@rynx-ai/daemon 0.1.11-beta.3 → 0.1.11-beta.30

package/dist/daemon-server.js

@@ -17,9 +17,10 @@ import { REMOTE_RUNTIME_CORE_PROTOCOL } from "@rynx-ai/protocol/remote-runtime";
 import { RUNTIME_BROWSER_INSPECT_MAX_MESSAGE_BYTES, RUNTIME_BROWSER_INSPECT_SEMANTIC_CAPABILITY, } from "@rynx-ai/protocol/runtime-browser-inspect";
 import { RUNTIME_BROWSER_SURFACE_SEMANTIC_CAPABILITY } from "@rynx-ai/protocol/runtime-browser-surface";
 import { RUNTIME_EMULATOR_SURFACE_SEMANTIC_CAPABILITY } from "@rynx-ai/protocol/runtime-emulator-surface";
-import { createDaemonRuntimeHost, createDesktopFirstSessionBrowserHost, createRunnerSessionTerminalHost, createSessionRuntimeServices, DesktopBrowserHostAbsentError, DesktopBrowserHostRegistry, DirectRuntimeConnectionHub, DirectRuntimeBrowserInspectHostError, MachineSessionService, MachineSessionServiceFailure, listRuntimeModels, RemoteRuntimeDispatcher, SessionBrowserService, SessionBrowserServiceError, SessionBrowserSurfaceCoordinator, SessionEmulatorService, startServer, startDirectRuntimeServer, } from "@rynx-ai/server";
+import { createDaemonRuntimeHost, createDesktopFirstSessionBrowserHost, createRunnerSessionTerminalHost, createSessionRuntimeServices, DesktopBrowserHostAbsentError, DesktopBrowserHostRegistry, DirectRuntimeConnectionHub, DirectRuntimeBrowserInspectHostError, MachineSessionService, MachineSessionServiceFailure, RemoteRuntimeDispatcher, SessionBrowserService, SessionBrowserServiceError, SessionBrowserSurfaceCoordinator, SessionEmulatorService, startServer, startDirectRuntimeServer, } from "@rynx-ai/server";
+import { authorizeSessionPortalGrant, redeemSessionPortalTicket, } from "./session-portal-grant-store.js";
 import { APP_BROWSER_HOST_BOOTSTRAP_TYPE, AppBrowserHostSupervisor, parseAppBrowserHostLaunchConfig, } from "./app-browser-host-supervisor.js";
-import { buildControlDeps } from "./control-deps.js";
+import { buildControlDeps, listControlAgentModels } from "./control-deps.js";
 import { createBrowserArtifactManagementService } from "./browser-artifact-management.js";
 import { createDaemonBuildStatus } from "./daemon-build-status.js";
 import { MaintenanceLeaseStore } from "./maintenance-lease.js";
@@ -49,7 +50,7 @@ import { SqliteSessionResourceStore } from "./session-resource-store.js";
 import { createSessionFallbackWorkspace, discardSessionFallbackWorkspace, } from "./session-fallback-workspace.js";
 import { SessionBrowserCapabilityStore } from "./session-browser-capability-store.js";
 import { SqliteSessionEmulatorBindingStore } from "./session-emulator-binding-store.js";
-import { sessionRegistry } from "./session-meta-store.js";
+import { sessionBelongsToPlugin, sessionRegistry } from "./session-meta-store.js";
 import { sessionPendingMessageStore } from "./session-pending-message-store.js";
 import { RemoteRuntimeAccessStore } from "./remote-runtime-access-store.js";
 import { DaemonRemoteRuntimeAdmin } from "./remote-runtime-admin.js";
@@ -68,13 +69,7 @@ const require = createRequire(import.meta.url);
 const DAEMON_PACKAGE_VERSION = readDaemonPackageVersion();
 async function resolveSessionExecutionSnapshot(input) {
     return {
-        ...await resolveExecutionSnapshot({
-            ...input,
-            resolveDefaultModel: async (provider) => {
-                const models = await listRuntimeModels(input.config, provider);
-                return models?.data.find((candidate) => candidate.isDefault)?.model;
-            },
-        }),
+        ...await resolveExecutionSnapshot(input),
         pluginSkills: snapshotEnabledPluginSkillSources(),
     };
 }
@@ -280,7 +275,7 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
         const directConfig = directHostingSupported
             ? await loadDirectConfig()
             : undefined;
-        const control = buildControlDeps();
+        const control = buildControlDeps(appConfig);
         const installationIdentity = await loadOrCreateDaemonInstallationIdentity();
         const directEncryptionIdentity = directHostingSupported
             ? await loadOrCreateDaemonDirectRuntimeEncryptionIdentity()
