@rynx-ai/server 0.1.11-beta.30 → 0.1.11-beta.32

package/dist/session-portal.js

@@ -6,6 +6,9 @@ import { WebSocket, WebSocketServer } from "ws";
 import { sendSpaFile } from "./control-web-dist.js";
 export const SESSION_PORTAL_HEADER = "x-rynx-session-portal";
 export const SESSION_PORTAL_QUERY = "portal";
+export const SESSION_PORTAL_SECRET_HEADER = "x-rynx-session-portal-secret";
+export const SESSION_PORTAL_SECRET_QUERY = "portal_secret";
+export const SESSION_PORTAL_EMBED_ORIGIN_QUERY = "embed_origin";
 const MAX_TICKET_BYTES = 256;
 const MAX_FILTERED_RESPONSE_BYTES = 16 * 1024 * 1024;
 const MAX_PENDING_SOCKET_FRAMES = 128;
@@ -29,20 +32,63 @@ const HOP_BY_HOP_HEADERS = new Set([
     "transfer-encoding",
     "upgrade",
 ]);
+class SessionPortalTransportRegistry {
+    transports = new Map();
+    track(portalId, close) {
+        let finish;
+        const done = new Promise((resolve) => { finish = resolve; });
+        const entry = { close, done, finish };
+        const entries = this.transports.get(portalId) ?? new Set();
+        entries.add(entry);
+        this.transports.set(portalId, entries);
+        let finished = false;
+        return () => {
+            if (finished)
+                return;
+            finished = true;
+            entries.delete(entry);
+            if (entries.size === 0)
+                this.transports.delete(portalId);
+            finish();
+        };
+    }
+    async revoke(portalIds) {
+        const draining = [];
+        for (const portalId of portalIds) {
+            const entries = [...(this.transports.get(portalId) ?? [])];
+            this.transports.delete(portalId);
+            for (const entry of entries) {
+                draining.push(entry.done);
+                entry.close();
+            }
+        }
+        await Promise.all(draining);
+    }
+}
 /** Session Portal is a narrow adapter in front of the one Control service. It
  * serves the native SPA, validates Portal grants, and forwards only authorized
  * Session HTTP calls to Control; it owns no Session or Runtime handlers. */
-export function createSessionPortalApp(options) {
+export function createSessionPortalApp(options, transports = new SessionPortalTransportRegistry()) {
     const app = new Koa();
     const bootstrapRouter = new Router();
     app.use(async (ctx, next) => {
         ctx.set("Cache-Control", "no-store");
         ctx.set("Referrer-Policy", "no-referrer");
         ctx.set("X-Content-Type-Options", "nosniff");
-        ctx.set("X-Frame-Options", "DENY");
+        const embedded = embeddedPageBootstrap(ctx, options.authorization);
+        if (embedded)
+            ctx.state.sessionPortalEmbed = embedded;
+        // The redeem shell contains no Session data and must be frameable before
+        // its fragment ticket can be posted. A real Session page is frameable only
+        // after its portal id resolves to the exact still-active embedded grant.
