@dudousxd/nestjs-agent 0.11.1 → 0.13.0

package/dist/durable/index.js

@@ -2,10 +2,10 @@ var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 
 // src/durable/agent-run.workflow.ts
-import { AGENT_DEPS_FACTORY, AGENT_STORE, QuotaExceededError, publishAgentRunFailed, runAgentLoop } from "@dudousxd/nestjs-agent-core";
-import { Workflow } from "@dudousxd/nestjs-durable";
+import { AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY2, AGENT_STORE, RunCancelledError, agentFailureCode, isReplayIntegrityError, publishAgentRunFailed, runAgentLoop, settleAll, settleUnsettledDelegation } from "@dudousxd/nestjs-agent-core";
+import { RUN_GATEWAY, Workflow } from "@dudousxd/nestjs-durable";
 import { isWorkflowControlFlowSignal } from "@dudousxd/nestjs-durable-core";
-import { Inject, Injectable, Optional } from "@nestjs/common";
+import { Inject as Inject2, Injectable as Injectable2, Optional } from "@nestjs/common";
 
 // src/agent-deps.ts
 function utcDay(date = /* @__PURE__ */ new Date()) {
@@ -23,10 +23,10 @@ function childSinkWriter(writer) {
 }
 __name(childSinkWriter, "childSinkWriter");
 
-// src/durable/dispatched-steps.token.ts
-var AGENT_DISPATCHED_STEPS = Symbol.for("@dudousxd/nestjs-agent:dispatched-steps");
-
-// src/durable/agent-run.workflow.ts
+// src/durable/agent-run.steps.ts
+import { AGENT_DEPS_FACTORY, createFrameBuffer, invokeWithTransientRetry, publishAgentToolRetry, traceLlmTurn, traceToolExecution, withAskTool, withMemoryTool, withSkillTool, withToolTimeout } from "@dudousxd/nestjs-agent-core";
+import { Step } from "@dudousxd/nestjs-durable";
+import { Inject, Injectable } from "@nestjs/common";
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -44,34 +44,236 @@ function _ts_param(paramIndex, decorator) {
   };
 }
 __name(_ts_param, "_ts_param");
+var AgentRunSteps = class {
+  static {
+    __name(this, "AgentRunSteps");
+  }
+  factory;
+  constructor(factory) {
+    this.factory = factory;
+  }
+  /**
+  * Retryable: every side effect (persist/quota/stream markers) happens loop-side under
+  * `hooks.step`, so a durable retry only re-runs the model call and re-streams its tokens — never
+  * double-writes. NEVER call `writer.end()`/`fail()` here: the workflow owns the stream's lifecycle,
+  * across however many turns/retries it takes.
+  */
+  async llm(input) {
+    const deps = this.factory.forAgent(input.agentName);
+    const tools = withMemoryTool({
+      tools: withSkillTool({
+        tools: withAskTool({
+          tools: await deps.registry.definitionsFor(input.actor, deps.rolesPolicy, deps.toolAllowList),
+          ask: deps.ask
+        }),
+        enabled: deps.skills !== void 0
+      }),
+      enabled: deps.memory?.provider.write !== void 0
+    });
+    const buffer = input.bufferOutput === true ? createFrameBuffer() : void 0;
+    let writer;
+    if (buffer !== void 0) {
+      writer = buffer.writer;
+    } else {
+      const opened = await deps.sink.open(input.sinkRunId);
+      writer = input.childSink ? childSinkWriter(opened) : opened;
+    }
+    const turn = await traceLlmTurn(input.runId, input.step, () => deps.model.runTurn({
+      system: input.system,
+      messages: input.messages,
+      tools,
+      sink: writer
+    }));
+    return buffer === void 0 ? turn : {
+      ...turn,
+      bufferedFrames: buffer.frames()
+    };
+  }
+  /**
+  * NO DURABLE retries — a tool may not be idempotent (a bare `@Step()` carries none, unlike `llm`
+  * above). What it does retry, in place, is a CLASSIFIED-TRANSIENT error from the tool's own
+  * invocation (a DB deadlock, a lock-wait timeout — see `isTransientToolError`): the server rolled
+  * that work back, so re-invoking it is safe, and doing it here (inside this one step, never a new
+  * checkpoint) is exactly how the non-dispatched loop path handles it too. The timeout is applied
+  * HERE, handler-side, via `withToolTimeout` — never as a durable dispatch `timeoutMs`, which
+  * bounds engine liveness (retryable) rather than the tool's own business outcome — and per
+  * ATTEMPT, so a retried invocation gets its own fresh timeout window.
+  */
+  async tool(input) {
+    const deps = this.factory.forAgent(input.ctx.agentName);
+    if (deps.registry.spec(input.toolName)?.kind === "action" && input.toolType !== "action") {
+      throw new Error(`tool "${input.toolName}" is an action tool but was dispatched without approval: the dispatching process resolved its kind against a registry that does not have it`);
+    }
+    const ctx = {
+      ...input.ctx
+    };
+    const localClassify = deps.toolTransientRetry !== false ? deps.toolTransientRetry?.classify : void 0;
+    const transientRetry = input.transientRetry === false ? false : {
+      attempts: input.transientRetry.attempts,
+      backoffMs: input.transientRetry.backoffMs,
+      ...localClassify !== void 0 ? {
+        classify: localClassify
+      } : {}
+    };
+    return traceToolExecution(input.ctx.runId, {
+      toolCallId: input.toolCallId,
+      toolName: input.toolName,
+      toolType: input.toolType
+    }, () => invokeWithTransientRetry(() => {
+      const invocation = deps.registry.invoke(input.toolName, input.input, ctx, deps.rolesPolicy);
+      return input.timeoutMs !== void 0 ? withToolTimeout(invocation, input.timeoutMs, input.toolName) : invocation;
+    }, transientRetry, {
+      onRetry: /* @__PURE__ */ __name((attempt, error) => {
+        publishAgentToolRetry({
+          toolName: input.toolName,
+          toolCallId: input.toolCallId,
+          attempt,
+          message: error instanceof Error ? error.message : String(error)
+        });
+      }, "onRetry")
+    }));
+  }
+};
+_ts_decorate([
+  Step({
+    retries: 3
+  }),
+  _ts_metadata("design:type", Function),
+  _ts_metadata("design:paramtypes", [
+    typeof DispatchedLlmInput === "undefined" ? Object : DispatchedLlmInput
+  ]),
+  _ts_metadata("design:returntype", Promise)
+], AgentRunSteps.prototype, "llm", null);
+_ts_decorate([
+  Step(),
+  _ts_metadata("design:type", Function),
+  _ts_metadata("design:paramtypes", [
+    typeof DispatchedToolInput === "undefined" ? Object : DispatchedToolInput
+  ]),
+  _ts_metadata("design:returntype", Promise)
+], AgentRunSteps.prototype, "tool", null);
+AgentRunSteps = _ts_decorate([
+  Injectable(),
+  _ts_param(0, Inject(AGENT_DEPS_FACTORY)),
+  _ts_metadata("design:type", Function),
+  _ts_metadata("design:paramtypes", [
+    typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory
+  ])
+], AgentRunSteps);
+
+// src/durable/dispatched-steps.token.ts
+var AGENT_DISPATCHED_STEPS = Symbol.for("@dudousxd/nestjs-agent:dispatched-steps");
+
+// src/durable/agent-run.workflow.ts
+function _ts_decorate2(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate2, "_ts_decorate");
+function _ts_metadata2(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata2, "_ts_metadata");
+function _ts_param2(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param2, "_ts_param");
 var AgentRunWorkflow = class _AgentRunWorkflow {
   static {
     __name(this, "AgentRunWorkflow");
   }
   factory;
   store;
-  steps;
   dispatchedSteps;
-  constructor(factory, store, steps, dispatchedSteps) {
+  runs;
+  constructor(factory, store, dispatchedSteps, runs) {
     this.factory = factory;
     this.store = store;
-    this.steps = steps;
     this.dispatchedSteps = dispatchedSteps;
+    this.runs = runs;
+  }
+  /**
+  * Has someone asked this run to stop? Read from the runtime's own run status, which is where
+  * `DurableAgentRunner.cancel` puts it — `cancelling` while a compensating cancel is in flight,
+  * `cancelled` once it has settled.
+  *
+  * Costs a run read at each of the loop's observation points (two per step). That is a row the
+  * control plane already has, against a turn that is otherwise making model calls, and it buys the
+  * property that matters: the answer comes from a place BOTH the canceller and every pod that might
+  * replay this run can see.
+  *
+  * Failing to ask is not a cancel. A tenant with no gateway wired, or an operator briefly
+  * unreachable, answers "no" and the run carries on — the alternative is failing healthy runs
+  * because a status read timed out. The loop journals that answer like any other, so two processes
+  * can never disagree about what was seen here.
+  */
+  async isCancelled(runId) {
+    try {
+      const status = (await this.runs?.getRunDetail(runId))?.run.status;
+      return status === "cancelled" || status === "cancelling";
+    } catch {
+      return false;
+    }
+  }
+  /**
+  * Settle the delegation a DETACHED run was started for, when that run ends without an answer.
+  *
+  * The loop delivers its own success (`deliver:detached`) but cannot catch its own crash, and the
+  * runtime settles the run row without knowing anything delegated it. Left alone, the card in the
+  * calling conversation says "started" for ever — the one state a reader can neither wait on nor
+  * act on. A no-op for every other run: only a detached one carries a delivery address.
+  */
+  async settleDetachedParent(ctx, input, outcome) {
+    const delivery = input.deliverTo;
+    if (delivery === void 0) {
+      return;
+    }
+    await ctx.localStep("deliver:detached:unsettled", () => settleUnsettledDelegation({
+      store: this.store,
+      delivery,
+      agent: input.agentName ?? "default",
+      runId: ctx.runId,
+      status: outcome.status,
+      ...outcome.error !== void 0 ? {
+        error: outcome.error
+      } : {}
+    }));
   }
   async run(ctx, input) {
     const day = input.day ?? utcDay();
     const deps = this.factory.forAgent(input.agentName);
-    const dispatchSteps = this.dispatchedSteps ? this.steps : void 0;
-    if (input.sinkRunId !== void 0) {
+    const dispatchSteps = this.dispatchedSteps && await ctx.patched("agent:dispatched-steps");
+    if (input.sinkRunId !== void 0 || input.deliverTo !== void 0) {
       await ctx.localStep("activate", () => this.store.setActiveStream(input.threadId, ctx.runId));
     }
     const sinkRunId = input.sinkRunId ?? ctx.runId;
+    const chainBelow = [
+      ...input.delegationPath ?? [],
+      ...input.agentName !== void 0 ? [
+        input.agentName
+      ] : []
+    ];
     const hooks = {
       runId: ctx.runId,
       // A child forwards into the top-level sink but must not end/fail it (the top-level run owns it).
       openSink: /* @__PURE__ */ __name(async () => input.sinkRunId !== void 0 ? childSinkWriter(await deps.sink.open(sinkRunId)) : deps.sink.open(ctx.runId), "openSink"),
       awaitApproval: /* @__PURE__ */ __name((call) => ctx.waitForSignal(`tool:${ctx.runId}:${call.id}`), "awaitApproval"),
+      // The same wait, on the same signal key, carrying a typed answer instead of a yes/no — so a
+      // question set and an approval reach a parked run through one path, and the HTTP surface that
+      // settles either one is the same `POST /agent/tool-call/*` family.
+      awaitAnswers: /* @__PURE__ */ __name((request) => ctx.waitForSignal(`tool:${ctx.runId}:${request.id}`), "awaitAnswers"),
       step: /* @__PURE__ */ __name((name, fn) => ctx.localStep(name, fn), "step"),
+      // Both durable step primitives take their checkpoint position on the CALL, before their first
+      // await, so launching a batch in one tick — what `settleAll` does — fixes the block of
+      // positions in call order however the tools then settle. `ctx.patched` keeps a run that
+      // recorded the one-call-at-a-time shape replaying against that shape.
+      parallel: settleAll,
+      cancelled: /* @__PURE__ */ __name(() => this.isCancelled(ctx.runId), "cancelled"),
+      patched: /* @__PURE__ */ __name((id) => ctx.patched(id), "patched"),
       // Dispatched-step suspends must escape the loop's tool catch — control flow, not a tool
       // failure. Marker-based predicate, NOT instanceof: the signal's CLASS differs by runtime
       // (engine in-process throws durable-core's WorkflowSuspended/ContinueAsNew; the BullMQ thin
@@ -92,15 +294,54 @@ var AgentRunWorkflow = class _AgentRunWorkflow {
           userText: task,
           day,
           delegationDepth: (input.delegationDepth ?? 0) + 1,
+          delegationPath: chainBelow,
+          parentRunId: ctx.runId,
           sinkRunId
         });
       }, "runAgent"),
+      // The same delegation, not awaited: `ctx.startChild` records a `spawn:<childRunId>` at this
+      // position and returns, so THIS turn ends while the child is still working. Two things the
+      // awaited form does are deliberately left off:
+      //   - no `sinkRunId`. A detached run owns its own stream. Forwarding it into the turn that
+      //     started it would write tokens, and a pending action-tool frame, into a stream whose
+      //     reader has already seen `done` — and would put the child's approval card in whatever
+      //     turn happened to be open. Its approval goes to the pending-approvals surface instead,
+      //     which it reaches for free: the call is persisted `pending_approval` against the child's
+      //     OWN runId, and that is what `runForToolCall` answers with.
+      //   - `deliverTo` instead. The parent's tool result is a receipt, so the answer needs an
+      //     address of its own, and by the time it exists nobody is holding one.
+      startAgent: /* @__PURE__ */ __name(async ({ agentName, task, toolCallId: toolCallId2 }) => {
+        const subThreadId = await ctx.localStep(`subthread:${agentName}`, async () => {
+          const thread = await this.store.createThread({
+            actor: input.actor,
+            transient: true
+          });
+          return thread.id;
+        });
+        const childRunId = await ctx.startChild(_AgentRunWorkflow, {
+          agentName,
+          threadId: subThreadId,
+          actor: input.actor,
+          userText: task,
+          day,
+          delegationDepth: (input.delegationDepth ?? 0) + 1,
+          delegationPath: chainBelow,
+          parentRunId: ctx.runId,
+          deliverTo: {
+            threadId: input.threadId,
+            toolCallId: toolCallId2
+          }
+        });
+        return {
+          runId: childRunId
+        };
+      }, "startAgent"),
       // Routes the two long steps through AgentRunSteps as engine-dispatched `ctx.step`s instead of
       // `ctx.localStep`s, so a turn isn't pinned to this workflow worker for the model call or a tool
       // execution. `sinkRunId`/`childSink` are sink routing this workflow already resolved above —
       // core's dispatchLlm signature stays sink-topology-agnostic, so we add them here, not in core.
-      ...dispatchSteps !== void 0 ? {
-        dispatchLlm: /* @__PURE__ */ __name((index, envelope) => ctx.step(dispatchSteps.llm, {
+      ...dispatchSteps ? {
+        dispatchLlm: /* @__PURE__ */ __name((index, envelope) => ctx.step(AgentRunSteps.prototype.llm, {
           ...envelope,
           runId: ctx.runId,
           step: index,
@@ -112,7 +353,7 @@ var AgentRunWorkflow = class _AgentRunWorkflow {
         // ('agent'-kind delegations branch to runAgent earlier in the loop), so anything that
         // isn't 'action' is defensively 'read' — the same posture core takes for an
         // unresolvable `kind`.
-        dispatchTool: /* @__PURE__ */ __name((call, envelope) => ctx.step(dispatchSteps.tool, {
+        dispatchTool: /* @__PURE__ */ __name((call, envelope) => ctx.step(AgentRunSteps.prototype.tool, {
           ...envelope,
           toolCallId: call.id,
           toolType: call.kind === "action" ? "action" : "read"
@@ -130,8 +371,27 @@ var AgentRunWorkflow = class _AgentRunWorkflow {
       if (isWorkflowControlFlowSignal(error)) {
         throw error;
       }
+      if (error instanceof RunCancelledError) {
+        await ctx.localStep("deactivate", () => this.store.setActiveStream(input.threadId, null));
+        await this.settleDetachedParent(ctx, input, {
+          status: "cancelled"
+        });
+        throw error;
+      }
+      if (isReplayIntegrityError(error)) {
+        const failure = {
+          code: "run_failed",
+          message: error.message
+        };
+        publishAgentRunFailed({
+          runId: ctx.runId,
+          ...failure
+        });
+        await (await hooks.openSink()).fail(failure);
+        throw error;
+      }
       const message = error instanceof Error ? error.message : String(error);
-      const code = error instanceof QuotaExceededError ? "quota_exceeded" : "run_failed";
+      const code = agentFailureCode(error);
       publishAgentRunFailed({
         runId: ctx.runId,
         code,
@@ -144,6 +404,10 @@ var AgentRunWorkflow = class _AgentRunWorkflow {
         errorMessage: message
       }) ?? Promise.resolve());
       await ctx.localStep("deactivate", () => this.store.setActiveStream(input.threadId, null));
+      await this.settleDetachedParent(ctx, input, {
+        status: "failed",
+        error: message
+      });
       const writer = await hooks.openSink();
       await writer.fail({
         code,
@@ -153,146 +417,32 @@ var AgentRunWorkflow = class _AgentRunWorkflow {
     }
   }
 };
-AgentRunWorkflow = _ts_decorate([
-  Injectable(),
+AgentRunWorkflow = _ts_decorate2([
+  Injectable2(),
   Workflow({
     name: "agent.run",
     version: "1"
   }),
-  _ts_param(0, Inject(AGENT_DEPS_FACTORY)),
-  _ts_param(1, Inject(AGENT_STORE)),
-  _ts_param(2, Optional()),
-  _ts_param(3, Inject(AGENT_DISPATCHED_STEPS)),
-  _ts_metadata("design:type", Function),
-  _ts_metadata("design:paramtypes", [
-    typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
-    typeof AgentStore === "undefined" ? Object : AgentStore,
-    Object,
-    Boolean
-  ])
-], AgentRunWorkflow);
-
-// src/durable/agent-run.steps.ts
-import { AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY2, invokeWithTransientRetry, publishAgentToolRetry, traceLlmTurn, traceToolExecution, withToolTimeout } from "@dudousxd/nestjs-agent-core";
-import { Step } from "@dudousxd/nestjs-durable";
-import { Inject as Inject2, Injectable as Injectable2 } from "@nestjs/common";
-function _ts_decorate2(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate2, "_ts_decorate");
-function _ts_metadata2(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata2, "_ts_metadata");
-function _ts_param2(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param2, "_ts_param");
-var AgentRunSteps = class {
-  static {
-    __name(this, "AgentRunSteps");
-  }
-  factory;
-  constructor(factory) {
-    this.factory = factory;
-  }
-  /**
-  * Retryable: every side effect (persist/quota/stream markers) happens loop-side under
-  * `hooks.step`, so a durable retry only re-runs the model call and re-streams its tokens — never
-  * double-writes. NEVER call `writer.end()`/`fail()` here: the workflow owns the stream's lifecycle,
-  * across however many turns/retries it takes.
-  */
-  async llm(input) {
-    const deps = this.factory.forAgent(input.agentName);
-    const tools = await deps.registry.definitionsFor(input.actor, deps.rolesPolicy, deps.toolAllowList);
-    const opened = await deps.sink.open(input.sinkRunId);
-    const writer = input.childSink ? childSinkWriter(opened) : opened;
-    return traceLlmTurn(input.runId, input.step, () => deps.model.runTurn({
-      system: input.system,
-      messages: input.messages,
-      tools,
-      sink: writer
-    }));
-  }
-  /**
-  * NO DURABLE retries — a tool may not be idempotent (a bare `@Step()` carries none, unlike `llm`
-  * above). What it does retry, in place, is a CLASSIFIED-TRANSIENT error from the tool's own
-  * invocation (a DB deadlock, a lock-wait timeout — see `isTransientToolError`): the server rolled
-  * that work back, so re-invoking it is safe, and doing it here (inside this one step, never a new
-  * checkpoint) is exactly how the non-dispatched loop path handles it too. The timeout is applied
-  * HERE, handler-side, via `withToolTimeout` — never as a durable dispatch `timeoutMs`, which
-  * bounds engine liveness (retryable) rather than the tool's own business outcome — and per
-  * ATTEMPT, so a retried invocation gets its own fresh timeout window.
-  */
-  async tool(input) {
-    const deps = this.factory.forAgent(input.ctx.agentName);
-    const ctx = {
-      ...input.ctx
-    };
-    const localClassify = deps.toolTransientRetry !== false ? deps.toolTransientRetry?.classify : void 0;
-    const transientRetry = input.transientRetry === false ? false : {
-      attempts: input.transientRetry.attempts,
-      backoffMs: input.transientRetry.backoffMs,
-      ...localClassify !== void 0 ? {
-        classify: localClassify
-      } : {}
-    };
-    return traceToolExecution(input.ctx.runId, {
-      toolCallId: input.toolCallId,
-      toolName: input.toolName,
-      toolType: input.toolType
-    }, () => invokeWithTransientRetry(() => {
-      const invocation = deps.registry.invoke(input.toolName, input.input, ctx, deps.rolesPolicy);
-      return input.timeoutMs !== void 0 ? withToolTimeout(invocation, input.timeoutMs, input.toolName) : invocation;
-    }, transientRetry, {
-      onRetry: /* @__PURE__ */ __name((attempt, error) => {
-        publishAgentToolRetry({
-          toolName: input.toolName,
-          toolCallId: input.toolCallId,
-          attempt,
-          message: error instanceof Error ? error.message : String(error)
-        });
-      }, "onRetry")
-    }));
-  }
-};
-_ts_decorate2([
-  Step({
-    retries: 3
-  }),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", [
-    typeof DispatchedLlmInput === "undefined" ? Object : DispatchedLlmInput
-  ]),
-  _ts_metadata2("design:returntype", Promise)
-], AgentRunSteps.prototype, "llm", null);
-_ts_decorate2([
-  Step(),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", [
-    typeof DispatchedToolInput === "undefined" ? Object : DispatchedToolInput
-  ]),
-  _ts_metadata2("design:returntype", Promise)
-], AgentRunSteps.prototype, "tool", null);
-AgentRunSteps = _ts_decorate2([
-  Injectable2(),
   _ts_param2(0, Inject2(AGENT_DEPS_FACTORY2)),
+  _ts_param2(1, Inject2(AGENT_STORE)),
+  _ts_param2(2, Inject2(AGENT_DISPATCHED_STEPS)),
+  _ts_param2(3, Optional()),
+  _ts_param2(3, Inject2(RUN_GATEWAY)),
   _ts_metadata2("design:type", Function),
   _ts_metadata2("design:paramtypes", [
-    typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory
+    typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
+    typeof AgentStore === "undefined" ? Object : AgentStore,
+    Boolean,
+    typeof RunGateway === "undefined" ? Object : RunGateway
   ])
-], AgentRunSteps);
+], AgentRunWorkflow);
 
