@agimon-ai/po-session 0.0.0-alpha.3 → 0.0.0-alpha.31

package/LICENSE

@@ -1,21 +1,149 @@
-MIT License
-
-Copyright (c) 2026 Vuong Ngo
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+License text copyright © 2017 MariaDB Corporation Ab, All Rights Reserved.
+"Business Source License" is a trademark of MariaDB Corporation Ab.
+
+Parameters
+
+Licensor:             Agimon Pty Ltd
+Licensed Work:        Po, the software in the Po source repository and the
+                      packages released from it, in each version released by
+                      the Licensor.
+                      The Licensed Work is (c) 2026 Agimon Pty Ltd.
+                      Material identified as third-party in the "Third-party
+                      components" section at the end of this file or in a
+                      NOTICE file, and any package or directory whose own
+                      license file grants a different license, is not part of
+                      the Licensed Work and remains under its own license.
+Additional Use Grant: You may make production use of the Licensed Work if
+  your use is Eligible Use. "Eligible Use" is production use that falls
+  within at least one of the following:
+
+  (a) Personal Use. Use by an individual for their own personal purposes,
+      and not on behalf of, or for the benefit of, an employer, client, or
+      other Organization. Use by an individual in the course of employment
+      or engagement by an Organization is use by that Organization.
+
+  (b) Small Organization Use. Use by or on behalf of an Organization whose
+      Annual Revenue is less than USD 1,000,000.
+
+  (c) Non-profit, Education and Research Use. Use, regardless of Annual
+      Revenue, by (i) an Organization registered or recognized as a
+      non-profit or charitable organization under the laws of its
+      jurisdiction, for its non-profit purposes; (ii) an accredited school,
+      college, or university, for teaching, learning, or academic research;
+      or (iii) a publicly funded research institution, for its research.
+
+  (d) Service Provider Use. Use by a consultant, contractor, agency, or other
+      service provider, regardless of its own Annual Revenue, solely to
+      build, deploy, host, operate, or support the Licensed Work for a client
+      whose own use would be Eligible Use under (a), (b), or (c). A service
+      provider's use for its own purposes is Eligible Use only if the service
+      provider itself qualifies under (b) or (c).
+
+
+  Hosted services. Offering the Licensed Work to third parties as a hosted
+  or managed service whose primary value is the Licensed Work is Eligible
+  Use only if each such third party's own use would be Eligible Use.
+
+  Definitions. "Organization" means any company, partnership, sole
+  proprietorship, trust, association, government body, or other entity, and
+  includes an individual acting in a business or professional capacity.
+  "Affiliate" means any entity that directly or indirectly controls, is
+  controlled by, or is under common control with an Organization, where
+  "control" means ownership of more than 50% of the voting interests of an
+  entity or the power to direct its management and policies by contract or
+  otherwise. "Annual Revenue" means the total gross revenue of an
+  Organization and all of its Affiliates combined, from all sources and
+  whether or not related to the Licensed Work, for its most recently
+  completed fiscal year, or, if it has not completed a fiscal year, for the
+  twelve months before the use (or since its formation, if shorter),
+  converted into US dollars at the average exchange rate for that period.
+  Proceeds of equity or debt financing are not revenue.
+
+  Threshold. If an Organization stops qualifying under (b), its existing
+  production use remains Eligible Use for 90 days after it stops
+  qualifying, after which it must obtain a commercial license or stop
+  production use. Use that was Eligible Use when it occurred never requires
+  a commercial license after the fact.
+Change Date:          Four years from the date a version of the Licensed Work
+                      is first publicly released by the Licensor.
+Change License:       Apache License, Version 2.0
+
+For information about alternative licensing arrangements for the Licensed
+Work, please visit: https://agimon.ai/licensing
+
+Notice
+
+The Business Source License (this document, or the "License") is not an Open
+Source license. However, the Licensed Work will eventually be made available
+under an Open Source License, as stated in this License.
+
+-----------------------------------------------------------------------------
+
+Business Source License 1.1
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited
+production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN “AS IS” BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License’s text to license
+your works, and to refer to it using the trademark “Business Source License”,
+as long as you comply with the Covenants of Licensor below.
+
+Covenants of Licensor
+
+In consideration of the right to use this License’s text and the “Business
+Source License” name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+   or a license that is compatible with GPL Version 2.0 or a later version,
+   where “compatible” means that software provided under the Change License can
+   be included in a program with software provided under GPL Version 2.0 or a
+   later version. Licensor may specify additional Change Licenses without
+   limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+   impose any additional restriction on the right granted in this License, as
+   the Additional Use Grant; or (b) insert the text “None”.
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.

package/dist/apiContracts.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"apiContracts.cjs","names":["Type","jsonApiResponses","defineApiContract"],"sources":["../src/schemas/apiContracts.ts"],"sourcesContent":["import { defineApiContract, jsonApiResponses, type DoomHttpContract } from '@agimon-ai/po-core/apiContracts';\nimport { Type } from 'typebox';\n\n/** The endpoint validates its own HMAC peer credential because tunnel device authentication is intentionally bypassed. */\nconst http: DoomHttpContract[] = [\n  {\n    id: 'peer-inbox',\n    scope: 'global',\n    basePath: 'session-peer',\n    method: 'POST',\n    path: '/inbox',\n    authentication: 'none',\n    description:\n      'Accept an HMAC-authenticated durable Session delivery envelope from an explicitly configured tunnel peer.',\n    body: { contentType: 'application/json', required: true, schema: Type.Unknown() },\n    responses: jsonApiResponses(Type.Object({ accepted: Type.Boolean(), state: Type.String() })),\n  },\n];\n\nexport const apiContracts = defineApiContract({ version: 1, http, sockets: [], dynamic: [] });\nexport default apiContracts;\n"],"mappings":";;;;;;;;AAIA,MAAM,OAA2B,CAC/B;CACE,IAAI;CACJ,OAAO;CACP,UAAU;CACV,QAAQ;CACR,MAAM;CACN,gBAAgB;CAChB,aACE;CACF,MAAM;EAAE,aAAa;EAAoB,UAAU;EAAM,QAAQA,QAAAA,KAAK,QAAQ;CAAE;CAChF,YAAA,GAAWC,gCAAAA,iBAAAA,CAAiBD,QAAAA,KAAK,OAAO;EAAE,UAAUA,QAAAA,KAAK,QAAQ;EAAG,OAAOA,QAAAA,KAAK,OAAO;CAAE,CAAC,CAAC;AAC7F,CACF;AAEA,MAAa,gBAAA,GAAeE,gCAAAA,kBAAAA,CAAkB;CAAE,SAAS;CAAG;CAAM,SAAS,CAAC;CAAG,SAAS,CAAC;AAAE,CAAC"}
+{"version":3,"file":"apiContracts.cjs","names":["Type","jsonApiResponses","defineApiContract"],"sources":["../src/schemas/apiContracts.ts"],"sourcesContent":["import { defineApiContract, jsonApiResponses, type PoHttpContract } from '@agimon-ai/po-core/apiContracts';\nimport { Type } from 'typebox';\n\n/** The endpoint validates its own HMAC peer credential because tunnel device authentication is intentionally bypassed. */\nconst http: PoHttpContract[] = [\n  {\n    id: 'peer-inbox',\n    scope: 'global',\n    basePath: 'session-peer',\n    method: 'POST',\n    path: '/inbox',\n    authentication: 'none',\n    description:\n      'Accept an HMAC-authenticated durable Session delivery envelope from an explicitly configured tunnel peer.',\n    body: { contentType: 'application/json', required: true, schema: Type.Unknown() },\n    responses: jsonApiResponses(Type.Object({ accepted: Type.Boolean(), state: Type.String() })),\n  },\n];\n\nexport const apiContracts = defineApiContract({ version: 1, http, sockets: [], dynamic: [] });\nexport default apiContracts;\n"],"mappings":";;;;;;;;AAIA,MAAM,OAAyB,CAC7B;CACE,IAAI;CACJ,OAAO;CACP,UAAU;CACV,QAAQ;CACR,MAAM;CACN,gBAAgB;CAChB,aACE;CACF,MAAM;EAAE,aAAa;EAAoB,UAAU;EAAM,QAAQA,QAAAA,KAAK,QAAQ;CAAE;CAChF,YAAA,GAAWC,gCAAAA,iBAAAA,CAAiBD,QAAAA,KAAK,OAAO;EAAE,UAAUA,QAAAA,KAAK,QAAQ;EAAG,OAAOA,QAAAA,KAAK,OAAO;CAAE,CAAC,CAAC;AAC7F,CACF;AAEA,MAAa,gBAAA,GAAeE,gCAAAA,kBAAAA,CAAkB;CAAE,SAAS;CAAG;CAAM,SAAS,CAAC;CAAG,SAAS,CAAC;AAAE,CAAC"}

package/dist/apiContracts.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"apiContracts.mjs","names":[],"sources":["../src/schemas/apiContracts.ts"],"sourcesContent":["import { defineApiContract, jsonApiResponses, type DoomHttpContract } from '@agimon-ai/po-core/apiContracts';\nimport { Type } from 'typebox';\n\n/** The endpoint validates its own HMAC peer credential because tunnel device authentication is intentionally bypassed. */\nconst http: DoomHttpContract[] = [\n  {\n    id: 'peer-inbox',\n    scope: 'global',\n    basePath: 'session-peer',\n    method: 'POST',\n    path: '/inbox',\n    authentication: 'none',\n    description:\n      'Accept an HMAC-authenticated durable Session delivery envelope from an explicitly configured tunnel peer.',\n    body: { contentType: 'application/json', required: true, schema: Type.Unknown() },\n    responses: jsonApiResponses(Type.Object({ accepted: Type.Boolean(), state: Type.String() })),\n  },\n];\n\nexport const apiContracts = defineApiContract({ version: 1, http, sockets: [], dynamic: [] });\nexport default apiContracts;\n"],"mappings":";;;;AAIA,MAAM,OAA2B,CAC/B;CACE,IAAI;CACJ,OAAO;CACP,UAAU;CACV,QAAQ;CACR,MAAM;CACN,gBAAgB;CAChB,aACE;CACF,MAAM;EAAE,aAAa;EAAoB,UAAU;EAAM,QAAQ,KAAK,QAAQ;CAAE;CAChF,WAAW,iBAAiB,KAAK,OAAO;EAAE,UAAU,KAAK,QAAQ;EAAG,OAAO,KAAK,OAAO;CAAE,CAAC,CAAC;AAC7F,CACF;AAEA,MAAa,eAAe,kBAAkB;CAAE,SAAS;CAAG;CAAM,SAAS,CAAC;CAAG,SAAS,CAAC;AAAE,CAAC"}
+{"version":3,"file":"apiContracts.mjs","names":[],"sources":["../src/schemas/apiContracts.ts"],"sourcesContent":["import { defineApiContract, jsonApiResponses, type PoHttpContract } from '@agimon-ai/po-core/apiContracts';\nimport { Type } from 'typebox';\n\n/** The endpoint validates its own HMAC peer credential because tunnel device authentication is intentionally bypassed. */\nconst http: PoHttpContract[] = [\n  {\n    id: 'peer-inbox',\n    scope: 'global',\n    basePath: 'session-peer',\n    method: 'POST',\n    path: '/inbox',\n    authentication: 'none',\n    description:\n      'Accept an HMAC-authenticated durable Session delivery envelope from an explicitly configured tunnel peer.',\n    body: { contentType: 'application/json', required: true, schema: Type.Unknown() },\n    responses: jsonApiResponses(Type.Object({ accepted: Type.Boolean(), state: Type.String() })),\n  },\n];\n\nexport const apiContracts = defineApiContract({ version: 1, http, sockets: [], dynamic: [] });\nexport default apiContracts;\n"],"mappings":";;;;AAIA,MAAM,OAAyB,CAC7B;CACE,IAAI;CACJ,OAAO;CACP,UAAU;CACV,QAAQ;CACR,MAAM;CACN,gBAAgB;CAChB,aACE;CACF,MAAM;EAAE,aAAa;EAAoB,UAAU;EAAM,QAAQ,KAAK,QAAQ;CAAE;CAChF,WAAW,iBAAiB,KAAK,OAAO;EAAE,UAAU,KAAK,QAAQ;EAAG,OAAO,KAAK,OAAO;CAAE,CAAC,CAAC;AAC7F,CACF;AAEA,MAAa,eAAe,kBAAkB;CAAE,SAAS;CAAG;CAAM,SAAS,CAAC;CAAG,SAAS,CAAC;AAAE,CAAC"}

package/dist/extensions/server.cjs

@@ -2,12 +2,12 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_sessionDelivery = require("../sessionDelivery-CkKlRYAK.cjs");
+const require_sessionDelivery = require("../sessionDelivery-BAXrVTum.cjs");
 let node_path = require("node:path");
 node_path = require_sessionDelivery.__toESM(node_path, 1);
 let _agimon_ai_po_core_platform = require("@agimon-ai/po-core/platform");
 let _agimon_ai_po_core_piSettings = require("@agimon-ai/po-core/piSettings");
-let _agimon_ai_po_core_serverFacet = require("@agimon-ai/po-core/serverFacet");
+let _agimon_ai_po_core_serverPlugin = require("@agimon-ai/po-core/serverPlugin");
 let _agimon_ai_po_core_extensionFile = require("@agimon-ai/po-core/extensionFile");
 //#region src/services/peerInbox/index.ts
 const inboxes = /* @__PURE__ */ new Map();
@@ -37,8 +37,8 @@ var root_server_default = (0, _agimon_ai_po_core_extensionFile.defineRoot)((plug
 		const homeDirectory = pluginContext.host.context.homeDirectory;
 		const sessionService = pluginContext.host.context.sessionService;
 		if (!agent || !session?.admitPrompt || !communication || !homeDirectory || !sessionService?.canCommunicate) throw new Error("Session delivery requires the headless agent, authenticated session communication, host home directory, and communication policy.");
-		const fs = (0, _agimon_ai_po_core_platform.requireDoomFs)(pluginContext.context);
-		const sqlite = (0, _agimon_ai_po_core_platform.requireDoomSqlite)(pluginContext.context);
+		const fs = (0, _agimon_ai_po_core_platform.requirePoFs)(pluginContext.context);
+		const sqlite = (0, _agimon_ai_po_core_platform.requirePoSqlite)(pluginContext.context);
 		const io = _agimon_ai_po_core_platform.BACKGROUND_CONTEXT;
 		const sessionDirectory = node_path.default.join((0, _agimon_ai_po_core_piSettings.poHomeDirectory)(homeDirectory), "session");
 		const deliveryDirectory = node_path.default.join(sessionDirectory, "delivery");
@@ -69,7 +69,16 @@ var root_server_default = (0, _agimon_ai_po_core_extensionFile.defineRoot)((plug
 				recipientKey: agent.context.sessionId,
 				communication: peerCommunication,
 				authorizePeer: (peerKey, metadata) => groupAuthorization ? groupAuthorization(peerKey, metadata) : fallbackAuthorization(peerKey),
-				admitPrompt: (prompt, admission) => session.admitPrompt(prompt, admission)
+				admitPrompt: (prompt, admission, requestId, metadata) => {
+					if (!metadata.customType) return session.admitPrompt(prompt, admission, void 0, requestId);
+					if (!session.admitMessage) throw new Error("The session cannot admit a custom delivery.");
+					return session.admitMessage({
+						type: metadata.customType,
+						text: prompt,
+						display: true,
+						details: metadata.customDetails === void 0 ? void 0 : JSON.parse(metadata.customDetails)
+					}, admission === "steer" ? "steer" : "followUp", requestId);
+				}
 			});
 		} catch (error) {
 			await groups?.close();
@@ -99,7 +108,7 @@ var root_server_default = (0, _agimon_ai_po_core_extensionFile.defineRoot)((plug
 					readiness: "unknown"
 				}
 			});
-			unprovide.push(context.provide(require_sessionDelivery.DOOM_SESSION_INTERCOM_SERVICE, require_sessionDelivery.createSessionIntercom({
+			unprovide.push(context.provide(require_sessionDelivery.PO_SESSION_INTERCOM_SERVICE, require_sessionDelivery.createSessionIntercom({
 				selfReference,
 				directory,
 				groups,
@@ -118,7 +127,7 @@ var root_server_default = (0, _agimon_ai_po_core_extensionFile.defineRoot)((plug
 //#endregion
 //#region src/services/peerInboxApi/index.ts
 const MAX_BODY_BYTES = 65536;
-const DELIVERY_TYPES = /* @__PURE__ */ new Set(["doom/session-delivery/envelope", "doom/session-delivery/ack"]);
+const DELIVERY_TYPES = /* @__PURE__ */ new Set(["po/session-delivery/envelope", "po/session-delivery/ack"]);
 function response(status, error) {
 	return Response.json({ error }, { status });
 }
@@ -182,15 +191,16 @@ function createPeerInboxApi(platform) {
 //#endregion
 //#region src/extensions/(backend)/api/session-peer/route.server.ts
 var route_server_default = (0, _agimon_ai_po_core_extensionFile.defineRoute)(({ context }) => createPeerInboxApi({
-	fs: (0, _agimon_ai_po_core_platform.requireDoomFs)(context),
-	sqlite: (0, _agimon_ai_po_core_platform.requireDoomSqlite)(context)
+	fs: (0, _agimon_ai_po_core_platform.requirePoFs)(context),
+	sqlite: (0, _agimon_ai_po_core_platform.requirePoSqlite)(context)
 }));
 //#endregion
 //#region generated/server.ts
 const at = (value, context) => typeof value === "function" ? value(context) : value;
-const facet = (0, _agimon_ai_po_core_serverFacet.defineServerPlugin)({
+const serverPlugin = (0, _agimon_ai_po_core_serverPlugin.defineServerPlugin)({
 	name: "@agimon-ai/po-session",
-	providerOverrides: (0, _agimon_ai_po_core_serverFacet.composeServerProviderOverrides)(root_server_default),
+	providerOverrides: (0, _agimon_ai_po_core_serverPlugin.composeServerProviderOverrides)(root_server_default),
+	injects: (0, _agimon_ai_po_core_extensionFile.composeRootInjects)({ session: [root_server_default] }),
 	global: (context) => ({ get api() {
 		return [at(route_server_default, context)];
 	} }),
@@ -198,7 +208,7 @@ const facet = (0, _agimon_ai_po_core_serverFacet.defineServerPlugin)({
 		return [at(route_server_default, context)];
 	} }),
 	session: async (context) => {
-		const scopeSession = await root_server_default(context);
+		const scopeSession = await context.scopeRoot("session", root_server_default, context);
 		return {
 			...(0, _agimon_ai_po_core_extensionFile.composeRootHooks)(scopeSession),
 			get api() {
@@ -212,7 +222,7 @@ const facet = (0, _agimon_ai_po_core_serverFacet.defineServerPlugin)({
 	}
 });
 //#endregion
-exports.default = facet;
-exports.facet = facet;
+exports.default = serverPlugin;
+exports.serverPlugin = serverPlugin;
 
