@rynx-ai/server 0.1.11-beta.30 → 0.1.11-beta.32

package/dist/machine-session-service.js

@@ -115,7 +115,8 @@ export class MachineSessionService {
             limit: limit + 1,
         })).slice(0, limit + 1).map((item) => structuredClone(item));
         const runtime = cloneRuntimeSnapshot(this.ports.runtimeState.snapshot(sessionId));
-        const empty = snapshotPage(sessionId, [], runtime, false);
+        const pendingInputs = this.ports.pendingInputs?.snapshotFor(sessionId) ?? [];
+        const empty = snapshotPage(sessionId, [], pendingInputs, runtime, false);
         const items = [];
         let itemsJsonBytes = 0;
         for (const item of candidates.slice(0, limit)) {
@@ -123,14 +124,14 @@ export class MachineSessionService {
             const nextCount = items.length + 1;
             const hasMore = candidates.length > nextCount;
             if (items.length > 0 &&
-                snapshotPageJsonByteLength(sessionId, nextItemsJsonBytes, item.id, runtime, hasMore) > this.snapshotPageMaxBytes) {
+                snapshotPageJsonByteLength(sessionId, nextItemsJsonBytes, item.id, pendingInputs, runtime, hasMore) > this.snapshotPageMaxBytes) {
                 break;
             }
             items.push(item);
             itemsJsonBytes = nextItemsJsonBytes;
         }
         return items.length > 0
-            ? snapshotPage(sessionId, items, runtime, candidates.length > items.length)
+            ? snapshotPage(sessionId, items, pendingInputs, runtime, candidates.length > items.length)
             : empty;
     }
     /**
@@ -264,7 +265,7 @@ export class MachineSessionService {
                     statusCode: 409,
                 });
             }
-            // Omnigent parity: native state is authoritative. Do not make a failed
+            // Native state is authoritative. Do not make a failed
             // toggle survive reload when the loaded thread rejected it.
             try {
                 await updateMode.call(executionPort.runner, sessionId, collaborationMode);
@@ -670,9 +671,14 @@ export class MachineSessionService {
             }
             if (prepared.operationState === "injected" ||
                 prepared.operationState === "mirrored") {
+                const replayPendingId = prepared.operationState === "injected" && request.clientMessageId
+                    ? this.ports.pendingInputs
+                        ?.findByClientMessageId(sessionId, request.clientMessageId)?.pendingId
+                    : undefined;
                 return {
                     ok: true,
                     injected: true,
+                    ...(replayPendingId ? { pendingId: replayPendingId } : {}),
                     ...(includeResponseId && prepared.responseId
                         ? { responseId: prepared.responseId }
                         : {}),
@@ -732,6 +738,18 @@ export class MachineSessionService {
             throw abortReason(signal);
         }
         let result;
+        const pendingId = this.ports.pendingInputs && request.clientMessageId
+            ? this.ports.pendingInputs.record(sessionId, {
+                clientMessageId: request.clientMessageId,
+                content: (hasContent
+                    ? request.content
+                    : [{ type: "input_text", text: request.message }]).map((part) => ({ ...part })),
+            })
+            : undefined;
+        const rollbackPendingInput = () => {
+            if (pendingId)
+                this.ports.pendingInputs?.resolve(sessionId, pendingId);
+        };
         try {
             const injectionInput = needsPreparedOperation ? prepared.input : request.message;
