application

func (*EmailChatGateway) TriggerBotChat ¶

func (g *EmailChatGateway) TriggerBotChat(ctx context.Context, botID, content string) error

func (*ScheduleGateway) TriggerSchedule ¶

func (g *ScheduleGateway) TriggerSchedule(ctx context.Context, botID string, payload schedule.TriggerPayload, token string) (schedule.TriggerResult, error)

TriggerSchedule delegates a schedule trigger to the chat Service.

func (*Service) ACPSessionExecutionInfo ¶

func (s *Service) ACPSessionExecutionInfo(ctx context.Context, sessionID string) (ACPSessionExecutionInfo, error)

func (*Service) AbortRuntimeRun ¶

func (s *Service) AbortRuntimeRun(
	ctx context.Context,
	botID, sessionID, runID, controlID string,
) (bool, error)

AbortRuntimeRun routes an abort through the durable runtime and then reconciles its lifecycle asynchronously. The acknowledgement remains owned by AbortControl; audit persistence failures are counted and logged only.

func (*Service) AdmitSubagentRun ¶

func (s *Service) AdmitSubagentRun(
	ctx context.Context,
	botID, threadID, invocationID string,
	submission []byte,
) (context.Context, tools.SubagentAdmission, func(tools.SubagentTerminal), error)

AdmitSubagentRun puts a spawned agent's turn through the same durable admission every other turn takes, and answers in the vocabulary of the turn port so the tool layer never sees a runtime type.

The slot a subagent takes is its own thread's, not its parent's: a parent may have several agents working at once, and each of those threads still runs one turn at a time. Busy therefore means *this agent* is already working — a fact the parent model can act on — rather than a failure to report.

func (*Service) AdvancePlainTextUserInput ¶

func (s *Service) AdvancePlainTextUserInput(ctx context.Context, input userinput.AdvanceTextInput) (userinput.AdvanceTextResult, error)

func (*Service) ApplyUserMessageHookAndPersistUserTurn ¶

func (s *Service) ApplyUserMessageHookAndPersistUserTurn(ctx context.Context, req ChatRequest) (ChatRequest, messagepkg.Message, error)

ApplyUserMessageHookAndPersistUserTurn applies the normal user-message hook before writing a user turn ahead of agent execution. Web skill activations use this so a denied hook cannot leave a persisted user-only special turn.

func (*Service) Chat ¶

func (s *Service) Chat(ctx context.Context, req ChatRequest) (ChatResponse, error)

Chat sends a synchronous chat request and stores the result.

func (*Service) CommitToolApprovalResponse ¶

func (s *Service) CommitToolApprovalResponse(ctx context.Context, input ToolApprovalResponseInput) (CommittedToolApprovalResponse, error)

func (*Service) CommitUserInputResponse ¶

func (s *Service) CommitUserInputResponse(ctx context.Context, input UserInputResponseInput) (CommittedUserInputResponse, error)

func (*Service) ConfigureACPMode ¶

func (s *Service) ConfigureACPMode(ctx context.Context, input ACPModeRequest) (ACPModeState, error)

ConfigureACPMode exposes the Agent's session modes without interpreting their IDs. An empty ModeID reads state; a non-empty ID is sent unchanged to session/set_mode and affects only the live ACP session.

func (*Service) ContinueCommittedToolApprovalResponse ¶

func (s *Service) ContinueCommittedToolApprovalResponse(ctx context.Context, committed CommittedToolApprovalResponse, eventCh chan<- WSStreamEvent) error

func (*Service) ContinueCommittedUserInputResponse ¶

func (s *Service) ContinueCommittedUserInputResponse(ctx context.Context, committed CommittedUserInputResponse, eventCh chan<- WSStreamEvent) error

func (*Service) DeferSessionCompaction ¶

func (s *Service) DeferSessionCompaction(botID, sessionID, runID string) func()

func (*Service) EditLatestMessageWS ¶

func (s *Service) EditLatestMessageWS(ctx context.Context, input EditLatestMessageInput, eventCh chan<- WSStreamEvent, abortCh <-chan struct{}) error

func (*Service) EnsureTerminalContextLifecycle ¶

func (s *Service) EnsureTerminalContextLifecycle(
	ctx context.Context,
	runID, botID, sessionID string,
	cause error,
)