 //# sourceMappingURL=server.cjs.map

package/dist/extensions/server.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"server.cjs","names":["defineRoot","provideBackgroundWorkService","requireDoomFs","requireDoomSqlite","BACKGROUND_CONTEXT","path","poHomeDirectory","ensurePrivateDirectory","readSessionPeerConfigAsync","createPeerCommunication","parseRemoteSessionReference","createSessionGroupStore","peerSessionReference","createSessionGroupDeliveryAuthorizer","provideSessionDeliveryService","createSessionDirectory","DOOM_SESSION_INTERCOM_SERVICE","createSessionIntercom","readSessionPeerConfigAsync","BACKGROUND_CONTEXT","path","sessionPeerConfigPath","PEER_REPLAY_DATABASE_FILE","ensurePrivateDirectory","createPeerReplayGuardAsync","verifyPeerRequest","parseSessionPeerEnvelope","peerSessionReference","defineRoute","requireDoomFs","requireDoomSqlite","defineServerPlugin","composeServerProviderOverrides","rootSession","apiRoute","composeRootHooks"],"sources":["../../src/services/peerInbox/index.ts","../../src/extensions/workspaces/sessions/(backend)/root.server.ts","../../src/services/peerInboxApi/index.ts","../../src/extensions/(backend)/api/session-peer/route.server.ts","../../generated/server.ts"],"sourcesContent":["import type { DoomSessionDeliveryInboxState } from '../sessionDelivery';\n\nexport type SessionPeerInbox = (\n  sourceKey: string,\n  type: string,\n  payload: unknown,\n) => Promise<DoomSessionDeliveryInboxState | undefined> | undefined;\n\nconst inboxes = new Map<string, SessionPeerInbox>();\n\n/**\n * Registers one live session-owned peer inbox. This registry is reachable only by the Session route.\n * The newest registration wins: a Durable Object evicted without disposal leaves its entry in the\n * isolate's module state, and the restarted session must replace it. The hub still rejects two live\n * sessions with one id, and an older unregister cannot remove a newer inbox.\n */\nexport function registerSessionPeerInbox(sessionId: string, inbox: SessionPeerInbox): () => void {\n  inboxes.set(sessionId, inbox);\n  return () => {\n    if (inboxes.get(sessionId) === inbox) inboxes.delete(sessionId);\n  };\n}\n\nexport async function deliverSessionPeerEnvelope(\n  targetSessionId: string,\n  sourceKey: string,\n  type: string,\n  payload: unknown,\n): Promise<DoomSessionDeliveryInboxState | undefined> {\n  return inboxes.get(targetSessionId)?.(sourceKey, type, payload);\n}\n","import path from 'node:path';\n\nimport { defineRoot } from '@agimon-ai/po-core/extensionFile';\nimport { poHomeDirectory } from '@agimon-ai/po-core/piSettings';\nimport { BACKGROUND_CONTEXT, requireDoomFs, requireDoomSqlite } from '@agimon-ai/po-core/platform';\nimport type { DoomServerPluginContext } from '@agimon-ai/po-core/serverFacet';\n\nimport { provideBackgroundWorkService } from '../../../../services/backgroundWorkService';\nimport { registerSessionPeerInbox } from '../../../../services/peerInbox';\nimport {\n  createPeerCommunication,\n  ensurePrivateDirectory,\n  parseRemoteSessionReference,\n  peerSessionReference,\n  readSessionPeerConfigAsync,\n} from '../../../../services/peerTransport';\nimport { provideSessionDeliveryService } from '../../../../services/sessionDelivery';\nimport { createSessionDirectory } from '../../../../services/sessionDirectory';\nimport { createSessionGroupStore } from '../../../../services/sessionGroups';\nimport {\n  DOOM_SESSION_INTERCOM_SERVICE,\n  createSessionGroupDeliveryAuthorizer,\n  createSessionIntercom,\n} from '../../../../services/sessionIntercom';\n\nexport default defineRoot((pluginContext: DoomServerPluginContext) => ({\n  value: undefined,\n  services: [\n    provideBackgroundWorkService,\n    async (context) => {\n      const agent = pluginContext.agent;\n      const session = agent?.context.session;\n      const communication = pluginContext.host.context.sessionCommunication;\n      const homeDirectory = pluginContext.host.context.homeDirectory;\n      const sessionService = pluginContext.host.context.sessionService;\n      if (!agent || !session?.admitPrompt || !communication || !homeDirectory || !sessionService?.canCommunicate) {\n        throw new Error(\n          'Session delivery requires the headless agent, authenticated session communication, host home directory, and communication policy.',\n        );\n      }\n      const fs = requireDoomFs(pluginContext.context);\n      const sqlite = requireDoomSqlite(pluginContext.context);\n      const io = BACKGROUND_CONTEXT;\n      const sessionDirectory = path.join(poHomeDirectory(homeDirectory), 'session');\n      const deliveryDirectory = path.join(sessionDirectory, 'delivery');\n      await ensurePrivateDirectory(fs, deliveryDirectory, io);\n      const peerConfig = await readSessionPeerConfigAsync(fs, homeDirectory, io);\n      const peerCommunication = createPeerCommunication({ local: communication, config: peerConfig });\n      const remotePeerIsGranted = (peerKey: string): boolean => {\n        const peer = parseRemoteSessionReference(peerKey);\n        return (\n          peer !== undefined &&\n          peerConfig?.peers.some(\n            (candidate) =>\n              candidate.hostId === peer.hostId && candidate.allowedSessionIds.includes(agent.context.sessionId),\n          ) === true\n        );\n      };\n      const fallbackAuthorization = (peerKey: string): boolean =>\n        sessionService.canCommunicate?.(agent.context.sessionId, peerKey) === true || remotePeerIsGranted(peerKey);\n      const groups = peerConfig\n        ? await createSessionGroupStore({\n            database: await sqlite.open(path.join(sessionDirectory, 'groups.sqlite'), io),\n          })\n        : undefined;\n      const localHostId = peerConfig?.hostId;\n      const selfReference = localHostId ? peerSessionReference(localHostId, agent.context.sessionId) : undefined;\n      const groupAuthorization =\n        groups && selfReference && localHostId\n          ? createSessionGroupDeliveryAuthorizer({\n              selfReference,\n              groups,\n              peerReference: (peerKey) =>\n                parseRemoteSessionReference(peerKey) === undefined\n                  ? peerSessionReference(localHostId, peerKey)\n                  : peerKey,\n              fallback: fallbackAuthorization,\n            })\n          : undefined;\n      let delivery: Awaited<ReturnType<typeof provideSessionDeliveryService>>;\n      try {\n        delivery = await provideSessionDeliveryService(context, {\n          database: await sqlite.open(path.join(deliveryDirectory, `${agent.context.sessionId}.sqlite`), io),\n          recipientKey: agent.context.sessionId,\n          communication: peerCommunication,\n          authorizePeer: (peerKey, metadata) =>\n            groupAuthorization ? groupAuthorization(peerKey, metadata) : fallbackAuthorization(peerKey),\n          admitPrompt: (prompt, admission) => session.admitPrompt!(prompt, admission),\n        });\n      } catch (error) {\n        await groups?.close();\n        throw error;\n      }\n      const { service, close: closeDelivery } = delivery;\n      const unprovide: (() => void)[] = [];\n      if (groups && selfReference && peerConfig) {\n        const directory = createSessionDirectory({\n          authorizeDiscovery: async (caller, subject) => {\n            const reference = peerSessionReference(subject.hostId, subject.sessionId);\n            const permitted = (await groups.groupsFor(caller)).some((group) => group.members.includes(reference));\n            return permitted ? { capabilities: ['message'] } : undefined;\n          },\n        });\n        for (const peer of peerConfig.peers)\n          for (const sessionId of peer.allowedSessionIds)\n            directory.observe({\n              hostId: peer.hostId,\n              sessionId,\n              hostIncarnation: 'unknown',\n              sessionIncarnation: 'unknown',\n              sequence: 0,\n              observedAt: 0,\n              staleAfterMs: 0,\n              deliveryTarget: peerSessionReference(peer.hostId, sessionId),\n              reachability: 'unknown',\n              runtime: 'unknown',\n              activity: 'unknown',\n              voice: { eligible: 'unknown', readiness: 'unknown' },\n            });\n        unprovide.push(\n          context.provide(\n            DOOM_SESSION_INTERCOM_SERVICE,\n            createSessionIntercom({ selfReference, directory, groups, delivery: service }),\n          ),\n        );\n      }\n      const unregister = registerSessionPeerInbox(agent.context.sessionId, (sourceKey, kind, payload) =>\n        service.receive?.(sourceKey, kind, payload),\n      );\n      return async () => {\n        unregister();\n        for (const release of unprovide.reverse()) release();\n        await closeDelivery();\n        await groups?.close();\n      };\n    },\n  ],\n}));\n","import path from 'node:path';\n\nimport type { DoomApi, DoomApiHandler } from '@agimon-ai/po-core/packageApi';\nimport { BACKGROUND_CONTEXT, type DoomSqliteService, type FileSystem } from '@agimon-ai/po-core/platform';\n\nimport { deliverSessionPeerEnvelope } from '../peerInbox';\nimport {\n  PEER_REPLAY_DATABASE_FILE,\n  createPeerReplayGuardAsync,\n  ensurePrivateDirectory,\n  parseSessionPeerEnvelope,\n  peerSessionReference,\n  readSessionPeerConfigAsync,\n  sessionPeerConfigPath,\n  verifyPeerRequest,\n  type SessionPeerConfig,\n  type SessionPeerReplayGuardAsync,\n} from '../peerTransport';\n\nconst MAX_BODY_BYTES = 64 * 1024;\nconst DELIVERY_TYPES = new Set(['doom/session-delivery/envelope', 'doom/session-delivery/ack']);\n\nfunction response(status: number, error: string): Response {\n  return Response.json({ error }, { status });\n}\n\ninterface PeerInboxState {\n  readonly config: SessionPeerConfig | undefined;\n  readonly replay: SessionPeerReplayGuardAsync | undefined;\n}\n\n/** Narrow HMAC-authenticated endpoint that a trusted tunnel may forward without device authentication. */\nexport function createPeerInboxApi(platform: { readonly fs: FileSystem; readonly sqlite: DoomSqliteService }): DoomApi {\n  return {\n    basePath: 'session-peer',\n    start(context): DoomApiHandler {\n      const homeDirectory = context.homeDirectory;\n      // Opened once on first use: the handler starts synchronously, the platform services are async.\n      let opened: Promise<PeerInboxState> | undefined;\n      const open = (): Promise<PeerInboxState> =>\n        (opened ??= (async () => {\n          if (homeDirectory === undefined) return { config: undefined, replay: undefined };\n          const config = await readSessionPeerConfigAsync(platform.fs, homeDirectory, BACKGROUND_CONTEXT);\n          const file = path.join(path.dirname(sessionPeerConfigPath(homeDirectory)), PEER_REPLAY_DATABASE_FILE);\n          await ensurePrivateDirectory(platform.fs, path.dirname(file), BACKGROUND_CONTEXT);\n          const replay = await createPeerReplayGuardAsync(await platform.sqlite.open(file, BACKGROUND_CONTEXT));\n          return { config, replay };\n        })().catch((error: unknown) => {\n          // A failed open is retried by the next request rather than cached.\n          opened = undefined;\n          throw error;\n        }));\n      return {\n        async fetch(request) {\n          if (request.method !== 'POST' || new URL(request.url).pathname !== '/inbox')\n            return response(404, 'Not found.');\n          const { config, replay } = await open();\n          if (!config) return response(503, 'Paired Session delivery is not configured.');\n          const length = request.headers.get('content-length');\n          if (length !== null && (!/^\\d+$/u.test(length) || Number(length) > MAX_BODY_BYTES))\n            return response(413, 'Request body is too large.');\n          const body = await request.text();\n          if (Buffer.byteLength(body) > MAX_BODY_BYTES) return response(413, 'Request body is too large.');\n          const peer = verifyPeerRequest(config, request, body);\n          if (!peer) return response(401, 'Paired Session request is unauthorized.');\n          if (!(await replay?.admit(request))) return response(409, 'Paired Session request was already received.');\n          let parsed: unknown;\n          try {\n            parsed = JSON.parse(body) as unknown;\n          } catch {\n            return response(400, 'Paired Session request is malformed.');\n          }\n          const envelope = parseSessionPeerEnvelope(parsed);\n          if (!envelope || !DELIVERY_TYPES.has(envelope.type))\n            return response(400, 'Paired Session envelope is invalid.');\n          if (!peer.allowedSessionIds.includes(envelope.targetSessionId))\n            return response(403, 'Peer is not granted this session.');\n          const state = await deliverSessionPeerEnvelope(\n            envelope.targetSessionId,\n            peerSessionReference(peer.hostId, envelope.sourceSessionId),\n            envelope.type,\n            envelope.payload,\n          );\n          return state === undefined\n            ? response(404, 'Target Session is unavailable.')\n            : Response.json({ accepted: true, state }, { status: 202 });\n        },\n        async close() {\n          const state = await opened?.catch(() => undefined);\n          await state?.replay?.close();\n        },\n      };\n    },\n  };\n}\n","import { defineRoute } from '@agimon-ai/po-core/extensionFile';\nimport { requireDoomFs, requireDoomSqlite } from '@agimon-ai/po-core/platform';\nimport type { DoomServerPluginContext } from '@agimon-ai/po-core/serverFacet';\n\nimport { createPeerInboxApi } from '../../../../services/peerInboxApi';\n\nexport default defineRoute(({ context }: DoomServerPluginContext) =>\n  createPeerInboxApi({ fs: requireDoomFs(context), sqlite: requireDoomSqlite(context) }),\n);\n","// Generated by @agimon-ai/po-build. Do not edit by hand.