@agimon-ai/po-session 0.0.0-alpha.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Vuong Ngo
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,44 @@
+# @agimon-ai/po-session
+
+Shared session coordination services for Po.
+
+The foundation owns the session-scoped background-work coordinator used by optional execution packages. It also provides SQLite-backed delivery with host-bound sender identities, durable inbox and outbox state, acknowledgements, keyed duplicate suppression, and prompt admission that wakes idle recipients. Interrupted admission is marked for recovery and is never replayed automatically.
+
+Its public services also include:
+
+- An in-memory, permission-filtered presence directory with qualified references, separate reachability, runtime, activity, and Voice facts, incarnation and sequence tracking, expiry, and snapshot recovery after sequence gaps.
+- A SQLite communication-group registry with one owner authority, explicit qualified members, enrollment policy, revision conflicts, and current-membership authorization.
+- An agent-facing intercom service for `discover`, attributed direct `send`, `messages`, and correlated `report` operations. Compositions acquire this service explicitly. Group membership grants only discovery and messaging, never session controls or Voice ownership.
+
+Session delivery rechecks current authority before each initial send and queued retry. Removing a member therefore blocks later publication while preserving already accepted delivery evidence.
+
+## Paired hosts
+
+A paired host is configured privately in `~/.po/session/peers.json`. The file must be owner-only (`0600`). Each peer needs an HTTPS tunnel URL, a shared secret of at least 32 characters, and explicit operation-specific session allowlists. Pairing alone grants no Session or Voice access.
+
+```json
+{
+  "version": 1,
+  "hostId": "home-host",
+  "peers": [
+    {
+      "hostId": "work-host",
+      "url": "https://work.example.net/",
+      "secret": "replace-with-a-private-32-character-minimum-secret",
+      "allowedSessionIds": ["approved-message-session-id"],
+      "allowedVoiceSessionIds": ["approved-voice-session-id"]
+    }
+  ]
+}
+```
+
+Use `peer/<host-id>/<session-id>` as a qualified target. `allowedSessionIds` grants durable messages and acknowledgements. `allowedVoiceSessionIds` separately grants bounded Voice client-media relay operations. Neither grant exposes owner, `/host/*`, or `/hub/*` routes.
+
+## Development
+
+```bash
+pnpm build
+pnpm typecheck
+pnpm test
+pnpm lint
+```

package/dist/apiContracts.cjs

@@ -0,0 +1,37 @@
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
+});
+let _agimon_ai_po_core_apiContracts = require("@agimon-ai/po-core/apiContracts");
+let typebox = require("typebox");
+//#region src/schemas/apiContracts.ts
+/** The endpoint validates its own HMAC peer credential because tunnel device authentication is intentionally bypassed. */
+const http = [{
+	id: "peer-inbox",
+	scope: "global",
+	basePath: "session-peer",
+	method: "POST",
+	path: "/inbox",
+	authentication: "none",
+	description: "Accept an HMAC-authenticated durable Session delivery envelope from an explicitly configured tunnel peer.",
+	body: {
+		contentType: "application/json",
+		required: true,
+		schema: typebox.Type.Unknown()
+	},
+	responses: (0, _agimon_ai_po_core_apiContracts.jsonApiResponses)(typebox.Type.Object({
+		accepted: typebox.Type.Boolean(),
+		state: typebox.Type.String()
+	}))
+}];
+const apiContracts = (0, _agimon_ai_po_core_apiContracts.defineApiContract)({
+	version: 1,
+	http,
+	sockets: [],
+	dynamic: []
+});
+//#endregion
+exports.apiContracts = apiContracts;
+exports.default = apiContracts;
+
+//# sourceMappingURL=apiContracts.cjs.map

package/dist/apiContracts.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiContracts.cjs","names":["Type","jsonApiResponses","defineApiContract"],"sources":["../src/schemas/apiContracts.ts"],"sourcesContent":["import { defineApiContract, jsonApiResponses, type DoomHttpContract } from '@agimon-ai/po-core/apiContracts';\nimport { Type } from 'typebox';\n\n/** The endpoint validates its own HMAC peer credential because tunnel device authentication is intentionally bypassed. */\nconst http: DoomHttpContract[] = [\n  {\n    id: 'peer-inbox',\n    scope: 'global',\n    basePath: 'session-peer',\n    method: 'POST',\n    path: '/inbox',\n    authentication: 'none',\n    description:\n      'Accept an HMAC-authenticated durable Session delivery envelope from an explicitly configured tunnel peer.',\n    body: { contentType: 'application/json', required: true, schema: Type.Unknown() },\n    responses: jsonApiResponses(Type.Object({ accepted: Type.Boolean(), state: Type.String() })),\n  },\n];\n\nexport const apiContracts = defineApiContract({ version: 1, http, sockets: [], dynamic: [] });\nexport default apiContracts;\n"],"mappings":";;;;;;;;AAIA,MAAM,OAA2B,CAC/B;CACE,IAAI;CACJ,OAAO;CACP,UAAU;CACV,QAAQ;CACR,MAAM;CACN,gBAAgB;CAChB,aACE;CACF,MAAM;EAAE,aAAa;EAAoB,UAAU;EAAM,QAAQA,QAAAA,KAAK,QAAQ;CAAE;CAChF,YAAA,GAAWC,gCAAAA,iBAAAA,CAAiBD,QAAAA,KAAK,OAAO;EAAE,UAAUA,QAAAA,KAAK,QAAQ;EAAG,OAAOA,QAAAA,KAAK,OAAO;CAAE,CAAC,CAAC;AAC7F,CACF;AAEA,MAAa,gBAAA,GAAeE,gCAAAA,kBAAAA,CAAkB;CAAE,SAAS;CAAG;CAAM,SAAS,CAAC;CAAG,SAAS,CAAC;AAAE,CAAC"}

package/dist/apiContracts.d.mts

@@ -0,0 +1,52 @@
+//#region src/schemas/apiContracts.d.ts
+export declare const apiContracts: {
+  version: 1;
+  protocols?: Record<string, string> | undefined;
+  schemas?: Record<string, boolean | object> | undefined;
+  http: {
+    id: string;
+    scope: "global" | "session" | "workspace";
+    basePath?: string | undefined;
+    path: string;
+    method: "DELETE" | "GET" | "HEAD" | "OPTIONS" | "PATCH" | "POST" | "PUT";
+    description: string;
+    availability?: string | undefined;
+    authentication: "device" | "none" | "owner";
+    parameters?: {
+      name: string;
+      in: "header" | "path" | "query";
+      required: boolean;
+      schema: boolean | object;
+    }[] | undefined;
+    body?: {
+      contentType: string;
+      contentTypes?: string[] | undefined;
+      required: boolean;
+      schema: boolean | object;
+    } | undefined;
+    responses: Record<string, {
+      description: string;
+      contentType?: string | undefined;
+      schema?: boolean | object | undefined;
+      events?: Record<string, boolean | object> | undefined;
+    }>;
+  }[];
+  sockets: {
+    id: string;
+    scope: "global" | "session" | "workspace";
+    description: string;
+    availability?: string | undefined;
+    service: string;
+    member: string;
+    direction: "client-to-server" | "server-to-client";
+    kind: "channel" | "method" | "state";
+    input: boolean | object;
+    output?: boolean | object | undefined;
+    errors?: boolean | object | undefined;
+  }[];
+  dynamic: string[];
+  gaps?: string[] | undefined;
+};
+//#endregion
+export { apiContracts as default };
+//# sourceMappingURL=apiContracts.d.mts.map