             result = turnOptions
@@ -739,6 +757,7 @@ export class MachineSessionService {
                 : await execution.runner.injectMessage(sessionId, injectionInput);
         }
         catch (error) {
+            rollbackPendingInput();
             const failure = execution.runner.lastLiveSessionFailure?.(sessionId)
                 ?? liveSessionFailureFrom(error);
             const reason = failure?.message
@@ -750,6 +769,7 @@ export class MachineSessionService {
         }
         const outcome = result.outcome;
         if (outcome === "failed") {
+            rollbackPendingInput();
             const failure = execution.runner.lastLiveSessionFailure?.(sessionId);
             const reason = failure?.message
                 ?? execution.runner.lastLiveSessionError?.(sessionId)
@@ -760,6 +780,7 @@ export class MachineSessionService {
             throw new MachineSessionServiceFailure("outcome_unknown", `live injection ${outcome}`, reason, failure);
         }
         if (outcome !== "injected" && outcome !== "steered") {
+            rollbackPendingInput();
             const failure = execution.runner.lastLiveSessionFailure?.(sessionId);
             const reason = failure?.message
                 ?? execution.runner.lastLiveSessionError?.(sessionId)
@@ -789,6 +810,7 @@ export class MachineSessionService {
         return {
             ok: true,
             injected: true,
+            ...(pendingId ? { pendingId } : {}),
             ...(includeResponseId && result.responseId ? { responseId: result.responseId } : {}),
             ...(operationExecution ? { operationExecution } : {}),
         };
@@ -987,6 +1009,7 @@ export class MachineSessionService {
         this.ports.execution?.runner.stopRunner(sessionId);
         this.ports.events.close?.(sessionId);
         await this.ports.pendingMessages?.delete(sessionId);
+        this.ports.pendingInputs?.deleteSession(sessionId);
         await this.ports.resources?.deleteSession(sessionId);
         this.ports.registry.remove(sessionId);
         await this.ports.log.deleteSession(sessionId);
@@ -1372,10 +1395,11 @@ function decodeListCursor(value) {
         throw new MachineSessionServiceInputError("cursor is invalid");
     }
 }
-function snapshotPage(sessionId, items, runtime, hasMore) {
+function snapshotPage(sessionId, items, pendingInputs, runtime, hasMore) {
     return {
         sessionId,
         items,
+        pendingInputs,
         runtime,
         hasMore,
         ...(hasMore && items.length > 0 ? { nextAfterId: items.at(-1).id } : {}),
@@ -1383,10 +1407,10 @@ function snapshotPage(sessionId, items, runtime, hasMore) {
 }
 /** Exact UTF-8 size of {@link snapshotPage} without repeatedly serializing the
  * complete item array while searching for a page boundary. */
-function snapshotPageJsonByteLength(sessionId, itemsJsonBytes, finalItemId, runtime, hasMore) {
+function snapshotPageJsonByteLength(sessionId, itemsJsonBytes, finalItemId, pendingInputs, runtime, hasMore) {
     return Buffer.byteLength(`{"sessionId":${JSON.stringify(sessionId)},"items":[`, "utf8")
         + itemsJsonBytes
-        + Buffer.byteLength(`],"runtime":${JSON.stringify(runtime)},"hasMore":${hasMore}${hasMore ? `,"nextAfterId":${JSON.stringify(finalItemId)}` : ""}}`, "utf8");
+        + Buffer.byteLength(`],"pendingInputs":${JSON.stringify(pendingInputs)},"runtime":${JSON.stringify(runtime)},"hasMore":${hasMore}${hasMore ? `,"nextAfterId":${JSON.stringify(finalItemId)}` : ""}}`, "utf8");
 }
 function sessionSummary(id, meta, log, runtimeState, pendingState) {
     const createdAt = meta?.createdAt ?? timestampFromEpoch(log?.createdAt, "createdAt");

