@xopcai/xopc 0.0.187 → 0.0.189

package/dist/src/gateway/hono/routes/you.js

@@ -21,12 +21,12 @@ import { listConnectorCatalog } from "../../../connectors/catalog.js";
 import { nextDreamingRunTimes } from "../../../agent/memory/dreaming/schedule.js";
 import { resolveDreamingSettings } from "../../../agent/memory/dreaming/config.js";
 import { readUserProfileFile, writeUserProfileFile } from "../../agents-admin.js";
-import { TaskApplicationService } from "../../../tasks/task-application-service.js";
-import { defineTaskContract } from "../../../tasks/task-contract-definition.js";
+import { TaskContextRepository } from "../../../tasks/task-context-repository.js";
 import "../../../tasks/index.js";
-import { nextMemoryReviewAt, resolveMemoryStability } from "../../../agent/memory/lifecycle.js";
-import { PERSONAL_PLAYBOOK_DISABLED_TAG, PERSONAL_PLAYBOOK_ORDER_PREFIX, PERSONAL_PLAYBOOK_RULE_TAG, patchPersonalPlaybookContextTags, personalPlaybookContext } from "../../../user-context/personal-playbook.js";
+import { nextMemoryReviewAt } from "../../../agent/memory/lifecycle.js";
 import { isUserContextMemoryKind, isUserContextRecord, projectPersonalContextSources, projectUserContextRecord, recordsDerivedFromPersonalContextSource } from "../../../user-context/projection.js";
+import { PERSONAL_PLAYBOOK_DISABLED_TAG, PERSONAL_PLAYBOOK_ORDER_PREFIX, PERSONAL_PLAYBOOK_RULE_TAG, patchPersonalPlaybookContextTags, personalPlaybookContext } from "../../../user-context/personal-playbook.js";
+import { INSIGHT_ACCEPTED_TAG, INSIGHT_DISMISSED_TAG, USER_CONFIRMED_MEMORY_TAG, buildActionableInsightSuggestions } from "../../../user-context/actionableInsights.js";
 import { createManualUnderstanding } from "../../../user-context/manual-understanding.js";
 import { resolveDreamingAgentScope } from "../../../agent/memory/dreaming/scope.js";
 import { runDreamingPhase } from "../../../agent/memory/dreaming/runner.js";
@@ -36,7 +36,6 @@ import { renderUserClaim } from "../../../knowledge/connected-understanding-pipe
 import { prepareUserContextImport } from "../../../user-context/import.js";
 import { buildUserProfileSetup, parseUserProfileMarkdown, patchUserProfileMarkdown } from "../../../user-context/profile.js";
 import { buildTaskSourceRecommendations } from "../../../user-context/source-recommendations.js";
-import { randomUUID } from "node:crypto";
 //#region src/gateway/hono/routes/you.ts
 init_agent_scope();
 init_config();
@@ -54,15 +53,6 @@ const FEEDBACK_RATINGS = new Set([
 	"outdated",
 	"sensitive"
 ]);
-const ACTIONABLE_INSIGHT_KINDS = new Set([
-	"routine",
-	"commitment",
-	"long_term_goal",
-	"derived_insight",
-	"task_lesson"
-]);
-const INSIGHT_ACCEPTED_TAG = "insight-action:accepted";
-const INSIGHT_DISMISSED_TAG = "insight-action:dismissed";
 const PLAYBOOK_IDS = [
 	"communication",
 	"execution",
@@ -239,20 +229,6 @@ function buildPersonalPlaybooks(records) {
 		};
 	});
 }
-function buildInsightSuggestions(records) {
-	return records.filter((record) => record.status === "active").filter((record) => ACTIONABLE_INSIGHT_KINDS.has(record.kind)).filter((record) => !record.tags?.includes(INSIGHT_ACCEPTED_TAG) && !record.tags?.includes(INSIGHT_DISMISSED_TAG)).filter((record) => {
-		const stability = resolveMemoryStability(record);
-		return record.explicitness === "explicit" || (record.evidence?.length ?? 0) >= 2 || stability.band === "strong";
-	}).sort((left, right) => right.importance - left.importance || Date.parse(right.updatedAt) - Date.parse(left.updatedAt)).slice(0, 5).map((record) => ({
-		id: record.id,
-		insight: record.content,
-		kind: record.kind,
-		action: record.kind === "routine" ? "make_repeatable" : record.kind === "task_lesson" || record.kind === "derived_insight" ? "add_playbook" : "start_progress",
