@rynx-ai/server 0.1.11-beta.4 → 0.1.11-beta.41

package/dist/session-portal.js

@@ -0,0 +1,997 @@
+import { request as httpRequest, } from "node:http";
+import { pipeline } from "node:stream/promises";
+import Router from "@koa/router";
+import Koa from "koa";
+import { WebSocket, WebSocketServer } from "ws";
+import { sendSpaFile } from "./control-web-dist.js";
+import { isBrowserTerminalResizeFrame } from "./terminal-ws.js";
+export const SESSION_PORTAL_HEADER = "x-rynx-session-portal";
+export const SESSION_PORTAL_QUERY = "portal";
+export const SESSION_PORTAL_SECRET_HEADER = "x-rynx-session-portal-secret";
+export const SESSION_PORTAL_SECRET_QUERY = "portal_secret";
+export const SESSION_PORTAL_EMBED_ORIGIN_QUERY = "embed_origin";
+const MAX_TICKET_BYTES = 256;
+const MAX_FILTERED_RESPONSE_BYTES = 16 * 1024 * 1024;
+const MAX_PENDING_SOCKET_FRAMES = 128;
+const MAX_PENDING_SOCKET_BYTES = 1024 * 1024;
+const MAX_SOCKET_BUFFERED_BYTES = 32 * 1024 * 1024;
+const PORTAL_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+const RUNTIME_SESSION_PATH = /^\/runtimes\/local\/sessions(?:\/([^/]+))?\/?$/;
+const RUNTIME_SESSION_API_PATH = /^\/api\/runtimes\/local\/sessions(?:\/([^/]+))?(?:\/|$)/;
+const SESSION_COLLECTION_API_PATH = "/api/runtimes/local/sessions";
+const TERMINAL_SOCKET_PATH = /^\/api\/runtimes\/([^/]+)\/sessions\/([^/]+)\/terminal$/;
+const BROWSER_SOCKET_PATH = /^\/api\/runtimes\/([^/]+)\/sessions\/([^/]+)\/browser\/pages\/[^/]+\/surface$/;
+const EMULATOR_SOCKET_PATH = /^\/api\/runtimes\/([^/]+)\/sessions\/([^/]+)\/emulator\/surface$/;
+const HOP_BY_HOP_HEADERS = new Set([
+    "connection",
+    "keep-alive",
+    "proxy-authenticate",
+    "proxy-authorization",
+    "proxy-connection",
+    "te",
+    "trailer",
+    "transfer-encoding",
+    "upgrade",
+]);
+class SessionPortalTransportRegistry {
+    transports = new Map();
+    track(portalId, close) {
+        let finish;
+        const done = new Promise((resolve) => { finish = resolve; });
+        const entry = { close, done, finish };
+        const entries = this.transports.get(portalId) ?? new Set();
+        entries.add(entry);
+        this.transports.set(portalId, entries);
+        let finished = false;
+        return () => {
+            if (finished)
+                return;
+            finished = true;
+            entries.delete(entry);
+            if (entries.size === 0)
+                this.transports.delete(portalId);
+            finish();
+        };
+    }
+    async revoke(portalIds) {
+        const draining = [];
+        for (const portalId of portalIds) {
+            const entries = [...(this.transports.get(portalId) ?? [])];
+            this.transports.delete(portalId);
+            for (const entry of entries) {
+                draining.push(entry.done);
+                entry.close();
+            }
+        }
+        await Promise.all(draining);
+    }
+}
+/** Session Portal is a narrow adapter in front of the one Control service. It
+ * serves the native SPA, validates Portal grants, and forwards only authorized
+ * Session HTTP calls to Control; it owns no Session or Runtime handlers. */
+export function createSessionPortalApp(options, transports = new SessionPortalTransportRegistry()) {
+    const app = new Koa();
+    const bootstrapRouter = new Router();
+    app.use(async (ctx, next) => {
+        ctx.set("Cache-Control", "no-store");
+        ctx.set("Referrer-Policy", "no-referrer");
+        ctx.set("X-Content-Type-Options", "nosniff");
+        const embedded = embeddedPageBootstrap(ctx, options.authorization);
+        if (embedded)
+            ctx.state.sessionPortalEmbed = embedded;
+        // The redeem shell contains no Session data and must be frameable before
+        // its fragment ticket can be posted. A real Session page is frameable only
+        // after its portal id resolves to the exact still-active embedded grant.
