@rynx-ai/daemon 0.1.11-beta.4 → 0.1.11-beta.41

package/dist/control-deps.js

@@ -6,32 +6,73 @@
  */
 import { readFile } from "node:fs/promises";
 import { join } from "node:path";
-import { listAgentSpecs, loadAgentSpec, rynxHome } from "@rynx-ai/core";
+import { listAgentSpecs, loadAgentSpec, rynxHome, scanLocalRuntimesInWorker, } from "@rynx-ai/core";
+import { listRuntimeModels } from "@rynx-ai/server";
 import { createEmulatorControlDeps } from "@rynx-ai/emulator";
 import { removeAgentSpec, writeAgentSpec } from "./agent-file.js";
-import { getCatalogSkill, installCatalogSkill, listCatalogSkills, readCatalogSkillFile, removeCatalogSkill, } from "./skills-catalog.js";
+import { getCatalogSkill, importLocalCatalogSkills, importCatalogSkillsFromArchive, installCatalogSkill, listCatalogSkills, readCatalogSkillFile, removeCatalogSkill, scanLocalCatalogSkillCandidates, } from "./skills-catalog.js";
 import { createSessionMeta, getSessionMeta, listSessionMetas, removeSessionMeta, setSessionTitle, } from "./session-meta-store.js";
 import { consumeControlLink } from "./control-link-store.js";
-export function buildControlDeps() {
+const RUNTIME_OPTIONS_CACHE_MS = 30_000;
+export function buildControlDeps(config) {
+    let runtimeOptionsCache;
+    let runtimeOptionsInFlight;
+    const listAgentRuntimeOptions = async (options = {}) => {
+        const now = Date.now();
+        if (!options.refresh && runtimeOptionsCache && runtimeOptionsCache.expiresAt > now) {
+            return runtimeOptionsCache.value;
+        }
+        if (!options.refresh && runtimeOptionsInFlight)
+            return runtimeOptionsInFlight;
+        const scan = async () => {
+            const runtimes = await scanLocalRuntimesInWorker();
+            const value = await Promise.all(runtimes.map(async (runtime) => {
+                return {
+                    id: runtime.id,
+                    name: runtime.displayName,
+                    binary: runtime.binary,
+                    ...(runtime.executablePath ? { executablePath: runtime.executablePath } : {}),
+                    ...(runtime.version ? { version: runtime.version } : {}),
+                    available: runtime.available,
+                    models: await listControlAgentModels(config, runtime.id),
+                };
+            }));
+            runtimeOptionsCache = { expiresAt: Date.now() + RUNTIME_OPTIONS_CACHE_MS, value };
+            return value;
+        };
+        runtimeOptionsInFlight = scan();
+        try {
+            return await runtimeOptionsInFlight;
+        }
+        finally {
+            runtimeOptionsInFlight = undefined;
+        }
+    };
     return {
         // ── declarative agents ───────────────────────────────────────────────
         listAgents: async () => (await listAgentSpecs()).map((spec) => ({
             id: spec.id,
             name: spec.name,
+            description: spec.description,
             runtime: spec.executor?.runtime,
-            model: spec.executor?.model,
+            ...(spec.executor?.model ? { model: spec.executor.model } : {}),
+            skillCount: spec.skills?.length ?? 0,
         })),
         getAgent: (id) => loadAgentSpec(id),
         writeAgent: (id, spec) => {
             writeAgentSpec(id, spec);
         },
         removeAgent: (id) => removeAgentSpec(id),
+        listAgentRuntimeOptions,
         // ── skills catalog ───────────────────────────────────────────────────
         listSkills: () => listCatalogSkills(),
         getSkill: (name) => getCatalogSkill(name),
         readSkillFile: (name, file) => readCatalogSkillFile(name, file),
         installSkill: (recipe) => installCatalogSkill(recipe),
         removeSkill: (name) => removeCatalogSkill(name),
+        scanLocalSkills: (runtime) => scanLocalCatalogSkillCandidates(runtime),
+        importLocalSkills: (runtime, keys) => importLocalCatalogSkills(runtime, keys),
+        importSkillArchive: (filename, contentBase64) => importCatalogSkillsFromArchive(filename, contentBase64),
         // ── emulator proxy (single seam: the emulator package owns the surface) ─
         emulator: createEmulatorControlDeps(),
         // ── control-plane sessions (meta persisted; status held by the server) ─
