@0xmaxma/claude-gateway 1.8.10 → 1.8.11

package/README.md

@@ -15,7 +15,7 @@ A self-hosted multi-agent gateway for Claude Code — with agents that improve t
 - 📚 **Knowledge base (two-lane memory)** — per-agent SQLite/FTS5 searchable archive exposed through `memory_search` / `memory_get` MCP tools, so agents recall notes that don't fit the always-injected core; chunks carry fail-closed provenance and the index is refreshed off the gateway event loop. See [`gateway.knowledge`](#gatewayknowledge)
 - 🌙 **Nightly dreaming** — background consolidation of long-term memory: a print-only reviewer proposes ops that a safe applier writes to `MEMORY.md` / `USER.md` (backup, bounded-loss, net-negative when over budget). Deterministic compaction, budget-scaled pruning, and staleness GC keep memory near budget without forgetting — archived entries stay searchable. See [`gateway.dreaming`](#gatewaydreaming)
 - 🤖 **Multi-agent** — run multiple bots from a single gateway, each with isolated sessions
-- 🔌 **Multi-channel MCP** — modular tool system per channel (Telegram, Discord, LINE, Slack, Cron, Skills, extensible to more)
+- 🔌 **Multi-channel MCP** — modular tool system per channel (Telegram, Discord, LINE, Slack, WhatsApp, Cron, Skills, extensible to more)
 - 🧩 **Agent skills** — extensible skill system via SKILL.md files; agents can create, delete, and install skills from URLs at runtime with hot-reload
 - 🎭 **Agent identity** — define personality, tone, and rules via workspace markdown files
 - 📡 **Live status messages** — real-time status updates showing tool usage, thinking, and progress
@@ -772,6 +772,8 @@ Tokens are stored per-agent at `~/.claude-gateway/agents/<id>/.env` and auto-loa
 
 A variable you exported yourself always wins over the `.env` file and is never replaced by a reload. A token the gateway did read from a `.env` is refreshed when that file changes, so **rotating a token takes effect on the next config reload** rather than at the next restart. Note that only `config.json` is watched — editing a `.env` by hand applies on the following reload, while the MCP `agent_create` / `agent_update` tools write both files and so take effect immediately. If a `${VAR}` cannot be resolved from anywhere, that one agent is skipped — the rest of the gateway starts normally — and the skip is logged to `logs/gateway.log` with the name of the missing variable.
 
+WhatsApp Cloud's credentials (`accessToken`, `phoneNumberId`, `appSecret`, `verifyToken`) are plain fields under the agent's `whatsapp_cloud` config block, not a dedicated "bot token" field — but they resolve through the exact same mechanism as Telegram/Discord bot tokens: reference them as `${VAR}` in `config.json` and put the value in the agent's `.env` (or export it as a shell variable), same as above.
+
 ---
 
 ## Architecture
@@ -1383,6 +1385,9 @@ sees a message. If those aren't met the bot looks online but stays silent.
 | | Guild | **Message Content Intent** + **View Channel** + **Read Message History** | `groupPolicy` + `guildAllowlist` (+ optional `channelAllowlist`/`roleAllowlist`) | `requireMention` false, or @mentioned/replied |
 | **LINE** | 1:1 | webhook delivered (valid signature) | `dmPolicy` | — |
 | | Group/Room | webhook delivered + bot is a member | `groupPolicy` + `groupAllowlist` | `requireMention` false, or **native** @mention |
+| **WhatsApp (Baileys)** | DM | number is linked (QR/pairing-code device link) | `dmPolicy` + `pairing` → `dmAllowlist` (per account) | — |
+| | Group | number is linked and is a member of the group | `groupPolicy` + `groupAllowlist` (per account) | `requireMention` false, or @mentioned |
+| **WhatsApp (Cloud API)** | DM | webhook delivered (valid `X-Hub-Signature-256`) | `dmPolicy` + `pairing` → `dmAllowlist` | — (DM-only, no group concept) |
 
 **Telegram limits**
 - Exactly one process may poll a bot token — a second poller causes `409 Conflict`.
@@ -1402,6 +1407,14 @@ sees a message. If those aren't met the bot looks online but stays silent.
 - Delivery is **reply-token-first (free) → push fallback (metered)**. The single-use reply token lives only ~1 min; after that, replies consume the OA's monthly push quota.
 - Max **5 message objects** per reply/push request (the gateway auto-chunks to fit).
 
+**WhatsApp limits**
+- Two independent modes, configured separately: the **Baileys** device-link bridge (`whatsapp` config block) and the **Cloud API** (`whatsapp_cloud` config block).
+- **Baileys** requires linking a device per number — QR code or a text pairing code, the same one-time handshake as WhatsApp Web. Multi-account: an agent can hold several linked numbers at once (`whatsapp.accounts[]`), each with its own DM/group policy and allowlist.
+- **Cloud API is DM-only** — a WhatsApp Business number has no group concept, so there's no `groupPolicy`/`groupAllowlist`/`requireMention` for it.
+- **Cloud API's inbound webhook requires a valid `X-Hub-Signature-256`** (HMAC-SHA256 of the raw body against `appSecret`); a bad or missing signature is rejected with `401` before the payload is parsed.
+- **Cloud API's 24-hour customer-service window**: free-form text replies only work within 24h of the user's last inbound message; outside that window only a pre-approved message template can reach them, and template sending is off by default (`templatesEnabled: false`) since it's the one send that can reach a user outside that window.
+- Inbound media cap is **20 MB** on both modes (same `MediaStore` cap LINE's file uploads use).
+
 ---
 
 ## Telegram Groups

package/config.template.json

@@ -39,7 +39,8 @@
         {
           "key": "${MY_API_KEY}",
           "description": "Internal app",
-          "agents": ["alfred"]
+          "agents": ["alfred"],
+          "write": true
         },
         {
           "key": "${ADMIN_API_KEY}",

