@dudousxd/nestjs-agent 1.17.0 → 1.18.0

package/dist/durable/index.cjs

@@ -30,10 +30,10 @@ __export(durable_exports, {
 module.exports = __toCommonJS(durable_exports);
 
 // src/durable/agent-run.workflow.ts
-var import_nestjs_agent_core3 = require("@dudousxd/nestjs-agent-core");
+var import_nestjs_agent_core2 = require("@dudousxd/nestjs-agent-core");
 var import_nestjs_durable2 = require("@dudousxd/nestjs-durable");
 var import_nestjs_durable_core2 = require("@dudousxd/nestjs-durable-core");
-var import_common3 = require("@nestjs/common");
+var import_common2 = require("@nestjs/common");
 
 // src/agent-deps.ts
 function utcDay(date = /* @__PURE__ */ new Date()) {
@@ -51,9 +51,26 @@ function childSinkWriter(writer) {
 }
 __name(childSinkWriter, "childSinkWriter");
 
-// src/queue/chat-queue.service.ts
+// src/queue/chat-queue.token.ts
+var AGENT_CHAT_QUEUE = /* @__PURE__ */ Symbol.for("@dudousxd/nestjs-agent:chat-queue");
+
+// src/durable/agent-run.steps.ts
 var import_nestjs_agent_core = require("@dudousxd/nestjs-agent-core");
+var import_nestjs_durable = require("@dudousxd/nestjs-durable");
 var import_common = require("@nestjs/common");
+
+// src/durable/outside-workflow-ctx.ts
+var import_nestjs_durable_core = require("@dudousxd/nestjs-durable-core");
+function outsideWorkflowCtx(fn) {
+  return (0, import_nestjs_durable_core.runInWorkflowCtx)(void 0, fn);
+}
+__name(outsideWorkflowCtx, "outsideWorkflowCtx");
+function stepOf(ctx) {
+  return (name, fn, ...rest) => ctx.localStep(name, (...args) => outsideWorkflowCtx(() => fn(...args)), ...rest);
+}
+__name(stepOf, "stepOf");
+
+// src/durable/agent-run.steps.ts
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -80,737 +97,296 @@ function _ts_param(paramIndex, decorator) {
   };
 }
 __name(_ts_param, "_ts_param");
-var MAX_DRAIN_ATTEMPTS = 8;
-var ChatQueueService = class _ChatQueueService {
+var AgentRunSteps = class {
   static {
-    __name(this, "ChatQueueService");
+    __name(this, "AgentRunSteps");
+  }
+  factory;
+  constructor(factory) {
+    this.factory = factory;
   }
-  store;
-  sink;
-  quotaProvider;
-  options;
-  staging;
-  logger = new import_common.Logger(_ChatQueueService.name);
   /**
-  * Runs this process claimed a thread for and has not handed to a runner yet. A holder in here is
-  * alive whatever the runner says — it simply has not registered the run yet.
+  * Retryable: every side effect (persist/quota/stream markers) happens loop-side under
+  * `hooks.step`, so a durable retry only re-runs the model call and re-streams its tokens — never
+  * double-writes. NEVER call `writer.end()`/`fail()` here: the workflow owns the stream's lifecycle,
+  * across however many turns/retries it takes.
   */
-  starting = /* @__PURE__ */ new Set();
-  constructor(store, sink, quotaProvider, options, staging) {
-    this.store = store;
-    this.sink = sink;
-    this.quotaProvider = quotaProvider;
-    this.options = options;
-    this.staging = staging;
-  }
-  /** Whether the bound store can hold a queue. Without one, a busy thread is not queued. */
-  get supported() {
-    return (0, import_nestjs_agent_core.isChatQueueStore)(this.store);
+  llm(input) {
+    return outsideWorkflowCtx(() => this.runLlm(input));
   }
-  /** The bound store as a queue store, or a 501 naming what is missing. */
-  queueStore() {
-    if (!(0, import_nestjs_agent_core.isChatQueueStore)(this.store)) {
-      throw new import_common.NotImplementedException("Queueing messages requires an AgentStore that implements ChatQueueStore (enqueueMessage, listQueue, \u2026, claimActiveStream, releaseActiveStream); the bound store does not.");
+  async runLlm(input) {
+    const deps = this.factory.forAgent(input.agentName);
+    const tools = (0, import_nestjs_agent_core.withMemoryTool)({
+      tools: (0, import_nestjs_agent_core.withSkillTool)({
+        tools: (0, import_nestjs_agent_core.withAskTool)({
+          tools: await deps.registry.definitionsFor(input.actor, deps.rolesPolicy, deps.toolAllowList, {
+            ...input.threadId !== void 0 ? {
+              threadId: input.threadId
+            } : {},
+            ...input.agentName !== void 0 ? {
+              agentName: input.agentName
+            } : {}
+          }),
+          ask: deps.ask
+        }),
+        enabled: deps.skills !== void 0
+      }),
+      enabled: deps.memory?.provider.write !== void 0
+    });
+    const buffer = input.bufferOutput === true ? (0, import_nestjs_agent_core.createFrameBuffer)() : void 0;
+    let writer;
+    if (buffer !== void 0) {
+      writer = buffer.writer;
+    } else {
+      const opened = await deps.sink.open(input.sinkRunId);
+      writer = input.childSink ? childSinkWriter(opened) : opened;
     }
-    return this.store;
-  }
-  async state(threadId) {
-    const store = this.queueStore();
-    const [items, paused] = await Promise.all([
-      store.listQueue(threadId),
-      store.queuePause(threadId)
-    ]);
-    return {
-      items: items.map(import_nestjs_agent_core.queuedMessageView),
-      paused
+    const frames = (0, import_nestjs_agent_core.observeTurnFrames)(writer);
+    const turn = (0, import_nestjs_agent_core.withTurnFrames)(await (0, import_nestjs_agent_core.traceLlmTurn)(input.runId, input.step, () => deps.model.runTurn({
+      system: input.system,
+      messages: input.messages,
+      tools,
+      sink: frames.writer,
+      ...input.model !== void 0 ? {
+        model: input.model
+      } : {}
+    })), frames.summary());
+    const stamped = (0, import_nestjs_agent_core.stampToolKinds)(turn, deps);
+    return buffer === void 0 ? stamped : {
+      ...stamped,
+      bufferedFrames: buffer.frames()
     };
   }
   /**
-  * Whether `holder` is still running. A run this process is about to start is; otherwise the
-  * runner decides, and a runner that cannot tell says yes.
+  * NO DURABLE retries — a tool may not be idempotent (a bare `@Step()` carries none, unlike `llm`
+  * above). What it does retry, in place, is a CLASSIFIED-TRANSIENT error from the tool's own
+  * invocation (a DB deadlock, a lock-wait timeout — see `isTransientToolError`): the server rolled
+  * that work back, so re-invoking it is safe, and doing it here (inside this one step, never a new
+  * checkpoint) is exactly how the non-dispatched loop path handles it too. The timeout is applied
+  * HERE, handler-side, via `withToolTimeout` — never as a durable dispatch `timeoutMs`, which
+  * bounds engine liveness (retryable) rather than the tool's own business outcome — and per
+  * ATTEMPT, so a retried invocation gets its own fresh timeout window.
   */
-  async isAlive(holder, runner) {
-    if (this.starting.has(holder)) {
-      return true;
-    }
-    if (typeof runner.isRunActive !== "function") {
-      return true;
-    }
-    try {
-      return await runner.isRunActive(holder);
-    } catch {
-      return true;
-    }
+  tool(input) {
+    return outsideWorkflowCtx(() => this.runTool(input));
   }
-  /**
-  * The run holding `threadId`, or `null` when it is free — a holder the runner reports dead counts
-  * as free, and is returned as `stale` so the caller can claim over it.
-  */
-  async holder(threadId, runner) {
-    const holder = await this.queueStore().activeRunForThread(threadId);
-    if (holder === null) {
-      return {
-        live: null,
-        stale: null
-      };
+  async runTool(input) {
+    const deps = this.factory.forAgent(input.ctx.agentName);
+    if (deps.registry.spec(input.toolName)?.kind === "action" && input.toolType !== "action") {
+      throw new Error(`tool "${input.toolName}" is an action tool but was dispatched without approval: the dispatching process resolved its kind against a registry that does not have it`);
     }
-    return await this.isAlive(holder, runner) ? {
-      live: holder,
-      stale: null
-    } : {
-      live: null,
-      stale: holder
+    const sinkRunId = input.sinkRunId;
+    let opened;
+    const ui = (0, import_nestjs_agent_core.createUiCollector)(input.toolCallId, sinkRunId === void 0 ? void 0 : async (event) => {
+      opened ??= Promise.resolve(deps.sink.open(sinkRunId)).then((writer) => input.childSink === true ? childSinkWriter(writer) : writer);
+      await (await opened).write((0, import_nestjs_agent_core.encodeStreamEvent)(event));
+    });
+    const ctx = {
+      ...(0, import_nestjs_agent_core.toolCallContext)(input.ctx, input.toolCallId),
+      emitUi: ui.emit
+    };
+    const localClassify = deps.toolTransientRetry !== false ? deps.toolTransientRetry?.classify : void 0;
+    const transientRetry = input.transientRetry === false ? false : {
+      attempts: input.transientRetry.attempts,
+      backoffMs: input.transientRetry.backoffMs,
+      ...localClassify !== void 0 ? {
+        classify: localClassify
+      } : {}
     };
+    const output = await (0, import_nestjs_agent_core.traceToolExecution)(input.ctx.runId, {
+      toolCallId: input.toolCallId,
+      toolName: input.toolName,
+      toolType: input.toolType
+    }, () => (0, import_nestjs_agent_core.invokeWithTransientRetry)(() => {
+      ui.restart();
+      const invocation = deps.registry.invoke(input.toolName, input.input, ctx, deps.rolesPolicy);
+      return input.timeoutMs !== void 0 ? (0, import_nestjs_agent_core.withToolTimeout)(invocation, input.timeoutMs, input.toolName) : invocation;
+    }, transientRetry, {
+      onRetry: /* @__PURE__ */ __name((attempt, error) => {
+        (0, import_nestjs_agent_core.publishAgentToolRetry)({
+          toolName: input.toolName,
+          toolCallId: input.toolCallId,
+          attempt,
+          message: error instanceof Error ? error.message : String(error)
+        });
+      }, "onRetry")
+    }));
+    return input.collectUi === true ? (0, import_nestjs_agent_core.wrapToolStepOutput)(output, ui.components()) : output;
+  }
+};
+_ts_decorate([
+  (0, import_nestjs_durable.Step)({
+    retries: 3
+  }),
+  _ts_metadata("design:type", Function),
+  _ts_metadata("design:paramtypes", [
+    typeof DispatchedLlmInput === "undefined" ? Object : DispatchedLlmInput
+  ]),
+  _ts_metadata("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+], AgentRunSteps.prototype, "llm", null);
+_ts_decorate([
+  (0, import_nestjs_durable.Step)(),
+  _ts_metadata("design:type", Function),
+  _ts_metadata("design:paramtypes", [
+    typeof DispatchedToolInput === "undefined" ? Object : DispatchedToolInput
+  ]),
+  _ts_metadata("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+], AgentRunSteps.prototype, "tool", null);
+AgentRunSteps = _ts_decorate([
+  (0, import_common.Injectable)(),
+  _ts_param(0, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_DEPS_FACTORY)),
+  _ts_metadata("design:type", Function),
+  _ts_metadata("design:paramtypes", [
+    typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory
+  ])
+], AgentRunSteps);
+
+// src/durable/agent-run.workflow.ts
+function _ts_decorate2(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+    r = Reflect.decorate(decorators, target, key, desc);
+  } else {
+    for (var i = decorators.length - 1; i >= 0; i--) {
+      if (d = decorators[i]) {
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+      }
+    }
+  }
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate2, "_ts_decorate");
+function _ts_metadata2(metadataKey, metadataValue) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+    return Reflect.metadata(metadataKey, metadataValue);
+  }
+}
+__name(_ts_metadata2, "_ts_metadata");
+function _ts_param2(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param2, "_ts_param");
+var AgentRunWorkflow = class _AgentRunWorkflow {
+  static {
+    __name(this, "AgentRunWorkflow");
+  }
+  factory;
+  store;
+  runs;
+  queue;
+  logger = new import_common2.Logger(_AgentRunWorkflow.name);
+  constructor(factory, store, runs, queue) {
+    this.factory = factory;
+    this.store = store;
+    this.runs = runs;
+    this.queue = queue;
   }
   /**
-  * Decide what follows a TOP-LEVEL run that is settling on `threadId`, and move the thread there:
-  * hand it to the next queued message (claimed and popped here, started by the caller), or pause
-  * the queue, or release the thread. Call it BEFORE the run's terminal frame, so a client reading
-  * the stream learns what comes next from the `queue` frame, and so the thread is already free
-  * when the client sees the run end.