@@ -44,6 +85,48 @@ export function buildControlDeps() {
         tailLogs: (instanceId, lines) => tailLogs(instanceId, lines),
     };
 }
+/** Project a Runtime-native model catalog into the control-plane option shape. */
+export async function listControlAgentModels(config, runtime) {
+    const catalog = await listRuntimeModels(config, runtime);
+    return (catalog?.data ?? [])
+        .filter((model) => model.hidden !== true)
+        .map((model) => ({
+        id: model.model || model.id,
+        label: model.displayName || model.model || model.id,
+        ...(model.description ? { description: model.description } : {}),
+        ...(model.isDefault ? { isDefault: true } : {}),
+        ...(model.defaultReasoningEffort
+            ? { defaultReasoningEffort: model.defaultReasoningEffort }
+            : {}),
+        reasoningOptions: model.supportedReasoningEfforts?.length
+            ? model.supportedReasoningEfforts.map((effort) => ({
+                value: effort.reasoningEffort,
+                label: reasoningLabel(effort.reasoningEffort),
+                ...(effort.description ? { description: effort.description } : {}),
+            }))
+            : fallbackReasoningOptions(runtime, model.model || model.id),
+    }));
+}
+function fallbackReasoningOptions(runtime, model) {
+    const values = runtime === "claude"
+        ? model.toLowerCase().includes("opus")
+            ? ["low", "medium", "high", "xhigh"]
+            : ["low", "medium", "high"]
+        : ["none", "minimal", "low", "medium", "high", "xhigh"];
+    return values.map((value) => ({ value, label: reasoningLabel(value) }));
+}
+function reasoningLabel(value) {
+    return {
+        none: "None",
+        minimal: "Minimal",
+        low: "Low",
+        medium: "Medium",
+        high: "High",
+        xhigh: "Extra high",
+        max: "Max",
+        ultra: "Ultra",
+    }[value] ?? value;
+}
 /** Tail the daemon's merged pm2 logs, best-effort filtered by instance id. */
 async function tailLogs(instanceId, lines) {
     const dir = join(rynxHome(), "logs");

package/dist/control-link-store.js

@@ -1,5 +1,6 @@
 import { randomBytes } from "node:crypto";
 import { db } from "./db.js";
+import { transaction } from "./sqlite.js";
 const DEFAULT_TTL_MS = 5 * 60_000;
 const MAX_TTL_MS = 15 * 60_000;
 /** Create a short-lived, one-use link into the generic session console. */
@@ -23,7 +24,7 @@ export function consumeControlLink(tokenInput) {
     if (!token || token.length > 512)
         return null;
     const now = new Date().toISOString();
-    const consume = db().transaction(() => {
+    const consume = transaction(db(), () => {
         const row = db()
             .prepare(`SELECT session_id
          FROM control_links
@@ -39,9 +40,9 @@ export function consumeControlLink(tokenInput) {
     return consume.immediate();
 }
 export function pruneControlLinks(now = new Date().toISOString()) {
-    return db()
+    return Number(db()
         .prepare("DELETE FROM control_links WHERE expires_at <= ? OR used_at IS NOT NULL")
-        .run(now).changes;
+        .run(now).changes);
 }
 function required(value, label) {
     const normalized = value?.trim();

package/dist/daemon-owner.js

@@ -1,8 +1,9 @@
 import { randomUUID } from "node:crypto";
 import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
 import path from "node:path";
+import { DatabaseSync } from "node:sqlite";
 import { rynxHome } from "@rynx-ai/core";
-import Database from "better-sqlite3";
+import { hasSqlitePrimaryCode, SQLITE_BUSY, SQLITE_LOCKED } from "./sqlite.js";
 const LOCK_FILE = "daemon-owner.sqlite";
 const OWNER_FILE = "daemon-owner.json";
 /**
@@ -18,16 +19,15 @@ export async function acquireDaemonOwner(env = process.env) {
     const lockPath = path.join(home, LOCK_FILE);
     const ownerFile = path.join(home, OWNER_FILE);
     await mkdir(home, { recursive: true, mode: 0o700 });
-    const connection = new Database(lockPath, { timeout: 0 });
+    const connection = new DatabaseSync(lockPath, { timeout: 0 });
     try {
-        connection.pragma("busy_timeout = 0");
         connection.exec("BEGIN EXCLUSIVE");
         // Force this transaction to hold a write lock even on a brand-new file.