 // src/durable/durable-agent-runner.ts
 import { randomUUID } from "node:crypto";
-import { WorkflowService } from "@dudousxd/nestjs-durable";
+import { AGENT_SINK, AGENT_STORE as AGENT_STORE2, encodeStreamEvent } from "@dudousxd/nestjs-agent-core";
+import { RUN_GATEWAY as RUN_GATEWAY2, WorkflowService } from "@dudousxd/nestjs-durable";
 import { isWorkflowControlFlowSignal as isWorkflowControlFlowSignal2 } from "@dudousxd/nestjs-durable-core";
-import { Injectable as Injectable3 } from "@nestjs/common";
+import { Inject as Inject3, Injectable as Injectable3, Logger } from "@nestjs/common";
 function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -304,13 +454,26 @@ function _ts_metadata3(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
 __name(_ts_metadata3, "_ts_metadata");
-var DurableAgentRunner = class {
+function _ts_param3(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param3, "_ts_param");
+var DurableAgentRunner = class _DurableAgentRunner {
   static {
     __name(this, "DurableAgentRunner");
   }
   workflows;
-  constructor(workflows) {
+  runs;
+  store;
+  sink;
+  logger = new Logger(_DurableAgentRunner.name);
+  constructor(workflows, runs, store, sink) {
     this.workflows = workflows;
+    this.runs = runs;
+    this.store = store;
+    this.sink = sink;
   }
   async start(input) {
     const stamped = {
@@ -329,24 +492,59 @@ var DurableAgentRunner = class {
       runId
     };
   }
-  async signal(runId, toolCallId, decision) {
-    await this.workflows.signal(`tool:${runId}:${toolCallId}`, decision);
+  async signal(runId, toolCallId2, reply) {
+    await this.workflows.signal(`tool:${runId}:${toolCallId2}`, reply);
   }
-  async cancel(_runId) {
-    await Promise.resolve();
+  /**
+  * Stop a run, and settle what the durable runtime knows nothing about.
+  *
+  * `compensate: true` is the form that gives the BODY a chance: it moves the run to `cancelling`
+  * (which is what the workflow's own cancel observation reads) and then re-drives it, so a turn
+  * running in-process unwinds at its next safe point instead of finishing. It also guarantees the
+  * outcome for the turn that CANNOT observe anything — one parked on `waitForSignal`, suspended
+  * inside a position its journal already holds — because that re-drive re-suspends and the runtime
+  * settles the run `cancelled` regardless. The cascade to child runs comes with it.
+  *
+  * Neither of those settles the agent's own state, so this does: the run row gets its own terminal,
+  * and the subscriber gets a `cancelled` frame followed by a normal end. Both are keyed by runId
+  * alone, which is why they belong here rather than in the body — the body is the only place that
+  * knows which THREAD was streaming, so releasing that stays there (see `AgentRunWorkflow`).
+  *
+  * A tool already executing is not interrupted, here or anywhere: see `haltIfCancelled` in core.
+  */
+  async cancel(runId) {
+    this.logger.log(`cancelling agent run ${runId}`);
+    await this.runs.cancel(runId, {
+      compensate: true
+    });
+    const writer = await this.sink.open(runId);
+    await writer.write(encodeStreamEvent({
+      kind: "cancelled"
+    }));
+    await writer.end();
+    await this.store.recordRunEnd?.({
+      runId,
+      status: "cancelled"
+    });
   }
 };
 DurableAgentRunner = _ts_decorate3([
   Injectable3(),
+  _ts_param3(1, Inject3(RUN_GATEWAY2)),
+  _ts_param3(2, Inject3(AGENT_STORE2)),
+  _ts_param3(3, Inject3(AGENT_SINK)),
   _ts_metadata3("design:type", Function),
   _ts_metadata3("design:paramtypes", [
-    typeof WorkflowService === "undefined" ? Object : WorkflowService
+    typeof WorkflowService === "undefined" ? Object : WorkflowService,
+    typeof RunGateway === "undefined" ? Object : RunGateway,
+    typeof AgentStore === "undefined" ? Object : AgentStore,
+    typeof TokenStreamSink === "undefined" ? Object : TokenStreamSink
   ])
 ], DurableAgentRunner);
 
 // src/durable/agent-durable.module.ts
-import { AGENT_DURABLE_RUNNER, AGENT_OPTIONS, AGENT_SINK } from "@dudousxd/nestjs-agent-core";
-import { Global, Logger, Module } from "@nestjs/common";
+import { AGENT_DURABLE_RUNNER, AGENT_OPTIONS, AGENT_SINK as AGENT_SINK2 } from "@dudousxd/nestjs-agent-core";
+import { Global, Logger as Logger2, Module } from "@nestjs/common";
 
 // src/in-process-sink.ts
 import { AgentStreamError } from "@dudousxd/nestjs-agent-core";
@@ -424,7 +622,7 @@ function _ts_decorate4(decorators, target, key, desc) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate4, "_ts_decorate");
-var logger = new Logger("AgentDurableModule");
+var logger = new Logger2("AgentDurableModule");
 function runnerProviders() {
   return [
     DurableAgentRunner,
@@ -435,15 +633,15 @@ function runnerProviders() {
     {
       provide: AGENT_DISPATCHED_STEPS,
       useFactory: /* @__PURE__ */ __name((options, sink) => {
-        const enabled = options.durable === true && options.dispatchedSteps !== false;
+        const enabled = options.durable === true && options.dispatchedSteps === true;
         if (enabled && sink instanceof InProcessTokenStreamSink) {
-          logger.warn("Dispatched steps are active (the default under durable: true) with the default InProcessTokenStreamSink, which only buffers tokens in-process. A dispatched `llm` step served by a different worker cannot stream into this buffer. Wire a cross-process TokenStreamSink (e.g. a Redis pub/sub sink) via AgentModule.forRoot({ sink }) before running multi-pod, or set dispatchedSteps: false to keep the turn in-process localSteps.");
+          logger.warn("dispatchedSteps: true with the default InProcessTokenStreamSink, which only buffers tokens in-process. A dispatched `llm` step served by a different worker cannot stream into this buffer. Wire a cross-process TokenStreamSink (e.g. a Redis pub/sub sink) via AgentModule.forRoot({ sink }) before running multi-pod, or drop dispatchedSteps to keep the turn in-process localSteps.");
         }
         return enabled;
       }, "useFactory"),
       inject: [
         AGENT_OPTIONS,
-        AGENT_SINK
+        AGENT_SINK2
       ]
     }
   ];
@@ -511,14 +709,14 @@ AgentDurableModule = _ts_decorate4([
 ], AgentDurableModule);
 
 // src/agent.module.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER6, AGENT_APPROVAL_PORT, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY6, AGENT_DURABLE_RUNNER as AGENT_DURABLE_RUNNER2, AGENT_MODEL as AGENT_MODEL2, AGENT_OPTIONS as AGENT_OPTIONS5, AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS3, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE3, AGENT_REGISTRY as AGENT_REGISTRY5, AGENT_ROLES_POLICY as AGENT_ROLES_POLICY2, AGENT_RUNNER as AGENT_RUNNER2, AGENT_SINK as AGENT_SINK3, AGENT_STORE as AGENT_STORE5, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY3, AgentRegistry as AgentRegistry5, DefaultRolesPolicy, ToolRegistry as ToolRegistry3 } from "@dudousxd/nestjs-agent-core";
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER8, AGENT_APPROVAL_PORT, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY6, AGENT_DURABLE_RUNNER as AGENT_DURABLE_RUNNER2, AGENT_MEMORY as AGENT_MEMORY3, AGENT_MODEL as AGENT_MODEL2, AGENT_OPTIONS as AGENT_OPTIONS5, AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS3, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE3, AGENT_REGISTRY as AGENT_REGISTRY5, AGENT_ROLES_POLICY as AGENT_ROLES_POLICY2, AGENT_RUNNER as AGENT_RUNNER2, AGENT_SINK as AGENT_SINK4, AGENT_SKILLS as AGENT_SKILLS3, AGENT_SKILL_SOURCES as AGENT_SKILL_SOURCES2, AGENT_STORE as AGENT_STORE6, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY3, AgentRegistry as AgentRegistry5, DefaultRolesPolicy, ToolRegistry as ToolRegistry3 } from "@dudousxd/nestjs-agent-core";
 import { Global as Global2, Module as Module2 } from "@nestjs/common";
 import { DiscoveryModule, RouterModule } from "@nestjs/core";
 
