@memberjunction/server 6.2.0-edge.1 → 6.2.0-edge.3

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAY,gBAAgB,EAAuI,MAAM,sBAAsB,CAAC;AAUvM,OAAgB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAQ/C,OAAO,kBAAkB,CAAC;AAQ1B,OAAO,EAA2I,cAAc,EAAE,MAAM,aAAa,CAAC;AAiDtL,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAA4I,MAAM,wCAAwC,CAAC;AAOhP,OAAO,EAAE,mCAAmC,EAAE,MAAM,0BAA0B,CAAC;AAE/E;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,IAAI,gBAAgB,CAE5C;AAED,yCAAyC;AACzC,wBAAgB,SAAS,IAAI,gBAAgB,CAE5C;AAED,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,cAAc,cAAc,CAAC;AAI7B,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,qCAAqC,EAAE,MAAM,wCAAwC,CAAC;AAC3I,YAAY,EACR,qBAAqB,EACrB,oBAAoB,EACpB,8BAA8B,EAC9B,0BAA0B,EAC1B,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,GACxB,MAAM,wCAAwC,CAAC;AAChD,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC9E,cAAc,6DAA6D,CAAC;AAC5E,cAAc,YAAY,CAAC;AAC3B,OAAO,EACH,aAAa,EACb,cAAc,EACd,0BAA0B,EAC1B,gBAAgB,GACnB,MAAM,iBAAiB,CAAC;AACzB,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAOhD,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACxF,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAChH,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAIxE;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,qBAAqB,GAAG,IAAI,CAEvE;AAED,cAAc,iCAAiC,CAAC;AAChD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wCAAwC,CAAC;AACvD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oCAAoC,CAAC;AACnD,cAAc,oCAAoC,CAAC;AACnD,cAAc,mCAAmC,CAAC;AAClD,cAAc,wCAAwC,CAAC;AACvD,cAAc,wCAAwC,CAAC;AACvD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,iDAAiD,CAAC;AAChE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,6CAA6C,CAAC;AAC5D,cAAc,yCAAyC,CAAC;AACxD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,0CAA0C,CAAC;AACzD,cAAc,wCAAwC,CAAC;AACvD,cAAc,sCAAsC,CAAC;AACrD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,iCAAiC,CAAC;AAChD,cAAc,kCAAkC,CAAC;AAGjD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0CAA0C,CAAC;AACzD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,yCAAyC,CAAC;AACxD,cAAc,qCAAqC,CAAC;AACpD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,wCAAwC,CAAC;AACvD,cAAc,qCAAqC,CAAC;AACpD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,uCAAuC,CAAC;AACtD,cAAc,qCAAqC,CAAC;AACpD,cAAc,yCAAyC,CAAC;AACxD,cAAc,uCAAuC,CAAC;AACtD,cAAc,iCAAiC,CAAC;AAChD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yCAAyC,CAAC;AACxD,cAAc,wCAAwC,CAAC;AACvD,cAAc,kCAAkC,CAAC;AACjD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mCAAmC,CAAC;AAClD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,iCAAiC,CAAC;AAChD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kCAAkC,CAAC;AACjD,cAAc,qCAAqC,CAAC;AACpD,cAAc,qCAAqC,CAAC;AACpD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iDAAiD,CAAC;AAChE,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uCAAuC,CAAC;AACtD,cAAc,qCAAqC,CAAC;AACpD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,uCAAuC,CAAC;AACtD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qCAAqC,CAAC;AACpD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,4CAA4C,CAAC;AAC3D,cAAc,0BAA0B,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAErH,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AAStC,MAAM,MAAM,eAAe,GAAG;IAC5B,aAAa,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,cAAc,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,qBAAqB,EAAE,CAAC;CAC5C,CAAC;AAUF,eAAO,MAAM,SAAS,QAAO,WAAwB,CAAC;AAEtD,yCAAyC;AACzC,eAAO,MAAM,SAAS,QAHO,WAGK,CAAC;AA+BnC,eAAO,MAAM,KAAK,GAAU,eAAe,KAAK,CAAC,MAAM,CAAC,EAAE,MAAK,WAAyB,EAAE,UAAU,eAAe,KAAG,OAAO,CAAC,IAAI,CAm3CjI,CAAC;AAEF,qCAAqC;AACrC,eAAO,MAAM,KAAK,kBAt3CyB,KAAK,CAAC,MAAM,CAAC,QAAO,WAAW,YAA0B,eAAe,KAAG,OAAO,CAAC,IAAI,CAs3CxG,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAY,gBAAgB,EAAuI,MAAM,sBAAsB,CAAC;AAUvM,OAAgB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAQ/C,OAAO,kBAAkB,CAAC;AAQ1B,OAAO,EAA2I,cAAc,EAAE,MAAM,aAAa,CAAC;AAiEtL,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAA4I,MAAM,wCAAwC,CAAC;AAOhP,OAAO,EAAE,mCAAmC,EAAE,MAAM,0BAA0B,CAAC;AAE/E;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