@xopcai/xopc 0.0.188 → 0.0.190

package/dist/src/gateway/index.d.ts

@@ -1,5 +1,5 @@
 export { GatewayServer, type GatewayServerConfig } from './server.js';
-export { GatewayService, type GatewayChannelStartupPhase1Metrics, type GatewayChannelStartupPhase2Metrics, type GatewayServiceConfig, type ServiceEvent, } from './service.js';
+export { GatewayService, type GatewayChannelStartupPhase1Metrics, type GatewayChannelStartupPhase2Metrics, type GatewayServiceConfig, } from './service.js';
 export { acquireGatewayLock, GatewayLockError, type GatewayLockHandle } from './lock.js';
 export { runGatewayLoop, type RunGatewayLoopOptions } from './run-loop.js';
 export { restartGatewayProcessWithFreshPid, type GatewayRespawnResult } from './respawn.js';

package/dist/src/gateway/index.js

@@ -8,7 +8,6 @@ import { resolveGatewayListenHost, resolveGatewayListenPlan } from "./listen.js"
 import { assertGatewayRuntimeConfig } from "./runtime-config.js";
 import { restartGatewayProcessWithFreshPid } from "./respawn.js";
 import { GatewayService } from "./service.js";
-import { createAgentResumeHandler, createEventsSSEHandler, createSendHandler } from "./hono/sse.js";
 import { createHonoApp } from "./hono/app.js";
 import { GatewayServer } from "./server.js";
 import { GatewayLockError, acquireGatewayLock } from "./lock.js";
@@ -17,4 +16,4 @@ import { checkPortAvailable, forceFreePortAndWait, listPortListeners, parseLsofO
 import { apiError, apiOk } from "./protocol.js";
 import "./hono/index.js";
 import { assertSecureGatewayHttpUrl, assertSecureWebSocketUrl, isInsecurePrivateWsAllowed, isSecureWebSocketUrl } from "./ws-security.js";
-export { GatewayLockError, GatewayServer, GatewayService, acquireGatewayLock, apiError, apiOk, assertGatewayAuthConfigured, assertGatewayRuntimeConfig, assertSecureGatewayHttpUrl, assertSecureWebSocketUrl, buckets, buildDefaultCorsOrigins, checkPortAvailable, createAgentResumeHandler, createEventsSSEHandler, createHonoApp, createSendHandler, defaultGatewayBindMode, extractToken, forceFreePortAndWait, isAllInterfacesHost, isContainerEnvironment, isGatewayStrictSecurityEnabled, isInsecurePrivateWsAllowed, isLoopbackHost, isSecureWebSocketUrl, listPortListeners, parseLsofOutput, resolveEffectiveGatewayPort, resolveGatewayAuth, resolveGatewayBindHost, resolveGatewayBindHostSync, resolveGatewayBindMode, resolveGatewayEffectiveHost, resolveGatewayListenHost, resolveGatewayListenPlan, resolveGatewayServiceListenPort, restartGatewayProcessWithFreshPid, runGatewayLoop, validateToken };
+export { GatewayLockError, GatewayServer, GatewayService, acquireGatewayLock, apiError, apiOk, assertGatewayAuthConfigured, assertGatewayRuntimeConfig, assertSecureGatewayHttpUrl, assertSecureWebSocketUrl, buckets, buildDefaultCorsOrigins, checkPortAvailable, createHonoApp, defaultGatewayBindMode, extractToken, forceFreePortAndWait, isAllInterfacesHost, isContainerEnvironment, isGatewayStrictSecurityEnabled, isInsecurePrivateWsAllowed, isLoopbackHost, isSecureWebSocketUrl, listPortListeners, parseLsofOutput, resolveEffectiveGatewayPort, resolveGatewayAuth, resolveGatewayBindHost, resolveGatewayBindHostSync, resolveGatewayBindMode, resolveGatewayEffectiveHost, resolveGatewayListenHost, resolveGatewayListenPlan, resolveGatewayServiceListenPort, restartGatewayProcessWithFreshPid, runGatewayLoop, validateToken };