@@ -304,10 +299,13 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                 "semantic.session.interrupt.v1",
                 "semantic.session.agent-options.v1",
                 "semantic.session.launch-options.v2",
+                "semantic.session.execution-settings.v1",
                 "semantic.session.create.v1",
                 "semantic.session.fork.v1",
                 "semantic.session.message.v1",
-                "semantic.session.resources.v1",
+                "semantic.session.resources.v2",
+                "semantic.session.files.v1",
+                "semantic.session.workspace-files.v1",
                 "semantic.session.message-queue.v1",
                 "semantic.session.delete.v1",
                 "semantic.session.interaction.v1",
@@ -410,7 +408,7 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                                 ...((selection.provider || (!selection.agent && !selection.config))
                                     ? { provider: selection.provider ?? appConfig.DEFAULT_RUNTIME }
                                     : {}),
-                                ...(selection.model ? { model: selection.model } : {}),
+                                ...(selection.model !== undefined ? { model: selection.model } : {}),
                                 ...(selection.reasoningEffort
                                     ? { reasoningEffort: selection.reasoningEffort }
                                     : {}),
@@ -419,6 +417,11 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                         };
                     },
                 },
+                sessionExecution: {
+                    update: async (input) => {
+                        await machineSessions.updateExecutionSettings(input);
+                    },
+                },
                 sessionFork: (input) => machineSessions.fork(input),
                 admissionOpen,
                 admissionReserve: reserveAdmission,
@@ -446,6 +449,7 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
             sessionContextProvider: browserRunnerSessionContexts,
             admissionOpen,
             admissionReserve: reserveAdmission,
+            materializeGeneratedImage: (input) => sessionResources.materializeGeneratedImage(input),
             onMirrorError: (error, sessionId) => warn(`Session mirror failed for ${sessionId}: ${error instanceof Error ? error.message : String(error)}`),
         });
         const sessionBrowserHost = appBrowserHostSupervisor
@@ -556,14 +560,16 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
             forks: sessionForks,
             execution: {
                 runtime: sessionRuntimeServices.conversationRuntime,
-                resolve: ({ agent, provider, model, reasoningEffort, cwd }) => resolveSessionExecutionSnapshot({
+                resolve: ({ agent, provider, model, reasoningEffort, permissionPreset, cwd }) => resolveSessionExecutionSnapshot({
                     config: appConfig,
                     ...(agent ? { agentName: agent } : {}),
                     ...(provider ? { provider } : {}),
                     ...(model ? { model } : {}),
                     ...(reasoningEffort ? { reasoningEffort } : {}),
+                    ...(permissionPreset ? { permissionPreset } : {}),
                     cwd,
                 }),
+                listModels: (provider) => listControlAgentModels(appConfig, provider),
                 runner: sessionRuntimeServices.runnerManager,
             },
             workspace: {
@@ -794,6 +800,11 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                     registry: desktopBrowserHosts,
                     daemonInstanceId,
                 },
+                sessionPortalAuthorization: {
+                    redeem: redeemSessionPortalTicket,
+                    authorize: authorizeSessionPortalGrant,
+                    ownsSession: sessionBelongsToPlugin,
+                },
             });
             baseShutdown = server.shutdown.bind(server);
             if (directConfig && directEncryptionIdentity) {

