@dudousxd/nestjs-agent 0.11.0 → 0.12.0

package/dist/index.cjs

@@ -25,6 +25,7 @@ __export(index_exports, {
   AGENT_METADATA: () => AGENT_METADATA,
   AGENT_TOOL_BRAND: () => AGENT_TOOL_BRAND,
   AI_TOOL_METADATA: () => AI_TOOL_METADATA,
+  ATTACHMENT_PAGE_SIZE: () => ATTACHMENT_PAGE_SIZE,
   Agent: () => Agent,
   AgentApprovalPortAdapter: () => AgentApprovalPortAdapter,
   AgentDepsFactory: () => AgentDepsFactory2,
@@ -40,22 +41,31 @@ __export(index_exports, {
   InProcessTokenStreamSink: () => InProcessTokenStreamSink,
   InlineAgentRunner: () => InlineAgentRunner,
   LedgerQuotaStore: () => LedgerQuotaStore,
+  MemoriesController: () => MemoriesController,
+  SKILL_METADATA: () => SKILL_METADATA,
   SYSTEM_PROMPT_CONTRIBUTOR_METADATA: () => SYSTEM_PROMPT_CONTRIBUTOR_METADATA,
   SYSTEM_PROMPT_METADATA: () => SYSTEM_PROMPT_METADATA,
+  Skill: () => Skill,
+  SkillDiscoveryService: () => SkillDiscoveryService,
+  SkillsController: () => SkillsController,
   SystemPrompt: () => SystemPrompt,
   SystemPromptContributor: () => SystemPromptContributor,
+  declaredSkillProvider: () => declaredSkillProvider,
   delegateToolName: () => delegateToolName,
   provideAgentTool: () => provideAgentTool,
   readAgentMetadata: () => readAgentMetadata,
   readAiToolMetadata: () => readAiToolMetadata,
+  readSkillMetadata: () => readSkillMetadata,
+  resolveSkillsConfig: () => resolveSkillsConfig,
+  skillScope: () => skillScope,
   utcDay: () => utcDay
 });
 module.exports = __toCommonJS(index_exports);
 
 // src/agent.module.ts
-var import_nestjs_agent_core14 = require("@dudousxd/nestjs-agent-core");
-var import_common13 = require("@nestjs/common");
-var import_core3 = require("@nestjs/core");
+var import_nestjs_agent_core19 = require("@dudousxd/nestjs-agent-core");
+var import_common16 = require("@nestjs/common");
+var import_core4 = require("@nestjs/core");
 
