@agimon-ai/po-session 0.0.0-alpha.2 → 0.0.0-alpha.3

package/dist/extensions/server.cjs

@@ -2,55 +2,58 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_sessionDelivery = require("../sessionDelivery-CkuX6jlw.cjs");
-let node_fs = require("node:fs");
-node_fs = require_sessionDelivery.__toESM(node_fs, 1);
+const require_sessionDelivery = require("../sessionDelivery-CkKlRYAK.cjs");
 let node_path = require("node:path");
 node_path = require_sessionDelivery.__toESM(node_path, 1);
+let _agimon_ai_po_core_platform = require("@agimon-ai/po-core/platform");
 let _agimon_ai_po_core_piSettings = require("@agimon-ai/po-core/piSettings");
 let _agimon_ai_po_core_serverFacet = require("@agimon-ai/po-core/serverFacet");
 let _agimon_ai_po_core_extensionFile = require("@agimon-ai/po-core/extensionFile");
 //#region src/services/peerInbox/index.ts
 const inboxes = /* @__PURE__ */ new Map();
-/** Registers one live session-owned peer inbox. This registry is reachable only by the Session route. */
+/**
+* Registers one live session-owned peer inbox. This registry is reachable only by the Session route.
+* The newest registration wins: a Durable Object evicted without disposal leaves its entry in the
+* isolate's module state, and the restarted session must replace it. The hub still rejects two live
+* sessions with one id, and an older unregister cannot remove a newer inbox.
+*/
 function registerSessionPeerInbox(sessionId, inbox) {
-	if (inboxes.has(sessionId)) throw new Error(`Session peer inbox '${sessionId}' is already registered.`);
 	inboxes.set(sessionId, inbox);
 	return () => {
 		if (inboxes.get(sessionId) === inbox) inboxes.delete(sessionId);
 	};
 }
-function deliverSessionPeerEnvelope(targetSessionId, sourceKey, type, payload) {
+async function deliverSessionPeerEnvelope(targetSessionId, sourceKey, type, payload) {
 	return inboxes.get(targetSessionId)?.(sourceKey, type, payload);
 }
 //#endregion
 //#region src/extensions/workspaces/sessions/(backend)/root.server.ts
 var root_server_default = (0, _agimon_ai_po_core_extensionFile.defineRoot)((pluginContext) => ({
 	value: void 0,
-	services: [require_sessionDelivery.provideBackgroundWorkService, (context) => {
+	services: [require_sessionDelivery.provideBackgroundWorkService, async (context) => {
 		const agent = pluginContext.agent;
 		const session = agent?.context.session;
 		const communication = pluginContext.host.context.sessionCommunication;
 		const homeDirectory = pluginContext.host.context.homeDirectory;
 		const sessionService = pluginContext.host.context.sessionService;
 		if (!agent || !session?.admitPrompt || !communication || !homeDirectory || !sessionService?.canCommunicate) throw new Error("Session delivery requires the headless agent, authenticated session communication, host home directory, and communication policy.");
+		const fs = (0, _agimon_ai_po_core_platform.requireDoomFs)(pluginContext.context);
+		const sqlite = (0, _agimon_ai_po_core_platform.requireDoomSqlite)(pluginContext.context);
+		const io = _agimon_ai_po_core_platform.BACKGROUND_CONTEXT;
 		const sessionDirectory = node_path.default.join((0, _agimon_ai_po_core_piSettings.poHomeDirectory)(homeDirectory), "session");
 		const deliveryDirectory = node_path.default.join(sessionDirectory, "delivery");
-		node_fs.default.mkdirSync(deliveryDirectory, {
-			recursive: true,
-			mode: 448
-		});
+		await require_sessionDelivery.ensurePrivateDirectory(fs, deliveryDirectory, io);
+		const peerConfig = await require_sessionDelivery.readSessionPeerConfigAsync(fs, homeDirectory, io);
 		const peerCommunication = require_sessionDelivery.createPeerCommunication({
 			local: communication,
-			homeDirectory
+			config: peerConfig
 		});
-		const peerConfig = require_sessionDelivery.readSessionPeerConfig(homeDirectory);
 		const remotePeerIsGranted = (peerKey) => {
 			const peer = require_sessionDelivery.parseRemoteSessionReference(peerKey);
 			return peer !== void 0 && peerConfig?.peers.some((candidate) => candidate.hostId === peer.hostId && candidate.allowedSessionIds.includes(agent.context.sessionId)) === true;
 		};
 		const fallbackAuthorization = (peerKey) => sessionService.canCommunicate?.(agent.context.sessionId, peerKey) === true || remotePeerIsGranted(peerKey);
-		const groups = peerConfig ? require_sessionDelivery.createSessionGroupStore({ databasePath: node_path.default.join(sessionDirectory, "groups.sqlite") }) : void 0;
+		const groups = peerConfig ? await require_sessionDelivery.createSessionGroupStore({ database: await sqlite.open(node_path.default.join(sessionDirectory, "groups.sqlite"), io) }) : void 0;
 		const localHostId = peerConfig?.hostId;
 		const selfReference = localHostId ? require_sessionDelivery.peerSessionReference(localHostId, agent.context.sessionId) : void 0;
 		const groupAuthorization = groups && selfReference && localHostId ? require_sessionDelivery.createSessionGroupDeliveryAuthorizer({
@@ -59,18 +62,25 @@ var root_server_default = (0, _agimon_ai_po_core_extensionFile.defineRoot)((plug
 			peerReference: (peerKey) => require_sessionDelivery.parseRemoteSessionReference(peerKey) === void 0 ? require_sessionDelivery.peerSessionReference(localHostId, peerKey) : peerKey,
 			fallback: fallbackAuthorization
 		}) : void 0;
-		const { service, close: closeDelivery } = require_sessionDelivery.provideSessionDeliveryService(context, {
-			databasePath: node_path.default.join(deliveryDirectory, `${agent.context.sessionId}.sqlite`),
-			recipientKey: agent.context.sessionId,
-			communication: peerCommunication,
-			authorizePeer: (peerKey, metadata) => groupAuthorization?.(peerKey, metadata) ?? fallbackAuthorization(peerKey),
-			admitPrompt: (prompt, delivery) => session.admitPrompt(prompt, delivery)
-		});
+		let delivery;
+		try {
+			delivery = await require_sessionDelivery.provideSessionDeliveryService(context, {
+				database: await sqlite.open(node_path.default.join(deliveryDirectory, `${agent.context.sessionId}.sqlite`), io),
+				recipientKey: agent.context.sessionId,
+				communication: peerCommunication,
+				authorizePeer: (peerKey, metadata) => groupAuthorization ? groupAuthorization(peerKey, metadata) : fallbackAuthorization(peerKey),
+				admitPrompt: (prompt, admission) => session.admitPrompt(prompt, admission)
+			});
+		} catch (error) {
+			await groups?.close();
+			throw error;
+		}
+		const { service, close: closeDelivery } = delivery;
 		const unprovide = [];
 		if (groups && selfReference && peerConfig) {
-			const directory = require_sessionDelivery.createSessionDirectory({ authorizeDiscovery: (caller, subject) => {
+			const directory = require_sessionDelivery.createSessionDirectory({ authorizeDiscovery: async (caller, subject) => {
 				const reference = require_sessionDelivery.peerSessionReference(subject.hostId, subject.sessionId);
-				return groups.groupsFor(caller).some((group) => group.members.includes(reference)) ? { capabilities: ["message"] } : void 0;
+				return (await groups.groupsFor(caller)).some((group) => group.members.includes(reference)) ? { capabilities: ["message"] } : void 0;
 			} });
 			for (const peer of peerConfig.peers) for (const sessionId of peer.allowedSessionIds) directory.observe({
 				hostId: peer.hostId,
@@ -101,7 +111,7 @@ var root_server_default = (0, _agimon_ai_po_core_extensionFile.defineRoot)((plug
 			unregister();
 			for (const release of unprovide.reverse()) release();
 			await closeDelivery();
-			groups?.close();
+			await groups?.close();
 		};
 	}]
 }));
@@ -112,43 +122,69 @@ const DELIVERY_TYPES = /* @__PURE__ */ new Set(["doom/session-delivery/envelope"
 function response(status, error) {
 	return Response.json({ error }, { status });
 }
+/** Narrow HMAC-authenticated endpoint that a trusted tunnel may forward without device authentication. */
+function createPeerInboxApi(platform) {
+	return {
+		basePath: "session-peer",
+		start(context) {
+			const homeDirectory = context.homeDirectory;
+			let opened;
+			const open = () => opened ??= (async () => {
+				if (homeDirectory === void 0) return {
+					config: void 0,
+					replay: void 0
+				};
+				const config = await require_sessionDelivery.readSessionPeerConfigAsync(platform.fs, homeDirectory, _agimon_ai_po_core_platform.BACKGROUND_CONTEXT);
+				const file = node_path.default.join(node_path.default.dirname(require_sessionDelivery.sessionPeerConfigPath(homeDirectory)), require_sessionDelivery.PEER_REPLAY_DATABASE_FILE);
+				await require_sessionDelivery.ensurePrivateDirectory(platform.fs, node_path.default.dirname(file), _agimon_ai_po_core_platform.BACKGROUND_CONTEXT);
+				return {
+					config,
+					replay: await require_sessionDelivery.createPeerReplayGuardAsync(await platform.sqlite.open(file, _agimon_ai_po_core_platform.BACKGROUND_CONTEXT))
+				};
+			})().catch((error) => {
+				opened = void 0;
+				throw error;
+			});
+			return {
+				async fetch(request) {
+					if (request.method !== "POST" || new URL(request.url).pathname !== "/inbox") return response(404, "Not found.");
+					const { config, replay } = await open();
+					if (!config) return response(503, "Paired Session delivery is not configured.");
+					const length = request.headers.get("content-length");
+					if (length !== null && (!/^\d+$/u.test(length) || Number(length) > MAX_BODY_BYTES)) return response(413, "Request body is too large.");
+					const body = await request.text();
+					if (Buffer.byteLength(body) > MAX_BODY_BYTES) return response(413, "Request body is too large.");
+					const peer = require_sessionDelivery.verifyPeerRequest(config, request, body);
+					if (!peer) return response(401, "Paired Session request is unauthorized.");
+					if (!await replay?.admit(request)) return response(409, "Paired Session request was already received.");
+					let parsed;
+					try {
+						parsed = JSON.parse(body);
+					} catch {
+						return response(400, "Paired Session request is malformed.");
+					}
+					const envelope = require_sessionDelivery.parseSessionPeerEnvelope(parsed);
+					if (!envelope || !DELIVERY_TYPES.has(envelope.type)) return response(400, "Paired Session envelope is invalid.");
+					if (!peer.allowedSessionIds.includes(envelope.targetSessionId)) return response(403, "Peer is not granted this session.");
+					const state = await deliverSessionPeerEnvelope(envelope.targetSessionId, require_sessionDelivery.peerSessionReference(peer.hostId, envelope.sourceSessionId), envelope.type, envelope.payload);
+					return state === void 0 ? response(404, "Target Session is unavailable.") : Response.json({
+						accepted: true,
+						state
+					}, { status: 202 });
+				},
+				async close() {
+					await (await opened?.catch(() => void 0))?.replay?.close();
+				}
+			};
+		}
+	};
+}
 //#endregion
 //#region src/extensions/(backend)/api/session-peer/route.server.ts
-var route_server_default = (0, _agimon_ai_po_core_extensionFile.defineRoute)({
-	basePath: "session-peer",
-	start(context) {
-		const config = context.homeDirectory === void 0 ? void 0 : require_sessionDelivery.readSessionPeerConfig(context.homeDirectory);
-		const replay = context.homeDirectory === void 0 ? void 0 : require_sessionDelivery.createPeerReplayGuard(context.homeDirectory);
-		return {
-			async fetch(request) {
-				if (request.method !== "POST" || new URL(request.url).pathname !== "/inbox") return response(404, "Not found.");
-				if (!config) return response(503, "Paired Session delivery is not configured.");
-				const length = request.headers.get("content-length");
-				if (length !== null && (!/^\d+$/u.test(length) || Number(length) > MAX_BODY_BYTES)) return response(413, "Request body is too large.");
-				const body = await request.text();
-				if (Buffer.byteLength(body) > MAX_BODY_BYTES) return response(413, "Request body is too large.");
-				const peer = require_sessionDelivery.verifyPeerRequest(config, request, body);
-				if (!peer) return response(401, "Paired Session request is unauthorized.");
-				if (!replay?.admit(request)) return response(409, "Paired Session request was already received.");
-				let parsed;
-				try {
-					parsed = JSON.parse(body);
-				} catch {
-					return response(400, "Paired Session request is malformed.");
-				}
-				const envelope = require_sessionDelivery.parseSessionPeerEnvelope(parsed);
-				if (!envelope || !DELIVERY_TYPES.has(envelope.type)) return response(400, "Paired Session envelope is invalid.");
-				if (!peer.allowedSessionIds.includes(envelope.targetSessionId)) return response(403, "Peer is not granted this session.");
-				const state = deliverSessionPeerEnvelope(envelope.targetSessionId, require_sessionDelivery.peerSessionReference(peer.hostId, envelope.sourceSessionId), envelope.type, envelope.payload);
-				return state === void 0 ? response(404, "Target Session is unavailable.") : Response.json({
-					accepted: true,
-					state
-				}, { status: 202 });
-			},
-			close: () => replay?.close()
-		};
-	}
-});
+var route_server_default = (0, _agimon_ai_po_core_extensionFile.defineRoute)(({ context }) => createPeerInboxApi({
+	fs: (0, _agimon_ai_po_core_platform.requireDoomFs)(context),
+	sqlite: (0, _agimon_ai_po_core_platform.requireDoomSqlite)(context)
+}));
 //#endregion
 //#region generated/server.ts