package/dist/apiContracts.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiContracts.d.mts","names":[],"sources":["../src/schemas/apiContracts.ts"],"mappings":";qBAmBa"}

package/dist/apiContracts.mjs

@@ -0,0 +1,32 @@
+import { defineApiContract, jsonApiResponses } from "@agimon-ai/po-core/apiContracts";
+import { Type } from "typebox";
+//#region src/schemas/apiContracts.ts
+/** The endpoint validates its own HMAC peer credential because tunnel device authentication is intentionally bypassed. */
+const http = [{
+	id: "peer-inbox",
+	scope: "global",
+	basePath: "session-peer",
+	method: "POST",
+	path: "/inbox",
+	authentication: "none",
+	description: "Accept an HMAC-authenticated durable Session delivery envelope from an explicitly configured tunnel peer.",
+	body: {
+		contentType: "application/json",
+		required: true,
+		schema: Type.Unknown()
+	},
+	responses: jsonApiResponses(Type.Object({
+		accepted: Type.Boolean(),
+		state: Type.String()
+	}))
+}];
+const apiContracts = defineApiContract({
+	version: 1,
+	http,
+	sockets: [],
+	dynamic: []
+});
+//#endregion
+export { apiContracts, apiContracts as default };
+
+//# sourceMappingURL=apiContracts.mjs.map

package/dist/apiContracts.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiContracts.mjs","names":[],"sources":["../src/schemas/apiContracts.ts"],"sourcesContent":["import { defineApiContract, jsonApiResponses, type DoomHttpContract } from '@agimon-ai/po-core/apiContracts';\nimport { Type } from 'typebox';\n\n/** The endpoint validates its own HMAC peer credential because tunnel device authentication is intentionally bypassed. */\nconst http: DoomHttpContract[] = [\n  {\n    id: 'peer-inbox',\n    scope: 'global',\n    basePath: 'session-peer',\n    method: 'POST',\n    path: '/inbox',\n    authentication: 'none',\n    description:\n      'Accept an HMAC-authenticated durable Session delivery envelope from an explicitly configured tunnel peer.',\n    body: { contentType: 'application/json', required: true, schema: Type.Unknown() },\n    responses: jsonApiResponses(Type.Object({ accepted: Type.Boolean(), state: Type.String() })),\n  },\n];\n\nexport const apiContracts = defineApiContract({ version: 1, http, sockets: [], dynamic: [] });\nexport default apiContracts;\n"],"mappings":";;;;AAIA,MAAM,OAA2B,CAC/B;CACE,IAAI;CACJ,OAAO;CACP,UAAU;CACV,QAAQ;CACR,MAAM;CACN,gBAAgB;CAChB,aACE;CACF,MAAM;EAAE,aAAa;EAAoB,UAAU;EAAM,QAAQ,KAAK,QAAQ;CAAE;CAChF,WAAW,iBAAiB,KAAK,OAAO;EAAE,UAAU,KAAK,QAAQ;EAAG,OAAO,KAAK,OAAO;CAAE,CAAC,CAAC;AAC7F,CACF;AAEA,MAAa,eAAe,kBAAkB;CAAE,SAAS;CAAG;CAAM,SAAS,CAAC;CAAG,SAAS,CAAC;AAAE,CAAC"}

