@xopcai/xopc 0.0.118 → 0.0.120

package/dist/src/gateway/service.js.map

@@ -1 +1 @@
-{"version":3,"file":"service.js","names":["writeConfigToDisk"],"sources":["../../../src/gateway/service.ts"],"sourcesContent":["import crypto from 'crypto';\nimport { listAgentEntries, normalizeAgentId, resolveDefaultAgentId } from '../agent/agent-scope.js';\nimport { AgentService } from '../agent/service.js';\nimport { ensureStarterAgentsInitialized } from '../agent/starter-agents.js';\nimport { ChannelManager } from '../channels/manager.js';\nimport {\n  buildChannelCatalogForConfig,\n  buildChannelCatalogFromSnapshot,\n} from '../channels/catalog/channel-catalog-service.js';\nimport { setPairingBroadcastSink } from '../channels/pairing/pairing-events.js';\nimport { MessageBus, MessageBusShutdownError } from '../infra/bus/index.js';\nimport { loadConfig, saveConfig as writeConfigToDisk } from '../config/index.js';\nimport { getWorkspacePath } from '../config/workspace-path-helpers.js';\nimport { CronService } from '../cron/index.js';\nimport { buildNoteAgentContext, NotesService, NotesStore } from '../notes/index.js';\nimport { buildWorkflowChildTools } from '../agent/workflow/workflow-child-tools.js';\nimport { WorkflowRunService } from '../workflows/service/workflow-run-service.js';\nimport { WorkflowSessionBridge } from '../workflows/service/workflow-session-bridge.js';\nimport { ExtensionLoader, areExtensionsGloballyDisabled, buildExtensionMetadataSnapshot } from '../extensions/index.js';\nimport type { ManifestRegistryEntry } from '../extensions/manifest-registry.js';\nimport type { ResolvedExtensionConfig } from '../extensions/types/index.js';\nimport { HeartbeatService, heartbeatRunnerConfigFromConfig } from './heartbeat/index.js';\nimport { SessionIndex } from '../session/index.js';\nimport type { Config } from '../config/schema.js';\nimport { getAgentDefaultModelRef } from '../config/schema.js';\nimport { wireTunnelEventsToGateway } from '../tunnel/gateway-lifecycle.js';\nimport {\n  stopTailscaleExposure,\n} from './tailscale-lifecycle.js';\nimport { getExposureManager } from '../remote-access/exposure-manager.js';\nimport { sanitizeTunnelConfig } from '../tunnel/tunnel-config.js';\nimport { resolveGatewayAuth, assertGatewayAuthConfigured, validateToken, extractToken, type ResolvedGatewayAuth } from './auth.js';\nimport { assertGatewayAuthNotKnownWeak } from './security/known-weak-secrets.js';\nimport { auditGatewayConfig } from './security/audit.js';\nimport { assertGatewayRuntimeConfig } from './runtime-config.js';\nimport { resolveEffectiveGatewayPort } from './host.js';\nimport { buckets, isGatewayStrictSecurityEnabled } from './rate-limit/index.js';\nimport { prewarmModelRegistry } from '../providers/index.js';\nimport { createLogger, getLogDir, getRuntimeLogStats } from '../utils/logger.js';\nimport {\n  resolveConfigPath,\n  resolveAgentDir,\n  resolveExtensionsDir,\n} from '../config/paths.js';\nimport { AgentRunRelay, type RelayEvent } from './agent-run-relay.js';\nimport { registerClarifyBridge } from './clarify-runtime.js';\nimport { PACKAGE_VERSION } from '../package-version.js';\nimport { GoalNotificationService, GoalRunner, type EnqueueGoalRunOptions } from '../goals/index.js';\n\nimport { disposeAllSessionMcpRuntimes } from '../agent/mcp/bundle-mcp-tools.js';\nimport { getDefaultAgentId } from '../routing/resolve-route.js';\nimport { buildSessionKey, sanitizeSegment } from '../routing/session-key.js';\nimport { scheduleGatewayUpdateCheck } from '../infra/update-startup.js';\nimport { resolveChannelConnectDeferSet } from './resolve-channel-connect-defer.js';\nimport { restartGatewayProcessWithFreshPid } from './respawn.js';\nimport { GatewaySessionsApi } from './service/sessions-api.js';\nimport { GatewayMarketplaceService } from './service/marketplace-service.js';\nimport { GatewayConfigCoordinator } from './service/config-coordinator.js';\nimport { GatewayAgentRunner } from './service/agent-runner.js';\nimport { GatewaySseHub } from './service/sse-hub.js';\nimport type {\n  GatewayChannelStartupPhase1Metrics,\n  GatewayChannelStartupPhase2Metrics,\n  GatewayServiceConfig,\n  ServiceEvent,\n} from './service/types.js';\nimport {\n  GatewayReadiness,\n  type GatewayReadinessSnapshot,\n} from './startup-readiness.js';\nimport { createGatewayStartupTrace, type GatewayStartupTrace } from './startup-trace.js';\nimport { closeXopcDatabase, openXopcDatabase } from '../storage/sqlite/index.js';\nimport { startConnectorSupervisor, type ConnectorSupervisor } from '../connectors/supervisor.js';\n\nexport type {\n  GatewayChannelStartupPhase1Metrics,\n  GatewayChannelStartupPhase2Metrics,\n  GatewayServiceConfig,\n  ServiceEvent,\n} from './service/types.js';\n\nconst log = createLogger('Gateway:Service');\n\nexport class GatewayService {\n  private bus: MessageBus;\n  private config: Config;\n  private configPath: string;\n  private _agentService: AgentService | null = null;\n  private channelManager: ChannelManager;\n  private cronService: CronService;\n  private notesService: NotesService;\n  private extensionLoader: ExtensionLoader | null = null;\n  private extensionMetadataSnapshot: import('../extensions/extension-metadata-snapshot.js').ExtensionMetadataSnapshot | null = null;\n  private browserExtensionProvider: import('../browser/providers/extension.js').ExtensionBrowserProvider | null = null;\n  private browserExtensionRelease: (() => Promise<void>) | null = null;\n  /** `${host}:${port}` when the gateway holds the extension bridge listener. */\n  private browserExtensionBindKey: string | null = null;\n  private heartbeatService: HeartbeatService | null = null;\n  private sessionIndex: SessionIndex;\n  private running = false;\n  private startTime = Date.now();\n  private workspacePath: string;\n  private readonly configCoordinator: GatewayConfigCoordinator;\n\n  // Authentication\n  private auth: ResolvedGatewayAuth;\n\n  private readonly sse = new GatewaySseHub();\n\n  getConfig(): Config {\n    return this.config;\n  }\n\n  private stopGatewayUpdateCheck: (() => void) | null = null;\n\n  /** When set (e.g. by `GatewayServer`), `triggerGatewayProcessRestart` can stop HTTP then exit. */\n  private gatewayShutdownForRestart: (() => Promise<void>) | null = null;\n\n  /** Snapshot for phase-2 metrics / logs (ids deferred at phase-1 `start()`). */\n  private lastDeferredChannelConnectIds: string[] = [];\n  private lastChannelConnectDeferMode: 'auto' | 'off' | 'explicit' = 'auto';\n  private lastChannelConnectDeferSource: 'off' | 'explicit' | 'meta' = 'off';\n\n  private readonly readiness = new GatewayReadiness();\n  private startupTrace: GatewayStartupTrace | null = null;\n  private workflowSessionBridge: WorkflowSessionBridge | null = null;\n  private workflowRunServiceInstance: WorkflowRunService | null = null;\n  private goalRunner: GoalRunner | null = null;\n  private goalNotifications: GoalNotificationService | null = null;\n  private connectorSupervisor: ConnectorSupervisor | null = null;\n\n  /**\n   * Webchat agent invocation surface (`runAgent`, `abortAgentRun`, `steer*`,\n   * `submitClarifyResponse`, clarify-bridge dispatch). Owns the\n   * `activeWebchatRunBySession` + `runAbortControllers` maps.\n   */\n  readonly agentRunner: GatewayAgentRunner;\n\n  /** Read-only alias re-exported from `agentRunner.runRelay` for legacy callers. */\n  get runRelay(): AgentRunRelay { return this.agentRunner.runRelay; }\n\n  /**\n   * Session CRUD / search / compaction / tag-archive-pin / stats — the gateway\n   * REST surface for sessions. Routes should depend on this narrow service\n   * rather than the full GatewayService composition root.\n   */\n  readonly sessions: GatewaySessionsApi;\n\n  /**\n   * Skills + extensions marketplace surface (browse / install / uninstall) plus\n   * local-only managed-skill ops. Routes depend on this narrow service.\n   */\n  readonly marketplace: GatewayMarketplaceService;\n\n  constructor(private serviceConfig: GatewayServiceConfig = {}) {\n    this.bus = new MessageBus();\n    this.configPath = serviceConfig.configPath || resolveConfigPath();\n    this.config = loadConfig(this.configPath);\n    const starterResult = ensureStarterAgentsInitialized(this.config);\n    if (starterResult.changed) {\n      this.config = starterResult.config;\n      void writeConfigToDisk(this.config, this.configPath).catch((err) => {\n        const em = err instanceof Error ? err.message : String(err);\n        log.warn({ err, phase: 'starter_agents_init', errorMessage: em }, `Starter agents init persist failed: ${em}`);\n      });\n    }\n    if (sanitizeTunnelConfig(this.config)) {\n      void writeConfigToDisk(this.config, this.configPath).catch((err) => {\n        const em = err instanceof Error ? err.message : String(err);\n        log.warn({ err, phase: 'tunnel_sanitize', errorMessage: em }, `Tunnel config sanitize persist failed: ${em}`);\n      });\n    }\n\n    // Initialize authentication\n    this.auth = resolveGatewayAuth({\n      authConfig: this.config.gateway?.auth,\n    });\n\n    // Validate auth configuration\n    assertGatewayAuthConfigured(this.auth);\n\n    // Reject known weak / placeholder credentials at startup\n    assertGatewayAuthNotKnownWeak(this.auth);\n\n    const gatewayPort = this.getEffectiveListenPort();\n    const runtimeConfig = assertGatewayRuntimeConfig({\n      cfg: this.config,\n      auth: this.auth,\n      bindOverride: serviceConfig.listenBind,\n      port: gatewayPort,\n    });\n\n    // Security audit: non-blocking warnings for remaining risk signals\n    auditGatewayConfig({\n      auth: this.auth,\n      bindHost: runtimeConfig.bindHost,\n      corsOrigins: runtimeConfig.corsOrigins,\n      rateLimitEnabled: runtimeConfig.rateLimitEnabled,\n      tlsEnabled: runtimeConfig.tlsEnabled,\n      trustedProxies: this.config.gateway?.trustedProxies,\n      allowRealIpFallback: this.config.gateway?.allowRealIpFallback === true,\n      dangerouslyAllowHostHeaderOriginFallback: runtimeConfig.dangerouslyAllowHostHeaderOriginFallback,\n      strictSecurityEnabled: isGatewayStrictSecurityEnabled(this.config),\n      rateLimitConfigured: this.config.gateway?.auth?.rateLimit !== undefined,\n    });\n\n    // Log token info (not the token itself)\n    if (this.auth.mode === 'token') {\n      const tokenPreview = this.auth.token ? `${this.auth.token.slice(0, 4)}***` : 'none';\n      log.info({ mode: this.auth.mode, token: tokenPreview }, 'Authentication configured');\n    } else if (this.auth.mode === 'trusted-proxy') {\n      log.info(\n        {\n          mode: this.auth.mode,\n          userHeader: this.auth.trustedProxy?.userHeader,\n          trustedProxyCount: this.config.gateway?.trustedProxies?.length ?? 0,\n        },\n        'Trusted-proxy authentication configured',\n      );\n    } else {\n      log.info({ mode: this.auth.mode }, 'Authentication configured');\n    }\n\n    // Initialize channel manager\n    this.channelManager = new ChannelManager(this.config, this.bus);\n\n    // Initialize extension loader (manifest snapshot only — code load in start()).\n    this.workspacePath = getWorkspacePath(this.config) || './workspace';\n    this.initializeExtensionLoader();\n\n    // Session index + files shared with AgentService for chat transcript and goal execution context.\n    this.sessionIndex = new SessionIndex({\n      config: this.config,\n    });\n\n    this.cronService = new CronService({\n      maxConcurrentJobs: this.config.cron?.maxConcurrentJobs,\n    });\n\n    this.notesService = new NotesService(new NotesStore());\n\n    this.agentRunner = new GatewayAgentRunner({\n      bus: this.bus,\n      sessionIndex: this.sessionIndex,\n      getAgentService: () => this.ensureAgentService(),\n      getChannelManager: () => this.channelManager,\n      getConfig: () => this.config,\n      emit: (type, payload) => this.sse.emit(type, payload),\n    });\n\n    this.sessions = new GatewaySessionsApi({\n      sessionIndex: this.sessionIndex,\n      getAgentService: () => this.ensureAgentService(),\n      getActiveWebchatRunId: (sk) => this.agentRunner.getActiveRunId(sk),\n    });\n\n    this.marketplace = new GatewayMarketplaceService({\n      getConfig: () => this.config,\n      getAgentService: () => this.ensureAgentService(),\n      getExtensionLoader: () => this.extensionLoader,\n      getChannelManager: () => this.channelManager,\n      saveConfig: (cfg) => this.saveConfig(cfg),\n      emit: (type, payload) => this.emit(type, payload),\n    });\n\n    this.configCoordinator = new GatewayConfigCoordinator({\n      configPath: this.configPath,\n      bus: this.bus,\n      enableHotReload: this.serviceConfig.enableHotReload !== false,\n      getConfig: () => this.config,\n      setConfig: (next) => { this.config = next; },\n      getAgentService: () => this.ensureAgentService(),\n      getChannelManager: () => this.channelManager,\n      getCronService: () => this.cronService,\n      getHeartbeatService: () => this.heartbeatService,\n      getExtensionLoader: () => this.extensionLoader,\n      reconcileBrowserExtensionServer: () => this.reconcileBrowserExtensionServer(),\n      getChannelsStatus: () => this.getChannelsStatus(),\n      emit: (type, payload) => this.emit(type, payload),\n    });\n  }\n\n  /** Lazy AgentService — constructed on first use or during `start()`. */\n  get agentService(): AgentService {\n    return this.ensureAgentService();\n  }\n\n  private ensureAgentService(): AgentService {\n    if (this._agentService) {\n      return this._agentService;\n    }\n\n    const cronRef: { service?: CronService } = { service: this.cronService };\n    this._agentService = new AgentService(this.bus, {\n      workspace: this.workspacePath,\n      model: getAgentDefaultModelRef(this.config),\n      config: this.config,\n      sessionStore: this.sessionIndex.getStore(),\n      onSessionMetadataUpdated: (sessionKey, patch) => {\n        this.sessionIndex.emit('sessionUpdated', { key: sessionKey, name: patch?.name });\n        this.emit('session.updated', { key: sessionKey, name: patch?.name });\n      },\n      onSessionTranscriptUpdated: (sessionKey) => {\n        this.emit('session.transcript_updated', { key: sessionKey });\n      },\n      onGoalStatusUpdated: (payload) => {\n        this.emit('goal.status.updated', payload);\n      },\n      onSkillsUpdated: (payload) => {\n        this.emit('config.reload', {\n          section: 'skills',\n          source: payload.reason === 'disk' ? 'skills-filesystem' : 'skills-config',\n        });\n      },\n      extensionRegistry: this.extensionLoader?.getRegistry(),\n      getCronService: () => cronRef.service,\n      getWorkflowRunService: () => this.createWorkflowRunService(),\n      sourceContextResolver: async (binding) => {\n        if (binding.kind !== 'note') return null;\n        const note = await this.notesService.getNote(binding.sourceId);\n        if (!note) return null;\n        return buildNoteAgentContext({\n          note,\n          notesService: this.notesService,\n          config: this.config,\n        });\n      },\n      gatewayClarify: {\n        requestClarification: (sessionKey, request) =>\n          this.agentRunner.requestClarification({\n            sessionKey,\n            request,\n            publishSseFor: (_runId) => (e: RelayEvent) => {\n              this._agentService!.turnDispatcher.enqueueWebchatSseEvent(sessionKey, e);\n            },\n          }),\n      },\n    });\n\n    this._agentService.setChannelManager(this.channelManager);\n    this.channelManager.setSessionModelHooks({\n      getModelForSession: (sk) => this._agentService!.getModelForSession(sk),\n      switchModelForSession: (sk, id) => this._agentService!.switchModelForSession(sk, id),\n    });\n\n    this.cronService.setDeps({\n      agentService: this._agentService,\n      messageBus: this.bus,\n      heartbeatService: this.ensureHeartbeatService(),\n      sessionStore: this.sessionIndex.getStore(),\n      getDefaultCronAgentId: () => getDefaultAgentId(this.config),\n      workflowRunService: this.createWorkflowRunService(),\n      goalRunner: this.createGoalRunner(),\n    });\n    cronRef.service = this.cronService;\n\n    this._agentService.persistentGoals.setWebchatContinuationScheduler((sessionKey, message) => {\n      const scheduleWhenIdle = () => {\n        if (this._agentService!.getInboundTurnDepth(sessionKey) > 0) {\n          setTimeout(scheduleWhenIdle, 50);\n          return;\n        }\n        if (this.agentRunner.hasActiveRun(sessionKey)) {\n          setTimeout(scheduleWhenIdle, 50);\n          return;\n        }\n        void this.agentRunner.drainScheduledWebchatContinuation(sessionKey, message);\n      };\n      queueMicrotask(scheduleWhenIdle);\n    });\n\n    return this._agentService;\n  }\n\n  private ensureHeartbeatService(): HeartbeatService {\n    if (this.heartbeatService) {\n      return this.heartbeatService;\n    }\n    this.heartbeatService = new HeartbeatService({\n      agentService: this.ensureAgentService(),\n      messageBus: this.bus,\n      cronService: this.cronService,\n      sessionStore: this.sessionIndex.getStore(),\n      getConfig: () => this.config,\n    });\n    return this.heartbeatService;\n  }\n\n  // ── Webchat agent runner (delegated to GatewayAgentRunner) ────────────\n\n  private createGoalRunner(): GoalRunner {\n    if (!this.goalRunner) {\n      this.goalRunner = new GoalRunner({\n        maxConcurrent: 1,\n        defaultMaxRetries: 2,\n        ensureSession: async (goal) => {\n          const existing = goal.activeSessionKey?.trim();\n          if (existing) return existing;\n          const agentId = goal.agentId || getDefaultAgentId(this.config);\n          const peerId = `goal-${sanitizeSegment(goal.id) || Date.now()}`;\n          const sessionKey = buildSessionKey({\n            agentId,\n            source: 'webchat',\n            accountId: 'default',\n            peerKind: 'direct',\n            peerId,\n          });\n          await this.sessionIndex.saveMessages(sessionKey, [], {\n            metadata: {\n              sourceChannel: 'webchat',\n              sourceChatId: `default:direct:${peerId}`,\n              sessionType: 'chat',\n              routing: {\n                agentId,\n                source: 'webchat',\n                accountId: 'default',\n                peerKind: 'direct',\n                peerId,\n              },\n            },\n          });\n          const { GoalService } = await import('../goals/index.js');\n          new GoalService().attachSession(goal.id, sessionKey);\n          return sessionKey;\n        },\n        hasActiveRun: (sessionKey) => this.agentRunner.hasActiveRun(sessionKey),\n        runTurn: (sessionKey, userTurn) =>\n          this.agentRunner.runScheduledWebchatTurn(sessionKey, userTurn),\n        emit: (type, payload) => this.emit(type, payload),\n      });\n    }\n    return this.goalRunner;\n  }\n\n  private createGoalNotificationService(): GoalNotificationService {\n    if (!this.goalNotifications) {\n      this.goalNotifications = new GoalNotificationService({\n        getConfig: () => this.config,\n        getSessionMetadata: (sessionKey) => this.sessionIndex.getSessionMetadata(sessionKey),\n        send: async (target) => {\n          await this.channelManager.send({\n            channel: target.channel,\n            chat_id: target.chatId,\n            content: target.text,\n            type: 'message',\n            silent: target.silent,\n            metadata: {\n              accountId: target.accountId,\n              threadId: target.threadId,\n              source: 'goal-notification',\n            },\n          });\n        },\n      });\n    }\n    return this.goalNotifications;\n  }\n\n  enqueueGoalRun(goalId: string, options?: EnqueueGoalRunOptions) {\n    return this.createGoalRunner().enqueue(goalId, options);\n  }\n\n  getGoalQueueSnapshot() {\n    return this.createGoalRunner().snapshot();\n  }\n\n  runAgent(\n    ...args: Parameters<GatewayAgentRunner['runAgent']>\n  ): ReturnType<GatewayAgentRunner['runAgent']> {\n    return this.agentRunner.runAgent(...args);\n  }\n\n  abortAgentRun(runId: string): boolean {\n    return this.agentRunner.abortAgentRun(runId);\n  }\n\n  getActiveWebchatRunId(sessionKey: string): string | undefined {\n    return this.agentRunner.getActiveRunId(sessionKey);\n  }\n\n  steerWebchatAgent(\n    sessionKey: string,\n    message: string,\n  ): ReturnType<GatewayAgentRunner['steerWebchatAgent']> {\n    return this.agentRunner.steerWebchatAgent(sessionKey, message);\n  }\n\n  submitClarifyResponse(requestId: string, answer: string): boolean {\n    return this.agentRunner.submitClarifyResponse(requestId, answer);\n  }\n\n  private initializeExtensionLoader(): void {\n    try {\n      if (areExtensionsGloballyDisabled(this.config)) {\n        log.info('Extensions globally disabled — skipping loader initialization');\n        return;\n      }\n\n      const loaderOptions = {\n        workspaceDir: this.workspacePath,\n        extensionsDir: resolveExtensionsDir(),\n      };\n      this.extensionMetadataSnapshot = buildExtensionMetadataSnapshot(loaderOptions, this.config);\n      this.extensionLoader = new ExtensionLoader(loaderOptions);\n      this.extensionLoader.setManifestSnapshot(this.extensionMetadataSnapshot);\n      this.extensionLoader.setConfig(this.config as Parameters<ExtensionLoader['setConfig']>[0]);\n    } catch (error) {\n      log.warn({ error }, 'Failed to initialize extension loader');\n    }\n  }\n\n  private registerExtensionChannelPlugins(): void {\n    if (!this.extensionLoader) {\n      return;\n    }\n    const reg = this.extensionLoader.getRegistry();\n    for (const plugin of reg.channelPlugins) {\n      this.channelManager.registerPlugin(plugin);\n    }\n  }\n\n  /**\n   * Load extensions and register SDK / full ChannelPlugin instances with ChannelManager.