@rynx-ai/server 0.1.10 → 0.1.11-beta.10

package/dist/remote-runtime-dispatcher.d.ts

@@ -1,4 +1,4 @@
-import type { RemoteRuntimeEmulatorGesturePoint, RemoteRuntimeRpcRequest, RemoteRuntimeRpcResponse, RemoteRuntimeSequencedSessionEvent } from "@rynx-ai/protocol/remote-runtime-rpc";
+import type { RemoteRuntimeEmulatorGesturePoint, RemoteRuntimeProject, RemoteRuntimeProjectCreateParams, RemoteRuntimeRpcRequest, RemoteRuntimeRpcResponse, RemoteRuntimeSequencedSessionEvent } from "@rynx-ai/protocol/remote-runtime-rpc";
 import { type DaemonRuntimeHost } from "./remote-runtime.js";
 import { type MachineSessionService } from "./machine-session-service.js";
 import { type SessionBrowserService } from "./session-browser-service.js";
@@ -22,10 +22,19 @@ export interface RemoteRuntimeDispatcherOptions {
     browsers?: RemoteRuntimeBrowserHost;
     terminals?: SessionTerminalHost;
     providerClis?: ProviderCliStatusHost;
+    projects?: RemoteRuntimeProjectHost;
     /** Optional diagnostic sink. Wire errors deliberately omit internal details. */
     onError?: (error: unknown, request: RemoteRuntimeRpcRequest) => void;
 }
-export type RemoteRuntimeSessionHost = Pick<MachineSessionService, "list" | "snapshot" | "watch" | "interrupt" | "agentOptions" | "launchOptions" | "create" | "sendMessage" | "resourcePolicy" | "beginResourceUpload" | "writeResourceUploadChunk" | "commitResourceUpload" | "getResource" | "readResource" | "deleteResource" | "enqueueMessage" | "startTerminal" | "delete" | "resolveInteraction">;
+/** Runtime-local Project persistence. Project ids never cross into Session records. */
+export interface RemoteRuntimeProjectHost {
+    list(): RemoteRuntimeProject[] | Promise<RemoteRuntimeProject[]>;
+    get(projectId: string): RemoteRuntimeProject | undefined | Promise<RemoteRuntimeProject | undefined>;
+    create(input: RemoteRuntimeProjectCreateParams): RemoteRuntimeProject | Promise<RemoteRuntimeProject>;
+    update(projectId: string, input: RemoteRuntimeProjectCreateParams): RemoteRuntimeProject | undefined | Promise<RemoteRuntimeProject | undefined>;
+    remove(projectId: string): boolean | Promise<boolean>;
+}
+export type RemoteRuntimeSessionHost = Pick<MachineSessionService, "list" | "snapshot" | "watch" | "interrupt" | "agentOptions" | "launchOptions" | "executionSettings" | "updateExecutionSettings" | "create" | "fork" | "sendMessage" | "resourcePolicy" | "beginResourceUpload" | "writeResourceUploadChunk" | "commitResourceUpload" | "getResource" | "readResource" | "deleteResource" | "enqueueMessage" | "startTerminal" | "delete" | "resolveInteraction">;
 export type RemoteRuntimeBrowserHost = Pick<SessionBrowserService, "getState" | "open" | "close" | "createPage" | "closePage" | "activatePage" | "navigatePage" | "goBack" | "goForward" | "reload">;
 export type RemoteRuntimeSessionEmulatorHost = Pick<SessionEmulatorService, "getState" | "listDevices" | "attach" | "detach" | "tap" | "type" | "button" | "rotate" | "launch" | "gesture" | "releaseDevice" | "stopDevice">;
 export interface OpenRemoteRuntimeSessionEvents {
@@ -88,6 +97,7 @@ export declare class RemoteRuntimeDispatcher {
     openSessionEvents(sessionId: string, context: RemoteRuntimeDispatchContext): OpenRemoteRuntimeSessionEvents;
     openSessionTerminal(sessionId: string, options: SessionTerminalOpenOptions, context: RemoteRuntimeDispatchContext): Promise<SessionTerminalAttachment>;
     private withEmulator;
+    private withProjects;
     private withSessions;
     private withSessionEmulators;
     private withBrowsers;

package/dist/remote-runtime-dispatcher.js

@@ -1,4 +1,5 @@
 import { encodeRemoteRuntimeRpcResponse, parseRemoteRuntimeRpcResponseForMethod, REMOTE_RUNTIME_RPC_METHOD_METADATA, } from "@rynx-ai/protocol/remote-runtime-rpc";
+import { RuntimeProjectInputError } from "@rynx-ai/core";