+        const frameOrigin = ctx.path === "/session-portal/redeem"
+            ? sessionPortalEmbedOrigin(ctx)
+            : embedded?.frameOrigin;
+        if (!frameOrigin)
+            ctx.set("X-Frame-Options", "DENY");
+        ctx.set("Content-Security-Policy", "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; " +
+            "connect-src 'self' ws: wss:; img-src 'self' data: blob:; font-src 'self' data:; " +
+            `base-uri 'none'; form-action 'self'; frame-ancestors ${frameOrigin ?? "'none'"}`);
+        if (options.shutdownSignal?.aborted) {
+            serviceUnavailable(ctx);
+            return;
+        }
+        await next();
+    });
+    bootstrapRouter.get("/health", (ctx) => {
+        ctx.body = { ok: true, surface: "session-portal" };
+    });
+    bootstrapRouter.get("/session-portal/redeem", (ctx) => {
+        ctx.type = "html";
+        ctx.body = redeemPage();
+    });
+    bootstrapRouter.post("/session-portal/redeem", async (ctx) => {
+        const body = await readJsonBody(ctx.req).catch(() => undefined);
+        const ticket = typeof body?.ticket === "string" ? body.ticket : "";
+        if (!ticket || Buffer.byteLength(ticket, "utf8") > MAX_TICKET_BYTES) {
+            ctx.status = 400;
+            ctx.body = { error: "invalid_ticket" };
+            return;
+        }
+        const requestedEmbedOrigin = sessionPortalEmbedOrigin(ctx);
+        const grant = options.authorization.redeem(ticket, requestedEmbedOrigin);
+        if (!grant) {
+            ctx.status = 401;
+            ctx.body = { error: "ticket_expired_or_used" };
+            return;
+        }
+        ctx.cookies.set(cookieName(grant.portalId), grant.secret, {
+            httpOnly: true,
+            sameSite: "strict",
+            secure: options.scheme === "https",
+            overwrite: true,
+            path: "/",
+            expires: new Date(grant.expiresAt),
+        });
+        const path = grant.scope === "single_session"
+            ? `/runtimes/local/sessions/${encodeURIComponent(grant.sessionId)}`
+            : "/runtimes/local/sessions";
+        const location = new URL(path, "http://session-portal.invalid");
+        location.searchParams.set(SESSION_PORTAL_QUERY, grant.portalId);
+        if (grant.embedOrigin) {
+            location.searchParams.set(SESSION_PORTAL_EMBED_ORIGIN_QUERY, grant.embedOrigin);
+        }
+        ctx.body = {
+            location: `${location.pathname}${location.search}`,
+            expiresAt: grant.expiresAt,
+            ...(grant.embedOrigin
+                ? {
+                    authorization: {
+                        ...publicAuthorization(grant),
+                        secret: grant.secret,
+                    },
+                }
+                : {}),
+        };
+    });
+    app.use(bootstrapRouter.routes());
+    app.use(bootstrapRouter.allowedMethods());
+    app.use(async (ctx, next) => {
+        if (isStaticAssetRequest(ctx))
+            return next();
+        const embedded = ctx.state.sessionPortalEmbed;
+        if (embedded) {
+            ctx.state.sessionPortalEmbed = embedded;
+            return next();
+        }
+        const grant = authorizeHttp(ctx, options.authorization);
+        if (!grant)
+            return;
+        ctx.state.sessionPortal = grant;
+        const revocation = new AbortController();
+        ctx.state.sessionPortalRevocationSignal = revocation.signal;
+        const untrack = transports.track(grant.portalId, () => {
+            revocation.abort(new Error("Session Portal grant revoked"));
+            if (!ctx.res.writableEnded)
+                ctx.res.destroy(new Error("Session Portal grant revoked"));
+        });
+        try {
+            // Close the authorize -> registry race: if revoke committed between
+            // those steps, its notification may have had no transport to close yet.
+            if (!options.authorization.inspect(grant.portalId)) {
+                ctx.status = 401;
+                ctx.body = { error: "session_portal_grant_expired_or_invalid" };
+                return;
+            }
+            expireHttpResponseAtGrantDeadline(ctx, grant.expiresAt);
+            if (ctx.path === "/api/session-portal/access") {
+                if (ctx.method !== "GET")
+                    return methodNotAllowed(ctx);
+                ctx.body = publicAuthorization(grant);
+                return;
+            }
+            if (!authorizePortalRoute(ctx, grant, options.authorization))
+                return;
+            if (ctx.path.startsWith("/api/")) {
+                await proxyControlHttp(ctx, grant, options);
+                return;
+            }
+            await next();
+        }
+        finally {
+            // This is operation completion, not merely client disconnect. Revoke
+            // waits for it, so an already-admitted Control call cannot outlive the
+            // Host RPC that revoked its grant.