package/dist/remote-runtime-dispatcher.d.ts

@@ -35,7 +35,7 @@ export interface RemoteRuntimeProjectHost {
     remove(projectId: string): boolean | Promise<boolean>;
 }
 export type RemoteRuntimeSessionHost = Pick<MachineSessionService, "list" | "snapshot" | "watch" | "interrupt" | "agentOptions" | "launchOptions" | "executionSettings" | "updateExecutionSettings" | "create" | "fork" | "sendMessage" | "resourcePolicy" | "beginResourceUpload" | "writeResourceUploadChunk" | "commitResourceUpload" | "getResource" | "readResource" | "deleteResource" | "getFile" | "readFile" | "getWorkspaceFile" | "readWorkspaceFile" | "enqueueMessage" | "startTerminal" | "delete" | "resolveInteraction">;
-export type RemoteRuntimeBrowserHost = Pick<SessionBrowserService, "getState" | "open" | "close" | "createPage" | "closePage" | "activatePage" | "navigatePage" | "goBack" | "goForward" | "reload">;
+export type RemoteRuntimeBrowserHost = Pick<SessionBrowserService, "getState" | "getRequestHeaders" | "setRequestHeaders" | "open" | "close" | "createPage" | "closePage" | "activatePage" | "navigatePage" | "goBack" | "goForward" | "reload">;
 export type RemoteRuntimeSessionEmulatorHost = Pick<SessionEmulatorService, "getState" | "listDevices" | "attach" | "detach" | "tap" | "type" | "button" | "rotate" | "launch" | "gesture" | "releaseDevice" | "stopDevice">;
 export interface OpenRemoteRuntimeSessionEvents {
     sessionId: string;