package/dist/extensions/server.cjs

@@ -0,0 +1,182 @@
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
+});
+const require_sessionDelivery = require("../sessionDelivery-CkuX6jlw.cjs");
+let node_fs = require("node:fs");
+node_fs = require_sessionDelivery.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_sessionDelivery.__toESM(node_path, 1);
+let _agimon_ai_po_core_piSettings = require("@agimon-ai/po-core/piSettings");
+let _agimon_ai_po_core_serverFacet = require("@agimon-ai/po-core/serverFacet");
+let _agimon_ai_po_core_extensionFile = require("@agimon-ai/po-core/extensionFile");
+//#region src/services/peerInbox/index.ts
+const inboxes = /* @__PURE__ */ new Map();
+/** Registers one live session-owned peer inbox. This registry is reachable only by the Session route. */
+function registerSessionPeerInbox(sessionId, inbox) {
+	if (inboxes.has(sessionId)) throw new Error(`Session peer inbox '${sessionId}' is already registered.`);
+	inboxes.set(sessionId, inbox);
+	return () => {
+		if (inboxes.get(sessionId) === inbox) inboxes.delete(sessionId);
+	};
+}
+function deliverSessionPeerEnvelope(targetSessionId, sourceKey, type, payload) {
+	return inboxes.get(targetSessionId)?.(sourceKey, type, payload);
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(backend)/root.server.ts
+var root_server_default = (0, _agimon_ai_po_core_extensionFile.defineRoot)((pluginContext) => ({
+	value: void 0,
+	services: [require_sessionDelivery.provideBackgroundWorkService, (context) => {
+		const agent = pluginContext.agent;
+		const session = agent?.context.session;
+		const communication = pluginContext.host.context.sessionCommunication;
+		const homeDirectory = pluginContext.host.context.homeDirectory;
+		const sessionService = pluginContext.host.context.sessionService;
+		if (!agent || !session?.admitPrompt || !communication || !homeDirectory || !sessionService?.canCommunicate) throw new Error("Session delivery requires the headless agent, authenticated session communication, host home directory, and communication policy.");
+		const sessionDirectory = node_path.default.join((0, _agimon_ai_po_core_piSettings.poHomeDirectory)(homeDirectory), "session");
+		const deliveryDirectory = node_path.default.join(sessionDirectory, "delivery");
+		node_fs.default.mkdirSync(deliveryDirectory, {
+			recursive: true,
+			mode: 448
+		});
+		const peerCommunication = require_sessionDelivery.createPeerCommunication({
+			local: communication,
+			homeDirectory
+		});
+		const peerConfig = require_sessionDelivery.readSessionPeerConfig(homeDirectory);
+		const remotePeerIsGranted = (peerKey) => {
+			const peer = require_sessionDelivery.parseRemoteSessionReference(peerKey);
+			return peer !== void 0 && peerConfig?.peers.some((candidate) => candidate.hostId === peer.hostId && candidate.allowedSessionIds.includes(agent.context.sessionId)) === true;
+		};
+		const fallbackAuthorization = (peerKey) => sessionService.canCommunicate?.(agent.context.sessionId, peerKey) === true || remotePeerIsGranted(peerKey);
+		const groups = peerConfig ? require_sessionDelivery.createSessionGroupStore({ databasePath: node_path.default.join(sessionDirectory, "groups.sqlite") }) : void 0;
+		const localHostId = peerConfig?.hostId;
+		const selfReference = localHostId ? require_sessionDelivery.peerSessionReference(localHostId, agent.context.sessionId) : void 0;
+		const groupAuthorization = groups && selfReference && localHostId ? require_sessionDelivery.createSessionGroupDeliveryAuthorizer({
+			selfReference,
+			groups,
+			peerReference: (peerKey) => require_sessionDelivery.parseRemoteSessionReference(peerKey) === void 0 ? require_sessionDelivery.peerSessionReference(localHostId, peerKey) : peerKey,
+			fallback: fallbackAuthorization
+		}) : void 0;
+		const { service, close: closeDelivery } = require_sessionDelivery.provideSessionDeliveryService(context, {
+			databasePath: node_path.default.join(deliveryDirectory, `${agent.context.sessionId}.sqlite`),
+			recipientKey: agent.context.sessionId,
+			communication: peerCommunication,
+			authorizePeer: (peerKey, metadata) => groupAuthorization?.(peerKey, metadata) ?? fallbackAuthorization(peerKey),
+			admitPrompt: (prompt, delivery) => session.admitPrompt(prompt, delivery)
+		});
+		const unprovide = [];
+		if (groups && selfReference && peerConfig) {
+			const directory = require_sessionDelivery.createSessionDirectory({ authorizeDiscovery: (caller, subject) => {
+				const reference = require_sessionDelivery.peerSessionReference(subject.hostId, subject.sessionId);
+				return groups.groupsFor(caller).some((group) => group.members.includes(reference)) ? { capabilities: ["message"] } : void 0;
+			} });
+			for (const peer of peerConfig.peers) for (const sessionId of peer.allowedSessionIds) directory.observe({
+				hostId: peer.hostId,
+				sessionId,
+				hostIncarnation: "unknown",
+				sessionIncarnation: "unknown",
+				sequence: 0,
+				observedAt: 0,
+				staleAfterMs: 0,
+				deliveryTarget: require_sessionDelivery.peerSessionReference(peer.hostId, sessionId),
+				reachability: "unknown",
+				runtime: "unknown",
+				activity: "unknown",
+				voice: {
+					eligible: "unknown",
+					readiness: "unknown"
+				}
+			});
+			unprovide.push(context.provide(require_sessionDelivery.DOOM_SESSION_INTERCOM_SERVICE, require_sessionDelivery.createSessionIntercom({
+				selfReference,
+				directory,
+				groups,
+				delivery: service
+			})));
+		}
+		const unregister = registerSessionPeerInbox(agent.context.sessionId, (sourceKey, kind, payload) => service.receive?.(sourceKey, kind, payload));
+		return async () => {
+			unregister();
+			for (const release of unprovide.reverse()) release();
+			await closeDelivery();
+			groups?.close();
+		};
+	}]
+}));
+//#endregion
+//#region src/services/peerInboxApi/index.ts
+const MAX_BODY_BYTES = 65536;
+const DELIVERY_TYPES = /* @__PURE__ */ new Set(["doom/session-delivery/envelope", "doom/session-delivery/ack"]);
+function response(status, error) {
+	return Response.json({ error }, { status });
+}
+//#endregion
+//#region src/extensions/(backend)/api/session-peer/route.server.ts
+var route_server_default = (0, _agimon_ai_po_core_extensionFile.defineRoute)({
+	basePath: "session-peer",
+	start(context) {
+		const config = context.homeDirectory === void 0 ? void 0 : require_sessionDelivery.readSessionPeerConfig(context.homeDirectory);
+		const replay = context.homeDirectory === void 0 ? void 0 : require_sessionDelivery.createPeerReplayGuard(context.homeDirectory);
+		return {
+			async fetch(request) {
+				if (request.method !== "POST" || new URL(request.url).pathname !== "/inbox") return response(404, "Not found.");
+				if (!config) return response(503, "Paired Session delivery is not configured.");
+				const length = request.headers.get("content-length");
+				if (length !== null && (!/^\d+$/u.test(length) || Number(length) > MAX_BODY_BYTES)) return response(413, "Request body is too large.");
+				const body = await request.text();
+				if (Buffer.byteLength(body) > MAX_BODY_BYTES) return response(413, "Request body is too large.");
+				const peer = require_sessionDelivery.verifyPeerRequest(config, request, body);
+				if (!peer) return response(401, "Paired Session request is unauthorized.");
+				if (!replay?.admit(request)) return response(409, "Paired Session request was already received.");
+				let parsed;
+				try {
+					parsed = JSON.parse(body);
+				} catch {
+					return response(400, "Paired Session request is malformed.");
+				}
+				const envelope = require_sessionDelivery.parseSessionPeerEnvelope(parsed);
+				if (!envelope || !DELIVERY_TYPES.has(envelope.type)) return response(400, "Paired Session envelope is invalid.");
+				if (!peer.allowedSessionIds.includes(envelope.targetSessionId)) return response(403, "Peer is not granted this session.");
+				const state = deliverSessionPeerEnvelope(envelope.targetSessionId, require_sessionDelivery.peerSessionReference(peer.hostId, envelope.sourceSessionId), envelope.type, envelope.payload);
+				return state === void 0 ? response(404, "Target Session is unavailable.") : Response.json({
+					accepted: true,
+					state
+				}, { status: 202 });
+			},
+			close: () => replay?.close()
+		};
+	}
+});
+//#endregion
+//#region generated/server.ts
+const at = (value, context) => typeof value === "function" ? value(context) : value;
+const facet = (0, _agimon_ai_po_core_serverFacet.defineServerPlugin)({
+	name: "@agimon-ai/po-session",
+	providerOverrides: (0, _agimon_ai_po_core_serverFacet.composeServerProviderOverrides)(root_server_default),
+	global: (context) => ({ get api() {
+		return [at(route_server_default, context)];
+	} }),
+	workspace: (context) => ({ get api() {
+		return [at(route_server_default, context)];
+	} }),
+	session: async (context) => {
+		const scopeSession = await root_server_default(context);
+		return {
+			...(0, _agimon_ai_po_core_extensionFile.composeRootHooks)(scopeSession),
+			get api() {
+				return [at(route_server_default, context)];
+			},
+			services: [...scopeSession.services ?? []],
+			get activities() {
+				return [...scopeSession.activities ?? []];
+			}
+		};
+	}
+});
+//#endregion
+exports.default = facet;
+exports.facet = facet;
+
+//# sourceMappingURL=server.cjs.map