+            untrack();
+        }
+    });
+    app.use(async (ctx, next) => {
+        if (ctx.method !== "GET" && ctx.method !== "HEAD")
+            return next();
+        if (ctx.path.startsWith("/api/") || ctx.path.startsWith("/session-portal/"))
+            return next();
+        const grant = ctx.state.sessionPortal;
+        const embedded = ctx.state.sessionPortalEmbed;
+        await sendSpaFile(ctx, options.controlWebDist, "/", grant
+            ? (html) => injectPortalBootstrap(html, grant)
+            : embedded
+                ? (html) => injectEmbeddedPortalBootstrap(html, embedded.portalId)
+                : undefined);
+    });
+    return app;
+}
+export async function startSessionPortal(options) {
+    if (options.shutdownSignal?.aborted)
+        throw new Error("Control service is shutting down");
+    const lifecycle = new AbortController();
+    let shutdownPortal;
+    const stopForControlShutdown = () => {
+        lifecycle.abort(options.shutdownSignal?.reason ?? new Error("Control service is shutting down"));
+        void shutdownPortal?.().catch(() => undefined);
+    };
+    options.shutdownSignal?.addEventListener("abort", stopForControlShutdown, { once: true });
+    const transports = new SessionPortalTransportRegistry();
+    const unsubscribeRevocations = options.authorization.subscribeRevocations?.((portalIds) => transports.revoke(portalIds));
+    const app = createSessionPortalApp({ ...options, shutdownSignal: lifecycle.signal }, transports);
+    let server;
+    try {
+        server = await new Promise((resolve, reject) => {
+            const candidate = app.listen(options.port, options.host, () => {
+                candidate.off("error", reject);
+                resolve(candidate);
+            });
+            candidate.once("error", reject);
+        });
+    }
+    catch (error) {
+        unsubscribeRevocations?.();
+        options.shutdownSignal?.removeEventListener("abort", stopForControlShutdown);
+        throw error;
+    }
+    let sockets;
+    try {
+        sockets = attachPortalWebSocketProxy(server, {
+            authorization: options.authorization,
+            controlOrigin: options.controlOrigin,
+            shutdownSignal: lifecycle.signal,
+            transports,
+        });
+    }
+    catch (error) {
+        unsubscribeRevocations?.();
+        options.shutdownSignal?.removeEventListener("abort", stopForControlShutdown);
+        await closeHttpServerImmediately(server);
+        throw error;
+    }
+    let shutdownPromise;
+    const shutdown = () => {
+        if (shutdownPromise)
+            return shutdownPromise;
+        lifecycle.abort(new Error("Control service is shutting down"));
+        for (const client of sockets.external.clients)
+            client.terminate();
+        for (const upstream of sockets.upstream)
+            upstream.terminate();
+        shutdownPromise = Promise.all([
+            closeWebSocketServer(sockets.external),
+            closeHttpServerImmediately(server),
+        ]).then(() => {
+            unsubscribeRevocations?.();
+            options.shutdownSignal?.removeEventListener("abort", stopForControlShutdown);
+        });
+        return shutdownPromise;
+    };
+    shutdownPortal = shutdown;
+    if (lifecycle.signal.aborted) {
+        await shutdown();
+        throw new Error("Control service is shutting down");
+    }
+    return {
+        server,
+        stopAccepting: () => { void shutdown().catch(() => undefined); },
+        shutdown,
+    };
+}
+export function authorizeSessionPortalWebSocket(request, ports, runtimeSelector, sessionId) {
+    let url;
+    try {
+        url = new URL(request.url ?? "", "http://localhost");
+    }
+    catch {
+        return undefined;
+    }
+    const portalId = url.searchParams.get(SESSION_PORTAL_QUERY) ?? "";
+    if (!PORTAL_ID_PATTERN.test(portalId))
+        return undefined;
+    const secret = cookieValue(request.headers.cookie, cookieName(portalId)) ||
+        url.searchParams.get(SESSION_PORTAL_SECRET_QUERY) || undefined;
+    if (!secret)
+        return undefined;
+    const grant = ports.authorize(portalId, secret);
+    if (!grant)
+        return undefined;
+    if (runtimeSelector !== "local")
+        return undefined;
+    if (grant.scope === "single_session" && grant.sessionId !== sessionId)
+        return undefined;
+    if (!ports.ownsSession(grant.pluginId, sessionId))
+        return undefined;
+    return grant;
+}
+export function rejectSessionPortalUpgrade(socket) {
+    rejectUpgrade(socket, 401, "session portal grant expired or invalid");
+}
+function authorizeHttp(ctx, ports) {
+    const queryPortal = typeof ctx.query[SESSION_PORTAL_QUERY] === "string"
+        ? ctx.query[SESSION_PORTAL_QUERY]
+        : "";
+    const candidate = ctx.path.startsWith("/api/")
+        ? ctx.get(SESSION_PORTAL_HEADER) || queryPortal
+        : queryPortal;
+    const portalId = candidate.trim();
+    const secret = PORTAL_ID_PATTERN.test(portalId)
+        ? ctx.cookies.get(cookieName(portalId)) ||
+            ctx.get(SESSION_PORTAL_SECRET_HEADER).trim() || undefined
+        : undefined;
+    const grant = secret ? ports.authorize(portalId, secret) : undefined;
+    if (!grant) {
+        ctx.status = 401;
+        ctx.body = { error: "session_portal_grant_expired_or_invalid" };
+    }
+    return grant;
+}
+function authorizePortalRoute(ctx, grant, ports) {
+    if (ctx.path === "/") {
+        const target = grant.scope === "single_session"
+            ? `/runtimes/local/sessions/${encodeURIComponent(grant.sessionId)}`
+            : "/runtimes/local/sessions";
+        ctx.redirect(`${target}?${SESSION_PORTAL_QUERY}=${encodeURIComponent(grant.portalId)}`);
+        return false;
+    }
+    const pageMatch = RUNTIME_SESSION_PATH.exec(ctx.path);
+    if (pageMatch) {
+        if (ctx.method !== "GET" && ctx.method !== "HEAD")
+            return methodNotAllowed(ctx);
+        const requested = decoded(pageMatch[1]);
+        if (grant.scope === "single_session" && requested && requested !== grant.sessionId)
+            return notFound(ctx);
+        if (requested && !ports.ownsSession(grant.pluginId, requested))
+            return notFound(ctx);
+        return true;
+    }
+    if (ctx.path === "/api/runtimes/capability" || ctx.path === "/api/runtimes") {
+        if (ctx.method !== "GET")
+            return methodNotAllowed(ctx);
+        return true;
+    }
+    if (ctx.path === SESSION_COLLECTION_API_PATH) {
+        return ctx.method === "GET" ? true : methodNotAllowed(ctx);
+    }
+    const apiMatch = RUNTIME_SESSION_API_PATH.exec(ctx.path);
+    const sessionId = decoded(apiMatch?.[1]);
+    if (sessionId) {
+        if (grant.scope === "single_session" && sessionId !== grant.sessionId)
+            return notFound(ctx);
+        if (!ports.ownsSession(grant.pluginId, sessionId))
+            return notFound(ctx);
+        if (isBrowserRequestHeadersRoute(ctx, apiMatch[1])) {
+            if (ctx.method !== "GET" && ctx.method !== "PUT")
+                return methodNotAllowed(ctx);
+            return denyMutation(ctx, grant);
+        }
+        if (ctx.method === "GET" || ctx.method === "HEAD")
+            return true;
+        if (!isAllowedSessionMutation(ctx, apiMatch[1]))
+            return notFound(ctx);
+        return denyMutation(ctx, grant);
+    }
+    return notFound(ctx);
+}
+async function proxyControlHttp(ctx, grant, options) {
+    const revocationSignal = ctx.state.sessionPortalRevocationSignal;
+    // Reads/streams can be aborted immediately. An already-admitted mutation is
+    // different: keep its Control request alive and let the registry wait for
+    // the response, so revoke cannot return while a write is still executing.