 // src/agent-deps.factory.ts
 var import_nestjs_agent_core = require("@dudousxd/nestjs-agent-core");
@@ -78,8 +88,9 @@ function _ts_param(paramIndex, decorator) {
   };
 }
 __name(_ts_param, "_ts_param");
-function delegateToolName(target) {
-  return `ask_${target.replace(/[^a-zA-Z0-9]+/g, "_")}`;
+function delegateToolName(args) {
+  const slug = args.target.replace(/[^a-zA-Z0-9]+/g, "_");
+  return args.detached === true ? `start_${slug}` : `ask_${slug}`;
 }
 __name(delegateToolName, "delegateToolName");
 var AgentDepsFactory2 = class {
@@ -96,7 +107,9 @@ var AgentDepsFactory2 = class {
   promptContributors;
   quota;
   pricingStore;
-  constructor(options, model, store, sink, rolesPolicy, registry, agents, promptContributors, quota, pricingStore) {
+  skills;
+  memory;
+  constructor(options, model, store, sink, rolesPolicy, registry, agents, promptContributors, quota, pricingStore, skills, memory) {
     this.options = options;
     this.model = model;
     this.store = store;
@@ -107,6 +120,16 @@ var AgentDepsFactory2 = class {
     this.promptContributors = promptContributors;
     this.quota = quota;
     this.pricingStore = pricingStore;
+    this.skills = skills;
+    this.memory = memory;
+  }
+  /** The turn's memory seam, shared with the read-back endpoint. Undefined → memory is not configured. */
+  memoryConfig() {
+    return this.memory;
+  }
+  /** The turn's skills seam, shared with the listing endpoint. Undefined → skills are not configured. */
+  skillsConfig() {
+    return this.skills;
   }
   /**
   * The agent a turn uses when the caller names none: the explicit `defaultAgent` option, else the
@@ -123,7 +146,13 @@ var AgentDepsFactory2 = class {
     if (definition === void 0) {
       return void 0;
     }
-    const delegated = (definition.delegatesTo ?? []).map(delegateToolName);
+    const delegated = (definition.delegatesTo ?? []).map((edge) => {
+      const { agent, detached } = (0, import_nestjs_agent_core.normalizeDelegation)(edge);
+      return delegateToolName({
+        target: agent,
+        detached
+      });
+    });
     if (definition.tools === void 0 && delegated.length === 0) {
       return void 0;
     }
@@ -138,6 +167,8 @@ var AgentDepsFactory2 = class {
     const toolAllowList = this.effectiveTools(definition);
     const followUpsCount = this.followUpsCount();
     const retrieval = this.options.retrieval;
+    const historyPolicy = this.historyPolicy(definition);
+    const ask = definition?.ask ?? this.options.ask;
     return {
       model: this.model,
       store: this.store,
@@ -147,6 +178,12 @@ var AgentDepsFactory2 = class {
       promptContributors: this.promptContributors,
       systemPrompt: definition?.systemPrompt ?? "You are a helpful assistant.",
       maxSteps: definition?.maxSteps ?? 8,
+      ...definition?.maxDelegationDepth !== void 0 ? {
+        maxDelegationDepth: definition.maxDelegationDepth
+      } : {},
+      ...definition?.maxAgentAppearances !== void 0 ? {
+        maxAgentAppearances: definition.maxAgentAppearances
+      } : {},
       ...definition?.modelId !== void 0 ? {
         modelId: definition.modelId
       } : {},
@@ -156,6 +193,37 @@ var AgentDepsFactory2 = class {
       ...this.pricingStore !== void 0 ? {
         pricingStore: this.pricingStore
       } : {},
+      ...historyPolicy !== void 0 ? {
+        historyPolicy
+      } : {},
+      inputProcessors: this.options.inputProcessors ?? [],
+      outputProcessors: this.options.outputProcessors ?? [],
+      ...definition?.outputSchema !== void 0 ? {
+        outputSchema: definition.outputSchema
+      } : {},
+      ...definition?.outputRepairAttempts !== void 0 ? {
+        outputRepairAttempts: definition.outputRepairAttempts
+      } : {},
+      ...definition?.intake !== void 0 ? {
+        intake: definition.intake
+      } : {},
+      // Most specific wins, exactly as `historyPolicy` resolves: the agent's own `@Agent({ ask })`,
+      // else the module-wide flag. Both are module config, so every process of a deployment agrees.
+      ...ask === true ? {
+        ask: true
+      } : {},
+      // Module-wide, never per-agent: a skill is a procedure, not a persona, and an agent that could
+      // opt out of one would make the catalog depend on which agent a turn happened to select — a
+      // per-turn fact the worker re-deriving the tool list cannot see.
+      ...this.skills !== void 0 ? {
+        skills: this.skills
+      } : {},
+      // Module-wide, never per-agent, for the same reason skills are: which memories a turn carries
+      // cannot depend on which persona answered it, or the worker re-deriving a dispatched turn's
+      // tool list would disagree with the loop about whether `remember` was offered.
+      ...this.memory !== void 0 ? {
+        memory: this.memory
+      } : {},
       ...toolAllowList !== void 0 ? {
         toolAllowList
       } : {},
@@ -176,6 +244,36 @@ var AgentDepsFactory2 = class {
       } : {}
     };
   }
+  /**
+  * The ceiling on how much of a thread this agent's turns carry, most specific wins: the agent's
+  * own `@Agent({ history })`, else a module-wide custom `historyPolicy`, else the module-wide
+  * `history` window. Undefined → unbounded, the behaviour of a module that configures none.
+  */
+  historyPolicy(definition) {
+    if (definition?.history !== void 0) {
+      return this.window(definition.history);
+    }
+    if (this.options.historyPolicy !== void 0) {
+      return this.options.historyPolicy;
+    }
+    return this.options.history === void 0 ? void 0 : this.window(this.options.history);
+  }
+  /** Build the built-in window policy from the declarative `{ maxMessages, maxTokens, summarize }`. */
+  window(config) {
+    return (0, import_nestjs_agent_core.windowHistory)({
+      ...config.maxMessages !== void 0 ? {
+        maxMessages: config.maxMessages
+      } : {},
+      ...config.maxTokens !== void 0 ? {
+        maxTokens: config.maxTokens
+      } : {},
+      // The shared module model, not a per-agent one: an agent's `modelId` is an accounting label,
+      // and only one provider is ever bound.
+      ...config.summarize === true ? {
+        summarize: (0, import_nestjs_agent_core.summarizeWithModel)(this.model)
+      } : {}
+    });
+  }
   /** Normalize the `followUps` option (`true` → 3, `{ count }` → count) to a number, or undefined. */
   followUpsCount() {
     const followUps = this.options.followUps;
@@ -201,6 +299,10 @@ AgentDepsFactory2 = _ts_decorate([
   _ts_param(8, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_QUOTA_STORE)),
   _ts_param(9, (0, import_common.Optional)()),
   _ts_param(9, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_PRICING_STORE)),
+  _ts_param(10, (0, import_common.Optional)()),
+  _ts_param(10, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_SKILLS)),
+  _ts_param(11, (0, import_common.Optional)()),
+  _ts_param(11, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_MEMORY)),
   _ts_metadata("design:type", Function),
   _ts_metadata("design:paramtypes", [
     typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
@@ -212,6 +314,8 @@ AgentDepsFactory2 = _ts_decorate([
     typeof import_nestjs_agent_core.AgentRegistry === "undefined" ? Object : import_nestjs_agent_core.AgentRegistry,
     Array,
     Object,
+    Object,
+    Object,
     Object
   ])
 ], AgentDepsFactory2);
@@ -262,14 +366,17 @@ var AgentService = class {
   store;
   deps;
   quota;
-  constructor(runner, store, deps, quota) {
+  staging;
+  constructor(runner, store, deps, quota, staging) {
     this.runner = runner;
     this.store = store;
     this.deps = deps;
     this.quota = quota;
+    this.staging = staging;
   }
   async chat(params) {
     const agentName = await this.resolveAgentName(params.agentName, params.threadId);
+    const attachments = await this.resolveAttachments(params.actor, params.attachments ?? []);
     let threadId = params.threadId;
     if (threadId === void 0) {
       if (params.regenerate === true) {
@@ -294,8 +401,8 @@ var AgentService = class {
       ...params.regenerate === true ? {
         regenerate: true
       } : {},
-      ...params.attachments !== void 0 ? {
-        attachments: params.attachments
+      ...attachments.length > 0 ? {
+        attachments
       } : {},
       ...params.pageContext !== void 0 ? {
         pageContext: params.pageContext
@@ -308,18 +415,66 @@ var AgentService = class {
       threadId
     };
   }
+  /**
+  * Rebuild this turn's attachments from the staging store, keyed by the ids the caller claimed.
+  * The model provider fetches {@link MessageAttachment.url} verbatim, so that url is only ever
+  * allowed to come from the host's own store — a caller that could name it could point the server
+  * at anything it can reach (cloud metadata, internal services) and read the response back out of
+  * the model's answer.
+  *
+  * No store bound means no way to tell an id the actor owns from one they don't, so a turn simply
+  * cannot carry attachments: 501 rather than trusting the request.
+  */
+  async resolveAttachments(actor, refs) {
+    if (refs.length === 0) {
+      return [];
+    }
+    const staging = this.staging;
+    if (staging === void 0 || typeof staging.resolve !== "function") {
+      throw new import_common2.NotImplementedException("Message attachments require an AGENT_ATTACHMENT_STAGING provider implementing resolve(); attachment urls are never taken from the request.");
+    }
+    const resolved = [];
+    for (const ref of refs) {
+      const attachment = await staging.resolve({
+        mediaId: ref.mediaId,
+        actor
+      });
+      if (attachment === null) {
+        throw new import_common2.ForbiddenException(`attachment ${ref.mediaId} is not available to this actor`);
+      }
+      resolved.push(attachment);
+    }
+    return resolved;
+  }
+  /**
+  * The run's live token stream, WITHOUT an ownership check — for in-process callers that are
+  * already authorized (the MCP bridge, a host's own job code), the same split as
+  * {@link signalToolCall} vs {@link approve}. Anything reachable from a request must go through
+  * {@link subscribeAs} instead: a runId is the only thing standing between a caller and another
+  * actor's answer, tool arguments and tool results.
+  */
   subscribe(runId) {
     return this.deps.forAgent().sink.subscribe(runId);
   }
-  async approve(actor, toolCallId) {
-    await this.assertOwnsToolCall(actor, toolCallId);
-    return this.signalToolCall(toolCallId, {
+  /**
+  * {@link subscribe}, gated the way {@link cancel} is: only the actor whose thread is currently
+  * streaming this run may read it. A run that has already finished is reported missing rather than
+  * replayed — the runner clears the thread's active stream as the run ends, and that field is what
+  * ownership is derived from.
+  */
+  async subscribeAs(actor, runId) {
+    await this.assertOwnsActiveStream(actor, runId);
+    return this.subscribe(runId);
+  }
+  async approve(actor, toolCallId2) {
+    await this.assertOwnsToolCall(actor, toolCallId2);
+    return this.signalToolCall(toolCallId2, {
       approved: true
     });
   }
-  async reject(actor, toolCallId, reason) {
-    await this.assertOwnsToolCall(actor, toolCallId);
-    return this.signalToolCall(toolCallId, {
+  async reject(actor, toolCallId2, reason) {
+    await this.assertOwnsToolCall(actor, toolCallId2);
+    return this.signalToolCall(toolCallId2, {
       approved: false,
       ...reason !== void 0 ? {
         reason
@@ -327,6 +482,34 @@ var AgentService = class {
     });
   }
   /**
+  * Answer a parked question set. An omitted question takes the request's own pre-picked default —
+  * resolved by the LOOP against the request it already holds, so "the user just submitted" and
+  * "the user picked exactly the defaults" persist as the same answers, and no client has to
+  * re-send what it was shown.
+  */
+  async answer(actor, toolCallId2, answers2 = {}) {
+    await this.assertOwnsToolCall(actor, toolCallId2);
+    const reply = {
+      answers: answers2,
+      answeredByRef: actor.id
+    };
+    return this.signalToolCall(toolCallId2, reply);
+  }
+  /**
+  * Decline to answer and let the agent proceed on its own assumptions. NOT the same as confirming
+  * them: the run records this as a rejection, so a reader auditing what the agent was told can
+  * tell a choice the user made from one they refused to make.
+  */
+  async skip(actor, toolCallId2) {
+    await this.assertOwnsToolCall(actor, toolCallId2);
+    const reply = {
+      answers: {},
+      skipped: true,
+      answeredByRef: actor.id
+    };
+    return this.signalToolCall(toolCallId2, reply);
+  }
+  /**
   * The decision core behind approve/reject, WITHOUT an ownership check: resolves the run
   * currently awaiting `toolCallId` and signals it. `approve`/`reject` above call this after their
   * own `assertOwnsToolCall` gate; the console `AgentApprovalPort` adapter (bound by `AgentModule`)
@@ -334,9 +517,9 @@ var AgentService = class {
   * re-deriving thread ownership here would reject a legitimate operator decision (an operator is
   * not the thread's own actor).
   */
-  async signalToolCall(toolCallId, decision) {
-    const runId = await this.resolveRunForToolCall(toolCallId);
-    return this.runner.signal(runId, toolCallId, decision);
+  async signalToolCall(toolCallId2, reply) {
+    const runId = await this.resolveRunForToolCall(toolCallId2);
+    return this.runner.signal(runId, toolCallId2, reply);
   }
   async cancel(actor, runId) {
     await this.assertOwnsActiveStream(actor, runId);
@@ -403,20 +586,33 @@ var AgentService = class {
   /**
   * Agent-selection precedence for a `chat()` call with no explicit `agentName`: the thread's own
   * `defaultAgent` (if the thread exists and one is set) wins over the module's configured default.
-  * Skips the thread lookup entirely when the caller already named an agent or there's no thread yet.
+  * Skips the store entirely when the caller already named an agent or there's no thread yet.
+  *
+  * What this needs is one nullable scalar, so it asks for one. `getThread` returns the entire
+  * transcript — every message, every persisted tool output — and this discards all of it; on a
+  * long thread with large tool results that is hundreds of kilobytes read per turn, outside the
+  * workflow, for a string. A store predating {@link ThreadDefaultAgentReader} still answers, via
+  * the full read.
   */
   async resolveAgentName(agentName, threadId) {
     if (agentName !== void 0) {
       return agentName;
     }
     if (threadId !== void 0) {
-      const thread = await this.store.getThread(threadId);
-      if (thread?.defaultAgent !== void 0 && thread.defaultAgent !== null) {
-        return thread.defaultAgent;
+      const threadDefault = await this.threadDefaultAgent(threadId);
+      if (threadDefault !== null) {
+        return threadDefault;
       }
     }
     return this.deps.defaultAgentName();
   }
+  async threadDefaultAgent(threadId) {
+    const projecting = this.store;
+    if (typeof projecting.defaultAgentForThread === "function") {
+      return projecting.defaultAgentForThread(threadId);
+    }
+    return (await this.store.getThread(threadId))?.defaultAgent ?? null;
+  }
   async toSummaryView(thread) {
     return {
       ...thread,
@@ -448,6 +644,67 @@ var AgentService = class {
     return this.store.truncateFrom(threadId, messageId);
   }
   /**
+  * Every file this actor has staged, newest first — across threads, including uploads that were
+  * never sent, which nothing else on this surface can see.
+  *
+  * Metadata only. A url is minted per turn by `resolve` so it can be short-lived, and handing one
+  * back per entry would undo that for the price of rendering a list.
+  */
+  async listAttachments(actor, options = {}) {
+    const list = this.attachmentInventory();
+    return list({
+      actor,
+      ...options.limit !== void 0 ? {
+        limit: options.limit
+      } : {}
+    });
+  }
+  /**
+  * This actor's staged media that no live message references and that is old enough not to be an
+  * upload in flight — the candidate set for a sweep. Returns them; never deletes them. The bytes
+  * are the host's, and so is the decision.
+  *
+  * `olderThan` is required and has no default. How long a composer may sit open with a file
+  * attached is the host's knowledge, and a library-chosen grace period would eventually delete a
+  * file someone was about to send. The staging store is asked to apply it, and the result is
+  * filtered again here: a store that ignores the hint would otherwise turn this into exactly that
+  * bug, silently.
+  *
+  * Both halves must be answerable or this refuses. An unanswerable reference query means "cannot
+  * tell", and treating it as "nothing is referenced" would hand back every attachment the actor
+  * ever sent, marked safe to delete.
+  */
+  async collectableAttachments(actor, options) {
+    const list = this.attachmentInventory();
+    const referencedMediaIds = this.store.referencedMediaIds?.bind(this.store);
+    if (referencedMediaIds === void 0) {
+      throw new import_common2.NotImplementedException("Collecting attachments requires an AgentStore that implements referencedMediaIds(); the bound store cannot say which media a message still references, and guessing would delete files that are in use.");
+    }
+    const stagedBefore = options.olderThan.toISOString();
+    const inventory = await list({
+      actor,
+      stagedBefore,
+      ...options.limit !== void 0 ? {
+        limit: options.limit
+      } : {}
+    });
+    const aged = inventory.filter((entry) => entry.createdAt < stagedBefore);
+    const referenced = new Set(await referencedMediaIds(actor.id, aged.map((entry) => entry.mediaId)));
+    return aged.filter((entry) => !referenced.has(entry.mediaId));
+  }
+  /**
+  * The bound staging store's `list`, or a refusal. Absence is never answered with an empty list:
+  * "this host keeps no inventory" and "this actor has no files" are opposite facts that would
+  * otherwise render identically — as a clean file list, and as a sweep that collects nothing.
+  */
+  attachmentInventory() {
+    const list = this.staging?.list?.bind(this.staging);
+    if (list === void 0) {
+      throw new import_common2.NotImplementedException("Listing attachments requires an AGENT_ATTACHMENT_STAGING provider implementing list(); the host owns the staged bytes, so only it can enumerate them.");
+    }
+    return list;
+  }
+  /**
   * The day's usage for the badge: tokens + summed USD cost from the store, and the configured
   * limit from the quota store (null → unlimited). `withinLimit` comes from the quota store so it
   * can never drift from what enforcement uses.
@@ -489,24 +746,26 @@ var AgentService = class {
   * out from run resolution (see {@link resolveRunForToolCall}) so the console `AgentApprovalPort`
   * adapter can resolve+signal a decision WITHOUT this check — it is authorized upstream instead.
   */
-  async assertOwnsToolCall(actor, toolCallId) {
-    const owner = await this.store.ownerOfToolCall(toolCallId);
+  async assertOwnsToolCall(actor, toolCallId2) {
+    const owner = await this.store.ownerOfToolCall(toolCallId2);
     if (owner === null) {
-      throw new import_common2.NotFoundException(`tool call ${toolCallId} not found`);
+      throw new import_common2.NotFoundException(`tool call ${toolCallId2} not found`);
     }
     if (owner !== actor.id) {
       throw new import_common2.ForbiddenException("tool call belongs to another actor");
     }
   }
   /**
-  * Resolve the run currently awaiting `toolCallId` (its thread's active stream). That run is the
-  * sub-agent's own child run when the pending call belongs to a delegated agent — the client never
-  * knows or supplies a runId; it is derived here from the tool call alone.
+  * Resolve the run awaiting `toolCallId`. Derived server-side from the tool call alone — the client
+  * never knows or supplies a runId, and that run is the sub-agent's own child run when the pending
+  * call belongs to a delegated agent. The store answers from the CALL'S OWN `runId` where it has
+  * one; see `AgentStore.runForToolCall` for why that matters once a thread can hold more than one
+  * live run.
   */
-  async resolveRunForToolCall(toolCallId) {
-    const runId = await this.store.runForToolCall(toolCallId);
+  async resolveRunForToolCall(toolCallId2) {
+    const runId = await this.store.runForToolCall(toolCallId2);
     if (runId === null) {
-      throw new import_common2.NotFoundException(`tool call ${toolCallId} has no active run to signal`);
+      throw new import_common2.NotFoundException(`tool call ${toolCallId2} has no active run to signal`);
     }
     return runId;
   }
@@ -527,12 +786,15 @@ AgentService = _ts_decorate2([
   _ts_param2(1, (0, import_common2.Inject)(import_nestjs_agent_core3.AGENT_STORE)),
   _ts_param2(2, (0, import_common2.Inject)(import_nestjs_agent_core3.AGENT_DEPS_FACTORY)),
   _ts_param2(3, (0, import_common2.Inject)(import_nestjs_agent_core3.AGENT_QUOTA_STORE)),
+  _ts_param2(4, (0, import_common2.Optional)()),
+  _ts_param2(4, (0, import_common2.Inject)(import_nestjs_agent_core3.AGENT_ATTACHMENT_STAGING)),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     typeof AgentRunner === "undefined" ? Object : AgentRunner,
     typeof AgentStore === "undefined" ? Object : AgentStore,
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
-    Object
+    Object,
+    typeof AttachmentStagingStore === "undefined" ? Object : AttachmentStagingStore
   ])
 ], AgentService);
 