package/dist/src/gateway/protocol.d.ts

@@ -1,8 +1,7 @@
 /**
- * Gateway protocol types — Streamable HTTP / SSE transport.
+ * Gateway HTTP protocol types.
  *
  * All client → server communication uses standard HTTP (POST/GET/PATCH/DELETE).
- * Server → client streaming uses SSE (text/event-stream).
  */
 export interface ApiResponse<T = unknown> {
     ok: boolean;
@@ -13,11 +12,6 @@ export interface ApiError {
     code: string;
     message: string;
 }
-export interface SSEEvent {
-    id: string;
-    event: string;
-    data: unknown;
-}
 export interface GatewayConfig {
     host: string;
     port: number;

package/dist/src/gateway/security/index.js

@@ -2,9 +2,9 @@ import { safeEqualSecret } from "./secret-equal.js";
 import { KNOWN_WEAK_GATEWAY_TOKEN_PLACEHOLDERS, assertGatewayAuthNotKnownWeak } from "./known-weak-secrets.js";
 import { auditGatewayConfig, collectGatewayConfigFindings, collectGatewaySecurityFindings, collectGatewayStartupGuardFindings } from "./audit.js";
 import { detectSuspiciousPatterns, wrapExternalContent, wrapWebContent } from "./external-content.js";
+import { createPreauthConnectionBudget, getMaxPreauthConnectionsPerIp } from "./preauth-connection-budget.js";
 import { buildGatewayConsoleCspHeader, computeInlineScriptHashes } from "./csp.js";
 import { checkBrowserOrigin } from "./origin-check.js";
 import { ADMIN_SCOPE, DEFAULT_OPERATOR_SCOPES, KNOWN_OPERATOR_SCOPES, READ_SCOPE, WRITE_SCOPE, authorizeRouteScope, authorizeScope, isOperatorScope, parseScopesHeader } from "./operator-scopes.js";
 import { DEFAULT_GATEWAY_HTTP_TOOL_DENY, filterDangerousHttpTools, isDangerousHttpTool } from "./dangerous-tools.js";
-import { createPreauthConnectionBudget, getMaxPreauthConnectionsPerIp } from "./preauth-connection-budget.js";
 export { ADMIN_SCOPE, DEFAULT_GATEWAY_HTTP_TOOL_DENY, DEFAULT_OPERATOR_SCOPES, KNOWN_OPERATOR_SCOPES, KNOWN_WEAK_GATEWAY_TOKEN_PLACEHOLDERS, READ_SCOPE, WRITE_SCOPE, assertGatewayAuthNotKnownWeak, auditGatewayConfig, authorizeRouteScope, authorizeScope, buildGatewayConsoleCspHeader, checkBrowserOrigin, collectGatewayConfigFindings, collectGatewaySecurityFindings, collectGatewayStartupGuardFindings, computeInlineScriptHashes, createPreauthConnectionBudget, detectSuspiciousPatterns, filterDangerousHttpTools, getMaxPreauthConnectionsPerIp, isDangerousHttpTool, isOperatorScope, parseScopesHeader, safeEqualSecret, wrapExternalContent, wrapWebContent };

package/dist/src/gateway/security/operator-scopes.js

@@ -105,7 +105,7 @@ const ROUTE_SCOPE_REQUIREMENTS = [
 		scope: READ_SCOPE
 	},
 	{
-		prefix: "/api/events",
+		prefix: "/api/realtime",
 		scope: READ_SCOPE
 	}
 ];

package/dist/src/gateway/server.js

@@ -2,7 +2,6 @@ import { resolveGatewayBindHost, resolveGatewayListenHosts } from "../config/gat
 import { ensureXopcCliOnPath } from "../infra/path-env.js";
 import { resolveGatewayListenPlan } from "./listen.js";
 import { GatewayService } from "./service.js";
-import { closeAllEventStreams } from "./hono/sse.js";
 import { handleSiteShareUpgrade } from "../share/site-share-router.js";
 import { createHonoApp } from "./hono/app.js";
 import { serve } from "@hono/node-server";
@@ -57,9 +56,11 @@ var GatewayServer = class {
 		const attachUpgrade = (server) => {
 			server.on("upgrade", (req, socket, head) => {
 				try {
-					handleSiteShareUpgrade(this.service, req, socket, head);
+					if (this.service.realtime.handleUpgrade(req, socket, head)) return;
+					if (handleSiteShareUpgrade(this.service, req, socket, head)) return;
+					socket.destroy();
 				} catch (err) {
-					console.error("[GatewayServer] site-share upgrade error:", err);
+					console.error("[GatewayServer] WebSocket upgrade error:", err);
 					try {
 						socket.destroy();
 					} catch {}
@@ -95,7 +96,6 @@ var GatewayServer = class {
 	}
 	async stop() {
 		console.log("[GatewayServer] Stopping gateway server...");
-		closeAllEventStreams();
 		const closeServer = async (server) => {
 			if (!server) return;
 			const forceClose = setTimeout(() => {