+  * Move the thread past this settling turn — to the next queued message, started here as a
+  * fire-and-forget `ctx.startChild` under the message's own id, or to a paused/empty queue — and
+  * answer the `queue` frame to write before the turn's terminal.
   *
-  * A no-op returning `{}` on a store without a queue.
+  * Journaled: the decision (which message, claimed and popped) is one `localStep`, so a replay
+  * reads it back instead of popping a second message, and the start is the runtime's own
+  * replay-safe spawn. Gated by `ctx.patched`, so a run recorded before the queue existed replays
+  * against the history it has. A no-op for a sub-agent's run and on a store without a queue.
   */
-  async plan(args) {
-    if (!(0, import_nestjs_agent_core.isChatQueueStore)(this.store)) {
-      return {};
+  async advanceQueue(ctx, input, outcome, error) {
+    const queue = this.queue;
+    if (queue === void 0 || !queue.supported || input.sinkRunId !== void 0 || input.deliverTo !== void 0) {
+      return void 0;
     }
-    const store = this.store;
-    const { threadId, outcome } = args;
-    if (await store.activeRunForThread(threadId) !== args.runId) {
-      return {};
+    if (!await ctx.patched("agent:chat-queue")) {
+      return void 0;
     }
-    let holding = args.runId;
-    for (let attempt = 0; attempt < MAX_DRAIN_ATTEMPTS; attempt += 1) {
-      const items = await store.listQueue(threadId);
-      const head = items[0];
-      if (head === void 0) {
-        if (holding !== null) {
-          await store.releaseActiveStream(threadId, holding);
-          holding = null;
-          continue;
-        }
-        return {};
-      }
-      let pause = await store.queuePause(threadId);
-      if (pause === null) {
-        const reason = pauseReasonFor(outcome, head);
-        if (reason !== null) {
-          pause = {
-            reason,
-            ...outcome === "failed" && args.error !== void 0 ? {
-              message: args.error
-            } : {},
-            at: (/* @__PURE__ */ new Date()).toISOString()
-          };
-          await store.setQueuePause(threadId, pause);
-        }
-      }
-      if (pause === null) {
-        const blocked = await this.quotaBlock(head.actor);
-        if (blocked !== null) {
-          pause = {
-            reason: "quota_exceeded",
-            message: blocked,
-            at: (/* @__PURE__ */ new Date()).toISOString()
-          };
-          await store.setQueuePause(threadId, pause);
-        }
-      }
-      if (pause !== null) {
-        if (holding !== null) {
-          await store.releaseActiveStream(threadId, holding);
-        }
-        return {
-          frame: queueFrame(items, pause)
-        };
-      }
-      const claimed = await store.claimActiveStream(threadId, head.id, holding !== null ? {
-        replacing: holding
-      } : {});
-      if (!claimed) {
+    const plan = await stepOf(ctx)(`queue:${outcome}`, async () => {
+      try {
+        const settled = outcome === "completed" && await this.isCancelled(ctx.runId) ? "cancelled" : outcome;
+        return await queue.plan({
+          threadId: input.threadId,
+          runId: ctx.runId,
+          outcome: settled,
+          ...error !== void 0 ? {
+            error
+          } : {}
+        });
+      } catch {
         return {};
       }
-      holding = head.id;
-      if (!await store.removeQueuedMessage(head.id)) {
-        await store.releaseActiveStream(threadId, head.id);
-        holding = null;
-        continue;
-      }
-      const next = {
-        runId: head.id,
-        messageId: head.id,
-        input: await this.inputFor(head)
-      };
-      return {
-        next,
-        frame: queueFrame(items.slice(1), null, {
-          messageId: head.id,
-          runId: head.id
-        })
-      };
-    }
-    if (holding !== null) {
-      await store.releaseActiveStream(threadId, holding);
-    }
-    return {};
-  }
-  /**
-  * {@link plan}, then start what it picked with `start`. What an in-process settle (the inline
-  * runner, a durable cancel issued outside a workflow) calls; answers the frame to write.
-  */
-  async handoff(args, start) {
-    const plan = await this.plan(args);
-    if (plan.next === void 0) {
-      return plan.frame;
-    }
-    return await this.launch(args.threadId, plan.next, start) ? plan.frame : this.pausedFrame(args.threadId);
-  }
-  /**
-  * Start the head of an IDLE thread's queue — after a send queued behind a run that turned out to
-  * be gone, after a resume, after a stale holder. Does nothing while a live run holds the thread
-  * (its settle drains) or while the queue is paused. Answers the started run's id, if any.
-  */
-  async kick(threadId, runner) {
-    if (!(0, import_nestjs_agent_core.isChatQueueStore)(this.store)) {
-      return void 0;
-    }
-    const { live, stale } = await this.holder(threadId, runner);
-    if (live !== null) {
-      return void 0;
-    }
-    if (stale !== null) {
-      this.logger.warn(`thread ${threadId} was held by run ${stale}, which is no longer running`);
-    }
-    const plan = await this.plan({
-      threadId,
-      runId: stale,
-      outcome: "completed"
     });
-    if (plan.next === void 0) {
-      return void 0;
+    const next = plan.next;
+    if (next === void 0) {
+      return plan.frame;
     }
-    const started = await this.launch(threadId, plan.next, (input, runId) => runner.start(input, {
-      runId
-    }));
-    if (started && plan.frame !== void 0) {
-      await this.write(plan.next.runId, plan.frame);
+    try {
+      await ctx.startChild(_AgentRunWorkflow, next.input, next.runId);
+      return plan.frame;
+    } catch (failure) {
+      if ((0, import_nestjs_durable_core2.isWorkflowControlFlowSignal)(failure)) {
+        throw failure;
+      }
+      const reason = failure instanceof Error ? failure.message : String(failure);
+      return stepOf(ctx)("queue:restore", async () => {
+        await queue.restore(input.threadId, next, "start_failed", reason);
+        return queue.pausedFrame(input.threadId);
+      });
     }
-    return started ? plan.next.runId : void 0;
   }
   /**
-  * Start a turn the thread is already claimed for. On failure the message goes back to the head of
-  * the queue, the queue pauses (`start_failed`), and the claim is released — nothing is lost and
-  * nothing is left holding the thread.
+  * Has someone asked this run to stop? Read from the runtime's own run status, which is where
+  * `DurableAgentRunner.cancel` puts it — `cancelling` while a compensating cancel is in flight,
+  * `cancelled` once it has settled.
+  *
+  * Costs a run read at each of the loop's observation points (two per step). That is a row the
+  * control plane already has, against a turn that is otherwise making model calls, and it buys the
+  * property that matters: the answer comes from a place BOTH the canceller and every pod that might
+  * replay this run can see.
+  *
+  * Failing to ask is not a cancel. A tenant with no gateway wired, or an operator briefly
+  * unreachable, answers "no" and the run carries on — the alternative is failing healthy runs
+  * because a status read timed out. The loop journals that answer like any other, so two processes
+  * can never disagree about what was seen here.
   */
-  async launch(threadId, next, start) {
-    this.starting.add(next.runId);
+  async isCancelled(runId) {
     try {
-      await start(next.input, next.runId);
-      return true;
-    } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      this.logger.error(`queued message ${next.messageId} could not start: ${message}`);
-      await this.restore(threadId, next, "start_failed", message);
+      const status = (await this.runs?.getRunDetail(runId))?.run.status;
+      return status === "cancelled" || status === "cancelling";
+    } catch {
       return false;
-    } finally {
-      this.starting.delete(next.runId);
     }
   }
-  /** Put a turn that never started back at the head of its queue, paused, and free the thread. */
-  async restore(threadId, next, reason, message) {
-    const store = this.queueStore();
-    const { input } = next;
-    await store.enqueueMessage({
-      threadId,
-      actor: input.actor,
-      content: input.userText,
-      at: "head",
-      ...input.attachments !== void 0 ? {
-        attachments: input.attachments
-      } : {},
-      ...input.agentName !== void 0 ? {
-        agentName: input.agentName
-      } : {},
-      ...input.model !== void 0 ? {
-        model: input.model
-      } : {},
-      ...input.pageContext !== void 0 ? {
-        pageContext: input.pageContext
-      } : {}
-    });
-    await store.setQueuePause(threadId, {
-      reason,
-      message,
-      at: (/* @__PURE__ */ new Date()).toISOString()
-    });
-    await store.releaseActiveStream(threadId, next.runId);
-  }
-  /** A `queue` frame with the thread's current state. */
-  async pausedFrame(threadId) {
-    return {
-      kind: "queue",
-      queue: await this.state(threadId)
-    };
-  }
   /**
-  * Tell whoever is watching the thread that its queue changed: a `queue` frame into the stream of
-  * the run holding it. Best-effort — a thread nobody is streaming has no one to tell, and the next
-  * read of the thread carries the queue anyway.
+  * Settle the delegation a DETACHED run was started for, when that run ends without an answer.
+  *
+  * The loop delivers its own success (`deliver:detached`) but cannot catch its own crash, and the
+  * runtime settles the run row without knowing anything delegated it. Left alone, the card in the
+  * calling conversation says "started" for ever — the one state a reader can neither wait on nor
+  * act on. A no-op for every other run: only a detached one carries a delivery address.
   */
-  async publish(threadId) {
-    const state = await this.state(threadId);
-    const holder = await this.queueStore().activeRunForThread(threadId);
-    if (holder !== null) {
-      await this.write(holder, {
-        kind: "queue",
-        queue: state
-      }).catch((error) => {
-        this.logger.warn(`could not publish the queue of thread ${threadId}: ${error instanceof Error ? error.message : String(error)}`);
-      });
+  async settleDetachedParent(ctx, input, outcome) {
+    const delivery = input.deliverTo;
+    if (delivery === void 0) {
+      return;
     }
-    return state;
-  }
-  async write(runId, frame) {
-    const writer = await this.sink.open(runId);
-    await writer.write((0, import_nestjs_agent_core.encodeStreamEvent)(frame));
+    await stepOf(ctx)("deliver:detached:unsettled", () => (0, import_nestjs_agent_core2.settleUnsettledDelegation)({
+      store: this.store,
+      delivery,
+      agent: input.agentName ?? "default",
+      runId: ctx.runId,
+      status: outcome.status,
+      ...outcome.error !== void 0 ? {
+        error: outcome.error
+      } : {}
+    }));
   }
-  /** Why `actor` may not start a turn now (the quota message), or `null`. */
-  async quotaBlock(actor) {
-    if (this.options?.quota === void 0 || this.quotaProvider === void 0) {
-      return null;
-    }
-    try {
-      const { blocked } = await this.quotaProvider.report({
-        actor
-      });
-      if (blocked === void 0) {
-        return null;
-      }
-      return blocked.reason ?? `The ${blocked.period === "day" ? "daily" : "monthly"} quota is used up`;
-    } catch {
-      return null;
-    }
-  }
-  /**
-  * The turn a queued message starts: everything it was queued with, today's date, and its
-  * attachments' urls minted afresh — the ones stored at enqueue time may have expired while it
-  * waited. An attachment the staging store no longer resolves keeps its stored url.