         connection.exec("CREATE TABLE IF NOT EXISTS daemon_owner_guard (id INTEGER PRIMARY KEY)");
     }
     catch (error) {
         connection.close();
-        if (hasCode(error, "SQLITE_BUSY") || hasCode(error, "SQLITE_LOCKED")) {
+        if (hasSqlitePrimaryCode(error, SQLITE_BUSY) || hasSqlitePrimaryCode(error, SQLITE_LOCKED)) {
             throw await ownerConflictError(home, ownerFile);
         }
         throw error;
@@ -99,6 +99,3 @@ function rollbackAndClose(connection) {
         connection.close();
     }
 }
-function hasCode(error, code) {
-    return typeof error === "object" && error !== null && "code" in error && error.code === code;
-}

package/dist/daemon-server.js

@@ -17,9 +17,10 @@ import { REMOTE_RUNTIME_CORE_PROTOCOL } from "@rynx-ai/protocol/remote-runtime";
 import { RUNTIME_BROWSER_INSPECT_MAX_MESSAGE_BYTES, RUNTIME_BROWSER_INSPECT_SEMANTIC_CAPABILITY, } from "@rynx-ai/protocol/runtime-browser-inspect";
 import { RUNTIME_BROWSER_SURFACE_SEMANTIC_CAPABILITY } from "@rynx-ai/protocol/runtime-browser-surface";
 import { RUNTIME_EMULATOR_SURFACE_SEMANTIC_CAPABILITY } from "@rynx-ai/protocol/runtime-emulator-surface";
-import { createDaemonRuntimeHost, createDesktopFirstSessionBrowserHost, createRunnerSessionTerminalHost, createSessionRuntimeServices, DesktopBrowserHostAbsentError, DesktopBrowserHostRegistry, DirectRuntimeConnectionHub, DirectRuntimeBrowserInspectHostError, MachineSessionService, MachineSessionServiceFailure, listRuntimeModels, RemoteRuntimeDispatcher, SessionBrowserService, SessionBrowserServiceError, SessionBrowserSurfaceCoordinator, SessionEmulatorService, startServer, startDirectRuntimeServer, } from "@rynx-ai/server";
+import { createDaemonRuntimeHost, createDesktopFirstSessionBrowserHost, createRunnerSessionTerminalHost, createSessionRuntimeServices, DesktopBrowserHostAbsentError, DesktopBrowserHostRegistry, DirectRuntimeConnectionHub, DirectRuntimeBrowserInspectHostError, MachineSessionService, MachineSessionServiceFailure, RemoteRuntimeDispatcher, SessionPendingInputIndex, SessionBrowserService, SessionBrowserServiceError, SessionBrowserSurfaceCoordinator, SessionEmulatorService, startServer, startDirectRuntimeServer, } from "@rynx-ai/server";
+import { authorizeSessionPortalGrant, inspectSessionPortalGrant, onSessionPortalGrantRevoked, redeemSessionPortalTicket, revokeEmbeddedWritableSessionPortalGrants, } from "./session-portal-grant-store.js";
 import { APP_BROWSER_HOST_BOOTSTRAP_TYPE, AppBrowserHostSupervisor, parseAppBrowserHostLaunchConfig, } from "./app-browser-host-supervisor.js";
-import { buildControlDeps } from "./control-deps.js";
+import { buildControlDeps, listControlAgentModels } from "./control-deps.js";
 import { createBrowserArtifactManagementService } from "./browser-artifact-management.js";
 import { createDaemonBuildStatus } from "./daemon-build-status.js";
 import { MaintenanceLeaseStore } from "./maintenance-lease.js";
@@ -49,7 +50,7 @@ import { SqliteSessionResourceStore } from "./session-resource-store.js";
 import { createSessionFallbackWorkspace, discardSessionFallbackWorkspace, } from "./session-fallback-workspace.js";
 import { SessionBrowserCapabilityStore } from "./session-browser-capability-store.js";
 import { SqliteSessionEmulatorBindingStore } from "./session-emulator-binding-store.js";
-import { sessionRegistry } from "./session-meta-store.js";
+import { sessionBelongsToPlugin, sessionRegistry } from "./session-meta-store.js";
 import { sessionPendingMessageStore } from "./session-pending-message-store.js";
 import { RemoteRuntimeAccessStore } from "./remote-runtime-access-store.js";
 import { DaemonRemoteRuntimeAdmin } from "./remote-runtime-admin.js";
@@ -68,13 +69,7 @@ const require = createRequire(import.meta.url);
 const DAEMON_PACKAGE_VERSION = readDaemonPackageVersion();
 async function resolveSessionExecutionSnapshot(input) {
     return {
-        ...await resolveExecutionSnapshot({
-            ...input,
-            resolveDefaultModel: async (provider) => {
-                const models = await listRuntimeModels(input.config, provider);
-                return models?.data.find((candidate) => candidate.isDefault)?.model;
-            },
-        }),
+        ...await resolveExecutionSnapshot(input),
         pluginSkills: snapshotEnabledPluginSkillSources(),
     };
 }
@@ -280,7 +275,7 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
         const directConfig = directHostingSupported
             ? await loadDirectConfig()
             : undefined;
-        const control = buildControlDeps();