package/dist/remote-runtime-dispatcher.js

@@ -176,6 +176,10 @@ export class RemoteRuntimeDispatcher {
                     return await this.withSessions(request, (sessions) => sessions.resolveInteraction(request.params.sessionId, request.params.interactionId, request.params.resolution));
                 case "browser.state.get":
                     return await this.withBrowsers(request, (browsers) => browsers.getState(request.params));
+                case "browser.request-headers.get":
+                    return await this.withBrowsers(request, (browsers) => browsers.getRequestHeaders(request.params));
+                case "browser.request-headers.set":
+                    return await this.withBrowsers(request, (browsers) => browsers.setRequestHeaders(request.params));
                 case "browser.open":
                     return await this.withBrowsers(request, (browsers) => browsers.open(request.params));
                 case "browser.close":
@@ -198,7 +202,7 @@ export class RemoteRuntimeDispatcher {
             return rpcError(request.id, "method_not_found", "Remote Runtime method is not supported");
         }
         catch (error) {
-            this.options.onError?.(error, request);
+            this.options.onError?.(error, diagnosticRequest(request));
             const mapped = mapHostError(request, error);
             return rpcError(request.id, mapped.code, mapped.message);
         }
@@ -302,6 +306,20 @@ export class RemoteRuntimeDispatcher {
         return rpcResult(request, await invoke(browsers));
     }
 }
+function diagnosticRequest(request) {
+    if (request.method !== "browser.request-headers.set")
+        return request;
+    return {
+        ...request,
+        params: {
+            ...request.params,
+            headers: request.params.headers.map((header) => ({
+                ...header,
+                value: "[redacted]",
+            })),
+        },
+    };
+}
 function mapHostError(request, error) {
     if (error instanceof ProjectNotFoundError) {
         return { code: "not_found", message: "Runtime Project was not found" };
@@ -322,6 +340,13 @@ function mapHostError(request, error) {
                 return { code: "not_found", message: "Browser resource was not found" };
             case "generation_mismatch":
                 return { code: "conflict", message: "Browser generation is stale" };
+            case "revision_mismatch":
+                return { code: "conflict", message: "Browser request headers revision is stale" };
+            case "unsupported":
+                return {
+                    code: "failed_precondition",
+                    message: "Browser request headers are unsupported by the active Browser Host",
+                };
             case "unavailable":
             case "capacity":
             case "shutting_down":

package/dist/remote-runtime-session-projection.d.ts

@@ -9,6 +9,7 @@ export declare function projectRemoteRuntimeSessionListResult(value: unknown): R
 export declare function projectRemoteRuntimeSessionSnapshotResult(value: {
     sessionId: string;
     items: SessionItem[];
+    pendingInputs: NonNullable<RemoteRuntimeSessionSnapshotResult["pendingInputs"]>;
     runtime: unknown;
     hasMore: boolean;
     nextAfterId?: string;

package/dist/remote-runtime-session-projection.js

@@ -27,6 +27,7 @@ export function projectRemoteRuntimeSessionSnapshotResult(value) {
     const candidate = {
         sessionId: value.sessionId,
         items,
+        pendingInputs: structuredClone(value.pendingInputs),
         runtime,
         hasMore: value.hasMore,
         ...(value.nextAfterId === undefined ? {} : { nextAfterId: value.nextAfterId }),