package/dist/src/gateway/service/agent-runner.d.ts

@@ -1,3 +1,4 @@
+import type { TurnOrigin } from '@xopcai/endpoint-tools-protocol';
 /**
  * GatewayAgentRunner — webchat agent invocation and the surrounding control
  * surface (abort, steer, clarify-bridge plumbing, scheduled Task continuations).
@@ -23,7 +24,7 @@ import type { MessageBus } from '../../infra/bus/index.js';
 import type { AgentService } from '../../agent/service.js';
 import type { ChannelManager } from '../../channels/manager.js';
 import type { SessionIndex } from '../../session/index.js';
-import { AgentRunRelay, type RelayEvent } from '../agent-run-relay.js';
+import type { ClarifyStreamEvent } from '../clarify-bridge.js';
 import { ClarifyBridge, type ClarifyBridgeRequest } from '../clarify-bridge.js';
 import type { UserTurnAttachment, UserTurnInput } from '../user-turn-input.js';
 import { SessionInputCoordinator, type SubmitSessionInput } from './session-input-coordinator.js';
@@ -34,12 +35,13 @@ export interface GatewayAgentRunnerOptions {
     getAgentService: () => AgentService;
     getChannelManager: () => ChannelManager;
     getConfig: () => Config;
-    /** SSE emit (re-used so `runAgent` events broadcast to subscribers). */
+    /** Publish low-frequency gateway state changes. */
     emit: (type: string, payload: unknown) => void;
+    publishRealtime: (topic: string, event: string, data: unknown) => void;
+    completeRealtimeTopic: (topic: string) => void;
 }
 export declare class GatewayAgentRunner {
     private readonly opts;
-    readonly runRelay: AgentRunRelay;
     /** Per-run abort for webchat (POST /api/agent/abort or client disconnect). */
     private readonly runAbortControllers;
     private readonly runCompletions;
@@ -55,7 +57,7 @@ export declare class GatewayAgentRunner {
     getClarifyBridge(): ClarifyBridge;
     /** Called from `GatewayService.stop()` so the bridge gets cleaned up. */
     disposeClarifyBridge(): void;
-    runAgent(message: string, channel: string, chatId: string, attachments?: UserTurnAttachment[], thinking?: string, runOptions?: {
+    runAgent(message: string, channel: string, chatId: string, origin: TurnOrigin, attachments?: UserTurnAttachment[], thinking?: string, runOptions?: {
         signal?: AbortSignal;
         runId?: string;
     }): AsyncGenerator<{
@@ -89,7 +91,7 @@ export declare class GatewayAgentRunner {
         state: import("../../storage/sqlite/session-input-repository.js").SessionInputState;
     };
     recoverSessionInputs(): void;
-    /** Abort an in-flight webchat agent run (matches `runId` from SSE `run_start`). */
+    /** Abort an in-flight webchat agent run. */
     abortAgentRun(runId: string): Promise<{
         aborted: boolean;
         idle: boolean;
@@ -103,17 +105,17 @@ export declare class GatewayAgentRunner {
     drainScheduledWebchatContinuation(sessionKey: string, message: string): Promise<void>;
     /**
      * Resolve clarify-bridge config for `sessionKey`: who delivers the question
-     * (webchat SSE, Telegram message, or both), then start the bridge request.
+     * (webchat stream, Telegram message, or both), then start the bridge request.
      * Rejects when neither path is available (e.g. CLI without webchat or TG).
      *
-     * `publishSseFor(runId)` is the bridge into AgentService's
-     * `turnDispatcher.enqueueWebchatSseEvent`. We take it as a callback so the
+     * `publishStreamFor(runId)` is the bridge into AgentService's
+     * `turnDispatcher.enqueueWebchatStreamEvent`. We take it as a callback so the
      * runner does not import AgentService statically.
      */
     requestClarification(opts: {
         sessionKey: string;
         request: ClarifyBridgeRequest;
-        publishSseFor: (runId: string) => (e: RelayEvent) => void;
+        publishStreamFor: (runId: string) => (event: ClarifyStreamEvent) => void;
     }): Promise<string>;
     private deliverTelegramClarify;
 }