+    const mutating = ctx.method !== "GET" && ctx.method !== "HEAD";
+    const signal = mutating
+        ? options.shutdownSignal
+        : options.shutdownSignal && revocationSignal
+            ? AbortSignal.any([options.shutdownSignal, revocationSignal])
+            : options.shutdownSignal ?? revocationSignal;
+    let response;
+    try {
+        response = await openControlRequest(ctx, options.controlOrigin, signal);
+    }
+    catch (error) {
+        if (signal?.aborted)
+            return;
+        ctx.status = 502;
+        ctx.body = { error: "control_service_unavailable" };
+        return;
+    }
+    if (shouldFilterControlResponse(ctx)) {
+        try {
+            const data = await readBoundedResponse(response, MAX_FILTERED_RESPONSE_BYTES, signal);
+            applyControlResponseHeaders(ctx, response.headers, true);
+            ctx.status = response.statusCode ?? 502;
+            const body = JSON.parse(data.toString("utf8"));
+            narrowPortalResponse(ctx.path, body, grant, options.authorization);
+            ctx.body = body;
+        }
+        catch {
+            if (signal?.aborted)
+                return;
+            ctx.status = 502;
+            ctx.body = { error: "invalid_control_response" };
+        }
+        return;
+    }
+    ctx.status = response.statusCode ?? 502;
+    applyControlResponseHeaders(ctx, response.headers, false);
+    ctx.respond = false;
+    ctx.res.statusCode = ctx.status;
+    try {
+        await pipeline(response, ctx.res, ...(signal
+            ? [{ signal }]
+            : []));
+    }
+    catch {
+        if (!ctx.res.destroyed)
+            ctx.res.destroy();
+    }
+}
+function openControlRequest(ctx, controlOrigin, signal) {
+    const target = new URL(`${ctx.path}${ctx.search}`, controlOrigin);
+    target.searchParams.delete(SESSION_PORTAL_QUERY);
+    target.searchParams.delete(SESSION_PORTAL_SECRET_QUERY);
+    target.searchParams.delete(SESSION_PORTAL_EMBED_ORIGIN_QUERY);
+    return new Promise((resolve, reject) => {
+        const request = httpRequest(target, {
+            method: ctx.method,
+            headers: controlRequestHeaders(ctx.req.headers, target),
+            ...(signal ? { signal } : {}),
+        }, resolve);
+        request.once("error", reject);
+        ctx.req.once("aborted", () => request.destroy(new Error("Portal request aborted")));
+        ctx.req.pipe(request);
+    });
+}
+function controlRequestHeaders(headers, target) {
+    const forwarded = {};
+    for (const [name, value] of Object.entries(headers)) {
+        const lower = name.toLowerCase();
+        if (value === undefined ||
+            HOP_BY_HOP_HEADERS.has(lower) ||
+            lower === "cookie" ||
+            lower === "host" ||
+            lower === "origin" ||
+            lower === "referer" ||
+            lower === "accept-encoding" ||
+            lower === SESSION_PORTAL_HEADER ||
+            lower === SESSION_PORTAL_SECRET_HEADER ||
+            lower.startsWith("forwarded") ||
+            lower.startsWith("x-forwarded-"))
+            continue;
+        forwarded[lower] = value;
+    }
+    forwarded.host = target.host;
+    forwarded.origin = target.origin;
+    forwarded["sec-fetch-site"] = "same-origin";
+    forwarded["accept-encoding"] = "identity";
+    return forwarded;
+}
+function applyControlResponseHeaders(ctx, headers, bodyChanged) {
+    for (const [name, value] of Object.entries(headers)) {
+        const lower = name.toLowerCase();
+        if (value === undefined ||
+            HOP_BY_HOP_HEADERS.has(lower) ||
+            lower === "set-cookie" ||
+            (bodyChanged && (lower === "content-length" || lower === "content-encoding")))
+            continue;
+        ctx.set(name, Array.isArray(value) ? value : String(value));
+    }
+}
+function shouldFilterControlResponse(ctx) {
+    return ctx.method === "GET" && (ctx.path === "/api/runtimes" || ctx.path === SESSION_COLLECTION_API_PATH);
+}
+function narrowPortalResponse(path, body, grant, ports) {
+    if (!body || typeof body !== "object")
+        return;
+    if (path === "/api/runtimes") {
+        const value = body;