-  */
-  async inputFor(message) {
-    const attachments = await this.freshAttachments(message.actor, message.attachments ?? []);
-    return {
-      threadId: message.threadId,
-      actor: message.actor,
-      userText: message.content,
-      day: utcDay(),
-      ...message.agentName !== void 0 ? {
-        agentName: message.agentName
-      } : {},
-      ...attachments.length > 0 ? {
-        attachments
-      } : {},
-      ...message.pageContext !== void 0 ? {
-        pageContext: message.pageContext
-      } : {},
-      ...message.model !== void 0 ? {
-        model: message.model
-      } : {}
-    };
-  }
-  async freshAttachments(actor, attachments) {
-    const staging = this.staging;
-    if (attachments.length === 0 || staging === void 0 || typeof staging.resolve !== "function") {
-      return attachments;
-    }
-    return Promise.all(attachments.map(async (attachment) => {
-      try {
-        return await staging.resolve({
-          mediaId: attachment.mediaId,
-          actor
-        }) ?? attachment;
-      } catch {
-        return attachment;
-      }
-    }));
-  }
-};
-ChatQueueService = _ts_decorate([
-  (0, import_common.Injectable)(),
-  _ts_param(0, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_STORE)),
-  _ts_param(1, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_SINK)),
-  _ts_param(2, (0, import_common.Optional)()),
-  _ts_param(2, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_QUOTA_PROVIDER)),
-  _ts_param(3, (0, import_common.Optional)()),
-  _ts_param(3, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_OPTIONS)),
-  _ts_param(4, (0, import_common.Optional)()),
-  _ts_param(4, (0, import_common.Inject)(import_nestjs_agent_core.AGENT_ATTACHMENT_STAGING)),
-  _ts_metadata("design:type", Function),
-  _ts_metadata("design:paramtypes", [
-    typeof AgentStore === "undefined" ? Object : AgentStore,
-    typeof TokenStreamSink === "undefined" ? Object : TokenStreamSink,
-    typeof QuotaProvider === "undefined" ? Object : QuotaProvider,
-    typeof Pick === "undefined" ? Object : Pick,
-    typeof AttachmentStagingStore === "undefined" ? Object : AttachmentStagingStore
-  ])
-], ChatQueueService);
-function pauseReasonFor(outcome, head) {
-  if (outcome === "failed") {
-    return "run_failed";
-  }
-  if (outcome === "cancelled" && head.interrupt !== true) {
-    return "cancelled";
-  }
-  return null;
-}
-__name(pauseReasonFor, "pauseReasonFor");
-function queueFrame(items, paused, started) {
-  return {
-    kind: "queue",
-    queue: {
-      items: items.map(import_nestjs_agent_core.queuedMessageView),
-      paused
-    },
-    ...started !== void 0 ? {
-      started
-    } : {}
-  };
-}
-__name(queueFrame, "queueFrame");
-
-// src/durable/agent-run.steps.ts
-var import_nestjs_agent_core2 = require("@dudousxd/nestjs-agent-core");
-var import_nestjs_durable = require("@dudousxd/nestjs-durable");
-var import_common2 = require("@nestjs/common");
-
-// src/durable/outside-workflow-ctx.ts
-var import_nestjs_durable_core = require("@dudousxd/nestjs-durable-core");
-function outsideWorkflowCtx(fn) {
-  return (0, import_nestjs_durable_core.runInWorkflowCtx)(void 0, fn);
-}
-__name(outsideWorkflowCtx, "outsideWorkflowCtx");
-function stepOf(ctx) {
-  return (name, fn, ...rest) => ctx.localStep(name, (...args) => outsideWorkflowCtx(() => fn(...args)), ...rest);
-}
-__name(stepOf, "stepOf");
-
-// src/durable/agent-run.steps.ts
-function _ts_decorate2(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
-    r = Reflect.decorate(decorators, target, key, desc);
-  } else {
-    for (var i = decorators.length - 1; i >= 0; i--) {
-      if (d = decorators[i]) {
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-      }
-    }
-  }
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate2, "_ts_decorate");
-function _ts_metadata2(metadataKey, metadataValue) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
-    return Reflect.metadata(metadataKey, metadataValue);
-  }
-}
-__name(_ts_metadata2, "_ts_metadata");
-function _ts_param2(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param2, "_ts_param");
-var AgentRunSteps = class {
-  static {
-    __name(this, "AgentRunSteps");
-  }
-  factory;
-  constructor(factory) {
-    this.factory = factory;
-  }
-  /**
-  * Retryable: every side effect (persist/quota/stream markers) happens loop-side under
-  * `hooks.step`, so a durable retry only re-runs the model call and re-streams its tokens — never
-  * double-writes. NEVER call `writer.end()`/`fail()` here: the workflow owns the stream's lifecycle,
-  * across however many turns/retries it takes.
-  */
-  llm(input) {
-    return outsideWorkflowCtx(() => this.runLlm(input));
-  }
-  async runLlm(input) {
-    const deps = this.factory.forAgent(input.agentName);
-    const tools = (0, import_nestjs_agent_core2.withMemoryTool)({
-      tools: (0, import_nestjs_agent_core2.withSkillTool)({
-        tools: (0, import_nestjs_agent_core2.withAskTool)({
-          tools: await deps.registry.definitionsFor(input.actor, deps.rolesPolicy, deps.toolAllowList, {
-            ...input.threadId !== void 0 ? {
-              threadId: input.threadId
-            } : {},
-            ...input.agentName !== void 0 ? {
-              agentName: input.agentName
-            } : {}
-          }),
-          ask: deps.ask
-        }),
-        enabled: deps.skills !== void 0
-      }),
-      enabled: deps.memory?.provider.write !== void 0
-    });
-    const buffer = input.bufferOutput === true ? (0, import_nestjs_agent_core2.createFrameBuffer)() : void 0;
-    let writer;
-    if (buffer !== void 0) {
-      writer = buffer.writer;
-    } else {
-      const opened = await deps.sink.open(input.sinkRunId);
-      writer = input.childSink ? childSinkWriter(opened) : opened;
-    }
-    const frames = (0, import_nestjs_agent_core2.observeTurnFrames)(writer);
-    const turn = (0, import_nestjs_agent_core2.withTurnFrames)(await (0, import_nestjs_agent_core2.traceLlmTurn)(input.runId, input.step, () => deps.model.runTurn({
-      system: input.system,
-      messages: input.messages,
-      tools,
-      sink: frames.writer,
-      ...input.model !== void 0 ? {
-        model: input.model
-      } : {}
-    })), frames.summary());
-    const stamped = (0, import_nestjs_agent_core2.stampToolKinds)(turn, deps);
-    return buffer === void 0 ? stamped : {
-      ...stamped,
-      bufferedFrames: buffer.frames()
-    };
-  }
-  /**
-  * NO DURABLE retries — a tool may not be idempotent (a bare `@Step()` carries none, unlike `llm`
-  * above). What it does retry, in place, is a CLASSIFIED-TRANSIENT error from the tool's own
-  * invocation (a DB deadlock, a lock-wait timeout — see `isTransientToolError`): the server rolled
-  * that work back, so re-invoking it is safe, and doing it here (inside this one step, never a new
-  * checkpoint) is exactly how the non-dispatched loop path handles it too. The timeout is applied
-  * HERE, handler-side, via `withToolTimeout` — never as a durable dispatch `timeoutMs`, which
-  * bounds engine liveness (retryable) rather than the tool's own business outcome — and per
-  * ATTEMPT, so a retried invocation gets its own fresh timeout window.
-  */
-  tool(input) {
-    return outsideWorkflowCtx(() => this.runTool(input));
-  }
-  async runTool(input) {
-    const deps = this.factory.forAgent(input.ctx.agentName);
-    if (deps.registry.spec(input.toolName)?.kind === "action" && input.toolType !== "action") {
-      throw new Error(`tool "${input.toolName}" is an action tool but was dispatched without approval: the dispatching process resolved its kind against a registry that does not have it`);
-    }
-    const sinkRunId = input.sinkRunId;
-    let opened;
-    const ui = (0, import_nestjs_agent_core2.createUiCollector)(input.toolCallId, sinkRunId === void 0 ? void 0 : async (event) => {
-      opened ??= Promise.resolve(deps.sink.open(sinkRunId)).then((writer) => input.childSink === true ? childSinkWriter(writer) : writer);
-      await (await opened).write((0, import_nestjs_agent_core2.encodeStreamEvent)(event));
-    });
-    const ctx = {
-      ...(0, import_nestjs_agent_core2.toolCallContext)(input.ctx, input.toolCallId),
-      emitUi: ui.emit
-    };
-    const localClassify = deps.toolTransientRetry !== false ? deps.toolTransientRetry?.classify : void 0;
-    const transientRetry = input.transientRetry === false ? false : {
-      attempts: input.transientRetry.attempts,
-      backoffMs: input.transientRetry.backoffMs,
-      ...localClassify !== void 0 ? {
-        classify: localClassify
-      } : {}
-    };
-    const output = await (0, import_nestjs_agent_core2.traceToolExecution)(input.ctx.runId, {
-      toolCallId: input.toolCallId,
-      toolName: input.toolName,
-      toolType: input.toolType
-    }, () => (0, import_nestjs_agent_core2.invokeWithTransientRetry)(() => {
-      ui.restart();
-      const invocation = deps.registry.invoke(input.toolName, input.input, ctx, deps.rolesPolicy);
-      return input.timeoutMs !== void 0 ? (0, import_nestjs_agent_core2.withToolTimeout)(invocation, input.timeoutMs, input.toolName) : invocation;
-    }, transientRetry, {
-      onRetry: /* @__PURE__ */ __name((attempt, error) => {
-        (0, import_nestjs_agent_core2.publishAgentToolRetry)({
-          toolName: input.toolName,
-          toolCallId: input.toolCallId,
-          attempt,
-          message: error instanceof Error ? error.message : String(error)
-        });
-      }, "onRetry")
-    }));
-    return input.collectUi === true ? (0, import_nestjs_agent_core2.wrapToolStepOutput)(output, ui.components()) : output;
-  }
-};
-_ts_decorate2([
-  (0, import_nestjs_durable.Step)({
-    retries: 3
-  }),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", [
-    typeof DispatchedLlmInput === "undefined" ? Object : DispatchedLlmInput
-  ]),
-  _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
-], AgentRunSteps.prototype, "llm", null);
-_ts_decorate2([
-  (0, import_nestjs_durable.Step)(),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", [
-    typeof DispatchedToolInput === "undefined" ? Object : DispatchedToolInput
-  ]),
-  _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
-], AgentRunSteps.prototype, "tool", null);
-AgentRunSteps = _ts_decorate2([
-  (0, import_common2.Injectable)(),
-  _ts_param2(0, (0, import_common2.Inject)(import_nestjs_agent_core2.AGENT_DEPS_FACTORY)),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", [
-    typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory
-  ])
-], AgentRunSteps);
-
-// src/durable/agent-run.workflow.ts
-function _ts_decorate3(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
-    r = Reflect.decorate(decorators, target, key, desc);
-  } else {
-    for (var i = decorators.length - 1; i >= 0; i--) {
-      if (d = decorators[i]) {
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-      }
-    }
-  }
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate3, "_ts_decorate");
-function _ts_metadata3(metadataKey, metadataValue) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
-    return Reflect.metadata(metadataKey, metadataValue);
-  }
-}
-__name(_ts_metadata3, "_ts_metadata");
-function _ts_param3(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param3, "_ts_param");
-var AgentRunWorkflow = class _AgentRunWorkflow {
-  static {
-    __name(this, "AgentRunWorkflow");
-  }
-  factory;
-  store;
-  runs;
-  queue;
-  logger = new import_common3.Logger(_AgentRunWorkflow.name);
-  constructor(factory, store, runs, queue) {
-    this.factory = factory;
-    this.store = store;
-    this.runs = runs;
-    this.queue = queue;
-  }
-  /**
-  * Move the thread past this settling turn — to the next queued message, started here as a
-  * fire-and-forget `ctx.startChild` under the message's own id, or to a paused/empty queue — and
-  * answer the `queue` frame to write before the turn's terminal.
-  *
-  * Journaled: the decision (which message, claimed and popped) is one `localStep`, so a replay
-  * reads it back instead of popping a second message, and the start is the runtime's own
-  * replay-safe spawn. Gated by `ctx.patched`, so a run recorded before the queue existed replays
-  * against the history it has. A no-op for a sub-agent's run and on a store without a queue.