EnsureTerminalContextLifecycle records a content-light fallback for runs that fail before native context assembly creates a snapshot. A terminal writer with an authoritative holder always wins this read-before-create race.

func (*Service) InlineImageAttachments ¶

func (s *Service) InlineImageAttachments(ctx context.Context, botID string, refs []timeline.ImageAttachmentRef) []sdk.ImagePart

InlineImageAttachments resolves image content hashes to sdk.ImagePart values using the configured asset loader. Intended for the discuss driver to inline images from new RC segments before calling the LLM.

func (*Service) LinkOutboundAssets ¶

func (s *Service) LinkOutboundAssets(ctx context.Context, botID, sessionID string, assets []messagepkg.AssetRef)

LinkOutboundAssets links bot-generated assets to the assistant message that produced them. Assets carrying a `tool_call_id` metadata entry are anchored to the assistant message containing that tool call, so a history rebuild keeps the live ordering (e.g. a generated image stays above the closing text). Assets without one fall back to the latest assistant message. When sessionID is provided, the search is scoped to that session; otherwise it falls back to a bot-wide search. Used by the WebSocket path where attachment ingestion happens after message persistence.

func (*Service) PendingRuntimeDecision ¶

func (s *Service) PendingRuntimeDecision(ctx context.Context, runID string) (sessionruntime.DecisionTarget, bool, error)

PendingRuntimeDecision resolves the one durable decision that parked runID. It is used only by expired-owner recovery, where preserving the exact row is required before advancing the run's fencing token.

func (*Service) Pipeline ¶

func (s *Service) Pipeline() *timeline.Pipeline

Pipeline returns the configured pipeline, or nil.

func (*Service) PrepareEditLatestTurnOperation ¶

func (s *Service) PrepareEditLatestTurnOperation(ctx context.Context, sessionID, turnID string) (string, error)

PrepareEditLatestTurnOperation validates the replacement target before Session Runtime publishes it to subscribers and returns the exact persisted user message where the old turn begins.

func (*Service) PrepareRetryLatestTurnOperation ¶

func (s *Service) PrepareRetryLatestTurnOperation(ctx context.Context, sessionID, turnID string) (string, error)

PrepareRetryLatestTurnOperation validates the replacement target before Session Runtime publishes it to subscribers and returns the exact persisted message where the old assistant tail begins.

func (*Service) ResolveRunConfig ¶

func (s *Service) ResolveRunConfig(ctx context.Context, botID, sessionID, channelIdentityID, currentPlatform, replyTarget, conversationType, chatToken string) (ResolveRunConfigResult, error)

ResolveRunConfig builds a complete RunConfig (model, system prompt, tools, identity) for a bot+session without loading messages or requiring a query. The caller is responsible for filling RunConfig.Messages. Used by discuss turns to reuse the service's model, tools, and prompt pipeline.

func (*Service) ResolveRuntimeDecision ¶

func (s *Service) ResolveRuntimeDecision(ctx context.Context, commandType, decisionID string) (sessionruntime.DecisionTarget, error)

ResolveRuntimeDecision reads the authoritative decision row before any live owner lookup. Terminal rows are returned too: the router needs to distinguish a known, already-decided request from an unfenced ACP/MCP request.

func (*Service) ResolveTurnIDForMessage ¶

func (s *Service) ResolveTurnIDForMessage(ctx context.Context, sessionID, messageID string) (string, error)

ResolveTurnIDForMessage maps a stored message id onto the round that contains it. It backs the compatibility shim for the pre-turn `message_id` spelling and has no other caller: a client holds a turn id from admission onward and names the round directly, while needing a stored message id is exactly what used to force it to wait for the round to persist.