@@ -557,16 +819,16 @@ var AgentApprovalPortAdapter = class {
   constructor(agent) {
     this.agent = agent;
   }
-  async approve(toolCallId, opts) {
-    await this.agent.signalToolCall(toolCallId, {
+  async approve(toolCallId2, opts) {
+    await this.agent.signalToolCall(toolCallId2, {
       approved: true,
       ...opts?.executedByRef !== void 0 ? {
         executedByRef: opts.executedByRef
       } : {}
     });
   }
-  async reject(toolCallId, opts) {
-    await this.agent.signalToolCall(toolCallId, {
+  async reject(toolCallId2, opts) {
+    await this.agent.signalToolCall(toolCallId2, {
       approved: false,
       ...opts?.executedByRef !== void 0 ? {
         executedByRef: opts.executedByRef
@@ -665,6 +927,8 @@ function _ts_param4(paramIndex, decorator) {
 }
 __name(_ts_param4, "_ts_param");
 var DEFAULT_MAX_ATTACHMENT_BYTES = 20 * 1024 * 1024;
+var HARD_MAX_ATTACHMENT_BYTES = 32 * 1024 * 1024;
+var ATTACHMENT_PAGE_SIZE = 50;
 var DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES = [
   "image/png",
   "image/jpeg",
@@ -680,10 +944,12 @@ var AttachmentsController = class {
   }
   options;
   actorResolver;
+  agents;
   staging;
-  constructor(options, actorResolver, staging) {
+  constructor(options, actorResolver, agents, staging) {
     this.options = options;
     this.actorResolver = actorResolver;
+    this.agents = agents;
     this.staging = staging;
   }
   /**
@@ -697,6 +963,21 @@ var AttachmentsController = class {
       throw new Error("AgentModule: attachments.upload is true but no AGENT_ATTACHMENT_STAGING provider is bound. Bind one (e.g. `{ provide: AGENT_ATTACHMENT_STAGING, useClass: MyStagingStore }`) in a module imported alongside AgentModule, or set attachments.upload to false.");
     }
   }
+  /**
+  * The caller's own staged files, newest first — the one question `GET /agent/threads/:id` cannot
+  * answer, since an upload that was never sent belongs to no thread.
+  *
+  * Scoped by the RESOLVED actor and nothing else. There is deliberately no `threadId` filter: a
+  * thread's attachments already ride on its messages in the thread payload, and re-serving them
+  * from here would add a second ownership path to get wrong for information the client already
+  * holds. Metadata only — see {@link StagedAttachment}.
+  */
+  async list(req) {
+    const actor = await this.actorResolver.resolve(req);
+    return this.agents.listAttachments(actor, {
+      limit: ATTACHMENT_PAGE_SIZE
+    });
+  }
   async upload(req, file) {
     if (this.staging === void 0) {
       throw new import_common5.NotImplementedException("Attachment upload is not configured on this server.");
@@ -722,9 +1003,22 @@ var AttachmentsController = class {
     });
   }
 };
+_ts_decorate5([
+  (0, import_common5.Get)(),
+  _ts_param4(0, (0, import_common5.Req)()),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request
+  ]),
+  _ts_metadata5("design:returntype", Promise)
+], AttachmentsController.prototype, "list", null);
 _ts_decorate5([
   (0, import_common5.Post)(),
-  (0, import_common5.UseInterceptors)((0, import_platform_express.FileInterceptor)("file")),
+  (0, import_common5.UseInterceptors)((0, import_platform_express.FileInterceptor)("file", {
+    limits: {
+      fileSize: HARD_MAX_ATTACHMENT_BYTES
+    }
+  })),
   _ts_param4(0, (0, import_common5.Req)()),
   _ts_param4(1, (0, import_common5.UploadedFile)()),
   _ts_metadata5("design:type", Function),
@@ -738,12 +1032,13 @@ AttachmentsController = _ts_decorate5([
   (0, import_common5.Controller)("attachments"),
   _ts_param4(0, (0, import_common5.Inject)(import_nestjs_agent_core5.AGENT_OPTIONS)),
   _ts_param4(1, (0, import_common5.Inject)(import_nestjs_agent_core5.AGENT_ACTOR_RESOLVER)),
-  _ts_param4(2, (0, import_common5.Optional)()),
-  _ts_param4(2, (0, import_common5.Inject)(import_nestjs_agent_core5.AGENT_ATTACHMENT_STAGING)),
+  _ts_param4(3, (0, import_common5.Optional)()),
+  _ts_param4(3, (0, import_common5.Inject)(import_nestjs_agent_core5.AGENT_ATTACHMENT_STAGING)),
   _ts_metadata5("design:type", Function),
   _ts_metadata5("design:paramtypes", [
     typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
     typeof ActorResolver === "undefined" ? Object : ActorResolver,
+    typeof AgentService === "undefined" ? Object : AgentService,
     Object
   ])
 ], AttachmentsController);
@@ -768,6 +1063,31 @@ function _ts_param5(paramIndex, decorator) {
   };
 }
 __name(_ts_param5, "_ts_param");
+var MAX_ATTACHMENTS_PER_MESSAGE = 10;
+function attachmentRefs(claimed) {
+  if (claimed === void 0) {
+    return [];
+  }
+  if (!Array.isArray(claimed)) {
+    throw new import_common6.BadRequestException("attachments must be an array of { mediaId }");
+  }
+  if (claimed.length > MAX_ATTACHMENTS_PER_MESSAGE) {
+    throw new import_common6.BadRequestException(`a message may carry at most ${MAX_ATTACHMENTS_PER_MESSAGE} attachments`);
+  }
+  return claimed.map((entry) => {
+    if (typeof entry !== "object" || entry === null || !("mediaId" in entry)) {
+      throw new import_common6.BadRequestException("each attachment must be an object with a mediaId");
+    }
+    const { mediaId } = entry;
+    if (typeof mediaId !== "string" || mediaId.length === 0) {
+      throw new import_common6.BadRequestException("each attachment must carry a non-empty string mediaId");
+    }
+    return {
+      mediaId
+    };
+  });
+}
+__name(attachmentRefs, "attachmentRefs");
 var ChatController = class {
   static {
     __name(this, "ChatController");
@@ -780,6 +1100,7 @@ var ChatController = class {
   }
   async chat(req, res, body) {
     const actor = await this.actorResolver.resolve(req);
+    const attachments = attachmentRefs(body.attachments);
     const { runId, threadId } = await this.agent.chat({
       actor,
       message: body.message,
@@ -789,8 +1110,8 @@ var ChatController = class {
       ...body.agent !== void 0 ? {
         agentName: body.agent
       } : {},
-      ...body.attachments !== void 0 ? {
-        attachments: body.attachments
+      ...attachments.length > 0 ? {
+        attachments
       } : {},
       ...body.pageContext !== void 0 ? {
         pageContext: body.pageContext
@@ -802,10 +1123,11 @@ var ChatController = class {
         transient: true
       } : {}
     });
-    await this.pipe(res, runId, threadId);
+    await this.pipe(res, runId, this.agent.subscribe(runId), threadId);
   }
-  async stream(runId, res) {
-    await this.pipe(res, runId);
+  async stream(req, runId, res) {
+    const actor = await this.actorResolver.resolve(req);
+    await this.pipe(res, runId, await this.agent.subscribeAs(actor, runId));
   }
   async cancel(req, runId) {
     const actor = await this.actorResolver.resolve(req);
@@ -814,7 +1136,7 @@ var ChatController = class {
       aborted: true
     };
   }
-  async pipe(res, runId, threadId) {
+  async pipe(res, runId, events, threadId) {
     res.setHeader("Content-Type", "text/event-stream");
     res.setHeader("Cache-Control", "no-cache");
     res.setHeader("Connection", "keep-alive");
@@ -832,7 +1154,7 @@ data: ${JSON.stringify({
     const decoder = new TextDecoder();
     let buffer = "";
     try {
-      for await (const chunk of this.agent.subscribe(runId)) {
+      for await (const chunk of events) {
         buffer += decoder.decode(chunk, {
           stream: true
         });
@@ -885,10 +1207,12 @@ _ts_decorate6([
 ], ChatController.prototype, "chat", null);
 _ts_decorate6([
   (0, import_common6.Get)("chat/:runId/stream"),
-  _ts_param5(0, (0, import_common6.Param)("runId")),
-  _ts_param5(1, (0, import_common6.Res)()),
+  _ts_param5(0, (0, import_common6.Req)()),
+  _ts_param5(1, (0, import_common6.Param)("runId")),
+  _ts_param5(2, (0, import_common6.Res)()),
   _ts_metadata6("design:type", Function),
   _ts_metadata6("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
     String,
     typeof Response === "undefined" ? Object : Response
   ]),
@@ -915,7 +1239,7 @@ ChatController = _ts_decorate6([
   ])
 ], ChatController);
 
-// src/controller/quota.controller.ts
+// src/controller/memories.controller.ts
 var import_nestjs_agent_core7 = require("@dudousxd/nestjs-agent-core");
 var import_common7 = require("@nestjs/common");
 function _ts_decorate7(decorators, target, key, desc) {
@@ -935,41 +1259,113 @@ function _ts_param6(paramIndex, decorator) {
   };
 }
 __name(_ts_param6, "_ts_param");
-var QuotaController = class {
+var MemoriesController = class {
   static {
-    __name(this, "QuotaController");
+    __name(this, "MemoriesController");
   }
-  agent;
   actorResolver;
-  constructor(agent, actorResolver) {
-    this.agent = agent;
+  memory;
+  constructor(actorResolver, memory) {
     this.actorResolver = actorResolver;
+    this.memory = memory;
   }
-  async today(req) {
+  /**
+  * Every memory this actor can reach, most specific first, each carrying its origin and whatever
+  * wider value it outranks.
+  *
+  * DELIBERATELY IGNORES `maxMemories`. That ceiling is a budget on what one TURN carries; applying
+  * it here would mean a person could not see — and so could not delete — a belief the assistant is
+  * one write away from acting on again. Showing someone more than the model sees is harmless;
+  * showing them less is the failure this endpoint exists to prevent.
+  */
+  async list(req, threadId) {
+    if (this.memory === void 0) {
+      return [];
+    }
     const actor = await this.actorResolver.resolve(req);
-    return this.agent.quotaToday(actor.id);
+    return (await this.unbounded(threadId ?? "", actor)).entries;
+  }
+  /**
+  * Forget one. Authorized against the actor's OWN resolved list, the same way a `skill` load is
+  * authorized against the turn's catalog: an id this actor cannot see is answered as missing rather
+  * than refused, so the endpoint cannot be used to find out which memories exist about other people.
+  */
+  async forget(req, id) {
+    if (this.memory === void 0) {
+      throw new import_common7.NotFoundException("No memory is configured in this deployment.");
+    }
+    const actor = await this.actorResolver.resolve(req);
+    const digest = await this.unbounded("", actor);
+    const entry = digest.entries.find((candidate) => candidate.id === id);
+    if (entry === void 0) {
+      throw new import_common7.NotFoundException(`No memory with id "${id}".`);
+    }
+    const verdict = (0, import_nestjs_agent_core7.memoryForgetVerdict)({
+      record: entry,
+      actor
+    });
+    if (!verdict.allowed) {
+      throw new import_common7.ForbiddenException(verdict.reason);
+    }
+    return {
+      forgotten: await this.memory.provider.forget({
+        id: entry.id,
+        ctx: {
+          actor,
+          threadId: ""
+        }
+      })
+    };
+  }
+  async unbounded(threadId, actor) {
+    const config = this.memory;
+    return await (0, import_nestjs_agent_core7.offerMemories)({
+      config: {
+        ...config,
+        maxMemories: Number.POSITIVE_INFINITY
+      },
+      ctx: {
+        actor,
+        threadId
+      }
+    });
   }
 };
 _ts_decorate7([
-  (0, import_common7.Get)("today"),
+  (0, import_common7.Get)(),
   _ts_param6(0, (0, import_common7.Req)()),
+  _ts_param6(1, (0, import_common7.Query)("threadId")),
   _ts_metadata7("design:type", Function),
   _ts_metadata7("design:paramtypes", [
-    typeof Request === "undefined" ? Object : Request
+    typeof Request === "undefined" ? Object : Request,
+    String
   ]),
   _ts_metadata7("design:returntype", Promise)
-], QuotaController.prototype, "today", null);
-QuotaController = _ts_decorate7([
-  (0, import_common7.Controller)("quota"),
-  _ts_param6(1, (0, import_common7.Inject)(import_nestjs_agent_core7.AGENT_ACTOR_RESOLVER)),
+], MemoriesController.prototype, "list", null);
+_ts_decorate7([
+  (0, import_common7.Delete)(":id"),
+  _ts_param6(0, (0, import_common7.Req)()),
+  _ts_param6(1, (0, import_common7.Param)("id")),
   _ts_metadata7("design:type", Function),
   _ts_metadata7("design:paramtypes", [
-    typeof AgentService === "undefined" ? Object : AgentService,
-    typeof ActorResolver === "undefined" ? Object : ActorResolver
+    typeof Request === "undefined" ? Object : Request,
+    String
+  ]),
+  _ts_metadata7("design:returntype", Promise)
+], MemoriesController.prototype, "forget", null);
+MemoriesController = _ts_decorate7([
+  (0, import_common7.Controller)("memories"),
+  _ts_param6(0, (0, import_common7.Inject)(import_nestjs_agent_core7.AGENT_ACTOR_RESOLVER)),
+  _ts_param6(1, (0, import_common7.Optional)()),
+  _ts_param6(1, (0, import_common7.Inject)(import_nestjs_agent_core7.AGENT_MEMORY)),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
+    typeof ActorResolver === "undefined" ? Object : ActorResolver,
+    Object
   ])
-], QuotaController);
+], MemoriesController);
 