,IAAI,gBAAgB,CAE5C;AAED,yCAAyC;AACzC,wBAAgB,SAAS,IAAI,gBAAgB,CAE5C;AAED,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,cAAc,cAAc,CAAC;AAI7B,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,qCAAqC,EAAE,MAAM,wCAAwC,CAAC;AAC3I,YAAY,EACR,qBAAqB,EACrB,oBAAoB,EACpB,8BAA8B,EAC9B,0BAA0B,EAC1B,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,GACxB,MAAM,wCAAwC,CAAC;AAChD,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC9E,cAAc,6DAA6D,CAAC;AAC5E,cAAc,YAAY,CAAC;AAC3B,OAAO,EACH,aAAa,EACb,cAAc,EACd,0BAA0B,EAC1B,gBAAgB,GACnB,MAAM,iBAAiB,CAAC;AACzB,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAOhD,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACxF,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAChH,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAIxE;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,qBAAqB,GAAG,IAAI,CAEvE;AAED,cAAc,iCAAiC,CAAC;AAChD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wCAAwC,CAAC;AACvD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oCAAoC,CAAC;AACnD,cAAc,oCAAoC,CAAC;AACnD,cAAc,oCAAoC,CAAC;AACnD,cAAc,mCAAmC,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,cAAc,wCAAwC,CAAC;AACvD,cAAc,wCAAwC,CAAC;AACvD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,iDAAiD,CAAC;AAChE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,6CAA6C,CAAC;AAC5D,cAAc,yCAAyC,CAAC;AACxD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,0CAA0C,CAAC;AACzD,cAAc,wCAAwC,CAAC;AACvD,cAAc,sCAAsC,CAAC;AACrD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,iCAAiC,CAAC;AAChD,cAAc,kCAAkC,CAAC;AAGjD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0CAA0C,CAAC;AACzD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,yCAAyC,CAAC;AACxD,cAAc,qCAAqC,CAAC;AACpD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,wCAAwC,CAAC;AACvD,cAAc,qCAAqC,CAAC;AACpD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,uCAAuC,CAAC;AACtD,cAAc,qCAAqC,CAAC;AACpD,cAAc,yCAAyC,CAAC;AACxD,cAAc,uCAAuC,CAAC;AACtD,cAAc,iCAAiC,CAAC;AAChD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yCAAyC,CAAC;AACxD,cAAc,wCAAwC,CAAC;AACvD,cAAc,kCAAkC,CAAC;AACjD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mCAAmC,CAAC;AAClD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,iCAAiC,CAAC;AAChD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kCAAkC,CAAC;AACjD,cAAc,qCAAqC,CAAC;AACpD,cAAc,qCAAqC,CAAC;AACpD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iDAAiD,CAAC;AAChE,cAAc,4CAA4C,CAAC;AAC3D,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uCAAuC,CAAC;AACtD,cAAc,qCAAqC,CAAC;AACpD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,uCAAuC,CAAC;AACtD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qCAAqC,CAAC;AACpD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gCAAgC,CAAC;AAC/C,cAAc,4CAA4C,CAAC;AAC3D,cAAc,0BAA0B,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAErH,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AAStC,MAAM,MAAM,eAAe,GAAG;IAC5B,aAAa,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,cAAc,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,qBAAqB,EAAE,CAAC;CAC5C,CAAC;AAUF,eAAO,MAAM,SAAS,QAAO,WAAwB,CAAC;AAEtD,yCAAyC;AACzC,eAAO,MAAM,SAAS,QAHO,WAGK,CAAC;AAgInC,eAAO,MAAM,KAAK,GAAU,eAAe,KAAK,CAAC,MAAM,CAAC,EAAE,MAAK,WAAyB,EAAE,UAAU,eAAe,KAAG,OAAO,CAAC,IAAI,CAu7CjI,CAAC;AAEF,qCAAqC;AACrC,eAAO,MAAM,KAAK,kBA17CyB,KAAK,CAAC,MAAM,CAAC,QAAO,WAAW,YAA0B,eAAe,KAAG,OAAO,CAAC,IAAI,CA07CxG,CAAC"}

package/dist/index.js

@@ -29,6 +29,8 @@ import { WebSocketServer } from 'ws';
 import { RealtimeProxyServer } from './realtimeProxy/RealtimeProxyServer.js';
 import buildApolloServer from './apolloServer/index.js';
 import { configInfo, configFilePath, dbDatabase, dbHost, dbPort, dbUsername, graphqlPort, graphqlRootPath, mj_core_schema, websiteRunFromPackage } from './config.js';
+import { TranslateBracketsToPG } from './postgresqlCompat.js';
+import { BuildPostgreSQLConnectionConfig, DescribeReadOnlyLoginOverreach, PostgreSQLReadOnlyPool, ResolvePostgreSQLEndpoint, ResolvePostgreSQLReadOnlyCredentials, ToPGPoolConfig } from './postgresqlPoolSettings.js';