+        const frameOrigin = ctx.path === "/session-portal/redeem"
+            ? sessionPortalEmbedOrigin(ctx)
+            : embedded?.frameOrigin;
+        if (!frameOrigin)
+            ctx.set("X-Frame-Options", "DENY");
         ctx.set("Content-Security-Policy", "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; " +
             "connect-src 'self' ws: wss:; img-src 'self' data: blob:; font-src 'self' data:; " +
-            "base-uri 'none'; form-action 'self'; frame-ancestors 'none'");
+            `base-uri 'none'; form-action 'self'; frame-ancestors ${frameOrigin ?? "'none'"}`);
         if (options.shutdownSignal?.aborted) {
             serviceUnavailable(ctx);
             return;
@@ -64,7 +110,8 @@ export function createSessionPortalApp(options) {
             ctx.body = { error: "invalid_ticket" };
             return;
         }
-        const grant = options.authorization.redeem(ticket);
+        const requestedEmbedOrigin = sessionPortalEmbedOrigin(ctx);
+        const grant = options.authorization.redeem(ticket, requestedEmbedOrigin);
         if (!grant) {
             ctx.status = 401;
             ctx.body = { error: "ticket_expired_or_used" };
@@ -81,9 +128,22 @@ export function createSessionPortalApp(options) {
         const path = grant.scope === "single_session"
             ? `/runtimes/local/sessions/${encodeURIComponent(grant.sessionId)}`
             : "/runtimes/local/sessions";
+        const location = new URL(path, "http://session-portal.invalid");
+        location.searchParams.set(SESSION_PORTAL_QUERY, grant.portalId);
+        if (grant.embedOrigin) {
+            location.searchParams.set(SESSION_PORTAL_EMBED_ORIGIN_QUERY, grant.embedOrigin);
+        }
         ctx.body = {
-            location: `${path}?${SESSION_PORTAL_QUERY}=${encodeURIComponent(grant.portalId)}`,
+            location: `${location.pathname}${location.search}`,
             expiresAt: grant.expiresAt,
+            ...(grant.embedOrigin
+                ? {
+                    authorization: {
+                        ...publicAuthorization(grant),
+                        secret: grant.secret,
+                    },
+                }
+                : {}),
         };
     });
     app.use(bootstrapRouter.routes());
@@ -91,24 +151,51 @@ export function createSessionPortalApp(options) {
     app.use(async (ctx, next) => {
         if (isStaticAssetRequest(ctx))
             return next();
+        const embedded = ctx.state.sessionPortalEmbed;
+        if (embedded) {
+            ctx.state.sessionPortalEmbed = embedded;
+            return next();
+        }
         const grant = authorizeHttp(ctx, options.authorization);
         if (!grant)
             return;
         ctx.state.sessionPortal = grant;
-        expireHttpResponseAtGrantDeadline(ctx, grant.expiresAt);
-        if (ctx.path === "/api/session-portal/access") {
-            if (ctx.method !== "GET")
-                return methodNotAllowed(ctx);
-            ctx.body = publicAuthorization(grant);
-            return;
+        const revocation = new AbortController();
+        ctx.state.sessionPortalRevocationSignal = revocation.signal;
+        const untrack = transports.track(grant.portalId, () => {
+            revocation.abort(new Error("Session Portal grant revoked"));
+            if (!ctx.res.writableEnded)
+                ctx.res.destroy(new Error("Session Portal grant revoked"));
+        });
+        try {
+            // Close the authorize -> registry race: if revoke committed between
+            // those steps, its notification may have had no transport to close yet.
+            if (!options.authorization.inspect(grant.portalId)) {
+                ctx.status = 401;
+                ctx.body = { error: "session_portal_grant_expired_or_invalid" };
+                return;
+            }
+            expireHttpResponseAtGrantDeadline(ctx, grant.expiresAt);
+            if (ctx.path === "/api/session-portal/access") {
+                if (ctx.method !== "GET")
+                    return methodNotAllowed(ctx);
+                ctx.body = publicAuthorization(grant);
+                return;
+            }
+            if (!authorizePortalRoute(ctx, grant, options.authorization))
+                return;
+            if (ctx.path.startsWith("/api/")) {
+                await proxyControlHttp(ctx, grant, options);
+                return;
+            }
+            await next();
         }
-        if (!authorizePortalRoute(ctx, grant, options.authorization))
-            return;
-        if (ctx.path.startsWith("/api/")) {
-            await proxyControlHttp(ctx, grant, options);
-            return;
+        finally {
+            // This is operation completion, not merely client disconnect. Revoke
+            // waits for it, so an already-admitted Control call cannot outlive the
+            // Host RPC that revoked its grant.