-		evidenceCount: record.evidence?.length ?? 0,
-		confidence: record.confidence,
-		sourceName: record.source.provider ?? "local"
-	}));
-}
 function buildRoutineAutomationDraftHref(record) {
 	return `/automations?${new URLSearchParams({
 		draft: record.content,
@@ -270,7 +246,7 @@ function editableRecord(recordId) {
 }
 function memoryRecordInput(record) {
 	return {
-		providerId: record.source.provider ?? "local",
+		providerId: record.providerId,
 		kind: record.kind,
 		userId: record.scope.userId,
 		sourceAgentId: record.provenance.sourceAgentId,
@@ -350,13 +326,13 @@ function registerYouRoutes(authenticated, deps) {
 			learningJobs: listConnectorLearningJobs({ limit: 500 }),
 			claimStatsBySource: listUserClaimStatsBySource()
 		});
-		const activeTasks = new TaskRepository().list({ limit: 20 }).flatMap((task) => {
-			if (task.delegateAgentId !== agentId || task.phase === "closed") return [];
-			return [{
+		const openTasks = new TaskRepository().list({ limit: 500 }).filter((task) => task.delegateAgentId === agentId && task.phase !== "closed");
+		const activeTasks = openTasks.slice(0, 20).map((task) => {
+			return {
 				id: task.id,
 				title: task.title,
 				body: task.body
-			}];
+			};
 		});
 		return c.json({
 			scope: {
@@ -382,7 +358,10 @@ function registerYouRoutes(authenticated, deps) {
 				return record ? [projectReferenceConsent(consent, record)] : [];
 			}),
 			conflictGroups: buildConflictGroups(allUserContextRecords),
-			insights: buildInsightSuggestions(records),
+			insights: buildActionableInsightSuggestions(records, openTasks.map((task) => [task.title, task.body].filter(Boolean).join("\n"))).map((insight) => ({
+				...insight,
+				delegateAgentId: agentId
+			})),
 			playbooks: buildPersonalPlaybooks(allUserContextRecords),
 			sources,
 			sourceRecommendations: buildTaskSourceRecommendations(sourceDefinitions, new Set(sourceInstances.map((instance) => instance.connectorId)), activeTasks),
@@ -599,7 +578,7 @@ function registerYouRoutes(authenticated, deps) {
 				const candidate = renderUserClaim(updated);
 				const evidence = listUserClaimEvidence(updated.id);
 				const record = upsertMemoryRecord({
-					providerId: "connected-understanding",
+					providerId: "local",
 					kind: candidate.kind,
 					sourceAgentId: updated.agentId,
 					content: candidate.content,
@@ -615,7 +594,7 @@ function registerYouRoutes(authenticated, deps) {
 					tags: [...new Set([
 						"user-understanding",
 						...candidate.tags ?? [],
-						"user-confirmed"
+						USER_CONFIRMED_MEMORY_TAG
 					])],
 					evidence: evidence.map((item) => ({
 						sourceItemId: item.sourceItemId,
@@ -766,7 +745,10 @@ function registerYouRoutes(authenticated, deps) {
 				if (action === "forget") deleteMemoryRecord(id);
 				else preserveRecord(record, {
 					status: action === "confirm" ? "active" : "rejected",
-					...action === "confirm" ? { reviewAfter: nextMemoryReviewAt(record) } : {}
+					...action === "confirm" ? {
+						reviewAfter: nextMemoryReviewAt(record),
+						tags: [...new Set([...record.tags ?? [], USER_CONFIRMED_MEMORY_TAG])]
+					} : {}
 				});
 				updatedCount += 1;
 			}
@@ -786,7 +768,8 @@ function registerYouRoutes(authenticated, deps) {
 		runSqliteWriteTransaction(() => {
 			for (const record of group) preserveRecord(record, record.id === winnerId ? {
 				status: "active",
-				reviewAfter: nextMemoryReviewAt(record)
+				reviewAfter: nextMemoryReviewAt(record),
+				tags: [...new Set([...record.tags ?? [], USER_CONFIRMED_MEMORY_TAG])]
 			} : {
 				status: "archived",
 				validTo: record.validTo ?? now
@@ -950,106 +933,74 @@ function registerYouRoutes(authenticated, deps) {