 const at = (value, context) => typeof value === "function" ? value(context) : value;

package/dist/extensions/server.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"server.cjs","names":["defineRoot","provideBackgroundWorkService","path","poHomeDirectory","createPeerCommunication","readSessionPeerConfig","parseRemoteSessionReference","createSessionGroupStore","peerSessionReference","createSessionGroupDeliveryAuthorizer","provideSessionDeliveryService","createSessionDirectory","DOOM_SESSION_INTERCOM_SERVICE","createSessionIntercom","readSessionPeerConfig","createPeerReplayGuard","verifyPeerRequest","parseSessionPeerEnvelope","peerSessionReference","defineRoute","defineServerPlugin","composeServerProviderOverrides","rootSession","apiRoute","composeRootHooks"],"sources":["../../src/services/peerInbox/index.ts","../../src/extensions/workspaces/sessions/(backend)/root.server.ts","../../src/services/peerInboxApi/index.ts","../../src/extensions/(backend)/api/session-peer/route.server.ts","../../generated/server.ts"],"sourcesContent":["import type { DoomSessionDeliveryInboxState } from '../sessionDelivery';\n\nexport type SessionPeerInbox = (\n  sourceKey: string,\n  type: string,\n  payload: unknown,\n) => DoomSessionDeliveryInboxState | undefined;\n\nconst inboxes = new Map<string, SessionPeerInbox>();\n\n/** Registers one live session-owned peer inbox. This registry is reachable only by the Session route. */\nexport function registerSessionPeerInbox(sessionId: string, inbox: SessionPeerInbox): () => void {\n  if (inboxes.has(sessionId)) throw new Error(`Session peer inbox '${sessionId}' is already registered.`);\n  inboxes.set(sessionId, inbox);\n  return () => {\n    if (inboxes.get(sessionId) === inbox) inboxes.delete(sessionId);\n  };\n}\n\nexport function deliverSessionPeerEnvelope(\n  targetSessionId: string,\n  sourceKey: string,\n  type: string,\n  payload: unknown,\n): DoomSessionDeliveryInboxState | undefined {\n  return inboxes.get(targetSessionId)?.(sourceKey, type, payload);\n}\n","import fs from 'node:fs';\nimport path from 'node:path';\n\nimport { defineRoot } from '@agimon-ai/po-core/extensionFile';\nimport { poHomeDirectory } from '@agimon-ai/po-core/piSettings';\nimport type { DoomServerPluginContext } from '@agimon-ai/po-core/serverFacet';\n\nimport { provideBackgroundWorkService } from '../../../../services/backgroundWorkService';\nimport { registerSessionPeerInbox } from '../../../../services/peerInbox';\nimport {\n  createPeerCommunication,\n  parseRemoteSessionReference,\n  peerSessionReference,\n  readSessionPeerConfig,\n} from '../../../../services/peerTransport';\nimport { provideSessionDeliveryService } from '../../../../services/sessionDelivery';\nimport { createSessionDirectory } from '../../../../services/sessionDirectory';\nimport { createSessionGroupStore } from '../../../../services/sessionGroups';\nimport {\n  DOOM_SESSION_INTERCOM_SERVICE,\n  createSessionGroupDeliveryAuthorizer,\n  createSessionIntercom,\n} from '../../../../services/sessionIntercom';\n\nexport default defineRoot((pluginContext: DoomServerPluginContext) => ({\n  value: undefined,\n  services: [\n    provideBackgroundWorkService,\n    (context) => {\n      const agent = pluginContext.agent;\n      const session = agent?.context.session;\n      const communication = pluginContext.host.context.sessionCommunication;\n      const homeDirectory = pluginContext.host.context.homeDirectory;\n      const sessionService = pluginContext.host.context.sessionService;\n      if (!agent || !session?.admitPrompt || !communication || !homeDirectory || !sessionService?.canCommunicate) {\n        throw new Error(\n          'Session delivery requires the headless agent, authenticated session communication, host home directory, and communication policy.',\n        );\n      }\n      const sessionDirectory = path.join(poHomeDirectory(homeDirectory), 'session');\n      const deliveryDirectory = path.join(sessionDirectory, 'delivery');\n      fs.mkdirSync(deliveryDirectory, { recursive: true, mode: 0o700 });\n      const peerCommunication = createPeerCommunication({ local: communication, homeDirectory });\n      const peerConfig = readSessionPeerConfig(homeDirectory);\n      const remotePeerIsGranted = (peerKey: string): boolean => {\n        const peer = parseRemoteSessionReference(peerKey);\n        return (\n          peer !== undefined &&\n          peerConfig?.peers.some(\n            (candidate) =>\n              candidate.hostId === peer.hostId && candidate.allowedSessionIds.includes(agent.context.sessionId),\n          ) === true\n        );\n      };\n      const fallbackAuthorization = (peerKey: string): boolean =>\n        sessionService.canCommunicate?.(agent.context.sessionId, peerKey) === true || remotePeerIsGranted(peerKey);\n      const groups = peerConfig\n        ? createSessionGroupStore({ databasePath: path.join(sessionDirectory, 'groups.sqlite') })\n        : undefined;\n      const localHostId = peerConfig?.hostId;\n      const selfReference = localHostId ? peerSessionReference(localHostId, agent.context.sessionId) : undefined;\n      const groupAuthorization =\n        groups && selfReference && localHostId\n          ? createSessionGroupDeliveryAuthorizer({\n              selfReference,\n              groups,\n              peerReference: (peerKey) =>\n                parseRemoteSessionReference(peerKey) === undefined\n                  ? peerSessionReference(localHostId, peerKey)\n                  : peerKey,\n              fallback: fallbackAuthorization,\n            })\n          : undefined;\n      const { service, close: closeDelivery } = provideSessionDeliveryService(context, {\n        databasePath: path.join(deliveryDirectory, `${agent.context.sessionId}.sqlite`),\n        recipientKey: agent.context.sessionId,\n        communication: peerCommunication,\n        authorizePeer: (peerKey, metadata) => groupAuthorization?.(peerKey, metadata) ?? fallbackAuthorization(peerKey),\n        admitPrompt: (prompt, delivery) => session.admitPrompt!(prompt, delivery),\n      });\n      const unprovide: (() => void)[] = [];\n      if (groups && selfReference && peerConfig) {\n        const directory = createSessionDirectory({\n          authorizeDiscovery: (caller, subject) => {\n            const reference = peerSessionReference(subject.hostId, subject.sessionId);\n            const permitted = groups.groupsFor(caller).some((group) => group.members.includes(reference));\n            return permitted ? { capabilities: ['message'] } : undefined;\n          },\n        });\n        for (const peer of peerConfig.peers)\n          for (const sessionId of peer.allowedSessionIds)\n            directory.observe({\n              hostId: peer.hostId,\n              sessionId,\n              hostIncarnation: 'unknown',\n              sessionIncarnation: 'unknown',\n              sequence: 0,\n              observedAt: 0,\n              staleAfterMs: 0,\n              deliveryTarget: peerSessionReference(peer.hostId, sessionId),\n              reachability: 'unknown',\n              runtime: 'unknown',\n              activity: 'unknown',\n              voice: { eligible: 'unknown', readiness: 'unknown' },\n            });\n        unprovide.push(\n          context.provide(\n            DOOM_SESSION_INTERCOM_SERVICE,\n            createSessionIntercom({ selfReference, directory, groups, delivery: service }),\n          ),\n        );\n      }\n      const unregister = registerSessionPeerInbox(agent.context.sessionId, (sourceKey, kind, payload) =>\n        service.receive?.(sourceKey, kind, payload),\n      );\n      return async () => {\n        unregister();\n        for (const release of unprovide.reverse()) release();\n        await closeDelivery();\n        groups?.close();\n      };\n    },\n  ],\n}));\n","import type { DoomApi, DoomApiHandler } from '@agimon-ai/po-core/packageApi';\n\nimport { deliverSessionPeerEnvelope } from '../peerInbox';\nimport {\n  createPeerReplayGuard,\n  parseSessionPeerEnvelope,\n  peerSessionReference,\n  readSessionPeerConfig,\n  verifyPeerRequest,\n} from '../peerTransport';\n\nconst MAX_BODY_BYTES = 64 * 1024;\nconst DELIVERY_TYPES = new Set(['doom/session-delivery/envelope', 'doom/session-delivery/ack']);\n\nfunction response(status: number, error: string): Response {\n  return Response.json({ error }, { status });\n}\n\n/** Narrow HMAC-authenticated endpoint that a trusted tunnel may forward without device authentication. */\nexport const peerInboxApi: DoomApi = {\n  basePath: 'session-peer',\n  start(context): DoomApiHandler {\n    const config = context.homeDirectory === undefined ? undefined : readSessionPeerConfig(context.homeDirectory);\n    const replay = context.homeDirectory === undefined ? undefined : createPeerReplayGuard(context.homeDirectory);\n    return {\n      async fetch(request) {\n        if (request.method !== 'POST' || new URL(request.url).pathname !== '/inbox') return response(404, 'Not found.');\n        if (!config) return response(503, 'Paired Session delivery is not configured.');\n        const length = request.headers.get('content-length');\n        if (length !== null && (!/^\\d+$/u.test(length) || Number(length) > MAX_BODY_BYTES))\n          return response(413, 'Request body is too large.');\n        const body = await request.text();\n        if (Buffer.byteLength(body) > MAX_BODY_BYTES) return response(413, 'Request body is too large.');\n        const peer = verifyPeerRequest(config, request, body);\n        if (!peer) return response(401, 'Paired Session request is unauthorized.');\n        if (!replay?.admit(request)) return response(409, 'Paired Session request was already received.');\n        let parsed: unknown;\n        try {\n          parsed = JSON.parse(body) as unknown;\n        } catch {\n          return response(400, 'Paired Session request is malformed.');\n        }\n        const envelope = parseSessionPeerEnvelope(parsed);\n        if (!envelope || !DELIVERY_TYPES.has(envelope.type))\n          return response(400, 'Paired Session envelope is invalid.');\n        if (!peer.allowedSessionIds.includes(envelope.targetSessionId))\n          return response(403, 'Peer is not granted this session.');\n        const state = deliverSessionPeerEnvelope(\n          envelope.targetSessionId,\n          peerSessionReference(peer.hostId, envelope.sourceSessionId),\n          envelope.type,\n          envelope.payload,\n        );\n        return state === undefined\n          ? response(404, 'Target Session is unavailable.')\n          : Response.json({ accepted: true, state }, { status: 202 });\n      },\n      close: () => replay?.close(),\n    };\n  },\n};\n","import { defineRoute } from '@agimon-ai/po-core/extensionFile';\n\nimport { peerInboxApi } from '../../../../services/peerInboxApi';\n\nexport default defineRoute(peerInboxApi);\n","// Generated by @agimon-ai/po-build. Do not edit by hand.\nimport { defineServerPlugin, type DoomServerSessionPlugin } from '@agimon-ai/po-core/serverFacet';\nimport { composeServerProviderOverrides } from '@agimon-ai/po-core/serverFacet';\nimport { composeRootHooks } from '@agimon-ai/po-core/extensionFile';\n\nimport rootSession from '../src/extensions/workspaces/sessions/(backend)/root.server';\nimport apiRoute from '../src/extensions/(backend)/api/session-peer/route.server';\n\ntype Factory<T, C> = (context: C) => T;\nconst at = <T, C>(value: T | Factory<T, C>, context: C): T =>\n  typeof value === 'function' ? (value as Factory<T, C>)(context) : value;\n\nexport const facet = defineServerPlugin({\n  name: '@agimon-ai/po-session',\n  providerOverrides: composeServerProviderOverrides(rootSession),\n  global: (context) => ({\n    get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n  }),\n  workspace: (context) => ({\n    get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n  }),\n  session: async (context) => {\n    const scopeSession = await rootSession(context);\n    return {\n      ...composeRootHooks(scopeSession),\n      get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n      services: [...(scopeSession.services ?? [])],\n      get activities(): DoomServerSessionPlugin['activities'] { return [...