 import { default as jwt } from 'jsonwebtoken';
 import { contextFunction, CreateUnifiedAuthMiddleware, getUserPayload } from './context.js';
 import { requireSystemUserDirective, publicDirective } from './directives/index.js';
@@ -55,12 +57,17 @@ import { createAuthProviderCatalogRouter, AUTH_CATALOG_MOUNT_PATH } from './auth
 import { GetAPIKeyEngine } from '@memberjunction/api-keys';
 import { RedisLocalStorageProvider } from '@memberjunction/redis-provider';
 import { PubSubManager } from './generic/PubSubManager.js';
+import { ReconcileOrphanedConversationDetails } from './generic/OrphanedConversationDetailReconciler.js';
+import { PUSH_STATUS_UPDATES_TOPIC, SetPushStatusPublishHook, ParseReplicatedStatusUpdate, } from './generic/PushStatusResolver.js';
+import { HANDOFF_OFFER_FANOUT_CHANNEL, HANDOFF_OFFER_TOPIC, SetHandoffOfferPublishHook, ParseReplicatedHandoffOfferUpdate, } from './resolvers/HumanHandoffResolver.js';
+import { RoomHandoffEngine } from '@memberjunction/livekit-room-server';
 import { IntegrationProgressEmitter } from '@memberjunction/integration-progress-artifacts';
 import { PublishIntegrationProgress } from './resolvers/IntegrationProgressResolver.js';
 import { RegisterRSUProgressBridge } from './integration/RSUProgressBridge.js';
 import { ClientToolRequestManager, AgentRunWatchdog } from '@memberjunction/ai-agents';
 import { SessionJanitor } from './agentSessions/index.js';
 import { StartTaskGraphDispatcher } from './services/StartTaskGraphDispatcher.js';
+import { MJServerWorkQueueProviderSource, StartWorkQueueHost } from './services/WorkQueueHostService.js';
 import { GetAttachmentService } from '@memberjunction/aiengine';
 import { MJStorageBlobStore } from './services/MJStorageBlobStore.js';
 import { CACHE_INVALIDATION_TOPIC, MayBroadcastRecordData, ConfigureRecordDataBroadcast } from './generic/CacheInvalidationResolver.js';
@@ -131,7 +138,9 @@ export * from './generic/refusalExtensions.js';
 export * from './generic/RunViewResolver.js';
 export * from './resolvers/RunTemplateResolver.js';
 export * from './resolvers/RunAIPromptResolver.js';
+export * from './resolvers/RunDecisionResolver.js';
 export * from './resolvers/RunAIAgentResolver.js';
+export { AgentRunStatusPublisher } from './resolvers/AgentRunStatusPublisher.js';
 export * from './resolvers/VectorizeEntityResolver.js';
 export * from './resolvers/SearchKnowledgeResolver.js';
 export * from './resolvers/SearchKnowledgeStreamResolver.js';
@@ -186,6 +195,7 @@ export * from './rest/MediaAccessKeys.js';
 export * from './rest/MediaStreamHandler.js';
 export * from './resolvers/InfoResolver.js';
 export * from './resolvers/PotentialDuplicateRecordResolver.js';
+export * from './resolvers/DuplicateEntryCheckResolver.js';
 export * from './resolvers/RunTestResolver.js';
 export * from './resolvers/SearchEntitiesResolver.js';
 export * from './resolvers/UserFavoriteResolver.js';
@@ -196,6 +206,7 @@ export * from './resolvers/CurrentUserContextResolver.js';
 export * from './resolvers/RSUResolver.js';
 export * from './resolvers/AgentSessionResolver.js';
 export * from './resolvers/RealtimeClientSessionResolver.js';
+export * from './resolvers/MeetingResolver.js';
 export * from './resolvers/RemoteBrowserActionResolver.js';
 export * from './agentSessions/index.js';
 export { GetReadOnlyDataSource, GetReadWriteDataSource, GetReadWriteProvider, GetReadOnlyProvider } from './util.js';
@@ -229,10 +240,102 @@ function resolveServerVersion() {
         const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8'));
         return pkg.version;
     }
-    catch {
+    catch (err) {
+        LogError('Failed to resolve server version from package.json', undefined, err);
         return undefined;
     }
 }
+/** How often to re-check for conversation details left behind by finished runs. */
+const ORPHAN_DETAIL_SWEEP_INTERVAL_MS = 5 * 60_000;
+/** Redis channel carrying replicated push-status updates between server instances. */
+const PUSH_STATUS_FANOUT_CHANNEL = 'push-status-updates';
+/**
+ * Replicate push-status updates across server instances over Redis (MJ #4222).