-// src/controller/threads.controller.ts
+// src/controller/quota.controller.ts
 var import_nestjs_agent_core8 = require("@dudousxd/nestjs-agent-core");
 var import_common8 = require("@nestjs/common");
 function _ts_decorate8(decorators, target, key, desc) {
@@ -989,6 +1385,125 @@ function _ts_param7(paramIndex, decorator) {
   };
 }
 __name(_ts_param7, "_ts_param");
+var QuotaController = class {
+  static {
+    __name(this, "QuotaController");
+  }
+  agent;
+  actorResolver;
+  constructor(agent, actorResolver) {
+    this.agent = agent;
+    this.actorResolver = actorResolver;
+  }
+  async today(req) {
+    const actor = await this.actorResolver.resolve(req);
+    return this.agent.quotaToday(actor.id);
+  }
+};
+_ts_decorate8([
+  (0, import_common8.Get)("today"),
+  _ts_param7(0, (0, import_common8.Req)()),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request
+  ]),
+  _ts_metadata8("design:returntype", Promise)
+], QuotaController.prototype, "today", null);
+QuotaController = _ts_decorate8([
+  (0, import_common8.Controller)("quota"),
+  _ts_param7(1, (0, import_common8.Inject)(import_nestjs_agent_core8.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
+    typeof AgentService === "undefined" ? Object : AgentService,
+    typeof ActorResolver === "undefined" ? Object : ActorResolver
+  ])
+], QuotaController);
+
+// src/controller/skills.controller.ts
+var import_nestjs_agent_core9 = require("@dudousxd/nestjs-agent-core");
+var import_common9 = require("@nestjs/common");
+function _ts_decorate9(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate9, "_ts_decorate");
+function _ts_metadata9(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata9, "_ts_metadata");
+function _ts_param8(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param8, "_ts_param");
+var SkillsController = class {
+  static {
+    __name(this, "SkillsController");
+  }
+  actorResolver;
+  skills;
+  constructor(actorResolver, skills) {
+    this.actorResolver = actorResolver;
+    this.skills = skills;
+  }
+  async list(req, threadId) {
+    if (this.skills === void 0) {
+      return [];
+    }
+    const actor = await this.actorResolver.resolve(req);
+    const offer = await (0, import_nestjs_agent_core9.offerSkills)(this.skills, {
+      actor,
+      threadId: threadId ?? ""
+    });
+    return offer.entries;
+  }
+};
+_ts_decorate9([
+  (0, import_common9.Get)(),
+  _ts_param8(0, (0, import_common9.Req)()),
+  _ts_param8(1, (0, import_common9.Query)("threadId")),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
+    String
+  ]),
+  _ts_metadata9("design:returntype", Promise)
+], SkillsController.prototype, "list", null);
+SkillsController = _ts_decorate9([
+  (0, import_common9.Controller)("skills"),
+  _ts_param8(0, (0, import_common9.Inject)(import_nestjs_agent_core9.AGENT_ACTOR_RESOLVER)),
+  _ts_param8(1, (0, import_common9.Optional)()),
+  _ts_param8(1, (0, import_common9.Inject)(import_nestjs_agent_core9.AGENT_SKILLS)),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
+    typeof ActorResolver === "undefined" ? Object : ActorResolver,
+    Object
+  ])
+], SkillsController);
+
+// src/controller/threads.controller.ts
+var import_nestjs_agent_core10 = require("@dudousxd/nestjs-agent-core");
+var import_common10 = require("@nestjs/common");
+function _ts_decorate10(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate10, "_ts_decorate");
+function _ts_metadata10(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata10, "_ts_metadata");
+function _ts_param9(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param9, "_ts_param");
 var ThreadsController = class {
   static {
     __name(this, "ThreadsController");
@@ -1052,117 +1567,173 @@ var ThreadsController = class {
     };
   }
 };
-_ts_decorate8([
-  (0, import_common8.Get)(),
-  _ts_param7(0, (0, import_common8.Req)()),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate10([
+  (0, import_common10.Get)(),
+  _ts_param9(0, (0, import_common10.Req)()),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata10("design:returntype", Promise)
 ], ThreadsController.prototype, "list", null);
-_ts_decorate8([
-  (0, import_common8.Get)(":id"),
-  _ts_param7(0, (0, import_common8.Req)()),
-  _ts_param7(1, (0, import_common8.Param)("id")),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
-    typeof Request === "undefined" ? Object : Request,
+_ts_decorate10([
+  (0, import_common10.Get)(":id"),
+  _ts_param9(0, (0, import_common10.Req)()),
+  _ts_param9(1, (0, import_common10.Param)("id")),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata10("design:returntype", Promise)
 ], ThreadsController.prototype, "detail", null);
-_ts_decorate8([
-  (0, import_common8.Delete)(":id"),
-  _ts_param7(0, (0, import_common8.Req)()),
-  _ts_param7(1, (0, import_common8.Param)("id")),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate10([
+  (0, import_common10.Delete)(":id"),
+  _ts_param9(0, (0, import_common10.Req)()),
+  _ts_param9(1, (0, import_common10.Param)("id")),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata10("design:returntype", Promise)
 ], ThreadsController.prototype, "remove", null);
-_ts_decorate8([
-  (0, import_common8.Post)(":id/fork-from/:messageId"),
-  _ts_param7(0, (0, import_common8.Req)()),
-  _ts_param7(1, (0, import_common8.Param)("id")),
-  _ts_param7(2, (0, import_common8.Param)("messageId")),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate10([
+  (0, import_common10.Post)(":id/fork-from/:messageId"),
+  _ts_param9(0, (0, import_common10.Req)()),
+  _ts_param9(1, (0, import_common10.Param)("id")),
+  _ts_param9(2, (0, import_common10.Param)("messageId")),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     String
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata10("design:returntype", Promise)
 ], ThreadsController.prototype, "fork", null);
-_ts_decorate8([
-  (0, import_common8.Patch)(":id"),
-  _ts_param7(0, (0, import_common8.Req)()),
-  _ts_param7(1, (0, import_common8.Param)("id")),
-  _ts_param7(2, (0, import_common8.Body)()),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate10([
+  (0, import_common10.Patch)(":id"),
+  _ts_param9(0, (0, import_common10.Req)()),
+  _ts_param9(1, (0, import_common10.Param)("id")),
+  _ts_param9(2, (0, import_common10.Body)()),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     typeof UpdateThreadBody === "undefined" ? Object : UpdateThreadBody
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata10("design:returntype", Promise)
 ], ThreadsController.prototype, "update", null);
-_ts_decorate8([
-  (0, import_common8.Post)(":id/promote"),
-  _ts_param7(0, (0, import_common8.Req)()),
-  _ts_param7(1, (0, import_common8.Param)("id")),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate10([
+  (0, import_common10.Post)(":id/promote"),
+  _ts_param9(0, (0, import_common10.Req)()),
+  _ts_param9(1, (0, import_common10.Param)("id")),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata10("design:returntype", Promise)
 ], ThreadsController.prototype, "promote", null);
-_ts_decorate8([
-  (0, import_common8.Delete)(":id/from/:messageId"),
-  _ts_param7(0, (0, import_common8.Req)()),
-  _ts_param7(1, (0, import_common8.Param)("id")),
-  _ts_param7(2, (0, import_common8.Param)("messageId")),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate10([
+  (0, import_common10.Delete)(":id/from/:messageId"),
+  _ts_param9(0, (0, import_common10.Req)()),
+  _ts_param9(1, (0, import_common10.Param)("id")),
+  _ts_param9(2, (0, import_common10.Param)("messageId")),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     String
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata10("design:returntype", Promise)
 ], ThreadsController.prototype, "truncateFrom", null);
-ThreadsController = _ts_decorate8([
-  (0, import_common8.Controller)("threads"),
-  _ts_param7(1, (0, import_common8.Inject)(import_nestjs_agent_core8.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+ThreadsController = _ts_decorate10([
+  (0, import_common10.Controller)("threads"),
+  _ts_param9(1, (0, import_common10.Inject)(import_nestjs_agent_core10.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], ThreadsController);
 
 // src/controller/tool-call.controller.ts
-var import_nestjs_agent_core9 = require("@dudousxd/nestjs-agent-core");
-var import_common9 = require("@nestjs/common");
-function _ts_decorate9(decorators, target, key, desc) {
+var import_nestjs_agent_core11 = require("@dudousxd/nestjs-agent-core");
+var import_common11 = require("@nestjs/common");
+function _ts_decorate11(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate9, "_ts_decorate");
-function _ts_metadata9(k, v) {
+__name(_ts_decorate11, "_ts_decorate");
+function _ts_metadata11(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata9, "_ts_metadata");
-function _ts_param8(paramIndex, decorator) {
+__name(_ts_metadata11, "_ts_metadata");
+function _ts_param10(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param8, "_ts_param");
+__name(_ts_param10, "_ts_param");
+var MAX_ANSWERED_QUESTIONS = 100;
+var MAX_VALUES_PER_QUESTION = 100;
+var MAX_ANSWER_VALUE_LENGTH = 4096;
+var MAX_REJECT_REASON_LENGTH = 4096;
+function toolCallId(claimed) {
+  if (typeof claimed !== "string" || claimed.length === 0) {
+    throw new import_common11.BadRequestException("toolCallId must be a non-empty string");
+  }
+  return claimed;
+}
+__name(toolCallId, "toolCallId");
+function rejectReason(claimed) {
+  if (claimed === void 0) {
+    return void 0;
+  }
+  if (typeof claimed !== "string") {
+    throw new import_common11.BadRequestException("reason must be a string");
+  }
+  if (claimed.length > MAX_REJECT_REASON_LENGTH) {
+    throw new import_common11.BadRequestException(`reason must be at most ${MAX_REJECT_REASON_LENGTH} characters`);
+  }
+  return claimed;
+}
+__name(rejectReason, "rejectReason");
+function answers(claimed) {
+  if (claimed === void 0) {
+    return void 0;
+  }
+  if (typeof claimed !== "object" || claimed === null || Array.isArray(claimed)) {
+    throw new import_common11.BadRequestException("answers must be an object of questionId \u2192 chosen values");
+  }
+  const entries = Object.entries(claimed);
+  if (entries.length > MAX_ANSWERED_QUESTIONS) {
+    throw new import_common11.BadRequestException(`answers may cover at most ${MAX_ANSWERED_QUESTIONS} questions`);
+  }
+  const validated = /* @__PURE__ */ Object.create(null);
+  for (const [questionId, values] of entries) {
+    if (!Array.isArray(values)) {
+      throw new import_common11.BadRequestException(`answers["${questionId}"] must be an array of chosen values`);
+    }
+    if (values.length > MAX_VALUES_PER_QUESTION) {
+      throw new import_common11.BadRequestException(`answers["${questionId}"] may carry at most ${MAX_VALUES_PER_QUESTION} values`);
+    }
+    for (const value of values) {
+      if (typeof value !== "string") {
+        throw new import_common11.BadRequestException(`answers["${questionId}"] must contain only strings`);
+      }
+      if (value.length > MAX_ANSWER_VALUE_LENGTH) {
+        throw new import_common11.BadRequestException(`answers["${questionId}"] values must be at most ${MAX_ANSWER_VALUE_LENGTH} characters`);
+      }
+    }
+    validated[questionId] = values;
+  }
+  return validated;
+}
+__name(answers, "answers");
 var ToolCallController = class {
   static {
     __name(this, "ToolCallController");
@@ -1175,54 +1746,96 @@ var ToolCallController = class {
   }
   async approve(req, body) {
     const actor = await this.actorResolver.resolve(req);
-    await this.agent.approve(actor, body.toolCallId);
+    await this.agent.approve(actor, toolCallId(body.toolCallId));
     return {
       ok: true
     };
   }
   async reject(req, body) {
     const actor = await this.actorResolver.resolve(req);
-    await this.agent.reject(actor, body.toolCallId, body.reason);
+    await this.agent.reject(actor, toolCallId(body.toolCallId), rejectReason(body.reason));
+    return {
+      ok: true
+    };
+  }
+  /**
+  * Settle a parked question set. Alongside `approve`/`reject` rather than under a surface of its
+  * own: an elicitation IS a parked tool call, gated by the same ownership check and delivered
+  * through the same signal.
+  */
+  async answer(req, body) {
+    const actor = await this.actorResolver.resolve(req);
+    await this.agent.answer(actor, toolCallId(body.toolCallId), answers(body.answers));
+    return {
+      ok: true
+    };
+  }
+  /** Decline to answer and let the agent proceed on the answers it pre-picked. */
+  async skip(req, body) {
+    const actor = await this.actorResolver.resolve(req);
+    await this.agent.skip(actor, toolCallId(body.toolCallId));
     return {
       ok: true
     };
   }
 };
-_ts_decorate9([
-  (0, import_common9.Post)("approve"),
-  _ts_param8(0, (0, import_common9.Req)()),
-  _ts_param8(1, (0, import_common9.Body)()),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+_ts_decorate11([
+  (0, import_common11.Post)("approve"),
+  _ts_param10(0, (0, import_common11.Req)()),
+  _ts_param10(1, (0, import_common11.Body)()),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof ApproveBody === "undefined" ? Object : ApproveBody
   ]),
-  _ts_metadata9("design:returntype", Promise)
+  _ts_metadata11("design:returntype", Promise)
 ], ToolCallController.prototype, "approve", null);
-_ts_decorate9([
-  (0, import_common9.Post)("reject"),
-  _ts_param8(0, (0, import_common9.Req)()),
-  _ts_param8(1, (0, import_common9.Body)()),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+_ts_decorate11([
+  (0, import_common11.Post)("reject"),
+  _ts_param10(0, (0, import_common11.Req)()),
+  _ts_param10(1, (0, import_common11.Body)()),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof RejectBody === "undefined" ? Object : RejectBody
   ]),
-  _ts_metadata9("design:returntype", Promise)
+  _ts_metadata11("design:returntype", Promise)
 ], ToolCallController.prototype, "reject", null);
-ToolCallController = _ts_decorate9([
-  (0, import_common9.Controller)("tool-call"),
-  _ts_param8(1, (0, import_common9.Inject)(import_nestjs_agent_core9.AGENT_ACTOR_RESOLVER)),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+_ts_decorate11([
+  (0, import_common11.Post)("answer"),
+  _ts_param10(0, (0, import_common11.Req)()),
+  _ts_param10(1, (0, import_common11.Body)()),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
+    typeof AnswerBody === "undefined" ? Object : AnswerBody
+  ]),
+  _ts_metadata11("design:returntype", Promise)
+], ToolCallController.prototype, "answer", null);
+_ts_decorate11([
+  (0, import_common11.Post)("skip"),
+  _ts_param10(0, (0, import_common11.Req)()),
+  _ts_param10(1, (0, import_common11.Body)()),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
+    typeof ApproveBody === "undefined" ? Object : ApproveBody
+  ]),
+  _ts_metadata11("design:returntype", Promise)
+], ToolCallController.prototype, "skip", null);
+ToolCallController = _ts_decorate11([
+  (0, import_common11.Controller)("tool-call"),
+  _ts_param10(1, (0, import_common11.Inject)(import_nestjs_agent_core11.AGENT_ACTOR_RESOLVER)),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], ToolCallController);
 