\nimport { defineServerPlugin, type DoomServerSessionPlugin } from '@agimon-ai/po-core/serverFacet';\nimport { composeServerProviderOverrides } from '@agimon-ai/po-core/serverFacet';\nimport { composeRootHooks } from '@agimon-ai/po-core/extensionFile';\n\nimport rootSession from '../src/extensions/workspaces/sessions/(backend)/root.server';\nimport apiRoute from '../src/extensions/(backend)/api/session-peer/route.server';\n\ntype Factory<T, C> = (context: C) => T;\nconst at = <T, C>(value: T | Factory<T, C>, context: C): T =>\n  typeof value === 'function' ? (value as Factory<T, C>)(context) : value;\n\nexport const facet = defineServerPlugin({\n  name: '@agimon-ai/po-session',\n  providerOverrides: composeServerProviderOverrides(rootSession),\n  global: (context) => ({\n    get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n  }),\n  workspace: (context) => ({\n    get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n  }),\n  session: async (context) => {\n    const scopeSession = await rootSession(context);\n    return {\n      ...composeRootHooks(scopeSession),\n      get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n      services: [...(scopeSession.services ?? [])],\n      get activities(): DoomServerSessionPlugin['activities'] { return [...(scopeSession.activities ?? [])]; },\n    };\n  },\n});\n\nexport default facet;\n"],"mappings":";;;;;;;;;;;;AAQA,MAAM,0BAAU,IAAI,IAA8B;;;;;;;AAQlD,SAAgB,yBAAyB,WAAmB,OAAqC;CAC/F,QAAQ,IAAI,WAAW,KAAK;CAC5B,aAAa;EACX,IAAI,QAAQ,IAAI,SAAS,MAAM,OAAO,QAAQ,OAAO,SAAS;CAChE;AACF;AAEA,eAAsB,2BACpB,iBACA,WACA,MACA,SACoD;CACpD,OAAO,QAAQ,IAAI,eAAe,CAAC,GAAG,WAAW,MAAM,OAAO;AAChE;;;ACLA,IAAA,uBAAA,GAAeA,iCAAAA,WAAAA,EAAY,mBAA4C;CACrE,OAAO,KAAA;CACP,UAAU,CACRC,wBAAAA,8BACA,OAAO,YAAY;EACjB,MAAM,QAAQ,cAAc;EAC5B,MAAM,UAAU,OAAO,QAAQ;EAC/B,MAAM,gBAAgB,cAAc,KAAK,QAAQ;EACjD,MAAM,gBAAgB,cAAc,KAAK,QAAQ;EACjD,MAAM,iBAAiB,cAAc,KAAK,QAAQ;EAClD,IAAI,CAAC,SAAS,CAAC,SAAS,eAAe,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,gBAAgB,gBAC1F,MAAM,IAAI,MACR,mIACF;EAEF,MAAM,MAAA,GAAKC,4BAAAA,cAAAA,CAAc,cAAc,OAAO;EAC9C,MAAM,UAAA,GAASC,4BAAAA,kBAAAA,CAAkB,cAAc,OAAO;EACtD,MAAM,KAAKC,4BAAAA;EACX,MAAM,mBAAmBC,UAAAA,QAAK,MAAA,GAAKC,8BAAAA,gBAAAA,CAAgB,aAAa,GAAG,SAAS;EAC5E,MAAM,oBAAoBD,UAAAA,QAAK,KAAK,kBAAkB,UAAU;EAChE,MAAME,wBAAAA,uBAAuB,IAAI,mBAAmB,EAAE;EACtD,MAAM,aAAa,MAAMC,wBAAAA,2BAA2B,IAAI,eAAe,EAAE;EACzE,MAAM,oBAAoBC,wBAAAA,wBAAwB;GAAE,OAAO;GAAe,QAAQ;EAAW,CAAC;EAC9F,MAAM,uBAAuB,YAA6B;GACxD,MAAM,OAAOC,wBAAAA,4BAA4B,OAAO;GAChD,OACE,SAAS,KAAA,KACT,YAAY,MAAM,MACf,cACC,UAAU,WAAW,KAAK,UAAU,UAAU,kBAAkB,SAAS,MAAM,QAAQ,SAAS,CACpG,MAAM;EAEV;EACA,MAAM,yBAAyB,YAC7B,eAAe,iBAAiB,MAAM,QAAQ,WAAW,OAAO,MAAM,QAAQ,oBAAoB,OAAO;EAC3G,MAAM,SAAS,aACX,MAAMC,wBAAAA,wBAAwB,EAC5B,UAAU,MAAM,OAAO,KAAKN,UAAAA,QAAK,KAAK,kBAAkB,eAAe,GAAG,EAAE,EAC9E,CAAC,IACD,KAAA;EACJ,MAAM,cAAc,YAAY;EAChC,MAAM,gBAAgB,cAAcO,wBAAAA,qBAAqB,aAAa,MAAM,QAAQ,SAAS,IAAI,KAAA;EACjG,MAAM,qBACJ,UAAU,iBAAiB,cACvBC,wBAAAA,qCAAqC;GACnC;GACA;GACA,gBAAgB,YACdH,wBAAAA,4BAA4B,OAAO,MAAM,KAAA,IACrCE,wBAAAA,qBAAqB,aAAa,OAAO,IACzC;GACN,UAAU;EACZ,CAAC,IACD,KAAA;EACN,IAAI;EACJ,IAAI;GACF,WAAW,MAAME,wBAAAA,8BAA8B,SAAS;IACtD,UAAU,MAAM,OAAO,KAAKT,UAAAA,QAAK,KAAK,mBAAmB,GAAG,MAAM,QAAQ,UAAU,QAAQ,GAAG,EAAE;IACjG,cAAc,MAAM,QAAQ;IAC5B,eAAe;IACf,gBAAgB,SAAS,aACvB,qBAAqB,mBAAmB,SAAS,QAAQ,IAAI,sBAAsB,OAAO;IAC5F,cAAc,QAAQ,cAAc,QAAQ,YAAa,QAAQ,SAAS;GAC5E,CAAC;EACH,SAAS,OAAO;GACd,MAAM,QAAQ,MAAM;GACpB,MAAM;EACR;EACA,MAAM,EAAE,SAAS,OAAO,kBAAkB;EAC1C,MAAM,YAA4B,CAAC;EACnC,IAAI,UAAU,iBAAiB,YAAY;GACzC,MAAM,YAAYU,wBAAAA,uBAAuB,EACvC,oBAAoB,OAAO,QAAQ,YAAY;IAC7C,MAAM,YAAYH,wBAAAA,qBAAqB,QAAQ,QAAQ,QAAQ,SAAS;IAExE,QADmB,MAAM,OAAO,UAAU,MAAM,EAAA,CAAG,MAAM,UAAU,MAAM,QAAQ,SAAS,SAAS,CACpF,IAAI,EAAE,cAAc,CAAC,SAAS,EAAE,IAAI,KAAA;GACrD,EACF,CAAC;GACD,KAAK,MAAM,QAAQ,WAAW,OAC5B,KAAK,MAAM,aAAa,KAAK,mBAC3B,UAAU,QAAQ;IAChB,QAAQ,KAAK;IACb;IACA,iBAAiB;IACjB,oBAAoB;IACpB,UAAU;IACV,YAAY;IACZ,cAAc;IACd,gBAAgBA,wBAAAA,qBAAqB,KAAK,QAAQ,SAAS;IAC3D,cAAc;IACd,SAAS;IACT,UAAU;IACV,OAAO;KAAE,UAAU;KAAW,WAAW;IAAU;GACrD,CAAC;GACL,UAAU,KACR,QAAQ,QACNI,wBAAAA,+BACAC,wBAAAA,sBAAsB;IAAE;IAAe;IAAW;IAAQ,UAAU;GAAQ,CAAC,CAC/E,CACF;EACF;EACA,MAAM,aAAa,yBAAyB,MAAM,QAAQ,YAAY,WAAW,MAAM,YACrF,QAAQ,UAAU,WAAW,MAAM,OAAO,CAC5C;EACA,OAAO,YAAY;GACjB,WAAW;GACX,KAAK,MAAM,WAAW,UAAU,QAAQ,GAAG,QAAQ;GACnD,MAAM,cAAc;GACpB,MAAM,QAAQ,MAAM;EACtB;CACF,CACF;AACF,EAAE;;;ACtHF,MAAM,iBAAiB;AACvB,MAAM,iCAAiB,IAAI,IAAI,CAAC,kCAAkC,2BAA2B,CAAC;AAE9F,SAAS,SAAS,QAAgB,OAAyB;CACzD,OAAO,SAAS,KAAK,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;AAC5C;;AAQA,SAAgB,mBAAmB,UAAoF;CACrH,OAAO;EACL,UAAU;EACV,MAAM,SAAyB;GAC7B,MAAM,gBAAgB,QAAQ;GAE9B,IAAI;GACJ,MAAM,aACH,YAAY,YAAY;IACvB,IAAI,kBAAkB,KAAA,GAAW,OAAO;KAAE,QAAQ,KAAA;KAAW,QAAQ,KAAA;IAAU;IAC/E,MAAM,SAAS,MAAMC,wBAAAA,2BAA2B,SAAS,IAAI,eAAeC,4BAAAA,kBAAkB;IAC9F,MAAM,OAAOC,UAAAA,QAAK,KAAKA,UAAAA,QAAK,QAAQC,wBAAAA,sBAAsB,aAAa,CAAC,GAAGC,wBAAAA,yBAAyB;IACpG,MAAMC,wBAAAA,uBAAuB,SAAS,IAAIH,UAAAA,QAAK,QAAQ,IAAI,GAAGD,4BAAAA,kBAAkB;IAEhF,OAAO;KAAE;KAAQ,QAAA,MADIK,wBAAAA,2BAA2B,MAAM,SAAS,OAAO,KAAK,MAAML,4BAAAA,kBAAkB,CAAC;IAC5E;GAC1B,EAAA,CAAG,CAAC,CAAC,OAAO,UAAmB;IAE7B,SAAS,KAAA;IACT,MAAM;GACR,CAAC;GACH,OAAO;IACL,MAAM,MAAM,SAAS;KACnB,IAAI,QAAQ,WAAW,UAAU,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,aAAa,UACjE,OAAO,SAAS,KAAK,YAAY;KACnC,MAAM,EAAE,QAAQ,WAAW,MAAM,KAAK;KACtC,IAAI,CAAC,QAAQ,OAAO,SAAS,KAAK,4CAA4C;KAC9E,MAAM,SAAS,QAAQ,QAAQ,IAAI,gBAAgB;KACnD,IAAI,WAAW,SAAS,CAAC,SAAS,KAAK,MAAM,KAAK,OAAO,MAAM,IAAI,iBACjE,OAAO,SAAS,KAAK,4BAA4B;KACnD,MAAM,OAAO,MAAM,QAAQ,KAAK;KAChC,IAAI,OAAO,WAAW,IAAI,IAAI,gBAAgB,OAAO,SAAS,KAAK,4BAA4B;KAC/F,MAAM,OAAOM,wBAAAA,kBAAkB,QAAQ,SAAS,IAAI;KACpD,IAAI,CAAC,MAAM,OAAO,SAAS,KAAK,yCAAyC;KACzE,IAAI,CAAE,MAAM,QAAQ,MAAM,OAAO,GAAI,OAAO,SAAS,KAAK,8CAA8C;KACxG,IAAI;KACJ,IAAI;MACF,SAAS,KAAK,MAAM,IAAI;KAC1B,QAAQ;MACN,OAAO,SAAS,KAAK,sCAAsC;KAC7D;KACA,MAAM,WAAWC,wBAAAA,yBAAyB,MAAM;KAChD,IAAI,CAAC,YAAY,CAAC,eAAe,IAAI,SAAS,IAAI,GAChD,OAAO,SAAS,KAAK,qCAAqC;KAC5D,IAAI,CAAC,KAAK,kBAAkB,SAAS,SAAS,eAAe,GAC3D,OAAO,SAAS,KAAK,mCAAmC;KAC1D,MAAM,QAAQ,MAAM,2BAClB,SAAS,iBACTC,wBAAAA,qBAAqB,KAAK,QAAQ,SAAS,eAAe,GAC1D,SAAS,MACT,SAAS,OACX;KACA,OAAO,UAAU,KAAA,IACb,SAAS,KAAK,gCAAgC,IAC9C,SAAS,KAAK;MAAE,UAAU;MAAM;KAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;IAC9D;IACA,MAAM,QAAQ;KAEZ,OAAM,MADc,QAAQ,YAAY,KAAA,CAAS,EAAA,EACpC,QAAQ,MAAM;IAC7B;GACF;EACF;CACF;AACF;;;ACxFA,IAAA,wBAAA,GAAeC,iCAAAA,YAAAA,EAAa,EAAE,cAC5B,mBAAmB;CAAE,KAAA,GAAIC,4BAAAA,cAAAA,CAAc,OAAO;CAAG,SAAA,GAAQC,4BAAAA,kBAAAA,CAAkB,OAAO;AAAE,CAAC,CACvF;;;ACCA,MAAM,MAAY,OAA0B,YAC1C,OAAO,UAAU,aAAc,MAAwB,OAAO,IAAI;AAEpE,MAAa,SAAA,GAAQC,+BAAAA,mBAAAA,CAAmB;CACtC,MAAM;CACN,oBAAA,GAAmBC,+BAAAA,+BAAAA,CAA+BC,mBAAW;CAC7D,SAAS,aAAa,EACpB,IAAI,MAAsC;EAAE,OAAO,CAAC,GAAGC,sBAAU,OAAO,CAAC;CAAG,EAC9E;CACA,YAAY,aAAa,EACvB,IAAI,MAAsC;EAAE,OAAO,CAAC,GAAGA,sBAAU,OAAO,CAAC;CAAG,EAC9E;CACA,SAAS,OAAO,YAAY;EAC1B,MAAM,eAAe,MAAMD,oBAAY,OAAO;EAC9C,OAAO;GACL,IAAA,GAAGE,iCAAAA,iBAAAA,CAAiB,YAAY;GAChC,IAAI,MAAsC;IAAE,OAAO,CAAC,GAAGD,sBAAU,OAAO,CAAC;GAAG;GAC5E,UAAU,CAAC,GAAI,aAAa,YAAY,CAAC,CAAE;GAC3C,IAAI,aAAoD;IAAE,OAAO,CAAC,GAAI,aAAa,cAAc,CAAC,CAAE;GAAG;EACzG;CACF;AACF,CAAC"}
+{"version":3,"file":"server.cjs","names":["defineRoot","provideBackgroundWorkService","requirePoFs","requirePoSqlite","BACKGROUND_CONTEXT","path","poHomeDirectory","ensurePrivateDirectory","readSessionPeerConfigAsync","createPeerCommunication","parseRemoteSessionReference","createSessionGroupStore","peerSessionReference","createSessionGroupDeliveryAuthorizer","provideSessionDeliveryService","createSessionDirectory","PO_SESSION_INTERCOM_SERVICE","createSessionIntercom","readSessionPeerConfigAsync","BACKGROUND_CONTEXT","path","sessionPeerConfigPath","PEER_REPLAY_DATABASE_FILE","ensurePrivateDirectory","createPeerReplayGuardAsync","verifyPeerRequest","parseSessionPeerEnvelope","peerSessionReference","defineRoute","requirePoFs","requirePoSqlite","defineServerPlugin","composeServerProviderOverrides","rootSession","composeRootInjects","apiRoute","composeRootHooks"],"sources":["../../src/services/peerInbox/index.ts","../../src/extensions/workspaces/sessions/(backend)/root.server.ts","../../src/services/peerInboxApi/index.ts","../../src/extensions/(backend)/api/session-peer/route.server.ts","../../generated/server.ts"],"sourcesContent":["import type { PoSessionDeliveryInboxState } from '../sessionDelivery';\n\nexport type SessionPeerInbox = (\n  sourceKey: string,\n  type: string,\n  payload: unknown,\n) => Promise<PoSessionDeliveryInboxState | undefined> | undefined;\n\nconst inboxes = new Map<string, SessionPeerInbox>();\n\n/**\n * Registers one live session-owned peer inbox. This registry is reachable only by the Session route.\n * The newest registration wins: a Durable Object evicted without disposal leaves its entry in the\n * isolate's module state, and the restarted session must replace it. The hub still rejects two live\n * sessions with one id, and an older unregister cannot remove a newer inbox.\n */\nexport function registerSessionPeerInbox(sessionId: string, inbox: SessionPeerInbox): () => void {\n  inboxes.set(sessionId, inbox);\n  return () => {\n    if (inboxes.get(sessionId) === inbox) inboxes.delete(sessionId);\n  };\n}\n\nexport async function deliverSessionPeerEnvelope(\n  targetSessionId: string,\n  sourceKey: string,\n  type: string,\n  payload: unknown,\n): Promise<PoSessionDeliveryInboxState | undefined> {\n  return inboxes.get(targetSessionId)?.(sourceKey, type, payload);\n}\n","import path from 'node:path';\n\nimport { defineRoot } from '@agimon-ai/po-core/extensionFile';\nimport { poHomeDirectory } from '@agimon-ai/po-core/piSettings';\nimport { BACKGROUND_CONTEXT, requirePoFs, requirePoSqlite } from '@agimon-ai/po-core/platform';\nimport type { PoServerPluginContext } from '@agimon-ai/po-core/serverPlugin';\n\nimport { provideBackgroundWorkService } from '../../../../services/backgroundWorkService';\nimport { registerSessionPeerInbox } from '../../../../services/peerInbox';\nimport {\n  createPeerCommunication,\n  ensurePrivateDirectory,\n  parseRemoteSessionReference,\n  peerSessionReference,\n  readSessionPeerConfigAsync,\n} from '../../../../services/peerTransport';\nimport { provideSessionDeliveryService } from '../../../../services/sessionDelivery';\nimport { createSessionDirectory } from '../../../../services/sessionDirectory';\nimport { createSessionGroupStore } from '../../../../services/sessionGroups';\nimport {\n  PO_SESSION_INTERCOM_SERVICE,\n  createSessionGroupDeliveryAuthorizer,\n  createSessionIntercom,\n} from '../../../../services/sessionIntercom';\n\nexport default defineRoot((pluginContext: PoServerPluginContext) => ({\n  value: undefined,\n  services: [\n    provideBackgroundWorkService,\n    async (context) => {\n      const agent = pluginContext.agent;\n      const session = agent?.context.session;\n      const communication = pluginContext.host.context.sessionCommunication;\n      const homeDirectory = pluginContext.host.context.homeDirectory;\n      const sessionService = pluginContext.host.context.sessionService;\n      if (!agent || !session?.admitPrompt || !communication || !homeDirectory || !sessionService?.canCommunicate) {\n        throw new Error(\n          'Session delivery requires the headless agent, authenticated session communication, host home directory, and communication policy.',\n        );\n      }\n      const fs = requirePoFs(pluginContext.context);\n      const sqlite = requirePoSqlite(pluginContext.context);\n      const io = BACKGROUND_CONTEXT;\n      const sessionDirectory = path.join(poHomeDirectory(homeDirectory), 'session');\n      const deliveryDirectory = path.join(sessionDirectory, 'delivery');\n      await ensurePrivateDirectory(fs, deliveryDirectory, io);\n      const peerConfig = await readSessionPeerConfigAsync(fs, homeDirectory, io);\n      const peerCommunication = createPeerCommunication({ local: communication, config: peerConfig });\n      const remotePeerIsGranted = (peerKey: string): boolean => {\n        const peer = parseRemoteSessionReference(peerKey);\n        return (\n          peer !== undefined &&\n          peerConfig?.peers.some(\n            (candidate) =>\n              candidate.hostId === peer.hostId && candidate.allowedSessionIds.includes(agent.context.sessionId),\n          ) === true\n        );\n      };\n      const fallbackAuthorization = (peerKey: string): boolean =>\n        sessionService.canCommunicate?.(agent.context.sessionId, peerKey) === true || remotePeerIsGranted(peerKey);\n      const groups = peerConfig\n        ? await createSessionGroupStore({\n            database: await sqlite.open(path.join(sessionDirectory, 'groups.sqlite'), io),\n          })\n        : undefined;\n      const localHostId = peerConfig?.hostId;\n      const selfReference = localHostId ? peerSessionReference(localHostId, agent.context.sessionId) : undefined;\n      const groupAuthorization =\n        groups && selfReference && localHostId\n          ? createSessionGroupDeliveryAuthorizer({\n              selfReference,\n              groups,\n              peerReference: (peerKey) =>\n                parseRemoteSessionReference(peerKey) === undefined\n                  ? peerSessionReference(localHostId, peerKey)\n                  : peerKey,\n              fallback: fallbackAuthorization,\n            })\n          : undefined;\n      let delivery: Awaited<ReturnType<typeof provideSessionDeliveryService>>;\n      try {\n        delivery = await provideSessionDeliveryService(context, {\n          database: await sqlite.open(path.join(deliveryDirectory, `${agent.context.sessionId}.sqlite`), io),\n          recipientKey: agent.context.sessionId,\n          communication: peerCommunication,\n          authorizePeer: (peerKey, metadata) =>\n            groupAuthorization ? groupAuthorization(peerKey, metadata) : fallbackAuthorization(peerKey),\n          admitPrompt: (prompt, admission, requestId, metadata) => {\n            if (!metadata.customType) return session.admitPrompt!(prompt, admission, undefined, requestId);\n            if (!session.admitMessage) throw new Error('The session cannot admit a custom delivery.');\n            return session.admitMessage(\n              {\n                type: metadata.customType,\n                text: prompt,\n                display: true,\n                details: metadata.customDetails === undefined ? undefined : JSON.parse(metadata.customDetails),\n              },\n              admission === 'steer' ? 