+        const control = buildControlDeps(appConfig);
         const installationIdentity = await loadOrCreateDaemonInstallationIdentity();
         const directEncryptionIdentity = directHostingSupported
             ? await loadOrCreateDaemonDirectRuntimeEncryptionIdentity()
@@ -299,21 +294,26 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                 "semantic.session.list.v1",
                 "semantic.session.snapshot.v1",
                 "semantic.session.events.v1",
-                "semantic.session.terminal.v1",
+                "semantic.session.terminal.v2",
                 "semantic.session.terminal-start.v1",
                 "semantic.session.interrupt.v1",
                 "semantic.session.agent-options.v1",
                 "semantic.session.launch-options.v2",
+                "semantic.session.execution-settings.v1",
                 "semantic.session.create.v1",
                 "semantic.session.fork.v1",
                 "semantic.session.message.v1",
-                "semantic.session.resources.v1",
+                "semantic.session.resources.v2",
+                "semantic.session.files.v1",
+                "semantic.session.workspace-files.v1",
                 "semantic.session.message-queue.v1",
                 "semantic.session.delete.v1",
                 "semantic.session.interaction.v1",
                 "semantic.project.manage.v1",
                 "semantic.provider-cli.status.v1",
-                ...(runtimeBrowserSupported ? ["semantic.browser.v1"] : []),
+                ...(runtimeBrowserSupported
+                    ? ["semantic.browser.v1", "semantic.browser.request-headers.v1"]
+                    : []),
                 ...(runtimeBrowserSupported && directHostingSupported
                     ? [
                         RUNTIME_BROWSER_SURFACE_SEMANTIC_CAPABILITY,
@@ -389,6 +389,7 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
             };
         };
         let machineSessions;
+        let sessionBrowsers;
         const pluginRuntime = {
             bindHostServices: (services) => pluginSupervisor.bindHostServices({
                 ...services,
@@ -398,6 +399,7 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                     publicKey: installationIdentity.publicKey,
                     sign: installationIdentity.sign,
                 },
+                sessionBrowserRequestHeaders: sessionBrowsers,
                 sessionLaunch: {
                     resolve: async (selection) => {
                         const workspace = await resolveSessionWorkspace(runtimeProjects, selection.projectId, selection.managedCwd, selection.workspace);
@@ -410,7 +412,7 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                                 ...((selection.provider || (!selection.agent && !selection.config))
                                     ? { provider: selection.provider ?? appConfig.DEFAULT_RUNTIME }
                                     : {}),
-                                ...(selection.model ? { model: selection.model } : {}),
+                                ...(selection.model !== undefined ? { model: selection.model } : {}),
                                 ...(selection.reasoningEffort
                                     ? { reasoningEffort: selection.reasoningEffort }
                                     : {}),
@@ -419,6 +421,11 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                         };
                     },
                 },
+                sessionExecution: {
+                    update: async (input) => {
+                        await machineSessions.updateExecutionSettings(input);
+                    },
+                },
                 sessionFork: (input) => machineSessions.fork(input),
                 admissionOpen,
                 admissionReserve: reserveAdmission,
@@ -431,6 +438,7 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
         const directConnections = new DirectRuntimeConnectionHub();
         const sessionLog = new SqliteSessionLogStore();
         const sessionResources = new SqliteSessionResourceStore();
+        const sessionPendingInputs = new SessionPendingInputIndex();
         const sessionForks = new SqliteSessionForkStore();
         const runtimeProjects = new SqliteRuntimeProjectStore();
         const providerClis = new ProviderCliService();
@@ -443,15 +451,21 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
         const sessionRuntimeServices = createSessionRuntimeServices({
             config: appConfig,
             sessionLog,