+ *
+ * Outbound: every locally-published update is forwarded on a shared channel. Inbound: a message
+ * from another instance is republished onto THIS instance's local topic, where the normal
+ * subscription filter decides who receives it — so the identity gate (`ownerUserId` vs. the
+ * connection's authenticated user) still applies to a replicated message exactly as it does to a
+ * local one. The replica has no say in who sees what.
+ *
+ * Republishing goes straight to `PubSubManager`, never back through `publishStatusUpdate`, so an
+ * inbound message cannot be re-broadcast and loop. `SourceServerId` guards the remaining case: a
+ * publisher also receives its own message from Redis.
+ */
+async function wirePushStatusFanOut(redisProvider, startupLog) {
+    try {
+        await redisProvider.SubscribeToChannel(PUSH_STATUS_FANOUT_CHANNEL, (raw) => {
+            try {
+                const payload = ParseReplicatedStatusUpdate(raw, MJGlobal.Instance.ProcessUUID);
+                if (!payload) {
+                    return;
+                }
+                // Rebuilt as a plain record: the topic's publish signature takes an index-signature type,
+                // and listing the fields keeps the wire shape explicit at the one place it crosses hosts.
+                PubSubManager.Instance.Publish(PUSH_STATUS_UPDATES_TOPIC, {
+                    sessionId: payload.sessionId,
+                    ownerUserId: payload.ownerUserId,
+                    message: payload.message,
+                    SourceServerId: payload.SourceServerId,
+                });
+            }
+            catch (err) {
+                // A malformed message on a shared channel must not take down the subscriber.
+                LogError('Error processing push-status fan-out message', undefined, err);
+            }
+        });
+        SetPushStatusPublishHook((payload) => {
+            redisProvider.PublishMessage(PUSH_STATUS_FANOUT_CHANNEL, JSON.stringify(payload));
+        });
+        // Printed unconditionally, not verbose-gated. "Is fan-out actually on?" is the first question
+        // anyone debugging a hung conversation behind a load balancer asks, and a silent default left
+        // no way to answer it.
+        console.log('[MJAPI] Push-status updates: cross-instance fan-out enabled via Redis');
+    }
+    catch (err) {
+        // Single-instance delivery still works, and the durable tail query covers the rest. Degraded,
+        // not broken — so this must not stop the server from starting.
+        console.warn(`Push-status fan-out unavailable: ${err.message}`);
+    }
+}
+/**
+ * Replicate handoff-offer updates across server instances over Redis.
+ *
+ * Outbound: every locally-published offer change is forwarded on a shared Redis channel.
+ * Inbound: a message from another instance is republished onto THIS instance's local GraphQL
+ * topic (where the subscription filter scopes to the target user) and delivered to RoomHandoffEngine
+ * so the call-hosting instance can transition its local flow (e.g. wait for the user to join the room).
+ */
+async function wireHandoffOfferFanOut(redisProvider, startupLog) {
+    try {
+        await redisProvider.SubscribeToChannel(HANDOFF_OFFER_FANOUT_CHANNEL, (raw) => {
+            try {
+                const payload = ParseReplicatedHandoffOfferUpdate(raw, MJGlobal.Instance.ProcessUUID);
+                if (!payload) {
+                    return;
+                }
+                PubSubManager.Instance.Publish(HANDOFF_OFFER_TOPIC, {
+                    UserID: payload.UserID,
+                    Kind: payload.Kind,
+                    Offer: payload.Offer,
+                });
+                RoomHandoffEngine.Instance.OnRemoteOfferChange(payload);
+            }
+            catch (err) {
+                // A malformed message on a shared channel must not take down the subscriber.