+        if (Array.isArray(value.runtimes)) {
+            value.runtimes = value.runtimes.filter((runtime) => runtime.selector === "local");
+        }
+    }
+    if (path === SESSION_COLLECTION_API_PATH) {
+        const value = body;
+        if (Array.isArray(value.sessions)) {
+            value.sessions = value.sessions.filter((session) => typeof session.id === "string" &&
+                ports.ownsSession(grant.pluginId, session.id) &&
+                (grant.scope !== "single_session" || session.id === grant.sessionId));
+        }
+    }
+}
+function attachPortalWebSocketProxy(server, options) {
+    const external = new WebSocketServer({ noServer: true, perMessageDeflate: false });
+    const upstreamSockets = new Set();
+    server.on("upgrade", (request, socket, head) => {
+        if (options.shutdownSignal.aborted)
+            return rejectUpgrade(socket, 503, "Control service is shutting down");
+        const route = portalSocketRoute(request.url);
+        if (!route)
+            return rejectUpgrade(socket, 404, "Session Portal socket not found");
+        const credential = sessionPortalSocketCredential(request);
+        if (!credential)
+            return rejectSessionPortalUpgrade(socket);
+        const grant = authorizeSessionPortalWebSocket(request, options.authorization, route.runtimeSelector, route.sessionId);
+        if (!grant || !readOnlySocketRoleAllowed(route.kind, request.url, grant)) {
+            rejectSessionPortalUpgrade(socket);
+            return;
+        }
+        try {
+            external.handleUpgrade(request, socket, head, (client) => {
+                bridgePortalWebSocket(client, route.kind, request.url, grant, {
+                    controlOrigin: options.controlOrigin,
+                    shutdownSignal: options.shutdownSignal,
+                    upstreamSockets,
+                    transports: options.transports,
+                    portalId: grant.portalId,
+                    reauthorize: () => options.authorization.authorize(credential.portalId, credential.secret),
+                });
+            });
+        }
+        catch {
+            rejectUpgrade(socket, 400, "invalid Session Portal WebSocket upgrade");
+        }
+    });
+    return { external, upstream: upstreamSockets };
+}
+function bridgePortalWebSocket(client, kind, requestUrl, grant, options) {
+    const externalTarget = new URL(requestUrl, "http://session-portal.invalid");
+    const target = new URL(`${externalTarget.pathname}${externalTarget.search}`, options.controlOrigin);
+    target.protocol = target.protocol === "https:" ? "wss:" : "ws:";
+    target.searchParams.delete(SESSION_PORTAL_QUERY);
+    target.searchParams.delete(SESSION_PORTAL_SECRET_QUERY);
+    target.searchParams.delete(SESSION_PORTAL_EMBED_ORIGIN_QUERY);
+    const upstream = new WebSocket(target, {
+        origin: options.controlOrigin,
+        headers: { "sec-fetch-site": "same-origin" },
+        perMessageDeflate: false,
+        maxPayload: MAX_SOCKET_BUFFERED_BYTES,
+    });
+    options.upstreamSockets.add(upstream);
+    const untrack = options.transports.track(options.portalId, () => {
+        closeSocket(client, 4403, "Session Portal grant revoked");
+        upstream.terminate();
+        const forceClose = setTimeout(() => client.terminate(), 100);
+        forceClose.unref?.();
+        client.once("close", () => clearTimeout(forceClose));
+    });
+    // Close the authorize -> transport-registry race just like the HTTP path.
+    // Revoke may have committed and returned while handleUpgrade was accepting
+    // this socket but before it became visible to the registry; in that case the
+    // fresh lookup must fail before the upstream can receive any frame.
+    const initialRefresh = options.reauthorize();
+    if (!initialRefresh || (grant.access === "read_write" && initialRefresh.access !== "read_write")) {
+        closeSocket(client, 4403, initialRefresh ? "Session Portal access changed" : "Session Portal grant revoked");
+        // `ws` emits an error when a CONNECTING client is terminated; this early
+        // branch returns before the normal upstream error handler is installed.