 			rule: buildPersonalPlaybooks([...all, rolledBack]).find((playbook) => playbook.id === id)?.rules.find((rule) => rule.id === rolledBack.id)
 		});
 	});
-	authenticated.patch("/api/you/insights/:id", deps.strictRateLimitMiddleware, async (c) => {
+	authenticated.post("/api/you/insights/:id/apply", deps.strictRateLimitMiddleware, async (c) => {
 		const config = deps.service.currentConfig;
 		const existing = editableRecord(c.req.param("id"));
-		if (!existing || existing.status !== "active" || !ACTIONABLE_INSIGHT_KINDS.has(existing.kind)) return c.json({ error: "Insight not found" }, 404);
-		const body = await c.req.json().catch(() => ({}));
-		const action = typeof body.action === "string" ? body.action : "";
-		if (action === "dismiss") {
-			preserveRecord(existing, { tags: [...new Set([...existing.tags ?? [], INSIGHT_DISMISSED_TAG])] });
-			return c.json({
-				ok: true,
-				status: "dismissed"
-			});
-		}
-		if (action === "complete" && existing.kind === "routine") {
+		const suggestion = existing ? buildActionableInsightSuggestions([existing], [])[0] : void 0;
+		if (!existing || !suggestion) return c.json({ error: "Insight not found" }, 404);
+		if (suggestion.action === "start_progress") return c.json({ error: "Progress insights must be reviewed as task drafts" }, 400);
+		if (existing.kind === "routine") {
 			preserveRecord(existing, { tags: [...new Set([...existing.tags ?? [], INSIGHT_ACCEPTED_TAG])] });
 			return c.json({
 				ok: true,
-				status: "saved"
+				status: "drafting",
+				href: buildRoutineAutomationDraftHref(existing)
 			});
 		}
-		if (action !== "apply") return c.json({ error: "Action must be apply, complete, or dismiss" }, 400);
-		if (existing.kind === "routine") return c.json({
+		upsertMemoryRecord({
+			providerId: "local",
+			kind: "task_lesson",
+			sourceAgentId: selectedAgentId(config),
+			content: existing.content,
+			source: {
+				provider: "local",
+				path: "you://insight-proposal"
+			},
+			confidence: 1,
+			tags: [
+				"user-understanding",
+				USER_CONFIRMED_MEMORY_TAG,
+				PERSONAL_PLAYBOOK_RULE_TAG,
+				`${PERSONAL_PLAYBOOK_ORDER_PREFIX}1000`
+			],
+			status: "active",
+			sensitivity: existing.sensitivity,
+			explicitness: "explicit",
+			durability: "durable",
+			importance: existing.importance,
+			disclosurePolicy: existing.disclosurePolicy,
+			evidence: existing.evidence
+		});
+		preserveRecord(existing, { tags: [...new Set([...existing.tags ?? [], INSIGHT_ACCEPTED_TAG])] });
+		return c.json({
 			ok: true,
-			status: "drafting",
-			href: buildRoutineAutomationDraftHref(existing)
+			status: "saved"
 		});
-		if (existing.kind === "task_lesson" || existing.kind === "derived_insight") {
-			upsertMemoryRecord({
-				providerId: "local",
-				kind: "task_lesson",
-				sourceAgentId: selectedAgentId(config),
-				content: existing.content,
-				source: {
-					provider: "local",
-					path: "you://insight-proposal"
-				},
-				confidence: 1,
-				tags: [
-					"user-understanding",
-					PERSONAL_PLAYBOOK_RULE_TAG,
-					`${PERSONAL_PLAYBOOK_ORDER_PREFIX}1000`
-				],
-				status: "active",
-				sensitivity: existing.sensitivity,
-				explicitness: "explicit",
-				durability: "durable",
-				importance: existing.importance,
-				disclosurePolicy: existing.disclosurePolicy,
-				evidence: existing.evidence
-			});
-			preserveRecord(existing, { tags: [...new Set([...existing.tags ?? [], INSIGHT_ACCEPTED_TAG])] });
-			return c.json({
-				ok: true,
-				status: "saved"
-			});
-		}
-		const title = existing.content.trim().split(/\r?\n/)[0].slice(0, 72);
-		const uiLocale = body.uiLocale === "zh" ? "zh" : "en";
-		const contract = defineTaskContract(title);
-		const created = new TaskApplicationService().create({
