@dudousxd/nestjs-agent 0.11.1 → 0.13.0

package/dist/index.js

@@ -2,12 +2,12 @@ var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 
 // src/agent.module.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER6, AGENT_APPROVAL_PORT, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY4, AGENT_DURABLE_RUNNER, AGENT_MODEL as AGENT_MODEL2, AGENT_OPTIONS as AGENT_OPTIONS4, AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS3, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE3, AGENT_REGISTRY as AGENT_REGISTRY5, AGENT_ROLES_POLICY as AGENT_ROLES_POLICY2, AGENT_RUNNER as AGENT_RUNNER2, AGENT_SINK as AGENT_SINK2, AGENT_STORE as AGENT_STORE4, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY3, AgentRegistry as AgentRegistry5, DefaultRolesPolicy, ToolRegistry as ToolRegistry3 } from "@dudousxd/nestjs-agent-core";
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER8, AGENT_APPROVAL_PORT, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY4, AGENT_DURABLE_RUNNER, AGENT_MEMORY as AGENT_MEMORY3, AGENT_MODEL as AGENT_MODEL2, AGENT_OPTIONS as AGENT_OPTIONS4, AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS3, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE3, AGENT_REGISTRY as AGENT_REGISTRY5, AGENT_ROLES_POLICY as AGENT_ROLES_POLICY2, AGENT_RUNNER as AGENT_RUNNER2, AGENT_SINK as AGENT_SINK2, AGENT_SKILLS as AGENT_SKILLS3, AGENT_SKILL_SOURCES as AGENT_SKILL_SOURCES2, AGENT_STORE as AGENT_STORE4, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY3, AgentRegistry as AgentRegistry5, DefaultRolesPolicy, ToolRegistry as ToolRegistry3 } from "@dudousxd/nestjs-agent-core";
 import { Global, Module } from "@nestjs/common";
 import { DiscoveryModule, RouterModule } from "@nestjs/core";
 
 // src/agent-deps.factory.ts
-import { AGENT_MODEL, AGENT_PRICING_STORE, AGENT_PROMPT_CONTRIBUTORS, AGENT_QUOTA_STORE, AGENT_REGISTRY, AGENT_ROLES_POLICY, AGENT_SINK, AGENT_STORE, AGENT_TOOL_REGISTRY, AgentRegistry as AgentRegistry2, ToolRegistry as ToolRegistry2 } from "@dudousxd/nestjs-agent-core";
+import { AGENT_MEMORY, AGENT_MODEL, AGENT_PRICING_STORE, AGENT_PROMPT_CONTRIBUTORS, AGENT_QUOTA_STORE, AGENT_REGISTRY, AGENT_ROLES_POLICY, AGENT_SINK, AGENT_SKILLS, AGENT_STORE, AGENT_TOOL_REGISTRY, AgentRegistry as AgentRegistry2, ToolRegistry as ToolRegistry2, normalizeDelegation, summarizeWithModel, windowHistory } from "@dudousxd/nestjs-agent-core";
 import { AGENT_OPTIONS } from "@dudousxd/nestjs-agent-core";
 import { Inject, Injectable, Optional } from "@nestjs/common";
 function _ts_decorate(decorators, target, key, desc) {
@@ -27,8 +27,9 @@ function _ts_param(paramIndex, decorator) {
   };
 }
 __name(_ts_param, "_ts_param");
-function delegateToolName(target) {
-  return `ask_${target.replace(/[^a-zA-Z0-9]+/g, "_")}`;
+function delegateToolName(args) {
+  const slug = args.target.replace(/[^a-zA-Z0-9]+/g, "_");
+  return args.detached === true ? `start_${slug}` : `ask_${slug}`;
 }
 __name(delegateToolName, "delegateToolName");
 var AgentDepsFactory2 = class {
@@ -45,7 +46,9 @@ var AgentDepsFactory2 = class {
   promptContributors;
   quota;
   pricingStore;
-  constructor(options, model, store, sink, rolesPolicy, registry, agents, promptContributors, quota, pricingStore) {
+  skills;
+  memory;
+  constructor(options, model, store, sink, rolesPolicy, registry, agents, promptContributors, quota, pricingStore, skills, memory) {
     this.options = options;
     this.model = model;
     this.store = store;
@@ -56,6 +59,16 @@ var AgentDepsFactory2 = class {
     this.promptContributors = promptContributors;
     this.quota = quota;
     this.pricingStore = pricingStore;
+    this.skills = skills;
+    this.memory = memory;
+  }
+  /** The turn's memory seam, shared with the read-back endpoint. Undefined → memory is not configured. */
+  memoryConfig() {
+    return this.memory;
+  }
+  /** The turn's skills seam, shared with the listing endpoint. Undefined → skills are not configured. */
+  skillsConfig() {
+    return this.skills;
   }
   /**
   * The agent a turn uses when the caller names none: the explicit `defaultAgent` option, else the
@@ -72,7 +85,13 @@ var AgentDepsFactory2 = class {
     if (definition === void 0) {
       return void 0;
     }
-    const delegated = (definition.delegatesTo ?? []).map(delegateToolName);
+    const delegated = (definition.delegatesTo ?? []).map((edge) => {
+      const { agent, detached } = normalizeDelegation(edge);
+      return delegateToolName({
+        target: agent,
+        detached
+      });
+    });
     if (definition.tools === void 0 && delegated.length === 0) {
       return void 0;
     }
@@ -87,6 +106,8 @@ var AgentDepsFactory2 = class {
     const toolAllowList = this.effectiveTools(definition);
     const followUpsCount = this.followUpsCount();
     const retrieval = this.options.retrieval;
+    const historyPolicy = this.historyPolicy(definition);
+    const ask = definition?.ask ?? this.options.ask;
     return {
       model: this.model,
       store: this.store,
@@ -96,6 +117,12 @@ var AgentDepsFactory2 = class {
       promptContributors: this.promptContributors,
       systemPrompt: definition?.systemPrompt ?? "You are a helpful assistant.",
       maxSteps: definition?.maxSteps ?? 8,
+      ...definition?.maxDelegationDepth !== void 0 ? {
+        maxDelegationDepth: definition.maxDelegationDepth
+      } : {},
+      ...definition?.maxAgentAppearances !== void 0 ? {
+        maxAgentAppearances: definition.maxAgentAppearances
+      } : {},
       ...definition?.modelId !== void 0 ? {
         modelId: definition.modelId
       } : {},
@@ -105,6 +132,37 @@ var AgentDepsFactory2 = class {
       ...this.pricingStore !== void 0 ? {
         pricingStore: this.pricingStore
       } : {},
+      ...historyPolicy !== void 0 ? {
+        historyPolicy
+      } : {},
+      inputProcessors: this.options.inputProcessors ?? [],
+      outputProcessors: this.options.outputProcessors ?? [],
+      ...definition?.outputSchema !== void 0 ? {
+        outputSchema: definition.outputSchema
+      } : {},
+      ...definition?.outputRepairAttempts !== void 0 ? {
+        outputRepairAttempts: definition.outputRepairAttempts
+      } : {},
+      ...definition?.intake !== void 0 ? {
+        intake: definition.intake
+      } : {},
+      // Most specific wins, exactly as `historyPolicy` resolves: the agent's own `@Agent({ ask })`,
+      // else the module-wide flag. Both are module config, so every process of a deployment agrees.
+      ...ask === true ? {
+        ask: true
+      } : {},
+      // Module-wide, never per-agent: a skill is a procedure, not a persona, and an agent that could
+      // opt out of one would make the catalog depend on which agent a turn happened to select — a
+      // per-turn fact the worker re-deriving the tool list cannot see.
+      ...this.skills !== void 0 ? {
+        skills: this.skills
+      } : {},
+      // Module-wide, never per-agent, for the same reason skills are: which memories a turn carries
+      // cannot depend on which persona answered it, or the worker re-deriving a dispatched turn's
+      // tool list would disagree with the loop about whether `remember` was offered.
+      ...this.memory !== void 0 ? {
+        memory: this.memory
+      } : {},
       ...toolAllowList !== void 0 ? {
         toolAllowList
       } : {},
@@ -125,6 +183,36 @@ var AgentDepsFactory2 = class {
       } : {}
     };
   }
+  /**
+  * The ceiling on how much of a thread this agent's turns carry, most specific wins: the agent's
+  * own `@Agent({ history })`, else a module-wide custom `historyPolicy`, else the module-wide
+  * `history` window. Undefined → unbounded, the behaviour of a module that configures none.
+  */
+  historyPolicy(definition) {
+    if (definition?.history !== void 0) {
+      return this.window(definition.history);
+    }
+    if (this.options.historyPolicy !== void 0) {
+      return this.options.historyPolicy;
+    }
+    return this.options.history === void 0 ? void 0 : this.window(this.options.history);
+  }
+  /** Build the built-in window policy from the declarative `{ maxMessages, maxTokens, summarize }`. */
+  window(config) {
+    return windowHistory({
+      ...config.maxMessages !== void 0 ? {
+        maxMessages: config.maxMessages
+      } : {},
+      ...config.maxTokens !== void 0 ? {
+        maxTokens: config.maxTokens
+      } : {},
+      // The shared module model, not a per-agent one: an agent's `modelId` is an accounting label,
+      // and only one provider is ever bound.
+      ...config.summarize === true ? {
+        summarize: summarizeWithModel(this.model)
+      } : {}
+    });
+  }
   /** Normalize the `followUps` option (`true` → 3, `{ count }` → count) to a number, or undefined. */
   followUpsCount() {
     const followUps = this.options.followUps;
@@ -150,6 +238,10 @@ AgentDepsFactory2 = _ts_decorate([
   _ts_param(8, Inject(AGENT_QUOTA_STORE)),
   _ts_param(9, Optional()),
   _ts_param(9, Inject(AGENT_PRICING_STORE)),
+  _ts_param(10, Optional()),
+  _ts_param(10, Inject(AGENT_SKILLS)),
+  _ts_param(11, Optional()),
+  _ts_param(11, Inject(AGENT_MEMORY)),
   _ts_metadata("design:type", Function),
   _ts_metadata("design:paramtypes", [
     typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
@@ -161,13 +253,15 @@ AgentDepsFactory2 = _ts_decorate([
     typeof AgentRegistry2 === "undefined" ? Object : AgentRegistry2,
     Array,
     Object,
+    Object,
+    Object,
     Object
   ])
 ], AgentDepsFactory2);
 
 // src/agent.service.ts
-import { AGENT_DEPS_FACTORY, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE2, AGENT_RUNNER, AGENT_STORE as AGENT_STORE2 } from "@dudousxd/nestjs-agent-core";
-import { BadRequestException, ForbiddenException, Inject as Inject2, Injectable as Injectable2, NotFoundException, NotImplementedException } from "@nestjs/common";
+import { AGENT_ATTACHMENT_STAGING, AGENT_DEPS_FACTORY, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE2, AGENT_RUNNER, AGENT_STORE as AGENT_STORE2 } from "@dudousxd/nestjs-agent-core";
+import { BadRequestException, ForbiddenException, Inject as Inject2, Injectable as Injectable2, NotFoundException, NotImplementedException, Optional as Optional2 } from "@nestjs/common";
 