+                LogError('Error processing handoff-offer fan-out message', undefined, err);
+            }
+        });
+        SetHandoffOfferPublishHook((payload) => {
+            redisProvider.PublishMessage(HANDOFF_OFFER_FANOUT_CHANNEL, JSON.stringify(payload));
+        });
+        console.log('[MJAPI] Handoff-offer updates: cross-instance fan-out enabled via Redis');
+        startupLog.LogIf('verbose', 'Handoff-offer updates: cross-instance fan-out enabled via Redis');
+    }
+    catch (err) {
+        console.warn(`Handoff-offer fan-out unavailable: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
 // Bind MJStorage as the conversation-attachment blob store. The attachment service itself no longer
 // imports `@memberjunction/storage` — that dependency made it unusable from any browser or React
 // Native client, which is why the same attachment rules had been reimplemented three times.
@@ -273,28 +376,39 @@ export const Serve = async (resolverPaths, app = CreateApp(), options) => {
         startupLog.BeginPhase('Connecting to database');
         startupLog.LogIf('verbose', 'Database type: PostgreSQL');
         const pg = await import('pg');
-        const { PostgreSQLDataProvider, PostgreSQLProviderConfigData } = await import('@memberjunction/postgresql-dataprovider');
-        const pgHost = process.env.PG_HOST || process.env.DB_HOST || 'localhost';
-        const pgPort = parseInt(process.env.PG_PORT || process.env.DB_PORT || '5432', 10);
-        const pgUser = process.env.PG_USERNAME || process.env.DB_USERNAME || 'postgres';
-        const pgPass = process.env.PG_PASSWORD || process.env.DB_PASSWORD || '';
-        const pgDatabase = process.env.PG_DATABASE || process.env.DB_DATABASE || '';
-        const pgPool = new pg.default.Pool({
-            host: pgHost,
-            port: pgPort,
-            user: pgUser,
-            password: pgPass,
-            database: pgDatabase,
-            max: configInfo.databaseSettings.connectionPool?.max ?? 50,
-            min: configInfo.databaseSettings.connectionPool?.min ?? 5,
-            idleTimeoutMillis: configInfo.databaseSettings.connectionPool?.idleTimeoutMillis ?? 30000,
-            connectionTimeoutMillis: configInfo.databaseSettings.connectionPool?.acquireTimeoutMillis ?? 30000,
-        });
+        const { PostgreSQLDataProvider, PostgreSQLProviderConfigData, MJPostgresTypes } = await import('@memberjunction/postgresql-dataprovider');
+        const pgEndpoint = ResolvePostgreSQLEndpoint();
+        const { Host: pgHost, Port: pgPort, User: pgUser, Database: pgDatabase } = pgEndpoint;
+        // Every API pool carries the statement and idle-in-transaction timeouts from connection #1.
+        const pgConnectionConfig = BuildPostgreSQLConnectionConfig(pgEndpoint, configInfo.databaseSettings, 'api');
+        const pgPool = new pg.default.Pool(ToPGPoolConfig(pgConnectionConfig));
         // Verify connection
         const testClient = await pgPool.connect();
         await testClient.query('SELECT 1');
         testClient.release();
         startupLog.LogIf('verbose', `PostgreSQL pool connected to ${pgHost}:${pgPort}/${pgDatabase}`);
+        // A read-only pool opened with the read-only login, as SQL Server has. Read-only per-request
+        // providers (TestQuerySQL and other caller-supplied SQL) share it instead of the primary pool.
+        const pgReadOnlyCredentials = ResolvePostgreSQLReadOnlyCredentials(configInfo);
+        if (pgReadOnlyCredentials) {
+            // A pool a provider runs on must carry the provider's type parsers, so BIGINT and NUMERIC
+            // come back as numbers here as they do on the provider's own pool.
