@rynx-ai/daemon 0.1.11-beta.45 → 0.1.11-beta.49

package/bundled-plugins/plugins/lark/dist/runtime.js

@@ -20946,7 +20946,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes, createHash: createHash3 } = __require("crypto");
+    var { randomBytes, createHash: createHash4 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate = require_permessage_deflate();
@@ -21614,7 +21614,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash3("sha1").update(key + GUID).digest("base64");
+        const digest = createHash4("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -21983,7 +21983,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash3 } = __require("crypto");
+    var { createHash: createHash4 } = __require("crypto");
     var extension = require_extension();
     var PerMessageDeflate = require_permessage_deflate();
     var subprotocol = require_subprotocol();
@@ -22290,7 +22290,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash3("sha1").update(key + GUID).digest("base64");
+        const digest = createHash4("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -111472,7 +111472,7 @@ import path9 from "node:path";
 
 // src/host-adapters.ts
 import { AsyncLocalStorage } from "node:async_hooks";
-import { createHash as createHash2 } from "node:crypto";
+import { createHash as createHash3 } from "node:crypto";
 
 // ../../packages/protocol/dist/session-interaction.js
 var SESSION_INTERACTION_STRUCTURAL_LIMITS = {
@@ -126107,6 +126107,8 @@ var envSchema = external_exports.object({
   RYNX_SESSION_PORTAL_HOST: external_exports.string().default("127.0.0.1"),
   RYNX_SESSION_PORTAL_PORT: external_exports.coerce.number().int().positive().optional(),
   LOG_LEVEL: external_exports.string().default("info"),
+  /** Operator-selected native helper; omit to use the bundled pinned engine. */
+  RYNX_AGENT_BROWSER_EXECUTABLE: external_exports.string().optional(),
   /**
    * Default agent runtime for conversations that haven't picked one via the
    * `/runtime` card. `codex` keeps the legacy behaviour; `traex` targets the
@@ -126323,6 +126325,10 @@ async function collectLiveRun(generator) {
   return answer || deltas.join("");
 }
 
+// ../../packages/core/dist/diagnostic-log.js
+import { createHash, randomUUID } from "node:crypto";
+var processInstance = randomUUID();
+
 // ../../packages/core/dist/steer.js
 var SteerController = class {
   listeners = /* @__PURE__ */ new Set();
@@ -126352,10 +126358,10 @@ function toErrorMessage(error51) {
 }
 
 // ../../packages/core/dist/session-id.js
-import { randomUUID } from "node:crypto";
+import { randomUUID as randomUUID2 } from "node:crypto";
 var SESSION_ID_PREFIX = "sess_";
 function newSessionId() {
-  return `${SESSION_ID_PREFIX}${randomUUID()}`;
+  return `${SESSION_ID_PREFIX}${randomUUID2()}`;
 }
 
 // ../../packages/protocol/dist/control.js
@@ -126501,11 +126507,11 @@ var MAX_TOTAL_BYTES = 1024 * 1024 * 1024;
 var STREAM_BYTES = 256 * 1024;
 
 // ../../packages/core/dist/conversation-directory.js
-import { createHash, randomUUID as randomUUID2 } from "node:crypto";
+import { createHash as createHash2, randomUUID as randomUUID3 } from "node:crypto";
 import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
 import path4 from "node:path";
 function deriveConversationShortId(key) {
-  return createHash("sha256").update(key).digest("hex").slice(0, 6);
+  return createHash2("sha256").update(key).digest("hex").slice(0, 6);
 }
 var FileConversationDirectory = class {
   filePath;
@@ -126584,7 +126590,7 @@ var FileConversationDirectory = class {
   }
   async writeAll(data) {
     await mkdir(path4.dirname(this.filePath), { recursive: true });
-    const tmp = `${this.filePath}.${randomUUID2()}.tmp`;
+    const tmp = `${this.filePath}.${randomUUID3()}.tmp`;
     await writeFile(tmp, `${JSON.stringify(data, null, 2)}
 `, "utf8");
     await rename(tmp, this.filePath);
@@ -127251,7 +127257,7 @@ function hostErrorCode(error51) {
   return error51 && typeof error51 === "object" && "code" in error51 && typeof error51.code === "string" ? error51.code : void 0;
 }
 function stableOperationId(kind, ...parts) {
-  const digest = createHash2("sha256").update(parts.join("\0")).digest("hex");
+  const digest = createHash3("sha256").update(parts.join("\0")).digest("hex");
   return `${kind}-${digest}`;
 }
 var AsyncEventQueue = class {
@@ -127346,7 +127352,7 @@ function isRecord(value) {
 }
 