-			idempotencyKey: randomUUID(),
-			title,
-			body: existing.content,
-			priority: "normal",
-			delegateAgentId: selectedAgentId(config),
-			locale: uiLocale,
-			contract: {
-				...contract,
-				acceptancePolicy: "verified_auto",
-				outputDestinations: []
-			},
-			dependencies: [],
-			context: [{
-				targetKind: "memory",
-				targetId: existing.id,
-				role: "input",
-				pinned: true,
-				retrievalPolicy: {},
-				metadata: {}
-			}],
-			authorityGrants: [],
-			activation: {
-				mode: "start",
-				executor: {
-					kind: "agent",
-					agentId: selectedAgentId(config)
-				}
-			}
+	});
+	authenticated.delete("/api/you/insights/:id", deps.strictRateLimitMiddleware, (c) => {
+		const existing = editableRecord(c.req.param("id"));
+		const suggestion = existing ? buildActionableInsightSuggestions([existing], [])[0] : void 0;
+		if (!existing || !suggestion) return c.json({ error: "Insight not found" }, 404);
+		preserveRecord(existing, { tags: [...new Set([...existing.tags ?? [], INSIGHT_DISMISSED_TAG])] });
+		return c.json({
+			ok: true,
+			status: "dismissed"
 		});
-		if (created.ok === false) return c.json({
-			ok: false,
-			error: created.reason
-		}, 409);
-		if (created.runId) deps.service.dispatchTaskRuns();
+	});
+	authenticated.post("/api/you/insights/:id/complete", deps.strictRateLimitMiddleware, async (c) => {
+		const existing = editableRecord(c.req.param("id"));
+		const suggestion = existing ? buildActionableInsightSuggestions([existing], [])[0] : void 0;
+		if (!existing || suggestion?.action !== "start_progress") return c.json({ error: "Insight not found" }, 404);
+		const body = await c.req.json().catch(() => ({}));
+		const taskId = typeof body.taskId === "string" ? body.taskId.trim() : "";
+		const task = taskId ? new TaskRepository().get(taskId) : null;
+		const linked = task && new TaskContextRepository().list(task.id).some((edge) => edge.targetKind === "memory" && edge.targetId === existing.id);
+		if (!task || !linked) return c.json({ error: "A linked task draft is required" }, 400);
 		preserveRecord(existing, { tags: [...new Set([...existing.tags ?? [], INSIGHT_ACCEPTED_TAG])] });
 		return c.json({
 			ok: true,
-			status: created.runId ? "queued" : "saved",
-			taskId: created.model.task.id,
-			href: `/tasks/${encodeURIComponent(created.model.task.id)}`
+			status: "saved",
+			taskId: task.id
 		});
 	});
 	authenticated.patch("/api/you/controls", deps.strictRateLimitMiddleware, async (c) => {
@@ -1160,7 +1111,8 @@ function registerYouRoutes(authenticated, deps) {
 		const action = typeof body.action === "string" ? body.action : "";
 		if (action === "confirm") return c.json({ understanding: projectUserContextRecord(preserveRecord(existing, {
 			status: "active",
-			reviewAfter: nextMemoryReviewAt(existing)
+			reviewAfter: nextMemoryReviewAt(existing),
+			tags: [...new Set([...existing.tags ?? [], USER_CONFIRMED_MEMORY_TAG])]
 		})) });
 		if (action === "reject") return c.json({ understanding: projectUserContextRecord(preserveRecord(existing, { status: "rejected" })) });
 		if (action === "update") {
@@ -1179,7 +1131,8 @@ function registerYouRoutes(authenticated, deps) {
 				tags: [...new Set([
 					...existing.tags ?? [],
 					"user-understanding",
-					"explicit-user-correction"
+					"explicit-user-correction",
+					USER_CONFIRMED_MEMORY_TAG
 				])],
 				status: "active",
 				sensitivity: existing.sensitivity,
@@ -1211,4 +1164,4 @@ function registerYouRoutes(authenticated, deps) {
 	});
 }
 //#endregion
-export { buildInsightSuggestions, buildPersonalPlaybooks, buildRoutineAutomationDraftHref, registerYouRoutes };
+export { buildPersonalPlaybooks, buildRoutineAutomationDraftHref, registerYouRoutes };