(scopeSession.activities ?? [])]; },\n    };\n  },\n});\n\nexport default facet;\n"],"mappings":";;;;;;;;;;;;;AAQA,MAAM,0BAAU,IAAI,IAA8B;;AAGlD,SAAgB,yBAAyB,WAAmB,OAAqC;CAC/F,IAAI,QAAQ,IAAI,SAAS,GAAG,MAAM,IAAI,MAAM,uBAAuB,UAAU,yBAAyB;CACtG,QAAQ,IAAI,WAAW,KAAK;CAC5B,aAAa;EACX,IAAI,QAAQ,IAAI,SAAS,MAAM,OAAO,QAAQ,OAAO,SAAS;CAChE;AACF;AAEA,SAAgB,2BACd,iBACA,WACA,MACA,SAC2C;CAC3C,OAAO,QAAQ,IAAI,eAAe,CAAC,GAAG,WAAW,MAAM,OAAO;AAChE;;;ACFA,IAAA,uBAAA,GAAeA,iCAAAA,WAAAA,EAAY,mBAA4C;CACrE,OAAO,KAAA;CACP,UAAU,CACRC,wBAAAA,+BACC,YAAY;EACX,MAAM,QAAQ,cAAc;EAC5B,MAAM,UAAU,OAAO,QAAQ;EAC/B,MAAM,gBAAgB,cAAc,KAAK,QAAQ;EACjD,MAAM,gBAAgB,cAAc,KAAK,QAAQ;EACjD,MAAM,iBAAiB,cAAc,KAAK,QAAQ;EAClD,IAAI,CAAC,SAAS,CAAC,SAAS,eAAe,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,gBAAgB,gBAC1F,MAAM,IAAI,MACR,mIACF;EAEF,MAAM,mBAAmBC,UAAAA,QAAK,MAAA,GAAKC,8BAAAA,gBAAAA,CAAgB,aAAa,GAAG,SAAS;EAC5E,MAAM,oBAAoBD,UAAAA,QAAK,KAAK,kBAAkB,UAAU;EAChE,QAAA,QAAG,UAAU,mBAAmB;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EAChE,MAAM,oBAAoBE,wBAAAA,wBAAwB;GAAE,OAAO;GAAe;EAAc,CAAC;EACzF,MAAM,aAAaC,wBAAAA,sBAAsB,aAAa;EACtD,MAAM,uBAAuB,YAA6B;GACxD,MAAM,OAAOC,wBAAAA,4BAA4B,OAAO;GAChD,OACE,SAAS,KAAA,KACT,YAAY,MAAM,MACf,cACC,UAAU,WAAW,KAAK,UAAU,UAAU,kBAAkB,SAAS,MAAM,QAAQ,SAAS,CACpG,MAAM;EAEV;EACA,MAAM,yBAAyB,YAC7B,eAAe,iBAAiB,MAAM,QAAQ,WAAW,OAAO,MAAM,QAAQ,oBAAoB,OAAO;EAC3G,MAAM,SAAS,aACXC,wBAAAA,wBAAwB,EAAE,cAAcL,UAAAA,QAAK,KAAK,kBAAkB,eAAe,EAAE,CAAC,IACtF,KAAA;EACJ,MAAM,cAAc,YAAY;EAChC,MAAM,gBAAgB,cAAcM,wBAAAA,qBAAqB,aAAa,MAAM,QAAQ,SAAS,IAAI,KAAA;EACjG,MAAM,qBACJ,UAAU,iBAAiB,cACvBC,wBAAAA,qCAAqC;GACnC;GACA;GACA,gBAAgB,YACdH,wBAAAA,4BAA4B,OAAO,MAAM,KAAA,IACrCE,wBAAAA,qBAAqB,aAAa,OAAO,IACzC;GACN,UAAU;EACZ,CAAC,IACD,KAAA;EACN,MAAM,EAAE,SAAS,OAAO,kBAAkBE,wBAAAA,8BAA8B,SAAS;GAC/E,cAAcR,UAAAA,QAAK,KAAK,mBAAmB,GAAG,MAAM,QAAQ,UAAU,QAAQ;GAC9E,cAAc,MAAM,QAAQ;GAC5B,eAAe;GACf,gBAAgB,SAAS,aAAa,qBAAqB,SAAS,QAAQ,KAAK,sBAAsB,OAAO;GAC9G,cAAc,QAAQ,aAAa,QAAQ,YAAa,QAAQ,QAAQ;EAC1E,CAAC;EACD,MAAM,YAA4B,CAAC;EACnC,IAAI,UAAU,iBAAiB,YAAY;GACzC,MAAM,YAAYS,wBAAAA,uBAAuB,EACvC,qBAAqB,QAAQ,YAAY;IACvC,MAAM,YAAYH,wBAAAA,qBAAqB,QAAQ,QAAQ,QAAQ,SAAS;IAExE,OADkB,OAAO,UAAU,MAAM,CAAC,CAAC,MAAM,UAAU,MAAM,QAAQ,SAAS,SAAS,CAC5E,IAAI,EAAE,cAAc,CAAC,SAAS,EAAE,IAAI,KAAA;GACrD,EACF,CAAC;GACD,KAAK,MAAM,QAAQ,WAAW,OAC5B,KAAK,MAAM,aAAa,KAAK,mBAC3B,UAAU,QAAQ;IAChB,QAAQ,KAAK;IACb;IACA,iBAAiB;IACjB,oBAAoB;IACpB,UAAU;IACV,YAAY;IACZ,cAAc;IACd,gBAAgBA,wBAAAA,qBAAqB,KAAK,QAAQ,SAAS;IAC3D,cAAc;IACd,SAAS;IACT,UAAU;IACV,OAAO;KAAE,UAAU;KAAW,WAAW;IAAU;GACrD,CAAC;GACL,UAAU,KACR,QAAQ,QACNI,wBAAAA,+BACAC,wBAAAA,sBAAsB;IAAE;IAAe;IAAW;IAAQ,UAAU;GAAQ,CAAC,CAC/E,CACF;EACF;EACA,MAAM,aAAa,yBAAyB,MAAM,QAAQ,YAAY,WAAW,MAAM,YACrF,QAAQ,UAAU,WAAW,MAAM,OAAO,CAC5C;EACA,OAAO,YAAY;GACjB,WAAW;GACX,KAAK,MAAM,WAAW,UAAU,QAAQ,GAAG,QAAQ;GACnD,MAAM,cAAc;GACpB,QAAQ,MAAM;EAChB;CACF,CACF;AACF,EAAE;;;AChHF,MAAM,iBAAiB;AACvB,MAAM,iCAAiB,IAAI,IAAI,CAAC,kCAAkC,2BAA2B,CAAC;AAE9F,SAAS,SAAS,QAAgB,OAAyB;CACzD,OAAO,SAAS,KAAK,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;AAC5C;;;ACZA,IAAA,wBAAA,GAAeM,iCAAAA,YAAAA,CAAY;CDgBzB,UAAU;CACV,MAAM,SAAyB;EAC7B,MAAM,SAAS,QAAQ,kBAAkB,KAAA,IAAY,KAAA,IAAYL,wBAAAA,sBAAsB,QAAQ,aAAa;EAC5G,MAAM,SAAS,QAAQ,kBAAkB,KAAA,IAAY,KAAA,IAAYC,wBAAAA,sBAAsB,QAAQ,aAAa;EAC5G,OAAO;GACL,MAAM,MAAM,SAAS;IACnB,IAAI,QAAQ,WAAW,UAAU,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,aAAa,UAAU,OAAO,SAAS,KAAK,YAAY;IAC9G,IAAI,CAAC,QAAQ,OAAO,SAAS,KAAK,4CAA4C;IAC9E,MAAM,SAAS,QAAQ,QAAQ,IAAI,gBAAgB;IACnD,IAAI,WAAW,SAAS,CAAC,SAAS,KAAK,MAAM,KAAK,OAAO,MAAM,IAAI,iBACjE,OAAO,SAAS,KAAK,4BAA4B;IACnD,MAAM,OAAO,MAAM,QAAQ,KAAK;IAChC,IAAI,OAAO,WAAW,IAAI,IAAI,gBAAgB,OAAO,SAAS,KAAK,4BAA4B;IAC/F,MAAM,OAAOC,wBAAAA,kBAAkB,QAAQ,SAAS,IAAI;IACpD,IAAI,CAAC,MAAM,OAAO,SAAS,KAAK,yCAAyC;IACzE,IAAI,CAAC,QAAQ,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,8CAA8C;IAChG,IAAI;IACJ,IAAI;KACF,SAAS,KAAK,MAAM,IAAI;IAC1B,QAAQ;KACN,OAAO,SAAS,KAAK,sCAAsC;IAC7D;IACA,MAAM,WAAWC,wBAAAA,yBAAyB,MAAM;IAChD,IAAI,CAAC,YAAY,CAAC,eAAe,IAAI,SAAS,IAAI,GAChD,OAAO,SAAS,KAAK,qCAAqC;IAC5D,IAAI,CAAC,KAAK,kBAAkB,SAAS,SAAS,eAAe,GAC3D,OAAO,SAAS,KAAK,mCAAmC;IAC1D,MAAM,QAAQ,2BACZ,SAAS,iBACTC,wBAAAA,qBAAqB,KAAK,QAAQ,SAAS,eAAe,GAC1D,SAAS,MACT,SAAS,OACX;IACA,OAAO,UAAU,KAAA,IACb,SAAS,KAAK,gCAAgC,IAC9C,SAAS,KAAK;KAAE,UAAU;KAAM;IAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;GAC9D;GACA,aAAa,QAAQ,MAAM;EAC7B;CACF;ACvDyB,CAAY;;;ACKvC,MAAM,MAAY,OAA0B,YAC1C,OAAO,UAAU,aAAc,MAAwB,OAAO,IAAI;AAEpE,MAAa,SAAA,GAAQE,+BAAAA,mBAAAA,CAAmB;CACtC,MAAM;CACN,oBAAA,GAAmBC,+BAAAA,+BAAAA,CAA+BC,mBAAW;CAC7D,SAAS,aAAa,EACpB,IAAI,MAAsC;EAAE,OAAO,CAAC,GAAGC,sBAAU,OAAO,CAAC;CAAG,EAC9E;CACA,YAAY,aAAa,EACvB,IAAI,MAAsC;EAAE,OAAO,CAAC,GAAGA,sBAAU,OAAO,CAAC;CAAG,EAC9E;CACA,SAAS,OAAO,YAAY;EAC1B,MAAM,eAAe,MAAMD,oBAAY,OAAO;EAC9C,OAAO;GACL,IAAA,GAAGE,iCAAAA,iBAAAA,CAAiB,YAAY;GAChC,IAAI,MAAsC;IAAE,OAAO,CAAC,GAAGD,sBAAU,OAAO,CAAC;GAAG;GAC5E,UAAU,CAAC,GAAI,aAAa,YAAY,CAAC,CAAE;GAC3C,IAAI,aAAoD;IAAE,OAAO,CAAC,GAAI,aAAa,cAAc,CAAC,CAAE;GAAG;EACzG;CACF;AACF,CAAC"}
+{"version":3,"file":"server.cjs","names":["defineRoot","provideBackgroundWorkService","requireDoomFs","requireDoomSqlite","BACKGROUND_CONTEXT","path","poHomeDirectory","ensurePrivateDirectory","readSessionPeerConfigAsync","createPeerCommunication","parseRemoteSessionReference","createSessionGroupStore","peerSessionReference","createSessionGroupDeliveryAuthorizer","provideSessionDeliveryService","createSessionDirectory","DOOM_SESSION_INTERCOM_SERVICE","createSessionIntercom","readSessionPeerConfigAsync","BACKGROUND_CONTEXT","path","sessionPeerConfigPath","PEER_REPLAY_DATABASE_FILE","ensurePrivateDirectory","createPeerReplayGuardAsync","verifyPeerRequest","parseSessionPeerEnvelope","peerSessionReference","defineRoute","requireDoomFs","requireDoomSqlite","defineServerPlugin","composeServerProviderOverrides","rootSession","apiRoute","composeRootHooks"],"sources":["../../src/services/peerInbox/index.ts","../../src/extensions/workspaces/sessions/(backend)/root.server.ts","../../src/services/peerInboxApi/index.ts","../../src/extensions/(backend)/api/session-peer/route.server.ts","../../generated/server.ts"],"sourcesContent":["import type { DoomSessionDeliveryInboxState } from '../sessionDelivery';\n\nexport type SessionPeerInbox = (\n  sourceKey: string,\n  type: string,\n  payload: unknown,\n) => Promise<DoomSessionDeliveryInboxState | undefined> | undefined;\n\nconst inboxes = new Map<string, SessionPeerInbox>();\n\n/**\n * Registers one live session-owned peer inbox. This registry is reachable only by the Session route.\n * The newest registration wins: a Durable Object evicted without disposal leaves its entry in the\n * isolate's module state, and the restarted session must replace it. The hub still rejects two live\n * sessions with one id, and an older unregister cannot remove a newer inbox.\n */\nexport function registerSessionPeerInbox(sessionId: string, inbox: SessionPeerInbox): () => void {\n  inboxes.set(sessionId, inbox);\n  return () => {\n    if (inboxes.get(sessionId) === inbox) inboxes.delete(sessionId);\n  };\n}\n\nexport async function deliverSessionPeerEnvelope(\n  targetSessionId: string,\n  sourceKey: string,\n  type: string,\n  payload: unknown,\n): Promise<DoomSessionDeliveryInboxState | undefined> {\n  return inboxes.get(targetSessionId)?.(sourceKey, type, payload);\n}\n","import path from 'node:path';\n\nimport { defineRoot } from '@agimon-ai/po-core/extensionFile';\nimport { poHomeDirectory } from '@agimon-ai/po-core/piSettings';\nimport { BACKGROUND_CONTEXT, requireDoomFs, requireDoomSqlite } from '@agimon-ai/po-core/platform';\nimport type { DoomServerPluginContext } from '@agimon-ai/po-core/serverFacet';\n\nimport { provideBackgroundWorkService } from '../../../../services/backgroundWorkService';\nimport { registerSessionPeerInbox } from '../../../../services/peerInbox';\nimport {\n  createPeerCommunication,\n  ensurePrivateDirectory,\n  parseRemoteSessionReference,\n  peerSessionReference,\n  readSessionPeerConfigAsync,\n} from '../../../../services/peerTransport';\nimport { provideSessionDeliveryService } from '../../../../services/sessionDelivery';\nimport { createSessionDirectory } from '../../../../services/sessionDirectory';\nimport { createSessionGroupStore } from '../../../../services/sessionGroups';\nimport {\n  DOOM_SESSION_INTERCOM_SERVICE,\n  createSessionGroupDeliveryAuthorizer,\n  createSessionIntercom,\n} from '../../../../services/sessionIntercom';\n\nexport default defineRoot((pluginContext: DoomServerPluginContext) => ({\n  value: undefined,\n  services: [\n    provideBackgroundWorkService,\n    async (context) => {\n      const agent = pluginContext.agent;\n      const session = agent?.context.session;\n      const communication = pluginContext.host.context.sessionCommunication;\n      const homeDirectory = pluginContext.host.context.homeDirectory;\n      const sessionService = pluginContext.host.context.sessionService;\n      if (!agent || !session?.admitPrompt || !communication || !homeDirectory || !sessionService?.canCommunicate) {\n        throw new Error(\n          'Session delivery requires the headless agent, authenticated session communication, host home directory, and communication policy.',\n        );\n      }\n      const fs = requireDoomFs(pluginContext.context);\n      const sqlite = requireDoomSqlite(pluginContext.context);\n      const io = BACKGROUND_CONTEXT;\n      const sessionDirectory = path.join(poHomeDirectory(homeDirectory), 'session');\n      const deliveryDirectory = path.join(sessionDirectory, 'delivery');\n      await ensurePrivateDirectory(fs, deliveryDirectory, io);\n      const peerConfig = await readSessionPeerConfigAsync(fs, homeDirectory, io);\n      const peerCommunication = createPeerCommunication({ local: communication, config: peerConfig });\n      const remotePeerIsGranted = (peerKey: string): boolean => {\n        const peer = parseRemoteSessionReference(peerKey);\n        return (\n          peer !== undefined &&\n          peerConfig?.peers.some(\n            (candidate) =>\n              candidate.hostId === peer.hostId && candidate.allowedSessionIds.includes(agent.context.sessionId),\n          ) === true\n        );\n      };\n      const fallbackAuthorization = (peerKey: string): boolean =>\n        sessionService.canCommunicate?.(agent.context.sessionId, peerKey) === true || remotePeerIsGranted(peerKey);\n      const groups = peerConfig\n        ? await createSessionGroupStore({\n            database: await sqlite.open(path.join(sessionDirectory, 'groups.sqlite'), io),\n          })\n        : undefined;\n      const localHostId = peerConfig?.hostId;\n      const selfReference = localHostId ? peerSessionReference(localHostId, agent.context.sessionId) : undefined;\n      const groupAuthorization =\n        groups && selfReference && localHostId\n          ? createSessionGroupDeliveryAuthorizer({\n              selfReference,\n              groups,\n              peerReference: (peerKey) =>\n                parseRemoteSessionReference(peerKey) === undefined\n                  ? peerSessionReference(localHostId, peerKey)\n                  : peerKey,\n              fallback: fallbackAuthorization,\n            })\n          : undefined;\n      let delivery: Awaited<ReturnType<typeof provideSessionDeliveryService>>;\n      try {\n        delivery = await provideSessionDeliveryService(context, {\n          database: await sqlite.open(path.join(deliveryDirectory, `${agent.context.sessionId}.sqlite`), io),\n          recipientKey: agent.context.sessionId,\n          communication: peerCommunication,\n          authorizePeer: (peerKey, metadata) =>\n            groupAuthorization ? groupAuthorization(peerKey, metadata) : fallbackAuthorization(peerKey),\n          admitPrompt: (prompt, admission) => session.admitPrompt!(prompt, admission),\n        });\n      } catch (error) {\n        await groups?.close();\n        throw error;\n      }\n      const { service, close: closeDelivery } = delivery;\n      const unprovide: (() => void)[] = [];\n      if (groups && selfReference && peerConfig) {\n        const directory = createSessionDirectory({\n          authorizeDiscovery: async (caller, subject) => {\n            const reference = peerSessionReference(subject.hostId, subject.sessionId);\n            const permitted = (await groups.groupsFor(caller)).some((group) => group.members.includes(reference));\n            return permitted ? { capabilities: ['message'] } : undefined;\n          },\n        });\n        for (const peer of peerConfig.peers)\n          for (const sessionId of peer.allowedSessionIds)\n            directory.observe({\n              hostId: peer.hostId,\n              sessionId,\n              hostIncarnation: 'unknown',\n              sessionIncarnation: 'unknown',\n              sequence: 0,\n              observedAt: 0,\n              staleAfterMs: 0,\n              deliveryTarget: peerSessionReference(peer.hostId, sessionId),\n              reachability: 'unknown',\n              runtime: 'unknown',\n              activity: 'unknown',\n              voice: { eligible: 'unknown', readiness: 'unknown' },\n            });\n        unprovide.push(\n          context.provide(\n            DOOM_SESSION_INTERCOM_SERVICE,\n            createSessionIntercom({ selfReference, directory, groups, delivery: service }),\n          ),\n        );\n      }\n      const unregister = registerSessionPeerInbox(agent.context.sessionId, (sourceKey, kind, payload) =>\n        service.receive?.(sourceKey, kind, payload),\n      );\n      return async () => {\n        unregister();\n        for (const release of unprovide.reverse()) release();\n        await closeDelivery();\n        await groups?.close();\n      };\n    },\n  ],\n}));\n","import path from 'node:path';\n\nimport type { DoomApi, DoomApiHandler } from '@agimon-ai/po-core/packageApi';\nimport { BACKGROUND_CONTEXT, type DoomSqliteService, type FileSystem } from '@agimon-ai/po-core/platform';\n\nimport { deliverSessionPeerEnvelope } from '../peerInbox';\nimport {\n  PEER_REPLAY_DATABASE_FILE,\n  createPeerReplayGuardAsync,\n  ensurePrivateDirectory,\n  parseSessionPeerEnvelope,\n  peerSessionReference,\n  readSessionPeerConfigAsync,\n  sessionPeerConfigPath,\n  verifyPeerRequest,\n  type SessionPeerConfig,\n  type SessionPeerReplayGuardAsync,\n} from '../peerTransport';\n\nconst MAX_BODY_BYTES = 64 * 1024;\nconst DELIVERY_TYPES = new Set(['doom/session-delivery/envelope', 'doom/session-delivery/ack']);\n\nfunction response(status: number, error: string): Response {\n  return Response.json({ error }, { status });\n}\n\ninterface PeerInboxState {\n  readonly config: SessionPeerConfig | undefined;\n  readonly replay: SessionPeerReplayGuardAsync | undefined;\n}\n\n/** Narrow HMAC-authenticated endpoint that a trusted tunnel may forward without device authentication. */\nexport function createPeerInboxApi(platform: { readonly fs: FileSystem; readonly sqlite: DoomSqliteService }): DoomApi {\n  return {\n    basePath: 'session-peer',\n    start(context): DoomApiHandler {\n      const homeDirectory = context.homeDirectory;\n      // Opened once on first use: the handler starts synchronously, the platform services are async.