package/dist/src/gateway/service/agent-runner.js

@@ -1,6 +1,5 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { AgentRunRelay } from "../agent-run-relay.js";
 import { ClarifyBridge } from "../clarify-bridge.js";
 import { runGatewayAgent } from "./run-gateway-agent.js";
 import { SessionInputCoordinator } from "./session-input-coordinator.js";
@@ -10,7 +9,6 @@ init_logger();
 const log = createLogger("Gateway:AgentRunner");
 var GatewayAgentRunner = class {
 	opts;
-	runRelay = new AgentRunRelay();
 	/** Per-run abort for webchat (POST /api/agent/abort or client disconnect). */
 	runAbortControllers = /* @__PURE__ */ new Map();
 	runCompletions = /* @__PURE__ */ new Map();
@@ -24,7 +22,7 @@ var GatewayAgentRunner = class {
 		this.inputs = new SessionInputCoordinator({
 			sessionExists: async (sessionKey) => Boolean(await opts.sessionIndex.getSessionMetadata(sessionKey)),
 			execute: async (input) => {
-				const generator = this.runAgent(input.content, "webchat", input.sessionKey, input.attachments, input.thinking, { runId: input.runId });
+				const generator = this.runAgent(input.content, "webchat", input.sessionKey, input.origin, input.attachments, input.thinking, { runId: input.runId });
 				let result;
 				while (true) {
 					const step = await generator.next();
@@ -65,7 +63,7 @@ var GatewayAgentRunner = class {
 	disposeClarifyBridge() {
 		this.clarifyBridge.dispose();
 	}
-	async *runAgent(message, channel, chatId, attachments, thinking, runOptions) {
+	async *runAgent(message, channel, chatId, origin, attachments, thinking, runOptions) {
 		const trackedRunId = runOptions?.runId;
 		if (trackedRunId) {
 			let resolve = () => {};
@@ -78,12 +76,13 @@ var GatewayAgentRunner = class {
 			config: this.opts.getConfig(),
 			agentService: this.opts.getAgentService(),
 			bus: this.opts.bus,
-			runRelay: this.runRelay,
 			runAbortControllers: this.runAbortControllers,
 			activeWebchatRunBySession: this.activeWebchatRunBySession,
 			sessionIndex: this.opts.sessionIndex,
-			emit: this.opts.emit
-		}, message, channel, chatId, attachments, thinking, runOptions);
+			emit: this.opts.emit,
+			publishRealtime: this.opts.publishRealtime,
+			completeRealtimeTopic: this.opts.completeRealtimeTopic
+		}, message, channel, chatId, origin, attachments, thinking, runOptions);
 		try {
 			let step = await iter.next();
 			while (!step.done) {
@@ -114,13 +113,11 @@ var GatewayAgentRunner = class {
 	recoverSessionInputs() {
 		this.inputs.recover();
 	}
-	/** Abort an in-flight webchat agent run (matches `runId` from SSE `run_start`). */
+	/** Abort an in-flight webchat agent run. */
 	async abortAgentRun(runId) {
 		this.clarifyBridge.cancelForRun(runId);
 		const keysToMark = [];
 		for (const [sk, id] of this.activeWebchatRunBySession) if (id === runId) keysToMark.push(sk);
-		const relaySk = this.runRelay.getSessionKey(runId);
-		if (relaySk && !keysToMark.includes(relaySk)) keysToMark.push(relaySk);
 		const c = this.runAbortControllers.get(runId);
 		if (!c) return {
 			aborted: false,
@@ -152,7 +149,11 @@ var GatewayAgentRunner = class {
 			clientMessageId,
 			delivery: "next",
 			content: userTurn.text,
-			attachments: userTurn.attachments
+			attachments: userTurn.attachments,
+			origin: {
+				type: "system",
+				source: "workflow"
+			}
 		});
 		if (accepted.ok === false) throw new Error(`Scheduled session input was rejected: ${accepted.code}`);
 		await this.inputs.waitForCompletion(sessionKey, clientMessageId);
@@ -173,17 +174,17 @@ var GatewayAgentRunner = class {
 	}
 	/**
 	* Resolve clarify-bridge config for `sessionKey`: who delivers the question
-	* (webchat SSE, Telegram message, or both), then start the bridge request.
+	* (webchat stream, Telegram message, or both), then start the bridge request.
 	* Rejects when neither path is available (e.g. CLI without webchat or TG).
 	*
-	* `publishSseFor(runId)` is the bridge into AgentService's
-	* `turnDispatcher.enqueueWebchatSseEvent`. We take it as a callback so the
+	* `publishStreamFor(runId)` is the bridge into AgentService's
+	* `turnDispatcher.enqueueWebchatStreamEvent`. We take it as a callback so the
 	* runner does not import AgentService statically.
 	*/
 	async requestClarification(opts) {
-		const { sessionKey, request, publishSseFor } = opts;
+		const { sessionKey, request, publishStreamFor } = opts;
 		const runId = this.activeWebchatRunBySession.get(sessionKey);
-		const publishSse = runId ? publishSseFor(runId) : void 0;
+		const publishStream = runId ? publishStreamFor(runId) : void 0;
 		const deliver = ((await this.opts.sessionIndex.getSessionMetadata(sessionKey).catch(() => null))?.routing)?.source === "telegram" ? async (ctx) => {
 			await this.deliverTelegramClarify(ctx);
 		} : void 0;
@@ -191,8 +192,7 @@ var GatewayAgentRunner = class {
 		return this.clarifyBridge.startRequest({
 			sessionKey,
 			runId,
-			relay: this.runRelay,
-			publishSse,
+			publishStream,
 			request,
 			deliver
 		});