 import { encodeDaemonStatus } from "./remote-runtime.js";
 import { MachineSessionServiceFailure, MachineSessionServiceInputError, } from "./machine-session-service.js";
 import { SessionBrowserServiceError, } from "./session-browser-service.js";
@@ -35,6 +36,30 @@ export class RemoteRuntimeDispatcher {
                     return this.options.providerClis
                         ? rpcResult(request, await this.options.providerClis.listStatuses())
                         : rpcError(request.id, "method_not_found", "Provider CLI status is unavailable");
+                case "project.list":
+                    return await this.withProjects(request, async (projects) => ({
+                        projects: await projects.list(),
+                    }));
+                case "project.get":
+                    return await this.withProjects(request, async (projects) => ({
+                        project: requireProject(await projects.get(request.params.projectId)),
+                    }));
+                case "project.create":
+                    return await this.withProjects(request, async (projects) => ({
+                        project: await projects.create(request.params),
+                    }));
+                case "project.update": {
+                    const { projectId, ...input } = request.params;
+                    return await this.withProjects(request, async (projects) => ({
+                        project: requireProject(await projects.update(projectId, input)),
+                    }));
+                }
+                case "project.delete":
+                    return await this.withProjects(request, async (projects) => {
+                        if (!await projects.remove(request.params.projectId))
+                            throw new ProjectNotFoundError();
+                        return { deleted: true };
+                    });
                 case "emulator.devices.list":
                     return await this.withEmulator(request, (emulator) => emulator.devices());
                 case "emulator.active.get":
@@ -100,8 +125,14 @@ export class RemoteRuntimeDispatcher {
                     return await this.withSessions(request, (sessions) => sessions.agentOptions());
                 case "session.launchOptions.list":
                     return await this.withSessions(request, (sessions) => sessions.launchOptions());
+                case "session.execution.get":
+                    return await this.withSessions(request, (sessions) => sessions.executionSettings(request.params.sessionId));
+                case "session.execution.update":
+                    return await this.withSessions(request, (sessions) => sessions.updateExecutionSettings(request.params));
                 case "session.create":
                     return await this.withSessions(request, (sessions) => sessions.create(request.params));
+                case "session.fork":
+                    return await this.withSessions(request, (sessions) => sessions.fork(request.params));
                 case "session.message.send":
                     return await this.withSessions(request, (sessions) => {
                         const { sessionId, ...input } = request.params;
@@ -234,6 +265,13 @@ export class RemoteRuntimeDispatcher {
         }
         return rpcResult(request, await invoke(emulator));
     }
+    async withProjects(request, invoke) {
+        const projects = this.options.projects;
+        if (!projects) {
+            return rpcError(request.id, "method_not_found", "Runtime Projects are unavailable");
+        }
+        return rpcResult(request, await invoke(projects));
+    }
     async withSessions(request, invoke) {
         const sessions = this.options.sessions;
         if (!sessions) {
@@ -257,6 +295,17 @@ export class RemoteRuntimeDispatcher {
     }
