@agimon-ai/po-session 0.0.0-alpha.124 → 0.0.0-alpha.125

package/dist/extensions/server.cjs

@@ -2,14 +2,15 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_type = require("../type-CSkVwA6w.cjs");
+const require_type = require("../type-Bzv_vxKC.cjs");
+let _agimon_ai_po_core_hubChannel = require("@agimon-ai/po-core/hubChannel");
+let _agimon_ai_po_core_codemode = require("@agimon-ai/po-core/codemode");
 let node_path = require("node:path");
 node_path = require_type.__toESM(node_path, 1);
 let _agimon_ai_po_core_platform = require("@agimon-ai/po-core/platform");
 let _agimon_ai_po_core_piSettings = require("@agimon-ai/po-core/piSettings");
 let _agimon_ai_po_core_extensionFile = require("@agimon-ai/po-core/extensionFile");
 let _agimon_ai_po_core_serverPlugin = require("@agimon-ai/po-core/serverPlugin");
-let _agimon_ai_po_core_hubChannel = require("@agimon-ai/po-core/hubChannel");
 let _agimon_ai_po_core_remoteOrigin = require("@agimon-ai/po-core/remoteOrigin");
 let _agimon_ai_po_core_packageApi = require("@agimon-ai/po-core/packageApi");
 //#region src/extensions/(backend)/root.server.ts
@@ -90,149 +91,216 @@ async function deliverSessionPeerEnvelope(targetSessionId, sourceKey, type, payl
 	return inboxes.get(targetSessionId)?.(sourceKey, type, payload);
 }
 //#endregion
+//#region src/services/sessionsNamespace/nodeOperations.ts
+/** Reuses the same authorized peers and durable delivery as Team's peer messaging. */
+function createNodeSessionOperations(host, context, sessionId) {
+	const peers = () => [...host.context.sessionCommunication?.listPeers?.() ?? [], ...require_type.readSessionGroupBridge(context)?.peersFor(sessionId) ?? []];
+	return {
+		async list(signal) {
+			signal.throwIfAborted();
+			return peers();
+		},
+		async send(to, text, signal) {
+			signal.throwIfAborted();
+			const current = peers();
+			const exact = current.find((peer) => peer.sessionId === to);
+			const matching = current.filter((peer) => peer.name === to);
+			if (!exact && matching.length > 1) throw new Error("Ambiguous session name. Use its session ID.");
+			const recipient = exact?.sessionId ?? matching[0]?.sessionId ?? to;
+			const remote = recipient.startsWith("peer/");
+			const metadata = remote ? require_type.readSessionGroupBridge(context)?.metadataFor(sessionId, recipient) : void 0;
+			if (remote ? !metadata : host.context.sessionService?.canCommunicate?.(sessionId, recipient) !== true) throw new Error("Session is outside your communication scope.");
+			const delivery = require_type.readPoSessionDelivery(context);
+			if (!delivery) throw new Error("Session delivery is unavailable.");
+			const sender = host.context.sessionCommunication?.sessionName?.trim() || sessionId;
+			return {
+				...await delivery.deliver({
+					deliveryId: `sessions:${sessionId}:${crypto.randomUUID()}`,
+					recipientKey: recipient,
+					kind: "session-message",
+					prompt: `Message from session ${sender}.\n\n${text}`,
+					delivery: "steer",
+					metadata
+				}),
+				to: recipient,
+				sender
+			};
+		}
+	};
+}
+//#endregion
 //#region src/extensions/workspaces/sessions/(backend)/root.server.ts
 var root_server_default = (0, _agimon_ai_po_core_extensionFile.defineRoot)((pluginContext) => ({
 	value: void 0,
-	services: [require_type.provideBackgroundWorkService, (owner) => {
-		owner.inject([
-			require_type.PO_SESSION_PEERS_SERVICE,
-			require_type.PO_SESSION_GROUP_BRIDGE_SERVICE,
-			_agimon_ai_po_core_platform.PO_FS_SERVICE,
-			_agimon_ai_po_core_platform.PO_SQLITE_SERVICE
-		], async (context) => {
+	services: [
+		require_type.provideBackgroundWorkService,
+		(owner) => {
 			const agent = pluginContext.agent;
-			const session = agent?.context.session;