package/dist/server.d.ts

@@ -15,6 +15,7 @@ import type { RemoteRuntimeRpcMethod, RemoteRuntimeRpcParams, RemoteRuntimeRpcRe
 import { RunnerManager, type CodexSessionStore, type RunnerSessionContextProvider } from "@rynx-ai/runtime";
 import { type ControlPlaneDeps, type LocalSessionResourceHost, type SessionResourceLifecycle } from "./control-api.js";
 import type { MachineSessionService } from "./machine-session-service.js";
+import type { MachineSessionPendingInputPort } from "./session-pending-inputs.js";
 import type { DaemonRuntimeHost } from "./remote-runtime.js";
 import { type AttachDesktopBrowserHostServerOptions } from "./desktop-browser-host.js";
 import { type SessionPortalAuthorizationPorts } from "./session-portal.js";
@@ -25,11 +26,14 @@ import type { SessionEmulatorService } from "./session-emulator-service.js";
 import { type SessionTerminalHost } from "./session-terminal-host.js";
 import type { ProviderCliManagementHost } from "./provider-cli-host.js";
 import { type RuntimeWebAccessPolicy } from "./runtime-web-auth.js";
+import type { SessionBrowserRequestHeadersPort } from "./session-browser-service.js";
 export type { ProviderCliManagementHost, ProviderCliStatusHost, } from "./provider-cli-host.js";
 export { MachineSessionService, MachineSessionServiceFailure, MachineSessionServiceInputError, synthesizeSessionTitle, } from "./machine-session-service.js";
+export { SessionPendingInputIndex } from "./session-pending-inputs.js";
 export type { MachineSessionAgentCatalogPort, MachineSessionCreateInput, MachineSessionCreateResult, MachineSessionDeleteResult, MachineSessionForkInput, MachineSessionForkOperationRecord, MachineSessionForkOperationState, MachineSessionForkResult, MachineSessionForkStorePort, MachineSessionNativeRotationInput, MachineSessionInterruptPort, MachineSessionInterruptResult, MachineSessionInteractionResult, MachineSessionListInput, MachineSessionListPage, MachineSessionMessageResult, MachineSessionMessageEnqueueResult, MachineSessionMessageInput, MachineSessionMessageOperationState, MachineSessionPendingMessage, MachineSessionPendingMessagePort, MachineSessionPreparedInput, MachineSessionResourcePort, MachineSessionRunExecutionSelection, MachineSessionRunExecutionSnapshot, MachineSessionRunnerPort, MachineSessionRuntimeStatePort, MachineSessionServiceFailureCode, MachineSessionServiceOptions, MachineSessionServicePorts, MachineSessionSnapshotInput, MachineSessionSnapshotPage, MachineSessionWatch, StartedMachineSessionRun, } from "./machine-session-service.js";
+export type { MachineSessionPendingInput, MachineSessionPendingInputPort, } from "./session-pending-inputs.js";
 export { SessionBrowserHostError, SessionBrowserService, SessionBrowserServiceError, SessionBrowserSurfaceUnsupportedError, } from "./session-browser-service.js";
-export type { SessionBrowserHost, SessionBrowserHostCreateInput, SessionBrowserHostErrorCode, SessionBrowserHostEvent, SessionBrowserHostHandle, SessionBrowserHostPage, SessionBrowserHostSurfaceFrame, SessionBrowserHostSurfaceOpenInput, SessionBrowserHostSurfaceSource, SessionBrowserHostSurfaceTrustedInput, SessionBrowserHostSurfaceViewport, SessionBrowserHostSnapshot, SessionBrowserInspectionEndpoint, SessionBrowserInspectionTarget, SessionBrowserRegistryPort, SessionBrowserServiceErrorCode, SessionBrowserServiceOptions, SessionBrowserServicePorts, SessionBrowserSurfaceOpenInput, SessionBrowserSurfaceSource, } from "./session-browser-service.js";
+export type { SessionBrowserHost, SessionBrowserHostCreateInput, SessionBrowserHostErrorCode, SessionBrowserHostEvent, SessionBrowserHostHandle, SessionBrowserHostPage, SessionBrowserHostSurfaceFrame, SessionBrowserHostSurfaceOpenInput, SessionBrowserHostSurfaceSource, SessionBrowserHostSurfaceTrustedInput, SessionBrowserHostSurfaceViewport, SessionBrowserHostSnapshot, SessionBrowserInspectionEndpoint, SessionBrowserInspectionTarget, SessionBrowserRegistryPort, SessionBrowserRequestHeadersPort, SessionBrowserServiceErrorCode, SessionBrowserServiceOptions, SessionBrowserServicePorts, SessionBrowserSurfaceOpenInput, SessionBrowserSurfaceSource, } from "./session-browser-service.js";
 export { SessionEmulatorBindingConflictError, SessionEmulatorService, SessionEmulatorServiceError, } from "./session-emulator-service.js";
 export type { SessionEmulatorBindingRecord, SessionEmulatorBindingStore, SessionEmulatorServiceErrorCode, SessionEmulatorServiceOptions, SessionEmulatorSurface, } from "./session-emulator-service.js";
 export { SessionBrowserSurfaceCoordinator } from "./session-browser-surface-coordinator.js";
@@ -152,6 +156,7 @@ export interface PluginRuntimeHostServices {
     sessionRegistry: SessionRegistry;
     sessionRuns: Pick<MachineSessionService, "startRun">;
     sessionFiles: Pick<MachineSessionService, "resolveResourcePath">;
+    sessionBrowserRequestHeaders?: SessionBrowserRequestHeadersPort;
     agentCatalog: {
         list(): Promise<PluginAgentSummary[]>;
         get(id: string): Promise<PluginAgentSummary | null>;
@@ -163,6 +168,15 @@ export interface PluginRuntimeHostServices {
     sessionActivity(sessionId: string): PluginSessionActivitySnapshot;
     interruptSession(sessionId: string): Promise<boolean>;
     terminateSession?(sessionId: string): Promise<boolean>;
+    sessionTimeline?: {
+        hasItem(sessionId: string, itemId: string): Promise<boolean>;
+        projectText(input: {
+            sessionId: string;
+            responseId: string;
+            itemId: string;
+            text: string;
+        }): Promise<void>;
+    };
     resolveSessionInteraction(sessionId: string, interactionId: string, resolution: SessionInteractionResolution): Promise<{
         disposition: "applied" | "already_resolved" | "not_found" | "invalid";
     }>;
@@ -434,6 +448,14 @@ export declare class SessionMirrorQueue {
 export declare function createSessionRuntimeServices(input: {
     config: AppConfig;
     sessionLog?: SessionLogStore;
+    pendingInputs?: MachineSessionPendingInputPort;
+    onPendingInputPersisted?: (input: {
+        sessionId: string;
+        pendingId: string;
+        clientMessageId: string;
+        responseId: string;
+        messageItemId: string;
+    }) => void | Promise<void>;
     onMirrorError?: (error: unknown, sessionId: string) => void;
     sessionContextProvider?: RunnerSessionContextProvider;
     admissionOpen?: () => boolean;