package/dist/src/gateway/service/config-coordinator.d.ts

@@ -43,11 +43,11 @@ export interface GatewayConfigCoordinatorOptions {
     getExtensionLoader: () => ExtensionLoader | null;
     /** Re-evaluate browser-extension server attachment after agent defaults change. */
     reconcileBrowserExtensionServer: () => Promise<void>;
-    /** Sync built-in dreaming automations after memory.dreaming changes. */
+    /** Sync the built-in consolidation automation after userContext.dreaming changes. */
     reconcileDreamingAutomations: () => Promise<void>;
-    /** Latest channel status snapshot for the `channels.status` SSE event. */
+    /** Latest channel status snapshot for the `channels.status` event. */
     getChannelsStatus: () => unknown;
-    /** SSE emit (used for `config.reload` + `channels.status`). */
+    /** Realtime emit used for `config.reload` and `channels.status`. */
     emit: (type: string, payload: unknown) => void;
 }
 export declare class GatewayConfigCoordinator {

package/dist/src/gateway/service/run-gateway-agent.d.ts

@@ -1,25 +1,26 @@
+import type { TurnOrigin } from '@xopcai/endpoint-tools-protocol';
 import type { AgentService } from '../../agent/service.js';
 import type { Config } from '../../config/schema.js';
 import type { MessageBus } from '../../infra/bus/index.js';
 import type { SessionIndex } from '../../session/index.js';
 import type { ChatStreamEvent } from '../chat-stream/protocol.js';
-import type { AgentRunRelay } from '../agent-run-relay.js';
 import type { UserTurnAttachment } from '../user-turn-input.js';
 export type RunGatewayAgentYield = ChatStreamEvent;
 export type RunGatewayAgentDeps = {
     config: Config;
     agentService: AgentService;
     bus: MessageBus;
-    runRelay: AgentRunRelay;
     runAbortControllers: Map<string, AbortController>;
     activeWebchatRunBySession: Map<string, string>;
     sessionIndex: SessionIndex;
     emit: (type: string, payload: unknown) => void;
+    publishRealtime: (topic: string, event: string, data: unknown) => void;
+    completeRealtimeTopic: (topic: string) => void;
 };
 /**
  * @param runOptions.signal — When set (e.g. client disconnect), aborts in-flight generation and persists partial output.
  */
-export declare function runGatewayAgent(deps: RunGatewayAgentDeps, message: string, channel: string, chatId: string, attachments?: UserTurnAttachment[], thinking?: string, runOptions?: {
+export declare function runGatewayAgent(deps: RunGatewayAgentDeps, message: string, channel: string, chatId: string, origin: TurnOrigin, attachments?: UserTurnAttachment[], thinking?: string, runOptions?: {
     signal?: AbortSignal;
     runId?: string;
 }): AsyncGenerator<RunGatewayAgentYield, {