 // src/discovery/agent-discovery.service.ts
-var import_nestjs_agent_core10 = require("@dudousxd/nestjs-agent-core");
-var import_common10 = require("@nestjs/common");
+var import_nestjs_agent_core12 = require("@dudousxd/nestjs-agent-core");
+var import_common12 = require("@nestjs/common");
 var import_core = require("@nestjs/core");
 
 // src/decorator/agent.decorator.ts
@@ -1257,23 +1870,23 @@ function SystemPromptContributor() {
 __name(SystemPromptContributor, "SystemPromptContributor");
 
 // src/discovery/agent-discovery.service.ts
-function _ts_decorate10(decorators, target, key, desc) {
+function _ts_decorate12(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate10, "_ts_decorate");
-function _ts_metadata10(k, v) {
+__name(_ts_decorate12, "_ts_decorate");
+function _ts_metadata12(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata10, "_ts_metadata");
-function _ts_param9(paramIndex, decorator) {
+__name(_ts_metadata12, "_ts_metadata");
+function _ts_param11(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param9, "_ts_param");
+__name(_ts_param11, "_ts_param");
 var AgentDiscoveryService = class _AgentDiscoveryService {
   static {
     __name(this, "AgentDiscoveryService");
@@ -1282,7 +1895,7 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
   scanner;
   registry;
   contributors;
-  logger = new import_common10.Logger(_AgentDiscoveryService.name);
+  logger = new import_common12.Logger(_AgentDiscoveryService.name);
   constructor(discovery, scanner, registry, contributors) {
     this.discovery = discovery;
     this.scanner = scanner;
@@ -1321,23 +1934,53 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
       ...meta.maxSteps !== void 0 ? {
         maxSteps: meta.maxSteps
       } : {},
+      ...meta.maxDelegationDepth !== void 0 ? {
+        maxDelegationDepth: meta.maxDelegationDepth
+      } : {},
+      ...meta.maxAgentAppearances !== void 0 ? {
+        maxAgentAppearances: meta.maxAgentAppearances
+      } : {},
+      ...meta.history !== void 0 ? {
+        history: meta.history
+      } : {},
+      ...meta.outputSchema !== void 0 ? {
+        outputSchema: meta.outputSchema
+      } : {},
+      ...meta.intake !== void 0 ? {
+        intake: meta.intake
+      } : {},
+      ...meta.ask !== void 0 ? {
+        ask: meta.ask
+      } : {},
+      ...meta.outputRepairAttempts !== void 0 ? {
+        outputRepairAttempts: meta.outputRepairAttempts
+      } : {},
       ...meta.handoff !== void 0 ? {
-        delegatesTo: this.handoffNames(meta)
+        delegatesTo: this.handoffEdges(meta)
       } : {}
     };
   }
-  /** Resolve each handoff `@Agent` class to its registered name (skipping non-agent classes). */
-  handoffNames(meta) {
-    const names = [];
-    for (const target of meta.handoff ?? []) {
+  /**
+  * Resolve each handoff entry to an {@link AgentDelegation} — its target's registered name, plus
+  * whether that edge detaches (skipping non-agent classes). A bare name is kept for a plain edge
+  * rather than an always-object form, so a definition an older host built by hand still reads.
+  */
+  handoffEdges(meta) {
+    const edges = [];
+    for (const entry of meta.handoff ?? []) {
+      const target = typeof entry === "function" ? entry : entry.agent;
+      const detached = typeof entry === "function" ? false : entry.detached === true;
       const targetMeta = readAgentMetadata(target);
       if (targetMeta === void 0) {
         this.logger.warn(`Agent "${meta.name}" hands off to ${target.name}, which is not an @Agent \u2014 skipped.`);
         continue;
       }
-      names.push(targetMeta.name);
+      edges.push(detached ? {
+        agent: targetMeta.name,
+        detached: true
+      } : targetMeta.name);
     }
-    return names;
+    return edges;
   }
   /** Push every `@SystemPromptContributor()` method on `instance` (bound) into the contributor list. */
   collectContributors(instance) {
@@ -1370,22 +2013,22 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
     return (ctx) => candidate.call(instance, ctx);
   }
 };
-AgentDiscoveryService = _ts_decorate10([
-  (0, import_common10.Injectable)(),
-  _ts_param9(2, (0, import_common10.Inject)(import_nestjs_agent_core10.AGENT_REGISTRY)),
-  _ts_param9(3, (0, import_common10.Inject)(import_nestjs_agent_core10.AGENT_PROMPT_CONTRIBUTORS)),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
+AgentDiscoveryService = _ts_decorate12([
+  (0, import_common12.Injectable)(),
+  _ts_param11(2, (0, import_common12.Inject)(import_nestjs_agent_core12.AGENT_REGISTRY)),
+  _ts_param11(3, (0, import_common12.Inject)(import_nestjs_agent_core12.AGENT_PROMPT_CONTRIBUTORS)),
+  _ts_metadata12("design:type", Function),
+  _ts_metadata12("design:paramtypes", [
     typeof import_core.DiscoveryService === "undefined" ? Object : import_core.DiscoveryService,
     typeof import_core.MetadataScanner === "undefined" ? Object : import_core.MetadataScanner,
-    typeof import_nestjs_agent_core10.AgentRegistry === "undefined" ? Object : import_nestjs_agent_core10.AgentRegistry,
+    typeof import_nestjs_agent_core12.AgentRegistry === "undefined" ? Object : import_nestjs_agent_core12.AgentRegistry,
     Array
   ])
 ], AgentDiscoveryService);
 
 // src/discovery/ai-tool-discovery.service.ts
-var import_nestjs_agent_core11 = require("@dudousxd/nestjs-agent-core");
-var import_common11 = require("@nestjs/common");
+var import_nestjs_agent_core13 = require("@dudousxd/nestjs-agent-core");
+var import_common13 = require("@nestjs/common");
 var import_core2 = require("@nestjs/core");
 var import_zod = require("zod");
 
@@ -1434,23 +2077,23 @@ function provideAgentTool(factoryOrTool, inject) {
 __name(provideAgentTool, "provideAgentTool");
 
 // src/discovery/ai-tool-discovery.service.ts
-function _ts_decorate11(decorators, target, key, desc) {
+function _ts_decorate13(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate11, "_ts_decorate");
-function _ts_metadata11(k, v) {
+__name(_ts_decorate13, "_ts_decorate");
+function _ts_metadata13(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata11, "_ts_metadata");
-function _ts_param10(paramIndex, decorator) {
+__name(_ts_metadata13, "_ts_metadata");
+function _ts_param12(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param10, "_ts_param");
+__name(_ts_param12, "_ts_param");
 var AiToolDiscoveryService = class _AiToolDiscoveryService {
   static {
     __name(this, "AiToolDiscoveryService");
@@ -1459,7 +2102,7 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
   registry;
   agents;
   options;
-  logger = new import_common11.Logger(_AiToolDiscoveryService.name);
+  logger = new import_common13.Logger(_AiToolDiscoveryService.name);
   constructor(discovery, registry, agents, options) {
     this.discovery = discovery;
     this.registry = registry;
@@ -1526,22 +2169,30 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
     }
     let delegates = 0;
     for (const definition of this.agents.list()) {
-      for (const target of definition.delegatesTo ?? []) {
+      for (const edge of definition.delegatesTo ?? []) {
+        const { agent: target, detached } = (0, import_nestjs_agent_core13.normalizeDelegation)(edge);
         const targetDefinition = this.agents.get(target);
         if (targetDefinition === void 0) {
           throw new Error(`Agent "${definition.name}" hands off to "${target}", which is not a registered @Agent. Declare it as an @Agent provider or fix the reference.`);
         }
-        const name = delegateToolName(target);
+        const name = delegateToolName({
+          target,
+          detached
+        });
         if (this.registry.has(name)) {
           continue;
         }
         const targetBlurb = typeof targetDefinition.systemPrompt === "string" ? ` It is: ${targetDefinition.systemPrompt}` : "";
+        const description = detached ? `Start the "${target}" agent working on a task in the BACKGROUND. Returns immediately with a receipt, NOT an answer \u2014 the answer is delivered to this conversation as a separate message later. Use it for work the user does not need to sit and wait for.${targetBlurb}` : `Delegate a task to the "${target}" agent and get its answer.${targetBlurb}`;
         this.registry.register(
           {
             name,
             kind: "agent",
             targetAgent: target,
-            description: `Delegate a task to the "${target}" agent and get its answer.${targetBlurb}`,
+            ...detached ? {
+              detached: true
+            } : {},
+            description,
             inputSchema: import_zod.z.object({
               task: import_zod.z.string()
             })
@@ -1569,13 +2220,13 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
     return true;
   }
 };
-AiToolDiscoveryService = _ts_decorate11([
-  (0, import_common11.Injectable)(),
-  _ts_param10(1, (0, import_common11.Inject)(import_nestjs_agent_core11.AGENT_TOOL_REGISTRY)),
-  _ts_param10(2, (0, import_common11.Inject)(import_nestjs_agent_core11.AGENT_REGISTRY)),
-  _ts_param10(3, (0, import_common11.Inject)(import_nestjs_agent_core11.AGENT_OPTIONS)),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+AiToolDiscoveryService = _ts_decorate13([
+  (0, import_common13.Injectable)(),
+  _ts_param12(1, (0, import_common13.Inject)(import_nestjs_agent_core13.AGENT_TOOL_REGISTRY)),
+  _ts_param12(2, (0, import_common13.Inject)(import_nestjs_agent_core13.AGENT_REGISTRY)),
+  _ts_param12(3, (0, import_common13.Inject)(import_nestjs_agent_core13.AGENT_OPTIONS)),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof import_core2.DiscoveryService === "undefined" ? Object : import_core2.DiscoveryService,
     typeof ToolRegistry === "undefined" ? Object : ToolRegistry,
     typeof AgentRegistry === "undefined" ? Object : AgentRegistry,
@@ -1583,8 +2234,103 @@ AiToolDiscoveryService = _ts_decorate11([
   ])
 ], AiToolDiscoveryService);
 