package/dist/agent/runner.d.ts

@@ -1,6 +1,7 @@
 import { EventEmitter } from 'events';
 import { AgentConfig, CustomConnectorEntry, GatewayConfig, Logger, ModelConfig, ApiAttachment, ImageParams, VideoParams } from '../types';
 import { SessionProcess } from '../session/process';
+import { type WhatsAppStatus } from '../whatsapp/manager';
 import { type SkillRegistry } from '../skills';
 import { type ApiStreamCallbacks, type TurnSink } from './turn-stream';
 import { type CliChannel } from '../cli-viewer/pairing-store';
@@ -9,6 +10,14 @@ import type { ChatChannel } from '../history/types';
 import type { SkillLearningManager } from './skill-learning';
 export declare const MAX_IMAGE_SIZE_BYTES: number;
 export declare const DEFAULT_MODELS: ModelConfig[];
+/**
+ * One-line reminder injected into every `whatsapp_cloud` turn's <channel>
+ * block (see buildChannelXml) — the 24h customer-service window is a
+ * WhatsApp-Business-only rule the agent cannot infer from the turn itself.
+ *
+ * Must stay free of `--` so it remains a well-formed XML comment.
+ */
+export declare const WHATSAPP_CLOUD_WINDOW_NOTE: string;
 export declare const CHANNEL_COALESCE_WINDOW_MS = 1200;
 /**
  * Convert absolute file paths (e.g. from a reply tool's `files` input) into
@@ -42,6 +51,10 @@ export declare class AgentRunner extends EventEmitter {
     private discordReceiver;
     private lineReply;
     private slackOutbound;
+    private whatsAppCloudOutbound;
+    private readonly whatsappAccounts;
+    private whatsappConfigSnapshot;
+    private readonly whatsappAccountForChat;
     private readonly sessionStore;
     private readonly idleTimeoutMs;
     private readonly maxConcurrent;
@@ -475,8 +488,67 @@ export declare class AgentRunner extends EventEmitter {
      */
     private sweepStaleSessionDirs;
     updateAgentConfig(newConfig: AgentConfig): void;
+    /**
+     * Reconcile `this.whatsappAccounts` with `agentConfig.whatsapp.accounts`.
+     *
+     * Diffing (rather than teardown+recreate) is load-bearing here: a manager
+     * holds a live, authenticated Baileys socket that can take tens of seconds
+     * to re-establish, so an edit to account "sales" must not drop account
+     * "default"'s connection. Accounts that survive the diff only get the new
+     * AgentConfig pushed into them — their socket is untouched.
+     *
+     * Removal uses stop() (socket teardown), never unlink(): dropping an
+     * account from config must not silently wipe its on-disk session. The
+     * DELETE .../whatsapp/accounts/:id route unlinks explicitly before it
+     * rewrites config.
+     */
+    private syncWhatsAppAccounts;
+    /** Live managers, in configured order. */
+    private whatsAppManagers;
+    /**
+     * Pick the manager a call should use.
+     *
+     * An EXPLICIT accountId must exist — silently falling back would send a
+     * reply from the wrong number, which on WhatsApp is visible to the
+     * recipient and unrecoverable. Without one, prefer the account the chat's
+     * last inbound message arrived on (so a reply leaves on the number the user
+     * actually wrote to), then 'default', then — for an agent whose only
+     * account is named something else — its single account.
+     */
+    private whatsAppManagerFor;
+    /**
+     * Which account id a send to `chatId` (with an optional explicit
+     * `accountId`) would actually use — the same resolution
+     * `sendWhatsAppMessage` applies internally, exposed read-only so a caller
+     * (the `/whatsapp/send` route) can run access-control/path-confinement
+     * checks against the REAL target account without duplicating or
+     * second-guessing this resolution logic. Throws the same errors
+     * `whatsAppManagerFor` would (unknown account / agent not started).
+     */
+    resolveWhatsAppAccountId(chatId: string | undefined, accountId?: string): string;
+    /** Live link status for one account (defaults to 'default'). */
+    getWhatsAppStatus(accountId?: string): WhatsAppStatus | undefined;
+    /** Configured account ids that currently have a live manager. */
+    getWhatsAppAccountIds(): string[];
+    startWhatsAppLinking(accountId?: string): Promise<void>;
+    requestWhatsAppPairingCode(phoneNumber: string, accountId?: string): Promise<string>;
+    unlinkWhatsApp(accountId?: string): Promise<void>;
+    sendWhatsAppMessage(jid: string, text: string, imagePath?: string, accountId?: string, 
+    /**
+     * Phase 2 extras, all optional so existing callers (auto-forward, older
+     * MCP builds) are unaffected: quote an inbound message, send the image
+     * uncompressed as a document, and clear the ⏳ ack left on the inbound
+     * message once the send lands.
+     */
+    opts?: {
+        quotedMessageId?: string;
+        asDocument?: boolean;
+        ackMessageId?: string;
+    }): Promise<void>;
     startSlackOutbound(): void;
     stopSlackOutbound(): void;
+    startWhatsAppCloudOutbound(): void;
+    stopWhatsAppCloudOutbound(): void;
     startLineReply(): void;
     stopLineReply(): void;
     getAgentConfig(): AgentConfig;