package/dist/extensions/server.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.cjs","names":["defineRoot","provideBackgroundWorkService","path","poHomeDirectory","createPeerCommunication","readSessionPeerConfig","parseRemoteSessionReference","createSessionGroupStore","peerSessionReference","createSessionGroupDeliveryAuthorizer","provideSessionDeliveryService","createSessionDirectory","DOOM_SESSION_INTERCOM_SERVICE","createSessionIntercom","readSessionPeerConfig","createPeerReplayGuard","verifyPeerRequest","parseSessionPeerEnvelope","peerSessionReference","defineRoute","defineServerPlugin","composeServerProviderOverrides","rootSession","apiRoute","composeRootHooks"],"sources":["../../src/services/peerInbox/index.ts","../../src/extensions/workspaces/sessions/(backend)/root.server.ts","../../src/services/peerInboxApi/index.ts","../../src/extensions/(backend)/api/session-peer/route.server.ts","../../generated/server.ts"],"sourcesContent":["import type { DoomSessionDeliveryInboxState } from '../sessionDelivery';\n\nexport type SessionPeerInbox = (\n  sourceKey: string,\n  type: string,\n  payload: unknown,\n) => DoomSessionDeliveryInboxState | undefined;\n\nconst inboxes = new Map<string, SessionPeerInbox>();\n\n/** Registers one live session-owned peer inbox. This registry is reachable only by the Session route. */\nexport function registerSessionPeerInbox(sessionId: string, inbox: SessionPeerInbox): () => void {\n  if (inboxes.has(sessionId)) throw new Error(`Session peer inbox '${sessionId}' is already registered.`);\n  inboxes.set(sessionId, inbox);\n  return () => {\n    if (inboxes.get(sessionId) === inbox) inboxes.delete(sessionId);\n  };\n}\n\nexport function deliverSessionPeerEnvelope(\n  targetSessionId: string,\n  sourceKey: string,\n  type: string,\n  payload: unknown,\n): DoomSessionDeliveryInboxState | undefined {\n  return inboxes.get(targetSessionId)?.(sourceKey, type, payload);\n}\n","import fs from 'node:fs';\nimport path from 'node:path';\n\nimport { defineRoot } from '@agimon-ai/po-core/extensionFile';\nimport { poHomeDirectory } from '@agimon-ai/po-core/piSettings';\nimport type { DoomServerPluginContext } from '@agimon-ai/po-core/serverFacet';\n\nimport { provideBackgroundWorkService } from '../../../../services/backgroundWorkService';\nimport { registerSessionPeerInbox } from '../../../../services/peerInbox';\nimport {\n  createPeerCommunication,\n  parseRemoteSessionReference,\n  peerSessionReference,\n  readSessionPeerConfig,\n} from '../../../../services/peerTransport';\nimport { provideSessionDeliveryService } from '../../../../services/sessionDelivery';\nimport { createSessionDirectory } from '../../../../services/sessionDirectory';\nimport { createSessionGroupStore } from '../../../../services/sessionGroups';\nimport {\n  DOOM_SESSION_INTERCOM_SERVICE,\n  createSessionGroupDeliveryAuthorizer,\n  createSessionIntercom,\n} from '../../../../services/sessionIntercom';\n\nexport default defineRoot((pluginContext: DoomServerPluginContext) => ({\n  value: undefined,\n  services: [\n    provideBackgroundWorkService,\n    (context) => {\n      const agent = pluginContext.agent;\n      const session = agent?.context.session;\n      const communication = pluginContext.host.context.sessionCommunication;\n      const homeDirectory = pluginContext.host.context.homeDirectory;\n      const sessionService = pluginContext.host.context.sessionService;\n      if (!agent || !session?.admitPrompt || !communication || !homeDirectory || !sessionService?.canCommunicate) {\n        throw new Error(\n          'Session delivery requires the headless agent, authenticated session communication, host home directory, and communication policy.',\n        );\n      }\n      const sessionDirectory = path.join(poHomeDirectory(homeDirectory), 'session');\n      const deliveryDirectory = path.join(sessionDirectory, 'delivery');\n      fs.mkdirSync(deliveryDirectory, { recursive: true, mode: 0o700 });\n      const peerCommunication = createPeerCommunication({ local: communication, homeDirectory });\n      const peerConfig = readSessionPeerConfig(homeDirectory);\n      const remotePeerIsGranted = (peerKey: string): boolean => {\n        const peer = parseRemoteSessionReference(peerKey);\n        return (\n          peer !