+        upstream.on("error", () => undefined);
+        upstream.terminate();
+        options.upstreamSockets.delete(upstream);
+        untrack();
+        return;
+    }
+    const pending = [];
+    let pendingBytes = 0;
+    let closed = false;
+    const clearExpiry = scheduleSessionPortalExpiry(grant.expiresAt, () => {
+        closeSocket(client, 4403, "Session Portal grant expired");
+        closeSocket(upstream, 4403, "Session Portal grant expired");
+    });
+    const stopForShutdown = () => {
+        client.terminate();
+        upstream.terminate();
+    };
+    options.shutdownSignal.addEventListener("abort", stopForShutdown, { once: true });
+    const cleanup = () => {
+        if (closed)
+            return;
+        closed = true;
+        clearExpiry();
+        pending.length = 0;
+        pendingBytes = 0;
+        options.upstreamSockets.delete(upstream);
+        untrack();
+        options.shutdownSignal.removeEventListener("abort", stopForShutdown);
+    };
+    const reauthorizeOrClose = () => {
+        const current = options.reauthorize();
+        const downgraded = grant.access === "read_write" && current?.access !== "read_write";
+        if (current && !downgraded)
+            return current;
+        pending.length = 0;
+        pendingBytes = 0;
+        const reason = downgraded
+            ? "Session Portal access changed"
+            : "Session Portal grant revoked";
+        closeSocket(client, 4403, reason);
+        closeSocket(upstream, 4403, reason);
+        return undefined;
+    };
+    client.on("message", (data, isBinary) => {
+        const current = reauthorizeOrClose();
+        if (!current)
+            return;
+        // The role of an established socket never becomes more permissive. A
+        // grant upgraded in storage must reconnect before it can gain write access.
+        if (grant.access === "read_only" || current.access === "read_only") {
+            if (!allowedReadOnlySocketFrame(kind, data, isBinary)) {
+                // A read-only terminal intentionally ignores keystrokes and malformed
+                // controls while keeping the live output stream attached. Only its
+                // canonical resize control is forwarded to the tmux client.
+                if (kind === "terminal")
+                    return;
+                closeSocket(client, 4403, "Session Portal is read only");
+                closeSocket(upstream, 4403, "Session Portal is read only");
+                return;
+            }
+        }
+        const frame = rawDataBuffer(data);
+        if (upstream.readyState === WebSocket.OPEN) {
+            forwardSocketFrame(client, upstream, frame, isBinary);
+            return;
+        }
+        if (pending.length >= MAX_PENDING_SOCKET_FRAMES ||
+            pendingBytes + frame.byteLength > MAX_PENDING_SOCKET_BYTES) {
+            closeSocket(client, 4408, "Session Portal socket queue is full");
+            upstream.terminate();
+            return;
+        }
+        pending.push({ data: frame, isBinary });
+        pendingBytes += frame.byteLength;
+    });
+    upstream.on("open", () => {
+        if (!reauthorizeOrClose())
+            return;
+        for (const frame of pending.splice(0)) {
+            pendingBytes -= frame.data.byteLength;
+            if (!forwardSocketFrame(client, upstream, frame.data, frame.isBinary))
+                break;
+        }
+    });
+    upstream.on("message", (data, isBinary) => {
+        if (!reauthorizeOrClose())
+            return;
+        forwardSocketFrame(upstream, client, data, isBinary);
+    });
+    client.on("close", (code, reason) => {
+        closeSocket(upstream, normalizedCloseCode(code), reason.toString());
+        cleanup();
+    });
+    upstream.on("close", (code, reason) => {
+        closeSocket(client, normalizedCloseCode(code), reason.toString());
+        cleanup();
+    });
+    client.on("error", () => {
+        upstream.terminate();
+        cleanup();
+    });
+    upstream.on("error", () => {
+        closeSocket(client, 1011, "Control service unavailable");
+    });
+}
+function sessionPortalSocketCredential(request) {
+    let url;
+    try {
+        url = new URL(request.url ?? "", "http://localhost");
+    }
+    catch {
+        return undefined;
+    }
+    const portalId = url.searchParams.get(SESSION_PORTAL_QUERY) ?? "";
+    if (!PORTAL_ID_PATTERN.test(portalId))
+        return undefined;
+    const secret = cookieValue(request.headers.cookie, cookieName(portalId)) ||
+        url.searchParams.get(SESSION_PORTAL_SECRET_QUERY) || undefined;
+    return secret ? { portalId, secret } : undefined;
+}
+function portalSocketRoute(rawUrl) {
+    let pathname;
+    try {
+        pathname = new URL(rawUrl ?? "", "http://localhost").pathname;
+    }
+    catch {
+        return undefined;
+    }
+    for (const [kind, pattern] of [
+        ["terminal", TERMINAL_SOCKET_PATH],
+        ["browser", BROWSER_SOCKET_PATH],
+        ["emulator", EMULATOR_SOCKET_PATH],
+    ]) {
+        const match = pattern.exec(pathname);
+        if (!match)
+            continue;
+        const runtimeSelector = decoded(match[1]);
+        const sessionId = decoded(match[2]);
+        if (runtimeSelector && sessionId)