package/dist/agent/runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/agent/runner.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAOtC,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,EAAW,WAAW,EAAe,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAGhK,OAAO,EAAE,cAAc,EAA8E,MAAM,oBAAoB,CAAC;AAQhI,OAAO,EAA0C,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AAKvF,OAAO,EAML,KAAK,kBAAkB,EACvB,KAAK,QAAQ,EACd,MAAM,eAAe,CAAC;AAKvB,OAAO,EAAiC,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAG7F,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAG1C,OAAO,KAAK,EAAiB,WAAW,EAAoB,MAAM,kBAAkB,CAAC;AACrF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAoB7D,eAAO,MAAM,oBAAoB,QAAmB,CAAC;AAmBrD,eAAO,MAAM,cAAc,EAAE,WAAW,EAkBvC,CAAC;AA+BF,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAkD/C;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,OAAO,EAAE,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAuB,GAC7C,MAAM,EAAE,CAIV;AAED,qBAAa,WAAY,SAAQ,YAAY;IAC3C,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,cAAc,CAA4B;IAClD,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAC9D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,SAAS,CAAoC;IAErD,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IACjC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAEvC,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqC;IAC9D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAkC;IAOnE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6B;IAC3D,OAAO,CAAC,QAAQ,CAAiC;IACjD,OAAO,CAAC,eAAe,CAAgC;IAEvD,OAAO,CAAC,SAAS,CAAiC;IAKlD,OAAO,CAAC,aAAa,CAA4B;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,gBAAgB,CAA+C;IAGvE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IAMxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IAGxD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA8C;IAMhF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA6B;IAKhE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;IAOvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAQtB;IAIH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkC;IAKlE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4E;IAGrG,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA+B;IAOjE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAO5B;IAIJ,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAU1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAMtB;IAMJ,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IAGvD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA+B;IAGrE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoH;IAKnJ,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IAGxD,OAAO,CAAC,aAAa,CAAwC;IAI7D,OAAO,CAAC,aAAa,CAAC,CAAuB;IAG7C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAGpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IAGtC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAEvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAGlC,OAAO,CAAC,aAAa,CAA6B;gBAEtC,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,MAAM;IAwBnF;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAI/C,gBAAgB,IAAI,aAAa;IAIjC,oFAAoF;IACpF,gBAAgB,CAAC,OAAO,EAAE,oBAAoB,GAAG,SAAS,GAAG,IAAI;IAIjE,gBAAgB,IAAI,oBAAoB,GAAG,SAAS;IAIpD,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED;;;OAGG;YACW,mBAAmB;IAkIjC;;;;;;OAMG;YACW,oBAAoB;IA6ElC;;;;;;;OAOG;IACH,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAU5D;;;;;;;;OAQG;IACH,OAAO,CAAC,oBAAoB;IAgC5B;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAO5B;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB,CA8BzB;IAEF;;;;;OAKG;IACH,gBAAgB,CACd,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,MAAM,GACb;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAO1D,mFAAmF;IACnF,iBAAiB,CACf,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,UAAQ,GACX,IAAI,GAAG,UAAU,GAAG,MAAM;IAM7B;;;OAGG;YACW,oBAAoB;IAkOlC;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,MAAM,CAAC,aAAa;IAI5B,OAAO,CAAC,iBAAiB;IAYzB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAsBxB;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAYrB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAYtC;;;;OAIG;IACH,OAAO,CAAC,UAAU;IA6JlB;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,oBAAoB;IAuDnC;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,oBAAoB;IA4CnC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAKjC;;;;;;;;;OASG;IAKH,OAAO,CAAC,MAAM,CAAC,aAAa;IAc5B,MAAM,CAAC,oBAAoB,CACzB,CAAC,EAAE,WAAW,GAAG,SAAS,EAC1B,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAC1C,aAAa,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAC3C,WAAW,GAAG,SAAS;IAiB1B,MAAM,CAAC,oBAAoB,CACzB,CAAC,EAAE,WAAW,GAAG,SAAS,EAC1B,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAC1C,aAAa,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAC3C,WAAW,GAAG,SAAS;IAM1B,OAAO,CAAC,MAAM,CAAC,eAAe;IAkD9B;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;YA+Bf,iBAAiB;YAwFjB,YAAY;IAkoB1B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAIpD;;OAEG;YACW,oBAAoB;IA8BlC;;;;;;;;;;;;OAYG;YACW,mBAAmB;IAsBjC;;;;;;;;OAQG;YACW,kBAAkB;IAwChC;;OAEG;YACW,qBAAqB;IAiBnC;;OAEG;YACW,wBAAwB;IA6CtC;;OAEG;YACW,gBAAgB;IAM9B;;OAEG;YACW,mBAAmB;IAUjC;;;;;;;;;OASG;YACW,iBAAiB;IAqB/B;;;OAGG;YACW,kBAAkB;IA8BhC;;OAEG;YACW,oBAAoB;IAsDlC;;;OAGG;YACW,aAAa;IAS3B;;;OAGG;YACW,cAAc;IAS5B;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAIrB;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IAOzB;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,qBAAqB;IAkD7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACG,cAAc,CAClB,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,OAAO,CAAA;KAAE,GAC7F,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IA+DpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACG,6BAA6B,CACjC,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAAC,CAAA;KAAE,GAC/D,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAkDlC;;OAEG;IACH,OAAO,CAAC,SAAS;IAWjB;;;;OAIG;IACD,OAAO,CAAC,YAAY;IAMtB;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAUzB,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,eAAe;YAST,wBAAwB;IA2BtC,OAAO,CAAC,gBAAgB;IAmExB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAexB,OAAO,CAAC,gBAAgB;IAiBlB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA8B5B;;;;;;;;;;;;;;;;;OAiBG;YACW,qBAAqB;IAmBnC,iBAAiB,CAAC,SAAS,EAAE,WAAW,GAAG,IAAI;IAY/C,kBAAkB,IAAI,IAAI;IAS1B,iBAAiB,IAAI,IAAI;IAIzB,cAAc,IAAI,IAAI;IAetB,aAAa,IAAI,IAAI;IAOrB,cAAc,IAAI,WAAW;IAI7B;;mDAE+C;IAC/C,mBAAmB,IAAI,MAAM,GAAG,SAAS;IAIzC,qBAAqB,IAAI,IAAI;IAY7B,oBAAoB,IAAI,IAAI;IAU5B,oBAAoB,IAAI,IAAI;IAY5B,mBAAmB,IAAI,IAAI;IAUrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAkC3B;;;;OAIG;IACG,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK5F,OAAO,CAAC,sBAAsB;IA4BxB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAM9B,SAAS,IAAI,OAAO;IAIpB,kBAAkB,IAAI,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IA4BzL;;;;;;;OAOG;IACG,cAAc,CAClB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,WAAW,CAAC;QAAC,WAAW,CAAC,EAAE,WAAW,CAAA;KAAE,GACxK,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,aAAa,EAAE,CAAA;KAAE,CAAC;IAqS1D;;;;;;;OAOG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,kBAAkB,EAC7B,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,WAAW,CAAC;QAAC,WAAW,CAAC,EAAE,WAAW,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5L,OAAO,CAAC,MAAM,IAAI,CAAC;IAoVtB;;OAEG;IACH,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAI/C;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,QAAQ,EACd,IAAI,GAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnD;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,WAAW,GAAG,OAAO,CAAA;KAAE;IAS3H;;;;;;;;;OASG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS;IAKvF;;;;OAIG;IACH,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI;IAK/D;;;OAGG;IACH;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,oBAAoB;IAmB5B,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,EAAE;IAcrD,OAAO,CAAC,sBAAsB;IAc9B,gBAAgB,IAAI,MAAM;IAI1B,WAAW,IAAI,MAAM;IAIrB,YAAY,IAAI,SAAS;IAIzB,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,WAAW,CAAC;QAAC,WAAW,CAAC,EAAE,WAAW,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAI3H,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,UAAU,EAAE,YAAY,CAAC;IAInG,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/C,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IA6KrE;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,YAAY;IAKpB;;;;;;;OAOG;YACW,sBAAsB;IASpC;;;;;OAKG;YACW,eAAe;IAK7B;;;;;OAKG;YACW,gBAAgB;IAa9B;;;;;;;;;OASG;YACW,gBAAgB;IAOxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASzC,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,UAAU,EAAE,YAAY,CAAC;IAI/E;;;;OAIG;IACG,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIrE,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,UAAU,EAAE,WAAW,CAAC;IAc/G,OAAO,CAAC,+BAA+B;IAsBjC,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAiB7F,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAW5I,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWxE;;;;;;;OAOG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,kBAAkB,EAC7B,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9C,OAAO,CAAC,MAAM,IAAI,CAAC;IA2JtB,OAAO,CAAC,iBAAiB;IA2CzB;;;OAGG;IACH,eAAe,IAAI,MAAM;IAIzB;;;;;;OAMG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAoBnC"}
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/agent/runner.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAOtC,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,EAAW,WAAW,EAAe,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAGhK,OAAO,EAAE,cAAc,EAA8E,MAAM,oBAAoB,CAAC;AAQhI,OAAO,EAAmB,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAG3E,OAAO,EAA0C,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AAKvF,OAAO,EAML,KAAK,kBAAkB,EACvB,KAAK,QAAQ,EACd,MAAM,eAAe,CAAC;AAKvB,OAAO,EAAiC,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAG7F,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAG1C,OAAO,KAAK,EAAiB,WAAW,EAAoB,MAAM,kBAAkB,CAAC;AACrF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAoB7D,eAAO,MAAM,oBAAoB,QAAmB,CAAC;AAmBrD,eAAO,MAAM,cAAc,EAAE,WAAW,EAkBvC,CAAC;AAOF;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,QAE0E,CAAC;AA0BlH,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAkD/C;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,OAAO,EAAE,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAuB,GAC7C,MAAM,EAAE,CAIV;AAED,qBAAa,WAAY,SAAQ,YAAY;IAC3C,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,cAAc,CAA4B;IAClD,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAC9D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,SAAS,CAAoC;IAErD,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IACjC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAEvC,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqC;IAC9D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAkC;IAOnE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6B;IAC3D,OAAO,CAAC,QAAQ,CAAiC;IACjD,OAAO,CAAC,eAAe,CAAgC;IAEvD,OAAO,CAAC,SAAS,CAAiC;IAKlD,OAAO,CAAC,aAAa,CAA4B;IAKjD,OAAO,CAAC,qBAAqB,CAAoC;IAajE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAsC;IAIvE,OAAO,CAAC,sBAAsB,CAAqB;IAKnD,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAA6B;IACpE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,gBAAgB,CAA+C;IAGvE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IAMxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IAGxD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA8C;IAMhF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA6B;IAKhE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;IAOvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAQtB;IAIH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkC;IAKlE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4E;IAGrG,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA+B;IAOjE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAO5B;IAIJ,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAU1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAMtB;IAMJ,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IAGvD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA+B;IAGrE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoH;IAKnJ,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IAGxD,OAAO,CAAC,aAAa,CAAwC;IAI7D,OAAO,CAAC,aAAa,CAAC,CAAuB;IAG7C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAGpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IAGtC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAEvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAGlC,OAAO,CAAC,aAAa,CAA6B;gBAEtC,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,MAAM;IAwBnF;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAI/C,gBAAgB,IAAI,aAAa;IAIjC,oFAAoF;IACpF,gBAAgB,CAAC,OAAO,EAAE,oBAAoB,GAAG,SAAS,GAAG,IAAI;IAIjE,gBAAgB,IAAI,oBAAoB,GAAG,SAAS;IAIpD,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED;;;OAGG;YACW,mBAAmB;IA+IjC;;;;;;OAMG;YACW,oBAAoB;IA6ElC;;;;;;;OAOG;IACH,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAU5D;;;;;;;;OAQG;IACH,OAAO,CAAC,oBAAoB;IAgC5B;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAO5B;