@xopcai/xopc 0.0.142 → 0.0.144

package/dist/src/gateway/hono/sse.js.map

@@ -1 +1 @@
-{"version":3,"file":"sse.js","names":[],"sources":["../../../../src/gateway/hono/sse.ts"],"sourcesContent":["import { streamSSE } from 'hono/streaming';\nimport type { Context } from 'hono';\nimport type { GatewayService } from '../service.js';\nimport { MAX_WEBCHAT_ATTACHMENT_FILE_BYTES } from '../chat-limits.js';\nimport { createLogger, updateAsyncLogContext } from '../../utils/logger.js';\nimport { stringifySSEData } from './sse-json.js';\nimport { resolveWebchatSessionKey } from '../resolve-webchat-session-key.js';\nimport type { UserTurnAttachment } from '../user-turn-input.js';\n\nconst log = createLogger('Gateway:SSE');\n\n// Active SSE connections tracking for connection limiting\nconst activeConnections = new Map<string, AbortController>();\n\nexport interface SSEHandlerConfig {\n  service: GatewayService;\n  maxSseConnections?: number;\n}\n\n// Type validation for agent request body\ninterface AgentRequestBody {\n  message: string;\n  channel?: string;\n  sessionKey?: string;\n  /** Epoch ms when the client started this send (abort cutoff / stale POST drop). */\n  clientCreatedAtMs?: number;\n  thinking?: string;\n  attachments?: UserTurnAttachment[];\n}\n\nfunction isValidAgentRequest(body: unknown): body is AgentRequestBody {\n  if (!body || typeof body !== 'object') return false;\n  const b = body as Record<string, unknown>;\n  // Allow empty message if attachments are provided\n  const hasMessage = typeof b.message === 'string';\n  const hasAttachments = Array.isArray(b.attachments) && b.attachments.length > 0;\n  return hasMessage || hasAttachments;\n}\n\n/** Max base64 character length that can decode to `MAX_WEBCHAT_ATTACHMENT_FILE_BYTES`. */\nfunction maxBase64CharsForBinary(maxBinaryBytes: number): number {\n  return 4 * Math.ceil(maxBinaryBytes / 3);\n}\n\n/**\n * POST /api/agent — Send a message to the agent, stream response via SSE.\n *\n * Request body: { message, channel?, sessionKey, attachments? }\n * Accept: text/event-stream → SSE stream\n * Accept: application/json → wait for full response, return JSON\n *\n * SSE events follow XOPC Chat Stream Protocol v1:\n *   run_start, user_message, user_transcript, assistant_message_start,\n *   assistant_delta, thinking_delta, thinking_end, tool_start, tool_update,\n *   tool_end, assistant_message_end, compaction, tts_audio, clarify_request,\n *   run_end, error.\n */\nexport function createAgentSSEHandler(config: SSEHandlerConfig) {\n  const { service } = config;\n\n  return async (c: Context) => {\n    const body = await c.req.json().catch(() => null);\n\n    // Input validation\n    if (!isValidAgentRequest(body)) {\n      return c.json({\n        ok: false,\n        error: { code: 'BAD_REQUEST', message: 'Missing required field: message or attachments' }\n      }, 400);\n    }\n\n    const { message, channel = 'webchat', attachments, thinking } = body;\n    const clientCreatedAtMs =\n      typeof body.clientCreatedAtMs === 'number' && Number.isFinite(body.clientCreatedAtMs)\n        ? body.clientCreatedAtMs\n        : undefined;\n    const resolved = resolveWebchatSessionKey({\n      sessionKey: typeof body.sessionKey === 'string' ? body.sessionKey : undefined,\n    });\n    if (resolved.ok === false) {\n      return c.json({\n        ok: false,\n        error: { code: 'BAD_REQUEST', message: resolved.error },\n      }, 400);\n    }\n    const chatId = resolved.sessionKey;\n\n    updateAsyncLogContext({ sessionKey: String(chatId) });\n\n    if (Array.isArray(attachments)) {\n      const maxDataChars = maxBase64CharsForBinary(MAX_WEBCHAT_ATTACHMENT_FILE_BYTES);\n      for (const a of attachments) {\n        if (!a || typeof a !== 'object') continue;\n        const data = (a as { data?: unknown }).data;\n        if (typeof data === 'string' && data.length > maxDataChars) {\n          return c.json(\n            {\n              ok: false,\n              error: {\n                code: 'BAD_REQUEST',\n                message: `Attachment exceeds maximum size (${MAX_WEBCHAT_ATTACHMENT_FILE_BYTES} bytes)`,\n              },\n            },\n            400,\n          );\n        }\n      }\n    }\n\n    const accept = c.req.header('Accept') || '';\n    const wantSSE = accept.includes('text/event-stream');\n\n    const clientAbort = new AbortController();\n    const raw = c.req.raw;\n    // Keep webchat runs alive across transient disconnects (page refresh / tab route switch)\n    // so the client can reattach via /api/agent/resume using runId from `run_start`.\n    // Explicit cancellation still goes through /api/agent/abort.\n    if (channel !== 'webchat') {\n      if (raw.signal.aborted) {\n        clientAbort.abort();\n      } else {\n        raw.signal.addEventListener('abort', () => clientAbort.abort(), { once: true });\n      }\n    }\n\n    // --- Non-streaming fallback: collect everything, return JSON ---\n    if (!wantSSE) {\n      const jsonSessionKey = channel === 'webchat' ? chatId : undefined;\n\n      const generator = service.runAgent(message, channel, chatId, attachments, thinking, {\n        signal: clientAbort.signal,\n        ...(clientCreatedAtMs !== undefined ? { clientCreatedAtMs } : {}),\n      });\n      try {\n        let finalResult: { status: string; summary: string } | undefined;\n        const tokens: string[] = [];\n\n        while (true) {\n          const { done, value } = await generator.next();\n          if (done) {\n            finalResult = value as { status: string; summary: string };\n            break;\n          }\n          const chunk = value as { type: string; payload?: { delta?: unknown } };\n          if (chunk.type === 'assistant_delta' && typeof chunk.payload?.delta === 'string') {\n            tokens.push(chunk.payload.delta);\n          }\n        }\n\n        return c.json({\n          ok: true,\n          payload: {\n            ...finalResult,\n            content: tokens.join(''),\n            ...(jsonSessionKey !== undefined\n              ? { sessionKey: jsonSessionKey, key: jsonSessionKey }\n              : {}),\n          },\n        });\n      } catch (error) {\n        const em = error instanceof Error ? error.message : String(error);\n        log.error(\n          { err: error, errorMessage: em, phase: 'gateway.agent_run', sessionKey: jsonSessionKey, channel },\n          `Agent run failed (JSON mode): ${em}`,\n        );\n        return c.json({\n          ok: false,\n          error: { code: 'INTERNAL_ERROR', message: error instanceof Error ? error.message : 'Unknown error' },\n        }, 500);\n      }\n    }\n\n    // --- SSE streaming ---\n    c.header('X-Accel-Buffering', 'no');\n    return streamSSE(c, async (stream) => {\n      if (channel !== 'webchat') {\n        stream.onAbort(() => {\n          clientAbort.abort();\n        });\n      }\n\n      const generator = service.runAgent(message, channel, chatId, attachments, thinking, {\n        signal: clientAbort.signal,\n        ...(clientCreatedAtMs !== undefined ? { clientCreatedAtMs } : {}),\n      });\n\n      let eventId = 0;\n\n      try {\n        while (true) {\n          const { done, value } = await generator.next();\n\n          if (done) break;\n\n          const chunk = value as { type: string; seq?: unknown };\n          await stream.writeSSE({\n            id: typeof chunk.seq === 'number' ? String(chunk.seq) : String(++eventId),\n            event: chunk.type || 'message',\n            data: stringifySSEData(chunk),\n          });\n        }\n      } catch (error) {\n        log.error({ err: error }, 'Agent run failed (SSE mode)');\n        await stream.writeSSE({\n          id: String(++eventId),\n          event: 'error',\n          data: stringifySSEData({\n            type: 'error',\n            runId: 'unknown',\n            sessionKey: chatId,\n            timestamp: Date.now(),\n            payload: { code: 'INTERNAL_ERROR', message: error instanceof Error ? error.message : 'Unknown error' },\n          }),\n        });\n      }\n    });\n  };\n}\n\n/**\n * POST /api/agent/resume — Re-attach to an in-progress agent run via SSE.\n *\n * Request body: { runId, sessionKey }\n * The relay replays all buffered events from the beginning and then live-tails\n * until the run completes.\n *\n * SSE events are identical to those from POST /api/agent.\n */\nexport function createAgentResumeHandler(config: SSEHandlerConfig) {\n  const { service } = config;\n\n  return async (c: Context) => {\n    const body = await c.req.json().catch(() => null);\n    if (!body || typeof body !== 'object') {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Invalid JSON body' } }, 400);\n    }\n\n    const { runId, sessionKey } = body as { runId?: string; sessionKey?: string };\n    if (typeof sessionKey === 'string' && sessionKey.trim()) {\n      updateAsyncLogContext({ sessionKey: sessionKey.trim() });\n    }\n    if (!runId || typeof runId !== 'string') {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing required field: runId' } }, 400);\n    }\n\n    if (!service.runRelay.hasRun(runId)) {\n      return c.json({ ok: false, error: { code: 'NOT_FOUND', message: 'Run not found or already expired' } }, 404);\n    }\n\n    c.header('X-Accel-Buffering', 'no');\n    return streamSSE(c, async (stream) => {\n      let eventId = 0;\n      try {\n        for await (const event of service.runRelay.subscribe(runId)) {\n          await stream.writeSSE({\n            id: typeof event.seq === 'number' ? String(event.seq) : String(++eventId),\n            event: event.type || 'message',\n            data: stringifySSEData(event),\n          });\n        }\n      } catch (error) {\n        log.error({ err: error, runId }, 'Resume stream failed');\n        await stream.writeSSE({\n          id: String(++eventId),\n          event: 'error',\n          data: stringifySSEData({\n            type: 'error',\n            runId,\n            sessionKey: typeof sessionKey === 'string' ? sessionKey : '',\n            timestamp: Date.now(),\n            payload: { code: 'INTERNAL_ERROR', message: error instanceof Error ? error.message : 'Unknown error' },\n          }),\n        });\n      }\n    });\n  };\n}\n\n/**\n * POST /api/send — Send a message through a channel (non-streaming).\n */\nexport function createSendHandler(config: SSEHandlerConfig) {\n  const { service } = config;\n\n  return async (c: Context) => {\n    const body = await c.req.json().catch(() => ({}));\n    const channel = body.channel as string;\n    const chatId = body.chatId as string;\n    const content = body.content as string;\n\n    if (!channel || !chatId || !content) {\n      return c.json(\n        { ok: false, error: { code: 'BAD_REQUEST', message: 'Missing required fields: channel, chatId, content' } },\n        400,\n      );\n    }\n\n    try {\n      const result = await service.sendMessage(channel, chatId, content);\n      return c.json({ ok: true, payload: result });\n    } catch (error) {\n      log.error({ err: error }, 'Send failed');\n      return c.json(\n        { ok: false, error: { code: 'INTERNAL_ERROR', message: error instanceof Error ? error.message : 'Unknown error' } },\n        500,\n      );\n    }\n  };\n}\n\n/**\n * GET /api/events — Server-pushed event stream (SSE).\n *\n * The client opens this long-lived connection to receive:\n *   - channel status changes\n *   - config reload notifications\n *   - cron execution results\n *   - any other server-initiated events\n *\n * Supports Last-Event-ID for reconnection.\n * Enforces maximum connection limit to prevent DoS.\n */\nexport function createEventsSSEHandler(config: SSEHandlerConfig) {\n  const { service } = config;\n  const maxConnections = config.maxSseConnections ?? 100;\n\n  return async (c: Context) => {\n    // Check maximum connections limit\n    if (activeConnections.size >= maxConnections) {\n      log.warn({ current: activeConnections.size, max: maxConnections }, 'SSE connection limit reached');\n      return c.json({\n        ok: false,\n        error: { code: 'TOO_MANY_CONNECTIONS', message: 'Maximum SSE connections exceeded' }\n      }, 503);\n    }\n\n    const lastEventId = c.req.header('Last-Event-ID') || undefined;\n    const sessionId = c.req.header('X-Session-Id')\n      || c.req.query('sessionId')\n      || crypto.randomUUID();\n\n    updateAsyncLogContext({ sessionId: String(sessionId) });\n\n    const abortController = new AbortController();\n    activeConnections.set(sessionId, abortController);\n\n    return streamSSE(c, async (stream) => {\n      let aborted = false;\n\n      // Send a hello event so the client knows the stream is established\n      await stream.writeSSE({\n        id: '0',\n        event: 'connected',\n        data: JSON.stringify({ sessionId }),\n      });\n\n      // Subscribe to service events\n      const cleanup = service.subscribe(sessionId, async (event) => {\n        if (aborted) return;\n        try {\n          await stream.writeSSE({\n            id: event.id,\n            event: event.type,\n            data: JSON.stringify(event.payload),\n          });\n        } catch {\n          // Stream closed, will be cleaned up by onAbort\n        }\n      });\n\n      // Replay missed events on reconnect\n      if (lastEventId) {\n        const missed = service.getEventsSince(sessionId, lastEventId);\n        for (const event of missed) {\n          await stream.writeSSE({\n            id: event.id,\n            event: event.type,\n            data: JSON.stringify(event.payload),\n          });\n        }\n      }\n\n      // Keep alive with periodic comments (every 30s)\n      const keepAlive = setInterval(async () => {\n        if (aborted) { clearInterval(keepAlive); return; }\n        try {\n          await stream.writeSSE({ event: 'ping', data: '' });\n        } catch {\n          clearInterval(keepAlive);\n        }\n      }, 30_000);\n\n      // Block until aborted — streamSSE closes when the callback returns\n      await new Promise<void>((resolve) => {\n        stream.onAbort(() => {\n          aborted = true;\n          clearInterval(keepAlive);\n          cleanup();\n          activeConnections.delete(sessionId);\n          log.debug({ sessionId }, 'Event stream disconnected');\n          