-  */
-  async advanceQueue(ctx, input, outcome, error) {
-    const queue = this.queue;
-    if (queue === void 0 || !queue.supported || input.sinkRunId !== void 0 || input.deliverTo !== void 0) {
-      return void 0;
-    }
-    if (!await ctx.patched("agent:chat-queue")) {
-      return void 0;
-    }
-    const plan = await stepOf(ctx)(`queue:${outcome}`, async () => {
-      try {
-        const settled = outcome === "completed" && await this.isCancelled(ctx.runId) ? "cancelled" : outcome;
-        return await queue.plan({
-          threadId: input.threadId,
-          runId: ctx.runId,
-          outcome: settled,
-          ...error !== void 0 ? {
-            error
-          } : {}
-        });
-      } catch {
-        return {};
-      }
-    });
-    const next = plan.next;
-    if (next === void 0) {
-      return plan.frame;
-    }
-    try {
-      await ctx.startChild(_AgentRunWorkflow, next.input, next.runId);
-      return plan.frame;
-    } catch (failure) {
-      if ((0, import_nestjs_durable_core2.isWorkflowControlFlowSignal)(failure)) {
-        throw failure;
-      }
-      const reason = failure instanceof Error ? failure.message : String(failure);
-      return stepOf(ctx)("queue:restore", async () => {
-        await queue.restore(input.threadId, next, "start_failed", reason);
-        return queue.pausedFrame(input.threadId);
-      });
-    }
-  }
-  /**
-  * Has someone asked this run to stop? Read from the runtime's own run status, which is where
-  * `DurableAgentRunner.cancel` puts it — `cancelling` while a compensating cancel is in flight,
-  * `cancelled` once it has settled.
-  *
-  * Costs a run read at each of the loop's observation points (two per step). That is a row the
-  * control plane already has, against a turn that is otherwise making model calls, and it buys the
-  * property that matters: the answer comes from a place BOTH the canceller and every pod that might
-  * replay this run can see.
-  *
-  * Failing to ask is not a cancel. A tenant with no gateway wired, or an operator briefly
-  * unreachable, answers "no" and the run carries on — the alternative is failing healthy runs
-  * because a status read timed out. The loop journals that answer like any other, so two processes
-  * can never disagree about what was seen here.
-  */
-  async isCancelled(runId) {
-    try {
-      const status = (await this.runs?.getRunDetail(runId))?.run.status;
-      return status === "cancelled" || status === "cancelling";
-    } catch {
-      return false;
-    }
-  }
-  /**
-  * Settle the delegation a DETACHED run was started for, when that run ends without an answer.
-  *
-  * The loop delivers its own success (`deliver:detached`) but cannot catch its own crash, and the
-  * runtime settles the run row without knowing anything delegated it. Left alone, the card in the
-  * calling conversation says "started" for ever — the one state a reader can neither wait on nor
-  * act on. A no-op for every other run: only a detached one carries a delivery address.
-  */
-  async settleDetachedParent(ctx, input, outcome) {
-    const delivery = input.deliverTo;
-    if (delivery === void 0) {
-      return;
-    }
-    await stepOf(ctx)("deliver:detached:unsettled", () => (0, import_nestjs_agent_core3.settleUnsettledDelegation)({
-      store: this.store,
-      delivery,
-      agent: input.agentName ?? "default",
-      runId: ctx.runId,
-      status: outcome.status,
-      ...outcome.error !== void 0 ? {
-        error: outcome.error
-      } : {}
-    }));
-  }
-  async run(ctx, input) {
-    const day = input.day ?? utcDay();
-    const deps = this.factory.forAgent(input.agentName);
-    const dispatchSteps = await ctx.patched("agent:dispatched-steps");
-    if (input.sinkRunId !== void 0 || input.deliverTo !== void 0) {
-      await stepOf(ctx)("activate", () => this.store.setActiveStream(input.threadId, ctx.runId));
+  async run(ctx, input) {
+    const day = input.day ?? utcDay();
+    const deps = this.factory.forAgent(input.agentName);
+    const dispatchSteps = await ctx.patched("agent:dispatched-steps");
+    if (input.sinkRunId !== void 0 || input.deliverTo !== void 0) {
+      await stepOf(ctx)("activate", () => this.store.setActiveStream(input.threadId, ctx.runId));
     }
     const sinkRunId = input.sinkRunId ?? ctx.runId;
     const chainBelow = [
@@ -835,7 +411,7 @@ var AgentRunWorkflow = class _AgentRunWorkflow {
           end: /* @__PURE__ */ __name(async () => {
             const frame = await this.advanceQueue(ctx, input, "completed");
             if (frame !== void 0) {
-              await writer.write((0, import_nestjs_agent_core3.encodeStreamEvent)(frame));
+              await writer.write((0, import_nestjs_agent_core2.encodeStreamEvent)(frame));
             }
             await writer.end();
           }, "end")
@@ -867,7 +443,7 @@ var AgentRunWorkflow = class _AgentRunWorkflow {
       // await, so launching a batch in one tick — what `settleAll` does — fixes the block of
       // positions in call order however the tools then settle. `ctx.patched` keeps a run that
       // recorded the one-call-at-a-time shape replaying against that shape.
-      parallel: import_nestjs_agent_core3.settleAll,
+      parallel: import_nestjs_agent_core2.settleAll,
       cancelled: /* @__PURE__ */ __name(() => this.isCancelled(ctx.runId), "cancelled"),
       patched: /* @__PURE__ */ __name((id) => ctx.patched(id), "patched"),
       // Dispatched-step suspends must escape the loop's tool catch — control flow, not a tool
@@ -961,33 +537,33 @@ var AgentRunWorkflow = class _AgentRunWorkflow {
       } : {}
     };
     try {
-      const result = await (0, import_nestjs_agent_core3.runAgentLoop)({
+      const result = await (0, import_nestjs_agent_core2.runAgentLoop)({
         ...deps,
         day
       }, input, hooks);
-      await stepOf(ctx)("deactivate", () => (0, import_nestjs_agent_core3.releaseThreadRun)(this.store, input.threadId, ctx.runId));
+      await stepOf(ctx)("deactivate", () => (0, import_nestjs_agent_core2.releaseThreadRun)(this.store, input.threadId, ctx.runId));
       return result;
     } catch (error) {
       if ((0, import_nestjs_durable_core2.isWorkflowControlFlowSignal)(error)) {
         throw error;
       }
-      if (error instanceof import_nestjs_agent_core3.RunCancelledError) {
-        await stepOf(ctx)("deactivate", () => (0, import_nestjs_agent_core3.releaseThreadRun)(this.store, input.threadId, ctx.runId));
+      if (error instanceof import_nestjs_agent_core2.RunCancelledError) {
+        await stepOf(ctx)("deactivate", () => (0, import_nestjs_agent_core2.releaseThreadRun)(this.store, input.threadId, ctx.runId));
         await this.settleDetachedParent(ctx, input, {
           status: "cancelled"
         });
         throw error;
       }
-      if ((0, import_nestjs_agent_core3.isReplayIntegrityError)(error)) {
+      if ((0, import_nestjs_agent_core2.isReplayIntegrityError)(error)) {
         const detail = error.message;
-        const code2 = (0, import_nestjs_agent_core3.agentFailureCode)(error);
+        const code2 = (0, import_nestjs_agent_core2.agentFailureCode)(error);
         this.logger.error(`agent run ${ctx.runId} failed (${code2}): ${detail}`);
-        (0, import_nestjs_agent_core3.publishAgentRunFailed)({
+        (0, import_nestjs_agent_core2.publishAgentRunFailed)({
           runId: ctx.runId,
           code: code2,
           message: detail
         });
-        await (0, import_nestjs_agent_core3.settleDeadRun)(this.store, {
+        await (0, import_nestjs_agent_core2.settleDeadRun)(this.store, {
           runId: ctx.runId,
           threadId: input.threadId,
           failure: {
@@ -995,13 +571,13 @@ var AgentRunWorkflow = class _AgentRunWorkflow {
             message: detail
           }
         });
-        await (await hooks.openSink()).fail((0, import_nestjs_agent_core3.streamFailure)(error));
+        await (await hooks.openSink()).fail((0, import_nestjs_agent_core2.streamFailure)(error));
         throw error;
       }
       const message = error instanceof Error ? error.message : String(error);
-      const code = (0, import_nestjs_agent_core3.agentFailureCode)(error);
+      const code = (0, import_nestjs_agent_core2.agentFailureCode)(error);
       this.logger.error(`agent run ${ctx.runId} failed (${code}): ${message}`);
-      (0, import_nestjs_agent_core3.publishAgentRunFailed)({
+      (0, import_nestjs_agent_core2.publishAgentRunFailed)({
         runId: ctx.runId,
         code,
         message
@@ -1013,36 +589,37 @@ var AgentRunWorkflow = class _AgentRunWorkflow {
           errorCode: code,
           errorMessage: message
         });
-        await Promise.resolve(this.store.failUnsettledToolCalls?.(ctx.runId, import_nestjs_agent_core3.RUN_ENDED_BEFORE_TOOL_CALL)).catch(() => 0);
+        await Promise.resolve(this.store.failUnsettledToolCalls?.(ctx.runId, import_nestjs_agent_core2.RUN_ENDED_BEFORE_TOOL_CALL)).catch(() => 0);
       });
       const queueFrame2 = await this.advanceQueue(ctx, input, "failed", message);
-      await stepOf(ctx)("deactivate", () => (0, import_nestjs_agent_core3.releaseThreadRun)(this.store, input.threadId, ctx.runId));
+      await stepOf(ctx)("deactivate", () => (0, import_nestjs_agent_core2.releaseThreadRun)(this.store, input.threadId, ctx.runId));
       await this.settleDetachedParent(ctx, input, {
         status: "failed",
         error: message
       });
       const writer = await hooks.openSink();
       if (queueFrame2 !== void 0) {
-        await writer.write((0, import_nestjs_agent_core3.encodeStreamEvent)(queueFrame2));
+        await writer.write((0, import_nestjs_agent_core2.encodeStreamEvent)(queueFrame2));
       }
-      await writer.fail((0, import_nestjs_agent_core3.streamFailure)(error));
+      await writer.fail((0, import_nestjs_agent_core2.streamFailure)(error));
       throw error;
     }
   }
 };
-AgentRunWorkflow = _ts_decorate3([
-  (0, import_common3.Injectable)(),
+AgentRunWorkflow = _ts_decorate2([
+  (0, import_common2.Injectable)(),
   (0, import_nestjs_durable2.Workflow)({
     name: "agent.run",
     version: "1"
   }),
-  _ts_param3(0, (0, import_common3.Inject)(import_nestjs_agent_core3.AGENT_DEPS_FACTORY)),
-  _ts_param3(1, (0, import_common3.Inject)(import_nestjs_agent_core3.AGENT_STORE)),
-  _ts_param3(2, (0, import_common3.Optional)()),
-  _ts_param3(2, (0, import_common3.Inject)(import_nestjs_durable2.RUN_GATEWAY)),
-  _ts_param3(3, (0, import_common3.Optional)()),
-  _ts_metadata3("design:type", Function),
-  _ts_metadata3("design:paramtypes", [
+  _ts_param2(0, (0, import_common2.Inject)(import_nestjs_agent_core2.AGENT_DEPS_FACTORY)),
+  _ts_param2(1, (0, import_common2.Inject)(import_nestjs_agent_core2.AGENT_STORE)),
+  _ts_param2(2, (0, import_common2.Optional)()),
+  _ts_param2(2, (0, import_common2.Inject)(import_nestjs_durable2.RUN_GATEWAY)),
+  _ts_param2(3, (0, import_common2.Optional)()),
+  _ts_param2(3, (0, import_common2.Inject)(AGENT_CHAT_QUEUE)),
+  _ts_metadata2("design:type", Function),
+  _ts_metadata2("design:paramtypes", [
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
     typeof AgentStore === "undefined" ? Object : AgentStore,
     typeof RunGateway === "undefined" ? Object : RunGateway,
@@ -1056,13 +633,13 @@ __name(isSignalTimeout, "isSignalTimeout");
 
 // src/durable/durable-agent-runner.ts
 var import_node_crypto = require("crypto");
-var import_nestjs_agent_core5 = require("@dudousxd/nestjs-agent-core");
+var import_nestjs_agent_core4 = require("@dudousxd/nestjs-agent-core");
 var import_nestjs_durable3 = require("@dudousxd/nestjs-durable");