-			const communication = pluginContext.host.context.sessionCommunication;
-			const homeDirectory = pluginContext.host.context.homeDirectory;
-			const sessionService = pluginContext.host.context.sessionService;
-			if (!agent || !session?.admitPrompt || !communication || !homeDirectory || !sessionService?.canCommunicate) throw new Error("Session delivery requires the headless agent, authenticated session communication, host home directory, and communication policy.");
-			const fs = (0, _agimon_ai_po_core_platform.requirePoFs)(context);
-			const sqlite = (0, _agimon_ai_po_core_platform.requirePoSqlite)(context);
-			const io = _agimon_ai_po_core_platform.BACKGROUND_CONTEXT;
-			const sessionDirectory = node_path.default.join((0, _agimon_ai_po_core_piSettings.poHomeDirectory)(homeDirectory), "session");
-			const deliveryDirectory = node_path.default.join(sessionDirectory, "delivery");
-			await require_type.ensurePrivateDirectory(fs, deliveryDirectory, io);
-			const peers = require_type.requireSessionPeers(context);
-			const peerConfig = peers.current();
-			const peerCommunication = require_type.createPeerCommunication({
-				local: communication,
-				config: () => peers.current(),
-				canPublish: (target, type, payload) => {
-					if (type === "po/session-delivery/ack") return true;
-					const metadata = payload?.metadata;
-					return bridge?.peersFor(agent.context.sessionId).some((peer) => peer.sessionId === target && peer.sharedGroups.some((name) => require_type.namedSessionGroupId(name) === metadata?.groupId)) === true;
-				},
-				onError: (error) => pluginContext.host.context.onNotice(`Peer delivery failed: ${String(error)}`)
+			if (!agent) return;
+			const options = {
+				sessionId: agent.context.sessionId,
+				provenance: () => pluginContext.host.context.sessionContext?.provenance,
+				coordination: () => pluginContext.host.context.coordination,
+				operations: require_type.readSessionOperations(owner) ?? createNodeSessionOperations(pluginContext.host, owner, agent.context.sessionId),
+				assertAvailable: () => pluginContext.signal.throwIfAborted()
+			};
+			const tool = agent.registerTool(require_type.createStartSessionTool(options));
+			const eligibility = options.provenance() === _agimon_ai_po_core_hubChannel.COORDINATOR_SESSION_PROVENANCE ? void 0 : agent.registerToolRestriction({ excludedTools: [require_type.START_SESSION_TOOL_NAME] });
+			const injection = owner.inject([_agimon_ai_po_core_codemode.PO_CODEMODE_SERVICE], (context) => {
+				const registration = (0, _agimon_ai_po_core_codemode.readPoCodemode)(context)?.register("@agimon-ai/po-session", require_type.createSessionsNamespace(options));
+				const restriction = registration ? agent.registerToolRestriction({ excludedTools: [require_type.START_SESSION_TOOL_NAME, ...options.operations.fallbackToolName ? [options.operations.fallbackToolName] : []] }) : void 0;
+				return () => {
+					restriction?.dispose();
+					registration?.dispose();
+				};
 			});
-			const remotePeerIsGranted = (peerKey) => {
-				const peer = require_type.parseRemoteSessionReference(peerKey);
-				return peer !== void 0 && peers.current()?.peers.some((candidate) => candidate.hostId === peer.hostId && candidate.allowedSessionIds.includes(agent.context.sessionId)) === true;
+			return async () => {
+				await injection.dispose();
+				eligibility?.dispose();
+				tool.dispose();
 			};
-			const fallbackAuthorization = (peerKey) => sessionService.canCommunicate?.(agent.context.sessionId, peerKey) === true || remotePeerIsGranted(peerKey);
-			const bridge = require_type.readSessionGroupBridge(context);
-			const groups = bridge?.groups;
-			await bridge?.updateLocal(agent.context.sessionId, communication.sessionName ?? agent.context.sessionId, communication.groups ?? []);