resolve();\n        });\n      });\n    });\n  };\n}\n"],"mappings":";;;;;;;;aAI4E;AAK5E,MAAM,MAAM,aAAa,cAAc;AAGvC,MAAM,oCAAoB,IAAI,KAA8B;AAkB5D,SAAS,oBAAoB,MAAyC;AACpE,KAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;CAC9C,MAAM,IAAI;CAEV,MAAM,aAAa,OAAO,EAAE,YAAY;CACxC,MAAM,iBAAiB,MAAM,QAAQ,EAAE,YAAY,IAAI,EAAE,YAAY,SAAS;AAC9E,QAAO,cAAc;;;AAIvB,SAAS,wBAAwB,gBAAgC;AAC/D,QAAO,IAAI,KAAK,KAAK,iBAAiB,EAAE;;;;;;;;;;;;;;;AAgB1C,SAAgB,sBAAsB,QAA0B;CAC9D,MAAM,EAAE,YAAY;AAEpB,QAAO,OAAO,MAAe;EAC3B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,KAAK;AAGjD,MAAI,CAAC,oBAAoB,KAAK,CAC5B,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,OAAO;IAAE,MAAM;IAAe,SAAS;IAAkD;GAC1F,EAAE,IAAI;EAGT,MAAM,EAAE,SAAS,UAAU,WAAW,aAAa,aAAa;EAChE,MAAM,oBACJ,OAAO,KAAK,sBAAsB,YAAY,OAAO,SAAS,KAAK,kBAAkB,GACjF,KAAK,oBACL,KAAA;EACN,MAAM,WAAW,yBAAyB,EACxC,YAAY,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa,KAAA,GACrE,CAAC;AACF,MAAI,SAAS,OAAO,MAClB,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,OAAO;IAAE,MAAM;IAAe,SAAS,SAAS;IAAO;GACxD,EAAE,IAAI;EAET,MAAM,SAAS,SAAS;AAExB,wBAAsB,EAAE,YAAY,OAAO,OAAO,EAAE,CAAC;AAErD,MAAI,MAAM,QAAQ,YAAY,EAAE;GAC9B,MAAM,eAAe,wBAAwB,kCAAkC;AAC/E,QAAK,MAAM,KAAK,aAAa;AAC3B,QAAI,CAAC,KAAK,OAAO,MAAM,SAAU;IACjC,MAAM,OAAQ,EAAyB;AACvC,QAAI,OAAO,SAAS,YAAY,KAAK,SAAS,aAC5C,QAAO,EAAE,KACP;KACE,IAAI;KACJ,OAAO;MACL,MAAM;MACN,SAAS,oCAAoC,kCAAkC;MAChF;KACF,EACD,IACD;;;EAMP,MAAM,WADS,EAAE,IAAI,OAAO,SAAS,IAAI,IAClB,SAAS,oBAAoB;EAEpD,MAAM,cAAc,IAAI,iBAAiB;EACzC,MAAM,MAAM,EAAE,IAAI;AAIlB,MAAI,YAAY,UACd,KAAI,IAAI,OAAO,QACb,aAAY,OAAO;MAEnB,KAAI,OAAO,iBAAiB,eAAe,YAAY,OAAO,EAAE,EAAE,MAAM,MAAM,CAAC;AAKnF,MAAI,CAAC,SAAS;GACZ,MAAM,iBAAiB,YAAY,YAAY,SAAS,KAAA;GAExD,MAAM,YAAY,QAAQ,SAAS,SAAS,SAAS,QAAQ,aAAa,UAAU;IAClF,QAAQ,YAAY;IACpB,GAAI,sBAAsB,KAAA,IAAY,EAAE,mBAAmB,GAAG,EAAE;IACjE,CAAC;AACF,OAAI;IACF,IAAI;IACJ,MAAM,SAAmB,EAAE;AAE3B,WAAO,MAAM;KACX,MAAM,EAAE,MAAM,UAAU,MAAM,UAAU,MAAM;AAC9C,SAAI,MAAM;AACR,oBAAc;AACd;;KAEF,MAAM,QAAQ;AACd,SAAI,MAAM,SAAS,qBAAqB,OAAO,MAAM,SAAS,UAAU,SACtE,QAAO,KAAK,MAAM,QAAQ,MAAM;;AAIpC,WAAO,EAAE,KAAK;KACZ,IAAI;KACJ,SAAS;MACP,GAAG;MACH,SAAS,OAAO,KAAK,GAAG;MACxB,GAAI,mBAAmB,KAAA,IACnB;OAAE,YAAY;OAAgB,KAAK;OAAgB,GACnD,EAAE;MACP;KACF,CAAC;YACK,OAAO;IACd,MAAM,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACjE,QAAI,MACF;KAAE,KAAK;KAAO,cAAc;KAAI,OAAO;KAAqB,YAAY;KAAgB;KAAS,EACjG,iCAAiC,KAClC;AACD,WAAO,EAAE,KAAK;KACZ,IAAI;KACJ,OAAO;MAAE,MAAM;MAAkB,SAAS,iBAAiB,QAAQ,MAAM,UAAU;MAAiB;KACrG,EAAE,IAAI;;;AAKX,IAAE,OAAO,qBAAqB,KAAK;AACnC,SAAO,UAAU,GAAG,OAAO,WAAW;AACpC,OAAI,YAAY,UACd,QAAO,cAAc;AACnB,gBAAY,OAAO;KACnB;GAGJ,MAAM,YAAY,QAAQ,SAAS,SAAS,SAAS,QAAQ,aAAa,UAAU;IAClF,QAAQ,YAAY;IACpB,GAAI,sBAAsB,KAAA,IAAY,EAAE,mBAAmB,GAAG,EAAE;IACjE,CAAC;GAEF,IAAI,UAAU;AAEd,OAAI;AACF,WAAO,MAAM;KACX,MAAM,EAAE,MAAM,UAAU,MAAM,UAAU,MAAM;AAE9C,SAAI,KAAM;KAEV,MAAM,QAAQ;AACd,WAAM,OAAO,SAAS;MACpB,IAAI,OAAO,MAAM,QAAQ,WAAW,OAAO,MAAM,IAAI,GAAG,OAAO,EAAE,QAAQ;MACzE,OAAO,MAAM,QAAQ;MACrB,MAAM,iBAAiB,MAAM;MAC9B,CAAC;;YAEG,OAAO;AACd,QAAI,MAAM,EAAE,KAAK,OAAO,EAAE,8BAA8B;AACxD,UAAM,OAAO,SAAS;KACpB,IAAI,OAAO,EAAE,QAAQ;KACrB,OAAO;KACP,MAAM,iBAAiB;MACrB,MAAM;MACN,OAAO;MACP,YAAY;MACZ,WAAW,KAAK,KAAK;MACrB,SAAS;OAAE,MAAM;OAAkB,SAAS,iBAAiB,QAAQ,MAAM,UAAU;OAAiB;MACvG,CAAC;KACH,CAAC;;IAEJ;;;;;;;;;;;;AAaN,SAAgB,yBAAyB,QAA0B;CACjE,MAAM,EAAE,YAAY;AAEpB,QAAO,OAAO,MAAe;EAC3B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,KAAK;AACjD,MAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAqB;GAAE,EAAE,IAAI;EAGjG,MAAM,EAAE,OAAO,eAAe;AAC9B,MAAI,OAAO,eAAe,YAAY,WAAW,MAAM,CACrD,uBAAsB,EAAE,YAAY,WAAW,MAAM,EAAE,CAAC;AAE1D,MAAI,CAAC,SAAS,OAAO,UAAU,SAC7B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAiC;GAAE,EAAE,IAAI;AAG7G,MAAI,CAAC,QAAQ,SAAS,OAAO,MAAM,CACjC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAa,SAAS;IAAoC;GAAE,EAAE,IAAI;AAG9G,IAAE,OAAO,qBAAqB,KAAK;AACnC,SAAO,UAAU,GAAG,OAAO,WAAW;GACpC,IAAI,UAAU;AACd,OAAI;AACF,eAAW,MAAM,SAAS,QAAQ,SAAS,UAAU,MAAM,CACzD,OAAM,OAAO,SAAS;KACpB,IAAI,OAAO,MAAM,QAAQ,WAAW,OAAO,MAAM,IAAI,GAAG,OAAO,EAAE,QAAQ;KACzE,OAAO,MAAM,QAAQ;KACrB,MAAM,iBAAiB,MAAM;KAC9B,CAAC;YAEG,OAAO;AACd,QAAI,MAAM;KAAE,KAAK;KAAO;KAAO,EAAE,uBAAuB;AACxD,UAAM,OAAO,SAAS;KACpB,IAAI,OAAO,EAAE,QAAQ;KACrB,OAAO;KACP,MAAM,iBAAiB;MACrB,MAAM;MACN;MACA,YAAY,OAAO,eAAe,WAAW,aAAa;MAC1D,WAAW,KAAK,KAAK;MACrB,SAAS;OAAE,MAAM;OAAkB,SAAS,iBAAiB,QAAQ,MAAM,UAAU;OAAiB;MACvG,CAAC;KACH,CAAC;;IAEJ;;;;;;AAON,SAAgB,kBAAkB,QAA0B;CAC1D,MAAM,EAAE,YAAY;AAEpB,QAAO,OAAO,MAAe;EAC3B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,UAAU,KAAK;EACrB,MAAM,SAAS,KAAK;EACpB,MAAM,UAAU,KAAK;AAErB,MAAI,CAAC,WAAW,CAAC,UAAU,CAAC,QAC1B,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAqD;GAAE,EAC3G,IACD;AAGH,MAAI;GACF,MAAM,SAAS,MAAM,QAAQ,YAAY,SAAS,QAAQ,QAAQ;AAClE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,OAAO;AACd,OAAI,MAAM,EAAE,KAAK,OAAO,EAAE,cAAc;AACxC,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO;KAAE,MAAM;KAAkB,SAAS,iBAAiB,QAAQ,MAAM,UAAU;KAAiB;IAAE,EACnH,IACD;;;;;;;;;;;;;;;;AAiBP,SAAgB,uBAAuB,QAA0B;CAC/D,MAAM,EAAE,YAAY;CACpB,MAAM,iBAAiB,OAAO,qBAAqB;AAEnD,QAAO,OAAO,MAAe;AAE3B,MAAI,kBAAkB,QAAQ,gBAAgB;AAC5C,OAAI,KAAK;IAAE,SAAS,kBAAkB;IAAM,KAAK;IAAgB,EAAE,+BAA+B;AAClG,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,OAAO;KAAE,MAAM;KAAwB,SAAS;KAAoC;IACrF,EAAE,IAAI;;EAGT,MAAM,cAAc,EAAE,IAAI,OAAO,gBAAgB,IAAI,KAAA;EACrD,MAAM,YAAY,EAAE,IAAI,OAAO,eAAe,IACzC,EAAE,IAAI,MAAM,YAAY,IACxB,OAAO,YAAY;AAExB,wBAAsB,EAAE,WAAW,OAAO,UAAU,EAAE,CAAC;EAEvD,MAAM,kBAAkB,IAAI,iBAAiB;AAC7C,oBAAkB,IAAI,WAAW,gBAAgB;AAEjD,SAAO,UAAU,GAAG,OAAO,WAAW;GACpC,IAAI,UAAU;AAGd,SAAM,OAAO,SAAS;IACpB,IAAI;IACJ,OAAO;IACP,MAAM,KAAK,UAAU,EAAE,WAAW,CAAC;IACpC,CAAC;GAGF,MAAM,UAAU,QAAQ,UAAU,WAAW,OAAO,UAAU;AAC5D,QAAI,QAAS;AACb,QAAI;AACF,WAAM,OAAO,SAAS;MACpB,IAAI,MAAM;MACV,OAAO,MAAM;MACb,MAAM,KAAK,UAAU,MAAM,QAAQ;MACpC,CAAC;YACI;KAGR;AAGF,OAAI,aAAa;IACf,MAAM,SAAS,QAAQ,eAAe,WAAW,YAAY;AAC7D,SAAK,MAAM,SAAS,OAClB,OAAM,OAAO,SAAS;KACpB,IAAI,MAAM;KACV,OAAO,MAAM;KACb,MAAM,KAAK,UAAU,MAAM,QAAQ;KACpC,CAAC;;GAKN,MAAM,YAAY,YAAY,YAAY;AACxC,QAAI,SAAS;AAAE,mBAAc,UAAU;AAAE;;AACzC,QAAI;AACF,WAAM,OAAO,SAAS;MAAE,OAAO;MAAQ,MAAM;MAAI,CAAC;YAC5C;AACN,mBAAc,UAAU;;MAEzB,IAAO;AAGV,SAAM,IAAI,SAAe,YAAY;AACnC,WAAO,cAAc;AACnB,eAAU;AACV,mBAAc,UAAU;AACxB,cAAS;AACT,uBAAkB,OAAO,UAAU;AACnC,SAAI,MAAM,EAAE,WAAW,EAAE,4BAA4B;AACrD,cAAS;MACT;KACF;IACF"}
+{"version":3,"file":"sse.js","names":[],"sources":["../../../../src/gateway/hono/sse.ts"],"sourcesContent":["import { streamSSE } from 'hono/streaming';\nimport type { Context } from 'hono';\nimport type { GatewayService } from '../service.js';\nimport { MAX_WEBCHAT_ATTACHMENT_FILE_BYTES } from '../chat-limits.js';\nimport { createLogger, updateAsyncLogContext } from '../../utils/logger.js';\nimport { stringifySSEData } from './sse-json.js';\nimport { resolveWebchatSessionKey } from '../resolve-webchat-session-key.js';\nimport type { UserTurnAttachment } from '../user-turn-input.js';\n\nconst log = createLogger('Gateway:SSE');\n\n// Active SSE connections tracking for connection limiting\nconst activeConnections = new Map<string, AbortController>();\n\nexport interface SSEHandlerConfig {\n  service: GatewayService;\n  maxSseConnections?: number;\n}\n\n// Type validation for agent request body\ninterface AgentRequestBody {\n  message: string;\n  channel?: string;\n  sessionKey?: string;\n  /** Epoch ms when the client started this send (abort cutoff / stale POST drop). */\n  clientCreatedAtMs?: number;\n  thinking?: string;\n  attachments?: UserTurnAttachment[];\n}\n\nfunction isValidAgentRequest(body: unknown): body is AgentRequestBody {\n  if (!body || typeof body !== 'object') return false;\n  const b = body as Record<string, unknown>;\n  // Allow empty message if attachments are provided\n  const hasMessage = typeof b.message === 'string';\n  const hasAttachments = Array.isArray(b.attachments) && b.attachments.length > 0;\n  return hasMessage || hasAttachments;\n}\n\n/** Max base64 character length that can decode to `MAX_WEBCHAT_ATTACHMENT_FILE_BYTES`. */\nfunction maxBase64CharsForBinary(maxBinaryBytes: number): number {\n  return 4 * Math.ceil(maxBinaryBytes / 3);\n}\n\n/**\n * POST /api/agent — Send a message to the agent, stream response via SSE.\n *\n * Request body: { message, channel?, sessionKey, attachments? }\n * Accept: text/event-stream → SSE stream\n * Accept: application/json → wait for full response, return JSON\n *\n * SSE events follow XOPC Chat Stream Protocol v1:\n *   run_start, user_message, user_transcript, assistant_message_start,\n *   assistant_delta, thinking_delta, thinking_end, tool_start, tool_update,\n *   tool_end, review_start, review_delta, review_end, assistant_message_end,\n *   compaction, tts_audio, clarify_request,\n *   run_end, error.\n */\nexport function createAgentSSEHandler(config: SSEHandlerConfig) {\n  const { service } = config;\n\n  return async (c: Context) => {\n    const body = await c.req.json().catch(() => null);\n\n    // Input validation\n    if (!isValidAgentRequest(body)) {\n      return c.json({\n        ok: false,\n        error: { code: 'BAD_REQUEST', message: 'Missing required field: message or attachments' }\n      }, 400);\n    }\n\n    const { message, channel = 'webchat', attachments, thinking } = body;\n    const clientCreatedAtMs =\n      typeof body.clientCreatedAtMs === 'number' && Number.isFinite(body.clientCreatedAtMs)\n        ? body.clientCreatedAtMs\n        : undefined;\n    const resolved = resolveWebchatSessionKey({\n      sessionKey: typeof body.sessionKey === 'string' ? body.sessionKey : undefined,\n    });\n    if (resolved.ok === false) {\n      return c.json({\n        ok: false,\n        error: { code: 'BAD_REQUEST', message: resolved.error },\n      }, 400);\n    }\n    const chatId = resolved.sessionKey;\n\n    updateAsyncLogContext({ sessionKey: String(chatId) });\n\n    if (Array.isArray(attachments)) {\n      const maxDataChars = maxBase64CharsForBinary(MAX_WEBCHAT_ATTACHMENT_FILE_BYTES);\n      for (const a of attachments) {\n        if (!a || typeof a !== 'object') continue;\n        const data = (a as { data?: unknown }).data;\n        if (typeof data === 'string' && data.length > maxDataChars) {\n          return c.json(\n            {\n              ok: false,\n              error: {\n                code: 'BAD_REQUEST',\n                message: `Attachment exceeds maximum size (${MAX_WEBCHAT_ATTACHMENT_FILE_BYTES} bytes)`,\n              },\n            },\n            400,\n          );\n        }\n      }\n    }\n\n    const accept = c.req.header('Accept') || '';\n    const wantSSE = accept.includes('text/event-stream');\n\n    const clientAbort = new AbortController();\n    const raw = c.req.raw;\n    // Keep webchat runs alive across transient disconnects (page refresh / tab route switch)\n    // so the client can reattach via /api/agent/resume using runId from `run_start`.\n    // Explicit cancellation still goes through /api/agent/abort.\n    if (channel !== 'webchat') {\n      if (raw.signal.aborted) {\n        clientAbort.abort();\n      } else {\n        raw.signal.addEventListener('abort', () => clientAbort.abort(), { once: true });\n      }\n    }\n\n    // --- Non-streaming fallback: collect everything, return JSON ---\n    if (!wantSSE) {\n      const jsonSessionKey = channel === 'webchat' ? chatId : undefined;\n\n      const generator = service.runAgent(message, channel, chatId, attachments, thinking, {\n        signal: clientAbort.signal,\n        ...(clientCreatedAtMs !== undefined ? { clientCreatedAtMs } : {}),\n      });\n      try {\n        let finalResult: { status: string; summary: string } | undefined;\n        const tokens: string[] = [];\n\n        while (true) {\n          const { done, value } = await generator.next();\n          if (done) {\n            finalResult = value as { status: string; summary: string };\n            break;\n          }\n          const chunk = value as { type: string; payload?: { delta?: unknown } };\n          if (chunk.type === 'assistant_delta' && typeof chunk.payload?.delta === 'string') {\n            tokens.push(chunk.payload.delta);\n          }\n        }\n\n        return c.json({\n          ok: true,\n          payload: {\n            ...finalResult,\n            content: tokens.join(''),\n            ...(jsonSessionKey !== undefined\n              ? { sessionKey: jsonSessionKey, key: jsonSessionKey }\n              : {}),\n          },\n        });\n      } catch (error) {\n        const em = error instanceof Error ? error.message : String(error);\n        log.error(\n          { err: error, errorMessage: em, phase: 'gateway.agent_run', sessionKey: jsonSessionKey, channel },\n          `Agent run failed (JSON mode): ${em}`,\n        );\n        return c.json({\n          ok: false,\n          error: { code: 'INTERNAL_ERROR', message: error instanceof Error ? error.message : 'Unknown error' },\n        }, 500);\n      }\n    }\n\n    // --- SSE streaming ---\n    c.header('X-Accel-Buffering', 'no');\n    return streamSSE(c, async (stream) => {\n      if (channel !== 'webchat') {\n        stream.onAbort(() => {\n          clientAbort.abort();\n        });\n      }\n\n      const generator = service.runAgent(message, channel, chatId, attachments, thinking, {\n        signal: clientAbort.signal,\n        ...(clientCreatedAtMs !== undefined ? { clientCreatedAtMs } : {}),\n      });\n\n      let eventId = 0;\n\n      try {\n        while (true) {\n          const { done, value } = await generator.next();\n\n          if (done) break;\n\n          const chunk = value as { type: string; seq?: unknown };\n          await stream.writeSSE({\n            id: typeof chunk.seq === 'number' ? String(chunk.seq) : String(++eventId),\n            event: chunk.type || 'message',\n            data: stringifySSEData(chunk),\n          });\n        }\n      } catch (error) {\n        log.error({ err: error }, 'Agent run failed (SSE mode)');\n        await stream.writeSSE({\n          id: String(++eventId),\n          event: 'error',\n          data: stringifySSEData({\n            type: 'error',\n            runId: 'unknown',\n            sessionKey: chatId,\n            timestamp: Date.now(),\n            payload: { code: 'INTERNAL_ERROR', message: error instanceof Error ? error.message : 'Unknown error' },\n          }),\n        });\n      }\n    });\n  };\n}\n\n/**\n * POST /api/agent/resume — Re-attach to an in-progress agent run via SSE.