+            untrack();
         }
-        await next();
     });
     app.use(async (ctx, next) => {
         if (ctx.method !== "GET" && ctx.method !== "HEAD")
@@ -116,9 +203,12 @@ export function createSessionPortalApp(options) {
         if (ctx.path.startsWith("/api/") || ctx.path.startsWith("/session-portal/"))
             return next();
         const grant = ctx.state.sessionPortal;
+        const embedded = ctx.state.sessionPortalEmbed;
         await sendSpaFile(ctx, options.controlWebDist, "/", grant
             ? (html) => injectPortalBootstrap(html, grant)
-            : undefined);
+            : embedded
+                ? (html) => injectEmbeddedPortalBootstrap(html, embedded.portalId)
+                : undefined);
     });
     return app;
 }
@@ -132,7 +222,9 @@ export async function startSessionPortal(options) {
         void shutdownPortal?.().catch(() => undefined);
     };
     options.shutdownSignal?.addEventListener("abort", stopForControlShutdown, { once: true });
-    const app = createSessionPortalApp({ ...options, shutdownSignal: lifecycle.signal });
+    const transports = new SessionPortalTransportRegistry();
+    const unsubscribeRevocations = options.authorization.subscribeRevocations?.((portalIds) => transports.revoke(portalIds));
+    const app = createSessionPortalApp({ ...options, shutdownSignal: lifecycle.signal }, transports);
     let server;
     try {
         server = await new Promise((resolve, reject) => {
@@ -144,6 +236,7 @@ export async function startSessionPortal(options) {
         });
     }
     catch (error) {
+        unsubscribeRevocations?.();
         options.shutdownSignal?.removeEventListener("abort", stopForControlShutdown);
         throw error;
     }
@@ -153,9 +246,11 @@ export async function startSessionPortal(options) {
             authorization: options.authorization,
             controlOrigin: options.controlOrigin,
             shutdownSignal: lifecycle.signal,
+            transports,
         });
     }
     catch (error) {
+        unsubscribeRevocations?.();
         options.shutdownSignal?.removeEventListener("abort", stopForControlShutdown);
         await closeHttpServerImmediately(server);
         throw error;
@@ -173,6 +268,7 @@ export async function startSessionPortal(options) {
             closeWebSocketServer(sockets.external),
             closeHttpServerImmediately(server),
         ]).then(() => {
+            unsubscribeRevocations?.();
             options.shutdownSignal?.removeEventListener("abort", stopForControlShutdown);
         });
         return shutdownPromise;
@@ -199,7 +295,8 @@ export function authorizeSessionPortalWebSocket(request, ports, runtimeSelector,
     const portalId = url.searchParams.get(SESSION_PORTAL_QUERY) ?? "";
     if (!PORTAL_ID_PATTERN.test(portalId))
         return undefined;
-    const secret = cookieValue(request.headers.cookie, cookieName(portalId));
+    const secret = cookieValue(request.headers.cookie, cookieName(portalId)) ||
+        url.searchParams.get(SESSION_PORTAL_SECRET_QUERY) || undefined;
     if (!secret)
         return undefined;
     const grant = ports.authorize(portalId, secret);
@@ -225,7 +322,8 @@ function authorizeHttp(ctx, ports) {
         : queryPortal;
     const portalId = candidate.trim();
     const secret = PORTAL_ID_PATTERN.test(portalId)
-        ? ctx.cookies.get(cookieName(portalId))
+        ? ctx.cookies.get(cookieName(portalId)) ||
+            ctx.get(SESSION_PORTAL_SECRET_HEADER).trim() || undefined
         : undefined;
     const grant = secret ? ports.authorize(portalId, secret) : undefined;
     if (!grant) {
@@ -268,6 +366,11 @@ function authorizePortalRoute(ctx, grant, ports) {
             return notFound(ctx);
         if (!ports.ownsSession(grant.pluginId, sessionId))
             return notFound(ctx);
+        if (isBrowserRequestHeadersRoute(ctx, apiMatch[1])) {
+            if (ctx.method !== "GET" && ctx.method !== "PUT")
+                return methodNotAllowed(ctx);
+            return denyMutation(ctx, grant);
+        }
         if (ctx.method === "GET" || ctx.method === "HEAD")
             return true;
         if (!isAllowedSessionMutation(ctx, apiMatch[1]))
@@ -277,20 +380,30 @@ function authorizePortalRoute(ctx, grant, ports) {
     return notFound(ctx);
 }
 async function proxyControlHttp(ctx, grant, options) {
+    const revocationSignal = ctx.state.sessionPortalRevocationSignal;
+    // Reads/streams can be aborted immediately. An already-admitted mutation is
+    // different: keep its Control request alive and let the registry wait for
+    // the response, so revoke cannot return while a write is still executing.