+            pendingInputs: sessionPendingInputs,
+            onPendingInputPersisted: (input) => sessionResources.markMessageMirrored(input.sessionId, input.clientMessageId, {
+                responseId: input.responseId,
+                messageItemId: input.messageItemId,
+            }),
             sessionContextProvider: browserRunnerSessionContexts,
             admissionOpen,
             admissionReserve: reserveAdmission,
+            materializeGeneratedImage: (input) => sessionResources.materializeGeneratedImage(input),
             onMirrorError: (error, sessionId) => warn(`Session mirror failed for ${sessionId}: ${error instanceof Error ? error.message : String(error)}`),
         });
         const sessionBrowserHost = appBrowserHostSupervisor
             ? createSupervisedAppSessionBrowserHost(durableDesktopBrowserHost, appBrowserHostSupervisor)
             : createDesktopFirstSessionBrowserHost(durableDesktopBrowserHost, createHeadlessBrowserHost());
-        const sessionBrowsers = new SessionBrowserService({
+        sessionBrowsers = new SessionBrowserService({
             host: sessionBrowserHost,
             sessions: {
                 exists: async (sessionId) => Boolean(sessionRegistry.get(sessionId) ??
@@ -552,18 +566,21 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                 list: () => control.listAgents(),
             },
             pendingMessages: sessionPendingMessageStore,
+            pendingInputs: sessionPendingInputs,
             resources: sessionResources,
             forks: sessionForks,
             execution: {
                 runtime: sessionRuntimeServices.conversationRuntime,
-                resolve: ({ agent, provider, model, reasoningEffort, cwd }) => resolveSessionExecutionSnapshot({
+                resolve: ({ agent, provider, model, reasoningEffort, permissionPreset, cwd }) => resolveSessionExecutionSnapshot({
                     config: appConfig,
                     ...(agent ? { agentName: agent } : {}),
                     ...(provider ? { provider } : {}),
                     ...(model ? { model } : {}),
                     ...(reasoningEffort ? { reasoningEffort } : {}),
+                    ...(permissionPreset ? { permissionPreset } : {}),
                     cwd,
                 }),
+                listModels: (provider) => listControlAgentModels(appConfig, provider),
                 runner: sessionRuntimeServices.runnerManager,
             },
             workspace: {
@@ -763,6 +780,7 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                 status: async () => asDaemonChromeInspectionStatus(await initializedChromeInspectionManager.status()),
                 configure: async (input) => asDaemonChromeInspectionStatus(await initializedChromeInspectionManager.configure(input)),
             };
+            revokeEmbeddedWritableSessionPortalGrants();
             server = await startServer({
                 config: appConfig,
                 control,
@@ -794,6 +812,13 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                     registry: desktopBrowserHosts,
                     daemonInstanceId,
                 },
+                sessionPortalAuthorization: {
+                    redeem: (ticket, embedOrigin) => redeemSessionPortalTicket(ticket, new Date(), embedOrigin),
+                    authorize: authorizeSessionPortalGrant,
+                    inspect: inspectSessionPortalGrant,
+                    subscribeRevocations: onSessionPortalGrantRevoked,
+                    ownsSession: sessionBelongsToPlugin,
+                },
             });
             baseShutdown = server.shutdown.bind(server);
             if (directConfig && directEncryptionIdentity) {

package/dist/db.d.ts

@@ -1,5 +1,5 @@
-import Database from "better-sqlite3";
+import { DatabaseSync } from "node:sqlite";
 /** Absolute path to the SQLite file (override via `RYNX_DB`, else `~/.rynx/rynx.db`). */
 export declare function dbPath(): string;
 /** Open (or reuse) the database at the current path, migrating + importing on first open. */
-export declare function db(): Database.Database;
+export declare function db(): DatabaseSync;

package/dist/db.js

@@ -1,9 +1,11 @@
 /**
  * `~/.rynx/rynx.db` — the daemon's SQLite store. Concerns kept apart:
- *  - `plugin_installations` — source-qualified manifests, capabilities, and immutable packages.
+ *  - `plugin_installations` — source-qualified manifests and immutable packages.
  *  - `plugin_marketplaces` — catalog registrations; catalog data is never executable.