\n *\n * Request body: { runId, sessionKey }\n * The relay replays all buffered events from the beginning and then live-tails\n * until the run completes.\n *\n * SSE events are identical to those from POST /api/agent.\n */\nexport function createAgentResumeHandler(config: SSEHandlerConfig) {\n  const { service } = config;\n\n  return async (c: Context) => {\n    const body = await c.req.json().catch(() => null);\n    if (!body || typeof body !== 'object') {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Invalid JSON body' } }, 400);\n    }\n\n    const { runId, sessionKey } = body as { runId?: string; sessionKey?: string };\n    if (typeof sessionKey === 'string' && sessionKey.trim()) {\n      updateAsyncLogContext({ sessionKey: sessionKey.trim() });\n    }\n    if (!runId || typeof runId !== 'string') {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing required field: runId' } }, 400);\n    }\n\n    if (!service.runRelay.hasRun(runId)) {\n      return c.json({ ok: false, error: { code: 'NOT_FOUND', message: 'Run not found or already expired' } }, 404);\n    }\n\n    c.header('X-Accel-Buffering', 'no');\n    return streamSSE(c, async (stream) => {\n      let eventId = 0;\n      try {\n        for await (const event of service.runRelay.subscribe(runId)) {\n          await stream.writeSSE({\n            id: typeof event.seq === 'number' ? String(event.seq) : String(++eventId),\n            event: event.type || 'message',\n            data: stringifySSEData(event),\n          });\n        }\n      } catch (error) {\n        log.error({ err: error, runId }, 'Resume stream failed');\n        await stream.writeSSE({\n          id: String(++eventId),\n          event: 'error',\n          data: stringifySSEData({\n            type: 'error',\n            runId,\n            sessionKey: typeof sessionKey === 'string' ? sessionKey : '',\n            timestamp: Date.now(),\n            payload: { code: 'INTERNAL_ERROR', message: error instanceof Error ? error.message : 'Unknown error' },\n          }),\n        });\n      }\n    });\n  };\n}\n\n/**\n * POST /api/send — Send a message through a channel (non-streaming).\n */\nexport function createSendHandler(config: SSEHandlerConfig) {\n  const { service } = config;\n\n  return async (c: Context) => {\n    const body = await c.req.json().catch(() => ({}));\n    const channel = body.channel as string;\n    const chatId = body.chatId as string;\n    const content = body.content as string;\n\n    if (!channel || !chatId || !content) {\n      return c.json(\n        { ok: false, error: { code: 'BAD_REQUEST', message: 'Missing required fields: channel, chatId, content' } },\n        400,\n      );\n    }\n\n    try {\n      const result = await service.sendMessage(channel, chatId, content);\n      return c.json({ ok: true, payload: result });\n    } catch (error) {\n      log.error({ err: error }, 'Send failed');\n      return c.json(\n        { ok: false, error: { code: 'INTERNAL_ERROR', message: error instanceof Error ? error.message : 'Unknown error' } },\n        500,\n      );\n    }\n  };\n}\n\n/**\n * GET /api/events — Server-pushed event stream (SSE).\n *\n * The client opens this long-lived connection to receive:\n *   - channel status changes\n *   - config reload notifications\n *   - cron execution results\n *   - any other server-initiated events\n *\n * Supports Last-Event-ID for reconnection.\n * Enforces maximum connection limit to prevent DoS.\n */\nexport function createEventsSSEHandler(config: SSEHandlerConfig) {\n  const { service } = config;\n  const maxConnections = config.maxSseConnections ?? 100;\n\n  return async (c: Context) => {\n    // Check maximum connections limit\n    if (activeConnections.size >= maxConnections) {\n      log.warn({ current: activeConnections.size, max: maxConnections }, 'SSE connection limit reached');\n      return c.json({\n        ok: false,\n        error: { code: 'TOO_MANY_CONNECTIONS', message: 'Maximum SSE connections exceeded' }\n      }, 503);\n    }\n\n    const lastEventId = c.req.header('Last-Event-ID') || undefined;\n    const sessionId = c.req.header('X-Session-Id')\n      || c.req.query('sessionId')\n      || crypto.randomUUID();\n\n    updateAsyncLogContext({ sessionId: String(sessionId) });\n\n    const abortController = new AbortController();\n    activeConnections.set(sessionId, abortController);\n\n    return streamSSE(c, async (stream) => {\n      let aborted = false;\n\n      // Send a hello event so the client knows the stream is established\n      await stream.writeSSE({\n        id: '0',\n        event: 'connected',\n        data: JSON.stringify({ sessionId }),\n      });\n\n      // Subscribe to service events\n      const cleanup = service.subscribe(sessionId, async (event) => {\n        if (aborted) return;\n        try {\n          await stream.writeSSE({\n            id: event.id,\n            event: event.type,\n            data: JSON.stringify(event.payload),\n          });\n        } catch {\n          // Stream closed, will be cleaned up by onAbort\n        }\n      });\n\n      // Replay missed events on reconnect\n      if (lastEventId) {\n        const missed = service.getEventsSince(sessionId, lastEventId);\n        for (const event of missed) {\n          await stream.writeSSE({\n            id: event.id,\n            event: event.type,\n            data: JSON.stringify(event.payload),\n          });\n        }\n      }\n\n      // Keep alive with periodic comments (every 30s)\n      const keepAlive = setInterval(async () => {\n        if (aborted) { clearInterval(keepAlive); return; }\n        try {\n          await stream.writeSSE({ event: 'ping', data: '' });\n        } catch {\n          clearInterval(keepAlive);\n        }\n      }, 30_000);\n\n      // Block until aborted — streamSSE closes when the callback returns\n      await new Promise<void>((resolve) => {\n        stream.onAbort(() => {\n          aborted = true;\n          clearInterval(keepAlive);\n          cleanup();\n          activeConnections.delete(sessionId);\n          log.debug({ sessionId }, 'Event stream disconnected');\n          resolve();\n        });\n      });\n    });\n  };\n}\n"],"mappings":";;;;;;;;aAI4E;AAK5E,MAAM,MAAM,aAAa,cAAc;AAGvC,MAAM,oCAAoB,IAAI,KAA8B;AAkB5D,SAAS,oBAAoB,MAAyC;AACpE,KAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;CAC9C,MAAM,IAAI;CAEV,MAAM,aAAa,OAAO,EAAE,YAAY;CACxC,MAAM,iBAAiB,MAAM,QAAQ,EAAE,YAAY,IAAI,EAAE,YAAY,SAAS;AAC9E,QAAO,cAAc;;;AAIvB,SAAS,wBAAwB,gBAAgC;AAC/D,QAAO,IAAI,KAAK,KAAK,iBAAiB,EAAE;;;;;;;;;;;;;;;;AAiB1C,SAAgB,sBAAsB,QAA0B;CAC9D,MAAM,EAAE,YAAY;AAEpB,QAAO,OAAO,MAAe;EAC3B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,KAAK;AAGjD,MAAI,CAAC,oBAAoB,KAAK,CAC5B,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,OAAO;IAAE,MAAM;IAAe,SAAS;IAAkD;GAC1F,EAAE,IAAI;EAGT,MAAM,EAAE,SAAS,UAAU,WAAW,aAAa,aAAa;EAChE,MAAM,oBACJ,OAAO,KAAK,sBAAsB,YAAY,OAAO,SAAS,KAAK,kBAAkB,GACjF,KAAK,oBACL,KAAA;EACN,MAAM,WAAW,yBAAyB,EACxC,YAAY,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa,KAAA,GACrE,CAAC;AACF,MAAI,SAAS,OAAO,MAClB,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,OAAO;IAAE,MAAM;IAAe,SAAS,SAAS;IAAO;GACxD,EAAE,IAAI;EAET,MAAM,SAAS,SAAS;AAExB,wBAAsB,EAAE,YAAY,OAAO,OAAO,EAAE,CAAC;AAErD,MAAI,MAAM,QAAQ,YAAY,EAAE;GAC9B,MAAM,eAAe,wBAAwB,kCAAkC;AAC/E,QAAK,MAAM,KAAK,aAAa;AAC3B,QAAI,CAAC,KAAK,OAAO,MAAM,SAAU;IACjC,MAAM,OAAQ,EAAyB;AACvC,QAAI,OAAO,SAAS,YAAY,KAAK,SAAS,aAC5C,QAAO,EAAE,KACP;KACE,IAAI;KACJ,OAAO;MACL,MAAM;MACN,SAAS,oCAAoC,kCAAkC;MAChF;KACF,EACD,IACD;;;EAMP,MAAM,WADS,EAAE,IAAI,OAAO,SAAS,IAAI,IAClB,SAAS,oBAAoB;EAEpD,MAAM,cAAc,IAAI,iBAAiB;EACzC,MAAM,MAAM,EAAE,IAAI;AAIlB,MAAI,YAAY,UACd,KAAI,IAAI,OAAO,QACb,aAAY,OAAO;MAEnB,KAAI,OAAO,iBAAiB,eAAe,YAAY,OAAO,EAAE,EAAE,MAAM,MAAM,CAAC;AAKnF,MAAI,CAAC,SAAS;GACZ,MAAM,iBAAiB,YAAY,YAAY,SAAS,KAAA;GAExD,MAAM,YAAY,QAAQ,SAAS,SAAS,SAAS,QAAQ,aAAa,UAAU;IAClF,QAAQ,YAAY;IACpB,GAAI,sBAAsB,KAAA,IAAY,EAAE,mBAAmB,GAAG,EAAE;IACjE,CAAC;AACF,OAAI;IACF,IAAI;IACJ,MAAM,SAAmB,EAAE;AAE3B,WAAO,MAAM;KACX,MAAM,EAAE,MAAM,UAAU,MAAM,UAAU,MAAM;AAC9C,SAAI,MAAM;AACR,oBAAc;AACd;;KAEF,MAAM,QAAQ;AACd,SAAI,MAAM,SAAS,qBAAqB,OAAO,MAAM,SAAS,UAAU,SACtE,QAAO,KAAK,MAAM,QAAQ,MAAM;;AAIpC,WAAO,EAAE,KAAK;KACZ,IAAI;KACJ,SAAS;MACP,GAAG;MACH,SAAS,OAAO,KAAK,GAAG;MACxB,GAAI,mBAAmB,KAAA,IACnB;OAAE,YAAY;OAAgB,KAAK;OAAgB,GACnD,EAAE;MACP;KACF,CAAC;YACK,OAAO;IACd,MAAM,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACjE,QAAI,MACF;KAAE,KAAK;KAAO,cAAc;KAAI,OAAO;KAAqB,YAAY;KAAgB;KAAS,EACjG,iCAAiC,KAClC;AACD,WAAO,EAAE,KAAK;KACZ,IAAI;KACJ,OAAO;MAAE,MAAM;MAAkB,SAAS,iBAAiB,QAAQ,MAAM,UAAU;MAAiB;KACrG,EAAE,IAAI;;;AAKX,IAAE,OAAO,qBAAqB,KAAK;AACnC,SAAO,UAAU,GAAG,OAAO,WAAW;AACpC,OAAI,YAAY,UACd,QAAO,cAAc;AACnB,gBAAY,OAAO;KACnB;GAGJ,MAAM,YAAY,QAAQ,SAAS,SAAS,SAAS,QAAQ,aAAa,UAAU;IAClF,QAAQ,YAAY;IACpB,GAAI,sBAAsB,KAAA,IAAY,EAAE,mBAAmB,GAAG,EAAE;IACjE,CAAC;GAEF,IAAI,UAAU;AAEd,OAAI;AACF,WAAO,MAAM;KACX,MAAM,EAAE,MAAM,UAAU,MAAM,UAAU,MAAM;AAE9C,SAAI,KAAM;KAEV,MAAM,QAAQ;AACd,WAAM,OAAO,SAAS;MACpB,IAAI,OAAO,MAAM,QAAQ,WAAW,OAAO,MAAM,IAAI,GAAG,OAAO,EAAE,QAAQ;MACzE,OAAO,MAAM,QAAQ;MACrB,MAAM,iBAAiB,MAAM;MAC9B,CAAC;;YAEG,OAAO;AACd,QAAI,MAAM,EAAE,KAAK,OAAO,EAAE,8BAA8B;AACxD,UAAM,OAAO,SAAS;KACpB,IAAI,OAAO,EAAE,QAAQ;KACrB,OAAO;KACP,MAAM,iBAAiB;MACrB,MAAM;MACN,OAAO;MACP,YAAY;MACZ,WAAW,KAAK,KAAK;MACrB,SAAS;OAAE,MAAM;OAAkB,SAAS,iBAAiB,QAAQ,MAAM,UAAU;OAAiB;MACvG,CAAC;KACH,CAAC;;IAEJ;;;;;;;;;;;;AAaN,SAAgB,yBAAyB,QAA0B;CACjE,MAAM,EAAE,YAAY;AAEpB,QAAO,OAAO,MAAe;EAC3B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,KAAK;AACjD,MAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAqB;GAAE,EAAE,IAAI;EAGjG,MAAM,EAAE,OAAO,eAAe;AAC9B,MAAI,OAAO,eAAe,YAAY,WAAW,MAAM,CACrD,uBAAsB,EAAE,YAAY,WAAW,MAAM,EAAE,CAAC;AAE1D,MAAI,CAAC,SAAS,OAAO,UAAU,SAC7B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAiC;GAAE,EAAE,IAAI;AAG7G,MAAI,CAAC,QAAQ,SAAS,OAAO,MAAM,CACjC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAa,SAAS;IAAoC;GAAE,EAAE,IAAI;AAG9G,IAAE,OAAO,qBAAqB,KAAK;AACnC,SAAO,UAAU,GAAG,OAAO,WAAW;GACpC,IAAI,UAAU;AACd,OAAI;AACF,eAAW,MAAM,SAAS,QAAQ,SAAS,UAAU,MAAM,CACzD,OAAM,OAAO,SAAS;KACpB,IAAI,OAAO,MAAM,QAAQ,WAAW,OAAO,MAAM,IAAI,GAAG,OAAO,EAAE,QAAQ;KACzE,OAAO,MAAM,QAAQ;KACrB,MAAM,iBAAiB,MAAM;KAC9B,CAAC;YAEG,OAAO;AACd,QAAI,MAAM;KAAE,KAAK;KAAO;KAAO,EAAE,uBAAuB;AACxD,UAAM,OAAO,SAAS;KACpB,IAAI,OAAO,EAAE,QAAQ;KACrB,OAAO;KACP,MAAM,iBAAiB;MACrB,MAAM;MACN;MACA,YAAY,OAAO,eAAe,WAAW,aAAa;MAC1D,WAAW,KAAK,KAAK;MACrB,SAAS;OAAE,MAAM;OAAkB,SAAS,iBAAiB,QAAQ,MAAM,UAAU;OAAiB;MACvG,CAAC;KACH,CAAC;;IAEJ;;;;;;AAON,SAAgB,kBAAkB,QAA0B;CAC1D,MAAM,EAAE,YAAY;AAEpB,QAAO,OAAO,MAAe;EAC3B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,UAAU,KAAK;EACrB,MAAM,SAAS,KAAK;EACpB,MAAM,UAAU,KAAK;AAErB,MAAI,CAAC,WAAW,CAAC,UAAU,CAAC,QAC1B,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAqD;GAAE,EAC3G,IACD;AAGH,MAAI;GACF,MAAM,SAAS,MAAM,QAAQ,YAAY,SAAS,QAAQ,QAAQ;AAClE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,OAAO;AACd,OAAI,MAAM,EAAE,KAAK,OAAO,EAAE,cAAc;AACxC,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO;KAAE,MAAM;KAAkB,SAAS,iBAAiB,QAAQ,MAAM,UAAU;KAAiB;IAAE,EACnH,IACD;;;;;;;;;;;;;;;;AAiBP,SAAgB,uBAAuB,QAA0B;CAC/D,MAAM,EAAE,YAAY;CACpB,MAAM,iBAAiB,OAAO,qBAAqB;AAEnD,QAAO,OAAO,MAAe;AAE3B,MAAI,kBAAkB,QAAQ,gBAAgB;AAC5C,OAAI,KAAK;IAAE,SAAS,kBAAkB;IAAM,KAAK;IAAgB,EAAE,+BAA+B;AAClG,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,OAAO;KAAE,MAAM;KAAwB,SAAS;KAAoC;IACrF,EAAE,IAAI;;EAGT,MAAM,cAAc,EAAE,IAAI,OAAO,gBAAgB,IAAI,KAAA;EACrD,MAAM,YAAY,EAAE,IAAI,OAAO,eAAe,IACzC,EAAE,IAAI,MAAM,YAAY,IACxB,OAAO,YAAY;AAExB,wBAAsB,EAAE,WAAW,OAAO,UAAU,EAAE,CAAC;EAEvD,MAAM,kBAAkB,IAAI,iBAAiB;AAC7C,oBAAkB,IAAI,WAAW,gBAAgB;AAEjD,SAAO,UAAU,GAAG,OAAO,WAAW;GACpC,IAAI,UAAU;AAGd,SAAM,OAAO,SAAS;IACpB,IAAI;IACJ,OAAO;IACP,MAAM,KAAK,UAAU,EAAE,WAAW,CAAC;IACpC,CAAC;GAGF,MAAM,UAAU,QAAQ,UAAU,WAAW,OAAO,UAAU;AAC5D,QAAI,QAAS;AACb,QAAI;AACF,WAAM,OAAO,SAAS;MACpB,IAAI,MAAM;MACV,OAAO,MAAM;MACb,MAAM,KAAK,UAAU,MAAM,QAAQ;MACpC,CAAC;YACI;KAGR;AAGF,OAAI,aAAa;IACf,MAAM,SAAS,QAAQ,eAAe,WAAW,YAAY;AAC7D,SAAK,MAAM,SAAS,OAClB,OAAM,OAAO,SAAS;KACpB,IAAI,MAAM;KACV,OAAO,MAAM;KACb,MAAM,KAAK,UAAU,MAAM,QAAQ;KACpC,CAAC;;GAKN,MAAM,YAAY,YAAY,YAAY;AACxC,QAAI,SAAS;AAAE,mBAAc,UAAU;AAAE;;AACzC,QAAI;AACF,WAAM,OAAO,SAAS;MAAE,OAAO;MAAQ,MAAM;MAAI,CAAC;YAC5C;AACN,mBAAc,UAAU;;MAEzB,IAAO;AAGV,SAAM,IAAI,SAAe,YAAY;AACnC,WAAO,cAAc;AACnB,eAAU;AACV,mBAAc,UAAU;AACxB,cAAS;AACT,uBAAkB,OAAO,UAAU;AACnC,SAAI,MAAM,EAAE,WAAW,EAAE,4BAA4B;AACrD,cAAS;MACT;KACF;IACF"}

package/dist/src/gateway/lock.js

@@ -1,7 +1,7 @@
 import path from "node:path";
+import net from "node:net";
 import fs from "node:fs";
 import { createHash } from "node:crypto";
-import net from "node:net";
 import fs$1 from "node:fs/promises";
 import { homedir } from "os";
 //#region src/gateway/lock.ts

package/dist/src/gateway/ports.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import net from "node:net";
 import fs from "node:fs";
 import { execFileSync } from "node:child_process";
-import net from "node:net";
 //#region src/gateway/ports.ts
 /**
 * Ports Management - Port management utilities

package/dist/src/gateway/service/marketplace-service.d.ts

@@ -51,6 +51,18 @@ export interface SkillSourceInstallResultPayload extends SkillInstallResultPaylo
     kind: HubPullResult['kind'];
     contentHash: string;
 }
+export interface ExtensionMarketplacePackageDetailPayload extends MarketplacePackageDetail {
+    installability: {
+        available: boolean;
+        reason?: string;
+        sha256?: string;
+    };
+    manifest?: Record<string, unknown>;
+    packageSummary?: {
+        dependencyCount: number;
+        lifecycleScripts: string[];
+    };
+}
 export declare class GatewayMarketplaceService {
     private readonly opts;
     constructor(opts: GatewayMarketplaceServiceOptions);
@@ -95,7 +107,7 @@ export declare class GatewayMarketplaceService {
     private getDefaultAgentId;
     private getInstallAvailability;
     /** xopc-store extension package preview (type must be `extension`). */
-    fetchExtensionPackageDetail(packageName: string): Promise<MarketplacePackageDetail>;
+    fetchExtensionPackageDetail(packageName: string): Promise<ExtensionMarketplacePackageDetailPayload>;
     /**
      * Install an extension from xopc-store into `~/.xopc/extensions`, append id
      * to `extensions.enabled`, refresh the loader, and emit `config.reload`.