== undefined &&\n          peerConfig?.peers.some(\n            (candidate) =>\n              candidate.hostId === peer.hostId && candidate.allowedSessionIds.includes(agent.context.sessionId),\n          ) === true\n        );\n      };\n      const fallbackAuthorization = (peerKey: string): boolean =>\n        sessionService.canCommunicate?.(agent.context.sessionId, peerKey) === true || remotePeerIsGranted(peerKey);\n      const groups = peerConfig\n        ? createSessionGroupStore({ databasePath: path.join(sessionDirectory, 'groups.sqlite') })\n        : undefined;\n      const localHostId = peerConfig?.hostId;\n      const selfReference = localHostId ? peerSessionReference(localHostId, agent.context.sessionId) : undefined;\n      const groupAuthorization =\n        groups && selfReference && localHostId\n          ? createSessionGroupDeliveryAuthorizer({\n              selfReference,\n              groups,\n              peerReference: (peerKey) =>\n                parseRemoteSessionReference(peerKey) === undefined\n                  ? peerSessionReference(localHostId, peerKey)\n                  : peerKey,\n              fallback: fallbackAuthorization,\n            })\n          : undefined;\n      const { service, close: closeDelivery } = provideSessionDeliveryService(context, {\n        databasePath: path.join(deliveryDirectory, `${agent.context.sessionId}.sqlite`),\n        recipientKey: agent.context.sessionId,\n        communication: peerCommunication,\n        authorizePeer: (peerKey, metadata) => groupAuthorization?.(peerKey, metadata) ?? fallbackAuthorization(peerKey),\n        admitPrompt: (prompt, delivery) => session.admitPrompt!(prompt, delivery),\n      });\n      const unprovide: (() => void)[] = [];\n      if (groups && selfReference && peerConfig) {\n        const directory = createSessionDirectory({\n          authorizeDiscovery: (caller, subject) => {\n            const reference = peerSessionReference(subject.hostId, subject.sessionId);\n            const permitted = groups.groupsFor(caller).some((group) => group.members.includes(reference));\n            return permitted ? { capabilities: ['message'] } : undefined;\n          },\n        });\n        for (const peer of peerConfig.peers)\n          for (const sessionId of peer.allowedSessionIds)\n            directory.observe({\n              hostId: peer.hostId,\n              sessionId,\n              hostIncarnation: 'unknown',\n              sessionIncarnation: 'unknown',\n              sequence: 0,\n              observedAt: 0,\n              staleAfterMs: 0,\n              deliveryTarget: peerSessionReference(peer.hostId, sessionId),\n              reachability: 'unknown',\n              runtime: 'unknown',\n              activity: 'unknown',\n              voice: { eligible: 'unknown', readiness: 'unknown' },\n            });\n        unprovide.push(\n          context.provide(\n            DOOM_SESSION_INTERCOM_SERVICE,\n            createSessionIntercom({ selfReference, directory, groups, delivery: service }),\n          ),\n        );\n      }\n      const unregister = registerSessionPeerInbox(agent.context.sessionId, (sourceKey, kind, payload) =>\n        service.receive?.(sourceKey, kind, payload),\n      );\n      return async () => {\n        unregister();\n        for (const release of unprovide.reverse()) release();\n        await closeDelivery();\n        groups?.close();\n      };\n    },\n  ],\n}));\n","import type { DoomApi, DoomApiHandler } from '@agimon-ai/po-core/packageApi';\n\nimport { deliverSessionPeerEnvelope } from '../peerInbox';\nimport {\n  createPeerReplayGuard,\n  parseSessionPeerEnvelope,\n  peerSessionReference,\n  readSessionPeerConfig,\n  verifyPeerRequest,\n} from '../peerTransport';\n\nconst MAX_BODY_BYTES = 64 * 1024;\nconst DELIVERY_TYPES = new Set(['doom/session-delivery/envelope', 'doom/session-delivery/ack']);\n\nfunction response(status: number, error: string): Response {\n  return Response.json({ error }, { status });\n}\n\n/** Narrow HMAC-authenticated endpoint that a trusted tunnel may forward without device authentication. */\nexport const peerInboxApi: DoomApi = {\n  basePath: 'session-peer',\n  start(context): DoomApiHandler {\n    const config = context.homeDirectory === undefined ? undefined : readSessionPeerConfig(context.homeDirectory);\n    const replay = context.homeDirectory === undefined ? undefined : createPeerReplayGuard(context.homeDirectory);\n    return {\n      async fetch(request) {\n        if (request.method !