'steer' : 'followUp',\n              requestId,\n            );\n          },\n        });\n      } catch (error) {\n        await groups?.close();\n        throw error;\n      }\n      const { service, close: closeDelivery } = delivery;\n      const unprovide: (() => void)[] = [];\n      if (groups && selfReference && peerConfig) {\n        const directory = createSessionDirectory({\n          authorizeDiscovery: async (caller, subject) => {\n            const reference = peerSessionReference(subject.hostId, subject.sessionId);\n            const permitted = (await groups.groupsFor(caller)).some((group) => group.members.includes(reference));\n            return permitted ? { capabilities: ['message'] } : undefined;\n          },\n        });\n        for (const peer of peerConfig.peers)\n          for (const sessionId of peer.allowedSessionIds)\n            directory.observe({\n              hostId: peer.hostId,\n              sessionId,\n              hostIncarnation: 'unknown',\n              sessionIncarnation: 'unknown',\n              sequence: 0,\n              observedAt: 0,\n              staleAfterMs: 0,\n              deliveryTarget: peerSessionReference(peer.hostId, sessionId),\n              reachability: 'unknown',\n              runtime: 'unknown',\n              activity: 'unknown',\n              voice: { eligible: 'unknown', readiness: 'unknown' },\n            });\n        unprovide.push(\n          context.provide(\n            PO_SESSION_INTERCOM_SERVICE,\n            createSessionIntercom({ selfReference, directory, groups, delivery: service }),\n          ),\n        );\n      }\n      const unregister = registerSessionPeerInbox(agent.context.sessionId, (sourceKey, kind, payload) =>\n        service.receive?.(sourceKey, kind, payload),\n      );\n      return async () => {\n        unregister();\n        for (const release of unprovide.reverse()) release();\n        await closeDelivery();\n        await groups?.close();\n      };\n    },\n  ],\n}));\n","import path from 'node:path';\n\nimport type { PoApi, PoApiHandler } from '@agimon-ai/po-core/packageApi';\nimport { BACKGROUND_CONTEXT, type PoSqliteService, type FileSystem } from '@agimon-ai/po-core/platform';\n\nimport { deliverSessionPeerEnvelope } from '../peerInbox';\nimport {\n  PEER_REPLAY_DATABASE_FILE,\n  createPeerReplayGuardAsync,\n  ensurePrivateDirectory,\n  parseSessionPeerEnvelope,\n  peerSessionReference,\n  readSessionPeerConfigAsync,\n  sessionPeerConfigPath,\n  verifyPeerRequest,\n  type SessionPeerConfig,\n  type SessionPeerReplayGuardAsync,\n} from '../peerTransport';\n\nconst MAX_BODY_BYTES = 64 * 1024;\nconst DELIVERY_TYPES = new Set(['po/session-delivery/envelope', 'po/session-delivery/ack']);\n\nfunction response(status: number, error: string): Response {\n  return Response.json({ error }, { status });\n}\n\ninterface PeerInboxState {\n  readonly config: SessionPeerConfig | undefined;\n  readonly replay: SessionPeerReplayGuardAsync | undefined;\n}\n\n/** Narrow HMAC-authenticated endpoint that a trusted tunnel may forward without device authentication. */\nexport function createPeerInboxApi(platform: { readonly fs: FileSystem; readonly sqlite: PoSqliteService }): PoApi {\n  return {\n    basePath: 'session-peer',\n    start(context): PoApiHandler {\n      const homeDirectory = context.homeDirectory;\n      // Opened once on first use: the handler starts synchronously, the platform services are async.\n      let opened: Promise<PeerInboxState> | undefined;\n      const open = (): Promise<PeerInboxState> =>\n        (opened ??= (async () => {\n          if (homeDirectory === undefined) return { config: undefined, replay: undefined };\n          const config = await readSessionPeerConfigAsync(platform.fs, homeDirectory, BACKGROUND_CONTEXT);\n          const file = path.join(path.dirname(sessionPeerConfigPath(homeDirectory)), PEER_REPLAY_DATABASE_FILE);\n          await ensurePrivateDirectory(platform.fs, path.dirname(file), BACKGROUND_CONTEXT);\n          const replay = await createPeerReplayGuardAsync(await platform.sqlite.open(file, BACKGROUND_CONTEXT));\n          return { config, replay };\n        })().catch((error: unknown) => {\n          // A failed open is retried by the next request rather than cached.\n          opened = undefined;\n          throw error;\n        }));\n      return {\n        async fetch(request) {\n          if (request.method !== 'POST' || new URL(request.url).pathname !== '/inbox')\n            return response(404, 'Not found.');\n          const { config, replay } = await open();\n          if (!config) return response(503, 'Paired Session delivery is not configured.');\n          const length = request.headers.get('content-length');\n          if (length !== null && (!/^\\d+$/u.test(length) || Number(length) > MAX_BODY_BYTES))\n            return response(413, 'Request body is too large.');\n          const body = await request.text();\n          if (Buffer.byteLength(body) > MAX_BODY_BYTES) return response(413, 'Request body is too large.');\n          const peer = verifyPeerRequest(config, request, body);\n          if (!peer) return response(401, 'Paired Session request is unauthorized.');\n          if (!(await replay?.admit(request))) return response(409, 'Paired Session request was already received.');\n          let parsed: unknown;\n          try {\n            parsed = JSON.parse(body) as unknown;\n          } catch {\n            return response(400, 'Paired Session request is malformed.');\n          }\n          const envelope = parseSessionPeerEnvelope(parsed);\n          if (!envelope || !DELIVERY_TYPES.has(envelope.type))\n            return response(400, 'Paired Session envelope is invalid.');\n          if (!peer.allowedSessionIds.includes(envelope.targetSessionId))\n            return response(403, 'Peer is not granted this session.');\n          const state = await deliverSessionPeerEnvelope(\n            envelope.targetSessionId,\n            peerSessionReference(peer.hostId, envelope.sourceSessionId),\n            envelope.type,\n            envelope.payload,\n          );\n          return state === undefined\n            ? response(404, 'Target Session is unavailable.')\n            : Response.json({ accepted: true, state }, { status: 202 });\n        },\n        async close() {\n          const state = await opened?.catch(() => undefined);\n          await state?.replay?.close();\n        },\n      };\n    },\n  };\n}\n","import { defineRoute } from '@agimon-ai/po-core/extensionFile';\nimport { requirePoFs, requirePoSqlite } from '@agimon-ai/po-core/platform';\nimport type { PoServerPluginContext } from '@agimon-ai/po-core/serverPlugin';\n\nimport { createPeerInboxApi } from '../../../../services/peerInboxApi';\n\nexport default defineRoute(({ context }: PoServerPluginContext) =>\n  createPeerInboxApi({ fs: requirePoFs(context), sqlite: requirePoSqlite(context) }),\n);\n","// Generated by @agimon-ai/po-build. Do not edit by hand.\nimport { defineServerPlugin, type PoServerSessionPlugin } from '@agimon-ai/po-core/serverPlugin';\nimport { composeServerProviderOverrides } from '@agimon-ai/po-core/serverPlugin';\nimport { composeRootHooks, composeRootInjects } from '@agimon-ai/po-core/extensionFile';\n\nimport rootSession from '../src/extensions/workspaces/sessions/(backend)/root.server';\nimport apiRoute from '../src/extensions/(backend)/api/session-peer/route.server';\n\ntype Factory<T, C> = (context: C) => T;\nconst at = <T, C>(value: T | Factory<T, C>, context: C): T =>\n  typeof value === 'function' ? (value as Factory<T, C>)(context) : value;\n\nexport const serverPlugin = defineServerPlugin({\n  name: '@agimon-ai/po-session',\n  providerOverrides: composeServerProviderOverrides(rootSession),\n  injects: composeRootInjects({ session: [rootSession] }),\n  global: (context) => ({\n    get api(): PoServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n  }),\n  workspace: (context) => ({\n    get api(): PoServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n  }),\n  session: async (context) => {\n    const scopeSession = await context.scopeRoot('session', rootSession, context);\n    return {\n      ...composeRootHooks(scopeSession),\n      get api(): PoServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n      services: [...(scopeSession.services ?? [])],\n      get activities(): PoServerSessionPlugin['activities'] { return [...(scopeSession.activities ?? [])]; },\n    };\n  },\n});\n\nexport default serverPlugin;\n"],"mappings":";;;;;;;;;;;;AAQA,MAAM,0BAAU,IAAI,IAA8B;;;;;;;AAQlD,SAAgB,yBAAyB,WAAmB,OAAqC;CAC/F,QAAQ,IAAI,WAAW,KAAK;CAC5B,aAAa;EACX,IAAI,QAAQ,IAAI,SAAS,MAAM,OAAO,QAAQ,OAAO,SAAS;CAChE;AACF;AAEA,eAAsB,2BACpB,iBACA,WACA,MACA,SACkD;CAClD,OAAO,QAAQ,IAAI,eAAe,CAAC,GAAG,WAAW,MAAM,OAAO;AAChE;;;ACLA,IAAA,uBAAA,GAAeA,iCAAAA,WAAAA,EAAY,mBAA0C;CACnE,OAAO,KAAA;CACP,UAAU,CACRC,wBAAAA,8BACA,OAAO,YAAY;EACjB,MAAM,QAAQ,cAAc;EAC5B,MAAM,UAAU,OAAO,QAAQ;EAC/B,MAAM,gBAAgB,cAAc,KAAK,QAAQ;EACjD,MAAM,gBAAgB,cAAc,KAAK,QAAQ;EACjD,MAAM,iBAAiB,cAAc,KAAK,QAAQ;EAClD,IAAI,CAAC,SAAS,CAAC,SAAS,eAAe,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,gBAAgB,gBAC1F,MAAM,IAAI,MACR,mIACF;EAEF,MAAM,MAAA,GAAKC,4BAAAA,YAAAA,CAAY,cAAc,OAAO;EAC5C,MAAM,UAAA,GAASC,4BAAAA,gBAAAA,CAAgB,cAAc,OAAO;EACpD,MAAM,KAAKC,4BAAAA;EACX,MAAM,mBAAmBC,UAAAA,QAAK,MAAA,GAAKC,8BAAAA,gBAAAA,CAAgB,aAAa,GAAG,SAAS;EAC5E,MAAM,oBAAoBD,UAAAA,QAAK,KAAK,kBAAkB,UAAU;EAChE,MAAME,wBAAAA,uBAAuB,IAAI,mBAAmB,EAAE;EACtD,MAAM,aAAa,MAAMC,wBAAAA,2BAA2B,IAAI,eAAe,EAAE;EACzE,MAAM,oBAAoBC,wBAAAA,wBAAwB;GAAE,OAAO;GAAe,QAAQ;EAAW,CAAC;EAC9F,MAAM,uBAAuB,YAA6B;GACxD,MAAM,OAAOC,wBAAAA,4BAA4B,OAAO;GAChD,OACE,SAAS,KAAA,KACT,YAAY,MAAM,MACf,cACC,UAAU,WAAW,KAAK,UAAU,UAAU,kBAAkB,SAAS,MAAM,QAAQ,SAAS,CACpG,MAAM;EAEV;EACA,MAAM,yBAAyB,YAC7B,eAAe,iBAAiB,MAAM,QAAQ,WAAW,OAAO,MAAM,QAAQ,oBAAoB,OAAO;EAC3G,MAAM,SAAS,aACX,MAAMC,wBAAAA,wBAAwB,EAC5B,UAAU,MAAM,OAAO,KAAKN,UAAAA,QAAK,KAAK,kBAAkB,eAAe,GAAG,EAAE,EAC9E,CAAC,IACD,KAAA;EACJ,MAAM,cAAc,YAAY;EAChC,MAAM,gBAAgB,cAAcO,wBAAAA,qBAAqB,aAAa,MAAM,QAAQ,SAAS,IAAI,KAAA;EACjG,MAAM,qBACJ,UAAU,iBAAiB,cACvBC,wBAAAA,qCAAqC;GACnC;GACA;GACA,gBAAgB,YACdH,wBAAAA,4BAA4B,OAAO,MAAM,KAAA,IACrCE,wBAAAA,qBAAqB,aAAa,OAAO,IACzC;GACN,UAAU;EACZ,CAAC,IACD,KAAA;EACN,IAAI;EACJ,IAAI;GACF,WAAW,MAAME,wBAAAA,8BAA8B,SAAS;IACtD,UAAU,MAAM,OAAO,KAAKT,UAAAA,QAAK,KAAK,mBAAmB,GAAG,MAAM,QAAQ,UAAU,QAAQ,GAAG,EAAE;IACjG,cAAc,MAAM,QAAQ;IAC5B,eAAe;IACf,gBAAgB,SAAS,aACvB,qBAAqB,mBAAmB,SAAS,QAAQ,IAAI,sBAAsB,OAAO;IAC5F,cAAc,QAAQ,WAAW,WAAW,aAAa;KACvD,IAAI,CAAC,SAAS,YAAY,OAAO,QAAQ,YAAa,QAAQ,WAAW,KAAA,GAAW,SAAS;KAC7F,IAAI,CAAC,QAAQ,cAAc,MAAM,IAAI,MAAM,6CAA6C;KACxF,OAAO,QAAQ,aACb;MACE,MAAM,SAAS;MACf,MAAM;MACN,SAAS;MACT,SAAS,SAAS,kBAAkB,KAAA,IAAY,KAAA,IAAY,KAAK,MAAM,SAAS,aAAa;KAC/F,GACA,cAAc,UAAU,UAAU,YAClC,SACF;IACF;GACF,CAAC;EACH,SAAS,OAAO;GACd,MAAM,QAAQ,MAAM;GACpB,MAAM;EACR;EACA,MAAM,EAAE,SAAS,OAAO,kBAAkB;EAC1C,MAAM,YAA4B,CAAC;EACnC,IAAI,UAAU,iBAAiB,YAAY;GACzC,MAAM,YAAYU,wBAAAA,uBAAuB,EACvC,oBAAoB,OAAO,QAAQ,YAAY;IAC7C,MAAM,YAAYH,wBAAAA,qBAAqB,QAAQ,QAAQ,QAAQ,SAAS;IAExE,QADmB,MAAM,OAAO,UAAU,MAAM,EAAA,CAAG,MAAM,UAAU,MAAM,QAAQ,SAAS,SAAS,CACpF,IAAI,EAAE,cAAc,CAAC,SAAS,EAAE,IAAI,KAAA;GACrD,EACF,CAAC;GACD,KAAK,MAAM,QAAQ,WAAW,OAC5B,KAAK,MAAM,aAAa,KAAK,mBAC3B,UAAU,QAAQ;IAChB,QAAQ,KAAK;IACb;IACA,iBAAiB;IACjB,oBAAoB;IACpB,UAAU;IACV,YAAY;IACZ,cAAc;IACd,gBAAgBA,wBAAAA,qBAAqB,KAAK,QAAQ,SAAS;IAC3D,cAAc;IACd,SAAS;IACT,UAAU;IACV,OAAO;KAAE,UAAU;KAAW,WAAW;IAAU;GACrD,CAAC;GACL,UAAU,KACR,QAAQ,QACNI,wBAAAA,6BACAC,wBAAAA,sBAAsB;IAAE;IAAe;IAAW;IAAQ,UAAU;GAAQ,CAAC,CAC/E,CACF;EACF;EACA,MAAM,aAAa,yBAAyB,MAAM,QAAQ,YAAY,WAAW,MAAM,YACrF,QAAQ,UAAU,WAAW,MAAM,OAAO,CAC5C;EACA,OAAO,YAAY;GACjB,WAAW;GACX,KAAK,MAAM,WAAW,UAAU,QAAQ,GAAG,QAAQ;GACnD,MAAM,cAAc;GACpB,MAAM,QAAQ,MAAM;EACtB;CACF,CACF;AACF,EAAE;;;ACnIF,MAAM,iBAAiB;AACvB,MAAM,iCAAiB,IAAI,IAAI,CAAC,gCAAgC,yBAAyB,CAAC;AAE1F,SAAS,SAAS,QAAgB,OAAyB;CACzD,OAAO,SAAS,KAAK,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;AAC5C;;AAQA,SAAgB,mBAAmB,UAAgF;CACjH,OAAO;EACL,UAAU;EACV,MAAM,SAAuB;GAC3B,MAAM,gBAAgB,QAAQ;GAE9B,IAAI;GACJ,MAAM,aACH,YAAY,YAAY;IACvB,IAAI,kBAAkB,KAAA,GAAW,OAAO;KAAE,QAAQ,KAAA;KAAW,QAAQ,KAAA;IAAU;IAC/E,MAAM,SAAS,MAAMC,wBAAAA,2BAA2B,SAAS,IAAI,eAAeC,4BAAAA,kBAAkB;IAC9F,MAAM,OAAOC,UAAAA,QAAK,KAAKA,UAAAA,QAAK,QAAQC,wBAAAA,sBAAsB,aAAa,CAAC,GAAGC,wBAAAA,yBAAyB;IACpG,MAAMC,wBAAAA,uBAAuB,SAAS,IAAIH,UAAAA,QAAK,QAAQ,IAAI,GAAGD,4BAAAA,kBAAkB;IAEhF,OAAO;KAAE;KAAQ,QAAA,MADIK,wBAAAA,2BAA2B,MAAM,SAAS,OAAO,KAAK,MAAML,4BAAAA,kBAAkB,CAAC;IAC5E;GAC1B,EAAA,CAAG,CAAC,CAAC,OAAO,UAAmB;IAE7B,SAAS,KAAA;IACT,MAAM;GACR,CAAC;GACH,OAAO;IACL,MAAM,MAAM,SAAS;KACnB,IAAI,QAAQ,WAAW,UAAU,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,aAAa,UACjE,OAAO,SAAS,KAAK,YAAY;KACnC,MAAM,EAAE,QAAQ,WAAW,MAAM,KAAK;KACtC,IAAI,CAAC,QAAQ,OAAO,SAAS,KAAK,4CAA4C;KAC9E,MAAM,SAAS,QAAQ,QAAQ,IAAI,gBAAgB;KACnD,IAAI,WAAW,SAAS,CAAC,SAAS,KAAK,MAAM,KAAK,OAAO,MAAM,IAAI,iBACjE,OAAO,SAAS,KAAK,4BAA4B;KACnD,MAAM,OAAO,MAAM,QAAQ,KAAK;KAChC,IAAI,OAAO,WAAW,IAAI,IAAI,gBAAgB,OAAO,SAAS,KAAK,4BAA4B;KAC/F,MAAM,OAAOM,wBAAAA,kBAAkB,QAAQ,SAAS,IAAI;KACpD,IAAI,CAAC,MAAM,OAAO,SAAS,KAAK,yCAAyC;KACzE,IAAI,CAAE,MAAM,QAAQ,MAAM,OAAO,GAAI,OAAO,SAAS,KAAK,8CAA8C;KACxG,IAAI;KACJ,IAAI;MACF,SAAS,KAAK,MAAM,IAAI;KAC1B,QAAQ;MACN,OAAO,SAAS,KAAK,sCAAsC;KAC7D;KACA,MAAM,WAAWC,wBAAAA,yBAAyB,MAAM;KAChD,IAAI,CAAC,YAAY,CAAC,eAAe,IAAI,SAAS,IAAI,GAChD,OAAO,SAAS,KAAK,qCAAqC;KAC5D,IAAI,CAAC,KAAK,kBAAkB,SAAS,SAAS,eAAe,GAC3D,OAAO,SAAS,KAAK,mCAAmC;KAC1D,MAAM,QAAQ,MAAM,2BAClB,SAAS,iBACTC,wBAAAA,qBAAqB,KAAK,QAAQ,SAAS,eAAe,GAC1D,SAAS,MACT,SAAS,OACX;KACA,OAAO,UAAU,KAAA,IACb,SAAS,KAAK,gCAAgC,IAC9C,SAAS,KAAK;MAAE,UAAU;MAAM;KAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;IAC9D;IACA,MAAM,QAAQ;KAEZ,OAAM,MADc,QAAQ,YAAY,KAAA,CAAS,EAAA,EACpC,QAAQ,MAAM;IAC7B;GACF;EACF;CACF;AACF;;;ACxFA,IAAA,wBAAA,GAAeC,iCAAAA,YAAAA,EAAa,EAAE,cAC5B,mBAAmB;CAAE,KAAA,GAAIC,4BAAAA,YAAAA,CAAY,OAAO;CAAG,SAAA,GAAQC,4BAAAA,gBAAAA,CAAgB,OAAO;AAAE,CAAC,CACnF;;;ACCA,MAAM,MAAY,OAA0B,YAC1C,OAAO,UAAU,aAAc,MAAwB,OAAO,IAAI;AAEpE,MAAa,gBAAA,GAAeC,gCAAAA,mBAAAA,CAAmB;CAC7C,MAAM;CACN,oBAAA,GAAmBC,gCAAAA,+BAAAA,CAA+BC,mBAAW;CAC7D,UAAA,GAASC,iCAAAA,mBAAAA,CAAmB,EAAE,SAAS,CAACD,mBAAW,EAAE,CAAC;CACtD,SAAS,aAAa,EACpB,IAAI,MAAoC;EAAE,OAAO,CAAC,GAAGE,sBAAU,OAAO,CAAC;CAAG,EAC5E;CACA,YAAY,aAAa,EACvB,IAAI,MAAoC;EAAE,OAAO,CAAC,GAAGA,sBAAU,OAAO,CAAC;CAAG,EAC5E;CACA,SAAS,OAAO,YAAY;EAC1B,MAAM,eAAe,MAAM,QAAQ,UAAU,WAAWF,qBAAa,OAAO;EAC5E,OAAO;GACL,IAAA,GAAGG,iCAAAA,iBAAAA,CAAiB,YAAY;GAChC,IAAI,MAAoC;IAAE,OAAO,CAAC,GAAGD,sBAAU,OAAO,CAAC;GAAG;GAC1E,UAAU,CAAC,GAAI,aAAa,YAAY,CAAC,CAAE;GAC3C,IAAI,aAAkD;IAAE,OAAO,CAAC,GAAI,aAAa,cAAc,CAAC,CAAE;GAAG;EACvG;CACF;AACF,CAAC"}