 // src/agent-deps.factory.ts
-import { AGENT_MODEL, AGENT_PRICING_STORE, AGENT_PROMPT_CONTRIBUTORS, AGENT_QUOTA_STORE, AGENT_REGISTRY, AGENT_ROLES_POLICY, AGENT_SINK as AGENT_SINK2, AGENT_STORE as AGENT_STORE2, AGENT_TOOL_REGISTRY, AgentRegistry as AgentRegistry2, ToolRegistry as ToolRegistry2 } from "@dudousxd/nestjs-agent-core";
+import { AGENT_MEMORY, AGENT_MODEL, AGENT_PRICING_STORE, AGENT_PROMPT_CONTRIBUTORS, AGENT_QUOTA_STORE, AGENT_REGISTRY, AGENT_ROLES_POLICY, AGENT_SINK as AGENT_SINK3, AGENT_SKILLS, AGENT_STORE as AGENT_STORE3, AGENT_TOOL_REGISTRY, AgentRegistry as AgentRegistry2, ToolRegistry as ToolRegistry2, normalizeDelegation, summarizeWithModel, windowHistory } from "@dudousxd/nestjs-agent-core";
 import { AGENT_OPTIONS as AGENT_OPTIONS2 } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject3, Injectable as Injectable4, Optional as Optional2 } from "@nestjs/common";
+import { Inject as Inject4, Injectable as Injectable4, Optional as Optional2 } from "@nestjs/common";
 function _ts_decorate5(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -530,14 +728,15 @@ function _ts_metadata4(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
 __name(_ts_metadata4, "_ts_metadata");
-function _ts_param3(paramIndex, decorator) {
+function _ts_param4(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param3, "_ts_param");
-function delegateToolName(target) {
-  return `ask_${target.replace(/[^a-zA-Z0-9]+/g, "_")}`;
+__name(_ts_param4, "_ts_param");
+function delegateToolName(args) {
+  const slug = args.target.replace(/[^a-zA-Z0-9]+/g, "_");
+  return args.detached === true ? `start_${slug}` : `ask_${slug}`;
 }
 __name(delegateToolName, "delegateToolName");
 var AgentDepsFactory2 = class {
@@ -554,7 +753,9 @@ var AgentDepsFactory2 = class {
   promptContributors;
   quota;
   pricingStore;
-  constructor(options, model, store, sink, rolesPolicy, registry, agents, promptContributors, quota, pricingStore) {
+  skills;
+  memory;
+  constructor(options, model, store, sink, rolesPolicy, registry, agents, promptContributors, quota, pricingStore, skills, memory) {
     this.options = options;
     this.model = model;
     this.store = store;
@@ -565,6 +766,16 @@ var AgentDepsFactory2 = class {
     this.promptContributors = promptContributors;
     this.quota = quota;
     this.pricingStore = pricingStore;
+    this.skills = skills;
+    this.memory = memory;
+  }
+  /** The turn's memory seam, shared with the read-back endpoint. Undefined → memory is not configured. */
+  memoryConfig() {
+    return this.memory;
+  }
+  /** The turn's skills seam, shared with the listing endpoint. Undefined → skills are not configured. */
+  skillsConfig() {
+    return this.skills;
   }
   /**
   * The agent a turn uses when the caller names none: the explicit `defaultAgent` option, else the
@@ -581,7 +792,13 @@ var AgentDepsFactory2 = class {
     if (definition === void 0) {
       return void 0;
     }
-    const delegated = (definition.delegatesTo ?? []).map(delegateToolName);
+    const delegated = (definition.delegatesTo ?? []).map((edge) => {
+      const { agent, detached } = normalizeDelegation(edge);
+      return delegateToolName({
+        target: agent,
+        detached
+      });
+    });
     if (definition.tools === void 0 && delegated.length === 0) {
       return void 0;
     }
@@ -596,6 +813,8 @@ var AgentDepsFactory2 = class {
     const toolAllowList = this.effectiveTools(definition);
     const followUpsCount = this.followUpsCount();
     const retrieval = this.options.retrieval;
+    const historyPolicy = this.historyPolicy(definition);
+    const ask = definition?.ask ?? this.options.ask;
     return {
       model: this.model,
       store: this.store,
@@ -605,6 +824,12 @@ var AgentDepsFactory2 = class {
       promptContributors: this.promptContributors,
       systemPrompt: definition?.systemPrompt ?? "You are a helpful assistant.",
       maxSteps: definition?.maxSteps ?? 8,
+      ...definition?.maxDelegationDepth !== void 0 ? {
+        maxDelegationDepth: definition.maxDelegationDepth
+      } : {},
+      ...definition?.maxAgentAppearances !== void 0 ? {
+        maxAgentAppearances: definition.maxAgentAppearances
+      } : {},
       ...definition?.modelId !== void 0 ? {
         modelId: definition.modelId
       } : {},
@@ -614,6 +839,37 @@ var AgentDepsFactory2 = class {
       ...this.pricingStore !== void 0 ? {
         pricingStore: this.pricingStore
       } : {},
+      ...historyPolicy !== void 0 ? {
+        historyPolicy
+      } : {},
+      inputProcessors: this.options.inputProcessors ?? [],
+      outputProcessors: this.options.outputProcessors ?? [],
+      ...definition?.outputSchema !== void 0 ? {
+        outputSchema: definition.outputSchema
+      } : {},
+      ...definition?.outputRepairAttempts !== void 0 ? {
+        outputRepairAttempts: definition.outputRepairAttempts
+      } : {},
+      ...definition?.intake !== void 0 ? {
+        intake: definition.intake
+      } : {},
+      // Most specific wins, exactly as `historyPolicy` resolves: the agent's own `@Agent({ ask })`,
+      // else the module-wide flag. Both are module config, so every process of a deployment agrees.
+      ...ask === true ? {
+        ask: true
+      } : {},
+      // Module-wide, never per-agent: a skill is a procedure, not a persona, and an agent that could
+      // opt out of one would make the catalog depend on which agent a turn happened to select — a
+      // per-turn fact the worker re-deriving the tool list cannot see.
+      ...this.skills !== void 0 ? {
+        skills: this.skills
+      } : {},
+      // Module-wide, never per-agent, for the same reason skills are: which memories a turn carries
+      // cannot depend on which persona answered it, or the worker re-deriving a dispatched turn's
+      // tool list would disagree with the loop about whether `remember` was offered.
+      ...this.memory !== void 0 ? {
+        memory: this.memory
+      } : {},
       ...toolAllowList !== void 0 ? {
         toolAllowList
       } : {},
@@ -634,6 +890,36 @@ var AgentDepsFactory2 = class {
       } : {}
     };
   }
+  /**
+  * The ceiling on how much of a thread this agent's turns carry, most specific wins: the agent's
+  * own `@Agent({ history })`, else a module-wide custom `historyPolicy`, else the module-wide
+  * `history` window. Undefined → unbounded, the behaviour of a module that configures none.
+  */
+  historyPolicy(definition) {
+    if (definition?.history !== void 0) {
+      return this.window(definition.history);
+    }
+    if (this.options.historyPolicy !== void 0) {
+      return this.options.historyPolicy;
+    }
+    return this.options.history === void 0 ? void 0 : this.window(this.options.history);
+  }
+  /** Build the built-in window policy from the declarative `{ maxMessages, maxTokens, summarize }`. */
+  window(config) {
+    return windowHistory({
+      ...config.maxMessages !== void 0 ? {
+        maxMessages: config.maxMessages
+      } : {},
+      ...config.maxTokens !== void 0 ? {
+        maxTokens: config.maxTokens
+      } : {},
+      // The shared module model, not a per-agent one: an agent's `modelId` is an accounting label,
+      // and only one provider is ever bound.
+      ...config.summarize === true ? {
+        summarize: summarizeWithModel(this.model)
+      } : {}
+    });
+  }
   /** Normalize the `followUps` option (`true` → 3, `{ count }` → count) to a number, or undefined. */
   followUpsCount() {
     const followUps = this.options.followUps;
@@ -648,17 +934,21 @@ var AgentDepsFactory2 = class {
 };
 AgentDepsFactory2 = _ts_decorate5([
   Injectable4(),
-  _ts_param3(0, Inject3(AGENT_OPTIONS2)),
-  _ts_param3(1, Inject3(AGENT_MODEL)),
-  _ts_param3(2, Inject3(AGENT_STORE2)),
-  _ts_param3(3, Inject3(AGENT_SINK2)),
-  _ts_param3(4, Inject3(AGENT_ROLES_POLICY)),
-  _ts_param3(5, Inject3(AGENT_TOOL_REGISTRY)),
-  _ts_param3(6, Inject3(AGENT_REGISTRY)),
-  _ts_param3(7, Inject3(AGENT_PROMPT_CONTRIBUTORS)),
-  _ts_param3(8, Inject3(AGENT_QUOTA_STORE)),
-  _ts_param3(9, Optional2()),
-  _ts_param3(9, Inject3(AGENT_PRICING_STORE)),
+  _ts_param4(0, Inject4(AGENT_OPTIONS2)),
+  _ts_param4(1, Inject4(AGENT_MODEL)),
+  _ts_param4(2, Inject4(AGENT_STORE3)),
+  _ts_param4(3, Inject4(AGENT_SINK3)),
+  _ts_param4(4, Inject4(AGENT_ROLES_POLICY)),
+  _ts_param4(5, Inject4(AGENT_TOOL_REGISTRY)),
+  _ts_param4(6, Inject4(AGENT_REGISTRY)),
+  _ts_param4(7, Inject4(AGENT_PROMPT_CONTRIBUTORS)),
+  _ts_param4(8, Inject4(AGENT_QUOTA_STORE)),
+  _ts_param4(9, Optional2()),
+  _ts_param4(9, Inject4(AGENT_PRICING_STORE)),
+  _ts_param4(10, Optional2()),
+  _ts_param4(10, Inject4(AGENT_SKILLS)),
+  _ts_param4(11, Optional2()),
+  _ts_param4(11, Inject4(AGENT_MEMORY)),
   _ts_metadata4("design:type", Function),
   _ts_metadata4("design:paramtypes", [
     typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
@@ -670,13 +960,15 @@ AgentDepsFactory2 = _ts_decorate5([
     typeof AgentRegistry2 === "undefined" ? Object : AgentRegistry2,
     Array,
     Object,
+    Object,
+    Object,
     Object
   ])
 ], AgentDepsFactory2);
 