-			const localHostId = peerConfig?.hostId;
-			const selfReference = localHostId ? require_type.peerSessionReference(localHostId, agent.context.sessionId) : void 0;
-			const groupAuthorization = groups && selfReference && localHostId ? require_type.createSessionGroupDeliveryAuthorizer({
-				selfReference,
-				groups,
-				peerReference: (peerKey) => require_type.parseRemoteSessionReference(peerKey) === void 0 ? require_type.peerSessionReference(localHostId, peerKey) : peerKey,
-				fallback: fallbackAuthorization
-			}) : void 0;
-			let delivery;
-			try {
-				delivery = await require_type.provideSessionDeliveryService(context, {
-					database: await sqlite.open(node_path.default.join(deliveryDirectory, `${agent.context.sessionId}.sqlite`), io),
-					recipientKey: agent.context.sessionId,
-					communication: peerCommunication,
-					authorizePeer: (peerKey, metadata) => {
-						const remote = require_type.parseRemoteSessionReference(peerKey);
-						if (remote && !peers.current()?.peers.some((peer) => peer.hostId === remote.hostId)) return false;
-						if (remote) {
-							if (!bridge?.metadataFor(agent.context.sessionId, peerKey) || !metadata?.groupId || !bridge?.peersFor(agent.context.sessionId).find((peer) => peer.sessionId === peerKey)?.sharedGroups.some((name) => require_type.namedSessionGroupId(name) === metadata.groupId)) return false;
-							return groupAuthorization ? groupAuthorization(peerKey, metadata) : false;
-						}
-						return groupAuthorization ? groupAuthorization(peerKey, metadata) : fallbackAuthorization(peerKey);
+		},
+		(owner) => {
+			owner.inject([
+				require_type.PO_SESSION_PEERS_SERVICE,
+				require_type.PO_SESSION_GROUP_BRIDGE_SERVICE,
+				_agimon_ai_po_core_platform.PO_FS_SERVICE,
+				_agimon_ai_po_core_platform.PO_SQLITE_SERVICE
+			], async (context) => {
+				const agent = pluginContext.agent;
+				const session = agent?.context.session;
+				const communication = pluginContext.host.context.sessionCommunication;
+				const homeDirectory = pluginContext.host.context.homeDirectory;
+				const sessionService = pluginContext.host.context.sessionService;
+				if (!agent || !session?.admitPrompt || !communication || !homeDirectory || !sessionService?.canCommunicate) throw new Error("Session delivery requires the headless agent, authenticated session communication, host home directory, and communication policy.");
+				const fs = (0, _agimon_ai_po_core_platform.requirePoFs)(context);
+				const sqlite = (0, _agimon_ai_po_core_platform.requirePoSqlite)(context);
+				const io = _agimon_ai_po_core_platform.BACKGROUND_CONTEXT;
+				const sessionDirectory = node_path.default.join((0, _agimon_ai_po_core_piSettings.poHomeDirectory)(homeDirectory), "session");
+				const deliveryDirectory = node_path.default.join(sessionDirectory, "delivery");
+				await require_type.ensurePrivateDirectory(fs, deliveryDirectory, io);
+				const peers = require_type.requireSessionPeers(context);
+				const peerConfig = peers.current();
+				const peerCommunication = require_type.createPeerCommunication({
+					local: communication,
+					config: () => peers.current(),
+					canPublish: (target, type, payload) => {
+						if (type === "po/session-delivery/ack") return true;
+						const metadata = payload?.metadata;
+						return bridge?.peersFor(agent.context.sessionId).some((peer) => peer.sessionId === target && peer.sharedGroups.some((name) => require_type.namedSessionGroupId(name) === metadata?.groupId)) === true;
 					},
-					admitPrompt: async (prompt, admission, requestId, metadata) => {
-						if (!metadata.customType) {
-							await session.admitPrompt(prompt, admission, void 0, requestId);