 // src/agent-deps.ts
 function utcDay(date = /* @__PURE__ */ new Date()) {
@@ -211,14 +305,17 @@ var AgentService = class {
   store;
   deps;
   quota;
-  constructor(runner, store, deps, quota) {
+  staging;
+  constructor(runner, store, deps, quota, staging) {
     this.runner = runner;
     this.store = store;
     this.deps = deps;
     this.quota = quota;
+    this.staging = staging;
   }
   async chat(params) {
     const agentName = await this.resolveAgentName(params.agentName, params.threadId);
+    const attachments = await this.resolveAttachments(params.actor, params.attachments ?? []);
     let threadId = params.threadId;
     if (threadId === void 0) {
       if (params.regenerate === true) {
@@ -243,8 +340,8 @@ var AgentService = class {
       ...params.regenerate === true ? {
         regenerate: true
       } : {},
-      ...params.attachments !== void 0 ? {
-        attachments: params.attachments
+      ...attachments.length > 0 ? {
+        attachments
       } : {},
       ...params.pageContext !== void 0 ? {
         pageContext: params.pageContext
@@ -257,18 +354,66 @@ var AgentService = class {
       threadId
     };
   }
+  /**
+  * Rebuild this turn's attachments from the staging store, keyed by the ids the caller claimed.
+  * The model provider fetches {@link MessageAttachment.url} verbatim, so that url is only ever
+  * allowed to come from the host's own store — a caller that could name it could point the server
+  * at anything it can reach (cloud metadata, internal services) and read the response back out of
+  * the model's answer.
+  *
+  * No store bound means no way to tell an id the actor owns from one they don't, so a turn simply
+  * cannot carry attachments: 501 rather than trusting the request.
+  */
+  async resolveAttachments(actor, refs) {
+    if (refs.length === 0) {
+      return [];
+    }
+    const staging = this.staging;
+    if (staging === void 0 || typeof staging.resolve !== "function") {
+      throw new NotImplementedException("Message attachments require an AGENT_ATTACHMENT_STAGING provider implementing resolve(); attachment urls are never taken from the request.");
+    }
+    const resolved = [];
+    for (const ref of refs) {
+      const attachment = await staging.resolve({
+        mediaId: ref.mediaId,
+        actor
+      });
+      if (attachment === null) {
+        throw new ForbiddenException(`attachment ${ref.mediaId} is not available to this actor`);
+      }
+      resolved.push(attachment);
+    }
+    return resolved;
+  }
+  /**
+  * The run's live token stream, WITHOUT an ownership check — for in-process callers that are
+  * already authorized (the MCP bridge, a host's own job code), the same split as
+  * {@link signalToolCall} vs {@link approve}. Anything reachable from a request must go through
+  * {@link subscribeAs} instead: a runId is the only thing standing between a caller and another
+  * actor's answer, tool arguments and tool results.
+  */
   subscribe(runId) {
     return this.deps.forAgent().sink.subscribe(runId);
   }
-  async approve(actor, toolCallId) {
-    await this.assertOwnsToolCall(actor, toolCallId);
-    return this.signalToolCall(toolCallId, {
+  /**
+  * {@link subscribe}, gated the way {@link cancel} is: only the actor whose thread is currently
+  * streaming this run may read it. A run that has already finished is reported missing rather than
+  * replayed — the runner clears the thread's active stream as the run ends, and that field is what
+  * ownership is derived from.
+  */
+  async subscribeAs(actor, runId) {
+    await this.assertOwnsActiveStream(actor, runId);
+    return this.subscribe(runId);
+  }
+  async approve(actor, toolCallId2) {
+    await this.assertOwnsToolCall(actor, toolCallId2);
+    return this.signalToolCall(toolCallId2, {
       approved: true
     });
   }
-  async reject(actor, toolCallId, reason) {
-    await this.assertOwnsToolCall(actor, toolCallId);
-    return this.signalToolCall(toolCallId, {
+  async reject(actor, toolCallId2, reason) {
+    await this.assertOwnsToolCall(actor, toolCallId2);
+    return this.signalToolCall(toolCallId2, {
       approved: false,
       ...reason !== void 0 ? {
         reason
@@ -276,6 +421,34 @@ var AgentService = class {
     });
   }
   /**
+  * Answer a parked question set. An omitted question takes the request's own pre-picked default —
+  * resolved by the LOOP against the request it already holds, so "the user just submitted" and
+  * "the user picked exactly the defaults" persist as the same answers, and no client has to
+  * re-send what it was shown.
+  */
+  async answer(actor, toolCallId2, answers2 = {}) {
+    await this.assertOwnsToolCall(actor, toolCallId2);
+    const reply = {
+      answers: answers2,
+      answeredByRef: actor.id
+    };
+    return this.signalToolCall(toolCallId2, reply);
+  }
+  /**
+  * Decline to answer and let the agent proceed on its own assumptions. NOT the same as confirming
+  * them: the run records this as a rejection, so a reader auditing what the agent was told can
+  * tell a choice the user made from one they refused to make.
+  */
+  async skip(actor, toolCallId2) {
+    await this.assertOwnsToolCall(actor, toolCallId2);
+    const reply = {
+      answers: {},
+      skipped: true,
+      answeredByRef: actor.id
+    };
+    return this.signalToolCall(toolCallId2, reply);
+  }
+  /**
   * The decision core behind approve/reject, WITHOUT an ownership check: resolves the run
   * currently awaiting `toolCallId` and signals it. `approve`/`reject` above call this after their
   * own `assertOwnsToolCall` gate; the console `AgentApprovalPort` adapter (bound by `AgentModule`)
@@ -283,9 +456,9 @@ var AgentService = class {
   * re-deriving thread ownership here would reject a legitimate operator decision (an operator is
   * not the thread's own actor).
   */
-  async signalToolCall(toolCallId, decision) {
-    const runId = await this.resolveRunForToolCall(toolCallId);
-    return this.runner.signal(runId, toolCallId, decision);
+  async signalToolCall(toolCallId2, reply) {
+    const runId = await this.resolveRunForToolCall(toolCallId2);
+    return this.runner.signal(runId, toolCallId2, reply);
   }
   async cancel(actor, runId) {
     await this.assertOwnsActiveStream(actor, runId);
@@ -352,20 +525,33 @@ var AgentService = class {
   /**
   * Agent-selection precedence for a `chat()` call with no explicit `agentName`: the thread's own
   * `defaultAgent` (if the thread exists and one is set) wins over the module's configured default.
-  * Skips the thread lookup entirely when the caller already named an agent or there's no thread yet.
+  * Skips the store entirely when the caller already named an agent or there's no thread yet.
+  *
+  * What this needs is one nullable scalar, so it asks for one. `getThread` returns the entire
+  * transcript — every message, every persisted tool output — and this discards all of it; on a
+  * long thread with large tool results that is hundreds of kilobytes read per turn, outside the
+  * workflow, for a string. A store predating {@link ThreadDefaultAgentReader} still answers, via
+  * the full read.
   */
   async resolveAgentName(agentName, threadId) {
     if (agentName !== void 0) {
       return agentName;
     }
     if (threadId !== void 0) {
-      const thread = await this.store.getThread(threadId);
-      if (thread?.defaultAgent !== void 0 && thread.defaultAgent !== null) {
-        return thread.defaultAgent;
+      const threadDefault = await this.threadDefaultAgent(threadId);
+      if (threadDefault !== null) {
+        return threadDefault;
       }
     }
     return this.deps.defaultAgentName();
   }
+  async threadDefaultAgent(threadId) {
+    const projecting = this.store;
+    if (typeof projecting.defaultAgentForThread === "function") {
+      return projecting.defaultAgentForThread(threadId);
+    }
+    return (await this.store.getThread(threadId))?.defaultAgent ?? null;
+  }
   async toSummaryView(thread) {
     return {
       ...thread,
@@ -397,6 +583,67 @@ var AgentService = class {
     return this.store.truncateFrom(threadId, messageId);
   }
   /**
+  * Every file this actor has staged, newest first — across threads, including uploads that were
+  * never sent, which nothing else on this surface can see.
+  *
+  * Metadata only. A url is minted per turn by `resolve` so it can be short-lived, and handing one
+  * back per entry would undo that for the price of rendering a list.
+  */
+  async listAttachments(actor, options = {}) {
+    const list = this.attachmentInventory();
+    return list({
+      actor,
+      ...options.limit !== void 0 ? {
+        limit: options.limit
+      } : {}
+    });
+  }
+  /**
+  * This actor's staged media that no live message references and that is old enough not to be an
+  * upload in flight — the candidate set for a sweep. Returns them; never deletes them. The bytes
+  * are the host's, and so is the decision.
+  *
+  * `olderThan` is required and has no default. How long a composer may sit open with a file
+  * attached is the host's knowledge, and a library-chosen grace period would eventually delete a
+  * file someone was about to send. The staging store is asked to apply it, and the result is
+  * filtered again here: a store that ignores the hint would otherwise turn this into exactly that
+  * bug, silently.
+  *
+  * Both halves must be answerable or this refuses. An unanswerable reference query means "cannot
+  * tell", and treating it as "nothing is referenced" would hand back every attachment the actor
+  * ever sent, marked safe to delete.
+  */
+  async collectableAttachments(actor, options) {
+    const list = this.attachmentInventory();
+    const referencedMediaIds = this.store.referencedMediaIds?.bind(this.store);
+    if (referencedMediaIds === void 0) {
+      throw new NotImplementedException("Collecting attachments requires an AgentStore that implements referencedMediaIds(); the bound store cannot say which media a message still references, and guessing would delete files that are in use.");
+    }
+    const stagedBefore = options.olderThan.toISOString();
+    const inventory = await list({
+      actor,
+      stagedBefore,
+      ...options.limit !== void 0 ? {
+        limit: options.limit
+      } : {}
+    });
+    const aged = inventory.filter((entry) => entry.createdAt < stagedBefore);
+    const referenced = new Set(await referencedMediaIds(actor.id, aged.map((entry) => entry.mediaId)));
+    return aged.filter((entry) => !referenced.has(entry.mediaId));
+  }
+  /**
+  * The bound staging store's `list`, or a refusal. Absence is never answered with an empty list:
+  * "this host keeps no inventory" and "this actor has no files" are opposite facts that would
+  * otherwise render identically — as a clean file list, and as a sweep that collects nothing.
+  */
+  attachmentInventory() {
+    const list = this.staging?.list?.bind(this.staging);
+    if (list === void 0) {
+      throw new NotImplementedException("Listing attachments requires an AGENT_ATTACHMENT_STAGING provider implementing list(); the host owns the staged bytes, so only it can enumerate them.");
+    }
+    return list;
+  }
+  /**
   * The day's usage for the badge: tokens + summed USD cost from the store, and the configured
   * limit from the quota store (null → unlimited). `withinLimit` comes from the quota store so it
   * can never drift from what enforcement uses.
@@ -438,24 +685,26 @@ var AgentService = class {
   * out from run resolution (see {@link resolveRunForToolCall}) so the console `AgentApprovalPort`
   * adapter can resolve+signal a decision WITHOUT this check — it is authorized upstream instead.
   */
-  async assertOwnsToolCall(actor, toolCallId) {
-    const owner = await this.store.ownerOfToolCall(toolCallId);
+  async assertOwnsToolCall(actor, toolCallId2) {
+    const owner = await this.store.ownerOfToolCall(toolCallId2);
     if (owner === null) {
-      throw new NotFoundException(`tool call ${toolCallId} not found`);
+      throw new NotFoundException(`tool call ${toolCallId2} not found`);
     }
     if (owner !== actor.id) {
       throw new ForbiddenException("tool call belongs to another actor");
     }
   }
   /**
-  * Resolve the run currently awaiting `toolCallId` (its thread's active stream). That run is the
-  * sub-agent's own child run when the pending call belongs to a delegated agent — the client never
-  * knows or supplies a runId; it is derived here from the tool call alone.
+  * Resolve the run awaiting `toolCallId`. Derived server-side from the tool call alone — the client
+  * never knows or supplies a runId, and that run is the sub-agent's own child run when the pending
+  * call belongs to a delegated agent. The store answers from the CALL'S OWN `runId` where it has
+  * one; see `AgentStore.runForToolCall` for why that matters once a thread can hold more than one
+  * live run.
   */
-  async resolveRunForToolCall(toolCallId) {
-    const runId = await this.store.runForToolCall(toolCallId);
+  async resolveRunForToolCall(toolCallId2) {
+    const runId = await this.store.runForToolCall(toolCallId2);
     if (runId === null) {
-      throw new NotFoundException(`tool call ${toolCallId} has no active run to signal`);
+      throw new NotFoundException(`tool call ${toolCallId2} has no active run to signal`);
     }
     return runId;
   }
@@ -476,12 +725,15 @@ AgentService = _ts_decorate2([
   _ts_param2(1, Inject2(AGENT_STORE2)),
   _ts_param2(2, Inject2(AGENT_DEPS_FACTORY)),
   _ts_param2(3, Inject2(AGENT_QUOTA_STORE2)),
+  _ts_param2(4, Optional2()),
+  _ts_param2(4, Inject2(AGENT_ATTACHMENT_STAGING)),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
     typeof AgentRunner === "undefined" ? Object : AgentRunner,
     typeof AgentStore === "undefined" ? Object : AgentStore,
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
-    Object
+    Object,
+    typeof AttachmentStagingStore === "undefined" ? Object : AttachmentStagingStore
   ])
 ], AgentService);
 