package/dist/src/gateway/service/run-gateway-agent.js

@@ -6,11 +6,11 @@ import "../../storage/sqlite/index.js";
 import { init_session_key, parseSessionKey } from "../../routing/session-key.js";
 import { resolveExecutionContext } from "../../tasks/execution-context.js";
 import { TaskRunCoordinator } from "../../tasks/task-run-coordinator.js";
-import { recordExplicitRelationshipFollowUp } from "../../user-context/relationship-continuity.js";
 import { formatAgentRunErrorForClient } from "../../agent/client-error-format.js";
 import { prependEnvelopeTimestamp } from "../../channels/envelope-timestamp.js";
 import "../chat-limits.js";
 import { resolveWebchatSessionKey } from "../resolve-webchat-session-key.js";
+import { recordExplicitRelationshipFollowUp } from "../../user-context/relationship-continuity.js";
 import { ChatStreamMapper } from "../chat-stream/mapper.js";
 import { coalesceThinkingDeltas } from "../chat-stream/thinking-delta-coalescer.js";
 import crypto from "crypto";
@@ -21,14 +21,14 @@ const log = createLogger("Gateway:Service");
 /**
 * @param runOptions.signal — When set (e.g. client disconnect), aborts in-flight generation and persists partial output.
 */
-async function* runGatewayAgent(deps, message, channel, chatId, attachments, thinking, runOptions) {
+async function* runGatewayAgent(deps, message, channel, chatId, origin, attachments, thinking, runOptions) {
 	const cappedAttachments = attachments && attachments.length > 10 ? attachments.slice(0, 10) : attachments;
 	if (attachments && cappedAttachments && attachments.length > cappedAttachments.length) log.debug({
 		dropped: attachments.length - cappedAttachments.length,
 		max: 10
 	}, "Attachments capped for webchat");
 	const runId = runOptions?.runId ?? crypto.randomUUID();
-	const { agentService, bus, runRelay, runAbortControllers, activeWebchatRunBySession, sessionIndex: sessionIndexFromDeps, emit } = deps;
+	const { agentService, bus, runAbortControllers, activeWebchatRunBySession, sessionIndex: sessionIndexFromDeps, emit, publishRealtime, completeRealtimeTopic } = deps;
 	const sessionIndex = sessionIndexFromDeps;
 	let taskRun;
 	let taskRunStatus = "failed";
@@ -44,21 +44,18 @@ async function* runGatewayAgent(deps, message, channel, chatId, attachments, thi
 		if (!meta) throw new Error("Session not found; create sessions via POST /api/sessions");
 		webchatSessionId = meta?.sessionId;
 		webchatMetadata = meta;
-		runRelay.ensureRun(runId, webchatSessionKey);
 		runAbortControllers.set(runId, new AbortController());
 	}
 	const streamSessionKey = webchatSessionKey ?? chatId;
 	if (webchatSessionKey) {
 		if (!webchatMetadata) throw new Error("Session metadata is unavailable");
-		const parsedSession = parseSessionKey(webchatSessionKey);
-		if (!parsedSession) throw new Error("Resolved webchat session key is invalid");
