep-link; null for a pre-rollout row. */
   runId: text("run_id"),
+  /** Resolved per-call wording; null falls back to presentation templates. */
+  confirmation: text("confirmation", {
+    mode: "json"
+  }).$type(),
   /** Who had to approve it (`requester` or a role); null for a call no policy put to anyone. */
   approver: text("approver"),
   /** When the approval request lapses; null → never. */
@@ -124,6 +130,9 @@ var agentToolCall = sqliteTable("agent_tool_call", {
   index("agent_tool_call_message_idx").on(table.messageId)
 ]);
 var agentQueuedMessage = sqliteTable("agent_queued_message", {
+  uiCapabilities: text("ui_capabilities", {
+    mode: "json"
+  }).$type(),
   id: text("id").primaryKey(),
   threadId: text("thread_id").notNull().references(() => agentThread.id, {
     onDelete: "cascade"
@@ -301,7 +310,35 @@ var agentStreamFrame = sqliteTable("agent_stream_frame", {
     ]
   })
 ]);
+var agentActionProposal = sqliteTable("agent_action_proposal", {
+  id: text("id").primaryKey(),
+  scopeKey: text("scope_key").notNull(),
+  decision: text("decision").$type().notNull(),
+  logicalSort: text("logical_sort").notNull(),
+  createFingerprint: text("create_fingerprint").notNull(),
+  proposal: text("proposal", {
+    mode: "json"
+  }).$type().notNull(),
+  version: integer("version").notNull().default(0),
+  executionStatus: text("execution_status").$type(),
+  leaseExpiresAt: integer("lease_expires_at"),
+  deliveryStatus: text("delivery_status"),
+  deliveryLeaseExpiresAt: integer("delivery_lease_expires_at"),
+  replacementGroupKey: text("replacement_group_key"),
+  outcomeIdKey: text("outcome_id_key"),
+  proposalExpiresAt: integer("proposal_expires_at"),
+  discoveryIndexVersion: integer("discovery_index_version").notNull().default(0),
+  createdAt: integer("created_at").notNull()
+}, (table) => [
+  index("agent_action_proposal_execution_idx").on(table.discoveryIndexVersion, table.executionStatus, table.leaseExpiresAt, table.createdAt),
+  index("agent_action_proposal_expiry_idx").on(table.discoveryIndexVersion, table.decision, table.proposalExpiresAt, table.createdAt),
+  index("agent_action_proposal_replacement_idx").on(table.scopeKey, table.replacementGroupKey, table.decision),
+  index("agent_action_proposal_delivery_idx").on(table.deliveryStatus, table.deliveryLeaseExpiresAt, table.createdAt),
+  uniqueIndex("agent_action_proposal_outcome_idx").on(table.outcomeIdKey),
+  index("agent_action_proposal_scope_idx").on(table.scopeKey, table.createdAt, table.id)
+]);
 var agentSchema = {
+  agentActionProposal,
   agentThread,
   agentMessage,
   agentQueuedMessage,
@@ -327,7 +364,8 @@ import { MySqlDatabase } from "drizzle-orm/mysql-core";
 import { PgDatabase } from "drizzle-orm/pg-core";
 
 // src/schema-mysql.ts
-import { bigint, boolean, datetime, double, index as index2, int, json, longtext, mysqlTable, primaryKey as primaryKey2, uniqueIndex as uniqueIndex2, varchar } from "drizzle-orm/mysql-core";
+import { canonicalActionProposalJson } from "@dudousxd/nestjs-agent-core";
+import { bigint, boolean, customType, datetime, double, index as index2, int, json, longtext, mysqlTable, primaryKey as primaryKey2, uniqueIndex as uniqueIndex2, varchar } from "drizzle-orm/mysql-core";
 var ts = /* @__PURE__ */ __name((name) => datetime(name, {
   mode: "date",
   fsp: 3
@@ -359,6 +397,7 @@ var agentMessage2 = mysqlTable("agent_message", {
     onDelete: "cascade"
   }),
   role: key("role").$type().notNull(),
+  actionProposalOutcome: longtext("action_proposal_outcome"),
   content: longtext("content").notNull(),
   toolCalls: json("tool_calls").$type(),
   toolResults: json("tool_results").$type(),
@@ -379,6 +418,7 @@ var agentMessage2 = mysqlTable("agent_message", {
   index2("agent_message_thread_created_idx").on(table.threadId, table.createdAt)
 ]);
 var agentToolCall2 = mysqlTable("agent_tool_call", {
+  proposalId: key("proposal_id"),
   id: key("id").primaryKey(),
   messageId: key("message_id").notNull().references(() => agentMessage2.id, {
     onDelete: "cascade"
@@ -394,6 +434,7 @@ var agentToolCall2 = mysqlTable("agent_tool_call", {
   createdAt: ts("created_at").notNull(),
   executedAt: ts("executed_at"),
   runId: key("run_id"),
+  confirmation: json("confirmation").$type(),
   approver: key("approver"),
   expiresAt: ts("expires_at"),
   remember: boolean("remember"),
@@ -402,6 +443,7 @@ var agentToolCall2 = mysqlTable("agent_tool_call", {
   index2("agent_tool_call_message_idx").on(table.messageId)
 ]);
 var agentQueuedMessage2 = mysqlTable("agent_queued_message", {
+  uiCapabilities: json("ui_capabilities").$type(),
   id: key("id").primaryKey(),
   threadId: key("thread_id").notNull().references(() => agentThread2.id, {
     onDelete: "cascade"
@@ -531,7 +573,52 @@ var agentStreamFrame2 = mysqlTable("agent_stream_frame", {
     ]
   })
 ]);
+var proposalJson = customType({
+  dataType: /* @__PURE__ */ __name(() => "longtext", "dataType"),
+  toDriver: /* @__PURE__ */ __name((value) => canonicalActionProposalJson(value), "toDriver"),
+  fromDriver: /* @__PURE__ */ __name((value) => JSON.parse(value), "fromDriver")
+});
+var agentActionProposal2 = mysqlTable("agent_action_proposal", {
+  id: key("id").primaryKey(),
+  scopeKey: key("scope_key").notNull(),
+  decision: key("decision").$type().notNull(),
+  logicalSort: varchar("logical_sort", {
+    length: 1020
+  }).notNull(),
+  createFingerprint: longtext("create_fingerprint").notNull(),
+  proposal: proposalJson("proposal").notNull(),
+  version: bigint("version", {
+    mode: "number"
+  }).notNull().default(0),
+  executionStatus: key("execution_status").$type(),
+  leaseExpiresAt: bigint("lease_expires_at", {
+    mode: "number"
+  }),
+  deliveryStatus: key("delivery_status"),
+  deliveryLeaseExpiresAt: bigint("delivery_lease_expires_at", {
+    mode: "number"
+  }),
+  replacementGroupKey: key("replacement_group_key"),
+  outcomeIdKey: key("outcome_id_key"),
+  proposalExpiresAt: bigint("proposal_expires_at", {
+    mode: "number"
+  }),
+  discoveryIndexVersion: bigint("discovery_index_version", {
+    mode: "number"
+  }).notNull().default(0),
+  createdAt: bigint("created_at", {
+    mode: "number"
+  }).notNull()
+}, (table) => [
+  index2("agent_action_proposal_execution_idx").on(table.discoveryIndexVersion, table.executionStatus, table.leaseExpiresAt, table.createdAt),
+  index2("agent_action_proposal_expiry_idx").on(table.discoveryIndexVersion, table.decision, table.proposalExpiresAt, table.createdAt),
+  index2("agent_action_proposal_replacement_idx").on(table.scopeKey, table.replacementGroupKey, table.decision),
+  index2("agent_action_proposal_delivery_idx").on(table.deliveryStatus, table.deliveryLeaseExpiresAt, table.createdAt),
+  uniqueIndex2("agent_action_proposal_outcome_idx").on(table.outcomeIdKey),
+  index2("agent_action_proposal_scope_idx").on(table.scopeKey, table.createdAt, table.id)
+]);
 var mysqlAgentSchema = {
+  agentActionProposal: agentActionProposal2,
   agentThread: agentThread2,
   agentMessage: agentMessage2,
   agentQueuedMessage: agentQueuedMessage2,
@@ -546,7 +633,8 @@ var mysqlAgentSchema = {
 };
 
 // src/schema-pg.ts
-import { bigint as bigint2, boolean as boolean2, doublePrecision, index as index3, integer as integer2, jsonb, pgTable, primaryKey as primaryKey3, text as text2, timestamp, uniqueIndex as uniqueIndex3 } from "drizzle-orm/pg-core";
+import { canonicalActionProposalJson as canonicalActionProposalJson2 } from "@dudousxd/nestjs-agent-core";
+import { bigint as bigint2, boolean as boolean2, customType as customType2, doublePrecision, index as index3, integer as integer2, jsonb, pgTable, primaryKey as primaryKey3, text as text2, timestamp, uniqueIndex as uniqueIndex3 } from "drizzle-orm/pg-core";
 var ts2 = /* @__PURE__ */ __name((name) => timestamp(name, {
   withTimezone: true,
   precision: 3,
@@ -576,6 +664,7 @@ var agentMessage3 = pgTable("agent_message", {
     onDelete: "cascade"
   }),
   role: text2("role").$type().notNull(),
+  actionProposalOutcome: text2("action_proposal_outcome"),
   content: text2("content").notNull(),
   toolCalls: jsonb("tool_calls").$type(),
   toolResults: jsonb("tool_results").$type(),
@@ -596,6 +685,7 @@ var agentMessage3 = pgTable("agent_message", {
   index3("agent_message_thread_created_idx").on(table.threadId, table.createdAt)
 ]);
 var agentToolCall3 = pgTable("agent_tool_call", {
+  proposalId: text2("proposal_id"),
   id: text2("id").primaryKey(),
   messageId: text2("message_id").notNull().references(() => agentMessage3.id, {
     onDelete: "cascade"
@@ -611,6 +701,7 @@ var agentToolCall3 = pgTable("agent_tool_call", {
   createdAt: ts2("created_at").notNull(),
   executedAt: ts2("executed_at"),
   runId: text2("run_id"),
+  confirmation: jsonb("confirmation").$type(),
   approver: text2("approver"),
   expiresAt: ts2("expires_at"),
   remember: boolean2("remember"),
@@ -619,6 +710,7 @@ var agentToolCall3 = pgTable("agent_tool_call", {
   index3("agent_tool_call_message_idx").on(table.messageId)
 ]);
 var agentQueuedMessage3 = pgTable("agent_queued_message", {
+  uiCapabilities: jsonb("ui_capabilities").$type(),
   id: text2("id").primaryKey(),
   threadId: text2("thread_id").notNull().references(() => agentThread3.id, {
     onDelete: "cascade"
@@ -748,7 +840,50 @@ var agentStreamFrame3 = pgTable("agent_stream_frame", {
     ]
   })
 ]);
+var proposalJson2 = customType2({
+  dataType: /* @__PURE__ */ __name(() => "text", "dataType"),
+  toDriver: /* @__PURE__ */ __name((value) => canonicalActionProposalJson2(value), "toDriver"),
+  fromDriver: /* @__PURE__ */ __name((value) => JSON.parse(value), "fromDriver")
+});
+var agentActionProposal3 = pgTable("agent_action_proposal", {
+  id: text2("id").primaryKey(),
+  scopeKey: text2("scope_key").notNull(),
+  decision: text2("decision").$type().notNull(),
+  logicalSort: text2("logical_sort").notNull(),
+  createFingerprint: text2("create_fingerprint").notNull(),
+  proposal: proposalJson2("proposal").notNull(),
+  version: bigint2("version", {
+    mode: "number"
+  }).notNull().default(0),
+  executionStatus: text2("execution_status").$type(),
+  leaseExpiresAt: bigint2("lease_expires_at", {
+    mode: "number"
+  }),
+  deliveryStatus: text2("delivery_status"),
+  deliveryLeaseExpiresAt: bigint2("delivery_lease_expires_at", {
+    mode: "number"
+  }),
+  replacementGroupKey: text2("replacement_group_key"),
+  outcomeIdKey: text2("outcome_id_key"),
+  proposalExpiresAt: bigint2("proposal_expires_at", {
+    mode: "number"
+  }),
+  discoveryIndexVersion: bigint2("discovery_index_version", {
+    mode: "number"
+  }).notNull().default(0),
+  createdAt: bigint2("created_at", {
+    mode: "number"
+  }).notNull()
+}, (table) => [
+  index3("agent_action_proposal_execution_idx").on(table.discoveryIndexVersion, table.executionStatus, table.leaseExpiresAt, table.createdAt),
+  index3("agent_action_proposal_expiry_idx").on(table.discoveryIndexVersion, table.decision, table.proposalExpiresAt, table.createdAt),
+  index3("agent_action_proposal_replacement_idx").on(table.scopeKey, table.replacementGroupKey, table.decision),
+  index3("agent_action_proposal_delivery_idx").on(table.deliveryStatus, table.deliveryLeaseExpiresAt, table.createdAt),
+  uniqueIndex3("agent_action_proposal_outcome_idx").on(table.outcomeIdKey),
+  index3("agent_action_proposal_scope_idx").on(table.scopeKey, table.createdAt, table.id)
+]);
 var pgAgentSchema = {
+  agentActionProposal: agentActionProposal3,
   agentThread: agentThread3,
   agentMessage: agentMessage3,
   agentQueuedMessage: agentQueuedMessage3,
@@ -1000,8 +1135,514 @@ async function heal(db, dialect) {
 __name(heal, "heal");
 
 // src/drizzle-agent-store.ts
-import { toolCallApprovalFromRow } from "@dudousxd/nestjs-agent-core";