@@ -506,16 +758,16 @@ var AgentApprovalPortAdapter = class {
   constructor(agent) {
     this.agent = agent;
   }
-  async approve(toolCallId, opts) {
-    await this.agent.signalToolCall(toolCallId, {
+  async approve(toolCallId2, opts) {
+    await this.agent.signalToolCall(toolCallId2, {
       approved: true,
       ...opts?.executedByRef !== void 0 ? {
         executedByRef: opts.executedByRef
       } : {}
     });
   }
-  async reject(toolCallId, opts) {
-    await this.agent.signalToolCall(toolCallId, {
+  async reject(toolCallId2, opts) {
+    await this.agent.signalToolCall(toolCallId2, {
       approved: false,
       ...opts?.executedByRef !== void 0 ? {
         executedByRef: opts.executedByRef
@@ -593,8 +845,8 @@ AgentsController = _ts_decorate4([
 ], AgentsController);
 
 // src/controller/attachments.controller.ts
-import { AGENT_ACTOR_RESOLVER, AGENT_ATTACHMENT_STAGING, AGENT_OPTIONS as AGENT_OPTIONS2 } from "@dudousxd/nestjs-agent-core";
-import { BadRequestException as BadRequestException2, Controller as Controller2, Inject as Inject4, NotImplementedException as NotImplementedException2, Optional as Optional2, PayloadTooLargeException, Post, Req, UnsupportedMediaTypeException, UploadedFile, UseInterceptors } from "@nestjs/common";
+import { AGENT_ACTOR_RESOLVER, AGENT_ATTACHMENT_STAGING as AGENT_ATTACHMENT_STAGING2, AGENT_OPTIONS as AGENT_OPTIONS2 } from "@dudousxd/nestjs-agent-core";
+import { BadRequestException as BadRequestException2, Controller as Controller2, Get as Get2, Inject as Inject4, NotImplementedException as NotImplementedException2, Optional as Optional3, PayloadTooLargeException, Post, Req, UnsupportedMediaTypeException, UploadedFile, UseInterceptors } from "@nestjs/common";
 import { FileInterceptor } from "@nestjs/platform-express";
 function _ts_decorate5(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -614,6 +866,8 @@ function _ts_param4(paramIndex, decorator) {
 }
 __name(_ts_param4, "_ts_param");
 var DEFAULT_MAX_ATTACHMENT_BYTES = 20 * 1024 * 1024;
+var HARD_MAX_ATTACHMENT_BYTES = 32 * 1024 * 1024;
+var ATTACHMENT_PAGE_SIZE = 50;
 var DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES = [
   "image/png",
   "image/jpeg",
@@ -629,10 +883,12 @@ var AttachmentsController = class {
   }
   options;
   actorResolver;
+  agents;
   staging;
-  constructor(options, actorResolver, staging) {
+  constructor(options, actorResolver, agents, staging) {
     this.options = options;
     this.actorResolver = actorResolver;
+    this.agents = agents;
     this.staging = staging;
   }
   /**
@@ -646,6 +902,21 @@ var AttachmentsController = class {
       throw new Error("AgentModule: attachments.upload is true but no AGENT_ATTACHMENT_STAGING provider is bound. Bind one (e.g. `{ provide: AGENT_ATTACHMENT_STAGING, useClass: MyStagingStore }`) in a module imported alongside AgentModule, or set attachments.upload to false.");
     }
   }
+  /**
+  * The caller's own staged files, newest first — the one question `GET /agent/threads/:id` cannot
+  * answer, since an upload that was never sent belongs to no thread.
+  *
+  * Scoped by the RESOLVED actor and nothing else. There is deliberately no `threadId` filter: a
+  * thread's attachments already ride on its messages in the thread payload, and re-serving them
+  * from here would add a second ownership path to get wrong for information the client already
+  * holds. Metadata only — see {@link StagedAttachment}.
+  */
+  async list(req) {
+    const actor = await this.actorResolver.resolve(req);
+    return this.agents.listAttachments(actor, {
+      limit: ATTACHMENT_PAGE_SIZE
+    });
+  }
   async upload(req, file) {
     if (this.staging === void 0) {
       throw new NotImplementedException2("Attachment upload is not configured on this server.");
@@ -671,9 +942,22 @@ var AttachmentsController = class {
     });
   }
 };
+_ts_decorate5([
+  Get2(),
+  _ts_param4(0, Req()),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request
+  ]),
+  _ts_metadata5("design:returntype", Promise)
+], AttachmentsController.prototype, "list", null);
 _ts_decorate5([
   Post(),
-  UseInterceptors(FileInterceptor("file")),
+  UseInterceptors(FileInterceptor("file", {
+    limits: {
+      fileSize: HARD_MAX_ATTACHMENT_BYTES
+    }
+  })),
   _ts_param4(0, Req()),
   _ts_param4(1, UploadedFile()),
   _ts_metadata5("design:type", Function),
@@ -687,19 +971,20 @@ AttachmentsController = _ts_decorate5([
   Controller2("attachments"),
   _ts_param4(0, Inject4(AGENT_OPTIONS2)),
   _ts_param4(1, Inject4(AGENT_ACTOR_RESOLVER)),
-  _ts_param4(2, Optional2()),
-  _ts_param4(2, Inject4(AGENT_ATTACHMENT_STAGING)),
+  _ts_param4(3, Optional3()),
+  _ts_param4(3, Inject4(AGENT_ATTACHMENT_STAGING2)),
   _ts_metadata5("design:type", Function),
   _ts_metadata5("design:paramtypes", [
     typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
     typeof ActorResolver === "undefined" ? Object : ActorResolver,
+    typeof AgentService === "undefined" ? Object : AgentService,
     Object
   ])
 ], AttachmentsController);
 
 // src/controller/chat.controller.ts
 import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER2, AgentStreamError } from "@dudousxd/nestjs-agent-core";
-import { Body, Controller as Controller3, Get as Get2, Inject as Inject5, Param, Post as Post2, Req as Req2, Res } from "@nestjs/common";
+import { BadRequestException as BadRequestException3, Body, Controller as Controller3, Get as Get3, Inject as Inject5, Param, Post as Post2, Req as Req2, Res } from "@nestjs/common";
 function _ts_decorate6(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -717,6 +1002,31 @@ function _ts_param5(paramIndex, decorator) {
   };
 }
 __name(_ts_param5, "_ts_param");
+var MAX_ATTACHMENTS_PER_MESSAGE = 10;
+function attachmentRefs(claimed) {
+  if (claimed === void 0) {
+    return [];
+  }
+  if (!Array.isArray(claimed)) {
+    throw new BadRequestException3("attachments must be an array of { mediaId }");
+  }
+  if (claimed.length > MAX_ATTACHMENTS_PER_MESSAGE) {
+    throw new BadRequestException3(`a message may carry at most ${MAX_ATTACHMENTS_PER_MESSAGE} attachments`);
+  }
+  return claimed.map((entry) => {
+    if (typeof entry !== "object" || entry === null || !("mediaId" in entry)) {
+      throw new BadRequestException3("each attachment must be an object with a mediaId");
+    }
+    const { mediaId } = entry;
+    if (typeof mediaId !== "string" || mediaId.length === 0) {
+      throw new BadRequestException3("each attachment must carry a non-empty string mediaId");
+    }
+    return {
+      mediaId
+    };
+  });
+}
+__name(attachmentRefs, "attachmentRefs");
 var ChatController = class {
   static {
     __name(this, "ChatController");
@@ -729,6 +1039,7 @@ var ChatController = class {
   }
   async chat(req, res, body) {
     const actor = await this.actorResolver.resolve(req);
+    const attachments = attachmentRefs(body.attachments);
     const { runId, threadId } = await this.agent.chat({
       actor,
       message: body.message,
@@ -738,8 +1049,8 @@ var ChatController = class {
       ...body.agent !== void 0 ? {
         agentName: body.agent
       } : {},
-      ...body.attachments !== void 0 ? {
-        attachments: body.attachments
+      ...attachments.length > 0 ? {
+        attachments
       } : {},
       ...body.pageContext !== void 0 ? {
         pageContext: body.pageContext
@@ -751,10 +1062,11 @@ var ChatController = class {
         transient: true
       } : {}
     });
-    await this.pipe(res, runId, threadId);
+    await this.pipe(res, runId, this.agent.subscribe(runId), threadId);
   }
-  async stream(runId, res) {
-    await this.pipe(res, runId);
+  async stream(req, runId, res) {
+    const actor = await this.actorResolver.resolve(req);
+    await this.pipe(res, runId, await this.agent.subscribeAs(actor, runId));
   }
   async cancel(req, runId) {
     const actor = await this.actorResolver.resolve(req);
@@ -763,7 +1075,7 @@ var ChatController = class {
       aborted: true
     };
   }
-  async pipe(res, runId, threadId) {
+  async pipe(res, runId, events, threadId) {
     res.setHeader("Content-Type", "text/event-stream");
     res.setHeader("Cache-Control", "no-cache");
     res.setHeader("Connection", "keep-alive");
@@ -781,7 +1093,7 @@ data: ${JSON.stringify({
     const decoder = new TextDecoder();
     let buffer = "";
     try {
-      for await (const chunk of this.agent.subscribe(runId)) {
+      for await (const chunk of events) {
         buffer += decoder.decode(chunk, {
           stream: true
         });
@@ -833,11 +1145,13 @@ _ts_decorate6([
   _ts_metadata6("design:returntype", Promise)
 ], ChatController.prototype, "chat", null);
 _ts_decorate6([
-  Get2("chat/:runId/stream"),
-  _ts_param5(0, Param("runId")),
-  _ts_param5(1, Res()),
+  Get3("chat/:runId/stream"),
+  _ts_param5(0, Req2()),
+  _ts_param5(1, Param("runId")),
+  _ts_param5(2, Res()),
   _ts_metadata6("design:type", Function),
   _ts_metadata6("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
     String,
     typeof Response === "undefined" ? Object : Response
   ]),
@@ -864,9 +1178,9 @@ ChatController = _ts_decorate6([
   ])
 ], ChatController);
 