package/dist/server.js

@@ -17,6 +17,7 @@ import { SessionRuntimeIndex } from "./session-runtime-index.js";
 import { createRunnerSessionTerminalHost, } from "./session-terminal-host.js";
 import { runtimeWebAccessPolicyForBindHost, } from "./runtime-web-auth.js";
 export { MachineSessionService, MachineSessionServiceFailure, MachineSessionServiceInputError, synthesizeSessionTitle, } from "./machine-session-service.js";
+export { SessionPendingInputIndex } from "./session-pending-inputs.js";
 export { SessionBrowserHostError, SessionBrowserService, SessionBrowserServiceError, SessionBrowserSurfaceUnsupportedError, } from "./session-browser-service.js";
 export { SessionEmulatorBindingConflictError, SessionEmulatorService, SessionEmulatorServiceError, } from "./session-emulator-service.js";
 export { SessionBrowserSurfaceCoordinator } from "./session-browser-surface-coordinator.js";
@@ -68,11 +69,28 @@ export function createSessionRuntimeServices(input) {
     const sessionBus = new InMemorySessionBus();
     const sessionRuntimeIndex = new SessionRuntimeIndex();
     const sessionMirrorQueue = new SessionMirrorQueue(async (sessionId, event) => {
-        const finalized = await finalizeGeneratedImageEvent(sessionId, event, input);
+        const generatedImageFinalized = await finalizeGeneratedImageEvent(sessionId, event, input);
+        const pendingFinalized = resolvePendingInputEvent(sessionId, generatedImageFinalized, input.pendingInputs);
+        const finalized = pendingFinalized.event;
         sessionRuntimeIndex.observe(sessionId, finalized);
         await persistSessionEvent(sessionId, finalized, {
             sessionLog: input.sessionLog,
             sessionBus,
+            ...(input.onPendingInputPersisted
+                ? {
+                    onInputPersisted: async (persistedEvent) => {
+                        if (!persistedEvent.clearedPendingId || !pendingFinalized.clientMessageId)
+                            return;
+                        await input.onPendingInputPersisted({
+                            sessionId,
+                            pendingId: persistedEvent.clearedPendingId,
+                            clientMessageId: pendingFinalized.clientMessageId,
+                            responseId: persistedEvent.item.responseId,
+                            messageItemId: persistedEvent.item.id,
+                        });
+                    },
+                }
+                : {}),
         });
     });
     const mirrorSessionEvent = (sessionId, event) => {
@@ -97,6 +115,47 @@ export function createSessionRuntimeServices(input) {
         publishSessionEvent: mirrorSessionEvent,
     };
 }
+/** Drain the oldest pending web input when the Provider transcript produces a
+ * real user record. The transcript is the only durable writer; the returned id
+ * lets clients replace the exact temporary bubble. */
+function resolvePendingInputEvent(sessionId, event, pendingInputs) {
+    if (event.type !== "session.input.consumed" ||
+        event.item.type !== "message" ||
+        event.item.data.role !== "user" ||
+        event.item.data.isMeta) {
+        return { event };
+    }
+    const pending = pendingInputs?.resolveOldest(sessionId);
+    if (!pending)
+        return { event };
+    const fileParts = pending.content.filter((part) => part.type === "input_image" || part.type === "input_file");
+    const alreadyHasFiles = event.item.data.content.some((part) => part.type === "input_image" || part.type === "input_file");
+    const containsInternalResourceMarker = event.item.data.content.some((part) => part.type === "input_text" &&
+        /\[\[RYNX_(?:IMAGE|FILE)_RESOURCE\s/.test(part.text));
+    const content = containsInternalResourceMarker
+        ? pending.content
+        : fileParts.length > 0 && !alreadyHasFiles
+            ? [...fileParts, ...event.item.data.content]
+            : event.item.data.content;
+    return {
+        clientMessageId: pending.clientMessageId,
+        event: {
+            ...event,
+            clearedPendingId: pending.pendingId,
+            ...(content !== event.item.data.content
+                ? {
+                    item: {
+                        ...event.item,
+                        data: {
+                            ...event.item.data,
+                            content,
+                        },
+                    },
+                }
+                : {}),
+        },
+    };
+}
 async function finalizeGeneratedImageEvent(sessionId, event, input) {