-							return;
-						}
-						if (!session.admitMessage) throw new Error("The session cannot admit a custom delivery.");
-						await session.admitMessage({
-							type: metadata.customType,
-							text: prompt,
-							display: true,
-							details: metadata.customDetails === void 0 ? void 0 : JSON.parse(metadata.customDetails)
-						}, admission === "steer" ? "steer" : "followUp", requestId);
-					}
+					onError: (error) => pluginContext.host.context.onNotice(`Peer delivery failed: ${String(error)}`)
 				});
-			} catch (error) {
-				await bridge?.removeLocal(agent.context.sessionId);
-				throw error;
-			}
-			const { service, close: closeDelivery } = delivery;
-			const unprovide = [];
-			if (groups && selfReference && peerConfig) {
-				const directory = require_type.createSessionDirectory({ authorizeDiscovery: (_caller, subject) => {
-					const reference = require_type.peerSessionReference(subject.hostId, subject.sessionId);
-					return bridge?.peersFor(agent.context.sessionId).some((peer) => peer.sessionId === reference) ? { capabilities: ["message"] } : void 0;
-				} });
-				const observedHosts = /* @__PURE__ */ new Set();
-				let sequence = 0;
-				const observeRemote = () => {
-					const remotePeers = bridge?.peersFor(agent.context.sessionId) ?? [];
-					for (const peer of remotePeers) observedHosts.add(require_type.parseRemoteSessionReference(peer.sessionId).hostId);
-					sequence += 1;
-					for (const hostId of observedHosts) directory.replaceHostSnapshot(hostId, "linked", remotePeers.flatMap((peer) => {
-						const remote = require_type.parseRemoteSessionReference(peer.sessionId);
-						return remote.hostId !== hostId ? [] : [{
-							hostId,
-							sessionId: remote.sessionId,
-							label: peer.name,
-							hostIncarnation: "linked",
-							sessionIncarnation: "live",
-							sequence,
-							observedAt: Date.now(),
-							staleAfterMs: 12e4,
-							deliveryTarget: peer.sessionId,
-							reachability: "unknown",
-							runtime: "unknown",
-							activity: "unknown",
-							voice: {
-								eligible: "unknown",
-								readiness: "unknown"
-							}
-						}];
-					}));
+				const remotePeerIsGranted = (peerKey) => {
+					const peer = require_type.parseRemoteSessionReference(peerKey);
+					return peer !== void 0 && peers.current()?.peers.some((candidate) => candidate.hostId === peer.hostId && candidate.allowedSessionIds.includes(agent.context.sessionId)) === true;
 				};
-				observeRemote();
-				unprovide.push(bridge.subscribe(() => {
-					observeRemote();
-					service.reauthorize?.().catch((error) => pluginContext.host.context.onNotice(`Delivery reauthorization failed: ${String(error)}`));
-				}));
-				unprovide.push(context.provide(require_type.PO_SESSION_INTERCOM_SERVICE, require_type.createSessionIntercom({
+				const fallbackAuthorization = (peerKey) => sessionService.canCommunicate?.(agent.context.sessionId, peerKey) === true || remotePeerIsGranted(peerKey);
+				const bridge = require_type.readSessionGroupBridge(context);
+				const groups = bridge?.groups;
+				await bridge?.updateLocal(agent.context.sessionId, communication.sessionName ?? agent.context.sessionId, communication.groups ?? []);
+				const localHostId = peerConfig?.hostId;
+				const selfReference = localHostId ? require_type.peerSessionReference(localHostId, agent.context.sessionId) : void 0;
+				const groupAuthorization = groups && selfReference && localHostId ? require_type.createSessionGroupDeliveryAuthorizer({
 					selfReference,
-					directory,
 					groups,
-					delivery: service
-				})));
-			}
-			const releaseGroups = pluginContext.host.context.directEvents?.subscribe(_agimon_ai_po_core_hubChannel.PO_SESSION_ATTENTION_EVENT, agent.context.sessionId, () => {