+// src/discovery/skill-discovery.service.ts
+var import_nestjs_agent_core15 = require("@dudousxd/nestjs-agent-core");
+var import_common14 = require("@nestjs/common");
+var import_core3 = require("@nestjs/core");
+
+// src/decorator/skill.decorator.ts
+var import_reflect_metadata4 = require("reflect-metadata");
+var import_nestjs_agent_core14 = require("@dudousxd/nestjs-agent-core");
+var SKILL_METADATA = Symbol.for("@dudousxd/nestjs-agent:skill-metadata");
+function Skill(options) {
+  return (target) => {
+    Reflect.defineMetadata(SKILL_METADATA, options, target);
+  };
+}
+__name(Skill, "Skill");
+function readSkillMetadata(target) {
+  return Reflect.getMetadata(SKILL_METADATA, target);
+}
+__name(readSkillMetadata, "readSkillMetadata");
+function skillScope(options) {
+  return options.scope ?? import_nestjs_agent_core14.GLOBAL_SCOPE;
+}
+__name(skillScope, "skillScope");
+
+// src/discovery/skill-discovery.service.ts
+function _ts_decorate14(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate14, "_ts_decorate");
+function _ts_metadata14(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata14, "_ts_metadata");
+function _ts_param13(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param13, "_ts_param");
+var SkillDiscoveryService = class _SkillDiscoveryService {
+  static {
+    __name(this, "SkillDiscoveryService");
+  }
+  discovery;
+  declared;
+  logger = new import_common14.Logger(_SkillDiscoveryService.name);
+  constructor(discovery, declared) {
+    this.discovery = discovery;
+    this.declared = declared;
+  }
+  onModuleInit() {
+    for (const wrapper of this.discovery.getProviders()) {
+      const instance = wrapper.instance;
+      if (instance === null || typeof instance !== "object") {
+        continue;
+      }
+      const meta = readSkillMetadata(instance.constructor);
+      if (meta === void 0) {
+        continue;
+      }
+      const body = this.bodyOf(instance, meta.body);
+      if (body === void 0) {
+        this.logger.warn(`Skill "${meta.name}" declares no body \u2014 add a \`body()\` method or \`@Skill({ body })\`. Skipped.`);
+        continue;
+      }
+      this.declared.push({
+        name: meta.name,
+        description: meta.description,
+        scope: skillScope(meta),
+        body
+      });
+    }
+  }
+  /** The instance's `body()` method (bound), else the flat string, else nothing to offer. */
+  bodyOf(instance, flat) {
+    const candidate = instance.body;
+    if (typeof candidate === "function") {
+      return (ctx) => candidate.call(instance, ctx);
+    }
+    return flat === void 0 ? void 0 : () => flat;
+  }
+};
+SkillDiscoveryService = _ts_decorate14([
+  (0, import_common14.Injectable)(),
+  _ts_param13(1, (0, import_common14.Inject)(import_nestjs_agent_core15.AGENT_SKILL_SOURCES)),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
+    typeof import_core3.DiscoveryService === "undefined" ? Object : import_core3.DiscoveryService,
+    Array
+  ])
+], SkillDiscoveryService);
+
 // src/in-process-sink.ts
-var import_nestjs_agent_core12 = require("@dudousxd/nestjs-agent-core");
+var import_nestjs_agent_core16 = require("@dudousxd/nestjs-agent-core");
 var InProcessTokenStreamSink = class {
   static {
     __name(this, "InProcessTokenStreamSink");
@@ -1639,7 +2385,7 @@ var InProcessTokenStreamSink = class {
       }
       if (buf.ended) {
         if (buf.failure !== void 0) {
-          throw new import_nestjs_agent_core12.AgentStreamError(buf.failure);
+          throw new import_nestjs_agent_core16.AgentStreamError(buf.failure);
         }
         return;
       }
@@ -1670,38 +2416,44 @@ var LedgerQuotaStore = class {
       withinLimit: usedTokens < this.limitTokens
     };
   }
-  async bump() {
+  async bump(_actorRef, _day, _tokens) {
   }
 };
 
 // src/runner/inline-agent-runner.ts
-var import_nestjs_agent_core13 = require("@dudousxd/nestjs-agent-core");
-var import_common12 = require("@nestjs/common");
-function _ts_decorate12(decorators, target, key, desc) {
+var import_nestjs_agent_core17 = require("@dudousxd/nestjs-agent-core");
+var import_common15 = require("@nestjs/common");
+function _ts_decorate15(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate12, "_ts_decorate");
-function _ts_metadata12(k, v) {
+__name(_ts_decorate15, "_ts_decorate");
+function _ts_metadata15(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata12, "_ts_metadata");
-function _ts_param11(paramIndex, decorator) {
+__name(_ts_metadata15, "_ts_metadata");
+function _ts_param14(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param11, "_ts_param");
+__name(_ts_param14, "_ts_param");
 var InlineAgentRunner = class _InlineAgentRunner {
   static {
     __name(this, "InlineAgentRunner");
   }
   factory;
   store;
-  logger = new import_common12.Logger(_InlineAgentRunner.name);
+  logger = new import_common15.Logger(_InlineAgentRunner.name);
   pending = /* @__PURE__ */ new Map();
+  /**
+  * Runs someone has asked to stop. In-process, like `pending`, and for the same reason: this runner
+  * is single-replica by construction, so the request is readable by the only loop that could be
+  * running it. A cancelled id is dropped once the run settles, so the set tracks live runs only.
+  */
+  cancelled = /* @__PURE__ */ new Set();
   constructor(factory, store) {
     this.factory = factory;
     this.store = store;
@@ -1710,15 +2462,31 @@ var InlineAgentRunner = class _InlineAgentRunner {
     const runId = crypto.randomUUID();
     const day = input.day ?? utcDay();
     const deps = this.factory.forAgent(input.agentName);
-    const hooks = this.topLevelHooks(runId, deps, input.actor, day);
-    void (0, import_nestjs_agent_core13.runAgentLoop)({
+    const hooks = this.topLevelHooks({
+      runId,
+      deps,
+      actor: input.actor,
+      day,
+      threadId: input.threadId,
+      chainBelow: [
+        ...input.delegationPath ?? [],
+        ...input.agentName !== void 0 ? [
+          input.agentName
+        ] : []
+      ]
+    });
+    void (0, import_nestjs_agent_core17.runAgentLoop)({
       ...deps,
       day
     }, input, hooks).then(() => this.store.setActiveStream(input.threadId, null)).catch(async (error) => {
+      if (error instanceof import_nestjs_agent_core17.RunCancelledError) {
+        await this.settleCancelled(runId, input.threadId, deps);
+        return;
+      }
       const message = error instanceof Error ? error.message : String(error);
-      const code = error instanceof import_nestjs_agent_core13.QuotaExceededError ? "quota_exceeded" : "run_failed";
+      const code = (0, import_nestjs_agent_core17.agentFailureCode)(error);
       this.logger.error(`agent run ${runId} failed (${code}): ${message}`);
-      (0, import_nestjs_agent_core13.publishAgentRunFailed)({
+      (0, import_nestjs_agent_core17.publishAgentRunFailed)({
         runId,
         code,
         message
@@ -1735,33 +2503,216 @@ var InlineAgentRunner = class _InlineAgentRunner {
         code,
         message
       });
-    });
+    }).finally(() => this.cancelled.delete(runId));
     return {
       runId
     };
   }
-  async signal(runId, toolCallId, decision) {
-    const key = `${runId}:${toolCallId}`;
-    const resolve = this.pending.get(key);
-    if (resolve !== void 0) {
+  async signal(runId, toolCallId2, reply) {
+    const key = `${runId}:${toolCallId2}`;
+    const waiter = this.pending.get(key);
+    if (waiter !== void 0) {
       this.pending.delete(key);
-      resolve(decision);
+      waiter.resolve(reply);
     }
   }
+  /**
+  * Ask a run to stop, and settle whatever it was parked on.
+  *
+  * The loop observes the request at its next safe point (between steps, before the turn's tools) and
+  * unwinds from there — so a tool already executing is left to finish, and its result is recorded
+  * exactly as it would have been. What this cannot wait for is a turn parked on a human: that wait
+  * is a promise nobody is going to resolve, so it is REJECTED here with the same
+  * {@link RunCancelledError} the loop would have thrown, and the run unwinds through the identical
+  * path.
+  *
+  * Settlement — the run row, the thread's active stream, the stream's terminal — belongs to the
+  * `RunCancelledError` catch in `start`, so a cancel and an ordinary failure settle in one place
+  * each and can never both write.
+  */
   async cancel(runId) {
-    const deps = this.factory.forAgent();
+    this.cancelled.add(runId);
+    for (const [key, waiter] of this.pending) {
+      if (key.startsWith(`${runId}:`)) {
+        this.pending.delete(key);
+        waiter.reject(new import_nestjs_agent_core17.RunCancelledError());
+      }
+    }
+    await Promise.resolve();
+  }
+  /**
+  * The single place a cancelled run's state is settled: recorded as its own terminal (never
+  * `failed` — a user pressing Stop must not land in someone's error rate), the thread released, and
+  * the stream ENDED after a `cancelled` frame rather than failed, so a client that retries failed
+  * streams does not retry this one.
+  */
+  async settleCancelled(runId, threadId, deps) {
+    this.logger.log(`agent run ${runId} cancelled`);
+    await this.store.setActiveStream(threadId, null);
     const writer = await deps.sink.open(runId);
+    await writer.write((0, import_nestjs_agent_core17.encodeStreamEvent)({
+      kind: "cancelled"
+    }));
     await writer.end();
+    await this.store.recordRunEnd?.({
+      runId,
+      status: "cancelled"
+    });
+  }
+  /**
+  * Park a run on a human, keyed by run + tool call. One map for approvals and for question-set
+  * answers alike: both wait on the same key, and `signal` cannot tell (or need to tell) which
+  * shape it is delivering — the loop asked for one and only ever gets what the caller sent. A
+  * cancel settles the wait too, by rejecting it.
+  */
+  park(runId, toolCallId2) {
+    return new Promise((resolve, reject) => {
+      this.pending.set(`${runId}:${toolCallId2}`, {
+        resolve,
+        reject
+      });
+    });
   }
-  topLevelHooks(runId, deps, actor, day) {
+  topLevelHooks(args) {
+    const { runId, deps, actor, day, threadId, chainBelow } = args;
     return {
       runId,
       openSink: /* @__PURE__ */ __name(() => deps.sink.open(runId), "openSink"),
-      awaitApproval: /* @__PURE__ */ __name((call) => new Promise((resolve) => {
-        this.pending.set(`${runId}:${call.id}`, resolve);
-      }), "awaitApproval"),
+      awaitApproval: /* @__PURE__ */ __name((call) => this.park(runId, call.id), "awaitApproval"),
+      awaitAnswers: /* @__PURE__ */ __name((request) => this.park(runId, request.id), "awaitAnswers"),
       step: /* @__PURE__ */ __name((_name, fn) => fn(), "step"),
-      runAgent: /* @__PURE__ */ __name((agentName, task) => this.runNested(agentName, task, actor, day, 1, runId), "runAgent")
+      parallel: import_nestjs_agent_core17.settleAll,
+      cancelled: /* @__PURE__ */ __name(async () => this.cancelled.has(runId), "cancelled"),
+      runAgent: /* @__PURE__ */ __name((agentName, task) => this.runNested({
+        agentName,
+        task,
+        actor,
+        day,
+        depth: 1,
+        path: chainBelow,
+        sinkRunId: runId,
+        parentRunId: runId
+      }), "runAgent"),
+      startAgent: /* @__PURE__ */ __name(({ agentName, task, toolCallId: toolCallId2 }) => this.startDetached({
+        agentName,
+        task,
+        actor,
+        day,
+        depth: 1,
+        path: chainBelow,
+        parentRunId: runId,
+        deliverTo: {
+          threadId,
+          toolCallId: toolCallId2
+        }
+      }), "startAgent")
+    };
+  }
+  /**
+  * Delegate WITHOUT waiting: a nested loop nobody awaits, on its own thread and its own sink, which
+  * posts its answer back into the delegating thread when it lands (`deliverTo`, settled by the
+  * loop). The calling turn gets the run id straight back and finishes.
+  *
+  * No `sinkRunId`, unlike {@link runNested}: forwarding into the stream the human is watching would
+  * write into a turn that has already ended. Its own approvals resolve through the shared pending
+  * map keyed by its own runId — which is what the pending-approvals surface routes to.
+  */
+  async startDetached(args) {
+    const { agentName, task, actor, day, depth, path, parentRunId, deliverTo } = args;
+    const subThread = await this.store.createThread({
+      actor,
+      transient: true
+    });
+    const runId = crypto.randomUUID();
+    await this.store.setActiveStream(subThread.id, runId);
+    const deps = this.factory.forAgent(agentName);
+    const hooks = {
+      runId,
+      openSink: /* @__PURE__ */ __name(() => deps.sink.open(runId), "openSink"),
+      awaitApproval: /* @__PURE__ */ __name((call) => this.park(runId, call.id), "awaitApproval"),
+      awaitAnswers: /* @__PURE__ */ __name((request) => this.park(runId, request.id), "awaitAnswers"),
+      step: /* @__PURE__ */ __name((_name, fn) => fn(), "step"),
+      parallel: import_nestjs_agent_core17.settleAll,
+      cancelled: /* @__PURE__ */ __name(async () => this.cancelled.has(runId), "cancelled"),
+      runAgent: /* @__PURE__ */ __name((childName, childTask) => this.runNested({
+        agentName: childName,
+        task: childTask,
+        actor,
+        day,
+        depth: depth + 1,
+        path: [
+          ...path,
+          agentName
+        ],
+        // A detached run owns a stream of its own, so ITS sub-agents forward into that one.
+        sinkRunId: runId,
+        parentRunId: runId
+      }), "runAgent"),
+      startAgent: /* @__PURE__ */ __name(({ agentName: childName, task: childTask, toolCallId: toolCallId2 }) => this.startDetached({
+        agentName: childName,
+        task: childTask,
+        actor,
+        day,
+        depth: depth + 1,
+        path: [
+          ...path,
+          agentName
+        ],
+        parentRunId: runId,
+        deliverTo: {
+          threadId: subThread.id,
+          toolCallId: toolCallId2
+        }
+      }), "startAgent")
+    };
+    void (0, import_nestjs_agent_core17.runAgentLoop)({
+      ...deps,
+      day
+    }, {
+      threadId: subThread.id,
+      actor,
+      userText: task,
+      agentName,
+      day,
+      delegationDepth: depth,
+      delegationPath: path,
+      parentRunId,
+      deliverTo
+    }, hooks).catch(async (error) => {
+      const cancelled = error instanceof import_nestjs_agent_core17.RunCancelledError;
+      const message = error instanceof Error ? error.message : String(error);
+      if (!cancelled) {
+        this.logger.error(`detached agent run ${runId} failed: ${message}`);
+        (0, import_nestjs_agent_core17.publishAgentRunFailed)({
+          runId,
+          code: (0, import_nestjs_agent_core17.agentFailureCode)(error),
+          message
+        });
+      }
+      await this.store.recordRunEnd?.({
+        runId,
+        status: cancelled ? "cancelled" : "failed",
+        ...cancelled ? {} : {
+          errorCode: (0, import_nestjs_agent_core17.agentFailureCode)(error),
+          errorMessage: message
+        }
+      });
+      await (0, import_nestjs_agent_core17.settleUnsettledDelegation)({
+        store: this.store,
+        delivery: deliverTo,
+        agent: agentName,
+        runId,
+        status: cancelled ? "cancelled" : "failed",
+        ...cancelled ? {} : {
+          error: message
+        }
+      });
+    }).finally(async () => {
+      this.cancelled.delete(runId);
+      await this.store.setActiveStream(subThread.id, null);
+    });
+    return {
+      runId
     };
   }
   /**
@@ -1769,7 +2720,8 @@ var InlineAgentRunner = class _InlineAgentRunner {
   * (the top-level run the human is watching) so its output and any pending action tool are visible,
   * and its own approvals resolve through the shared pending map keyed by its own runId.
   */
-  async runNested(agentName, task, actor, day, depth, sinkRunId) {
+  async runNested(args) {
+    const { agentName, task, actor, day, depth, path, sinkRunId, parentRunId } = args;
     const subThread = await this.store.createThread({
       actor,
       transient: true
@@ -1781,14 +2733,45 @@ var InlineAgentRunner = class _InlineAgentRunner {
       runId,
       // Forward into the top-level stream; the top-level run owns end/fail on that shared sink.
       openSink: /* @__PURE__ */ __name(async () => childSinkWriter(await deps.sink.open(sinkRunId)), "openSink"),
-      awaitApproval: /* @__PURE__ */ __name((call) => new Promise((resolve) => {
-        this.pending.set(`${runId}:${call.id}`, resolve);
-      }), "awaitApproval"),
+      awaitApproval: /* @__PURE__ */ __name((call) => this.park(runId, call.id), "awaitApproval"),
+      awaitAnswers: /* @__PURE__ */ __name((request) => this.park(runId, request.id), "awaitAnswers"),
       step: /* @__PURE__ */ __name((_name, fn) => fn(), "step"),
-      runAgent: /* @__PURE__ */ __name((childName, childTask) => this.runNested(childName, childTask, actor, day, depth + 1, sinkRunId), "runAgent")
+      parallel: import_nestjs_agent_core17.settleAll,
+      // A child stops when it is cancelled OR when the run a human is actually watching is: the
+      // canceller names the top-level run, which is the only id that ever left the server.
+      cancelled: /* @__PURE__ */ __name(async () => this.cancelled.has(runId) || this.cancelled.has(sinkRunId), "cancelled"),
+      runAgent: /* @__PURE__ */ __name((childName, childTask) => this.runNested({
+        agentName: childName,
+        task: childTask,
+        actor,
+        day,
+        depth: depth + 1,
+        path: [
+          ...path,
+          agentName
+        ],
+        sinkRunId,
+        parentRunId: runId
+      }), "runAgent"),
+      startAgent: /* @__PURE__ */ __name(({ agentName: childName, task: childTask, toolCallId: toolCallId2 }) => this.startDetached({
+        agentName: childName,
+        task: childTask,
+        actor,
+        day,
+        depth: depth + 1,
+        path: [
+          ...path,
+          agentName
+        ],
+        parentRunId: runId,
+        deliverTo: {
+          threadId: subThread.id,
+          toolCallId: toolCallId2
+        }
+      }), "startAgent")
     };
     try {
-      return await (0, import_nestjs_agent_core13.runAgentLoop)({
+      return await (0, import_nestjs_agent_core17.runAgentLoop)({
         ...deps,
         day
       }, {
@@ -1798,6 +2781,8 @@ var InlineAgentRunner = class _InlineAgentRunner {
         agentName,
         day,
         delegationDepth: depth,
+        delegationPath: path,
+        parentRunId,
         sinkRunId
       }, hooks);
     } finally {
@@ -1805,112 +2790,177 @@ var InlineAgentRunner = class _InlineAgentRunner {
     }
   }
 };
-InlineAgentRunner = _ts_decorate12([
-  (0, import_common12.Injectable)(),
-  _ts_param11(0, (0, import_common12.Inject)(import_nestjs_agent_core13.AGENT_DEPS_FACTORY)),
-  _ts_param11(1, (0, import_common12.Inject)(import_nestjs_agent_core13.AGENT_STORE)),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+InlineAgentRunner = _ts_decorate15([
+  (0, import_common15.Injectable)(),
+  _ts_param14(0, (0, import_common15.Inject)(import_nestjs_agent_core17.AGENT_DEPS_FACTORY)),
+  _ts_param14(1, (0, import_common15.Inject)(import_nestjs_agent_core17.AGENT_STORE)),
+  _ts_metadata15("design:type", Function),
+  _ts_metadata15("design:paramtypes", [
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
     typeof AgentStore === "undefined" ? Object : AgentStore
   ])
 ], InlineAgentRunner);
 