-import { and, asc, desc, eq, gte, inArray, isNotNull, isNull, lte, max, min, or, sql as sql2 } from "drizzle-orm";
+import { canonicalActionProposalJson as canonicalActionProposalJson4, toolCallApprovalFromRow } from "@dudousxd/nestjs-agent-core";
+import { and as and2, asc as asc2, desc, eq as eq2, gte, inArray, isNotNull, isNull as isNull2, lte as lte2, max as max2, min, or as or2, sql as sql3 } from "drizzle-orm";
+
+// src/drizzle-action-proposal-store.ts
+import { createHash, randomUUID } from "crypto";
+import { actionProposalOutcomeFenceValid, actionProposalOutcomeText, actionProposalScopeMatches, canonicalActionProposalJson as canonicalActionProposalJson3, claimActionProposalOutcome, initialActionProposal, transitionActionProposalClaim, transitionActionProposalDecision, transitionActionProposalLease, transitionActionProposalSettlement, transitionActionProposalSupersession, validateActionProposalDiscoveryIndexBatch, validateActionProposalExpiryBatch, validateActionProposalListQuery, validateActionProposalWorkerClaim } from "@dudousxd/nestjs-agent-core";
+import { and, asc, entityKind, eq, gt, isNull, lte, max, or, sql as sql2 } from "drizzle-orm";
+
+// src/action-proposal-transaction-mode.ts
+function actionProposalTransactionMode(kind) {
+  if (kind === "BetterSQLite3Database" || kind === "BetterSQLiteTransaction") return "sync";
+  if (kind !== void 0 && [
+    "NodePgDatabase",
+    "NodePgTransaction",
+    "MySql2Database",
+    "MySql2Transaction",
+    "LibSQLDatabase",
+    "LibSQLTransaction"
+  ].includes(kind)) return "async";
+  return "unsupported";
+}
+__name(actionProposalTransactionMode, "actionProposalTransactionMode");
+
+// src/drizzle-action-proposal-store.ts
+var DrizzleActionProposalStore = class {
+  static {
+    __name(this, "DrizzleActionProposalStore");
+  }
+  db;
+  rawDb;
+  actionProposalAdmissionSupported;
+  synchronousSqlite;
+  dialect;
+  table;
+  clock;
+  constructor(db, options = {}) {
+    this.rawDb = db;
+    const kind = db.constructor[entityKind];
+    const transactionMode = actionProposalTransactionMode(kind);
+    this.synchronousSqlite = transactionMode === "sync";
+    this.actionProposalAdmissionSupported = transactionMode !== "unsupported";
+    this.dialect = agentDialectOf(db);
+    this.table = agentTablesFor(this.dialect).agentActionProposal;
+    this.db = asBuilder(db);
+    this.clock = options.clock ?? Date.now;
+  }
+  async createActionProposal(input) {
+    const proposal = initialActionProposal(input, this.clock());
+    const row = {
+      id: physicalId(input.id),
+      scopeKey: scopeKey(input),
+      decision: proposal.decision,
+      logicalSort: logicalSort(input.id),
+      createFingerprint: canonicalActionProposalJson3(input),
+      proposal,
+      ...discoveryMetadata(proposal),
+      version: 0,
+      createdAt: proposal.createdAt
+    };
+    const table = this.table;
+    const insert = this.db.insert(table);
+    const inserted = this.dialect === "mysql" ? mysqlAffectedRows(await insert.ignore().values(row)) : await affectedRows(this.dialect, insert.values(row).onConflictDoNothing(), table.id);
+    const stored = await this.read(input, input.id);
+    if (!stored) return {
+      status: "conflict"
+    };
+    if (inserted === 1) return {
+      status: "created",
+      proposal: stored.proposal
+    };
+    return {
+      status: stored.createFingerprint === row.createFingerprint ? "unchanged" : "conflict",
+      proposal: stored.proposal
+    };
+  }
+  createReplacingActionProposal(input) {
+    if (!input.replacementKey) return this.createActionProposal(input);
+    const proposal = initialActionProposal(input, this.clock());
+    return this.transactionSteps((db) => this.replacementSteps(db, input, proposal));
+  }
+  async supersedeActionProposal(scope, id, command) {
+    const replacement = await this.getActionProposal(scope, command.replacementProposalId);
+    if (!replacement) return {
+      status: "not_found"
+    };
+    return this.mutate(scope, id, (row, now) => transitionActionProposalSupersession(row, replacement, command, now));
+  }
+  *replacementSteps(db, input, proposal) {
+    const table = this.table;
+    const thread = agentTablesFor(this.dialect).agentThread;
+    if (this.dialect === "sqlite") yield {
+      kind: "write",
+      query: db.update(thread).set({
+        updatedAt: sql2`${thread.updatedAt}`
+      }).where(eq(thread.id, input.threadId))
+    };
+    const threads = yield {
+      kind: "read",
+      query: lockQuery(db.select().from(thread).where(eq(thread.id, input.threadId)).limit(1), this.dialect)
+    };
+    const owner = threads[0];
+    if (!owner || owner.id !== input.threadId || owner.deletedAt || owner.actorRef !== input.actorRef || owner.tenantRef !== input.tenantRef) return {
+      status: "conflict"
+    };
+    const existingRows = yield {
+      kind: "read",
+      query: db.select().from(table).where(eq(table.id, physicalId(input.id))).limit(1)
+    };
+    const existing = existingRows[0];
+    if (existing) {
+      if (existing.proposal.id !== input.id || !actionProposalScopeMatches(existing.proposal, input)) return {
+        status: "conflict"
+      };
+      return {
+        status: existing.createFingerprint === canonicalActionProposalJson3(input) ? "unchanged" : "conflict",
+        proposal: existing.proposal
+      };
+    }
+    const groupKey = replacementGroupKey(input);
+    if (groupKey === null) throw new Error("Missing explicit replacement identity");
+    const pending = yield {
+      kind: "read",
+      query: lockQuery(db.select().from(table).where(and(eq(table.scopeKey, scopeKey(input)), eq(table.replacementGroupKey, groupKey), eq(table.decision, "pending"))), this.dialect)
+    };
+    const row = {
+      id: physicalId(input.id),
+      scopeKey: scopeKey(input),
+      decision: proposal.decision,
+      logicalSort: logicalSort(input.id),
+      createFingerprint: canonicalActionProposalJson3(input),
+      proposal,
+      ...discoveryMetadata(proposal),
+      version: 0,
+      createdAt: proposal.createdAt
+    };
+    const insert = db.insert(table);
+    const inserted = yield {
+      kind: "read",
+      query: this.dialect === "mysql" ? insert.ignore().values(row) : insert.values(row).onConflictDoNothing().returning({
+        id: table.id
+      })
+    };
+    const count3 = this.dialect === "mysql" ? mysqlAffectedRows(inserted) : inserted.length;
+    if (count3 !== 1) return {
+      status: "conflict"
+    };
+    for (const old of pending) {
+      const result = transitionActionProposalSupersession(old.proposal, proposal, {
+        replacementProposalId: proposal.id,
+        actorRef: proposal.actorRef,
+        via: "replacement"
+      }, this.clock());
+      if (!result.proposal || canonicalActionProposalJson3(result.proposal) === canonicalActionProposalJson3(old.proposal)) continue;
+      const next = result.proposal;
+      const update = db.update(table).set({
+        proposal: next,
+        decision: next.decision,
+        ...discoveryMetadata(next),
+        version: old.version + 1
+      }).where(and(eq(table.id, old.id), eq(table.version, old.version)));
+      const updated = yield {
+        kind: "read",
+        query: this.dialect === "mysql" ? update : update.returning({
+          id: table.id
+        })
+      };
+      if ((this.dialect === "mysql" ? mysqlAffectedRows(updated) : updated.length) !== 1) throw new Error("Replacement lost its locked proposal fence");
+    }
+    return {
+      status: "created",
+      proposal
+    };
+  }
+  async getActionProposal(scope, id) {
+    return (await this.read(scope, id))?.proposal ?? null;
+  }
+  async listActionProposals(scope, query = {}) {
+    const limit = validateActionProposalListQuery(query);
+    const rows = await this.db.select().from(this.table).where(and(eq(this.table.scopeKey, scopeKey(scope)), query.after === void 0 ? void 0 : or(gt(this.table.createdAt, query.after.createdAt), and(eq(this.table.createdAt, query.after.createdAt), gt(this.table.logicalSort, logicalSort(query.after.id)))), query.decision === void 0 ? void 0 : eq(this.table.decision, query.decision))).orderBy(asc(this.table.createdAt), asc(this.table.logicalSort)).limit(limit);
+    return rows.map((row) => row.proposal).filter((proposal) => actionProposalScopeMatches(proposal, scope));
+  }
+  decideActionProposal(scope, id, command) {
+    return this.mutate(scope, id, (row, now) => transitionActionProposalDecision(row, command, now));
+  }
+  claimActionProposal(scope, id, command) {
+    return this.mutate(scope, id, (row, now) => transitionActionProposalClaim(row, command, now, randomUUID()));
+  }
+  extendActionProposalLease(scope, id, command) {
+    return this.mutate(scope, id, (row, now) => transitionActionProposalLease(row, command, now));
+  }
+  settleActionProposal(scope, id, command) {
+    return this.mutate(scope, id, (row, now) => transitionActionProposalSettlement(row, command, now));
+  }
+  async claimNextActionProposal(command) {
+    const now = this.clock();
+    validateActionProposalWorkerClaim(command, now);
+    const table = this.table;
+    const candidates = await this.db.select().from(table).where(and(eq(table.discoveryIndexVersion, 1), eq(table.decision, "approved"), or(eq(table.executionStatus, "queued"), and(eq(table.executionStatus, "executing"), lte(table.leaseExpiresAt, now))))).orderBy(asc(table.createdAt), asc(table.logicalSort)).limit(32);
+    for (const candidate of candidates) {
+      const result = await this.claimActionProposal(candidate.proposal, candidate.proposal.id, command);
+      if (result.status === "applied" && result.proposal) return result.proposal;
+    }
+    return null;
+  }
+  async expireActionProposals(command) {
+    const now = this.clock();
+    validateActionProposalExpiryBatch(command, now);
+    const table = this.table;
+    const candidates = await this.db.select().from(table).where(and(eq(table.discoveryIndexVersion, 1), eq(table.decision, "pending"), lte(table.proposalExpiresAt, now))).orderBy(asc(table.createdAt), asc(table.logicalSort)).limit(command.limit);
+    let expired = 0;
+    for (const candidate of candidates) {
+      const result = await this.decideActionProposal(candidate.proposal, candidate.proposal.id, {
+        decision: "expired",
+        actorRef: "system",
+        via: "expiry"
+      });
+      if (result.status === "applied") expired++;
+    }
+    return expired;
+  }
+  async backfillActionProposalDiscoveryIndex(command) {
+    validateActionProposalDiscoveryIndexBatch(command);
+    const table = this.table;
+    const candidates = await this.db.select().from(table).where(eq(table.discoveryIndexVersion, 0)).orderBy(asc(table.createdAt), asc(table.logicalSort)).limit(command.limit);
+    let changed = 0;
+    for (const row of candidates) {
+      changed += await affectedRows(this.dialect, this.db.update(table).set({
+        ...discoveryMetadata(row.proposal),
+        version: row.version + 1
+      }).where(and(eq(table.id, row.id), eq(table.scopeKey, row.scopeKey), eq(table.version, row.version), eq(table.discoveryIndexVersion, 0))), table.id);
+    }
+    return changed;
+  }
+  async rememberedActionProposalApprovals(scope) {
+    const table = this.table;
+    const rows = await this.db.select().from(table).where(and(eq(table.scopeKey, scopeKey(scope)), eq(table.decision, "approved"), or(eq(table.executionStatus, "succeeded"), eq(table.executionStatus, "failed"))));
+    return [
+      ...new Set(rows.filter((row) => actionProposalScopeMatches(row.proposal, scope) && row.proposal.decisionAudit?.remember === true).map((row) => row.proposal.toolName))
+    ];
+  }
+  async getThreadActionProposalScope(threadId) {