+            return { kind, runtimeSelector, sessionId };
+    }
+    return undefined;
+}
+function readOnlySocketRoleAllowed(kind, rawUrl, grant) {
+    if (grant.access !== "read_only" || kind === "emulator")
+        return true;
+    const role = new URL(rawUrl ?? "", "http://localhost").searchParams.get("role");
+    return kind === "terminal" ? role === "read-only" : role === "view";
+}
+function allowedReadOnlySocketFrame(kind, data, isBinary) {
+    if (kind === "terminal")
+        return isBrowserTerminalResizeFrame(data, isBinary);
+    if (kind !== "browser" || isBinary)
+        return false;
+    try {
+        const value = JSON.parse(rawDataBuffer(data).toString("utf8"));
+        return value.type === "browser.surface.frame.ack";
+    }
+    catch {
+        return false;
+    }
+}
+function forwardSocketFrame(source, target, data, isBinary) {
+    const bytes = rawDataBytes(data);
+    if (target.readyState !== WebSocket.OPEN ||
+        target.bufferedAmount + bytes > MAX_SOCKET_BUFFERED_BYTES) {
+        closeSocket(source, 4408, "Session Portal socket is too slow");
+        closeSocket(target, 4408, "Session Portal socket is too slow");
+        return false;
+    }
+    target.send(data, { binary: isBinary }, (error) => {
+        if (error) {
+            source.terminate();
+            target.terminate();
+        }
+    });
+    return true;
+}
+function rawDataBuffer(data) {
+    if (Buffer.isBuffer(data))
+        return Buffer.from(data);
+    if (data instanceof ArrayBuffer)
+        return Buffer.from(data);
+    if (Array.isArray(data))
+        return Buffer.concat(data);
+    throw new TypeError("Unsupported WebSocket frame payload");
+}
+function rawDataBytes(data) {
+    if (Buffer.isBuffer(data))
+        return data.byteLength;
+    if (data instanceof ArrayBuffer)
+        return data.byteLength;
+    if (Array.isArray(data))
+        return data.reduce((total, part) => total + part.byteLength, 0);
+    throw new TypeError("Unsupported WebSocket frame payload");
+}
+function closeSocket(socket, code, reason) {
+    if (socket.readyState === WebSocket.CONNECTING) {
+        socket.terminate();
+        return;
+    }
+    if (socket.readyState === WebSocket.OPEN)
+        socket.close(code, reason.slice(0, 120));
+}
+function normalizedCloseCode(code) {
+    return code >= 1000 && code <= 4999 && code !== 1005 && code !== 1006 ? code : 1011;
+}
+function rejectUpgrade(socket, status, message) {
+    if (socket.destroyed)
+        return;
+    const body = `${message}\n`;
+    const statusText = status === 401
+        ? "Unauthorized"
+        : status === 404
+            ? "Not Found"
+            : status === 503
+                ? "Service Unavailable"
+                : "Bad Request";
+    socket.end(`HTTP/1.1 ${status} ${statusText}\r\nConnection: close\r\n` +
+        "Content-Type: text/plain; charset=utf-8\r\n" +
+        `Content-Length: ${Buffer.byteLength(body)}\r\n\r\n${body}`);
+}
+function isAllowedSessionMutation(ctx, encodedSessionId) {
+    const prefix = `${SESSION_COLLECTION_API_PATH}/${encodedSessionId}`;
+    const suffix = ctx.path.slice(prefix.length);
+    if (ctx.method === "POST") {
+        return /^(?:\/interrupt|\/messages(?:\/queue)?|\/terminal\/start|\/resources|\/interactions\/[^/]+\/resolve|\/browser\/(?:open|close|pages)|\/browser\/pages\/[^/]+\/(?:close|activate|back|forward|reload|navigate)|\/emulator\/(?:attach|detach|tap|button|type|rotate|launch|gesture))$/.test(suffix);
+    }
+    if (ctx.method === "PUT") {
+        return suffix === "/execution" || suffix === "/browser/request-headers";
+    }
+    return ctx.method === "DELETE" && /^\/resources\/[^/]+$/.test(suffix);
+}
+function isBrowserRequestHeadersRoute(ctx, encodedSessionId) {
+    const prefix = `${SESSION_COLLECTION_API_PATH}/${encodedSessionId}`;
+    return ctx.path.slice(prefix.length) === "/browser/request-headers";
+}
+function denyMutation(ctx, grant) {
+    if (grant.access === "read_write")
+        return true;
+    ctx.status = 403;
+    ctx.body = { error: "session_portal_read_only" };
+    return false;
+}
+function expireHttpResponseAtGrantDeadline(ctx, expiresAt) {
+    const clear = scheduleSessionPortalExpiry(expiresAt, () => {
+        if (!ctx.res.writableEnded)
+            ctx.res.destroy(new Error("Session Portal grant expired"));
+    });
+    ctx.res.once("finish", clear);
+    ctx.res.once("close", clear);
+}
+export function scheduleSessionPortalExpiry(expiresAt, onExpire) {
+    const delay = Math.max(0, Date.parse(expiresAt) - Date.now());
+    const timer = setTimeout(onExpire, delay);
+    timer.unref?.();
+    return () => clearTimeout(timer);
+}
+function publicAuthorization(grant) {
+    return {
+        portalId: grant.portalId,
+        scope: grant.scope,
+        access: grant.access,
+        ...(grant.embedOrigin ? { embedOrigin: grant.embedOrigin } : {}),
+        ...(grant.sessionId ? { sessionId: grant.sessionId } : {}),
+        expiresAt: grant.expiresAt,
+    };
+}
+function injectEmbeddedPortalBootstrap(html, portalId) {
+    const id = JSON.stringify(portalId).replace(/</g, "\\u003c");
+    const script = `<script>(()=>{try{const raw=sessionStorage.getItem('rynx_session_portal_'+${id});` +