+// src/skills-config.ts
+var import_nestjs_agent_core18 = require("@dudousxd/nestjs-agent-core");
+function declaredSkillProvider(declared) {
+  return {
+    list: /* @__PURE__ */ __name(({ scopes }) => declared.filter((skill) => scopes.includes(skill.scope)).map(({ name, description, scope }) => ({
+      name,
+      description,
+      scope
+    })), "list"),
+    load: /* @__PURE__ */ __name(async ({ name, scope, ctx }) => {
+      const match = declared.find((skill) => skill.name === name && skill.scope === scope);
+      return match === void 0 ? null : await match.body(ctx);
+    }, "load")
+  };
+}
+__name(declaredSkillProvider, "declaredSkillProvider");
+function resolveSkillsConfig(options, declared) {
+  if (options === void 0) {
+    return void 0;
+  }
+  const providers = options.provider === void 0 ? [
+    declaredSkillProvider(declared)
+  ] : [
+    options.provider,
+    declaredSkillProvider(declared)
+  ];
+  return {
+    provider: providers.length === 1 ? providers[0] : (0, import_nestjs_agent_core18.compositeSkillProvider)(providers),
+    ...options.scopes !== void 0 ? {
+      scopes: options.scopes
+    } : {},
+    ...options.maxSkills !== void 0 ? {
+      maxSkills: options.maxSkills
+    } : {}
+  };
+}
+__name(resolveSkillsConfig, "resolveSkillsConfig");
+
 // src/agent.module.ts
-function _ts_decorate13(decorators, target, key, desc) {
+function _ts_decorate16(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate13, "_ts_decorate");
+__name(_ts_decorate16, "_ts_decorate");
 var DEFAULT_PATH = "agent";
 function sharedProviders(durable, includeStore) {
   const providers = [
     {
-      provide: import_nestjs_agent_core14.AGENT_TOOL_REGISTRY,
-      useFactory: /* @__PURE__ */ __name(() => new import_nestjs_agent_core14.ToolRegistry(), "useFactory")
+      provide: import_nestjs_agent_core19.AGENT_TOOL_REGISTRY,
+      useFactory: /* @__PURE__ */ __name(() => new import_nestjs_agent_core19.ToolRegistry(), "useFactory")
     },
     // Starts empty; AgentDiscoveryService populates it from `@Agent`-decorated providers at boot.
     {
-      provide: import_nestjs_agent_core14.AGENT_REGISTRY,
-      useFactory: /* @__PURE__ */ __name(() => new import_nestjs_agent_core14.AgentRegistry(), "useFactory")
+      provide: import_nestjs_agent_core19.AGENT_REGISTRY,
+      useFactory: /* @__PURE__ */ __name(() => new import_nestjs_agent_core19.AgentRegistry(), "useFactory")
     },
     // A shared, mutable list AgentDiscoveryService fills with `@SystemPromptContributor()` methods.
     {
-      provide: import_nestjs_agent_core14.AGENT_PROMPT_CONTRIBUTORS,
+      provide: import_nestjs_agent_core19.AGENT_PROMPT_CONTRIBUTORS,
       useFactory: /* @__PURE__ */ __name(() => [], "useFactory")
     },
+    // Likewise for `@Skill`-decorated providers — filled by SkillDiscoveryService at onModuleInit,
+    // read lazily by the AGENT_SKILLS provider below (which DI builds before discovery has run).
+    {
+      provide: import_nestjs_agent_core19.AGENT_SKILL_SOURCES,
+      useFactory: /* @__PURE__ */ __name(() => [], "useFactory")
+    },
+    {
+      // One resolution, shared by the loop's deps and the listing endpoint: a second one would
+      // drift, and a user would be offered a skill the agent cannot reach. `undefined` when the
+      // host configured none — which is what keeps the turn's checkpoint sequence unchanged.
+      provide: import_nestjs_agent_core19.AGENT_SKILLS,
+      useFactory: /* @__PURE__ */ __name((options, declared) => resolveSkillsConfig(options.skills, declared), "useFactory"),
+      inject: [
+        import_nestjs_agent_core19.AGENT_OPTIONS,
+        import_nestjs_agent_core19.AGENT_SKILL_SOURCES
+      ]
+    },
+    {
+      // One resolution, shared by the loop's deps and the read-back endpoint: a person has to be
+      // shown what the model was shown, and two resolutions would eventually disagree about that.
+      provide: import_nestjs_agent_core19.AGENT_MEMORY,
+      useFactory: /* @__PURE__ */ __name((options) => options.memory, "useFactory"),
+      inject: [
+        import_nestjs_agent_core19.AGENT_OPTIONS
+      ]
+    },
     {
-      provide: import_nestjs_agent_core14.AGENT_SINK,
+      provide: import_nestjs_agent_core19.AGENT_SINK,
       useFactory: /* @__PURE__ */ __name((options) => options.sink ?? new InProcessTokenStreamSink(), "useFactory"),
       inject: [
-        import_nestjs_agent_core14.AGENT_OPTIONS
+        import_nestjs_agent_core19.AGENT_OPTIONS
       ]
     },
     {
-      provide: import_nestjs_agent_core14.AGENT_ROLES_POLICY,
-      useFactory: /* @__PURE__ */ __name((options) => options.rolesPolicy ?? new import_nestjs_agent_core14.DefaultRolesPolicy(options.defaultRoles), "useFactory"),
+      provide: import_nestjs_agent_core19.AGENT_ROLES_POLICY,
+      useFactory: /* @__PURE__ */ __name((options) => options.rolesPolicy ?? new import_nestjs_agent_core19.DefaultRolesPolicy(options.defaultRoles), "useFactory"),
       inject: [
-        import_nestjs_agent_core14.AGENT_OPTIONS
+        import_nestjs_agent_core19.AGENT_OPTIONS
       ]
     },
     {
-      provide: import_nestjs_agent_core14.AGENT_ACTOR_RESOLVER,
+      provide: import_nestjs_agent_core19.AGENT_ACTOR_RESOLVER,
       useFactory: /* @__PURE__ */ __name((options) => options.actorResolver, "useFactory"),
       inject: [
-        import_nestjs_agent_core14.AGENT_OPTIONS
+        import_nestjs_agent_core19.AGENT_OPTIONS
       ]
     },
     {
-      provide: import_nestjs_agent_core14.AGENT_MODEL,
+      provide: import_nestjs_agent_core19.AGENT_MODEL,
       useFactory: /* @__PURE__ */ __name((o) => o.model, "useFactory"),
       inject: [
-        import_nestjs_agent_core14.AGENT_OPTIONS
+        import_nestjs_agent_core19.AGENT_OPTIONS
       ]
     },
     {
       // An explicit `quota` wins; otherwise `quotaLimitTokens` binds the built-in ledger-backed
       // store; otherwise quotas are off (undefined). The ledger store reads the same usage rows
       // the loop already writes, so enforcement needs no extra shared state across replicas.
-      provide: import_nestjs_agent_core14.AGENT_QUOTA_STORE,
+      provide: import_nestjs_agent_core19.AGENT_QUOTA_STORE,
       useFactory: /* @__PURE__ */ __name((o, store) => o.quota ?? (o.quotaLimitTokens !== void 0 ? new LedgerQuotaStore(store, o.quotaLimitTokens) : void 0), "useFactory"),
       inject: [
-        import_nestjs_agent_core14.AGENT_OPTIONS,
-        import_nestjs_agent_core14.AGENT_STORE
+        import_nestjs_agent_core19.AGENT_OPTIONS,
+        import_nestjs_agent_core19.AGENT_STORE
       ]
     },
     AgentDepsFactory2,
     {
-      provide: import_nestjs_agent_core14.AGENT_DEPS_FACTORY,
+      provide: import_nestjs_agent_core19.AGENT_DEPS_FACTORY,
       useExisting: AgentDepsFactory2
     },
     // Populates the registry + contributors (onModuleInit) BEFORE AiToolDiscoveryService synthesizes
     // handoff tools (onApplicationBootstrap) reads the registry.
     AgentDiscoveryService,
     AiToolDiscoveryService,
+    SkillDiscoveryService,
     InlineAgentRunner,
     AgentService,
     // Bound ALWAYS (durable or inline) — the console's cross-thread approvals inbox routes decisions
     // through AgentService.signalToolCall, which reaches whichever AGENT_RUNNER is bound above.
     AgentApprovalPortAdapter,
     {
-      provide: import_nestjs_agent_core14.AGENT_APPROVAL_PORT,
+      provide: import_nestjs_agent_core19.AGENT_APPROVAL_PORT,
       useExisting: AgentApprovalPortAdapter
     }
   ];
   if (includeStore) {
     providers.push({
-      provide: import_nestjs_agent_core14.AGENT_STORE,
+      provide: import_nestjs_agent_core19.AGENT_STORE,
       useFactory: /* @__PURE__ */ __name((o) => o.store, "useFactory"),
       inject: [
-        import_nestjs_agent_core14.AGENT_OPTIONS
+        import_nestjs_agent_core19.AGENT_OPTIONS
       ]
     });
   }
   if (durable) {
     providers.push({
-      provide: import_nestjs_agent_core14.AGENT_RUNNER,
+      provide: import_nestjs_agent_core19.AGENT_RUNNER,
       useFactory: /* @__PURE__ */ __name((durableRunner) => {
         if (durableRunner === void 0) {
           throw new Error("AgentModule.forRoot({ durable: true }) requires importing AgentDurableModule from '@dudousxd/nestjs-agent/durable' (alongside a configured DurableModule). It was not found.");
@@ -1919,14 +2969,14 @@ function sharedProviders(durable, includeStore) {
       }, "useFactory"),
       inject: [
         {
-          token: import_nestjs_agent_core14.AGENT_DURABLE_RUNNER,
+          token: import_nestjs_agent_core19.AGENT_DURABLE_RUNNER,
           optional: true
         }
       ]
     });
   } else {
     providers.push({
-      provide: import_nestjs_agent_core14.AGENT_RUNNER,
+      provide: import_nestjs_agent_core19.AGENT_RUNNER,
       useExisting: InlineAgentRunner
     });
   }
@@ -1935,23 +2985,25 @@ function sharedProviders(durable, includeStore) {
 __name(sharedProviders, "sharedProviders");
 function exportsFor(includeStore) {
   return [
-    import_nestjs_agent_core14.AGENT_OPTIONS,
-    import_nestjs_agent_core14.AGENT_TOOL_REGISTRY,
-    import_nestjs_agent_core14.AGENT_REGISTRY,
-    import_nestjs_agent_core14.AGENT_SINK,
-    import_nestjs_agent_core14.AGENT_ROLES_POLICY,
-    import_nestjs_agent_core14.AGENT_ACTOR_RESOLVER,
-    import_nestjs_agent_core14.AGENT_MODEL,
+    import_nestjs_agent_core19.AGENT_OPTIONS,
+    import_nestjs_agent_core19.AGENT_TOOL_REGISTRY,
+    import_nestjs_agent_core19.AGENT_REGISTRY,
+    import_nestjs_agent_core19.AGENT_SINK,
+    import_nestjs_agent_core19.AGENT_ROLES_POLICY,
+    import_nestjs_agent_core19.AGENT_ACTOR_RESOLVER,
+    import_nestjs_agent_core19.AGENT_MODEL,
     ...includeStore ? [
-      import_nestjs_agent_core14.AGENT_STORE
+      import_nestjs_agent_core19.AGENT_STORE
     ] : [],
-    import_nestjs_agent_core14.AGENT_QUOTA_STORE,
-    import_nestjs_agent_core14.AGENT_PROMPT_CONTRIBUTORS,
-    import_nestjs_agent_core14.AGENT_DEPS_FACTORY,
+    import_nestjs_agent_core19.AGENT_QUOTA_STORE,
+    import_nestjs_agent_core19.AGENT_PROMPT_CONTRIBUTORS,
+    import_nestjs_agent_core19.AGENT_SKILLS,
+    import_nestjs_agent_core19.AGENT_MEMORY,
+    import_nestjs_agent_core19.AGENT_DEPS_FACTORY,
     AgentDepsFactory2,
     AgentService,
     InlineAgentRunner,
-    import_nestjs_agent_core14.AGENT_APPROVAL_PORT
+    import_nestjs_agent_core19.AGENT_APPROVAL_PORT
   ];
 }
 __name(exportsFor, "exportsFor");
@@ -1960,7 +3012,9 @@ var BASE_CONTROLLERS = [
   ThreadsController,
   ToolCallController,
   QuotaController,
-  AgentsController
+  AgentsController,
+  SkillsController,
+  MemoriesController
 ];
 var GUARDABLE_CONTROLLERS = [
   ...BASE_CONTROLLERS,
@@ -1992,7 +3046,7 @@ function guardProviders(guards) {
 }
 __name(guardProviders, "guardProviders");
 function routerFor(path) {
-  return import_core3.RouterModule.register([
+  return import_core4.RouterModule.register([
     {
       path,
       module: AgentModule
@@ -2019,13 +3073,13 @@ var AgentModule = class _AgentModule {
       module: _AgentModule,
       global: true,
       imports: [
-        import_core3.DiscoveryModule,
+        import_core4.DiscoveryModule,
         routerFor(path)
       ],
       controllers: controllersForSurface(options.surface, options.attachments?.upload === true),
       providers: [
         {
-          provide: import_nestjs_agent_core14.AGENT_OPTIONS,
+          provide: import_nestjs_agent_core19.AGENT_OPTIONS,
           useValue: options
         },
         ...sharedProviders(options.durable ?? false, includeStore),
@@ -2043,14 +3097,14 @@ var AgentModule = class _AgentModule {
       module: _AgentModule,
       global: true,
       imports: [
-        import_core3.DiscoveryModule,
+        import_core4.DiscoveryModule,
         routerFor(path),
         ...options.imports ?? []
       ],
       controllers: controllersForSurface(options.surface, options.attachmentsUpload === true),
       providers: [
         {
-          provide: import_nestjs_agent_core14.AGENT_OPTIONS,
+          provide: import_nestjs_agent_core19.AGENT_OPTIONS,
           // Stamp the STATIC wiring flags onto the factory result: `durable`/`dispatchedSteps`/
           // `surface` are authoritative on the async config object (they decided the actual wiring
           // above), and `AgentDurableModule` derives the effective dispatched-steps value from
@@ -2075,12 +3129,13 @@ var AgentModule = class _AgentModule {
     };
   }
 };
-AgentModule = _ts_decorate13([
-  (0, import_common13.Global)(),
-  (0, import_common13.Module)({})
+AgentModule = _ts_decorate16([
+  (0, import_common16.Global)(),
+  (0, import_common16.Module)({})
 ], AgentModule);
 