+    const thread = agentTablesFor(this.dialect).agentThread;
+    const [row] = await this.db.select().from(thread).where(and(eq(thread.id, threadId), isNull(thread.deletedAt))).limit(1);
+    return row?.id === threadId ? {
+      actorRef: row.actorRef,
+      tenantRef: row.tenantRef,
+      threadId: row.id
+    } : null;
+  }
+  async claimNextActionProposalOutcome(command) {
+    const now = this.clock();
+    validateActionProposalWorkerClaim(command, now);
+    const table = this.table;
+    const candidates = await this.db.select().from(table).where(and(eq(table.deliveryStatus, "pending"), or(isNull(table.deliveryLeaseExpiresAt), lte(table.deliveryLeaseExpiresAt, now)))).orderBy(asc(table.createdAt), asc(table.logicalSort)).limit(32);
+    for (const row of candidates) {
+      const result = await this.mutate(row.proposal, row.proposal.id, (proposal, time) => {
+        const claimed2 = claimActionProposalOutcome(proposal, command, time, randomUUID());
+        return claimed2 ? {
+          status: "applied",
+          proposal: claimed2
+        } : {
+          status: "conflict",
+          proposal
+        };
+      });
+      const claimed = result.proposal;
+      if (result.status === "applied" && claimed?.outcome && claimed.outcomeDelivery?.lease) {
+        return {
+          outcome: claimed.outcome,
+          lease: {
+            outcomeId: claimed.outcome.id,
+            token: claimed.outcomeDelivery.lease.token,
+            generation: claimed.outcomeDelivery.generation
+          }
+        };
+      }
+    }
+    return null;
+  }
+  async admitActionProposalOutcome(command) {
+    return this.transactionSteps((db) => this.admissionSteps(db, command));
+  }
+  async transactionSteps(factory) {
+    if (!this.actionProposalAdmissionSupported) throw new Error("Independent actions require a certified transactional Drizzle driver (better-sqlite3, node-postgres, mysql2 or libsql)");
+    if (this.synchronousSqlite) {
+      const database2 = this.rawDb;
+      return database2.transaction((tx) => runSync(factory(asBuilder(tx))), {
+        behavior: "immediate"
+      });
+    }
+    const database = this.rawDb;
+    return database.transaction(async (tx) => runAsync(factory(asBuilder(tx))));
+  }
+  *admissionSteps(db, command) {
+    if (typeof command.outcomeId !== "string" || !command.outcomeId || typeof command.token !== "string" || !command.token || !Number.isSafeInteger(command.generation) || command.generation < 1) throw new TypeError("Invalid outcome fence");
+    const table = this.table;
+    const tables = agentTablesFor(this.dialect);
+    if (this.dialect === "sqlite") yield {
+      kind: "write",
+      query: db.update(table).set({
+        version: sql2`${table.version}`
+      }).where(eq(table.outcomeIdKey, physicalId(command.outcomeId)))
+    };
+    const query = db.select().from(table).where(eq(table.outcomeIdKey, physicalId(command.outcomeId))).limit(1);
+    const rows = yield {
+      kind: "read",
+      query: lockQuery(query, this.dialect)
+    };
+    const row = rows[0];
+    if (!row || row.proposal.outcome?.id !== command.outcomeId) return {
+      status: "not_found"
+    };
+    const proposal = row.proposal;
+    const outcome = proposal.outcome;
+    const delivery = proposal.outcomeDelivery;
+    if (!outcome || !delivery) return {
+      status: "not_found"
+    };
+    if (proposal.outcomeDelivery?.status === "admitted") return {
+      status: "unchanged",
+      ...proposal.outcomeDelivery.messageId !== void 0 ? {
+        messageId: proposal.outcomeDelivery.messageId
+      } : {}
+    };
+    if (proposal.outcomeDelivery?.status === "discarded") return {
+      status: "discarded"
+    };
+    if (!actionProposalOutcomeFenceValid(proposal, command, this.clock())) return {
+      status: "conflict"
+    };
+    const threadQuery = db.select().from(tables.agentThread).where(eq(tables.agentThread.id, proposal.threadId)).limit(1);
+    const threads = yield {
+      kind: "read",
+      query: lockQuery(threadQuery, this.dialect)
+    };
+    const thread = threads[0];
+    const now = this.clock();
+    if (!actionProposalOutcomeFenceValid(proposal, command, now)) return {
+      status: "conflict"
+    };
+    if (!thread || thread.id !== proposal.threadId || thread.deletedAt || thread.actorRef !== proposal.actorRef || thread.tenantRef !== proposal.tenantRef) {
+      const discarded = {
+        ...proposal,
+        outcomeDelivery: {
+          ...delivery,
+          status: "discarded",
+          lease: null
+        },
+        updatedAt: now
+      };
+      yield {
+        kind: "write",
+        query: db.update(table).set({
+          proposal: discarded,
+          ...discoveryMetadata(discarded),
+          version: row.version + 1
+        }).where(and(eq(table.id, row.id), eq(table.version, row.version)))
+      };
+      return {
+        status: "discarded"
+      };
+    }
+    if (thread.activeStreamId !== null) return {
+      status: "busy"
+    };
+    const seqRows = yield {
+      kind: "read",
+      query: db.select({
+        last: max(tables.agentMessage.seq)
+      }).from(tables.agentMessage).where(eq(tables.agentMessage.threadId, thread.id))
+    };
+    const messageId = physicalId(command.outcomeId);
+    yield {
+      kind: "write",
+      query: db.insert(tables.agentMessage).values({
+        id: messageId,
+        threadId: thread.id,
+        role: "assistant",
+        content: actionProposalOutcomeText(outcome),
+        actionProposalOutcome: canonicalActionProposalJson3(outcome),
+        ui: null,
+        seq: Number(seqRows[0]?.last ?? 0) + 1,
+        createdAt: new Date(now)
+      })
+    };
+    yield {
+      kind: "write",
+      query: db.update(tables.agentThread).set({
+        updatedAt: new Date(now)
+      }).where(eq(tables.agentThread.id, thread.id))
+    };
+    const admitted = {
+      ...proposal,
+      outcomeDelivery: {
+        ...delivery,
+        status: "admitted",
+        lease: null,
+        messageId
+      },
+      updatedAt: now
+    };
+    const update = db.update(table).set({
+      proposal: admitted,
+      ...discoveryMetadata(admitted),
+      version: row.version + 1
+    }).where(and(eq(table.id, row.id), eq(table.version, row.version)));
+    const changed = yield {
+      kind: "read",
+      query: this.dialect === "mysql" ? update : update.returning({
+        id: table.id
+      })
+    };
+    const count3 = this.dialect === "mysql" ? mysqlAffectedRows(changed) : changed.length;
+    if (count3 !== 1) throw new Error("Outcome admission lost its locked proposal fence");
+    return {
+      status: "applied",
+      messageId
+    };
+  }
+  async read(scope, id) {
+    const [row] = await this.db.select().from(this.table).where(and(eq(this.table.id, physicalId(id)), eq(this.table.scopeKey, scopeKey(scope)))).limit(1);
+    return row && row.proposal.id === id && actionProposalScopeMatches(row.proposal, scope) ? row : void 0;
+  }
+  async mutate(scope, id, transition) {
+    for (let attempt = 0; attempt < 32; attempt++) {
+      const row2 = await this.read(scope, id);
+      if (!row2) return {
+        status: "not_found"
+      };
+      const result = transition(row2.proposal, this.clock());
+      if (!result.proposal || canonicalActionProposalJson3(result.proposal) === canonicalActionProposalJson3(row2.proposal)) return result;
+      const changed = await affectedRows(this.dialect, this.db.update(this.table).set({
+        proposal: result.proposal,
+        decision: result.proposal.decision,
+        ...discoveryMetadata(result.proposal),
+        version: row2.version + 1
+      }).where(and(eq(this.table.id, physicalId(id)), eq(this.table.scopeKey, scopeKey(scope)), eq(this.table.version, row2.version))), this.table.id);
+      if (changed === 1) return result;
+    }
+    const row = await this.read(scope, id);
+    return row ? {
+      status: "conflict",
+      proposal: row.proposal
+    } : {
+      status: "not_found"
+    };
+  }
+};
+function scopeKey(scope) {
+  return createHash("sha256").update(canonicalActionProposalJson3([
+    scope.tenantRef,
+    scope.actorRef,
+    scope.threadId
+  ])).digest("hex");
+}
+__name(scopeKey, "scopeKey");
+function physicalId(id) {
+  return createHash("sha256").update(canonicalActionProposalJson3(id)).digest("hex");
+}
+__name(physicalId, "physicalId");
+function logicalSort(id) {
+  let sort = "";
+  for (let index4 = 0; index4 < id.length; index4++) sort += id.charCodeAt(index4).toString(16).padStart(4, "0");
+  return sort;
+}
+__name(logicalSort, "logicalSort");
+function discoveryMetadata(proposal) {
+  return {
+    replacementGroupKey: replacementGroupKey(proposal),
+    deliveryStatus: proposal.outcomeDelivery?.status ?? null,
+    deliveryLeaseExpiresAt: proposal.outcomeDelivery?.lease?.expiresAt ?? null,
+    outcomeIdKey: proposal.outcome ? physicalId(proposal.outcome.id) : null,
+    executionStatus: proposal.execution?.status ?? null,
+    leaseExpiresAt: proposal.execution?.lease?.expiresAt ?? null,
+    proposalExpiresAt: proposal.expiresAt,
+    discoveryIndexVersion: 1
+  };
+}
+__name(discoveryMetadata, "discoveryMetadata");
+function lockQuery(query, dialect) {
+  return dialect === "sqlite" ? query : query.for("update");
+}
+__name(lockQuery, "lockQuery");
+function runSync(steps) {
+  let next = steps.next();
+  while (!next.done) {
+    const { kind, query } = next.value;
+    const statement = query;
+    next = steps.next(kind === "read" ? statement.all() : statement.run());
+  }
+  return next.value;
+}
+__name(runSync, "runSync");
+async function runAsync(steps) {
+  let next = steps.next();
+  while (!next.done) next = steps.next(await next.value.query);
+  return next.value;
+}
+__name(runAsync, "runAsync");
+function replacementGroupKey(proposal) {
+  return proposal.replacementKey ? physicalId(canonicalActionProposalJson3([
+    proposal.toolName,
+    proposal.replacementKey
+  ])) : null;
+}
+__name(replacementGroupKey, "replacementGroupKey");
+
+// src/drizzle-agent-store.ts
 function turnMessageColumns(message) {
   return {
     id: message.id,
@@ -1022,11 +1663,61 @@ var DrizzleAgentStore = class {
   db;
   dialect;
   t;
-  constructor(db) {
+  proposals;
+  constructor(db, options = {}) {
+    this.proposals = new DrizzleActionProposalStore(db, options);
     this.dialect = agentDialectOf(db);
     this.t = agentTablesFor(this.dialect);
     this.db = asBuilder(db);
   }
+  createActionProposal(...args) {
+    return this.proposals.createActionProposal(...args);
+  }
+  getActionProposal(...args) {
+    return this.proposals.getActionProposal(...args);
+  }
+  listActionProposals(...args) {
+    return this.proposals.listActionProposals(...args);
+  }
+  decideActionProposal(...args) {
+    return this.proposals.decideActionProposal(...args);
+  }
+  claimActionProposal(...args) {
+    return this.proposals.claimActionProposal(...args);
+  }
+  extendActionProposalLease(...args) {
+    return this.proposals.extendActionProposalLease(...args);
+  }
+  claimNextActionProposal(...args) {
+    return this.proposals.claimNextActionProposal(...args);
+  }
+  expireActionProposals(...args) {
+    return this.proposals.expireActionProposals(...args);
+  }
+  backfillActionProposalDiscoveryIndex(command) {
+    return this.proposals.backfillActionProposalDiscoveryIndex(command);
+  }
+  settleActionProposal(...args) {
+    return this.proposals.settleActionProposal(...args);
+  }
+  createReplacingActionProposal(...args) {
+    return this.proposals.createReplacingActionProposal(...args);
+  }
+  supersedeActionProposal(...args) {
+    return this.proposals.supersedeActionProposal(...args);
+  }
+  get actionProposalAdmissionSupported() {