\n      let opened: Promise<PeerInboxState> | undefined;\n      const open = (): Promise<PeerInboxState> =>\n        (opened ??= (async () => {\n          if (homeDirectory === undefined) return { config: undefined, replay: undefined };\n          const config = await readSessionPeerConfigAsync(platform.fs, homeDirectory, BACKGROUND_CONTEXT);\n          const file = path.join(path.dirname(sessionPeerConfigPath(homeDirectory)), PEER_REPLAY_DATABASE_FILE);\n          await ensurePrivateDirectory(platform.fs, path.dirname(file), BACKGROUND_CONTEXT);\n          const replay = await createPeerReplayGuardAsync(await platform.sqlite.open(file, BACKGROUND_CONTEXT));\n          return { config, replay };\n        })().catch((error: unknown) => {\n          // A failed open is retried by the next request rather than cached.\n          opened = undefined;\n          throw error;\n        }));\n      return {\n        async fetch(request) {\n          if (request.method !== 'POST' || new URL(request.url).pathname !== '/inbox')\n            return response(404, 'Not found.');\n          const { config, replay } = await open();\n          if (!config) return response(503, 'Paired Session delivery is not configured.');\n          const length = request.headers.get('content-length');\n          if (length !== null && (!/^\\d+$/u.test(length) || Number(length) > MAX_BODY_BYTES))\n            return response(413, 'Request body is too large.');\n          const body = await request.text();\n          if (Buffer.byteLength(body) > MAX_BODY_BYTES) return response(413, 'Request body is too large.');\n          const peer = verifyPeerRequest(config, request, body);\n          if (!peer) return response(401, 'Paired Session request is unauthorized.');\n          if (!(await replay?.admit(request))) return response(409, 'Paired Session request was already received.');\n          let parsed: unknown;\n          try {\n            parsed = JSON.parse(body) as unknown;\n          } catch {\n            return response(400, 'Paired Session request is malformed.');\n          }\n          const envelope = parseSessionPeerEnvelope(parsed);\n          if (!envelope || !DELIVERY_TYPES.has(envelope.type))\n            return response(400, 'Paired Session envelope is invalid.');\n          if (!peer.allowedSessionIds.includes(envelope.targetSessionId))\n            return response(403, 'Peer is not granted this session.');\n          const state = await deliverSessionPeerEnvelope(\n            envelope.targetSessionId,\n            peerSessionReference(peer.hostId, envelope.sourceSessionId),\n            envelope.type,\n            envelope.payload,\n          );\n          return state === undefined\n            ? response(404, 'Target Session is unavailable.')\n            : Response.json({ accepted: true, state }, { status: 202 });\n        },\n        async close() {\n          const state = await opened?.catch(() => undefined);\n          await state?.replay?.close();\n        },\n      };\n    },\n  };\n}\n","import { defineRoute } from '@agimon-ai/po-core/extensionFile';\nimport { requireDoomFs, requireDoomSqlite } from '@agimon-ai/po-core/platform';\nimport type { DoomServerPluginContext } from '@agimon-ai/po-core/serverFacet';\n\nimport { createPeerInboxApi } from '../../../../services/peerInboxApi';\n\nexport default defineRoute(({ context }: DoomServerPluginContext) =>\n  createPeerInboxApi({ fs: requireDoomFs(context), sqlite: requireDoomSqlite(context) }),\n);\n","// Generated by @agimon-ai/po-build. Do not edit by hand.\nimport { defineServerPlugin, type DoomServerSessionPlugin } from '@agimon-ai/po-core/serverFacet';\nimport { composeServerProviderOverrides } from '@agimon-ai/po-core/serverFacet';\nimport { composeRootHooks } from '@agimon-ai/po-core/extensionFile';\n\nimport rootSession from '../src/extensions/workspaces/sessions/(backend)/root.server';\nimport apiRoute from '../src/extensions/(backend)/api/session-peer/route.server';\n\ntype Factory<T, C> = (context: C) => T;\nconst at = <T, C>(value: T | Factory<T, C>, context: C): T =>\n  typeof value === 'function' ? (value as Factory<T, C>)(context) : value;\n\nexport const facet = defineServerPlugin({\n  name: '@agimon-ai/po-session',\n  providerOverrides: composeServerProviderOverrides(rootSession),\n  global: (context) => ({\n    get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n  }),\n  workspace: (context) => ({\n    get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n  }),\n  session: async (context) => {\n    const scopeSession = await rootSession(context);\n    return {\n      ...composeRootHooks(scopeSession),\n      get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n      services: [...(scopeSession.services ?? [])],\n      get activities(): DoomServerSessionPlugin['activities'] { return [...(scopeSession.activities ?? [])]; },\n    };\n  },\n});\n\nexport default facet;\n"],"mappings":";;;;;;;;;;;;AAQA,MAAM,0BAAU,IAAI,IAA8B;;;;;;;AAQlD,SAAgB,yBAAyB,WAAmB,OAAqC;CAC/F,QAAQ,IAAI,WAAW,KAAK;CAC5B,aAAa;EACX,IAAI,QAAQ,IAAI,SAAS,MAAM,OAAO,QAAQ,OAAO,SAAS;CAChE;AACF;AAEA,eAAsB,2BACpB,iBACA,WACA,MACA,SACoD;CACpD,OAAO,QAAQ,IAAI,eAAe,CAAC,GAAG,WAAW,MAAM,OAAO;AAChE;;;ACLA,IAAA,uBAAA,GAAeA,iCAAAA,WAAAA,EAAY,mBAA4C;CACrE,OAAO,KAAA;CACP,UAAU,CACRC,wBAAAA,8BACA,OAAO,YAAY;EACjB,MAAM,QAAQ,cAAc;EAC5B,MAAM,UAAU,OAAO,QAAQ;EAC/B,MAAM,gBAAgB,cAAc,KAAK,QAAQ;EACjD,MAAM,gBAAgB,cAAc,KAAK,QAAQ;EACjD,MAAM,iBAAiB,cAAc,KAAK,QAAQ;EAClD,IAAI,CAAC,SAAS,CAAC,SAAS,eAAe,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,gBAAgB,gBAC1F,MAAM,IAAI,MACR,mIACF;EAEF,MAAM,MAAA,GAAKC,4BAAAA,cAAAA,CAAc,cAAc,OAAO;EAC9C,MAAM,UAAA,GAASC,4BAAAA,kBAAAA,CAAkB,cAAc,OAAO;EACtD,MAAM,KAAKC,4BAAAA;EACX,MAAM,mBAAmBC,UAAAA,QAAK,MAAA,GAAKC,8BAAAA,gBAAAA,CAAgB,aAAa,GAAG,SAAS;EAC5E,MAAM,oBAAoBD,UAAAA,QAAK,KAAK,kBAAkB,UAAU;EAChE,MAAME,wBAAAA,uBAAuB,IAAI,mBAAmB,EAAE;EACtD,MAAM,aAAa,MAAMC,wBAAAA,2BAA2B,IAAI,eAAe,EAAE;EACzE,MAAM,oBAAoBC,wBAAAA,wBAAwB;GAAE,OAAO;GAAe,QAAQ;EAAW,CAAC;EAC9F,MAAM,uBAAuB,YAA6B;GACxD,MAAM,OAAOC,wBAAAA,4BAA4B,OAAO;GAChD,OACE,SAAS,KAAA,KACT,YAAY,MAAM,MACf,cACC,UAAU,WAAW,KAAK,UAAU,UAAU,kBAAkB,SAAS,MAAM,QAAQ,SAAS,CACpG,MAAM;EAEV;EACA,MAAM,yBAAyB,YAC7B,eAAe,iBAAiB,MAAM,QAAQ,WAAW,OAAO,MAAM,QAAQ,oBAAoB,OAAO;EAC3G,MAAM,SAAS,aACX,MAAMC,wBAAAA,wBAAwB,EAC5B,UAAU,MAAM,OAAO,KAAKN,UAAAA,QAAK,KAAK,kBAAkB,eAAe,GAAG,EAAE,EAC9E,CAAC,IACD,KAAA;EACJ,MAAM,cAAc,YAAY;EAChC,MAAM,gBAAgB,cAAcO,wBAAAA,qBAAqB,aAAa,MAAM,QAAQ,SAAS,IAAI,KAAA;EACjG,MAAM,qBACJ,UAAU,iBAAiB,cACvBC,wBAAAA,qCAAqC;GACnC;GACA;GACA,gBAAgB,YACdH,wBAAAA,4BAA4B,OAAO,MAAM,KAAA,IACrCE,wBAAAA,qBAAqB,aAAa,OAAO,IACzC;GACN,UAAU;EACZ,CAAC,IACD,KAAA;EACN,IAAI;EACJ,IAAI;GACF,WAAW,MAAME,wBAAAA,8BAA8B,SAAS;IACtD,UAAU,MAAM,OAAO,KAAKT,UAAAA,QAAK,KAAK,mBAAmB,GAAG,MAAM,QAAQ,UAAU,QAAQ,GAAG,EAAE;IACjG,cAAc,MAAM,QAAQ;IAC5B,eAAe;IACf,gBAAgB,SAAS,aACvB,qBAAqB,mBAAmB,SAAS,QAAQ,IAAI,sBAAsB,OAAO;IAC5F,cAAc,QAAQ,cAAc,QAAQ,YAAa,QAAQ,SAAS;GAC5E,CAAC;EACH,SAAS,OAAO;GACd,MAAM,QAAQ,MAAM;GACpB,MAAM;EACR;EACA,MAAM,EAAE,SAAS,OAAO,kBAAkB;EAC1C,MAAM,YAA4B,CAAC;EACnC,IAAI,UAAU,iBAAiB,YAAY;GACzC,MAAM,YAAYU,wBAAAA,uBAAuB,EACvC,oBAAoB,OAAO,QAAQ,YAAY;IAC7C,MAAM,YAAYH,wBAAAA,qBAAqB,QAAQ,QAAQ,QAAQ,SAAS;IAExE,QADmB,MAAM,OAAO,UAAU,MAAM,EAAA,CAAG,MAAM,UAAU,MAAM,QAAQ,SAAS,SAAS,CACpF,IAAI,EAAE,cAAc,CAAC,SAAS,EAAE,IAAI,KAAA;GACrD,EACF,CAAC;GACD,KAAK,MAAM,QAAQ,WAAW,OAC5B,KAAK,MAAM,aAAa,KAAK,mBAC3B,UAAU,QAAQ;IAChB,QAAQ,KAAK;IACb;IACA,iBAAiB;IACjB,oBAAoB;IACpB,UAAU;IACV,YAAY;IACZ,cAAc;IACd,gBAAgBA,wBAAAA,qBAAqB,KAAK,QAAQ,SAAS;IAC3D,cAAc;IACd,SAAS;IACT,UAAU;IACV,OAAO;KAAE,UAAU;KAAW,WAAW;IAAU;GACrD,CAAC;GACL,UAAU,KACR,QAAQ,QACNI,wBAAAA,+BACAC,wBAAAA,sBAAsB;IAAE;IAAe;IAAW;IAAQ,UAAU;GAAQ,CAAC,CAC/E,CACF;EACF;EACA,MAAM,aAAa,yBAAyB,MAAM,QAAQ,YAAY,WAAW,MAAM,YACrF,QAAQ,UAAU,WAAW,MAAM,OAAO,CAC5C;EACA,OAAO,YAAY;GACjB,WAAW;GACX,KAAK,MAAM,WAAW,UAAU,QAAQ,GAAG,QAAQ;GACnD,MAAM,cAAc;GACpB,MAAM,QAAQ,MAAM;EACtB;CACF,CACF;AACF,EAAE;;;ACtHF,MAAM,iBAAiB;AACvB,MAAM,iCAAiB,IAAI,IAAI,CAAC,kCAAkC,2BAA2B,CAAC;AAE9F,SAAS,SAAS,QAAgB,OAAyB;CACzD,OAAO,SAAS,KAAK,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;AAC5C;;AAQA,SAAgB,mBAAmB,UAAoF;CACrH,OAAO;EACL,UAAU;EACV,MAAM,SAAyB;GAC7B,MAAM,gBAAgB,QAAQ;GAE9B,IAAI;GACJ,MAAM,aACH,YAAY,YAAY;IACvB,IAAI,kBAAkB,KAAA,GAAW,OAAO;KAAE,QAAQ,KAAA;KAAW,QAAQ,KAAA;IAAU;IAC/E,MAAM,SAAS,MAAMC,wBAAAA,2BAA2B,SAAS,IAAI,eAAeC,4BAAAA,kBAAkB;IAC9F,MAAM,OAAOC,UAAAA,QAAK,KAAKA,UAAAA,QAAK,QAAQC,wBAAAA,sBAAsB,aAAa,CAAC,GAAGC,wBAAAA,yBAAyB;IACpG,MAAMC,wBAAAA,uBAAuB,SAAS,IAAIH,UAAAA,QAAK,QAAQ,IAAI,GAAGD,4BAAAA,kBAAkB;IAEhF,OAAO;KAAE;KAAQ,QAAA,MADIK,wBAAAA,2BAA2B,MAAM,SAAS,OAAO,KAAK,MAAML,4BAAAA,kBAAkB,CAAC;IAC5E;GAC1B,EAAA,CAAG,CAAC,CAAC,OAAO,UAAmB;IAE7B,SAAS,KAAA;IACT,MAAM;GACR,CAAC;GACH,OAAO;IACL,MAAM,MAAM,SAAS;KACnB,IAAI,QAAQ,WAAW,UAAU,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,aAAa,UACjE,OAAO,SAAS,KAAK,YAAY;KACnC,MAAM,EAAE,QAAQ,WAAW,MAAM,KAAK;KACtC,IAAI,CAAC,QAAQ,OAAO,SAAS,KAAK,4CAA4C;KAC9E,MAAM,SAAS,QAAQ,QAAQ,IAAI,gBAAgB;KACnD,IAAI,WAAW,SAAS,CAAC,SAAS,KAAK,MAAM,KAAK,OAAO,MAAM,IAAI,iBACjE,OAAO,SAAS,KAAK,4BAA4B;KACnD,MAAM,OAAO,MAAM,QAAQ,KAAK;KAChC,IAAI,OAAO,WAAW,IAAI,IAAI,gBAAgB,OAAO,SAAS,KAAK,4BAA4B;KAC/F,MAAM,OAAOM,wBAAAA,kBAAkB,QAAQ,SAAS,IAAI;KACpD,IAAI,CAAC,MAAM,OAAO,SAAS,KAAK,yCAAyC;KACzE,IAAI,CAAE,MAAM,QAAQ,MAAM,OAAO,GAAI,OAAO,SAAS,KAAK,8CAA8C;KACxG,IAAI;KACJ,IAAI;MACF,SAAS,KAAK,MAAM,IAAI;KAC1B,QAAQ;MACN,OAAO,SAAS,KAAK,sCAAsC;KAC7D;KACA,MAAM,WAAWC,wBAAAA,yBAAyB,MAAM;KAChD,IAAI,CAAC,YAAY,CAAC,eAAe,IAAI,SAAS,IAAI,GAChD,OAAO,SAAS,KAAK,qCAAqC;KAC5D,IAAI,CAAC,KAAK,kBAAkB,SAAS,SAAS,eAAe,GAC3D,OAAO,SAAS,KAAK,mCAAmC;KAC1D,MAAM,QAAQ,MAAM,2BAClB,SAAS,iBACTC,wBAAAA,qBAAqB,KAAK,QAAQ,SAAS,eAAe,GAC1D,SAAS,MACT,SAAS,OACX;KACA,OAAO,UAAU,KAAA,IACb,SAAS,KAAK,gCAAgC,IAC9C,SAAS,KAAK;MAAE,UAAU;MAAM;KAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;IAC9D;IACA,MAAM,QAAQ;KAEZ,OAAM,MADc,QAAQ,YAAY,KAAA,CAAS,EAAA,EACpC,QAAQ,MAAM;IAC7B;GACF;EACF;CACF;AACF;;;ACxFA,IAAA,wBAAA,GAAeC,iCAAAA,YAAAA,EAAa,EAAE,cAC5B,mBAAmB;CAAE,KAAA,GAAIC,4BAAAA,cAAAA,CAAc,OAAO;CAAG,SAAA,GAAQC,4BAAAA,kBAAAA,CAAkB,OAAO;AAAE,CAAC,CACvF;;;ACCA,MAAM,MAAY,OAA0B,YAC1C,OAAO,UAAU,aAAc,MAAwB,OAAO,IAAI;AAEpE,MAAa,SAAA,GAAQC,+BAAAA,mBAAAA,CAAmB;CACtC,MAAM;CACN,oBAAA,GAAmBC,+BAAAA,+BAAAA,CAA+BC,mBAAW;CAC7D,SAAS,aAAa,EACpB,IAAI,MAAsC;EAAE,OAAO,CAAC,GAAGC,sBAAU,OAAO,CAAC;CAAG,EAC9E;CACA,YAAY,aAAa,EACvB,IAAI,MAAsC;EAAE,OAAO,CAAC,GAAGA,sBAAU,OAAO,CAAC;CAAG,EAC9E;CACA,SAAS,OAAO,YAAY;EAC1B,MAAM,eAAe,MAAMD,oBAAY,OAAO;EAC9C,OAAO;GACL,IAAA,GAAGE,iCAAAA,iBAAAA,CAAiB,YAAY;GAChC,IAAI,MAAsC;IAAE,OAAO,CAAC,GAAGD,sBAAU,OAAO,CAAC;GAAG;GAC5E,UAAU,CAAC,GAAI,aAAa,YAAY,CAAC,CAAE;GAC3C,IAAI,aAAoD;IAAE,OAAO,CAAC,GAAI,aAAa,cAAc,CAAC,CAAE;GAAG;EACzG;CACF;AACF,CAAC"}

package/dist/extensions/server.mjs

@@ -1,50 +1,54 @@
-import { C as provideBackgroundWorkService, a as createSessionGroupDeliveryAuthorizer, f as createSessionDirectory, g as parseSessionPeerEnvelope, h as parseRemoteSessionReference, m as createPeerReplayGuard, n as provideSessionDeliveryService, o as createSessionIntercom, p as createPeerCommunication, s as DOOM_SESSION_INTERCOM_SERVICE, u as createSessionGroupStore, v as peerSessionReference, x as verifyPeerRequest, y as readSessionPeerConfig } from "../sessionDelivery-DpLWlaum.mjs";
-import fs from "node:fs";
+import { D as provideBackgroundWorkService, T as sessionPeerConfigPath, _ as parseSessionPeerEnvelope, a as createSessionGroupDeliveryAuthorizer, b as readSessionPeerConfigAsync, f as createSessionDirectory, g as parseRemoteSessionReference, h as ensurePrivateDirectory, m as createPeerReplayGuardAsync, n as provideSessionDeliveryService, o as createSessionIntercom, p as createPeerCommunication, s as DOOM_SESSION_INTERCOM_SERVICE, u as createSessionGroupStore, w as PEER_REPLAY_DATABASE_FILE, x as verifyPeerRequest, y as peerSessionReference } from "../sessionDelivery-BzPl0sCk.mjs";
 import path from "node:path";
+import { BACKGROUND_CONTEXT, requireDoomFs, requireDoomSqlite } from "@agimon-ai/po-core/platform";
 import { poHomeDirectory } from "@agimon-ai/po-core/piSettings";
 import { composeServerProviderOverrides, defineServerPlugin } from "@agimon-ai/po-core/serverFacet";
 import { composeRootHooks, defineRoot, defineRoute } from "@agimon-ai/po-core/extensionFile";
 //#region src/services/peerInbox/index.ts
 const inboxes = /* @__PURE__ */ new Map();
-/** Registers one live session-owned peer inbox. This registry is reachable only by the Session route. */
+/**
+* Registers one live session-owned peer inbox. This registry is reachable only by the Session route.