 var import_nestjs_durable_core3 = require("@dudousxd/nestjs-durable-core");
-var import_common4 = require("@nestjs/common");
+var import_common3 = require("@nestjs/common");
 
 // src/in-process-sink.ts
-var import_nestjs_agent_core4 = require("@dudousxd/nestjs-agent-core");
+var import_nestjs_agent_core3 = require("@dudousxd/nestjs-agent-core");
 var InProcessTokenStreamSink = class {
   static {
     __name(this, "InProcessTokenStreamSink");
@@ -1117,7 +694,7 @@ var InProcessTokenStreamSink = class {
       }
       if (buf.ended) {
         if (buf.failure !== void 0) {
-          throw new import_nestjs_agent_core4.AgentStreamError(buf.failure);
+          throw new import_nestjs_agent_core3.AgentStreamError(buf.failure);
         }
         return;
       }
@@ -1130,7 +707,7 @@ var InProcessTokenStreamSink = class {
 };
 
 // src/durable/durable-agent-runner.ts
-function _ts_decorate4(decorators, target, key, desc) {
+function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1143,19 +720,19 @@ function _ts_decorate4(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate4, "_ts_decorate");
-function _ts_metadata4(metadataKey, metadataValue) {
+__name(_ts_decorate3, "_ts_decorate");
+function _ts_metadata3(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata4, "_ts_metadata");
-function _ts_param4(paramIndex, decorator) {
+__name(_ts_metadata3, "_ts_metadata");
+function _ts_param3(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param4, "_ts_param");
+__name(_ts_param3, "_ts_param");
 function threadOfRun(input) {
   if (typeof input !== "object" || input === null || !("threadId" in input)) {
     return void 0;
@@ -1176,7 +753,7 @@ var DurableAgentRunner = class _DurableAgentRunner {
   store;
   sink;
   queue;
-  logger = new import_common4.Logger(_DurableAgentRunner.name);
+  logger = new import_common3.Logger(_DurableAgentRunner.name);
   constructor(workflows, runs, store, sink, queue) {
     this.workflows = workflows;
     this.runs = runs;
@@ -1263,15 +840,15 @@ var DurableAgentRunner = class _DurableAgentRunner {
             runId: nextRunId
           }));
           if (frame !== void 0) {
-            await writer.write((0, import_nestjs_agent_core5.encodeStreamEvent)(frame));
+            await writer.write((0, import_nestjs_agent_core4.encodeStreamEvent)(frame));
           }
         } catch (error) {
           this.logger.error(`could not advance the queue of thread ${threadId} after cancelling ${runId}: ${error instanceof Error ? error.message : String(error)}`);
         }
       }
-      await (0, import_nestjs_agent_core5.releaseThreadRun)(this.store, threadId, runId);
+      await (0, import_nestjs_agent_core4.releaseThreadRun)(this.store, threadId, runId);
     }
-    await writer.write((0, import_nestjs_agent_core5.encodeStreamEvent)({
+    await writer.write((0, import_nestjs_agent_core4.encodeStreamEvent)({
       kind: "cancelled"
     }));
     await writer.end();
@@ -1298,14 +875,15 @@ var DurableAgentRunner = class _DurableAgentRunner {
     }
   }
 };
-DurableAgentRunner = _ts_decorate4([
-  (0, import_common4.Injectable)(),
-  _ts_param4(1, (0, import_common4.Inject)(import_nestjs_durable3.RUN_GATEWAY)),
-  _ts_param4(2, (0, import_common4.Inject)(import_nestjs_agent_core5.AGENT_STORE)),
-  _ts_param4(3, (0, import_common4.Inject)(import_nestjs_agent_core5.AGENT_SINK)),
-  _ts_param4(4, (0, import_common4.Optional)()),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
+DurableAgentRunner = _ts_decorate3([
+  (0, import_common3.Injectable)(),
+  _ts_param3(1, (0, import_common3.Inject)(import_nestjs_durable3.RUN_GATEWAY)),
+  _ts_param3(2, (0, import_common3.Inject)(import_nestjs_agent_core4.AGENT_STORE)),
+  _ts_param3(3, (0, import_common3.Inject)(import_nestjs_agent_core4.AGENT_SINK)),
+  _ts_param3(4, (0, import_common3.Optional)()),
+  _ts_param3(4, (0, import_common3.Inject)(AGENT_CHAT_QUEUE)),
+  _ts_metadata3("design:type", Function),
+  _ts_metadata3("design:paramtypes", [
     typeof import_nestjs_durable3.WorkflowService === "undefined" ? Object : import_nestjs_durable3.WorkflowService,
     typeof RunGateway === "undefined" ? Object : RunGateway,
     typeof AgentStore === "undefined" ? Object : AgentStore,
@@ -1315,9 +893,9 @@ DurableAgentRunner = _ts_decorate4([
 ], DurableAgentRunner);
 
 // src/durable/agent-durable.module.ts
-var import_nestjs_agent_core6 = require("@dudousxd/nestjs-agent-core");
-var import_common5 = require("@nestjs/common");
-function _ts_decorate5(decorators, target, key, desc) {
+var import_nestjs_agent_core5 = require("@dudousxd/nestjs-agent-core");
+var import_common4 = require("@nestjs/common");
+function _ts_decorate4(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1330,12 +908,12 @@ function _ts_decorate5(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate5, "_ts_decorate");
+__name(_ts_decorate4, "_ts_decorate");
 function runnerProviders() {
   return [
     DurableAgentRunner,
     {
-      provide: import_nestjs_agent_core6.AGENT_DURABLE_RUNNER,
+      provide: import_nestjs_agent_core5.AGENT_DURABLE_RUNNER,
       useExisting: DurableAgentRunner
     }
   ];
@@ -1346,15 +924,15 @@ var AgentDurableHttpModule = class AgentDurableHttpModule2 {
     __name(this, "AgentDurableHttpModule");
   }
 };
-AgentDurableHttpModule = _ts_decorate5([
-  (0, import_common5.Global)(),
-  (0, import_common5.Module)({
+AgentDurableHttpModule = _ts_decorate4([
+  (0, import_common4.Global)(),
+  (0, import_common4.Module)({
     providers: [
       AgentRunWorkflow,
       ...runnerProviders()
     ],
     exports: [
-      import_nestjs_agent_core6.AGENT_DURABLE_RUNNER,
+      import_nestjs_agent_core5.AGENT_DURABLE_RUNNER,
       AgentRunWorkflow
     ]
   })
@@ -1384,16 +962,16 @@ var AgentDurableModule = class _AgentDurableModule {
     };
   }
 };
-AgentDurableModule = _ts_decorate5([
-  (0, import_common5.Global)(),
-  (0, import_common5.Module)({
+AgentDurableModule = _ts_decorate4([
+  (0, import_common4.Global)(),
+  (0, import_common4.Module)({
     providers: [
       AgentRunWorkflow,
       AgentRunSteps,
       ...runnerProviders()
     ],
     exports: [
-      import_nestjs_agent_core6.AGENT_DURABLE_RUNNER,
+      import_nestjs_agent_core5.AGENT_DURABLE_RUNNER,
       AgentRunWorkflow,
       AgentRunSteps
     ]
@@ -1406,10 +984,10 @@ var import_common27 = require("@nestjs/common");
 var import_core4 = require("@nestjs/core");
 
 // src/agent-deps.factory.ts
+var import_nestjs_agent_core6 = require("@dudousxd/nestjs-agent-core");
 var import_nestjs_agent_core7 = require("@dudousxd/nestjs-agent-core");
-var import_nestjs_agent_core8 = require("@dudousxd/nestjs-agent-core");
-var import_common6 = require("@nestjs/common");
-function _ts_decorate6(decorators, target, key, desc) {
+var import_common5 = require("@nestjs/common");
+function _ts_decorate5(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1422,19 +1000,19 @@ function _ts_decorate6(decorators, target, key, desc) {
   }
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate6, "_ts_decorate");
-function _ts_metadata5(metadataKey, metadataValue) {
+__name(_ts_decorate5, "_ts_decorate");
+function _ts_metadata4(metadataKey, metadataValue) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
     return Reflect.metadata(metadataKey, metadataValue);
   }
 }
-__name(_ts_metadata5, "_ts_metadata");
-function _ts_param5(paramIndex, decorator) {
+__name(_ts_metadata4, "_ts_metadata");
+function _ts_param4(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param5, "_ts_param");
+__name(_ts_param4, "_ts_param");
 function delegateToolName(args) {
   const slug = args.target.replace(/[^a-zA-Z0-9]+/g, "_");
   return args.detached === true ? `start_${slug}` : `ask_${slug}`;
@@ -1460,212 +1038,639 @@ var AgentDepsFactory2 = class {
     this.model = model;
     this.store = store;
     this.sink = sink;
-    this.rolesPolicy = rolesPolicy;
-    this.registry = registry;
-    this.agents = agents;
-    this.promptContributors = promptContributors;
-    this.pricingStore = pricingStore;
-    this.skills = skills;
-    this.memory = memory;
+    this.rolesPolicy = rolesPolicy;
+    this.registry = registry;
+    this.agents = agents;
+    this.promptContributors = promptContributors;
+    this.pricingStore = pricingStore;
+    this.skills = skills;
+    this.memory = memory;
+  }
+  /** The turn's memory seam, shared with the read-back endpoint. Undefined → memory is not configured. */
+  memoryConfig() {
+    return this.memory;
+  }
+  /** The turn's skills seam, shared with the listing endpoint. Undefined → skills are not configured. */
+  skillsConfig() {
+    return this.skills;
+  }
+  /**
+  * The agent a turn uses when the caller names none: the explicit `defaultAgent` option, else the
+  * sole registered `@Agent` when there is exactly one, else `'default'` (a bare assistant).
+  */
+  defaultAgentName() {
+    if (this.options.defaultAgent !== void 0) {
+      return this.options.defaultAgent;
+    }
+    const registered = this.agents.list();
+    return registered.length === 1 ? registered[0]?.name ?? "default" : "default";
+  }
+  effectiveTools(definition) {
+    if (definition === void 0) {
+      return void 0;
+    }
+    const delegated = (definition.delegatesTo ?? []).map((edge) => {
+      const { agent, detached } = (0, import_nestjs_agent_core6.normalizeDelegation)(edge);
+      return delegateToolName({
+        target: agent,
+        detached
+      });
+    });
+    if (definition.tools === void 0 && delegated.length === 0) {
+      return void 0;
+    }
+    return [
+      ...definition.tools ?? [],
+      ...delegated
+    ];
+  }
+  forAgent(agentName) {
+    const name = agentName ?? this.defaultAgentName();
+    const definition = this.agents.get(name);
+    const toolAllowList = this.effectiveTools(definition);
+    const followUpsCount = this.followUpsCount();
+    const retrieval = this.options.retrieval;
+    const historyPolicy = this.historyPolicy(definition);
+    const ask = definition?.ask ?? this.options.ask;
+    return {
+      model: this.model,
+      store: this.store,
+      sink: this.sink,
+      rolesPolicy: this.rolesPolicy,
+      ...this.options.approvalPolicy !== void 0 ? {
+        approvalPolicy: this.options.approvalPolicy
+      } : {},
+      registry: this.registry,
+      promptContributors: this.promptContributors,
+      systemPrompt: definition?.systemPrompt ?? this.options.systemPrompt ?? "You are a helpful assistant.",
+      maxSteps: definition?.maxSteps ?? 8,
+      ...definition?.maxDelegationDepth !== void 0 ? {
+        maxDelegationDepth: definition.maxDelegationDepth
+      } : {},
+      ...definition?.maxAgentAppearances !== void 0 ? {
+        maxAgentAppearances: definition.maxAgentAppearances
+      } : {},
+      ...definition?.modelId !== void 0 ? {
+        modelId: definition.modelId
+      } : {},
+      ...this.pricingStore !== void 0 ? {
+        pricingStore: this.pricingStore
+      } : {},
+      ...historyPolicy !== void 0 ? {
+        historyPolicy
+      } : {},
+      inputProcessors: this.options.inputProcessors ?? [],
+      outputProcessors: this.options.outputProcessors ?? [],
+      ...definition?.outputSchema !== void 0 ? {
+        outputSchema: definition.outputSchema
+      } : {},
+      ...definition?.outputRepairAttempts !== void 0 ? {
+        outputRepairAttempts: definition.outputRepairAttempts
+      } : {},
+      ...definition?.intake !== void 0 ? {
+        intake: definition.intake
+      } : {},
+      // Most specific wins, exactly as `historyPolicy` resolves: the agent's own `@Agent({ ask })`,
+      // else the module-wide flag. Both are module config, so every process of a deployment agrees.