+    return this.proposals.actionProposalAdmissionSupported;
+  }
+  getThreadActionProposalScope(threadId) {
+    return this.proposals.getThreadActionProposalScope(threadId);
+  }
+  claimNextActionProposalOutcome(...args) {
+    return this.proposals.claimNextActionProposalOutcome(...args);
+  }
+  admitActionProposalOutcome(...args) {
+    return this.proposals.admitActionProposalOutcome(...args);
+  }
   async createThread(input) {
     const now = /* @__PURE__ */ new Date();
     const thread = {
@@ -1048,11 +1739,11 @@ var DrizzleAgentStore = class {
     return this.toSummary(thread);
   }
   async getThread(threadId) {
-    const [thread] = await this.db.select().from(this.t.agentThread).where(and(eq(this.t.agentThread.id, threadId), isNull(this.t.agentThread.deletedAt)));
+    const [thread] = await this.db.select().from(this.t.agentThread).where(and2(eq2(this.t.agentThread.id, threadId), isNull2(this.t.agentThread.deletedAt)));
     if (thread === void 0) {
       return null;
     }
-    const messages = await this.db.select().from(this.t.agentMessage).where(eq(this.t.agentMessage.threadId, threadId)).orderBy(...this.messageOrder());
+    const messages = await this.db.select().from(this.t.agentMessage).where(eq2(this.t.agentMessage.threadId, threadId)).orderBy(...this.messageOrder());
     const last = messages[messages.length - 1];
     const approvals = await this.approvalsFor(messages.map((message) => message.id));
     return {
@@ -1087,14 +1778,14 @@ var DrizzleAgentStore = class {
     const [thread] = await this.db.select({
       title: this.t.agentThread.title,
       defaultAgent: this.t.agentThread.defaultAgent
-    }).from(this.t.agentThread).where(and(eq(this.t.agentThread.id, query.threadId), isNull(this.t.agentThread.deletedAt)));
+    }).from(this.t.agentThread).where(and2(eq2(this.t.agentThread.id, query.threadId), isNull2(this.t.agentThread.deletedAt)));
     if (thread === void 0) {
       return null;
     }
     const messages = await this.loadTurnWindow(query.threadId, query.messageLimit);
     const [answered] = await this.db.select({
       id: this.t.agentMessage.id
-    }).from(this.t.agentMessage).where(and(eq(this.t.agentMessage.threadId, query.threadId), eq(this.t.agentMessage.role, "assistant"))).limit(1);
+    }).from(this.t.agentMessage).where(and2(eq2(this.t.agentMessage.threadId, query.threadId), eq2(this.t.agentMessage.role, "assistant"))).limit(1);
     return {
       title: thread.title,
       defaultAgent: thread.defaultAgent,
@@ -1110,15 +1801,15 @@ var DrizzleAgentStore = class {
     if (limit !== void 0 && limit <= 0) {
       return [];
     }
-    const window = this.db.select(turnMessageColumns(this.t.agentMessage)).from(this.t.agentMessage).where(eq(this.t.agentMessage.threadId, threadId)).orderBy(...this.messageOrderNewestFirst());
+    const window = this.db.select(turnMessageColumns(this.t.agentMessage)).from(this.t.agentMessage).where(eq2(this.t.agentMessage.threadId, threadId)).orderBy(...this.messageOrderNewestFirst());
     const rows = limit === void 0 ? await window : await window.limit(limit);
     return rows.reverse().map((row) => this.toStoredMessage(row));
   }
   async listThreads(actorRef, limit = 50) {
-    const threads = await this.db.select().from(this.t.agentThread).where(and(eq(this.t.agentThread.actorRef, actorRef), eq(this.t.agentThread.transient, false), isNull(this.t.agentThread.deletedAt))).orderBy(desc(this.t.agentThread.updatedAt)).limit(limit);
+    const threads = await this.db.select().from(this.t.agentThread).where(and2(eq2(this.t.agentThread.actorRef, actorRef), eq2(this.t.agentThread.transient, false), isNull2(this.t.agentThread.deletedAt))).orderBy(desc(this.t.agentThread.updatedAt)).limit(limit);
     const summaries = [];
     for (const thread of threads) {
-      const [last] = await this.db.select().from(this.t.agentMessage).where(eq(this.t.agentMessage.threadId, thread.id)).orderBy(...this.messageOrderNewestFirst()).limit(1);
+      const [last] = await this.db.select().from(this.t.agentMessage).where(eq2(this.t.agentMessage.threadId, thread.id)).orderBy(...this.messageOrderNewestFirst()).limit(1);
       summaries.push(this.toSummary(thread, last?.content));
     }
     return summaries;
@@ -1126,14 +1817,14 @@ var DrizzleAgentStore = class {
   async softDeleteThread(threadId) {
     await this.db.update(this.t.agentThread).set({
       deletedAt: /* @__PURE__ */ new Date()
-    }).where(eq(this.t.agentThread.id, threadId));
+    }).where(eq2(this.t.agentThread.id, threadId));
   }
   async forkThread(threadId, fromMessageId) {
-    const [source] = await this.db.select().from(this.t.agentThread).where(eq(this.t.agentThread.id, threadId));
+    const [source] = await this.db.select().from(this.t.agentThread).where(eq2(this.t.agentThread.id, threadId));
     if (source === void 0) {
       throw new Error(`thread ${threadId} not found`);
     }
-    const messages = await this.db.select().from(this.t.agentMessage).where(eq(this.t.agentMessage.threadId, threadId)).orderBy(...this.messageOrder());
+    const messages = await this.db.select().from(this.t.agentMessage).where(eq2(this.t.agentMessage.threadId, threadId)).orderBy(...this.messageOrder());
     const cutoff = messages.findIndex((message) => message.id === fromMessageId);
     const kept = cutoff >= 0 ? messages.slice(0, cutoff + 1) : messages;
     const now = /* @__PURE__ */ new Date();
@@ -1176,6 +1867,7 @@ var DrizzleAgentStore = class {
         reasoning: message.reasoning,
         reasoningMs: message.reasoningMs,
         ui: message.ui,
+        actionProposalOutcome: message.actionProposalOutcome,
         createdAt: message.createdAt
       })));
     }
@@ -1184,20 +1876,20 @@ var DrizzleAgentStore = class {
   async ownerOfThread(threadId) {
     const [thread] = await this.db.select({
       actorRef: this.t.agentThread.actorRef
-    }).from(this.t.agentThread).where(and(eq(this.t.agentThread.id, threadId), isNull(this.t.agentThread.deletedAt)));
+    }).from(this.t.agentThread).where(and2(eq2(this.t.agentThread.id, threadId), isNull2(this.t.agentThread.deletedAt)));
     return thread?.actorRef ?? null;
   }
   async ownerOfToolCall(toolCallId) {
     const [row] = await this.db.select({
       actorRef: this.t.agentThread.actorRef
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, eq(this.t.agentMessage.threadId, this.t.agentThread.id)).where(eq(this.t.agentToolCall.id, toolCallId));
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq2(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, eq2(this.t.agentMessage.threadId, this.t.agentThread.id)).where(eq2(this.t.agentToolCall.id, toolCallId));
     return row?.actorRef ?? null;
   }
   async runForToolCall(toolCallId) {
     const [row] = await this.db.select({
       runId: this.t.agentToolCall.runId,
       activeStreamId: this.t.agentThread.activeStreamId
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, eq(this.t.agentMessage.threadId, this.t.agentThread.id)).where(eq(this.t.agentToolCall.id, toolCallId));
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq2(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, eq2(this.t.agentMessage.threadId, this.t.agentThread.id)).where(eq2(this.t.agentToolCall.id, toolCallId));
     return row?.runId ?? row?.activeStreamId ?? null;
   }
   /**
@@ -1215,12 +1907,13 @@ var DrizzleAgentStore = class {
       messageId: this.t.agentToolCall.messageId,
       status: this.t.agentToolCall.status,
       approver: this.t.agentToolCall.approver,
+      confirmation: this.t.agentToolCall.confirmation,
       expiresAt: this.t.agentToolCall.expiresAt,
       remember: this.t.agentToolCall.remember,
       executedByRef: this.t.agentToolCall.executedByRef,
       decidedVia: this.t.agentToolCall.decidedVia,
       error: this.t.agentToolCall.error
-    }).from(this.t.agentToolCall).where(and(inArray(this.t.agentToolCall.messageId, messageIds), isNotNull(this.t.agentToolCall.approver))).orderBy(asc(this.t.agentToolCall.createdAt), asc(this.t.agentToolCall.id));
+    }).from(this.t.agentToolCall).where(and2(inArray(this.t.agentToolCall.messageId, messageIds), isNotNull(this.t.agentToolCall.approver))).orderBy(asc2(this.t.agentToolCall.createdAt), asc2(this.t.agentToolCall.id));
     for (const row of rows) {
       const approval = toolCallApprovalFromRow({
         ...row,
@@ -1239,13 +1932,20 @@ var DrizzleAgentStore = class {
   async rememberedApprovals(threadId) {
     const rows = await this.db.selectDistinct({
       toolName: this.t.agentToolCall.toolName
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq(this.t.agentToolCall.messageId, this.t.agentMessage.id)).where(and(eq(this.t.agentMessage.threadId, threadId), eq(this.t.agentToolCall.remember, true)));
-    return rows.map((row) => row.toolName);
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq2(this.t.agentToolCall.messageId, this.t.agentMessage.id)).where(and2(eq2(this.t.agentMessage.threadId, threadId), eq2(this.t.agentToolCall.remember, true)));
+    const scope = await this.getThreadActionProposalScope(threadId);
+    const proposalNames = scope ? await this.proposals.rememberedActionProposalApprovals(scope) : [];
+    return [
+      .../* @__PURE__ */ new Set([
+        ...rows.map((row) => row.toolName),
+        ...proposalNames
+      ])
+    ];
   }
   async toolCallInput(toolCallId) {
     const [row] = await this.db.select({
       input: this.t.agentToolCall.input
-    }).from(this.t.agentToolCall).where(eq(this.t.agentToolCall.id, toolCallId));
+    }).from(this.t.agentToolCall).where(eq2(this.t.agentToolCall.id, toolCallId));
     return row?.input ?? null;
   }
   async toolCallApproval(toolCallId) {
@@ -1253,7 +1953,7 @@ var DrizzleAgentStore = class {
       status: this.t.agentToolCall.status,
       approver: this.t.agentToolCall.approver,
       expiresAt: this.t.agentToolCall.expiresAt
-    }).from(this.t.agentToolCall).where(eq(this.t.agentToolCall.id, toolCallId));
+    }).from(this.t.agentToolCall).where(eq2(this.t.agentToolCall.id, toolCallId));
     if (row === void 0) {
       return null;
     }
@@ -1266,26 +1966,26 @@ var DrizzleAgentStore = class {
   async ownerOfActiveStream(runId) {
     const [thread] = await this.db.select({
       actorRef: this.t.agentThread.actorRef
-    }).from(this.t.agentThread).where(and(eq(this.t.agentThread.activeStreamId, runId), isNull(this.t.agentThread.deletedAt)));
+    }).from(this.t.agentThread).where(and2(eq2(this.t.agentThread.activeStreamId, runId), isNull2(this.t.agentThread.deletedAt)));
     return thread?.actorRef ?? null;
   }
   async setTitle(threadId, title) {
     await this.db.update(this.t.agentThread).set({
       title,
       updatedAt: /* @__PURE__ */ new Date()
-    }).where(eq(this.t.agentThread.id, threadId));
+    }).where(eq2(this.t.agentThread.id, threadId));
   }
   async promoteThread(threadId) {
     await this.db.update(this.t.agentThread).set({
       transient: false,
       updatedAt: /* @__PURE__ */ new Date()
-    }).where(and(eq(this.t.agentThread.id, threadId), eq(this.t.agentThread.transient, true)));
+    }).where(and2(eq2(this.t.agentThread.id, threadId), eq2(this.t.agentThread.transient, true)));
   }
   /** Who holds the thread's stream right now, deleted or not. */
   async activeHolder(threadId) {
     const [thread] = await this.db.select({
       activeStreamId: this.t.agentThread.activeStreamId
-    }).from(this.t.agentThread).where(eq(this.t.agentThread.id, threadId));
+    }).from(this.t.agentThread).where(eq2(this.t.agentThread.id, threadId));
     return thread?.activeStreamId ?? null;
   }
   /**
@@ -1297,16 +1997,16 @@ var DrizzleAgentStore = class {
   messageOrder() {
     const message = this.t.agentMessage;