 // src/agent.service.ts
-import { AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY3, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE2, AGENT_RUNNER, AGENT_STORE as AGENT_STORE3 } from "@dudousxd/nestjs-agent-core";
-import { BadRequestException, ForbiddenException, Inject as Inject4, Injectable as Injectable5, NotFoundException, NotImplementedException } from "@nestjs/common";
+import { AGENT_ATTACHMENT_STAGING, AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY3, AGENT_QUOTA_STORE as AGENT_QUOTA_STORE2, AGENT_RUNNER, AGENT_STORE as AGENT_STORE4 } from "@dudousxd/nestjs-agent-core";
+import { BadRequestException, ForbiddenException, Inject as Inject5, Injectable as Injectable5, NotFoundException, NotImplementedException, Optional as Optional3 } from "@nestjs/common";
 function _ts_decorate6(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -688,12 +980,12 @@ function _ts_metadata5(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
 __name(_ts_metadata5, "_ts_metadata");
-function _ts_param4(paramIndex, decorator) {
+function _ts_param5(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param4, "_ts_param");
+__name(_ts_param5, "_ts_param");
 var AgentService = class {
   static {
     __name(this, "AgentService");
@@ -702,14 +994,17 @@ var AgentService = class {
   store;
   deps;
   quota;
-  constructor(runner, store, deps, quota) {
+  staging;
+  constructor(runner, store, deps, quota, staging) {
     this.runner = runner;
     this.store = store;
     this.deps = deps;
     this.quota = quota;
+    this.staging = staging;
   }
   async chat(params) {
     const agentName = await this.resolveAgentName(params.agentName, params.threadId);
+    const attachments = await this.resolveAttachments(params.actor, params.attachments ?? []);
     let threadId = params.threadId;
     if (threadId === void 0) {
       if (params.regenerate === true) {
@@ -734,8 +1029,8 @@ var AgentService = class {
       ...params.regenerate === true ? {
         regenerate: true
       } : {},
-      ...params.attachments !== void 0 ? {
-        attachments: params.attachments
+      ...attachments.length > 0 ? {
+        attachments
       } : {},
       ...params.pageContext !== void 0 ? {
         pageContext: params.pageContext
@@ -748,18 +1043,66 @@ var AgentService = class {
       threadId
     };
   }
+  /**
+  * Rebuild this turn's attachments from the staging store, keyed by the ids the caller claimed.
+  * The model provider fetches {@link MessageAttachment.url} verbatim, so that url is only ever
+  * allowed to come from the host's own store — a caller that could name it could point the server
+  * at anything it can reach (cloud metadata, internal services) and read the response back out of
+  * the model's answer.
+  *
+  * No store bound means no way to tell an id the actor owns from one they don't, so a turn simply
+  * cannot carry attachments: 501 rather than trusting the request.
+  */
+  async resolveAttachments(actor, refs) {
+    if (refs.length === 0) {
+      return [];
+    }
+    const staging = this.staging;
+    if (staging === void 0 || typeof staging.resolve !== "function") {
+      throw new NotImplementedException("Message attachments require an AGENT_ATTACHMENT_STAGING provider implementing resolve(); attachment urls are never taken from the request.");
+    }
+    const resolved = [];
+    for (const ref of refs) {
+      const attachment = await staging.resolve({
+        mediaId: ref.mediaId,
+        actor
+      });
+      if (attachment === null) {
+        throw new ForbiddenException(`attachment ${ref.mediaId} is not available to this actor`);
+      }
+      resolved.push(attachment);
+    }
+    return resolved;
+  }
+  /**
+  * The run's live token stream, WITHOUT an ownership check — for in-process callers that are
+  * already authorized (the MCP bridge, a host's own job code), the same split as
+  * {@link signalToolCall} vs {@link approve}. Anything reachable from a request must go through
+  * {@link subscribeAs} instead: a runId is the only thing standing between a caller and another
+  * actor's answer, tool arguments and tool results.
+  */
   subscribe(runId) {
     return this.deps.forAgent().sink.subscribe(runId);
   }
-  async approve(actor, toolCallId) {
-    await this.assertOwnsToolCall(actor, toolCallId);
-    return this.signalToolCall(toolCallId, {
+  /**
+  * {@link subscribe}, gated the way {@link cancel} is: only the actor whose thread is currently
+  * streaming this run may read it. A run that has already finished is reported missing rather than
+  * replayed — the runner clears the thread's active stream as the run ends, and that field is what
+  * ownership is derived from.
+  */
+  async subscribeAs(actor, runId) {
+    await this.assertOwnsActiveStream(actor, runId);
+    return this.subscribe(runId);
+  }
+  async approve(actor, toolCallId2) {
+    await this.assertOwnsToolCall(actor, toolCallId2);
+    return this.signalToolCall(toolCallId2, {
       approved: true
     });
   }
-  async reject(actor, toolCallId, reason) {
-    await this.assertOwnsToolCall(actor, toolCallId);
-    return this.signalToolCall(toolCallId, {
+  async reject(actor, toolCallId2, reason) {
+    await this.assertOwnsToolCall(actor, toolCallId2);
+    return this.signalToolCall(toolCallId2, {
       approved: false,
       ...reason !== void 0 ? {
         reason
@@ -767,6 +1110,34 @@ var AgentService = class {
     });
   }
   /**
+  * Answer a parked question set. An omitted question takes the request's own pre-picked default —
+  * resolved by the LOOP against the request it already holds, so "the user just submitted" and
+  * "the user picked exactly the defaults" persist as the same answers, and no client has to
+  * re-send what it was shown.
+  */
+  async answer(actor, toolCallId2, answers2 = {}) {
+    await this.assertOwnsToolCall(actor, toolCallId2);
+    const reply = {
+      answers: answers2,
+      answeredByRef: actor.id
+    };
+    return this.signalToolCall(toolCallId2, reply);
+  }
+  /**
+  * Decline to answer and let the agent proceed on its own assumptions. NOT the same as confirming
+  * them: the run records this as a rejection, so a reader auditing what the agent was told can
+  * tell a choice the user made from one they refused to make.
+  */
+  async skip(actor, toolCallId2) {
+    await this.assertOwnsToolCall(actor, toolCallId2);
+    const reply = {
+      answers: {},
+      skipped: true,
+      answeredByRef: actor.id
+    };
+    return this.signalToolCall(toolCallId2, reply);
+  }
+  /**
   * The decision core behind approve/reject, WITHOUT an ownership check: resolves the run
   * currently awaiting `toolCallId` and signals it. `approve`/`reject` above call this after their
   * own `assertOwnsToolCall` gate; the console `AgentApprovalPort` adapter (bound by `AgentModule`)
@@ -774,9 +1145,9 @@ var AgentService = class {
   * re-deriving thread ownership here would reject a legitimate operator decision (an operator is
   * not the thread's own actor).
   */
-  async signalToolCall(toolCallId, decision) {
-    const runId = await this.resolveRunForToolCall(toolCallId);
-    return this.runner.signal(runId, toolCallId, decision);
+  async signalToolCall(toolCallId2, reply) {
+    const runId = await this.resolveRunForToolCall(toolCallId2);
+    return this.runner.signal(runId, toolCallId2, reply);
   }
   async cancel(actor, runId) {
     await this.assertOwnsActiveStream(actor, runId);
@@ -843,20 +1214,33 @@ var AgentService = class {
   /**
   * Agent-selection precedence for a `chat()` call with no explicit `agentName`: the thread's own
   * `defaultAgent` (if the thread exists and one is set) wins over the module's configured default.
-  * Skips the thread lookup entirely when the caller already named an agent or there's no thread yet.
+  * Skips the store entirely when the caller already named an agent or there's no thread yet.
+  *
+  * What this needs is one nullable scalar, so it asks for one. `getThread` returns the entire
+  * transcript — every message, every persisted tool output — and this discards all of it; on a
+  * long thread with large tool results that is hundreds of kilobytes read per turn, outside the
+  * workflow, for a string. A store predating {@link ThreadDefaultAgentReader} still answers, via
+  * the full read.
   */
   async resolveAgentName(agentName, threadId) {
     if (agentName !== void 0) {
       return agentName;
     }
     if (threadId !== void 0) {
-      const thread = await this.store.getThread(threadId);
-      if (thread?.defaultAgent !== void 0 && thread.defaultAgent !== null) {
-        return thread.defaultAgent;
+      const threadDefault = await this.threadDefaultAgent(threadId);
+      if (threadDefault !== null) {
+        return threadDefault;
       }
     }
     return this.deps.defaultAgentName();
   }
+  async threadDefaultAgent(threadId) {
+    const projecting = this.store;
+    if (typeof projecting.defaultAgentForThread === "function") {
+      return projecting.defaultAgentForThread(threadId);
+    }
+    return (await this.store.getThread(threadId))?.defaultAgent ?? null;
+  }
   async toSummaryView(thread) {
     return {
       ...thread,
@@ -888,6 +1272,67 @@ var AgentService = class {
     return this.store.truncateFrom(threadId, messageId);
   }
   /**
+  * Every file this actor has staged, newest first — across threads, including uploads that were
+  * never sent, which nothing else on this surface can see.
+  *
+  * Metadata only. A url is minted per turn by `resolve` so it can be short-lived, and handing one
+  * back per entry would undo that for the price of rendering a list.
+  */
+  async listAttachments(actor, options = {}) {
+    const list = this.attachmentInventory();
+    return list({
+      actor,
+      ...options.limit !== void 0 ? {
+        limit: options.limit
+      } : {}
+    });
+  }
+  /**
+  * This actor's staged media that no live message references and that is old enough not to be an
+  * upload in flight — the candidate set for a sweep. Returns them; never deletes them. The bytes
+  * are the host's, and so is the decision.
+  *
+  * `olderThan` is required and has no default. How long a composer may sit open with a file
+  * attached is the host's knowledge, and a library-chosen grace period would eventually delete a
+  * file someone was about to send. The staging store is asked to apply it, and the result is
+  * filtered again here: a store that ignores the hint would otherwise turn this into exactly that
+  * bug, silently.
+  *
+  * Both halves must be answerable or this refuses. An unanswerable reference query means "cannot
+  * tell", and treating it as "nothing is referenced" would hand back every attachment the actor
+  * ever sent, marked safe to delete.
+  */
+  async collectableAttachments(actor, options) {
+    const list = this.attachmentInventory();
+    const referencedMediaIds = this.store.referencedMediaIds?.bind(this.store);
+    if (referencedMediaIds === void 0) {
+      throw new NotImplementedException("Collecting attachments requires an AgentStore that implements referencedMediaIds(); the bound store cannot say which media a message still references, and guessing would delete files that are in use.");
+    }
+    const stagedBefore = options.olderThan.toISOString();
+    const inventory = await list({
+      actor,
+      stagedBefore,
+      ...options.limit !== void 0 ? {
+        limit: options.limit
+      } : {}
+    });
+    const aged = inventory.filter((entry) => entry.createdAt < stagedBefore);
+    const referenced = new Set(await referencedMediaIds(actor.id, aged.map((entry) => entry.mediaId)));
+    return aged.filter((entry) => !referenced.has(entry.mediaId));
+  }
+  /**
+  * The bound staging store's `list`, or a refusal. Absence is never answered with an empty list:
+  * "this host keeps no inventory" and "this actor has no files" are opposite facts that would
+  * otherwise render identically — as a clean file list, and as a sweep that collects nothing.
+  */
+  attachmentInventory() {
+    const list = this.staging?.list?.bind(this.staging);
+    if (list === void 0) {
+      throw new NotImplementedException("Listing attachments requires an AGENT_ATTACHMENT_STAGING provider implementing list(); the host owns the staged bytes, so only it can enumerate them.");
+    }
+    return list;
+  }
+  /**
   * The day's usage for the badge: tokens + summed USD cost from the store, and the configured
   * limit from the quota store (null → unlimited). `withinLimit` comes from the quota store so it
   * can never drift from what enforcement uses.
@@ -929,24 +1374,26 @@ var AgentService = class {
   * out from run resolution (see {@link resolveRunForToolCall}) so the console `AgentApprovalPort`
   * adapter can resolve+signal a decision WITHOUT this check — it is authorized upstream instead.
   */
-  async assertOwnsToolCall(actor, toolCallId) {
-    const owner = await this.store.ownerOfToolCall(toolCallId);
+  async assertOwnsToolCall(actor, toolCallId2) {
+    const owner = await this.store.ownerOfToolCall(toolCallId2);
     if (owner === null) {
-      throw new NotFoundException(`tool call ${toolCallId} not found`);
+      throw new NotFoundException(`tool call ${toolCallId2} not found`);
     }
     if (owner !== actor.id) {
       throw new ForbiddenException("tool call belongs to another actor");
     }
   }
   /**
-  * Resolve the run currently awaiting `toolCallId` (its thread's active stream). That run is the
-  * sub-agent's own child run when the pending call belongs to a delegated agent — the client never
-  * knows or supplies a runId; it is derived here from the tool call alone.
+  * Resolve the run awaiting `toolCallId`. Derived server-side from the tool call alone — the client
+  * never knows or supplies a runId, and that run is the sub-agent's own child run when the pending
+  * call belongs to a delegated agent. The store answers from the CALL'S OWN `runId` where it has
+  * one; see `AgentStore.runForToolCall` for why that matters once a thread can hold more than one
+  * live run.
   */
-  async resolveRunForToolCall(toolCallId) {
-    const runId = await this.store.runForToolCall(toolCallId);
+  async resolveRunForToolCall(toolCallId2) {
+    const runId = await this.store.runForToolCall(toolCallId2);
     if (runId === null) {
-      throw new NotFoundException(`tool call ${toolCallId} has no active run to signal`);
+      throw new NotFoundException(`tool call ${toolCallId2} has no active run to signal`);
     }
     return runId;
   }
@@ -963,16 +1410,19 @@ var AgentService = class {
 };
 AgentService = _ts_decorate6([
   Injectable5(),
-  _ts_param4(0, Inject4(AGENT_RUNNER)),
-  _ts_param4(1, Inject4(AGENT_STORE3)),
-  _ts_param4(2, Inject4(AGENT_DEPS_FACTORY3)),
-  _ts_param4(3, Inject4(AGENT_QUOTA_STORE2)),
+  _ts_param5(0, Inject5(AGENT_RUNNER)),
+  _ts_param5(1, Inject5(AGENT_STORE4)),
+  _ts_param5(2, Inject5(AGENT_DEPS_FACTORY3)),
+  _ts_param5(3, Inject5(AGENT_QUOTA_STORE2)),
+  _ts_param5(4, Optional3()),
+  _ts_param5(4, Inject5(AGENT_ATTACHMENT_STAGING)),
   _ts_metadata5("design:type", Function),
   _ts_metadata5("design:paramtypes", [
     typeof AgentRunner === "undefined" ? Object : AgentRunner,
     typeof AgentStore === "undefined" ? Object : AgentStore,
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
-    Object
+    Object,
+    typeof AttachmentStagingStore === "undefined" ? Object : AttachmentStagingStore
   ])
 ], AgentService);
 
@@ -997,16 +1447,16 @@ var AgentApprovalPortAdapter = class {
   constructor(agent) {
     this.agent = agent;
   }
-  async approve(toolCallId, opts) {
-    await this.agent.signalToolCall(toolCallId, {
+  async approve(toolCallId2, opts) {
+    await this.agent.signalToolCall(toolCallId2, {
       approved: true,
       ...opts?.executedByRef !== void 0 ? {
         executedByRef: opts.executedByRef
       } : {}
     });
   }
-  async reject(toolCallId, opts) {
-    await this.agent.signalToolCall(toolCallId, {
+  async reject(toolCallId2, opts) {
+    await this.agent.signalToolCall(toolCallId2, {
       approved: false,
       ...opts?.executedByRef !== void 0 ? {
         executedByRef: opts.executedByRef
@@ -1027,7 +1477,7 @@ AgentApprovalPortAdapter = _ts_decorate7([
 
 // src/controller/agents.controller.ts
 import { AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY4, AGENT_REGISTRY as AGENT_REGISTRY2, AgentRegistry as AgentRegistry3 } from "@dudousxd/nestjs-agent-core";
-import { Controller, Get, Inject as Inject5 } from "@nestjs/common";
+import { Controller, Get, Inject as Inject6 } from "@nestjs/common";
 function _ts_decorate8(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -1039,12 +1489,12 @@ function _ts_metadata7(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
 __name(_ts_metadata7, "_ts_metadata");
-function _ts_param5(paramIndex, decorator) {
+function _ts_param6(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param5, "_ts_param");
+__name(_ts_param6, "_ts_param");
 var AgentsController = class {
   static {
     __name(this, "AgentsController");
@@ -1074,8 +1524,8 @@ _ts_decorate8([
 ], AgentsController.prototype, "list", null);
 AgentsController = _ts_decorate8([
   Controller("agents"),
-  _ts_param5(0, Inject5(AGENT_REGISTRY2)),
-  _ts_param5(1, Inject5(AGENT_DEPS_FACTORY4)),
+  _ts_param6(0, Inject6(AGENT_REGISTRY2)),
+  _ts_param6(1, Inject6(AGENT_DEPS_FACTORY4)),
   _ts_metadata7("design:type", Function),
   _ts_metadata7("design:paramtypes", [
     typeof AgentRegistry3 === "undefined" ? Object : AgentRegistry3,
@@ -1084,8 +1534,8 @@ AgentsController = _ts_decorate8([
 ], AgentsController);
 
 // src/controller/attachments.controller.ts
-import { AGENT_ACTOR_RESOLVER, AGENT_ATTACHMENT_STAGING, AGENT_OPTIONS as AGENT_OPTIONS3 } from "@dudousxd/nestjs-agent-core";
-import { BadRequestException as BadRequestException2, Controller as Controller2, Inject as Inject6, NotImplementedException as NotImplementedException2, Optional as Optional3, PayloadTooLargeException, Post, Req, UnsupportedMediaTypeException, UploadedFile, UseInterceptors } from "@nestjs/common";
+import { AGENT_ACTOR_RESOLVER, AGENT_ATTACHMENT_STAGING as AGENT_ATTACHMENT_STAGING2, AGENT_OPTIONS as AGENT_OPTIONS3 } from "@dudousxd/nestjs-agent-core";
+import { BadRequestException as BadRequestException2, Controller as Controller2, Get as Get2, Inject as Inject7, NotImplementedException as NotImplementedException2, Optional as Optional4, PayloadTooLargeException, Post, Req, UnsupportedMediaTypeException, UploadedFile, UseInterceptors } from "@nestjs/common";
 import { FileInterceptor } from "@nestjs/platform-express";
 function _ts_decorate9(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -1098,13 +1548,15 @@ function _ts_metadata8(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
 __name(_ts_metadata8, "_ts_metadata");
-function _ts_param6(paramIndex, decorator) {
+function _ts_param7(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param6, "_ts_param");
+__name(_ts_param7, "_ts_param");
 var DEFAULT_MAX_ATTACHMENT_BYTES = 20 * 1024 * 1024;
+var HARD_MAX_ATTACHMENT_BYTES = 32 * 1024 * 1024;
+var ATTACHMENT_PAGE_SIZE = 50;
 var DEFAULT_ALLOWED_ATTACHMENT_CONTENT_TYPES = [
   "image/png",
   "image/jpeg",
@@ -1120,10 +1572,12 @@ var AttachmentsController = class {
   }
   options;
   actorResolver;
+  agents;
   staging;
-  constructor(options, actorResolver, staging) {
+  constructor(options, actorResolver, agents, staging) {
     this.options = options;
     this.actorResolver = actorResolver;
+    this.agents = agents;
     this.staging = staging;
   }
   /**
@@ -1137,6 +1591,21 @@ var AttachmentsController = class {
       throw new Error("AgentModule: attachments.upload is true but no AGENT_ATTACHMENT_STAGING provider is bound. Bind one (e.g. `{ provide: AGENT_ATTACHMENT_STAGING, useClass: MyStagingStore }`) in a module imported alongside AgentModule, or set attachments.upload to false.");
     }
   }
+  /**
+  * The caller's own staged files, newest first — the one question `GET /agent/threads/:id` cannot
+  * answer, since an upload that was never sent belongs to no thread.
+  *
+  * Scoped by the RESOLVED actor and nothing else. There is deliberately no `threadId` filter: a
+  * thread's attachments already ride on its messages in the thread payload, and re-serving them
+  * from here would add a second ownership path to get wrong for information the client already
+  * holds. Metadata only — see {@link StagedAttachment}.
+  */
+  async list(req) {
+    const actor = await this.actorResolver.resolve(req);
+    return this.agents.listAttachments(actor, {
+      limit: ATTACHMENT_PAGE_SIZE
+    });
+  }
   async upload(req, file) {
     if (this.staging === void 0) {
       throw new NotImplementedException2("Attachment upload is not configured on this server.");
@@ -1162,11 +1631,24 @@ var AttachmentsController = class {
     });
   }
 };
+_ts_decorate9([
+  Get2(),
+  _ts_param7(0, Req()),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request
+  ]),
+  _ts_metadata8("design:returntype", Promise)
+], AttachmentsController.prototype, "list", null);
 _ts_decorate9([
   Post(),
-  UseInterceptors(FileInterceptor("file")),
-  _ts_param6(0, Req()),
-  _ts_param6(1, UploadedFile()),
+  UseInterceptors(FileInterceptor("file", {
+    limits: {
+      fileSize: HARD_MAX_ATTACHMENT_BYTES
+    }
+  })),
+  _ts_param7(0, Req()),
+  _ts_param7(1, UploadedFile()),
   _ts_metadata8("design:type", Function),
   _ts_metadata8("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
@@ -1176,21 +1658,22 @@ _ts_decorate9([
 ], AttachmentsController.prototype, "upload", null);
 AttachmentsController = _ts_decorate9([
   Controller2("attachments"),
-  _ts_param6(0, Inject6(AGENT_OPTIONS3)),
-  _ts_param6(1, Inject6(AGENT_ACTOR_RESOLVER)),
-  _ts_param6(2, Optional3()),
-  _ts_param6(2, Inject6(AGENT_ATTACHMENT_STAGING)),
+  _ts_param7(0, Inject7(AGENT_OPTIONS3)),
+  _ts_param7(1, Inject7(AGENT_ACTOR_RESOLVER)),
+  _ts_param7(3, Optional4()),
+  _ts_param7(3, Inject7(AGENT_ATTACHMENT_STAGING2)),
   _ts_metadata8("design:type", Function),
   _ts_metadata8("design:paramtypes", [
     typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
     typeof ActorResolver === "undefined" ? Object : ActorResolver,
+    typeof AgentService === "undefined" ? Object : AgentService,
     Object
   ])
 ], AttachmentsController);
 