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB,CA8BzB;IAEF;;;;;OAKG;IACH,gBAAgB,CACd,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,MAAM,GACb;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAO1D,mFAAmF;IACnF,iBAAiB,CACf,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,UAAQ,GACX,IAAI,GAAG,UAAU,GAAG,MAAM;IAM7B;;;OAGG;YACW,oBAAoB;IAkOlC;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,MAAM,CAAC,aAAa;IAI5B,OAAO,CAAC,iBAAiB;IAYzB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAsBxB;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAYrB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAYtC;;;;OAIG;IACH,OAAO,CAAC,UAAU;IA8LlB;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,oBAAoB;IAuDnC;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,oBAAoB;IA4CnC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAKjC;;;;;;;;;OASG;IAKH,OAAO,CAAC,MAAM,CAAC,aAAa;IAc5B,MAAM,CAAC,oBAAoB,CACzB,CAAC,EAAE,WAAW,GAAG,SAAS,EAC1B,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAC1C,aAAa,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAC3C,WAAW,GAAG,SAAS;IAiB1B,MAAM,CAAC,oBAAoB,CACzB,CAAC,EAAE,WAAW,GAAG,SAAS,EAC1B,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAC1C,aAAa,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAC3C,WAAW,GAAG,SAAS;IAM1B,OAAO,CAAC,MAAM,CAAC,eAAe;IAqE9B;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;YA+Bf,iBAAiB;YAwFjB,YAAY;IA2oB1B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAIpD;;OAEG;YACW,oBAAoB;IA8BlC;;;;;;;;;;;;OAYG;YACW,mBAAmB;IAsBjC;;;;;;;;OAQG;YACW,kBAAkB;IAwChC;;OAEG;YACW,qBAAqB;IAiBnC;;OAEG;YACW,wBAAwB;IA6CtC;;OAEG;YACW,gBAAgB;IAM9B;;OAEG;YACW,mBAAmB;IAUjC;;;;;;;;;OASG;YACW,iBAAiB;IAqB/B;;;OAGG;YACW,kBAAkB;IA8BhC;;OAEG;YACW,oBAAoB;IAsDlC;;;OAGG;YACW,aAAa;IAS3B;;;OAGG;YACW,cAAc;IAS5B;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAIrB;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IAOzB;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,qBAAqB;IAkD7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACG,cAAc,CAClB,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,OAAO,CAAA;KAAE,GAC7F,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IA+DpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACG,6BAA6B,CACjC,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAAC,CAAA;KAAE,GAC/D,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAkDlC;;OAEG;IACH,OAAO,CAAC,SAAS;IAWjB;;;;OAIG;IACD,OAAO,CAAC,YAAY;IAMtB;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAUzB,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,eAAe;YAST,wBAAwB;IA2BtC,OAAO,CAAC,gBAAgB;IAiGxB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAexB,OAAO,CAAC,gBAAgB;IAiBlB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAuC5B;;;;;;;;;;;;;;;;;OAiBG;YACW,qBAAqB;IAmBnC,iBAAiB,CAAC,SAAS,EAAE,WAAW,GAAG,IAAI;IAoB/C;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,oBAAoB;IAsC5B,0CAA0C;IAC1C,OAAO,CAAC,gBAAgB;IAMxB;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IAgB1B;;;;;;;;OAQG;IACH,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM;IAIhF,gEAAgE;IAChE,iBAAiB,CAAC,SAAS,GAAE,MAAoC,GAAG,cAAc,GAAG,SAAS;IAI9F,iEAAiE;IACjE,qBAAqB,IAAI,MAAM,EAAE;IAI3B,oBAAoB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvD,0BAA0B,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIpF,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjD,mBAAmB,CACvB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM;IAClB;;;;;OAKG;IACH,IAAI,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/E,OAAO,CAAC,IAAI,CAAC;IAIhB,kBAAkB,IAAI,IAAI;IAS1B,iBAAiB,IAAI,IAAI;IAIzB,0BAA0B,IAAI,IAAI;IAWlC,yBAAyB,IAAI,IAAI;IAIjC,cAAc,IAAI,IAAI;IAetB,aAAa,IAAI,IAAI;IAOrB,cAAc,IAAI,WAAW;IAI7B;;mDAE+C;IAC/C,mBAAmB,IAAI,MAAM,GAAG,SAAS;IAIzC,qBAAqB,IAAI,IAAI;IAY7B,oBAAoB,IAAI,IAAI;IAU5B,oBAAoB,IAAI,IAAI;IAY5B,mBAAmB,IAAI,IAAI;IAUrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA2C3B;;;;OAIG;IACG,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK5F,OAAO,CAAC,sBAAsB;IA4BxB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAM9B,SAAS,IAAI,OAAO;IAIpB,kBAAkB,IAAI,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IA4BzL;;;;;;;OAOG;IACG,cAAc,CAClB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,WAAW,CAAC;QAAC,WAAW,CAAC,EAAE,WAAW,CAAA;KAAE,GACxK,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,aAAa,EAAE,CAAA;KAAE,CAAC;IAqS1D;;;;;;;OAOG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,kBAAkB,EAC7B,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,WAAW,CAAC;QAAC,WAAW,CAAC,EAAE,WAAW,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5L,OAAO,CAAC,MAAM,IAAI,CAAC;IAoVtB;;OAEG;IACH,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAI/C;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,QAAQ,EACd,IAAI,GAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACnD;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,WAAW,GAAG,OAAO,CAAA;KAAE;IAS3H;;;;;;;;;OASG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS;IAKvF;;;;OAIG;IACH,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI;IAK/D;;;OAGG;IACH;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,oBAAoB;IAmB5B,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,EAAE;IAcrD,OAAO,CAAC,sBAAsB;IAc9B,gBAAgB,IAAI,MAAM;IAI1B,WAAW,IAAI,MAAM;IAIrB,YAAY,IAAI,SAAS;IAIzB,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,WAAW,CAAC;QAAC,WAAW,CAAC,EAAE,WAAW,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAI3H,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,UAAU,EAAE,YAAY,CAAC;IAInG,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/C,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IA6KrE;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,YAAY;IAKpB;;;;;;;OAOG;YACW,sBAAsB;IASpC;;;;;OAKG;YACW,eAAe;IAK7B;;;;;OAKG;YACW,gBAAgB;IAa9B;;;;;;;;;OASG;YACW,gBAAgB;IAOxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASzC,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,UAAU,EAAE,YAAY,CAAC;IAI/E;;;;OAIG;IACG,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIrE,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,UAAU,EAAE,WAAW,CAAC;IAc/G,OAAO,CAAC,+BAA+B;IAsBjC,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAiB7F,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAW5I,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWxE;;;;;;;OAOG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE,kBAAkB,EAC7B,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9C,OAAO,CAAC,MAAM,IAAI,CAAC;IA2JtB,OAAO,CAAC,iBAAiB;IA2CzB;;;OAGG;IACH,eAAe,IAAI,MAAM;IAIzB;;;;;;OAMG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAoBnC"}