     return [
-      asc(sql2`coalesce(${message.seq}, 0)`),
-      asc(message.createdAt),
-      asc(message.id)
+      asc2(sql3`coalesce(${message.seq}, 0)`),
+      asc2(message.createdAt),
+      asc2(message.id)
     ];
   }
   /** {@link messageOrder}, newest first. */
   messageOrderNewestFirst() {
     const message = this.t.agentMessage;
     return [
-      desc(sql2`coalesce(${message.seq}, 0)`),
+      desc(sql3`coalesce(${message.seq}, 0)`),
       desc(message.createdAt),
       desc(message.id)
     ];
@@ -1317,15 +2017,15 @@ var DrizzleAgentStore = class {
   */
   async nextMessageSeq(threadId) {
     const [row] = await this.db.select({
-      last: max(this.t.agentMessage.seq)
-    }).from(this.t.agentMessage).where(eq(this.t.agentMessage.threadId, threadId));
+      last: max2(this.t.agentMessage.seq)
+    }).from(this.t.agentMessage).where(eq2(this.t.agentMessage.threadId, threadId));
     return Number(row?.last ?? 0) + 1;
   }
   /** The run streaming the thread, or `null` — a projection of the one column. */
   async activeRunForThread(threadId) {
     const [thread] = await this.db.select({
       activeStreamId: this.t.agentThread.activeStreamId
-    }).from(this.t.agentThread).where(and(eq(this.t.agentThread.id, threadId), isNull(this.t.agentThread.deletedAt)));
+    }).from(this.t.agentThread).where(and2(eq2(this.t.agentThread.id, threadId), isNull2(this.t.agentThread.deletedAt)));
     return thread?.activeStreamId ?? null;
   }
   /**
@@ -1334,15 +2034,15 @@ var DrizzleAgentStore = class {
   */
   async claimActiveStream(threadId, runId, options = {}) {
     const holders = [
-      isNull(this.t.agentThread.activeStreamId),
-      eq(this.t.agentThread.activeStreamId, runId),
+      isNull2(this.t.agentThread.activeStreamId),
+      eq2(this.t.agentThread.activeStreamId, runId),
       ...options.replacing !== void 0 ? [
-        eq(this.t.agentThread.activeStreamId, options.replacing)
+        eq2(this.t.agentThread.activeStreamId, options.replacing)
       ] : []
     ];
     const claimed = await affectedRows(this.dialect, this.db.update(this.t.agentThread).set({
       activeStreamId: runId
-    }).where(and(eq(this.t.agentThread.id, threadId), or(...holders))), this.t.agentThread.id);
+    }).where(and2(eq2(this.t.agentThread.id, threadId), or2(...holders))), this.t.agentThread.id);
     if (claimed > 0) {
       return true;
     }
@@ -1351,21 +2051,22 @@ var DrizzleAgentStore = class {
   async releaseActiveStream(threadId, runId) {
     const released = await affectedRows(this.dialect, this.db.update(this.t.agentThread).set({
       activeStreamId: null
-    }).where(and(eq(this.t.agentThread.id, threadId), eq(this.t.agentThread.activeStreamId, runId))), this.t.agentThread.id);
+    }).where(and2(eq2(this.t.agentThread.id, threadId), eq2(this.t.agentThread.activeStreamId, runId))), this.t.agentThread.id);
     return released > 0;
   }
   async enqueueMessage(input) {
     const now = /* @__PURE__ */ new Date();
     const [edge] = await this.db.select({
       first: min(this.t.agentQueuedMessage.position),
-      last: max(this.t.agentQueuedMessage.position)
-    }).from(this.t.agentQueuedMessage).where(eq(this.t.agentQueuedMessage.threadId, input.threadId));
+      last: max2(this.t.agentQueuedMessage.position)
+    }).from(this.t.agentQueuedMessage).where(eq2(this.t.agentQueuedMessage.threadId, input.threadId));
     const position = input.at === "head" ? (edge?.first ?? 1) - 1 : (edge?.last ?? -1) + 1;
     const row = {
       id: crypto.randomUUID(),
       threadId: input.threadId,
       actor: input.actor,
       content: input.content,
+      uiCapabilities: input.uiCapabilities ?? null,
       attachments: input.attachments !== void 0 && input.attachments.length > 0 ? input.attachments : null,
       agentName: input.agentName ?? null,
       persona: input.persona ?? null,
@@ -1380,11 +2081,11 @@ var DrizzleAgentStore = class {
     return toQueuedMessage(row);
   }
   async listQueue(threadId) {
-    const rows = await this.db.select().from(this.t.agentQueuedMessage).where(eq(this.t.agentQueuedMessage.threadId, threadId)).orderBy(asc(this.t.agentQueuedMessage.position), asc(this.t.agentQueuedMessage.createdAt));
+    const rows = await this.db.select().from(this.t.agentQueuedMessage).where(eq2(this.t.agentQueuedMessage.threadId, threadId)).orderBy(asc2(this.t.agentQueuedMessage.position), asc2(this.t.agentQueuedMessage.createdAt));
     return rows.map(toQueuedMessage);
   }
   async getQueuedMessage(id) {
-    const [row] = await this.db.select().from(this.t.agentQueuedMessage).where(eq(this.t.agentQueuedMessage.id, id));
+    const [row] = await this.db.select().from(this.t.agentQueuedMessage).where(eq2(this.t.agentQueuedMessage.id, id));
     return row === void 0 ? null : toQueuedMessage(row);
   }
   async updateQueuedMessage(id, patch) {
@@ -1400,7 +2101,7 @@ var DrizzleAgentStore = class {
     if (patch.interrupt !== void 0) {
       updates.interrupt = patch.interrupt;
     }
-    await this.db.update(this.t.agentQueuedMessage).set(updates).where(eq(this.t.agentQueuedMessage.id, id));
+    await this.db.update(this.t.agentQueuedMessage).set(updates).where(eq2(this.t.agentQueuedMessage.id, id));
     return this.getQueuedMessage(id);
   }
   /** Rewrites the thread's positions as 0..n-1 in the new order — a queue is a handful of rows. */
@@ -1415,32 +2116,32 @@ var DrizzleAgentStore = class {
     for (const [position, message] of order.entries()) {
       await this.db.update(this.t.agentQueuedMessage).set({
         position
-      }).where(eq(this.t.agentQueuedMessage.id, message.id));
+      }).where(eq2(this.t.agentQueuedMessage.id, message.id));
     }
     return true;
   }
   async removeQueuedMessage(id) {
-    const removed = await affectedRows(this.dialect, this.db.delete(this.t.agentQueuedMessage).where(eq(this.t.agentQueuedMessage.id, id)), this.t.agentQueuedMessage.id);
+    const removed = await affectedRows(this.dialect, this.db.delete(this.t.agentQueuedMessage).where(eq2(this.t.agentQueuedMessage.id, id)), this.t.agentQueuedMessage.id);
     return removed > 0;
   }
   async clearQueue(threadId) {
-    return affectedRows(this.dialect, this.db.delete(this.t.agentQueuedMessage).where(eq(this.t.agentQueuedMessage.threadId, threadId)), this.t.agentQueuedMessage.id);
+    return affectedRows(this.dialect, this.db.delete(this.t.agentQueuedMessage).where(eq2(this.t.agentQueuedMessage.threadId, threadId)), this.t.agentQueuedMessage.id);
   }
   async queuePause(threadId) {
     const [thread] = await this.db.select({
       queuePause: this.t.agentThread.queuePause
-    }).from(this.t.agentThread).where(eq(this.t.agentThread.id, threadId));
+    }).from(this.t.agentThread).where(eq2(this.t.agentThread.id, threadId));
     return thread?.queuePause ?? null;
   }
   async setQueuePause(threadId, pause) {
     await this.db.update(this.t.agentThread).set({
       queuePause: pause
-    }).where(eq(this.t.agentThread.id, threadId));
+    }).where(eq2(this.t.agentThread.id, threadId));
   }
   async setActiveStream(threadId, runId) {
     await this.db.update(this.t.agentThread).set({
       activeStreamId: runId
-    }).where(eq(this.t.agentThread.id, threadId));
+    }).where(eq2(this.t.agentThread.id, threadId));
   }
   /**
   * Patch a thread's `title` and/or `defaultAgent`. Each field is only touched when PRESENT in
@@ -1466,7 +2167,7 @@ var DrizzleAgentStore = class {
       return;
     }
     updates.updatedAt = /* @__PURE__ */ new Date();
-    await this.db.update(this.t.agentThread).set(updates).where(eq(this.t.agentThread.id, threadId));
+    await this.db.update(this.t.agentThread).set(updates).where(eq2(this.t.agentThread.id, threadId));
   }
   /**
   * The thread's default agent, projected — the caller wants one nullable scalar to decide which
@@ -1477,20 +2178,20 @@ var DrizzleAgentStore = class {
   async modelForThread(threadId) {
     const [thread] = await this.db.select({
       model: this.t.agentThread.model
-    }).from(this.t.agentThread).where(and(eq(this.t.agentThread.id, threadId), isNull(this.t.agentThread.deletedAt)));
+    }).from(this.t.agentThread).where(and2(eq2(this.t.agentThread.id, threadId), isNull2(this.t.agentThread.deletedAt)));
     return thread?.model ?? null;
   }
   /** The thread's pinned persona, projected like {@link defaultAgentForThread}. */
   async personaForThread(threadId) {
     const [thread] = await this.db.select({
       persona: this.t.agentThread.persona
-    }).from(agentThread).where(and(eq(this.t.agentThread.id, threadId), isNull(this.t.agentThread.deletedAt)));
+    }).from(agentThread).where(and2(eq2(this.t.agentThread.id, threadId), isNull2(this.t.agentThread.deletedAt)));
     return thread?.persona ?? null;
   }
   async defaultAgentForThread(threadId) {
     const [thread] = await this.db.select({
       defaultAgent: this.t.agentThread.defaultAgent
-    }).from(this.t.agentThread).where(and(eq(this.t.agentThread.id, threadId), isNull(this.t.agentThread.deletedAt)));
+    }).from(this.t.agentThread).where(and2(eq2(this.t.agentThread.id, threadId), isNull2(this.t.agentThread.deletedAt)));
     return thread?.defaultAgent ?? null;
   }
   /**
@@ -1532,16 +2233,16 @@ var DrizzleAgentStore = class {
     if (end.errorMessage !== void 0) {
       updates.errorMessage = end.errorMessage;
     }
-    await this.db.update(this.t.agentRun).set(updates).where(eq(this.t.agentRun.id, end.runId));
+    await this.db.update(this.t.agentRun).set(updates).where(eq2(this.t.agentRun.id, end.runId));
   }
   /** Bump the run's llm-step retry counter. Atomic `retries = retries + 1`, no read-modify-write. */
   async bumpRunRetries(runId) {
     await this.db.update(this.t.agentRun).set({
-      retries: sql2`${this.t.agentRun.retries} + 1`
-    }).where(eq(this.t.agentRun.id, runId));
+      retries: sql3`${this.t.agentRun.retries} + 1`
+    }).where(eq2(this.t.agentRun.id, runId));
   }
   async appendMessage(input) {
-    const [thread] = await this.db.select().from(this.t.agentThread).where(eq(this.t.agentThread.id, input.threadId));
+    const [thread] = await this.db.select().from(this.t.agentThread).where(eq2(this.t.agentThread.id, input.threadId));
     if (thread === void 0) {
       throw new Error(`thread ${input.threadId} not found`);
     }
@@ -1551,6 +2252,7 @@ var DrizzleAgentStore = class {
       threadId: input.threadId,
       role: input.role,
       content: input.content,
+      actionProposalOutcome: input.actionProposalOutcome ? canonicalActionProposalJson4(input.actionProposalOutcome) : null,
       toolCalls: input.toolCalls ?? null,
       toolResults: input.toolResults ?? null,
       attachments: input.attachments ?? null,
@@ -1569,32 +2271,32 @@ var DrizzleAgentStore = class {
     await this.db.insert(this.t.agentMessage).values(message);
     await this.db.update(this.t.agentThread).set({
       updatedAt: now
-    }).where(eq(this.t.agentThread.id, input.threadId));
+    }).where(eq2(this.t.agentThread.id, input.threadId));
     return this.toStoredMessage(message);
   }
   async setMessageToolResults(messageId, results) {
     await this.db.update(this.t.agentMessage).set({
       toolResults: results
-    }).where(eq(this.t.agentMessage.id, messageId));
+    }).where(eq2(this.t.agentMessage.id, messageId));
   }
   async setMessageUi(messageId, ui) {
     await this.db.update(this.t.agentMessage).set({
       ui: ui.length > 0 ? ui : null
-    }).where(eq(this.t.agentMessage.id, messageId));
+    }).where(eq2(this.t.agentMessage.id, messageId));
   }
   async threadOfMessage(messageId) {
     const [row] = await this.db.select({
       threadId: this.t.agentMessage.threadId
-    }).from(this.t.agentMessage).where(eq(this.t.agentMessage.id, messageId)).limit(1);