-// src/controller/quota.controller.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER3 } from "@dudousxd/nestjs-agent-core";
-import { Controller as Controller4, Get as Get3, Inject as Inject6, Req as Req3 } from "@nestjs/common";
+// src/controller/memories.controller.ts
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER3, AGENT_MEMORY as AGENT_MEMORY2, memoryForgetVerdict, offerMemories } from "@dudousxd/nestjs-agent-core";
+import { Controller as Controller4, Delete, ForbiddenException as ForbiddenException2, Get as Get4, Inject as Inject6, NotFoundException as NotFoundException2, Optional as Optional4, Param as Param2, Query, Req as Req3 } from "@nestjs/common";
 function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -884,43 +1198,115 @@ function _ts_param6(paramIndex, decorator) {
   };
 }
 __name(_ts_param6, "_ts_param");
-var QuotaController = class {
+var MemoriesController = class {
   static {
-    __name(this, "QuotaController");
+    __name(this, "MemoriesController");
   }
-  agent;
   actorResolver;
-  constructor(agent, actorResolver) {
-    this.agent = agent;
+  memory;
+  constructor(actorResolver, memory) {
     this.actorResolver = actorResolver;
+    this.memory = memory;
   }
-  async today(req) {
+  /**
+  * Every memory this actor can reach, most specific first, each carrying its origin and whatever
+  * wider value it outranks.
+  *
+  * DELIBERATELY IGNORES `maxMemories`. That ceiling is a budget on what one TURN carries; applying
+  * it here would mean a person could not see — and so could not delete — a belief the assistant is
+  * one write away from acting on again. Showing someone more than the model sees is harmless;
+  * showing them less is the failure this endpoint exists to prevent.
+  */
+  async list(req, threadId) {
+    if (this.memory === void 0) {
+      return [];
+    }
     const actor = await this.actorResolver.resolve(req);
-    return this.agent.quotaToday(actor.id);
+    return (await this.unbounded(threadId ?? "", actor)).entries;
+  }
+  /**
+  * Forget one. Authorized against the actor's OWN resolved list, the same way a `skill` load is
+  * authorized against the turn's catalog: an id this actor cannot see is answered as missing rather
+  * than refused, so the endpoint cannot be used to find out which memories exist about other people.
+  */
+  async forget(req, id) {
+    if (this.memory === void 0) {
+      throw new NotFoundException2("No memory is configured in this deployment.");
+    }
+    const actor = await this.actorResolver.resolve(req);
+    const digest = await this.unbounded("", actor);
+    const entry = digest.entries.find((candidate) => candidate.id === id);
+    if (entry === void 0) {
+      throw new NotFoundException2(`No memory with id "${id}".`);
+    }
+    const verdict = memoryForgetVerdict({
+      record: entry,
+      actor
+    });
+    if (!verdict.allowed) {
+      throw new ForbiddenException2(verdict.reason);
+    }
+    return {
+      forgotten: await this.memory.provider.forget({
+        id: entry.id,
+        ctx: {
+          actor,
+          threadId: ""
+        }
+      })
+    };
+  }
+  async unbounded(threadId, actor) {
+    const config = this.memory;
+    return await offerMemories({
+      config: {
+        ...config,
+        maxMemories: Number.POSITIVE_INFINITY
+      },
+      ctx: {
+        actor,
+        threadId
+      }
+    });
   }
 };
 _ts_decorate7([
-  Get3("today"),
+  Get4(),
+  _ts_param6(0, Req3()),
+  _ts_param6(1, Query("threadId")),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
+    String
+  ]),
+  _ts_metadata7("design:returntype", Promise)
+], MemoriesController.prototype, "list", null);
+_ts_decorate7([
+  Delete(":id"),
   _ts_param6(0, Req3()),
+  _ts_param6(1, Param2("id")),
   _ts_metadata7("design:type", Function),
   _ts_metadata7("design:paramtypes", [
-    typeof Request === "undefined" ? Object : Request
+    typeof Request === "undefined" ? Object : Request,
+    String
   ]),
   _ts_metadata7("design:returntype", Promise)
-], QuotaController.prototype, "today", null);
-QuotaController = _ts_decorate7([
-  Controller4("quota"),
-  _ts_param6(1, Inject6(AGENT_ACTOR_RESOLVER3)),
+], MemoriesController.prototype, "forget", null);
+MemoriesController = _ts_decorate7([
+  Controller4("memories"),
+  _ts_param6(0, Inject6(AGENT_ACTOR_RESOLVER3)),
+  _ts_param6(1, Optional4()),
+  _ts_param6(1, Inject6(AGENT_MEMORY2)),
   _ts_metadata7("design:type", Function),
   _ts_metadata7("design:paramtypes", [
-    typeof AgentService === "undefined" ? Object : AgentService,
-    typeof ActorResolver === "undefined" ? Object : ActorResolver
+    typeof ActorResolver === "undefined" ? Object : ActorResolver,
+    Object
   ])
-], QuotaController);
+], MemoriesController);
 
-// src/controller/threads.controller.ts
+// src/controller/quota.controller.ts
 import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER4 } from "@dudousxd/nestjs-agent-core";
-import { Body as Body2, Controller as Controller5, Delete, Get as Get4, Inject as Inject7, Param as Param2, Patch, Post as Post3, Req as Req4 } from "@nestjs/common";
+import { Controller as Controller5, Get as Get5, Inject as Inject7, Req as Req4 } from "@nestjs/common";
 function _ts_decorate8(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -938,6 +1324,125 @@ function _ts_param7(paramIndex, decorator) {
   };
 }
 __name(_ts_param7, "_ts_param");
+var QuotaController = class {
+  static {
+    __name(this, "QuotaController");
+  }
+  agent;
+  actorResolver;
+  constructor(agent, actorResolver) {
+    this.agent = agent;
+    this.actorResolver = actorResolver;
+  }
+  async today(req) {
+    const actor = await this.actorResolver.resolve(req);
+    return this.agent.quotaToday(actor.id);
+  }
+};
+_ts_decorate8([
+  Get5("today"),
+  _ts_param7(0, Req4()),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request
+  ]),
+  _ts_metadata8("design:returntype", Promise)
+], QuotaController.prototype, "today", null);
+QuotaController = _ts_decorate8([
+  Controller5("quota"),
+  _ts_param7(1, Inject7(AGENT_ACTOR_RESOLVER4)),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
+    typeof AgentService === "undefined" ? Object : AgentService,
+    typeof ActorResolver === "undefined" ? Object : ActorResolver
+  ])
+], QuotaController);
+
+// src/controller/skills.controller.ts
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER5, AGENT_SKILLS as AGENT_SKILLS2, offerSkills } from "@dudousxd/nestjs-agent-core";
+import { Controller as Controller6, Get as Get6, Inject as Inject8, Optional as Optional5, Query as Query2, Req as Req5 } from "@nestjs/common";
+function _ts_decorate9(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate9, "_ts_decorate");
+function _ts_metadata9(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata9, "_ts_metadata");
+function _ts_param8(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param8, "_ts_param");
+var SkillsController = class {
+  static {
+    __name(this, "SkillsController");
+  }
+  actorResolver;
+  skills;
+  constructor(actorResolver, skills) {
+    this.actorResolver = actorResolver;
+    this.skills = skills;
+  }
+  async list(req, threadId) {
+    if (this.skills === void 0) {
+      return [];
+    }
+    const actor = await this.actorResolver.resolve(req);
+    const offer = await offerSkills(this.skills, {
+      actor,
+      threadId: threadId ?? ""
+    });
+    return offer.entries;
+  }
+};
+_ts_decorate9([
+  Get6(),
+  _ts_param8(0, Req5()),
+  _ts_param8(1, Query2("threadId")),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
+    String
+  ]),
+  _ts_metadata9("design:returntype", Promise)
+], SkillsController.prototype, "list", null);
+SkillsController = _ts_decorate9([
+  Controller6("skills"),
+  _ts_param8(0, Inject8(AGENT_ACTOR_RESOLVER5)),
+  _ts_param8(1, Optional5()),
+  _ts_param8(1, Inject8(AGENT_SKILLS2)),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
+    typeof ActorResolver === "undefined" ? Object : ActorResolver,
+    Object
+  ])
+], SkillsController);
+
+// src/controller/threads.controller.ts
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER6 } from "@dudousxd/nestjs-agent-core";
+import { Body as Body2, Controller as Controller7, Delete as Delete2, Get as Get7, Inject as Inject9, Param as Param3, Patch, Post as Post3, Req as Req6 } from "@nestjs/common";
+function _ts_decorate10(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate10, "_ts_decorate");
+function _ts_metadata10(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata10, "_ts_metadata");
+function _ts_param9(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param9, "_ts_param");
 var ThreadsController = class {
   static {
     __name(this, "ThreadsController");
@@ -1001,117 +1506,173 @@ var ThreadsController = class {
     };
   }
 };
-_ts_decorate8([
-  Get4(),
-  _ts_param7(0, Req4()),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate10([
+  Get7(),
+  _ts_param9(0, Req6()),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata10("design:returntype", Promise)
 ], ThreadsController.prototype, "list", null);
-_ts_decorate8([
-  Get4(":id"),
-  _ts_param7(0, Req4()),
-  _ts_param7(1, Param2("id")),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate10([
+  Get7(":id"),
+  _ts_param9(0, Req6()),
+  _ts_param9(1, Param3("id")),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata10("design:returntype", Promise)
 ], ThreadsController.prototype, "detail", null);
-_ts_decorate8([
-  Delete(":id"),
-  _ts_param7(0, Req4()),
-  _ts_param7(1, Param2("id")),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate10([
+  Delete2(":id"),
+  _ts_param9(0, Req6()),
+  _ts_param9(1, Param3("id")),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata10("design:returntype", Promise)
 ], ThreadsController.prototype, "remove", null);
-_ts_decorate8([
+_ts_decorate10([
   Post3(":id/fork-from/:messageId"),
-  _ts_param7(0, Req4()),
-  _ts_param7(1, Param2("id")),
-  _ts_param7(2, Param2("messageId")),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+  _ts_param9(0, Req6()),
+  _ts_param9(1, Param3("id")),
+  _ts_param9(2, Param3("messageId")),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     String
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata10("design:returntype", Promise)
 ], ThreadsController.prototype, "fork", null);
-_ts_decorate8([
+_ts_decorate10([
   Patch(":id"),
-  _ts_param7(0, Req4()),
-  _ts_param7(1, Param2("id")),
-  _ts_param7(2, Body2()),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+  _ts_param9(0, Req6()),
+  _ts_param9(1, Param3("id")),
+  _ts_param9(2, Body2()),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     typeof UpdateThreadBody === "undefined" ? Object : UpdateThreadBody
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata10("design:returntype", Promise)
 ], ThreadsController.prototype, "update", null);
-_ts_decorate8([
+_ts_decorate10([
   Post3(":id/promote"),
-  _ts_param7(0, Req4()),
-  _ts_param7(1, Param2("id")),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+  _ts_param9(0, Req6()),
+  _ts_param9(1, Param3("id")),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata10("design:returntype", Promise)
 ], ThreadsController.prototype, "promote", null);
-_ts_decorate8([
-  Delete(":id/from/:messageId"),
-  _ts_param7(0, Req4()),
-  _ts_param7(1, Param2("id")),
-  _ts_param7(2, Param2("messageId")),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+_ts_decorate10([
+  Delete2(":id/from/:messageId"),
+  _ts_param9(0, Req6()),
+  _ts_param9(1, Param3("id")),
+  _ts_param9(2, Param3("messageId")),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     String
   ]),
-  _ts_metadata8("design:returntype", Promise)
+  _ts_metadata10("design:returntype", Promise)
 ], ThreadsController.prototype, "truncateFrom", null);
-ThreadsController = _ts_decorate8([
-  Controller5("threads"),
-  _ts_param7(1, Inject7(AGENT_ACTOR_RESOLVER4)),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+ThreadsController = _ts_decorate10([
+  Controller7("threads"),
+  _ts_param9(1, Inject9(AGENT_ACTOR_RESOLVER6)),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], ThreadsController);
 