\n   */\n  private async loadExtensionsAndRegisterChannels(): Promise<void> {\n    if (!this.extensionLoader) {\n      return;\n    }\n    try {\n      await this.extensionLoader.loadByActivationPlan({ phase: 'startup' });\n      this.registerExtensionChannelPlugins();\n      const reg = this.extensionLoader.getRegistry();\n      log.debug(\n        {\n          extensionRecords: reg.extensions.size,\n          channelPlugins: reg.channelPlugins.length,\n        },\n        'Startup-phase extensions loaded and channel plugins registered',\n      );\n    } catch (err) {\n      log.warn({ err }, 'Failed to load startup-phase extensions');\n    }\n  }\n\n  private findChannelContributionExtension(channelId: string): ManifestRegistryEntry | undefined {\n    const normalized = channelId.trim().toLowerCase();\n    const registry = this.extensionLoader?.getManifestRegistry();\n    if (!registry) return undefined;\n    return registry\n      .getAllEntries()\n      .find((entry) => Object.keys(entry.manifest.channelContributions ?? {}).some((id) => id.toLowerCase() === normalized));\n  }\n\n  async ensureChannelRuntimePlugin(channelId: string) {\n    const existing = this.channelManager.getPlugin(channelId);\n    if (existing) {\n      await this.channelManager.initializeChannel(channelId);\n      return this.channelManager.getPlugin(channelId);\n    }\n\n    if (!this.extensionLoader || areExtensionsGloballyDisabled(this.config)) {\n      return undefined;\n    }\n\n    const entry = this.findChannelContributionExtension(channelId);\n    if (!entry) {\n      return undefined;\n    }\n\n    const extensionConfig: ResolvedExtensionConfig = {\n      id: entry.id,\n      name: entry.manifest.name || entry.id,\n      source: entry.source,\n      path: entry.path,\n      enabled: true,\n      config: {},\n    };\n    await this.extensionLoader.loadExtension(extensionConfig);\n    this.registerExtensionChannelPlugins();\n    const plugin = this.channelManager.getPlugin(channelId);\n    if (!plugin) {\n      return undefined;\n    }\n    await this.channelManager.initializeChannel(channelId);\n    return this.channelManager.getPlugin(channelId);\n  }\n\n  private async loadDeferredExtensions(): Promise<void> {\n    if (!this.extensionLoader) {\n      return;\n    }\n    try {\n      await this.extensionLoader.loadByActivationPlan({ phase: 'deferred' });\n      this.registerExtensionChannelPlugins();\n      log.debug('Deferred-phase extensions loaded');\n    } catch (err) {\n      log.warn({ err }, 'Failed to load deferred extensions');\n    }\n  }\n\n  private schedulePostReadySidecars(): void {\n    queueMicrotask(() => {\n      void this.runPostReadySidecars();\n    });\n  }\n\n  private async runPostReadySidecars(): Promise<void> {\n    const trace = this.startupTrace;\n    try {\n      if (trace) {\n        await trace.measure('sidecars.model-prewarm', () => prewarmModelRegistry());\n      } else {\n        await prewarmModelRegistry();\n      }\n    } catch (err) {\n      const em = err instanceof Error ? err.message : String(err);\n      log.warn({ err, errorMessage: em, phase: 'sidecars.model_prewarm' }, `Model registry prewarm failed: ${em}`);\n    }\n\n    if (!this.extensionLoader || areExtensionsGloballyDisabled(this.config)) {\n      return;\n    }\n\n    try {\n      if (trace) {\n        await trace.measure('extensions.deferred-load', () => this.loadDeferredExtensions());\n      } else {\n        await this.loadDeferredExtensions();\n      }\n    } catch (err) {\n      const em = err instanceof Error ? err.message : String(err);\n      log.warn({ err, errorMessage: em, phase: 'extensions.deferred_load' }, `Deferred extension load failed: ${em}`);\n    }\n  }\n\n  async start(): Promise<void> {\n    if (this.running) return;\n\n    setPairingBroadcastSink((type, payload) => {\n      this.emit(type, payload);\n    });\n\n    log.debug('Starting gateway service...');\n    openXopcDatabase();\n    this.startTime = Date.now();\n    this.running = true;\n    this.startupTrace = createGatewayStartupTrace();\n    this.readiness.markStarting(this.startTime);\n    const trace = this.startupTrace;\n\n    registerClarifyBridge(this.agentRunner.getClarifyBridge());\n\n    this.ensureAgentService();\n\n    this.channelManager.setOutboundHooks({\n      runMessageSending: (to, content, channel) =>\n        this.agentService.outboundCoordinator.invokeOutboundMessageSending(to, content, channel),\n      runMessageSent: (to, content, success, error, channel) =>\n        this.agentService.outboundCoordinator.invokeOutboundMessageSent(to, content, success, error, channel),\n    });\n    this.channelManager.enableOutboundPersistence(resolveAgentDir(this.config, getDefaultAgentId(this.config)));\n\n    if (this.extensionLoader) {\n      this.extensionLoader.setRuntimeContext({\n        bus: this.bus,\n        sessionManager: this.sessionIndex,\n        scheduleWebchatContinuation: (sessionKey: string, continuationMessage: string) => {\n          queueMicrotask(() => {\n            void this.agentRunner.drainScheduledWebchatContinuation(sessionKey, continuationMessage);\n          });\n        },\n      });\n    }\n\n    await trace.measure('extensions.load', () => this.loadExtensionsAndRegisterChannels());\n\n    const skipChannels =\n      process.env.XOPC_SKIP_CHANNELS === '1' ||\n      process.env.XOPC_SKIP_CHANNELS === 'true' ||\n      process.env.XOPC_SKIP_PROVIDERS === '1' ||\n      process.env.XOPC_SKIP_PROVIDERS === 'true';\n\n    // Start channels: init all; optional defer for meta.deferConnectUntilAfterListen (GatewayServer)\n    const phase1StartedAt = performance.now();\n    let channelInitMs = 0;\n    let deferPlanMs = 0;\n    let channelPhase1StartMs = 0;\n    let replayOutboundMs: number | null = null;\n    let deferConnect = new Set<string>();\n\n    if (skipChannels) {\n      log.info('Skipping channel startup (XOPC_SKIP_CHANNELS or XOPC_SKIP_PROVIDERS)');\n    } else {\n      const t0 = performance.now();\n      await trace.measure('channels.initialize', () => this.channelManager.initialize());\n      channelInitMs = performance.now() - t0;\n\n      const t1 = performance.now();\n      const deferResolution = resolveChannelConnectDeferSet({\n        config: this.config,\n        channelManager: this.channelManager,\n        deferChannelConnectUntilAfterHttp: this.serviceConfig.deferChannelConnectUntilAfterHttp === true,\n      });\n      deferConnect = deferResolution.deferPluginIds;\n      deferPlanMs = performance.now() - t1;\n      this.lastDeferredChannelConnectIds = [...deferConnect];\n      this.lastChannelConnectDeferMode = deferResolution.mode;\n      this.lastChannelConnectDeferSource = deferResolution.source;\n\n      if (deferConnect.size > 0) {\n        log.info({ channels: [...deferConnect] }, 'Deferring channel outbound connect until HTTP listen');\n      }\n\n      const t2 = performance.now();\n      await trace.measure('channels.start', () =>\n        this.channelManager.start(\n          deferConnect.size > 0 ? { deferConnectPluginIds: deferConnect } : undefined,\n        ),\n      );\n      channelPhase1StartMs = performance.now() - t2;\n\n      if (this.serviceConfig.deferChannelConnectUntilAfterHttp !== true) {\n        const tr = performance.now();\n        await trace.measure('channels.replay-outbound', () =>\n          this.channelManager.replayPendingOutboundMessages(),\n        );\n        replayOutboundMs = performance.now() - tr;\n      }\n    }\n\n    const channelStartupPhase1TotalMs = performance.now() - phase1StartedAt;\n    const gwDeferMode = this.config.gateway?.channelConnectDeferMode ?? 'auto';\n    const phase1Metrics: GatewayChannelStartupPhase1Metrics = {\n      deferChannelConnectUntilAfterHttp: this.serviceConfig.deferChannelConnectUntilAfterHttp === true,\n      channelConnectDeferMode: this.serviceConfig.deferChannelConnectUntilAfterHttp\n        ? this.lastChannelConnectDeferMode\n        : gwDeferMode,\n      channelConnectDeferSource: this.lastChannelConnectDeferSource,\n      deferredChannelIds: this.lastDeferredChannelConnectIds,\n      deferredChannelCount: this.lastDeferredChannelConnectIds.length,\n      channelInitMs: Math.round(channelInitMs),\n      deferPlanMs: Math.round(deferPlanMs),\n      channelPhase1StartMs: Math.round(channelPhase1StartMs),\n      replayOutboundMs: replayOutboundMs === null ? null : Math.round(replayOutboundMs),\n      channelStartupPhase1TotalMs: Math.round(channelStartupPhase1TotalMs),\n    };\n    log.info(\n      { phase: 'gateway.channel_startup', stage: 'phase1', ...phase1Metrics },\n      'Gateway channel startup phase-1 complete',\n    );\n\n    // Initialize session manager\n    await trace.measure('sessions.initialize', () => this.sessionIndex.initialize());\n    log.debug('Session manager initialized');\n\n    this.cronService.setDeps({\n      agentService: this.agentService,\n      messageBus: this.bus,\n      heartbeatService: this.ensureHeartbeatService(),\n      sessionStore: this.sessionIndex.getStore(),\n      getDefaultCronAgentId: () => getDefaultAgentId(this.config),\n      workflowRunService: this.createWorkflowRunService(),\n      goalRunner: this.createGoalRunner(),\n    });\n\n    await trace.measure('workflows.reconcile', () => this.reconcileInterruptedWorkflowRuns());\n\n    this.sessionIndex.on('sessionUpdated', (data: { key: string; name?: string; tags?: string[] }) => {\n      this.emit('session.updated', { key: data.key, name: data.name, tags: data.tags });\n    });\n\n    // Start cron service\n    if (this.config.cron?.enabled !== false) {\n      await trace.measure('cron.initialize', () => this.cronService.initialize());\n    }\n\n    await this.notesService.initialize();\n\n    this.ensureHeartbeatService().start(heartbeatRunnerConfigFromConfig(this.config));\n\n    this.connectorSupervisor = startConnectorSupervisor({\n      getConfig: () => this.config,\n      saveConfig: (cfg) => this.saveConfig(cfg),\n    });\n\n    void import('../browser/providers/browser-ext-install.js')\n      .then(({ ensureBrowserExtensionOnStartup }) => ensureBrowserExtensionOnStartup(this.config))\n      .catch((err) => log.warn({ err }, 'Browser extension artifact ensure failed'));\n\n    // Start browser extension WS server if configured\n    await trace.measure('browser-extension.start', () => this.startBrowserExtensionServerIfNeeded());\n\n    // Start agent service (runs in background)\n    this.agentService.start().catch((err) => {\n      log.error({ err }, 'Agent service error');\n    });\n\n    // Outbound drain: after deferred channel connects when using HTTP lifecycle (avoid racing Telegram).\n    if (this.serviceConfig.deferChannelConnectUntilAfterHttp !== true) {\n      this.startOutboundProcessor().catch((err) => {\n        log.error({ err }, 'Outbound processor error');\n      });\n    }\n\n    // Setup config hot reload\n    if (this.serviceConfig.enableHotReload !== false) {\n      this.configCoordinator.startHotReloader();\n    }\n\n    this.stopGatewayUpdateCheck = scheduleGatewayUpdateCheck({\n      config: this.config,\n      onUpdateAvailableChange: (update) => {\n        this.emit('update.available', update);\n      },\n      triggerInProcessRestart: () => this.triggerGatewayProcessRestart(),\n    });\n\n    wireTunnelEventsToGateway(this);\n\n    // Drop orphan single-HTML site-share staging dirs left behind by a\n    // process death between create and cleanup. Re-registers live ones into\n    // the in-process map so post-restart revoke/expire still cleans them.\n    void import('../share/share-auto.js')\n      .then(({ runStagingSweep }) => runStagingSweep())\n      .catch((err) => log.warn({ err }, 'Share staging sweep failed'));\n\n    if (this.serviceConfig.deferChannelConnectUntilAfterHttp !== true) {\n      this.markGatewayReady();\n    } else {\n      trace.mark('service.started-awaiting-http');\n    }\n\n    log.debug('Gateway service started');\n  }\n\n  /** Called when the HTTP listener is bound (before deferred channel work). */\n  markHttpListening(): void {\n    this.readiness.markHttpListening();\n    this.startupTrace?.mark('http.listening');\n  }\n\n  isGatewayReady(): boolean {\n    return this.readiness.isReady();\n  }\n\n  getGatewayReadiness(): GatewayReadinessSnapshot {\n    return this.readiness.getSnapshot();\n  }\n\n  private async applyStartupReadyDelayForTesting(): Promise<void> {\n    const raw = process.env.XOPC_GATEWAY_STARTUP_SLOW_MS?.trim();\n    if (!raw) {\n      return;\n    }\n    const delayMs = Number.parseInt(raw, 10);\n    if (!Number.isFinite(delayMs) || delayMs <= 0) {\n      return;\n    }\n    await new Promise((resolve) => setTimeout(resolve, delayMs));\n  }\n\n  private markGatewayReady(): void {\n    if (this.readiness.isReady()) {\n      return;\n    }\n    this.readiness.markReady();\n    this.startupTrace?.mark('ready');\n    this.schedulePostReadySidecars();\n  }\n\n  /** After HTTP is listening: exposure auto-start (Tailscale, then FRP tunnel). */\n  private async runExposureAutoStartIfConfigured(): Promise<void> {\n    const port = this.getEffectiveListenPort();\n    await getExposureManager().autoStart(this.config, port, this.getAuthToken());\n  }\n\n  /**\n   * Called by `GatewayServer` when the HTTP listener is bound. Starts channels that\n   * opted into `meta.deferConnectUntilAfterListen`, then replays outbound queue.\n   */\n  async onHttpListening(): Promise<void> {\n    await this.applyStartupReadyDelayForTesting();\n    this.markGatewayReady();\n\n    await this.runExposureAutoStartIfConfigured();\n\n    if (this.serviceConfig.deferChannelConnectUntilAfterHttp !== true) {\n      return;\n    }\n    const listenStartedAt = performance.now();\n    const trace = this.startupTrace;\n    try {\n      const tDef = performance.now();\n      if (trace) {\n        await trace.measure('channels.deferred-connect', () => this.channelManager.startDeferredConnects());\n      } else {\n        await this.channelManager.startDeferredConnects();\n      }\n      const channelPhase2DeferredMs = performance.now() - tDef;\n\n      const tr = performance.now();\n      if (trace) {\n        await trace.measure('channels.replay-outbound', () =>\n          this.channelManager.replayPendingOutboundMessages(),\n        );\n      } else {\n        await this.channelManager.replayPendingOutboundMessages();\n      }\n      const replayOutboundMs = performance.now() - tr;\n\n      this.startOutboundProcessor().catch((err) => {\n        log.error({ err }, 'Outbound processor error');\n      });\n      this.emit('channels.status', { channels: this.getChannelsStatus() });\n\n      const onHttpListeningTotalMs = performance.now() - listenStartedAt;\n      const phase2Metrics: GatewayChannelStartupPhase2Metrics = {\n        channelConnectDeferMode: this.lastChannelConnectDeferMode,\n        channelConnectDeferSource: this.lastChannelConnectDeferSource,\n        deferredChannelIds: this.lastDeferredChannelConnectIds,\n        channelPhase2DeferredMs: Math.round(channelPhase2DeferredMs),\n        replayOutboundMs: Math.round(replayOutboundMs),\n        onHttpListeningTotalMs: Math.round(onHttpListeningTotalMs),\n      };\n      log.info(\n        { phase: 'gateway.channel_startup', stage: 'phase2', ...phase2Metrics },\n        'Gateway channel startup phase-2 complete (HTTP listening)',\n      );\n    } catch (err) {\n      const em = err instanceof Error ? err.message : String(err);\n      log.error(\n        {\n          err,\n          errorMessage: em,\n          phase: 'gateway.channel_startup',\n          stage: 'phase2',\n          deferredChannelIds: this.lastDeferredChannelConnectIds,\n          elapsedMs: Math.round(performance.now() - listenStartedAt),\n        },\n        `Deferred channel startup after HTTP listen failed: ${em}`,\n      );\n    } finally {\n      this.markGatewayReady();\n    }\n  }\n\n  async stop(): Promise<void> {\n    if (!this.running) return;\n\n    setPairingBroadcastSink(null);\n\n    log.debug('Stopping gateway service...');\n    this.readiness.markStarting();\n\n    await stopTailscaleExposure().catch((err) => {\n      log.warn({ err }, 'Tailscale exposure shutdown failed');\n    });\n\n    if (this.stopGatewayUpdateCheck) {\n      this.stopGatewayUpdateCheck();\n      this.stopGatewayUpdateCheck = null;\n    }\n\n    await this.configCoordinator.stopHotReloader();\n\n    // Stop heartbeat service\n    this.heartbeatService?.stop();\n    this.connectorSupervisor?.stop();\n    this.connectorSupervisor = null;\n\n    // Stop browser extension WS server (shared acquire/release with BrowserManager)\n    if (this.browserExtensionRelease) {\n      await this.browserExtensionRelease();\n      this.browserExtensionRelease = null;\n    }\n    this.browserExtensionProvider = null;\n    this.browserExtensionBindKey = null;\n\n    registerClarifyBridge(null);\n    this.agentRunner.disposeClarifyBridge();\n    await disposeAllSessionMcpRuntimes().catch((err) => {\n      log.warn({ err }, 'MCP runtime shutdown failed');\n    });\n    this._agentService?.stop();\n\n    // Unblock `consumeOutbound()` / `consumeInbound()` waiters before stopping channels (CLI agent does the same).\n    this.running = false;\n    this.bus.shutdown();\n\n    this.lastDeferredChannelConnectIds = [];\n    this.lastChannelConnectDeferMode = 'auto';\n    this.lastChannelConnectDeferSource = 'off';\n\n    await this.channelManager.stop();\n\n    // Stop cron service\n    await this.cronService.stop();\n\n    // Flush notes to disk\n    await this.notesService.flush();\n\n    // Tear down rate-limit cleanup timers so the process can exit cleanly.\n    buckets.destroyAll();\n\n    closeXopcDatabase();\n\n    log.debug('Gateway service stopped');\n  }\n\n  /** Start the browser extension WS server when backend is 'extension'. */\n  private async startBrowserExtensionServerIfNeeded(): Promise<void> {\n    await this.reconcileBrowserExtensionServer();\n  }\n\n  /** Release the gateway's hold on the shared extension bridge (does not restart). */\n  async releaseBrowserExtensionBridge(): Promise<void> {\n    if (!this.browserExtensionRelease) return;\n    await this.browserExtensionRelease();\n    this.browserExtensionRelease = null;\n    this.browserExtensionProvider = null;\n    this.browserExtensionBindKey = null;\n    log.debug('Browser extension WS server released');\n  }\n\n  /**\n   * Start/stop/rebind the Chrome extension bridge.