 // src/lark-config-store.ts
-import { randomUUID as randomUUID3 } from "node:crypto";
+import { randomUUID as randomUUID4 } from "node:crypto";
 import {
   chmodSync,
   existsSync,
@@ -127373,7 +127379,7 @@ var LarkConfigStore = class {
   }
   upsert(input) {
     const state = this.read();
-    const id = input.id ?? `instance-${randomUUID3().slice(0, 8)}`;
+    const id = input.id ?? `instance-${randomUUID4().slice(0, 8)}`;
     if (!INSTANCE_ID_PATTERN.test(id)) throw new Error("Lark instance id is invalid");
     const existing = state.instances.find((instance2) => instance2.id === id);
     const secret = input.appSecret?.trim() || existing?.appSecret;
@@ -127430,7 +127436,7 @@ var LarkConfigStore = class {
     return parseState(JSON.parse(readFileSync(this.file, "utf8")));
   }
   write(state) {
-    const temporary = `${this.file}.tmp-${randomUUID3()}`;
+    const temporary = `${this.file}.tmp-${randomUUID4()}`;
     try {
       writeFileSync(temporary, `${JSON.stringify(state, null, 2)}
 `, {
@@ -127575,7 +127581,7 @@ import {
   writeFileSync as writeFileSync2
 } from "node:fs";
 import path7 from "node:path";
-import { randomUUID as randomUUID4 } from "node:crypto";
+import { randomUUID as randomUUID5 } from "node:crypto";
 var LarkRuntimeStateStore = class {
   file;
   constructor(dataDir) {
@@ -127605,7 +127611,7 @@ var LarkRuntimeStateStore = class {
     }
   }
   write(state) {
-    const temporary = `${this.file}.tmp-${randomUUID4()}`;
+    const temporary = `${this.file}.tmp-${randomUUID5()}`;
     try {
       writeFileSync2(temporary, `${JSON.stringify(state)}
 `, {
@@ -127664,13 +127670,13 @@ function parseHealth(value) {
 
 // src/lark.ts
 import { execFile } from "node:child_process";
-import { randomUUID as randomUUID6 } from "node:crypto";
+import { randomUUID as randomUUID7 } from "node:crypto";
 import path8 from "node:path";
 import { promisify } from "node:util";
 