package/dist/db.d.ts

@@ -1,5 +1,5 @@
-import Database from "better-sqlite3";
+import { DatabaseSync } from "node:sqlite";
 /** Absolute path to the SQLite file (override via `RYNX_DB`, else `~/.rynx/rynx.db`). */
 export declare function dbPath(): string;
 /** Open (or reuse) the database at the current path, migrating + importing on first open. */
-export declare function db(): Database.Database;
+export declare function db(): DatabaseSync;

package/dist/db.js

@@ -1,9 +1,11 @@
 /**
  * `~/.rynx/rynx.db` — the daemon's SQLite store. Concerns kept apart:
- *  - `plugin_installations` — source-qualified manifests, capabilities, and immutable packages.
+ *  - `plugin_installations` — source-qualified manifests and immutable packages.
  *  - `plugin_marketplaces` — catalog registrations; catalog data is never executable.
  *  - `plugin_session_launch_operations` — durable idempotency/tombstones.
  *  - `control_links` — generic, one-use links to the local session console.
+ *  - `session_portal_tickets` / `session_portal_grants` — hashed, scoped,
+ *    browser Session Portal authorization.
  *  - `runtime_pairing_claims` / `runtime_client_grants` — one-use enrollment
  *    claims and the durable client identities they issue for direct runtimes.
  *  - `runtime_targets` / `runtime_direct_routes` / `runtime_pending_enrollments`
@@ -16,8 +18,9 @@
  */
 import { chmodSync, mkdirSync } from "node:fs";
 import { dirname, isAbsolute, join, resolve } from "node:path";
+import { DatabaseSync } from "node:sqlite";
 import { rynxHome } from "@rynx-ai/core";
-import Database from "better-sqlite3";
+import { transaction } from "./sqlite.js";
 const connections = new Map();
 /** Absolute path to the SQLite file (override via `RYNX_DB`, else `~/.rynx/rynx.db`). */
 export function dbPath() {
@@ -34,9 +37,7 @@ export function db() {
     if (cached)
         return cached;
     mkdirSync(dirname(path), { recursive: true });
-    const conn = new Database(path);
-    conn.pragma("busy_timeout = 5000");
-    conn.pragma("foreign_keys = ON");
+    const conn = new DatabaseSync(path, { timeout: 5000, enableForeignKeyConstraints: true });
     migrate(conn);
     // Plugin state and daemon credentials are private.
     try {
@@ -86,7 +87,6 @@ function migrate(conn) {
       install_path   TEXT NOT NULL,
       manifest       TEXT NOT NULL,
       integrity      TEXT NOT NULL,
-      capabilities   TEXT NOT NULL,
       runtime_state  TEXT,
       runtime_error  TEXT,
       UNIQUE(marketplace_id, plugin_id)
@@ -109,8 +109,9 @@ function migrate(conn) {
       session_id       TEXT NOT NULL,
       client_upload_id TEXT NOT NULL,
       upload_id        TEXT NOT NULL UNIQUE,
+      kind             TEXT NOT NULL DEFAULT 'image' CHECK(kind IN ('image', 'file')),
       filename         TEXT NOT NULL,
-      media_type       TEXT NOT NULL CHECK(media_type IN ('image/png', 'image/jpeg', 'image/webp')),
+      media_type       TEXT NOT NULL,
       byte_length      INTEGER NOT NULL,
       uploaded_bytes   INTEGER NOT NULL DEFAULT 0,
       sha256           TEXT,
@@ -141,6 +142,9 @@ function migrate(conn) {
           'failed_not_started'
         )),
       error            TEXT,
+      response_id      TEXT,
+      message_item_id  TEXT,
+      execution_snapshot TEXT,
       created_at       INTEGER NOT NULL,
       updated_at       INTEGER NOT NULL,
       PRIMARY KEY(session_id, client_message_id)
@@ -245,6 +249,39 @@ function migrate(conn) {
     );
     CREATE INDEX IF NOT EXISTS idx_control_links_expires
       ON control_links(expires_at);
+    CREATE TABLE IF NOT EXISTS session_portal_tickets (
+      ticket_hash TEXT PRIMARY KEY,
+      plugin_id   TEXT NOT NULL,
+      scope       TEXT NOT NULL CHECK(scope IN ('plugin_sessions', 'single_session')),
+      access      TEXT NOT NULL CHECK(access IN ('read_only', 'read_write')),
+      session_id  TEXT,
+      created_at  TEXT NOT NULL,
+      expires_at  TEXT NOT NULL,
+      used_at     TEXT,
+      CHECK(
+        (scope = 'plugin_sessions' AND session_id IS NULL)
+        OR (scope = 'single_session' AND session_id IS NOT NULL)
+      )
+    );
+    CREATE INDEX IF NOT EXISTS idx_session_portal_tickets_expires
+      ON session_portal_tickets(expires_at);
+    CREATE TABLE IF NOT EXISTS session_portal_grants (
+      portal_id   TEXT PRIMARY KEY,
+      secret_hash TEXT NOT NULL,
+      plugin_id   TEXT NOT NULL,
+      scope       TEXT NOT NULL CHECK(scope IN ('plugin_sessions', 'single_session')),
+      access      TEXT NOT NULL CHECK(access IN ('read_only', 'read_write')),
+      session_id  TEXT,
+      created_at  TEXT NOT NULL,
+      expires_at  TEXT NOT NULL,
+      revoked_at  TEXT,
+      CHECK(
+        (scope = 'plugin_sessions' AND session_id IS NULL)
+        OR (scope = 'single_session' AND session_id IS NOT NULL)
+      )
+    );
+    CREATE INDEX IF NOT EXISTS idx_session_portal_grants_expires
+      ON session_portal_grants(expires_at);
     CREATE TABLE IF NOT EXISTS runtime_pairing_claims (
       claim_id                   TEXT PRIMARY KEY,
       secret_hash                TEXT NOT NULL,
@@ -308,7 +345,8 @@ function migrate(conn) {
     CREATE INDEX IF NOT EXISTS idx_runtime_pending_enrollments_expires
       ON runtime_pending_enrollments(expires_at);
   `);
-    migratePluginCapabilities(conn);
+    migrateSessionResourceFiles(conn);
+    migratePluginCapabilityDeclarations(conn);
     migrateSessionSnapshots(conn);
     // Breaking plugin-runtime cutover: remove obsolete core-owned state.