 // src/controller/chat.controller.ts
 import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER2, AgentStreamError as AgentStreamError2 } from "@dudousxd/nestjs-agent-core";
-import { Body, Controller as Controller3, Get as Get2, Inject as Inject7, Param, Post as Post2, Req as Req2, Res } from "@nestjs/common";
+import { BadRequestException as BadRequestException3, Body, Controller as Controller3, Get as Get3, Inject as Inject8, Param, Post as Post2, Req as Req2, Res } from "@nestjs/common";
 function _ts_decorate10(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -1202,12 +1685,37 @@ function _ts_metadata9(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
 __name(_ts_metadata9, "_ts_metadata");
-function _ts_param7(paramIndex, decorator) {
+function _ts_param8(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param7, "_ts_param");
+__name(_ts_param8, "_ts_param");
+var MAX_ATTACHMENTS_PER_MESSAGE = 10;
+function attachmentRefs(claimed) {
+  if (claimed === void 0) {
+    return [];
+  }
+  if (!Array.isArray(claimed)) {
+    throw new BadRequestException3("attachments must be an array of { mediaId }");
+  }
+  if (claimed.length > MAX_ATTACHMENTS_PER_MESSAGE) {
+    throw new BadRequestException3(`a message may carry at most ${MAX_ATTACHMENTS_PER_MESSAGE} attachments`);
+  }
+  return claimed.map((entry) => {
+    if (typeof entry !== "object" || entry === null || !("mediaId" in entry)) {
+      throw new BadRequestException3("each attachment must be an object with a mediaId");
+    }
+    const { mediaId } = entry;
+    if (typeof mediaId !== "string" || mediaId.length === 0) {
+      throw new BadRequestException3("each attachment must carry a non-empty string mediaId");
+    }
+    return {
+      mediaId
+    };
+  });
+}
+__name(attachmentRefs, "attachmentRefs");
 var ChatController = class {
   static {
     __name(this, "ChatController");
@@ -1220,6 +1728,7 @@ var ChatController = class {
   }
   async chat(req, res, body) {
     const actor = await this.actorResolver.resolve(req);
+    const attachments = attachmentRefs(body.attachments);
     const { runId, threadId } = await this.agent.chat({
       actor,
       message: body.message,
@@ -1229,8 +1738,8 @@ var ChatController = class {
       ...body.agent !== void 0 ? {
         agentName: body.agent
       } : {},
-      ...body.attachments !== void 0 ? {
-        attachments: body.attachments
+      ...attachments.length > 0 ? {
+        attachments
       } : {},
       ...body.pageContext !== void 0 ? {
         pageContext: body.pageContext
@@ -1242,10 +1751,11 @@ var ChatController = class {
         transient: true
       } : {}
     });
-    await this.pipe(res, runId, threadId);
+    await this.pipe(res, runId, this.agent.subscribe(runId), threadId);
   }
-  async stream(runId, res) {
-    await this.pipe(res, runId);
+  async stream(req, runId, res) {
+    const actor = await this.actorResolver.resolve(req);
+    await this.pipe(res, runId, await this.agent.subscribeAs(actor, runId));
   }
   async cancel(req, runId) {
     const actor = await this.actorResolver.resolve(req);
@@ -1254,7 +1764,7 @@ var ChatController = class {
       aborted: true
     };
   }
-  async pipe(res, runId, threadId) {
+  async pipe(res, runId, events, threadId) {
     res.setHeader("Content-Type", "text/event-stream");
     res.setHeader("Cache-Control", "no-cache");
     res.setHeader("Connection", "keep-alive");
@@ -1272,7 +1782,7 @@ data: ${JSON.stringify({
     const decoder = new TextDecoder();
     let buffer = "";
     try {
-      for await (const chunk of this.agent.subscribe(runId)) {
+      for await (const chunk of events) {
         buffer += decoder.decode(chunk, {
           stream: true
         });
@@ -1312,9 +1822,9 @@ data: ${JSON.stringify(payload)}
 };
 _ts_decorate10([
   Post2("chat"),
-  _ts_param7(0, Req2()),
-  _ts_param7(1, Res()),
-  _ts_param7(2, Body()),
+  _ts_param8(0, Req2()),
+  _ts_param8(1, Res()),
+  _ts_param8(2, Body()),
   _ts_metadata9("design:type", Function),
   _ts_metadata9("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
@@ -1324,11 +1834,13 @@ _ts_decorate10([
   _ts_metadata9("design:returntype", Promise)
 ], ChatController.prototype, "chat", null);
 _ts_decorate10([
-  Get2("chat/:runId/stream"),
-  _ts_param7(0, Param("runId")),
-  _ts_param7(1, Res()),
+  Get3("chat/:runId/stream"),
+  _ts_param8(0, Req2()),
+  _ts_param8(1, Param("runId")),
+  _ts_param8(2, Res()),
   _ts_metadata9("design:type", Function),
   _ts_metadata9("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
     String,
     typeof Response === "undefined" ? Object : Response
   ]),
@@ -1336,8 +1848,8 @@ _ts_decorate10([
 ], ChatController.prototype, "stream", null);
 _ts_decorate10([
   Post2("chat/:runId/cancel"),
-  _ts_param7(0, Req2()),
-  _ts_param7(1, Param("runId")),
+  _ts_param8(0, Req2()),
+  _ts_param8(1, Param("runId")),
   _ts_metadata9("design:type", Function),
   _ts_metadata9("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
@@ -1347,7 +1859,7 @@ _ts_decorate10([
 ], ChatController.prototype, "cancel", null);
 ChatController = _ts_decorate10([
   Controller3(),
-  _ts_param7(1, Inject7(AGENT_ACTOR_RESOLVER2)),
+  _ts_param8(1, Inject8(AGENT_ACTOR_RESOLVER2)),
   _ts_metadata9("design:type", Function),
   _ts_metadata9("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
@@ -1355,9 +1867,9 @@ ChatController = _ts_decorate10([
   ])
 ], ChatController);
 
-// src/controller/quota.controller.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER3 } from "@dudousxd/nestjs-agent-core";
-import { Controller as Controller4, Get as Get3, Inject as Inject8, Req as Req3 } from "@nestjs/common";
+// src/controller/memories.controller.ts
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER3, AGENT_MEMORY as AGENT_MEMORY2, memoryForgetVerdict, offerMemories } from "@dudousxd/nestjs-agent-core";
+import { Controller as Controller4, Delete, ForbiddenException as ForbiddenException2, Get as Get4, Inject as Inject9, NotFoundException as NotFoundException2, Optional as Optional5, Param as Param2, Query, Req as Req3 } from "@nestjs/common";
 function _ts_decorate11(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -1369,12 +1881,138 @@ function _ts_metadata10(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
 __name(_ts_metadata10, "_ts_metadata");
-function _ts_param8(paramIndex, decorator) {
+function _ts_param9(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param8, "_ts_param");
+__name(_ts_param9, "_ts_param");
+var MemoriesController = class {
+  static {
+    __name(this, "MemoriesController");
+  }
+  actorResolver;
+  memory;
+  constructor(actorResolver, memory) {
+    this.actorResolver = actorResolver;
+    this.memory = memory;
+  }
+  /**
+  * Every memory this actor can reach, most specific first, each carrying its origin and whatever
+  * wider value it outranks.
+  *
+  * DELIBERATELY IGNORES `maxMemories`. That ceiling is a budget on what one TURN carries; applying
+  * it here would mean a person could not see — and so could not delete — a belief the assistant is
+  * one write away from acting on again. Showing someone more than the model sees is harmless;
+  * showing them less is the failure this endpoint exists to prevent.
+  */
+  async list(req, threadId) {
+    if (this.memory === void 0) {
+      return [];
+    }
+    const actor = await this.actorResolver.resolve(req);
+    return (await this.unbounded(threadId ?? "", actor)).entries;
+  }
+  /**
+  * Forget one. Authorized against the actor's OWN resolved list, the same way a `skill` load is
+  * authorized against the turn's catalog: an id this actor cannot see is answered as missing rather
+  * than refused, so the endpoint cannot be used to find out which memories exist about other people.
+  */
+  async forget(req, id) {
+    if (this.memory === void 0) {
+      throw new NotFoundException2("No memory is configured in this deployment.");
+    }
+    const actor = await this.actorResolver.resolve(req);
+    const digest = await this.unbounded("", actor);
+    const entry = digest.entries.find((candidate) => candidate.id === id);
+    if (entry === void 0) {
+      throw new NotFoundException2(`No memory with id "${id}".`);
+    }
+    const verdict = memoryForgetVerdict({
+      record: entry,
+      actor
+    });
+    if (!verdict.allowed) {
+      throw new ForbiddenException2(verdict.reason);
+    }
+    return {
+      forgotten: await this.memory.provider.forget({
+        id: entry.id,
+        ctx: {
+          actor,
+          threadId: ""
+        }
+      })
+    };
+  }
+  async unbounded(threadId, actor) {
+    const config = this.memory;
+    return await offerMemories({
+      config: {
+        ...config,
+        maxMemories: Number.POSITIVE_INFINITY
+      },
+      ctx: {
+        actor,
+        threadId
+      }
+    });
+  }
+};
+_ts_decorate11([
+  Get4(),
+  _ts_param9(0, Req3()),
+  _ts_param9(1, Query("threadId")),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
+    String
+  ]),
+  _ts_metadata10("design:returntype", Promise)
+], MemoriesController.prototype, "list", null);
+_ts_decorate11([
+  Delete(":id"),
+  _ts_param9(0, Req3()),
+  _ts_param9(1, Param2("id")),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
+    String
+  ]),
+  _ts_metadata10("design:returntype", Promise)
+], MemoriesController.prototype, "forget", null);
+MemoriesController = _ts_decorate11([
+  Controller4("memories"),
+  _ts_param9(0, Inject9(AGENT_ACTOR_RESOLVER3)),
+  _ts_param9(1, Optional5()),
+  _ts_param9(1, Inject9(AGENT_MEMORY2)),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
+    typeof ActorResolver === "undefined" ? Object : ActorResolver,
+    Object
+  ])
+], MemoriesController);
+
+// src/controller/quota.controller.ts
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER4 } from "@dudousxd/nestjs-agent-core";
+import { Controller as Controller5, Get as Get5, Inject as Inject10, Req as Req4 } from "@nestjs/common";
+function _ts_decorate12(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate12, "_ts_decorate");
+function _ts_metadata11(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata11, "_ts_metadata");
+function _ts_param10(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param10, "_ts_param");
 var QuotaController = class {
   static {
     __name(this, "QuotaController");
@@ -1390,45 +2028,110 @@ var QuotaController = class {
     return this.agent.quotaToday(actor.id);
   }
 };
-_ts_decorate11([
-  Get3("today"),
-  _ts_param8(0, Req3()),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
+_ts_decorate12([
+  Get5("today"),
+  _ts_param10(0, Req4()),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request
   ]),
-  _ts_metadata10("design:returntype", Promise)
+  _ts_metadata11("design:returntype", Promise)
 ], QuotaController.prototype, "today", null);
-QuotaController = _ts_decorate11([
-  Controller4("quota"),
-  _ts_param8(1, Inject8(AGENT_ACTOR_RESOLVER3)),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
+QuotaController = _ts_decorate12([
+  Controller5("quota"),
+  _ts_param10(1, Inject10(AGENT_ACTOR_RESOLVER4)),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], QuotaController);
 