package/dist/src/gateway/service/marketplace-service.js

@@ -8,8 +8,7 @@ import { normalizeSkillInstallTarget } from "../../agent/skills/install-target.j
 import { removeSkillsLockEntry } from "../../agent/skills/hub-lock.js";
 import { deleteManagedSkill, installSkillFromZip, listManagedSkillDirs } from "../../agent/skills/managed-store.js";
 import { getExtensionLockfileManager } from "../../extensions/lockfile.js";
-import { join } from "node:path";
-import { existsSync, mkdirSync, rmSync } from "node:fs";
+import { existsSync, rmSync } from "node:fs";
 //#region src/gateway/service/marketplace-service.ts
 /**
 * GatewayMarketplaceService — install / browse / remove for the two marketplaces
@@ -190,10 +189,49 @@ var GatewayMarketplaceService = class {
 	}
 	/** xopc-store extension package preview (type must be `extension`). */
 	async fetchExtensionPackageDetail(packageName) {
-		const { fetchMarketplacePackageDetail, resolveExtensionsStoreBaseUrl } = await import("../../agent/skills/marketplace/adapters/store/store-api-client.js");
-		const detail = await fetchMarketplacePackageDetail(resolveExtensionsStoreBaseUrl(this.opts.getConfig()), packageName.trim());
+		const { downloadExtensionStoreZipBuffer, fetchMarketplacePackageDetail, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } = await import("../../agent/skills/marketplace/adapters/store/store-api-client.js");
+		const base = resolveExtensionsStoreBaseUrl(this.opts.getConfig());
+		const detail = await fetchMarketplacePackageDetail(base, packageName.trim());
 		if (detail.type !== "extension") throw new Error(`Package "${packageName}" is not an extension (store type: ${detail.type}).`);
-		return detail;
+		try {
+			const resolved = await resolveExtensionZipDownloadUrl(base, packageName.trim());
+			const buffer = await downloadExtensionStoreZipBuffer(base, resolved.downloadUrl);
+			verifyStoreArtifactSha256(buffer, resolved.sha256);
+			const { peekExtensionManifestFromStoreZip, peekExtensionPackageJsonFromStoreZip } = await import("../../extensions/install.js");
+			const manifest = peekExtensionManifestFromStoreZip(buffer);
+			const packageJson = peekExtensionPackageJsonFromStoreZip(buffer);
+			const dependencies = packageJson?.dependencies;
+			const dependencyCount = dependencies && typeof dependencies === "object" && !Array.isArray(dependencies) ? Object.keys(dependencies).length : 0;
+			const scripts = packageJson?.scripts;
+			const lifecycleNames = new Set([
+				"preinstall",
+				"install",
+				"postinstall",
+				"prepare"
+			]);
+			const lifecycleScripts = scripts && typeof scripts === "object" && !Array.isArray(scripts) ? Object.keys(scripts).filter((name) => lifecycleNames.has(name)) : [];
+			return {
+				...detail,
+				installability: {
+					available: true,
+					sha256: resolved.sha256
+				},
+				...manifest ? { manifest } : {},
+				packageSummary: {
+					dependencyCount,
+					lifecycleScripts
+				}
+			};
+		} catch (err) {
+			const reason = err instanceof Error ? err.message : String(err);
+			return {
+				...detail,
+				installability: {
+					available: false,
+					reason
+				}
+			};
+		}
 	}
 	/**
 	* Install an extension from xopc-store into `~/.xopc/extensions`, append id
@@ -206,60 +244,78 @@ var GatewayMarketplaceService = class {
 		if (!packageName) throw new Error("Package name is required");
 		const cfg = this.opts.getConfig();
 		const { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } = await import("../../agent/skills/marketplace/adapters/store/store-api-client.js");
-		const { installExtensionFromStoreZip, peekExtensionIdFromStoreZip } = await import("../../extensions/install.js");
+		const { commitStagedExtensionInstall, finalizeStagedExtensionInstall, rollbackStagedExtensionInstall, stageExtensionStoreZip } = await import("../../extensions/install-transaction.js");
 		const storeBase = resolveExtensionsStoreBaseUrl(cfg);
 		const targetDir = resolveExtensionsDir();
-		mkdirSync(targetDir, { recursive: true });
 		const { downloadUrl, version, sha256 } = await resolveExtensionZipDownloadUrl(storeBase, packageName, opts.version);
 		const buf = await downloadExtensionStoreZipBuffer(storeBase, downloadUrl);
 		verifyStoreArtifactSha256(buf, sha256);
-		if (opts.overwrite) {
-			const peekId = peekExtensionIdFromStoreZip(buf);
-			if (peekId && existsSync(join(targetDir, peekId))) rmSync(join(targetDir, peekId), {
-				recursive: true,
-				force: true
+		const transaction = await stageExtensionStoreZip(buf, targetDir);
+		const lock = getExtensionLockfileManager();
+		const lockSnapshot = await lock.load();
+		let configSaved = false;
+		let lockWriteStarted = false;
+		try {
+			commitStagedExtensionInstall(transaction, opts.overwrite ?? false);
+			const nextConfig = this.mergeExtensionEnabledIntoConfig(cfg, transaction.extensionId);
+			const saved = await this.opts.saveConfig(nextConfig);
+			if (!saved.saved) throw new Error(saved.error ?? "Failed to save config after extension install");
+			configSaved = true;
+			lockWriteStarted = true;
+			await lock.upsert(transaction.extensionId, {
+				name: transaction.extensionId,
+				version,
+				resolved: packageName,
+				artifactUrl: downloadUrl,
+				source: "store"
 			});
+		} catch (err) {
+			const em = err instanceof Error ? err.message : String(err);
+			const rollbackErrors = [];
+			try {
+				rollbackStagedExtensionInstall(transaction);
+			} catch (rollbackErr) {
+				rollbackErrors.push(`files: ${rollbackErr instanceof Error ? rollbackErr.message : String(rollbackErr)}`);
+			}
+			if (configSaved) try {
+				const restored = await this.opts.saveConfig(cfg);
+				if (!restored.saved) rollbackErrors.push(`config: ${restored.error ?? "restore failed"}`);
+			} catch (rollbackErr) {
+				rollbackErrors.push(`config: ${rollbackErr instanceof Error ? rollbackErr.message : String(rollbackErr)}`);
+			}
+			if (lockWriteStarted) try {
+				await lock.save(lockSnapshot);
+			} catch (rollbackErr) {
+				rollbackErrors.push(`lockfile: ${rollbackErr instanceof Error ? rollbackErr.message : String(rollbackErr)}`);
+			}
+			const rollbackSuffix = rollbackErrors.length > 0 ? ` Rollback incomplete (${rollbackErrors.join("; ")}).` : "";
+			log.error({
+				err,
+				errorMessage: em,
+				extensionId: transaction.extensionId,
+				rollbackErrors
+			}, `Marketplace extension install failed: ${em}${rollbackSuffix}`);
+			throw new Error(`${em}${rollbackSuffix}`, { cause: err });
 		}
-		const result = await installExtensionFromStoreZip(buf, targetDir);
-		if (!result.ok || !result.extensionId) throw new Error(result.error ?? "Extension install failed");
-		await getExtensionLockfileManager().upsert(result.extensionId, {
-			name: result.extensionId,
-			version,
-			resolved: packageName,
-			source: "store"
-		});
-		const nextConfig = this.mergeExtensionEnabledIntoConfig(cfg, result.extensionId);
-		const saved = await this.opts.saveConfig(nextConfig);
-		if (!saved.saved) throw new Error(saved.error ?? "Failed to save config after extension install");
-		const channelIdsBefore = new Set(this.opts.getChannelManager().getAllPlugins().map((p) => p.id));
-		let requiresGatewayRestart = false;
-		const loader = this.opts.getExtensionLoader();
 		try {
-			if (loader) {
-				loader.invalidateManifestCache();
-				await loader.loadByActivationPlan();
-				const reg = loader.getRegistry();
-				for (const p of reg.channelPlugins) if (!channelIdsBefore.has(p.id)) {
-					requiresGatewayRestart = true;
-					break;
-				}
-			}
+			finalizeStagedExtensionInstall(transaction);
 		} catch (err) {
 			const em = err instanceof Error ? err.message : String(err);
 			log.warn({
 				err,
-				errorMessage: em
-			}, `Extension loader refresh after marketplace install failed: ${em}`);
-			requiresGatewayRestart = true;
+				errorMessage: em,
+				extensionId: transaction.extensionId
+			}, `Installed extension but temporary backup cleanup failed: ${em}`);
 		}
+		this.opts.getExtensionLoader()?.invalidateManifestCache();
 		this.opts.emit("config.reload", {
 			section: "extensions",
 			source: "marketplace-install"
 		});
 		return {
-			extensionId: result.extensionId,
+			extensionId: transaction.extensionId,
 			version,
-			requiresGatewayRestart
+			requiresGatewayRestart: true
 		};
 	}
 	/** Remove a user-installed extension (global or per-agent dir) from disk and config. */

package/dist/src/gateway/service/marketplace-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"marketplace-service.js","names":[],"sources":["../../../../src/gateway/service/marketplace-service.ts"],"sourcesContent":["/**\n * GatewayMarketplaceService — install / browse / remove for the two marketplaces\n * the gateway exposes:\n *\n *   • **Skills** (`~/.xopc/skills/managed/<id>`) — zip-bundled markdown skills\n *     pulled from a provider catalog (`agent/skills/skills-marketplace.ts`).\n *   • **Extensions** (`~/.xopc/extensions/<id>`) — full extension packages from\n *     the xopc-store.\n *\n * Owns the install/uninstall composite operations:\n *   - download zip → unpack → upsert lockfile → refresh loader → emit reload\n *   - rm dir → remove from `extensions.enabled` → refresh loader → emit reload\n *\n * Local-only skill management (install-from-zip, delete, enable/disable, list)\n * lives here too so callers (commands-skills routes) depend on a single narrow\n * service instead of the full `GatewayService`.\n */\nimport { existsSync, mkdirSync, rmSync } from 'node:fs';\nimport { join } from 'node:path';\n\nimport type { Config } from '../../config/schema.js';\nimport type { AgentService } from '../../agent/service.js';\nimport type { ChannelManager } from '../../channels/manager.js';\nimport type { ExtensionLoader } from '../../extensions/loader.js';\nimport type {\n  AgentSkillAvailabilityEntry,\n  AgentSkillAvailabilityPayload,\n  SkillCatalogEntry,\n  SkillCatalogRuntimeMeta,\n} from '../../agent/agent-manager.js';\nimport type {\n  ManagedSkillListItem,\n} from '../../agent/skills/managed-store.js';\nimport type { SkillMarkdownPreviewPayload } from '../../agent/skills/types.js';\nimport type {\n  MarketplaceCategoryOption,\n  SkillsStoreListParams,\n  UnifiedMarketplaceListResponse,\n  UnifiedMarketplacePackageDetail,\n} from '../../agent/skills/skills-marketplace.js';\nimport type { MarketplacePackageDetail } from '../../agent/skills/marketplace/adapters/store/store-api-client.js';\nimport {\n  deleteManagedSkill as deleteManagedSkillDir,\n  installSkillFromZip,\n  listManagedSkillDirs,\n} from '../../agent/skills/managed-store.js';\nimport { createSkillConfigManager } from '../../agent/skills/config.js';\nimport { removeSkillsLockEntry } from '../../agent/skills/hub-lock.js';\nimport type { HubPullResult } from '../../agent/skills/hub-pull.js';\nimport {\n  normalizeSkillInstallTarget,\n  type SkillInstallTarget,\n} from '../../agent/skills/install-target.js';\nimport {\n  resolveWorkspaceSkillsDir,\n  resolveWorkspaceSkillsLockPath,\n} from '../../agent/skills/workspace-skills-dir.js';\nimport { getExtensionLockfileManager } from '../../extensions/lockfile.js';\nimport { resolveExtensionsDir, resolveStateDir } from '../../config/paths.js';\nimport { createLogger } from '../../utils/logger.js';\n\nconst log = createLogger('Gateway:Marketplace');\n\nexport interface GatewayMarketplaceServiceOptions {\n  getConfig: () => Config;\n  getAgentService: () => AgentService;\n  getExtensionLoader: () => ExtensionLoader | null;\n  getChannelManager: () => ChannelManager;\n  getWorkspacePath: () => string;\n  saveConfig: (config: Config) => Promise<{ saved: boolean; error?: string }>;\n  emit: (type: string, payload: unknown) => void;\n}\n\nexport interface SkillInstallAvailability {\n  skillId: string;\n  skillName?: string;\n  loaded: boolean;\n  enabled?: boolean;\n  defaultAgentId: string;\n  availableForDefaultAgent?: boolean;\n  unavailableReason?: AgentSkillAvailabilityEntry['unavailableReason'];\n  diagnostics: SkillCatalogRuntimeMeta['diagnostics'];\n}\n\nexport interface SkillInstallResultPayload {\n  skillId: string;\n  path: string;\n  target?: SkillInstallTarget;\n  availability: SkillInstallAvailability;\n}\n\nexport interface SkillSourceInstallOptions {\n  source: string;\n  ref?: string;\n  path?: string;\n  skillId?: string;\n  target?: SkillInstallTarget;\n  force?: boolean;\n  strictScan?: boolean;\n}\n\nexport interface SkillSourceInstallResultPayload extends SkillInstallResultPayload {\n  source: string;\n  kind: HubPullResult['kind'];\n  contentHash: string;\n}\n\nexport class GatewayMarketplaceService {\n  private readonly opts: GatewayMarketplaceServiceOptions;\n\n  constructor(opts: GatewayMarketplaceServiceOptions) {\n    this.opts = opts;\n  }\n\n  private resolveInstallTarget(target: unknown): {\n    target: SkillInstallTarget;\n    rootDir?: string;\n    lockPath?: string;\n  } {\n    const normalized = normalizeSkillInstallTarget(target);\n    if (normalized === 'global') {\n      return { target: normalized };\n    }\n    const workspace = this.opts.getWorkspacePath();\n    return {\n      target: normalized,\n      rootDir: resolveWorkspaceSkillsDir(workspace),\n      lockPath: resolveWorkspaceSkillsLockPath(workspace),\n    };\n  }\n\n  // ── Local skills (managed dir) ────────────────────────────────────────\n\n  getSkillsApi(): {\n    catalog: SkillCatalogEntry[];\n    managed: ManagedSkillListItem[];\n  } & SkillCatalogRuntimeMeta {\n    const snapshot = this.opts.getAgentService().getSkillCatalogSnapshot();\n    return {\n      catalog: snapshot.catalog,\n      managed: listManagedSkillDirs(),\n      version: snapshot.version,\n      loadedAt: snapshot.loadedAt,\n      diagnostics: snapshot.diagnostics,\n      status: snapshot.status,\n    };\n  }\n\n  getSkillsStatusApi(): SkillCatalogRuntimeMeta {\n    const snapshot = this.opts.getAgentService().getSkillCatalogSnapshot();\n    return {\n      version: snapshot.version,\n      loadedAt: snapshot.loadedAt,\n      diagnostics: snapshot.diagnostics,\n      status: snapshot.status,\n    };\n  }\n\n  getAgentSkillsApi(agentId: string): AgentSkillAvailabilityPayload {\n    return this.opts.getAgentService().getAgentSkillAvailability(agentId);\n  }\n\n  getSkillMarkdownSource(skillName: string): SkillMarkdownPreviewPayload | null {\n    return this.opts.getAgentService().getSkillMarkdownSource(skillName);\n  }\n\n  deleteSkill(skillId: string, target?: SkillInstallTarget): void {\n    const requestedTarget = target ? this.resolveInstallTarget(target) : undefined;\n    const workspaceTarget = requestedTarget ?? this.resolveInstallTarget('workspace');\n    try {\n      removeSkillsLockEntry(skillId, workspaceTarget.lockPath);\n      deleteManagedSkillDir(skillId, workspaceTarget.rootDir);\n      this.opts.getAgentService().refreshSkillsAfterDiskChange();\n      return;\n    } catch (err) {\n      if (requestedTarget || !