     conn.exec(`
@@ -318,6 +356,92 @@ function migrate(conn) {
     addColumnIfMissing(conn, "plugin_marketplaces", "built_in", "INTEGER NOT NULL DEFAULT 0");
     addColumnIfMissing(conn, "sessions", "forked_from_session_id", "TEXT");
     addColumnIfMissing(conn, "plugin_session_launch_operations", "raw_request_hash", "TEXT");
+    addColumnIfMissing(conn, "session_message_operations", "response_id", "TEXT");
+    addColumnIfMissing(conn, "session_message_operations", "message_item_id", "TEXT");
+    addColumnIfMissing(conn, "session_message_operations", "execution_snapshot", "TEXT");
+}
+/** Rebuild the original image-only table without losing committed resources. */
+function migrateSessionResourceFiles(conn) {
+    const columns = conn
+        .prepare("PRAGMA table_info(session_resources)")
+        .all();
+    if (columns.some((column) => column.name === "kind"))
+        return;
+    conn.exec("PRAGMA foreign_keys = OFF");
+    try {
+        transaction(conn, () => {
+            conn.exec(`
+        ALTER TABLE session_message_operation_resources
+          RENAME TO session_message_operation_resources_image_v1;
+        ALTER TABLE session_resources RENAME TO session_resources_image_v1;
+
+        CREATE TABLE session_resources (
+          id               TEXT PRIMARY KEY,
+          session_id       TEXT NOT NULL,
+          client_upload_id TEXT NOT NULL,
+          upload_id        TEXT NOT NULL UNIQUE,
+          kind             TEXT NOT NULL DEFAULT 'image' CHECK(kind IN ('image', 'file')),
+          filename         TEXT NOT NULL,
+          media_type       TEXT NOT NULL,
+          byte_length      INTEGER NOT NULL,
+          uploaded_bytes   INTEGER NOT NULL DEFAULT 0,
+          sha256           TEXT,
+          width            INTEGER,
+          height           INTEGER,
+          state            TEXT NOT NULL DEFAULT 'uploading'
+            CHECK(state IN ('uploading', 'staged', 'committed')),
+          message_item_id  TEXT,
+          created_at       INTEGER NOT NULL,
+          committed_at     INTEGER,
+          UNIQUE(session_id, client_upload_id)
+        );
+        INSERT INTO session_resources (
+          id, session_id, client_upload_id, upload_id, kind, filename, media_type,
+          byte_length, uploaded_bytes, sha256, width, height, state,
+          message_item_id, created_at, committed_at
+        )
+        SELECT
+          id, session_id, client_upload_id, upload_id, 'image', filename, media_type,
+          byte_length, uploaded_bytes, sha256, width, height, state,
+          message_item_id, created_at, committed_at
+        FROM session_resources_image_v1;
+
+        CREATE TABLE session_message_operation_resources (
+          session_id        TEXT NOT NULL,
+          client_message_id TEXT NOT NULL,
+          resource_id       TEXT NOT NULL UNIQUE REFERENCES session_resources(id) ON DELETE CASCADE,
+          PRIMARY KEY(session_id, client_message_id, resource_id),
+          FOREIGN KEY(session_id, client_message_id)
+            REFERENCES session_message_operations(session_id, client_message_id)
+            ON DELETE CASCADE
+        );
+        INSERT INTO session_message_operation_resources
+        SELECT * FROM session_message_operation_resources_image_v1;
+
+        DROP TABLE session_message_operation_resources_image_v1;
+        DROP TABLE session_resources_image_v1;
+        CREATE INDEX idx_session_resources_session
+          ON session_resources(session_id, created_at);
+        CREATE INDEX idx_session_resources_message
+          ON session_resources(message_item_id);
+      `);
+        })();
+    }
+    finally {
+        conn.exec("PRAGMA foreign_keys = ON");
+    }
+}
+/** Remove the inert permission-declaration columns left by older installations. */
+function migratePluginCapabilityDeclarations(conn) {
+    const columns = conn
+        .prepare("PRAGMA table_info(plugin_installations)")
+        .all();
+    const names = new Set(columns.map((column) => column.name));
+    for (const legacyColumn of ["capabilities", "grants"]) {
+        if (names.has(legacyColumn)) {
+            conn.exec(`ALTER TABLE plugin_installations DROP COLUMN ${legacyColumn}`);
+        }
+    }
 }
 /**
  * Breaking Session cutover: the previous rows contain mutable Agent/Provider
@@ -330,7 +454,7 @@ function migrateSessionSnapshots(conn) {
     const names = new Set(columns.map((column) => column.name));
     if (names.has("workspace") && names.has("execution"))
         return;
-    conn.transaction(() => {
+    transaction(conn, () => {
         conn.exec(`
       INSERT OR IGNORE INTO session_snapshot_cleanup (session_id)
       SELECT id FROM sessions;
@@ -358,18 +482,6 @@ function migrateSessionSnapshots(conn) {
     `);
     }).immediate();
 }
-function migratePluginCapabilities(conn) {
-    const columns = conn
-        .prepare("PRAGMA table_info(plugin_installations)")
-        .all();
-    if (columns.some((column) => column.name === "capabilities"))
-        return;
-    if (columns.some((column) => column.name === "grants")) {
-        conn.exec("ALTER TABLE plugin_installations RENAME COLUMN grants TO capabilities");
-        return;
-    }
-    conn.exec("ALTER TABLE plugin_installations ADD COLUMN capabilities TEXT NOT NULL DEFAULT '[]'");
-}
 /** Idempotently add a column to an existing table (no-op if already present). */
 function addColumnIfMissing(conn, table, column, ddl) {
     const cols = conn.prepare(`PRAGMA table_info(${table})`).all();