+// src/controller/skills.controller.ts
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER5, AGENT_SKILLS as AGENT_SKILLS2, offerSkills } from "@dudousxd/nestjs-agent-core";
+import { Controller as Controller6, Get as Get6, Inject as Inject11, Optional as Optional6, Query as Query2, Req as Req5 } from "@nestjs/common";
+function _ts_decorate13(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate13, "_ts_decorate");
+function _ts_metadata12(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata12, "_ts_metadata");
+function _ts_param11(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param11, "_ts_param");
+var SkillsController = class {
+  static {
+    __name(this, "SkillsController");
+  }
+  actorResolver;
+  skills;
+  constructor(actorResolver, skills) {
+    this.actorResolver = actorResolver;
+    this.skills = skills;
+  }
+  async list(req, threadId) {
+    if (this.skills === void 0) {
+      return [];
+    }
+    const actor = await this.actorResolver.resolve(req);
+    const offer = await offerSkills(this.skills, {
+      actor,
+      threadId: threadId ?? ""
+    });
+    return offer.entries;
+  }
+};
+_ts_decorate13([
+  Get6(),
+  _ts_param11(0, Req5()),
+  _ts_param11(1, Query2("threadId")),
+  _ts_metadata12("design:type", Function),
+  _ts_metadata12("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
+    String
+  ]),
+  _ts_metadata12("design:returntype", Promise)
+], SkillsController.prototype, "list", null);
+SkillsController = _ts_decorate13([
+  Controller6("skills"),
+  _ts_param11(0, Inject11(AGENT_ACTOR_RESOLVER5)),
+  _ts_param11(1, Optional6()),
+  _ts_param11(1, Inject11(AGENT_SKILLS2)),
+  _ts_metadata12("design:type", Function),
+  _ts_metadata12("design:paramtypes", [
+    typeof ActorResolver === "undefined" ? Object : ActorResolver,
+    Object
+  ])
+], SkillsController);
+
 // src/controller/threads.controller.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER4 } from "@dudousxd/nestjs-agent-core";
-import { Body as Body2, Controller as Controller5, Delete, Get as Get4, Inject as Inject9, Param as Param2, Patch, Post as Post3, Req as Req4 } from "@nestjs/common";
-function _ts_decorate12(decorators, target, key, desc) {
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER6 } from "@dudousxd/nestjs-agent-core";
+import { Body as Body2, Controller as Controller7, Delete as Delete2, Get as Get7, Inject as Inject12, Param as Param3, Patch, Post as Post3, Req as Req6 } from "@nestjs/common";
+function _ts_decorate14(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate12, "_ts_decorate");
-function _ts_metadata11(k, v) {
+__name(_ts_decorate14, "_ts_decorate");
+function _ts_metadata13(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata11, "_ts_metadata");
-function _ts_param9(paramIndex, decorator) {
+__name(_ts_metadata13, "_ts_metadata");
+function _ts_param12(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param9, "_ts_param");
+__name(_ts_param12, "_ts_param");
 var ThreadsController = class {
   static {
     __name(this, "ThreadsController");
@@ -1492,117 +2195,173 @@ var ThreadsController = class {
     };
   }
 };
-_ts_decorate12([
-  Get4(),
-  _ts_param9(0, Req4()),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+_ts_decorate14([
+  Get7(),
+  _ts_param12(0, Req6()),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request
   ]),
-  _ts_metadata11("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "list", null);
-_ts_decorate12([
-  Get4(":id"),
-  _ts_param9(0, Req4()),
-  _ts_param9(1, Param2("id")),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+_ts_decorate14([
+  Get7(":id"),
+  _ts_param12(0, Req6()),
+  _ts_param12(1, Param3("id")),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata11("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "detail", null);
-_ts_decorate12([
-  Delete(":id"),
-  _ts_param9(0, Req4()),
-  _ts_param9(1, Param2("id")),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+_ts_decorate14([
+  Delete2(":id"),
+  _ts_param12(0, Req6()),
+  _ts_param12(1, Param3("id")),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata11("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "remove", null);
-_ts_decorate12([
+_ts_decorate14([
   Post3(":id/fork-from/:messageId"),
-  _ts_param9(0, Req4()),
-  _ts_param9(1, Param2("id")),
-  _ts_param9(2, Param2("messageId")),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+  _ts_param12(0, Req6()),
+  _ts_param12(1, Param3("id")),
+  _ts_param12(2, Param3("messageId")),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     String
   ]),
-  _ts_metadata11("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "fork", null);
-_ts_decorate12([
+_ts_decorate14([
   Patch(":id"),
-  _ts_param9(0, Req4()),
-  _ts_param9(1, Param2("id")),
-  _ts_param9(2, Body2()),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+  _ts_param12(0, Req6()),
+  _ts_param12(1, Param3("id")),
+  _ts_param12(2, Body2()),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     typeof UpdateThreadBody === "undefined" ? Object : UpdateThreadBody
   ]),
-  _ts_metadata11("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "update", null);
-_ts_decorate12([
+_ts_decorate14([
   Post3(":id/promote"),
-  _ts_param9(0, Req4()),
-  _ts_param9(1, Param2("id")),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+  _ts_param12(0, Req6()),
+  _ts_param12(1, Param3("id")),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String
   ]),
-  _ts_metadata11("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "promote", null);
-_ts_decorate12([
-  Delete(":id/from/:messageId"),
-  _ts_param9(0, Req4()),
-  _ts_param9(1, Param2("id")),
-  _ts_param9(2, Param2("messageId")),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+_ts_decorate14([
+  Delete2(":id/from/:messageId"),
+  _ts_param12(0, Req6()),
+  _ts_param12(1, Param3("id")),
+  _ts_param12(2, Param3("messageId")),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     String,
     String
   ]),
-  _ts_metadata11("design:returntype", Promise)
+  _ts_metadata13("design:returntype", Promise)
 ], ThreadsController.prototype, "truncateFrom", null);
-ThreadsController = _ts_decorate12([
-  Controller5("threads"),
-  _ts_param9(1, Inject9(AGENT_ACTOR_RESOLVER4)),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+ThreadsController = _ts_decorate14([
+  Controller7("threads"),
+  _ts_param12(1, Inject12(AGENT_ACTOR_RESOLVER6)),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
 ], ThreadsController);
 
 // src/controller/tool-call.controller.ts
-import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER5 } from "@dudousxd/nestjs-agent-core";
-import { Body as Body3, Controller as Controller6, Inject as Inject10, Post as Post4, Req as Req5 } from "@nestjs/common";
-function _ts_decorate13(decorators, target, key, desc) {
+import { AGENT_ACTOR_RESOLVER as AGENT_ACTOR_RESOLVER7 } from "@dudousxd/nestjs-agent-core";
+import { BadRequestException as BadRequestException4, Body as Body3, Controller as Controller8, Inject as Inject13, Post as Post4, Req as Req7 } from "@nestjs/common";
+function _ts_decorate15(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate13, "_ts_decorate");
-function _ts_metadata12(k, v) {
+__name(_ts_decorate15, "_ts_decorate");
+function _ts_metadata14(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata12, "_ts_metadata");
-function _ts_param10(paramIndex, decorator) {
+__name(_ts_metadata14, "_ts_metadata");
+function _ts_param13(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param10, "_ts_param");
+__name(_ts_param13, "_ts_param");
+var MAX_ANSWERED_QUESTIONS = 100;
+var MAX_VALUES_PER_QUESTION = 100;
+var MAX_ANSWER_VALUE_LENGTH = 4096;
+var MAX_REJECT_REASON_LENGTH = 4096;
+function toolCallId(claimed) {
+  if (typeof claimed !== "string" || claimed.length === 0) {
+    throw new BadRequestException4("toolCallId must be a non-empty string");
+  }
+  return claimed;
+}
+__name(toolCallId, "toolCallId");
+function rejectReason(claimed) {
+  if (claimed === void 0) {
+    return void 0;
+  }
+  if (typeof claimed !== "string") {
+    throw new BadRequestException4("reason must be a string");
+  }
+  if (claimed.length > MAX_REJECT_REASON_LENGTH) {
+    throw new BadRequestException4(`reason must be at most ${MAX_REJECT_REASON_LENGTH} characters`);
+  }
+  return claimed;
+}
+__name(rejectReason, "rejectReason");
+function answers(claimed) {
+  if (claimed === void 0) {
+    return void 0;
+  }
+  if (typeof claimed !== "object" || claimed === null || Array.isArray(claimed)) {
+    throw new BadRequestException4("answers must be an object of questionId \u2192 chosen values");
+  }
+  const entries = Object.entries(claimed);
+  if (entries.length > MAX_ANSWERED_QUESTIONS) {
+    throw new BadRequestException4(`answers may cover at most ${MAX_ANSWERED_QUESTIONS} questions`);
+  }
+  const validated = /* @__PURE__ */ Object.create(null);
+  for (const [questionId, values] of entries) {
+    if (!Array.isArray(values)) {
+      throw new BadRequestException4(`answers["${questionId}"] must be an array of chosen values`);
+    }
+    if (values.length > MAX_VALUES_PER_QUESTION) {
+      throw new BadRequestException4(`answers["${questionId}"] may carry at most ${MAX_VALUES_PER_QUESTION} values`);
+    }
+    for (const value of values) {
+      if (typeof value !== "string") {
+        throw new BadRequestException4(`answers["${questionId}"] must contain only strings`);
+      }
+      if (value.length > MAX_ANSWER_VALUE_LENGTH) {
+        throw new BadRequestException4(`answers["${questionId}"] values must be at most ${MAX_ANSWER_VALUE_LENGTH} characters`);
+      }
+    }
+    validated[questionId] = values;
+  }
+  return validated;
+}
+__name(answers, "answers");
 var ToolCallController = class {
   static {
     __name(this, "ToolCallController");
@@ -1615,46 +2374,88 @@ var ToolCallController = class {
   }
   async approve(req, body) {
     const actor = await this.actorResolver.resolve(req);
-    await this.agent.approve(actor, body.toolCallId);
+    await this.agent.approve(actor, toolCallId(body.toolCallId));
     return {
       ok: true
     };
   }
   async reject(req, body) {
     const actor = await this.actorResolver.resolve(req);
-    await this.agent.reject(actor, body.toolCallId, body.reason);
+    await this.agent.reject(actor, toolCallId(body.toolCallId), rejectReason(body.reason));
+    return {
+      ok: true
+    };
+  }
+  /**
+  * Settle a parked question set. Alongside `approve`/`reject` rather than under a surface of its
+  * own: an elicitation IS a parked tool call, gated by the same ownership check and delivered
+  * through the same signal.
+  */
+  async answer(req, body) {
+    const actor = await this.actorResolver.resolve(req);
+    await this.agent.answer(actor, toolCallId(body.toolCallId), answers(body.answers));
+    return {
+      ok: true
+    };
+  }
+  /** Decline to answer and let the agent proceed on the answers it pre-picked. */
+  async skip(req, body) {
+    const actor = await this.actorResolver.resolve(req);
+    await this.agent.skip(actor, toolCallId(body.toolCallId));
     return {
       ok: true
     };
   }
 };
-_ts_decorate13([
+_ts_decorate15([
   Post4("approve"),
-  _ts_param10(0, Req5()),
-  _ts_param10(1, Body3()),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+  _ts_param13(0, Req7()),
+  _ts_param13(1, Body3()),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof ApproveBody === "undefined" ? Object : ApproveBody
   ]),
-  _ts_metadata12("design:returntype", Promise)
+  _ts_metadata14("design:returntype", Promise)
 ], ToolCallController.prototype, "approve", null);
-_ts_decorate13([
+_ts_decorate15([
   Post4("reject"),
-  _ts_param10(0, Req5()),
-  _ts_param10(1, Body3()),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+  _ts_param13(0, Req7()),
+  _ts_param13(1, Body3()),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
     typeof Request === "undefined" ? Object : Request,
     typeof RejectBody === "undefined" ? Object : RejectBody
   ]),
-  _ts_metadata12("design:returntype", Promise)
+  _ts_metadata14("design:returntype", Promise)
 ], ToolCallController.prototype, "reject", null);
-ToolCallController = _ts_decorate13([
-  Controller6("tool-call"),
-  _ts_param10(1, Inject10(AGENT_ACTOR_RESOLVER5)),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+_ts_decorate15([
+  Post4("answer"),
+  _ts_param13(0, Req7()),
+  _ts_param13(1, Body3()),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
+    typeof AnswerBody === "undefined" ? Object : AnswerBody
+  ]),
+  _ts_metadata14("design:returntype", Promise)
+], ToolCallController.prototype, "answer", null);
+_ts_decorate15([
+  Post4("skip"),
+  _ts_param13(0, Req7()),
+  _ts_param13(1, Body3()),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
+    typeof Request === "undefined" ? Object : Request,
+    typeof ApproveBody === "undefined" ? Object : ApproveBody
+  ]),
+  _ts_metadata14("design:returntype", Promise)
+], ToolCallController.prototype, "skip", null);
+ToolCallController = _ts_decorate15([
+  Controller8("tool-call"),
+  _ts_param13(1, Inject13(AGENT_ACTOR_RESOLVER7)),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
     typeof AgentService === "undefined" ? Object : AgentService,
     typeof ActorResolver === "undefined" ? Object : ActorResolver
   ])
@@ -1662,7 +2463,7 @@ ToolCallController = _ts_decorate13([
 
 // src/discovery/agent-discovery.service.ts
 import { AGENT_PROMPT_CONTRIBUTORS as AGENT_PROMPT_CONTRIBUTORS2, AGENT_REGISTRY as AGENT_REGISTRY3, AgentRegistry as AgentRegistry4 } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject11, Injectable as Injectable7, Logger as Logger2 } from "@nestjs/common";
+import { Inject as Inject14, Injectable as Injectable7, Logger as Logger3 } from "@nestjs/common";
 import { DiscoveryService, MetadataScanner } from "@nestjs/core";
 
 // src/decorator/agent.decorator.ts
@@ -1679,23 +2480,23 @@ var SYSTEM_PROMPT_METADATA = Symbol.for("@dudousxd/nestjs-agent:system-prompt");
 var SYSTEM_PROMPT_CONTRIBUTOR_METADATA = Symbol.for("@dudousxd/nestjs-agent:system-prompt-contributor");
 
 // src/discovery/agent-discovery.service.ts
-function _ts_decorate14(decorators, target, key, desc) {
+function _ts_decorate16(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate14, "_ts_decorate");
-function _ts_metadata13(k, v) {
+__name(_ts_decorate16, "_ts_decorate");
+function _ts_metadata15(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata13, "_ts_metadata");
-function _ts_param11(paramIndex, decorator) {
+__name(_ts_metadata15, "_ts_metadata");
+function _ts_param14(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param11, "_ts_param");
+__name(_ts_param14, "_ts_param");
 var AgentDiscoveryService = class _AgentDiscoveryService {
   static {
     __name(this, "AgentDiscoveryService");
@@ -1704,7 +2505,7 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
   scanner;
   registry;
   contributors;
-  logger = new Logger2(_AgentDiscoveryService.name);
+  logger = new Logger3(_AgentDiscoveryService.name);
   constructor(discovery, scanner, registry, contributors) {
     this.discovery = discovery;
     this.scanner = scanner;
@@ -1743,23 +2544,53 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
       ...meta.maxSteps !== void 0 ? {
         maxSteps: meta.maxSteps
       } : {},
+      ...meta.maxDelegationDepth !== void 0 ? {
+        maxDelegationDepth: meta.maxDelegationDepth
+      } : {},
+      ...meta.maxAgentAppearances !== void 0 ? {
+        maxAgentAppearances: meta.maxAgentAppearances
+      } : {},
+      ...meta.history !== void 0 ? {
+        history: meta.history
+      } : {},
+      ...meta.outputSchema !== void 0 ? {
+        outputSchema: meta.outputSchema
+      } : {},
+      ...meta.intake !== void 0 ? {
+        intake: meta.intake
+      } : {},
+      ...meta.ask !== void 0 ? {
+        ask: meta.ask
+      } : {},
+      ...meta.outputRepairAttempts !== void 0 ? {
+        outputRepairAttempts: meta.outputRepairAttempts
+      } : {},
       ...meta.handoff !== void 0 ? {
-        delegatesTo: this.handoffNames(meta)
+        delegatesTo: this.handoffEdges(meta)
       } : {}
     };
   }
-  /** Resolve each handoff `@Agent` class to its registered name (skipping non-agent classes). */
-  handoffNames(meta) {
-    const names = [];
-    for (const target of meta.handoff ?? []) {
+  /**
+  * Resolve each handoff entry to an {@link AgentDelegation} — its target's registered name, plus
+  * whether that edge detaches (skipping non-agent classes). A bare name is kept for a plain edge
+  * rather than an always-object form, so a definition an older host built by hand still reads.
+  */
+  handoffEdges(meta) {
+    const edges = [];
+    for (const entry of meta.handoff ?? []) {
+      const target = typeof entry === "function" ? entry : entry.agent;
+      const detached = typeof entry === "function" ? false : entry.detached === true;
       const targetMeta = readAgentMetadata(target);
       if (targetMeta === void 0) {
         this.logger.warn(`Agent "${meta.name}" hands off to ${target.name}, which is not an @Agent \u2014 skipped.`);
         continue;
       }
-      names.push(targetMeta.name);
+      edges.push(detached ? {
+        agent: targetMeta.name,
+        detached: true
+      } : targetMeta.name);
     }
-    return names;
+    return edges;
   }
   /** Push every `@SystemPromptContributor()` method on `instance` (bound) into the contributor list. */
   collectContributors(instance) {
@@ -1792,12 +2623,12 @@ var AgentDiscoveryService = class _AgentDiscoveryService {
     return (ctx) => candidate.call(instance, ctx);
   }
 };
-AgentDiscoveryService = _ts_decorate14([
+AgentDiscoveryService = _ts_decorate16([
   Injectable7(),
-  _ts_param11(2, Inject11(AGENT_REGISTRY3)),
-  _ts_param11(3, Inject11(AGENT_PROMPT_CONTRIBUTORS2)),
-  _ts_metadata13("design:type", Function),
-  _ts_metadata13("design:paramtypes", [
+  _ts_param14(2, Inject14(AGENT_REGISTRY3)),
+  _ts_param14(3, Inject14(AGENT_PROMPT_CONTRIBUTORS2)),
+  _ts_metadata15("design:type", Function),
+  _ts_metadata15("design:paramtypes", [
     typeof DiscoveryService === "undefined" ? Object : DiscoveryService,
     typeof MetadataScanner === "undefined" ? Object : MetadataScanner,
     typeof AgentRegistry4 === "undefined" ? Object : AgentRegistry4,
@@ -1806,8 +2637,8 @@ AgentDiscoveryService = _ts_decorate14([
 ], AgentDiscoveryService);
 