+    const mutating = ctx.method !== "GET" && ctx.method !== "HEAD";
+    const signal = mutating
+        ? options.shutdownSignal
+        : options.shutdownSignal && revocationSignal
+            ? AbortSignal.any([options.shutdownSignal, revocationSignal])
+            : options.shutdownSignal ?? revocationSignal;
     let response;
     try {
-        response = await openControlRequest(ctx, options.controlOrigin, options.shutdownSignal);
+        response = await openControlRequest(ctx, options.controlOrigin, signal);
     }
     catch (error) {
-        if (options.shutdownSignal?.aborted)
-            return serviceUnavailable(ctx);
+        if (signal?.aborted)
+            return;
         ctx.status = 502;
         ctx.body = { error: "control_service_unavailable" };
         return;
     }
     if (shouldFilterControlResponse(ctx)) {
         try {
-            const data = await readBoundedResponse(response, MAX_FILTERED_RESPONSE_BYTES, options.shutdownSignal);
+            const data = await readBoundedResponse(response, MAX_FILTERED_RESPONSE_BYTES, signal);
             applyControlResponseHeaders(ctx, response.headers, true);
             ctx.status = response.statusCode ?? 502;
             const body = JSON.parse(data.toString("utf8"));
@@ -298,8 +411,8 @@ async function proxyControlHttp(ctx, grant, options) {
             ctx.body = body;
         }
         catch {
-            if (options.shutdownSignal?.aborted)
-                return serviceUnavailable(ctx);
+            if (signal?.aborted)
+                return;
             ctx.status = 502;
             ctx.body = { error: "invalid_control_response" };
         }
@@ -310,8 +423,8 @@ async function proxyControlHttp(ctx, grant, options) {
     ctx.respond = false;
     ctx.res.statusCode = ctx.status;
     try {
-        await pipeline(response, ctx.res, ...(options.shutdownSignal
-            ? [{ signal: options.shutdownSignal }]
+        await pipeline(response, ctx.res, ...(signal
+            ? [{ signal }]
             : []));
     }
     catch {
@@ -322,6 +435,8 @@ async function proxyControlHttp(ctx, grant, options) {
 function openControlRequest(ctx, controlOrigin, signal) {
     const target = new URL(`${ctx.path}${ctx.search}`, controlOrigin);
     target.searchParams.delete(SESSION_PORTAL_QUERY);
+    target.searchParams.delete(SESSION_PORTAL_SECRET_QUERY);
+    target.searchParams.delete(SESSION_PORTAL_EMBED_ORIGIN_QUERY);
     return new Promise((resolve, reject) => {
         const request = httpRequest(target, {
             method: ctx.method,
@@ -345,6 +460,7 @@ function controlRequestHeaders(headers, target) {
             lower === "referer" ||
             lower === "accept-encoding" ||
             lower === SESSION_PORTAL_HEADER ||
+            lower === SESSION_PORTAL_SECRET_HEADER ||
             lower.startsWith("forwarded") ||
             lower.startsWith("x-forwarded-"))
             continue;
@@ -397,6 +513,9 @@ function attachPortalWebSocketProxy(server, options) {
         const route = portalSocketRoute(request.url);
         if (!route)
             return rejectUpgrade(socket, 404, "Session Portal socket not found");
+        const credential = sessionPortalSocketCredential(request);
+        if (!credential)
+            return rejectSessionPortalUpgrade(socket);
         const grant = authorizeSessionPortalWebSocket(request, options.authorization, route.runtimeSelector, route.sessionId);