package/dist/lifecycle.d.ts

@@ -4,6 +4,7 @@ export interface StandaloneDaemonLaunchContext {
     builtinSkillsDir: string;
     cliVersion: string;
     productVersion: string;
+    tmuxBin?: string;
 }
 export declare function startDaemon(options: {
     force: boolean;

package/dist/lifecycle.js

@@ -11,6 +11,9 @@ export function startDaemon(options) {
             RYNX_DISTRIBUTION: "standalone",
             RYNX_PRODUCT_VERSION: options.context.productVersion,
             RYNX_DAEMON_LIFECYCLE: "standalone",
+            // An empty value explicitly disables PATH fallback when the optional
+            // platform package is missing, while keeping the control plane runnable.
+            RYNX_TMUX_BIN: options.context.tmuxBin ?? "",
         },
     });
 }

package/dist/migrations/cleanup-legacy-sessions.js

@@ -20,6 +20,7 @@ import { mkdirSync, readFileSync, renameSync, writeFileSync, } from "node:fs";
 import path from "node:path";
 import { rynxHome } from "@rynx-ai/core";
 import { db } from "../db.js";
+import { transaction } from "../sqlite.js";
 /** Mirrors the daemon runtime store's default resolution. */
 function defaultProxyDir() {
     return path.join(rynxHome(), ".codex-proxy");
@@ -46,9 +47,9 @@ export function cleanupLegacySessions(opts = {}) {
     let deletedLogRows = 0;
     let deletedSessions = 0;
     let prunedStoreEntries = 0;
-    conn.transaction(() => {
-        deletedLogRows = conn.prepare(`DELETE FROM session_items WHERE ${LEGACY_LOG}`).run().changes;
-        deletedSessions = conn.prepare(`DELETE FROM sessions WHERE ${LEGACY_META}`).run().changes;
+    transaction(conn, () => {
+        deletedLogRows = Number(conn.prepare(`DELETE FROM session_items WHERE ${LEGACY_LOG}`).run().changes);
+        deletedSessions = Number(conn.prepare(`DELETE FROM sessions WHERE ${LEGACY_META}`).run().changes);
     })();
     // The runtime store is daemon-owned. Plugin routing stores remain private to
     // their plugins and are never inspected by this migration.