 // src/discovery/ai-tool-discovery.service.ts
-import { AGENT_OPTIONS as AGENT_OPTIONS4, AGENT_REGISTRY as AGENT_REGISTRY4, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY2 } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject12, Injectable as Injectable8, Logger as Logger3 } from "@nestjs/common";
+import { AGENT_OPTIONS as AGENT_OPTIONS4, AGENT_REGISTRY as AGENT_REGISTRY4, AGENT_TOOL_REGISTRY as AGENT_TOOL_REGISTRY2, normalizeDelegation as normalizeDelegation2 } from "@dudousxd/nestjs-agent-core";
+import { Inject as Inject15, Injectable as Injectable8, Logger as Logger4 } from "@nestjs/common";
 import { DiscoveryService as DiscoveryService2 } from "@nestjs/core";
 import { z } from "zod";
 
@@ -1827,23 +2658,23 @@ function isBrandedFunctionalTool(value) {
 __name(isBrandedFunctionalTool, "isBrandedFunctionalTool");
 
 // src/discovery/ai-tool-discovery.service.ts
-function _ts_decorate15(decorators, target, key, desc) {
+function _ts_decorate17(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate15, "_ts_decorate");
-function _ts_metadata14(k, v) {
+__name(_ts_decorate17, "_ts_decorate");
+function _ts_metadata16(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata14, "_ts_metadata");
-function _ts_param12(paramIndex, decorator) {
+__name(_ts_metadata16, "_ts_metadata");
+function _ts_param15(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param12, "_ts_param");
+__name(_ts_param15, "_ts_param");
 var AiToolDiscoveryService = class _AiToolDiscoveryService {
   static {
     __name(this, "AiToolDiscoveryService");
@@ -1852,7 +2683,7 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
   registry;
   agents;
   options;
-  logger = new Logger3(_AiToolDiscoveryService.name);
+  logger = new Logger4(_AiToolDiscoveryService.name);
   constructor(discovery, registry, agents, options) {
     this.discovery = discovery;
     this.registry = registry;
@@ -1919,22 +2750,30 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
     }
     let delegates = 0;
     for (const definition of this.agents.list()) {
-      for (const target of definition.delegatesTo ?? []) {
+      for (const edge of definition.delegatesTo ?? []) {
+        const { agent: target, detached } = normalizeDelegation2(edge);
         const targetDefinition = this.agents.get(target);
         if (targetDefinition === void 0) {
           throw new Error(`Agent "${definition.name}" hands off to "${target}", which is not a registered @Agent. Declare it as an @Agent provider or fix the reference.`);
         }
-        const name = delegateToolName(target);
+        const name = delegateToolName({
+          target,
+          detached
+        });
         if (this.registry.has(name)) {
           continue;
         }
         const targetBlurb = typeof targetDefinition.systemPrompt === "string" ? ` It is: ${targetDefinition.systemPrompt}` : "";
+        const description = detached ? `Start the "${target}" agent working on a task in the BACKGROUND. Returns immediately with a receipt, NOT an answer \u2014 the answer is delivered to this conversation as a separate message later. Use it for work the user does not need to sit and wait for.${targetBlurb}` : `Delegate a task to the "${target}" agent and get its answer.${targetBlurb}`;
         this.registry.register(
           {
             name,
             kind: "agent",
             targetAgent: target,
-            description: `Delegate a task to the "${target}" agent and get its answer.${targetBlurb}`,
+            ...detached ? {
+              detached: true
+            } : {},
+            description,
             inputSchema: z.object({
               task: z.string()
             })
@@ -1962,13 +2801,13 @@ var AiToolDiscoveryService = class _AiToolDiscoveryService {
     return true;
   }
 };
-AiToolDiscoveryService = _ts_decorate15([
+AiToolDiscoveryService = _ts_decorate17([
   Injectable8(),
-  _ts_param12(1, Inject12(AGENT_TOOL_REGISTRY2)),
-  _ts_param12(2, Inject12(AGENT_REGISTRY4)),
-  _ts_param12(3, Inject12(AGENT_OPTIONS4)),
-  _ts_metadata14("design:type", Function),
-  _ts_metadata14("design:paramtypes", [
+  _ts_param15(1, Inject15(AGENT_TOOL_REGISTRY2)),
+  _ts_param15(2, Inject15(AGENT_REGISTRY4)),
+  _ts_param15(3, Inject15(AGENT_OPTIONS4)),
+  _ts_metadata16("design:type", Function),
+  _ts_metadata16("design:paramtypes", [
     typeof DiscoveryService2 === "undefined" ? Object : DiscoveryService2,
     typeof ToolRegistry === "undefined" ? Object : ToolRegistry,
     typeof AgentRegistry === "undefined" ? Object : AgentRegistry,
@@ -1976,6 +2815,95 @@ AiToolDiscoveryService = _ts_decorate15([
   ])
 ], AiToolDiscoveryService);
 
+// src/discovery/skill-discovery.service.ts
+import { AGENT_SKILL_SOURCES } from "@dudousxd/nestjs-agent-core";
+import { Inject as Inject16, Injectable as Injectable9, Logger as Logger5 } from "@nestjs/common";
+import { DiscoveryService as DiscoveryService3 } from "@nestjs/core";
+
+// src/decorator/skill.decorator.ts
+import "reflect-metadata";
+import { GLOBAL_SCOPE } from "@dudousxd/nestjs-agent-core";
+var SKILL_METADATA = Symbol.for("@dudousxd/nestjs-agent:skill-metadata");
+function readSkillMetadata(target) {
+  return Reflect.getMetadata(SKILL_METADATA, target);
+}
+__name(readSkillMetadata, "readSkillMetadata");
+function skillScope(options) {
+  return options.scope ?? GLOBAL_SCOPE;
+}
+__name(skillScope, "skillScope");
+
+// src/discovery/skill-discovery.service.ts
+function _ts_decorate18(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate18, "_ts_decorate");
+function _ts_metadata17(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata17, "_ts_metadata");
+function _ts_param16(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param16, "_ts_param");
+var SkillDiscoveryService = class _SkillDiscoveryService {
+  static {
+    __name(this, "SkillDiscoveryService");
+  }
+  discovery;
+  declared;
+  logger = new Logger5(_SkillDiscoveryService.name);
+  constructor(discovery, declared) {
+    this.discovery = discovery;
+    this.declared = declared;
+  }
+  onModuleInit() {
+    for (const wrapper of this.discovery.getProviders()) {
+      const instance = wrapper.instance;
+      if (instance === null || typeof instance !== "object") {
+        continue;
+      }
+      const meta = readSkillMetadata(instance.constructor);
+      if (meta === void 0) {
+        continue;
+      }
+      const body = this.bodyOf(instance, meta.body);
+      if (body === void 0) {
+        this.logger.warn(`Skill "${meta.name}" declares no body \u2014 add a \`body()\` method or \`@Skill({ body })\`. Skipped.`);
+        continue;
+      }
+      this.declared.push({
+        name: meta.name,
+        description: meta.description,
+        scope: skillScope(meta),
+        body
+      });
+    }
+  }
+  /** The instance's `body()` method (bound), else the flat string, else nothing to offer. */
+  bodyOf(instance, flat) {
+    const candidate = instance.body;
+    if (typeof candidate === "function") {
+      return (ctx) => candidate.call(instance, ctx);
+    }
+    return flat === void 0 ? void 0 : () => flat;
+  }
+};
+SkillDiscoveryService = _ts_decorate18([
+  Injectable9(),
+  _ts_param16(1, Inject16(AGENT_SKILL_SOURCES)),
+  _ts_metadata17("design:type", Function),
+  _ts_metadata17("design:paramtypes", [
+    typeof DiscoveryService3 === "undefined" ? Object : DiscoveryService3,
+    Array
+  ])
+], SkillDiscoveryService);
+
 // src/ledger-quota-store.ts
 var LedgerQuotaStore = class {
   static {
@@ -1995,38 +2923,44 @@ var LedgerQuotaStore = class {
       withinLimit: usedTokens < this.limitTokens
     };
   }
-  async bump() {
+  async bump(_actorRef, _day, _tokens) {
   }
 };
 