         if (!grant || !readOnlySocketRoleAllowed(route.kind, request.url, grant)) {
             rejectSessionPortalUpgrade(socket);
@@ -408,6 +527,9 @@ function attachPortalWebSocketProxy(server, options) {
                     controlOrigin: options.controlOrigin,
                     shutdownSignal: options.shutdownSignal,
                     upstreamSockets,
+                    transports: options.transports,
+                    portalId: grant.portalId,
+                    reauthorize: () => options.authorization.authorize(credential.portalId, credential.secret),
                 });
             });
         }
@@ -422,6 +544,8 @@ function bridgePortalWebSocket(client, kind, requestUrl, grant, options) {
     const target = new URL(`${externalTarget.pathname}${externalTarget.search}`, options.controlOrigin);
     target.protocol = target.protocol === "https:" ? "wss:" : "ws:";
     target.searchParams.delete(SESSION_PORTAL_QUERY);
+    target.searchParams.delete(SESSION_PORTAL_SECRET_QUERY);
+    target.searchParams.delete(SESSION_PORTAL_EMBED_ORIGIN_QUERY);
     const upstream = new WebSocket(target, {
         origin: options.controlOrigin,
         headers: { "sec-fetch-site": "same-origin" },
@@ -429,6 +553,27 @@ function bridgePortalWebSocket(client, kind, requestUrl, grant, options) {
         maxPayload: MAX_SOCKET_BUFFERED_BYTES,
     });
     options.upstreamSockets.add(upstream);
+    const untrack = options.transports.track(options.portalId, () => {
+        closeSocket(client, 4403, "Session Portal grant revoked");
+        upstream.terminate();
+        const forceClose = setTimeout(() => client.terminate(), 100);
+        forceClose.unref?.();
+        client.once("close", () => clearTimeout(forceClose));
+    });
+    // Close the authorize -> transport-registry race just like the HTTP path.
+    // Revoke may have committed and returned while handleUpgrade was accepting
+    // this socket but before it became visible to the registry; in that case the
+    // fresh lookup must fail before the upstream can receive any frame.
+    if (!options.reauthorize()) {
+        closeSocket(client, 4403, "Session Portal grant revoked");
+        // `ws` emits an error when a CONNECTING client is terminated; this early
+        // branch returns before the normal upstream error handler is installed.
+        upstream.on("error", () => undefined);
+        upstream.terminate();
+        options.upstreamSockets.delete(upstream);
+        untrack();
+        return;
+    }
     const pending = [];
     let pendingBytes = 0;
     let closed = false;
@@ -449,10 +594,17 @@ function bridgePortalWebSocket(client, kind, requestUrl, grant, options) {
         pending.length = 0;
         pendingBytes = 0;
         options.upstreamSockets.delete(upstream);
+        untrack();
         options.shutdownSignal.removeEventListener("abort", stopForShutdown);
     };
     client.on("message", (data, isBinary) => {
-        if (grant.access === "read_only") {
+        const current = options.reauthorize();
+        if (!current) {
+            closeSocket(client, 4403, "Session Portal grant revoked");
+            closeSocket(upstream, 4403, "Session Portal grant revoked");
+            return;
+        }
+        if (current.access === "read_only") {
             if (kind === "terminal")
                 return;