  *  - `plugin_session_launch_operations` — durable idempotency/tombstones.
  *  - `control_links` — generic, one-use links to the local session console.
+ *  - `session_portal_tickets` / `session_portal_grants` — hashed, scoped,
+ *    browser Session Portal authorization.
  *  - `runtime_pairing_claims` / `runtime_client_grants` — one-use enrollment
  *    claims and the durable client identities they issue for direct runtimes.
  *  - `runtime_targets` / `runtime_direct_routes` / `runtime_pending_enrollments`
@@ -16,8 +18,9 @@
  */
 import { chmodSync, mkdirSync } from "node:fs";
 import { dirname, isAbsolute, join, resolve } from "node:path";
+import { DatabaseSync } from "node:sqlite";
 import { rynxHome } from "@rynx-ai/core";
-import Database from "better-sqlite3";
+import { transaction } from "./sqlite.js";
 const connections = new Map();
 /** Absolute path to the SQLite file (override via `RYNX_DB`, else `~/.rynx/rynx.db`). */
 export function dbPath() {
@@ -34,9 +37,7 @@ export function db() {
     if (cached)
         return cached;
     mkdirSync(dirname(path), { recursive: true });
-    const conn = new Database(path);
-    conn.pragma("busy_timeout = 5000");
-    conn.pragma("foreign_keys = ON");
+    const conn = new DatabaseSync(path, { timeout: 5000, enableForeignKeyConstraints: true });
     migrate(conn);
     // Plugin state and daemon credentials are private.
     try {
@@ -86,7 +87,6 @@ function migrate(conn) {
       install_path   TEXT NOT NULL,
       manifest       TEXT NOT NULL,
       integrity      TEXT NOT NULL,
-      capabilities   TEXT NOT NULL,
       runtime_state  TEXT,
       runtime_error  TEXT,
       UNIQUE(marketplace_id, plugin_id)
@@ -100,6 +100,7 @@ function migrate(conn) {
       status      TEXT NOT NULL,
       data        TEXT NOT NULL,
       created_by  TEXT,
+      parent_tool_call_id TEXT,
       created_at  INTEGER NOT NULL,
       UNIQUE(session_id, position)
     );
@@ -109,8 +110,9 @@ function migrate(conn) {
       session_id       TEXT NOT NULL,
       client_upload_id TEXT NOT NULL,
       upload_id        TEXT NOT NULL UNIQUE,
+      kind             TEXT NOT NULL DEFAULT 'image' CHECK(kind IN ('image', 'file')),
       filename         TEXT NOT NULL,
-      media_type       TEXT NOT NULL CHECK(media_type IN ('image/png', 'image/jpeg', 'image/webp')),
+      media_type       TEXT NOT NULL,
       byte_length      INTEGER NOT NULL,
       uploaded_bytes   INTEGER NOT NULL DEFAULT 0,
       sha256           TEXT,
@@ -141,6 +143,9 @@ function migrate(conn) {
           'failed_not_started'
         )),
       error            TEXT,
+      response_id      TEXT,
+      message_item_id  TEXT,
+      execution_snapshot TEXT,
       created_at       INTEGER NOT NULL,
       updated_at       INTEGER NOT NULL,
       PRIMARY KEY(session_id, client_message_id)
@@ -245,6 +250,50 @@ function migrate(conn) {
     );
     CREATE INDEX IF NOT EXISTS idx_control_links_expires
       ON control_links(expires_at);
+    CREATE TABLE IF NOT EXISTS session_portal_tickets (
+      ticket_hash TEXT PRIMARY KEY,
+      plugin_id   TEXT NOT NULL,
+      scope       TEXT NOT NULL CHECK(scope IN ('plugin_sessions', 'single_session')),
+      access      TEXT NOT NULL CHECK(access IN ('read_only', 'read_write')),
+      session_id  TEXT,
+      created_at  TEXT NOT NULL,
+      expires_at  TEXT NOT NULL,
+      used_at     TEXT,
+      CHECK(
+        (scope = 'plugin_sessions' AND session_id IS NULL)
+        OR (scope = 'single_session' AND session_id IS NOT NULL)
+      )
+    );
+    CREATE INDEX IF NOT EXISTS idx_session_portal_tickets_expires
+      ON session_portal_tickets(expires_at);
+    CREATE TABLE IF NOT EXISTS session_portal_grants (
+      portal_id   TEXT PRIMARY KEY,
+      secret_hash TEXT NOT NULL,
+      plugin_id   TEXT NOT NULL,
+      scope       TEXT NOT NULL CHECK(scope IN ('plugin_sessions', 'single_session')),