-				bridge?.updateLocal(agent.context.sessionId, communication.sessionName ?? agent.context.sessionId, communication.groups ?? []).catch((error) => pluginContext.host.context.onNotice(`Group update failed: ${String(error)}`));
+					peerReference: (peerKey) => require_type.parseRemoteSessionReference(peerKey) === void 0 ? require_type.peerSessionReference(localHostId, peerKey) : peerKey,
+					fallback: fallbackAuthorization
+				}) : void 0;
+				let delivery;
+				try {
+					delivery = await require_type.provideSessionDeliveryService(context, {
+						database: await sqlite.open(node_path.default.join(deliveryDirectory, `${agent.context.sessionId}.sqlite`), io),
+						recipientKey: agent.context.sessionId,
+						communication: peerCommunication,
+						authorizePeer: (peerKey, metadata) => {
+							const remote = require_type.parseRemoteSessionReference(peerKey);
+							if (remote && !peers.current()?.peers.some((peer) => peer.hostId === remote.hostId)) return false;
+							if (remote) {
+								if (!bridge?.metadataFor(agent.context.sessionId, peerKey) || !metadata?.groupId || !bridge?.peersFor(agent.context.sessionId).find((peer) => peer.sessionId === peerKey)?.sharedGroups.some((name) => require_type.namedSessionGroupId(name) === metadata.groupId)) return false;
+								return groupAuthorization ? groupAuthorization(peerKey, metadata) : false;
+							}
+							return groupAuthorization ? groupAuthorization(peerKey, metadata) : fallbackAuthorization(peerKey);
+						},
+						admitPrompt: async (prompt, admission, requestId, metadata) => {
+							if (!metadata.customType) {
+								await session.admitPrompt(prompt, admission, void 0, requestId);
+								return;
+							}
+							if (!session.admitMessage) throw new Error("The session cannot admit a custom delivery.");
+							await session.admitMessage({
+								type: metadata.customType,
+								text: prompt,
+								display: true,
+								details: metadata.customDetails === void 0 ? void 0 : JSON.parse(metadata.customDetails)
+							}, admission === "steer" ? "steer" : "followUp", requestId);
+						}
+					});
+				} catch (error) {
+					await bridge?.removeLocal(agent.context.sessionId);
+					throw error;
+				}
+				const { service, close: closeDelivery } = delivery;
+				const unprovide = [];
+				if (groups && selfReference && peerConfig) {
+					const directory = require_type.createSessionDirectory({ authorizeDiscovery: (_caller, subject) => {
+						const reference = require_type.peerSessionReference(subject.hostId, subject.sessionId);
+						return bridge?.peersFor(agent.context.sessionId).some((peer) => peer.sessionId === reference) ? { capabilities: ["message"] } : void 0;
+					} });
+					const observedHosts = /* @__PURE__ */ new Set();
+					let sequence = 0;
+					const observeRemote = () => {
+						const remotePeers = bridge?.peersFor(agent.context.sessionId) ?? [];
+						for (const peer of remotePeers) observedHosts.add(require_type.parseRemoteSessionReference(peer.sessionId).hostId);
+						sequence += 1;
+						for (const hostId of observedHosts) directory.replaceHostSnapshot(hostId, "linked", remotePeers.flatMap((peer) => {
+							const remote = require_type.parseRemoteSessionReference(peer.sessionId);
+							return remote.hostId !== hostId ? [] : [{
+								hostId,
+								sessionId: remote.sessionId,
+								label: peer.name,
+								hostIncarnation: "linked",
+								sessionIncarnation: "live",
+								sequence,
+								observedAt: Date.now(),
+								staleAfterMs: 12e4,
+								deliveryTarget: peer.sessionId,
+								reachability: "unknown",
+								runtime: "unknown",
+								activity: "unknown",