+* The newest registration wins: a Durable Object evicted without disposal leaves its entry in the
+* isolate's module state, and the restarted session must replace it. The hub still rejects two live
+* sessions with one id, and an older unregister cannot remove a newer inbox.
+*/
 function registerSessionPeerInbox(sessionId, inbox) {
-	if (inboxes.has(sessionId)) throw new Error(`Session peer inbox '${sessionId}' is already registered.`);
 	inboxes.set(sessionId, inbox);
 	return () => {
 		if (inboxes.get(sessionId) === inbox) inboxes.delete(sessionId);
 	};
 }
-function deliverSessionPeerEnvelope(targetSessionId, sourceKey, type, payload) {
+async function deliverSessionPeerEnvelope(targetSessionId, sourceKey, type, payload) {
 	return inboxes.get(targetSessionId)?.(sourceKey, type, payload);
 }
 //#endregion
 //#region src/extensions/workspaces/sessions/(backend)/root.server.ts
 var root_server_default = defineRoot((pluginContext) => ({
 	value: void 0,
-	services: [provideBackgroundWorkService, (context) => {
+	services: [provideBackgroundWorkService, async (context) => {
 		const agent = pluginContext.agent;
 		const session = agent?.context.session;
 		const communication = pluginContext.host.context.sessionCommunication;
 		const homeDirectory = pluginContext.host.context.homeDirectory;
 		const sessionService = pluginContext.host.context.sessionService;
 		if (!agent || !session?.admitPrompt || !communication || !homeDirectory || !sessionService?.canCommunicate) throw new Error("Session delivery requires the headless agent, authenticated session communication, host home directory, and communication policy.");
+		const fs = requireDoomFs(pluginContext.context);
+		const sqlite = requireDoomSqlite(pluginContext.context);
+		const io = BACKGROUND_CONTEXT;
 		const sessionDirectory = path.join(poHomeDirectory(homeDirectory), "session");
 		const deliveryDirectory = path.join(sessionDirectory, "delivery");
-		fs.mkdirSync(deliveryDirectory, {
-			recursive: true,
-			mode: 448
-		});
+		await ensurePrivateDirectory(fs, deliveryDirectory, io);
+		const peerConfig = await readSessionPeerConfigAsync(fs, homeDirectory, io);
 		const peerCommunication = createPeerCommunication({
 			local: communication,
-			homeDirectory
+			config: peerConfig
 		});
-		const peerConfig = readSessionPeerConfig(homeDirectory);
 		const remotePeerIsGranted = (peerKey) => {
 			const peer = parseRemoteSessionReference(peerKey);
 			return peer !== void 0 && peerConfig?.peers.some((candidate) => candidate.hostId === peer.hostId && candidate.allowedSessionIds.includes(agent.context.sessionId)) === true;
 		};
 		const fallbackAuthorization = (peerKey) => sessionService.canCommunicate?.(agent.context.sessionId, peerKey) === true || remotePeerIsGranted(peerKey);
-		const groups = peerConfig ? createSessionGroupStore({ databasePath: path.join(sessionDirectory, "groups.sqlite") }) : void 0;
+		const groups = peerConfig ? await createSessionGroupStore({ database: await sqlite.open(path.join(sessionDirectory, "groups.sqlite"), io) }) : void 0;
 		const localHostId = peerConfig?.hostId;
 		const selfReference = localHostId ? peerSessionReference(localHostId, agent.context.sessionId) : void 0;
 		const groupAuthorization = groups && selfReference && localHostId ? createSessionGroupDeliveryAuthorizer({
@@ -53,18 +57,25 @@ var root_server_default = defineRoot((pluginContext) => ({
 			peerReference: (peerKey) => parseRemoteSessionReference(peerKey) === void 0 ? peerSessionReference(localHostId, peerKey) : peerKey,
 			fallback: fallbackAuthorization
 		}) : void 0;
-		const { service, close: closeDelivery } = provideSessionDeliveryService(context, {
-			databasePath: path.join(deliveryDirectory, `${agent.context.sessionId}.sqlite`),
-			recipientKey: agent.context.sessionId,
-			communication: peerCommunication,
-			authorizePeer: (peerKey, metadata) => groupAuthorization?.(peerKey, metadata) ?? fallbackAuthorization(peerKey),
-			admitPrompt: (prompt, delivery) => session.admitPrompt(prompt, delivery)
-		});
+		let delivery;
+		try {
+			delivery = await provideSessionDeliveryService(context, {
+				database: await sqlite.open(path.join(deliveryDirectory, `${agent.context.sessionId}.sqlite`), io),
+				recipientKey: agent.context.sessionId,
+				communication: peerCommunication,
+				authorizePeer: (peerKey, metadata) => groupAuthorization ? groupAuthorization(peerKey, metadata) : fallbackAuthorization(peerKey),
+				admitPrompt: (prompt, admission) => session.admitPrompt(prompt, admission)
+			});
+		} catch (error) {
+			await groups?.close();
+			throw error;
+		}
+		const { service, close: closeDelivery } = delivery;
 		const unprovide = [];
 		if (groups && selfReference && peerConfig) {
-			const directory = createSessionDirectory({ authorizeDiscovery: (caller, subject) => {
+			const directory = createSessionDirectory({ authorizeDiscovery: async (caller, subject) => {
 				const reference = peerSessionReference(subject.hostId, subject.sessionId);
-				return groups.groupsFor(caller).some((group) => group.members.includes(reference)) ? { capabilities: ["message"] } : void 0;
+				return (await groups.groupsFor(caller)).some((group) => group.members.includes(reference)) ? { capabilities: ["message"] } : void 0;
 			} });
 			for (const peer of peerConfig.peers) for (const sessionId of peer.allowedSessionIds) directory.observe({
 				hostId: peer.hostId,
@@ -95,7 +106,7 @@ var root_server_default = defineRoot((pluginContext) => ({
 			unregister();
 			for (const release of unprovide.reverse()) release();
 			await closeDelivery();
-			groups?.close();
+			await groups?.close();
 		};
 	}]
 }));
@@ -106,43 +117,69 @@ const DELIVERY_TYPES = /* @__PURE__ */ new Set(["doom/session-delivery/envelope"
 function response(status, error) {
 	return Response.json({ error }, { status });
 }
+/** Narrow HMAC-authenticated endpoint that a trusted tunnel may forward without device authentication. */
+function createPeerInboxApi(platform) {
+	return {
+		basePath: "session-peer",
+		start(context) {
+			const homeDirectory = context.homeDirectory;
+			let opened;
+			const open = () => opened ??= (async () => {
+				if (homeDirectory === void 0) return {
+					config: void 0,
+					replay: void 0
+				};
+				const config = await readSessionPeerConfigAsync(platform.fs, homeDirectory, BACKGROUND_CONTEXT);
+				const file = path.join(path.dirname(sessionPeerConfigPath(homeDirectory)), PEER_REPLAY_DATABASE_FILE);
+				await ensurePrivateDirectory(platform.fs, path.dirname(file), BACKGROUND_CONTEXT);
+				return {
+					config,
+					replay: await createPeerReplayGuardAsync(await platform.sqlite.open(file, BACKGROUND_CONTEXT))
+				};
+			})().catch((error) => {
+				opened = void 0;
+				throw error;
+			});
+			return {
+				async fetch(request) {
+					if (request.method !== "POST" || new URL(request.url).pathname !== "/inbox") return response(404, "Not found.");
+					const { config, replay } = await open();
+					if (!config) return response(503, "Paired Session delivery is not configured.");
+					const length = request.headers.get("content-length");
+					if (length !== null && (!/^\d+$/u.test(length) || Number(length) > MAX_BODY_BYTES)) return response(413, "Request body is too large.");
+					const body = await request.text();
+					if (Buffer.byteLength(body) > MAX_BODY_BYTES) return response(413, "Request body is too large.");
+					const peer = verifyPeerRequest(config, request, body);
+					if (!peer) return response(401, "Paired Session request is unauthorized.");
+					if (!await replay?.admit(request)) return response(409, "Paired Session request was already received.");
+					let parsed;
+					try {
+						parsed = JSON.parse(body);
+					} catch {
+						return response(400, "Paired Session request is malformed.");
+					}
+					const envelope = parseSessionPeerEnvelope(parsed);
+					if (!envelope || !DELIVERY_TYPES.has(envelope.type)) return response(400, "Paired Session envelope is invalid.");
+					if (!peer.allowedSessionIds.includes(envelope.targetSessionId)) return response(403, "Peer is not granted this session.");
+					const state = await deliverSessionPeerEnvelope(envelope.targetSessionId, peerSessionReference(peer.hostId, envelope.sourceSessionId), envelope.type, envelope.payload);
+					return state === void 0 ? response(404, "Target Session is unavailable.") : Response.json({
+						accepted: true,
+						state
+					}, { status: 202 });
+				},
+				async close() {
+					await (await opened?.catch(() => void 0))?.replay?.close();
+				}
+			};
+		}
+	};
+}
 //#endregion
 //#region src/extensions/(backend)/api/session-peer/route.server.ts
-var route_server_default = defineRoute({
-	basePath: "session-peer",
-	start(context) {
-		const config = context.homeDirectory === void 0 ? void 0 : readSessionPeerConfig(context.homeDirectory);
-		const replay = context.homeDirectory === void 0 ? void 0 : createPeerReplayGuard(context.homeDirectory);
-		return {
-			async fetch(request) {
-				if (request.method !== "POST" || new URL(request.url).pathname !== "/inbox") return response(404, "Not found.");
-				if (!config) return response(503, "Paired Session delivery is not configured.");
-				const length = request.headers.get("content-length");
-				if (length !== null && (!/^\d+$/u.test(length) || Number(length) > MAX_BODY_BYTES)) return response(413, "Request body is too large.");
-				const body = await request.text();
-				if (Buffer.byteLength(body) > MAX_BODY_BYTES) return response(413, "Request body is too large.");
-				const peer = verifyPeerRequest(config, request, body);
-				if (!peer) return response(401, "Paired Session request is unauthorized.");
-				if (!replay?.admit(request)) return response(409, "Paired Session request was already received.");
-				let parsed;
-				try {
-					parsed = JSON.parse(body);
-				} catch {
-					return response(400, "Paired Session request is malformed.");
-				}
-				const envelope = parseSessionPeerEnvelope(parsed);
-				if (!envelope || !DELIVERY_TYPES.has(envelope.type)) return response(400, "Paired Session envelope is invalid.");
-				if (!peer.allowedSessionIds.includes(envelope.targetSessionId)) return response(403, "Peer is not granted this session.");
-				const state = deliverSessionPeerEnvelope(envelope.targetSessionId, peerSessionReference(peer.hostId, envelope.sourceSessionId), envelope.type, envelope.payload);
-				return state === void 0 ? response(404, "Target Session is unavailable.") : Response.json({
-					accepted: true,
-					state
-				}, { status: 202 });
-			},
-			close: () => replay?.close()
-		};
-	}
-});
+var route_server_default = defineRoute(({ context }) => createPeerInboxApi({
+	fs: requireDoomFs(context),
+	sqlite: requireDoomSqlite(context)
+}));
 //#endregion
 //#region generated/server.ts
 const at = (value, context) => typeof value === "function" ? value(context) : value;