 // src/controller/tool-call.controller.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER5 } from "@dudousxd/nestjs-agent-core";
-import { Body as Body3, Controller as Controller6, Inject as Inject8, Post as Post4, Req as Req5 } from "@nestjs/common";
-function _ts_decorate9(decorators, target, key, desc) {
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER7 } from "@dudousxd/nestjs-agent-core";
+import { BadRequestException as BadRequestException4, Body as Body3, Controller as Controller8, Inject as Inject10, Post as Post4, Req as Req7 } from "@nestjs/common";
+function _ts_decorate11(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate9, "_ts_decorate");
-function _ts_metadata9(k, v) {
+__name(_ts_decorate11, "_ts_decorate");
+function _ts_metadata11(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata9, "_ts_metadata");
-function _ts_param8(paramIndex, decorator) {
+__name(_ts_metadata11, "_ts_metadata");
+function _ts_param10(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param8, "_ts_param");
+__name(_ts_param10, "_ts_param");
+var MAX_ANSWERED_QUESTIONS = 100;
+var MAX_VALUES_PER_QUESTION = 100;
+var MAX_ANSWER_VALUE_LENGTH = 4096;
+var MAX_REJECT_REASON_LENGTH = 4096;
+function toolCallId(claimed) {
+  if (typeof claimed !== "string" || claimed.length === 0) {
+    throw new BadRequestException4("toolCallId must be a non-empty string");
+  }
+  return claimed;
+}
+__name(toolCallId, "toolCallId");
+function rejectReason(claimed) {
+  if (claimed === void 0) {
+    return void 0;
+  }
+  if (typeof claimed !== "string") {
+    throw new BadRequestException4("reason must be a string");
+  }
+  if (claimed.length > MAX_REJECT_REASON_LENGTH) {
+    throw new BadRequestException4(`reason must be at most ${MAX_REJECT_REASON_LENGTH} characters`);
+  }
+  return claimed;
+}
+__name(rejectReason, "rejectReason");
+function answers(claimed) {
+  if (claimed === void 0) {
+    return void 0;
+  }
+  if (typeof claimed !== "object" || claimed === null || Array.isArray(claimed)) {
+    throw new BadRequestException4("answers must be an object of questionId \u2192 chosen values");
+  }
+  const entries = Object.entries(claimed);
+  if (entries.length > MAX_ANSWERED_QUESTIONS) {
+    throw new BadRequestException4(`answers may cover at most ${MAX_ANSWERED_QUESTIONS} questions`);
+  }
+  const validated = /* @__PURE__ */ Object.create(null);
+  for (const [questionId, values] of entries) {
+    if (!Array.isArray(values)) {
+      throw new BadRequestException4(`answers["${questionId}"] must be an array of chosen values`);
+    }
+    if (values.length > MAX_VALUES_PER_QUESTION) {
+      throw new BadRequestException4(`answers["${questionId}"] may carry at most ${MAX_VALUES_PER_QUESTION} values`);
+    }
+    for (const value of values) {
+      if (typeof value !== "string") {
+        throw new BadRequestException4(`answers["${questionId}"] must contain only strings`);
+      }
+      if (value.length > MAX_ANSWER_VALUE_LENGTH) {
+        throw new BadRequestException4(`answers["${questionId}"] values must be at most ${MAX_ANSWER_VALUE_LENGTH} characters`);
+      }
+    }
+    validated[questionId] = values;
+  }
+  return validated;
+}
+__name(answers, "answers");
 var ToolCallController = class {
   static {
     __name(this, "ToolCallController");
@@ -1124,46 +1685,88 @@ var ToolCallController = class {
   }
   async approve(req, body) {
     const actor = await this.actorResolver.resolve(req);
-    await this.agent.approve(actor, body.toolCallId);
+    await this.agent.approve(actor, toolCallId(body.toolCallId));
     return {
       ok: true
     };
   }
   async reject(req, body) {
     const actor = await this.actorResolver.resolve(req);
-    await this.agent.reject(actor, body.toolCallId, body.reason);
+    await this.agent.reject(actor, toolCallId(body.toolCallId), rejectReason(body.reason));
+    return {
+      ok: true
+    };
+  }
+  /**
+  * Settle a parked question set. Alongside `approve`/`reject` rather than under a surface of its
+  * own: an elicitation IS a parked tool call, gated by the same ownership check and delivered
+  * through the same signal.
+  */
+  async answer(req, body) {
+    const actor = await this.actorResolver.resolve(req);
+    await this.agent.answer(actor, toolCallId(body.toolCallId), answers(body.answers));
+    return {
+      ok: true
+    };
+  }
+  /** Decline to answer and let the agent proceed on the answers it pre-picked. */
+  async skip(req, body) {
+    const actor = await this.actorResolver.resolve(req);
+    await this.agent.skip(actor, toolCallId(body.toolCallId));
     return {
       ok: true
     };
   }
 };
-_ts_decorate9([
+_ts_decorate11([
   Post4("approve"),
-  _ts_param8(0, Req5()),
-  _ts_param8(1, Body3()),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+  _ts_param10(0, Req7()),
+  _ts_param10(1, Body3()),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof ApproveBody === "undefined" ? Object : ApproveBody
   ]),
-  _ts_metadata9("design:returntype", Promise)
+  _ts_metadata11("design:returntype", Promise)
 ], ToolCallController.prototype, "approve", null);
-_ts_decorate9([
+_ts_decorate11([
   Post4("reject"),
-  _ts_param8(0, Req5()),
-  _ts_param8(1, Body3()),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+  _ts_param10(0, Req7()),
+  _ts_param10(1, Body3()),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof RejectBody === "undefined" ? Object : RejectBody
   ]),
-  _ts_metadata9("design:returntype", Promise)
+  _ts_metadata11("design:returntype", Promise)
 ], ToolCallController.prototype, "reject", null);
-ToolCallController = _ts_decorate9([
-  Controller6("tool-call"),
-  _ts_param8(1, Inject8(AGENT_ACTOR_RESOLVER5)),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+_ts_decorate11([
+  Post4("answer"),
+  _ts_param10(0, Req7()),
+  _ts_param10(1, Body3()),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
+    typeof AnswerBody === "undefined" ? Object : AnswerBody
+  ]),
+  _ts_metadata11("design:returntype", Promise)
+], ToolCallController.prototype, "answer", null);
+_ts_decorate11([
+  Post4("skip"),
+  _ts_param10(0, Req7()),
+  _ts_param10(1, Body3()),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
+    typeof ApproveBody === "undefined" ? Object : ApproveBody
+  ]),
+  _ts_metadata11("design:returntype", Promise)
+], ToolCallController.prototype, "skip", null);
+ToolCallController = _ts_decorate11([
+  Controller8("tool-call"),
+  _ts_param10(1, Inject10(AGENT_ACTOR_RESOLVER7)),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
@@ -1171,7 +1774,7 @@ ToolCallController = _ts_decorate9([
 
 // src/discovery/agent-discovery.service.ts
 import { AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS2, AGENT_REGISTRY as AGENT_REGISTRY3, AgentRegistry as AgentRegistry4 } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject9, Injectable as Injectable4, Logger } from "@nestjs/common";
+import { Inject as Inject11, Injectable as Injectable4, Logger } from "@nestjs/common";
 import { DiscoveryService, MetadataScanner } from "@nestjs/core";
 
 // src/decorator/agent.decorator.ts
@@ -1206,23 +1809,23 @@ function SystemPromptContributor() {
 __name(SystemPromptContributor, "SystemPromptContributor");
 
