@rynx-ai/server 0.1.0 → 0.1.10-beta.2

package/dist/direct-runtime-browser-inspect-server.d.ts

@@ -0,0 +1,72 @@
+import type { Server as HttpServer } from "node:http";
+import { DIRECT_RUNTIME_BROWSER_INSPECT_PATH } from "@rynx-ai/protocol/direct-runtime";
+import { type RuntimeBrowserInspectClosedReason, type RuntimeBrowserInspectMessage, type RuntimeBrowserInspectTarget } from "@rynx-ai/protocol/runtime-browser-inspect";
+import { WebSocket } from "ws";
+import type { DirectRuntimeAuthenticator, DirectRuntimePeer } from "./direct-runtime-server.js";
+export type DirectRuntimeBrowserInspectTransportCloseReason = "client_closed" | "transport_error" | "grant_revoked" | "server_shutdown";
+/**
+ * A resolved local page stream. Implementations connect only after the host has
+ * resolved the semantic tuple to its own loopback CDP endpoint.
+ */
+export interface DirectRuntimeBrowserInspectAttachment {
+    readonly messages: AsyncIterable<RuntimeBrowserInspectMessage>;
+    send(message: RuntimeBrowserInspectMessage): void | Promise<void>;
+    close(reason: DirectRuntimeBrowserInspectTransportCloseReason): void | Promise<void>;
+}
+/**
+ * Deliberately exposes no URL/host/port input: callers can request only an
+ * exact Session generation page owned by this runtime.
+ */
+export interface DirectRuntimeBrowserInspectHost {
+    open(target: RuntimeBrowserInspectTarget, context: {
+        peer: DirectRuntimePeer;
+        signal: AbortSignal;
+    }): DirectRuntimeBrowserInspectAttachment | Promise<DirectRuntimeBrowserInspectAttachment>;
+}
+export declare class DirectRuntimeBrowserInspectHostError extends Error {
+    readonly reason: RuntimeBrowserInspectClosedReason;
+    constructor(reason: RuntimeBrowserInspectClosedReason, message: string, options?: ErrorOptions);
+}
+export interface DirectRuntimeBrowserInspectServerLimits {
+    authenticationTimeoutMs: number;
+    maxConnections: number;
+    maxUnauthenticatedConnectionsPerSource: number;
+    maxAuthenticationAttemptsPerSource: number;
+    authenticationAttemptWindowMs: number;
+    maxTrackedAuthenticationSources: number;
+    maxConnectionsPerGrant: number;
+    maxQueuedBytes: number;
+    maxBufferedBytes: number;
+    heartbeatIntervalMs: number;
+    peerLivenessTimeoutMs: number;
+    shutdownDeadlineMs: number;
+}
+export interface DirectRuntimeBrowserInspectConnectionHub {
+    registerWithinLimit(grantId: string, connection: {
+        ws: WebSocket;
+        close(code: number, reason: string): void;
+    }, maxConnections: number): "registered" | "revoked" | "capacity";
+    unregister(connection: {
+        ws: WebSocket;
+        close(code: number, reason: string): void;
+    }): void;
+}
+export interface AttachDirectRuntimeBrowserInspectServerOptions {
+    e2ee: {
+        serverPublicKey: string;
+        deriveSharedSecret(clientEphemeralPublicKey: string): Uint8Array;
+    };
+    authenticator: DirectRuntimeAuthenticator;
+    host: DirectRuntimeBrowserInspectHost;
+    isPeerActive(peer: DirectRuntimePeer): boolean | Promise<boolean>;
+    connectionHub: DirectRuntimeBrowserInspectConnectionHub;
+    limits?: Partial<DirectRuntimeBrowserInspectServerLimits>;
+    onError?: (error: unknown, context: string) => void;
+}
+export interface DirectRuntimeBrowserInspectServer {
+    readonly path: typeof DIRECT_RUNTIME_BROWSER_INSPECT_PATH;
+    readonly activeConnectionCount: number;
+    shutdown(): Promise<void>;
+}
+/** Attach only the V5 dedicated Browser Inspect route to a Direct listener. */
+export declare function attachDirectRuntimeBrowserInspectServer(server: HttpServer, options: AttachDirectRuntimeBrowserInspectServerOptions): DirectRuntimeBrowserInspectServer;