+            const readOnlyPgPool = new pg.default.Pool({
+                ...ToPGPoolConfig(BuildPostgreSQLConnectionConfig({ ...pgEndpoint, ...pgReadOnlyCredentials }, configInfo.databaseSettings, 'read-only')),
+                types: MJPostgresTypes,
+            });
+            const readOnlyTestClient = await readOnlyPgPool.connect();
+            try {
+                for (const warning of await DescribeReadOnlyLoginOverreach(readOnlyTestClient, mj_core_schema)) {
+                    LogStatus(`WARNING: ${warning}`);
+                }
+            }
+            finally {
+                readOnlyTestClient.release();
+            }
+            PostgreSQLReadOnlyPool.Instance.Pool = readOnlyPgPool;
+            startupLog.LogIf('verbose', 'Read-only PostgreSQL pool has been initialized.');
+        }
         // Create a DataSourceInfo with a MSSQL-compatible wrapper around pg.Pool
         // This allows existing code (types, util, context) to work without changes
         const mssqlCompatPool = createMSSQLCompatPool(pgPool);
@@ -307,15 +421,6 @@ export const Serve = async (resolverPaths, app = CreateApp(), options) => {
             userName: pgUser,
         }));
         // Set up the PostgreSQL provider
-        const pgConnectionConfig = {
-            Host: pgHost,
-            Port: pgPort,
-            Database: pgDatabase,
-            User: pgUser,
-            Password: pgPass,
-            MaxConnections: configInfo.databaseSettings.connectionPool?.max ?? 50,
-            MinConnections: configInfo.databaseSettings.connectionPool?.min ?? 5,
-        };
         const pgConfigData = new PostgreSQLProviderConfigData(pgConnectionConfig, mj_core_schema, cacheRefreshInterval / 1000);
         const provider = new PostgreSQLDataProvider();
         await provider.Config(pgConfigData);
@@ -339,7 +444,7 @@ export const Serve = async (resolverPaths, app = CreateApp(), options) => {
             if (poolAny._pgPool) {
                 const thePgPool = poolAny._pgPool;
                 // Translate SQL Server bracket syntax to PostgreSQL double-quote syntax
-                const pgQuery = translateBracketsToPG(query);
+                const pgQuery = TranslateBracketsToPG(query);
                 const result = await thePgPool.query(pgQuery);
                 return result.rows;
             }
@@ -357,19 +462,15 @@ export const Serve = async (resolverPaths, app = CreateApp(), options) => {
         const pgCodegenPass = process.env.CODEGEN_DB_PASSWORD;
         if (pgCodegenUser && pgCodegenPass) {
             try {
-                const codegenPgPool = new pg.default.Pool({
-                    host: pgHost,
-                    port: pgPort,
-                    user: pgCodegenUser,
-                    password: pgCodegenPass,
-                    database: pgDatabase,
-                    max: 10,
-                });
+                // CodeGen and DDL work runs long statements across every entity, so this pool gets the
+                // long CodeGen timeout rather than the API one, as the SQL Server CodeGen pool does.
+                const codegenPgConnectionConfig = BuildPostgreSQLConnectionConfig({ ...pgEndpoint, User: pgCodegenUser, Password: pgCodegenPass }, configInfo.databaseSettings, 'codegen');
+                const codegenPgPool = new pg.default.Pool(ToPGPoolConfig(codegenPgConnectionConfig));
                 const codegenTestClient = await codegenPgPool.connect();
                 await codegenTestClient.query('SELECT 1');
                 codegenTestClient.release();
                 const { RuntimeSchemaManager } = await import('@memberjunction/schema-engine');
-                const codegenPgConfigData = new PostgreSQLProviderConfigData({ Host: pgHost, Port: pgPort, Database: pgDatabase, User: pgCodegenUser, Password: pgCodegenPass }, mj_core_schema, cacheRefreshInterval / 1000);
+                const codegenPgConfigData = new PostgreSQLProviderConfigData(codegenPgConnectionConfig, mj_core_schema, cacheRefreshInterval / 1000);
                 const codegenPgProvider = new PostgreSQLDataProvider();
                 await codegenPgProvider.Config(codegenPgConfigData); // separate pool (per-instance manager); does NOT touch the global API provider
                 RuntimeSchemaManager.Instance.SetDDLProvider(codegenPgProvider);
@@ -605,6 +706,15 @@ export const Serve = async (resolverPaths, app = CreateApp(), options) => {
                 });
             }
         });
+        // Fan push-status updates across server instances (MJ #4222).
+        //
+        // Behind a load balancer the browser's WebSocket lives on one replica while the mutation that
+        // drives the agent can be handled by another. The push topic is an in-process PubSub, so a
+        // completion published on replica B never reaches a subscriber on replica A — the browser waits
+        // forever for an event that was delivered to nobody. Replicating progress and completion over
+        // Redis closes that, and the durable tail query remains the backstop if Redis is down.