 // src/lark-card-stream.ts
 import { Buffer as Buffer2 } from "node:buffer";
-import { randomUUID as randomUUID5 } from "node:crypto";
+import { randomUUID as randomUUID6 } from "node:crypto";
 var OUTPUT_MAX_BYTES = 2048;
 var REASONING_MAX_BYTES = 4096;
 var AGENT_MESSAGE_MAX_BYTES = 8192;
@@ -127931,7 +127937,7 @@ var LarkResponseCardController = class {
     this.mounted.add(ELEMENT_IDS.status_row);
     this.stopButtonMounted = Boolean(this.stopButton);
     this.lastRendered.set(ELEMENT_IDS.status, renderSessionStatus("running", this.meta));
-    const uuid3 = randomUUID5();
+    const uuid3 = randomUUID6();
     if (replyTo.messageId) {
       const { messageId: messageId2 } = await this.sender.replyInteractive({
         messageId: replyTo.messageId,
@@ -128138,7 +128144,7 @@ var LarkResponseCardController = class {
           cardId,
           sequence,
           actions: JSON.stringify(actions),
-          uuid: randomUUID5()
+          uuid: randomUUID6()
         });
       } catch (error51) {
         this.logger?.log({
@@ -129495,7 +129501,7 @@ var LarkMessageIngestor = class {
         threadId: sourceThreadId,
         receiveId,
         receiveIdType,
-        uuid: randomUUID6()
+        uuid: randomUUID7()
       });
       this.logger.log({
         event: "resume.forwarded",
@@ -130030,7 +130036,7 @@ ${list}`;
           threadId: record2.threadId,
           receiveId: target.receiveId,
           receiveIdType: target.receiveIdType,
-          uuid: randomUUID6()
+          uuid: randomUUID7()
         });
         await this.sendReplyText(event, `\u5DF2\u628A\u8BDD\u9898\u300C${record2.title}\u300D\u8F6C\u53D1\u5230\u5F53\u524D\u4F1A\u8BDD\u3002`);
       } catch (error51) {
@@ -130049,7 +130055,7 @@ ${list}`;
       throw new Error("card sender unavailable");
     }
     const { cardId } = await sender.createCard({ cardJson });
-    const uuid3 = randomUUID6();
+    const uuid3 = randomUUID7();
     if (event.message.thread_id && sender.replyInteractive) {
       const { messageId } = await sender.replyInteractive({
         messageId: event.message.message_id,
@@ -130135,7 +130141,7 @@ ${transcript}` : header;
         const sent = await sender.sendText({
           chatId: event.message.chat_id,
           text: body,
-          uuid: randomUUID6()
+          uuid: randomUUID7()
         });
         if (!sent.threadId) {
           await this.sendReplyText(event, "fork \u5931\u8D25\uFF1A\u672A\u80FD\u521B\u5EFA\u65B0\u8BDD\u9898\u3002");
@@ -130151,9 +130157,9 @@ ${transcript}` : header;
         const created = await sender.createChat({
           name: `${baseName} - fork`,
           userIdList,
-          uuid: randomUUID6()
+          uuid: randomUUID7()
         });
-        await sender.sendText({ chatId: created.chatId, text: body, uuid: randomUUID6() });
+        await sender.sendText({ chatId: created.chatId, text: body, uuid: randomUUID7() });
         newSessionKey = `lark:${tenantKey}:chat:${created.chatId}`;
         newChatId = created.chatId;
       }

package/bundled-plugins/plugins/lark/dist/settings.js

@@ -20946,7 +20946,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes, createHash } = __require("crypto");
+    var { randomBytes, createHash: createHash2 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate = require_permessage_deflate();
@@ -21614,7 +21614,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash("sha1").update(key + GUID).digest("base64");
+        const digest = createHash2("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -21983,7 +21983,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash } = __require("crypto");
+    var { createHash: createHash2 } = __require("crypto");
     var extension = require_extension();
     var PerMessageDeflate = require_permessage_deflate();
     var subprotocol = require_subprotocol();
@@ -22290,7 +22290,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash("sha1").update(key + GUID).digest("base64");
+        const digest = createHash2("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -111467,7 +111467,7 @@ ${lines.join("\n")}
 });
 
 // src/settings.ts
-import { randomUUID as randomUUID3 } from "node:crypto";
+import { randomUUID as randomUUID4 } from "node:crypto";
 
 // ../../packages/protocol/dist/session-interaction.js
 var SESSION_INTERACTION_STRUCTURAL_LIMITS = {
@@ -126043,6 +126043,8 @@ var envSchema = external_exports.object({
   RYNX_SESSION_PORTAL_HOST: external_exports.string().default("127.0.0.1"),
   RYNX_SESSION_PORTAL_PORT: external_exports.coerce.number().int().positive().optional(),
   LOG_LEVEL: external_exports.string().default("info"),
+  /** Operator-selected native helper; omit to use the bundled pinned engine. */
+  RYNX_AGENT_BROWSER_EXECUTABLE: external_exports.string().optional(),
   /**
    * Default agent runtime for conversations that haven't picked one via the
    * `/runtime` card. `codex` keeps the legacy behaviour; `traex` targets the
@@ -126226,6 +126228,10 @@ var agentSpecSchema = external_exports.object({
   params: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
 });
 
+// ../../packages/core/dist/diagnostic-log.js
+import { createHash, randomUUID } from "node:crypto";
+var processInstance = randomUUID();
+
 // ../../packages/protocol/dist/control.js
 var BROWSER_PROGRESS_MAX_MESSAGE_BYTES = 2 * 1024;
 var BROWSER_PROGRESS_MAX_TOTAL_BYTES = 32 * 1024;
@@ -126387,7 +126393,7 @@ var HostAgentCatalog = class {
 };
 