+    }).from(this.t.agentMessage).where(eq2(this.t.agentMessage.id, messageId)).limit(1);
     return row?.threadId ?? null;
   }
   async setMessageFeedback(messageId, feedback) {
     await this.db.update(this.t.agentMessage).set({
       feedback
-    }).where(eq(this.t.agentMessage.id, messageId));
+    }).where(eq2(this.t.agentMessage.id, messageId));
   }
   async truncateFrom(threadId, messageId) {
-    const messages = await this.db.select().from(this.t.agentMessage).where(eq(this.t.agentMessage.threadId, threadId)).orderBy(...this.messageOrder());
+    const messages = await this.db.select().from(this.t.agentMessage).where(eq2(this.t.agentMessage.threadId, threadId)).orderBy(...this.messageOrder());
     const cutoff = messages.findIndex((message) => message.id === messageId);
     if (cutoff < 0) {
       return;
@@ -1606,6 +2308,7 @@ var DrizzleAgentStore = class {
   async recordToolCall(input) {
     await this.db.insert(this.t.agentToolCall).values({
       id: input.toolCallId,
+      proposalId: input.proposalId ?? null,
       messageId: input.messageId,
       toolName: input.toolName,
       toolType: input.toolType,
@@ -1619,6 +2322,7 @@ var DrizzleAgentStore = class {
       executedAt: null,
       runId: input.runId ?? null,
       approver: input.approver ?? null,
+      confirmation: input.confirmation ?? null,
       expiresAt: input.expiresAt !== void 0 ? new Date(input.expiresAt) : null,
       remember: null,
       decidedVia: null
@@ -1649,7 +2353,7 @@ var DrizzleAgentStore = class {
     if (input.status === "executed" || input.status === "auto_executed") {
       updates.executedAt = /* @__PURE__ */ new Date();
     }
-    await this.db.update(this.t.agentToolCall).set(updates).where(eq(this.t.agentToolCall.id, input.toolCallId));
+    await this.db.update(this.t.agentToolCall).set(updates).where(eq2(this.t.agentToolCall.id, input.toolCallId));
   }
   async toolCallOutcomes(toolCallIds) {
     if (toolCallIds.length === 0) {
@@ -1675,7 +2379,7 @@ var DrizzleAgentStore = class {
     }));
   }
   async failUnsettledToolCalls(runId, error) {
-    const pending = and(eq(this.t.agentToolCall.runId, runId), eq(this.t.agentToolCall.status, "pending_approval"));
+    const pending = and2(eq2(this.t.agentToolCall.runId, runId), eq2(this.t.agentToolCall.status, "pending_approval"));
     const rows = await this.db.select({
       id: this.t.agentToolCall.id
     }).from(this.t.agentToolCall).where(pending);
@@ -1708,10 +2412,10 @@ var DrizzleAgentStore = class {
     }
     const rows = await this.db.select({
       attachments: this.t.agentMessage.attachments
-    }).from(this.t.agentMessage).innerJoin(this.t.agentThread, eq(this.t.agentMessage.threadId, this.t.agentThread.id)).where(and(eq(this.t.agentThread.actorRef, actorRef), isNotNull(this.t.agentMessage.attachments)));
+    }).from(this.t.agentMessage).innerJoin(this.t.agentThread, eq2(this.t.agentMessage.threadId, this.t.agentThread.id)).where(and2(eq2(this.t.agentThread.actorRef, actorRef), isNotNull(this.t.agentMessage.attachments)));
     const queued = await this.db.select({
       attachments: this.t.agentQueuedMessage.attachments
-    }).from(this.t.agentQueuedMessage).innerJoin(this.t.agentThread, eq(this.t.agentQueuedMessage.threadId, this.t.agentThread.id)).where(and(eq(this.t.agentThread.actorRef, actorRef), isNotNull(this.t.agentQueuedMessage.attachments)));
+    }).from(this.t.agentQueuedMessage).innerJoin(this.t.agentThread, eq2(this.t.agentQueuedMessage.threadId, this.t.agentThread.id)).where(and2(eq2(this.t.agentThread.actorRef, actorRef), isNotNull(this.t.agentQueuedMessage.attachments)));
     const wanted = new Set(mediaIds);
     const found = /* @__PURE__ */ new Set();
     for (const row of [
@@ -1750,7 +2454,7 @@ var DrizzleAgentStore = class {
   async usageBetween(actorRef, fromDay, toDay) {
     const start = /* @__PURE__ */ new Date(`${fromDay}T00:00:00.000Z`);
     const end = /* @__PURE__ */ new Date(`${toDay}T23:59:59.999Z`);
-    const rows = await this.db.select().from(this.t.agentTokenUsage).where(and(eq(this.t.agentTokenUsage.actorRef, actorRef), gte(this.t.agentTokenUsage.createdAt, start), lte(this.t.agentTokenUsage.createdAt, end)));
+    const rows = await this.db.select().from(this.t.agentTokenUsage).where(and2(eq2(this.t.agentTokenUsage.actorRef, actorRef), gte(this.t.agentTokenUsage.createdAt, start), lte2(this.t.agentTokenUsage.createdAt, end)));
     const usedTokens = rows.reduce((sum2, row) => sum2 + row.inputTokens + row.outputTokens, 0);
     const costUsd = rows.reduce((sum2, row) => sum2 + (row.costUsd ?? 0), 0);
     return {
@@ -1776,7 +2480,12 @@ var DrizzleAgentStore = class {
     };
   }
   toStoredMessage(message) {
+    const outcome = message.actionProposalOutcome ? JSON.parse(message.actionProposalOutcome) : void 0;
     return {
+      ...outcome ? {
+        actionProposalOutcome: outcome,
+        ui: outcome.ui
+      } : {},
       id: message.id,
       role: message.role,
       content: message.content,
@@ -1822,6 +2531,9 @@ var DrizzleAgentStore = class {
 };
 function toQueuedMessage(row) {
   return {
+    ...row.uiCapabilities !== null ? {
+      uiCapabilities: row.uiCapabilities
+    } : {},
     id: row.id,
     threadId: row.threadId,
     actor: row.actor,
@@ -1852,7 +2564,7 @@ __name(toQueuedMessage, "toQueuedMessage");
 
 // src/drizzle-governance-queries.ts
 import { bucketByActor, bucketByModel, bucketByThread, bucketUsageTrend, dayBoundsUtc, rollupThreadUsage, truncateDetailContent } from "@dudousxd/nestjs-agent-core";
-import { and as and2, asc as asc2, count, desc as desc2, eq as eq2, gte as gte2, inArray as inArray2, isNull as isNull2, like, lte as lte2, sql as sql3, sum } from "drizzle-orm";
+import { and as and3, asc as asc3, count, desc as desc2, eq as eq3, gte as gte2, inArray as inArray2, isNull as isNull3, like, lte as lte3, sql as sql4, sum } from "drizzle-orm";
 var UNCLASSIFIED_ERROR_CODE = "unknown";
 var DEFAULT_AGENT_BUCKET = "(default)";
 var TOOL_CALL_STATUSES = [
@@ -1990,7 +2702,7 @@ var DrizzleGovernanceQueries = class {
   }
   async usageInRange(range) {
     const { start, end } = dayBoundsUtc(range);
-    const rows = await this.db.select().from(this.t.agentTokenUsage).where(and2(gte2(this.t.agentTokenUsage.createdAt, start), lte2(this.t.agentTokenUsage.createdAt, end)));
+    const rows = await this.db.select().from(this.t.agentTokenUsage).where(and3(gte2(this.t.agentTokenUsage.createdAt, start), lte3(this.t.agentTokenUsage.createdAt, end)));
     return rows.map(toUsageInput);
   }
   async spendByModel(range) {
@@ -2015,7 +2727,7 @@ var DrizzleGovernanceQueries = class {
     if (threadIds.length === 0) {
       return [];
     }
-    const threads = await this.db.select().from(this.t.agentThread).where(and2(inArray2(this.t.agentThread.id, threadIds), isNull2(this.t.agentThread.deletedAt)));
+    const threads = await this.db.select().from(this.t.agentThread).where(and3(inArray2(this.t.agentThread.id, threadIds), isNull3(this.t.agentThread.deletedAt)));
     const threadsById = new Map(threads.map((thread) => [
       thread.id,
       {
@@ -2041,7 +2753,7 @@ var DrizzleGovernanceQueries = class {
       threadId: this.t.agentMessage.threadId,
       createdAt: this.t.agentToolCall.createdAt,
       runId: this.t.agentToolCall.runId
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq2(this.t.agentToolCall.messageId, this.t.agentMessage.id)).orderBy(desc2(this.t.agentToolCall.createdAt), desc2(this.t.agentToolCall.id)).limit(limit);
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq3(this.t.agentToolCall.messageId, this.t.agentMessage.id)).orderBy(desc2(this.t.agentToolCall.createdAt), desc2(this.t.agentToolCall.id)).limit(limit);
     return rows.map((row) => ({
       toolCallId: row.toolCallId,
       toolName: row.toolName,
@@ -2107,12 +2819,12 @@ var DrizzleGovernanceQueries = class {
     });
   }
   async recentThreads(limit) {
-    const threads = await this.db.select().from(this.t.agentThread).where(isNull2(this.t.agentThread.deletedAt)).orderBy(desc2(this.t.agentThread.updatedAt), desc2(this.t.agentThread.id)).limit(limit);
+    const threads = await this.db.select().from(this.t.agentThread).where(isNull3(this.t.agentThread.deletedAt)).orderBy(desc2(this.t.agentThread.updatedAt), desc2(this.t.agentThread.id)).limit(limit);
     return this.toThreadActivityRows(threads);
   }
   async runsInRange(range) {
     const { start, end } = dayBoundsUtc(range);
-    return this.db.select().from(this.t.agentRun).where(and2(gte2(this.t.agentRun.startedAt, start), lte2(this.t.agentRun.startedAt, end)));
+    return this.db.select().from(this.t.agentRun).where(and3(gte2(this.t.agentRun.startedAt, start), lte3(this.t.agentRun.startedAt, end)));
   }
   async runMetrics(range) {
     const runs = await this.runsInRange(range);
@@ -2169,7 +2881,7 @@ var DrizzleGovernanceQueries = class {
   }
   async runErrors(range) {
     const { start, end } = dayBoundsUtc(range);
-    const runs = await this.db.select().from(this.t.agentRun).where(and2(gte2(this.t.agentRun.startedAt, start), lte2(this.t.agentRun.startedAt, end), eq2(this.t.agentRun.status, "failed")));
+    const runs = await this.db.select().from(this.t.agentRun).where(and3(gte2(this.t.agentRun.startedAt, start), lte3(this.t.agentRun.startedAt, end), eq3(this.t.agentRun.status, "failed")));
     const byError = /* @__PURE__ */ new Map();
     for (const run of runs) {
       const errorCode = run.errorCode ?? UNCLASSIFIED_ERROR_CODE;
@@ -2228,7 +2940,7 @@ var DrizzleGovernanceQueries = class {
       agentName: this.t.agentMessage.agentName,
       requestedAt: this.t.agentToolCall.createdAt,
       runId: this.t.agentToolCall.runId
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq2(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, eq2(this.t.agentMessage.threadId, this.t.agentThread.id)).where(eq2(this.t.agentToolCall.status, "pending_approval")).orderBy(this.t.agentToolCall.createdAt, this.t.agentToolCall.id).limit(limit);
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq3(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, eq3(this.t.agentMessage.threadId, this.t.agentThread.id)).where(eq3(this.t.agentToolCall.status, "pending_approval")).orderBy(this.t.agentToolCall.createdAt, this.t.agentToolCall.id).limit(limit);
     return rows.map((row) => ({
       toolCallId: row.toolCallId,
       toolName: row.toolName,
@@ -2250,7 +2962,7 @@ var DrizzleGovernanceQueries = class {
   */
   async toolStats(range) {
     const { start, end } = dayBoundsUtc(range);
-    const calls = await this.db.select().from(this.t.agentToolCall).where(and2(gte2(this.t.agentToolCall.createdAt, start), lte2(this.t.agentToolCall.createdAt, end)));
+    const calls = await this.db.select().from(this.t.agentToolCall).where(and3(gte2(this.t.agentToolCall.createdAt, start), lte3(this.t.agentToolCall.createdAt, end)));
     const byTool = /* @__PURE__ */ new Map();
     for (const call of calls) {
       const key2 = `${call.toolName} ${call.toolType}`;
@@ -2300,10 +3012,10 @@ var DrizzleGovernanceQueries = class {
     if (filters?.toolType !== void 0 && !isToolKind(filters.toolType)) {
       return emptyPage(query);
     }
-    const whereClause = and2(filters?.toolName !== void 0 ? eq2(this.t.agentToolCall.toolName, filters.toolName) : void 0, filters?.toolType !== void 0 && isToolKind(filters.toolType) ? eq2(this.t.agentToolCall.toolType, filters.toolType) : void 0, filters?.status !== void 0 && isToolCallStatus(filters.status) ? eq2(this.t.agentToolCall.status, filters.status) : void 0, filters?.threadId !== void 0 ? eq2(this.t.agentMessage.threadId, filters.threadId) : void 0, filters?.fromDay !== void 0 ? gte2(this.t.agentToolCall.createdAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? lte2(this.t.agentToolCall.createdAt, dayEndUtc(filters.toDay)) : void 0);