             if (!allowedReadOnlySocketFrame(kind, data, isBinary)) {
@@ -476,6 +628,11 @@ function bridgePortalWebSocket(client, kind, requestUrl, grant, options) {
         pendingBytes += frame.byteLength;
     });
     upstream.on("open", () => {
+        if (!options.reauthorize()) {
+            closeSocket(client, 4403, "Session Portal grant revoked");
+            closeSocket(upstream, 4403, "Session Portal grant revoked");
+            return;
+        }
         for (const frame of pending.splice(0)) {
             pendingBytes -= frame.data.byteLength;
             if (!forwardSocketFrame(client, upstream, frame.data, frame.isBinary))
@@ -483,6 +640,11 @@ function bridgePortalWebSocket(client, kind, requestUrl, grant, options) {
         }
     });
     upstream.on("message", (data, isBinary) => {
+        if (!options.reauthorize()) {
+            closeSocket(client, 4403, "Session Portal grant revoked");
+            closeSocket(upstream, 4403, "Session Portal grant revoked");
+            return;
+        }
         forwardSocketFrame(upstream, client, data, isBinary);
     });
     client.on("close", (code, reason) => {
@@ -501,6 +663,21 @@ function bridgePortalWebSocket(client, kind, requestUrl, grant, options) {
         closeSocket(client, 1011, "Control service unavailable");
     });
 }
+function sessionPortalSocketCredential(request) {
+    let url;
+    try {
+        url = new URL(request.url ?? "", "http://localhost");
+    }
+    catch {
+        return undefined;
+    }
+    const portalId = url.searchParams.get(SESSION_PORTAL_QUERY) ?? "";
+    if (!PORTAL_ID_PATTERN.test(portalId))
+        return undefined;
+    const secret = cookieValue(request.headers.cookie, cookieName(portalId)) ||
+        url.searchParams.get(SESSION_PORTAL_SECRET_QUERY) || undefined;
+    return secret ? { portalId, secret } : undefined;
+}
 function portalSocketRoute(rawUrl) {
     let pathname;
     try {
@@ -607,8 +784,15 @@ function isAllowedSessionMutation(ctx, encodedSessionId) {
     if (ctx.method === "POST") {
         return /^(?:\/interrupt|\/messages(?:\/queue)?|\/terminal\/start|\/resources|\/interactions\/[^/]+\/resolve|\/browser\/(?:open|close|pages)|\/browser\/pages\/[^/]+\/(?:close|activate|back|forward|reload|navigate)|\/emulator\/(?:attach|detach|tap|button|type|rotate|launch|gesture))$/.test(suffix);
     }
+    if (ctx.method === "PUT") {
+        return suffix === "/execution" || suffix === "/browser/request-headers";
+    }
     return ctx.method === "DELETE" && /^\/resources\/[^/]+$/.test(suffix);
 }
+function isBrowserRequestHeadersRoute(ctx, encodedSessionId) {
+    const prefix = `${SESSION_COLLECTION_API_PATH}/${encodedSessionId}`;
+    return ctx.path.slice(prefix.length) === "/browser/request-headers";
+}
 function denyMutation(ctx, grant) {
     if (grant.access === "read_write")
         return true;
@@ -635,10 +819,63 @@ function publicAuthorization(grant) {
         portalId: grant.portalId,
         scope: grant.scope,
         access: grant.access,
+        ...(grant.embedOrigin ? { embedOrigin: grant.embedOrigin } : {}),
         ...(grant.sessionId ? { sessionId: grant.sessionId } : {}),
         expiresAt: grant.expiresAt,
     };
 }
+function injectEmbeddedPortalBootstrap(html, portalId) {
+    const id = JSON.stringify(portalId).replace(/</g, "\\u003c");
+    const script = `<script>(()=>{try{const raw=sessionStorage.getItem('rynx_session_portal_'+${id});` +