 // src/runner/inline-agent-runner.ts
-import { AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY5, AGENT_STORE as AGENT_STORE4, QuotaExceededError as QuotaExceededError2, publishAgentRunFailed as publishAgentRunFailed2, runAgentLoop as runAgentLoop2 } from "@dudousxd/nestjs-agent-core";
-import { Inject as Inject13, Injectable as Injectable9, Logger as Logger4 } from "@nestjs/common";
-function _ts_decorate16(decorators, target, key, desc) {
+import { AGENT_DEPS_FACTORY as AGENT_DEPS_FACTORY5, AGENT_STORE as AGENT_STORE5, RunCancelledError as RunCancelledError2, agentFailureCode as agentFailureCode2, encodeStreamEvent as encodeStreamEvent2, publishAgentRunFailed as publishAgentRunFailed2, runAgentLoop as runAgentLoop2, settleAll as settleAll2, settleUnsettledDelegation as settleUnsettledDelegation2 } from "@dudousxd/nestjs-agent-core";
+import { Inject as Inject17, Injectable as Injectable10, Logger as Logger6 } from "@nestjs/common";
+function _ts_decorate19(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate16, "_ts_decorate");
-function _ts_metadata15(k, v) {
+__name(_ts_decorate19, "_ts_decorate");
+function _ts_metadata18(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata15, "_ts_metadata");
-function _ts_param13(paramIndex, decorator) {
+__name(_ts_metadata18, "_ts_metadata");
+function _ts_param17(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param13, "_ts_param");
+__name(_ts_param17, "_ts_param");
 var InlineAgentRunner = class _InlineAgentRunner {
   static {
     __name(this, "InlineAgentRunner");
   }
   factory;
   store;
-  logger = new Logger4(_InlineAgentRunner.name);
+  logger = new Logger6(_InlineAgentRunner.name);
   pending = /* @__PURE__ */ new Map();
+  /**
+  * Runs someone has asked to stop. In-process, like `pending`, and for the same reason: this runner
+  * is single-replica by construction, so the request is readable by the only loop that could be
+  * running it. A cancelled id is dropped once the run settles, so the set tracks live runs only.
+  */
+  cancelled = /* @__PURE__ */ new Set();
   constructor(factory, store) {
     this.factory = factory;
     this.store = store;
@@ -2035,13 +2969,29 @@ var InlineAgentRunner = class _InlineAgentRunner {
     const runId = crypto.randomUUID();
     const day = input.day ?? utcDay();
     const deps = this.factory.forAgent(input.agentName);
-    const hooks = this.topLevelHooks(runId, deps, input.actor, day);
+    const hooks = this.topLevelHooks({
+      runId,
+      deps,
+      actor: input.actor,
+      day,
+      threadId: input.threadId,
+      chainBelow: [
+        ...input.delegationPath ?? [],
+        ...input.agentName !== void 0 ? [
+          input.agentName
+        ] : []
+      ]
+    });
     void runAgentLoop2({
       ...deps,
       day
     }, input, hooks).then(() => this.store.setActiveStream(input.threadId, null)).catch(async (error) => {
+      if (error instanceof RunCancelledError2) {
+        await this.settleCancelled(runId, input.threadId, deps);
+        return;
+      }
       const message = error instanceof Error ? error.message : String(error);
-      const code = error instanceof QuotaExceededError2 ? "quota_exceeded" : "run_failed";
+      const code = agentFailureCode2(error);
       this.logger.error(`agent run ${runId} failed (${code}): ${message}`);
       publishAgentRunFailed2({
         runId,
@@ -2060,33 +3010,216 @@ var InlineAgentRunner = class _InlineAgentRunner {
         code,
         message
       });
-    });
+    }).finally(() => this.cancelled.delete(runId));
     return {
       runId
     };
   }
-  async signal(runId, toolCallId, decision) {
-    const key = `${runId}:${toolCallId}`;
-    const resolve = this.pending.get(key);
-    if (resolve !== void 0) {
+  async signal(runId, toolCallId2, reply) {
+    const key = `${runId}:${toolCallId2}`;
+    const waiter = this.pending.get(key);
+    if (waiter !== void 0) {
       this.pending.delete(key);
-      resolve(decision);
+      waiter.resolve(reply);
     }
   }
+  /**
+  * Ask a run to stop, and settle whatever it was parked on.
+  *
+  * The loop observes the request at its next safe point (between steps, before the turn's tools) and
+  * unwinds from there — so a tool already executing is left to finish, and its result is recorded
+  * exactly as it would have been. What this cannot wait for is a turn parked on a human: that wait
+  * is a promise nobody is going to resolve, so it is REJECTED here with the same
+  * {@link RunCancelledError} the loop would have thrown, and the run unwinds through the identical
+  * path.
+  *
+  * Settlement — the run row, the thread's active stream, the stream's terminal — belongs to the
+  * `RunCancelledError` catch in `start`, so a cancel and an ordinary failure settle in one place
+  * each and can never both write.
+  */
   async cancel(runId) {
-    const deps = this.factory.forAgent();
+    this.cancelled.add(runId);
+    for (const [key, waiter] of this.pending) {
+      if (key.startsWith(`${runId}:`)) {
+        this.pending.delete(key);
+        waiter.reject(new RunCancelledError2());
+      }
+    }
+    await Promise.resolve();
+  }
+  /**
+  * The single place a cancelled run's state is settled: recorded as its own terminal (never
+  * `failed` — a user pressing Stop must not land in someone's error rate), the thread released, and
+  * the stream ENDED after a `cancelled` frame rather than failed, so a client that retries failed
+  * streams does not retry this one.
+  */
+  async settleCancelled(runId, threadId, deps) {
+    this.logger.log(`agent run ${runId} cancelled`);
+    await this.store.setActiveStream(threadId, null);
     const writer = await deps.sink.open(runId);
+    await writer.write(encodeStreamEvent2({
+      kind: "cancelled"
+    }));
     await writer.end();
+    await this.store.recordRunEnd?.({
+      runId,
+      status: "cancelled"
+    });
+  }
+  /**
+  * Park a run on a human, keyed by run + tool call. One map for approvals and for question-set
+  * answers alike: both wait on the same key, and `signal` cannot tell (or need to tell) which
+  * shape it is delivering — the loop asked for one and only ever gets what the caller sent. A
+  * cancel settles the wait too, by rejecting it.
+  */
+  park(runId, toolCallId2) {
+    return new Promise((resolve, reject) => {
+      this.pending.set(`${runId}:${toolCallId2}`, {
+        resolve,
+        reject
+      });
+    });
   }
-  topLevelHooks(runId, deps, actor, day) {
+  topLevelHooks(args) {
+    const { runId, deps, actor, day, threadId, chainBelow } = args;
     return {
       runId,
       openSink: /* @__PURE__ */ __name(() => deps.sink.open(runId), "openSink"),
-      awaitApproval: /* @__PURE__ */ __name((call) => new Promise((resolve) => {
-        this.pending.set(`${runId}:${call.id}`, resolve);
-      }), "awaitApproval"),
+      awaitApproval: /* @__PURE__ */ __name((call) => this.park(runId, call.id), "awaitApproval"),
+      awaitAnswers: /* @__PURE__ */ __name((request) => this.park(runId, request.id), "awaitAnswers"),
+      step: /* @__PURE__ */ __name((_name, fn) => fn(), "step"),
+      parallel: settleAll2,
+      cancelled: /* @__PURE__ */ __name(async () => this.cancelled.has(runId), "cancelled"),
+      runAgent: /* @__PURE__ */ __name((agentName, task) => this.runNested({
+        agentName,
+        task,
+        actor,
+        day,
+        depth: 1,
+        path: chainBelow,
+        sinkRunId: runId,
+        parentRunId: runId
+      }), "runAgent"),
+      startAgent: /* @__PURE__ */ __name(({ agentName, task, toolCallId: toolCallId2 }) => this.startDetached({
+        agentName,
+        task,
+        actor,
+        day,
+        depth: 1,
+        path: chainBelow,
+        parentRunId: runId,
+        deliverTo: {
+          threadId,
+          toolCallId: toolCallId2
+        }
+      }), "startAgent")
+    };
+  }
+  /**
+  * Delegate WITHOUT waiting: a nested loop nobody awaits, on its own thread and its own sink, which
+  * posts its answer back into the delegating thread when it lands (`deliverTo`, settled by the
+  * loop). The calling turn gets the run id straight back and finishes.
+  *
+  * No `sinkRunId`, unlike {@link runNested}: forwarding into the stream the human is watching would
+  * write into a turn that has already ended. Its own approvals resolve through the shared pending
+  * map keyed by its own runId — which is what the pending-approvals surface routes to.
+  */
+  async startDetached(args) {
+    const { agentName, task, actor, day, depth, path, parentRunId, deliverTo } = args;
+    const subThread = await this.store.createThread({
+      actor,
+      transient: true
+    });
+    const runId = crypto.randomUUID();
+    await this.store.setActiveStream(subThread.id, runId);
+    const deps = this.factory.forAgent(agentName);
+    const hooks = {
+      runId,
+      openSink: /* @__PURE__ */ __name(() => deps.sink.open(runId), "openSink"),
+      awaitApproval: /* @__PURE__ */ __name((call) => this.park(runId, call.id), "awaitApproval"),
+      awaitAnswers: /* @__PURE__ */ __name((request) => this.park(runId, request.id), "awaitAnswers"),
       step: /* @__PURE__ */ __name((_name, fn) => fn(), "step"),
-      runAgent: /* @__PURE__ */ __name((agentName, task) => this.runNested(agentName, task, actor, day, 1, runId), "runAgent")
+      parallel: settleAll2,
+      cancelled: /* @__PURE__ */ __name(async () => this.cancelled.has(runId), "cancelled"),
+      runAgent: /* @__PURE__ */ __name((childName, childTask) => this.runNested({
+        agentName: childName,
+        task: childTask,
+        actor,
+        day,
+        depth: depth + 1,
+        path: [
+          ...path,
+          agentName
+        ],
+        // A detached run owns a stream of its own, so ITS sub-agents forward into that one.
+        sinkRunId: runId,
+        parentRunId: runId
+      }), "runAgent"),
+      startAgent: /* @__PURE__ */ __name(({ agentName: childName, task: childTask, toolCallId: toolCallId2 }) => this.startDetached({
+        agentName: childName,
+        task: childTask,
+        actor,
+        day,
+        depth: depth + 1,
+        path: [
+          ...path,
+          agentName
+        ],
+        parentRunId: runId,
+        deliverTo: {
+          threadId: subThread.id,
+          toolCallId: toolCallId2
+        }
+      }), "startAgent")
+    };
+    void runAgentLoop2({
+      ...deps,
+      day
+    }, {
+      threadId: subThread.id,
+      actor,
+      userText: task,
+      agentName,
+      day,
+      delegationDepth: depth,
+      delegationPath: path,
+      parentRunId,
+      deliverTo
+    }, hooks).catch(async (error) => {
+      const cancelled = error instanceof RunCancelledError2;
+      const message = error instanceof Error ? error.message : String(error);
+      if (!cancelled) {
+        this.logger.error(`detached agent run ${runId} failed: ${message}`);
+        publishAgentRunFailed2({
+          runId,
+          code: agentFailureCode2(error),
+          message
+        });
+      }
+      await this.store.recordRunEnd?.({
+        runId,
+        status: cancelled ? "cancelled" : "failed",
+        ...cancelled ? {} : {
+          errorCode: agentFailureCode2(error),
+          errorMessage: message
+        }
+      });
+      await settleUnsettledDelegation2({
+        store: this.store,
+        delivery: deliverTo,
+        agent: agentName,
+        runId,
+        status: cancelled ? "cancelled" : "failed",
+        ...cancelled ? {} : {
+          error: message
+        }
+      });
+    }).finally(async () => {
+      this.cancelled.delete(runId);
+      await this.store.setActiveStream(subThread.id, null);
+    });
+    return {
+      runId
     };
   }
   /**
@@ -2094,7 +3227,8 @@ var InlineAgentRunner = class _InlineAgentRunner {
   * (the top-level run the human is watching) so its output and any pending action tool are visible,
   * and its own approvals resolve through the shared pending map keyed by its own runId.
   */
-  async runNested(agentName, task, actor, day, depth, sinkRunId) {
+  async runNested(args) {
+    const { agentName, task, actor, day, depth, path, sinkRunId, parentRunId } = args;
     const subThread = await this.store.createThread({
       actor,
       transient: true
@@ -2106,11 +3240,42 @@ var InlineAgentRunner = class _InlineAgentRunner {
       runId,
       // Forward into the top-level stream; the top-level run owns end/fail on that shared sink.
       openSink: /* @__PURE__ */ __name(async () => childSinkWriter(await deps.sink.open(sinkRunId)), "openSink"),
-      awaitApproval: /* @__PURE__ */ __name((call) => new Promise((resolve) => {
-        this.pending.set(`${runId}:${call.id}`, resolve);
-      }), "awaitApproval"),
+      awaitApproval: /* @__PURE__ */ __name((call) => this.park(runId, call.id), "awaitApproval"),
+      awaitAnswers: /* @__PURE__ */ __name((request) => this.park(runId, request.id), "awaitAnswers"),
       step: /* @__PURE__ */ __name((_name, fn) => fn(), "step"),
-      runAgent: /* @__PURE__ */ __name((childName, childTask) => this.runNested(childName, childTask, actor, day, depth + 1, sinkRunId), "runAgent")
+      parallel: settleAll2,
+      // A child stops when it is cancelled OR when the run a human is actually watching is: the
+      // canceller names the top-level run, which is the only id that ever left the server.
+      cancelled: /* @__PURE__ */ __name(async () => this.cancelled.has(runId) || this.cancelled.has(sinkRunId), "cancelled"),
+      runAgent: /* @__PURE__ */ __name((childName, childTask) => this.runNested({
+        agentName: childName,
+        task: childTask,
+        actor,
+        day,
+        depth: depth + 1,
+        path: [
+          ...path,
+          agentName
+        ],
+        sinkRunId,
+        parentRunId: runId
+      }), "runAgent"),
+      startAgent: /* @__PURE__ */ __name(({ agentName: childName, task: childTask, toolCallId: toolCallId2 }) => this.startDetached({
+        agentName: childName,
+        task: childTask,
+        actor,
+        day,
+        depth: depth + 1,
+        path: [
+          ...path,
+          agentName
+        ],
+        parentRunId: runId,
+        deliverTo: {
+          threadId: subThread.id,
+          toolCallId: toolCallId2
+        }
+      }), "startAgent")
     };
     try {
       return await runAgentLoop2({
@@ -2123,6 +3288,8 @@ var InlineAgentRunner = class _InlineAgentRunner {
         agentName,
         day,
         delegationDepth: depth,
+        delegationPath: path,
+        parentRunId,
         sinkRunId
       }, hooks);
     } finally {
@@ -2130,25 +3297,63 @@ var InlineAgentRunner = class _InlineAgentRunner {
     }
   }
 };
-InlineAgentRunner = _ts_decorate16([
-  Injectable9(),
-  _ts_param13(0, Inject13(AGENT_DEPS_FACTORY5)),
-  _ts_param13(1, Inject13(AGENT_STORE4)),
-  _ts_metadata15("design:type", Function),
-  _ts_metadata15("design:paramtypes", [
+InlineAgentRunner = _ts_decorate19([
+  Injectable10(),
+  _ts_param17(0, Inject17(AGENT_DEPS_FACTORY5)),
+  _ts_param17(1, Inject17(AGENT_STORE5)),
+  _ts_metadata18("design:type", Function),
+  _ts_metadata18("design:paramtypes", [
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
     typeof AgentStore === "undefined" ? Object : AgentStore
   ])
 ], InlineAgentRunner);
 
+// src/skills-config.ts
+import { compositeSkillProvider } from "@dudousxd/nestjs-agent-core";
+function declaredSkillProvider(declared) {
+  return {
+    list: /* @__PURE__ */ __name(({ scopes }) => declared.filter((skill) => scopes.includes(skill.scope)).map(({ name, description, scope }) => ({
+      name,
+      description,
+      scope
+    })), "list"),
+    load: /* @__PURE__ */ __name(async ({ name, scope, ctx }) => {
+      const match = declared.find((skill) => skill.name === name && skill.scope === scope);
+      return match === void 0 ? null : await match.body(ctx);
+    }, "load")
+  };
+}
+__name(declaredSkillProvider, "declaredSkillProvider");
+function resolveSkillsConfig(options, declared) {
+  if (options === void 0) {
+    return void 0;
+  }
+  const providers = options.provider === void 0 ? [
+    declaredSkillProvider(declared)
+  ] : [
+    options.provider,
+    declaredSkillProvider(declared)
+  ];
+  return {
+    provider: providers.length === 1 ? providers[0] : compositeSkillProvider(providers),
+    ...options.scopes !== void 0 ? {
+      scopes: options.scopes
+    } : {},
+    ...options.maxSkills !== void 0 ? {
+      maxSkills: options.maxSkills
+    } : {}
+  };
+}
+__name(resolveSkillsConfig, "resolveSkillsConfig");
+
 // src/agent.module.ts
-function _ts_decorate17(decorators, target, key, desc) {
+function _ts_decorate20(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate17, "_ts_decorate");
+__name(_ts_decorate20, "_ts_decorate");
 var DEFAULT_PATH = "agent";
 function sharedProviders(durable, includeStore) {
   const providers = [
@@ -2166,8 +3371,34 @@ function sharedProviders(durable, includeStore) {
       provide: AGENT_PROMPT_CONTRIBUTORS3,
       useFactory: /* @__PURE__ */ __name(() => [], "useFactory")
     },
+    // Likewise for `@Skill`-decorated providers — filled by SkillDiscoveryService at onModuleInit,
+    // read lazily by the AGENT_SKILLS provider below (which DI builds before discovery has run).
+    {
+      provide: AGENT_SKILL_SOURCES2,
+      useFactory: /* @__PURE__ */ __name(() => [], "useFactory")
+    },
+    {
+      // One resolution, shared by the loop's deps and the listing endpoint: a second one would
+      // drift, and a user would be offered a skill the agent cannot reach. `undefined` when the
+      // host configured none — which is what keeps the turn's checkpoint sequence unchanged.
+      provide: AGENT_SKILLS3,
+      useFactory: /* @__PURE__ */ __name((options, declared) => resolveSkillsConfig(options.skills, declared), "useFactory"),
+      inject: [
+        AGENT_OPTIONS5,
+        AGENT_SKILL_SOURCES2
+      ]
+    },
+    {
+      // One resolution, shared by the loop's deps and the read-back endpoint: a person has to be
+      // shown what the model was shown, and two resolutions would eventually disagree about that.
+      provide: AGENT_MEMORY3,
+      useFactory: /* @__PURE__ */ __name((options) => options.memory, "useFactory"),
+      inject: [
+        AGENT_OPTIONS5
+      ]
+    },
     {
-      provide: AGENT_SINK3,
+      provide: AGENT_SINK4,
       useFactory: /* @__PURE__ */ __name((options) => options.sink ?? new InProcessTokenStreamSink(), "useFactory"),
       inject: [
         AGENT_OPTIONS5
@@ -2181,7 +3412,7 @@ function sharedProviders(durable, includeStore) {
       ]
     },
     {
-      provide: AGENT_ACTOR_RESOLVER6,
+      provide: AGENT_ACTOR_RESOLVER8,
       useFactory: /* @__PURE__ */ __name((options) => options.actorResolver, "useFactory"),
       inject: [
         AGENT_OPTIONS5
@@ -2202,7 +3433,7 @@ function sharedProviders(durable, includeStore) {
       useFactory: /* @__PURE__ */ __name((o, store) => o.quota ?? (o.quotaLimitTokens !== void 0 ? new LedgerQuotaStore(store, o.quotaLimitTokens) : void 0), "useFactory"),
       inject: [
         AGENT_OPTIONS5,
-        AGENT_STORE5
+        AGENT_STORE6
       ]
     },
     AgentDepsFactory2,
@@ -2214,6 +3445,7 @@ function sharedProviders(durable, includeStore) {
     // handoff tools (onApplicationBootstrap) reads the registry.
     AgentDiscoveryService,
     AiToolDiscoveryService,
+    SkillDiscoveryService,
     InlineAgentRunner,
     AgentService,
     // Bound ALWAYS (durable or inline) — the console's cross-thread approvals inbox routes decisions
@@ -2226,7 +3458,7 @@ function sharedProviders(durable, includeStore) {
   ];
   if (includeStore) {
     providers.push({
-      provide: AGENT_STORE5,
+      provide: AGENT_STORE6,
       useFactory: /* @__PURE__ */ __name((o) => o.store, "useFactory"),
       inject: [
         AGENT_OPTIONS5
@@ -2263,15 +3495,17 @@ function exportsFor(includeStore) {
     AGENT_OPTIONS5,
     AGENT_TOOL_REGISTRY3,
     AGENT_REGISTRY5,
-    AGENT_SINK3,
+    AGENT_SINK4,
     AGENT_ROLES_POLICY2,
-    AGENT_ACTOR_RESOLVER6,
+    AGENT_ACTOR_RESOLVER8,
     AGENT_MODEL2,
     ...includeStore ? [
-      AGENT_STORE5
+      AGENT_STORE6
     ] : [],
     AGENT_QUOTA_STORE3,
     AGENT_PROMPT_CONTRIBUTORS3,
+    AGENT_SKILLS3,
+    AGENT_MEMORY3,
     AGENT_DEPS_FACTORY6,
     AgentDepsFactory2,
     AgentService,
@@ -2285,7 +3519,9 @@ var BASE_CONTROLLERS = [
   ThreadsController,
   ToolCallController,
   QuotaController,
-  AgentsController
+  AgentsController,
+  SkillsController,
+  MemoriesController
 ];
 var GUARDABLE_CONTROLLERS = [
   ...BASE_CONTROLLERS,
@@ -2400,7 +3636,7 @@ var AgentModule = class _AgentModule {
     };
   }
 };
-AgentModule = _ts_decorate17([
+AgentModule = _ts_decorate20([
   Global2(),
   Module2({})
 ], AgentModule);