package/dist/extensions/server.d.mts

@@ -1,5 +1,5 @@
 //#region generated/server.d.ts
-export declare const facet: import("@agimon-ai/po-core/serverFacet").DoomServerFacet;
+export declare const serverPlugin: import("@agimon-ai/po-core/serverPlugin").PoServerPlugin;
 //#endregion
-export { facet as default };
+export { serverPlugin as default };
 //# sourceMappingURL=server.d.mts.map

package/dist/extensions/server.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.mts","names":[],"sources":["../../generated/server.ts"],"mappings":";qBAYa,gDAAK"}
+{"version":3,"file":"server.d.mts","names":[],"sources":["../../generated/server.ts"],"mappings":";qBAYa,wDAAY"}

package/dist/extensions/server.mjs

@@ -1,9 +1,9 @@
-import { D as provideBackgroundWorkService, T as sessionPeerConfigPath, _ as parseSessionPeerEnvelope, a as createSessionGroupDeliveryAuthorizer, b as readSessionPeerConfigAsync, f as createSessionDirectory, g as parseRemoteSessionReference, h as ensurePrivateDirectory, m as createPeerReplayGuardAsync, n as provideSessionDeliveryService, o as createSessionIntercom, p as createPeerCommunication, s as DOOM_SESSION_INTERCOM_SERVICE, u as createSessionGroupStore, w as PEER_REPLAY_DATABASE_FILE, x as verifyPeerRequest, y as peerSessionReference } from "../sessionDelivery-BzPl0sCk.mjs";
+import { D as provideBackgroundWorkService, T as sessionPeerConfigPath, _ as parseSessionPeerEnvelope, a as createSessionGroupDeliveryAuthorizer, b as readSessionPeerConfigAsync, f as createSessionDirectory, g as parseRemoteSessionReference, h as ensurePrivateDirectory, m as createPeerReplayGuardAsync, n as provideSessionDeliveryService, o as createSessionIntercom, p as createPeerCommunication, s as PO_SESSION_INTERCOM_SERVICE, u as createSessionGroupStore, w as PEER_REPLAY_DATABASE_FILE, x as verifyPeerRequest, y as peerSessionReference } from "../sessionDelivery-CN7GF38B.mjs";
 import path from "node:path";
-import { BACKGROUND_CONTEXT, requireDoomFs, requireDoomSqlite } from "@agimon-ai/po-core/platform";
+import { BACKGROUND_CONTEXT, requirePoFs, requirePoSqlite } from "@agimon-ai/po-core/platform";
 import { poHomeDirectory } from "@agimon-ai/po-core/piSettings";
-import { composeServerProviderOverrides, defineServerPlugin } from "@agimon-ai/po-core/serverFacet";
-import { composeRootHooks, defineRoot, defineRoute } from "@agimon-ai/po-core/extensionFile";
+import { composeServerProviderOverrides, defineServerPlugin } from "@agimon-ai/po-core/serverPlugin";
+import { composeRootHooks, composeRootInjects, defineRoot, defineRoute } from "@agimon-ai/po-core/extensionFile";
 //#region src/services/peerInbox/index.ts
 const inboxes = /* @__PURE__ */ new Map();
 /**
@@ -32,8 +32,8 @@ var root_server_default = defineRoot((pluginContext) => ({
 		const homeDirectory = pluginContext.host.context.homeDirectory;
 		const sessionService = pluginContext.host.context.sessionService;
 		if (!agent || !session?.admitPrompt || !communication || !homeDirectory || !sessionService?.canCommunicate) throw new Error("Session delivery requires the headless agent, authenticated session communication, host home directory, and communication policy.");
-		const fs = requireDoomFs(pluginContext.context);
-		const sqlite = requireDoomSqlite(pluginContext.context);
+		const fs = requirePoFs(pluginContext.context);
+		const sqlite = requirePoSqlite(pluginContext.context);
 		const io = BACKGROUND_CONTEXT;
 		const sessionDirectory = path.join(poHomeDirectory(homeDirectory), "session");
 		const deliveryDirectory = path.join(sessionDirectory, "delivery");
@@ -64,7 +64,16 @@ var root_server_default = defineRoot((pluginContext) => ({
 				recipientKey: agent.context.sessionId,
 				communication: peerCommunication,
 				authorizePeer: (peerKey, metadata) => groupAuthorization ? groupAuthorization(peerKey, metadata) : fallbackAuthorization(peerKey),
-				admitPrompt: (prompt, admission) => session.admitPrompt(prompt, admission)
+				admitPrompt: (prompt, admission, requestId, metadata) => {
+					if (!metadata.customType) return session.admitPrompt(prompt, admission, void 0, requestId);
+					if (!session.admitMessage) throw new Error("The session cannot admit a custom delivery.");
+					return session.admitMessage({
+						type: metadata.customType,
+						text: prompt,
+						display: true,
+						details: metadata.customDetails === void 0 ? void 0 : JSON.parse(metadata.customDetails)
+					}, admission === "steer" ? "steer" : "followUp", requestId);
+				}
 			});
 		} catch (error) {
 			await groups?.close();
@@ -94,7 +103,7 @@ var root_server_default = defineRoot((pluginContext) => ({
 					readiness: "unknown"
 				}
 			});
-			unprovide.push(context.provide(DOOM_SESSION_INTERCOM_SERVICE, createSessionIntercom({
+			unprovide.push(context.provide(PO_SESSION_INTERCOM_SERVICE, createSessionIntercom({
 				selfReference,
 				directory,
 				groups,
@@ -113,7 +122,7 @@ var root_server_default = defineRoot((pluginContext) => ({
 //#endregion
 //#region src/services/peerInboxApi/index.ts
 const MAX_BODY_BYTES = 65536;
-const DELIVERY_TYPES = /* @__PURE__ */ new Set(["doom/session-delivery/envelope", "doom/session-delivery/ack"]);
+const DELIVERY_TYPES = /* @__PURE__ */ new Set(["po/session-delivery/envelope", "po/session-delivery/ack"]);
 function response(status, error) {
 	return Response.json({ error }, { status });
 }
@@ -177,15 +186,16 @@ function createPeerInboxApi(platform) {
 //#endregion
 //#region src/extensions/(backend)/api/session-peer/route.server.ts
 var route_server_default = defineRoute(({ context }) => createPeerInboxApi({
-	fs: requireDoomFs(context),
-	sqlite: requireDoomSqlite(context)
+	fs: requirePoFs(context),
+	sqlite: requirePoSqlite(context)
 }));
 //#endregion
 //#region generated/server.ts
 const at = (value, context) => typeof value === "function" ? value(context) : value;
-const facet = defineServerPlugin({
+const serverPlugin = defineServerPlugin({
 	name: "@agimon-ai/po-session",
 	providerOverrides: composeServerProviderOverrides(root_server_default),
+	injects: composeRootInjects({ session: [root_server_default] }),
 	global: (context) => ({ get api() {
 		return [at(route_server_default, context)];
 	} }),
@@ -193,7 +203,7 @@ const facet = defineServerPlugin({
 		return [at(route_server_default, context)];
 	} }),
 	session: async (context) => {
-		const scopeSession = await root_server_default(context);
+		const scopeSession = await context.scopeRoot("session", root_server_default, context);
 		return {
 			...composeRootHooks(scopeSession),
 			get api() {
@@ -207,6 +217,6 @@ const facet = defineServerPlugin({
 	}
 });
 //#endregion
-export { facet as default, facet };
+export { serverPlugin as default, serverPlugin };
 