(err instanceof Error) || !err.message.includes('Skill not found')) {\n        throw err;\n      }\n    }\n\n    removeSkillsLockEntry(skillId);\n    deleteManagedSkillDir(skillId);\n    this.opts.getAgentService().refreshSkillsAfterDiskChange();\n  }\n\n  installSkillZip(\n    buffer: Buffer,\n    opts: { skillId?: string; overwrite?: boolean; target?: SkillInstallTarget },\n  ): SkillInstallResultPayload {\n    const target = this.resolveInstallTarget(opts.target);\n    const result = installSkillFromZip(buffer, {\n      skillId: opts.skillId,\n      overwrite: opts.overwrite,\n      rootDir: target.rootDir,\n    });\n    removeSkillsLockEntry(result.skillId, target.lockPath);\n    this.opts.getAgentService().refreshSkillsAfterDiskChange();\n    return {\n      ...result,\n      target: target.target,\n      availability: this.getInstallAvailability(result.skillId),\n    };\n  }\n\n  reloadSkills(): void {\n    this.opts.getAgentService().refreshSkillsAfterDiskChange();\n  }\n\n  patchSkillEnabled(skillName: string, enabled: boolean): void {\n    createSkillConfigManager(resolveStateDir()).setSkillEnabled(skillName, enabled);\n    this.opts.getAgentService().refreshSkillsAfterSkillConfigChange();\n  }\n\n  // ── Skills marketplace catalog ────────────────────────────────────────\n\n  async fetchSkillsCatalog(\n    params: SkillsStoreListParams,\n    provider?: string,\n  ): Promise<UnifiedMarketplaceListResponse> {\n    const { listMarketplacePackages } = await import('../../agent/skills/skills-marketplace.js');\n    return listMarketplacePackages(this.opts.getConfig(), params, provider);\n  }\n\n  async fetchSkillsCategories(\n    provider?: string,\n  ): Promise<{ items: MarketplaceCategoryOption[] }> {\n    const { listMarketplaceCategories } = await import('../../agent/skills/skills-marketplace.js');\n    return listMarketplaceCategories(this.opts.getConfig(), provider);\n  }\n\n  async fetchSkillsPackageDetail(\n    packageName: string,\n    provider?: string,\n  ): Promise<UnifiedMarketplacePackageDetail> {\n    const { getMarketplacePackageDetail } = await import('../../agent/skills/skills-marketplace.js');\n    return getMarketplacePackageDetail(this.opts.getConfig(), packageName, provider);\n  }\n\n  async installSkill(opts: {\n    name: string;\n    version?: string;\n    overwrite?: boolean;\n    provider?: string;\n    target?: SkillInstallTarget;\n  }): Promise<SkillInstallResultPayload> {\n    const { downloadFromMarketplace } = await import('../../agent/skills/skills-marketplace.js');\n    const { buffer, skillId } = await downloadFromMarketplace(\n      this.opts.getConfig(),\n      opts.name,\n      opts.version,\n      opts.provider,\n    );\n    return this.installSkillZip(buffer, {\n      skillId,\n      overwrite: opts.overwrite ?? false,\n      target: opts.target,\n    });\n  }\n\n  async installSkillFromSource(\n    opts: SkillSourceInstallOptions,\n  ): Promise<SkillSourceInstallResultPayload> {\n    const result = await this.opts.getAgentService().installSkillFromSource({\n      source: opts.source,\n      ref: opts.ref,\n      path: opts.path,\n      skillId: opts.skillId,\n      target: opts.target,\n      workspace: this.opts.getWorkspacePath(),\n      force: opts.force ?? false,\n      strictScan: opts.strictScan ?? false,\n    });\n    return {\n      skillId: result.skillId,\n      path: result.path,\n      target: result.target,\n      source: result.source,\n      kind: result.kind,\n      contentHash: result.contentHash,\n      availability: this.getInstallAvailability(result.skillId),\n    };\n  }\n\n  async getSkillsProvider(): Promise<{ provider: string; displayName: string }> {\n    const {\n      getMarketplaceProviderDisplayName,\n      resolveSkillsMarketplaceProvider,\n    } = await import('../../agent/skills/skills-marketplace.js');\n    const provider = resolveSkillsMarketplaceProvider(this.opts.getConfig());\n    return {\n      provider,\n      displayName: getMarketplaceProviderDisplayName(provider),\n    };\n  }\n\n  /** All registered marketplace providers (built-in + extension-contributed). */\n  async getSkillsProviders(): Promise<Array<{ id: string; displayName: string }>> {\n    const { listRegisteredProviders } = await import('../../agent/skills/skills-marketplace.js');\n    return listRegisteredProviders();\n  }\n\n  private getDefaultAgentId(): string {\n    return this.opts.getConfig().agents?.default || 'main';\n  }\n\n  private getInstallAvailability(skillId: string): SkillInstallAvailability {\n    const snapshot = this.opts.getAgentService().getSkillCatalogSnapshot();\n    const catalogEntry =\n      snapshot.catalog.find((s) => s.directoryId === skillId) ??\n      snapshot.catalog.find((s) => s.name === skillId);\n    const defaultAgentId = this.getDefaultAgentId();\n    const agentSkills = this.getAgentSkillsApi(defaultAgentId);\n    const agentEntry = catalogEntry\n      ? agentSkills.skills.find((s) => s.name === catalogEntry.name)\n      : undefined;\n    const relevantDiagnostics = snapshot.diagnostics.filter((diag) => {\n      if (!catalogEntry) return diag.path?.includes(skillId) || diag.skillName === skillId;\n      return diag.skillName === catalogEntry.name || diag.path?.startsWith(catalogEntry.path);\n    });\n    return {\n      skillId,\n      ...(catalogEntry ? { skillName: catalogEntry.name } : {}),\n      loaded: Boolean(catalogEntry),\n      ...(catalogEntry ? { enabled: catalogEntry.enabled } : {}),\n      defaultAgentId,\n      ...(agentEntry ? { availableForDefaultAgent: agentEntry.availableForCurrentAgent } : {}),\n      ...(agentEntry?.unavailableReason ? { unavailableReason: agentEntry.unavailableReason } : {}),\n      diagnostics: relevantDiagnostics,\n    };\n  }\n\n  // ── Extension marketplace ─────────────────────────────────────────────\n\n  /** xopc-store extension package preview (type must be `extension`). */\n  async fetchExtensionPackageDetail(packageName: string): Promise<MarketplacePackageDetail> {\n    const {\n      fetchMarketplacePackageDetail,\n      resolveExtensionsStoreBaseUrl,\n    } = await import('../../agent/skills/marketplace/adapters/store/store-api-client.js');\n    const base = resolveExtensionsStoreBaseUrl(this.opts.getConfig());\n    const detail = await fetchMarketplacePackageDetail(base, packageName.trim());\n    if (detail.type !== 'extension') {\n      throw new Error(\n        `Package \"${packageName}\" is not an extension (store type: ${detail.type}).`,\n      );\n    }\n    return detail;\n  }\n\n  /**\n   * Install an extension from xopc-store into `~/.xopc/extensions`, append id\n   * to `extensions.enabled`, refresh the loader, and emit `config.reload`.\n   * Returns `requiresGatewayRestart=true` when a new channel plugin would have\n   * to wire into the running gateway (channel registration cannot hot-patch).\n   */\n  async installExtension(opts: {\n    name: string;\n    version?: string;\n    overwrite?: boolean;\n  }): Promise<{ extensionId: string; version: string; requiresGatewayRestart: boolean }> {\n    const packageName = opts.name.trim();\n    if (!packageName) {\n      throw new Error('Package name is required');\n    }\n    const cfg = this.opts.getConfig();\n    const {\n      downloadExtensionStoreZipBuffer,\n      resolveExtensionZipDownloadUrl,\n      resolveExtensionsStoreBaseUrl,\n      verifyStoreArtifactSha256,\n    } = await import('../../agent/skills/marketplace/adapters/store/store-api-client.js');\n    const {\n      installExtensionFromStoreZip,\n      peekExtensionIdFromStoreZip,\n    } = await import('../../extensions/install.js');\n    const storeBase = resolveExtensionsStoreBaseUrl(cfg);\n    const targetDir = resolveExtensionsDir();\n    mkdirSync(targetDir, { recursive: true });\n\n    const { downloadUrl, version, sha256 } = await resolveExtensionZipDownloadUrl(\n      storeBase,\n      packageName,\n      opts.version,\n    );\n    const buf = await downloadExtensionStoreZipBuffer(storeBase, downloadUrl);\n    verifyStoreArtifactSha256(buf, sha256);\n\n    if (opts.overwrite) {\n      const peekId = peekExtensionIdFromStoreZip(buf);\n      if (peekId && existsSync(join(targetDir, peekId))) {\n        rmSync(join(targetDir, peekId), { recursive: true, force: true });\n      }\n    }\n\n    const result = await installExtensionFromStoreZip(buf, targetDir);\n    if (!result.ok || !result.extensionId) {\n      throw new Error(result.error ?? 'Extension install failed');\n    }\n\n    const lock = getExtensionLockfileManager();\n    await lock.upsert(result.extensionId, {\n      name: result.extensionId,\n      version,\n      resolved: packageName,\n      source: 'store',\n    });\n\n    const nextConfig = this.mergeExtensionEnabledIntoConfig(cfg, result.extensionId);\n    const saved = await this.opts.saveConfig(nextConfig);\n    if (!saved.saved) {\n      throw new Error(saved.error ?? 'Failed to save config after extension install');\n    }\n\n    const channelIdsBefore = new Set(this.opts.getChannelManager().getAllPlugins().map((p) => p.id));\n    let requiresGatewayRestart = false;\n    const loader = this.opts.getExtensionLoader();\n    try {\n      if (loader) {\n        loader.invalidateManifestCache();\n        await loader.loadByActivationPlan();\n        const reg = loader.getRegistry();\n        for (const p of reg.channelPlugins) {\n          if (!channelIdsBefore.has(p.id)) {\n            requiresGatewayRestart = true;\n            break;\n          }\n        }\n      }\n    } catch (err) {\n      const em = err instanceof Error ? err.message : String(err);\n      log.warn({ err, errorMessage: em }, `Extension loader refresh after marketplace install failed: ${em}`);\n      requiresGatewayRestart = true;\n    }\n\n    this.opts.emit('config.reload', { section: 'extensions', source: 'marketplace-install' });\n    return { extensionId: result.extensionId, version, requiresGatewayRestart };\n  }\n\n  /** Remove a user-installed extension (global or per-agent dir) from disk and config. */\n  async uninstallExtension(extensionId: string): Promise<{ requiresGatewayRestart: boolean }> {\n    const id = extensionId.trim();\n    if (!id) {\n      throw new Error('extensionId is required');\n    }\n    const loader = this.opts.getExtensionLoader();\n    if (!loader) {\n      throw new Error('Extensions unavailable');\n    }\n    const discovered = loader.discoverExtensions();\n    const ext = discovered.find((e) => e.id === id);\n    if (!ext) {\n      throw new Error(`Extension not found: ${id}`);\n    }\n    if (ext.source === 'bundled') {\n      throw new Error('Built-in extensions cannot be uninstalled from the marketplace UI');\n    }\n    if (existsSync(ext.path)) {\n      rmSync(ext.path, { recursive: true, force: true });\n    }\n    await getExtensionLockfileManager().remove(id);\n\n    const nextConfig = this.mergeExtensionRemovedFromEnabledConfig(this.opts.getConfig(), id);\n    const saved = await this.opts.saveConfig(nextConfig);\n    if (!saved.saved) {\n      throw new Error(saved.error ?? 'Failed to save config after extension uninstall');\n    }\n    try {\n      loader.invalidateManifestCache();\n      await loader.loadByActivationPlan();\n    } catch (err) {\n      const em = err instanceof Error ? err.message : String(err);\n      log.warn({ err, errorMessage: em }, `Extension loader refresh after uninstall failed: ${em}`);\n    }\n    this.opts.emit('config.reload', { section: 'extensions', source: 'marketplace-uninstall' });\n    return { requiresGatewayRestart: true };\n  }\n\n  // ── Internals ─────────────────────────────────────────────────────────\n\n  private mergeExtensionEnabledIntoConfig(currentConfig: Config, extensionId: string): Config {\n    const id = extensionId.trim();\n    const prevExt = currentConfig.extensions;\n    const baseExt =\n      prevExt && typeof prevExt === 'object' && !Array.isArray(prevExt)\n        ? { ...(prevExt as Record<string, unknown>) }\n        : {};\n    const enabledRaw = baseExt.enabled;\n    const enabled = Array.isArray(enabledRaw)\n      ? [...enabledRaw.filter((x): x is string => typeof x === 'string')]\n      : [];\n    if (!enabled.includes(id)) enabled.push(id);\n\n    const disabledRaw = baseExt.disabled;\n    const nextExt: Record<string, unknown> = { ...baseExt, enabled };\n    if (Array.isArray(disabledRaw)) {\n      const next = disabledRaw.filter((x): x is string => typeof x === 'string' && x !== id);\n      if (next.length > 0) nextExt.disabled = next;\n      else delete nextExt.disabled;\n    }\n\n    return {\n      ...currentConfig,\n      extensions: nextExt,\n    } as Config;\n  }\n\n  private mergeExtensionRemovedFromEnabledConfig(currentConfig: Config, extensionId: string): Config {\n    const id = extensionId.trim();\n    const prevExt = currentConfig.extensions;\n    const baseExt =\n      prevExt && typeof prevExt === 'object' && !Array.isArray(prevExt)\n        ? { ...