 }
 function mapHostError(request, error) {
+    if (error instanceof ProjectNotFoundError) {
+        return { code: "not_found", message: "Runtime Project was not found" };
+    }
+    if (error instanceof RuntimeProjectInputError) {
+        return {
+            code: error.code,
+            message: error.code === "invalid_request"
+                ? "Runtime Project configuration is invalid"
+                : "Runtime Project directory is unavailable",
+        };
+    }
     if (error instanceof SessionBrowserServiceError) {
         switch (error.code) {
             case "invalid_request":
@@ -340,6 +389,13 @@ function mapHostError(request, error) {
     }
     return { code: "internal", message: "Remote Runtime request failed" };
 }
+class ProjectNotFoundError extends Error {
+}
+function requireProject(project) {
+    if (!project)
+        throw new ProjectNotFoundError();
+    return project;
+}
 function idempotentCancel(watch) {
     let pending;
     return () => {

package/dist/remote-runtime-session-projection.js

@@ -64,6 +64,7 @@ function projectRuntimeSnapshot(value) {
     const originalActive = runtime.activeResponseIds;
     const projected = {
         status: runtime.status,
+        ...(runtime.statusKind === undefined ? {} : { statusKind: runtime.statusKind }),
         activeResponseIds: [],
         pendingInteractions: [],
     };

package/dist/server.d.ts

@@ -1,9 +1,10 @@
 import type { Server as HttpServer } from "node:http";
 import Koa from "koa";
-import { ConversationRuntime, type AgentCapabilities, type AgentSessionStore, type AppConfig, type ChannelInstanceDescriptor, type SessionEvent, type SessionBus, type SessionLogStore, type SessionRegistry } from "@rynx-ai/core";
+import { ConversationRuntime, type AdmissionReservation, type AgentCapabilities, type AgentSessionStore, type AppConfig, type SessionEvent, type SessionBus, type SessionLogStore, type SessionRegistry } from "@rynx-ai/core";
 import type { SessionInteractionResolution } from "@rynx-ai/protocol";
 import type { ControlRuntimeShareAddress, DaemonBrowserArtifactCleanResult, DaemonBrowserArtifactInstallInput, DaemonBrowserArtifactInstallResult, DaemonBrowserArtifactUpdateInput, DaemonBrowserArtifactVersionResult, DaemonCleanupSessionsInput, DaemonCleanupSessionsResult, DaemonChromeInspectionConfigureInput, DaemonChromeInspectionStatus, DaemonShutdownIfIdleResult } from "@rynx-ai/protocol/control";
-import type { PluginInstallCommitInput, PluginInstallCommitResult, PluginInstallPreparation, PluginInstallPrepareInput, PluginManagementItem } from "@rynx-ai/protocol/plugin-management";
+import type { PluginInstallCommitInput, PluginInstallCommitResult, PluginInstallPreparation, PluginInstallPrepareInput, PluginManagementItem, PluginMarketplaceAddInput, PluginMarketplaceItem } from "@rynx-ai/protocol/plugin-management";
+import type { PluginJsonValue } from "@rynx-ai/plugin-sdk";
 import type { PairingOffer } from "@rynx-ai/protocol/direct-runtime";
 import type { DaemonStatus } from "@rynx-ai/protocol/remote-runtime";
 import type { RuntimeBrowserBootstrapCredential, RuntimeBrowserEndpointDescriptor } from "@rynx-ai/protocol/runtime-browser-bootstrap";
@@ -13,20 +14,21 @@ import type { RuntimeEmulatorSurfaceImageFrame, RuntimeEmulatorSurfaceReadyFrame
 import type { RemoteRuntimeRpcMethod, RemoteRuntimeRpcParams, RemoteRuntimeRpcResultFor, RemoteRuntimeSequencedSessionEvent } from "@rynx-ai/protocol/remote-runtime-rpc";
 import type { PluginAgentSummary, PluginResolvedSessionExecution, PluginSessionExecutionSnapshot } from "@rynx-ai/plugin-sdk";
 import { RunnerManager, type CodexSessionStore, type RunnerSessionContextProvider } from "@rynx-ai/runtime";
-import { ChannelManager } from "./channel-manager.js";
 import { type ControlPlaneDeps, type LocalSessionResourceHost, type SessionResourceLifecycle } from "./control-api.js";