\n   * PATCH saves update config in memory without re-running gateway startup, so this must run on save too.\n   */\n  async reconcileBrowserExtensionServer(): Promise<void> {\n    const { shouldRunExtensionBridgeServer } = await import('../browser/backend-from-config.js');\n    const wantsExtension = shouldRunExtensionBridgeServer(this.config);\n\n    if (!wantsExtension) {\n      if (this.browserExtensionRelease) {\n        await this.browserExtensionRelease();\n        this.browserExtensionRelease = null;\n        this.browserExtensionProvider = null;\n        this.browserExtensionBindKey = null;\n        log.debug('Browser extension WS server stopped (backend is not extension)');\n      }\n      return;\n    }\n\n    const port = 19820;\n    const host = '127.0.0.1';\n    const connectionTimeout = undefined;\n    const commandTimeout = undefined;\n    const bindKey = `${host}:${port}`;\n\n    if (this.browserExtensionRelease && this.browserExtensionBindKey === bindKey) {\n      return;\n    }\n\n    if (this.browserExtensionRelease) {\n      await this.browserExtensionRelease();\n      this.browserExtensionRelease = null;\n      this.browserExtensionProvider = null;\n      this.browserExtensionBindKey = null;\n    }\n\n    try {\n      const { acquireExtensionBrowserServer } = await import('../browser/providers/extension-ws-acquire.js');\n      const { provider, release } = await acquireExtensionBrowserServer({\n        port,\n        host,\n        connectionTimeout,\n        commandTimeout,\n      });\n      this.browserExtensionProvider = provider;\n      this.browserExtensionRelease = release;\n      this.browserExtensionBindKey = bindKey;\n      log.info({ port, host }, 'Browser extension WS server started');\n    } catch (err) {\n      const code = err && typeof err === 'object' && 'code' in err ? (err as { code: unknown }).code : undefined;\n      if (code === 'EADDRINUSE') {\n        log.warn(\n          {\n            err,\n            phase: 'browser_extension_ws',\n            bindPort: port,\n            bindHost: host,\n            hint: 'Another process holds the browser extension bridge port 19820. Stop it before starting xopc.',\n          },\n          `Browser extension WS server port is already in use: ${host}:${port}`,\n        );\n        return;\n      }\n\n      log.error(\n        { err, phase: 'browser_extension_ws' },\n        `Failed to start browser extension WS server: ${err instanceof Error ? err.message : String(err)}`,\n      );\n    }\n  }\n\n  /**\n   * Start processing outbound messages and send through channels\n   */\n  private async startOutboundProcessor(): Promise<void> {\n    log.debug('Starting outbound message processor');\n    while (this.running) {\n      try {\n        const msg = await this.bus.consumeOutbound();\n        await this.channelManager.send(msg);\n      } catch (error) {\n        if (error instanceof MessageBusShutdownError) {\n          break;\n        }\n        const em = error instanceof Error ? error.message : String(error);\n        log.error(\n          { err: error, errorMessage: em, phase: 'outbound_consume' },\n          `Outbound pipeline failed (will retry in 1s): ${em}`,\n        );\n        await new Promise((resolve) => setTimeout(resolve, 1000));\n      }\n    }\n  }\n\n  // ── Config persistence / hot reload (delegated to GatewayConfigCoordinator) ──\n\n  reloadHeartbeatFromCurrentConfig(): void {\n    this.configCoordinator.reloadHeartbeatFromCurrentConfig();\n  }\n\n  reloadConfig(): Promise<{ reloaded: boolean; error?: string }> {\n    return this.configCoordinator.reloadConfig();\n  }\n\n  afterWeixinCredentialsPersisted(): Promise<void> {\n    return this.configCoordinator.afterWeixinCredentialsPersisted();\n  }\n\n  afterFeishuCredentialsPersisted(): Promise<void> {\n    return this.configCoordinator.afterFeishuCredentialsPersisted();\n  }\n\n  saveConfig(config: Config): Promise<{ saved: boolean; error?: string }> {\n    return this.configCoordinator.saveConfig(config);\n  }\n\n  setBundledExtensionActivationTarget(\n    extensionId: string,\n    wanted: boolean,\n  ): Promise<{ ok: boolean; error?: string; requiresGatewayRestart: boolean }> {\n    return this.configCoordinator.setBundledExtensionActivationTarget(extensionId, wanted);\n  }\n\n  updateConfig(updates: Partial<Config>): Promise<{ updated: boolean; error?: string }> {\n    return this.configCoordinator.updateConfig(updates);\n  }\n\n  /**\n   * Send message through a channel\n   */\n  async sendMessage(\n    channel: string,\n    chatId: string,\n    content: string\n  ): Promise<{ sent: boolean; messageId?: string }> {\n    try {\n      await this.channelManager.send({\n        channel,\n        chat_id: chatId,\n        content,\n      });\n      const messageId = `msg_${Date.now()}`;\n      this.emit('message.sent', { channel, chatId, messageId });\n      return { sent: true, messageId };\n    } catch (error) {\n      log.error({ channel, chatId, error }, 'Failed to send message');\n      throw error;\n    }\n  }\n\n  /**\n   * Get channel statuses\n   */\n  getChannelsStatus(): Array<{\n    name: string;\n    enabled: boolean;\n    connected: boolean;\n  }> {\n    const runningChannels = new Set(this.channelManager.getRunningChannels());\n    const channels = this.config.channels as Record<string, { enabled?: boolean } | undefined> | undefined;\n    const catalog = this.extensionMetadataSnapshot\n      ? buildChannelCatalogFromSnapshot(this.extensionMetadataSnapshot)\n      : buildChannelCatalogForConfig(this.config);\n\n    return catalog.entries.map((entry) => ({\n      name: entry.id,\n      enabled: channels?.[entry.id]?.enabled === true,\n      connected: runningChannels.has(entry.id),\n    }));\n  }\n\n  getRunningChannelIds(): string[] {\n    return this.channelManager.getRunningChannels();\n  }\n\n  getChannelRuntimePlugin(channelId: string) {\n    return this.channelManager.getPlugin(channelId);\n  }\n\n  async restartChannel(channelId: string): Promise<void> {\n    await this.channelManager.stopChannel(channelId);\n    await this.channelManager.startChannel(channelId);\n  }\n\n  /**\n   * Hub metadata for gateway console (built-in registry + registered channel plugins).\n   */\n  getChannelsHubMeta(): Array<{\n    id: string;\n    label: string;\n    description: string;\n    manageable: boolean;\n    order: number;\n  }> {\n    const catalog = this.extensionMetadataSnapshot\n      ? buildChannelCatalogFromSnapshot(this.extensionMetadataSnapshot)\n      : buildChannelCatalogForConfig(this.config);\n\n    return catalog.entries.map((entry) => ({\n      id: entry.id,\n      label: entry.label,\n      description: entry.description ?? '',\n      manageable: true,\n      order: entry.order,\n    })).toSorted((a, b) => {\n      if (a.order !== b.order) return a.order - b.order;\n      return a.id.localeCompare(b.id);\n    });\n  }\n\n  /**\n   * Request an immediate heartbeat run (coalesced like interval/cron wakes).\n   */\n  requestHeartbeatNow(opts?: { reason?: string }): void {\n    this.heartbeatService?.requestNow({ reason: opts?.reason ?? 'manual' });\n  }\n\n  /**\n   * Register graceful shutdown used after spawning a replacement gateway process (foreground CLI server).\n   */\n  registerGatewayShutdownForRestart(handler: () => Promise<void>): void {\n    this.gatewayShutdownForRestart = handler;\n  }\n\n  /**\n   * Respawn the gateway process when supported (spawn + exit, supervisor exit, or disabled when XOPC_NO_RESPAWN).\n   */\n  triggerGatewayProcessRestart(): { ok: boolean; mode: string; message?: string } {\n    const result = restartGatewayProcessWithFreshPid();\n    if (result.mode === 'failed') {\n      return { ok: false, mode: result.mode, message: result.detail ?? 'spawn failed' };\n    }\n    if (result.mode === 'disabled') {\n      return {\n        ok: false,\n        mode: 'disabled',\n        message:\n          'Process respawn is disabled (XOPC_NO_RESPAWN). Restart the gateway manually (e.g. xopc gateway restart).',\n      };\n    }\n    const shutdown = this.gatewayShutdownForRestart;\n    if (!shutdown) {\n      return {\n        ok: false,\n        mode: result.mode,\n        message: 'Gateway restart is not available in this process.',\n      };\n    }\n    setImmediate(() => {\n      void shutdown().finally(() => {\n        process.exit(0);\n      });\n    });\n    return { ok: true, mode: result.mode };\n  }\n\n  /**\n   * Get health status\n   */\n  getHealth(): {\n    status: string;\n    service: string;\n    version: string;\n    uptime: number;\n    ready: boolean;\n    httpListening: boolean;\n    startupDurationMs: number | null;\n    channels: { running: number; total: number };\n    configPath: string;\n    logs?: {\n      dir: string;\n      errors24h: number;\n      stats: Record<string, number>;\n    };\n  } {\n    const runningChannels = this.channelManager.getRunningChannels();\n    const allChannels = this.channelManager.getAllChannels();\n    const logStats = getRuntimeLogStats();\n    const readiness = this.readiness.getSnapshot();\n\n    return {\n      status: 'ok',\n      service: 'xopc-gateway',\n      version: PACKAGE_VERSION,\n      uptime: Math.floor((Date.now() - this.startTime) / 1000),\n      ready: readiness.ready,\n      httpListening: readiness.httpListening,\n      startupDurationMs: readiness.startupDurationMs,\n      channels: {\n        running: runningChannels.length,\n        total: allChannels.length,\n      },\n      configPath: this.configPath,\n      logs: {\n        dir: getLogDir(),\n        errors24h: logStats.errorsLast24h,\n        stats: logStats.byLevel,\n      },\n    };\n  }\n\n  get isRunning(): boolean {\n    return this.running;\n  }\n\n  /**\n   * Get extension registry for external access (HTTP routes, gateway methods)\n   */\n  getExtensionRegistry() {\n    return this.extensionLoader?.getRegistry();\n  }\n\n  /** Extension loader for discovery and frontend asset APIs (may be null if extensions failed to init). */\n  getExtensionLoader(): ExtensionLoader | null {\n    return this.extensionLoader;\n  }\n\n  /**\n   * Get model registry for external access (HTTP routes)\n   */\n  getModelRegistry() {\n    const { getModelRegistry } = require('../providers/index.js');\n    return getModelRegistry();\n  }\n\n  /**\n   * Invoke a gateway method registered by extensions\n   */\n  async invokeGatewayMethod(method: string, params: Record<string, unknown>): Promise<unknown> {\n    const registry = this.getExtensionRegistry();\n    if (!registry) {\n      throw new Error('Extension registry not available');\n    }\n\n    const handler = registry.getGatewayMethod(method);\n    if (!handler) {\n      throw new Error(`Gateway method not found: ${method}`);\n    }\n\n    return await handler(params);\n  }\n\n  get currentConfig(): Config {\n    return this.config;\n  }\n\n  get currentWorkspacePath(): string {\n    return this.workspacePath;\n  }\n\n  get messageBusInstance(): MessageBus {\n    return this.bus;\n  }\n\n  /** Effective HTTP listen port (CLI `--port` override or config default). */\n  getEffectiveListenPort(): number {\n    return resolveEffectiveGatewayPort(this.config, this.serviceConfig.listenPort);\n  }\n\n\n  get cronServiceInstance(): CronService {\n    return this.cronService;\n  }\n\n  get notesServiceInstance(): NotesService {\n    return this.notesService;\n  }\n\n  get sessionIndexInstance(): SessionIndex {\n    return this.sessionIndex;\n  }\n\n  /** Shared workflow run orchestrator + session bridge (one instance per gateway). */\n  createWorkflowRunService(): WorkflowRunService {\n    if (!this.workflowRunServiceInstance) {\n      this.workflowSessionBridge = new WorkflowSessionBridge(this);\n      this.workflowRunServiceInstance = new WorkflowRunService({\n        service: this,\n        sessionBridge: this.workflowSessionBridge,\n        buildChildTools: buildWorkflowChildTools,\n      });\n    }\n    return this.workflowRunServiceInstance;\n  }\n\n  private async reconcileInterruptedWorkflowRuns(): Promise<void> {\n    const workflowService = this.createWorkflowRunService();\n    const agentIds = this.collectWorkflowAgentIds();\n    let total = 0;\n    for (const agentId of agentIds) {\n      try {\n        total += await workflowService.reconcileInterruptedRuns(agentId);\n      } catch (err) {\n        const msg = err instanceof Error ? err.message : String(err);\n        log.warn(\n          { err, agentId, errorMessage: msg },\n          `Workflow run reconcile failed for agent ${agentId}: ${msg}`,\n        );\n      }\n    }\n    if (total > 0) {\n      log.info({ count: total, agentIds }, 'Reconciled interrupted workflow runs');\n    }\n  }\n\n  private collectWorkflowAgentIds(): string[] {\n    const ids = new Set<string>();\n    ids.add(resolveDefaultAgentId(this.config));\n    for (const entry of listAgentEntries(this.config)) {\n      if (entry.enabled === false) continue;\n      ids.add(normalizeAgentId(entry.id));\n    }\n    return [...ids];\n  }\n\n  /** Process a message directly through the agent (for CLI mode). */\n  async processDirect(content: string, sessionKey = 'agent:main:main'): Promise<string> {\n    return this.agentService.turnDispatcher.processDirect(content, sessionKey);\n  }\n\n  // ========== SSE Event System ==========\n\n  subscribe(\n    sessionId: string,\n    listener: (event: ServiceEvent) => Promise<void> | void,\n  ): () => void {\n    return this.sse.subscribe(sessionId, listener);\n  }\n\n  emit(type: string, payload: unknown): void {\n    this.sse.emit(type, payload);\n    this.createGoalNotificationService().handleGatewayEvent(type, payload);\n  }\n\n  /** Replay events since `lastEventId` for SSE reconnection. */\n  getEventsSince(sessionId: string, lastEventId: string): ServiceEvent[] {\n    return this.sse.getEventsSince(sessionId, lastEventId);\n  }\n\n  /**\n   * Validate authentication token from request headers.\n   * Returns true if auth is disabled (mode: 'none') or token is valid.\n   */\n  validateAuth(headers?: Record<string, string | string[] | undefined>): boolean {\n    const token = extractToken(headers);\n    return validateToken(this.auth, token);\n  }\n\n  /**\n   * Get current auth mode.\n   */\n  getAuthMode(): 'none' | 'token' | 'password' | 'trusted-proxy' {\n    return this.auth.mode;\n  }\n\n  /** Resolved gateway auth (mode, credentials, trusted-proxy config). */\n  getResolvedAuth(): ResolvedGatewayAuth {\n    return this.auth;\n  }\n\n  /**\n   * Get current auth token (for CLI server integration).\n   * Returns undefined if mode is not token.\n   */\n  getAuthToken(): string | undefined {\n    return this.auth.mode === 'token' ? this.auth.token : undefined;\n  }\n\n  /**\n   * Refresh (regenerate) the gateway auth token.\n   * Returns the new token.\n   */\n  async refreshAuthToken(): Promise<string> {\n    if (this.auth.mode !== 'token') {\n      throw new Error('Cannot refresh token: auth mode is not token');\n    }\n\n    // Generate new token\n    const newToken = crypto.randomBytes(24).toString('hex');\n    \n    // Update in-memory auth\n    this.auth.token = newToken;\n    \n    // Update config\n    this.config = {\n      ...this.config,\n      gateway: {\n        ...this.config.gateway,\n        auth: {\n          ...this.config.gateway?.auth,\n          mode: 'token',\n          token: newToken,\n        },\n      },\n    };\n    \n    await this.saveConfig(this.config);\n\n    log.info({ tokenPreview: `${newToken.slice(0, 8)}...` }, 'Gateway token refreshed');\n    \n    return newToken;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBACoG;8BAO5C;aAgBM;gBAaD;aACoB;YAKrD;sBAG4B;oBAIQ;kBACa;AA8B7E,MAAM,MAAM,aAAa,kBAAkB;AAE3C,IAAa,iBAAb,MAA4B;CAC1B;CACA;CACA;CACA,gBAA6C;CAC7C;CACA;CACA;CACA,kBAAkD;CAClD,4BAA6H;CAC7H,2BAAgH;CAChH,0BAAgE;;CAEhE,0BAAiD;CACjD,mBAAoD;CACpD;CACA,UAAkB;CAClB,YAAoB,KAAK,KAAK;CAC9B;CACA;CAGA;CAEA,MAAuB,IAAI,eAAe;CAE1C,YAAoB;AAClB,SAAO,KAAK;;CAGd,yBAAsD;;CAGtD,4BAAkE;;CAGlE,gCAAkD,EAAE;CACpD,8BAAmE;CACnE,gCAAqE;CAErE,YAA6B,IAAI,kBAAkB;CACnD,eAAmD;CACnD,wBAA8D;CAC9D,6BAAgE;CAChE,aAAwC;CACxC,oBAA4D;CAC5D,sBAA0D;;;;;;CAO1D;;CAGA,IAAI,WAA0B;AAAE,SAAO,KAAK,YAAY;;;;;;;CAOxD;;;;;CAMA;CAEA,YAAY,gBAA8C,EAAE,EAAE;AAA1C,OAAA,gBAAA;AAClB,OAAK,MAAM,IAAI,YAAY;AAC3B,OAAK,aAAa,cAAc,cAAc,mBAAmB;AACjE,OAAK,SAAS,WAAW,KAAK,WAAW;EACzC,MAAM,gBAAgB,+BAA+B,KAAK,OAAO;AACjE,MAAI,cAAc,SAAS;AACzB,QAAK,SAAS,cAAc;AACvBA,cAAkB,KAAK,QAAQ,KAAK,WAAW,CAAC,OAAO,QAAQ;IAClE,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,QAAI,KAAK;KAAE;KAAK,OAAO;KAAuB,cAAc;KAAI,EAAE,uCAAuC,KAAK;KAC9G;;AAEJ,MAAI,qBAAqB,KAAK,OAAO,CAC9BA,YAAkB,KAAK,QAAQ,KAAK,WAAW,CAAC,OAAO,QAAQ;GAClE,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAI,KAAK;IAAE;IAAK,OAAO;IAAmB,cAAc;IAAI,EAAE,0CAA0C,KAAK;IAC7G;AAIJ,OAAK,OAAO,mBAAmB,EAC7B,YAAY,KAAK,OAAO,SAAS,MAClC,CAAC;AAGF,8BAA4B,KAAK,KAAK;AAGtC,gCAA8B,KAAK,KAAK;EAExC,MAAM,cAAc,KAAK,wBAAwB;EACjD,MAAM,gBAAgB,2BAA2B;GAC/C,KAAK,KAAK;GACV,MAAM,KAAK;GACX,cAAc,cAAc;GAC5B,MAAM;GACP,CAAC;AAGF,qBAAmB;GACjB,MAAM,KAAK;GACX,UAAU,cAAc;GACxB,aAAa,cAAc;GAC3B,kBAAkB,cAAc;GAChC,YAAY,cAAc;GAC1B,gBAAgB,KAAK,OAAO,SAAS;GACrC,qBAAqB,KAAK,OAAO,SAAS,wBAAwB;GAClE,0CAA0C,cAAc;GACxD,uBAAuB,+BAA+B,KAAK,OAAO;GAClE,qBAAqB,KAAK,OAAO,SAAS,MAAM,cAAc,KAAA;GAC/D,CAAC;AAGF,MAAI,KAAK,KAAK,SAAS,SAAS;GAC9B,MAAM,eAAe,KAAK,KAAK,QAAQ,GAAG,KAAK,KAAK,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO;AAC7E,OAAI,KAAK;IAAE,MAAM,KAAK,KAAK;IAAM,OAAO;IAAc,EAAE,4BAA4B;aAC3E,KAAK,KAAK,SAAS,gBAC5B,KAAI,KACF;GACE,MAAM,KAAK,KAAK;GAChB,YAAY,KAAK,KAAK,cAAc;GACpC,mBAAmB,KAAK,OAAO,SAAS,gBAAgB,UAAU;GACnE,EACD,0CACD;MAED,KAAI,KAAK,EAAE,MAAM,KAAK,KAAK,MAAM,EAAE,4BAA4B;AAIjE,OAAK,iBAAiB,IAAI,eAAe,KAAK,QAAQ,KAAK,IAAI;AAG/D,OAAK,gBAAgB,iBAAiB,KAAK,OAAO,IAAI;AACtD,OAAK,2BAA2B;AAGhC,OAAK,eAAe,IAAI,aAAa,EACnC,QAAQ,KAAK,QACd,CAAC;AAEF,OAAK,cAAc,IAAI,YAAY,EACjC,mBAAmB,KAAK,OAAO,MAAM,mBACtC,CAAC;AAEF,OAAK,eAAe,IAAI,aAAa,IAAI,YAAY,CAAC;AAEtD,OAAK,cAAc,IAAI,mBAAmB;GACxC,KAAK,KAAK;GACV,cAAc,KAAK;GACnB,uBAAuB,KAAK,oBAAoB;GAChD,yBAAyB,KAAK;GAC9B,iBAAiB,KAAK;GACtB,OAAO,MAAM,YAAY,KAAK,IAAI,KAAK,MAAM,QAAQ;GACtD,CAAC;AAEF,OAAK,WAAW,IAAI,mBAAmB;GACrC,cAAc,KAAK;GACnB,uBAAuB,KAAK,oBAAoB;GAChD,wBAAwB,OAAO,KAAK,YAAY,eAAe,GAAG;GACnE,CAAC;AAEF,OAAK,cAAc,IAAI,0BAA0B;GAC/C,iBAAiB,KAAK;GACtB,uBAAuB,KAAK,oBAAoB;GAChD,0BAA0B,KAAK;GAC/B,yBAAyB,KAAK;GAC9B,aAAa,QAAQ,KAAK,WAAW,IAAI;GACzC,OAAO,MAAM,YAAY,KAAK,KAAK,MAAM,QAAQ;GAClD,CAAC;AAEF,OAAK,oBAAoB,IAAI,yBAAyB;GACpD,YAAY,KAAK;GACjB,KAAK,KAAK;GACV,iBAAiB,KAAK,cAAc,oBAAoB;GACxD,iBAAiB,KAAK;GACtB,YAAY,SAAS;AAAE,SAAK,SAAS;;GACrC,uBAAuB,KAAK,oBAAoB;GAChD,yBAAyB,KAAK;GAC9B,sBAAsB,KAAK;GAC3B,2BAA2B,KAAK;GAChC,0BAA0B,KAAK;GAC/B,uCAAuC,KAAK,iCAAiC;GAC7E,yBAAyB,KAAK,mBAAmB;GACjD,OAAO,MAAM,YAAY,KAAK,KAAK,MAAM,QAAQ;GAClD,CAAC;;;CAIJ,IAAI,eAA6B;AAC/B,SAAO,KAAK,oBAAoB;;CAGlC,qBAA2C;AACzC,MAAI,KAAK,cACP,QAAO,KAAK;EAGd,MAAM,UAAqC,EAAE,SAAS,KAAK,aAAa;AACxE,OAAK,gBAAgB,IAAI,aAAa,KAAK,KAAK;GAC9C,WAAW,KAAK;GAChB,OAAO,wBAAwB,KAAK,OAAO;GAC3C,QAAQ,KAAK;GACb,cAAc,KAAK,aAAa,UAAU;GAC1C,2BAA2B,YAAY,UAAU;AAC/C,SAAK,aAAa,KAAK,kBAAkB;KAAE,KAAK;KAAY,MAAM,OAAO;KAAM,CAAC;AAChF,SAAK,KAAK,mBAAmB;KAAE,KAAK;KAAY,MAAM,OAAO;KAAM,CAAC;;GAEtE,6BAA6B,eAAe;AAC1C,SAAK,KAAK,8BAA8B,EAAE,KAAK,YAAY,CAAC;;GAE9D,sBAAsB,YAAY;AAChC,SAAK,KAAK,uBAAuB,QAAQ;;GAE3C,kBAAkB,YAAY;AAC5B,SAAK,KAAK,iBAAiB;KACzB,SAAS;KACT,QAAQ,QAAQ,WAAW,SAAS,sBAAsB;KAC3D,CAAC;;GAEJ,mBAAmB,KAAK,iBAAiB,aAAa;GACtD,sBAAsB,QAAQ;GAC9B,6BAA6B,KAAK,0BAA0B;GAC5D,uBAAuB,OAAO,YAAY;AACxC,QAAI,QAAQ,SAAS,OAAQ,QAAO;IACpC,MAAM,OAAO,MAAM,KAAK,aAAa,QAAQ,QAAQ,SAAS;AAC9D,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,sBAAsB;KAC3B;KACA,cAAc,KAAK;KACnB,QAAQ,KAAK;KACd,CAAC;;GAEJ,gBAAgB,EACd,uBAAuB,YAAY,YACjC,KAAK,YAAY,qBAAqB;IACpC;IACA;IACA,gBAAgB,YAAY,MAAkB;AAC5C,UAAK,cAAe,eAAe,uBAAuB,YAAY,EAAE;;IAE3E,CAAC,EACL;GACF,CAAC;AAEF,OAAK,cAAc,kBAAkB,KAAK,eAAe;AACzD,OAAK,eAAe,qBAAqB;GACvC,qBAAqB,OAAO,KAAK,cAAe,mBAAmB,GAAG;GACtE,wBAAwB,IAAI,OAAO,KAAK,cAAe,sBAAsB,IAAI,GAAG;GACrF,CAAC;AAEF,OAAK,YAAY,QAAQ;GACvB,cAAc,KAAK;GACnB,YAAY,KAAK;GACjB,kBAAkB,KAAK,wBAAwB;GAC/C,cAAc,KAAK,aAAa,UAAU;GAC1C,6BAA6B,kBAAkB,KAAK,OAAO;GAC3D,oBAAoB,KAAK,0BAA0B;GACnD,YAAY,KAAK,kBAAkB;GACpC,CAAC;AACF,UAAQ,UAAU,KAAK;AAEvB,OAAK,cAAc,gBAAgB,iCAAiC,YAAY,YAAY;GAC1F,MAAM,yBAAyB;AAC7B,QAAI,KAAK,cAAe,oBAAoB,WAAW,GAAG,GAAG;AAC3D,gBAAW,kBAAkB,GAAG;AAChC;;AAEF,QAAI,KAAK,YAAY,aAAa,WAAW,EAAE;AAC7C,gBAAW,kBAAkB,GAAG;AAChC;;AAEG,SAAK,YAAY,kCAAkC,YAAY,QAAQ;;AAE9E,kBAAe,iBAAiB;IAChC;AAEF,SAAO,KAAK;;CAGd,yBAAmD;AACjD,MAAI,KAAK,iBACP,QAAO,KAAK;AAEd,OAAK,mBAAmB,IAAI,iBAAiB;GAC3C,cAAc,KAAK,oBAAoB;GACvC,YAAY,KAAK;GACjB,aAAa,KAAK;GAClB,cAAc,KAAK,aAAa,UAAU;GAC1C,iBAAiB,KAAK;GACvB,CAAC;AACF,SAAO,KAAK;;CAKd,mBAAuC;AACrC,MAAI,CAAC,KAAK,WACR,MAAK,aAAa,IAAI,WAAW;GAC/B,eAAe;GACf,mBAAmB;GACnB,eAAe,OAAO,SAAS;IAC7B,MAAM,WAAW,KAAK,kBAAkB,MAAM;AAC9C,QAAI,SAAU,QAAO;IACrB,MAAM,UAAU,KAAK,WAAW,kBAAkB,KAAK,OAAO;IAC9D,MAAM,SAAS,QAAQ,gBAAgB,KAAK,GAAG,IAAI,KAAK,KAAK;IAC7D,MAAM,aAAa,gBAAgB;KACjC;KACA,QAAQ;KACR,WAAW;KACX,UAAU;KACV;KACD,CAAC;AACF,UAAM,KAAK,aAAa,aAAa,YAAY,EAAE,EAAE,EACnD,UAAU;KACR,eAAe;KACf,cAAc,kBAAkB;KAChC,aAAa;KACb,SAAS;MACP;MACA,QAAQ;MACR,WAAW;MACX,UAAU;MACV;MACD;KACF,EACF,CAAC;IACF,MAAM,EAAE,gBAAgB,MAAM,OAAO;AACrC,QAAI,aAAa,CAAC,cAAc,KAAK,IAAI,WAAW;AACpD,WAAO;;GAET,eAAe,eAAe,KAAK,YAAY,aAAa,WAAW;GACvE,UAAU,YAAY,aACpB,KAAK,YAAY,wBAAwB,YAAY,SAAS;GAChE,OAAO,MAAM,YAAY,KAAK,KAAK,MAAM,QAAQ;GAClD,CAAC;AAEJ,SAAO,KAAK;;CAGd,gCAAiE;AAC/D,MAAI,CAAC,KAAK,kBACR,MAAK,oBAAoB,IAAI,wBAAwB;GACnD,iBAAiB,KAAK;GACtB,qBAAqB,eAAe,KAAK,aAAa,mBAAmB,WAAW;GACpF,MAAM,OAAO,WAAW;AACtB,UAAM,KAAK,eAAe,KAAK;KAC7B,SAAS,OAAO;KAChB,SAAS,OAAO;KAChB,SAAS,OAAO;KAChB,MAAM;KACN,QAAQ,OAAO;KACf,UAAU;MACR,WAAW,OAAO;MAClB,UAAU,OAAO;MACjB,QAAQ;MACT;KACF,CAAC;;GAEL,CAAC;AAEJ,SAAO,KAAK;;CAGd,eAAe,QAAgB,SAAiC;AAC9D,SAAO,KAAK,kBAAkB,CAAC,QAAQ,QAAQ,QAAQ;;CAGzD,uBAAuB;AACrB,SAAO,KAAK,kBAAkB,CAAC,UAAU;;CAG3C,SACE,GAAG,MACyC;AAC5C,SAAO,KAAK,YAAY,SAAS,GAAG,KAAK;;CAG3C,cAAc,OAAwB;AACpC,SAAO,KAAK,YAAY,cAAc,MAAM;;CAG9C,sBAAsB,YAAwC;AAC5D,SAAO,KAAK,YAAY,eAAe,WAAW;;CAGpD,kBACE,YACA,SACqD;AACrD,SAAO,KAAK,YAAY,kBAAkB,YAAY,QAAQ;;CAGhE,sBAAsB,WAAmB,QAAyB;AAChE,SAAO,KAAK,YAAY,sBAAsB,WAAW,OAAO;;CAGlE,4BAA0C;AACxC,MAAI;AACF,OAAI,8BAA8B,KAAK,OAAO,EAAE;AAC9C,QAAI,KAAK,gEAAgE;AACzE;;GAGF,MAAM,gBAAgB;IACpB,cAAc,KAAK;IACnB,eAAe,sBAAsB;IACtC;AACD,QAAK,4BAA4B,+BAA+B,eAAe,KAAK,OAAO;AAC3F,QAAK,kBAAkB,IAAI,gBAAgB,cAAc;AACzD,QAAK,gBAAgB,oBAAoB,KAAK,0BAA0B;AACxE,QAAK,gBAAgB,UAAU,KAAK,OAAsD;WACnF,OAAO;AACd,OAAI,KAAK,EAAE,OAAO,EAAE,wCAAwC;;;CAIhE,kCAAgD;AAC9C,MAAI,CAAC,KAAK,gBACR;EAEF,MAAM,MAAM,KAAK,gBAAgB,aAAa;AAC9C,OAAK,MAAM,UAAU,IAAI,eACvB,MAAK,eAAe,eAAe,OAAO;;;;;CAO9C,MAAc,oCAAmD;AAC/D,MAAI,CAAC,KAAK,gBACR;AAEF,MAAI;AACF,SAAM,KAAK,gBAAgB,qBAAqB,EAAE,OAAO,WAAW,CAAC;AACrE,QAAK,iCAAiC;GACtC,MAAM,MAAM,KAAK,gBAAgB,aAAa;AAC9C,OAAI,MACF;IACE,kBAAkB,IAAI,WAAW;IACjC,gBAAgB,IAAI,eAAe;IACpC,EACD,iEACD;WACM,KAAK;AACZ,OAAI,KAAK,EAAE,KAAK,EAAE,0CAA0C;;;CAIhE,iCAAyC,WAAsD;EAC7F,MAAM,aAAa,UAAU,MAAM,CAAC,aAAa;EACjD,MAAM,WAAW,KAAK,iBAAiB,qBAAqB;AAC5D,MAAI,CAAC,SAAU,QAAO,KAAA;AACtB,SAAO,SACJ,eAAe,CACf,MAAM,UAAU,OAAO,KAAK,MAAM,SAAS,wBAAwB,EAAE,CAAC,CAAC,MAAM,OAAO,GAAG,aAAa,KAAK,WAAW,CAAC;;CAG1H,MAAM,2BAA2B,WAAmB;AAElD,MADiB,KAAK,eAAe,UAAU,UACnC,EAAE;AACZ,SAAM,KAAK,eAAe,kBAAkB,UAAU;AACtD,UAAO,KAAK,eAAe,UAAU,UAAU;;AAGjD,MAAI,CAAC,KAAK,mBAAmB,8BAA8B,KAAK,OAAO,CACrE;EAGF,MAAM,QAAQ,KAAK,iCAAiC,UAAU;AAC9D,MAAI,CAAC,MACH;EAGF,MAAM,kBAA2C;GAC/C,IAAI,MAAM;GACV,MAAM,MAAM,SAAS,QAAQ,MAAM;GACnC,QAAQ,MAAM;GACd,MAAM,MAAM;GACZ,SAAS;GACT,QAAQ,EAAE;GACX;AACD,QAAM,KAAK,gBAAgB,cAAc,gBAAgB;AACzD,OAAK,iCAAiC;AAEtC,MAAI,CADW,KAAK,eAAe,UAAU,UAClC,CACT;AAEF,QAAM,KAAK,eAAe,kBAAkB,UAAU;AACtD,SAAO,KAAK,eAAe,UAAU,UAAU;;CAGjD,MAAc,yBAAwC;AACpD,MAAI,CAAC,KAAK,gBACR;AAEF,MAAI;AACF,SAAM,KAAK,gBAAgB,qBAAqB,EAAE,OAAO,YAAY,CAAC;AACtE,QAAK,iCAAiC;AACtC,OAAI,MAAM,mCAAmC;WACtC,KAAK;AACZ,OAAI,KAAK,EAAE,KAAK,EAAE,qCAAqC;;;CAI3D,4BAA0C;AACxC,uBAAqB;AACd,QAAK,sBAAsB;IAChC;;CAGJ,MAAc,uBAAsC;EAClD,MAAM,QAAQ,KAAK;AACnB,MAAI;AACF,OAAI,MACF,OAAM,MAAM,QAAQ,gCAAgC,sBAAsB,CAAC;OAE3E,OAAM,sBAAsB;WAEvB,KAAK;GACZ,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAI,KAAK;IAAE;IAAK,cAAc;IAAI,OAAO;IAA0B,EAAE,kCAAkC,KAAK;;AAG9G,MAAI,CAAC,KAAK,mBAAmB,8BAA8B,KAAK,OAAO,CACrE;AAGF,MAAI;AACF,OAAI,MACF,OAAM,MAAM,QAAQ,kCAAkC,KAAK,wBAAwB,CAAC;OAEpF,OAAM,KAAK,wBAAwB;WAE9B,KAAK;GACZ,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAI,KAAK;IAAE;IAAK,cAAc;IAAI,OAAO;IAA4B,EAAE,mCAAmC,KAAK;;;CAInH,MAAM,QAAuB;AAC3B,MAAI,KAAK,QAAS;AAElB,2BAAyB,MAAM,YAAY;AACzC,QAAK,KAAK,MAAM,QAAQ;IACxB;AAEF,MAAI,MAAM,8BAA8B;AACxC,oBAAkB;AAClB,OAAK,YAAY,KAAK,KAAK;AAC3B,OAAK,UAAU;AACf,OAAK,eAAe,2BAA2B;AAC/C,OAAK,UAAU,aAAa,KAAK,UAAU;EAC3C,MAAM,QAAQ,KAAK;AAEnB,wBAAsB,KAAK,YAAY,kBAAkB,CAAC;AAE1D,OAAK,oBAAoB;AAEzB,OAAK,eAAe,iBAAiB;GACnC,oBAAoB,IAAI,SAAS,YAC/B,KAAK,aAAa,oBAAoB,6BAA6B,IAAI,SAAS,QAAQ;GAC1F,iBAAiB,IAAI,SAAS,SAAS,OAAO,YAC5C,KAAK,aAAa,oBAAoB,0BAA0B,IAAI,SAAS,SAAS,OAAO,QAAQ;GACxG,CAAC;AACF,OAAK,eAAe,0BAA0B,gBAAgB,KAAK,QAAQ,kBAAkB,KAAK,OAAO,CAAC,CAAC;AAE3G,MAAI,KAAK,gBACP,MAAK,gBAAgB,kBAAkB;GACrC,KAAK,KAAK;GACV,gBAAgB,KAAK;GACrB,8BAA8B,YAAoB,wBAAgC;AAChF,yBAAqB;AACd,UAAK,YAAY,kCAAkC,YAAY,oBAAoB;MACxF;;GAEL,CAAC;AAGJ,QAAM,MAAM,QAAQ,yBAAyB,KAAK,mCAAmC,CAAC;EAEtF,MAAM,eACJ,QAAQ,IAAI,uBAAuB,OACnC,QAAQ,IAAI,uBAAuB,UACnC,QAAQ,IAAI,wBAAwB,OACpC,QAAQ,IAAI,wBAAwB;EAGtC,MAAM,kBAAkB,YAAY,KAAK;EACzC,IAAI,gBAAgB;EACpB,IAAI,cAAc;EAClB,IAAI,uBAAuB;EAC3B,IAAI,mBAAkC;EACtC,IAAI,+BAAe,IAAI,KAAa;AAEpC,MAAI,aACF,KAAI,KAAK,uEAAuE;OAC3E;GACL,MAAM,KAAK,YAAY,KAAK;AAC5B,SAAM,MAAM,QAAQ,6BAA6B,KAAK,eAAe,YAAY,CAAC;AAClF,mBAAgB,YAAY,KAAK,GAAG;GAEpC,MAAM,KAAK,YAAY,KAAK;GAC5B,MAAM,kBAAkB,8BAA8B;IACpD,QAAQ,KAAK;IACb,gBAAgB,KAAK;IACrB,mCAAmC,KAAK,cAAc,sCAAsC;IAC7F,CAAC;AACF,kBAAe,gBAAgB;AAC/B,iBAAc,YAAY,KAAK,GAAG;AAClC,QAAK,gCAAgC,CAAC,GAAG,aAAa;AACtD,QAAK,8BAA8B,gBAAgB;AACnD,QAAK,gCAAgC,gBAAgB;AAErD,OAAI,aAAa,OAAO,EACtB,KAAI,KAAK,EAAE,UAAU,CAAC,GAAG,aAAa,EAAE,EAAE,uDAAuD;GAGnG,MAAM,KAAK,YAAY,KAAK;AAC5B,SAAM,MAAM,QAAQ,wBAClB,KAAK,eAAe,MAClB,aAAa,OAAO,IAAI,EAAE,uBAAuB,cAAc,GAAG,KAAA,EACnE,CACF;AACD,0BAAuB,YAAY,KAAK,GAAG;AAE3C,OAAI,KAAK,cAAc,sCAAsC,MAAM;IACjE,MAAM,KAAK,YAAY,KAAK;AAC5B,UAAM,MAAM,QAAQ,kCAClB,KAAK,eAAe,+BAA+B,CACpD;AACD,uBAAmB,YAAY,KAAK,GAAG;;;EAI3C,MAAM,8BAA8B,YAAY,KAAK,GAAG;EACxD,MAAM,cAAc,KAAK,OAAO,SAAS,2BAA2B;EACpE,MAAM,gBAAoD;GACxD,mCAAmC,KAAK,cAAc,sCAAsC;GAC5F,yBAAyB,KAAK,cAAc,oCACxC,KAAK,8BACL;GACJ,2BAA2B,KAAK;GAChC,oBAAoB,KAAK;GACzB,sBAAsB,KAAK,8BAA8B;GACzD,eAAe,KAAK,MAAM,cAAc;GACxC,aAAa,KAAK,MAAM,YAAY;GACpC,sBAAsB,KAAK,MAAM,qBAAqB;GACtD,kBAAkB,qBAAqB,OAAO,OAAO,KAAK,MAAM,iBAAiB;GACjF,6BAA6B,KAAK,MAAM,4BAA4B;GACrE;AACD,MAAI,KACF;GAAE,OAAO;GAA2B,OAAO;GAAU,GAAG;GAAe,EACvE,2CACD;AAGD,QAAM,MAAM,QAAQ,6BAA6B,KAAK,aAAa,YAAY,CAAC;AAChF,MAAI,MAAM,8BAA8B;AAExC,OAAK,YAAY,QAAQ;GACvB,cAAc,KAAK;GACnB,YAAY,KAAK;GACjB,kBAAkB,KAAK,wBAAwB;GAC/C,cAAc,KAAK,aAAa,UAAU;GAC1C,6BAA6B,kBAAkB,KAAK,OAAO;GAC3D,oBAAoB,KAAK,0BAA0B;GACnD,YAAY,KAAK,kBAAkB;GACpC,CAAC;AAEF,QAAM,MAAM,QAAQ,6BAA6B,KAAK,kCAAkC,CAAC;AAEzF,OAAK,aAAa,GAAG,mBAAmB,SAA0D;AAChG,QAAK,KAAK,mBAAmB;IAAE,KAAK,KAAK;IAAK,MAAM,KAAK;IAAM,MAAM,KAAK;IAAM,CAAC;IACjF;AAGF,MAAI,KAAK,OAAO,MAAM,YAAY,MAChC,OAAM,MAAM,QAAQ,yBAAyB,KAAK,YAAY,YAAY,CAAC;AAG7E,QAAM,KAAK,aAAa,YAAY;AAEpC,OAAK,wBAAwB,CAAC,MAAM,gCAAgC,KAAK,OAAO,CAAC;AAEjF,OAAK,sBAAsB,yBAAyB;GAClD,iBAAiB,KAAK;GACtB,aAAa,QAAQ,KAAK,WAAW,IAAI;GAC1C,CAAC;AAEG,SAAO,+CACT,MAAM,EAAE,sCAAsC,gCAAgC,KAAK,OAAO,CAAC,CAC3F,OAAO,QAAQ,IAAI,KAAK,EAAE,KAAK,EAAE,2CAA2C,CAAC;AAGhF,QAAM,MAAM,QAAQ,iCAAiC,KAAK,qCAAqC,CAAC;AAGhG,OAAK,aAAa,OAAO,CAAC,OAAO,QAAQ;AACvC,OAAI,MAAM,EAAE,KAAK,EAAE,sBAAsB;IACzC;AAGF,MAAI,KAAK,cAAc,sCAAsC,KAC3D,MAAK,wBAAwB,CAAC,OAAO,QAAQ;AAC3C,OAAI,MAAM,EAAE,KAAK,EAAE,2BAA2B;IAC9C;AAIJ,MAAI,KAAK,cAAc,oBAAoB,MACzC,MAAK,kBAAkB,kBAAkB;AAG3C,OAAK,yBAAyB,2BAA2B;GACvD,QAAQ,KAAK;GACb,0BAA0B,WAAW;AACnC,SAAK,KAAK,oBAAoB,OAAO;;GAEvC,+BAA+B,KAAK,8BAA8B;GACnE,CAAC;AAEF,4BAA0B,KAAK;AAK1B,SAAO,0BACT,MAAM,EAAE,sBAAsB,iBAAiB,CAAC,CAChD,OAAO,QAAQ,IAAI,KAAK,EAAE,KAAK,EAAE,6BAA6B,CAAC;AAElE,MAAI,KAAK,cAAc,sCAAsC,KAC3D,MAAK,kBAAkB;MAEvB,OAAM,KAAK,gCAAgC;AAG7C,MAAI,MAAM,0BAA0B;;;CAItC,oBAA0B;AACxB,OAAK,UAAU,mBAAmB;AAClC,OAAK,cAAc,KAAK,iBAAiB;;CAG3C,iBAA0B;AACxB,SAAO,KAAK,UAAU,SAAS;;CAGjC,sBAAgD;AAC9C,SAAO,KAAK,UAAU,aAAa;;CAGrC,MAAc,mCAAkD;EAC9D,MAAM,MAAM,QAAQ,IAAI,8BAA8B,MAAM;AAC5D,MAAI,CAAC,IACH;EAEF,MAAM,UAAU,OAAO,SAAS,KAAK,GAAG;AACxC,MAAI,CAAC,OAAO,SAAS,QAAQ,IAAI,WAAW,EAC1C;AAEF,QAAM,IAAI,SAAS,YAAY,WAAW,SAAS,QAAQ,CAAC;;CAG9D,mBAAiC;AAC/B,MAAI,KAAK,UAAU,SAAS,CAC1B;AAEF,OAAK,UAAU,WAAW;AAC1B,OAAK,cAAc,KAAK,QAAQ;AAChC,OAAK,2BAA2B;;;CAIlC,MAAc,mCAAkD;EAC9D,MAAM,OAAO,KAAK,wBAAwB;AAC1C,QAAM,oBAAoB,CAAC,UAAU,KAAK,QAAQ,MAAM,KAAK,cAAc,CAAC;;;;;;CAO9E,MAAM,kBAAiC;AACrC,QAAM,KAAK,kCAAkC;AAC7C,OAAK,kBAAkB;AAEvB,QAAM,KAAK,kCAAkC;AAE7C,MAAI,KAAK,cAAc,sCAAsC,KAC3D;EAEF,MAAM,kBAAkB,YAAY,KAAK;EACzC,MAAM,QAAQ,KAAK;AACnB,MAAI;GACF,MAAM,OAAO,YAAY,KAAK;AAC9B,OAAI,MACF,OAAM,MAAM,QAAQ,mCAAmC,KAAK,eAAe,uBAAuB,CAAC;OAEnG,OAAM,KAAK,eAAe,uBAAuB;GAEnD,MAAM,0BAA0B,YAAY,KAAK,GAAG;GAEpD,MAAM,KAAK,YAAY,KAAK;AAC5B,OAAI,MACF,OAAM,MAAM,QAAQ,kCAClB,KAAK,eAAe,+BAA+B,CACpD;OAED,OAAM,KAAK,eAAe,+BAA+B;GAE3D,MAAM,mBAAmB,YAAY,KAAK,GAAG;AAE7C,QAAK,wBAAwB,CAAC,OAAO,QAAQ;AAC3C,QAAI,MAAM,EAAE,KAAK,EAAE,2BAA2B;KAC9C;AACF,QAAK,KAAK,mBAAmB,EAAE,UAAU,KAAK,mBAAmB,EAAE,CAAC;GAEpE,MAAM,yBAAyB,YAAY,KAAK,GAAG;GACnD,MAAM,gBAAoD;IACxD,yBAAyB,KAAK;IAC9B,2BAA2B,KAAK;IAChC,oBAAoB,KAAK;IACzB,yBAAyB,KAAK,MAAM,wBAAwB;IAC5D,kBAAkB,KAAK,MAAM,iBAAiB;IAC9C,wBAAwB,KAAK,MAAM,uBAAuB;IAC3D;AACD,OAAI,KACF;IAAE,OAAO;IAA2B,OAAO;IAAU,GAAG;IAAe,EACvE,4DACD;WACM,KAAK;GACZ,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAI,MACF;IACE;IACA,cAAc;IACd,OAAO;IACP,OAAO;IACP,oBAAoB,KAAK;IACzB,WAAW,KAAK,MAAM,YAAY,KAAK,GAAG,gBAAgB;IAC3D,EACD,sDAAsD,KACvD;YACO;AACR,QAAK,kBAAkB;;;CAI3B,MAAM,OAAsB;AAC1B,MAAI,CAAC,KAAK,QAAS;AAEnB,0BAAwB,KAAK;AAE7B,MAAI,MAAM,8BAA8B;AACxC,OAAK,UAAU,cAAc;AAE7B,QAAM,uBAAuB,CAAC,OAAO,QAAQ;AAC3C,OAAI,KAAK,EAAE,KAAK,EAAE,qCAAqC;IACvD;AAEF,MAAI,KAAK,wBAAwB;AAC/B,QAAK,wBAAwB;AAC7B,QAAK,yBAAyB;;AAGhC,QAAM,KAAK,kBAAkB,iBAAiB;AAG9C,OAAK,kBAAkB,MAAM;AAC7B,OAAK,qBAAqB,MAAM;AAChC,OAAK,sBAAsB;AAG3B,MAAI,KAAK,yBAAyB;AAChC,SAAM,KAAK,yBAAyB;AACpC,QAAK,0BAA0B;;AAEjC,OAAK,2BAA2B;AAChC,OAAK,0BAA0B;AAE/B,wBAAsB,KAAK;AAC3B,OAAK,YAAY,sBAAsB;AACvC,QAAM,8BAA8B,CAAC,OAAO,QAAQ;AAClD,OAAI,KAAK,EAAE,KAAK,EAAE,8BAA8B;IAChD;AACF,OAAK,eAAe,MAAM;AAG1B,OAAK,UAAU;AACf,OAAK,IAAI,UAAU;AAEnB,OAAK,gCAAgC,EAAE;AACvC,OAAK,8BAA8B;AACnC,OAAK,gCAAgC;AAErC,QAAM,KAAK,eAAe,MAAM;AAGhC,QAAM,KAAK,YAAY,MAAM;AAG7B,QAAM,KAAK,aAAa,OAAO;AAG/B,UAAQ,YAAY;AAEpB,qBAAmB;AAEnB,MAAI,MAAM,0BAA0B;;;CAItC,MAAc,sCAAqD;AACjE,QAAM,KAAK,iCAAiC;;;CAI9C,MAAM,gCAA+C;AACnD,MAAI,CAAC,KAAK,wBAAyB;AACnC,QAAM,KAAK,yBAAyB;AACpC,OAAK,0BAA0B;AAC/B,OAAK,2BAA2B;AAChC,OAAK,0BAA0B;AAC/B,MAAI,MAAM,uCAAuC;;;;;;CAOnD,MAAM,kCAAiD;EACrD,MAAM,EAAE,mCAAmC,MAAM,OAAO;AAGxD,MAAI,CAFmB,+BAA+B,KAAK,OAExC,EAAE;AACnB,OAAI,KAAK,yBAAyB;AAChC,UAAM,KAAK,yBAAyB;AACpC,SAAK,0BAA0B;AAC/B,SAAK,2BAA2B;AAChC,SAAK,0BAA0B;AAC/B,QAAI,MAAM,iEAAiE;;AAE7E;;EAGF,MAAM,OAAO;EACb,MAAM,OAAO;EACb,MAAM,oBAAoB,KAAA;EAC1B,MAAM,iBAAiB,KAAA;EACvB,MAAM,UAAU,GAAG,KAAK,GAAG;AAE3B,MAAI,KAAK,2BAA2B,KAAK,4BAA4B,QACnE;AAGF,MAAI,KAAK,yBAAyB;AAChC,SAAM,KAAK,yBAAyB;AACpC,QAAK,0BAA0B;AAC/B,QAAK,2BAA2B;AAChC,QAAK,0BAA0B;;AAGjC,MAAI;GACF,MAAM,EAAE,kCAAkC,MAAM,OAAO;GACvD,MAAM,EAAE,UAAU,YAAY,MAAM,8BAA8B;IAChE;IACA;IACA;IACA;IACD,CAAC;AACF,QAAK,2BAA2B;AAChC,QAAK,0BAA0B;AAC/B,QAAK,0BAA0B;AAC/B,OAAI,KAAK;IAAE;IAAM;IAAM,EAAE,sCAAsC;WACxD,KAAK;AAEZ,QADa,OAAO,OAAO,QAAQ,YAAY,UAAU,MAAO,IAA0B,OAAO,KAAA,OACpF,cAAc;AACzB,QAAI,KACF;KACE;KACA,OAAO;KACP,UAAU;KACV,UAAU;KACV,MAAM;KACP,EACD,uDAAuD,KAAK,GAAG,OAChE;AACD;;AAGF,OAAI,MACF;IAAE;IAAK,OAAO;IAAwB,EACtC,gDAAgD,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GACjG;;;;;;CAOL,MAAc,yBAAwC;AACpD,MAAI,MAAM,sCAAsC;AAChD,SAAO,KAAK,QACV,KAAI;GACF,MAAM,MAAM,MAAM,KAAK,IAAI,iBAAiB;AAC5C,SAAM,KAAK,eAAe,KAAK,IAAI;WAC5B,OAAO;AACd,OAAI,iBAAiB,wBACnB;GAEF,MAAM,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACjE,OAAI,MACF;IAAE,KAAK;IAAO,cAAc;IAAI,OAAO;IAAoB,EAC3D,gDAAgD,KACjD;AACD,SAAM,IAAI,SAAS,YAAY,WAAW,SAAS,IAAK,CAAC;;;CAO/D,mCAAyC;AACvC,OAAK,kBAAkB,kCAAkC;;CAG3D,eAA+D;AAC7D,SAAO,KAAK,kBAAkB,cAAc;;CAG9C,kCAAiD;AAC/C,SAAO,KAAK,kBAAkB,iCAAiC;;CAGjE,kCAAiD;AAC/C,SAAO,KAAK,kBAAkB,iCAAiC;;CAGjE,WAAW,QAA6D;AACtE,SAAO,KAAK,kBAAkB,WAAW,OAAO;;CAGlD,oCACE,aACA,QAC2E;AAC3E,SAAO,KAAK,kBAAkB,oCAAoC,aAAa,OAAO;;CAGxF,aAAa,SAAyE;AACpF,SAAO,KAAK,kBAAkB,aAAa,QAAQ;;;;;CAMrD,MAAM,YACJ,SACA,QACA,SACgD;AAChD,MAAI;AACF,SAAM,KAAK,eAAe,KAAK;IAC7B;IACA,SAAS;IACT;IACD,CAAC;GACF,MAAM,YAAY,OAAO,KAAK,KAAK;AACnC,QAAK,KAAK,gBAAgB;IAAE;IAAS;IAAQ;IAAW,CAAC;AACzD,UAAO;IAAE,MAAM;IAAM;IAAW;WACzB,OAAO;AACd,OAAI,MAAM;IAAE;IAAS;IAAQ;IAAO,EAAE,yBAAyB;AAC/D,SAAM;;;;;;CAOV,oBAIG;EACD,MAAM,kBAAkB,IAAI,IAAI,KAAK,eAAe,oBAAoB,CAAC;EACzE,MAAM,WAAW,KAAK,OAAO;AAK7B,UAJgB,KAAK,4BACjB,gCAAgC,KAAK,0BAA0B,GAC/D,6BAA6B,KAAK,OAAO,EAE9B,QAAQ,KAAK,WAAW;GACrC,MAAM,MAAM;GACZ,SAAS,WAAW,MAAM,KAAK,YAAY;GAC3C,WAAW,gBAAgB,IAAI,MAAM,GAAG;GACzC,EAAE;;CAGL,uBAAiC;AAC/B,SAAO,KAAK,eAAe,oBAAoB;;CAGjD,wBAAwB,WAAmB;AACzC,SAAO,KAAK,eAAe,UAAU,UAAU;;CAGjD,MAAM,eAAe,WAAkC;AACrD,QAAM,KAAK,eAAe,YAAY,UAAU;AAChD,QAAM,KAAK,eAAe,aAAa,UAAU;;;;;CAMnD,qBAMG;AAKD,UAJgB,KAAK,4BACjB,gCAAgC,KAAK,0BAA0B,GAC/D,6BAA6B,KAAK,OAAO,EAE9B,QAAQ,KAAK,WAAW;GACrC,IAAI,MAAM;GACV,OAAO,MAAM;GACb,aAAa,MAAM,eAAe;GAClC,YAAY;GACZ,OAAO,MAAM;GACd,EAAE,CAAC,UAAU,GAAG,MAAM;AACrB,OAAI,EAAE,UAAU,EAAE,MAAO,QAAO,EAAE,QAAQ,EAAE;AAC5C,UAAO,EAAE,GAAG,cAAc,EAAE,GAAG;IAC/B;;;;;CAMJ,oBAAoB,MAAkC;AACpD,OAAK,kBAAkB,WAAW,EAAE,QAAQ,MAAM,UAAU,UAAU,CAAC;;;;;CAMzE,kCAAkC,SAAoC;AACpE,OAAK,4BAA4B;;;;;CAMnC,+BAAgF;EAC9E,MAAM,SAAS,mCAAmC;AAClD,MAAI,OAAO,SAAS,SAClB,QAAO;GAAE,IAAI;GAAO,MAAM,OAAO;GAAM,SAAS,OAAO,UAAU;GAAgB;AAEnF,MAAI,OAAO,SAAS,WAClB,QAAO;GACL,IAAI;GACJ,MAAM;GACN,SACE;GACH;EAEH,MAAM,WAAW,KAAK;AACtB,MAAI,CAAC,SACH,QAAO;GACL,IAAI;GACJ,MAAM,OAAO;GACb,SAAS;GACV;AAEH,qBAAmB;AACZ,aAAU,CAAC,cAAc;AAC5B,YAAQ,KAAK,EAAE;KACf;IACF;AACF,SAAO;GAAE,IAAI;GAAM,MAAM,OAAO;GAAM;;;;;CAMxC,YAeE;EACA,MAAM,kBAAkB,KAAK,eAAe,oBAAoB;EAChE,MAAM,cAAc,KAAK,eAAe,gBAAgB;EACxD,MAAM,WAAW,oBAAoB;EACrC,MAAM,YAAY,KAAK,UAAU,aAAa;AAE9C,SAAO;GACL,QAAQ;GACR,SAAS;GACT,SAAS;GACT,QAAQ,KAAK,OAAO,KAAK,KAAK,GAAG,KAAK,aAAa,IAAK;GACxD,OAAO,UAAU;GACjB,eAAe,UAAU;GACzB,mBAAmB,UAAU;GAC7B,UAAU;IACR,SAAS,gBAAgB;IACzB,OAAO,YAAY;IACpB;GACD,YAAY,KAAK;GACjB,MAAM;IACJ,KAAK,WAAW;IAChB,WAAW,SAAS;IACpB,OAAO,SAAS;IACjB;GACF;;CAGH,IAAI,YAAqB;AACvB,SAAO,KAAK;;;;;CAMd,uBAAuB;AACrB,SAAO,KAAK,iBAAiB,aAAa;;;CAI5C,qBAA6C;AAC3C,SAAO,KAAK;;;;;CAMd,mBAAmB;EACjB,MAAM,EAAE,sBAAA,gBAAA,EAAA,aAAA,kBAAA;AACR,SAAO,kBAAkB;;;;;CAM3B,MAAM,oBAAoB,QAAgB,QAAmD;EAC3F,MAAM,WAAW,KAAK,sBAAsB;AAC5C,MAAI,CAAC,SACH,OAAM,IAAI,MAAM,mCAAmC;EAGrD,MAAM,UAAU,SAAS,iBAAiB,OAAO;AACjD,MAAI,CAAC,QACH,OAAM,IAAI,MAAM,6BAA6B,SAAS;AAGxD,SAAO,MAAM,QAAQ,OAAO;;CAG9B,IAAI,gBAAwB;AAC1B,SAAO,KAAK;;CAGd,IAAI,uBAA+B;AACjC,SAAO,KAAK;;CAGd,IAAI,qBAAiC;AACnC,SAAO,KAAK;;;CAId,yBAAiC;AAC/B,SAAO,4BAA4B,KAAK,QAAQ,KAAK,cAAc,WAAW;;CAIhF,IAAI,sBAAmC;AACrC,SAAO,KAAK;;CAGd,IAAI,uBAAqC;AACvC,SAAO,KAAK;;CAGd,IAAI,uBAAqC;AACvC,SAAO,KAAK;;;CAId,2BAA+C;AAC7C,MAAI,CAAC,KAAK,4BAA4B;AACpC,QAAK,wBAAwB,IAAI,sBAAsB,KAAK;AAC5D,QAAK,6BAA6B,IAAI,mBAAmB;IACvD,SAAS;IACT,eAAe,KAAK;IACpB,iBAAiB;IAClB,CAAC;;AAEJ,SAAO,KAAK;;CAGd,MAAc,mCAAkD;EAC9D,MAAM,kBAAkB,KAAK,0BAA0B;EACvD,MAAM,WAAW,KAAK,yBAAyB;EAC/C,IAAI,QAAQ;AACZ,OAAK,MAAM,WAAW,SACpB,KAAI;AACF,YAAS,MAAM,gBAAgB,yBAAyB,QAAQ;WACzD,KAAK;GACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,OAAI,KACF;IAAE;IAAK;IAAS,cAAc;IAAK,EACnC,2CAA2C,QAAQ,IAAI,MACxD;;AAGL,MAAI,QAAQ,EACV,KAAI,KAAK;GAAE,OAAO;GAAO;GAAU,EAAE,uCAAuC;;CAIhF,0BAA4C;EAC1C,MAAM,sBAAM,IAAI,KAAa;AAC7B,MAAI,IAAI,sBAAsB,KAAK,OAAO,CAAC;AAC3C,OAAK,MAAM,SAAS,iBAAiB,KAAK,OAAO,EAAE;AACjD,OAAI,MAAM,YAAY,MAAO;AAC7B,OAAI,IAAI,iBAAiB,MAAM,GAAG,CAAC;;AAErC,SAAO,CAAC,GAAG,IAAI;;;CAIjB,MAAM,cAAc,SAAiB,aAAa,mBAAoC;AACpF,SAAO,KAAK,aAAa,eAAe,cAAc,SAAS,WAAW;;CAK5E,UACE,WACA,UACY;AACZ,SAAO,KAAK,IAAI,UAAU,WAAW,SAAS;;CAGhD,KAAK,MAAc,SAAwB;AACzC,OAAK,IAAI,KAAK,MAAM,QAAQ;AAC5B,OAAK,+BAA+B,CAAC,mBAAmB,MAAM,QAAQ;;;CAIxE,eAAe,WAAmB,aAAqC;AACrE,SAAO,KAAK,IAAI,eAAe,WAAW,YAAY;;;;;;CAOxD,aAAa,SAAkE;EAC7E,MAAM,QAAQ,aAAa,QAAQ;AACnC,SAAO,cAAc,KAAK,MAAM,MAAM;;;;;CAMxC,cAA+D;AAC7D,SAAO,KAAK,KAAK;;;CAInB,kBAAuC;AACrC,SAAO,KAAK;;;;;;CAOd,eAAmC;AACjC,SAAO,KAAK,KAAK,SAAS,UAAU,KAAK,KAAK,QAAQ,KAAA;;;;;;CAOxD,MAAM,mBAAoC;AACxC,MAAI,KAAK,KAAK,SAAS,QACrB,OAAM,IAAI,MAAM,+CAA+C;EAIjE,MAAM,WAAW,OAAO,YAAY,GAAG,CAAC,SAAS,MAAM;AAGvD,OAAK,KAAK,QAAQ;AAGlB,OAAK,SAAS;GACZ,GAAG,KAAK;GACR,SAAS;IACP,GAAG,KAAK,OAAO;IACf,MAAM;KACJ,GAAG,KAAK,OAAO,SAAS;KACxB,MAAM;KACN,OAAO;KACR;IACF;GACF;AAED,QAAM,KAAK,WAAW,KAAK,OAAO;AAElC,MAAI,KAAK,EAAE,cAAc,GAAG,SAAS,MAAM,GAAG,EAAE,CAAC,MAAM,EAAE,0BAA0B;AAEnF,SAAO"}
+{"version":3,"file":"service.js","names":["writeConfigToDisk","reconcileDreamingAutomationRecords"],"sources":["../../../src/gateway/service.ts"],"sourcesContent":["import crypto from 'crypto';\nimport { listAgentEntries, normalizeAgentId, resolveDefaultAgentId } from '../agent/agent-scope.js';\nimport { AgentService } from '../agent/service.js';\nimport { ensureStarterAgentsInitialized } from '../agent/starter-agents.js';\nimport { ChannelManager } from '../channels/manager.js';\nimport {\n  buildChannelCatalogForConfig,\n  buildChannelCatalogFromSnapshot,\n} from '../channels/catalog/channel-catalog-service.js';\nimport { setPairingBroadcastSink } from '../channels/pairing/pairing-events.js';\nimport { MessageBus, MessageBusShutdownError } from '../infra/bus/index.js';\nimport { loadConfig, saveConfig as writeConfigToDisk } from '../config/index.js';\nimport { getWorkspacePath } from '../config/workspace-path-helpers.js';\nimport { AutomationService } from '../automations/index.js';\nimport { onAutomationProductEvent, publishAutomationProductEvent } from '../automations/product-events.js';\nimport { buildNoteAgentContext, NotesService, NotesStore } from '../notes/index.js';\nimport { buildWorkflowChildTools } from '../agent/workflow/workflow-child-tools.js';\nimport { WorkflowRunService } from '../workflows/service/workflow-run-service.js';\nimport { WorkflowSessionBridge } from '../workflows/service/workflow-session-bridge.js';\nimport { ExtensionLoader, areExtensionsGloballyDisabled, buildExtensionMetadataSnapshot } from '../extensions/index.js';\nimport type { ManifestRegistryEntry } from '../extensions/manifest-registry.js';\nimport type { ResolvedExtensionConfig } from '../extensions/types/index.js';\nimport { HeartbeatService, heartbeatRunnerConfigFromConfig } from './heartbeat/index.js';\nimport { SessionIndex } from '../session/index.js';\nimport { onSessionTranscriptUpdate } from '../session/transcript-events.js';\nimport type { Config } from '../config/schema.js';\nimport { getAgentDefaultModelRef } from '../config/schema.js';\nimport { wireTunnelEventsToGateway } from '../tunnel/gateway-lifecycle.js';\nimport {\n  stopTailscaleExposure,\n} from './tailscale-lifecycle.js';\nimport { getExposureManager } from '../remote-access/exposure-manager.js';\nimport { sanitizeTunnelConfig } from '../tunnel/tunnel-config.js';\nimport { resolveGatewayAuth, assertGatewayAuthConfigured, validateToken, extractToken, type ResolvedGatewayAuth } from './auth.js';\nimport { assertGatewayAuthNotKnownWeak } from './security/known-weak-secrets.js';\nimport { auditGatewayConfig } from './security/audit.js';\nimport { assertGatewayRuntimeConfig } from './runtime-config.js';\nimport { resolveEffectiveGatewayPort } from './host.js';\nimport { buckets, isGatewayStrictSecurityEnabled } from './rate-limit/index.js';\nimport { prewarmModelRegistry } from '../providers/index.js';\nimport { runBootstrapMigrationsSync } from '../migrations/runner.js';\nimport { createLogger, getLogDir, getRuntimeLogStats } from '../utils/logger.js';\nimport {\n  resolveConfigPath,\n  resolveAgentDir,\n  resolveExtensionsDir,\n} from '../config/paths.js';\nimport { AgentRunRelay, type RelayEvent } from './agent-run-relay.js';\nimport { registerClarifyBridge } from './clarify-runtime.js';\nimport { PACKAGE_VERSION } from '../package-version.js';\nimport { GoalNotificationService, GoalRunner, type EnqueueGoalRunOptions } from '../goals/index.js';\n\nimport { disposeAllSessionMcpRuntimes } from '../agent/mcp/bundle-mcp-tools.js';\nimport { getDefaultAgentId } from '../routing/resolve-route.js';\nimport { buildSessionKey, sanitizeSegment } from '../routing/session-key.js';\nimport { scheduleGatewayUpdateCheck } from '../infra/update-startup.js';\nimport { resolveChannelConnectDeferSet } from './resolve-channel-connect-defer.js';\nimport { restartGatewayProcessWithFreshPid } from './respawn.js';\nimport { GatewaySessionsApi } from './service/sessions-api.js';\nimport { GatewayMarketplaceService } from './service/marketplace-service.js';\nimport { GatewayConfigCoordinator } from './service/config-coordinator.js';\nimport { GatewayAgentRunner } from './service/agent-runner.js';\nimport { GatewaySseHub } from './service/sse-hub.js';\nimport { reconcileDreamingAutomations as reconcileDreamingAutomationRecords } from './dreaming-automation-reconciler.js';\nimport type {\n  GatewayChannelStartupPhase1Metrics,\n  GatewayChannelStartupPhase2Metrics,\n  GatewayServiceConfig,\n  ServiceEvent,\n} from './service/types.js';\nimport {\n  GatewayReadiness,\n  type GatewayReadinessSnapshot,\n} from './startup-readiness.js';\nimport { createGatewayStartupTrace, type GatewayStartupTrace } from './startup-trace.js';\nimport { closeXopcDatabase, openXopcDatabase } from '../storage/sqlite/index.js';\nimport { startConnectorSupervisor, type ConnectorSupervisor } from '../connectors/supervisor.js';\n\nexport type {\n  GatewayChannelStartupPhase1Metrics,\n  GatewayChannelStartupPhase2Metrics,\n  GatewayServiceConfig,\n  ServiceEvent,\n} from './service/types.js';\n\nconst log = createLogger('Gateway:Service');\n\nexport class GatewayService {\n  private bus: MessageBus;\n  private config: Config;\n  private configPath: string;\n  private _agentService: AgentService | null = null;\n  private channelManager: ChannelManager;\n  private automationService: AutomationService;\n  private notesService: NotesService;\n  private extensionLoader: ExtensionLoader | null = null;\n  private extensionMetadataSnapshot: import('../extensions/extension-metadata-snapshot.js').ExtensionMetadataSnapshot | null = null;\n  private browserExtensionProvider: import('../browser/providers/extension.js').ExtensionBrowserProvider | null = null;\n  private browserExtensionRelease: (() => Promise<void>) | null = null;\n  /** `${host}:${port}` when the gateway holds the extension bridge listener. */\n  private browserExtensionBindKey: string | null = null;\n  private heartbeatService: HeartbeatService | null = null;\n  private sessionIndex: SessionIndex;\n  private running = false;\n  private startTime = Date.now();\n  private workspacePath: string;\n  private readonly configCoordinator: GatewayConfigCoordinator;\n\n  // Authentication\n  private auth: ResolvedGatewayAuth;\n\n  private readonly sse = new GatewaySseHub();\n\n  getConfig(): Config {\n    return this.config;\n  }\n\n  private stopGatewayUpdateCheck: (() => void) | null = null;\n\n  /** When set (e.g. by `GatewayServer`), `triggerGatewayProcessRestart` can stop HTTP then exit. */\n  private gatewayShutdownForRestart: (() => Promise<void>) | null = null;\n\n  /** Snapshot for phase-2 metrics / logs (ids deferred at phase-1 `start()`). */\n  private lastDeferredChannelConnectIds: string[] = [];\n  private lastChannelConnectDeferMode: 'auto' | 'off' | 'explicit' = 'auto';\n  private lastChannelConnectDeferSource: 'off' | 'explicit' | 'meta' = 'off';\n\n  private readonly readiness = new GatewayReadiness();\n  private startupTrace: GatewayStartupTrace | null = null;\n  private workflowSessionBridge: WorkflowSessionBridge | null = null;\n  private workflowRunServiceInstance: WorkflowRunService | null = null;\n  private goalRunner: GoalRunner | null = null;\n  private goalNotifications: GoalNotificationService | null = null;\n  private connectorSupervisor: ConnectorSupervisor | null = null;\n  private stopAutomationProductEventBridge: (() => void) | null = null;\n  private stopSessionTranscriptAutomationEvents: (() => void) | null = null;\n\n  /**\n   * Webchat agent invocation surface (`runAgent`, `abortAgentRun`, `steer*`,\n   * `submitClarifyResponse`, clarify-bridge dispatch). Owns the\n   * `activeWebchatRunBySession` + `runAbortControllers` maps.\n   */\n  readonly agentRunner: GatewayAgentRunner;\n\n  /** Read-only alias re-exported from `agentRunner.runRelay` for legacy callers. */\n  get runRelay(): AgentRunRelay { return this.agentRunner.runRelay; }\n\n  /**\n   * Session CRUD / search / compaction / tag-archive-pin / stats — the gateway\n   * REST surface for sessions. Routes should depend on this narrow service\n   * rather than the full GatewayService composition root.\n   */\n  readonly sessions: GatewaySessionsApi;\n\n  /**\n   * Skills + extensions marketplace surface (browse / install / uninstall) plus\n   * local-only managed-skill ops. Routes depend on this narrow service.\n   */\n  readonly marketplace: GatewayMarketplaceService;\n\n  constructor(private serviceConfig: GatewayServiceConfig = {}) {\n    this.bus = new MessageBus();\n    this.configPath = serviceConfig.configPath || resolveConfigPath();\n    runBootstrapMigrationsSync(this.configPath);\n    this.config = loadConfig(this.configPath);\n    const starterResult = ensureStarterAgentsInitialized(this.config);\n    if (starterResult.changed) {\n      this.config = starterResult.config;\n      void writeConfigToDisk(this.config, this.configPath).catch((err) => {\n        const em = err instanceof Error ? err.message : String(err);\n        log.warn({ err, phase: 'starter_agents_init', errorMessage: em }, `Starter agents init persist failed: ${em}`);\n      });\n    }\n    if (sanitizeTunnelConfig(this.config)) {\n      void writeConfigToDisk(this.config, this.configPath).catch((err) => {\n        const em = err instanceof Error ? err.message : String(err);\n        log.warn({ err, phase: 'tunnel_sanitize', errorMessage: em }, `Tunnel config sanitize persist failed: ${em}`);\n      });\n    }\n\n    // Initialize authentication\n    this.auth = resolveGatewayAuth({\n      authConfig: this.config.gateway?.auth,\n    });\n\n    // Validate auth configuration\n    assertGatewayAuthConfigured(this.auth);\n\n    // Reject known weak / placeholder credentials at startup\n    assertGatewayAuthNotKnownWeak(this.auth);\n\n    const gatewayPort = this.getEffectiveListenPort();\n    const runtimeConfig = assertGatewayRuntimeConfig({\n      cfg: this.config,\n      auth: this.auth,\n      bindOverride: serviceConfig.listenBind,\n      port: gatewayPort,\n    });\n\n    // Security audit: non-blocking warnings for remaining risk signals\n    auditGatewayConfig({\n      auth: this.auth,\n      bindHost: runtimeConfig.bindHost,\n      corsOrigins: runtimeConfig.corsOrigins,\n      rateLimitEnabled: runtimeConfig.rateLimitEnabled,\n      tlsEnabled: runtimeConfig.tlsEnabled,\n      trustedProxies: this.config.gateway?.trustedProxies,\n      allowRealIpFallback: this.config.gateway?.allowRealIpFallback === true,\n      dangerouslyAllowHostHeaderOriginFallback: runtimeConfig.dangerouslyAllowHostHeaderOriginFallback,\n      strictSecurityEnabled: isGatewayStrictSecurityEnabled(this.config),\n      rateLimitConfigured: this.config.gateway?.auth?.rateLimit !== undefined,\n    });\n\n    // Log token info (not the token itself)\n    if (this.auth.mode === 'token') {\n      const tokenPreview = this.auth.token ? `${this.auth.token.slice(0, 4)}***` : 'none';\n      log.info({ mode: this.auth.mode, token: tokenPreview }, 'Authentication configured');\n    } else if (this.auth.mode === 'trusted-proxy') {\n      log.info(\n        {\n          mode: this.auth.mode,\n          userHeader: this.auth.trustedProxy?.userHeader,\n          trustedProxyCount: this.config.gateway?.trustedProxies?.length ?? 0,\n        },\n        'Trusted-proxy authentication configured',\n      );\n    } else {\n      log.info({ mode: this.auth.mode }, 'Authentication configured');\n    }\n\n    // Initialize channel manager\n    this.channelManager = new ChannelManager(this.config, this.bus);\n\n    // Initialize extension loader (manifest snapshot only — code load in start()).\n    this.workspacePath = getWorkspacePath(this.config) || './workspace';\n    this.initializeExtensionLoader();\n\n    // Session index + files shared with AgentService for chat transcript and goal execution context.\n    this.sessionIndex = new SessionIndex({\n      config: this.config,\n    });\n\n    this.automationService = new AutomationService();\n\n    this.notesService = new NotesService(new NotesStore());\n\n    this.agentRunner = new GatewayAgentRunner({\n      bus: this.bus,\n      sessionIndex: this.sessionIndex,\n      getAgentService: () => this.ensureAgentService(),\n      getChannelManager: () => this.channelManager,\n      getConfig: () => this.config,\n      emit: (type, payload) => this.sse.emit(type, payload),\n    });\n\n    this.sessions = new GatewaySessionsApi({\n      sessionIndex: this.sessionIndex,\n      getAgentService: () => this.ensureAgentService(),\n      getActiveWebchatRunId: (sk) => this.agentRunner.getActiveRunId(sk),\n    });\n\n    this.marketplace = new GatewayMarketplaceService({\n      getConfig: () => this.config,\n      getAgentService: () => this.ensureAgentService(),\n      getExtensionLoader: () => this.extensionLoader,\n      getChannelManager: () => this.channelManager,\n      saveConfig: (cfg) => this.saveConfig(cfg),\n      emit: (type, payload) => this.emit(type, payload),\n    });\n\n    this.configCoordinator = new GatewayConfigCoordinator({\n      configPath: this.configPath,\n      bus: this.bus,\n      enableHotReload: this.serviceConfig.enableHotReload !== false,\n      getConfig: () => this.config,\n      setConfig: (next) => { this.config = next; },\n      getAgentService: () => this.ensureAgentService(),\n      getChannelManager: () => this.channelManager,\n      getHeartbeatService: () => this.heartbeatService,\n      getExtensionLoader: () => this.extensionLoader,\n      reconcileBrowserExtensionServer: () => this.reconcileBrowserExtensionServer(),\n      reconcileDreamingAutomations: () => this.reconcileDreamingAutomations(),\n      getChannelsStatus: () => this.getChannelsStatus(),\n      emit: (type, payload) => this.emit(type, payload),\n    });\n  }\n\n  /** Lazy AgentService — constructed on first use or during `start()`. */\n  get agentService(): AgentService {\n    return this.ensureAgentService();\n  }\n\n  private ensureAgentService(): AgentService {\n    if (this._agentService) {\n      return this._agentService;\n    }\n\n    this._agentService = new AgentService(this.bus, {\n      workspace: this.workspacePath,\n      model: getAgentDefaultModelRef(this.config),\n      config: this.config,\n      sessionStore: this.sessionIndex.getStore(),\n      onSessionMetadataUpdated: (sessionKey, patch) => {\n        this.sessionIndex.emit('sessionUpdated', { key: sessionKey, name: patch?.name });\n        this.emit('session.updated', { key: sessionKey, name: patch?.name });\n      },\n      onSessionTranscriptUpdated: (sessionKey) => {\n        this.emit('session.transcript_updated', { key: sessionKey });\n      },\n      onGoalStatusUpdated: (payload) => {\n        this.emit('goal.status.updated', payload);\n      },\n      onSkillsUpdated: (payload) => {\n        this.emit('config.reload', {\n          section: 'skills',\n          source: payload.reason === 'disk' ? 'skills-filesystem' : 'skills-config',\n        });\n      },\n      extensionRegistry: this.extensionLoader?.getRegistry(),\n      getAutomationService: () => this.automationService,\n      getWorkflowRunService: () => this.createWorkflowRunService(),\n      sourceContextResolver: async (binding) => {\n        if (binding.kind !== 'note') return null;\n        const note = await this.notesService.getNote(binding.sourceId);\n        if (!note) return null;\n        return buildNoteAgentContext({\n          note,\n          notesService: this.notesService,\n          config: this.config,\n        });\n      },\n      gatewayClarify: {\n        requestClarification: (sessionKey, request) =>\n          this.agentRunner.requestClarification({\n            sessionKey,\n            request,\n            publishSseFor: (_runId) => (e: RelayEvent) => {\n              this._agentService!.turnDispatcher.enqueueWebchatSseEvent(sessionKey, e);\n            },\n          }),\n      },\n    });\n\n    this._agentService.setChannelManager(this.channelManager);\n    this.channelManager.setSessionModelHooks({\n      getModelForSession: (sk) => this._agentService!.getModelForSession(sk),\n      switchModelForSession: (sk, id) => this._agentService!.switchModelForSession(sk, id),\n    });\n\n    this.automationService.setDeps({\n      agentService: this._agentService,\n      getDefaultAgentId: () => getDefaultAgentId(this.config),\n      workflowRunService: this.createWorkflowRunService(),\n    });\n\n    this._agentService.persistentGoals.setWebchatContinuationScheduler((sessionKey, message) => {\n      const scheduleWhenIdle = () => {\n        if (this._agentService!.getInboundTurnDepth(sessionKey) > 0) {\n          setTimeout(scheduleWhenIdle, 50);\n          return;\n        }\n        if (this.agentRunner.hasActiveRun(sessionKey)) {\n          setTimeout(scheduleWhenIdle, 50);\n          return;\n        }\n        void this.agentRunner.drainScheduledWebchatContinuation(sessionKey, message);\n      };\n      queueMicrotask(scheduleWhenIdle);\n    });\n\n    return this._agentService;\n  }\n\n  private ensureHeartbeatService(): HeartbeatService {\n    if (this.heartbeatService) {\n      return this.heartbeatService;\n    }\n    this.heartbeatService = new HeartbeatService({\n      agentService: this.ensureAgentService(),\n      messageBus: this.bus,\n      sessionStore: this.sessionIndex.getStore(),\n      getConfig: () => this.config,\n    });\n    return this.heartbeatService;\n  }\n\n  // ── Webchat agent runner (delegated to GatewayAgentRunner) ────────────\n\n  private createGoalRunner(): GoalRunner {\n    if (!this.goalRunner) {\n      this.goalRunner = new GoalRunner({\n        maxConcurrent: 1,\n        defaultMaxRetries: 2,\n        ensureSession: async (goal) => {\n          const existing = goal.activeSessionKey?.trim();\n          if (existing) return existing;\n          const agentId = goal.agentId || getDefaultAgentId(this.config);\n          const peerId = `goal-${sanitizeSegment(goal.id) || Date.now()}`;\n          const sessionKey = buildSessionKey({\n            agentId,\n            source: 'webchat',\n            accountId: 'default',\n            peerKind: 'direct',\n            peerId,\n          });\n          await this.sessionIndex.saveMessages(sessionKey, [], {\n            metadata: {\n              sourceChannel: 'webchat',\n              sourceChatId: `default:direct:${peerId}`,\n              sessionType: 'chat',\n              routing: {\n                agentId,\n                source: 'webchat',\n                accountId: 'default',\n                peerKind: 'direct',\n                peerId,\n              },\n            },\n          });\n          const { GoalService } = await import('../goals/index.js');\n          new GoalService().attachSession(goal.id, sessionKey);\n          return sessionKey;\n        },\n        hasActiveRun: (sessionKey) => this.agentRunner.hasActiveRun(sessionKey),\n        runTurn: (sessionKey, userTurn) =>\n          this.agentRunner.runScheduledWebchatTurn(sessionKey, userTurn),\n        emit: (type, payload) => this.emit(type, payload),\n      });\n    }\n    return this.goalRunner;\n  }\n\n  private createGoalNotificationService(): GoalNotificationService {\n    if (!this.goalNotifications) {\n      this.goalNotifications = new GoalNotificationService({\n        getConfig: () => this.config,\n        getSessionMetadata: (sessionKey) => this.sessionIndex.getSessionMetadata(sessionKey),\n        send: async (target) => {\n          await this.channelManager.send({\n            channel: target.channel,\n            chat_id: target.chatId,\n            content: target.text,\n            type: 'message',\n            silent: target.silent,\n            metadata: {\n              accountId: target.accountId,\n              threadId: target.threadId,\n              source: 'goal-notification',\n            },\n          });\n        },\n      });\n    }\n    return this.goalNotifications;\n  }\n\n  enqueueGoalRun(goalId: string, options?: EnqueueGoalRunOptions) {\n    return this.createGoalRunner().enqueue(goalId, options);\n  }\n\n  getGoalQueueSnapshot() {\n    return this.createGoalRunner().snapshot();\n  }\n\n  runAgent(\n    ...args: Parameters<GatewayAgentRunner['runAgent']>\n  ): ReturnType<GatewayAgentRunner['runAgent']> {\n    return this.agentRunner.runAgent(...args);\n  }\n\n  abortAgentRun(runId: string): boolean {\n    return this.agentRunner.abortAgentRun(runId);\n  }\n\n  getActiveWebchatRunId(sessionKey: string): string | undefined {\n    return this.agentRunner.getActiveRunId(sessionKey);\n  }\n\n  steerWebchatAgent(\n    sessionKey: string,\n    message: string,\n  ): ReturnType<GatewayAgentRunner['steerWebchatAgent']> {\n    return this.agentRunner.steerWebchatAgent(sessionKey, message);\n  }\n\n  submitClarifyResponse(requestId: string, answer: string): boolean {\n    return this.agentRunner.submitClarifyResponse(requestId, answer);\n  }\n\n  private initializeExtensionLoader(): void {\n    try {\n      if (areExtensionsGloballyDisabled(this.config)) {\n        log.info('Extensions globally disabled — skipping loader initialization');\n        return;\n      }\n\n      const loaderOptions = {\n        workspaceDir: this.workspacePath,\n        extensionsDir: resolveExtensionsDir(),\n      };\n      this.extensionMetadataSnapshot = buildExtensionMetadataSnapshot(loaderOptions, this.config);\n      this.extensionLoader = new ExtensionLoader(loaderOptions);\n      this.extensionLoader.setManifestSnapshot(this.extensionMetadataSnapshot);\n      this.extensionLoader.setConfig(this.config as Parameters<ExtensionLoader['setConfig']>[0]);\n    } catch (error) {\n      log.warn({ error }, 'Failed to initialize extension loader');\n    }\n  }\n\n  private registerExtensionChannelPlugins(): void {\n    if (!this.extensionLoader) {\n      return;\n    }\n    const reg = this.extensionLoader.getRegistry();\n    for (const plugin of reg.channelPlugins) {\n      this.channelManager.registerPlugin(plugin);\n    }\n  }\n\n  /**\n   * Load extensions and register SDK / full ChannelPlugin instances with ChannelManager.