     if (event.type !== "response.output_item.done" ||
         event.item.type !== "function_call_output") {
@@ -309,6 +368,36 @@ export async function startServer({ config = loadConfig(), control, sessionLog,
             },
             interruptSession: (sessionId) => runnerManager.interruptLiveSession(sessionId),
             terminateSession: (sessionId) => runnerManager.terminateLiveSession(sessionId),
+            ...(sessionLog
+                ? {
+                    sessionTimeline: {
+                        hasItem: async (sessionId, itemId) => Boolean(await sessionLog.get(sessionId, itemId)),
+                        projectText: async ({ sessionId, responseId, itemId, text }) => {
+                            const event = {
+                                type: "response.output_item.done",
+                                responseId,
+                                item: {
+                                    id: itemId,
+                                    sessionId,
+                                    position: -1,
+                                    responseId,
+                                    status: "completed",
+                                    createdAt: Date.now(),
+                                    createdBy: "plugin_projection",
+                                    type: "message",
+                                    data: { role: "assistant", content: [{ type: "output_text", text }] },
+                                },
+                            };
+                            // Projection is an acknowledged durable operation, unlike the
+                            // provider mirror's deliberately best-effort live fan-out.
+                            // Append first and only then publish; a failed append leaves the
+                            // projection ledger pending so the Plugin can retry safely.
+                            await sessionLog.append(sessionId, [event.item]);
+                            sessionServices.sessionBus.publish(sessionId, event);
+                        },
+                    },
+                }
+                : {}),
             resolveSessionInteraction: (sessionId, interactionId, resolution) => runnerManager.resolveInteraction(sessionId, interactionId, resolution),
             ...(sessionPortalConfig
                 ? {
@@ -392,6 +481,10 @@ export async function startServer({ config = loadConfig(), control, sessionLog,
                 webSocketServers.push(attachEmulatorTouchWs(server, { emulator: control.emulator }));
             }
             startupWebSocketServers = webSocketServers;
+            // Plugin recovery fences and revokes any product-owned Portal authority.
+            // Do not expose the listener until every enabled Plugin got its serialized
+            // startup attempt; startPluginRuntimes absorbs individual failures.
+            await (pluginRuntime?.startPluginRuntimes() ?? Promise.resolve());
             if (sessionPortalConfig) {
                 sessionPortalServer = await startSessionPortal({
                     host: config.RYNX_SESSION_PORTAL_HOST,
@@ -403,15 +496,6 @@ export async function startServer({ config = loadConfig(), control, sessionLog,
                     shutdownSignal: controlShutdown.signal,
                 });
             }
-            const startup = pluginRuntime?.startPluginRuntimes() ?? Promise.resolve();
-            void startup.catch((error) => {
-                console.error(JSON.stringify({
-                    level: "error",
-                    type: "plugin-runtime",
-                    event: "startup_failed",
-                    error: error instanceof Error ? error.message : String(error),
-                }));
-            });
             resolve(bindServerLifecycle(server, {
                 fence: () => {
                     controlShutdown.abort(new Error("Rynx server is shutting down"));
@@ -422,7 +506,6 @@ export async function startServer({ config = loadConfig(), control, sessionLog,
                     sessionPortalServer?.shutdown() ?? Promise.resolve(),
                 ]).then(() => undefined),
                 cleanup: async () => runCleanupSteps([
-                    () => startup.catch(() => undefined),
                     () => Promise.resolve(daemonManagement?.pluginManagement?.dispose?.()),
                     () => pluginRuntime?.dispose() ?? Promise.resolve(),
                     () => runnerManager.stop(),