== 'POST' || new URL(request.url).pathname !== '/inbox') return response(404, 'Not found.');\n        if (!config) return response(503, 'Paired Session delivery is not configured.');\n        const length = request.headers.get('content-length');\n        if (length !== null && (!/^\\d+$/u.test(length) || Number(length) > MAX_BODY_BYTES))\n          return response(413, 'Request body is too large.');\n        const body = await request.text();\n        if (Buffer.byteLength(body) > MAX_BODY_BYTES) return response(413, 'Request body is too large.');\n        const peer = verifyPeerRequest(config, request, body);\n        if (!peer) return response(401, 'Paired Session request is unauthorized.');\n        if (!replay?.admit(request)) return response(409, 'Paired Session request was already received.');\n        let parsed: unknown;\n        try {\n          parsed = JSON.parse(body) as unknown;\n        } catch {\n          return response(400, 'Paired Session request is malformed.');\n        }\n        const envelope = parseSessionPeerEnvelope(parsed);\n        if (!envelope || !DELIVERY_TYPES.has(envelope.type))\n          return response(400, 'Paired Session envelope is invalid.');\n        if (!peer.allowedSessionIds.includes(envelope.targetSessionId))\n          return response(403, 'Peer is not granted this session.');\n        const state = deliverSessionPeerEnvelope(\n          envelope.targetSessionId,\n          peerSessionReference(peer.hostId, envelope.sourceSessionId),\n          envelope.type,\n          envelope.payload,\n        );\n        return state === undefined\n          ? response(404, 'Target Session is unavailable.')\n          : Response.json({ accepted: true, state }, { status: 202 });\n      },\n      close: () => replay?.close(),\n    };\n  },\n};\n","import { defineRoute } from '@agimon-ai/po-core/extensionFile';\n\nimport { peerInboxApi } from '../../../../services/peerInboxApi';\n\nexport default defineRoute(peerInboxApi);\n","// Generated by @agimon-ai/po-build. Do not edit by hand.\nimport { defineServerPlugin, type DoomServerSessionPlugin } from '@agimon-ai/po-core/serverFacet';\nimport { composeServerProviderOverrides } from '@agimon-ai/po-core/serverFacet';\nimport { composeRootHooks } from '@agimon-ai/po-core/extensionFile';\n\nimport rootSession from '../src/extensions/workspaces/sessions/(backend)/root.server';\nimport apiRoute from '../src/extensions/(backend)/api/session-peer/route.server';\n\ntype Factory<T, C> = (context: C) => T;\nconst at = <T, C>(value: T | Factory<T, C>, context: C): T =>\n  typeof value === 'function' ? (value as Factory<T, C>)(context) : value;\n\nexport const facet = defineServerPlugin({\n  name: '@agimon-ai/po-session',\n  providerOverrides: composeServerProviderOverrides(rootSession),\n  global: (context) => ({\n    get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n  }),\n  workspace: (context) => ({\n    get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n  }),\n  session: async (context) => {\n    const scopeSession = await rootSession(context);\n    return {\n      ...composeRootHooks(scopeSession),\n      get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n      services: [...(scopeSession.services ?? [])],\n      get activities(): DoomServerSessionPlugin['activities'] { return [...(scopeSession.activities ?? [])]; },\n    };\n  },\n});\n\nexport default