+        `const value=raw?JSON.parse(raw):null;if(value&&value.portalId===${id})window.rynxSessionPortal=value}` +
+        `catch{}})()</script>`;
+    return html.replace("</head>", `${script}</head>`);
+}
+function embeddedPageBootstrap(ctx, ports) {
+    if (ctx.method !== "GET" && ctx.method !== "HEAD")
+        return undefined;
+    const match = RUNTIME_SESSION_PATH.exec(ctx.path);
+    if (!match)
+        return undefined;
+    const portalId = typeof ctx.query[SESSION_PORTAL_QUERY] === "string"
+        ? ctx.query[SESSION_PORTAL_QUERY].trim()
+        : "";
+    const frameOrigin = sessionPortalEmbedOrigin(ctx);
+    if (!PORTAL_ID_PATTERN.test(portalId) || !frameOrigin)
+        return undefined;
+    const grant = ports.inspect(portalId);
+    if (!grant || grant.embedOrigin !== frameOrigin)
+        return undefined;
+    const requestedSessionId = decoded(match[1]);
+    if (grant.scope === "single_session" &&
+        requestedSessionId !== grant.sessionId)
+        return undefined;
+    if (requestedSessionId && !ports.ownsSession(grant.pluginId, requestedSessionId)) {
+        return undefined;
+    }
+    return { portalId, frameOrigin };
+}
+function sessionPortalEmbedOrigin(ctx) {
+    const value = typeof ctx.query[SESSION_PORTAL_EMBED_ORIGIN_QUERY] === "string"
+        ? ctx.query[SESSION_PORTAL_EMBED_ORIGIN_QUERY]
+        : "";
+    return normalizedFrameOrigin(value);
+}
+function normalizedFrameOrigin(value) {
+    const candidate = value.trim();
+    if (!candidate || candidate.length > 512)
+        return undefined;
+    try {
+        const parsed = new URL(candidate);
+        if ((parsed.protocol !== "http:" && parsed.protocol !== "https:") ||
+            parsed.origin !== candidate)
+            return undefined;
+        return parsed.origin;
+    }
+    catch {
+        return undefined;
+    }
+}
 function injectPortalBootstrap(html, grant) {
     const value = JSON.stringify(publicAuthorization(grant)).replace(/</g, "\\u003c");
     return html.replace("</head>", `<script>window.rynxSessionPortal=${value}</script></head>`);
@@ -742,5 +979,5 @@ function closeHttpServerImmediately(server) {
     });
 }
 function redeemPage() {
-    return `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Rynx Sessions</title><style>body{font:14px Inter,system-ui;margin:0;display:grid;min-height:100vh;place-items:center;background:#f6f6f8;color:#17171b}.box{text-align:center}.spin{width:22px;height:22px;margin:0 auto 14px;border:2px solid #d8d8df;border-top-color:#6d5ce7;border-radius:50%;animation:s .8s linear infinite}@keyframes s{to{transform:rotate(360deg)}}</style></head><body><main class="box"><div class="spin"></div><p id="status">正在打开 Rynx Sessions…</p></main><script>(()=>{const el=document.getElementById('status');const p=new URLSearchParams(location.hash.slice(1));const ticket=p.get('ticket');history.replaceState(null,'',location.pathname);if(!ticket){el.textContent='访问链接缺少票据。';return}fetch(location.pathname,{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({ticket})}).then(async r=>{const b=await r.json();if(!r.ok)throw new Error(b.error||'票据兑换失败');location.replace(b.location)}).catch(e=>{el.textContent='无法打开：'+e.message})})();</script></body></html>`;