\n   */\n  private async loadExtensionsAndRegisterChannels(): Promise<void> {\n    if (!this.extensionLoader) {\n      return;\n    }\n    try {\n      await this.extensionLoader.loadByActivationPlan({ phase: 'startup' });\n      this.registerExtensionChannelPlugins();\n      const reg = this.extensionLoader.getRegistry();\n      log.debug(\n        {\n          extensionRecords: reg.extensions.size,\n          channelPlugins: reg.channelPlugins.length,\n        },\n        'Startup-phase extensions loaded and channel plugins registered',\n      );\n    } catch (err) {\n      log.warn({ err }, 'Failed to load startup-phase extensions');\n    }\n  }\n\n  private findChannelContributionExtension(channelId: string): ManifestRegistryEntry | undefined {\n    const normalized = channelId.trim().toLowerCase();\n    const registry = this.extensionLoader?.getManifestRegistry();\n    if (!registry) return undefined;\n    return registry\n      .getAllEntries()\n      .find((entry) => Object.keys(entry.manifest.channelContributions ?? {}).some((id) => id.toLowerCase() === normalized));\n  }\n\n  async ensureChannelRuntimePlugin(channelId: string) {\n    const existing = this.channelManager.getPlugin(channelId);\n    if (existing) {\n      await this.channelManager.initializeChannel(channelId);\n      return this.channelManager.getPlugin(channelId);\n    }\n\n    if (!this.extensionLoader || areExtensionsGloballyDisabled(this.config)) {\n      return undefined;\n    }\n\n    const entry = this.findChannelContributionExtension(channelId);\n    if (!entry) {\n      return undefined;\n    }\n\n    const extensionConfig: ResolvedExtensionConfig = {\n      id: entry.id,\n      name: entry.manifest.name || entry.id,\n      source: entry.source,\n      path: entry.path,\n      enabled: true,\n      config: {},\n    };\n    await this.extensionLoader.loadExtension(extensionConfig);\n    this.registerExtensionChannelPlugins();\n    const plugin = this.channelManager.getPlugin(channelId);\n    if (!plugin) {\n      return undefined;\n    }\n    await this.channelManager.initializeChannel(channelId);\n    return this.channelManager.getPlugin(channelId);\n  }\n\n  private async loadDeferredExtensions(): Promise<void> {\n    if (!this.extensionLoader) {\n      return;\n    }\n    try {\n      await this.extensionLoader.loadByActivationPlan({ phase: 'deferred' });\n      this.registerExtensionChannelPlugins();\n      log.debug('Deferred-phase extensions loaded');\n    } catch (err) {\n      log.warn({ err }, 'Failed to load deferred extensions');\n    }\n  }\n\n  private schedulePostReadySidecars(): void {\n    queueMicrotask(() => {\n      void this.runPostReadySidecars();\n    });\n  }\n\n  private async runPostReadySidecars(): Promise<void> {\n    const trace = this.startupTrace;\n    try {\n      if (trace) {\n        await trace.measure('sidecars.model-prewarm', () => prewarmModelRegistry());\n      } else {\n        await prewarmModelRegistry();\n      }\n    } catch (err) {\n      const em = err instanceof Error ? err.message : String(err);\n      log.warn({ err, errorMessage: em, phase: 'sidecars.model_prewarm' }, `Model registry prewarm failed: ${em}`);\n    }\n\n    if (!this.extensionLoader || areExtensionsGloballyDisabled(this.config)) {\n      return;\n    }\n\n    try {\n      if (trace) {\n        await trace.measure('extensions.deferred-load', () => this.loadDeferredExtensions());\n      } else {\n        await this.loadDeferredExtensions();\n      }\n    } catch (err) {\n      const em = err instanceof Error ? err.message : String(err);\n      log.warn({ err, errorMessage: em, phase: 'extensions.deferred_load' }, `Deferred extension load failed: ${em}`);\n    }\n  }\n\n  async start(): Promise<void> {\n    if (this.running) return;\n\n    setPairingBroadcastSink((type, payload) => {\n      this.emit(type, payload);\n    });\n\n    log.debug('Starting gateway service...');\n    openXopcDatabase();\n    this.startTime = Date.now();\n    this.running = true;\n    this.startupTrace = createGatewayStartupTrace();\n    this.readiness.markStarting(this.startTime);\n    const trace = this.startupTrace;\n\n    registerClarifyBridge(this.agentRunner.getClarifyBridge());\n\n    this.ensureAgentService();\n\n    this.channelManager.setOutboundHooks({\n      runMessageSending: (to, content, channel) =>\n        this.agentService.outboundCoordinator.invokeOutboundMessageSending(to, content, channel),\n      runMessageSent: (to, content, success, error, channel) =>\n        this.agentService.outboundCoordinator.invokeOutboundMessageSent(to, content, success, error, channel),\n    });\n    this.channelManager.enableOutboundPersistence(resolveAgentDir(this.config, getDefaultAgentId(this.config)));\n\n    if (this.extensionLoader) {\n      this.extensionLoader.setRuntimeContext({\n        bus: this.bus,\n        sessionManager: this.sessionIndex,\n        scheduleWebchatContinuation: (sessionKey: string, continuationMessage: string) => {\n          queueMicrotask(() => {\n            void this.agentRunner.drainScheduledWebchatContinuation(sessionKey, continuationMessage);\n          });\n        },\n      });\n    }\n\n    await trace.measure('extensions.load', () => this.loadExtensionsAndRegisterChannels());\n\n    const skipChannels =\n      process.env.XOPC_SKIP_CHANNELS === '1' ||\n      process.env.XOPC_SKIP_CHANNELS === 'true' ||\n      process.env.XOPC_SKIP_PROVIDERS === '1' ||\n      process.env.XOPC_SKIP_PROVIDERS === 'true';\n\n    // Start channels: init all; optional defer for meta.deferConnectUntilAfterListen (GatewayServer)\n    const phase1StartedAt = performance.now();\n    let channelInitMs = 0;\n    let deferPlanMs = 0;\n    let channelPhase1StartMs = 0;\n    let replayOutboundMs: number | null = null;\n    let deferConnect = new Set<string>();\n\n    if (skipChannels) {\n      log.info('Skipping channel startup (XOPC_SKIP_CHANNELS or XOPC_SKIP_PROVIDERS)');\n    } else {\n      const t0 = performance.now();\n      await trace.measure('channels.initialize', () => this.channelManager.initialize());\n      channelInitMs = performance.now() - t0;\n\n      const t1 = performance.now();\n      const deferResolution = resolveChannelConnectDeferSet({\n        config: this.config,\n        channelManager: this.channelManager,\n        deferChannelConnectUntilAfterHttp: this.serviceConfig.deferChannelConnectUntilAfterHttp === true,\n      });\n      deferConnect = deferResolution.deferPluginIds;\n      deferPlanMs = performance.now() - t1;\n      this.lastDeferredChannelConnectIds = [...deferConnect];\n      this.lastChannelConnectDeferMode = deferResolution.mode;\n      this.lastChannelConnectDeferSource = deferResolution.source;\n\n      if (deferConnect.size > 0) {\n        log.info({ channels: [...deferConnect] }, 'Deferring channel outbound connect until HTTP listen');\n      }\n\n      const t2 = performance.now();\n      await trace.measure('channels.start', () =>\n        this.channelManager.start(\n          deferConnect.size > 0 ? { deferConnectPluginIds: deferConnect } : undefined,\n        ),\n      );\n      channelPhase1StartMs = performance.now() - t2;\n\n      if (this.serviceConfig.deferChannelConnectUntilAfterHttp !== true) {\n        const tr = performance.now();\n        await trace.measure('channels.replay-outbound', () =>\n          this.channelManager.replayPendingOutboundMessages(),\n        );\n        replayOutboundMs = performance.now() - tr;\n      }\n    }\n\n    const channelStartupPhase1TotalMs = performance.now() - phase1StartedAt;\n    const gwDeferMode = this.config.gateway?.channelConnectDeferMode ?? 'auto';\n    const phase1Metrics: GatewayChannelStartupPhase1Metrics = {\n      deferChannelConnectUntilAfterHttp: this.serviceConfig.deferChannelConnectUntilAfterHttp === true,\n      channelConnectDeferMode: this.serviceConfig.deferChannelConnectUntilAfterHttp\n        ? this.lastChannelConnectDeferMode\n        : gwDeferMode,\n      channelConnectDeferSource: this.lastChannelConnectDeferSource,\n      deferredChannelIds: this.lastDeferredChannelConnectIds,\n      deferredChannelCount: this.lastDeferredChannelConnectIds.length,\n      channelInitMs: Math.round(channelInitMs),\n      deferPlanMs: Math.round(deferPlanMs),\n      channelPhase1StartMs: Math.round(channelPhase1StartMs),\n      replayOutboundMs: replayOutboundMs === null ? null : Math.round(replayOutboundMs),\n      channelStartupPhase1TotalMs: Math.round(channelStartupPhase1TotalMs),\n    };\n    log.info(\n      { phase: 'gateway.channel_startup', stage: 'phase1', ...phase1Metrics },\n      'Gateway channel startup phase-1 complete',\n    );\n\n    // Initialize session manager\n    await trace.measure('sessions.initialize', () => this.sessionIndex.initialize());\n    log.debug('Session manager initialized');\n\n    this.automationService.setDeps({\n      agentService: this.agentService,\n      getDefaultAgentId: () => getDefaultAgentId(this.config),\n      workflowRunService: this.createWorkflowRunService(),\n    });\n    this.startAutomationProductEventBridge();\n\n    await trace.measure('workflows.reconcile', () => this.reconcileInterruptedWorkflowRuns());\n\n    this.sessionIndex.on('sessionUpdated', (data: { key: string; name?: string; tags?: string[] }) => {\n      this.emit('session.updated', { key: data.key, name: data.name, tags: data.tags });\n    });\n\n    await trace.measure('automations.initialize', () => this.automationService.initialize());\n    await trace.measure('dreaming.reconcile', () => this.reconcileDreamingAutomations());\n\n    await this.notesService.initialize();\n\n    this.ensureHeartbeatService().start(heartbeatRunnerConfigFromConfig(this.config));\n\n    this.connectorSupervisor = startConnectorSupervisor({\n      getConfig: () => this.config,\n      saveConfig: (cfg) => this.saveConfig(cfg),\n    });\n\n    void import('../browser/providers/browser-ext-install.js')\n      .then(({ ensureBrowserExtensionOnStartup }) => ensureBrowserExtensionOnStartup(this.config))\n      .catch((err) => log.warn({ err }, 'Browser extension artifact ensure failed'));\n\n    // Start browser extension WS server if configured\n    await trace.measure('browser-extension.start', () => this.startBrowserExtensionServerIfNeeded());\n\n    // Start agent service (runs in background)\n    this.agentService.start().catch((err) => {\n      log.error({ err }, 'Agent service error');\n    });\n\n    // Outbound drain: after deferred channel connects when using HTTP lifecycle (avoid racing Telegram).\n    if (this.serviceConfig.deferChannelConnectUntilAfterHttp !== true) {\n      this.startOutboundProcessor().catch((err) => {\n        log.error({ err }, 'Outbound processor error');\n      });\n    }\n\n    // Setup config hot reload\n    if (this.serviceConfig.enableHotReload !== false) {\n      this.configCoordinator.startHotReloader();\n    }\n\n    this.stopGatewayUpdateCheck = scheduleGatewayUpdateCheck({\n      config: this.config,\n      onUpdateAvailableChange: (update) => {\n        this.emit('update.available', update);\n      },\n      triggerInProcessRestart: () => this.triggerGatewayProcessRestart(),\n    });\n\n    wireTunnelEventsToGateway(this);\n\n    // Drop orphan single-HTML site-share staging dirs left behind by a\n    // process death between create and cleanup. Re-registers live ones into\n    // the in-process map so post-restart revoke/expire still cleans them.\n    void import('../share/share-auto.js')\n      .then(({ runStagingSweep }) => runStagingSweep())\n      .catch((err) => log.warn({ err }, 'Share staging sweep failed'));\n\n    if (this.serviceConfig.deferChannelConnectUntilAfterHttp !== true) {\n      this.markGatewayReady();\n    } else {\n      trace.mark('service.started-awaiting-http');\n    }\n\n    log.debug('Gateway service started');\n  }\n\n  /** Called when the HTTP listener is bound (before deferred channel work). */\n  markHttpListening(): void {\n    this.readiness.markHttpListening();\n    this.startupTrace?.mark('http.listening');\n  }\n\n  isGatewayReady(): boolean {\n    return this.readiness.isReady();\n  }\n\n  getGatewayReadiness(): GatewayReadinessSnapshot {\n    return this.readiness.getSnapshot();\n  }\n\n  private async applyStartupReadyDelayForTesting(): Promise<void> {\n    const raw = process.env.XOPC_GATEWAY_STARTUP_SLOW_MS?.trim();\n    if (!raw) {\n      return;\n    }\n    const delayMs = Number.parseInt(raw, 10);\n    if (!Number.isFinite(delayMs) || delayMs <= 0) {\n      return;\n    }\n    await new Promise((resolve) => setTimeout(resolve, delayMs));\n  }\n\n  private markGatewayReady(): void {\n    if (this.readiness.isReady()) {\n      return;\n    }\n    this.readiness.markReady();\n    this.startupTrace?.mark('ready');\n    this.schedulePostReadySidecars();\n  }\n\n  /** After HTTP is listening: exposure auto-start (Tailscale, then FRP tunnel). */\n  private async runExposureAutoStartIfConfigured(): Promise<void> {\n    const port = this.getEffectiveListenPort();\n    await getExposureManager().autoStart(this.config, port, this.getAuthToken());\n  }\n\n  /**\n   * Called by `GatewayServer` when the HTTP listener is bound. Starts channels that\n   * opted into `meta.deferConnectUntilAfterListen`, then replays outbound queue.\n   */\n  async onHttpListening(): Promise<void> {\n    await this.applyStartupReadyDelayForTesting();\n    this.markGatewayReady();\n\n    await this.runExposureAutoStartIfConfigured();\n\n    if (this.serviceConfig.deferChannelConnectUntilAfterHttp !== true) {\n      return;\n    }\n    const listenStartedAt = performance.now();\n    const trace = this.startupTrace;\n    try {\n      const tDef = performance.now();\n      if (trace) {\n        await trace.measure('channels.deferred-connect', () => this.channelManager.startDeferredConnects());\n      } else {\n        await this.channelManager.startDeferredConnects();\n      }\n      const channelPhase2DeferredMs = performance.now() - tDef;\n\n      const tr = performance.now();\n      if (trace) {\n        await trace.measure('channels.replay-outbound', () =>\n          this.channelManager.replayPendingOutboundMessages(),\n        );\n      } else {\n        await this.channelManager.replayPendingOutboundMessages();\n      }\n      const replayOutboundMs = performance.now() - tr;\n\n      this.startOutboundProcessor().catch((err) => {\n        log.error({ err }, 'Outbound processor error');\n      });\n      this.emit('channels.status', { channels: this.getChannelsStatus() });\n\n      const onHttpListeningTotalMs = performance.now() - listenStartedAt;\n      const phase2Metrics: GatewayChannelStartupPhase2Metrics = {\n        channelConnectDeferMode: this.lastChannelConnectDeferMode,\n        channelConnectDeferSource: this.lastChannelConnectDeferSource,\n        deferredChannelIds: this.lastDeferredChannelConnectIds,\n        channelPhase2DeferredMs: Math.round(channelPhase2DeferredMs),\n        replayOutboundMs: Math.round(replayOutboundMs),\n        onHttpListeningTotalMs: Math.round(onHttpListeningTotalMs),\n      };\n      log.info(\n        { phase: 'gateway.channel_startup', stage: 'phase2', ...phase2Metrics },\n        'Gateway channel startup phase-2 complete (HTTP listening)',\n      );\n    } catch (err) {\n      const em = err instanceof Error ? err.message : String(err);\n      log.error(\n        {\n          err,\n          errorMessage: em,\n          phase: 'gateway.channel_startup',\n          stage: 'phase2',\n          deferredChannelIds: this.lastDeferredChannelConnectIds,\n          elapsedMs: Math.round(performance.now() - listenStartedAt),\n        },\n        `Deferred channel startup after HTTP listen failed: ${em}`,\n      );\n    } finally {\n      this.markGatewayReady();\n    }\n  }\n\n  async stop(): Promise<void> {\n    if (!this.running) return;\n\n    setPairingBroadcastSink(null);\n\n    log.debug('Stopping gateway service...');\n    this.readiness.markStarting();\n\n    await stopTailscaleExposure().catch((err) => {\n      log.warn({ err }, 'Tailscale exposure shutdown failed');\n    });\n\n    if (this.stopGatewayUpdateCheck) {\n      this.stopGatewayUpdateCheck();\n      this.stopGatewayUpdateCheck = null;\n    }\n\n    await this.configCoordinator.stopHotReloader();\n\n    // Stop heartbeat service\n    this.heartbeatService?.stop();\n    this.connectorSupervisor?.stop();\n    this.connectorSupervisor = null;\n\n    // Stop browser extension WS server (shared acquire/release with BrowserManager)\n    if (this.browserExtensionRelease) {\n      await this.browserExtensionRelease();\n      this.browserExtensionRelease = null;\n    }\n    this.browserExtensionProvider = null;\n    this.browserExtensionBindKey = null;\n\n    registerClarifyBridge(null);\n    this.agentRunner.disposeClarifyBridge();\n    await disposeAllSessionMcpRuntimes().catch((err) => {\n      log.warn({ err }, 'MCP runtime shutdown failed');\n    });\n    this._agentService?.stop();\n\n    // Unblock `consumeOutbound()` / `consumeInbound()` waiters before stopping channels (CLI agent does the same).\n    this.running = false;\n    this.bus.shutdown();\n\n    this.lastDeferredChannelConnectIds = [];\n    this.lastChannelConnectDeferMode = 'auto';\n    this.lastChannelConnectDeferSource = 'off';\n\n    await this.channelManager.stop();\n\n    await this.automationService.stop();\n    this.stopAutomationProductEventBridge?.();\n    this.stopAutomationProductEventBridge = null;\n    this.stopSessionTranscriptAutomationEvents?.();\n    this.stopSessionTranscriptAutomationEvents = null;\n\n    // Flush notes to disk\n    await this.notesService.flush();\n\n    // Tear down rate-limit cleanup timers so the process can exit cleanly.\n    buckets.destroyAll();\n\n    closeXopcDatabase();\n\n    log.debug('Gateway service stopped');\n  }\n\n  /** Start the browser extension WS server when backend is 'extension'. */\n  private async startBrowserExtensionServerIfNeeded(): Promise<void> {\n    await this.reconcileBrowserExtensionServer();\n  }\n\n  /** Release the gateway's hold on the shared extension bridge (does not restart). */\n  async releaseBrowserExtensionBridge(): Promise<void> {\n    if (!this.browserExtensionRelease) return;\n    await this.browserExtensionRelease();\n    this.browserExtensionRelease = null;\n    this.browserExtensionProvider = null;\n    this.browserExtensionBindKey = null;\n    log.debug('Browser extension WS server released');\n  }\n\n  /**\n   * Start/stop/rebind the Chrome extension bridge.\n   * PATCH saves update config in memory without re-running gateway startup, so this must run on save too.\n   */\n  async reconcileBrowserExtensionServer(): Promise<void> {\n    const { shouldRunExtensionBridgeServer } = await import('../browser/backend-from-config.js');\n    const wantsExtension = shouldRunExtensionBridgeServer(this.config);\n\n    if (!wantsExtension) {\n      if (this.browserExtensionRelease) {\n        await this.browserExtensionRelease();\n        this.browserExtensionRelease = null;\n        this.browserExtensionProvider = null;\n        this.browserExtensionBindKey = null;\n        log.debug('Browser extension WS server stopped (backend is not extension)');\n      }\n      return;\n    }\n\n    const port = 19820;\n    const host = '127.0.0.1';\n    const connectionTimeout = undefined;\n    const commandTimeout = undefined;\n    const bindKey = `${host}:${port}`;\n\n    if (this.browserExtensionRelease && this.browserExtensionBindKey === bindKey) {\n      return;\n    }\n\n    if (this.browserExtensionRelease) {\n      await this.browserExtensionRelease();\n      this.browserExtensionRelease = null;\n      this.browserExtensionProvider = null;\n      this.browserExtensionBindKey = null;\n    }\n\n    try {\n      const { acquireExtensionBrowserServer } = await import('../browser/providers/extension-ws-acquire.js');\n      const { provider, release } = await acquireExtensionBrowserServer({\n        port,\n        host,\n        connectionTimeout,\n        commandTimeout,\n      });\n      this.browserExtensionProvider = provider;\n      this.browserExtensionRelease = release;\n      this.browserExtensionBindKey = bindKey;\n      log.info({ port, host }, 'Browser extension WS server started');\n    } catch (err) {\n      const code = err && typeof err === 'object' && 'code' in err ? (err as { code: unknown }).code : undefined;\n      if (code === 'EADDRINUSE') {\n        log.warn(\n          {\n            err,\n            phase: 'browser_extension_ws',\n            bindPort: port,\n            bindHost: host,\n            hint: 'Another process holds the browser extension bridge port 19820. Stop it before starting xopc.',\n          },\n          `Browser extension WS server port is already in use: ${host}:${port}`,\n        );\n        return;\n      }\n\n      log.error(\n        { err, phase: 'browser_extension_ws' },\n        `Failed to start browser extension WS server: ${err instanceof Error ? err.message : String(err)}`,\n      );\n    }\n  }\n\n  /**\n   * Start processing outbound messages and send through channels\n   */\n  private async startOutboundProcessor(): Promise<void> {\n    log.debug('Starting outbound message processor');\n    while (this.running) {\n      try {\n        const msg = await this.bus.consumeOutbound();\n        await this.channelManager.send(msg);\n      } catch (error) {\n        if (error instanceof MessageBusShutdownError) {\n          break;\n        }\n        const em = error instanceof Error ? error.message : String(error);\n        log.error(\n          { err: error, errorMessage: em, phase: 'outbound_consume' },\n          `Outbound pipeline failed (will retry in 1s): ${em}`,\n        );\n        await new Promise((resolve) => setTimeout(resolve, 1000));\n      }\n    }\n  }\n\n  // ── Config persistence / hot reload (delegated to GatewayConfigCoordinator) ──\n\n  reloadHeartbeatFromCurrentConfig(): void {\n    this.configCoordinator.reloadHeartbeatFromCurrentConfig();\n  }\n\n  reloadConfig(): Promise<{ reloaded: boolean; error?: string }> {\n    return this.configCoordinator.reloadConfig();\n  }\n\n  afterWeixinCredentialsPersisted(): Promise<void> {\n    return this.configCoordinator.afterWeixinCredentialsPersisted();\n  }\n\n  afterFeishuCredentialsPersisted(): Promise<void> {\n    return this.configCoordinator.afterFeishuCredentialsPersisted();\n  }\n\n  saveConfig(config: Config): Promise<{ saved: boolean; error?: string }> {\n    return this.configCoordinator.saveConfig(config);\n  }\n\n  setBundledExtensionActivationTarget(\n    extensionId: string,\n    wanted: boolean,\n  ): Promise<{ ok: boolean; error?: string; requiresGatewayRestart: boolean }> {\n    return this.configCoordinator.setBundledExtensionActivationTarget(extensionId, wanted);\n  }\n\n  updateConfig(updates: Partial<Config>): Promise<{ updated: boolean; error?: string }> {\n    return this.configCoordinator.updateConfig(updates);\n  }\n\n  /**\n   * Send message through a channel\n   */\n  async sendMessage(\n    channel: string,\n    chatId: string,\n    content: string\n  ): Promise<{ sent: boolean; messageId?: string }> {\n    try {\n      await this.channelManager.send({\n        channel,\n        chat_id: chatId,\n        content,\n      });\n      const messageId = `msg_${Date.now()}`;\n      this.emit('message.sent', { channel, chatId, messageId });\n      return { sent: true, messageId };\n    } catch (error) {\n      log.error({ channel, chatId, error }, 'Failed to send message');\n      throw error;\n    }\n  }\n\n  /**\n   * Get channel statuses\n   */\n  getChannelsStatus(): Array<{\n    name: string;\n    enabled: boolean;\n    connected: boolean;\n  }> {\n    const runningChannels = new Set(this.channelManager.getRunningChannels());\n    const channels = this.config.channels as Record<string, { enabled?: boolean } | undefined> | undefined;\n    const catalog = this.extensionMetadataSnapshot\n      ? buildChannelCatalogFromSnapshot(this.extensionMetadataSnapshot)\n      : buildChannelCatalogForConfig(this.config);\n\n    return catalog.entries.map((entry) => ({\n      name: entry.id,\n      enabled: channels?.