 //# sourceMappingURL=server.mjs.map

package/dist/extensions/server.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"server.mjs","names":["rootSession","apiRoute"],"sources":["../../src/services/peerInbox/index.ts","../../src/extensions/workspaces/sessions/(backend)/root.server.ts","../../src/services/peerInboxApi/index.ts","../../src/extensions/(backend)/api/session-peer/route.server.ts","../../generated/server.ts"],"sourcesContent":["import type { DoomSessionDeliveryInboxState } from '../sessionDelivery';\n\nexport type SessionPeerInbox = (\n  sourceKey: string,\n  type: string,\n  payload: unknown,\n) => Promise<DoomSessionDeliveryInboxState | undefined> | undefined;\n\nconst inboxes = new Map<string, SessionPeerInbox>();\n\n/**\n * Registers one live session-owned peer inbox. This registry is reachable only by the Session route.\n * The newest registration wins: a Durable Object evicted without disposal leaves its entry in the\n * isolate's module state, and the restarted session must replace it. The hub still rejects two live\n * sessions with one id, and an older unregister cannot remove a newer inbox.\n */\nexport function registerSessionPeerInbox(sessionId: string, inbox: SessionPeerInbox): () => void {\n  inboxes.set(sessionId, inbox);\n  return () => {\n    if (inboxes.get(sessionId) === inbox) inboxes.delete(sessionId);\n  };\n}\n\nexport async function deliverSessionPeerEnvelope(\n  targetSessionId: string,\n  sourceKey: string,\n  type: string,\n  payload: unknown,\n): Promise<DoomSessionDeliveryInboxState | undefined> {\n  return inboxes.get(targetSessionId)?.(sourceKey, type, payload);\n}\n","import path from 'node:path';\n\nimport { defineRoot } from '@agimon-ai/po-core/extensionFile';\nimport { poHomeDirectory } from '@agimon-ai/po-core/piSettings';\nimport { BACKGROUND_CONTEXT, requireDoomFs, requireDoomSqlite } from '@agimon-ai/po-core/platform';\nimport type { DoomServerPluginContext } from '@agimon-ai/po-core/serverFacet';\n\nimport { provideBackgroundWorkService } from '../../../../services/backgroundWorkService';\nimport { registerSessionPeerInbox } from '../../../../services/peerInbox';\nimport {\n  createPeerCommunication,\n  ensurePrivateDirectory,\n  parseRemoteSessionReference,\n  peerSessionReference,\n  readSessionPeerConfigAsync,\n} from '../../../../services/peerTransport';\nimport { provideSessionDeliveryService } from '../../../../services/sessionDelivery';\nimport { createSessionDirectory } from '../../../../services/sessionDirectory';\nimport { createSessionGroupStore } from '../../../../services/sessionGroups';\nimport {\n  DOOM_SESSION_INTERCOM_SERVICE,\n  createSessionGroupDeliveryAuthorizer,\n  createSessionIntercom,\n} from '../../../../services/sessionIntercom';\n\nexport default defineRoot((pluginContext: DoomServerPluginContext) => ({\n  value: undefined,\n  services: [\n    provideBackgroundWorkService,\n    async (context) => {\n      const agent = pluginContext.agent;\n      const session = agent?.context.session;\n      const communication = pluginContext.host.context.sessionCommunication;\n      const homeDirectory = pluginContext.host.context.homeDirectory;\n      const sessionService = pluginContext.host.context.sessionService;\n      if (!agent || !session?.admitPrompt || !communication || !homeDirectory || !sessionService?.canCommunicate) {\n        throw new Error(\n          'Session delivery requires the headless agent, authenticated session communication, host home directory, and communication policy.',\n        );\n      }\n      const fs = requireDoomFs(pluginContext.context);\n      const sqlite = requireDoomSqlite(pluginContext.context);\n      const io = BACKGROUND_CONTEXT;\n      const sessionDirectory = path.join(poHomeDirectory(homeDirectory), 'session');\n      const deliveryDirectory = path.join(sessionDirectory, 'delivery');\n      await ensurePrivateDirectory(fs, deliveryDirectory, io);\n      const peerConfig = await readSessionPeerConfigAsync(fs, homeDirectory, io);\n      const peerCommunication = createPeerCommunication({ local: communication, config: peerConfig });\n      const remotePeerIsGranted = (peerKey: string): boolean => {\n        const peer = parseRemoteSessionReference(peerKey);\n        return (\n          peer !== undefined &&\n          peerConfig?.peers.some(\n            (candidate) =>\n              candidate.hostId === peer.hostId && candidate.allowedSessionIds.includes(agent.context.sessionId),\n          ) === true\n        );\n      };\n      const fallbackAuthorization = (peerKey: string): boolean =>\n        sessionService.canCommunicate?.(agent.context.sessionId, peerKey) === true || remotePeerIsGranted(peerKey);\n      const groups = peerConfig\n        ? await createSessionGroupStore({\n            database: await sqlite.open(path.join(sessionDirectory, 'groups.sqlite'), io),\n          })\n        : undefined;\n      const localHostId = peerConfig?.hostId;\n      const selfReference = localHostId ? peerSessionReference(localHostId, agent.context.sessionId) : undefined;\n      const groupAuthorization =\n        groups && selfReference && localHostId\n          ? createSessionGroupDeliveryAuthorizer({\n              selfReference,\n              groups,\n              peerReference: (peerKey) =>\n                parseRemoteSessionReference(peerKey) === undefined\n                  ? peerSessionReference(localHostId, peerKey)\n                  : peerKey,\n              fallback: fallbackAuthorization,\n            })\n          : undefined;\n      let delivery: Awaited<ReturnType<typeof provideSessionDeliveryService>>;\n      try {\n        delivery = await provideSessionDeliveryService(context, {\n          database: await sqlite.open(path.join(deliveryDirectory, `${agent.context.sessionId}.sqlite`), io),\n          recipientKey: agent.context.sessionId,\n          communication: peerCommunication,\n          authorizePeer: (peerKey, metadata) =>\n            groupAuthorization ? groupAuthorization(peerKey, metadata) : fallbackAuthorization(peerKey),\n          admitPrompt: (prompt, admission) => session.admitPrompt!(prompt, admission),\n        });\n      } catch (error) {\n        await groups?.close();\n        throw error;\n      }\n      const { service, close: closeDelivery } = delivery;\n      const unprovide: (() => void)[] = [];\n      if (groups && selfReference && peerConfig) {\n        const directory = createSessionDirectory({\n          authorizeDiscovery: async (caller, subject) => {\n            const reference = peerSessionReference(subject.hostId, subject.sessionId);\n            const permitted = (await groups.groupsFor(caller)).some((group) => group.members.includes(reference));\n            return permitted ? { capabilities: ['message'] } : undefined;\n          },\n        });\n        for (const peer of peerConfig.peers)\n          for (const sessionId of peer.allowedSessionIds)\n            directory.observe({\n              hostId: peer.hostId,\n              sessionId,\n              hostIncarnation: 'unknown',\n              sessionIncarnation: 'unknown',\n              sequence: 0,\n              observedAt: 0,\n              staleAfterMs: 0,\n              deliveryTarget: peerSessionReference(peer.hostId, sessionId),\n              reachability: 'unknown',\n              runtime: 'unknown',\n              activity: 'unknown',\n              voice: { eligible: 'unknown', readiness: 'unknown' },\n            });\n        unprovide.push(\n          context.provide(\n            DOOM_SESSION_INTERCOM_SERVICE,\n            createSessionIntercom({ selfReference, directory, groups, delivery: service }),\n          ),\n        );\n      }\n      const unregister = registerSessionPeerInbox(agent.context.sessionId, (sourceKey, kind, payload) =>\n        service.receive?.(sourceKey, kind, payload),\n      );\n      return async () => {\n        unregister();\n        for (const release of unprovide.reverse()) release();\n        await closeDelivery();\n        await groups?.close();\n      };\n    },\n  ],\n}));\n","import path from 'node:path';\n\nimport type { DoomApi, DoomApiHandler } from '@agimon-ai/po-core/packageApi';\nimport { BACKGROUND_CONTEXT, type DoomSqliteService, type FileSystem } from '@agimon-ai/po-core/platform';\n\nimport { deliverSessionPeerEnvelope } from '../peerInbox';\nimport {\n  PEER_REPLAY_DATABASE_FILE,\n  createPeerReplayGuardAsync,\n  ensurePrivateDirectory,\n  parseSessionPeerEnvelope,\n  peerSessionReference,\n  readSessionPeerConfigAsync,\n  sessionPeerConfigPath,\n  verifyPeerRequest,\n  type SessionPeerConfig,\n  type SessionPeerReplayGuardAsync,\n} from '../peerTransport';\n\nconst MAX_BODY_BYTES = 64 * 1024;\nconst DELIVERY_TYPES = new Set(['doom/session-delivery/envelope', 'doom/session-delivery/ack']);\n\nfunction response(status: number, error: string): Response {\n  return Response.json({ error }, { status });\n}\n\ninterface PeerInboxState {\n  readonly config: SessionPeerConfig | undefined;\n  readonly replay: SessionPeerReplayGuardAsync | undefined;\n}\n\n/** Narrow HMAC-authenticated endpoint that a trusted tunnel may forward without device authentication. */\nexport function createPeerInboxApi(platform: { readonly fs: FileSystem; readonly sqlite: DoomSqliteService }): DoomApi {\n  return {\n    basePath: 'session-peer',\n    start(context): DoomApiHandler {\n      const homeDirectory = context.homeDirectory;\n      // Opened once on first use: the handler starts synchronously, the platform services are async.\n      let opened: Promise<PeerInboxState> | undefined;\n      const open = (): Promise<PeerInboxState> =>\n        (opened ??= (async () => {\n          if (homeDirectory === undefined) return { config: undefined, replay: undefined };\n          const config = await readSessionPeerConfigAsync(platform.fs, homeDirectory, BACKGROUND_CONTEXT);\n          const file = path.join(path.dirname(sessionPeerConfigPath(homeDirectory)), PEER_REPLAY_DATABASE_FILE);\n          await ensurePrivateDirectory(platform.fs, path.dirname(file), BACKGROUND_CONTEXT);\n          const replay = await createPeerReplayGuardAsync(await platform.sqlite.open(file, BACKGROUND_CONTEXT));\n          return { config, replay };\n        })().catch((error: unknown) => {\n          // A failed open is retried by the next request rather than cached.\n          opened = undefined;\n          throw error;\n        }));\n      return {\n        async fetch(request) {\n          if (request.method !== 'POST' || new URL(request.url).pathname !== '/inbox')\n            return response(404, 'Not found.');\n          const { config, replay } = await open();\n          if (!config) return response(503, 'Paired Session delivery is not configured.');\n          const length = request.headers.get('content-length');\n          if (length !== null && (!/^\\d+$/u.test(length) || Number(length) > MAX_BODY_BYTES))\n            return response(413, 'Request body is too large.');\n          const body = await request.text();\n          if (Buffer.byteLength(body) > MAX_BODY_BYTES) return response(413, 'Request body is too large.');\n          const peer = verifyPeerRequest(config, request, body);\n          if (!peer) return response(401, 'Paired Session request is unauthorized.');\n          if (!(await replay?.admit(request))) return response(409, 'Paired Session request was already received.');\n          let parsed: unknown;\n          try {\n            parsed = JSON.parse(body) as unknown;\n          } catch {\n            return response(400, 'Paired Session request is malformed.');\n          }\n          const envelope = parseSessionPeerEnvelope(parsed);\n          if (!envelope || !DELIVERY_TYPES.has(envelope.type))\n            return response(400, 'Paired Session envelope is invalid.');\n          if (!peer.allowedSessionIds.includes(envelope.targetSessionId))\n            return response(403, 'Peer is not granted this session.');\n          const state = await deliverSessionPeerEnvelope(\n            envelope.targetSessionId,\n            peerSessionReference(peer.hostId, envelope.sourceSessionId),\n            envelope.type,\n            envelope.payload,\n          );\n          return state === undefined\n            ? response(404, 'Target Session is unavailable.')\n            : Response.json({ accepted: true, state }, { status: 202 });\n        },\n        async close() {\n          const state = await opened?.catch(() => undefined);\n          await state?.replay?.close();\n        },\n      };\n    },\n  };\n}\n","import { defineRoute } from '@agimon-ai/po-core/extensionFile';\nimport { requireDoomFs, requireDoomSqlite } from '@agimon-ai/po-core/platform';\nimport type { DoomServerPluginContext } from '@agimon-ai/po-core/serverFacet';\n\nimport { createPeerInboxApi } from '../../../../services/peerInboxApi';\n\nexport default defineRoute(({ context }: DoomServerPluginContext) =>\n  createPeerInboxApi({ fs: requireDoomFs(context), sqlite: requireDoomSqlite(context) }),\n);\n","// Generated by @agimon-ai/po-build. Do not edit by hand.