+    return `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Rynx Sessions</title><style>body{font:14px Inter,system-ui;margin:0;display:grid;min-height:100vh;place-items:center;background:#f6f6f8;color:#17171b}.box{text-align:center}.spin{width:22px;height:22px;margin:0 auto 14px;border:2px solid #d8d8df;border-top-color:#6d5ce7;border-radius:50%;animation:s .8s linear infinite}@keyframes s{to{transform:rotate(360deg)}}</style></head><body><main class="box"><div class="spin"></div><p id="status">正在打开 Rynx Sessions…</p></main><script>(()=>{const el=document.getElementById('status');const p=new URLSearchParams(location.hash.slice(1));const ticket=p.get('ticket');history.replaceState(null,'',location.pathname+location.search);if(!ticket){el.textContent='访问链接缺少票据。';return}fetch(location.pathname+location.search,{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({ticket})}).then(async r=>{const b=await r.json();if(!r.ok)throw new Error(b.error||'票据兑换失败');if(b.authorization){sessionStorage.setItem('rynx_session_portal_'+b.authorization.portalId,JSON.stringify(b.authorization))}location.replace(b.location)}).catch(e=>{el.textContent='无法打开：'+e.message})})();</script></body></html>`;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rynx-ai/server",
-  "version": "0.1.11-beta.30",
+  "version": "0.1.11-beta.32",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/rynx-ai/rynx.git",
@@ -27,15 +27,15 @@
     "@koa/router": "^15.4.0",
     "koa": "^3.2.0",
     "ws": "^8.21.0",
-    "@rynx-ai/core": "0.1.11-beta.30",
-    "@rynx-ai/plugin-sdk": "0.1.11-beta.30",
-    "@rynx-ai/protocol": "0.1.11-beta.30",
-    "@rynx-ai/remote-runtime-e2ee": "0.1.11-beta.30",
-    "@rynx-ai/runtime": "0.1.11-beta.30"
+    "@rynx-ai/plugin-sdk": "0.1.11-beta.32",
+    "@rynx-ai/protocol": "0.1.11-beta.32",
+    "@rynx-ai/core": "0.1.11-beta.32",
+    "@rynx-ai/remote-runtime-e2ee": "0.1.11-beta.32",
+    "@rynx-ai/runtime": "0.1.11-beta.32"
   },
   "devDependencies": {
     "@types/ws": "^8.18.1",
-    "@rynx-ai/control-web": "0.1.11-beta.30"
+    "@rynx-ai/control-web": "0.1.11-beta.32"
   },
   "scripts": {
     "build": "rm -rf dist && tsc -p tsconfig.json && mkdir -p dist/control-web && cp -R ../control-web/dist/. dist/control-web/",

package/dist/control-web/assets/channel-3HG15wfa.js

@@ -1 +0,0 @@
-import{aj as o,ak as n}from"./mermaid-GHXKKRXX-BkcV3dgg.js";const t=(a,r)=>o.lang.round(n.parse(a)[r]);export{t as c};

package/dist/control-web/assets/classDiagram-OUVF2IWQ-WmU4L9YT.js

@@ -1 +0,0 @@
-import{s as a,c as s,a as e,C as t}from"./chunk-V7JOEXUC-3UFQGnKX.js";import{_ as i}from"./mermaid-GHXKKRXX-BkcV3dgg.js";import"./chunk-5VM5RSS4-By6zfDWW.js";import"./chunk-XXDRQBXY-3znnutie.js";import"./chunk-VR4S4FIN-DjspjYUb.js";import"./chunk-32BRIVSS-BkfLE_TX.js";import"./index-B9SAq_63.js";var n={parser:e,get db(){return new t},renderer:s,styles:a,init:i(r=>{r.class||(r.class={}),r.class.arrowMarkerAbsolute=r.arrowMarkerAbsolute},"init")};export{n as diagram};

package/dist/control-web/assets/classDiagram-v2-EOCWNBFH-WmU4L9YT.js

@@ -1 +0,0 @@
-import{s as a,c as s,a as e,C as t}from"./chunk-V7JOEXUC-3UFQGnKX.js";import{_ as i}from"./mermaid-GHXKKRXX-BkcV3dgg.js";import"./chunk-5VM5RSS4-By6zfDWW.js";import"./chunk-XXDRQBXY-3znnutie.js";import"./chunk-VR4S4FIN-DjspjYUb.js";import"./chunk-32BRIVSS-BkfLE_TX.js";import"./index-B9SAq_63.js";var n={parser:e,get db(){return new t},renderer:s,styles:a,init:i(r=>{r.class||(r.class={}),r.class.arrowMarkerAbsolute=r.arrowMarkerAbsolute},"init")};export{n as diagram};