[entry.id]?.enabled === true,\n      connected: runningChannels.has(entry.id),\n    }));\n  }\n\n  getRunningChannelIds(): string[] {\n    return this.channelManager.getRunningChannels();\n  }\n\n  getChannelRuntimePlugin(channelId: string) {\n    return this.channelManager.getPlugin(channelId);\n  }\n\n  async restartChannel(channelId: string): Promise<void> {\n    await this.channelManager.stopChannel(channelId);\n    await this.channelManager.startChannel(channelId);\n  }\n\n  /**\n   * Hub metadata for gateway console (built-in registry + registered channel plugins).\n   */\n  getChannelsHubMeta(): Array<{\n    id: string;\n    label: string;\n    description: string;\n    manageable: boolean;\n    order: number;\n  }> {\n    const catalog = this.extensionMetadataSnapshot\n      ? buildChannelCatalogFromSnapshot(this.extensionMetadataSnapshot)\n      : buildChannelCatalogForConfig(this.config);\n\n    return catalog.entries.map((entry) => ({\n      id: entry.id,\n      label: entry.label,\n      description: entry.description ?? '',\n      manageable: true,\n      order: entry.order,\n    })).toSorted((a, b) => {\n      if (a.order !== b.order) return a.order - b.order;\n      return a.id.localeCompare(b.id);\n    });\n  }\n\n  /**\n   * Request an immediate heartbeat run (coalesced like interval/cron wakes).\n   */\n  requestHeartbeatNow(opts?: { reason?: string }): void {\n    this.heartbeatService?.requestNow({ reason: opts?.reason ?? 'manual' });\n  }\n\n  /**\n   * Register graceful shutdown used after spawning a replacement gateway process (foreground CLI server).\n   */\n  registerGatewayShutdownForRestart(handler: () => Promise<void>): void {\n    this.gatewayShutdownForRestart = handler;\n  }\n\n  /**\n   * Respawn the gateway process when supported (spawn + exit, supervisor exit, or disabled when XOPC_NO_RESPAWN).\n   */\n  triggerGatewayProcessRestart(): { ok: boolean; mode: string; message?: string } {\n    const result = restartGatewayProcessWithFreshPid();\n    if (result.mode === 'failed') {\n      return { ok: false, mode: result.mode, message: result.detail ?? 'spawn failed' };\n    }\n    if (result.mode === 'disabled') {\n      return {\n        ok: false,\n        mode: 'disabled',\n        message:\n          'Process respawn is disabled (XOPC_NO_RESPAWN). Restart the gateway manually (e.g. xopc gateway restart).',\n      };\n    }\n    const shutdown = this.gatewayShutdownForRestart;\n    if (!shutdown) {\n      return {\n        ok: false,\n        mode: result.mode,\n        message: 'Gateway restart is not available in this process.',\n      };\n    }\n    setImmediate(() => {\n      void shutdown().finally(() => {\n        process.exit(0);\n      });\n    });\n    return { ok: true, mode: result.mode };\n  }\n\n  /**\n   * Get health status\n   */\n  getHealth(): {\n    status: string;\n    service: string;\n    version: string;\n    uptime: number;\n    ready: boolean;\n    httpListening: boolean;\n    startupDurationMs: number | null;\n    channels: { running: number; total: number };\n    configPath: string;\n    logs?: {\n      dir: string;\n      errors24h: number;\n      stats: Record<string, number>;\n    };\n  } {\n    const runningChannels = this.channelManager.getRunningChannels();\n    const allChannels = this.channelManager.getAllChannels();\n    const logStats = getRuntimeLogStats();\n    const readiness = this.readiness.getSnapshot();\n\n    return {\n      status: 'ok',\n      service: 'xopc-gateway',\n      version: PACKAGE_VERSION,\n      uptime: Math.floor((Date.now() - this.startTime) / 1000),\n      ready: readiness.ready,\n      httpListening: readiness.httpListening,\n      startupDurationMs: readiness.startupDurationMs,\n      channels: {\n        running: runningChannels.length,\n        total: allChannels.length,\n      },\n      configPath: this.configPath,\n      logs: {\n        dir: getLogDir(),\n        errors24h: logStats.errorsLast24h,\n        stats: logStats.byLevel,\n      },\n    };\n  }\n\n  get isRunning(): boolean {\n    return this.running;\n  }\n\n  /**\n   * Get extension registry for external access (HTTP routes, gateway methods)\n   */\n  getExtensionRegistry() {\n    return this.extensionLoader?.getRegistry();\n  }\n\n  /** Extension loader for discovery and frontend asset APIs (may be null if extensions failed to init). */\n  getExtensionLoader(): ExtensionLoader | null {\n    return this.extensionLoader;\n  }\n\n  /**\n   * Get model registry for external access (HTTP routes)\n   */\n  getModelRegistry() {\n    const { getModelRegistry } = require('../providers/index.js');\n    return getModelRegistry();\n  }\n\n  /**\n   * Invoke a gateway method registered by extensions\n   */\n  async invokeGatewayMethod(method: string, params: Record<string, unknown>): Promise<unknown> {\n    const registry = this.getExtensionRegistry();\n    if (!registry) {\n      throw new Error('Extension registry not available');\n    }\n\n    const handler = registry.getGatewayMethod(method);\n    if (!handler) {\n      throw new Error(`Gateway method not found: ${method}`);\n    }\n\n    return await handler(params);\n  }\n\n  get currentConfig(): Config {\n    return this.config;\n  }\n\n  get currentWorkspacePath(): string {\n    return this.workspacePath;\n  }\n\n  get messageBusInstance(): MessageBus {\n    return this.bus;\n  }\n\n  /** Effective HTTP listen port (CLI `--port` override or config default). */\n  getEffectiveListenPort(): number {\n    return resolveEffectiveGatewayPort(this.config, this.serviceConfig.listenPort);\n  }\n\n  get automationServiceInstance(): AutomationService {\n    return this.automationService;\n  }\n\n  private async reconcileDreamingAutomations(): Promise<void> {\n    await reconcileDreamingAutomationRecords({\n      config: this.config,\n      automationService: this.automationService,\n    });\n  }\n\n  get notesServiceInstance(): NotesService {\n    return this.notesService;\n  }\n\n  get sessionIndexInstance(): SessionIndex {\n    return this.sessionIndex;\n  }\n\n  /** Shared workflow run orchestrator + session bridge (one instance per gateway). */\n  createWorkflowRunService(): WorkflowRunService {\n    if (!this.workflowRunServiceInstance) {\n      this.workflowSessionBridge = new WorkflowSessionBridge(this);\n      this.workflowRunServiceInstance = new WorkflowRunService({\n        service: this,\n        sessionBridge: this.workflowSessionBridge,\n        buildChildTools: buildWorkflowChildTools,\n      });\n    }\n    return this.workflowRunServiceInstance;\n  }\n\n  private async reconcileInterruptedWorkflowRuns(): Promise<void> {\n    const workflowService = this.createWorkflowRunService();\n    const agentIds = this.collectWorkflowAgentIds();\n    let total = 0;\n    for (const agentId of agentIds) {\n      try {\n        total += await workflowService.reconcileInterruptedRuns(agentId);\n      } catch (err) {\n        const msg = err instanceof Error ? err.message : String(err);\n        log.warn(\n          { err, agentId, errorMessage: msg },\n          `Workflow run reconcile failed for agent ${agentId}: ${msg}`,\n        );\n      }\n    }\n    if (total > 0) {\n      log.info({ count: total, agentIds }, 'Reconciled interrupted workflow runs');\n    }\n  }\n\n  private collectWorkflowAgentIds(): string[] {\n    const ids = new Set<string>();\n    ids.add(resolveDefaultAgentId(this.config));\n    for (const entry of listAgentEntries(this.config)) {\n      if (entry.enabled === false) continue;\n      ids.add(normalizeAgentId(entry.id));\n    }\n    return [...ids];\n  }\n\n  /** Process a message directly through the agent (for CLI mode). */\n  async processDirect(content: string, sessionKey = 'agent:main:main'): Promise<string> {\n    return this.agentService.turnDispatcher.processDirect(content, sessionKey);\n  }\n\n  // ========== SSE Event System ==========\n\n  subscribe(\n    sessionId: string,\n    listener: (event: ServiceEvent) => Promise<void> | void,\n  ): () => void {\n    return this.sse.subscribe(sessionId, listener);\n  }\n\n  emit(type: string, payload: unknown): void {\n    this.sse.emit(type, payload);\n    this.createGoalNotificationService().handleGatewayEvent(type, payload);\n  }\n\n  private startAutomationProductEventBridge(): void {\n    this.stopAutomationProductEventBridge?.();\n    this.stopSessionTranscriptAutomationEvents?.();\n    this.stopAutomationProductEventBridge = onAutomationProductEvent((event) => {\n      void this.automationService.triggerEvent(event).catch((err) => {\n        const em = err instanceof Error ? err.message : String(err);\n        log.warn({ err, eventType: event.type, source: event.source }, `Automation product event failed: ${em}`);\n      });\n    });\n    this.stopSessionTranscriptAutomationEvents = onSessionTranscriptUpdate((update) => {\n      if (!update.sessionKey || update.sessionKey.includes(':automation:')) return;\n      publishAutomationProductEvent({\n        type: 'session.transcript.updated',\n        source: 'sessions',\n        payload: {\n          sessionKey: update.sessionKey,\n          messageId: update.messageId,\n          hasMessage: update.message !== undefined,\n        },\n      });\n    });\n  }\n\n  /** Replay events since `lastEventId` for SSE reconnection. */\n  getEventsSince(sessionId: string, lastEventId: string): ServiceEvent[] {\n    return this.sse.getEventsSince(sessionId, lastEventId);\n  }\n\n  /**\n   * Validate authentication token from request headers.\n   * Returns true if auth is disabled (mode: 'none') or token is valid.\n   */\n  validateAuth(headers?: Record<string, string | string[] | undefined>): boolean {\n    const token = extractToken(headers);\n    return validateToken(this.auth, token);\n  }\n\n  /**\n   * Get current auth mode.\n   */\n  getAuthMode(): 'none' | 'token' | 'password' | 'trusted-proxy' {\n    return this.auth.mode;\n  }\n\n  /** Resolved gateway auth (mode, credentials, trusted-proxy config). */\n  getResolvedAuth(): ResolvedGatewayAuth {\n    return this.auth;\n  }\n\n  /**\n   * Get current auth token (for CLI server integration).\n   * Returns undefined if mode is not token.\n   */\n  getAuthToken(): string | undefined {\n    return this.auth.mode === 'token' ? this.auth.token : undefined;\n  }\n\n  /**\n   * Refresh (regenerate) the gateway auth token.\n   * Returns the new token.\n   */\n  async refreshAuthToken(): Promise<string> {\n    if (this.auth.mode !== 'token') {\n      throw new Error('Cannot refresh token: auth mode is not token');\n    }\n\n    // Generate new token\n    const newToken = crypto.randomBytes(24).toString('hex');\n    \n    // Update in-memory auth\n    this.auth.token = newToken;\n    \n    // Update config\n    this.config = {\n      ...this.config,\n      gateway: {\n        ...this.config.gateway,\n        auth: {\n          ...this.config.gateway?.auth,\n          mode: 'token',\n          token: newToken,\n        },\n      },\n    };\n    \n    await this.saveConfig(this.config);\n\n    log.info({ tokenPreview: `${newToken.slice(0, 8)}...` }, 'Gateway token refreshed');\n    \n    return newToken;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBACoG;8BAO5C;aAkBM;gBAaD;aAEoB;YAKrD;sBAG4B;oBAIQ;kBACa;AA+B7E,MAAM,MAAM,aAAa,kBAAkB;AAE3C,IAAa,iBAAb,MAA4B;CAC1B;CACA;CACA;CACA,gBAA6C;CAC7C;CACA;CACA;CACA,kBAAkD;CAClD,4BAA6H;CAC7H,2BAAgH;CAChH,0BAAgE;;CAEhE,0BAAiD;CACjD,mBAAoD;CACpD;CACA,UAAkB;CAClB,YAAoB,KAAK,KAAK;CAC9B;CACA;CAGA;CAEA,MAAuB,IAAI,eAAe;CAE1C,YAAoB;AAClB,SAAO,KAAK;;CAGd,yBAAsD;;CAGtD,4BAAkE;;CAGlE,gCAAkD,EAAE;CACpD,8BAAmE;CACnE,gCAAqE;CAErE,YAA6B,IAAI,kBAAkB;CACnD,eAAmD;CACnD,wBAA8D;CAC9D,6BAAgE;CAChE,aAAwC;CACxC,oBAA4D;CAC5D,sBAA0D;CAC1D,mCAAgE;CAChE,wCAAqE;;;;;;CAOrE;;CAGA,IAAI,WAA0B;AAAE,SAAO,KAAK,YAAY;;;;;;;CAOxD;;;;;CAMA;CAEA,YAAY,gBAA8C,EAAE,EAAE;AAA1C,OAAA,gBAAA;AAClB,OAAK,MAAM,IAAI,YAAY;AAC3B,OAAK,aAAa,cAAc,cAAc,mBAAmB;AACjE,6BAA2B,KAAK,WAAW;AAC3C,OAAK,SAAS,WAAW,KAAK,WAAW;EACzC,MAAM,gBAAgB,+BAA+B,KAAK,OAAO;AACjE,MAAI,cAAc,SAAS;AACzB,QAAK,SAAS,cAAc;AACvBA,cAAkB,KAAK,QAAQ,KAAK,WAAW,CAAC,OAAO,QAAQ;IAClE,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,QAAI,KAAK;KAAE;KAAK,OAAO;KAAuB,cAAc;KAAI,EAAE,uCAAuC,KAAK;KAC9G;;AAEJ,MAAI,qBAAqB,KAAK,OAAO,CAC9BA,YAAkB,KAAK,QAAQ,KAAK,WAAW,CAAC,OAAO,QAAQ;GAClE,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAI,KAAK;IAAE;IAAK,OAAO;IAAmB,cAAc;IAAI,EAAE,0CAA0C,KAAK;IAC7G;AAIJ,OAAK,OAAO,mBAAmB,EAC7B,YAAY,KAAK,OAAO,SAAS,MAClC,CAAC;AAGF,8BAA4B,KAAK,KAAK;AAGtC,gCAA8B,KAAK,KAAK;EAExC,MAAM,cAAc,KAAK,wBAAwB;EACjD,MAAM,gBAAgB,2BAA2B;GAC/C,KAAK,KAAK;GACV,MAAM,KAAK;GACX,cAAc,cAAc;GAC5B,MAAM;GACP,CAAC;AAGF,qBAAmB;GACjB,MAAM,KAAK;GACX,UAAU,cAAc;GACxB,aAAa,cAAc;GAC3B,kBAAkB,cAAc;GAChC,YAAY,cAAc;GAC1B,gBAAgB,KAAK,OAAO,SAAS;GACrC,qBAAqB,KAAK,OAAO,SAAS,wBAAwB;GAClE,0CAA0C,cAAc;GACxD,uBAAuB,+BAA+B,KAAK,OAAO;GAClE,qBAAqB,KAAK,OAAO,SAAS,MAAM,cAAc,KAAA;GAC/D,CAAC;AAGF,MAAI,KAAK,KAAK,SAAS,SAAS;GAC9B,MAAM,eAAe,KAAK,KAAK,QAAQ,GAAG,KAAK,KAAK,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO;AAC7E,OAAI,KAAK;IAAE,MAAM,KAAK,KAAK;IAAM,OAAO;IAAc,EAAE,4BAA4B;aAC3E,KAAK,KAAK,SAAS,gBAC5B,KAAI,KACF;GACE,MAAM,KAAK,KAAK;GAChB,YAAY,KAAK,KAAK,cAAc;GACpC,mBAAmB,KAAK,OAAO,SAAS,gBAAgB,UAAU;GACnE,EACD,0CACD;MAED,KAAI,KAAK,EAAE,MAAM,KAAK,KAAK,MAAM,EAAE,4BAA4B;AAIjE,OAAK,iBAAiB,IAAI,eAAe,KAAK,QAAQ,KAAK,IAAI;AAG/D,OAAK,gBAAgB,iBAAiB,KAAK,OAAO,IAAI;AACtD,OAAK,2BAA2B;AAGhC,OAAK,eAAe,IAAI,aAAa,EACnC,QAAQ,KAAK,QACd,CAAC;AAEF,OAAK,oBAAoB,IAAI,mBAAmB;AAEhD,OAAK,eAAe,IAAI,aAAa,IAAI,YAAY,CAAC;AAEtD,OAAK,cAAc,IAAI,mBAAmB;GACxC,KAAK,KAAK;GACV,cAAc,KAAK;GACnB,uBAAuB,KAAK,oBAAoB;GAChD,yBAAyB,KAAK;GAC9B,iBAAiB,KAAK;GACtB,OAAO,MAAM,YAAY,KAAK,IAAI,KAAK,MAAM,QAAQ;GACtD,CAAC;AAEF,OAAK,WAAW,IAAI,mBAAmB;GACrC,cAAc,KAAK;GACnB,uBAAuB,KAAK,oBAAoB;GAChD,wBAAwB,OAAO,KAAK,YAAY,eAAe,GAAG;GACnE,CAAC;AAEF,OAAK,cAAc,IAAI,0BAA0B;GAC/C,iBAAiB,KAAK;GACtB,uBAAuB,KAAK,oBAAoB;GAChD,0BAA0B,KAAK;GAC/B,yBAAyB,KAAK;GAC9B,aAAa,QAAQ,KAAK,WAAW,IAAI;GACzC,OAAO,MAAM,YAAY,KAAK,KAAK,MAAM,QAAQ;GAClD,CAAC;AAEF,OAAK,oBAAoB,IAAI,yBAAyB;GACpD,YAAY,KAAK;GACjB,KAAK,KAAK;GACV,iBAAiB,KAAK,cAAc,oBAAoB;GACxD,iBAAiB,KAAK;GACtB,YAAY,SAAS;AAAE,SAAK,SAAS;;GACrC,uBAAuB,KAAK,oBAAoB;GAChD,yBAAyB,KAAK;GAC9B,2BAA2B,KAAK;GAChC,0BAA0B,KAAK;GAC/B,uCAAuC,KAAK,iCAAiC;GAC7E,oCAAoC,KAAK,8BAA8B;GACvE,yBAAyB,KAAK,mBAAmB;GACjD,OAAO,MAAM,YAAY,KAAK,KAAK,MAAM,QAAQ;GAClD,CAAC;;;CAIJ,IAAI,eAA6B;AAC/B,SAAO,KAAK,oBAAoB;;CAGlC,qBAA2C;AACzC,MAAI,KAAK,cACP,QAAO,KAAK;AAGd,OAAK,gBAAgB,IAAI,aAAa,KAAK,KAAK;GAC9C,WAAW,KAAK;GAChB,OAAO,wBAAwB,KAAK,OAAO;GAC3C,QAAQ,KAAK;GACb,cAAc,KAAK,aAAa,UAAU;GAC1C,2BAA2B,YAAY,UAAU;AAC/C,SAAK,aAAa,KAAK,kBAAkB;KAAE,KAAK;KAAY,MAAM,OAAO;KAAM,CAAC;AAChF,SAAK,KAAK,mBAAmB;KAAE,KAAK;KAAY,MAAM,OAAO;KAAM,CAAC;;GAEtE,6BAA6B,eAAe;AAC1C,SAAK,KAAK,8BAA8B,EAAE,KAAK,YAAY,CAAC;;GAE9D,sBAAsB,YAAY;AAChC,SAAK,KAAK,uBAAuB,QAAQ;;GAE3C,kBAAkB,YAAY;AAC5B,SAAK,KAAK,iBAAiB;KACzB,SAAS;KACT,QAAQ,QAAQ,WAAW,SAAS,sBAAsB;KAC3D,CAAC;;GAEJ,mBAAmB,KAAK,iBAAiB,aAAa;GACtD,4BAA4B,KAAK;GACjC,6BAA6B,KAAK,0BAA0B;GAC5D,uBAAuB,OAAO,YAAY;AACxC,QAAI,QAAQ,SAAS,OAAQ,QAAO;IACpC,MAAM,OAAO,MAAM,KAAK,aAAa,QAAQ,QAAQ,SAAS;AAC9D,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,sBAAsB;KAC3B;KACA,cAAc,KAAK;KACnB,QAAQ,KAAK;KACd,CAAC;;GAEJ,gBAAgB,EACd,uBAAuB,YAAY,YACjC,KAAK,YAAY,qBAAqB;IACpC;IACA;IACA,gBAAgB,YAAY,MAAkB;AAC5C,UAAK,cAAe,eAAe,uBAAuB,YAAY,EAAE;;IAE3E,CAAC,EACL;GACF,CAAC;AAEF,OAAK,cAAc,kBAAkB,KAAK,eAAe;AACzD,OAAK,eAAe,qBAAqB;GACvC,qBAAqB,OAAO,KAAK,cAAe,mBAAmB,GAAG;GACtE,wBAAwB,IAAI,OAAO,KAAK,cAAe,sBAAsB,IAAI,GAAG;GACrF,CAAC;AAEF,OAAK,kBAAkB,QAAQ;GAC7B,cAAc,KAAK;GACnB,yBAAyB,kBAAkB,KAAK,OAAO;GACvD,oBAAoB,KAAK,0BAA0B;GACpD,CAAC;AAEF,OAAK,cAAc,gBAAgB,iCAAiC,YAAY,YAAY;GAC1F,MAAM,yBAAyB;AAC7B,QAAI,KAAK,cAAe,oBAAoB,WAAW,GAAG,GAAG;AAC3D,gBAAW,kBAAkB,GAAG;AAChC;;AAEF,QAAI,KAAK,YAAY,aAAa,WAAW,EAAE;AAC7C,gBAAW,kBAAkB,GAAG;AAChC;;AAEG,SAAK,YAAY,kCAAkC,YAAY,QAAQ;;AAE9E,kBAAe,iBAAiB;IAChC;AAEF,SAAO,KAAK;;CAGd,yBAAmD;AACjD,MAAI,KAAK,iBACP,QAAO,KAAK;AAEd,OAAK,mBAAmB,IAAI,iBAAiB;GAC3C,cAAc,KAAK,oBAAoB;GACvC,YAAY,KAAK;GACjB,cAAc,KAAK,aAAa,UAAU;GAC1C,iBAAiB,KAAK;GACvB,CAAC;AACF,SAAO,KAAK;;CAKd,mBAAuC;AACrC,MAAI,CAAC,KAAK,WACR,MAAK,aAAa,IAAI,WAAW;GAC/B,eAAe;GACf,mBAAmB;GACnB,eAAe,OAAO,SAAS;IAC7B,MAAM,WAAW,KAAK,kBAAkB,MAAM;AAC9C,QAAI,SAAU,QAAO;IACrB,MAAM,UAAU,KAAK,WAAW,kBAAkB,KAAK,OAAO;IAC9D,MAAM,SAAS,QAAQ,gBAAgB,KAAK,GAAG,IAAI,KAAK,KAAK;IAC7D,MAAM,aAAa,gBAAgB;KACjC;KACA,QAAQ;KACR,WAAW;KACX,UAAU;KACV;KACD,CAAC;AACF,UAAM,KAAK,aAAa,aAAa,YAAY,EAAE,EAAE,EACnD,UAAU;KACR,eAAe;KACf,cAAc,kBAAkB;KAChC,aAAa;KACb,SAAS;MACP;MACA,QAAQ;MACR,WAAW;MACX,UAAU;MACV;MACD;KACF,EACF,CAAC;IACF,MAAM,EAAE,gBAAgB,MAAM,OAAO;AACrC,QAAI,aAAa,CAAC,cAAc,KAAK,IAAI,WAAW;AACpD,WAAO;;GAET,eAAe,eAAe,KAAK,YAAY,aAAa,WAAW;GACvE,UAAU,YAAY,aACpB,KAAK,YAAY,wBAAwB,YAAY,SAAS;GAChE,OAAO,MAAM,YAAY,KAAK,KAAK,MAAM,QAAQ;GAClD,CAAC;AAEJ,SAAO,KAAK;;CAGd,gCAAiE;AAC/D,MAAI,CAAC,KAAK,kBACR,MAAK,oBAAoB,IAAI,wBAAwB;GACnD,iBAAiB,KAAK;GACtB,qBAAqB,eAAe,KAAK,aAAa,mBAAmB,WAAW;GACpF,MAAM,OAAO,WAAW;AACtB,UAAM,KAAK,eAAe,KAAK;KAC7B,SAAS,OAAO;KAChB,SAAS,OAAO;KAChB,SAAS,OAAO;KAChB,MAAM;KACN,QAAQ,OAAO;KACf,UAAU;MACR,WAAW,OAAO;MAClB,UAAU,OAAO;MACjB,QAAQ;MACT;KACF,CAAC;;GAEL,CAAC;AAEJ,SAAO,KAAK;;CAGd,eAAe,QAAgB,SAAiC;AAC9D,SAAO,KAAK,kBAAkB,CAAC,QAAQ,QAAQ,QAAQ;;CAGzD,uBAAuB;AACrB,SAAO,KAAK,kBAAkB,CAAC,UAAU;;CAG3C,SACE,GAAG,MACyC;AAC5C,SAAO,KAAK,YAAY,SAAS,GAAG,KAAK;;CAG3C,cAAc,OAAwB;AACpC,SAAO,KAAK,YAAY,cAAc,MAAM;;CAG9C,sBAAsB,YAAwC;AAC5D,SAAO,KAAK,YAAY,eAAe,WAAW;;CAGpD,kBACE,YACA,SACqD;AACrD,SAAO,KAAK,YAAY,kBAAkB,YAAY,QAAQ;;CAGhE,sBAAsB,WAAmB,QAAyB;AAChE,SAAO,KAAK,YAAY,sBAAsB,WAAW,OAAO;;CAGlE,4BAA0C;AACxC,MAAI;AACF,OAAI,8BAA8B,KAAK,OAAO,EAAE;AAC9C,QAAI,KAAK,gEAAgE;AACzE;;GAGF,MAAM,gBAAgB;IACpB,cAAc,KAAK;IACnB,eAAe,sBAAsB;IACtC;AACD,QAAK,4BAA4B,+BAA+B,eAAe,KAAK,OAAO;AAC3F,QAAK,kBAAkB,IAAI,gBAAgB,cAAc;AACzD,QAAK,gBAAgB,oBAAoB,KAAK,0BAA0B;AACxE,QAAK,gBAAgB,UAAU,KAAK,OAAsD;WACnF,OAAO;AACd,OAAI,KAAK,EAAE,OAAO,EAAE,wCAAwC;;;CAIhE,kCAAgD;AAC9C,MAAI,CAAC,KAAK,gBACR;EAEF,MAAM,MAAM,KAAK,gBAAgB,aAAa;AAC9C,OAAK,MAAM,UAAU,IAAI,eACvB,MAAK,eAAe,eAAe,OAAO;;;;;CAO9C,MAAc,oCAAmD;AAC/D,MAAI,CAAC,KAAK,gBACR;AAEF,MAAI;AACF,SAAM,KAAK,gBAAgB,qBAAqB,EAAE,OAAO,WAAW,CAAC;AACrE,QAAK,iCAAiC;GACtC,MAAM,MAAM,KAAK,gBAAgB,aAAa;AAC9C,OAAI,MACF;IACE,kBAAkB,IAAI,WAAW;IACjC,gBAAgB,IAAI