+      ...ask === true ? {
+        ask: true
+      } : {},
+      // Module-wide, never per-agent: a skill is a procedure, not a persona, and an agent that could
+      // opt out of one would make the catalog depend on which agent a turn happened to select — a
+      // per-turn fact the worker re-deriving the tool list cannot see.
+      ...this.skills !== void 0 ? {
+        skills: this.skills
+      } : {},
+      // Module-wide, never per-agent, for the same reason skills are: which memories a turn carries
+      // cannot depend on which persona answered it, or the worker re-deriving a dispatched turn's
+      // tool list would disagree with the loop about whether `remember` was offered.
+      ...this.memory !== void 0 ? {
+        memory: this.memory
+      } : {},
+      ...toolAllowList !== void 0 ? {
+        toolAllowList
+      } : {},
+      ...this.options.toolTimeoutMs !== void 0 ? {
+        toolTimeoutMs: this.options.toolTimeoutMs
+      } : {},
+      ...this.options.toolTransientRetry !== void 0 ? {
+        toolTransientRetry: this.options.toolTransientRetry
+      } : {},
+      ...followUpsCount !== void 0 ? {
+        followUpsCount
+      } : {},
+      ...retrieval?.mode === "inject" ? {
+        retriever: retrieval.retriever,
+        ...retrieval.topK !== void 0 ? {
+          retrievalTopK: retrieval.topK
+        } : {}
+      } : {}
+    };
+  }
+  /**
+  * The ceiling on how much of a thread this agent's turns carry, most specific wins: the agent's
+  * own `@Agent({ history })`, else a module-wide custom `historyPolicy`, else the module-wide
+  * `history` window. Undefined → unbounded, the behaviour of a module that configures none.
+  */
+  historyPolicy(definition) {
+    if (definition?.history !== void 0) {
+      return this.window(definition.history);
+    }
+    if (this.options.historyPolicy !== void 0) {
+      return this.options.historyPolicy;
+    }
+    return this.options.history === void 0 ? void 0 : this.window(this.options.history);
+  }
+  /** Build the built-in window policy from the declarative `{ maxMessages, maxTokens, summarize }`. */
+  window(config) {
+    return (0, import_nestjs_agent_core6.windowHistory)({
+      ...config.maxMessages !== void 0 ? {
+        maxMessages: config.maxMessages
+      } : {},
+      ...config.maxTokens !== void 0 ? {
+        maxTokens: config.maxTokens
+      } : {},
+      // The shared module model, not a per-agent one: an agent's `modelId` is an accounting label,
+      // and only one provider is ever bound.
+      ...config.summarize === true ? {
+        summarize: (0, import_nestjs_agent_core6.summarizeWithModel)(this.model)
+      } : {}
+    });
+  }
+  /** Normalize the `followUps` option (`true` → 3, `{ count }` → count) to a number, or undefined. */
+  followUpsCount() {
+    const followUps = this.options.followUps;
+    if (followUps === true) {
+      return 3;
+    }
+    if (typeof followUps === "object") {
+      return followUps.count;
+    }
+    return void 0;
+  }
+};
+AgentDepsFactory2 = _ts_decorate5([
+  (0, import_common5.Injectable)(),
+  _ts_param4(0, (0, import_common5.Inject)(import_nestjs_agent_core7.AGENT_OPTIONS)),
+  _ts_param4(1, (0, import_common5.Inject)(import_nestjs_agent_core6.AGENT_MODEL)),
+  _ts_param4(2, (0, import_common5.Inject)(import_nestjs_agent_core6.AGENT_STORE)),
+  _ts_param4(3, (0, import_common5.Inject)(import_nestjs_agent_core6.AGENT_SINK)),
+  _ts_param4(4, (0, import_common5.Inject)(import_nestjs_agent_core6.AGENT_ROLES_POLICY)),
+  _ts_param4(5, (0, import_common5.Inject)(import_nestjs_agent_core6.AGENT_TOOL_REGISTRY)),
+  _ts_param4(6, (0, import_common5.Inject)(import_nestjs_agent_core6.AGENT_REGISTRY)),
+  _ts_param4(7, (0, import_common5.Inject)(import_nestjs_agent_core6.AGENT_PROMPT_CONTRIBUTORS)),
+  _ts_param4(8, (0, import_common5.Optional)()),
+  _ts_param4(8, (0, import_common5.Inject)(import_nestjs_agent_core6.AGENT_PRICING_STORE)),
+  _ts_param4(9, (0, import_common5.Optional)()),
+  _ts_param4(9, (0, import_common5.Inject)(import_nestjs_agent_core6.AGENT_SKILLS)),
+  _ts_param4(10, (0, import_common5.Optional)()),
+  _ts_param4(10, (0, import_common5.Inject)(import_nestjs_agent_core6.AGENT_MEMORY)),
+  _ts_metadata4("design:type", Function),
+  _ts_metadata4("design:paramtypes", [
+    typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
+    typeof ModelProvider === "undefined" ? Object : ModelProvider,
+    typeof AgentStore === "undefined" ? Object : AgentStore,
+    typeof TokenStreamSink === "undefined" ? Object : TokenStreamSink,
+    typeof RolesPolicy === "undefined" ? Object : RolesPolicy,
+    typeof import_nestjs_agent_core6.ToolRegistry === "undefined" ? Object : import_nestjs_agent_core6.ToolRegistry,
+    typeof import_nestjs_agent_core6.AgentRegistry === "undefined" ? Object : import_nestjs_agent_core6.AgentRegistry,
+    Array,
+    Object,
+    Object,
+    Object
+  ])
+], AgentDepsFactory2);
+
+// src/agent.service.ts
+var import_nestjs_agent_core10 = require("@dudousxd/nestjs-agent-core");
+var import_common8 = require("@nestjs/common");
+
+// src/queue/chat-queue.service.ts
+var import_nestjs_agent_core8 = require("@dudousxd/nestjs-agent-core");
+var import_common6 = require("@nestjs/common");
+function _ts_decorate6(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+    r = Reflect.decorate(decorators, target, key, desc);
+  } else {
+    for (var i = decorators.length - 1; i >= 0; i--) {
+      if (d = decorators[i]) {
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+      }
+    }
+  }
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate6, "_ts_decorate");
+function _ts_metadata5(metadataKey, metadataValue) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+    return Reflect.metadata(metadataKey, metadataValue);
+  }
+}
+__name(_ts_metadata5, "_ts_metadata");
+function _ts_param5(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param5, "_ts_param");
+var MAX_DRAIN_ATTEMPTS = 8;
+var ChatQueueService2 = class _ChatQueueService {
+  static {
+    __name(this, "ChatQueueService");
+  }
+  store;
+  sink;
+  quotaProvider;
+  options;
+  staging;
+  logger = new import_common6.Logger(_ChatQueueService.name);
+  /**
+  * Runs this process claimed a thread for and has not handed to a runner yet. A holder in here is
+  * alive whatever the runner says — it simply has not registered the run yet.
+  */
+  starting = /* @__PURE__ */ new Set();
+  constructor(store, sink, quotaProvider, options, staging) {
+    this.store = store;
+    this.sink = sink;
+    this.quotaProvider = quotaProvider;
+    this.options = options;
+    this.staging = staging;
   }
-  /** The turn's memory seam, shared with the read-back endpoint. Undefined → memory is not configured. */
-  memoryConfig() {
-    return this.memory;
+  /** Whether the bound store can hold a queue. Without one, a busy thread is not queued. */
+  get supported() {
+    return (0, import_nestjs_agent_core8.isChatQueueStore)(this.store);
   }
-  /** The turn's skills seam, shared with the listing endpoint. Undefined → skills are not configured. */
-  skillsConfig() {
-    return this.skills;
+  /** The bound store as a queue store, or a 501 naming what is missing. */
+  queueStore() {
+    if (!(0, import_nestjs_agent_core8.isChatQueueStore)(this.store)) {
+      throw new import_common6.NotImplementedException("Queueing messages requires an AgentStore that implements ChatQueueStore (enqueueMessage, listQueue, \u2026, claimActiveStream, releaseActiveStream); the bound store does not.");
+    }
+    return this.store;
+  }
+  async state(threadId) {
+    const store = this.queueStore();
+    const [items, paused] = await Promise.all([
+      store.listQueue(threadId),
+      store.queuePause(threadId)
+    ]);
+    return {
+      items: items.map(import_nestjs_agent_core8.queuedMessageView),
+      paused
+    };
   }
   /**
-  * The agent a turn uses when the caller names none: the explicit `defaultAgent` option, else the
-  * sole registered `@Agent` when there is exactly one, else `'default'` (a bare assistant).
+  * Whether `holder` is still running. A run this process is about to start is; otherwise the
+  * runner decides, and a runner that cannot tell says yes.
   */
-  defaultAgentName() {
-    if (this.options.defaultAgent !== void 0) {
-      return this.options.defaultAgent;
+  async isAlive(holder, runner) {
+    if (this.starting.has(holder)) {
+      return true;
+    }
+    if (typeof runner.isRunActive !== "function") {
+      return true;
+    }
+    try {
+      return await runner.isRunActive(holder);
+    } catch {
+      return true;
     }
-    const registered = this.agents.list();
-    return registered.length === 1 ? registered[0]?.name ?? "default" : "default";
   }
-  effectiveTools(definition) {
-    if (definition === void 0) {
-      return void 0;
+  /**
+  * The run holding `threadId`, or `null` when it is free — a holder the runner reports dead counts
+  * as free, and is returned as `stale` so the caller can claim over it.
+  */
+  async holder(threadId, runner) {
+    const holder = await this.queueStore().activeRunForThread(threadId);
+    if (holder === null) {
+      return {
+        live: null,
+        stale: null
+      };
     }
-    const delegated = (definition.delegatesTo ?? []).map((edge) => {
-      const { agent, detached } = (0, import_nestjs_agent_core7.normalizeDelegation)(edge);
-      return delegateToolName({
-        target: agent,
-        detached
-      });
-    });
-    if (definition.tools === void 0 && delegated.length === 0) {
-      return void 0;
+    return await this.isAlive(holder, runner) ? {
+      live: holder,
+      stale: null
+    } : {
+      live: null,
+      stale: holder
+    };
+  }
+  /**
+  * Decide what follows a TOP-LEVEL run that is settling on `threadId`, and move the thread there:
+  * hand it to the next queued message (claimed and popped here, started by the caller), or pause
+  * the queue, or release the thread. Call it BEFORE the run's terminal frame, so a client reading
+  * the stream learns what comes next from the `queue` frame, and so the thread is already free
+  * when the client sees the run end.
+  *
+  * A no-op returning `{}` on a store without a queue.