 // src/discovery/agent-discovery.service.ts
-function _ts_decorate10(decorators, target, key, desc) {
+function _ts_decorate12(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate10, "_ts_decorate");
-function _ts_metadata10(k, v) {
+__name(_ts_decorate12, "_ts_decorate");
+function _ts_metadata12(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata10, "_ts_metadata");
-function _ts_param9(paramIndex, decorator) {
+__name(_ts_metadata12, "_ts_metadata");
+function _ts_param11(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param9, "_ts_param");
+__name(_ts_param11, "_ts_param");
 var AgentDiscoveryService = class _AgentDiscoveryService {
   static {
     __name(this, "AgentDiscoveryService");
@@ -1270,23 +1873,53 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
       ...meta.maxSteps !== void 0 ? {
         maxSteps: meta.maxSteps
       } : {},
+      ...meta.maxDelegationDepth !== void 0 ? {
+        maxDelegationDepth: meta.maxDelegationDepth
+      } : {},
+      ...meta.maxAgentAppearances !== void 0 ? {
+        maxAgentAppearances: meta.maxAgentAppearances
+      } : {},
+      ...meta.history !== void 0 ? {
+        history: meta.history
+      } : {},
+      ...meta.outputSchema !== void 0 ? {
+        outputSchema: meta.outputSchema
+      } : {},
+      ...meta.intake !== void 0 ? {
+        intake: meta.intake
+      } : {},
+      ...meta.ask !== void 0 ? {
+        ask: meta.ask
+      } : {},
+      ...meta.outputRepairAttempts !== void 0 ? {
+        outputRepairAttempts: meta.outputRepairAttempts
+      } : {},
       ...meta.handoff !== void 0 ? {
-        delegatesTo: this.handoffNames(meta)
+        delegatesTo: this.handoffEdges(meta)
       } : {}
     };
   }
-  /** Resolve each handoff `@Agent` class to its registered name (skipping non-agent classes). */
-  handoffNames(meta) {
-    const names = [];
-    for (const target of meta.handoff ?? []) {
+  /**
+  * Resolve each handoff entry to an {@link AgentDelegation} — its target's registered name, plus
+  * whether that edge detaches (skipping non-agent classes). A bare name is kept for a plain edge
+  * rather than an always-object form, so a definition an older host built by hand still reads.
+  */
+  handoffEdges(meta) {
+    const edges = [];
+    for (const entry of meta.handoff ?? []) {
+      const target = typeof entry === "function" ? entry : entry.agent;
+      const detached = typeof entry === "function" ? false : entry.detached === true;
       const targetMeta = readAgentMetadata(target);
       if (targetMeta === void 0) {
         this.logger.warn(`Agent "${meta.name}" hands off to ${target.name}, which is not an @Agent \u2014 skipped.`);
         continue;
       }
-      names.push(targetMeta.name);
+      edges.push(detached ? {
+        agent: targetMeta.name,
+        detached: true
+      } : targetMeta.name);
     }
-    return names;
+    return edges;
   }
   /** Push every `@SystemPromptContributor()` method on `instance` (bound) into the contributor list. */
   collectContributors(instance) {
@@ -1319,12 +1952,12 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
     return (ctx) => candidate.call(instance, ctx);
   }
 };
-AgentDiscoveryService = _ts_decorate10([
+AgentDiscoveryService = _ts_decorate12([
   Injectable4(),
-  _ts_param9(2, Inject9(AGENT_REGISTRY3)),
-  _ts_param9(3, Inject9(AGENT_PROMPT_CONTRIBUTORS2)),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
+  _ts_param11(2, Inject11(AGENT_REGISTRY3)),
+  _ts_param11(3, Inject11(AGENT_PROMPT_CONTRIBUTORS2)),
+  _ts_metadata12("design:type", Function),
+  _ts_metadata12("design:paramtypes", [
     typeof DiscoveryService === "undefined" ? Object : DiscoveryService,
     typeof MetadataScanner === "undefined" ? Object : MetadataScanner,
     typeof AgentRegistry4 === "undefined" ? Object : AgentRegistry4,
@@ -1333,8 +1966,8 @@ AgentDiscoveryService = _ts_decorate10([
 ], AgentDiscoveryService);
 
 // src/discovery/ai-tool-discovery.service.ts
-import { AGENT_OPTIONS as AGENT_OPTIONS3, AGENT_REGISTRY as AGENT_REGISTRY4, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY2 } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject10, Injectable as Injectable5, Logger as Logger2 } from "@nestjs/common";
+import { AGENT_OPTIONS as AGENT_OPTIONS3, AGENT_REGISTRY as AGENT_REGISTRY4, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY2, normalizeDelegation as normalizeDelegation2 } from "@dudousxd/nestjs-agent-core";
+import { Inject as Inject12, Injectable as Injectable5, Logger as Logger2 } from "@nestjs/common";
 import { DiscoveryService as DiscoveryService2 } from "@nestjs/core";
 import { z } from "zod";
 
@@ -1383,23 +2016,23 @@ function provideAgentTool(factoryOrTool, inject) {
 __name(provideAgentTool, "provideAgentTool");
 
 // src/discovery/ai-tool-discovery.service.ts
-function _ts_decorate11(decorators, target, key, desc) {
+function _ts_decorate13(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate11, "_ts_decorate");
-function _ts_metadata11(k, v) {
+__name(_ts_decorate13, "_ts_decorate");
+function _ts_metadata13(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata11, "_ts_metadata");
-function _ts_param10(paramIndex, decorator) {
+__name(_ts_metadata13, "_ts_metadata");
+function _ts_param12(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param10, "_ts_param");
+__name(_ts_param12, "_ts_param");
 var AiToolDiscoveryService = class _AiToolDiscoveryService {
   static {
     __name(this, "AiToolDiscoveryService");
@@ -1475,22 +2108,30 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
     }
     let delegates = 0;
     for (const definition of this.agents.list()) {
-      for (const target of definition.delegatesTo ?? []) {
+      for (const edge of definition.delegatesTo ?? []) {
+        const { agent: target, detached } = normalizeDelegation2(edge);
         const targetDefinition = this.agents.get(target);
         if (targetDefinition === void 0) {
           throw new Error(`Agent "${definition.name}" hands off to "${target}", which is not a registered @Agent. Declare it as an @Agent provider or fix the reference.`);
         }
-        const name = delegateToolName(target);
+        const name = delegateToolName({
+          target,
+          detached
+        });
         if (this.registry.has(name)) {
           continue;
         }
         const targetBlurb = typeof targetDefinition.systemPrompt === "string" ? ` It is: ${targetDefinition.systemPrompt}` : "";
+        const description = detached ? `Start the "${target}" agent working on a task in the BACKGROUND. Returns immediately with a receipt, NOT an answer \u2014 the answer is delivered to this conversation as a separate message later. Use it for work the user does not need to sit and wait for.${targetBlurb}` : `Delegate a task to the "${target}" agent and get its answer.${targetBlurb}`;
         this.registry.register(
           {
             name,
             kind: "agent",
             targetAgent: target,
-            description: `Delegate a task to the "${target}" agent and get its answer.${targetBlurb}`,
+            ...detached ? {
+              detached: true
+            } : {},
+            description,
             inputSchema: z.object({
               task: z.string()
             })
@@ -1518,13 +2159,13 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
     return true;
   }
 };
-AiToolDiscoveryService = _ts_decorate11([
+AiToolDiscoveryService = _ts_decorate13([
   Injectable5(),
-  _ts_param10(1, Inject10(AGENT_TOOL_REGISTRY2)),
-  _ts_param10(2, Inject10(AGENT_REGISTRY4)),
-  _ts_param10(3, Inject10(AGENT_OPTIONS3)),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+  _ts_param12(1, Inject12(AGENT_TOOL_REGISTRY2)),
+  _ts_param12(2, Inject12(AGENT_REGISTRY4)),
+  _ts_param12(3, Inject12(AGENT_OPTIONS3)),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof DiscoveryService2 === "undefined" ? Object : DiscoveryService2,
     typeof ToolRegistry === "undefined" ? Object : ToolRegistry,
     typeof AgentRegistry === "undefined" ? Object : AgentRegistry,
@@ -1532,6 +2173,101 @@ AiToolDiscoveryService = _ts_decorate11([
   ])
 ], AiToolDiscoveryService);
 
+// src/discovery/skill-discovery.service.ts
+import { AGENT_SKILL_SOURCES } from "@dudousxd/nestjs-agent-core";
+import { Inject as Inject13, Injectable as Injectable6, Logger as Logger3 } from "@nestjs/common";
+import { DiscoveryService as DiscoveryService3 } from "@nestjs/core";
+
+// src/decorator/skill.decorator.ts
+import "reflect-metadata";
+import { GLOBAL_SCOPE } from "@dudousxd/nestjs-agent-core";
+var SKILL_METADATA = Symbol.for("@dudousxd/nestjs-agent:skill-metadata");
+function Skill(options) {
+  return (target) => {
+    Reflect.defineMetadata(SKILL_METADATA, options, target);
+  };
+}
+__name(Skill, "Skill");
+function readSkillMetadata(target) {
+  return Reflect.getMetadata(SKILL_METADATA, target);
+}
+__name(readSkillMetadata, "readSkillMetadata");
+function skillScope(options) {
+  return options.scope ?? GLOBAL_SCOPE;
+}
+__name(skillScope, "skillScope");
+
+// src/discovery/skill-discovery.service.ts
+function _ts_decorate14(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate14, "_ts_decorate");
+function _ts_metadata14(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata14, "_ts_metadata");
+function _ts_param13(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param13, "_ts_param");
+var SkillDiscoveryService = class _SkillDiscoveryService {
+  static {
+    __name(this, "SkillDiscoveryService");
+  }
+  discovery;
+  declared;
+  logger = new Logger3(_SkillDiscoveryService.name);
+  constructor(discovery, declared) {
+    this.discovery = discovery;
+    this.declared = declared;
+  }
+  onModuleInit() {
+    for (const wrapper of this.discovery.getProviders()) {
+      const instance = wrapper.instance;
+      if (instance === null || typeof instance !== "object") {
+        continue;
+      }
+      const meta = readSkillMetadata(instance.constructor);
+      if (meta === void 0) {
+        continue;
+      }
+      const body = this.bodyOf(instance, meta.body);
+      if (body === void 0) {
+        this.logger.warn(`Skill "${meta.name}" declares no body \u2014 add a \`body()\` method or \`@Skill({ body })\`. Skipped.`);
+        continue;
+      }
+      this.declared.push({
+        name: meta.name,
+        description: meta.description,
+        scope: skillScope(meta),
+        body
+      });
+    }
+  }
+  /** The instance's `body()` method (bound), else the flat string, else nothing to offer. */
+  bodyOf(instance, flat) {
+    const candidate = instance.body;
+    if (typeof candidate === "function") {
+      return (ctx) => candidate.call(instance, ctx);
+    }
+    return flat === void 0 ? void 0 : () => flat;
+  }
+};
+SkillDiscoveryService = _ts_decorate14([
+  Injectable6(),
+  _ts_param13(1, Inject13(AGENT_SKILL_SOURCES)),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
+    typeof DiscoveryService3 === "undefined" ? Object : DiscoveryService3,
+    Array
+  ])
+], SkillDiscoveryService);
+
 // src/in-process-sink.ts
 import { AgentStreamError as AgentStreamError2 } from "@dudousxd/nestjs-agent-core";
 var InProcessTokenStreamSink = class {
@@ -1619,38 +2355,44 @@ var LedgerQuotaStore = class {
       withinLimit: usedTokens < this.limitTokens
     };
   }
-  async bump() {
+  async bump(_actorRef, _day, _tokens) {
   }
 };
 