+      access      TEXT NOT NULL CHECK(access IN ('read_only', 'read_write')),
+      session_id  TEXT,
+      created_at  TEXT NOT NULL,
+      expires_at  TEXT NOT NULL,
+      revoked_at  TEXT,
+      CHECK(
+        (scope = 'plugin_sessions' AND session_id IS NULL)
+        OR (scope = 'single_session' AND session_id IS NOT NULL)
+      )
+    );
+    CREATE INDEX IF NOT EXISTS idx_session_portal_grants_expires
+      ON session_portal_grants(expires_at);
+    CREATE TABLE IF NOT EXISTS session_timeline_projections (
+      plugin_id     TEXT NOT NULL,
+      session_id    TEXT NOT NULL,
+      projection_id TEXT NOT NULL,
+      request_hash  TEXT NOT NULL,
+      response_id   TEXT NOT NULL,
+      item_id       TEXT NOT NULL UNIQUE,
+      state         TEXT NOT NULL DEFAULT 'pending' CHECK(state IN ('pending', 'completed')),
+      created_at    TEXT NOT NULL,
+      PRIMARY KEY(plugin_id, session_id, projection_id)
+    );
     CREATE TABLE IF NOT EXISTS runtime_pairing_claims (
       claim_id                   TEXT PRIMARY KEY,
       secret_hash                TEXT NOT NULL,
@@ -308,7 +357,8 @@ function migrate(conn) {
     CREATE INDEX IF NOT EXISTS idx_runtime_pending_enrollments_expires
       ON runtime_pending_enrollments(expires_at);
   `);
-    migratePluginCapabilities(conn);
+    migrateSessionResourceFiles(conn);
+    migratePluginCapabilityDeclarations(conn);
     migrateSessionSnapshots(conn);
     // Breaking plugin-runtime cutover: remove obsolete core-owned state.
     conn.exec(`
@@ -318,6 +368,104 @@ function migrate(conn) {
     addColumnIfMissing(conn, "plugin_marketplaces", "built_in", "INTEGER NOT NULL DEFAULT 0");
     addColumnIfMissing(conn, "sessions", "forked_from_session_id", "TEXT");
     addColumnIfMissing(conn, "plugin_session_launch_operations", "raw_request_hash", "TEXT");
+    addColumnIfMissing(conn, "session_message_operations", "response_id", "TEXT");
+    addColumnIfMissing(conn, "session_message_operations", "message_item_id", "TEXT");
+    addColumnIfMissing(conn, "session_message_operations", "execution_snapshot", "TEXT");
+    addColumnIfMissing(conn, "session_items", "parent_tool_call_id", "TEXT");
+    addColumnIfMissing(conn, "session_portal_tickets", "grant_handle", "TEXT");
+    addColumnIfMissing(conn, "session_portal_tickets", "embed_origin", "TEXT");
+    addColumnIfMissing(conn, "session_portal_grants", "grant_handle", "TEXT");
+    addColumnIfMissing(conn, "session_portal_grants", "embed_origin", "TEXT");
+    addColumnIfMissing(conn, "session_timeline_projections", "state", "TEXT NOT NULL DEFAULT 'pending'");
+    conn.exec(`
+    CREATE INDEX IF NOT EXISTS idx_session_portal_tickets_grant_handle
+      ON session_portal_tickets(plugin_id, grant_handle);
+    CREATE INDEX IF NOT EXISTS idx_session_portal_grants_grant_handle
+      ON session_portal_grants(plugin_id, grant_handle);
+  `);
+}
+/** Rebuild the original image-only table without losing committed resources. */
+function migrateSessionResourceFiles(conn) {
+    const columns = conn
+        .prepare("PRAGMA table_info(session_resources)")
+        .all();
+    if (columns.some((column) => column.name === "kind"))
+        return;
+    conn.exec("PRAGMA foreign_keys = OFF");
+    try {
+        transaction(conn, () => {
+            conn.exec(`
+        ALTER TABLE session_message_operation_resources
+          RENAME TO session_message_operation_resources_image_v1;
+        ALTER TABLE session_resources RENAME TO session_resources_image_v1;
+
+        CREATE TABLE session_resources (
+          id               TEXT PRIMARY KEY,
+          session_id       TEXT NOT NULL,
+          client_upload_id TEXT NOT NULL,
+          upload_id        TEXT NOT NULL UNIQUE,
+          kind             TEXT NOT NULL DEFAULT 'image' CHECK(kind IN ('image', 'file')),
+          filename         TEXT NOT NULL,
+          media_type       TEXT NOT NULL,