+		if (!parseSessionKey(webchatSessionKey)) throw new Error("Resolved webchat session key is invalid");
 		updateInteractionStateFromMessage({
 			sessionKey: webchatSessionKey,
 			message
 		});
 		recordExplicitRelationshipFollowUp({
 			sessionKey: webchatSessionKey,
-			sourceAgentId: parsedSession.agentId,
 			message
 		});
 		const executionContext = resolveExecutionContext({
@@ -97,16 +94,17 @@ async function* runGatewayAgent(deps, message, channel, chatId, attachments, thi
 		}
 		if (event.type === "command_completed" && event.payload.exitCode === 0 && /(^|\s)(test|vitest|jest|pytest|lint|typecheck|build)(\s|$|:)/i.test(event.payload.command)) taskRun?.captureCommand(event.payload.command, event.payload.durationMs);
 	};
-	const publishStreamEvent = (event) => channel === "webchat" ? runRelay.publish(runId, event) ?? event : event;
 	const emitAndYield = function* (events) {
 		for (const event of events) {
 			if (taskRun) captureTaskEvent(event);
-			const relayedEvent = publishStreamEvent(event);
-			if (channel === "webchat") emit("agent.stream", {
-				sessionKey: streamSessionKey,
-				event: relayedEvent
-			});
-			yield relayedEvent;
+			if (channel === "webchat") {
+				publishRealtime(`run:${runId}`, event.type, event);
+				if (event.type === "run_start") publishRealtime("sessions", "run.started", {
+					sessionKey: streamSessionKey,
+					runId
+				});
+			}
+			yield event;
 		}
 	};
 	yield* emitAndYield(mapper.start());
@@ -130,7 +128,7 @@ async function* runGatewayAgent(deps, message, channel, chatId, attachments, thi
 			}
 			let streamError;
 			try {
-				const eventStream = agentService.turnDispatcher.processDirectStreaming(stampedMessage, sessionKey, prepared, thinking, {
+				const eventStream = agentService.turnDispatcher.processDirectStreaming(stampedMessage, sessionKey, origin, prepared, thinking, {
 					signal: mergedSignal,
 					runId
 				});
@@ -143,7 +141,7 @@ async function* runGatewayAgent(deps, message, channel, chatId, attachments, thi
 				taskRunStatus = mergedSignal.aborted ? "cancelled" : "succeeded";
 				taskRunSummary = endSummary;
 				yield* emitAndYield(mapper.end(endStatus, endSummary));
-				runRelay.complete(runId);
+				completeRealtimeTopic(`run:${runId}`);
 				try {
 					const metaAfter = await sessionIndex.getSessionMetadata(sessionKey);
 					if (metaAfter?.name) emit("session.updated", {
@@ -171,7 +169,7 @@ async function* runGatewayAgent(deps, message, channel, chatId, attachments, thi
 				const errorContent = formatAgentRunErrorForClient(streamError);
 				yield* emitAndYield(mapper.error(errorContent));
 				yield* emitAndYield(mapper.end("error", streamError));
-				runRelay.complete(runId);
+				completeRealtimeTopic(`run:${runId}`);
 				return {
 					status: "error",
 					summary: streamError