+        await wirePushStatusFanOut(redisProvider, startupLog);
+        await wireHandoffOfferFanOut(redisProvider, startupLog);
         startupLog.LogIf('verbose', `Redis cache provider connected: ${process.env.REDIS_URL}`);
     }
     // If Redis is available, swap LocalCacheManager's storage provider to Redis.
@@ -909,6 +1019,14 @@ export const Serve = async (resolverPaths, app = CreateApp(), options) => {
             socket.destroy();
         }
     });
+    // graphql-ws's ws integration takes its keepalive as a THIRD POSITIONAL argument to useServer,
+    // defaulting to 12_000 when omitted. That default was doing real work here while being invisible
+    // at the call site: the server pings every 12s and terminates the socket after an unanswered
+    // pong, which is why MJAPI notices a half-open link in ~12-24s while the browser — whose
+    // graphql-ws client does nothing on an unanswered pong — noticed nothing at all (MJ #4222).
+    // Stated explicitly so the behaviour is visible and tunable, and so the next reader does not
+    // conclude from the call site that no server-side heartbeat exists. Value unchanged.
+    const WS_SERVER_KEEPALIVE_MS = 12_000;
     // Track per-connection expiry timers so we can clean them up on close
     const expiryTimers = new WeakMap();
     const serverCleanup = useServer({
@@ -979,7 +1097,7 @@ export const Serve = async (resolverPaths, app = CreateApp(), options) => {
             // so all errors here are genuine and worth logging.
             console.error('WebSocket error:', errors);
         },
-    }, webSocketServer);
+    }, webSocketServer, WS_SERVER_KEEPALIVE_MS);
     const apolloServer = buildApolloServer({ schema }, { httpServer, serverCleanup }, mwApolloPlugins.length > 0 ? mwApolloPlugins : undefined);
     await apolloServer.start();
     // Fix #8: Add compression for better throughput performance
@@ -1093,13 +1211,22 @@ export const Serve = async (resolverPaths, app = CreateApp(), options) => {
     // Backwards-compatibility shim: synthesize ServerExtensionConfig entries from legacy configInfo.telephony
     const telephonyExtensionConfigs = [];
     if (configInfo.telephony?.enabled) {
+        // Settings every carrier shares (inbound run-as user, call cap, outbound policy). Each carrier's own block is
+        // spread AFTER them, so a carrier can override one explicitly.
+        const sharedTelephonySettings = {
+            inboundRunAsUserEmail: configInfo.telephony.inboundRunAsUserEmail,
+            maxCallSeconds: configInfo.telephony.maxCallSeconds,
+            maxConcurrentCalls: configInfo.telephony.maxConcurrentCalls,
+            transferTargets: configInfo.telephony.transferTargets,
+            outbound: configInfo.telephony.outbound,
+        };
         if (configInfo.telephony.twilio) {
             telephonyExtensionConfigs.push({
                 Enabled: true,
                 DriverClass: 'TwilioTelephonyExtension',
                 RootPath: '/telephony/twilio',
                 Phase: 'pre-auth',
-                Settings: configInfo.telephony.twilio,
+                Settings: { ...sharedTelephonySettings, ...configInfo.telephony.twilio },
             });
         }
         if (configInfo.telephony.vonage) {
@@ -1108,7 +1235,7 @@ export const Serve = async (resolverPaths, app = CreateApp(), options) => {
                 DriverClass: 'VonageTelephonyExtension',
                 RootPath: '/telephony/vonage',
                 Phase: 'pre-auth',
-                Settings: configInfo.telephony.vonage,
+                Settings: { ...sharedTelephonySettings, ...configInfo.telephony.vonage },
             });
         }
         if (configInfo.telephony.ringcentral) {
@@ -1117,7 +1244,16 @@ export const Serve = async (resolverPaths, app = CreateApp(), options) => {
                 DriverClass: 'RingCentralTelephonyExtension',
                 RootPath: '/telephony/ringcentral',
                 Phase: 'pre-auth',
-                Settings: configInfo.telephony.ringcentral,
+                Settings: { ...sharedTelephonySettings, ...configInfo.telephony.ringcentral },
+            });
+        }
+        if (configInfo.telephony.livekitSip) {
+            telephonyExtensionConfigs.push({
+                Enabled: true,
+                DriverClass: 'LiveKitSipExtension',
+                RootPath: '/telephony/livekit-sip',
+                Phase: 'pre-auth',
+                Settings: { ...sharedTelephonySettings, ...configInfo.telephony.livekitSip },
             });
         }
         if (configInfo.telephony.teams?.enabled) {
@@ -1351,8 +1487,23 @@ export const Serve = async (resolverPaths, app = CreateApp(), options) => {
     // instance is still heart-beating. The watchdog also self-registers for graceful-shutdown
     // cancellation (via ShutdownRegistry) once it begins tracking this process's first live run.
