Module door 

Local door for agents on this node: mail and task operations without ever touching a key.

The node holds its identity key; agents (other users, other processes) do not. This loopback listener accepts POST /door {"op","payload"} from them, signs the call with the node identity and forwards it to C2, which applies the status policy. A node that is neutral, suspended or revoked simply gets “refused” back. The surface is exactly the mail.* and task.* operations.

Functions

serve

session.wake (handled here, never forwarded): {"token","nick","from","event_id","body"}, the letter event m4a’s M4A_LETTER_HOOK emits plus the node’s wake token.