package/dist/plugin-cli.d.ts

@@ -20,6 +20,16 @@ export interface PluginCliCommandResult {
         stderrTruncated: boolean;
     };
 }
+export interface InstalledPluginListItem {
+    id: string;
+    version: string;
+    source: "local" | "git";
+    state: "enabled" | "disabled";
+}
+/** Read the durable installed-plugin inventory without contacting the daemon. */
+export declare function listInstalledPlugins(): InstalledPluginListItem[];
+/** Render manifest-declared command help without executing plugin code. */
+export declare function installedPluginCommandUsage(pluginId: string): string;
 /** Execute one statically declared, language-neutral plugin command. */
 export declare function runPluginCliCommand(pluginId: string, args: readonly string[], options?: RunPluginCliOptions): Promise<PluginCliCommandResult>;
 export declare function pluginCommandUsage(record: RunnablePluginRecord): string;

package/dist/plugin-cli.js

@@ -3,12 +3,29 @@ import { mkdirSync, realpathSync, statSync } from "node:fs";
 import path from "node:path";
 import { createPluginCliInvocationLeaseId, removePluginRuntimeLease, writePluginRuntimeLease, } from "@rynx-ai/plugin-sdk";
 import { db } from "./db.js";
+import { transaction } from "./sqlite.js";
 import { pluginDataDir, pluginRuntimeCacheDir } from "./plugin-installer.js";
 import { validatePluginPackageSnapshot } from "./plugin-package.js";
-import { getPlugin } from "./plugin-store.js";
+import { getPlugin, listPlugins, } from "./plugin-store.js";
 import { loadOrCreateDaemonInstallationIdentitySync } from "./installation-id.js";
 const DEFAULT_TERMINATION_GRACE_MS = 2_000;
 const MAX_TERMINATION_GRACE_MS = 30_000;
+/** Read the durable installed-plugin inventory without contacting the daemon. */
+export function listInstalledPlugins() {
+    return listPlugins().map((record) => ({
+        id: record.canonicalId,
+        version: record.version,
+        source: record.source,
+        state: record.enabled ? "enabled" : "disabled",
+    }));
+}
+/** Render manifest-declared command help without executing plugin code. */
+export function installedPluginCommandUsage(pluginId) {
+    const record = getPlugin(pluginId);
+    if (!record)
+        throw new Error(`plugin "${pluginId}" is not installed`);
+    return pluginCommandUsage(record);
+}
 /** Execute one statically declared, language-neutral plugin command. */
 export async function runPluginCliCommand(pluginId, args, options = {}) {
     const hostEnv = options.env ?? process.env;
@@ -74,7 +91,7 @@ export async function runPluginCliCommand(pluginId, args, options = {}) {
             removePluginRuntimeLease(dataDir, leaseId);
     };
     try {
-        db().transaction(() => {
+        transaction(db(), () => {
             const record = getPlugin(pluginId);
             if (!record)
                 throw new Error(`plugin "${pluginId}" is not installed`);