(prevExt as Record<string, unknown>) }\n        : {};\n    const enabledRaw = baseExt.enabled;\n    const enabled = Array.isArray(enabledRaw)\n      ? enabledRaw.filter((x): x is string => typeof x === 'string' && x !== id)\n      : [];\n    return {\n      ...currentConfig,\n      extensions: { ...baseExt, enabled },\n    } as Config;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YA0D8E;aACzB;AAErD,MAAM,MAAM,aAAa,sBAAsB;AA8C/C,IAAa,4BAAb,MAAuC;CACrC;CAEA,YAAY,MAAwC;AAClD,OAAK,OAAO;;CAGd,qBAA6B,QAI3B;EACA,MAAM,aAAa,4BAA4B,OAAO;AACtD,MAAI,eAAe,SACjB,QAAO,EAAE,QAAQ,YAAY;EAE/B,MAAM,YAAY,KAAK,KAAK,kBAAkB;AAC9C,SAAO;GACL,QAAQ;GACR,SAAS,0BAA0B,UAAU;GAC7C,UAAU,+BAA+B,UAAU;GACpD;;CAKH,eAG4B;EAC1B,MAAM,WAAW,KAAK,KAAK,iBAAiB,CAAC,yBAAyB;AACtE,SAAO;GACL,SAAS,SAAS;GAClB,SAAS,sBAAsB;GAC/B,SAAS,SAAS;GAClB,UAAU,SAAS;GACnB,aAAa,SAAS;GACtB,QAAQ,SAAS;GAClB;;CAGH,qBAA8C;EAC5C,MAAM,WAAW,KAAK,KAAK,iBAAiB,CAAC,yBAAyB;AACtE,SAAO;GACL,SAAS,SAAS;GAClB,UAAU,SAAS;GACnB,aAAa,SAAS;GACtB,QAAQ,SAAS;GAClB;;CAGH,kBAAkB,SAAgD;AAChE,SAAO,KAAK,KAAK,iBAAiB,CAAC,0BAA0B,QAAQ;;CAGvE,uBAAuB,WAAuD;AAC5E,SAAO,KAAK,KAAK,iBAAiB,CAAC,uBAAuB,UAAU;;CAGtE,YAAY,SAAiB,QAAmC;EAC9D,MAAM,kBAAkB,SAAS,KAAK,qBAAqB,OAAO,GAAG,KAAA;EACrE,MAAM,kBAAkB,mBAAmB,KAAK,qBAAqB,YAAY;AACjF,MAAI;AACF,yBAAsB,SAAS,gBAAgB,SAAS;AACxD,sBAAsB,SAAS,gBAAgB,QAAQ;AACvD,QAAK,KAAK,iBAAiB,CAAC,8BAA8B;AAC1D;WACO,KAAK;AACZ,OAAI,mBAAmB,EAAE,eAAe,UAAU,CAAC,IAAI,QAAQ,SAAS,kBAAkB,CACxF,OAAM;;AAIV,wBAAsB,QAAQ;AAC9B,qBAAsB,QAAQ;AAC9B,OAAK,KAAK,iBAAiB,CAAC,8BAA8B;;CAG5D,gBACE,QACA,MAC2B;EAC3B,MAAM,SAAS,KAAK,qBAAqB,KAAK,OAAO;EACrD,MAAM,SAAS,oBAAoB,QAAQ;GACzC,SAAS,KAAK;GACd,WAAW,KAAK;GAChB,SAAS,OAAO;GACjB,CAAC;AACF,wBAAsB,OAAO,SAAS,OAAO,SAAS;AACtD,OAAK,KAAK,iBAAiB,CAAC,8BAA8B;AAC1D,SAAO;GACL,GAAG;GACH,QAAQ,OAAO;GACf,cAAc,KAAK,uBAAuB,OAAO,QAAQ;GAC1D;;CAGH,eAAqB;AACnB,OAAK,KAAK,iBAAiB,CAAC,8BAA8B;;CAG5D,kBAAkB,WAAmB,SAAwB;AAC3D,2BAAyB,iBAAiB,CAAC,CAAC,gBAAgB,WAAW,QAAQ;AAC/E,OAAK,KAAK,iBAAiB,CAAC,qCAAqC;;CAKnE,MAAM,mBACJ,QACA,UACyC;EACzC,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,SAAO,wBAAwB,KAAK,KAAK,WAAW,EAAE,QAAQ,SAAS;;CAGzE,MAAM,sBACJ,UACiD;EACjD,MAAM,EAAE,8BAA8B,MAAM,OAAO;AACnD,SAAO,0BAA0B,KAAK,KAAK,WAAW,EAAE,SAAS;;CAGnE,MAAM,yBACJ,aACA,UAC0C;EAC1C,MAAM,EAAE,gCAAgC,MAAM,OAAO;AACrD,SAAO,4BAA4B,KAAK,KAAK,WAAW,EAAE,aAAa,SAAS;;CAGlF,MAAM,aAAa,MAMoB;EACrC,MAAM,EAAE,4BAA4B,MAAM,OAAO;EACjD,MAAM,EAAE,QAAQ,YAAY,MAAM,wBAChC,KAAK,KAAK,WAAW,EACrB,KAAK,MACL,KAAK,SACL,KAAK,SACN;AACD,SAAO,KAAK,gBAAgB,QAAQ;GAClC;GACA,WAAW,KAAK,aAAa;GAC7B,QAAQ,KAAK;GACd,CAAC;;CAGJ,MAAM,uBACJ,MAC0C;EAC1C,MAAM,SAAS,MAAM,KAAK,KAAK,iBAAiB,CAAC,uBAAuB;GACtE,QAAQ,KAAK;GACb,KAAK,KAAK;GACV,MAAM,KAAK;GACX,SAAS,KAAK;GACd,QAAQ,KAAK;GACb,WAAW,KAAK,KAAK,kBAAkB;GACvC,OAAO,KAAK,SAAS;GACrB,YAAY,KAAK,cAAc;GAChC,CAAC;AACF,SAAO;GACL,SAAS,OAAO;GAChB,MAAM,OAAO;GACb,QAAQ,OAAO;GACf,QAAQ,OAAO;GACf,MAAM,OAAO;GACb,aAAa,OAAO;GACpB,cAAc,KAAK,uBAAuB,OAAO,QAAQ;GAC1D;;CAGH,MAAM,oBAAwE;EAC5E,MAAM,EACJ,mCACA,qCACE,MAAM,OAAO;EACjB,MAAM,WAAW,iCAAiC,KAAK,KAAK,WAAW,CAAC;AACxE,SAAO;GACL;GACA,aAAa,kCAAkC,SAAS;GACzD;;;CAIH,MAAM,qBAA0E;EAC9E,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,SAAO,yBAAyB;;CAGlC,oBAAoC;AAClC,SAAO,KAAK,KAAK,WAAW,CAAC,QAAQ,WAAW;;CAGlD,uBAA+B,SAA2C;EACxE,MAAM,WAAW,KAAK,KAAK,iBAAiB,CAAC,yBAAyB;EACtE,MAAM,eACJ,SAAS,QAAQ,MAAM,MAAM,EAAE,gBAAgB,QAAQ,IACvD,SAAS,QAAQ,MAAM,MAAM,EAAE,SAAS,QAAQ;EAClD,MAAM,iBAAiB,KAAK,mBAAmB;EAC/C,MAAM,cAAc,KAAK,kBAAkB,eAAe;EAC1D,MAAM,aAAa,eACf,YAAY,OAAO,MAAM,MAAM,EAAE,SAAS,aAAa,KAAK,GAC5D,KAAA;EACJ,MAAM,sBAAsB,SAAS,YAAY,QAAQ,SAAS;AAChE,OAAI,CAAC,aAAc,QAAO,KAAK,MAAM,SAAS,QAAQ,IAAI,KAAK,cAAc;AAC7E,UAAO,KAAK,cAAc,aAAa,QAAQ,KAAK,MAAM,WAAW,aAAa,KAAK;IACvF;AACF,SAAO;GACL;GACA,GAAI,eAAe,EAAE,WAAW,aAAa,MAAM,GAAG,EAAE;GACxD,QAAQ,QAAQ,aAAa;GAC7B,GAAI,eAAe,EAAE,SAAS,aAAa,SAAS,GAAG,EAAE;GACzD;GACA,GAAI,aAAa,EAAE,0BAA0B,WAAW,0BAA0B,GAAG,EAAE;GACvF,GAAI,YAAY,oBAAoB,EAAE,mBAAmB,WAAW,mBAAmB,GAAG,EAAE;GAC5F,aAAa;GACd;;;CAMH,MAAM,4BAA4B,aAAwD;EACxF,MAAM,EACJ,+BACA,kCACE,MAAM,OAAO;EAEjB,MAAM,SAAS,MAAM,8BADR,8BAA8B,KAAK,KAAK,WAAW,CACT,EAAE,YAAY,MAAM,CAAC;AAC5E,MAAI,OAAO,SAAS,YAClB,OAAM,IAAI,MACR,YAAY,YAAY,qCAAqC,OAAO,KAAK,IAC1E;AAEH,SAAO;;;;;;;;CAST,MAAM,iBAAiB,MAIgE;EACrF,MAAM,cAAc,KAAK,KAAK,MAAM;AACpC,MAAI,CAAC,YACH,OAAM,IAAI,MAAM,2BAA2B;EAE7C,MAAM,MAAM,KAAK,KAAK,WAAW;EACjC,MAAM,EACJ,iCACA,gCACA,+BACA,8BACE,MAAM,OAAO;EACjB,MAAM,EACJ,8BACA,gCACE,MAAM,OAAO;EACjB,MAAM,YAAY,8BAA8B,IAAI;EACpD,MAAM,YAAY,sBAAsB;AACxC,YAAU,WAAW,EAAE,WAAW,MAAM,CAAC;EAEzC,MAAM,EAAE,aAAa,SAAS,WAAW,MAAM,+BAC7C,WACA,aACA,KAAK,QACN;EACD,MAAM,MAAM,MAAM,gCAAgC,WAAW,YAAY;AACzE,4BAA0B,KAAK,OAAO;AAEtC,MAAI,KAAK,WAAW;GAClB,MAAM,SAAS,4BAA4B,IAAI;AAC/C,OAAI,UAAU,WAAW,KAAK,WAAW,OAAO,CAAC,CAC/C,QAAO,KAAK,WAAW,OAAO,EAAE;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;;EAIrE,MAAM,SAAS,MAAM,6BAA6B,KAAK,UAAU;AACjE,MAAI,CAAC,OAAO,MAAM,CAAC,OAAO,YACxB,OAAM,IAAI,MAAM,OAAO,SAAS,2BAA2B;AAI7D,QADa,6BACH,CAAC,OAAO,OAAO,aAAa;GACpC,MAAM,OAAO;GACb;GACA,UAAU;GACV,QAAQ;GACT,CAAC;EAEF,MAAM,aAAa,KAAK,gCAAgC,KAAK,OAAO,YAAY;EAChF,MAAM,QAAQ,MAAM,KAAK,KAAK,WAAW,WAAW;AACpD,MAAI,CAAC,MAAM,MACT,OAAM,IAAI,MAAM,MAAM,SAAS,gDAAgD;EAGjF,MAAM,mBAAmB,IAAI,IAAI,KAAK,KAAK,mBAAmB,CAAC,eAAe,CAAC,KAAK,MAAM,EAAE,GAAG,CAAC;EAChG,IAAI,yBAAyB;EAC7B,MAAM,SAAS,KAAK,KAAK,oBAAoB;AAC7C,MAAI;AACF,OAAI,QAAQ;AACV,WAAO,yBAAyB;AAChC,UAAM,OAAO,sBAAsB;IACnC,MAAM,MAAM,OAAO,aAAa;AAChC,SAAK,MAAM,KAAK,IAAI,eAClB,KAAI,CAAC,iBAAiB,IAAI,EAAE,GAAG,EAAE;AAC/B,8BAAyB;AACzB;;;WAIC,KAAK;GACZ,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAI,KAAK;IAAE;IAAK,cAAc;IAAI,EAAE,8DAA8D,KAAK;AACvG,4BAAyB;;AAG3B,OAAK,KAAK,KAAK,iBAAiB;GAAE,SAAS;GAAc,QAAQ;GAAuB,CAAC;AACzF,SAAO;GAAE,aAAa,OAAO;GAAa;GAAS;GAAwB;;;CAI7E,MAAM,mBAAmB,aAAmE;EAC1F,MAAM,KAAK,YAAY,MAAM;AAC7B,MAAI,CAAC,GACH,OAAM,IAAI,MAAM,0BAA0B;EAE5C,MAAM,SAAS,KAAK,KAAK,oBAAoB;AAC7C,MAAI,CAAC,OACH,OAAM,IAAI,MAAM,yBAAyB;EAG3C,MAAM,MADa,OAAO,oBACJ,CAAC,MAAM,MAAM,EAAE,OAAO,GAAG;AAC/C,MAAI,CAAC,IACH,OAAM,IAAI,MAAM,wBAAwB,KAAK;AAE/C,MAAI,IAAI,WAAW,UACjB,OAAM,IAAI,MAAM,oEAAoE;AAEtF,MAAI,WAAW,IAAI,KAAK,CACtB,QAAO,IAAI,MAAM;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;AAEpD,QAAM,6BAA6B,CAAC,OAAO,GAAG;EAE9C,MAAM,aAAa,KAAK,uCAAuC,KAAK,KAAK,WAAW,EAAE,GAAG;EACzF,MAAM,QAAQ,MAAM,KAAK,KAAK,WAAW,WAAW;AACpD,MAAI,CAAC,MAAM,MACT,OAAM,IAAI,MAAM,MAAM,SAAS,kDAAkD;AAEnF,MAAI;AACF,UAAO,yBAAyB;AAChC,SAAM,OAAO,sBAAsB;WAC5B,KAAK;GACZ,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAI,KAAK;IAAE;IAAK,cAAc;IAAI,EAAE,oDAAoD,KAAK;;AAE/F,OAAK,KAAK,KAAK,iBAAiB;GAAE,SAAS;GAAc,QAAQ;GAAyB,CAAC;AAC3F,SAAO,EAAE,wBAAwB,MAAM;;CAKzC,gCAAwC,eAAuB,aAA6B;EAC1F,MAAM,KAAK,YAAY,MAAM;EAC7B,MAAM,UAAU,cAAc;EAC9B,MAAM,UACJ,WAAW,OAAO,YAAY,YAAY,CAAC,MAAM,QAAQ,QAAQ,GAC7D,EAAE,GAAI,SAAqC,GAC3C,EAAE;EACR,MAAM,aAAa,QAAQ;EAC3B,MAAM,UAAU,MAAM,QAAQ,WAAW,GACrC,CAAC,GAAG,WAAW,QAAQ,MAAmB,OAAO,MAAM,SAAS,CAAC,GACjE,EAAE;AACN,MAAI,CAAC,QAAQ,SAAS,GAAG,CAAE,SAAQ,KAAK,GAAG;EAE3C,MAAM,cAAc,QAAQ;EAC5B,MAAM,UAAmC;GAAE,GAAG;GAAS;GAAS;AAChE,MAAI,MAAM,QAAQ,YAAY,EAAE;GAC9B,MAAM,OAAO,YAAY,QAAQ,MAAmB,OAAO,MAAM,YAAY,MAAM,GAAG;AACtF,OAAI,KAAK,SAAS,EAAG,SAAQ,WAAW;OACnC,QAAO,QAAQ;;AAGtB,SAAO;GACL,GAAG;GACH,YAAY;GACb;;CAGH,uCAA+C,eAAuB,aAA6B;EACjG,MAAM,KAAK,YAAY,MAAM;EAC7B,MAAM,UAAU,cAAc;EAC9B,MAAM,UACJ,WAAW,OAAO,YAAY,YAAY,CAAC,MAAM,QAAQ,QAAQ,GAC7D,EAAE,GAAI,SAAqC,GAC3C,EAAE;EACR,MAAM,aAAa,QAAQ;EAC3B,MAAM,UAAU,MAAM,QAAQ,WAAW,GACrC,WAAW,QAAQ,MAAmB,OAAO,MAAM,YAAY,MAAM,GAAG,GACxE,EAAE;AACN,SAAO;GACL,GAAG;GACH,YAAY;IAAE,GAAG;IAAS;IAAS;GACpC"}
+{"version":3,"file":"marketplace-service.js","names":[],"sources":["../../../../src/gateway/service/marketplace-service.ts"],"sourcesContent":["/**\n * GatewayMarketplaceService — install / browse / remove for the two marketplaces\n * the gateway exposes:\n *\n *   • **Skills** (`~/.xopc/skills/managed/<id>`) — zip-bundled markdown skills\n *     pulled from a provider catalog (`agent/skills/skills-marketplace.ts`).\n *   • **Extensions** (`~/.xopc/extensions/<id>`) — full extension packages from\n *     the xopc-store.\n *\n * Owns the install/uninstall composite operations:\n *   - download zip → unpack → upsert lockfile → refresh loader → emit reload\n *   - rm dir → remove from `extensions.enabled` → refresh loader → emit reload\n *\n * Local-only skill management (install-from-zip, delete, enable/disable, list)\n * lives here too so callers (commands-skills routes) depend on a single narrow\n * service instead of the full `GatewayService`.\n */\nimport { existsSync, rmSync } from 'node:fs';\n\nimport type { Config } from '../../config/schema.js';\nimport type { AgentService } from '../../agent/service.js';\nimport type { ChannelManager } from '../../channels/manager.js';\nimport type { ExtensionLoader } from '../../extensions/loader.js';\nimport type {\n  AgentSkillAvailabilityEntry,\n  AgentSkillAvailabilityPayload,\n  SkillCatalogEntry,\n  SkillCatalogRuntimeMeta,\n} from '../../agent/agent-manager.js';\nimport type {\n  ManagedSkillListItem,\n} from '../../agent/skills/managed-store.js';\nimport type { SkillMarkdownPreviewPayload } from '../../agent/skills/types.js';\nimport type {\n  MarketplaceCategoryOption,\n  SkillsStoreListParams,\n  UnifiedMarketplaceListResponse,\n  UnifiedMarketplacePackageDetail,\n} from '../../agent/skills/skills-marketplace.js';\nimport type { MarketplacePackageDetail } from '../../agent/skills/marketplace/adapters/store/store-api-client.js';\nimport {\n  deleteManagedSkill as deleteManagedSkillDir,\n  installSkillFromZip,\n  listManagedSkillDirs,\n} from '../../agent/skills/managed-store.js';\nimport { createSkillConfigManager } from '../../agent/skills/config.js';\nimport { removeSkillsLockEntry } from '../../agent/skills/hub-lock.js';\nimport type { HubPullResult } from '../../agent/skills/hub-pull.js';\nimport {\n  normalizeSkillInstallTarget,\n  type SkillInstallTarget,\n} from '../../agent/skills/install-target.js';\nimport {\n  resolveWorkspaceSkillsDir,\n  resolveWorkspaceSkillsLockPath,\n} from '../../agent/skills/workspace-skills-dir.js';\nimport { getExtensionLockfileManager } from '../../extensions/lockfile.js';\nimport { resolveExtensionsDir, resolveStateDir } from '../../config/paths.js';\nimport { createLogger } from '../../utils/logger.js';\n\nconst log = createLogger('Gateway:Marketplace');\n\nexport interface GatewayMarketplaceServiceOptions {\n  getConfig: () => Config;\n  getAgentService: () => AgentService;\n  getExtensionLoader: () => ExtensionLoader | null;\n  getChannelManager: () => ChannelManager;\n  getWorkspacePath: () => string;\n  saveConfig: (config: Config) => Promise<{ saved: boolean; error?: string }>;\n  emit: (type: string, payload: unknown) => void;\n}\n\nexport interface SkillInstallAvailability {\n  skillId: string;\n  skillName?: string;\n  loaded: boolean;\n  enabled?: boolean;\n  defaultAgentId: string;\n  availableForDefaultAgent?: boolean;\n  unavailableReason?: AgentSkillAvailabilityEntry['unavailableReason'];\n  diagnostics: SkillCatalogRuntimeMeta['diagnostics'];\n}\n\nexport interface SkillInstallResultPayload {\n  skillId: string;\n  path: string;\n  target?: SkillInstallTarget;\n  availability: SkillInstallAvailability;\n}\n\nexport interface SkillSourceInstallOptions {\n  source: string;\n  ref?: string;\n  path?: string;\n  skillId?: string;\n  target?: SkillInstallTarget;\n  force?: boolean;\n  strictScan?: boolean;\n}\n\nexport interface SkillSourceInstallResultPayload extends SkillInstallResultPayload {\n  source: string;\n  kind: HubPullResult['kind'];\n  contentHash: string;\n}\n\nexport interface ExtensionMarketplacePackageDetailPayload extends MarketplacePackageDetail {\n  installability: {\n    available: boolean;\n    reason?: string;\n    sha256?: string;\n  };\n  manifest?: Record<string, unknown>;\n  packageSummary?: {\n    dependencyCount: number;\n    lifecycleScripts: string[];\n  };\n}\n\nexport class GatewayMarketplaceService {\n  private readonly opts: GatewayMarketplaceServiceOptions;\n\n  constructor(opts: GatewayMarketplaceServiceOptions) {\n    this.opts = opts;\n  }\n\n  private resolveInstallTarget(target: unknown): {\n    target: SkillInstallTarget;\n    rootDir?: string;\n    lockPath?: string;\n  } {\n    const normalized = normalizeSkillInstallTarget(target);\n    if (normalized === 'global') {\n      return { target: normalized };\n    }\n    const workspace = this.opts.getWorkspacePath();\n    return {\n      target: normalized,\n      rootDir: resolveWorkspaceSkillsDir(workspace),\n      lockPath: resolveWorkspaceSkillsLockPath(workspace),\n    };\n  }\n\n  // ── Local skills (managed dir) ────────────────────────────────────────\n\n  getSkillsApi(): {\n    catalog: SkillCatalogEntry[];\n    managed: ManagedSkillListItem[];\n  } & SkillCatalogRuntimeMeta {\n    const snapshot = this.opts.getAgentService().getSkillCatalogSnapshot();\n    return {\n      catalog: snapshot.catalog,\n      managed: listManagedSkillDirs(),\n      version: snapshot.version,\n      loadedAt: snapshot.loadedAt,\n      diagnostics: snapshot.diagnostics,\n      status: snapshot.status,\n    };\n  }\n\n  getSkillsStatusApi(): SkillCatalogRuntimeMeta {\n    const snapshot = this.opts.getAgentService().getSkillCatalogSnapshot();\n    return {\n      version: snapshot.version,\n      loadedAt: snapshot.loadedAt,\n      diagnostics: snapshot.diagnostics,\n      status: snapshot.status,\n    };\n  }\n\n  getAgentSkillsApi(agentId: string): AgentSkillAvailabilityPayload {\n    return this.opts.getAgentService().getAgentSkillAvailability(agentId);\n  }\n\n  getSkillMarkdownSource(skillName: string): SkillMarkdownPreviewPayload | null {\n    return this.opts.getAgentService().getSkillMarkdownSource(skillName);\n  }\n\n  deleteSkill(skillId: string, target?: SkillInstallTarget): void {\n    const requestedTarget = target ? this.resolveInstallTarget(target) : undefined;\n    const workspaceTarget = requestedTarget ?? this.resolveInstallTarget('workspace');\n    try {\n      removeSkillsLockEntry(skillId, workspaceTarget.lockPath);\n      deleteManagedSkillDir(skillId, workspaceTarget.rootDir);\n      this.opts.getAgentService().refreshSkillsAfterDiskChange();\n      return;\n    } catch (err) {\n      if (requestedTarget || !