Remove it, and the shim, once the compatibility window for `message_id` closes. (Not marked Deprecated in the godoc sense — the shim is its intended caller, so flagging that call adds noise rather than signal.)

func (*Service) RespondToolApproval ¶

func (s *Service) RespondToolApproval(ctx context.Context, input turn.ToolApprovalResponse, eventCh chan<- json.RawMessage) error

RespondToolApproval resumes a turn deferred on tool approval.

func (*Service) RespondUserInput ¶

func (s *Service) RespondUserInput(ctx context.Context, input turn.UserInputResponse, eventCh chan<- json.RawMessage) error

RespondUserInput resumes a turn deferred on ask_user.

func (*Service) RetryLatestMessageWS ¶

func (s *Service) RetryLatestMessageWS(ctx context.Context, input RetryLatestMessageInput, eventCh chan<- WSStreamEvent, abortCh <-chan struct{}) error

func (*Service) SetACPSessionPool ¶

func (s *Service) SetACPSessionPool(pool acpPrompter)

func (*Service) SetAllowedTeam ¶

func (s *Service) SetAllowedTeam(teamID string)

SetAllowedTeam restricts the service to a single team. The in-process runtime's database pool is session-bound to one team GUC, so commands for any other team must fail closed (turn.ErrTeamNotServed) instead of silently operating on the bound team's data. The composition root injects the self-hosted singleton team; a hosted multi-team runtime replaces this with request-scoped team binding.

func (*Service) SetBackgroundManager ¶

func (s *Service) SetBackgroundManager(m *background.Manager)

SetBackgroundManager configures the background task manager used for task summaries and background status tooling.

func (*Service) SetBotPermissionChecker ¶

func (s *Service) SetBotPermissionChecker(checker botPermissionChecker)

func (*Service) SetCompactionService ¶

func (s *Service) SetCompactionService(service *compaction.Service)

SetCompactionService configures the compaction service for context compaction.

func (*Service) SetContextAbsoluteMaxTokens ¶

func (s *Service) SetContextAbsoluteMaxTokens(v int)

SetContextAbsoluteMaxTokens sets the server-wide context admission cap (CM-ADM-001). Zero keeps the shared default; the cap is never disabled.

func (*Service) SetEventPublisher ¶

func (s *Service) SetEventPublisher(p messageevent.Publisher)

SetEventPublisher configures the event publisher for broadcasting events such as session title updates.

func (*Service) SetGatewayAssetLoader ¶

func (s *Service) SetGatewayAssetLoader(loader gatewayAssetLoader)

SetGatewayAssetLoader configures optional asset loading used to inline attachments before calling the agent gateway.

func (*Service) SetHookService ¶

func (s *Service) SetHookService(service *hooks.Service)

func (*Service) SetMemoryRegistry ¶

func (s *Service) SetMemoryRegistry(registry *memprovider.Registry)

SetMemoryRegistry sets the provider registry for memory operations.

func (*Service) SetPipeline ¶

func (s *Service) SetPipeline(p *timeline.Pipeline)

SetPipeline configures the DCP pipeline for RC-based context assembly. When set, resolve() will use RC from the pipeline instead of loading history from bot_history_messages for sessions that have pipeline data.

func (*Service) SetPlatformIdentitySource ¶

func (s *Service) SetPlatformIdentitySource(source PlatformIdentitySource)

SetPlatformIdentitySource configures the neutral source used to load platform identity metadata for system prompt generation.

func (*Service) SetSessionRuntime ¶

func (s *Service) SetSessionRuntime(manager *sessionruntime.Manager)

SetSessionRuntime injects the durable admission gate. Setter injection rather than a constructor argument because the manager and this service are wired into the same fx graph and each is reachable from the other's dependencies.

func (*Service) SetSessionService ¶

func (s *Service) SetSessionService(service SessionService)

SetSessionService configures the session service used for auto title generation.

func (*Service) SetSkillLoader ¶

func (s *Service) SetSkillLoader(sl SkillLoader)

SetSkillLoader sets the skill loader used to populate usable skills in gateway requests.