+import type { MachineSessionService } from "./machine-session-service.js";
 import type { DaemonRuntimeHost } from "./remote-runtime.js";
 import { type AttachDesktopBrowserHostServerOptions } from "./desktop-browser-host.js";
+import { type SessionPortalAuthorizationPorts } from "./session-portal.js";
+export { createSessionPortalApp, startSessionPortal } from "./session-portal.js";
+export type { SessionPortalAuthorization, SessionPortalAuthorizationPorts, SessionPortalOptions, SessionPortalServer, } from "./session-portal.js";
 import { SessionRuntimeIndex } from "./session-runtime-index.js";
 import type { SessionEmulatorService } from "./session-emulator-service.js";
 import { type SessionTerminalHost } from "./session-terminal-host.js";
 import type { ProviderCliManagementHost } from "./provider-cli-host.js";
 import { type RuntimeWebAccessPolicy } from "./runtime-web-auth.js";
-export { ChannelManager } from "./channel-manager.js";
-export type { ChannelInstanceStatus } from "./channel-manager.js";
 export type { ProviderCliManagementHost, ProviderCliStatusHost, } from "./provider-cli-host.js";
 export { MachineSessionService, MachineSessionServiceFailure, MachineSessionServiceInputError, synthesizeSessionTitle, } from "./machine-session-service.js";
-export type { MachineSessionAgentCatalogPort, MachineSessionCreateInput, MachineSessionCreateResult, MachineSessionDeleteResult, MachineSessionInterruptPort, MachineSessionInterruptResult, MachineSessionInteractionResult, MachineSessionListInput, MachineSessionListPage, MachineSessionMessageResult, MachineSessionMessageEnqueueResult, MachineSessionMessageInput, MachineSessionMessageOperationState, MachineSessionPendingMessage, MachineSessionPendingMessagePort, MachineSessionPreparedInput, MachineSessionResourcePort, MachineSessionRunnerPort, MachineSessionRuntimeStatePort, MachineSessionServiceFailureCode, MachineSessionServiceOptions, MachineSessionServicePorts, MachineSessionSnapshotInput, MachineSessionSnapshotPage, MachineSessionWatch, } from "./machine-session-service.js";
+export type { MachineSessionAgentCatalogPort, MachineSessionCreateInput, MachineSessionCreateResult, MachineSessionDeleteResult, MachineSessionForkInput, MachineSessionForkOperationRecord, MachineSessionForkOperationState, MachineSessionForkResult, MachineSessionForkStorePort, MachineSessionNativeRotationInput, MachineSessionInterruptPort, MachineSessionInterruptResult, MachineSessionInteractionResult, MachineSessionListInput, MachineSessionListPage, MachineSessionMessageResult, MachineSessionMessageEnqueueResult, MachineSessionMessageInput, MachineSessionMessageOperationState, MachineSessionPendingMessage, MachineSessionPendingMessagePort, MachineSessionPreparedInput, MachineSessionResourcePort, MachineSessionRunnerPort, MachineSessionRuntimeStatePort, MachineSessionServiceFailureCode, MachineSessionServiceOptions, MachineSessionServicePorts, MachineSessionSnapshotInput, MachineSessionSnapshotPage, MachineSessionWatch, } from "./machine-session-service.js";
 export { SessionBrowserHostError, SessionBrowserService, SessionBrowserServiceError, SessionBrowserSurfaceUnsupportedError, } from "./session-browser-service.js";
 export type { SessionBrowserHost, SessionBrowserHostCreateInput, SessionBrowserHostErrorCode, SessionBrowserHostEvent, SessionBrowserHostHandle, SessionBrowserHostPage, SessionBrowserHostSurfaceFrame, SessionBrowserHostSurfaceOpenInput, SessionBrowserHostSurfaceSource, SessionBrowserHostSurfaceTrustedInput, SessionBrowserHostSurfaceViewport, SessionBrowserHostSnapshot, SessionBrowserInspectionEndpoint, SessionBrowserInspectionTarget, SessionBrowserRegistryPort, SessionBrowserServiceErrorCode, SessionBrowserServiceOptions, SessionBrowserServicePorts, SessionBrowserSurfaceOpenInput, SessionBrowserSurfaceSource, } from "./session-browser-service.js";