package/dist/plugin-host-rpc.d.ts

@@ -1,6 +1,7 @@
-import { type AdmissionReservation, type AgentSpec, type AgentCapabilities, type AgentRuntimeId, type AgentSessionStore, type ConversationRuntime, type ResolvedExecutionSnapshot, type SessionRegistry, type SessionWorkspaceSnapshot } from "@rynx-ai/core";
-import { type PluginAgentSummary, type PluginCapability, type PluginHostEvent, type PluginResolvedSessionExecution, type PluginSessionExecutionSnapshot, type PluginSessionInteractionResolveDisposition } from "@rynx-ai/plugin-sdk";
+import { type AdmissionReservation, type AgentSpec, type AgentCapabilities, type AgentRuntimeId, type AgentSessionStore, type ResolvedExecutionSnapshot, type RuntimeCollaborationMode, type SessionRegistry, type SessionWorkspaceSnapshot, type SteerSignal } from "@rynx-ai/core";
+import { type PluginAgentSummary, type PluginHostEvent, type PluginSessionActivitySnapshot, type PluginResolvedSessionExecution, type PluginSessionExecutionSnapshot, type PluginSessionInteractionResolveDisposition } from "@rynx-ai/plugin-sdk";
 import type { SessionInteractionResolution } from "@rynx-ai/protocol";
+import type { MachineSessionMessageInput, StartedMachineSessionRun } from "@rynx-ai/server";
 import { PluginRunnerError } from "@rynx-ai/plugin-runner";
 /** Leaves ample room for the RPC envelope below the runner's 1 MiB line cap. */
 export declare const MAX_PLUGIN_HOST_EVENT_BYTES: number;
@@ -22,7 +23,7 @@ export interface PluginSessionLaunchSelection {
     agent?: string;
     config?: AgentSpec;
     provider?: AgentRuntimeId;
-    model?: string;
+    model?: string | null;
     reasoningEffort?: string;
     title?: string;
 }
@@ -37,7 +38,16 @@ export interface PluginHostServices {
         publicKey: string;
         sign(pluginId: string, challenge: string): string;
     };
-    conversationRuntime: ConversationRuntime;
+    sessionRuns: {
+        startRun: (sessionId: string, input: string | MachineSessionMessageInput, options?: {
+            signal?: AbortSignal;
+            steer?: SteerSignal;
+            collaborationMode?: RuntimeCollaborationMode;
+        }) => Promise<StartedMachineSessionRun>;
+    };
+    sessionFiles: {
+        resolveResourcePath(sessionId: string, resourceId: string): Promise<string>;
+    };
     capabilities: AgentCapabilities;
     sessionStore: AgentSessionStore;
     sessionRegistry: SessionRegistry;
@@ -45,6 +55,14 @@ export interface PluginHostServices {
     sessionLaunch: {
         resolve(input: PluginSessionLaunchSelection): Promise<PluginResolvedSessionLaunch>;
     };
+    sessionExecution: {
+        update(input: {
+            sessionId: string;
+            model: string | null;
+            reasoningEffort: string | null;
+        }): Promise<void>;
+    };
+    sessionActivity(sessionId: string): PluginSessionActivitySnapshot | Promise<PluginSessionActivitySnapshot>;
     interruptSession?(sessionId: string): Promise<boolean>;
     terminateSession?(sessionId: string): Promise<boolean>;
     resolveSessionInteraction?(sessionId: string, interactionId: string, resolution: SessionInteractionResolution): Promise<{
@@ -60,6 +78,11 @@ export interface PluginHostServices {
     }>;
     admissionOpen?: () => boolean;
     admissionReserve?: () => AdmissionReservation | undefined;
+    sessionPortal?: {
+        scheme: "http" | "https";
+        bindHost: string;
+        port: number;
+    };
 }
 export interface PluginHostRpcOptions {
     /** Manifest id returned by host.info. */
@@ -69,7 +92,6 @@ export interface PluginHostRpcOptions {
     daemonInstanceId: string;
     productVersion: string;
     cliVersion: string;
-    capabilities: readonly PluginCapability[];
     services: PluginHostServices;
     /** Canonical plugin-owned root permitted for the Workspace plugin's isolated
      * Session directory. Omitted for every other plugin. */
@@ -80,7 +102,7 @@ export interface PluginHostRpcOptions {
     disposeForceAfterMs?: number;
 }
 /**
- * One authenticated plugin's capability-gated Host RPC surface.
+ * One authenticated plugin's Host RPC surface.
  *
  * This adapter is deliberately the only place that maps public string methods
  * to trusted runtime objects. The runner receives neither this class nor its
@@ -92,7 +114,6 @@ export declare class PluginHostRpc {
     private readonly daemonInstanceId;
     private readonly productVersion;
     private readonly cliVersion;
-    private readonly capabilities;
     private readonly services;
     private readonly managedWorkspaceRoot;
     private readonly emit;
@@ -113,11 +134,11 @@ export declare class PluginHostRpc {
     private runSession;
     private runSessionAdmitted;
     private pumpRun;
+    private projectSessionFileEvent;
     private releaseRun;
-    private steerSession;
     private interruptRun;
+    private sessionActivity;
     private interruptWon;
-    private activeRun;
     private activeRunByIdentity;
     private getBinding;
     private listBindings;
@@ -131,6 +152,7 @@ export declare class PluginHostRpc {
     private setSessionTitle;
     private resolveAgentExecution;
     private issueControlLink;
+    private issueSessionPortalLink;
     private ownedSession;
     private isOwned;
 }