facet;\n"],"mappings":";;;;;;;;;;;;;AAQA,MAAM,0BAAU,IAAI,IAA8B;;AAGlD,SAAgB,yBAAyB,WAAmB,OAAqC;CAC/F,IAAI,QAAQ,IAAI,SAAS,GAAG,MAAM,IAAI,MAAM,uBAAuB,UAAU,yBAAyB;CACtG,QAAQ,IAAI,WAAW,KAAK;CAC5B,aAAa;EACX,IAAI,QAAQ,IAAI,SAAS,MAAM,OAAO,QAAQ,OAAO,SAAS;CAChE;AACF;AAEA,SAAgB,2BACd,iBACA,WACA,MACA,SAC2C;CAC3C,OAAO,QAAQ,IAAI,eAAe,CAAC,GAAG,WAAW,MAAM,OAAO;AAChE;;;ACFA,IAAA,uBAAA,GAAeA,iCAAAA,WAAAA,EAAY,mBAA4C;CACrE,OAAO,KAAA;CACP,UAAU,CACRC,wBAAAA,+BACC,YAAY;EACX,MAAM,QAAQ,cAAc;EAC5B,MAAM,UAAU,OAAO,QAAQ;EAC/B,MAAM,gBAAgB,cAAc,KAAK,QAAQ;EACjD,MAAM,gBAAgB,cAAc,KAAK,QAAQ;EACjD,MAAM,iBAAiB,cAAc,KAAK,QAAQ;EAClD,IAAI,CAAC,SAAS,CAAC,SAAS,eAAe,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,gBAAgB,gBAC1F,MAAM,IAAI,MACR,mIACF;EAEF,MAAM,mBAAmBC,UAAAA,QAAK,MAAA,GAAKC,8BAAAA,gBAAAA,CAAgB,aAAa,GAAG,SAAS;EAC5E,MAAM,oBAAoBD,UAAAA,QAAK,KAAK,kBAAkB,UAAU;EAChE,QAAA,QAAG,UAAU,mBAAmB;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EAChE,MAAM,oBAAoBE,wBAAAA,wBAAwB;GAAE,OAAO;GAAe;EAAc,CAAC;EACzF,MAAM,aAAaC,wBAAAA,sBAAsB,aAAa;EACtD,MAAM,uBAAuB,YAA6B;GACxD,MAAM,OAAOC,wBAAAA,4BAA4B,OAAO;GAChD,OACE,SAAS,KAAA,KACT,YAAY,MAAM,MACf,cACC,UAAU,WAAW,KAAK,UAAU,UAAU,kBAAkB,SAAS,MAAM,QAAQ,SAAS,CACpG,MAAM;EAEV;EACA,MAAM,yBAAyB,YAC7B,eAAe,iBAAiB,MAAM,QAAQ,WAAW,OAAO,MAAM,QAAQ,oBAAoB,OAAO;EAC3G,MAAM,SAAS,aACXC,wBAAAA,wBAAwB,EAAE,cAAcL,UAAAA,QAAK,KAAK,kBAAkB,eAAe,EAAE,CAAC,IACtF,KAAA;EACJ,MAAM,cAAc,YAAY;EAChC,MAAM,gBAAgB,cAAcM,wBAAAA,qBAAqB,aAAa,MAAM,QAAQ,SAAS,IAAI,KAAA;EACjG,MAAM,qBACJ,UAAU,iBAAiB,cACvBC,wBAAAA,qCAAqC;GACnC;GACA;GACA,gBAAgB,YACdH,wBAAAA,4BAA4B,OAAO,MAAM,KAAA,IACrCE,wBAAAA,qBAAqB,aAAa,OAAO,IACzC;GACN,UAAU;EACZ,CAAC,IACD,KAAA;EACN,MAAM,EAAE,SAAS,OAAO,kBAAkBE,wBAAAA,8BAA8B,SAAS;GAC/E,cAAcR,UAAAA,QAAK,KAAK,mBAAmB,GAAG,MAAM,QAAQ,UAAU,QAAQ;GAC9E,cAAc,MAAM,QAAQ;GAC5B,eAAe;GACf,gBAAgB,SAAS,aAAa,qBAAqB,SAAS,QAAQ,KAAK,sBAAsB,OAAO;GAC9G,cAAc,QAAQ,aAAa,QAAQ,YAAa,QAAQ,QAAQ;EAC1E,CAAC;EACD,MAAM,YAA4B,CAAC;EACnC,IAAI,UAAU,iBAAiB,YAAY;GACzC,MAAM,YAAYS,wBAAAA,uBAAuB,EACvC,qBAAqB,QAAQ,YAAY;IACvC,MAAM,YAAYH,wBAAAA,qBAAqB,QAAQ,QAAQ,QAAQ,SAAS;IAExE,OADkB,OAAO,UAAU,MAAM,CAAC,CAAC,MAAM,UAAU,MAAM,QAAQ,SAAS,SAAS,CAC5E,IAAI,EAAE,cAAc,CAAC,SAAS,EAAE,IAAI,KAAA;GACrD,EACF,CAAC;GACD,KAAK,MAAM,QAAQ,WAAW,OAC5B,KAAK,MAAM,aAAa,KAAK,mBAC3B,UAAU,QAAQ;IAChB,QAAQ,KAAK;IACb;IACA,iBAAiB;IACjB,oBAAoB;IACpB,UAAU;IACV,YAAY;IACZ,cAAc;IACd,gBAAgBA,wBAAAA,qBAAqB,KAAK,QAAQ,SAAS;IAC3D,cAAc;IACd,SAAS;IACT,UAAU;IACV,OAAO;KAAE,UAAU;KAAW,WAAW;IAAU;GACrD,CAAC;GACL,UAAU,KACR,QAAQ,QACNI,wBAAAA,+BACAC,wBAAAA,sBAAsB;IAAE;IAAe;IAAW;IAAQ,UAAU;GAAQ,CAAC,CAC/E,CACF;EACF;EACA,MAAM,aAAa,yBAAyB,MAAM,QAAQ,YAAY,WAAW,MAAM,YACrF,QAAQ,UAAU,WAAW,MAAM,OAAO,CAC5C;EACA,OAAO,YAAY;GACjB,WAAW;GACX,KAAK,MAAM,WAAW,UAAU,QAAQ,GAAG,QAAQ;GACnD,MAAM,cAAc;GACpB,QAAQ,MAAM;EAChB;CACF,CACF;AACF,EAAE;;;AChHF,MAAM,iBAAiB;AACvB,MAAM,iCAAiB,IAAI,IAAI,CAAC,kCAAkC,2BAA2B,CAAC;AAE9F,SAAS,SAAS,QAAgB,OAAyB;CACzD,OAAO,SAAS,KAAK,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;AAC5C;;;ACZA,IAAA,wBAAA,GAAeM,iCAAAA,YAAAA,CAAY;CDgBzB,UAAU;CACV,MAAM,SAAyB;EAC7B,MAAM,SAAS,QAAQ,kBAAkB,KAAA,IAAY,KAAA,IAAYL,wBAAAA,sBAAsB,QAAQ,aAAa;EAC5G,MAAM,SAAS,QAAQ,kBAAkB,KAAA,IAAY,KAAA,IAAYC,wBAAAA,sBAAsB,QAAQ,aAAa;EAC5G,OAAO;GACL,MAAM,MAAM,SAAS;IACnB,IAAI,QAAQ,WAAW,UAAU,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,aAAa,UAAU,OAAO,SAAS,KAAK,YAAY;IAC9G,IAAI,CAAC,QAAQ,OAAO,SAAS,KAAK,4CAA4C;IAC9E,MAAM,SAAS,QAAQ,QAAQ,IAAI,gBAAgB;IACnD,IAAI,WAAW,SAAS,CAAC,SAAS,KAAK,MAAM,KAAK,OAAO,MAAM,IAAI,iBACjE,OAAO,SAAS,KAAK,4BAA4B;IACnD,MAAM,OAAO,MAAM,QAAQ,KAAK;IAChC,IAAI,OAAO,WAAW,IAAI,IAAI,gBAAgB,OAAO,SAAS,KAAK,4BAA4B;IAC/F,MAAM,OAAOC,wBAAAA,kBAAkB,QAAQ,SAAS,IAAI;IACpD,IAAI,CAAC,MAAM,OAAO,SAAS,KAAK,yCAAyC;IACzE,IAAI,CAAC,QAAQ,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,8CAA8C;IAChG,IAAI;IACJ,IAAI;KACF,SAAS,KAAK,MAAM,IAAI;IAC1B,QAAQ;KACN,OAAO,SAAS,KAAK,sCAAsC;IAC7D;IACA,MAAM,WAAWC,wBAAAA,yBAAyB,MAAM;IAChD,IAAI,CAAC,YAAY,CAAC,eAAe,IAAI,SAAS,IAAI,GAChD,OAAO,SAAS,KAAK,qCAAqC;IAC5D,IAAI,CAAC,KAAK,kBAAkB,SAAS,SAAS,eAAe,GAC3D,OAAO,SAAS,KAAK,mCAAmC;IAC1D,MAAM,QAAQ,2BACZ,SAAS,iBACTC,wBAAAA,qBAAqB,KAAK,QAAQ,SAAS,eAAe,GAC1D,SAAS,MACT,SAAS,OACX;IACA,OAAO,UAAU,KAAA,IACb,SAAS,KAAK,gCAAgC,IAC9C,SAAS,KAAK;KAAE,UAAU;KAAM;IAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;GAC9D;GACA,aAAa,QAAQ,MAAM;EAC7B;CACF;ACvDyB,CAAY;;;ACKvC,MAAM,MAAY,OAA0B,YAC1C,OAAO,UAAU,aAAc,MAAwB,OAAO,IAAI;AAEpE,MAAa,SAAA,GAAQE,+BAAAA,mBAAAA,CAAmB;CACtC,MAAM;CACN,oBAAA,GAAmBC,+BAAAA,+BAAAA,CAA+BC,mBAAW;CAC7D,SAAS,aAAa,EACpB,IAAI,MAAsC;EAAE,OAAO,CAAC,GAAGC,sBAAU,OAAO,CAAC;CAAG,EAC9E;CACA,YAAY,aAAa,EACvB,IAAI,MAAsC;EAAE,OAAO,CAAC,GAAGA,sBAAU,OAAO,CAAC;CAAG,EAC9E;CACA,SAAS,OAAO,YAAY;EAC1B,MAAM,eAAe,MAAMD,oBAAY,OAAO;EAC9C,OAAO;GACL,IAAA,GAAGE,iCAAAA,iBAAAA,CAAiB,YAAY;GAChC,IAAI,MAAsC;IAAE,OAAO,CAAC,GAAGD,sBAAU,OAAO,CAAC;GAAG;GAC5E,UAAU,CAAC,GAAI,aAAa,YAAY,CAAC,CAAE;GAC3C,IAAI,aAAoD;IAAE,OAAO,CAAC,GAAI,aAAa,cAAc,CAAC,CAAE;GAAG;EACzG;CACF;AACF,CAAC"}