+    const whereClause = and3(filters?.toolName !== void 0 ? eq3(this.t.agentToolCall.toolName, filters.toolName) : void 0, filters?.toolType !== void 0 && isToolKind(filters.toolType) ? eq3(this.t.agentToolCall.toolType, filters.toolType) : void 0, filters?.status !== void 0 && isToolCallStatus(filters.status) ? eq3(this.t.agentToolCall.status, filters.status) : void 0, filters?.threadId !== void 0 ? eq3(this.t.agentMessage.threadId, filters.threadId) : void 0, filters?.fromDay !== void 0 ? gte2(this.t.agentToolCall.createdAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? lte3(this.t.agentToolCall.createdAt, dayEndUtc(filters.toDay)) : void 0);
     const [totalRow] = await this.db.select({
       value: count()
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq2(this.t.agentToolCall.messageId, this.t.agentMessage.id)).where(whereClause);
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq3(this.t.agentToolCall.messageId, this.t.agentMessage.id)).where(whereClause);
     const rows = await this.db.select({
       toolCallId: this.t.agentToolCall.id,
       toolName: this.t.agentToolCall.toolName,
@@ -2312,7 +3024,7 @@ var DrizzleGovernanceQueries = class {
       threadId: this.t.agentMessage.threadId,
       createdAt: this.t.agentToolCall.createdAt,
       runId: this.t.agentToolCall.runId
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq2(this.t.agentToolCall.messageId, this.t.agentMessage.id)).where(whereClause).orderBy(desc2(this.t.agentToolCall.createdAt), desc2(this.t.agentToolCall.id)).limit(query.pageSize).offset((query.page - 1) * query.pageSize);
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq3(this.t.agentToolCall.messageId, this.t.agentMessage.id)).where(whereClause).orderBy(desc2(this.t.agentToolCall.createdAt), desc2(this.t.agentToolCall.id)).limit(query.pageSize).offset((query.page - 1) * query.pageSize);
     return {
       rows: rows.map((row) => ({
         toolCallId: row.toolCallId,
@@ -2336,7 +3048,7 @@ var DrizzleGovernanceQueries = class {
   */
   async threadsPage(query) {
     const filters = query.where;
-    const whereClause = and2(isNull2(this.t.agentThread.deletedAt), filters?.actorRef !== void 0 ? eq2(this.t.agentThread.actorRef, filters.actorRef) : void 0, filters?.title !== void 0 ? like(sql3`lower(${this.t.agentThread.title})`, `%${filters.title.toLowerCase()}%`) : void 0, filters?.fromDay !== void 0 ? gte2(this.t.agentThread.updatedAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? lte2(this.t.agentThread.updatedAt, dayEndUtc(filters.toDay)) : void 0);
+    const whereClause = and3(isNull3(this.t.agentThread.deletedAt), filters?.actorRef !== void 0 ? eq3(this.t.agentThread.actorRef, filters.actorRef) : void 0, filters?.title !== void 0 ? like(sql4`lower(${this.t.agentThread.title})`, `%${filters.title.toLowerCase()}%`) : void 0, filters?.fromDay !== void 0 ? gte2(this.t.agentThread.updatedAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? lte3(this.t.agentThread.updatedAt, dayEndUtc(filters.toDay)) : void 0);
     const [totalRow] = await this.db.select({
       value: count()
     }).from(this.t.agentThread).where(whereClause);
@@ -2358,7 +3070,7 @@ var DrizzleGovernanceQueries = class {
     if (filters?.status !== void 0 && !isRunStatus(filters.status)) {
       return emptyPage(query);
     }
-    const whereClause = and2(filters?.agentName !== void 0 ? eq2(this.t.agentRun.agentName, filters.agentName) : void 0, filters?.status !== void 0 && isRunStatus(filters.status) ? eq2(this.t.agentRun.status, filters.status) : void 0, filters?.errorCode !== void 0 ? eq2(this.t.agentRun.errorCode, filters.errorCode) : void 0, filters?.threadId !== void 0 ? eq2(this.t.agentRun.threadId, filters.threadId) : void 0, filters?.fromDay !== void 0 ? gte2(this.t.agentRun.startedAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? lte2(this.t.agentRun.startedAt, dayEndUtc(filters.toDay)) : void 0);
+    const whereClause = and3(filters?.agentName !== void 0 ? eq3(this.t.agentRun.agentName, filters.agentName) : void 0, filters?.status !== void 0 && isRunStatus(filters.status) ? eq3(this.t.agentRun.status, filters.status) : void 0, filters?.errorCode !== void 0 ? eq3(this.t.agentRun.errorCode, filters.errorCode) : void 0, filters?.threadId !== void 0 ? eq3(this.t.agentRun.threadId, filters.threadId) : void 0, filters?.fromDay !== void 0 ? gte2(this.t.agentRun.startedAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? lte3(this.t.agentRun.startedAt, dayEndUtc(filters.toDay)) : void 0);
     const [totalRow] = await this.db.select({
       value: count()
     }).from(this.t.agentRun).where(whereClause);
@@ -2382,10 +3094,10 @@ var DrizzleGovernanceQueries = class {
   */
   async approvalsPage(query) {
     const filters = query.where;
-    const whereClause = and2(eq2(this.t.agentToolCall.status, "pending_approval"), filters?.toolName !== void 0 ? eq2(this.t.agentToolCall.toolName, filters.toolName) : void 0, filters?.threadId !== void 0 ? eq2(this.t.agentThread.id, filters.threadId) : void 0, filters?.actorRef !== void 0 ? eq2(this.t.agentThread.actorRef, filters.actorRef) : void 0, filters?.agentName !== void 0 ? eq2(this.t.agentMessage.agentName, filters.agentName) : void 0, filters?.fromDay !== void 0 ? gte2(this.t.agentToolCall.createdAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? lte2(this.t.agentToolCall.createdAt, dayEndUtc(filters.toDay)) : void 0);
+    const whereClause = and3(eq3(this.t.agentToolCall.status, "pending_approval"), filters?.toolName !== void 0 ? eq3(this.t.agentToolCall.toolName, filters.toolName) : void 0, filters?.threadId !== void 0 ? eq3(this.t.agentThread.id, filters.threadId) : void 0, filters?.actorRef !== void 0 ? eq3(this.t.agentThread.actorRef, filters.actorRef) : void 0, filters?.agentName !== void 0 ? eq3(this.t.agentMessage.agentName, filters.agentName) : void 0, filters?.fromDay !== void 0 ? gte2(this.t.agentToolCall.createdAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? lte3(this.t.agentToolCall.createdAt, dayEndUtc(filters.toDay)) : void 0);
     const [totalRow] = await this.db.select({
       value: count()
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq2(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, eq2(this.t.agentMessage.threadId, this.t.agentThread.id)).where(whereClause);
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq3(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, eq3(this.t.agentMessage.threadId, this.t.agentThread.id)).where(whereClause);
     const rows = await this.db.select({
       toolCallId: this.t.agentToolCall.id,
       toolName: this.t.agentToolCall.toolName,
@@ -2396,7 +3108,7 @@ var DrizzleGovernanceQueries = class {
       agentName: this.t.agentMessage.agentName,
       requestedAt: this.t.agentToolCall.createdAt,
       runId: this.t.agentToolCall.runId
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq2(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, eq2(this.t.agentMessage.threadId, this.t.agentThread.id)).where(whereClause).orderBy(asc2(this.t.agentToolCall.createdAt), asc2(this.t.agentToolCall.id)).limit(query.pageSize).offset((query.page - 1) * query.pageSize);
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq3(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, eq3(this.t.agentMessage.threadId, this.t.agentThread.id)).where(whereClause).orderBy(asc3(this.t.agentToolCall.createdAt), asc3(this.t.agentToolCall.id)).limit(query.pageSize).offset((query.page - 1) * query.pageSize);
     return {
       rows: rows.map((row) => ({
         toolCallId: row.toolCallId,
@@ -2423,11 +3135,11 @@ var DrizzleGovernanceQueries = class {
     const [row] = await this.db.select({
       run: this.t.agentRun,
       thread: this.t.agentThread
-    }).from(this.t.agentRun).innerJoin(this.t.agentThread, eq2(this.t.agentRun.threadId, this.t.agentThread.id)).where(eq2(this.t.agentRun.id, runId)).limit(1);
+    }).from(this.t.agentRun).innerJoin(this.t.agentThread, eq3(this.t.agentRun.threadId, this.t.agentThread.id)).where(eq3(this.t.agentRun.id, runId)).limit(1);
     if (row === void 0) {
       return null;
     }
-    const toolCalls = await this.db.select().from(this.t.agentToolCall).where(eq2(this.t.agentToolCall.runId, runId)).orderBy(asc2(this.t.agentToolCall.createdAt), asc2(this.t.agentToolCall.id));
+    const toolCalls = await this.db.select().from(this.t.agentToolCall).where(eq3(this.t.agentToolCall.runId, runId)).orderBy(asc3(this.t.agentToolCall.createdAt), asc3(this.t.agentToolCall.id));
     return {
       run: toRecentRunRow(row.run),
       thread: {
@@ -2446,27 +3158,27 @@ var DrizzleGovernanceQueries = class {
   * message. Soft-deleted threads are returned with `deleted: true`; an audit still needs them.
   */
   async threadDetail(query) {
-    const [thread] = await this.db.select().from(this.t.agentThread).where(eq2(this.t.agentThread.id, query.threadId)).limit(1);
+    const [thread] = await this.db.select().from(this.t.agentThread).where(eq3(this.t.agentThread.id, query.threadId)).limit(1);
     if (thread === void 0) {
       return null;
     }
     const pricing = await this.loadPricing();
-    const usageRows = await this.db.select().from(this.t.agentTokenUsage).where(eq2(this.t.agentTokenUsage.threadId, thread.id));
+    const usageRows = await this.db.select().from(this.t.agentTokenUsage).where(eq3(this.t.agentTokenUsage.threadId, thread.id));
     const usage = rollupThreadUsage(usageRows.map(toUsageInput), pricing);
     const [messageCountRow] = await this.db.select({
       value: count()
-    }).from(this.t.agentMessage).where(eq2(this.t.agentMessage.threadId, thread.id));
-    const messages = await this.db.select().from(this.t.agentMessage).where(eq2(this.t.agentMessage.threadId, thread.id)).orderBy(
+    }).from(this.t.agentMessage).where(eq3(this.t.agentMessage.threadId, thread.id));
+    const messages = await this.db.select().from(this.t.agentMessage).where(eq3(this.t.agentMessage.threadId, thread.id)).orderBy(
       // Append order (see DrizzleAgentStore's message order), newest first.
-      desc2(sql3`coalesce(${this.t.agentMessage.seq}, 0)`),
+      desc2(sql4`coalesce(${this.t.agentMessage.seq}, 0)`),
       desc2(this.t.agentMessage.createdAt),
       desc2(this.t.agentMessage.id)
     ).limit(query.messageLimit);
     const toolCallCounts = await this.toolCallCountsByMessage(messages.map((message) => message.id));
     const [runTotalRow] = await this.db.select({
       value: count()
-    }).from(this.t.agentRun).where(eq2(this.t.agentRun.threadId, thread.id));
-    const runs = await this.db.select().from(this.t.agentRun).where(eq2(this.t.agentRun.threadId, thread.id)).orderBy(desc2(this.t.agentRun.startedAt), desc2(this.t.agentRun.id)).limit(query.runLimit);
+    }).from(this.t.agentRun).where(eq3(this.t.agentRun.threadId, thread.id));
+    const runs = await this.db.select().from(this.t.agentRun).where(eq3(this.t.agentRun.threadId, thread.id)).orderBy(desc2(this.t.agentRun.startedAt), desc2(this.t.agentRun.id)).limit(query.runLimit);
     return {
       thread: {
         threadId: thread.id,
@@ -2513,7 +3225,7 @@ var DrizzleGovernanceQueries = class {
 
 // src/drizzle-memory-provider.ts
 import { actorScope } from "@dudousxd/nestjs-agent-core";
-import { and as and3, eq as eq3, inArray as inArray3 } from "drizzle-orm";
+import { and as and4, eq as eq4, inArray as inArray3 } from "drizzle-orm";
 function toRecord(row) {
   return {
     id: row.id,
@@ -2577,7 +3289,7 @@ var DrizzleMemoryProvider = class {
   * answer cannot be used to find out which memories exist about other people.