 // src/runner/inline-agent-runner.ts
-import { AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY3, AGENT_STORE as AGENT_STORE3, QuotaExceededError, publishAgentRunFailed, runAgentLoop } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject11, Injectable as Injectable6, Logger as Logger3 } from "@nestjs/common";
-function _ts_decorate12(decorators, target, key, desc) {
+import { AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY3, AGENT_STORE as AGENT_STORE3, RunCancelledError, agentFailureCode, encodeStreamEvent, publishAgentRunFailed, runAgentLoop, settleAll, settleUnsettledDelegation } from "@dudousxd/nestjs-agent-core";
+import { Inject as Inject14, Injectable as Injectable7, Logger as Logger4 } from "@nestjs/common";
+function _ts_decorate15(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate12, "_ts_decorate");
-function _ts_metadata12(k, v) {
+__name(_ts_decorate15, "_ts_decorate");
+function _ts_metadata15(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata12, "_ts_metadata");
-function _ts_param11(paramIndex, decorator) {
+__name(_ts_metadata15, "_ts_metadata");
+function _ts_param14(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param11, "_ts_param");
+__name(_ts_param14, "_ts_param");
 var InlineAgentRunner = class _InlineAgentRunner {
   static {
     __name(this, "InlineAgentRunner");
   }
   factory;
   store;
-  logger = new Logger3(_InlineAgentRunner.name);
+  logger = new Logger4(_InlineAgentRunner.name);
   pending = /* @__PURE__ */ new Map();
+  /**
+  * Runs someone has asked to stop. In-process, like `pending`, and for the same reason: this runner
+  * is single-replica by construction, so the request is readable by the only loop that could be
+  * running it. A cancelled id is dropped once the run settles, so the set tracks live runs only.
+  */
+  cancelled = /* @__PURE__ */ new Set();
   constructor(factory, store) {
     this.factory = factory;
     this.store = store;
@@ -1659,13 +2401,29 @@ var InlineAgentRunner = class _InlineAgentRunner {
     const runId = crypto.randomUUID();
     const day = input.day ?? utcDay();
     const deps = this.factory.forAgent(input.agentName);
-    const hooks = this.topLevelHooks(runId, deps, input.actor, day);
+    const hooks = this.topLevelHooks({
+      runId,
+      deps,
+      actor: input.actor,
+      day,
+      threadId: input.threadId,
+      chainBelow: [
+        ...input.delegationPath ?? [],
+        ...input.agentName !== void 0 ? [
+          input.agentName
+        ] : []
+      ]
+    });
     void runAgentLoop({
       ...deps,
       day
     }, input, hooks).then(() => this.store.setActiveStream(input.threadId, null)).catch(async (error) => {
+      if (error instanceof RunCancelledError) {
+        await this.settleCancelled(runId, input.threadId, deps);
+        return;
+      }
       const message = error instanceof Error ? error.message : String(error);
-      const code = error instanceof QuotaExceededError ? "quota_exceeded" : "run_failed";
+      const code = agentFailureCode(error);
       this.logger.error(`agent run ${runId} failed (${code}): ${message}`);
       publishAgentRunFailed({
         runId,
@@ -1684,33 +2442,216 @@ var InlineAgentRunner = class _InlineAgentRunner {
         code,
         message
       });
-    });
+    }).finally(() => this.cancelled.delete(runId));
     return {
       runId
     };
   }
-  async signal(runId, toolCallId, decision) {
-    const key = `${runId}:${toolCallId}`;
-    const resolve = this.pending.get(key);
-    if (resolve !== void 0) {
+  async signal(runId, toolCallId2, reply) {
+    const key = `${runId}:${toolCallId2}`;
+    const waiter = this.pending.get(key);
+    if (waiter !== void 0) {
       this.pending.delete(key);
-      resolve(decision);
+      waiter.resolve(reply);
     }
   }
+  /**
+  * Ask a run to stop, and settle whatever it was parked on.
+  *
+  * The loop observes the request at its next safe point (between steps, before the turn's tools) and
+  * unwinds from there — so a tool already executing is left to finish, and its result is recorded
+  * exactly as it would have been. What this cannot wait for is a turn parked on a human: that wait
+  * is a promise nobody is going to resolve, so it is REJECTED here with the same
+  * {@link RunCancelledError} the loop would have thrown, and the run unwinds through the identical
+  * path.
+  *
+  * Settlement — the run row, the thread's active stream, the stream's terminal — belongs to the
+  * `RunCancelledError` catch in `start`, so a cancel and an ordinary failure settle in one place
+  * each and can never both write.
+  */
   async cancel(runId) {
-    const deps = this.factory.forAgent();
+    this.cancelled.add(runId);
+    for (const [key, waiter] of this.pending) {
+      if (key.startsWith(`${runId}:`)) {
+        this.pending.delete(key);
+        waiter.reject(new RunCancelledError());
+      }
+    }
+    await Promise.resolve();
+  }
+  /**
+  * The single place a cancelled run's state is settled: recorded as its own terminal (never
+  * `failed` — a user pressing Stop must not land in someone's error rate), the thread released, and
+  * the stream ENDED after a `cancelled` frame rather than failed, so a client that retries failed
+  * streams does not retry this one.
+  */
+  async settleCancelled(runId, threadId, deps) {
+    this.logger.log(`agent run ${runId} cancelled`);
+    await this.store.setActiveStream(threadId, null);
     const writer = await deps.sink.open(runId);
+    await writer.write(encodeStreamEvent({
+      kind: "cancelled"
+    }));
     await writer.end();
+    await this.store.recordRunEnd?.({
+      runId,
+      status: "cancelled"
+    });
+  }
+  /**
+  * Park a run on a human, keyed by run + tool call. One map for approvals and for question-set
+  * answers alike: both wait on the same key, and `signal` cannot tell (or need to tell) which
+  * shape it is delivering — the loop asked for one and only ever gets what the caller sent. A
+  * cancel settles the wait too, by rejecting it.
+  */
+  park(runId, toolCallId2) {
+    return new Promise((resolve, reject) => {
+      this.pending.set(`${runId}:${toolCallId2}`, {
+        resolve,
+        reject
+      });
+    });
   }
-  topLevelHooks(runId, deps, actor, day) {
+  topLevelHooks(args) {
+    const { runId, deps, actor, day, threadId, chainBelow } = args;
     return {
       runId,
       openSink: /* @__PURE__ */ __name(() => deps.sink.open(runId), "openSink"),
-      awaitApproval: /* @__PURE__ */ __name((call) => new Promise((resolve) => {
-        this.pending.set(`${runId}:${call.id}`, resolve);
-      }), "awaitApproval"),
+      awaitApproval: /* @__PURE__ */ __name((call) => this.park(runId, call.id), "awaitApproval"),
+      awaitAnswers: /* @__PURE__ */ __name((request) => this.park(runId, request.id), "awaitAnswers"),
       step: /* @__PURE__ */ __name((_name, fn) => fn(), "step"),
-      runAgent: /* @__PURE__ */ __name((agentName, task) => this.runNested(agentName, task, actor, day, 1, runId), "runAgent")
+      parallel: settleAll,
+      cancelled: /* @__PURE__ */ __name(async () => this.cancelled.has(runId), "cancelled"),
+      runAgent: /* @__PURE__ */ __name((agentName, task) => this.runNested({
+        agentName,
+        task,
+        actor,
+        day,
+        depth: 1,
+        path: chainBelow,
+        sinkRunId: runId,
+        parentRunId: runId
+      }), "runAgent"),
+      startAgent: /* @__PURE__ */ __name(({ agentName, task, toolCallId: toolCallId2 }) => this.startDetached({
+        agentName,
+        task,
+        actor,
+        day,
+        depth: 1,
+        path: chainBelow,
+        parentRunId: runId,
+        deliverTo: {
+          threadId,
+          toolCallId: toolCallId2
+        }
+      }), "startAgent")
+    };
+  }
+  /**
+  * Delegate WITHOUT waiting: a nested loop nobody awaits, on its own thread and its own sink, which
+  * posts its answer back into the delegating thread when it lands (`deliverTo`, settled by the
+  * loop). The calling turn gets the run id straight back and finishes.
+  *
+  * No `sinkRunId`, unlike {@link runNested}: forwarding into the stream the human is watching would
+  * write into a turn that has already ended. Its own approvals resolve through the shared pending
+  * map keyed by its own runId — which is what the pending-approvals surface routes to.
+  */
+  async startDetached(args) {
+    const { agentName, task, actor, day, depth, path, parentRunId, deliverTo } = args;
+    const subThread = await this.store.createThread({
+      actor,
+      transient: true
+    });
+    const runId = crypto.randomUUID();
+    await this.store.setActiveStream(subThread.id, runId);
+    const deps = this.factory.forAgent(agentName);
+    const hooks = {
+      runId,
+      openSink: /* @__PURE__ */ __name(() => deps.sink.open(runId), "openSink"),
+      awaitApproval: /* @__PURE__ */ __name((call) => this.park(runId, call.id), "awaitApproval"),
+      awaitAnswers: /* @__PURE__ */ __name((request) => this.park(runId, request.id), "awaitAnswers"),
+      step: /* @__PURE__ */ __name((_name, fn) => fn(), "step"),
+      parallel: settleAll,
+      cancelled: /* @__PURE__ */ __name(async () => this.cancelled.has(runId), "cancelled"),
+      runAgent: /* @__PURE__ */ __name((childName, childTask) => this.runNested({
+        agentName: childName,
+        task: childTask,
+        actor,
+        day,
+        depth: depth + 1,
+        path: [
+          ...path,
+          agentName
+        ],
+        // A detached run owns a stream of its own, so ITS sub-agents forward into that one.
+        sinkRunId: runId,
+        parentRunId: runId
+      }), "runAgent"),
+      startAgent: /* @__PURE__ */ __name(({ agentName: childName, task: childTask, toolCallId: toolCallId2 }) => this.startDetached({
+        agentName: childName,
+        task: childTask,
+        actor,
+        day,
+        depth: depth + 1,
+        path: [
+          ...path,
+          agentName
+        ],
+        parentRunId: runId,
+        deliverTo: {
+          threadId: subThread.id,
+          toolCallId: toolCallId2
+        }
+      }), "startAgent")
+    };
+    void runAgentLoop({
+      ...deps,
+      day
+    }, {
+      threadId: subThread.id,
+      actor,
+      userText: task,
+      agentName,
+      day,
+      delegationDepth: depth,
+      delegationPath: path,
+      parentRunId,
+      deliverTo
+    }, hooks).catch(async (error) => {
+      const cancelled = error instanceof RunCancelledError;
+      const message = error instanceof Error ? error.message : String(error);
+      if (!cancelled) {
+        this.logger.error(`detached agent run ${runId} failed: ${message}`);
+        publishAgentRunFailed({
+          runId,
+          code: agentFailureCode(error),
+          message
+        });
+      }
+      await this.store.recordRunEnd?.({
+        runId,
+        status: cancelled ? "cancelled" : "failed",
+        ...cancelled ? {} : {
+          errorCode: agentFailureCode(error),
+          errorMessage: message
+        }
+      });
+      await settleUnsettledDelegation({
+        store: this.store,
+        delivery: deliverTo,
+        agent: agentName,
+        runId,
+        status: cancelled ? "cancelled" : "failed",
+        ...cancelled ? {} : {
+          error: message
+        }
+      });
+    }).finally(async () => {
+      this.cancelled.delete(runId);
+      await this.store.setActiveStream(subThread.id, null);
+    });
+    return {
+      runId
     };
   }
   /**
@@ -1718,7 +2659,8 @@ var InlineAgentRunner = class _InlineAgentRunner {
   * (the top-level run the human is watching) so its output and any pending action tool are visible,
   * and its own approvals resolve through the shared pending map keyed by its own runId.
   */
-  async runNested(agentName, task, actor, day, depth, sinkRunId) {
+  async runNested(args) {
+    const { agentName, task, actor, day, depth, path, sinkRunId, parentRunId } = args;
     const subThread = await this.store.createThread({
       actor,
       transient: true
@@ -1730,11 +2672,42 @@ var InlineAgentRunner = class _InlineAgentRunner {
       runId,
       // Forward into the top-level stream; the top-level run owns end/fail on that shared sink.
       openSink: /* @__PURE__ */ __name(async () => childSinkWriter(await deps.sink.open(sinkRunId)), "openSink"),
-      awaitApproval: /* @__PURE__ */ __name((call) => new Promise((resolve) => {
-        this.pending.set(`${runId}:${call.id}`, resolve);
-      }), "awaitApproval"),
+      awaitApproval: /* @__PURE__ */ __name((call) => this.park(runId, call.id), "awaitApproval"),
+      awaitAnswers: /* @__PURE__ */ __name((request) => this.park(runId, request.id), "awaitAnswers"),
       step: /* @__PURE__ */ __name((_name, fn) => fn(), "step"),
-      runAgent: /* @__PURE__ */ __name((childName, childTask) => this.runNested(childName, childTask, actor, day, depth + 1, sinkRunId), "runAgent")
+      parallel: settleAll,
+      // A child stops when it is cancelled OR when the run a human is actually watching is: the
+      // canceller names the top-level run, which is the only id that ever left the server.
+      cancelled: /* @__PURE__ */ __name(async () => this.cancelled.has(runId) || this.cancelled.has(sinkRunId), "cancelled"),
+      runAgent: /* @__PURE__ */ __name((childName, childTask) => this.runNested({
+        agentName: childName,
+        task: childTask,
+        actor,
+        day,
+        depth: depth + 1,
+        path: [
+          ...path,
+          agentName
+        ],
+        sinkRunId,
+        parentRunId: runId
+      }), "runAgent"),
+      startAgent: /* @__PURE__ */ __name(({ agentName: childName, task: childTask, toolCallId: toolCallId2 }) => this.startDetached({
+        agentName: childName,
+        task: childTask,
+        actor,
+        day,
+        depth: depth + 1,
+        path: [
+          ...path,
+          agentName
+        ],
+        parentRunId: runId,
+        deliverTo: {
+          threadId: subThread.id,
+          toolCallId: toolCallId2
+        }
+      }), "startAgent")
     };
     try {
       return await runAgentLoop({
@@ -1747,6 +2720,8 @@ var InlineAgentRunner = class _InlineAgentRunner {
         agentName,
         day,
         delegationDepth: depth,
+        delegationPath: path,
+        parentRunId,
         sinkRunId
       }, hooks);
     } finally {
@@ -1754,25 +2729,63 @@ var InlineAgentRunner = class _InlineAgentRunner {
     }
   }
 };
-InlineAgentRunner = _ts_decorate12([
-  Injectable6(),
-  _ts_param11(0, Inject11(AGENT_DEPS_FACTORY3)),
-  _ts_param11(1, Inject11(AGENT_STORE3)),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+InlineAgentRunner = _ts_decorate15([
+  Injectable7(),
+  _ts_param14(0, Inject14(AGENT_DEPS_FACTORY3)),
+  _ts_param14(1, Inject14(AGENT_STORE3)),
+  _ts_metadata15("design:type", Function),
+  _ts_metadata15("design:paramtypes", [
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
     typeof AgentStore === "undefined" ? Object : AgentStore
   ])
 ], InlineAgentRunner);
 