,eAAe;IACpC,EACD,iEACD;WACM,KAAK;AACZ,OAAI,KAAK,EAAE,KAAK,EAAE,0CAA0C;;;CAIhE,iCAAyC,WAAsD;EAC7F,MAAM,aAAa,UAAU,MAAM,CAAC,aAAa;EACjD,MAAM,WAAW,KAAK,iBAAiB,qBAAqB;AAC5D,MAAI,CAAC,SAAU,QAAO,KAAA;AACtB,SAAO,SACJ,eAAe,CACf,MAAM,UAAU,OAAO,KAAK,MAAM,SAAS,wBAAwB,EAAE,CAAC,CAAC,MAAM,OAAO,GAAG,aAAa,KAAK,WAAW,CAAC;;CAG1H,MAAM,2BAA2B,WAAmB;AAElD,MADiB,KAAK,eAAe,UAAU,UACnC,EAAE;AACZ,SAAM,KAAK,eAAe,kBAAkB,UAAU;AACtD,UAAO,KAAK,eAAe,UAAU,UAAU;;AAGjD,MAAI,CAAC,KAAK,mBAAmB,8BAA8B,KAAK,OAAO,CACrE;EAGF,MAAM,QAAQ,KAAK,iCAAiC,UAAU;AAC9D,MAAI,CAAC,MACH;EAGF,MAAM,kBAA2C;GAC/C,IAAI,MAAM;GACV,MAAM,MAAM,SAAS,QAAQ,MAAM;GACnC,QAAQ,MAAM;GACd,MAAM,MAAM;GACZ,SAAS;GACT,QAAQ,EAAE;GACX;AACD,QAAM,KAAK,gBAAgB,cAAc,gBAAgB;AACzD,OAAK,iCAAiC;AAEtC,MAAI,CADW,KAAK,eAAe,UAAU,UAClC,CACT;AAEF,QAAM,KAAK,eAAe,kBAAkB,UAAU;AACtD,SAAO,KAAK,eAAe,UAAU,UAAU;;CAGjD,MAAc,yBAAwC;AACpD,MAAI,CAAC,KAAK,gBACR;AAEF,MAAI;AACF,SAAM,KAAK,gBAAgB,qBAAqB,EAAE,OAAO,YAAY,CAAC;AACtE,QAAK,iCAAiC;AACtC,OAAI,MAAM,mCAAmC;WACtC,KAAK;AACZ,OAAI,KAAK,EAAE,KAAK,EAAE,qCAAqC;;;CAI3D,4BAA0C;AACxC,uBAAqB;AACd,QAAK,sBAAsB;IAChC;;CAGJ,MAAc,uBAAsC;EAClD,MAAM,QAAQ,KAAK;AACnB,MAAI;AACF,OAAI,MACF,OAAM,MAAM,QAAQ,gCAAgC,sBAAsB,CAAC;OAE3E,OAAM,sBAAsB;WAEvB,KAAK;GACZ,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAI,KAAK;IAAE;IAAK,cAAc;IAAI,OAAO;IAA0B,EAAE,kCAAkC,KAAK;;AAG9G,MAAI,CAAC,KAAK,mBAAmB,8BAA8B,KAAK,OAAO,CACrE;AAGF,MAAI;AACF,OAAI,MACF,OAAM,MAAM,QAAQ,kCAAkC,KAAK,wBAAwB,CAAC;OAEpF,OAAM,KAAK,wBAAwB;WAE9B,KAAK;GACZ,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAI,KAAK;IAAE;IAAK,cAAc;IAAI,OAAO;IAA4B,EAAE,mCAAmC,KAAK;;;CAInH,MAAM,QAAuB;AAC3B,MAAI,KAAK,QAAS;AAElB,2BAAyB,MAAM,YAAY;AACzC,QAAK,KAAK,MAAM,QAAQ;IACxB;AAEF,MAAI,MAAM,8BAA8B;AACxC,oBAAkB;AAClB,OAAK,YAAY,KAAK,KAAK;AAC3B,OAAK,UAAU;AACf,OAAK,eAAe,2BAA2B;AAC/C,OAAK,UAAU,aAAa,KAAK,UAAU;EAC3C,MAAM,QAAQ,KAAK;AAEnB,wBAAsB,KAAK,YAAY,kBAAkB,CAAC;AAE1D,OAAK,oBAAoB;AAEzB,OAAK,eAAe,iBAAiB;GACnC,oBAAoB,IAAI,SAAS,YAC/B,KAAK,aAAa,oBAAoB,6BAA6B,IAAI,SAAS,QAAQ;GAC1F,iBAAiB,IAAI,SAAS,SAAS,OAAO,YAC5C,KAAK,aAAa,oBAAoB,0BAA0B,IAAI,SAAS,SAAS,OAAO,QAAQ;GACxG,CAAC;AACF,OAAK,eAAe,0BAA0B,gBAAgB,KAAK,QAAQ,kBAAkB,KAAK,OAAO,CAAC,CAAC;AAE3G,MAAI,KAAK,gBACP,MAAK,gBAAgB,kBAAkB;GACrC,KAAK,KAAK;GACV,gBAAgB,KAAK;GACrB,8BAA8B,YAAoB,wBAAgC;AAChF,yBAAqB;AACd,UAAK,YAAY,kCAAkC,YAAY,oBAAoB;MACxF;;GAEL,CAAC;AAGJ,QAAM,MAAM,QAAQ,yBAAyB,KAAK,mCAAmC,CAAC;EAEtF,MAAM,eACJ,QAAQ,IAAI,uBAAuB,OACnC,QAAQ,IAAI,uBAAuB,UACnC,QAAQ,IAAI,wBAAwB,OACpC,QAAQ,IAAI,wBAAwB;EAGtC,MAAM,kBAAkB,YAAY,KAAK;EACzC,IAAI,gBAAgB;EACpB,IAAI,cAAc;EAClB,IAAI,uBAAuB;EAC3B,IAAI,mBAAkC;EACtC,IAAI,+BAAe,IAAI,KAAa;AAEpC,MAAI,aACF,KAAI,KAAK,uEAAuE;OAC3E;GACL,MAAM,KAAK,YAAY,KAAK;AAC5B,SAAM,MAAM,QAAQ,6BAA6B,KAAK,eAAe,YAAY,CAAC;AAClF,mBAAgB,YAAY,KAAK,GAAG;GAEpC,MAAM,KAAK,YAAY,KAAK;GAC5B,MAAM,kBAAkB,8BAA8B;IACpD,QAAQ,KAAK;IACb,gBAAgB,KAAK;IACrB,mCAAmC,KAAK,cAAc,sCAAsC;IAC7F,CAAC;AACF,kBAAe,gBAAgB;AAC/B,iBAAc,YAAY,KAAK,GAAG;AAClC,QAAK,gCAAgC,CAAC,GAAG,aAAa;AACtD,QAAK,8BAA8B,gBAAgB;AACnD,QAAK,gCAAgC,gBAAgB;AAErD,OAAI,aAAa,OAAO,EACtB,KAAI,KAAK,EAAE,UAAU,CAAC,GAAG,aAAa,EAAE,EAAE,uDAAuD;GAGnG,MAAM,KAAK,YAAY,KAAK;AAC5B,SAAM,MAAM,QAAQ,wBAClB,KAAK,eAAe,MAClB,aAAa,OAAO,IAAI,EAAE,uBAAuB,cAAc,GAAG,KAAA,EACnE,CACF;AACD,0BAAuB,YAAY,KAAK,GAAG;AAE3C,OAAI,KAAK,cAAc,sCAAsC,MAAM;IACjE,MAAM,KAAK,YAAY,KAAK;AAC5B,UAAM,MAAM,QAAQ,kCAClB,KAAK,eAAe,+BAA+B,CACpD;AACD,uBAAmB,YAAY,KAAK,GAAG;;;EAI3C,MAAM,8BAA8B,YAAY,KAAK,GAAG;EACxD,MAAM,cAAc,KAAK,OAAO,SAAS,2BAA2B;EACpE,MAAM,gBAAoD;GACxD,mCAAmC,KAAK,cAAc,sCAAsC;GAC5F,yBAAyB,KAAK,cAAc,oCACxC,KAAK,8BACL;GACJ,2BAA2B,KAAK;GAChC,oBAAoB,KAAK;GACzB,sBAAsB,KAAK,8BAA8B;GACzD,eAAe,KAAK,MAAM,cAAc;GACxC,aAAa,KAAK,MAAM,YAAY;GACpC,sBAAsB,KAAK,MAAM,qBAAqB;GACtD,kBAAkB,qBAAqB,OAAO,OAAO,KAAK,MAAM,iBAAiB;GACjF,6BAA6B,KAAK,MAAM,4BAA4B;GACrE;AACD,MAAI,KACF;GAAE,OAAO;GAA2B,OAAO;GAAU,GAAG;GAAe,EACvE,2CACD;AAGD,QAAM,MAAM,QAAQ,6BAA6B,KAAK,aAAa,YAAY,CAAC;AAChF,MAAI,MAAM,8BAA8B;AAExC,OAAK,kBAAkB,QAAQ;GAC7B,cAAc,KAAK;GACnB,yBAAyB,kBAAkB,KAAK,OAAO;GACvD,oBAAoB,KAAK,0BAA0B;GACpD,CAAC;AACF,OAAK,mCAAmC;AAExC,QAAM,MAAM,QAAQ,6BAA6B,KAAK,kCAAkC,CAAC;AAEzF,OAAK,aAAa,GAAG,mBAAmB,SAA0D;AAChG,QAAK,KAAK,mBAAmB;IAAE,KAAK,KAAK;IAAK,MAAM,KAAK;IAAM,MAAM,KAAK;IAAM,CAAC;IACjF;AAEF,QAAM,MAAM,QAAQ,gCAAgC,KAAK,kBAAkB,YAAY,CAAC;AACxF,QAAM,MAAM,QAAQ,4BAA4B,KAAK,8BAA8B,CAAC;AAEpF,QAAM,KAAK,aAAa,YAAY;AAEpC,OAAK,wBAAwB,CAAC,MAAM,gCAAgC,KAAK,OAAO,CAAC;AAEjF,OAAK,sBAAsB,yBAAyB;GAClD,iBAAiB,KAAK;GACtB,aAAa,QAAQ,KAAK,WAAW,IAAI;GAC1C,CAAC;AAEG,SAAO,+CACT,MAAM,EAAE,sCAAsC,gCAAgC,KAAK,OAAO,CAAC,CAC3F,OAAO,QAAQ,IAAI,KAAK,EAAE,KAAK,EAAE,2CAA2C,CAAC;AAGhF,QAAM,MAAM,QAAQ,iCAAiC,KAAK,qCAAqC,CAAC;AAGhG,OAAK,aAAa,OAAO,CAAC,OAAO,QAAQ;AACvC,OAAI,MAAM,EAAE,KAAK,EAAE,sBAAsB;IACzC;AAGF,MAAI,KAAK,cAAc,sCAAsC,KAC3D,MAAK,wBAAwB,CAAC,OAAO,QAAQ;AAC3C,OAAI,MAAM,EAAE,KAAK,EAAE,2BAA2B;IAC9C;AAIJ,MAAI,KAAK,cAAc,oBAAoB,MACzC,MAAK,kBAAkB,kBAAkB;AAG3C,OAAK,yBAAyB,2BAA2B;GACvD,QAAQ,KAAK;GACb,0BAA0B,WAAW;AACnC,SAAK,KAAK,oBAAoB,OAAO;;GAEvC,+BAA+B,KAAK,8BAA8B;GACnE,CAAC;AAEF,4BAA0B,KAAK;AAK1B,SAAO,0BACT,MAAM,EAAE,sBAAsB,iBAAiB,CAAC,CAChD,OAAO,QAAQ,IAAI,KAAK,EAAE,KAAK,EAAE,6BAA6B,CAAC;AAElE,MAAI,KAAK,cAAc,sCAAsC,KAC3D,MAAK,kBAAkB;MAEvB,OAAM,KAAK,gCAAgC;AAG7C,MAAI,MAAM,0BAA0B;;;CAItC,oBAA0B;AACxB,OAAK,UAAU,mBAAmB;AAClC,OAAK,cAAc,KAAK,iBAAiB;;CAG3C,iBAA0B;AACxB,SAAO,KAAK,UAAU,SAAS;;CAGjC,sBAAgD;AAC9C,SAAO,KAAK,UAAU,aAAa;;CAGrC,MAAc,mCAAkD;EAC9D,MAAM,MAAM,QAAQ,IAAI,8BAA8B,MAAM;AAC5D,MAAI,CAAC,IACH;EAEF,MAAM,UAAU,OAAO,SAAS,KAAK,GAAG;AACxC,MAAI,CAAC,OAAO,SAAS,QAAQ,IAAI,WAAW,EAC1C;AAEF,QAAM,IAAI,SAAS,YAAY,WAAW,SAAS,QAAQ,CAAC;;CAG9D,mBAAiC;AAC/B,MAAI,KAAK,UAAU,SAAS,CAC1B;AAEF,OAAK,UAAU,WAAW;AAC1B,OAAK,cAAc,KAAK,QAAQ;AAChC,OAAK,2BAA2B;;;CAIlC,MAAc,mCAAkD;EAC9D,MAAM,OAAO,KAAK,wBAAwB;AAC1C,QAAM,oBAAoB,CAAC,UAAU,KAAK,QAAQ,MAAM,KAAK,cAAc,CAAC;;;;;;CAO9E,MAAM,kBAAiC;AACrC,QAAM,KAAK,kCAAkC;AAC7C,OAAK,kBAAkB;AAEvB,QAAM,KAAK,kCAAkC;AAE7C,MAAI,KAAK,cAAc,sCAAsC,KAC3D;EAEF,MAAM,kBAAkB,YAAY,KAAK;EACzC,MAAM,QAAQ,KAAK;AACnB,MAAI;GACF,MAAM,OAAO,YAAY,KAAK;AAC9B,OAAI,MACF,OAAM,MAAM,QAAQ,mCAAmC,KAAK,eAAe,uBAAuB,CAAC;OAEnG,OAAM,KAAK,eAAe,uBAAuB;GAEnD,MAAM,0BAA0B,YAAY,KAAK,GAAG;GAEpD,MAAM,KAAK,YAAY,KAAK;AAC5B,OAAI,MACF,OAAM,MAAM,QAAQ,kCAClB,KAAK,eAAe,+BAA+B,CACpD;OAED,OAAM,KAAK,eAAe,+BAA+B;GAE3D,MAAM,mBAAmB,YAAY,KAAK,GAAG;AAE7C,QAAK,wBAAwB,CAAC,OAAO,QAAQ;AAC3C,QAAI,MAAM,EAAE,KAAK,EAAE,2BAA2B;KAC9C;AACF,QAAK,KAAK,mBAAmB,EAAE,UAAU,KAAK,mBAAmB,EAAE,CAAC;GAEpE,MAAM,yBAAyB,YAAY,KAAK,GAAG;GACnD,MAAM,gBAAoD;IACxD,yBAAyB,KAAK;IAC9B,2BAA2B,KAAK;IAChC,oBAAoB,KAAK;IACzB,yBAAyB,KAAK,MAAM,wBAAwB;IAC5D,kBAAkB,KAAK,MAAM,iBAAiB;IAC9C,wBAAwB,KAAK,MAAM,uBAAuB;IAC3D;AACD,OAAI,KACF;IAAE,OAAO;IAA2B,OAAO;IAAU,GAAG;IAAe,EACvE,4DACD;WACM,KAAK;GACZ,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAI,MACF;IACE;IACA,cAAc;IACd,OAAO;IACP,OAAO;IACP,oBAAoB,KAAK;IACzB,WAAW,KAAK,MAAM,YAAY,KAAK,GAAG,gBAAgB;IAC3D,EACD,sDAAsD,KACvD;YACO;AACR,QAAK,kBAAkB;;;CAI3B,MAAM,OAAsB;AAC1B,MAAI,CAAC,KAAK,QAAS;AAEnB,0BAAwB,KAAK;AAE7B,MAAI,MAAM,8BAA8B;AACxC,OAAK,UAAU,cAAc;AAE7B,QAAM,uBAAuB,CAAC,OAAO,QAAQ;AAC3C,OAAI,KAAK,EAAE,KAAK,EAAE,qCAAqC;IACvD;AAEF,MAAI,KAAK,wBAAwB;AAC/B,QAAK,wBAAwB;AAC7B,QAAK,yBAAyB;;AAGhC,QAAM,KAAK,kBAAkB,iBAAiB;AAG9C,OAAK,kBAAkB,MAAM;AAC7B,OAAK,qBAAqB,MAAM;AAChC,OAAK,sBAAsB;AAG3B,MAAI,KAAK,yBAAyB;AAChC,SAAM,KAAK,yBAAyB;AACpC,QAAK,0BAA0B;;AAEjC,OAAK,2BAA2B;AAChC,OAAK,0BAA0B;AAE/B,wBAAsB,KAAK;AAC3B,OAAK,YAAY,sBAAsB;AACvC,QAAM,8BAA8B,CAAC,OAAO,QAAQ;AAClD,OAAI,KAAK,EAAE,KAAK,EAAE,8BAA8B;IAChD;AACF,OAAK,eAAe,MAAM;AAG1B,OAAK,UAAU;AACf,OAAK,IAAI,UAAU;AAEnB,OAAK,gCAAgC,EAAE;AACvC,OAAK,8BAA8B;AACnC,OAAK,gCAAgC;AAErC,QAAM,KAAK,eAAe,MAAM;AAEhC,QAAM,KAAK,kBAAkB,MAAM;AACnC,OAAK,oCAAoC;AACzC,OAAK,mCAAmC;AACxC,OAAK,yCAAyC;AAC9C,OAAK,wCAAwC;AAG7C,QAAM,KAAK,aAAa,OAAO;AAG/B,UAAQ,YAAY;AAEpB,qBAAmB;AAEnB,MAAI,MAAM,0BAA0B;;;CAItC,MAAc,sCAAqD;AACjE,QAAM,KAAK,iCAAiC;;;CAI9C,MAAM,gCAA+C;AACnD,MAAI,CAAC,KAAK,wBAAyB;AACnC,QAAM,KAAK,yBAAyB;AACpC,OAAK,0BAA0B;AAC/B,OAAK,2BAA2B;AAChC,OAAK,0BAA0B;AAC/B,MAAI,MAAM,uCAAuC;;;;;;CAOnD,MAAM,kCAAiD;EACrD,MAAM,EAAE,mCAAmC,MAAM,OAAO;AAGxD,MAAI,CAFmB,+BAA+B,KAAK,OAExC,EAAE;AACnB,OAAI,KAAK,yBAAyB;AAChC,UAAM,KAAK,yBAAyB;AACpC,SAAK,0BAA0B;AAC/B,SAAK,2BAA2B;AAChC,SAAK,0BAA0B;AAC/B,QAAI,MAAM,iEAAiE;;AAE7E;;EAGF,MAAM,OAAO;EACb,MAAM,OAAO;EACb,MAAM,oBAAoB,KAAA;EAC1B,MAAM,iBAAiB,KAAA;EACvB,MAAM,UAAU,GAAG,KAAK,GAAG;AAE3B,MAAI,KAAK,2BAA2B,KAAK,4BAA4B,QACnE;AAGF,MAAI,KAAK,yBAAyB;AAChC,SAAM,KAAK,yBAAyB;AACpC,QAAK,0BAA0B;AAC/B,QAAK,2BAA2B;AAChC,QAAK,0BAA0B;;AAGjC,MAAI;GACF,MAAM,EAAE,kCAAkC,MAAM,OAAO;GACvD,MAAM,EAAE,UAAU,YAAY,MAAM,8BAA8B;IAChE;IACA;IACA;IACA;IACD,CAAC;AACF,QAAK,2BAA2B;AAChC,QAAK,0BAA0B;AAC/B,QAAK,0BAA0B;AAC/B,OAAI,KAAK;IAAE;IAAM;IAAM,EAAE,sCAAsC;WACxD,KAAK;AAEZ,QADa,OAAO,OAAO,QAAQ,YAAY,UAAU,MAAO,IAA0B,OAAO,KAAA,OACpF,cAAc;AACzB,QAAI,KACF;KACE;KACA,OAAO;KACP,UAAU;KACV,UAAU;KACV,MAAM;KACP,EACD,uDAAuD,KAAK,GAAG,OAChE;AACD;;AAGF,OAAI,MACF;IAAE;IAAK,OAAO;IAAwB,EACtC,gDAAgD,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GACjG;;;;;;CAOL,MAAc,yBAAwC;AACpD,MAAI,MAAM,sCAAsC;AAChD,SAAO,KAAK,QACV,KAAI;GACF,MAAM,MAAM,MAAM,KAAK,IAAI,iBAAiB;AAC5C,SAAM,KAAK,eAAe,KAAK,IAAI;WAC5B,OAAO;AACd,OAAI,iBAAiB,wBACnB;GAEF,MAAM,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACjE,OAAI,MACF;IAAE,KAAK;IAAO,cAAc;IAAI,OAAO;IAAoB,EAC3D,gDAAgD,KACjD;AACD,SAAM,IAAI,SAAS,YAAY,WAAW,SAAS,IAAK,CAAC;;;CAO/D,mCAAyC;AACvC,OAAK,kBAAkB,kCAAkC;;CAG3D,eAA+D;AAC7D,SAAO,KAAK,kBAAkB,cAAc;;CAG9C,kCAAiD;AAC/C,SAAO,KAAK,kBAAkB,iCAAiC;;CAGjE,kCAAiD;AAC/C,SAAO,KAAK,kBAAkB,iCAAiC;;CAGjE,WAAW,QAA6D;AACtE,SAAO,KAAK,kBAAkB,WAAW,OAAO;;CAGlD,oCACE,aACA,QAC2E;AAC3E,SAAO,KAAK,kBAAkB,oCAAoC,aAAa,OAAO;;CAGxF,aAAa,SAAyE;AACpF,SAAO,KAAK,kBAAkB,aAAa,QAAQ;;;;;CAMrD,MAAM,YACJ,SACA,QACA,SACgD;AAChD,MAAI;AACF,SAAM,KAAK,eAAe,KAAK;IAC7B;IACA,SAAS;IACT;IACD,CAAC;GACF,MAAM,YAAY,OAAO,KAAK,KAAK;AACnC,QAAK,KAAK,gBAAgB;IAAE;IAAS;IAAQ;IAAW,CAAC;AACzD,UAAO;IAAE,MAAM;IAAM;IAAW;WACzB,OAAO;AACd,OAAI,MAAM;IAAE;IAAS;IAAQ;IAAO,EAAE,yBAAyB;AAC/D,SAAM;;;;;;CAOV,oBAIG;EACD,MAAM,kBAAkB,IAAI,IAAI,KAAK,eAAe,oBAAoB,CAAC;EACzE,MAAM,WAAW,KAAK,OAAO;AAK7B,UAJgB,KAAK,4BACjB,gCAAgC,KAAK,0BAA0B,GAC/D,6BAA6B,KAAK,OAAO,EAE9B,QAAQ,KAAK,WAAW;GACrC,MAAM,MAAM;GACZ,SAAS,WAAW,MAAM,KAAK,YAAY;GAC3C,WAAW,gBAAgB,IAAI,MAAM,GAAG;GACzC,EAAE;;CAGL,uBAAiC;AAC/B,SAAO,KAAK,eAAe,oBAAoB;;CAGjD,wBAAwB,WAAmB;AACzC,SAAO,KAAK,eAAe,UAAU,UAAU;;CAGjD,MAAM,eAAe,WAAkC;AACrD,QAAM,KAAK,eAAe,YAAY,UAAU;AAChD,QAAM,KAAK,eAAe,aAAa,UAAU;;;;;CAMnD,qBAMG;AAKD,UAJgB,KAAK,4BACjB,gCAAgC,KAAK,0BAA0B,GAC/D,6BAA6B,KAAK,OAAO,EAE9B,QAAQ,KAAK,WAAW;GACrC,IAAI,MAAM;GACV,OAAO,MAAM;GACb,aAAa,MAAM,eAAe;GAClC,YAAY;GACZ,OAAO,MAAM;GACd,EAAE,CAAC,UAAU,GAAG,MAAM;AACrB,OAAI,EAAE,UAAU,EAAE,MAAO,QAAO,EAAE,QAAQ,EAAE;AAC5C,UAAO,EAAE,GAAG,cAAc,EAAE,GAAG;IAC/B;;;;;CAMJ,oBAAoB,MAAkC;AACpD,OAAK,kBAAkB,WAAW,EAAE,QAAQ,MAAM,UAAU,UAAU,CAAC;;;;;CAMzE,kCAAkC,SAAoC;AACpE,OAAK,4BAA4B;;;;;CAMnC,+BAAgF;EAC9E,MAAM,SAAS,mCAAmC;AAClD,MAAI,OAAO,SAAS,SAClB,QAAO;GAAE,IAAI;GAAO,MAAM,OAAO;GAAM,SAAS,OAAO,UAAU;GAAgB;AAEnF,MAAI,OAAO,SAAS,WAClB,QAAO;GACL,IAAI;GACJ,MAAM;GACN,SACE;GACH;EAEH,MAAM,WAAW,KAAK;AACtB,MAAI,CAAC,SACH,QAAO;GACL,IAAI;GACJ,MAAM,OAAO;GACb,SAAS;GACV;AAEH,qBAAmB;AACZ,aAAU,CAAC,cAAc;AAC5B,YAAQ,KAAK,EAAE;KACf;IACF;AACF,SAAO;GAAE,IAAI;GAAM,MAAM,OAAO;GAAM;;;;;CAMxC,YAeE;EACA,MAAM,kBAAkB,KAAK,eAAe,oBAAoB;EAChE,MAAM,cAAc,KAAK,eAAe,gBAAgB;EACxD,MAAM,WAAW,oBAAoB;EACrC,MAAM,YAAY,KAAK,UAAU,aAAa;AAE9C,SAAO;GACL,QAAQ;GACR,SAAS;GACT,SAAS;GACT,QAAQ,KAAK,OAAO,KAAK,KAAK,GAAG,KAAK,aAAa,IAAK;GACxD,OAAO,UAAU;GACjB,eAAe,UAAU;GACzB,mBAAmB,UAAU;GAC7B,UAAU;IACR,SAAS,gBAAgB;IACzB,OAAO,YAAY;IACpB;GACD,YAAY,KAAK;GACjB,MAAM;IACJ,KAAK,WAAW;IAChB,WAAW,SAAS;IACpB,OAAO,SAAS;IACjB;GACF;;CAGH,IAAI,YAAqB;AACvB,SAAO,KAAK;;;;;CAMd,uBAAuB;AACrB,SAAO,KAAK,iBAAiB,aAAa;;;CAI5C,qBAA6C;AAC3C,SAAO,KAAK;;;;;CAMd,mBAAmB;EACjB,MAAM,EAAE,sBAAA,gBAAA,EAAA,aAAA,kBAAA;AACR,SAAO,kBAAkB;;;;;CAM3B,MAAM,oBAAoB,QAAgB,QAAmD;EAC3F,MAAM,WAAW,KAAK,sBAAsB;AAC5C,MAAI,CAAC,SACH,OAAM,IAAI,MAAM,mCAAmC;EAGrD,MAAM,UAAU,SAAS,iBAAiB,OAAO;AACjD,MAAI,CAAC,QACH,OAAM,IAAI,MAAM,6BAA6B,SAAS;AAGxD,SAAO,MAAM,QAAQ,OAAO;;CAG9B,IAAI,gBAAwB;AAC1B,SAAO,KAAK;;CAGd,IAAI,uBAA+B;AACjC,SAAO,KAAK;;CAGd,IAAI,qBAAiC;AACnC,SAAO,KAAK;;;CAId,yBAAiC;AAC/B,SAAO,4BAA4B,KAAK,QAAQ,KAAK,cAAc,WAAW;;CAGhF,IAAI,4BAA+C;AACjD,SAAO,KAAK;;CAGd,MAAc,+BAA8C;AAC1D,QAAMC,6BAAmC;GACvC,QAAQ,KAAK;GACb,mBAAmB,KAAK;GACzB,CAAC;;CAGJ,IAAI,uBAAqC;AACvC,SAAO,KAAK;;CAGd,IAAI,uBAAqC;AACvC,SAAO,KAAK;;;CAId,2BAA+C;AAC7C,MAAI,CAAC,KAAK,4BAA4B;AACpC,QAAK,wBAAwB,IAAI,sBAAsB,KAAK;AAC5D,QAAK,6BAA6B,IAAI,mBAAmB;IACvD,SAAS;IACT,eAAe,KAAK;IACpB,iBAAiB;IAClB,CAAC;;AAEJ,SAAO,KAAK;;CAGd,MAAc,mCAAkD;EAC9D,MAAM,kBAAkB,KAAK,0BAA0B;EACvD,MAAM,WAAW,KAAK,yBAAyB;EAC/C,IAAI,QAAQ;AACZ,OAAK,MAAM,WAAW,SACpB,KAAI;AACF,YAAS,MAAM,gBAAgB,yBAAyB,QAAQ;WACzD,KAAK;GACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,OAAI,KACF;IAAE;IAAK;IAAS,cAAc;IAAK,EACnC,2CAA2C,QAAQ,IAAI,MACxD;;AAGL,MAAI,QAAQ,EACV,KAAI,KAAK;GAAE,OAAO;GAAO;GAAU,EAAE,uCAAuC;;CAIhF,0BAA4C;EAC1C,MAAM,sBAAM,IAAI,KAAa;AAC7B,MAAI,IAAI,sBAAsB,KAAK,OAAO,CAAC;AAC3C,OAAK,MAAM,SAAS,iBAAiB,KAAK,OAAO,EAAE;AACjD,OAAI,MAAM,YAAY,MAAO;AAC7B,OAAI,IAAI,iBAAiB,MAAM,GAAG,CAAC;;AAErC,SAAO,CAAC,GAAG,IAAI;;;CAIjB,MAAM,cAAc,SAAiB,aAAa,mBAAoC;AACpF,SAAO,KAAK,aAAa,eAAe,cAAc,SAAS,WAAW;;CAK5E,UACE,WACA,UACY;AACZ,SAAO,KAAK,IAAI,UAAU,WAAW,SAAS;;CAGhD,KAAK,MAAc,SAAwB;AACzC,OAAK,IAAI,KAAK,MAAM,QAAQ;AAC5B,OAAK,+BAA+B,CAAC,mBAAmB,MAAM,QAAQ;;CAGxE,oCAAkD;AAChD,OAAK,oCAAoC;AACzC,OAAK,yCAAyC;AAC9C,OAAK,mCAAmC,0BAA0B,UAAU;AACrE,QAAK,kBAAkB,aAAa,MAAM,CAAC,OAAO,QAAQ;IAC7D,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,QAAI,KAAK;KAAE;KAAK,WAAW,MAAM;KAAM,QAAQ,MAAM;KAAQ,EAAE,oCAAoC,KAAK;KACxG;IACF;AACF,OAAK,wCAAwC,2BAA2B,WAAW;AACjF,OAAI,CAAC,OAAO,cAAc,OAAO,WAAW,SAAS,eAAe,CAAE;AACtE,iCAA8B;IAC5B,MAAM;IACN,QAAQ;IACR,SAAS;KACP,YAAY,OAAO;KACnB,WAAW,OAAO;KAClB,YAAY,OAAO,YAAY,KAAA;KAChC;IACF,CAAC;IACF;;;CAIJ,eAAe,WAAmB,aAAqC;AACrE,SAAO,KAAK,IAAI,eAAe,WAAW,YAAY;;;;;;CAOxD,aAAa,SAAkE;EAC7E,MAAM,QAAQ,aAAa,QAAQ;AACnC,SAAO,cAAc,KAAK,MAAM,MAAM;;;;;CAMxC,cAA+D;AAC7D,SAAO,KAAK,KAAK;;;CAInB,kBAAuC;AACrC,SAAO,KAAK;;;;;;CAOd,eAAmC;AACjC,SAAO,KAAK,KAAK,SAAS,UAAU,KAAK,KAAK,QAAQ,KAAA;;;;;;CAOxD,MAAM,mBAAoC;AACxC,MAAI,KAAK,KAAK,SAAS,QACrB,OAAM,IAAI,MAAM,+CAA+C;EAIjE,MAAM,WAAW,OAAO,YAAY,GAAG,CAAC,SAAS,MAAM;AAGvD,OAAK,KAAK,QAAQ;AAGlB,OAAK,SAAS;GACZ,GAAG,KAAK;GACR,SAAS;IACP,GAAG,KAAK,OAAO;IACf,MAAM;KACJ,GAAG,KAAK,OAAO,SAAS;KACxB,MAAM;KACN,OAAO;KACR;IACF;GACF;AAED,QAAM,KAAK,WAAW,KAAK,OAAO;AAElC,MAAI,KAAK,EAAE,cAAc,GAAG,SAAS,MAAM,GAAG,EAAE,CAAC,MAAM,EAAE,0BAA0B;AAEnF,SAAO"}

package/dist/src/goals/goal-service.js

@@ -1,4 +1,5 @@
 import { defaultMaxTurns } from "../agent/goals/state.js";
+import { publishAutomationProductEvent } from "../automations/product-events.js";
 import { GoalStore } from "./goal-store.js";
 //#region src/goals/goal-service.ts
 function normalizeTitle(title) {
@@ -12,6 +13,29 @@ function toTerminalStatus(verdict) {
 	if (verdict === "needs_input") return "needs_input";
 	return "active";
 }
+function publishGoalEvent(type, goal, extra) {
+	publishAutomationProductEvent({
+		type,
+		source: "goals",
+		payload: {
+			goalId: goal.id,
+			title: goal.title,
+			status: goal.status,
+			priority: goal.priority,
+			sessionKey: goal.activeSessionKey,
+			agentId: goal.agentId,
+			source: goal.source,
+			...extra
+		}
+	});
+}
+function publishGoalStatusEvent(goal, previousStatus, reason) {
+	if (previousStatus === goal.status) return;
+	publishGoalEvent("goal.status_changed", goal, {
+		previousStatus,
+		reason
+	});
+}
 var GoalService = class {
 	store;
 	constructor(store = new GoalStore()) {
@@ -20,7 +44,7 @@ var GoalService = class {
 	create(input) {
 		const sessionKey = input.sessionKey;
 		const cfg = input.config?.goals;
-		return this.store.create({
+		const goal = this.store.create({
 			title: normalizeTitle(input.title),
 			description: input.description,
 			agentId: input.agentId ?? "main",
@@ -32,6 +56,8 @@ var GoalService = class {
 			uiLocale: input.uiLocale,
 			source: input.source
 		});
+		publishGoalEvent("goal.created", goal);
+		return goal;
 	}
 	get(goalId) {
 		const goal = this.store.get(goalId);
@@ -72,6 +98,7 @@ var GoalService = class {
 		return goal ? this.get(goal.id) : null;
 	}
 	setStatus(goalId, status, opts) {
+		const previous = this.store.get(goalId);
 		const now = Date.now();
 		const goal = this.store.update(goalId, {
 			status,
@@ -79,18 +106,22 @@ var GoalService = class {
 			archivedAt: status === "archived" ? now : void 0,
 			blockedReason: status === "blocked" || status === "needs_input" ? opts?.reason : void 0
 		});
+		if (goal) publishGoalStatusEvent(goal, previous?.status, opts?.reason);
 		return goal ? this.get(goal.id) : null;
 	}
 	pause(goalId, reason = "user-paused") {
+		const previous = this.store.get(goalId);
 		const goal = this.store.update(goalId, {
 			status: "paused",
 			blockedReason: reason,
 			completedAt: void 0,
 			archivedAt: void 0
 		});
+		if (goal) publishGoalStatusEvent(goal, previous?.status, reason);
 		return goal ? this.get(goal.id) : null;
 	}
 	resume(goalId) {
+		const previous = this.store.get(goalId);
 		const goal = this.store.update(goalId, {
 			status: "active",
 			blockedReason: void 0,
@@ -98,9 +129,11 @@ var GoalService = class {
 			archivedAt: void 0,
 			turnsUsed: 0
 		});
+		if (goal) publishGoalStatusEvent(goal, previous?.status);
 		return goal ? this.get(goal.id) : null;
 	}
 	reopen(goalId) {
+		const previous = this.store.get(goalId);
 		const goal = this.store.update(goalId, {
 			status: "active",
 			blockedReason: void 0,
@@ -108,6 +141,7 @@ var GoalService = class {
 			archivedAt: void 0,
 			turnsUsed: 0
 		});
+		if (goal) publishGoalStatusEvent(goal, previous?.status);
 		return goal ? this.get(goal.id) : null;
 	}
 	complete(goalId) {
@@ -117,12 +151,14 @@ var GoalService = class {
 		return this.setStatus(goalId, "archived");
 	}
 	unarchive(goalId) {
+		const previous = this.store.get(goalId);
 		const goal = this.store.update(goalId, {
 			status: "paused",
 			archivedAt: void 0,
 			completedAt: void 0,
 			blockedReason: void 0
 		});
+		if (goal) publishGoalStatusEvent(goal, previous?.status);
 		return goal ? this.get(goal.id) : null;
 	}
 	attachSession(goalId, sessionKey) {
@@ -149,6 +185,7 @@ var GoalService = class {
 	recordJudgeDecision(input) {
 		const goal = this.store.get(input.goalId);
 		if (!goal) return null;
+		const previousStatus = goal.status;
 		const nextStatus = toTerminalStatus(input.decision.verdict);
 		const turnsUsed = goal.turnsUsed + 1;
 		const status = turnsUsed >= goal.maxTurns && nextStatus === "active" ? "paused" : nextStatus;
@@ -169,7 +206,7 @@ var GoalService = class {
 			userQuestion: input.decision.userQuestion,
 			completedChecklistItemIds: input.decision.completedChecklistItemIds
 		});
-		this.store.update(input.goalId, {
+		const updated = this.store.update(input.goalId, {
 			status,
 			turnsUsed,
 			currentRunId: run.id,
@@ -177,10 +214,13 @@ var GoalService = class {
 			blockedReason: status === "blocked" || status === "needs_input" || status === "paused" ? reason : void 0,
 			completedAt: status === "done" ? Date.now() : void 0
 		});
+		if (updated) publishGoalStatusEvent(updated, previousStatus, reason);
 		return this.get(input.goalId);
 	}
 	syncPostTurnState(input) {
-		if (!this.store.get(input.goalId)) return null;
+		const goal = this.store.get(input.goalId);
+		if (!goal) return null;
+		const previousStatus = goal.status;
 		if (input.checklist) this.store.replaceChecklist(input.goalId, input.checklist);
 		const total = input.checklist?.length ?? this.store.listChecklist(input.goalId).length;
 		const done = (input.checklist ?? this.store.listChecklist(input.goalId)).filter((it) => it.status === "completed" || it.status === "impossible").length;
@@ -227,7 +267,7 @@ var GoalService = class {
 			title: "User input requested",
 			summary: input.userQuestion.trim()
 		});
-		this.store.update(input.goalId, {
+		const updated = this.store.update(input.goalId, {
 			status: input.status,
 			turnsUsed: input.turnsUsed,
 			maxTurns: input.maxTurns,
@@ -236,6 +276,7 @@ var GoalService = class {
 			blockedReason: input.status === "blocked" || input.status === "needs_input" || input.status === "paused" ? input.reason : void 0,
 			completedAt: input.status === "done" ? Date.now() : void 0
 		});
+		if (updated) publishGoalStatusEvent(updated, previousStatus, input.reason);
 		return this.get(input.goalId);
 	}
 	listRuns(goalId, limit) {