\nimport { defineServerPlugin, type DoomServerSessionPlugin } from '@agimon-ai/po-core/serverFacet';\nimport { composeServerProviderOverrides } from '@agimon-ai/po-core/serverFacet';\nimport { composeRootHooks } from '@agimon-ai/po-core/extensionFile';\n\nimport rootSession from '../src/extensions/workspaces/sessions/(backend)/root.server';\nimport apiRoute from '../src/extensions/(backend)/api/session-peer/route.server';\n\ntype Factory<T, C> = (context: C) => T;\nconst at = <T, C>(value: T | Factory<T, C>, context: C): T =>\n  typeof value === 'function' ? (value as Factory<T, C>)(context) : value;\n\nexport const facet = defineServerPlugin({\n  name: '@agimon-ai/po-session',\n  providerOverrides: composeServerProviderOverrides(rootSession),\n  global: (context) => ({\n    get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n  }),\n  workspace: (context) => ({\n    get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n  }),\n  session: async (context) => {\n    const scopeSession = await rootSession(context);\n    return {\n      ...composeRootHooks(scopeSession),\n      get api(): DoomServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n      services: [...(scopeSession.services ?? [])],\n      get activities(): DoomServerSessionPlugin['activities'] { return [...(scopeSession.activities ?? [])]; },\n    };\n  },\n});\n\nexport default facet;\n"],"mappings":";;;;;;;AAQA,MAAM,0BAAU,IAAI,IAA8B;;;;;;;AAQlD,SAAgB,yBAAyB,WAAmB,OAAqC;CAC/F,QAAQ,IAAI,WAAW,KAAK;CAC5B,aAAa;EACX,IAAI,QAAQ,IAAI,SAAS,MAAM,OAAO,QAAQ,OAAO,SAAS;CAChE;AACF;AAEA,eAAsB,2BACpB,iBACA,WACA,MACA,SACoD;CACpD,OAAO,QAAQ,IAAI,eAAe,CAAC,GAAG,WAAW,MAAM,OAAO;AAChE;;;ACLA,IAAA,sBAAe,YAAY,mBAA4C;CACrE,OAAO,KAAA;CACP,UAAU,CACR,8BACA,OAAO,YAAY;EACjB,MAAM,QAAQ,cAAc;EAC5B,MAAM,UAAU,OAAO,QAAQ;EAC/B,MAAM,gBAAgB,cAAc,KAAK,QAAQ;EACjD,MAAM,gBAAgB,cAAc,KAAK,QAAQ;EACjD,MAAM,iBAAiB,cAAc,KAAK,QAAQ;EAClD,IAAI,CAAC,SAAS,CAAC,SAAS,eAAe,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,gBAAgB,gBAC1F,MAAM,IAAI,MACR,mIACF;EAEF,MAAM,KAAK,cAAc,cAAc,OAAO;EAC9C,MAAM,SAAS,kBAAkB,cAAc,OAAO;EACtD,MAAM,KAAK;EACX,MAAM,mBAAmB,KAAK,KAAK,gBAAgB,aAAa,GAAG,SAAS;EAC5E,MAAM,oBAAoB,KAAK,KAAK,kBAAkB,UAAU;EAChE,MAAM,uBAAuB,IAAI,mBAAmB,EAAE;EACtD,MAAM,aAAa,MAAM,2BAA2B,IAAI,eAAe,EAAE;EACzE,MAAM,oBAAoB,wBAAwB;GAAE,OAAO;GAAe,QAAQ;EAAW,CAAC;EAC9F,MAAM,uBAAuB,YAA6B;GACxD,MAAM,OAAO,4BAA4B,OAAO;GAChD,OACE,SAAS,KAAA,KACT,YAAY,MAAM,MACf,cACC,UAAU,WAAW,KAAK,UAAU,UAAU,kBAAkB,SAAS,MAAM,QAAQ,SAAS,CACpG,MAAM;EAEV;EACA,MAAM,yBAAyB,YAC7B,eAAe,iBAAiB,MAAM,QAAQ,WAAW,OAAO,MAAM,QAAQ,oBAAoB,OAAO;EAC3G,MAAM,SAAS,aACX,MAAM,wBAAwB,EAC5B,UAAU,MAAM,OAAO,KAAK,KAAK,KAAK,kBAAkB,eAAe,GAAG,EAAE,EAC9E,CAAC,IACD,KAAA;EACJ,MAAM,cAAc,YAAY;EAChC,MAAM,gBAAgB,cAAc,qBAAqB,aAAa,MAAM,QAAQ,SAAS,IAAI,KAAA;EACjG,MAAM,qBACJ,UAAU,iBAAiB,cACvB,qCAAqC;GACnC;GACA;GACA,gBAAgB,YACd,4BAA4B,OAAO,MAAM,KAAA,IACrC,qBAAqB,aAAa,OAAO,IACzC;GACN,UAAU;EACZ,CAAC,IACD,KAAA;EACN,IAAI;EACJ,IAAI;GACF,WAAW,MAAM,8BAA8B,SAAS;IACtD,UAAU,MAAM,OAAO,KAAK,KAAK,KAAK,mBAAmB,GAAG,MAAM,QAAQ,UAAU,QAAQ,GAAG,EAAE;IACjG,cAAc,MAAM,QAAQ;IAC5B,eAAe;IACf,gBAAgB,SAAS,aACvB,qBAAqB,mBAAmB,SAAS,QAAQ,IAAI,sBAAsB,OAAO;IAC5F,cAAc,QAAQ,cAAc,QAAQ,YAAa,QAAQ,SAAS;GAC5E,CAAC;EACH,SAAS,OAAO;GACd,MAAM,QAAQ,MAAM;GACpB,MAAM;EACR;EACA,MAAM,EAAE,SAAS,OAAO,kBAAkB;EAC1C,MAAM,YAA4B,CAAC;EACnC,IAAI,UAAU,iBAAiB,YAAY;GACzC,MAAM,YAAY,uBAAuB,EACvC,oBAAoB,OAAO,QAAQ,YAAY;IAC7C,MAAM,YAAY,qBAAqB,QAAQ,QAAQ,QAAQ,SAAS;IAExE,QADmB,MAAM,OAAO,UAAU,MAAM,EAAA,CAAG,MAAM,UAAU,MAAM,QAAQ,SAAS,SAAS,CACpF,IAAI,EAAE,cAAc,CAAC,SAAS,EAAE,IAAI,KAAA;GACrD,EACF,CAAC;GACD,KAAK,MAAM,QAAQ,WAAW,OAC5B,KAAK,MAAM,aAAa,KAAK,mBAC3B,UAAU,QAAQ;IAChB,QAAQ,KAAK;IACb;IACA,iBAAiB;IACjB,oBAAoB;IACpB,UAAU;IACV,YAAY;IACZ,cAAc;IACd,gBAAgB,qBAAqB,KAAK,QAAQ,SAAS;IAC3D,cAAc;IACd,SAAS;IACT,UAAU;IACV,OAAO;KAAE,UAAU;KAAW,WAAW;IAAU;GACrD,CAAC;GACL,UAAU,KACR,QAAQ,QACN,+BACA,sBAAsB;IAAE;IAAe;IAAW;IAAQ,UAAU;GAAQ,CAAC,CAC/E,CACF;EACF;EACA,MAAM,aAAa,yBAAyB,MAAM,QAAQ,YAAY,WAAW,MAAM,YACrF,QAAQ,UAAU,WAAW,MAAM,OAAO,CAC5C;EACA,OAAO,YAAY;GACjB,WAAW;GACX,KAAK,MAAM,WAAW,UAAU,QAAQ,GAAG,QAAQ;GACnD,MAAM,cAAc;GACpB,MAAM,QAAQ,MAAM;EACtB;CACF,CACF;AACF,EAAE;;;ACtHF,MAAM,iBAAiB;AACvB,MAAM,iCAAiB,IAAI,IAAI,CAAC,kCAAkC,2BAA2B,CAAC;AAE9F,SAAS,SAAS,QAAgB,OAAyB;CACzD,OAAO,SAAS,KAAK,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;AAC5C;;AAQA,SAAgB,mBAAmB,UAAoF;CACrH,OAAO;EACL,UAAU;EACV,MAAM,SAAyB;GAC7B,MAAM,gBAAgB,QAAQ;GAE9B,IAAI;GACJ,MAAM,aACH,YAAY,YAAY;IACvB,IAAI,kBAAkB,KAAA,GAAW,OAAO;KAAE,QAAQ,KAAA;KAAW,QAAQ,KAAA;IAAU;IAC/E,MAAM,SAAS,MAAM,2BAA2B,SAAS,IAAI,eAAe,kBAAkB;IAC9F,MAAM,OAAO,KAAK,KAAK,KAAK,QAAQ,sBAAsB,aAAa,CAAC,GAAG,yBAAyB;IACpG,MAAM,uBAAuB,SAAS,IAAI,KAAK,QAAQ,IAAI,GAAG,kBAAkB;IAEhF,OAAO;KAAE;KAAQ,QAAA,MADI,2BAA2B,MAAM,SAAS,OAAO,KAAK,MAAM,kBAAkB,CAAC;IAC5E;GAC1B,EAAA,CAAG,CAAC,CAAC,OAAO,UAAmB;IAE7B,SAAS,KAAA;IACT,MAAM;GACR,CAAC;GACH,OAAO;IACL,MAAM,MAAM,SAAS;KACnB,IAAI,QAAQ,WAAW,UAAU,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,aAAa,UACjE,OAAO,SAAS,KAAK,YAAY;KACnC,MAAM,EAAE,QAAQ,WAAW,MAAM,KAAK;KACtC,IAAI,CAAC,QAAQ,OAAO,SAAS,KAAK,4CAA4C;KAC9E,MAAM,SAAS,QAAQ,QAAQ,IAAI,gBAAgB;KACnD,IAAI,WAAW,SAAS,CAAC,SAAS,KAAK,MAAM,KAAK,OAAO,MAAM,IAAI,iBACjE,OAAO,SAAS,KAAK,4BAA4B;KACnD,MAAM,OAAO,MAAM,QAAQ,KAAK;KAChC,IAAI,OAAO,WAAW,IAAI,IAAI,gBAAgB,OAAO,SAAS,KAAK,4BAA4B;KAC/F,MAAM,OAAO,kBAAkB,QAAQ,SAAS,IAAI;KACpD,IAAI,CAAC,MAAM,OAAO,SAAS,KAAK,yCAAyC;KACzE,IAAI,CAAE,MAAM,QAAQ,MAAM,OAAO,GAAI,OAAO,SAAS,KAAK,8CAA8C;KACxG,IAAI;KACJ,IAAI;MACF,SAAS,KAAK,MAAM,IAAI;KAC1B,QAAQ;MACN,OAAO,SAAS,KAAK,sCAAsC;KAC7D;KACA,MAAM,WAAW,yBAAyB,MAAM;KAChD,IAAI,CAAC,YAAY,CAAC,eAAe,IAAI,SAAS,IAAI,GAChD,OAAO,SAAS,KAAK,qCAAqC;KAC5D,IAAI,CAAC,KAAK,kBAAkB,SAAS,SAAS,eAAe,GAC3D,OAAO,SAAS,KAAK,mCAAmC;KAC1D,MAAM,QAAQ,MAAM,2BAClB,SAAS,iBACT,qBAAqB,KAAK,QAAQ,SAAS,eAAe,GAC1D,SAAS,MACT,SAAS,OACX;KACA,OAAO,UAAU,KAAA,IACb,SAAS,KAAK,gCAAgC,IAC9C,SAAS,KAAK;MAAE,UAAU;MAAM;KAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;IAC9D;IACA,MAAM,QAAQ;KAEZ,OAAM,MADc,QAAQ,YAAY,KAAA,CAAS,EAAA,EACpC,QAAQ,MAAM;IAC7B;GACF;EACF;CACF;AACF;;;ACxFA,IAAA,uBAAe,aAAa,EAAE,cAC5B,mBAAmB;CAAE,IAAI,cAAc,OAAO;CAAG,QAAQ,kBAAkB,OAAO;AAAE,CAAC,CACvF;;;ACCA,MAAM,MAAY,OAA0B,YAC1C,OAAO,UAAU,aAAc,MAAwB,OAAO,IAAI;AAEpE,MAAa,QAAQ,mBAAmB;CACtC,MAAM;CACN,mBAAmB,+BAA+BA,mBAAW;CAC7D,SAAS,aAAa,EACpB,IAAI,MAAsC;EAAE,OAAO,CAAC,GAAGC,sBAAU,OAAO,CAAC;CAAG,EAC9E;CACA,YAAY,aAAa,EACvB,IAAI,MAAsC;EAAE,OAAO,CAAC,GAAGA,sBAAU,OAAO,CAAC;CAAG,EAC9E;CACA,SAAS,OAAO,YAAY;EAC1B,MAAM,eAAe,MAAMD,oBAAY,OAAO;EAC9C,OAAO;GACL,GAAG,iBAAiB,YAAY;GAChC,IAAI,MAAsC;IAAE,OAAO,CAAC,GAAGC,sBAAU,OAAO,CAAC;GAAG;GAC5E,UAAU,CAAC,GAAI,aAAa,YAAY,CAAC,CAAE;GAC3C,IAAI,aAAoD;IAAE,OAAO,CAAC,GAAI,aAAa,cAAc,CAAC,CAAE;GAAG;EACzG;CACF;AACF,CAAC"}
+{"version":3,"file":"server.mjs","names":["rootSession","apiRoute"],"sources":["../../src/services/peerInbox/index.ts","../../src/extensions/workspaces/sessions/(backend)/root.server.ts","../../src/services/peerInboxApi/index.ts","../../src/extensions/(backend)/api/session-peer/route.server.ts","../../generated/server.ts"],"sourcesContent":["import type { PoSessionDeliveryInboxState } from '../sessionDelivery';\n\nexport type SessionPeerInbox = (\n  sourceKey: string,\n  type: string,\n  payload: unknown,\n) => Promise<PoSessionDeliveryInboxState | undefined> | undefined;\n\nconst inboxes = new Map<string, SessionPeerInbox>();\n\n/**\n * Registers one live session-owned peer inbox. This registry is reachable only by the Session route.\n * The newest registration wins: a Durable Object evicted without disposal leaves its entry in the\n * isolate's module state, and the restarted session must replace it. The hub still rejects two live\n * sessions with one id, and an older unregister cannot remove a newer inbox.\n */\nexport function registerSessionPeerInbox(sessionId: string, inbox: SessionPeerInbox): () => void {\n  inboxes.set(sessionId, inbox);\n  return () => {\n    if (inboxes.get(sessionId) === inbox) inboxes.delete(sessionId);\n  };\n}\n\nexport async function deliverSessionPeerEnvelope(\n  targetSessionId: string,\n  sourceKey: string,\n  type: string,\n  payload: unknown,\n): Promise<PoSessionDeliveryInboxState | undefined> {\n  return inboxes.get(targetSessionId)?.(sourceKey, type, payload);\n}\n","import path from 'node:path';\n\nimport { defineRoot } from '@agimon-ai/po-core/extensionFile';\nimport { poHomeDirectory } from '@agimon-ai/po-core/piSettings';\nimport { BACKGROUND_CONTEXT, requirePoFs, requirePoSqlite } from '@agimon-ai/po-core/platform';\nimport type { PoServerPluginContext } from '@agimon-ai/po-core/serverPlugin';\n\nimport { provideBackgroundWorkService } from '../../../../services/backgroundWorkService';\nimport { registerSessionPeerInbox } from '../../../../services/peerInbox';\nimport {\n  createPeerCommunication,\n  ensurePrivateDirectory,\n  parseRemoteSessionReference,\n  peerSessionReference,\n  readSessionPeerConfigAsync,\n} from '../../../../services/peerTransport';\nimport { provideSessionDeliveryService } from '../../../../services/sessionDelivery';\nimport { createSessionDirectory } from '../../../../services/sessionDirectory';\nimport { createSessionGroupStore } from '../../../../services/sessionGroups';\nimport {\n  PO_SESSION_INTERCOM_SERVICE,\n  createSessionGroupDeliveryAuthorizer,\n  createSessionIntercom,\n} from '../../../../services/sessionIntercom';\n\nexport default defineRoot((pluginContext: PoServerPluginContext) => ({\n  value: undefined,\n  services: [\n    provideBackgroundWorkService,\n    async (context) => {\n      const agent = pluginContext.agent;\n      const session = agent?.context.session;\n      const communication = pluginContext.host.context.sessionCommunication;\n      const homeDirectory = pluginContext.host.context.homeDirectory;\n      const sessionService = pluginContext.host.context.sessionService;\n      if (!agent || !session?.admitPrompt || !communication || !homeDirectory || !sessionService?.canCommunicate) {\n        throw new Error(\n          'Session delivery requires the headless agent, authenticated session communication, host home directory, and communication policy.',\n        );\n      }\n      const fs = requirePoFs(pluginContext.context);\n      const sqlite = requirePoSqlite(pluginContext.context);\n      const io = BACKGROUND_CONTEXT;\n      const sessionDirectory = path.join(poHomeDirectory(homeDirectory), 'session');\n      const deliveryDirectory = path.join(sessionDirectory, 'delivery');\n      await ensurePrivateDirectory(fs, deliveryDirectory, io);\n      const peerConfig = await readSessionPeerConfigAsync(fs, homeDirectory, io);\n      const peerCommunication = createPeerCommunication({ local: communication, config: peerConfig });\n      const remotePeerIsGranted = (peerKey: string): boolean => {\n        const peer = parseRemoteSessionReference(peerKey);\n        return (\n          peer !== undefined &&\n          peerConfig?.peers.some(\n            (candidate) =>\n              candidate.hostId === peer.hostId && candidate.allowedSessionIds.includes(agent.context.sessionId),\n          ) === true\n        );\n      };\n      const fallbackAuthorization = (peerKey: string): boolean =>\n        sessionService.canCommunicate?.(agent.context.sessionId, peerKey) === true || remotePeerIsGranted(peerKey);\n      const groups = peerConfig\n        ? await createSessionGroupStore({\n            database: await sqlite.open(path.join(sessionDirectory, 'groups.sqlite'), io),\n          })\n        : undefined;\n      const localHostId = peerConfig?.hostId;\n      const selfReference = localHostId ? peerSessionReference(localHostId, agent.context.sessionId) : undefined;\n      const groupAuthorization =\n        groups && selfReference && localHostId\n          ? createSessionGroupDeliveryAuthorizer({\n              selfReference,\n              groups,\n              peerReference: (peerKey) =>\n                parseRemoteSessionReference(peerKey) === undefined\n                  ? peerSessionReference(localHostId, peerKey)\n                  : peerKey,\n              fallback: fallbackAuthorization,\n            })\n          : undefined;\n      let delivery: Awaited<ReturnType<typeof provideSessionDeliveryService>>;\n      try {\n        delivery = await provideSessionDeliveryService(context, {\n          database: await sqlite.open(path.join(deliveryDirectory, `${agent.context.sessionId}.sqlite`), io),\n          recipientKey: agent.context.sessionId,\n          communication: peerCommunication,\n          authorizePeer: (peerKey, metadata) =>\n            groupAuthorization ? groupAuthorization(peerKey, metadata) : fallbackAuthorization(peerKey),\n          admitPrompt: (prompt, admission, requestId, metadata) => {\n            if (!metadata.customType) return session.admitPrompt!(prompt, admission, undefined, requestId);\n            if (!session.admitMessage) throw new Error('The session cannot admit a custom delivery.');\n            return session.admitMessage(\n              {\n                type: metadata.customType,\n                text: prompt,\n                display: true,\n                details: metadata.customDetails === undefined ? undefined : JSON.parse(metadata.customDetails),\n              },\n              admission === 'steer' ? 