(err instanceof Error) || !err.message.includes('Skill not found')) {\n        throw err;\n      }\n    }\n\n    removeSkillsLockEntry(skillId);\n    deleteManagedSkillDir(skillId);\n    this.opts.getAgentService().refreshSkillsAfterDiskChange();\n  }\n\n  installSkillZip(\n    buffer: Buffer,\n    opts: { skillId?: string; overwrite?: boolean; target?: SkillInstallTarget },\n  ): SkillInstallResultPayload {\n    const target = this.resolveInstallTarget(opts.target);\n    const result = installSkillFromZip(buffer, {\n      skillId: opts.skillId,\n      overwrite: opts.overwrite,\n      rootDir: target.rootDir,\n    });\n    removeSkillsLockEntry(result.skillId, target.lockPath);\n    this.opts.getAgentService().refreshSkillsAfterDiskChange();\n    return {\n      ...result,\n      target: target.target,\n      availability: this.getInstallAvailability(result.skillId),\n    };\n  }\n\n  reloadSkills(): void {\n    this.opts.getAgentService().refreshSkillsAfterDiskChange();\n  }\n\n  patchSkillEnabled(skillName: string, enabled: boolean): void {\n    createSkillConfigManager(resolveStateDir()).setSkillEnabled(skillName, enabled);\n    this.opts.getAgentService().refreshSkillsAfterSkillConfigChange();\n  }\n\n  // ── Skills marketplace catalog ────────────────────────────────────────\n\n  async fetchSkillsCatalog(\n    params: SkillsStoreListParams,\n    provider?: string,\n  ): Promise<UnifiedMarketplaceListResponse> {\n    const { listMarketplacePackages } = await import('../../agent/skills/skills-marketplace.js');\n    return listMarketplacePackages(this.opts.getConfig(), params, provider);\n  }\n\n  async fetchSkillsCategories(\n    provider?: string,\n  ): Promise<{ items: MarketplaceCategoryOption[] }> {\n    const { listMarketplaceCategories } = await import('../../agent/skills/skills-marketplace.js');\n    return listMarketplaceCategories(this.opts.getConfig(), provider);\n  }\n\n  async fetchSkillsPackageDetail(\n    packageName: string,\n    provider?: string,\n  ): Promise<UnifiedMarketplacePackageDetail> {\n    const { getMarketplacePackageDetail } = await import('../../agent/skills/skills-marketplace.js');\n    return getMarketplacePackageDetail(this.opts.getConfig(), packageName, provider);\n  }\n\n  async installSkill(opts: {\n    name: string;\n    version?: string;\n    overwrite?: boolean;\n    provider?: string;\n    target?: SkillInstallTarget;\n  }): Promise<SkillInstallResultPayload> {\n    const { downloadFromMarketplace } = await import('../../agent/skills/skills-marketplace.js');\n    const { buffer, skillId } = await downloadFromMarketplace(\n      this.opts.getConfig(),\n      opts.name,\n      opts.version,\n      opts.provider,\n    );\n    return this.installSkillZip(buffer, {\n      skillId,\n      overwrite: opts.overwrite ?? false,\n      target: opts.target,\n    });\n  }\n\n  async installSkillFromSource(\n    opts: SkillSourceInstallOptions,\n  ): Promise<SkillSourceInstallResultPayload> {\n    const result = await this.opts.getAgentService().installSkillFromSource({\n      source: opts.source,\n      ref: opts.ref,\n      path: opts.path,\n      skillId: opts.skillId,\n      target: opts.target,\n      workspace: this.opts.getWorkspacePath(),\n      force: opts.force ?? false,\n      strictScan: opts.strictScan ?? false,\n    });\n    return {\n      skillId: result.skillId,\n      path: result.path,\n      target: result.target,\n      source: result.source,\n      kind: result.kind,\n      contentHash: result.contentHash,\n      availability: this.getInstallAvailability(result.skillId),\n    };\n  }\n\n  async getSkillsProvider(): Promise<{ provider: string; displayName: string }> {\n    const {\n      getMarketplaceProviderDisplayName,\n      resolveSkillsMarketplaceProvider,\n    } = await import('../../agent/skills/skills-marketplace.js');\n    const provider = resolveSkillsMarketplaceProvider(this.opts.getConfig());\n    return {\n      provider,\n      displayName: getMarketplaceProviderDisplayName(provider),\n    };\n  }\n\n  /** All registered marketplace providers (built-in + extension-contributed). */\n  async getSkillsProviders(): Promise<Array<{ id: string; displayName: string }>> {\n    const { listRegisteredProviders } = await import('../../agent/skills/skills-marketplace.js');\n    return listRegisteredProviders();\n  }\n\n  private getDefaultAgentId(): string {\n    return this.opts.getConfig().agents?.default || 'main';\n  }\n\n  private getInstallAvailability(skillId: string): SkillInstallAvailability {\n    const snapshot = this.opts.getAgentService().getSkillCatalogSnapshot();\n    const catalogEntry =\n      snapshot.catalog.find((s) => s.directoryId === skillId) ??\n      snapshot.catalog.find((s) => s.name === skillId);\n    const defaultAgentId = this.getDefaultAgentId();\n    const agentSkills = this.getAgentSkillsApi(defaultAgentId);\n    const agentEntry = catalogEntry\n      ? agentSkills.skills.find((s) => s.name === catalogEntry.name)\n      : undefined;\n    const relevantDiagnostics = snapshot.diagnostics.filter((diag) => {\n      if (!catalogEntry) return diag.path?.includes(skillId) || diag.skillName === skillId;\n      return diag.skillName === catalogEntry.name || diag.path?.startsWith(catalogEntry.path);\n    });\n    return {\n      skillId,\n      ...(catalogEntry ? { skillName: catalogEntry.name } : {}),\n      loaded: Boolean(catalogEntry),\n      ...(catalogEntry ? { enabled: catalogEntry.enabled } : {}),\n      defaultAgentId,\n      ...(agentEntry ? { availableForDefaultAgent: agentEntry.availableForCurrentAgent } : {}),\n      ...(agentEntry?.unavailableReason ? { unavailableReason: agentEntry.unavailableReason } : {}),\n      diagnostics: relevantDiagnostics,\n    };\n  }\n\n  // ── Extension marketplace ─────────────────────────────────────────────\n\n  /** xopc-store extension package preview (type must be `extension`). */\n  async fetchExtensionPackageDetail(\n    packageName: string,\n  ): Promise<ExtensionMarketplacePackageDetailPayload> {\n    const {\n      downloadExtensionStoreZipBuffer,\n      fetchMarketplacePackageDetail,\n      resolveExtensionZipDownloadUrl,\n      resolveExtensionsStoreBaseUrl,\n      verifyStoreArtifactSha256,\n    } = await import('../../agent/skills/marketplace/adapters/store/store-api-client.js');\n    const base = resolveExtensionsStoreBaseUrl(this.opts.getConfig());\n    const detail = await fetchMarketplacePackageDetail(base, packageName.trim());\n    if (detail.type !== 'extension') {\n      throw new Error(\n        `Package \"${packageName}\" is not an extension (store type: ${detail.type}).`,\n      );\n    }\n\n    try {\n      const resolved = await resolveExtensionZipDownloadUrl(base, packageName.trim());\n      const buffer = await downloadExtensionStoreZipBuffer(base, resolved.downloadUrl);\n      verifyStoreArtifactSha256(buffer, resolved.sha256);\n      const {\n        peekExtensionManifestFromStoreZip,\n        peekExtensionPackageJsonFromStoreZip,\n      } = await import('../../extensions/install.js');\n      const manifest = peekExtensionManifestFromStoreZip(buffer);\n      const packageJson = peekExtensionPackageJsonFromStoreZip(buffer);\n      const dependencies = packageJson?.dependencies;\n      const dependencyCount = dependencies && typeof dependencies === 'object' && !Array.isArray(dependencies)\n        ? Object.keys(dependencies).length\n        : 0;\n      const scripts = packageJson?.scripts;\n      const lifecycleNames = new Set(['preinstall', 'install', 'postinstall', 'prepare']);\n      const lifecycleScripts = scripts && typeof scripts === 'object' && !Array.isArray(scripts)\n        ? Object.keys(scripts).filter((name) => lifecycleNames.has(name))\n        : [];\n\n      return {\n        ...detail,\n        installability: { available: true, sha256: resolved.sha256 },\n        ...(manifest ? { manifest } : {}),\n        packageSummary: { dependencyCount, lifecycleScripts },\n      };\n    } catch (err) {\n      const reason = err instanceof Error ? err.message : String(err);\n      return {\n        ...detail,\n        installability: { available: false, reason },\n      };\n    }\n  }\n\n  /**\n   * Install an extension from xopc-store into `~/.xopc/extensions`, append id\n   * to `extensions.enabled`, refresh the loader, and emit `config.reload`.\n   * Returns `requiresGatewayRestart=true` when a new channel plugin would have\n   * to wire into the running gateway (channel registration cannot hot-patch).\n   */\n  async installExtension(opts: {\n    name: string;\n    version?: string;\n    overwrite?: boolean;\n  }): Promise<{ extensionId: string; version: string; requiresGatewayRestart: boolean }> {\n    const packageName = opts.name.trim();\n    if (!packageName) {\n      throw new Error('Package name is required');\n    }\n    const cfg = this.opts.getConfig();\n    const {\n      downloadExtensionStoreZipBuffer,\n      resolveExtensionZipDownloadUrl,\n      resolveExtensionsStoreBaseUrl,\n      verifyStoreArtifactSha256,\n    } = await import('../../agent/skills/marketplace/adapters/store/store-api-client.js');\n    const {\n      commitStagedExtensionInstall,\n      finalizeStagedExtensionInstall,\n      rollbackStagedExtensionInstall,\n      stageExtensionStoreZip,\n    } = await import('../../extensions/install-transaction.js');\n    const storeBase = resolveExtensionsStoreBaseUrl(cfg);\n    const targetDir = resolveExtensionsDir();\n\n    const { downloadUrl, version, sha256 } = await resolveExtensionZipDownloadUrl(\n      storeBase,\n      packageName,\n      opts.version,\n    );\n    const buf = await downloadExtensionStoreZipBuffer(storeBase, downloadUrl);\n    verifyStoreArtifactSha256(buf, sha256);\n\n    const transaction = await stageExtensionStoreZip(buf, targetDir);\n    const lock = getExtensionLockfileManager();\n    const lockSnapshot = await lock.load();\n    let configSaved = false;\n    let lockWriteStarted = false;\n    try {\n      commitStagedExtensionInstall(transaction, opts.overwrite ?? false);\n\n      const nextConfig = this.mergeExtensionEnabledIntoConfig(cfg, transaction.extensionId);\n      const saved = await this.opts.saveConfig(nextConfig);\n      if (!saved.saved) {\n        throw new Error(saved.error ?? 'Failed to save config after extension install');\n      }\n      configSaved = true;\n\n      lockWriteStarted = true;\n      await lock.upsert(transaction.extensionId, {\n        name: transaction.extensionId,\n        version,\n        resolved: packageName,\n        artifactUrl: downloadUrl,\n        source: 'store',\n      });\n    } catch (err) {\n      const em = err instanceof Error ? err.message : String(err);\n      const rollbackErrors: string[] = [];\n\n      try {\n        rollbackStagedExtensionInstall(transaction);\n      } catch (rollbackErr) {\n        rollbackErrors.push(`files: ${rollbackErr instanceof Error ? rollbackErr.message : String(rollbackErr)}`);\n      }\n      if (configSaved) {\n        try {\n          const restored = await this.opts.saveConfig(cfg);\n          if (!restored.saved) {\n            rollbackErrors.push(`config: ${restored.error ?? 'restore failed'}`);\n          }\n        } catch (rollbackErr) {\n          rollbackErrors.push(`config: ${rollbackErr instanceof Error ? rollbackErr.message : String(rollbackErr)}`);\n        }\n      }\n      if (lockWriteStarted) {\n        try {\n          await lock.save(lockSnapshot);\n        } catch (rollbackErr) {\n          rollbackErrors.push(`lockfile: ${rollbackErr instanceof Error ? rollbackErr.message : String(rollbackErr)}`);\n        }\n      }\n\n      const rollbackSuffix = rollbackErrors.length > 0\n        ? ` Rollback incomplete (${rollbackErrors.join('; ')}).`\n        : '';\n      log.error(\n        { err, errorMessage: em, extensionId: transaction.extensionId, rollbackErrors },\n        `Marketplace extension install failed: ${em}${rollbackSuffix}`,\n      );\n      throw new Error(`${em}${rollbackSuffix}`, { cause: err });\n    }\n\n    try {\n      finalizeStagedExtensionInstall(transaction);\n    } catch (err) {\n      const em = err instanceof Error ? err.message : String(err);\n      log.warn(\n        { err, errorMessage: em, extensionId: transaction.extensionId },\n        `Installed extension but temporary backup cleanup failed: ${em}`,\n      );\n    }\n\n    this.opts.getExtensionLoader()?.invalidateManifestCache();\n    this.opts.emit('config.reload', { section: 'extensions', source: 'marketplace-install' });\n    return { extensionId: transaction.extensionId, version, requiresGatewayRestart: true };\n  }\n\n  /** Remove a user-installed extension (global or per-agent dir) from disk and config. */\n  async uninstallExtension(extensionId: string): Promise<{ requiresGatewayRestart: boolean }> {\n    const id = extensionId.trim();\n    if (!id) {\n      throw new Error('extensionId is required');\n    }\n    const loader = this.opts.getExtensionLoader();\n    if (!loader) {\n      throw new Error('Extensions unavailable');\n    }\n    const discovered = loader.discoverExtensions();\n    const ext = discovered.find((e) => e.id === id);\n    if (!ext) {\n      throw new Error(`Extension not found: ${id}`);\n    }\n    if (ext.source === 'bundled') {\n      throw new Error('Built-in extensions cannot be uninstalled from the marketplace UI');\n    }\n    if (existsSync(ext.path)) {\n      rmSync(ext.path, { recursive: true, force: true });\n    }\n    await getExtensionLockfileManager().remove(id);\n\n    const nextConfig = this.mergeExtensionRemovedFromEnabledConfig(this.opts.getConfig(), id);\n    const saved = await this.opts.saveConfig(nextConfig);\n    if (!saved.saved) {\n      throw new Error(saved.error ?? 