package/dist/agent/runner.js

@@ -33,7 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AgentRunner = exports.CHANNEL_COALESCE_WINDOW_MS = exports.DEFAULT_MODELS = exports.MAX_IMAGE_SIZE_BYTES = void 0;
+exports.AgentRunner = exports.CHANNEL_COALESCE_WINDOW_MS = exports.WHATSAPP_CLOUD_WINDOW_NOTE = exports.DEFAULT_MODELS = exports.MAX_IMAGE_SIZE_BYTES = void 0;
 exports.toRelMediaFiles = toRelMediaFiles;
 const crypto_1 = require("crypto");
 const events_1 = require("events");
@@ -51,6 +51,9 @@ const receiver_1 = require("../telegram/receiver");
 const receiver_2 = require("../discord/receiver");
 const line_reply_manager_1 = require("./line-reply-manager");
 const slack_client_1 = require("../api/slack-client");
+const whatsapp_cloud_client_1 = require("../api/whatsapp-cloud-client");
+const manager_1 = require("../whatsapp/manager");
+const whatsapp_accounts_1 = require("../config/whatsapp-accounts");
 const markdown_1 = require("../telegram/markdown");
 const skills_1 = require("../skills");
 const builtin_commands_1 = require("./builtin-commands");
@@ -125,6 +128,15 @@ const PROTECTED_WORKSPACE_FILES = [
     'AGENTS.md', 'SOUL.md', 'MEMORY.md', 'CLAUDE.md',
     'IDENTITY.md', 'USER.md', 'HEARTBEAT.md',
 ];
+/**
+ * One-line reminder injected into every `whatsapp_cloud` turn's <channel>
+ * block (see buildChannelXml) — the 24h customer-service window is a
+ * WhatsApp-Business-only rule the agent cannot infer from the turn itself.
+ *
+ * Must stay free of `--` so it remains a well-formed XML comment.
+ */
+exports.WHATSAPP_CLOUD_WINDOW_NOTE = '[WhatsApp Business: free-form replies only work within 24h of the user\'s last message. ' +
+    'Outside that window, whatsapp_cloud_reply requires template_name + template_language (see templatesEnabled).]';
 const MAX_API_IMAGES = 5;
 /** Extra time an api turn may keep running AFTER its soft timeout already
  *  answered the caller (#75). The soft timeout only abandons the WAIT — the
@@ -236,6 +248,29 @@ class AgentRunner extends events_1.EventEmitter {
         // it exists only so writeAutoForward's fallback/command-reply path (below) has
         // somewhere to actually deliver Slack messages instead of silently dropping them.
         this.slackOutbound = null;
+        // WhatsApp Cloud mirrors Slack exactly: webhook-based, real credentials, no
+        // reply-token TTL to work around — a plain client so writeAutoForward's
+        // fallback/command-reply path has somewhere to deliver messages instead of
+        // silently dropping them (see the Slack comment just above).
+        this.whatsAppCloudOutbound = null;
+        // One live Baileys socket per linked WhatsApp account, keyed by account id
+        // (Phase 1 of the WhatsApp feature-parity plan — this used to be a single
+        // `whatsapp: WhatsAppManager | null`). Populated in start() (needs
+        // this.callbackPort, only resolved once startCallbackServer() runs — same
+        // reason DiscordReceiver/TelegramReceiver are built there too) and then
+        // DIFFED, never rebuilt wholesale, by syncWhatsAppAccounts(): unlike
+        // SlackClient/DiscordReceiver there is no credential to re-read on a config
+        // change, since the credential IS the on-disk session (see
+        // WhatsAppAccountConfig's doc comment), so tearing a linked socket down on
+        // an unrelated config edit would be pure downtime. Each manager decides for
+        // itself whether there's anything to do on start (resumeIfLinked() no-ops
+        // if that account was never linked).
+        this.whatsappAccounts = new Map();
+        // chatId → the account id its last inbound message arrived on. Mirrors
+        // slackThreadTs above: it lets writeAutoForward (and a whatsapp_reply call
+        // that omits account_id) answer on the SAME number the user wrote to
+        // instead of guessing 'default' and replying from the wrong line.
+        this.whatsappAccountForChat = new Map();
         this.idleCleanerTimer = null;
         // Tracks session IDs with an in-flight API request (prevents concurrent turns)
         this.pendingApiSessions = new Set();
@@ -439,7 +474,11 @@ class AgentRunner extends events_1.EventEmitter {
                             ? 'line'
                             : meta['source'] === 'slack'
                                 ? 'slack'
-                                : 'telegram');
+                                : meta['source'] === 'whatsapp'
+                                    ? 'whatsapp'
+                                    : meta['source'] === 'whatsapp_cloud'
+                                        ? 'whatsapp_cloud'
+                                        : 'telegram');
                     this.channelSourceMap.set(chatId, channelSource);
                     // Slack: remember the current message's thread context so the
                     // auto-forward fallback (writeAutoForward) can stay in-thread. A
@@ -452,6 +491,14 @@ class AgentRunner extends events_1.EventEmitter {
                         else
                             this.slackThreadTs.delete(chatId);
                     }
+                    // WhatsApp: remember which linked number this chat last came in on,
+                    // so a reply that doesn't name an account_id (the auto-forward
+                    // fallback, or a whatsapp_reply call that omitted it) still goes out
+                    // on the number the user actually wrote to. Same shape as the Slack
+                    // thread-context stash just above.
+                    if (channelSource === 'whatsapp' && meta['account_id']) {
+                        this.whatsappAccountForChat.set(chatId, meta['account_id']);
+                    }
                     // LINE slow-LLM postback: stash this turn's reply token + arm the
                     // button timer before the token expires. In groups/rooms the shared
                     // button is disabled (armButton:false) — the token is still stashed so
@@ -1027,7 +1074,7 @@ class AgentRunner extends events_1.EventEmitter {
             for (const entry of entries) {
                 const meta = entry.meta ?? {};
                 const content = entry.content ?? '';
-                const userContent = content || (meta['attachment_file_id'] || meta['image_path'] ? '(photo)' : '');
+                const userContent = content || (meta['attachment_file_id'] || meta['image_path'] ? '(photo)' : meta['document_path'] ? '(document)' : meta['sticker_path'] ? '(sticker)' : '');
                 const userTs = Date.now();
                 await this.sessionStore.appendTelegramMessage(this.agentConfig.id, chatId, sessionId, {
                     role: 'user',
@@ -1058,6 +1105,33 @@ class AgentRunner extends events_1.EventEmitter {
                         // Non-fatal — leave the original path so host agents still read it
                     }
                 }
+                // WhatsApp Cloud documents (PDF today — see MediaStore.isAllowedMime):
+                // same MediaStore copy + path-rewrite as image_path above, parallel
+                // key so an inbound document doesn't collide with an inbound image
+                // in the same turn.
+                if (meta['document_path']) {
+                    try {
+                        const rel = media_store_1.MediaStore.copyToMedia(this.agentsBaseDir, this.agentConfig.id, `${channelSource}-${chatId}`, meta['document_path']);
+                        mediaFiles.push(rel);
+                        meta['document_path'] = media_store_1.MediaStore.resolvePath(this.agentsBaseDir, this.agentConfig.id, rel);
+                    }
+                    catch {
+                        // Non-fatal — leave the original path so host agents still read it
+                    }
+                }
+                // WhatsApp stickers (both channels — image/webp): same MediaStore
+                // copy + path-rewrite as image_path above, on its own key so an
+                // inbound sticker never masquerades as a photo.
+                if (meta['sticker_path']) {
+                    try {
+                        const rel = media_store_1.MediaStore.copyToMedia(this.agentsBaseDir, this.agentConfig.id, `${channelSource}-${chatId}`, meta['sticker_path']);
+                        mediaFiles.push(rel);
+                        meta['sticker_path'] = media_store_1.MediaStore.resolvePath(this.agentsBaseDir, this.agentConfig.id, rel);
+                    }
+                    catch {
+                        // Non-fatal — leave the original path so host agents still read it
+                    }
+                }
                 this.historyDb.insertMessage({
                     chatId: `${channelSource}-${chatId}`,
                     sessionId,
@@ -1068,6 +1142,14 @@ class AgentRunner extends events_1.EventEmitter {