+  */
+  async plan(args) {
+    if (!(0, import_nestjs_agent_core8.isChatQueueStore)(this.store)) {
+      return {};
     }
-    return [
-      ...definition.tools ?? [],
-      ...delegated
-    ];
+    const store = this.store;
+    const { threadId, outcome } = args;
+    if (await store.activeRunForThread(threadId) !== args.runId) {
+      return {};
+    }
+    let holding = args.runId;
+    for (let attempt = 0; attempt < MAX_DRAIN_ATTEMPTS; attempt += 1) {
+      const items = await store.listQueue(threadId);
+      const head = items[0];
+      if (head === void 0) {
+        if (holding !== null) {
+          await store.releaseActiveStream(threadId, holding);
+          holding = null;
+          continue;
+        }
+        return {};
+      }
+      let pause = await store.queuePause(threadId);
+      if (pause === null) {
+        const reason = pauseReasonFor(outcome, head);
+        if (reason !== null) {
+          pause = {
+            reason,
+            ...outcome === "failed" && args.error !== void 0 ? {
+              message: args.error
+            } : {},
+            at: (/* @__PURE__ */ new Date()).toISOString()
+          };
+          await store.setQueuePause(threadId, pause);
+        }
+      }
+      if (pause === null) {
+        const blocked = await this.quotaBlock(head.actor);
+        if (blocked !== null) {
+          pause = {
+            reason: "quota_exceeded",
+            message: blocked,
+            at: (/* @__PURE__ */ new Date()).toISOString()
+          };
+          await store.setQueuePause(threadId, pause);
+        }
+      }
+      if (pause !== null) {
+        if (holding !== null) {
+          await store.releaseActiveStream(threadId, holding);
+        }
+        return {
+          frame: queueFrame(items, pause)
+        };
+      }
+      const claimed = await store.claimActiveStream(threadId, head.id, holding !== null ? {
+        replacing: holding
+      } : {});
+      if (!claimed) {
+        return {};
+      }
+      holding = head.id;
+      if (!await store.removeQueuedMessage(head.id)) {
+        await store.releaseActiveStream(threadId, head.id);
+        holding = null;
+        continue;
+      }
+      const next = {
+        runId: head.id,
+        messageId: head.id,
+        input: await this.inputFor(head)
+      };
+      return {
+        next,
+        frame: queueFrame(items.slice(1), null, {
+          messageId: head.id,
+          runId: head.id
+        })
+      };
+    }
+    if (holding !== null) {
+      await store.releaseActiveStream(threadId, holding);
+    }
+    return {};
   }
-  forAgent(agentName) {
-    const name = agentName ?? this.defaultAgentName();
-    const definition = this.agents.get(name);
-    const toolAllowList = this.effectiveTools(definition);
-    const followUpsCount = this.followUpsCount();
-    const retrieval = this.options.retrieval;
-    const historyPolicy = this.historyPolicy(definition);
-    const ask = definition?.ask ?? this.options.ask;
-    return {
-      model: this.model,
-      store: this.store,
-      sink: this.sink,
-      rolesPolicy: this.rolesPolicy,
-      ...this.options.approvalPolicy !== void 0 ? {
-        approvalPolicy: this.options.approvalPolicy
-      } : {},
-      registry: this.registry,
-      promptContributors: this.promptContributors,
-      systemPrompt: definition?.systemPrompt ?? this.options.systemPrompt ?? "You are a helpful assistant.",
-      maxSteps: definition?.maxSteps ?? 8,
-      ...definition?.maxDelegationDepth !== void 0 ? {
-        maxDelegationDepth: definition.maxDelegationDepth
-      } : {},
-      ...definition?.maxAgentAppearances !== void 0 ? {
-        maxAgentAppearances: definition.maxAgentAppearances
-      } : {},
-      ...definition?.modelId !== void 0 ? {
-        modelId: definition.modelId
-      } : {},
-      ...this.pricingStore !== void 0 ? {
-        pricingStore: this.pricingStore
-      } : {},
-      ...historyPolicy !== void 0 ? {
-        historyPolicy
-      } : {},
-      inputProcessors: this.options.inputProcessors ?? [],
-      outputProcessors: this.options.outputProcessors ?? [],
-      ...definition?.outputSchema !== void 0 ? {
-        outputSchema: definition.outputSchema
-      } : {},
-      ...definition?.outputRepairAttempts !== void 0 ? {
-        outputRepairAttempts: definition.outputRepairAttempts
-      } : {},
-      ...definition?.intake !== void 0 ? {
-        intake: definition.intake
-      } : {},
-      // Most specific wins, exactly as `historyPolicy` resolves: the agent's own `@Agent({ ask })`,
-      // else the module-wide flag. Both are module config, so every process of a deployment agrees.
-      ...ask === true ? {
-        ask: true
-      } : {},
-      // Module-wide, never per-agent: a skill is a procedure, not a persona, and an agent that could
-      // opt out of one would make the catalog depend on which agent a turn happened to select — a
-      // per-turn fact the worker re-deriving the tool list cannot see.
-      ...this.skills !== void 0 ? {
-        skills: this.skills
-      } : {},
-      // Module-wide, never per-agent, for the same reason skills are: which memories a turn carries
-      // cannot depend on which persona answered it, or the worker re-deriving a dispatched turn's
-      // tool list would disagree with the loop about whether `remember` was offered.
-      ...this.memory !== void 0 ? {
-        memory: this.memory
-      } : {},
-      ...toolAllowList !== void 0 ? {
-        toolAllowList
-      } : {},
-      ...this.options.toolTimeoutMs !== void 0 ? {
-        toolTimeoutMs: this.options.toolTimeoutMs
+  /**
+  * {@link plan}, then start what it picked with `start`. What an in-process settle (the inline
+  * runner, a durable cancel issued outside a workflow) calls; answers the frame to write.
+  */
+  async handoff(args, start) {
+    const plan = await this.plan(args);
+    if (plan.next === void 0) {
+      return plan.frame;
+    }
+    return await this.launch(args.threadId, plan.next, start) ? plan.frame : this.pausedFrame(args.threadId);
+  }
+  /**
+  * Start the head of an IDLE thread's queue — after a send queued behind a run that turned out to
+  * be gone, after a resume, after a stale holder. Does nothing while a live run holds the thread
+  * (its settle drains) or while the queue is paused. Answers the started run's id, if any.
+  */
+  async kick(threadId, runner) {
+    if (!(0, import_nestjs_agent_core8.isChatQueueStore)(this.store)) {
+      return void 0;
+    }
+    const { live, stale } = await this.holder(threadId, runner);
+    if (live !== null) {
+      return void 0;
+    }
+    if (stale !== null) {
+      this.logger.warn(`thread ${threadId} was held by run ${stale}, which is no longer running`);
+    }
+    const plan = await this.plan({
+      threadId,
+      runId: stale,
+      outcome: "completed"
+    });
+    if (plan.next === void 0) {
+      return void 0;
+    }
+    const started = await this.launch(threadId, plan.next, (input, runId) => runner.start(input, {
+      runId
+    }));
+    if (started && plan.frame !== void 0) {
+      await this.write(plan.next.runId, plan.frame);
+    }
+    return started ? plan.next.runId : void 0;
+  }
+  /**
+  * Start a turn the thread is already claimed for. On failure the message goes back to the head of
+  * the queue, the queue pauses (`start_failed`), and the claim is released — nothing is lost and
+  * nothing is left holding the thread.
+  */
+  async launch(threadId, next, start) {
+    this.starting.add(next.runId);
+    try {
+      await start(next.input, next.runId);
+      return true;
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      this.logger.error(`queued message ${next.messageId} could not start: ${message}`);
+      await this.restore(threadId, next, "start_failed", message);
+      return false;
+    } finally {
+      this.starting.delete(next.runId);
+    }
+  }
+  /** Put a turn that never started back at the head of its queue, paused, and free the thread. */
+  async restore(threadId, next, reason, message) {
+    const store = this.queueStore();
+    const { input } = next;
+    await store.enqueueMessage({
+      threadId,
+      actor: input.actor,
+      content: input.userText,
+      at: "head",
+      ...input.attachments !== void 0 ? {
+        attachments: input.attachments
       } : {},
-      ...this.options.toolTransientRetry !== void 0 ? {
-        toolTransientRetry: this.options.toolTransientRetry
+      ...input.agentName !== void 0 ? {
+        agentName: input.agentName
       } : {},
-      ...followUpsCount !== void 0 ? {
-        followUpsCount
+      ...input.model !== void 0 ? {
+        model: input.model
       } : {},
-      ...retrieval?.mode === "inject" ? {
-        retriever: retrieval.retriever,
-        ...retrieval.topK !== void 0 ? {
-          retrievalTopK: retrieval.topK
-        } : {}
+      ...input.pageContext !== void 0 ? {
+        pageContext: input.pageContext
       } : {}
+    });
+    await store.setQueuePause(threadId, {
+      reason,
+      message,
+      at: (/* @__PURE__ */ new Date()).toISOString()
+    });
+    await store.releaseActiveStream(threadId, next.runId);
+  }
+  /** A `queue` frame with the thread's current state. */
+  async pausedFrame(threadId) {
+    return {
+      kind: "queue",
+      queue: await this.state(threadId)
     };
   }
   /**
-  * The ceiling on how much of a thread this agent's turns carry, most specific wins: the agent's
-  * own `@Agent({ history })`, else a module-wide custom `historyPolicy`, else the module-wide
-  * `history` window. Undefined → unbounded, the behaviour of a module that configures none.
+  * Tell whoever is watching the thread that its queue changed: a `queue` frame into the stream of
+  * the run holding it. Best-effort — a thread nobody is streaming has no one to tell, and the next
+  * read of the thread carries the queue anyway.
   */
-  historyPolicy(definition) {
-    if (definition?.history !== void 0) {
-      return this.window(definition.history);
+  async publish(threadId) {
+    const state = await this.state(threadId);
+    const holder = await this.queueStore().activeRunForThread(threadId);
+    if (holder !== null) {
+      await this.write(holder, {
+        kind: "queue",
+        queue: state
+      }).catch((error) => {
+        this.logger.warn(`could not publish the queue of thread ${threadId}: ${error instanceof Error ? error.message : String(error)}`);
+      });
     }
-    if (this.options.historyPolicy !== void 0) {
-      return this.options.historyPolicy;
+    return state;
+  }
+  async write(runId, frame) {
+    const writer = await this.sink.open(runId);
+    await writer.write((0, import_nestjs_agent_core8.encodeStreamEvent)(frame));
+  }
+  /** Why `actor` may not start a turn now (the quota message), or `null`. */
+  async quotaBlock(actor) {
+    if (this.options?.quota === void 0 || this.quotaProvider === void 0) {
+      return null;
+    }
+    try {
+      const { blocked } = await this.quotaProvider.report({
+        actor
+      });
+      if (blocked === void 0) {
+        return null;
+      }
+      return blocked.reason ?? `The ${blocked.period === "day" ? "daily" : "monthly"} quota is used up`;
+    } catch {
+      return null;
     }
-    return this.options.history === void 0 ? void 0 : this.window(this.options.history);
   }
-  /** Build the built-in window policy from the declarative `{ maxMessages, maxTokens, summarize }`. */
-  window(config) {
-    return (0, import_nestjs_agent_core7.windowHistory)({
-      ...config.maxMessages !== void 0 ? {
-        maxMessages: config.maxMessages
+  /**
+  * The turn a queued message starts: everything it was queued with, today's date, and its
+  * attachments' urls minted afresh — the ones stored at enqueue time may have expired while it
+  * waited. An attachment the staging store no longer resolves keeps its stored url.
+  */
+  async inputFor(message) {
+    const attachments = await this.freshAttachments(message.actor, message.attachments ?? []);
+    return {
+      threadId: message.threadId,
+      actor: message.actor,
+      userText: message.content,
+      day: utcDay(),
+      ...message.agentName !== void 0 ? {
+        agentName: message.agentName
       } : {},
-      ...config.maxTokens !== void 0 ? {
-        maxTokens: config.maxTokens
+      ...attachments.length > 0 ? {
+        attachments
       } : {},
-      // The shared module model, not a per-agent one: an agent's `modelId` is an accounting label,
-      // and only one provider is ever bound.