   */
   async forget({ id, ctx }) {
-    const deleted = await affectedRows(this.dialect, this.db.delete(this.t.agentMemory).where(and3(eq3(this.t.agentMemory.id, id), eq3(this.t.agentMemory.scope, actorScope(ctx.actor)))), this.t.agentMemory.id);
+    const deleted = await affectedRows(this.dialect, this.db.delete(this.t.agentMemory).where(and4(eq4(this.t.agentMemory.id, id), eq4(this.t.agentMemory.scope, actorScope(ctx.actor)))), this.t.agentMemory.id);
     return deleted > 0;
   }
   /**
@@ -2626,7 +3338,7 @@ var DrizzleMemoryProvider = class {
         memory.scope,
         memory.key
       ], set);
-      [row] = await this.db.select().from(memory).where(and3(eq3(memory.scope, scope), eq3(memory.key, key2)));
+      [row] = await this.db.select().from(memory).where(and4(eq4(memory.scope, scope), eq4(memory.key, key2)));
     } else {
       [row] = await insert.onConflictDoUpdate({
         target: [
@@ -2653,7 +3365,7 @@ var DrizzleMemoryProvider = class {
     const updated = await affectedRows(this.dialect, this.db.update(this.t.agentMemory).set({
       pinned,
       updatedAt: /* @__PURE__ */ new Date()
-    }).where(eq3(this.t.agentMemory.id, id)), this.t.agentMemory.id);
+    }).where(eq4(this.t.agentMemory.id, id)), this.t.agentMemory.id);
     return updated > 0;
   }
 };
@@ -2666,7 +3378,7 @@ function assertAuthorMayWriteScope({ scope, origin, ctx }) {
 __name(assertAuthorMayWriteScope, "assertAuthorMayWriteScope");
 
 // src/drizzle-pricing-store.ts
-import { and as and4, eq as eq4 } from "drizzle-orm";
+import { and as and5, eq as eq5 } from "drizzle-orm";
 var DrizzlePricingStore = class {
   static {
     __name(this, "DrizzlePricingStore");
@@ -2682,7 +3394,7 @@ var DrizzlePricingStore = class {
   async upsertModelPrice(input) {
     await this.db.update(this.t.agentModelPricing).set({
       isCurrent: false
-    }).where(and4(eq4(this.t.agentModelPricing.modelId, input.modelId), eq4(this.t.agentModelPricing.isCurrent, true)));
+    }).where(and5(eq5(this.t.agentModelPricing.modelId, input.modelId), eq5(this.t.agentModelPricing.isCurrent, true)));
     await this.db.insert(this.t.agentModelPricing).values({
       id: crypto.randomUUID(),
       modelId: input.modelId,
@@ -2695,7 +3407,7 @@ var DrizzlePricingStore = class {
     });
   }
   async listCurrentPrices() {
-    const rows = await this.db.select().from(this.t.agentModelPricing).where(eq4(this.t.agentModelPricing.isCurrent, true));
+    const rows = await this.db.select().from(this.t.agentModelPricing).where(eq5(this.t.agentModelPricing.isCurrent, true));
     return rows.map((row) => ({
       modelId: row.modelId,
       inputPricePer1m: row.inputPricePer1m,
@@ -2713,7 +3425,7 @@ var DrizzlePricingStore = class {
 
 // src/drizzle-token-stream-sink.ts
 import { SqlTokenStreamSink } from "@dudousxd/nestjs-agent-core";
-import { and as and5, asc as asc3, eq as eq5, gt, inArray as inArray4, lt, max as max2, sql as sql4 } from "drizzle-orm";
+import { and as and6, asc as asc4, eq as eq6, gt as gt2, inArray as inArray4, lt, max as max3, sql as sql5 } from "drizzle-orm";
 var DrizzleStreamFrameTable = class {
   static {
     __name(this, "DrizzleStreamFrameTable");
@@ -2727,7 +3439,7 @@ var DrizzleStreamFrameTable = class {
     this.db = asBuilder(db);
   }
   async append(runId, row) {
-    await runSql(this.db, this.dialect, sql4`INSERT INTO agent_stream_frame (run_id, seq, frame, error, created_at)
+    await runSql(this.db, this.dialect, sql5`INSERT INTO agent_stream_frame (run_id, seq, frame, error, created_at)
           SELECT ${runId}, COALESCE(MAX(seq), 0) + 1, ${row.frame}, ${row.error}, ${row.createdAt}
           FROM agent_stream_frame WHERE run_id = ${runId}`);
   }
@@ -2736,12 +3448,12 @@ var DrizzleStreamFrameTable = class {
       seq: this.t.agentStreamFrame.seq,
       frame: this.t.agentStreamFrame.frame,
       error: this.t.agentStreamFrame.error
-    }).from(this.t.agentStreamFrame).where(and5(eq5(this.t.agentStreamFrame.runId, runId), gt(this.t.agentStreamFrame.seq, after))).orderBy(asc3(this.t.agentStreamFrame.seq)).limit(limit);
+    }).from(this.t.agentStreamFrame).where(and6(eq6(this.t.agentStreamFrame.runId, runId), gt2(this.t.agentStreamFrame.seq, after))).orderBy(asc4(this.t.agentStreamFrame.seq)).limit(limit);
   }
   async has(runId) {
     const rows = await this.db.select({
       seq: this.t.agentStreamFrame.seq
-    }).from(this.t.agentStreamFrame).where(eq5(this.t.agentStreamFrame.runId, runId)).limit(1);
+    }).from(this.t.agentStreamFrame).where(eq6(this.t.agentStreamFrame.runId, runId)).limit(1);
     return rows.length > 0;
   }
   async remove(runIds) {
@@ -2753,7 +3465,7 @@ var DrizzleStreamFrameTable = class {
   async lapsedRuns(cutoff) {
     const rows = await this.db.select({
       runId: this.t.agentStreamFrame.runId
-    }).from(this.t.agentStreamFrame).groupBy(this.t.agentStreamFrame.runId).having(lt(max2(this.t.agentStreamFrame.createdAt), cutoff));
+    }).from(this.t.agentStreamFrame).groupBy(this.t.agentStreamFrame.runId).having(lt(max3(this.t.agentStreamFrame.createdAt), cutoff));
     return rows.map((row) => row.runId);
   }
   isUniqueViolation(error) {
@@ -2770,7 +3482,7 @@ var DrizzleTokenStreamSink = class extends SqlTokenStreamSink {
 };
 
 // src/drizzle-confirm-token-store.ts
-import { eq as eq6, lt as lt2 } from "drizzle-orm";
+import { eq as eq7, lt as lt2 } from "drizzle-orm";
 var DrizzleConfirmTokenStore = class {
   static {
     __name(this, "DrizzleConfirmTokenStore");
@@ -2800,7 +3512,7 @@ var DrizzleConfirmTokenStore = class {
     return inserted === 1;
   }
   async release(hash) {
-    await this.db.delete(this.t.agentConfirmToken).where(eq6(this.t.agentConfirmToken.hash, hash));
+    await this.db.delete(this.t.agentConfirmToken).where(eq7(this.t.agentConfirmToken.hash, hash));
   }
   async purgeExpired(now = Date.now()) {
     const table = this.t.agentConfirmToken;
@@ -2811,7 +3523,7 @@ var DrizzleConfirmTokenStore = class {
 // src/drizzle-rag-ingestion-log.ts
 import { subscribe, unsubscribe } from "diagnostics_channel";
 import { Injectable, Logger } from "@nestjs/common";
-import { and as and6, asc as asc4, count as count2, desc as desc3, eq as eq7, gt as gt2, lt as lt3, or as or2 } from "drizzle-orm";
+import { and as and7, asc as asc5, count as count2, desc as desc3, eq as eq8, gt as gt3, lt as lt3, or as or3 } from "drizzle-orm";
 function _ts_decorate(decorators, target, key2, desc4) {
   var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key2) : desc4, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -2860,7 +3572,7 @@ function num(value) {
 __name(num, "num");
 var RAG_INGESTION_LOG_PAGE_ORDER = [
   desc3(ragIngestionLog.updatedAt),
-  asc4(ragIngestionLog.documentId)
+  asc5(ragIngestionLog.documentId)
 ];
 var DEFAULT_PAGE_SIZE = 200;
 var DEFAULT_BATCH_SIZE = 200;
@@ -3010,17 +3722,17 @@ var DrizzleRagIngestionLog = class _DrizzleRagIngestionLog {
   }
   /** The latest recorded outcome for one document, or null if it was never attempted. */
   async get(documentId) {
-    const [row] = await this.db.select().from(this.t.ragIngestionLog).where(eq7(this.t.ragIngestionLog.documentId, documentId));
+    const [row] = await this.db.select().from(this.t.ragIngestionLog).where(eq8(this.t.ragIngestionLog.documentId, documentId));
     return row ?? null;
   }
   /** Forget one document's record. Returns whether a row was actually removed. */
   async remove(documentId) {
-    const removed = await affectedRows(this.dialect, this.db.delete(this.t.ragIngestionLog).where(eq7(this.t.ragIngestionLog.documentId, documentId)), this.t.ragIngestionLog.documentId);
+    const removed = await affectedRows(this.dialect, this.db.delete(this.t.ragIngestionLog).where(eq8(this.t.ragIngestionLog.documentId, documentId)), this.t.ragIngestionLog.documentId);
     return removed > 0;
   }
   /** Forget every record for a collection — for when the collection itself is deleted. */
   async removeByCollection(collection) {
-    const removed = await affectedRows(this.dialect, this.db.delete(this.t.ragIngestionLog).where(eq7(this.t.ragIngestionLog.collection, collection)), this.t.ragIngestionLog.documentId);
+    const removed = await affectedRows(this.dialect, this.db.delete(this.t.ragIngestionLog).where(eq8(this.t.ragIngestionLog.collection, collection)), this.t.ragIngestionLog.documentId);
     return removed;
   }
   /**
@@ -3050,7 +3762,7 @@ var DrizzleRagIngestionLog = class _DrizzleRagIngestionLog {
     }
   }
   where(query) {
-    return and6(query.collection !== void 0 ? eq7(this.t.ragIngestionLog.collection, query.collection) : void 0, query.status !== void 0 ? eq7(this.t.ragIngestionLog.status, query.status) : void 0);
+    return and7(query.collection !== void 0 ? eq8(this.t.ragIngestionLog.collection, query.collection) : void 0, query.status !== void 0 ? eq8(this.t.ragIngestionLog.status, query.status) : void 0);
   }
   /**
   * The coordinates filter AND'd with "strictly after `cursor` in
@@ -3065,7 +3777,7 @@ var DrizzleRagIngestionLog = class _DrizzleRagIngestionLog {
     if (cursor === void 0) {
       return base;
     }
-    return and6(base, or2(lt3(this.t.ragIngestionLog.updatedAt, cursor.updatedAt), and6(eq7(this.t.ragIngestionLog.updatedAt, cursor.updatedAt), gt2(this.t.ragIngestionLog.documentId, cursor.documentId))));
+    return and7(base, or3(lt3(this.t.ragIngestionLog.updatedAt, cursor.updatedAt), and7(eq8(this.t.ragIngestionLog.updatedAt, cursor.updatedAt), gt3(this.t.ragIngestionLog.documentId, cursor.documentId))));
   }
   /**
   * Upsert one outcome. Keyed by document id so the row always reflects the *current* state — a
@@ -3240,6 +3952,7 @@ DrizzleAgentStoreModule = _ts_decorate2([
   Module({})
 ], DrizzleAgentStoreModule);
 export {
+  DrizzleActionProposalStore,
   DrizzleAgentStore,
   DrizzleAgentStoreModule,
   DrizzleConfirmTokenStore,
@@ -3250,6 +3963,7 @@ export {
   DrizzleStreamFrameTable,
   DrizzleTokenStreamSink,
   RAG_INGESTION_LOG_PAGE_ORDER,
+  agentActionProposal,
   agentConfirmToken,
   agentDialectOf,
   agentMemory,