package/dist/src/gateway/index.d.ts

@@ -1,5 +1,5 @@
 export { GatewayServer, type GatewayServerConfig } from './server.js';
-export { GatewayService, type GatewayChannelStartupPhase1Metrics, type GatewayChannelStartupPhase2Metrics, type GatewayServiceConfig, type ServiceEvent, } from './service.js';
+export { GatewayService, type GatewayChannelStartupPhase1Metrics, type GatewayChannelStartupPhase2Metrics, type GatewayServiceConfig, } from './service.js';
 export { acquireGatewayLock, GatewayLockError, type GatewayLockHandle } from './lock.js';
 export { runGatewayLoop, type RunGatewayLoopOptions } from './run-loop.js';
 export { restartGatewayProcessWithFreshPid, type GatewayRespawnResult } from './respawn.js';

package/dist/src/gateway/index.js

@@ -8,7 +8,6 @@ import { resolveGatewayListenHost, resolveGatewayListenPlan } from "./listen.js"
 import { assertGatewayRuntimeConfig } from "./runtime-config.js";
 import { restartGatewayProcessWithFreshPid } from "./respawn.js";
 import { GatewayService } from "./service.js";
-import { createAgentResumeHandler, createEventsSSEHandler, createSendHandler } from "./hono/sse.js";
 import { createHonoApp } from "./hono/app.js";
 import { GatewayServer } from "./server.js";
 import { GatewayLockError, acquireGatewayLock } from "./lock.js";
@@ -17,4 +16,4 @@ import { checkPortAvailable, forceFreePortAndWait, listPortListeners, parseLsofO
 import { apiError, apiOk } from "./protocol.js";
 import "./hono/index.js";
 import { assertSecureGatewayHttpUrl, assertSecureWebSocketUrl, isInsecurePrivateWsAllowed, isSecureWebSocketUrl } from "./ws-security.js";
-export { GatewayLockError, GatewayServer, GatewayService, acquireGatewayLock, apiError, apiOk, assertGatewayAuthConfigured, assertGatewayRuntimeConfig, assertSecureGatewayHttpUrl, assertSecureWebSocketUrl, buckets, buildDefaultCorsOrigins, checkPortAvailable, createAgentResumeHandler, createEventsSSEHandler, createHonoApp, createSendHandler, defaultGatewayBindMode, extractToken, forceFreePortAndWait, isAllInterfacesHost, isContainerEnvironment, isGatewayStrictSecurityEnabled, isInsecurePrivateWsAllowed, isLoopbackHost, isSecureWebSocketUrl, listPortListeners, parseLsofOutput, resolveEffectiveGatewayPort, resolveGatewayAuth, resolveGatewayBindHost, resolveGatewayBindHostSync, resolveGatewayBindMode, resolveGatewayEffectiveHost, resolveGatewayListenHost, resolveGatewayListenPlan, resolveGatewayServiceListenPort, restartGatewayProcessWithFreshPid, runGatewayLoop, validateToken };
+export { GatewayLockError, GatewayServer, GatewayService, acquireGatewayLock, apiError, apiOk, assertGatewayAuthConfigured, assertGatewayRuntimeConfig, assertSecureGatewayHttpUrl, assertSecureWebSocketUrl, buckets, buildDefaultCorsOrigins, checkPortAvailable, createHonoApp, defaultGatewayBindMode, extractToken, forceFreePortAndWait, isAllInterfacesHost, isContainerEnvironment, isGatewayStrictSecurityEnabled, isInsecurePrivateWsAllowed, isLoopbackHost, isSecureWebSocketUrl, listPortListeners, parseLsofOutput, resolveEffectiveGatewayPort, resolveGatewayAuth, resolveGatewayBindHost, resolveGatewayBindHostSync, resolveGatewayBindMode, resolveGatewayEffectiveHost, resolveGatewayListenHost, resolveGatewayListenPlan, resolveGatewayServiceListenPort, restartGatewayProcessWithFreshPid, runGatewayLoop, validateToken };

package/dist/src/gateway/protocol.d.ts

@@ -1,8 +1,7 @@
 /**
- * Gateway protocol types — Streamable HTTP / SSE transport.
+ * Gateway HTTP protocol types.
  *
  * All client → server communication uses standard HTTP (POST/GET/PATCH/DELETE).
- * Server → client streaming uses SSE (text/event-stream).
  */
 export interface ApiResponse<T = unknown> {
     ok: boolean;
@@ -13,11 +12,6 @@ export interface ApiError {
     code: string;
     message: string;
 }
-export interface SSEEvent {
-    id: string;
-    event: string;
-    data: unknown;
-}
 export interface GatewayConfig {
     host: string;
     port: number;

package/dist/src/gateway/security/index.js

@@ -2,9 +2,9 @@ import { safeEqualSecret } from "./secret-equal.js";
 import { KNOWN_WEAK_GATEWAY_TOKEN_PLACEHOLDERS, assertGatewayAuthNotKnownWeak } from "./known-weak-secrets.js";
 import { auditGatewayConfig, collectGatewayConfigFindings, collectGatewaySecurityFindings, collectGatewayStartupGuardFindings } from "./audit.js";
 import { detectSuspiciousPatterns, wrapExternalContent, wrapWebContent } from "./external-content.js";
+import { createPreauthConnectionBudget, getMaxPreauthConnectionsPerIp } from "./preauth-connection-budget.js";
 import { buildGatewayConsoleCspHeader, computeInlineScriptHashes } from "./csp.js";
 import { checkBrowserOrigin } from "./origin-check.js";
 import { ADMIN_SCOPE, DEFAULT_OPERATOR_SCOPES, KNOWN_OPERATOR_SCOPES, READ_SCOPE, WRITE_SCOPE, authorizeRouteScope, authorizeScope, isOperatorScope, parseScopesHeader } from "./operator-scopes.js";
 import { DEFAULT_GATEWAY_HTTP_TOOL_DENY, filterDangerousHttpTools, isDangerousHttpTool } from "./dangerous-tools.js";
-import { createPreauthConnectionBudget, getMaxPreauthConnectionsPerIp } from "./preauth-connection-budget.js";
 export { ADMIN_SCOPE, DEFAULT_GATEWAY_HTTP_TOOL_DENY, DEFAULT_OPERATOR_SCOPES, KNOWN_OPERATOR_SCOPES, KNOWN_WEAK_GATEWAY_TOKEN_PLACEHOLDERS, READ_SCOPE, WRITE_SCOPE, assertGatewayAuthNotKnownWeak, auditGatewayConfig, authorizeRouteScope, authorizeScope, buildGatewayConsoleCspHeader, checkBrowserOrigin, collectGatewayConfigFindings, collectGatewaySecurityFindings, collectGatewayStartupGuardFindings, computeInlineScriptHashes, createPreauthConnectionBudget, detectSuspiciousPatterns, filterDangerousHttpTools, getMaxPreauthConnectionsPerIp, isDangerousHttpTool, isOperatorScope, parseScopesHeader, safeEqualSecret, wrapExternalContent, wrapWebContent };