package/dist/extensions/server.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"server.mjs","names":["rootSession","apiRoute"],"sources":["../../src/services/peerInbox/index.ts","../../src/extensions/workspaces/sessions/(backend)/root.server.ts","../../src/services/peerInboxApi/index.ts","../../src/extensions/(backend)/api/session-peer/route.server.ts","../../generated/server.ts"],"sourcesContent":["import type { DoomSessionDeliveryInboxState } from '../sessionDelivery';\n\nexport type SessionPeerInbox = (\n  sourceKey: string,\n  type: string,\n  payload: unknown,\n) => DoomSessionDeliveryInboxState | undefined;\n\nconst inboxes = new Map<string, SessionPeerInbox>();\n\n/** Registers one live session-owned peer inbox. This registry is reachable only by the Session route. */\nexport function registerSessionPeerInbox(sessionId: string, inbox: SessionPeerInbox): () => void {\n  if (inboxes.has(sessionId)) throw new Error(`Session peer inbox '${sessionId}' is already registered.`);\n  inboxes.set(sessionId, inbox);\n  return () => {\n    if (inboxes.get(sessionId) === inbox) inboxes.delete(sessionId);\n  };\n}\n\nexport function deliverSessionPeerEnvelope(\n  targetSessionId: string,\n  sourceKey: string,\n  type: string,\n  payload: unknown,\n): DoomSessionDeliveryInboxState | undefined {\n  return inboxes.get(targetSessionId)?.(sourceKey, type, payload);\n}\n","import fs from 'node:fs';\nimport path from 'node:path';\n\nimport { defineRoot } from '@agimon-ai/po-core/extensionFile';\nimport { poHomeDirectory } from '@agimon-ai/po-core/piSettings';\nimport type { DoomServerPluginContext } from '@agimon-ai/po-core/serverFacet';\n\nimport { provideBackgroundWorkService } from '../../../../services/backgroundWorkService';\nimport { registerSessionPeerInbox } from '../../../../services/peerInbox';\nimport {\n  createPeerCommunication,\n  parseRemoteSessionReference,\n  peerSessionReference,\n  readSessionPeerConfig,\n} from '../../../../services/peerTransport';\nimport { provideSessionDeliveryService } from '../../../../services/sessionDelivery';\nimport { createSessionDirectory } from '../../../../services/sessionDirectory';\nimport { createSessionGroupStore } from '../../../../services/sessionGroups';\nimport {\n  DOOM_SESSION_INTERCOM_SERVICE,\n  createSessionGroupDeliveryAuthorizer,\n  createSessionIntercom,\n} from '../../../../services/sessionIntercom';\n\nexport default defineRoot((pluginContext: DoomServerPluginContext) => ({\n  value: undefined,\n  services: [\n    provideBackgroundWorkService,\n    (context) => {\n      const agent = pluginContext.agent;\n      const session = agent?.context.session;\n      const communication = pluginContext.host.context.sessionCommunication;\n      const homeDirectory = pluginContext.host.context.homeDirectory;\n      const sessionService = pluginContext.host.context.sessionService;\n      if (!agent || !session?.admitPrompt || !communication || !homeDirectory || !sessionService?.canCommunicate) {\n        throw new Error(\n          'Session delivery requires the headless agent, authenticated session communication, host home directory, and communication policy.',\n        );\n      }\n      const sessionDirectory = path.join(poHomeDirectory(homeDirectory), 'session');\n      const deliveryDirectory = path.join(sessionDirectory, 'delivery');\n      fs.mkdirSync(deliveryDirectory, { recursive: true, mode: 0o700 });\n      const peerCommunication = createPeerCommunication({ local: communication, homeDirectory });\n      const peerConfig = readSessionPeerConfig(homeDirectory);\n      const remotePeerIsGranted = (peerKey: string): boolean => {\n        const peer = parseRemoteSessionReference(peerKey);\n        return (\n          peer !== undefined &&\n          peerConfig?.peers.some(\n            (candidate) =>\n              candidate.hostId === peer.hostId && candidate.allowedSessionIds.includes(agent.context.sessionId),\n          ) === true\n        );\n      };\n      const fallbackAuthorization = (peerKey: string): boolean =>\n        sessionService.canCommunicate?.(agent.context.sessionId, peerKey) === true || remotePeerIsGranted(peerKey);\n      const groups = peerConfig\n        ? createSessionGroupStore({ databasePath: path.join(sessionDirectory, 'groups.sqlite') })\n        : undefined;\n      const localHostId = peerConfig?.hostId;\n      const selfReference = localHostId ? peerSessionReference(localHostId, agent.context.sessionId) : undefined;\n      const groupAuthorization =\n        groups && selfReference && localHostId\n          ? createSessionGroupDeliveryAuthorizer({\n              selfReference,\n              groups,\n              peerReference: (peerKey) =>\n                parseRemoteSessionReference(peerKey) === undefined\n                  ? peerSessionReference(localHostId, peerKey)\n                  : peerKey,\n              fallback: fallbackAuthorization,\n            })\n          : undefined;\n      const { service, close: closeDelivery } = provideSessionDeliveryService(context, {\n        databasePath: path.join(deliveryDirectory, `${agent.context.sessionId}.sqlite`),\n        recipientKey: agent.context.sessionId,\n        communication: peerCommunication,\n        authorizePeer: (peerKey, metadata) => groupAuthorization?.(peerKey, metadata) ?? fallbackAuthorization(peerKey),\n        admitPrompt: (prompt, delivery) => session.admitPrompt!(prompt, delivery),\n      });\n      const unprovide: (() => void)[] = [];\n      if (groups && selfReference && peerConfig) {\n        const directory = createSessionDirectory({\n          authorizeDiscovery: (caller, subject) => {\n            const reference = peerSessionReference(subject.hostId, subject.sessionId);\n            const permitted = groups.groupsFor(caller).some((group) => group.members.includes(reference));\n            return permitted ? { capabilities: ['message'] } : undefined;\n          },\n        });\n        for (const peer of peerConfig.peers)\n          for (const sessionId of peer.allowedSessionIds)\n            directory.observe({\n              hostId: peer.hostId,\n              sessionId,\n              hostIncarnation: 'unknown',\n              sessionIncarnation: 'unknown',\n              sequence: 0,\n              observedAt: 0,\n              staleAfterMs: 0,\n              deliveryTarget: peerSessionReference(peer.hostId, sessionId),\n              reachability: 'unknown',\n              runtime: 'unknown',\n              activity: 'unknown',\n              voice: { eligible: 'unknown', readiness: 'unknown' },\n            });\n        unprovide.push(\n          context.provide(\n            DOOM_SESSION_INTERCOM_SERVICE,\n            createSessionIntercom({ selfReference, directory, groups, delivery: service }),\n          ),\n        );\n      }\n      const unregister = registerSessionPeerInbox(agent.context.sessionId, (sourceKey, kind, payload) =>\n        service.receive?.(sourceKey, kind, payload),\n      );\n      return async () => {\n        unregister();\n        for (const release of unprovide.reverse()) release();\n        await closeDelivery();\n        groups?.close();\n      };\n    },\n  ],\n}));\n","import type { DoomApi, DoomApiHandler } from '@agimon-ai/po-core/packageApi';\n\nimport { deliverSessionPeerEnvelope } from '../peerInbox';\nimport {\n  createPeerReplayGuard,\n  parseSessionPeerEnvelope,\n  peerSessionReference,\n  readSessionPeerConfig,\n  verifyPeerRequest,\n} from '../peerTransport';\n\nconst MAX_BODY_BYTES = 64 * 1024;\nconst DELIVERY_TYPES = new Set(['doom/session-delivery/envelope', 'doom/session-delivery/ack']);\n\nfunction response(status: number, error: string): Response {\n  return Response.json({ error }, { status });\n}\n\n/** Narrow HMAC-authenticated endpoint that a trusted tunnel may forward without device authentication. */\nexport const peerInboxApi: DoomApi = {\n  basePath: 'session-peer',\n  start(context): DoomApiHandler {\n    const config = context.homeDirectory === undefined ? undefined : readSessionPeerConfig(context.homeDirectory);\n    const replay = context.homeDirectory === undefined ? undefined : createPeerReplayGuard(context.homeDirectory);\n    return {\n      async fetch(request) {\n        if (request.method !== 'POST' || new URL(request.url).pathname !== '/inbox') return response(404, 'Not found.');\n        if (!config) return response(503, 'Paired Session delivery is not configured.');\n        const length = request.headers.get('content-length');\n        if (length !== null && (!/^\\d+$/u.test(length) || Number(length) > MAX_BODY_BYTES))\n          return response(413, 'Request body is too large.');\n        const body = await request.text();\n        if (Buffer.byteLength(body) > MAX_BODY_BYTES) return response(413, 'Request body is too large.');\n        const peer = verifyPeerRequest(config, request, body);\n        if (!peer) return response(401, 'Paired Session request is unauthorized.');\n        if (!replay?.admit(request)) return response(409, 'Paired Session request was already received.');\n        let parsed: unknown;\n        try {\n          parsed = JSON.parse(body) as unknown;\n        } catch {\n          return response(400, 'Paired Session request is malformed.');\n        }\n        const envelope = parseSessionPeerEnvelope(parsed);\n        if (!envelope || !DELIVERY_TYPES.has(envelope.type))\n          return response(400, 'Paired Session envelope is invalid.');\n        if (!peer.allowedSessionIds.includes(envelope.targetSessionId))\n          return response(403, 'Peer is not granted this session.');\n        const state = deliverSessionPeerEnvelope(\n          envelope.targetSessionId,\n          peerSessionReference(peer.hostId, envelope.sourceSessionId),\n          envelope.type,\n          envelope.payload,\n        );\n        return state === undefined\n          ? response(404, 'Target Session is unavailable.')\n          : Response.json({ accepted: true, state }, { status: 202 });\n      },\n      close: () => replay?.close(),\n    };\n  },\n};\n","import { defineRoute } from '@agimon-ai/po-core/extensionFile';\n\nimport { peerInboxApi } from '../../../../services/peerInboxApi';\n\nexport default defineRoute(peerInboxApi);\n","// Generated by @agimon-ai/po-build. Do not edit by hand.\nimport { defineServerPlugin, type DoomServerSessionPlugin } from '@agimon-ai/po-core/serverFacet';\nimport { composeServerProviderOverrides } from '@agimon-ai/po-core/serverFacet';\nimport { composeRootHooks } from '@agimon-ai/po-core/extensionFile';\n\nimport rootSession from '../src/extensions/workspaces/sessions/(backend)/root.server';\nimport apiRoute from '../src/extensions/(backend)/api/session-peer/route.server';\n\ntype Factory<T, C> = (context: C) => T;\nconst at = <T, C>(value: T | Factory<T, C>, context: C): T =>\n  typeof value === 'function' ? (value as Factory<T, C>)(context) : value;\n\nexport const facet = defineServerPlugin({\n  name: '@agimon-ai/po-session',\n  providerOverrides: composeServerProviderOverrides(rootSession),\n  global: (context) => ({\n    get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n  }),\n  workspace: (context) => ({\n    get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n  }),\n  session: async (context) => {\n    const scopeSession = await rootSession(context);\n    return {\n      ...composeRootHooks(scopeSession),\n      get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n      services: [...(scopeSession.services ?? [])],\n      get activities(): DoomServerSessionPlugin['activities'] { return [...