                     senderId: meta['user_id'] ?? meta['chat_id'] ?? undefined,
                     platformMessageId: meta['message_id'] ?? undefined,
                     mediaFiles: mediaFiles.length > 0 ? mediaFiles : undefined,
+                    // Reply context (WhatsApp Phase 2) — the same meta keys buildChannelXml
+                    // renders into <replied> for the agent, persisted so the web dashboard
+                    // can show "in reply to X" instead of losing it after the turn.
+                    // whatsapp_cloud only ever sets replied_message_id (its webhook reports
+                    // the quoted id and nothing else), so the other two stay undefined there.
+                    repliedToMessageId: meta['replied_message_id'] ?? undefined,
+                    repliedToText: meta['replied_text'] ?? undefined,
+                    repliedToUser: meta['replied_user'] ?? undefined,
                     ts: userTs,
                 });
             }
@@ -1330,6 +1412,11 @@ class AgentRunner extends events_1.EventEmitter {
         const meta = params.meta ?? {};
         const optionalAttrs = [
             'image_path',
+            'document_path', // WhatsApp Cloud: inbound PDF document (see MediaStore.isAllowedMime)
+            'sticker_path', // WhatsApp (both channels): inbound sticker — kept distinct from image_path so the agent can tell a sticker from a photo
+            'location_lat', // WhatsApp (both channels): inbound location pin
+            'location_lng',
+            'vcard', // WhatsApp: inbound contact card — raw vCard on Baileys, synthesized from Meta's structured payload on Cloud
             'attachment_file_id',
             'attachment_kind',
             'attachment_mime',
@@ -1337,6 +1424,8 @@ class AgentRunner extends events_1.EventEmitter {
             'user_id', // LINE: the userId the session passes back to line_reply
             'reply_token', // LINE: single-use reply token (push is preferred; surfaced for completeness)
             'thread_ts', // Slack: set when the inbound message is inside a thread — pass back as thread_id to slack_reply to reply in-thread
+            'account_id', // WhatsApp: which linked number this arrived on — pass back to whatsapp_reply to answer on the same one
+            'interactive_id', // WhatsApp Cloud: the id of the tapped button / picked list row (content already carries its title)
             // NOTE: message_id is NOT listed here — the base <channel> template below
             // already unconditionally emits it; adding it here would duplicate the
             // attribute in the XML whenever meta.message_id is set (any channel).
@@ -1364,9 +1453,18 @@ class AgentRunner extends events_1.EventEmitter {
                     `</replied>`;
         }
         const source = meta['source'] ?? 'telegram';
+        // Per-turn channel note (Phase 3). WhatsApp Business enforces a 24h
+        // customer-service window that no other channel here has, and the agent
+        // cannot discover it from the turn itself — it only shows up as an opaque
+        // Meta error at send time. Emitted as an XML COMMENT so it can never be
+        // mistaken for part of the user's message, and kept to ONE short line
+        // because it repeats on every single whatsapp_cloud turn. (A frozen,
+        // system-prompt-level injection would be new infra for one warning; the
+        // per-turn wrapper is the existing seam.)
+        const channelNote = source === 'whatsapp_cloud' ? `<!-- ${exports.WHATSAPP_CLOUD_WINDOW_NOTE} -->` : '';
         return (`<channel source="${source}" chat_id="${meta['chat_id'] ?? ''}" ` +
             `message_id="${meta['message_id'] ?? ''}" user="${AgentRunner.escapeXmlAttr(meta['user'] ?? '')}" ` +
-            `ts="${meta['ts'] ?? new Date().toISOString()}"${optionalAttrs}>${repliedBlock}${params.content ?? ''}</channel>`);
+            `ts="${meta['ts'] ?? new Date().toISOString()}"${optionalAttrs}>${channelNote}${repliedBlock}${params.content ?? ''}</channel>`);
     }
     /**
      * Await a SessionProcess's in-flight crash-triggered auto-restart
@@ -1625,7 +1723,11 @@ class AgentRunner extends events_1.EventEmitter {
                     ? 'mcp__gateway__line_reply'
                     : source === 'slack'
                         ? 'mcp__gateway__slack_reply'
-                        : 'mcp__gateway__telegram_reply';
+                        : source === 'whatsapp'
+                            ? 'mcp__gateway__whatsapp_reply'
+                            : source === 'whatsapp_cloud'
+                                ? 'mcp__gateway__whatsapp_cloud_reply'
+                                : 'mcp__gateway__telegram_reply';
             proc.on('output', (line) => {
                 try {
                     const obj = JSON.parse(line);
@@ -1938,10 +2040,15 @@ class AgentRunner extends events_1.EventEmitter {
                                 }
                                 else if (channelSrcForResult !== 'discord' &&
                                     channelSrcForResult !== 'slack' &&
+                                    channelSrcForResult !== 'whatsapp' &&
+                                    channelSrcForResult !== 'whatsapp_cloud' &&
                                     ((0, markdown_1.hasMarkdown)(channelText) || (0, markdown_1.containsTelegramHtml)(channelText))) {
                                     // Telegram HTML entities — Slack has its own mrkdwn format and
                                     // would display these tags literally, so Slack skips this and
-                                    // falls through to the plain-text branch below.
+                                    // falls through to the plain-text branch below. WhatsApp (and
+                                    // WhatsApp Cloud, same lightweight markup) has
+                                    // its own lightweight markup (*bold*/_italic_/~strike~, not
+                                    // HTML), same reasoning.
                                     this.writeAutoForward(mapKey, (0, markdown_1.toTelegramHtml)(channelText), 'html', replySendFailed);
                                 }
                                 else {
@@ -2798,6 +2905,36 @@ class AgentRunner extends events_1.EventEmitter {
             }
             return;
         }
+        // WhatsApp likewise has no .forward consumer, and — unlike Slack/SMS's
+        // outbound REST clients — cannot open a fresh connection per call either
+        // (see WhatsAppManager's doc comment): reach the live socket this
+        // process already holds directly.
+        if (this.channelFor(chatId) === 'whatsapp') {
+            // No account_id to go on here (this is the fallback path, not a tool
+            // call), so whatsAppManagerFor falls back to the account this chat's
+            // last inbound message arrived on — the number the user wrote to.
+            void this.sendWhatsAppMessage(chatId, text).catch((err) => {
+                this.logger.warn('WhatsApp auto-forward failed', {
+                    chatId,
+                    error: err instanceof Error ? err.message : String(err),
+                });
+            });
+            return;
+        }
+        // WhatsApp Cloud mirrors Slack exactly (no .forward consumer, a real REST
+        // client that can open a fresh connection per call — unlike Baileys'
+        // `whatsapp` above, there's no live socket to reuse or reason to).
+        if (this.channelFor(chatId) === 'whatsapp_cloud') {
+            if (this.whatsAppCloudOutbound) {
+                void this.whatsAppCloudOutbound.sendText(chatId, text).catch((err) => {
+                    this.logger.warn('WhatsApp Cloud auto-forward failed', {
+                        chatId,
+                        error: err instanceof Error ? err.message : String(err),
+                    });
+                });
+            }
+            return;
+        }
         const typingDir = this.getTypingDir(chatId);
         const forwardPath = path.join(typingDir, `${chatId}.forward`);
         try {
@@ -2897,6 +3034,15 @@ class AgentRunner extends events_1.EventEmitter {
         // line_reply tool keeps the plain reply-first → push-fallback path).
         this.startLineReply();
         this.startSlackOutbound();
+        this.startWhatsAppCloudOutbound();
+        // Unconditional (unlike every credential-gated channel above) — each
+        // WhatsAppManager checks disk for a previously-linked session itself;
+        // there's no config field to gate on, and an agent with no `whatsapp`
+        // block still gets the implicit 'default' account (see
+        // resolveWhatsAppAccounts). A brand-new agent that's never linked just
+        // no-ops here and stays 'unlinked' until the user starts a QR/pairing
+        // flow via the API.
+        this.syncWhatsAppAccounts();