+// src/skills-config.ts
+import { compositeSkillProvider } from "@dudousxd/nestjs-agent-core";
+function declaredSkillProvider(declared) {
+  return {
+    list: /* @__PURE__ */ __name(({ scopes }) => declared.filter((skill) => scopes.includes(skill.scope)).map(({ name, description, scope }) => ({
+      name,
+      description,
+      scope
+    })), "list"),
+    load: /* @__PURE__ */ __name(async ({ name, scope, ctx }) => {
+      const match = declared.find((skill) => skill.name === name && skill.scope === scope);
+      return match === void 0 ? null : await match.body(ctx);
+    }, "load")
+  };
+}
+__name(declaredSkillProvider, "declaredSkillProvider");
+function resolveSkillsConfig(options, declared) {
+  if (options === void 0) {
+    return void 0;
+  }
+  const providers = options.provider === void 0 ? [
+    declaredSkillProvider(declared)
+  ] : [
+    options.provider,
+    declaredSkillProvider(declared)
+  ];
+  return {
+    provider: providers.length === 1 ? providers[0] : compositeSkillProvider(providers),
+    ...options.scopes !== void 0 ? {
+      scopes: options.scopes
+    } : {},
+    ...options.maxSkills !== void 0 ? {
+      maxSkills: options.maxSkills
+    } : {}
+  };
+}
+__name(resolveSkillsConfig, "resolveSkillsConfig");
+
 // src/agent.module.ts
-function _ts_decorate13(decorators, target, key, desc) {
+function _ts_decorate16(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate13, "_ts_decorate");
+__name(_ts_decorate16, "_ts_decorate");
 var DEFAULT_PATH = "agent";
 function sharedProviders(durable, includeStore) {
   const providers = [
@@ -1790,6 +2803,32 @@ function sharedProviders(durable, includeStore) {
       provide: AGENT_PROMPT_CONTRIBUTORS3,
       useFactory: /* @__PURE__ */ __name(() => [], "useFactory")
     },
+    // Likewise for `@Skill`-decorated providers — filled by SkillDiscoveryService at onModuleInit,
+    // read lazily by the AGENT_SKILLS provider below (which DI builds before discovery has run).
+    {
+      provide: AGENT_SKILL_SOURCES2,
+      useFactory: /* @__PURE__ */ __name(() => [], "useFactory")
+    },
+    {
+      // One resolution, shared by the loop's deps and the listing endpoint: a second one would
+      // drift, and a user would be offered a skill the agent cannot reach. `undefined` when the
+      // host configured none — which is what keeps the turn's checkpoint sequence unchanged.
+      provide: AGENT_SKILLS3,
+      useFactory: /* @__PURE__ */ __name((options, declared) => resolveSkillsConfig(options.skills, declared), "useFactory"),
+      inject: [
+        AGENT_OPTIONS4,
+        AGENT_SKILL_SOURCES2
+      ]
+    },
+    {
+      // One resolution, shared by the loop's deps and the read-back endpoint: a person has to be
+      // shown what the model was shown, and two resolutions would eventually disagree about that.
+      provide: AGENT_MEMORY3,
+      useFactory: /* @__PURE__ */ __name((options) => options.memory, "useFactory"),
+      inject: [
+        AGENT_OPTIONS4
+      ]
+    },
     {
       provide: AGENT_SINK2,
       useFactory: /* @__PURE__ */ __name((options) => options.sink ?? new InProcessTokenStreamSink(), "useFactory"),
@@ -1805,7 +2844,7 @@ function sharedProviders(durable, includeStore) {
       ]
     },
     {
-      provide: AGENT_ACTOR_RESOLVER6,
+      provide: AGENT_ACTOR_RESOLVER8,
       useFactory: /* @__PURE__ */ __name((options) => options.actorResolver, "useFactory"),
       inject: [
         AGENT_OPTIONS4
@@ -1838,6 +2877,7 @@ function sharedProviders(durable, includeStore) {
     // handoff tools (onApplicationBootstrap) reads the registry.
     AgentDiscoveryService,
     AiToolDiscoveryService,
+    SkillDiscoveryService,
     InlineAgentRunner,
     AgentService,
     // Bound ALWAYS (durable or inline) — the console's cross-thread approvals inbox routes decisions
@@ -1889,13 +2929,15 @@ function exportsFor(includeStore) {
     AGENT_REGISTRY5,
     AGENT_SINK2,
     AGENT_ROLES_POLICY2,
-    AGENT_ACTOR_RESOLVER6,
+    AGENT_ACTOR_RESOLVER8,
     AGENT_MODEL2,
     ...includeStore ? [
       AGENT_STORE4
     ] : [],
     AGENT_QUOTA_STORE3,
     AGENT_PROMPT_CONTRIBUTORS3,
+    AGENT_SKILLS3,
+    AGENT_MEMORY3,
     AGENT_DEPS_FACTORY4,
     AgentDepsFactory2,
     AgentService,
@@ -1909,7 +2951,9 @@ var BASE_CONTROLLERS = [
   ThreadsController,
   ToolCallController,
   QuotaController,
-  AgentsController
+  AgentsController,
+  SkillsController,
+  MemoriesController
 ];
 var GUARDABLE_CONTROLLERS = [
   ...BASE_CONTROLLERS,
@@ -2024,12 +3068,13 @@ var AgentModule = class _AgentModule {
     };
   }
 };
-AgentModule = _ts_decorate13([
+AgentModule = _ts_decorate16([
   Global(),
   Module({})
 ], AgentModule);
 
 // src/resolver/header-actor-resolver.ts
+import { UnauthorizedException } from "@nestjs/common";
 function readHeader(req, name) {
   if (typeof req !== "object" || req === null || !("headers" in req)) return void 0;
   const { headers } = req;
@@ -2045,7 +3090,7 @@ var HeaderActorResolver = class {
   resolve(req) {
     const id = readHeader(req, "x-actor-id");
     if (id === void 0 || id.length === 0) {
-      throw new Error("HeaderActorResolver: missing x-actor-id header. No default actor is fabricated. Send x-actor-id from a trusted gateway, or configure AgentModule.forRoot({ actorResolver }) with a resolver that reads your authenticated principal.");
+      throw new UnauthorizedException("HeaderActorResolver: missing x-actor-id header. No default actor is fabricated. Send x-actor-id from a trusted gateway, or configure AgentModule.forRoot({ actorResolver }) with a resolver that reads your authenticated principal.");
     }
     const roles = (readHeader(req, "x-actor-role") ?? "").split(",").map((role) => role.trim()).filter((role) => role.length > 0);
     const tenantRef = readHeader(req, "x-tenant-ref");
@@ -2065,6 +3110,7 @@ export {
   AGENT_METADATA,
   AGENT_TOOL_BRAND,
   AI_TOOL_METADATA,
+  ATTACHMENT_PAGE_SIZE,
   Agent,
   AgentApprovalPortAdapter,
   AgentDepsFactory2 as AgentDepsFactory,
@@ -2080,14 +3126,23 @@ export {
   InProcessTokenStreamSink,
   InlineAgentRunner,
   LedgerQuotaStore,
+  MemoriesController,
+  SKILL_METADATA,
   SYSTEM_PROMPT_CONTRIBUTOR_METADATA,
   SYSTEM_PROMPT_METADATA,
+  Skill,
+  SkillDiscoveryService,
+  SkillsController,
   SystemPrompt,
   SystemPromptContributor,
+  declaredSkillProvider,
   delegateToolName,
   provideAgentTool,
   readAgentMetadata,
   readAiToolMetadata,
+  readSkillMetadata,
+  resolveSkillsConfig,
+  skillScope,
   utcDay
 };
 //# sourceMappingURL=index.js.map