package/dist/src/gateway/security/operator-scopes.js

@@ -105,7 +105,7 @@ const ROUTE_SCOPE_REQUIREMENTS = [
 		scope: READ_SCOPE
 	},
 	{
-		prefix: "/api/events",
+		prefix: "/api/realtime",
 		scope: READ_SCOPE
 	}
 ];

package/dist/src/gateway/server.js

@@ -2,7 +2,6 @@ import { resolveGatewayBindHost, resolveGatewayListenHosts } from "../config/gat
 import { ensureXopcCliOnPath } from "../infra/path-env.js";
 import { resolveGatewayListenPlan } from "./listen.js";
 import { GatewayService } from "./service.js";
-import { closeAllEventStreams } from "./hono/sse.js";
 import { handleSiteShareUpgrade } from "../share/site-share-router.js";
 import { createHonoApp } from "./hono/app.js";
 import { serve } from "@hono/node-server";
@@ -57,9 +56,11 @@ var GatewayServer = class {
 		const attachUpgrade = (server) => {
 			server.on("upgrade", (req, socket, head) => {
 				try {
-					handleSiteShareUpgrade(this.service, req, socket, head);
+					if (this.service.realtime.handleUpgrade(req, socket, head)) return;
+					if (handleSiteShareUpgrade(this.service, req, socket, head)) return;
+					socket.destroy();
 				} catch (err) {
-					console.error("[GatewayServer] site-share upgrade error:", err);
+					console.error("[GatewayServer] WebSocket upgrade error:", err);
 					try {
 						socket.destroy();
 					} catch {}
@@ -95,7 +96,6 @@ var GatewayServer = class {
 	}
 	async stop() {
 		console.log("[GatewayServer] Stopping gateway server...");
-		closeAllEventStreams();
 		const closeServer = async (server) => {
 			if (!server) return;
 			const forceClose = setTimeout(() => {