'steer' : 'followUp',\n              requestId,\n            );\n          },\n        });\n      } catch (error) {\n        await groups?.close();\n        throw error;\n      }\n      const { service, close: closeDelivery } = delivery;\n      const unprovide: (() => void)[] = [];\n      if (groups && selfReference && peerConfig) {\n        const directory = createSessionDirectory({\n          authorizeDiscovery: async (caller, subject) => {\n            const reference = peerSessionReference(subject.hostId, subject.sessionId);\n            const permitted = (await groups.groupsFor(caller)).some((group) => group.members.includes(reference));\n            return permitted ? { capabilities: ['message'] } : undefined;\n          },\n        });\n        for (const peer of peerConfig.peers)\n          for (const sessionId of peer.allowedSessionIds)\n            directory.observe({\n              hostId: peer.hostId,\n              sessionId,\n              hostIncarnation: 'unknown',\n              sessionIncarnation: 'unknown',\n              sequence: 0,\n              observedAt: 0,\n              staleAfterMs: 0,\n              deliveryTarget: peerSessionReference(peer.hostId, sessionId),\n              reachability: 'unknown',\n              runtime: 'unknown',\n              activity: 'unknown',\n              voice: { eligible: 'unknown', readiness: 'unknown' },\n            });\n        unprovide.push(\n          context.provide(\n            PO_SESSION_INTERCOM_SERVICE,\n            createSessionIntercom({ selfReference, directory, groups, delivery: service }),\n          ),\n        );\n      }\n      const unregister = registerSessionPeerInbox(agent.context.sessionId, (sourceKey, kind, payload) =>\n        service.receive?.(sourceKey, kind, payload),\n      );\n      return async () => {\n        unregister();\n        for (const release of unprovide.reverse()) release();\n        await closeDelivery();\n        await groups?.close();\n      };\n    },\n  ],\n}));\n","import path from 'node:path';\n\nimport type { PoApi, PoApiHandler } from '@agimon-ai/po-core/packageApi';\nimport { BACKGROUND_CONTEXT, type PoSqliteService, type FileSystem } from '@agimon-ai/po-core/platform';\n\nimport { deliverSessionPeerEnvelope } from '../peerInbox';\nimport {\n  PEER_REPLAY_DATABASE_FILE,\n  createPeerReplayGuardAsync,\n  ensurePrivateDirectory,\n  parseSessionPeerEnvelope,\n  peerSessionReference,\n  readSessionPeerConfigAsync,\n  sessionPeerConfigPath,\n  verifyPeerRequest,\n  type SessionPeerConfig,\n  type SessionPeerReplayGuardAsync,\n} from '../peerTransport';\n\nconst MAX_BODY_BYTES = 64 * 1024;\nconst DELIVERY_TYPES = new Set(['po/session-delivery/envelope', 'po/session-delivery/ack']);\n\nfunction response(status: number, error: string): Response {\n  return Response.json({ error }, { status });\n}\n\ninterface PeerInboxState {\n  readonly config: SessionPeerConfig | undefined;\n  readonly replay: SessionPeerReplayGuardAsync | undefined;\n}\n\n/** Narrow HMAC-authenticated endpoint that a trusted tunnel may forward without device authentication. */\nexport function createPeerInboxApi(platform: { readonly fs: FileSystem; readonly sqlite: PoSqliteService }): PoApi {\n  return {\n    basePath: 'session-peer',\n    start(context): PoApiHandler {\n      const homeDirectory = context.homeDirectory;\n      // Opened once on first use: the handler starts synchronously, the platform services are async.\n      let opened: Promise<PeerInboxState> | undefined;\n      const open = (): Promise<PeerInboxState> =>\n        (opened ??= (async () => {\n          if (homeDirectory === undefined) return { config: undefined, replay: undefined };\n          const config = await readSessionPeerConfigAsync(platform.fs, homeDirectory, BACKGROUND_CONTEXT);\n          const file = path.join(path.dirname(sessionPeerConfigPath(homeDirectory)), PEER_REPLAY_DATABASE_FILE);\n          await ensurePrivateDirectory(platform.fs, path.dirname(file), BACKGROUND_CONTEXT);\n          const replay = await createPeerReplayGuardAsync(await platform.sqlite.open(file, BACKGROUND_CONTEXT));\n          return { config, replay };\n        })().catch((error: unknown) => {\n          // A failed open is retried by the next request rather than cached.\n          opened = undefined;\n          throw error;\n        }));\n      return {\n        async fetch(request) {\n          if (request.method !== 'POST' || new URL(request.url).pathname !== '/inbox')\n            return response(404, 'Not found.');\n          const { config, replay } = await open();\n          if (!config) return response(503, 'Paired Session delivery is not configured.');\n          const length = request.headers.get('content-length');\n          if (length !== null && (!/^\\d+$/u.test(length) || Number(length) > MAX_BODY_BYTES))\n            return response(413, 'Request body is too large.');\n          const body = await request.text();\n          if (Buffer.byteLength(body) > MAX_BODY_BYTES) return response(413, 'Request body is too large.');\n          const peer = verifyPeerRequest(config, request, body);\n          if (!peer) return response(401, 'Paired Session request is unauthorized.');\n          if (!(await replay?.admit(request))) return response(409, 'Paired Session request was already received.');\n          let parsed: unknown;\n          try {\n            parsed = JSON.parse(body) as unknown;\n          } catch {\n            return response(400, 'Paired Session request is malformed.');\n          }\n          const envelope = parseSessionPeerEnvelope(parsed);\n          if (!envelope || !DELIVERY_TYPES.has(envelope.type))\n            return response(400, 'Paired Session envelope is invalid.');\n          if (!peer.allowedSessionIds.includes(envelope.targetSessionId))\n            return response(403, 'Peer is not granted this session.');\n          const state = await deliverSessionPeerEnvelope(\n            envelope.targetSessionId,\n            peerSessionReference(peer.hostId, envelope.sourceSessionId),\n            envelope.type,\n            envelope.payload,\n          );\n          return state === undefined\n            ? response(404, 'Target Session is unavailable.')\n            : Response.json({ accepted: true, state }, { status: 202 });\n        },\n        async close() {\n          const state = await opened?.catch(() => undefined);\n          await state?.replay?.close();\n        },\n      };\n    },\n  };\n}\n","import { defineRoute } from '@agimon-ai/po-core/extensionFile';\nimport { requirePoFs, requirePoSqlite } from '@agimon-ai/po-core/platform';\nimport type { PoServerPluginContext } from '@agimon-ai/po-core/serverPlugin';\n\nimport { createPeerInboxApi } from '../../../../services/peerInboxApi';\n\nexport default defineRoute(({ context }: PoServerPluginContext) =>\n  createPeerInboxApi({ fs: requirePoFs(context), sqlite: requirePoSqlite(context) }),\n);\n","// Generated by @agimon-ai/po-build. Do not edit by hand.\nimport { defineServerPlugin, type PoServerSessionPlugin } from '@agimon-ai/po-core/serverPlugin';\nimport { composeServerProviderOverrides } from '@agimon-ai/po-core/serverPlugin';\nimport { composeRootHooks, composeRootInjects } from '@agimon-ai/po-core/extensionFile';\n\nimport rootSession from '../src/extensions/workspaces/sessions/(backend)/root.server';\nimport apiRoute from '../src/extensions/(backend)/api/session-peer/route.server';\n\ntype Factory<T, C> = (context: C) => T;\nconst at = <T, C>(value: T | Factory<T, C>, context: C): T =>\n  typeof value === 'function' ? (value as Factory<T, C>)(context) : value;\n\nexport const serverPlugin = defineServerPlugin({\n  name: '@agimon-ai/po-session',\n  providerOverrides: composeServerProviderOverrides(rootSession),\n  injects: composeRootInjects({ session: [rootSession] }),\n  global: (context) => ({\n    get api(): PoServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n  }),\n  workspace: (context) => ({\n    get api(): PoServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n  }),\n  session: async (context) => {\n    const scopeSession = await context.scopeRoot('session', rootSession, context);\n    return {\n      ...composeRootHooks(scopeSession),\n      get api(): PoServerSessionPlugin['api'] { return [at(apiRoute, context)]; },\n      services: [...(scopeSession.services ?? [])],\n      get activities(): PoServerSessionPlugin['activities'] { return [...(scopeSession.activities ?? [])]; },\n    };\n  },\n});\n\nexport default serverPlugin;\n"],"mappings":";;;;;;;AAQA,MAAM,0BAAU,IAAI,IAA8B;;;;;;;AAQlD,SAAgB,yBAAyB,WAAmB,OAAqC;CAC/F,QAAQ,IAAI,WAAW,KAAK;CAC5B,aAAa;EACX,IAAI,QAAQ,IAAI,SAAS,MAAM,OAAO,QAAQ,OAAO,SAAS;CAChE;AACF;AAEA,eAAsB,2BACpB,iBACA,WACA,MACA,SACkD;CAClD,OAAO,QAAQ,IAAI,eAAe,CAAC,GAAG,WAAW,MAAM,OAAO;AAChE;;;ACLA,IAAA,sBAAe,YAAY,mBAA0C;CACnE,OAAO,KAAA;CACP,UAAU,CACR,8BACA,OAAO,YAAY;EACjB,MAAM,QAAQ,cAAc;EAC5B,MAAM,UAAU,OAAO,QAAQ;EAC/B,MAAM,gBAAgB,cAAc,KAAK,QAAQ;EACjD,MAAM,gBAAgB,cAAc,KAAK,QAAQ;EACjD,MAAM,iBAAiB,cAAc,KAAK,QAAQ;EAClD,IAAI,CAAC,SAAS,CAAC,SAAS,eAAe,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,gBAAgB,gBAC1F,MAAM,IAAI,MACR,mIACF;EAEF,MAAM,KAAK,YAAY,cAAc,OAAO;EAC5C,MAAM,SAAS,gBAAgB,cAAc,OAAO;EACpD,MAAM,KAAK;EACX,MAAM,mBAAmB,KAAK,KAAK,gBAAgB,aAAa,GAAG,SAAS;EAC5E,MAAM,oBAAoB,KAAK,KAAK,kBAAkB,UAAU;EAChE,MAAM,uBAAuB,IAAI,mBAAmB,EAAE;EACtD,MAAM,aAAa,MAAM,2BAA2B,IAAI,eAAe,EAAE;EACzE,MAAM,oBAAoB,wBAAwB;GAAE,OAAO;GAAe,QAAQ;EAAW,CAAC;EAC9F,MAAM,uBAAuB,YAA6B;GACxD,MAAM,OAAO,4BAA4B,OAAO;GAChD,OACE,SAAS,KAAA,KACT,YAAY,MAAM,MACf,cACC,UAAU,WAAW,KAAK,UAAU,UAAU,kBAAkB,SAAS,MAAM,QAAQ,SAAS,CACpG,MAAM;EAEV;EACA,MAAM,yBAAyB,YAC7B,eAAe,iBAAiB,MAAM,QAAQ,WAAW,OAAO,MAAM,QAAQ,oBAAoB,OAAO;EAC3G,MAAM,SAAS,aACX,MAAM,wBAAwB,EAC5B,UAAU,MAAM,OAAO,KAAK,KAAK,KAAK,kBAAkB,eAAe,GAAG,EAAE,EAC9E,CAAC,IACD,KAAA;EACJ,MAAM,cAAc,YAAY;EAChC,MAAM,gBAAgB,cAAc,qBAAqB,aAAa,MAAM,QAAQ,SAAS,IAAI,KAAA;EACjG,MAAM,qBACJ,UAAU,iBAAiB,cACvB,qCAAqC;GACnC;GACA;GACA,gBAAgB,YACd,4BAA4B,OAAO,MAAM,KAAA,IACrC,qBAAqB,aAAa,OAAO,IACzC;GACN,UAAU;EACZ,CAAC,IACD,KAAA;EACN,IAAI;EACJ,IAAI;GACF,WAAW,MAAM,8BAA8B,SAAS;IACtD,UAAU,MAAM,OAAO,KAAK,KAAK,KAAK,mBAAmB,GAAG,MAAM,QAAQ,UAAU,QAAQ,GAAG,EAAE;IACjG,cAAc,MAAM,QAAQ;IAC5B,eAAe;IACf,gBAAgB,SAAS,aACvB,qBAAqB,mBAAmB,SAAS,QAAQ,IAAI,sBAAsB,OAAO;IAC5F,cAAc,QAAQ,WAAW,WAAW,aAAa;KACvD,IAAI,CAAC,SAAS,YAAY,OAAO,QAAQ,YAAa,QAAQ,WAAW,KAAA,GAAW,SAAS;KAC7F,IAAI,CAAC,QAAQ,cAAc,MAAM,IAAI,MAAM,6CAA6C;KACxF,OAAO,QAAQ,aACb;MACE,MAAM,SAAS;MACf,MAAM;MACN,SAAS;MACT,SAAS,SAAS,kBAAkB,KAAA,IAAY,KAAA,IAAY,KAAK,MAAM,SAAS,aAAa;KAC/F,GACA,cAAc,UAAU,UAAU,YAClC,SACF;IACF;GACF,CAAC;EACH,SAAS,OAAO;GACd,MAAM,QAAQ,MAAM;GACpB,MAAM;EACR;EACA,MAAM,EAAE,SAAS,OAAO,kBAAkB;EAC1C,MAAM,YAA4B,CAAC;EACnC,IAAI,UAAU,iBAAiB,YAAY;GACzC,MAAM,YAAY,uBAAuB,EACvC,oBAAoB,OAAO,QAAQ,YAAY;IAC7C,MAAM,YAAY,qBAAqB,QAAQ,QAAQ,QAAQ,SAAS;IAExE,QADmB,MAAM,OAAO,UAAU,MAAM,EAAA,CAAG,MAAM,UAAU,MAAM,QAAQ,SAAS,SAAS,CACpF,IAAI,EAAE,cAAc,CAAC,SAAS,EAAE,IAAI,KAAA;GACrD,EACF,CAAC;GACD,KAAK,MAAM,QAAQ,WAAW,OAC5B,KAAK,MAAM,aAAa,KAAK,mBAC3B,UAAU,QAAQ;IAChB,QAAQ,KAAK;IACb;IACA,iBAAiB;IACjB,oBAAoB;IACpB,UAAU;IACV,YAAY;IACZ,cAAc;IACd,gBAAgB,qBAAqB,KAAK,QAAQ,SAAS;IAC3D,cAAc;IACd,SAAS;IACT,UAAU;IACV,OAAO;KAAE,UAAU;KAAW,WAAW;IAAU;GACrD,CAAC;GACL,UAAU,KACR,QAAQ,QACN,6BACA,sBAAsB;IAAE;IAAe;IAAW;IAAQ,UAAU;GAAQ,CAAC,CAC/E,CACF;EACF;EACA,MAAM,aAAa,yBAAyB,MAAM,QAAQ,YAAY,WAAW,MAAM,YACrF,QAAQ,UAAU,WAAW,MAAM,OAAO,CAC5C;EACA,OAAO,YAAY;GACjB,WAAW;GACX,KAAK,MAAM,WAAW,UAAU,QAAQ,GAAG,QAAQ;GACnD,MAAM,cAAc;GACpB,MAAM,QAAQ,MAAM;EACtB;CACF,CACF;AACF,EAAE;;;ACnIF,MAAM,iBAAiB;AACvB,MAAM,iCAAiB,IAAI,IAAI,CAAC,gCAAgC,yBAAyB,CAAC;AAE1F,SAAS,SAAS,QAAgB,OAAyB;CACzD,OAAO,SAAS,KAAK,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;AAC5C;;AAQA,SAAgB,mBAAmB,UAAgF;CACjH,OAAO;EACL,UAAU;EACV,MAAM,SAAuB;GAC3B,MAAM,gBAAgB,QAAQ;GAE9B,IAAI;GACJ,MAAM,aACH,YAAY,YAAY;IACvB,IAAI,kBAAkB,KAAA,GAAW,OAAO;KAAE,QAAQ,KAAA;KAAW,QAAQ,KAAA;IAAU;IAC/E,MAAM,SAAS,MAAM,2BAA2B,SAAS,IAAI,eAAe,kBAAkB;IAC9F,MAAM,OAAO,KAAK,KAAK,KAAK,QAAQ,sBAAsB,aAAa,CAAC,GAAG,yBAAyB;IACpG,MAAM,uBAAuB,SAAS,IAAI,KAAK,QAAQ,IAAI,GAAG,kBAAkB;IAEhF,OAAO;KAAE;KAAQ,QAAA,MADI,2BAA2B,MAAM,SAAS,OAAO,KAAK,MAAM,kBAAkB,CAAC;IAC5E;GAC1B,EAAA,CAAG,CAAC,CAAC,OAAO,UAAmB;IAE7B,SAAS,KAAA;IACT,MAAM;GACR,CAAC;GACH,OAAO;IACL,MAAM,MAAM,SAAS;KACnB,IAAI,QAAQ,WAAW,UAAU,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,aAAa,UACjE,OAAO,SAAS,KAAK,YAAY;KACnC,MAAM,EAAE,QAAQ,WAAW,MAAM,KAAK;KACtC,IAAI,CAAC,QAAQ,OAAO,SAAS,KAAK,4CAA4C;KAC9E,MAAM,SAAS,QAAQ,QAAQ,IAAI,gBAAgB;KACnD,IAAI,WAAW,SAAS,CAAC,SAAS,KAAK,MAAM,KAAK,OAAO,MAAM,IAAI,iBACjE,OAAO,SAAS,KAAK,4BAA4B;KACnD,MAAM,OAAO,MAAM,QAAQ,KAAK;KAChC,IAAI,OAAO,WAAW,IAAI,IAAI,gBAAgB,OAAO,SAAS,KAAK,4BAA4B;KAC/F,MAAM,OAAO,kBAAkB,QAAQ,SAAS,IAAI;KACpD,IAAI,CAAC,MAAM,OAAO,SAAS,KAAK,yCAAyC;KACzE,IAAI,CAAE,MAAM,QAAQ,MAAM,OAAO,GAAI,OAAO,SAAS,KAAK,8CAA8C;KACxG,IAAI;KACJ,IAAI;MACF,SAAS,KAAK,MAAM,IAAI;KAC1B,QAAQ;MACN,OAAO,SAAS,KAAK,sCAAsC;KAC7D;KACA,MAAM,WAAW,yBAAyB,MAAM;KAChD,IAAI,CAAC,YAAY,CAAC,eAAe,IAAI,SAAS,IAAI,GAChD,OAAO,SAAS,KAAK,qCAAqC;KAC5D,IAAI,CAAC,KAAK,kBAAkB,SAAS,SAAS,eAAe,GAC3D,OAAO,SAAS,KAAK,mCAAmC;KAC1D,MAAM,QAAQ,MAAM,2BAClB,SAAS,iBACT,qBAAqB,KAAK,QAAQ,SAAS,eAAe,GAC1D,SAAS,MACT,SAAS,OACX;KACA,OAAO,UAAU,KAAA,IACb,SAAS,KAAK,gCAAgC,IAC9C,SAAS,KAAK;MAAE,UAAU;MAAM;KAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;IAC9D;IACA,MAAM,QAAQ;KAEZ,OAAM,MADc,QAAQ,YAAY,KAAA,CAAS,EAAA,EACpC,QAAQ,MAAM;IAC7B;GACF;EACF;CACF;AACF;;;ACxFA,IAAA,uBAAe,aAAa,EAAE,cAC5B,mBAAmB;CAAE,IAAI,YAAY,OAAO;CAAG,QAAQ,gBAAgB,OAAO;AAAE,CAAC,CACnF;;;ACCA,MAAM,MAAY,OAA0B,YAC1C,OAAO,UAAU,aAAc,MAAwB,OAAO,IAAI;AAEpE,MAAa,eAAe,mBAAmB;CAC7C,MAAM;CACN,mBAAmB,+BAA+BA,mBAAW;CAC7D,SAAS,mBAAmB,EAAE,SAAS,CAACA,mBAAW,EAAE,CAAC;CACtD,SAAS,aAAa,EACpB,IAAI,MAAoC;EAAE,OAAO,CAAC,GAAGC,sBAAU,OAAO,CAAC;CAAG,EAC5E;CACA,YAAY,aAAa,EACvB,IAAI,MAAoC;EAAE,OAAO,CAAC,GAAGA,sBAAU,OAAO,CAAC;CAAG,EAC5E;CACA,SAAS,OAAO,YAAY;EAC1B,MAAM,eAAe,MAAM,QAAQ,UAAU,WAAWD,qBAAa,OAAO;EAC5E,OAAO;GACL,GAAG,iBAAiB,YAAY;GAChC,IAAI,MAAoC;IAAE,OAAO,CAAC,GAAGC,sBAAU,OAAO,CAAC;GAAG;GAC1E,UAAU,CAAC,GAAI,aAAa,YAAY,CAAC,CAAE;GAC3C,IAAI,aAAkD;IAAE,OAAO,CAAC,GAAI,aAAa,cAAc,CAAC,CAAE;GAAG;EACvG;CACF;AACF,CAAC"}