+								voice: {
+									eligible: "unknown",
+									readiness: "unknown"
+								}
+							}];
+						}));
+					};
+					observeRemote();
+					unprovide.push(bridge.subscribe(() => {
+						observeRemote();
+						service.reauthorize?.().catch((error) => pluginContext.host.context.onNotice(`Delivery reauthorization failed: ${String(error)}`));
+					}));
+					unprovide.push(context.provide(require_type.PO_SESSION_INTERCOM_SERVICE, require_type.createSessionIntercom({
+						selfReference,
+						directory,
+						groups,
+						delivery: service
+					})));
+				}
+				const releaseGroups = pluginContext.host.context.directEvents?.subscribe(_agimon_ai_po_core_hubChannel.PO_SESSION_ATTENTION_EVENT, agent.context.sessionId, () => {
+					bridge?.updateLocal(agent.context.sessionId, communication.sessionName ?? agent.context.sessionId, communication.groups ?? []).catch((error) => pluginContext.host.context.onNotice(`Group update failed: ${String(error)}`));
+				});
+				const unregister = registerSessionPeerInbox(agent.context.sessionId, (sourceKey, kind, payload) => service.receive?.(sourceKey, kind, payload));
+				return async () => {
+					unregister();
+					releaseGroups?.();
+					await bridge?.removeLocal(agent.context.sessionId);
+					for (const release of unprovide.reverse()) release();
+					await closeDelivery();
+				};
 			});
-			const unregister = registerSessionPeerInbox(agent.context.sessionId, (sourceKey, kind, payload) => service.receive?.(sourceKey, kind, payload));
-			return async () => {
-				unregister();
-				releaseGroups?.();
-				await bridge?.removeLocal(agent.context.sessionId);
-				for (const release of unprovide.reverse()) release();
-				await closeDelivery();
-			};
-		});
-	}]
+		}
+	]
 }));
 //#endregion
 //#region src/services/peerInboxApi/index.ts
@@ -427,6 +495,16 @@ var route_server_default = (0, _agimon_ai_po_core_extensionFile.defineRoute)(({
 	});
 });
 //#endregion
+//#region src/extensions/workspaces/sessions/(backend)/resource/codemode-how-to-session.server.ts
+var codemode_how_to_session_server_default = (0, _agimon_ai_po_core_extensionFile.defineResource)({
+	name: "codemode-how-to-session",
+	description: "List related sessions, send guidance, and start briefed independent work as a coordinator through the sessions namespace. No stop or delete capability.",
+	kind: "skill",
+	pinned: true,
+	path: (0, _agimon_ai_po_core_serverPlugin.packageResourcePath)(require("url").pathToFileURL(__filename).href, "src/prompts/codemode-how-to-session/SKILL.md"),
+	read: () => (0, _agimon_ai_po_core_serverPlugin.readPackageResource)(require("url").pathToFileURL(__filename).href, "src/prompts/codemode-how-to-session/SKILL.md")
+});
+//#endregion
 //#region generated/server.ts
 const at = (value, context) => typeof value === "function" ? value(context) : value;
 /* v8 ignore next -- generated normalization branch */
@@ -474,11 +552,18 @@ const serverPlugin = (0, _agimon_ai_po_core_serverPlugin.defineServerPlugin)({
 			root: scopeGlobal.value
 		};
 		const scopeSession = await context.scopeRoot("session", root_server_default, contextGlobal);
+		const contextSession = {
+			...contextGlobal,
+			root: scopeSession.value
+		};
 		return {
 			...(0, _agimon_ai_po_core_extensionFile.composeRootHooks)(scopeGlobal, scopeSession),
 			get api() {
 				return defined([context.hosted("global") ? void 0 : at(route_server_default, contextGlobal)]);
 			},
+			get resources() {
+				return [at(codemode_how_to_session_server_default, contextSession)];
+			},
 			services: [...scopeGlobal.services ?? [], ...scopeSession.services ?? []],
 			get activities() {
 				return [...scopeGlobal.activities ?? [], ...scopeSession.activities ?? []];