package/dist/src/gateway/service/session-input-coordinator.d.ts

@@ -1,3 +1,4 @@
+import type { TurnOrigin } from '@xopcai/endpoint-tools-protocol';
 import type { UserTurnAttachment } from '../user-turn-input.js';
 import { type SessionInputDelivery, type SessionInputState } from '../../storage/sqlite/index.js';
 export type SubmitSessionInput = {
@@ -7,6 +8,7 @@ export type SubmitSessionInput = {
     content: string;
     attachments?: UserTurnAttachment[];
     thinking?: string;
+    origin: TurnOrigin;
 };
 export declare class SessionInputCoordinator {
     private readonly deps;
@@ -20,6 +22,7 @@ export declare class SessionInputCoordinator {
             content: string;
             attachments?: UserTurnAttachment[];
             thinking?: string;
+            origin: TurnOrigin;
         }) => Promise<{
             status: string;
             summary: string;

package/dist/src/gateway/service/session-input-coordinator.js

@@ -65,7 +65,7 @@ var SessionInputCoordinator = class {
 		};
 		const attachments = await this.deps.prepareAttachments(sessionKey, input.attachments);
 		const runtime = this.snapshot(sessionKey);
-		const canSteer = input.delivery === "steer" && runtime.activeRunId !== void 0 && !attachments?.length;
+		const canSteer = input.origin.type !== "endpoint" && input.delivery === "steer" && runtime.activeRunId !== void 0 && !attachments?.length;
 		const effectiveDelivery = canSteer ? "steer" : "next";
 		const row = insertSessionInput({
 			id: crypto.randomUUID(),
@@ -77,6 +77,7 @@ var SessionInputCoordinator = class {
 			content,
 			attachments,
 			thinking: input.thinking,
+			origin: input.origin,
 			targetRunId: canSteer ? runtime.activeRunId : void 0
 		});
 		if (canSteer) {
@@ -121,7 +122,8 @@ var SessionInputCoordinator = class {
 						sessionKey,
 						content: input.content,
 						attachments: input.attachments,
-						thinking: input.thinking
+						thinking: input.thinking,
+						origin: input.origin
 					});
 				} catch (error) {
 					result = {

package/dist/src/gateway/service/types.d.ts

@@ -1,9 +1,4 @@
 import type { GatewayBindMode } from '../../config/schema.js';
-export interface ServiceEvent {
-    id: string;
-    type: string;
-    payload: unknown;
-}
 /** Phase-1 channel timings (init + optional defer plan + start + inline replay). Emitted as structured logs. */
 export interface GatewayChannelStartupPhase1Metrics {
     deferChannelConnectUntilAfterHttp: boolean;

package/dist/src/gateway/service.d.ts

@@ -16,11 +16,13 @@ import { listInsights, ProactiveEventService, ProactiveInboxService, ProactiveIn
 import { GatewaySessionsApi } from './service/sessions-api.js';
 import { GatewayMarketplaceService } from './service/marketplace-service.js';
 import { GatewayAgentRunner } from './service/agent-runner.js';
-import type { GatewayServiceConfig, ServiceEvent } from './service/types.js';
+import { RealtimeRuntime } from '../realtime/runtime.js';
+import type { GatewayServiceConfig } from './service/types.js';
 import { type GatewayReadinessSnapshot } from './startup-readiness.js';
 import { type ConnectorLearningCoordinator } from '../connectors/learning-coordinator.js';
 import { type ProductLanguage } from '../voice/language-profile.js';
-export type { GatewayChannelStartupPhase1Metrics, GatewayChannelStartupPhase2Metrics, GatewayServiceConfig, ServiceEvent, } from './service/types.js';
+import { EndpointToolRuntime } from '../endpoint-tools/index.js';
+export type { GatewayChannelStartupPhase1Metrics, GatewayChannelStartupPhase2Metrics, GatewayServiceConfig, } from './service/types.js';
 export declare class GatewayService {
     private serviceConfig;
     private bus;
@@ -45,7 +47,8 @@ export declare class GatewayService {
     private readonly configCoordinator;
     private readonly modelCatalogSync;
     private auth;
-    private readonly sse;
+    readonly endpointTools: EndpointToolRuntime;
+    readonly realtime: RealtimeRuntime;
     getConfig(): Config;
     getModelCatalogSync(): ModelCatalogSyncService;
     get browserRecipes(): BrowserRecipeService;
@@ -69,6 +72,7 @@ export declare class GatewayService {
     private connectedKnowledgeCoordinator;
     private stopAutomationProductEventBridge;
     private stopSessionTranscriptAutomationEvents;
+    private stopRealtimeLogBridge;
     /**
      * Webchat agent invocation surface (`runAgent`, `abortAgentRun`, `steer*`,
      * `submitClarifyResponse`, clarify-bridge dispatch). Owns the
@@ -303,12 +307,9 @@ export declare class GatewayService {
     private collectWorkflowAgentIds;
     /** Process a message directly through the agent (for CLI mode). */
     processDirect(content: string, sessionKey?: string): Promise<string>;
-    subscribe(sessionId: string, listener: (event: ServiceEvent) => Promise<void> | void): () => void;
     emit(type: string, payload: unknown): void;
     private handleAutomationRunCompleted;
     private startAutomationProductEventBridge;
-    /** Replay events since `lastEventId` for SSE reconnection. */
-    getEventsSince(sessionId: string, lastEventId: string): ServiceEvent[];
     /**
      * Validate authentication token from request headers.
      * Returns true if auth is disabled (mode: 'none') or token is valid.