package/dist/src/gateway/service/agent-runner.d.ts

@@ -1,3 +1,4 @@
+import type { TurnOrigin } from '@xopcai/endpoint-tools-protocol';
 /**
  * GatewayAgentRunner — webchat agent invocation and the surrounding control
  * surface (abort, steer, clarify-bridge plumbing, scheduled Task continuations).
@@ -23,7 +24,7 @@ import type { MessageBus } from '../../infra/bus/index.js';
 import type { AgentService } from '../../agent/service.js';
 import type { ChannelManager } from '../../channels/manager.js';
 import type { SessionIndex } from '../../session/index.js';
-import { AgentRunRelay, type RelayEvent } from '../agent-run-relay.js';
+import type { ClarifyStreamEvent } from '../clarify-bridge.js';
 import { ClarifyBridge, type ClarifyBridgeRequest } from '../clarify-bridge.js';
 import type { UserTurnAttachment, UserTurnInput } from '../user-turn-input.js';
 import { SessionInputCoordinator, type SubmitSessionInput } from './session-input-coordinator.js';
@@ -34,12 +35,13 @@ export interface GatewayAgentRunnerOptions {
     getAgentService: () => AgentService;
     getChannelManager: () => ChannelManager;
     getConfig: () => Config;
-    /** SSE emit (re-used so `runAgent` events broadcast to subscribers). */
+    /** Publish low-frequency gateway state changes. */
     emit: (type: string, payload: unknown) => void;
+    publishRealtime: (topic: string, event: string, data: unknown) => void;
+    completeRealtimeTopic: (topic: string) => void;
 }
 export declare class GatewayAgentRunner {
     private readonly opts;
-    readonly runRelay: AgentRunRelay;
     /** Per-run abort for webchat (POST /api/agent/abort or client disconnect). */
     private readonly runAbortControllers;
     private readonly runCompletions;
@@ -55,7 +57,7 @@ export declare class GatewayAgentRunner {
     getClarifyBridge(): ClarifyBridge;
     /** Called from `GatewayService.stop()` so the bridge gets cleaned up. */
     disposeClarifyBridge(): void;
-    runAgent(message: string, channel: string, chatId: string, attachments?: UserTurnAttachment[], thinking?: string, runOptions?: {
+    runAgent(message: string, channel: string, chatId: string, origin: TurnOrigin, attachments?: UserTurnAttachment[], thinking?: string, runOptions?: {
         signal?: AbortSignal;
         runId?: string;
     }): AsyncGenerator<{
@@ -89,7 +91,7 @@ export declare class GatewayAgentRunner {
         state: import("../../storage/sqlite/session-input-repository.js").SessionInputState;
     };
     recoverSessionInputs(): void;
-    /** Abort an in-flight webchat agent run (matches `runId` from SSE `run_start`). */
+    /** Abort an in-flight webchat agent run. */
     abortAgentRun(runId: string): Promise<{
         aborted: boolean;
         idle: boolean;
@@ -103,17 +105,17 @@ export declare class GatewayAgentRunner {
     drainScheduledWebchatContinuation(sessionKey: string, message: string): Promise<void>;
     /**
      * Resolve clarify-bridge config for `sessionKey`: who delivers the question
-     * (webchat SSE, Telegram message, or both), then start the bridge request.
+     * (webchat stream, Telegram message, or both), then start the bridge request.
      * Rejects when neither path is available (e.g. CLI without webchat or TG).
      *
-     * `publishSseFor(runId)` is the bridge into AgentService's
-     * `turnDispatcher.enqueueWebchatSseEvent`. We take it as a callback so the
+     * `publishStreamFor(runId)` is the bridge into AgentService's
+     * `turnDispatcher.enqueueWebchatStreamEvent`. We take it as a callback so the
      * runner does not import AgentService statically.
      */
     requestClarification(opts: {
         sessionKey: string;
         request: ClarifyBridgeRequest;
-        publishSseFor: (runId: string) => (e: RelayEvent) => void;
+        publishStreamFor: (runId: string) => (event: ClarifyStreamEvent) => void;
     }): Promise<string>;
     private deliverTelegramClarify;
 }