+          byte_length      INTEGER NOT NULL,
+          uploaded_bytes   INTEGER NOT NULL DEFAULT 0,
+          sha256           TEXT,
+          width            INTEGER,
+          height           INTEGER,
+          state            TEXT NOT NULL DEFAULT 'uploading'
+            CHECK(state IN ('uploading', 'staged', 'committed')),
+          message_item_id  TEXT,
+          created_at       INTEGER NOT NULL,
+          committed_at     INTEGER,
+          UNIQUE(session_id, client_upload_id)
+        );
+        INSERT INTO session_resources (
+          id, session_id, client_upload_id, upload_id, kind, filename, media_type,
+          byte_length, uploaded_bytes, sha256, width, height, state,
+          message_item_id, created_at, committed_at
+        )
+        SELECT
+          id, session_id, client_upload_id, upload_id, 'image', filename, media_type,
+          byte_length, uploaded_bytes, sha256, width, height, state,
+          message_item_id, created_at, committed_at
+        FROM session_resources_image_v1;
+
+        CREATE TABLE session_message_operation_resources (
+          session_id        TEXT NOT NULL,
+          client_message_id TEXT NOT NULL,
+          resource_id       TEXT NOT NULL UNIQUE REFERENCES session_resources(id) ON DELETE CASCADE,
+          PRIMARY KEY(session_id, client_message_id, resource_id),
+          FOREIGN KEY(session_id, client_message_id)
+            REFERENCES session_message_operations(session_id, client_message_id)
+            ON DELETE CASCADE
+        );
+        INSERT INTO session_message_operation_resources
+        SELECT * FROM session_message_operation_resources_image_v1;
+
+        DROP TABLE session_message_operation_resources_image_v1;
+        DROP TABLE session_resources_image_v1;
+        CREATE INDEX idx_session_resources_session
+          ON session_resources(session_id, created_at);
+        CREATE INDEX idx_session_resources_message
+          ON session_resources(message_item_id);
+      `);
+        })();
+    }
+    finally {
+        conn.exec("PRAGMA foreign_keys = ON");
+    }
+}
+/** Remove the inert permission-declaration columns left by older installations. */
+function migratePluginCapabilityDeclarations(conn) {
+    const columns = conn
+        .prepare("PRAGMA table_info(plugin_installations)")
+        .all();
+    const names = new Set(columns.map((column) => column.name));
+    for (const legacyColumn of ["capabilities", "grants"]) {
+        if (names.has(legacyColumn)) {
+            conn.exec(`ALTER TABLE plugin_installations DROP COLUMN ${legacyColumn}`);
+        }
+    }
 }
 /**
  * Breaking Session cutover: the previous rows contain mutable Agent/Provider
@@ -330,7 +478,7 @@ function migrateSessionSnapshots(conn) {
     const names = new Set(columns.map((column) => column.name));
     if (names.has("workspace") && names.has("execution"))
         return;
-    conn.transaction(() => {
+    transaction(conn, () => {
         conn.exec(`
       INSERT OR IGNORE INTO session_snapshot_cleanup (session_id)
       SELECT id FROM sessions;
@@ -358,18 +506,6 @@ function migrateSessionSnapshots(conn) {
     `);
     }).immediate();
 }
-function migratePluginCapabilities(conn) {
-    const columns = conn
-        .prepare("PRAGMA table_info(plugin_installations)")
-        .all();
-    if (columns.some((column) => column.name === "capabilities"))
-        return;
-    if (columns.some((column) => column.name === "grants")) {
-        conn.exec("ALTER TABLE plugin_installations RENAME COLUMN grants TO capabilities");
-        return;
-    }
-    conn.exec("ALTER TABLE plugin_installations ADD COLUMN capabilities TEXT NOT NULL DEFAULT '[]'");
-}
 /** Idempotently add a column to an existing table (no-op if already present). */
 function addColumnIfMissing(conn, table, column, ddl) {
     const cols = conn.prepare(`PRAGMA table_info(${table})`).all();