 // src/resolver/header-actor-resolver.ts
+var import_common17 = require("@nestjs/common");
 function readHeader(req, name) {
   if (typeof req !== "object" || req === null || !("headers" in req)) return void 0;
   const { headers } = req;
@@ -2096,7 +3151,7 @@ var HeaderActorResolver = class {
   resolve(req) {
     const id = readHeader(req, "x-actor-id");
     if (id === void 0 || id.length === 0) {
-      throw new Error("HeaderActorResolver: missing x-actor-id header. No default actor is fabricated. Send x-actor-id from a trusted gateway, or configure AgentModule.forRoot({ actorResolver }) with a resolver that reads your authenticated principal.");
+      throw new import_common17.UnauthorizedException("HeaderActorResolver: missing x-actor-id header. No default actor is fabricated. Send x-actor-id from a trusted gateway, or configure AgentModule.forRoot({ actorResolver }) with a resolver that reads your authenticated principal.");
     }
     const roles = (readHeader(req, "x-actor-role") ?? "").split(",").map((role) => role.trim()).filter((role) => role.length > 0);
     const tenantRef = readHeader(req, "x-tenant-ref");
@@ -2117,6 +3172,7 @@ __reExport(index_exports, require("@dudousxd/nestjs-agent-core"), module.exports
   AGENT_METADATA,
   AGENT_TOOL_BRAND,
   AI_TOOL_METADATA,
+  ATTACHMENT_PAGE_SIZE,
   Agent,
   AgentApprovalPortAdapter,
   AgentDepsFactory,
@@ -2132,14 +3188,23 @@ __reExport(index_exports, require("@dudousxd/nestjs-agent-core"), module.exports
   InProcessTokenStreamSink,
   InlineAgentRunner,
   LedgerQuotaStore,
+  MemoriesController,
+  SKILL_METADATA,
   SYSTEM_PROMPT_CONTRIBUTOR_METADATA,
   SYSTEM_PROMPT_METADATA,
+  Skill,
+  SkillDiscoveryService,
+  SkillsController,
   SystemPrompt,
   SystemPromptContributor,
+  declaredSkillProvider,
   delegateToolName,
   provideAgentTool,
   readAgentMetadata,
   readAiToolMetadata,
+  readSkillMetadata,
+  resolveSkillsConfig,
+  skillScope,
   utcDay,
   ...require("@dudousxd/nestjs-agent-core")
 });