'Failed to save config after extension uninstall');\n    }\n    try {\n      loader.invalidateManifestCache();\n      await loader.loadByActivationPlan();\n    } catch (err) {\n      const em = err instanceof Error ? err.message : String(err);\n      log.warn({ err, errorMessage: em }, `Extension loader refresh after uninstall failed: ${em}`);\n    }\n    this.opts.emit('config.reload', { section: 'extensions', source: 'marketplace-uninstall' });\n    return { requiresGatewayRestart: true };\n  }\n\n  // ── Internals ─────────────────────────────────────────────────────────\n\n  private mergeExtensionEnabledIntoConfig(currentConfig: Config, extensionId: string): Config {\n    const id = extensionId.trim();\n    const prevExt = currentConfig.extensions;\n    const baseExt =\n      prevExt && typeof prevExt === 'object' && !Array.isArray(prevExt)\n        ? { ...(prevExt as Record<string, unknown>) }\n        : {};\n    const enabledRaw = baseExt.enabled;\n    const enabled = Array.isArray(enabledRaw)\n      ? [...enabledRaw.filter((x): x is string => typeof x === 'string')]\n      : [];\n    if (!enabled.includes(id)) enabled.push(id);\n\n    const disabledRaw = baseExt.disabled;\n    const nextExt: Record<string, unknown> = { ...baseExt, enabled };\n    if (Array.isArray(disabledRaw)) {\n      const next = disabledRaw.filter((x): x is string => typeof x === 'string' && x !== id);\n      if (next.length > 0) nextExt.disabled = next;\n      else delete nextExt.disabled;\n    }\n\n    return {\n      ...currentConfig,\n      extensions: nextExt,\n    } as Config;\n  }\n\n  private mergeExtensionRemovedFromEnabledConfig(currentConfig: Config, extensionId: string): Config {\n    const id = extensionId.trim();\n    const prevExt = currentConfig.extensions;\n    const baseExt =\n      prevExt && typeof prevExt === 'object' && !Array.isArray(prevExt)\n        ? { ...(prevExt as Record<string, unknown>) }\n        : {};\n    const enabledRaw = baseExt.enabled;\n    const enabled = Array.isArray(enabledRaw)\n      ? enabledRaw.filter((x): x is string => typeof x === 'string' && x !== id)\n      : [];\n    return {\n      ...currentConfig,\n      extensions: { ...baseExt, enabled },\n    } as Config;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAyD8E;aACzB;AAErD,MAAM,MAAM,aAAa,sBAAsB;AA2D/C,IAAa,4BAAb,MAAuC;CACrC;CAEA,YAAY,MAAwC;AAClD,OAAK,OAAO;;CAGd,qBAA6B,QAI3B;EACA,MAAM,aAAa,4BAA4B,OAAO;AACtD,MAAI,eAAe,SACjB,QAAO,EAAE,QAAQ,YAAY;EAE/B,MAAM,YAAY,KAAK,KAAK,kBAAkB;AAC9C,SAAO;GACL,QAAQ;GACR,SAAS,0BAA0B,UAAU;GAC7C,UAAU,+BAA+B,UAAU;GACpD;;CAKH,eAG4B;EAC1B,MAAM,WAAW,KAAK,KAAK,iBAAiB,CAAC,yBAAyB;AACtE,SAAO;GACL,SAAS,SAAS;GAClB,SAAS,sBAAsB;GAC/B,SAAS,SAAS;GAClB,UAAU,SAAS;GACnB,aAAa,SAAS;GACtB,QAAQ,SAAS;GAClB;;CAGH,qBAA8C;EAC5C,MAAM,WAAW,KAAK,KAAK,iBAAiB,CAAC,yBAAyB;AACtE,SAAO;GACL,SAAS,SAAS;GAClB,UAAU,SAAS;GACnB,aAAa,SAAS;GACtB,QAAQ,SAAS;GAClB;;CAGH,kBAAkB,SAAgD;AAChE,SAAO,KAAK,KAAK,iBAAiB,CAAC,0BAA0B,QAAQ;;CAGvE,uBAAuB,WAAuD;AAC5E,SAAO,KAAK,KAAK,iBAAiB,CAAC,uBAAuB,UAAU;;CAGtE,YAAY,SAAiB,QAAmC;EAC9D,MAAM,kBAAkB,SAAS,KAAK,qBAAqB,OAAO,GAAG,KAAA;EACrE,MAAM,kBAAkB,mBAAmB,KAAK,qBAAqB,YAAY;AACjF,MAAI;AACF,yBAAsB,SAAS,gBAAgB,SAAS;AACxD,sBAAsB,SAAS,gBAAgB,QAAQ;AACvD,QAAK,KAAK,iBAAiB,CAAC,8BAA8B;AAC1D;WACO,KAAK;AACZ,OAAI,mBAAmB,EAAE,eAAe,UAAU,CAAC,IAAI,QAAQ,SAAS,kBAAkB,CACxF,OAAM;;AAIV,wBAAsB,QAAQ;AAC9B,qBAAsB,QAAQ;AAC9B,OAAK,KAAK,iBAAiB,CAAC,8BAA8B;;CAG5D,gBACE,QACA,MAC2B;EAC3B,MAAM,SAAS,KAAK,qBAAqB,KAAK,OAAO;EACrD,MAAM,SAAS,oBAAoB,QAAQ;GACzC,SAAS,KAAK;GACd,WAAW,KAAK;GAChB,SAAS,OAAO;GACjB,CAAC;AACF,wBAAsB,OAAO,SAAS,OAAO,SAAS;AACtD,OAAK,KAAK,iBAAiB,CAAC,8BAA8B;AAC1D,SAAO;GACL,GAAG;GACH,QAAQ,OAAO;GACf,cAAc,KAAK,uBAAuB,OAAO,QAAQ;GAC1D;;CAGH,eAAqB;AACnB,OAAK,KAAK,iBAAiB,CAAC,8BAA8B;;CAG5D,kBAAkB,WAAmB,SAAwB;AAC3D,2BAAyB,iBAAiB,CAAC,CAAC,gBAAgB,WAAW,QAAQ;AAC/E,OAAK,KAAK,iBAAiB,CAAC,qCAAqC;;CAKnE,MAAM,mBACJ,QACA,UACyC;EACzC,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,SAAO,wBAAwB,KAAK,KAAK,WAAW,EAAE,QAAQ,SAAS;;CAGzE,MAAM,sBACJ,UACiD;EACjD,MAAM,EAAE,8BAA8B,MAAM,OAAO;AACnD,SAAO,0BAA0B,KAAK,KAAK,WAAW,EAAE,SAAS;;CAGnE,MAAM,yBACJ,aACA,UAC0C;EAC1C,MAAM,EAAE,gCAAgC,MAAM,OAAO;AACrD,SAAO,4BAA4B,KAAK,KAAK,WAAW,EAAE,aAAa,SAAS;;CAGlF,MAAM,aAAa,MAMoB;EACrC,MAAM,EAAE,4BAA4B,MAAM,OAAO;EACjD,MAAM,EAAE,QAAQ,YAAY,MAAM,wBAChC,KAAK,KAAK,WAAW,EACrB,KAAK,MACL,KAAK,SACL,KAAK,SACN;AACD,SAAO,KAAK,gBAAgB,QAAQ;GAClC;GACA,WAAW,KAAK,aAAa;GAC7B,QAAQ,KAAK;GACd,CAAC;;CAGJ,MAAM,uBACJ,MAC0C;EAC1C,MAAM,SAAS,MAAM,KAAK,KAAK,iBAAiB,CAAC,uBAAuB;GACtE,QAAQ,KAAK;GACb,KAAK,KAAK;GACV,MAAM,KAAK;GACX,SAAS,KAAK;GACd,QAAQ,KAAK;GACb,WAAW,KAAK,KAAK,kBAAkB;GACvC,OAAO,KAAK,SAAS;GACrB,YAAY,KAAK,cAAc;GAChC,CAAC;AACF,SAAO;GACL,SAAS,OAAO;GAChB,MAAM,OAAO;GACb,QAAQ,OAAO;GACf,QAAQ,OAAO;GACf,MAAM,OAAO;GACb,aAAa,OAAO;GACpB,cAAc,KAAK,uBAAuB,OAAO,QAAQ;GAC1D;;CAGH,MAAM,oBAAwE;EAC5E,MAAM,EACJ,mCACA,qCACE,MAAM,OAAO;EACjB,MAAM,WAAW,iCAAiC,KAAK,KAAK,WAAW,CAAC;AACxE,SAAO;GACL;GACA,aAAa,kCAAkC,SAAS;GACzD;;;CAIH,MAAM,qBAA0E;EAC9E,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,SAAO,yBAAyB;;CAGlC,oBAAoC;AAClC,SAAO,KAAK,KAAK,WAAW,CAAC,QAAQ,WAAW;;CAGlD,uBAA+B,SAA2C;EACxE,MAAM,WAAW,KAAK,KAAK,iBAAiB,CAAC,yBAAyB;EACtE,MAAM,eACJ,SAAS,QAAQ,MAAM,MAAM,EAAE,gBAAgB,QAAQ,IACvD,SAAS,QAAQ,MAAM,MAAM,EAAE,SAAS,QAAQ;EAClD,MAAM,iBAAiB,KAAK,mBAAmB;EAC/C,MAAM,cAAc,KAAK,kBAAkB,eAAe;EAC1D,MAAM,aAAa,eACf,YAAY,OAAO,MAAM,MAAM,EAAE,SAAS,aAAa,KAAK,GAC5D,KAAA;EACJ,MAAM,sBAAsB,SAAS,YAAY,QAAQ,SAAS;AAChE,OAAI,CAAC,aAAc,QAAO,KAAK,MAAM,SAAS,QAAQ,IAAI,KAAK,cAAc;AAC7E,UAAO,KAAK,cAAc,aAAa,QAAQ,KAAK,MAAM,WAAW,aAAa,KAAK;IACvF;AACF,SAAO;GACL;GACA,GAAI,eAAe,EAAE,WAAW,aAAa,MAAM,GAAG,EAAE;GACxD,QAAQ,QAAQ,aAAa;GAC7B,GAAI,eAAe,EAAE,SAAS,aAAa,SAAS,GAAG,EAAE;GACzD;GACA,GAAI,aAAa,EAAE,0BAA0B,WAAW,0BAA0B,GAAG,EAAE;GACvF,GAAI,YAAY,oBAAoB,EAAE,mBAAmB,WAAW,mBAAmB,GAAG,EAAE;GAC5F,aAAa;GACd;;;CAMH,MAAM,4BACJ,aACmD;EACnD,MAAM,EACJ,iCACA,+BACA,gCACA,+BACA,8BACE,MAAM,OAAO;EACjB,MAAM,OAAO,8BAA8B,KAAK,KAAK,WAAW,CAAC;EACjE,MAAM,SAAS,MAAM,8BAA8B,MAAM,YAAY,MAAM,CAAC;AAC5E,MAAI,OAAO,SAAS,YAClB,OAAM,IAAI,MACR,YAAY,YAAY,qCAAqC,OAAO,KAAK,IAC1E;AAGH,MAAI;GACF,MAAM,WAAW,MAAM,+BAA+B,MAAM,YAAY,MAAM,CAAC;GAC/E,MAAM,SAAS,MAAM,gCAAgC,MAAM,SAAS,YAAY;AAChF,6BAA0B,QAAQ,SAAS,OAAO;GAClD,MAAM,EACJ,mCACA,yCACE,MAAM,OAAO;GACjB,MAAM,WAAW,kCAAkC,OAAO;GAC1D,MAAM,cAAc,qCAAqC,OAAO;GAChE,MAAM,eAAe,aAAa;GAClC,MAAM,kBAAkB,gBAAgB,OAAO,iBAAiB,YAAY,CAAC,MAAM,QAAQ,aAAa,GACpG,OAAO,KAAK,aAAa,CAAC,SAC1B;GACJ,MAAM,UAAU,aAAa;GAC7B,MAAM,iBAAiB,IAAI,IAAI;IAAC;IAAc;IAAW;IAAe;IAAU,CAAC;GACnF,MAAM,mBAAmB,WAAW,OAAO,YAAY,YAAY,CAAC,MAAM,QAAQ,QAAQ,GACtF,OAAO,KAAK,QAAQ,CAAC,QAAQ,SAAS,eAAe,IAAI,KAAK,CAAC,GAC/D,EAAE;AAEN,UAAO;IACL,GAAG;IACH,gBAAgB;KAAE,WAAW;KAAM,QAAQ,SAAS;KAAQ;IAC5D,GAAI,WAAW,EAAE,UAAU,GAAG,EAAE;IAChC,gBAAgB;KAAE;KAAiB;KAAkB;IACtD;WACM,KAAK;GACZ,MAAM,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC/D,UAAO;IACL,GAAG;IACH,gBAAgB;KAAE,WAAW;KAAO;KAAQ;IAC7C;;;;;;;;;CAUL,MAAM,iBAAiB,MAIgE;EACrF,MAAM,cAAc,KAAK,KAAK,MAAM;AACpC,MAAI,CAAC,YACH,OAAM,IAAI,MAAM,2BAA2B;EAE7C,MAAM,MAAM,KAAK,KAAK,WAAW;EACjC,MAAM,EACJ,iCACA,gCACA,+BACA,8BACE,MAAM,OAAO;EACjB,MAAM,EACJ,8BACA,gCACA,gCACA,2BACE,MAAM,OAAO;EACjB,MAAM,YAAY,8BAA8B,IAAI;EACpD,MAAM,YAAY,sBAAsB;EAExC,MAAM,EAAE,aAAa,SAAS,WAAW,MAAM,+BAC7C,WACA,aACA,KAAK,QACN;EACD,MAAM,MAAM,MAAM,gCAAgC,WAAW,YAAY;AACzE,4BAA0B,KAAK,OAAO;EAEtC,MAAM,cAAc,MAAM,uBAAuB,KAAK,UAAU;EAChE,MAAM,OAAO,6BAA6B;EAC1C,MAAM,eAAe,MAAM,KAAK,MAAM;EACtC,IAAI,cAAc;EAClB,IAAI,mBAAmB;AACvB,MAAI;AACF,gCAA6B,aAAa,KAAK,aAAa,MAAM;GAElE,MAAM,aAAa,KAAK,gCAAgC,KAAK,YAAY,YAAY;GACrF,MAAM,QAAQ,MAAM,KAAK,KAAK,WAAW,WAAW;AACpD,OAAI,CAAC,MAAM,MACT,OAAM,IAAI,MAAM,MAAM,SAAS,gDAAgD;AAEjF,iBAAc;AAEd,sBAAmB;AACnB,SAAM,KAAK,OAAO,YAAY,aAAa;IACzC,MAAM,YAAY;IAClB;IACA,UAAU;IACV,aAAa;IACb,QAAQ;IACT,CAAC;WACK,KAAK;GACZ,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;GAC3D,MAAM,iBAA2B,EAAE;AAEnC,OAAI;AACF,mCAA+B,YAAY;YACpC,aAAa;AACpB,mBAAe,KAAK,UAAU,uBAAuB,QAAQ,YAAY,UAAU,OAAO,YAAY,GAAG;;AAE3G,OAAI,YACF,KAAI;IACF,MAAM,WAAW,MAAM,KAAK,KAAK,WAAW,IAAI;AAChD,QAAI,CAAC,SAAS,MACZ,gBAAe,KAAK,WAAW,SAAS,SAAS,mBAAmB;YAE/D,aAAa;AACpB,mBAAe,KAAK,WAAW,uBAAuB,QAAQ,YAAY,UAAU,OAAO,YAAY,GAAG;;AAG9G,OAAI,iBACF,KAAI;AACF,UAAM,KAAK,KAAK,aAAa;YACtB,aAAa;AACpB,mBAAe,KAAK,aAAa,uBAAuB,QAAQ,YAAY,UAAU,OAAO,YAAY,GAAG;;GAIhH,MAAM,iBAAiB,eAAe,SAAS,IAC3C,yBAAyB,eAAe,KAAK,KAAK,CAAC,MACnD;AACJ,OAAI,MACF;IAAE;IAAK,cAAc;IAAI,aAAa,YAAY;IAAa;IAAgB,EAC/E,yCAAyC,KAAK,iBAC/C;AACD,SAAM,IAAI,MAAM,GAAG,KAAK,kBAAkB,EAAE,OAAO,KAAK,CAAC;;AAG3D,MAAI;AACF,kCAA+B,YAAY;WACpC,KAAK;GACZ,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAI,KACF;IAAE;IAAK,cAAc;IAAI,aAAa,YAAY;IAAa,EAC/D,4DAA4D,KAC7D;;AAGH,OAAK,KAAK,oBAAoB,EAAE,yBAAyB;AACzD,OAAK,KAAK,KAAK,iBAAiB;GAAE,SAAS;GAAc,QAAQ;GAAuB,CAAC;AACzF,SAAO;GAAE,aAAa,YAAY;GAAa;GAAS,wBAAwB;GAAM;;;CAIxF,MAAM,mBAAmB,aAAmE;EAC1F,MAAM,KAAK,YAAY,MAAM;AAC7B,MAAI,CAAC,GACH,OAAM,IAAI,MAAM,0BAA0B;EAE5C,MAAM,SAAS,KAAK,KAAK,oBAAoB;AAC7C,MAAI,CAAC,OACH,OAAM,IAAI,MAAM,yBAAyB;EAG3C,MAAM,MADa,OAAO,oBACJ,CAAC,MAAM,MAAM,EAAE,OAAO,GAAG;AAC/C,MAAI,CAAC,IACH,OAAM,IAAI,MAAM,wBAAwB,KAAK;AAE/C,MAAI,IAAI,WAAW,UACjB,OAAM,IAAI,MAAM,oEAAoE;AAEtF,MAAI,WAAW,IAAI,KAAK,CACtB,QAAO,IAAI,MAAM;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;AAEpD,QAAM,6BAA6B,CAAC,OAAO,GAAG;EAE9C,MAAM,aAAa,KAAK,uCAAuC,KAAK,KAAK,WAAW,EAAE,GAAG;EACzF,MAAM,QAAQ,MAAM,KAAK,KAAK,WAAW,WAAW;AACpD,MAAI,CAAC,MAAM,MACT,OAAM,IAAI,MAAM,MAAM,SAAS,kDAAkD;AAEnF,MAAI;AACF,UAAO,yBAAyB;AAChC,SAAM,OAAO,sBAAsB;WAC5B,KAAK;GACZ,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAI,KAAK;IAAE;IAAK,cAAc;IAAI,EAAE,oDAAoD,KAAK;;AAE/F,OAAK,KAAK,KAAK,iBAAiB;GAAE,SAAS;GAAc,QAAQ;GAAyB,CAAC;AAC3F,SAAO,EAAE,wBAAwB,MAAM;;CAKzC,gCAAwC,eAAuB,aAA6B;EAC1F,MAAM,KAAK,YAAY,MAAM;EAC7B,MAAM,UAAU,cAAc;EAC9B,MAAM,UACJ,WAAW,OAAO,YAAY,YAAY,CAAC,MAAM,QAAQ,QAAQ,GAC7D,EAAE,GAAI,SAAqC,GAC3C,EAAE;EACR,MAAM,aAAa,QAAQ;EAC3B,MAAM,UAAU,MAAM,QAAQ,WAAW,GACrC,CAAC,GAAG,WAAW,QAAQ,MAAmB,OAAO,MAAM,SAAS,CAAC,GACjE,EAAE;AACN,MAAI,CAAC,QAAQ,SAAS,GAAG,CAAE,SAAQ,KAAK,GAAG;EAE3C,MAAM,cAAc,QAAQ;EAC5B,MAAM,UAAmC;GAAE,GAAG;GAAS;GAAS;AAChE,MAAI,MAAM,QAAQ,YAAY,EAAE;GAC9B,MAAM,OAAO,YAAY,QAAQ,MAAmB,OAAO,MAAM,YAAY,MAAM,GAAG;AACtF,OAAI,KAAK,SAAS,EAAG,SAAQ,WAAW;OACnC,QAAO,QAAQ;;AAGtB,SAAO;GACL,GAAG;GACH,YAAY;GACb;;CAGH,uCAA+C,eAAuB,aAA6B;EACjG,MAAM,KAAK,YAAY,MAAM;EAC7B,MAAM,UAAU,cAAc;EAC9B,MAAM,UACJ,WAAW,OAAO,YAAY,YAAY,CAAC,MAAM,QAAQ,QAAQ,GAC7D,EAAE,GAAI,SAAqC,GAC3C,EAAE;EACR,MAAM,aAAa,QAAQ;EAC3B,MAAM,UAAU,MAAM,QAAQ,WAAW,GACrC,WAAW,QAAQ,MAAmB,OAAO,MAAM,YAAY,MAAM,GAAG,GACxE,EAAE;AACN,SAAO;GACL,GAAG;GACH,YAAY;IAAE,GAAG;IAAS;IAAS;GACpC"}

package/dist/src/gateway/service.d.ts

@@ -81,6 +81,8 @@ export declare class GatewayService {
     constructor(serviceConfig?: GatewayServiceConfig);
     /** Lazy AgentService — constructed on first use or during `start()`. */
     get agentService(): AgentService;
+    refreshActionTrustPolicy(): void;
+    refreshUserProfileContext(): void;
     private ensureAgentService;
     private ensureHeartbeatService;
     private createGoalRunner;

package/dist/src/gateway/service.js

@@ -1,15 +1,13 @@
 import { __toCommonJS } from "../../_virtual/_rolldown/runtime.js";
 import { PACKAGE_VERSION, init_package_version } from "../package-version.js";
-import { getLogDir } from "../utils/logger/config.js";
-import { getRuntimeLogStats } from "../utils/logger/stats.js";
-import { createLogger } from "../utils/logger/index.js";
-import { init_logger } from "../utils/logger.js";
-import { closeXopcDatabase, openXopcDatabase } from "../storage/sqlite/connection.js";
-import "../storage/sqlite/index.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveDefaultAgentId } from "../agent/agent-scope.js";
 import { buildSessionKey, init_session_key, sanitizeSegment } from "../routing/session-key.js";
 import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
+import { getLogDir } from "../utils/logger/config.js";
+import { getRuntimeLogStats } from "../utils/logger/stats.js";
+import { createLogger } from "../utils/logger/index.js";
+import { init_logger } from "../utils/logger.js";
 import { init_paths, resolveAgentDir, resolveConfigPath, resolveExtensionsDir } from "../config/paths.js";
 import { areExtensionsGloballyDisabled } from "../extensions/discover-extensions.js";
 import { buildExtensionMetadataSnapshot } from "../extensions/extension-metadata-snapshot.js";
@@ -18,15 +16,17 @@ import { loadConfig, saveConfig } from "../config/loader.js";
 import { prewarmModelRegistry } from "../providers/model-registry.js";
 import { init_providers, providers_exports } from "../providers/index.js";
 import { onAutomationProductEvent, publishAutomationProductEvent } from "../automations/product-events.js";
+import { closeXopcDatabase, openXopcDatabase } from "../storage/sqlite/connection.js";
 import { GoalRunner } from "../goals/goal-runner.js";
 import { GoalNotificationService } from "../goals/goal-notifications.js";
 import "../goals/index.js";
+import "../storage/sqlite/index.js";
 import { resolveEffectiveGatewayPort } from "./host.js";
-import { onSessionTranscriptUpdate } from "../session/transcript-events.js";
 import { ProjectService } from "../projects/project-service.js";
 import "../projects/index.js";
 import { disposeAllSessionMcpRuntimes } from "../agent/mcp/bundle-mcp-runtime.js";
 import "../agent/mcp/bundle-mcp-tools.js";
+import { onSessionTranscriptUpdate } from "../session/transcript-events.js";
 import { SessionIndex } from "../session/manager.js";
 import "../session/index.js";
 import { ExtensionLoader } from "../extensions/loader.js";
@@ -267,6 +267,12 @@ var GatewayService = class {
 	get agentService() {
 		return this.ensureAgentService();
 	}
+	refreshActionTrustPolicy() {
+		this._agentService?.refreshActionTrustPolicy();
+	}
+	refreshUserProfileContext() {
+		this._agentService?.refreshUserProfileContext();
+	}
 	ensureAgentService() {
 		if (this._agentService) return this._agentService;
 		this._agentService = new AgentService(this.bus, {