(scopeSession.activities ?? [])]; },\n    };\n  },\n});\n\nexport default facet;\n"],"mappings":";;;;;;;AAQA,MAAM,0BAAU,IAAI,IAA8B;;AAGlD,SAAgB,yBAAyB,WAAmB,OAAqC;CAC/F,IAAI,QAAQ,IAAI,SAAS,GAAG,MAAM,IAAI,MAAM,uBAAuB,UAAU,yBAAyB;CACtG,QAAQ,IAAI,WAAW,KAAK;CAC5B,aAAa;EACX,IAAI,QAAQ,IAAI,SAAS,MAAM,OAAO,QAAQ,OAAO,SAAS;CAChE;AACF;AAEA,SAAgB,2BACd,iBACA,WACA,MACA,SAC2C;CAC3C,OAAO,QAAQ,IAAI,eAAe,CAAC,GAAG,WAAW,MAAM,OAAO;AAChE;;;ACFA,IAAA,sBAAe,YAAY,mBAA4C;CACrE,OAAO,KAAA;CACP,UAAU,CACR,+BACC,YAAY;EACX,MAAM,QAAQ,cAAc;EAC5B,MAAM,UAAU,OAAO,QAAQ;EAC/B,MAAM,gBAAgB,cAAc,KAAK,QAAQ;EACjD,MAAM,gBAAgB,cAAc,KAAK,QAAQ;EACjD,MAAM,iBAAiB,cAAc,KAAK,QAAQ;EAClD,IAAI,CAAC,SAAS,CAAC,SAAS,eAAe,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,gBAAgB,gBAC1F,MAAM,IAAI,MACR,mIACF;EAEF,MAAM,mBAAmB,KAAK,KAAK,gBAAgB,aAAa,GAAG,SAAS;EAC5E,MAAM,oBAAoB,KAAK,KAAK,kBAAkB,UAAU;EAChE,GAAG,UAAU,mBAAmB;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EAChE,MAAM,oBAAoB,wBAAwB;GAAE,OAAO;GAAe;EAAc,CAAC;EACzF,MAAM,aAAa,sBAAsB,aAAa;EACtD,MAAM,uBAAuB,YAA6B;GACxD,MAAM,OAAO,4BAA4B,OAAO;GAChD,OACE,SAAS,KAAA,KACT,YAAY,MAAM,MACf,cACC,UAAU,WAAW,KAAK,UAAU,UAAU,kBAAkB,SAAS,MAAM,QAAQ,SAAS,CACpG,MAAM;EAEV;EACA,MAAM,yBAAyB,YAC7B,eAAe,iBAAiB,MAAM,QAAQ,WAAW,OAAO,MAAM,QAAQ,oBAAoB,OAAO;EAC3G,MAAM,SAAS,aACX,wBAAwB,EAAE,cAAc,KAAK,KAAK,kBAAkB,eAAe,EAAE,CAAC,IACtF,KAAA;EACJ,MAAM,cAAc,YAAY;EAChC,MAAM,gBAAgB,cAAc,qBAAqB,aAAa,MAAM,QAAQ,SAAS,IAAI,KAAA;EACjG,MAAM,qBACJ,UAAU,iBAAiB,cACvB,qCAAqC;GACnC;GACA;GACA,gBAAgB,YACd,4BAA4B,OAAO,MAAM,KAAA,IACrC,qBAAqB,aAAa,OAAO,IACzC;GACN,UAAU;EACZ,CAAC,IACD,KAAA;EACN,MAAM,EAAE,SAAS,OAAO,kBAAkB,8BAA8B,SAAS;GAC/E,cAAc,KAAK,KAAK,mBAAmB,GAAG,MAAM,QAAQ,UAAU,QAAQ;GAC9E,cAAc,MAAM,QAAQ;GAC5B,eAAe;GACf,gBAAgB,SAAS,aAAa,qBAAqB,SAAS,QAAQ,KAAK,sBAAsB,OAAO;GAC9G,cAAc,QAAQ,aAAa,QAAQ,YAAa,QAAQ,QAAQ;EAC1E,CAAC;EACD,MAAM,YAA4B,CAAC;EACnC,IAAI,UAAU,iBAAiB,YAAY;GACzC,MAAM,YAAY,uBAAuB,EACvC,qBAAqB,QAAQ,YAAY;IACvC,MAAM,YAAY,qBAAqB,QAAQ,QAAQ,QAAQ,SAAS;IAExE,OADkB,OAAO,UAAU,MAAM,CAAC,CAAC,MAAM,UAAU,MAAM,QAAQ,SAAS,SAAS,CAC5E,IAAI,EAAE,cAAc,CAAC,SAAS,EAAE,IAAI,KAAA;GACrD,EACF,CAAC;GACD,KAAK,MAAM,QAAQ,WAAW,OAC5B,KAAK,MAAM,aAAa,KAAK,mBAC3B,UAAU,QAAQ;IAChB,QAAQ,KAAK;IACb;IACA,iBAAiB;IACjB,oBAAoB;IACpB,UAAU;IACV,YAAY;IACZ,cAAc;IACd,gBAAgB,qBAAqB,KAAK,QAAQ,SAAS;IAC3D,cAAc;IACd,SAAS;IACT,UAAU;IACV,OAAO;KAAE,UAAU;KAAW,WAAW;IAAU;GACrD,CAAC;GACL,UAAU,KACR,QAAQ,QACN,+BACA,sBAAsB;IAAE;IAAe;IAAW;IAAQ,UAAU;GAAQ,CAAC,CAC/E,CACF;EACF;EACA,MAAM,aAAa,yBAAyB,MAAM,QAAQ,YAAY,WAAW,MAAM,YACrF,QAAQ,UAAU,WAAW,MAAM,OAAO,CAC5C;EACA,OAAO,YAAY;GACjB,WAAW;GACX,KAAK,MAAM,WAAW,UAAU,QAAQ,GAAG,QAAQ;GACnD,MAAM,cAAc;GACpB,QAAQ,MAAM;EAChB;CACF,CACF;AACF,EAAE;;;AChHF,MAAM,iBAAiB;AACvB,MAAM,iCAAiB,IAAI,IAAI,CAAC,kCAAkC,2BAA2B,CAAC;AAE9F,SAAS,SAAS,QAAgB,OAAyB;CACzD,OAAO,SAAS,KAAK,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;AAC5C;;;ACZA,IAAA,uBAAe,YAAY;CDgBzB,UAAU;CACV,MAAM,SAAyB;EAC7B,MAAM,SAAS,QAAQ,kBAAkB,KAAA,IAAY,KAAA,IAAY,sBAAsB,QAAQ,aAAa;EAC5G,MAAM,SAAS,QAAQ,kBAAkB,KAAA,IAAY,KAAA,IAAY,sBAAsB,QAAQ,aAAa;EAC5G,OAAO;GACL,MAAM,MAAM,SAAS;IACnB,IAAI,QAAQ,WAAW,UAAU,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,aAAa,UAAU,OAAO,SAAS,KAAK,YAAY;IAC9G,IAAI,CAAC,QAAQ,OAAO,SAAS,KAAK,4CAA4C;IAC9E,MAAM,SAAS,QAAQ,QAAQ,IAAI,gBAAgB;IACnD,IAAI,WAAW,SAAS,CAAC,SAAS,KAAK,MAAM,KAAK,OAAO,MAAM,IAAI,iBACjE,OAAO,SAAS,KAAK,4BAA4B;IACnD,MAAM,OAAO,MAAM,QAAQ,KAAK;IAChC,IAAI,OAAO,WAAW,IAAI,IAAI,gBAAgB,OAAO,SAAS,KAAK,4BAA4B;IAC/F,MAAM,OAAO,kBAAkB,QAAQ,SAAS,IAAI;IACpD,IAAI,CAAC,MAAM,OAAO,SAAS,KAAK,yCAAyC;IACzE,IAAI,CAAC,QAAQ,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,8CAA8C;IAChG,IAAI;IACJ,IAAI;KACF,SAAS,KAAK,MAAM,IAAI;IAC1B,QAAQ;KACN,OAAO,SAAS,KAAK,sCAAsC;IAC7D;IACA,MAAM,WAAW,yBAAyB,MAAM;IAChD,IAAI,CAAC,YAAY,CAAC,eAAe,IAAI,SAAS,IAAI,GAChD,OAAO,SAAS,KAAK,qCAAqC;IAC5D,IAAI,CAAC,KAAK,kBAAkB,SAAS,SAAS,eAAe,GAC3D,OAAO,SAAS,KAAK,mCAAmC;IAC1D,MAAM,QAAQ,2BACZ,SAAS,iBACT,qBAAqB,KAAK,QAAQ,SAAS,eAAe,GAC1D,SAAS,MACT,SAAS,OACX;IACA,OAAO,UAAU,KAAA,IACb,SAAS,KAAK,gCAAgC,IAC9C,SAAS,KAAK;KAAE,UAAU;KAAM;IAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;GAC9D;GACA,aAAa,QAAQ,MAAM;EAC7B;CACF;ACvDyB,CAAY;;;ACKvC,MAAM,MAAY,OAA0B,YAC1C,OAAO,UAAU,aAAc,MAAwB,OAAO,IAAI;AAEpE,MAAa,QAAQ,mBAAmB;CACtC,MAAM;CACN,mBAAmB,+BAA+BA,mBAAW;CAC7D,SAAS,aAAa,EACpB,IAAI,MAAsC;EAAE,OAAO,CAAC,GAAGC,sBAAU,OAAO,CAAC;CAAG,EAC9E;CACA,YAAY,aAAa,EACvB,IAAI,MAAsC;EAAE,OAAO,CAAC,GAAGA,sBAAU,OAAO,CAAC;CAAG,EAC9E;CACA,SAAS,OAAO,YAAY;EAC1B,MAAM,eAAe,MAAMD,oBAAY,OAAO;EAC9C,OAAO;GACL,GAAG,iBAAiB,YAAY;GAChC,IAAI,MAAsC;IAAE,OAAO,CAAC,GAAGC,sBAAU,OAAO,CAAC;GAAG;GAC5E,UAAU,CAAC,GAAI,aAAa,YAAY,CAAC,CAAE;GAC3C,IAAI,aAAoD;IAAE,OAAO,CAAC,GAAI,aAAa,cAAc,CAAC,CAAE;GAAG;EACzG;CACF;AACF,CAAC"}
+{"version":3,"file":"server.mjs","names":["rootSession","apiRoute"],"sources":["../../src/services/peerInbox/index.ts","../../src/extensions/workspaces/sessions/(backend)/root.server.ts","../../src/services/peerInboxApi/index.ts","../../src/extensions/(backend)/api/session-peer/route.server.ts","../../generated/server.ts"],"sourcesContent":["import type { DoomSessionDeliveryInboxState } from '../sessionDelivery';\n\nexport type SessionPeerInbox = (\n  sourceKey: string,\n  type: string,\n  payload: unknown,\n) => Promise<DoomSessionDeliveryInboxState | undefined> | undefined;\n\nconst inboxes = new Map<string, SessionPeerInbox>();\n\n/**\n * Registers one live session-owned peer inbox. This registry is reachable only by the Session route.\n * The newest registration wins: a Durable Object evicted without disposal leaves its entry in the\n * isolate's module state, and the restarted session must replace it. The hub still rejects two live\n * sessions with one id, and an older unregister cannot remove a newer inbox.\n */\nexport function registerSessionPeerInbox(sessionId: string, inbox: SessionPeerInbox): () => void {\n  inboxes.set(sessionId, inbox);\n  return () => {\n    if (inboxes.get(sessionId) === inbox) inboxes.delete(sessionId);\n  };\n}\n\nexport async function deliverSessionPeerEnvelope(\n  targetSessionId: string,\n  sourceKey: string,\n  type: string,\n  payload: unknown,\n): Promise<DoomSessionDeliveryInboxState | undefined> {\n  return inboxes.get(targetSessionId)?.(sourceKey, type, payload);\n}\n","import path from 'node:path';\n\nimport { defineRoot } from '@agimon-ai/po-core/extensionFile';\nimport { poHomeDirectory } from '@agimon-ai/po-core/piSettings';\nimport { BACKGROUND_CONTEXT, requireDoomFs, requireDoomSqlite } from '@agimon-ai/po-core/platform';\nimport type { DoomServerPluginContext } from '@agimon-ai/po-core/serverFacet';\n\nimport { provideBackgroundWorkService } from '../../../../services/backgroundWorkService';\nimport { registerSessionPeerInbox } from '../../../../services/peerInbox';\nimport {\n  createPeerCommunication,\n  ensurePrivateDirectory,\n  parseRemoteSessionReference,\n  peerSessionReference,\n  readSessionPeerConfigAsync,\n} from '../../../../services/peerTransport';\nimport { provideSessionDeliveryService } from '../../../../services/sessionDelivery';\nimport { createSessionDirectory } from '../../../../services/sessionDirectory';\nimport { createSessionGroupStore } from '../../../../services/sessionGroups';\nimport {\n  DOOM_SESSION_INTERCOM_SERVICE,\n  createSessionGroupDeliveryAuthorizer,\n  createSessionIntercom,\n} from '../../../../services/sessionIntercom';\n\nexport default defineRoot((pluginContext: DoomServerPluginContext) => ({\n  value: undefined,\n  services: [\n    provideBackgroundWorkService,\n    async (context) => {\n      const agent = pluginContext.agent;\n      const session = agent?.context.session;\n      const communication = pluginContext.host.context.sessionCommunication;\n      const homeDirectory = pluginContext.host.context.homeDirectory;\n      const sessionService = pluginContext.host.context.sessionService;\n      if (!agent || !session?.admitPrompt || !communication || !homeDirectory || !sessionService?.canCommunicate) {\n        throw new Error(\n          'Session delivery requires the headless agent, authenticated session communication, host home directory, and communication policy.',\n        );\n      }\n      const fs = requireDoomFs(pluginContext.context);\n      const sqlite = requireDoomSqlite(pluginContext.context);\n      const io = BACKGROUND_CONTEXT;\n      const sessionDirectory = path.join(poHomeDirectory(homeDirectory), 'session');\n      const deliveryDirectory = path.join(sessionDirectory, 'delivery');\n      await ensurePrivateDirectory(fs, deliveryDirectory, io);\n      const peerConfig = await readSessionPeerConfigAsync(fs, homeDirectory, io);\n      const peerCommunication = createPeerCommunication({ local: communication, config: peerConfig });\n      const remotePeerIsGranted = (peerKey: string): boolean => {\n        const peer = parseRemoteSessionReference(peerKey);\n        return (\n          peer !== undefined &&\n          peerConfig?.peers.some(\n            (candidate) =>\n              candidate.hostId === peer.hostId && candidate.allowedSessionIds.includes(agent.context.sessionId),\n          ) === true\n        );\n      };\n      const fallbackAuthorization = (peerKey: string): boolean =>\n        sessionService.canCommunicate?.(agent.context.sessionId, peerKey) === true || remotePeerIsGranted(peerKey);\n      const groups = peerConfig\n        ? await createSessionGroupStore({\n            database: await sqlite.open(path.join(sessionDirectory, 'groups.sqlite'), io),\n          })\n        : undefined;\n      const localHostId = peerConfig?.hostId;\n      const selfReference = localHostId ? peerSessionReference(localHostId, agent.context.sessionId) : undefined;\n      const groupAuthorization =\n        groups && selfReference && localHostId\n          ? createSessionGroupDeliveryAuthorizer({\n              selfReference,\n              groups,\n              peerReference: (peerKey) =>\n                parseRemoteSessionReference(peerKey) === undefined\n                  ? peerSessionReference(localHostId, peerKey)\n                  : peerKey,\n              fallback: fallbackAuthorization,\n            })\n          : undefined;\n      let delivery: Awaited<ReturnType<typeof provideSessionDeliveryService>>;\n      try {\n        delivery = await provideSessionDeliveryService(context, {\n          database: await sqlite.open(path.join(deliveryDirectory, `${agent.context.sessionId}.sqlite`), io),\n          recipientKey: agent.context.sessionId,\n          communication: peerCommunication,\n          authorizePeer: (peerKey, metadata) =>\n            groupAuthorization ? groupAuthorization(peerKey, metadata) : fallbackAuthorization(peerKey),\n          admitPrompt: (prompt, admission) => session.admitPrompt!(prompt, admission),\n        });\n      } catch (error) {\n        await groups?.close();\n        throw error;\n      }\n      const { service, close: closeDelivery } = delivery;\n      const unprovide: (() => void)[] = [];\n      if (groups && selfReference && peerConfig) {\n        const directory = createSessionDirectory({\n          authorizeDiscovery: async (caller, subject) => {\n            const reference = peerSessionReference(subject.hostId, subject.sessionId);\n            const permitted = (await groups.groupsFor(caller)).some((group) => group.members.includes(reference));\n            return permitted ? { capabilities: ['message'] } : undefined;\n          },\n        });\n        for (const peer of peerConfig.peers)\n          for (const sessionId of peer.allowedSessionIds)\n            directory.observe({\n              hostId: peer.hostId,\n              sessionId,\n              hostIncarnation: 'unknown',\n              sessionIncarnation: 'unknown',\n              sequence: 0,\n              observedAt: 0,\n              staleAfterMs: 0,\n              deliveryTarget: peerSessionReference(peer.hostId, sessionId),\n              reachability: 'unknown',\n              runtime: 'unknown',\n              activity: 'unknown',\n              voice: { eligible: 'unknown', readiness: 'unknown' },\n            });\n        unprovide.push(\n          context.provide(\n            DOOM_SESSION_INTERCOM_SERVICE,\n            createSessionIntercom({ selfReference, directory, groups, delivery: service }),\n          ),\n        );\n      }\n      const unregister = registerSessionPeerInbox(agent.context.sessionId, (sourceKey, kind, payload) =>\n        service.receive?.