func (*Service) SetToolApprovalService ¶

func (s *Service) SetToolApprovalService(service *toolapproval.Service)

func (*Service) SetUserInputService ¶

func (s *Service) SetUserInputService(service *userinput.Service)

func (*Service) SetWorkdirResolver ¶

func (s *Service) SetWorkdirResolver(resolver sessionWorkdirResolver)

SetWorkdirResolver configures resolution of session workdir bindings.

func (*Service) SetWorkspaceTargetResolver ¶

func (s *Service) SetWorkspaceTargetResolver(resolver workspaceTargetResolver)

SetWorkspaceTargetResolver configures request-scoped Computer resolution.

func (*Service) StartTurn ¶

func (s *Service) StartTurn(ctx context.Context, cmd turn.StartTurnCommand) (turn.RunHandle, error)

StartTurn validates the command, admits it durably, starts the underlying stream, and returns a handle whose Events/Errs mirror the application stream.

func (*Service) StoreRound ¶

func (s *Service) StoreRound(ctx context.Context, botID, sessionID, channelIdentityID, currentPlatform string, sdkMessages []sdk.Message, modelID string) error

StoreRound persists SDK messages as a complete round (assistant + tool output) into bot_history_messages with full metadata, usage tracking, and memory extraction. Used by the discuss driver so it shares the same persistence quality as chat mode.

func (*Service) StreamChat ¶

func (s *Service) StreamChat(ctx context.Context, req ChatRequest) (<-chan StreamChunk, <-chan error)

StreamChat runs a streaming chat via the internal agent.

func (*Service) StreamChatWS ¶

func (s *Service) StreamChatWS(
	ctx context.Context,
	req ChatRequest,
	eventCh chan<- WSStreamEvent,
	abortCh <-chan struct{},
) error

StreamChatWS resolves the agent context and streams agent events. Events are sent on eventCh. When abortCh is closed, the context is cancelled.

func (*Service) SubagentRunObserver ¶

func (s *Service) SubagentRunObserver(ctx context.Context) native.SpawnRunObserver

SubagentRunObserver returns a per-event publisher that feeds one spawned agent run's stream into the session runtime, or nil when there is nothing to publish to — no runtime configured, or a context without an admitted handle.

The returned function mirrors forwardWSStreamEvents' publishing discipline: events are published on a context that survives the run's cancellation (an aborted run's final events are exactly the ones a subscriber must see), and a lost ownership stops publishing outright because every later event would fail identically.

func (*Service) SubagentStepCommit ¶

func (s *Service) SubagentStepCommit(
	ctx context.Context,
	botID, sessionID, modelID, turnRequestMessageID string,
	contextLifecycle *contextfrag.LifecycleHolder,
	onPersisted func(),
) (
	func(context.Context, int, *sdk.StepResult) error,
	func(context.Context, int, *sdk.StepResult) error,
)

SubagentStepCommit returns the per-step persistence callback for one spawned agent run, or nil when incremental persistence is unavailable — no admitted handle on the context, no fence, no persisted request row to bind steps to, or a message service that cannot write fenced steps. A nil return means the spawn path keeps its terminal-snapshot persistence, so this is a capability probe as much as a constructor.

The callbacks persist exactly what the legacy terminal path persists — every non-user message of the step, marshalled whole — only earlier: each complete step or safe interrupted checkpoint lands in one fenced transaction instead of the whole run landing at the end. onPersisted fires after either kind of durable write; the spawn provider uses it to stop retrying an attempt whose output is already part of history.

func (*Service) TriggerSchedule ¶

func (s *Service) TriggerSchedule(ctx context.Context, botID string, payload schedule.TriggerPayload, token string) (triggerResult schedule.TriggerResult, err error)

TriggerSchedule executes a scheduled command via the internal agent.

func (*Service) ValidateWorkspaceTarget ¶

func (s *Service) ValidateWorkspaceTarget(ctx context.Context, botID, targetID string) error

ValidateWorkspaceTarget validates a user-selected Computer without changing the Bot's Primary target. It is used by handlers before creating a session.