package/dist/session-browser-service.d.ts

@@ -1,10 +1,14 @@
 import type { AdmissionReservation } from "@rynx-ai/core";
-import { type RuntimeBrowserCloseParams, type RuntimeBrowserCloseResult, type RuntimeBrowserExecutionBackend, type RuntimeBrowserOpenParams, type RuntimeBrowserPageCreateParams, type RuntimeBrowserPageMutationParams, type RuntimeBrowserPageNavigateParams, type RuntimeBrowserState, type RuntimeBrowserStateGetParams } from "@rynx-ai/protocol/runtime-browser";
+import { type RuntimeBrowserCloseParams, type RuntimeBrowserCloseResult, type RuntimeBrowserExecutionBackend, type RuntimeBrowserOpenParams, type RuntimeBrowserPageCreateParams, type RuntimeBrowserPageMutationParams, type RuntimeBrowserPageNavigateParams, type RuntimeBrowserRequestHeadersConfig, type RuntimeBrowserRequestHeadersGetParams, type RuntimeBrowserRequestHeadersPolicy, type RuntimeBrowserRequestHeadersSetParams, type RuntimeBrowserState, type RuntimeBrowserStateGetParams } from "@rynx-ai/protocol/runtime-browser";
 import type { RuntimeBrowserSurfaceFormat, RuntimeBrowserSurfaceInputEvent } from "@rynx-ai/protocol/runtime-browser-surface";
 import { type RuntimeBrowserEndpointDescriptor } from "@rynx-ai/protocol/runtime-browser-bootstrap";
 export interface SessionBrowserHostCreateInput {
     sessionId: string;
     browserGeneration: number;
+    /** Required at this internal boundary so every Host installs the policy
+     * before it permits the first navigation. Wire-version compatibility stays
+     * inside the concrete Host adapter. */
+    requestHeaders: RuntimeBrowserRequestHeadersConfig;
     url?: string;
 }
 /** Generation-scoped physical page state. `hostPageId` never leaves the service. */
@@ -136,6 +140,8 @@ export interface SessionBrowserHostHandle {
     goBack(hostPageId: string): Promise<void>;
     goForward(hostPageId: string): Promise<void>;
     reload(hostPageId: string): Promise<void>;
+    /** Replaces the Session-wide desired request Header projection for this generation. */
+    setRequestHeaders(config: RuntimeBrowserRequestHeadersConfig): Promise<void>;
     close(): Promise<void>;
 }
 /** Physical Browser factory selected by the Runtime composition root. */
@@ -156,19 +162,26 @@ export interface SessionBrowserServiceOptions {
     pageIdFactory?: () => string;
     /** Injectable boot nonce; production randomization fences stale pre-restart mutations. */
     bootGenerationSeed?: number;
+    /** Injectable only for deterministic CAS tests; production uses 128 random bits. */
+    requestHeaderRevisionSeed?: string;
     /**
      * Synchronous daemon admission fence. A successful reservation is held until
      * Browser open has either failed or registered the physical Host handle.
      */
     admissionReserve?: () => AdmissionReservation | undefined;
 }
-export type SessionBrowserHostErrorCode = "unavailable" | "page_not_found" | "capacity" | "outcome_unknown";
+export type SessionBrowserHostErrorCode = "unavailable" | "unsupported" | "page_not_found" | "capacity" | "outcome_unknown";
 /** Expected failure reported by a Browser Host implementation. */
 export declare class SessionBrowserHostError extends Error {
     readonly code: SessionBrowserHostErrorCode;
     constructor(code: SessionBrowserHostErrorCode, message: string, options?: ErrorOptions);
 }
-export type SessionBrowserServiceErrorCode = "invalid_request" | "not_found" | "generation_mismatch" | "unavailable" | "capacity" | "host_failure" | "outcome_unknown" | "shutting_down";
+/** Narrow Session-owned policy port used by transports and Plugin hosting. */
+export interface SessionBrowserRequestHeadersPort {
+    getRequestHeaders(input: RuntimeBrowserRequestHeadersGetParams): Promise<RuntimeBrowserRequestHeadersPolicy>;
+    setRequestHeaders(input: RuntimeBrowserRequestHeadersSetParams): Promise<RuntimeBrowserRequestHeadersPolicy>;
+}
+export type SessionBrowserServiceErrorCode = "invalid_request" | "not_found" | "generation_mismatch" | "revision_mismatch" | "unsupported" | "unavailable" | "capacity" | "host_failure" | "outcome_unknown" | "shutting_down";
 /** Stable application error; transports map the code without exposing Host diagnostics. */
 export declare class SessionBrowserServiceError extends Error {
     readonly code: SessionBrowserServiceErrorCode;
@@ -178,15 +191,18 @@ export declare class SessionBrowserServiceError extends Error {
  * Transport-neutral owner of the Runtime -> Session -> Browser -> Page model.
  * Every operation for one Session shares one queue; different Sessions remain independent.
  */
-export declare class SessionBrowserService {
+export declare class SessionBrowserService implements SessionBrowserRequestHeadersPort {
     private readonly ports;
     private readonly records;
     private readonly generations;
+    private readonly requestHeaderPolicies;
     private readonly queues;
     private readonly deletingSessions;
     private readonly observers;
     private readonly pageIdFactory;
     private readonly bootGenerationSeed;
+    private readonly requestHeaderRevisionSeed;
+    private requestHeaderRevision;
     private readonly admissionReserve?;
     private shuttingDown;
     private closeAllPromise?;
@@ -205,6 +221,8 @@ export declare class SessionBrowserService {
      */
     getInspectionPageEndpoint(input: RuntimeBrowserPageMutationParams): Promise<SessionBrowserInspectionEndpoint>;
     getState(input: RuntimeBrowserStateGetParams): Promise<RuntimeBrowserState | null>;
+    getRequestHeaders(input: RuntimeBrowserRequestHeadersGetParams): Promise<RuntimeBrowserRequestHeadersPolicy>;
+    setRequestHeaders(input: RuntimeBrowserRequestHeadersSetParams): Promise<RuntimeBrowserRequestHeadersPolicy>;
     /**
      * Runtime-local automation handoff. This method is deliberately absent from
      * RemoteRuntimeBrowserHost and Direct RPC so a CDP endpoint cannot cross a
@@ -233,6 +251,8 @@ export declare class SessionBrowserService {
     private closeEveryRecord;
     private createBrowser;
     private reserveOpenAdmission;
+    private currentRequestHeaders;
+    private nextRequestHeadersRevision;
     private closeUnavailableForRecreate;
     private pageMutation;
     private pageMutationParsed;