 export { SessionEmulatorBindingConflictError, SessionEmulatorService, SessionEmulatorServiceError, } from "./session-emulator-service.js";
@@ -48,14 +50,14 @@ export { RemoteRuntimeDispatcher } from "./remote-runtime-dispatcher.js";
 export type { AuthenticatedRuntimeSubject, RemoteRuntimeEmulatorHost, RemoteRuntimeSessionEmulatorHost, RemoteRuntimeDispatchContext, RemoteRuntimeDispatcherOptions, } from "./remote-runtime-dispatcher.js";
 export { createRunnerSessionTerminalHost, SessionTerminalOpenError, SessionTerminalStreamError, } from "./session-terminal-host.js";
 export type { RunnerSessionTerminalHostOptions, RunnerSessionTerminalHost, SessionTerminalAttachment, SessionTerminalCloseInfo, SessionTerminalCloseReason, SessionTerminalHost, SessionTerminalOpenErrorCode, SessionTerminalOpenOptions, SessionTerminalRole, } from "./session-terminal-host.js";
-export type { ControlChannel, ControlChannelType, ControlInstanceConfig, ControlInstanceStatus, ControlAgentSummary, } from "@rynx-ai/protocol/control";
+export type { ControlAgentSummary } from "@rynx-ai/protocol/control";
+export { listRuntimeModels } from "@rynx-ai/runtime";
 export interface CreateAppOptions {
     config?: AppConfig;
     /** When present, mount the control plane (page + JSON API) beside `/health`.
      *  `runtime`/`sessionBus`/`sessionLog`/`runnerManager` (from `startServer`'s
      *  scope) enable the channel-agnostic `/api/sessions` agent-run endpoints. */
     control?: {
-        manager: ChannelManager;
         deps: ControlPlaneDeps;
         runtime?: ConversationRuntime;
         sessionBus?: SessionBus;
@@ -63,8 +65,6 @@ export interface CreateAppOptions {
         runnerManager?: RunnerManager;
         sessionStore?: CodexSessionStore;
         pluginRuntimeStatus?: () => unknown;
-        pluginRuntimeReload?: (pluginId: string) => Promise<unknown>;
-        pluginRuntimeEnsure?: (pluginId: string) => Promise<unknown>;
         daemonManagement?: DaemonManagementHost;
         remoteRuntime?: DaemonRuntimeHost;
         remoteRuntimeAdmin?: RemoteRuntimeAdminHost;
@@ -72,6 +72,7 @@ export interface CreateAppOptions {
         runtimeWebAccess?: RuntimeWebAccessPolicy;
         runtimeConnectionResolver?: RuntimeConnectionResolverHost;
         localSessionResources?: LocalSessionResourceHost;
+        localMachineSessions?: MachineSessionService;
         sessionEmulators?: SessionEmulatorService;
         /** Host lifecycle signal for ending SSE/video streams before drain. */
         shutdownSignal?: AbortSignal;
@@ -83,29 +84,20 @@ export interface CreateAppOptions {
 }
 export interface StartServerOptions {
     config?: AppConfig;
-    /** Static set of channel instances to mount, each with its own context. */
-    channelInstances?: ChannelInstanceDescriptor[];
     /**
-     * Dynamic source of channel instance descriptors, re-read on reloads. When
-     * provided, the server mounts them via a {@link ChannelManager} (the seam the
-     * control plane drives). Takes precedence over `channelInstances`.
-     */
-    loadInstances?: () => Promise<ChannelInstanceDescriptor[]>;
-    /**
-     * Control-plane deps (config + agent-spec mutators + log tail) injected by the
-     * daemon. When present (and instances are managed), the server serves the
-     * control page + JSON API. Requires `loadInstances`/`channelInstances`.
+     * Control-plane deps injected by the daemon. Plugin/channel management is
+     * exposed through the plugin host rather than generic channel instances.
      */
     control?: ControlPlaneDeps;
     /**
      * Durable canonical session log (the daemon injects the SQLite-backed store).
-     * Absent ⇒ channels render from the live stream without persisting.
+     * Absent means live session events are not persisted by this server.