 // src/lark-config-store.ts
-import { randomUUID } from "node:crypto";
+import { randomUUID as randomUUID2 } from "node:crypto";
 import {
   chmodSync,
   existsSync,
@@ -126414,7 +126420,7 @@ var LarkConfigStore = class {
   }
   upsert(input) {
     const state = this.read();
-    const id = input.id ?? `instance-${randomUUID().slice(0, 8)}`;
+    const id = input.id ?? `instance-${randomUUID2().slice(0, 8)}`;
     if (!INSTANCE_ID_PATTERN.test(id)) throw new Error("Lark instance id is invalid");
     const existing = state.instances.find((instance2) => instance2.id === id);
     const secret = input.appSecret?.trim() || existing?.appSecret;
@@ -126471,7 +126477,7 @@ var LarkConfigStore = class {
     return parseState(JSON.parse(readFileSync(this.file, "utf8")));
   }
   write(state) {
-    const temporary = `${this.file}.tmp-${randomUUID()}`;
+    const temporary = `${this.file}.tmp-${randomUUID2()}`;
     try {
       writeFileSync(temporary, `${JSON.stringify(state, null, 2)}
 `, {
@@ -126522,7 +126528,7 @@ import {
   writeFileSync as writeFileSync2
 } from "node:fs";
 import path5 from "node:path";
-import { randomUUID as randomUUID2 } from "node:crypto";
+import { randomUUID as randomUUID3 } from "node:crypto";
 var LarkRuntimeStateStore = class {
   file;
   constructor(dataDir) {
@@ -126552,7 +126558,7 @@ var LarkRuntimeStateStore = class {
     }
   }
   write(state) {
-    const temporary = `${this.file}.tmp-${randomUUID2()}`;
+    const temporary = `${this.file}.tmp-${randomUUID3()}`;
     try {
       writeFileSync2(temporary, `${JSON.stringify(state)}
 `, {
@@ -126790,7 +126796,7 @@ async function createLarkPluginSettings(context, options = {}) {
     if (method === "authorization.start") {
       if (authorization?.state === "waiting") authorization.controller.abort();
       const session = {
-        id: randomUUID3(),
+        id: randomUUID4(),
         state: "waiting",
         controller: new AbortController(),
         status: "Preparing QR code\u2026"

package/bundled-plugins/plugins/lark/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rynx-ai/plugin-channel-lark",
-  "version": "0.1.11-beta.45",
+  "version": "0.1.11-beta.49",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/rynx-ai/rynx.git",

package/dist/app-browser-host-supervisor.js

@@ -1,5 +1,7 @@
 import { spawn, } from "node:child_process";
 import path from "node:path";
+import { randomUUID } from "node:crypto";
+import { rynxHome, teeDiagnosticStream } from "@rynx-ai/core";
 export const APP_BROWSER_HOST_SIDECAR_FLAG = "--rynx-browser-host-sidecar";
 export const APP_BROWSER_HOST_BOOTSTRAP_TYPE = "rynx.browser-host.bootstrap";
 export const APP_BROWSER_HOST_READY_TYPE = "rynx.browser-host.ready";
@@ -182,13 +184,16 @@ export class AppBrowserHostSupervisor {
         try {
             child = this.spawnProcess(this.launch.executable, args, {
                 env: { ...this.childEnv },
-                stdio: ["ignore", "ignore", "ignore", "ipc"],
+                stdio: ["ignore", "pipe", "pipe", "ipc"],
             });
         }
         catch (error) {
             throw supervisorError("failed to spawn App browser host", error);
         }
         this.child = child;
+        const logRoot = path.join(rynxHome(), "logs", "browser", "host", randomUUID());
+        teeDiagnosticStream(child.stdout, path.join(logRoot, "stdout.log"));
+        teeDiagnosticStream(child.stderr, path.join(logRoot, "stderr.log"));
         this.connectedChild = undefined;
         const onLifecycleError = () => {
             if (this.connectedChild === child)