-      ...config.summarize === true ? {
-        summarize: (0, import_nestjs_agent_core7.summarizeWithModel)(this.model)
+      ...message.pageContext !== void 0 ? {
+        pageContext: message.pageContext
+      } : {},
+      ...message.model !== void 0 ? {
+        model: message.model
       } : {}
-    });
+    };
   }
-  /** Normalize the `followUps` option (`true` → 3, `{ count }` → count) to a number, or undefined. */
-  followUpsCount() {
-    const followUps = this.options.followUps;
-    if (followUps === true) {
-      return 3;
-    }
-    if (typeof followUps === "object") {
-      return followUps.count;
+  async freshAttachments(actor, attachments) {
+    const staging = this.staging;
+    if (attachments.length === 0 || staging === void 0 || typeof staging.resolve !== "function") {
+      return attachments;
     }
-    return void 0;
+    return Promise.all(attachments.map(async (attachment) => {
+      try {
+        return await staging.resolve({
+          mediaId: attachment.mediaId,
+          actor
+        }) ?? attachment;
+      } catch {
+        return attachment;
+      }
+    }));
   }
 };
-AgentDepsFactory2 = _ts_decorate6([
+ChatQueueService2 = _ts_decorate6([
   (0, import_common6.Injectable)(),
-  _ts_param5(0, (0, import_common6.Inject)(import_nestjs_agent_core8.AGENT_OPTIONS)),
-  _ts_param5(1, (0, import_common6.Inject)(import_nestjs_agent_core7.AGENT_MODEL)),
-  _ts_param5(2, (0, import_common6.Inject)(import_nestjs_agent_core7.AGENT_STORE)),
-  _ts_param5(3, (0, import_common6.Inject)(import_nestjs_agent_core7.AGENT_SINK)),
-  _ts_param5(4, (0, import_common6.Inject)(import_nestjs_agent_core7.AGENT_ROLES_POLICY)),
-  _ts_param5(5, (0, import_common6.Inject)(import_nestjs_agent_core7.AGENT_TOOL_REGISTRY)),
-  _ts_param5(6, (0, import_common6.Inject)(import_nestjs_agent_core7.AGENT_REGISTRY)),
-  _ts_param5(7, (0, import_common6.Inject)(import_nestjs_agent_core7.AGENT_PROMPT_CONTRIBUTORS)),
-  _ts_param5(8, (0, import_common6.Optional)()),
-  _ts_param5(8, (0, import_common6.Inject)(import_nestjs_agent_core7.AGENT_PRICING_STORE)),
-  _ts_param5(9, (0, import_common6.Optional)()),
-  _ts_param5(9, (0, import_common6.Inject)(import_nestjs_agent_core7.AGENT_SKILLS)),
-  _ts_param5(10, (0, import_common6.Optional)()),
-  _ts_param5(10, (0, import_common6.Inject)(import_nestjs_agent_core7.AGENT_MEMORY)),
+  _ts_param5(0, (0, import_common6.Inject)(import_nestjs_agent_core8.AGENT_STORE)),
+  _ts_param5(1, (0, import_common6.Inject)(import_nestjs_agent_core8.AGENT_SINK)),
+  _ts_param5(2, (0, import_common6.Optional)()),
+  _ts_param5(2, (0, import_common6.Inject)(import_nestjs_agent_core8.AGENT_QUOTA_PROVIDER)),
+  _ts_param5(3, (0, import_common6.Optional)()),
+  _ts_param5(3, (0, import_common6.Inject)(import_nestjs_agent_core8.AGENT_OPTIONS)),
+  _ts_param5(4, (0, import_common6.Optional)()),
+  _ts_param5(4, (0, import_common6.Inject)(import_nestjs_agent_core8.AGENT_ATTACHMENT_STAGING)),
   _ts_metadata5("design:type", Function),
   _ts_metadata5("design:paramtypes", [
-    typeof AgentModuleOptions === "undefined" ? Object : AgentModuleOptions,
-    typeof ModelProvider === "undefined" ? Object : ModelProvider,
     typeof AgentStore === "undefined" ? Object : AgentStore,
     typeof TokenStreamSink === "undefined" ? Object : TokenStreamSink,
-    typeof RolesPolicy === "undefined" ? Object : RolesPolicy,
-    typeof import_nestjs_agent_core7.ToolRegistry === "undefined" ? Object : import_nestjs_agent_core7.ToolRegistry,
-    typeof import_nestjs_agent_core7.AgentRegistry === "undefined" ? Object : import_nestjs_agent_core7.AgentRegistry,
-    Array,
-    Object,
-    Object,
-    Object
+    typeof QuotaProvider === "undefined" ? Object : QuotaProvider,
+    typeof Pick === "undefined" ? Object : Pick,
+    typeof AttachmentStagingStore === "undefined" ? Object : AttachmentStagingStore
   ])
-], AgentDepsFactory2);
-
-// src/agent.service.ts
-var import_nestjs_agent_core10 = require("@dudousxd/nestjs-agent-core");
-var import_common8 = require("@nestjs/common");
+], ChatQueueService2);
+function pauseReasonFor(outcome, head) {
+  if (outcome === "failed") {
+    return "run_failed";
+  }
+  if (outcome === "cancelled" && head.interrupt !== true) {
+    return "cancelled";
+  }
+  return null;
+}
+__name(pauseReasonFor, "pauseReasonFor");
+function queueFrame(items, paused, started) {
+  return {
+    kind: "queue",
+    queue: {
+      items: items.map(import_nestjs_agent_core8.queuedMessageView),
+      paused
+    },
+    ...started !== void 0 ? {
+      started
+    } : {}
+  };
+}
+__name(queueFrame, "queueFrame");
 
 // src/run-not-active.exception.ts
 var import_nestjs_agent_core9 = require("@dudousxd/nestjs-agent-core");
@@ -1906,6 +1911,9 @@ var AgentService = class {
         actor: params.actor,
         ...params.transient === true ? {
           transient: true
+        } : {},
+        ...params.newThreadId !== void 0 ? {
+          id: params.newThreadId
         } : {}
       });
       threadId = created.id;
@@ -2330,6 +2338,38 @@ var AgentService = class {
     });
     throw new RunNotActiveException(runId);
   }
+  /** Who owns the thread, or `null` when there is no such (live) thread. */
+  async threadOwner(threadId) {
+    return this.store.ownerOfThread(threadId);
+  }
+  /**
+  * May `actor` continue the run whose stream is `runId` — the AG-UI resume? Only the actor whose
+  * thread is streaming it (`403` otherwise), and only while it still is: a run that is over is
+  * waiting on no one (`409 run_not_active`), whatever an old interrupt id says.
+  */
+  async assertResumable(actor, runId) {
+    const owner = await this.store.ownerOfActiveStream(runId);
+    if (owner === null) {
+      throw new RunNotActiveException(runId);
+    }
+    if (owner !== actor.id) {
+      throw new import_common8.ForbiddenException("run belongs to another actor");
+    }
+  }
+  /**
+  * Everything {@link approve} / {@link reject} check before they signal — who may decide, and
+  * that the request has not lapsed — without signalling. For a caller that settles several
+  * decisions at once and must refuse all of them if one is refused (an AG-UI resume).
+  */
+  async checkDecision(actor, toolCallId2) {
+    await this.assertMayDecide(actor, toolCallId2);
+    await this.assertNotExpired(toolCallId2);
+  }
+  /** Everything {@link answer} checks before it signals, without signalling — see {@link checkDecision}. */
+  async checkAnswer(actor, toolCallId2, answers2) {
+    await this.assertOwnsToolCall(actor, toolCallId2);
+    await this.assertAnswersFit(toolCallId2, answers2);
+  }
   async cancel(actor, runId) {
     await this.assertOwnsActiveStream(actor, runId);
     return this.runner.cancel(runId);
@@ -2722,7 +2762,7 @@ AgentService = _ts_decorate7([
     typeof ModelCatalog === "undefined" ? Object : ModelCatalog,
     typeof QuotaProvider === "undefined" ? Object : QuotaProvider,
     typeof Pick === "undefined" ? Object : Pick,
-    typeof ChatQueueService === "undefined" ? Object : ChatQueueService
+    typeof ChatQueueService2 === "undefined" ? Object : ChatQueueService2
   ])
 ], AgentService);
 
@@ -5569,7 +5609,7 @@ InlineAgentRunner = _ts_decorate25([
   _ts_metadata24("design:paramtypes", [
     typeof AgentDepsFactory === "undefined" ? Object : AgentDepsFactory,
     typeof AgentStore === "undefined" ? Object : AgentStore,
-    typeof ChatQueueService === "undefined" ? Object : ChatQueueService
+    typeof ChatQueueService2 === "undefined" ? Object : ChatQueueService2
   ])
 ], InlineAgentRunner);
 function isThreadTurn2(input) {
@@ -5784,7 +5824,11 @@ function sharedProviders(durable) {
     SkillDiscoveryService,
     // The thread message queue — every surface, since both runners and the durable workflow settle
     // into it, and the chat routes enqueue into it.
-    ChatQueueService,
+    ChatQueueService2,
+    {
+      provide: AGENT_CHAT_QUEUE,
+      useExisting: ChatQueueService2
+    },
     InlineAgentRunner,
     AgentService,
     // Bound ALWAYS (durable or inline) — the console's cross-thread approvals inbox routes decisions
@@ -5846,7 +5890,8 @@ function exportsFor() {
     import_nestjs_agent_core31.AGENT_DEPS_FACTORY,
     AgentDepsFactory2,
     AgentService,
-    ChatQueueService,
+    ChatQueueService2,
+    AGENT_CHAT_QUEUE,
     InlineAgentRunner,
     import_nestjs_agent_core31.AGENT_APPROVAL_PORT
   ];
@@ -5867,15 +5912,28 @@ var BASE_CONTROLLERS = [
   ConfigController,
   AttachmentsController
 ];
-var GUARDABLE_CONTROLLERS = BASE_CONTROLLERS;
-function controllersForSurface(surface) {
-  return surface === "engine" ? [] : BASE_CONTROLLERS;
+function adapterControllers(adapters) {
+  return (adapters ?? []).flatMap((adapter) => adapter.controllers);
+}
+__name(adapterControllers, "adapterControllers");
+function adapterProviders(adapters) {
+  return (adapters ?? []).flatMap((adapter) => adapter.providers ?? []);
+}
+__name(adapterProviders, "adapterProviders");
+function controllersForSurface(surface, adapters) {
+  return surface === "engine" ? [] : [
+    ...BASE_CONTROLLERS,
+    ...adapterControllers(adapters)
+  ];
 }
 __name(controllersForSurface, "controllersForSurface");
 var GUARDS_METADATA = "__guards__";
-function applyGuards(guards) {
+function applyGuards(guards, adapters) {
   const resolved = guards ?? [];
-  for (const controller of GUARDABLE_CONTROLLERS) {
+  for (const controller of [
+    ...BASE_CONTROLLERS,
+    ...adapterControllers(adapters)
+  ]) {
     Reflect.defineMetadata(GUARDS_METADATA, resolved, controller);
   }
 }
@@ -5901,7 +5959,7 @@ var AgentModule = class _AgentModule {
   }
   static forRoot(options) {
     const path = options.path ?? DEFAULT_PATH;
-    applyGuards(options.guards);
+    applyGuards(options.guards, options.adapters);
     return {
       module: _AgentModule,
       global: true,
@@ -5909,21 +5967,22 @@ var AgentModule = class _AgentModule {
         import_core4.DiscoveryModule,
         routerFor(path)
       ],
-      controllers: controllersForSurface(options.surface),
+      controllers: controllersForSurface(options.surface, options.adapters),
       providers: [
         {
           provide: import_nestjs_agent_core31.AGENT_OPTIONS,
           useValue: options
         },
         ...sharedProviders(options.durable ?? false),
-        ...guardProviders(options.guards)
+        ...guardProviders(options.guards),
+        ...adapterProviders(options.adapters)
       ],
       exports: exportsFor()
     };
   }
   static forRootAsync(options) {
     const path = options.path ?? DEFAULT_PATH;
-    applyGuards(options.guards);
+    applyGuards(options.guards, options.adapters);
     return {
       module: _AgentModule,
       global: true,
@@ -5932,7 +5991,7 @@ var AgentModule = class _AgentModule {
         routerFor(path),
         ...options.imports ?? []
       ],
-      controllers: controllersForSurface(options.surface),
+      controllers: controllersForSurface(options.surface, options.adapters),
       providers: [
         {
           provide: import_nestjs_agent_core31.AGENT_OPTIONS,
@@ -5950,7 +6009,8 @@ var AgentModule = class _AgentModule {
           inject: options.inject ?? []
         },
         ...sharedProviders(options.durable ?? false),
-        ...guardProviders(options.guards)
+        ...guardProviders(options.guards),
+        ...adapterProviders(options.adapters)
       ],
       exports: exportsFor()
     };