      */
     sessionLog?: SessionLogStore;
     /**
-     * Unified machine-session registry (the daemon injects the SQLite-backed store
-     * over `sessions`). Handed to mounted channels so they register an identity row
-     * per session; the control plane lists every session uniformly from it.
+     * Unified machine-session registry (the daemon injects the SQLite-backed
+     * store over `sessions`). Plugins reach it through Host RPC; the control plane
+     * lists every session uniformly from it.
      */
     sessionRegistry?: SessionRegistry;
     /** Trusted daemon-side bridge for isolated plugin runners. Installed plugin
@@ -124,6 +116,8 @@ export interface StartServerOptions {
     runtimeConnectionResolver?: RuntimeConnectionResolverHost;
     /** In-process resource authority used only by the Local Runtime BFF. */
     localSessionResources?: LocalSessionResourceHost;
+    /** Canonical same-daemon Session service used by Local compatibility routes. */
+    localMachineSessions?: MachineSessionService;
     /** Runtime-owned Session Emulator binding authority for Local compatibility routes. */
     sessionEmulators?: SessionEmulatorService;
     /** Pre-composed daemon-owned Session runtime. Supplying this lets the daemon
@@ -141,6 +135,9 @@ export interface StartServerOptions {
     providerClis?: ProviderCliManagementHost;
     /** Private resident-app Browser Host socket, authenticated by daemonManagement. */
     desktopBrowserHost?: Omit<AttachDesktopBrowserHostServerOptions, "managementToken">;
+    /** Hashed ticket/grant authority for the native Session Portal. Required
+     * when RYNX_SESSION_PORTAL_PORT enables that listener. */
+    sessionPortalAuthorization?: SessionPortalAuthorizationPorts;
 }
 export interface SessionRuntimeServices {
     sessionStore: CodexSessionStore;
@@ -148,6 +145,7 @@ export interface SessionRuntimeServices {
     sessionBus: SessionBus;
     sessionRuntimeIndex: SessionRuntimeIndex;
     conversationRuntime: ConversationRuntime;
+    publishSessionEvent: (sessionId: string, event: SessionEvent) => Promise<void>;
 }
 export interface PluginRuntimeHostServices {
     conversationRuntime: ConversationRuntime;
@@ -163,15 +161,23 @@ export interface PluginRuntimeHostServices {
         }): Promise<PluginResolvedSessionExecution>;
     };
     interruptSession(sessionId: string): Promise<boolean>;
+    terminateSession?(sessionId: string): Promise<boolean>;
     resolveSessionInteraction(sessionId: string, interactionId: string, resolution: SessionInteractionResolution): Promise<{
         disposition: "applied" | "already_resolved" | "not_found" | "invalid";
     }>;
+    /** Dynamic daemon-wide admission state. Plugin runtimes may start while this is
+     * closed, but cannot provision Sessions or begin Turns. */
+    admissionOpen?: () => boolean;
+    admissionReserve?: () => AdmissionReservation | undefined;
+    sessionPortal?: {
+        scheme: "http" | "https";
+        bindHost: string;
+        port: number;
+    };
 }
 export interface PluginRuntimeLifecycle {
     bindHostServices(services: PluginRuntimeHostServices): void;
     startPluginRuntimes(): Promise<void>;
-    reloadPluginRuntime(pluginId: string): Promise<unknown>;
-    ensurePluginRuntime(pluginId: string): Promise<unknown>;
     /** Cached process/contribution health; must not block on plugin RPC. */
     statusSnapshot(): unknown;
     dispose(): Promise<void>;
@@ -206,8 +212,24 @@ export interface PluginManagementHost {
     prepareInstallation(input: PluginInstallPrepareInput, context: DaemonManagementInvocationContext): Promise<PluginInstallPreparation>;
     commitInstallation(token: string, input: PluginInstallCommitInput, context: DaemonManagementInvocationContext): Promise<PluginInstallCommitResult>;
     cancelPreparation(token: string): boolean | Promise<boolean>;