(sourceKey, kind, payload),\n      );\n      return async () => {\n        unregister();\n        for (const release of unprovide.reverse()) release();\n        await closeDelivery();\n        await groups?.close();\n      };\n    },\n  ],\n}));\n","import path from 'node:path';\n\nimport type { DoomApi, DoomApiHandler } from '@agimon-ai/po-core/packageApi';\nimport { BACKGROUND_CONTEXT, type DoomSqliteService, type FileSystem } from '@agimon-ai/po-core/platform';\n\nimport { deliverSessionPeerEnvelope } from '../peerInbox';\nimport {\n  PEER_REPLAY_DATABASE_FILE,\n  createPeerReplayGuardAsync,\n  ensurePrivateDirectory,\n  parseSessionPeerEnvelope,\n  peerSessionReference,\n  readSessionPeerConfigAsync,\n  sessionPeerConfigPath,\n  verifyPeerRequest,\n  type SessionPeerConfig,\n  type SessionPeerReplayGuardAsync,\n} from '../peerTransport';\n\nconst MAX_BODY_BYTES = 64 * 1024;\nconst DELIVERY_TYPES = new Set(['doom/session-delivery/envelope', 'doom/session-delivery/ack']);\n\nfunction response(status: number, error: string): Response {\n  return Response.json({ error }, { status });\n}\n\ninterface PeerInboxState {\n  readonly config: SessionPeerConfig | undefined;\n  readonly replay: SessionPeerReplayGuardAsync | undefined;\n}\n\n/** Narrow HMAC-authenticated endpoint that a trusted tunnel may forward without device authentication. */\nexport function createPeerInboxApi(platform: { readonly fs: FileSystem; readonly sqlite: DoomSqliteService }): DoomApi {\n  return {\n    basePath: 'session-peer',\n    start(context): DoomApiHandler {\n      const homeDirectory = context.homeDirectory;\n      // Opened once on first use: the handler starts synchronously, the platform services are async.\n      let opened: Promise<PeerInboxState> | undefined;\n      const open = (): Promise<PeerInboxState> =>\n        (opened ??= (async () => {\n          if (homeDirectory === undefined) return { config: undefined, replay: undefined };\n          const config = await readSessionPeerConfigAsync(platform.fs, homeDirectory, BACKGROUND_CONTEXT);\n          const file = path.join(path.dirname(sessionPeerConfigPath(homeDirectory)), PEER_REPLAY_DATABASE_FILE);\n          await ensurePrivateDirectory(platform.fs, path.dirname(file), BACKGROUND_CONTEXT);\n          const replay = await createPeerReplayGuardAsync(await platform.sqlite.open(file, BACKGROUND_CONTEXT));\n          return { config, replay };\n        })().catch((error: unknown) => {\n          // A failed open is retried by the next request rather than cached.\n          opened = undefined;\n          throw error;\n        }));\n      return {\n        async fetch(request) {\n          if (request.method !== 'POST' || new URL(request.url).pathname !== '/inbox')\n            return response(404, 'Not found.');\n          const { config, replay } = await open();\n          if (!config) return response(503, 'Paired Session delivery is not configured.');\n          const length = request.headers.get('content-length');\n          if (length !== null && (!/^\\d+$/u.test(length) || Number(length) > MAX_BODY_BYTES))\n            return response(413, 'Request body is too large.');\n          const body = await request.text();\n          if (Buffer.byteLength(body) > MAX_BODY_BYTES) return response(413, 'Request body is too large.');\n          const peer = verifyPeerRequest(config, request, body);\n          if (!peer) return response(401, 'Paired Session request is unauthorized.');\n          if (!(await replay?.admit(request))) return response(409, 'Paired Session request was already received.');\n          let parsed: unknown;\n          try {\n            parsed = JSON.parse(body) as unknown;\n          } catch {\n            return response(400, 'Paired Session request is malformed.');\n          }\n          const envelope = parseSessionPeerEnvelope(parsed);\n          if (!envelope || !DELIVERY_TYPES.has(envelope.type))\n            return response(400, 'Paired Session envelope is invalid.');\n          if (!peer.allowedSessionIds.includes(envelope.targetSessionId))\n            return response(403, 'Peer is not granted this session.');\n          const state = await deliverSessionPeerEnvelope(\n            envelope.targetSessionId,\n            peerSessionReference(peer.hostId, envelope.sourceSessionId),\n            envelope.type,\n            envelope.payload,\n          );\n          return state === undefined\n            ? response(404, 'Target Session is unavailable.')\n            : Response.json({ accepted: true, state }, { status: 202 });\n        },\n        async close() {\n          const state = await opened?.catch(() => undefined);\n          await state?.replay?.close();\n        },\n      };\n    },\n  };\n}\n","import { defineRoute } from '@agimon-ai/po-core/extensionFile';\nimport { requireDoomFs, requireDoomSqlite } from '@agimon-ai/po-core/platform';\nimport type { DoomServerPluginContext } from '@agimon-ai/po-core/serverFacet';\n\nimport { createPeerInboxApi } from '../../../../services/peerInboxApi';\n\nexport default defineRoute(({ context }: DoomServerPluginContext) =>\n  createPeerInboxApi({ fs: requireDoomFs(context), sqlite: requireDoomSqlite(context) }),\n);\n","// Generated by @agimon-ai/po-build. Do not edit by hand.\nimport { defineServerPlugin, type DoomServerSessionPlugin } from '@agimon-ai/po-core/serverFacet';\nimport { composeServerProviderOverrides } from '@agimon-ai/po-core/serverFacet';\nimport { composeRootHooks } from '@agimon-ai/po-core/extensionFile';\n\nimport rootSession from '../src/extensions/workspaces/sessions/(backend)/root.server';\nimport apiRoute from '../src/extensions/(backend)/api/session-peer/route.server';\n\ntype Factory<T, C> = (context: C) => T;\nconst at = <T, C>(value: T | Factory<T, C>, context: C): T =>\n  typeof value === 'function' ? (value as Factory<T, C>)(context) : value;\n\nexport const facet = defineServerPlugin({\n  name: '@agimon-ai/po-session',\n  providerOverrides: composeServerProviderOverrides(rootSession),\n  global: (context) => ({\n    get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n  }),\n  workspace: (context) => ({\n    get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n  }),\n  session: async (context) => {\n    const scopeSession = await rootSession(context);\n    return {\n      ...composeRootHooks(scopeSession),\n      get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n      services: [...(scopeSession.services ?? [])],\n      get activities(): DoomServerSessionPlugin['activities'] { return [...(scopeSession.activities ?? [])]; },\n    };\n  },\n});\n\nexport default facet;\n"],"mappings":";;;;;;;AAQA,MAAM,0BAAU,IAAI,IAA8B;;;;;;;AAQlD,SAAgB,yBAAyB,WAAmB,OAAqC;CAC/F,QAAQ,IAAI,WAAW,KAAK;CAC5B,aAAa;EACX,IAAI,QAAQ,IAAI,SAAS,MAAM,OAAO,QAAQ,OAAO,SAAS;CAChE;AACF;AAEA,eAAsB,2BACpB,iBACA,WACA,MACA,SACoD;CACpD,OAAO,QAAQ,IAAI,eAAe,CAAC,GAAG,WAAW,MAAM,OAAO;AAChE;;;ACLA,IAAA,sBAAe,YAAY,mBAA4C;CACrE,OAAO,KAAA;CACP,UAAU,CACR,8BACA,OAAO,YAAY;EACjB,MAAM,QAAQ,cAAc;EAC5B,MAAM,UAAU,OAAO,QAAQ;EAC/B,MAAM,gBAAgB,cAAc,KAAK,QAAQ;EACjD,MAAM,gBAAgB,cAAc,KAAK,QAAQ;EACjD,MAAM,iBAAiB,cAAc,KAAK,QAAQ;EAClD,IAAI,CAAC,SAAS,CAAC,SAAS,eAAe,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,gBAAgB,gBAC1F,MAAM,IAAI,MACR,mIACF;EAEF,MAAM,KAAK,cAAc,cAAc,OAAO;EAC9C,MAAM,SAAS,kBAAkB,cAAc,OAAO;EACtD,MAAM,KAAK;EACX,MAAM,mBAAmB,KAAK,KAAK,gBAAgB,aAAa,GAAG,SAAS;EAC5E,MAAM,oBAAoB,KAAK,KAAK,kBAAkB,UAAU;EAChE,MAAM,uBAAuB,IAAI,mBAAmB,EAAE;EACtD,MAAM,aAAa,MAAM,2BAA2B,IAAI,eAAe,EAAE;EACzE,MAAM,oBAAoB,wBAAwB;GAAE,OAAO;GAAe,QAAQ;EAAW,CAAC;EAC9F,MAAM,uBAAuB,YAA6B;GACxD,MAAM,OAAO,4BAA4B,OAAO;GAChD,OACE,SAAS,KAAA,KACT,YAAY,MAAM,MACf,cACC,UAAU,WAAW,KAAK,UAAU,UAAU,kBAAkB,SAAS,MAAM,QAAQ,SAAS,CACpG,MAAM;EAEV;EACA,MAAM,yBAAyB,YAC7B,eAAe,iBAAiB,MAAM,QAAQ,WAAW,OAAO,MAAM,QAAQ,oBAAoB,OAAO;EAC3G,MAAM,SAAS,aACX,MAAM,wBAAwB,EAC5B,UAAU,MAAM,OAAO,KAAK,KAAK,KAAK,kBAAkB,eAAe,GAAG,EAAE,EAC9E,CAAC,IACD,KAAA;EACJ,MAAM,cAAc,YAAY;EAChC,MAAM,gBAAgB,cAAc,qBAAqB,aAAa,MAAM,QAAQ,SAAS,IAAI,KAAA;EACjG,MAAM,qBACJ,UAAU,iBAAiB,cACvB,qCAAqC;GACnC;GACA;GACA,gBAAgB,YACd,4BAA4B,OAAO,MAAM,KAAA,IACrC,qBAAqB,aAAa,OAAO,IACzC;GACN,UAAU;EACZ,CAAC,IACD,KAAA;EACN,IAAI;EACJ,IAAI;GACF,WAAW,MAAM,8BAA8B,SAAS;IACtD,UAAU,MAAM,OAAO,KAAK,KAAK,KAAK,mBAAmB,GAAG,MAAM,QAAQ,UAAU,QAAQ,GAAG,EAAE;IACjG,cAAc,MAAM,QAAQ;IAC5B,eAAe;IACf,gBAAgB,SAAS,aACvB,qBAAqB,mBAAmB,SAAS,QAAQ,IAAI,sBAAsB,OAAO;IAC5F,cAAc,QAAQ,cAAc,QAAQ,YAAa,QAAQ,SAAS;GAC5E,CAAC;EACH,SAAS,OAAO;GACd,MAAM,QAAQ,MAAM;GACpB,MAAM;EACR;EACA,MAAM,EAAE,SAAS,OAAO,kBAAkB;EAC1C,MAAM,YAA4B,CAAC;EACnC,IAAI,UAAU,iBAAiB,YAAY;GACzC,MAAM,YAAY,uBAAuB,EACvC,oBAAoB,OAAO,QAAQ,YAAY;IAC7C,MAAM,YAAY,qBAAqB,QAAQ,QAAQ,QAAQ,SAAS;IAExE,QADmB,MAAM,OAAO,UAAU,MAAM,EAAA,CAAG,MAAM,UAAU,MAAM,QAAQ,SAAS,SAAS,CACpF,IAAI,EAAE,cAAc,CAAC,SAAS,EAAE,IAAI,KAAA;GACrD,EACF,CAAC;GACD,KAAK,MAAM,QAAQ,WAAW,OAC5B,KAAK,MAAM,aAAa,KAAK,mBAC3B,UAAU,QAAQ;IAChB,QAAQ,KAAK;IACb;IACA,iBAAiB;IACjB,oBAAoB;IACpB,UAAU;IACV,YAAY;IACZ,cAAc;IACd,gBAAgB,qBAAqB,KAAK,QAAQ,SAAS;IAC3D,cAAc;IACd,SAAS;IACT,UAAU;IACV,OAAO;KAAE,UAAU;KAAW,WAAW;IAAU;GACrD,CAAC;GACL,UAAU,KACR,QAAQ,QACN,+BACA,sBAAsB;IAAE;IAAe;IAAW;IAAQ,UAAU;GAAQ,CAAC,CAC/E,CACF;EACF;EACA,MAAM,aAAa,yBAAyB,MAAM,QAAQ,YAAY,WAAW,MAAM,YACrF,QAAQ,UAAU,WAAW,MAAM,OAAO,CAC5C;EACA,OAAO,YAAY;GACjB,WAAW;GACX,KAAK,MAAM,WAAW,UAAU,QAAQ,GAAG,QAAQ;GACnD,MAAM,cAAc;GACpB,MAAM,QAAQ,MAAM;EACtB;CACF,CACF;AACF,EAAE;;;ACtHF,MAAM,iBAAiB;AACvB,MAAM,iCAAiB,IAAI,IAAI,CAAC,kCAAkC,2BAA2B,CAAC;AAE9F,SAAS,SAAS,QAAgB,OAAyB;CACzD,OAAO,SAAS,KAAK,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;AAC5C;;AAQA,SAAgB,mBAAmB,UAAoF;CACrH,OAAO;EACL,UAAU;EACV,MAAM,SAAyB;GAC7B,MAAM,gBAAgB,QAAQ;GAE9B,IAAI;GACJ,MAAM,aACH,YAAY,YAAY;IACvB,IAAI,kBAAkB,KAAA,GAAW,OAAO;KAAE,QAAQ,KAAA;KAAW,QAAQ,KAAA;IAAU;IAC/E,MAAM,SAAS,MAAM,2BAA2B,SAAS,IAAI,eAAe,kBAAkB;IAC9F,MAAM,OAAO,KAAK,KAAK,KAAK,QAAQ,sBAAsB,aAAa,CAAC,GAAG,yBAAyB;IACpG,MAAM,uBAAuB,SAAS,IAAI,KAAK,QAAQ,IAAI,GAAG,kBAAkB;IAEhF,OAAO;KAAE;KAAQ,QAAA,MADI,2BAA2B,MAAM,SAAS,OAAO,KAAK,MAAM,kBAAkB,CAAC;IAC5E;GAC1B,EAAA,CAAG,CAAC,CAAC,OAAO,UAAmB;IAE7B,SAAS,KAAA;IACT,MAAM;GACR,CAAC;GACH,OAAO;IACL,MAAM,MAAM,SAAS;KACnB,IAAI,QAAQ,WAAW,UAAU,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,aAAa,UACjE,OAAO,SAAS,KAAK,YAAY;KACnC,MAAM,EAAE,QAAQ,WAAW,MAAM,KAAK;KACtC,IAAI,CAAC,QAAQ,OAAO,SAAS,KAAK,4CAA4C;KAC9E,MAAM,SAAS,QAAQ,QAAQ,IAAI,gBAAgB;KACnD,IAAI,WAAW,SAAS,CAAC,SAAS,KAAK,MAAM,KAAK,OAAO,MAAM,IAAI,iBACjE,OAAO,SAAS,KAAK,4BAA4B;KACnD,MAAM,OAAO,MAAM,QAAQ,KAAK;KAChC,IAAI,OAAO,WAAW,IAAI,IAAI,gBAAgB,OAAO,SAAS,KAAK,4BAA4B;KAC/F,MAAM,OAAO,kBAAkB,QAAQ,SAAS,IAAI;KACpD,IAAI,CAAC,MAAM,OAAO,SAAS,KAAK,yCAAyC;KACzE,IAAI,CAAE,MAAM,QAAQ,MAAM,OAAO,GAAI,OAAO,SAAS,KAAK,8CAA8C;KACxG,IAAI;KACJ,IAAI;MACF,SAAS,KAAK,MAAM,IAAI;KAC1B,QAAQ;MACN,OAAO,SAAS,KAAK,sCAAsC;KAC7D;KACA,MAAM,WAAW,yBAAyB,MAAM;KAChD,IAAI,CAAC,YAAY,CAAC,eAAe,IAAI,SAAS,IAAI,GAChD,OAAO,SAAS,KAAK,qCAAqC;KAC5D,IAAI,CAAC,KAAK,kBAAkB,SAAS,SAAS,eAAe,GAC3D,OAAO,SAAS,KAAK,mCAAmC;KAC1D,MAAM,QAAQ,MAAM,2BAClB,SAAS,iBACT,qBAAqB,KAAK,QAAQ,SAAS,eAAe,GAC1D,SAAS,MACT,SAAS,OACX;KACA,OAAO,UAAU,KAAA,IACb,SAAS,KAAK,gCAAgC,IAC9C,SAAS,KAAK;MAAE,UAAU;MAAM;KAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;IAC9D;IACA,MAAM,QAAQ;KAEZ,OAAM,MADc,QAAQ,YAAY,KAAA,CAAS,EAAA,EACpC,QAAQ,MAAM;IAC7B;GACF;EACF;CACF;AACF;;;ACxFA,IAAA,uBAAe,aAAa,EAAE,cAC5B,mBAAmB;CAAE,IAAI,cAAc,OAAO;CAAG,QAAQ,kBAAkB,OAAO;AAAE,CAAC,CACvF;;;ACCA,MAAM,MAAY,OAA0B,YAC1C,OAAO,UAAU,aAAc,MAAwB,OAAO,IAAI;AAEpE,MAAa,QAAQ,mBAAmB;CACtC,MAAM;CACN,mBAAmB,+BAA+BA,mBAAW;CAC7D,SAAS,aAAa,EACpB,IAAI,MAAsC;EAAE,OAAO,CAAC,GAAGC,sBAAU,OAAO,CAAC;CAAG,EAC9E;CACA,YAAY,aAAa,EACvB,IAAI,MAAsC;EAAE,OAAO,CAAC,GAAGA,sBAAU,OAAO,CAAC;CAAG,EAC9E;CACA,SAAS,OAAO,YAAY;EAC1B,MAAM,eAAe,MAAMD,oBAAY,OAAO;EAC9C,OAAO;GACL,GAAG,iBAAiB,YAAY;GAChC,IAAI,MAAsC;IAAE,OAAO,CAAC,GAAGC,sBAAU,OAAO,CAAC;GAAG;GAC5E,UAAU,CAAC,GAAI,aAAa,YAAY,CAAC,CAAE;GAC3C,IAAI,aAAoD;IAAE,OAAO,CAAC,GAAI,aAAa,cAAc,CAAC,CAAE;GAAG;EACzG;CACF;AACF,CAAC"}