package/dist/src/gateway/service/agent-runner.js

@@ -1,6 +1,5 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { AgentRunRelay } from "../agent-run-relay.js";
 import { ClarifyBridge } from "../clarify-bridge.js";
 import { runGatewayAgent } from "./run-gateway-agent.js";
 import { SessionInputCoordinator } from "./session-input-coordinator.js";
@@ -10,7 +9,6 @@ init_logger();
 const log = createLogger("Gateway:AgentRunner");
 var GatewayAgentRunner = class {
 	opts;
-	runRelay = new AgentRunRelay();
 	/** Per-run abort for webchat (POST /api/agent/abort or client disconnect). */
 	runAbortControllers = /* @__PURE__ */ new Map();
 	runCompletions = /* @__PURE__ */ new Map();
@@ -24,7 +22,7 @@ var GatewayAgentRunner = class {
 		this.inputs = new SessionInputCoordinator({
 			sessionExists: async (sessionKey) => Boolean(await opts.sessionIndex.getSessionMetadata(sessionKey)),
 			execute: async (input) => {
-				const generator = this.runAgent(input.content, "webchat", input.sessionKey, input.attachments, input.thinking, { runId: input.runId });
+				const generator = this.runAgent(input.content, "webchat", input.sessionKey, input.origin, input.attachments, input.thinking, { runId: input.runId });
 				let result;
 				while (true) {
 					const step = await generator.next();
@@ -65,7 +63,7 @@ var GatewayAgentRunner = class {
 	disposeClarifyBridge() {
 		this.clarifyBridge.dispose();
 	}
-	async *runAgent(message, channel, chatId, attachments, thinking, runOptions) {
+	async *runAgent(message, channel, chatId, origin, attachments, thinking, runOptions) {
 		const trackedRunId = runOptions?.runId;
 		if (trackedRunId) {
 			let resolve = () => {};
@@ -78,12 +76,13 @@ var GatewayAgentRunner = class {
 			config: this.opts.getConfig(),
 			agentService: this.opts.getAgentService(),
 			bus: this.opts.bus,
-			runRelay: this.runRelay,
 			runAbortControllers: this.runAbortControllers,
 			activeWebchatRunBySession: this.activeWebchatRunBySession,
 			sessionIndex: this.opts.sessionIndex,
-			emit: this.opts.emit
-		}, message, channel, chatId, attachments, thinking, runOptions);
+			emit: this.opts.emit,
+			publishRealtime: this.opts.publishRealtime,
+			completeRealtimeTopic: this.opts.completeRealtimeTopic
+		}, message, channel, chatId, origin, attachments, thinking, runOptions);
 		try {
 			let step = await iter.next();
 			while (!step.done) {
@@ -114,13 +113,11 @@ var GatewayAgentRunner = class {
 	recoverSessionInputs() {
 		this.inputs.recover();
 	}
-	/** Abort an in-flight webchat agent run (matches `runId` from SSE `run_start`). */
+	/** Abort an in-flight webchat agent run. */
 	async abortAgentRun(runId) {
 		this.clarifyBridge.cancelForRun(runId);
 		const keysToMark = [];
 		for (const [sk, id] of this.activeWebchatRunBySession) if (id === runId) keysToMark.push(sk);
-		const relaySk = this.runRelay.getSessionKey(runId);
-		if (relaySk && !keysToMark.includes(relaySk)) keysToMark.push(relaySk);
 		const c = this.runAbortControllers.get(runId);
 		if (!c) return {
 			aborted: false,
@@ -152,7 +149,11 @@ var GatewayAgentRunner = class {
 			clientMessageId,
 			delivery: "next",
 			content: userTurn.text,
-			attachments: userTurn.attachments
+			attachments: userTurn.attachments,
+			origin: {
+				type: "system",
+				source: "workflow"
+			}
 		});
 		if (accepted.ok === false) throw new Error(`Scheduled session input was rejected: ${accepted.code}`);
 		await this.inputs.waitForCompletion(sessionKey, clientMessageId);
@@ -173,17 +174,17 @@ var GatewayAgentRunner = class {
 	}
 	/**
 	* Resolve clarify-bridge config for `sessionKey`: who delivers the question
-	* (webchat SSE, Telegram message, or both), then start the bridge request.
+	* (webchat stream, Telegram message, or both), then start the bridge request.
 	* Rejects when neither path is available (e.g. CLI without webchat or TG).
 	*
-	* `publishSseFor(runId)` is the bridge into AgentService's
-	* `turnDispatcher.enqueueWebchatSseEvent`. We take it as a callback so the
+	* `publishStreamFor(runId)` is the bridge into AgentService's
+	* `turnDispatcher.enqueueWebchatStreamEvent`. We take it as a callback so the
 	* runner does not import AgentService statically.
 	*/
 	async requestClarification(opts) {
-		const { sessionKey, request, publishSseFor } = opts;
+		const { sessionKey, request, publishStreamFor } = opts;
 		const runId = this.activeWebchatRunBySession.get(sessionKey);
-		const publishSse = runId ? publishSseFor(runId) : void 0;
+		const publishStream = runId ? publishStreamFor(runId) : void 0;
 		const deliver = ((await this.opts.sessionIndex.getSessionMetadata(sessionKey).catch(() => null))?.routing)?.source === "telegram" ? async (ctx) => {
 			await this.deliverTelegramClarify(ctx);
 		} : void 0;
@@ -191,8 +192,7 @@ var GatewayAgentRunner = class {
 		return this.clarifyBridge.startRequest({
 			sessionKey,
 			runId,
-			relay: this.runRelay,
-			publishSse,
+			publishStream,
 			request,
 			deliver
 		});

package/dist/src/gateway/service/config-coordinator.d.ts

@@ -45,9 +45,9 @@ export interface GatewayConfigCoordinatorOptions {
     reconcileBrowserExtensionServer: () => Promise<void>;
     /** Sync built-in dreaming automations after memory.dreaming changes. */
     reconcileDreamingAutomations: () => Promise<void>;
-    /** Latest channel status snapshot for the `channels.status` SSE event. */
+    /** Latest channel status snapshot for the `channels.status` event. */
     getChannelsStatus: () => unknown;
-    /** SSE emit (used for `config.reload` + `channels.status`). */
+    /** Realtime emit used for `config.reload` and `channels.status`. */
     emit: (type: string, payload: unknown) => void;
 }
 export declare class GatewayConfigCoordinator {

package/dist/src/gateway/service/config-coordinator.js

@@ -3,9 +3,9 @@ import { init_logger } from "../../utils/logger.js";
 import { loadConfig, saveConfig } from "../../config/loader.js";
 import { getModelRegistry } from "../../providers/model-registry.js";
 import { init_providers } from "../../providers/index.js";
+import { disposeAllSessionMcpRuntimes } from "../../agent/mcp/bundle-mcp-runtime.js";
 import { sanitizeTunnelConfig } from "../../tunnel/tunnel-config.js";
 import { reloadImageGenerationProviders } from "../../agent/image/generation/provider-registry.js";
-import { disposeAllSessionMcpRuntimes } from "../../agent/mcp/bundle-mcp-runtime.js";
 import "../../agent/mcp/bundle-mcp-tools.js";
 import { ConfigHotReloader } from "../../config/reload.js";
 import "../../config/index.js";