         this.startIdleCleaner();
         this._startCleanupScheduler();
         this.logger.info('AgentRunner started', { agentId: this.agentConfig.id });
@@ -2950,6 +3096,129 @@ class AgentRunner extends events_1.EventEmitter {
         // it up, same reasoning as LineReplyManager above.
         this.stopSlackOutbound();
         this.startSlackOutbound();
+        // WhatsApp Cloud credentials may have changed (or been cleared) — rebuild
+        // to pick it up, same reasoning as Slack above.
+        this.stopWhatsAppCloudOutbound();
+        this.startWhatsAppCloudOutbound();
+        // WhatsApp has no credential to rebuild on — push the new config
+        // (access-control fields) into every already-running manager, and
+        // add/remove managers only if the set of configured accounts changed.
+        this.syncWhatsAppAccounts();
+    }
+    /**
+     * Reconcile `this.whatsappAccounts` with `agentConfig.whatsapp.accounts`.
+     *
+     * Diffing (rather than teardown+recreate) is load-bearing here: a manager
+     * holds a live, authenticated Baileys socket that can take tens of seconds
+     * to re-establish, so an edit to account "sales" must not drop account
+     * "default"'s connection. Accounts that survive the diff only get the new
+     * AgentConfig pushed into them — their socket is untouched.
+     *
+     * Removal uses stop() (socket teardown), never unlink(): dropping an
+     * account from config must not silently wipe its on-disk session. The
+     * DELETE .../whatsapp/accounts/:id route unlinks explicitly before it
+     * rewrites config.
+     */
+    syncWhatsAppAccounts() {
+        const snapshot = JSON.stringify(this.agentConfig.whatsapp ?? null);
+        const accounts = (0, whatsapp_accounts_1.resolveWhatsAppAccounts)(this.agentConfig.whatsapp);
+        // Always push the fresh config into live managers — access-control fields
+        // are read live off it on every inbound message.
+        for (const manager of this.whatsappAccounts.values()) {
+            manager.updateAgentConfig(this.agentConfig);
+        }
+        // Nothing about the WhatsApp block moved ⇒ the account SET can't have
+        // changed either, so skip the diff entirely.
+        if (this.whatsappConfigSnapshot === snapshot && this.whatsappAccounts.size > 0)
+            return;
+        this.whatsappConfigSnapshot = snapshot;
+        const wanted = new Set(accounts.map((a) => a.id));
+        for (const [accountId, manager] of [...this.whatsappAccounts]) {
+            if (wanted.has(accountId))
+                continue;
+            manager.stop();
+            this.whatsappAccounts.delete(accountId);
+            this.logger.info('WhatsApp account removed', { agentId: this.agentConfig.id, accountId });
+        }
+        for (const account of accounts) {
+            if (this.whatsappAccounts.has(account.id))
+                continue;
+            const manager = new manager_1.WhatsAppManager(this.agentConfig, account.id, this.callbackPort, this.gatewayConfig.gateway.logDir);
+            this.whatsappAccounts.set(account.id, manager);
+            void manager.resumeIfLinked();
+            this.logger.info('WhatsApp account started', { agentId: this.agentConfig.id, accountId: account.id });
+        }
+    }
+    /** Live managers, in configured order. */
+    whatsAppManagers() {
+        return (0, whatsapp_accounts_1.resolveWhatsAppAccounts)(this.agentConfig.whatsapp)
+            .map((a) => this.whatsappAccounts.get(a.id))
+            .filter((m) => !!m);
+    }
+    /**
+     * Pick the manager a call should use.
+     *
+     * An EXPLICIT accountId must exist — silently falling back would send a
+     * reply from the wrong number, which on WhatsApp is visible to the
+     * recipient and unrecoverable. Without one, prefer the account the chat's
+     * last inbound message arrived on (so a reply leaves on the number the user
+     * actually wrote to), then 'default', then — for an agent whose only
+     * account is named something else — its single account.
+     */
+    whatsAppManagerFor(chatId, accountId) {
+        if (accountId) {
+            const explicit = this.whatsappAccounts.get(accountId);
+            if (!explicit)
+                throw new Error(`Unknown WhatsApp account '${accountId}'`);
+            return explicit;
+        }
+        const remembered = chatId ? this.whatsappAccountForChat.get(chatId) : undefined;
+        const managers = this.whatsAppManagers();
+        const picked = (remembered ? this.whatsappAccounts.get(remembered) : undefined) ??
+            this.whatsappAccounts.get(whatsapp_accounts_1.DEFAULT_WHATSAPP_ACCOUNT_ID) ??
+            managers[0];
+        if (!picked)
+            throw new Error('Agent not started');
+        return picked;
+    }
+    /**
+     * Which account id a send to `chatId` (with an optional explicit
+     * `accountId`) would actually use — the same resolution
+     * `sendWhatsAppMessage` applies internally, exposed read-only so a caller
+     * (the `/whatsapp/send` route) can run access-control/path-confinement
+     * checks against the REAL target account without duplicating or
+     * second-guessing this resolution logic. Throws the same errors
+     * `whatsAppManagerFor` would (unknown account / agent not started).
+     */
+    resolveWhatsAppAccountId(chatId, accountId) {
+        return this.whatsAppManagerFor(chatId, accountId).accountId;
+    }
+    /** Live link status for one account (defaults to 'default'). */
+    getWhatsAppStatus(accountId = whatsapp_accounts_1.DEFAULT_WHATSAPP_ACCOUNT_ID) {
+        return this.whatsappAccounts.get(accountId)?.getStatus();
+    }
+    /** Configured account ids that currently have a live manager. */
+    getWhatsAppAccountIds() {
+        return this.whatsAppManagers().map((m) => m.accountId);
+    }
+    async startWhatsAppLinking(accountId) {
+        await this.whatsAppManagerFor(undefined, accountId).startLinking();
+    }
+    async requestWhatsAppPairingCode(phoneNumber, accountId) {
+        return this.whatsAppManagerFor(undefined, accountId).requestPairingCode(phoneNumber);
+    }
+    async unlinkWhatsApp(accountId) {
+        await this.whatsAppManagerFor(undefined, accountId).unlink();
+    }
+    async sendWhatsAppMessage(jid, text, imagePath, accountId, 
+    /**
+     * Phase 2 extras, all optional so existing callers (auto-forward, older
+     * MCP builds) are unaffected: quote an inbound message, send the image
+     * uncompressed as a document, and clear the ⏳ ack left on the inbound
+     * message once the send lands.
+     */
+    opts) {
+        await this.whatsAppManagerFor(jid, accountId).sendMessage(jid, text, imagePath, opts);
     }
     startSlackOutbound() {
         if (!this.agentConfig.slack?.botToken || !this.agentConfig.slack?.signingSecret)
@@ -2964,6 +3233,21 @@ class AgentRunner extends events_1.EventEmitter {
     stopSlackOutbound() {
         this.slackOutbound = null;
     }
+    startWhatsAppCloudOutbound() {
+        const cfg = this.agentConfig.whatsapp_cloud;
+        if (!cfg?.accessToken || !cfg?.phoneNumberId || !cfg?.appSecret || !cfg?.verifyToken)
+            return;
+        if (this.whatsAppCloudOutbound)
+            return; // already running
+        this.whatsAppCloudOutbound = new whatsapp_cloud_client_1.WhatsAppCloudClient({
+            accessToken: cfg.accessToken,
+            phoneNumberId: cfg.phoneNumberId,
+            logDir: this.gatewayConfig.gateway.logDir,
+        });
+    }
+    stopWhatsAppCloudOutbound() {
+        this.whatsAppCloudOutbound = null;
+    }
     startLineReply() {
         const lineThreshold = this.agentConfig.line?.slowResponseThreshold ?? 45;
         if (!this.agentConfig.line?.channelSecret || !this.agentConfig.line?.channelAccessToken || lineThreshold <= 0)
@@ -3060,6 +3344,16 @@ class AgentRunner extends events_1.EventEmitter {
         // teardown rather than serially — both are bounded, neither depends on the
         // other, and shutdown latency is user-visible.
         const receiversStopped = [this.receiver?.stop(), this.discordReceiver?.stop()];
+        // stop(), not unlink() — gateway shutdown should NOT wipe a linked
+        // session; resumeIfLinked() picks each account back up on next boot.
+        // Synchronous (no socket-close promise to await), unlike the receivers above.
+        for (const manager of this.whatsappAccounts.values())
+            manager.stop();
+        this.whatsappAccounts.clear();
+        this.whatsappAccountForChat.clear();
+        // Force syncWhatsAppAccounts() to rebuild from scratch if this runner is
+        // started again, rather than short-circuiting on a stale snapshot.
+        this.whatsappConfigSnapshot = undefined;
         this.stopLineReply();
         await Promise.all([
             ...receiversStopped,