+    settingsUi(pluginId: string): {
+        generation: string;
+        assetGeneration: string;
+        html: string;
+    } | undefined;
+    settingsUiAsset(pluginId: string, assetGeneration: string, assetPath: string): {
+        contentType: string;
+        data: Buffer;
+    } | undefined;
+    callSettings(pluginId: string, generation: string, method: string, params: PluginJsonValue | undefined, context: DaemonManagementInvocationContext): Promise<PluginJsonValue>;
     dispose?(): void | Promise<void>;
 }
+export interface PluginMarketplaceManagementHost {
+    list(): PluginMarketplaceItem[] | Promise<PluginMarketplaceItem[]>;
+    add(input: PluginMarketplaceAddInput, context: DaemonManagementInvocationContext): Promise<PluginMarketplaceItem>;
+    refresh(id: string, context: DaemonManagementInvocationContext): Promise<PluginMarketplaceItem>;
+    remove(id: string): boolean | Promise<boolean>;
+}
 export interface BrowserArtifactManagementHost {
     install(input: DaemonBrowserArtifactInstallInput, context: DaemonManagementInvocationContext): Promise<DaemonBrowserArtifactInstallResult>;
     update(input: DaemonBrowserArtifactUpdateInput, context: DaemonManagementInvocationContext): Promise<DaemonBrowserArtifactInstallResult>;
@@ -230,9 +252,15 @@ export interface DaemonManagementHost {
         restartRequired: boolean;
     };
     /** Perform one final activity check and schedule shutdown only when idle. */
-    shutdownIfIdle?(): DaemonShutdownIfIdleResult;
+    shutdownIfIdle?(maintenanceLeaseToken?: string): DaemonShutdownIfIdleResult | Promise<DaemonShutdownIfIdleResult>;
+    /** Release a cross-process maintenance fence after a verified cutover. */
+    releaseMaintenanceLease?(maintenanceLeaseToken: string): {
+        outcome: "released" | "not_active" | "denied";
+    };
     /** Stateful plugin registry operations owned by the resident daemon. */
     pluginManagement?: PluginManagementHost;
+    /** Registered Git/local plugin catalogs. */
+    pluginMarketplaces?: PluginMarketplaceManagementHost;
     /** Stateful Chrome for Testing artifact operations owned by the daemon. */
     browserArtifacts?: BrowserArtifactManagementHost;
     /** Destructive maintenance operations over daemon-owned state. */
@@ -407,6 +435,8 @@ export declare function createSessionRuntimeServices(input: {
     sessionLog?: SessionLogStore;
     onMirrorError?: (error: unknown, sessionId: string) => void;
     sessionContextProvider?: RunnerSessionContextProvider;
+    admissionOpen?: () => boolean;
+    admissionReserve?: () => AdmissionReservation | undefined;
 }): SessionRuntimeServices;
 /**
  * The HTTP surface is just a liveness probe for container orchestration — all
@@ -415,4 +445,4 @@ export declare function createSessionRuntimeServices(input: {
  * no agent request / response / SSE endpoints are exposed here.
  */
 export declare function createApp({ config, control }?: CreateAppOptions): Koa<Koa.DefaultState, Koa.DefaultContext>;
-export declare function startServer({ config, channelInstances, loadInstances, control, sessionLog, sessionRegistry, pluginRuntime, daemonManagement, remoteRuntime, remoteRuntimeAdmin, runtimeTargetControl, runtimeConnectionResolver, localSessionResources, sessionEmulators, sessionRuntimeServices, sessionLifecycle, sessionTerminals, runtimeLocalBrowser, providerClis, desktopBrowserHost, }?: StartServerOptions): Promise<RynxServer>;
+export declare function startServer({ config, control, sessionLog, sessionRegistry, pluginRuntime, daemonManagement, remoteRuntime, remoteRuntimeAdmin, runtimeTargetControl, runtimeConnectionResolver, localSessionResources, localMachineSessions, sessionEmulators, sessionRuntimeServices, sessionLifecycle, sessionTerminals, runtimeLocalBrowser, providerClis, desktopBrowserHost, sessionPortalAuthorization, }?: StartServerOptions): Promise<RynxServer>;