package/dist/extensions/server.d.mts

@@ -0,0 +1,5 @@
+//#region generated/server.d.ts
+export declare const facet: import("@agimon-ai/po-core/serverFacet").DoomServerFacet;
+//#endregion
+export { facet as default };
+//# sourceMappingURL=server.d.mts.map

package/dist/extensions/server.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.mts","names":[],"sources":["../../generated/server.ts"],"mappings":";qBAYa,gDAAK"}

package/dist/extensions/server.mjs

@@ -0,0 +1,175 @@
+import { C as provideBackgroundWorkService, a as createSessionGroupDeliveryAuthorizer, f as createSessionDirectory, g as parseSessionPeerEnvelope, h as parseRemoteSessionReference, m as createPeerReplayGuard, n as provideSessionDeliveryService, o as createSessionIntercom, p as createPeerCommunication, s as DOOM_SESSION_INTERCOM_SERVICE, u as createSessionGroupStore, v as peerSessionReference, x as verifyPeerRequest, y as readSessionPeerConfig } from "../sessionDelivery-DpLWlaum.mjs";
+import fs from "node:fs";
+import path from "node:path";
+import { poHomeDirectory } from "@agimon-ai/po-core/piSettings";
+import { composeServerProviderOverrides, defineServerPlugin } from "@agimon-ai/po-core/serverFacet";
+import { composeRootHooks, defineRoot, defineRoute } from "@agimon-ai/po-core/extensionFile";
+//#region src/services/peerInbox/index.ts
+const inboxes = /* @__PURE__ */ new Map();
+/** Registers one live session-owned peer inbox. This registry is reachable only by the Session route. */
+function registerSessionPeerInbox(sessionId, inbox) {
+	if (inboxes.has(sessionId)) throw new Error(`Session peer inbox '${sessionId}' is already registered.`);
+	inboxes.set(sessionId, inbox);
+	return () => {
+		if (inboxes.get(sessionId) === inbox) inboxes.delete(sessionId);
+	};
+}
+function deliverSessionPeerEnvelope(targetSessionId, sourceKey, type, payload) {
+	return inboxes.get(targetSessionId)?.(sourceKey, type, payload);
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(backend)/root.server.ts
+var root_server_default = defineRoot((pluginContext) => ({
+	value: void 0,
+	services: [provideBackgroundWorkService, (context) => {
+		const agent = pluginContext.agent;
+		const session = agent?.context.session;
+		const communication = pluginContext.host.context.sessionCommunication;
+		const homeDirectory = pluginContext.host.context.homeDirectory;
+		const sessionService = pluginContext.host.context.sessionService;
+		if (!agent || !session?.admitPrompt || !communication || !homeDirectory || !sessionService?.canCommunicate) throw new Error("Session delivery requires the headless agent, authenticated session communication, host home directory, and communication policy.");
+		const sessionDirectory = path.join(poHomeDirectory(homeDirectory), "session");
+		const deliveryDirectory = path.join(sessionDirectory, "delivery");
+		fs.mkdirSync(deliveryDirectory, {
+			recursive: true,
+			mode: 448
+		});
+		const peerCommunication = createPeerCommunication({
+			local: communication,
+			homeDirectory
+		});
+		const peerConfig = readSessionPeerConfig(homeDirectory);
+		const remotePeerIsGranted = (peerKey) => {
+			const peer = parseRemoteSessionReference(peerKey);
+			return peer !== void 0 && peerConfig?.peers.some((candidate) => candidate.hostId === peer.hostId && candidate.allowedSessionIds.includes(agent.context.sessionId)) === true;
+		};
+		const fallbackAuthorization = (peerKey) => sessionService.canCommunicate?.(agent.context.sessionId, peerKey) === true || remotePeerIsGranted(peerKey);
+		const groups = peerConfig ? createSessionGroupStore({ databasePath: path.join(sessionDirectory, "groups.sqlite") }) : void 0;
+		const localHostId = peerConfig?.hostId;
+		const selfReference = localHostId ? peerSessionReference(localHostId, agent.context.sessionId) : void 0;
+		const groupAuthorization = groups && selfReference && localHostId ? createSessionGroupDeliveryAuthorizer({
+			selfReference,
+			groups,
+			peerReference: (peerKey) => parseRemoteSessionReference(peerKey) === void 0 ? peerSessionReference(localHostId, peerKey) : peerKey,
+			fallback: fallbackAuthorization
+		}) : void 0;
+		const { service, close: closeDelivery } = provideSessionDeliveryService(context, {
+			databasePath: path.join(deliveryDirectory, `${agent.context.sessionId}.sqlite`),
+			recipientKey: agent.context.sessionId,
+			communication: peerCommunication,
+			authorizePeer: (peerKey, metadata) => groupAuthorization?.(peerKey, metadata) ?? fallbackAuthorization(peerKey),
+			admitPrompt: (prompt, delivery) => session.admitPrompt(prompt, delivery)
+		});
+		const unprovide = [];
+		if (groups && selfReference && peerConfig) {
+			const directory = createSessionDirectory({ authorizeDiscovery: (caller, subject) => {
+				const reference = peerSessionReference(subject.hostId, subject.sessionId);
+				return groups.groupsFor(caller).some((group) => group.members.includes(reference)) ? { capabilities: ["message"] } : void 0;
+			} });
+			for (const peer of peerConfig.peers) for (const sessionId of peer.allowedSessionIds) directory.observe({
+				hostId: peer.hostId,
+				sessionId,
+				hostIncarnation: "unknown",
+				sessionIncarnation: "unknown",
+				sequence: 0,
+				observedAt: 0,
+				staleAfterMs: 0,
+				deliveryTarget: peerSessionReference(peer.hostId, sessionId),
+				reachability: "unknown",
+				runtime: "unknown",
+				activity: "unknown",
+				voice: {
+					eligible: "unknown",
+					readiness: "unknown"
+				}
+			});
+			unprovide.push(context.provide(DOOM_SESSION_INTERCOM_SERVICE, createSessionIntercom({
+				selfReference,
+				directory,
+				groups,
+				delivery: service
+			})));
+		}
+		const unregister = registerSessionPeerInbox(agent.context.sessionId, (sourceKey, kind, payload) => service.receive?.(sourceKey, kind, payload));
+		return async () => {
+			unregister();
+			for (const release of unprovide.reverse()) release();
+			await closeDelivery();
+			groups?.close();
+		};
+	}]
+}));
+//#endregion
+//#region src/services/peerInboxApi/index.ts
+const MAX_BODY_BYTES = 65536;
+const DELIVERY_TYPES = /* @__PURE__ */ new Set(["doom/session-delivery/envelope", "doom/session-delivery/ack"]);
+function response(status, error) {
+	return Response.json({ error }, { status });
+}
+//#endregion
+//#region src/extensions/(backend)/api/session-peer/route.server.ts
+var route_server_default = defineRoute({
+	basePath: "session-peer",
+	start(context) {
+		const config = context.homeDirectory === void 0 ? void 0 : readSessionPeerConfig(context.homeDirectory);
+		const replay = context.homeDirectory === void 0 ? void 0 : createPeerReplayGuard(context.homeDirectory);
+		return {
+			async fetch(request) {
+				if (request.method !== "POST" || new URL(request.url).pathname !== "/inbox") return response(404, "Not found.");
+				if (!config) return response(503, "Paired Session delivery is not configured.");
+				const length = request.headers.get("content-length");
+				if (length !== null && (!/^\d+$/u.test(length) || Number(length) > MAX_BODY_BYTES)) return response(413, "Request body is too large.");
+				const body = await request.text();
+				if (Buffer.byteLength(body) > MAX_BODY_BYTES) return response(413, "Request body is too large.");
+				const peer = verifyPeerRequest(config, request, body);
+				if (!peer) return response(401, "Paired Session request is unauthorized.");
+				if (!replay?.admit(request)) return response(409, "Paired Session request was already received.");
+				let parsed;
+				try {
+					parsed = JSON.parse(body);
+				} catch {
+					return response(400, "Paired Session request is malformed.");
+				}
+				const envelope = parseSessionPeerEnvelope(parsed);
+				if (!envelope || !DELIVERY_TYPES.has(envelope.type)) return response(400, "Paired Session envelope is invalid.");
+				if (!peer.allowedSessionIds.includes(envelope.targetSessionId)) return response(403, "Peer is not granted this session.");
+				const state = deliverSessionPeerEnvelope(envelope.targetSessionId, peerSessionReference(peer.hostId, envelope.sourceSessionId), envelope.type, envelope.payload);
+				return state === void 0 ? response(404, "Target Session is unavailable.") : Response.json({
+					accepted: true,
+					state
+				}, { status: 202 });
+			},
+			close: () => replay?.close()
+		};
+	}
+});
+//#endregion
+//#region generated/server.ts
+const at = (value, context) => typeof value === "function" ? value(context) : value;
+const facet = defineServerPlugin({
+	name: "@agimon-ai/po-session",
+	providerOverrides: composeServerProviderOverrides(root_server_default),
+	global: (context) => ({ get api() {
+		return [at(route_server_default, context)];
+	} }),
+	workspace: (context) => ({ get api() {
+		return [at(route_server_default, context)];
+	} }),
+	session: async (context) => {
+		const scopeSession = await root_server_default(context);
+		return {
+			...composeRootHooks(scopeSession),
+			get api() {
+				return [at(route_server_default, context)];
+			},
+			services: [...scopeSession.services ?? []],
+			get activities() {
+				return [...scopeSession.activities ?? []];
+			}
+		};
+	}
+});
+//#endregion
+export { facet as default, facet };
+
+//# sourceMappingURL=server.mjs.map