     if (resumeUser && Metadata.Provider instanceof DatabaseProviderBase) { // global-provider-ok: server startup recovery — one-shot orphaned-run sweep at boot
-        AgentRunWatchdog.SweepOrphanedRuns(Metadata.Provider, resumeUser) // global-provider-ok: server startup recovery — one-shot orphaned-run sweep at boot
+        const sweepUser = resumeUser;
+        const sweepProvider = Metadata.Provider; // global-provider-ok: server startup recovery — one-shot orphaned-run sweep at boot
+        AgentRunWatchdog.SweepOrphanedRuns(sweepProvider, sweepUser)
             .catch(err => console.warn(`[AgentRunWatchdog] Startup sweep failed: ${err}`));
+        // The watchdog repairs the RUN; nothing repaired the conversation detail, which is the row the
+        // chat actually renders from (MJ #4222). A process that dies mid-run leaves a terminal run
+        // beside a message that still claims to be generating, and it spins forever for anyone who
+        // opens it. Runs at boot (closes restart orphans) and on a timer (closes mid-life orphans),
+        // mirroring the watchdog's own two-phase shape.
+        const reconcileOrphans = () => ReconcileOrphanedConversationDetails(sweepProvider, sweepUser)
+            .catch(err => console.warn(`[OrphanDetailReconciler] Pass failed: ${err}`));
+        void reconcileOrphans();
+        const orphanDetailTimer = setInterval(() => void reconcileOrphans(), ORPHAN_DETAIL_SWEEP_INTERVAL_MS);
+        ShutdownRegistry.Instance.Register({
+            ShutdownName: 'OrphanDetailReconciler',
+            Shutdown: () => { clearInterval(orphanDetailTimer); },
+        });
     }
     // Launch the AI Agent Session janitor: run own-host orphan recovery once at boot, then keep a
     // periodic staleness sweep running. Self-registers with ShutdownRegistry, so its timer is cleared
@@ -1392,6 +1543,17 @@ export const Serve = async (resolverPaths, app = CreateApp(), options) => {
         StartTaskGraphDispatcher(taskGraphPool, resumeUser)
             .catch(err => console.warn(`[TaskGraphDispatcher] Startup failed: ${err}`));
     }
+    // Start the durable work-queue host where enabled. It plans which subscriptions this instance runs,
+    // re-plans on a timer, and self-registers with ShutdownRegistry, so gracefulShutdown's awaited
+    // ShutdownAll() drains it (up to 2 × shutdownDrainMs) before the HTTP server closes.
+    // Not awaited: a slow engine load must not delay readiness, and a failure never stops the API.
+    const workQueueProvider = Metadata.Provider; // global-provider-ok: server startup — the work-queue host runs on the server's own provider
+    if (configInfo.workQueue?.enabled && workQueueProvider instanceof DatabaseProviderBase) {
+        const workQueuePool = dataSources[0]?.dataSource;
+        const providerSource = new MJServerWorkQueueProviderSource(workQueuePool instanceof sql.ConnectionPool ? workQueuePool : null, workQueueProvider);
+        StartWorkQueueHost(configInfo.workQueue, workQueueProvider, providerSource)
+            .catch(error => console.error('❌ Failed to start the work queue host:', error));
+    }
     // Set up graceful shutdown handlers
     const gracefulShutdown = async (signal) => {
         console.log(`\n${signal} received, shutting down gracefully...`);
@@ -1835,12 +1997,4 @@ function createMSSQLCompatPool(pgPool) {
     };
     return wrapper;
 }
-/**
- * Translates SQL Server bracket-quoted identifiers to PostgreSQL double-quoted identifiers.
- * Converts [schema].[table] to "schema"."table" and handles common T-SQL patterns.
- */
-function translateBracketsToPG(sql) {
-    // Replace [identifier] with "identifier"
-    return sql.replace(/\[([^\]]+)\]/g, '"$1"');
-}
 //# sourceMappingURL=index.js.map