package/dist/daemon-server.js

@@ -29,6 +29,7 @@ import { installedDaemonVersion } from "./entry-path.js";
 import { isChromeForTestingHostSupported } from "./chrome-for-testing-store.js";
 import { ChromeInspectionManager, } from "./chrome-inspection-manager.js";
 import { createHeadlessBrowserHost } from "./headless-browser-host.js";
+import { PageAutomationManager } from "./page-automation-manager.js";
 import { db } from "./db.js";
 import { acquireDaemonOwner } from "./daemon-owner.js";
 import { DaemonDirectRuntimeAuthenticator } from "./direct-runtime-authenticator.js";
@@ -131,7 +132,8 @@ function toMarketplaceItem(record) {
 }
 export function daemonActivityBlocksShutdown(activity) {
     return activity.runningTurns > 0
-        || activity.pendingInteractions > 0;
+        || activity.pendingInteractions > 0
+        || (activity.pendingRuntimeOperations ?? 0) > 0;
 }
 function defaultWarn(message) {
     console.warn(JSON.stringify({ level: "warn", type: "channel-registry", msg: message }));
@@ -383,6 +385,7 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
         };
         let machineSessions;
         let sessionBrowsers;
+        let pageAutomation;
         const pluginRuntime = {
             bindHostServices: (services) => pluginSupervisor.bindHostServices({
                 ...services,
@@ -466,6 +469,11 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
             },
         }, {
             admissionReserve: reserveAdmission,
+            onObservationError: (_error, target) => warn(`Browser observation temporarily stale: Session ${target.sessionId}, generation ${target.browserGeneration}`),
+        });
+        pageAutomation = new PageAutomationManager(sessionBrowsers, {
+            onCleanupError: () => warn("Browser page helper cleanup failed"),
+            isHumanControlled: (binding) => sessionBrowserSurfaces.isBrowserHumanControlled(binding.sessionId, binding.browserGeneration),
         });
         const sessionEmulators = control.emulator
             ? new SessionEmulatorService({
@@ -610,12 +618,7 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                 const runtimeActivity = sessionRuntimeServices.sessionRuntimeIndex.activitySnapshot();
                 const activity = {
                     ...runtimeActivity,
-                    // A terminal submission keeps its own admission reservation until the
-                    // first response or native rotation is visible. Failed process-tree
-                    // cleanup releases the reservation but remains pinned here, so an
-                    // idle check returns busy instead of hanging or killing hidden work.
-                    runningTurns: runtimeActivity.runningTurns
-                        + sessionRuntimeServices.runnerManager.pendingTerminalInputCount(),
+                    pendingRuntimeOperations: sessionRuntimeServices.runnerManager.pendingNativeOperationCount(),
                     activeTerminals: sessionTerminals.activeTerminalCount(),
                     activeBrowsers: sessionBrowsers.activeBrowserCount(),
                 };
@@ -750,6 +753,7 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                 sessionLifecycle: sessionResourceLifecycle,
                 sessionTerminals,
                 runtimeLocalBrowser: {
+                    executeForSession: (sessionId, command) => pageAutomation.execute(sessionId, command),
                     authorizeCredential: (credential) => sessionBrowserCapabilities.verify(credential.sessionId, credential.capability),
                     endpointForCredential: async (credential) => {
                         if (!sessionBrowserCapabilities.verify(credential.sessionId, credential.capability))
@@ -805,6 +809,12 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
         catch (startupError) {
             const rollbackErrors = [startupError];
             server?.stopAccepting();
+            try {
+                await pageAutomation?.shutdown();
+            }
+            catch (error) {
+                rollbackErrors.push(error);
+            }
             if (chromeInspectionManager) {
                 try {
                     await chromeInspectionManager.shutdown();
@@ -872,6 +882,12 @@ export async function startRynxDaemonServer({ config, warn = defaultWarn, onShut
                 let shutdownComplete = false;
                 try {
                     const shutdownErrors = [];
+                    try {
+                        await pageAutomation.shutdown();
+                    }
+                    catch (error) {
+                        shutdownErrors.push(error);
+                    }
                     try {
                         await chromeInspectionManager.shutdown();
                     }