+        `const value=raw?JSON.parse(raw):null;if(value&&value.portalId===${id})window.rynxSessionPortal=value}` +
+        `catch{}})()</script>`;
+    return html.replace("</head>", `${script}</head>`);
+}
+function embeddedPageBootstrap(ctx, ports) {
+    if (ctx.method !== "GET" && ctx.method !== "HEAD")
+        return undefined;
+    const match = RUNTIME_SESSION_PATH.exec(ctx.path);
+    if (!match)
+        return undefined;
+    const portalId = typeof ctx.query[SESSION_PORTAL_QUERY] === "string"
+        ? ctx.query[SESSION_PORTAL_QUERY].trim()
+        : "";
+    const frameOrigin = sessionPortalEmbedOrigin(ctx);
+    if (!PORTAL_ID_PATTERN.test(portalId) || !frameOrigin)
+        return undefined;
+    const grant = ports.inspect(portalId);
+    if (!grant || grant.embedOrigin !== frameOrigin)
+        return undefined;
+    const requestedSessionId = decoded(match[1]);
+    if (grant.scope === "single_session" &&
+        requestedSessionId !== grant.sessionId)
+        return undefined;
+    if (requestedSessionId && !ports.ownsSession(grant.pluginId, requestedSessionId)) {
+        return undefined;
+    }
+    return { portalId, frameOrigin };
+}
+function sessionPortalEmbedOrigin(ctx) {
+    const value = typeof ctx.query[SESSION_PORTAL_EMBED_ORIGIN_QUERY] === "string"
+        ? ctx.query[SESSION_PORTAL_EMBED_ORIGIN_QUERY]
+        : "";
+    return normalizedFrameOrigin(value);
+}
+function normalizedFrameOrigin(value) {
+    const candidate = value.trim();
+    if (!candidate || candidate.length > 512)
+        return undefined;
+    try {
+        const parsed = new URL(candidate);
+        if ((parsed.protocol !== "http:" && parsed.protocol !== "https:") ||
+            parsed.origin !== candidate)
+            return undefined;
+        return parsed.origin;
+    }
+    catch {
+        return undefined;
+    }
+}
+function injectPortalBootstrap(html, grant) {
+    const value = JSON.stringify(publicAuthorization(grant)).replace(/</g, "\\u003c");
+    return html.replace("</head>", `<script>window.rynxSessionPortal=${value}</script></head>`);
+}
+function isStaticAssetRequest(ctx) {
+    return (ctx.method === "GET" || ctx.method === "HEAD") &&
+        (ctx.path.startsWith("/assets/") || ctx.path === "/favicon.png" || ctx.path === "/favicon.svg");
+}
+function cookieName(portalId) {
+    return `rynx_session_portal_${portalId}`;
+}
+function cookieValue(raw, name) {
+    for (const part of raw?.split(";") ?? []) {
+        const index = part.indexOf("=");
+        if (index < 0 || part.slice(0, index).trim() !== name)
+            continue;
+        try {
+            return decodeURIComponent(part.slice(index + 1).trim());
+        }
+        catch {
+            return undefined;
+        }
+    }
+    return undefined;
+}
+function decoded(value) {
+    if (!value)
+        return undefined;
+    try {
+        return decodeURIComponent(value);
+    }
+    catch {
+        return undefined;
+    }
+}
+function notFound(ctx) {
+    ctx.status = 404;
+    ctx.body = { error: "session_not_found" };
+    return false;
+}
+function methodNotAllowed(ctx) {
+    ctx.status = 405;
+    ctx.body = { error: "method_not_allowed" };
+    return false;
+}
+function serviceUnavailable(ctx) {
+    ctx.status = 503;
+    ctx.body = { error: "control_service_shutting_down" };
+}
+async function readJsonBody(request) {
+    const chunks = [];
+    let bytes = 0;
+    for await (const chunk of request) {
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        bytes += buffer.length;
+        if (bytes > 4_096)
+            throw new Error("request body too large");
+        chunks.push(buffer);
+    }
+    const parsed = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new Error("request body must be an object");
+    }
+    return parsed;
+}
+async function readBoundedResponse(response, maxBytes, signal) {
+    const chunks = [];
+    let bytes = 0;
+    const abort = () => response.destroy(signal?.reason instanceof Error ? signal.reason : undefined);
+    if (signal?.aborted)
+        abort();
+    else
+        signal?.addEventListener("abort", abort, { once: true });
+    try {
+        for await (const chunk of response) {
+            const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+            bytes += buffer.byteLength;
+            if (bytes > maxBytes)
+                throw new Error("Control response is too large");
+            chunks.push(buffer);
+        }
+        return Buffer.concat(chunks);
+    }
+    finally {
+        signal?.removeEventListener("abort", abort);
+    }
+}
+function closeWebSocketServer(server) {
+    return new Promise((resolve, reject) => {
+        server.close((error) => error ? reject(error) : resolve());
+    });
+}
+function closeHttpServerImmediately(server) {
+    return new Promise((resolve, reject) => {
+        if (!server.listening) {
+            resolve();
+            return;
+        }
+        server.close((error) => error ? reject(error) : resolve());
+        server.closeAllConnections?.();
+    });
+}
+function redeemPage() {
+    return `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Rynx Sessions</title><style>body{font:14px Inter,system-ui;margin:0;display:grid;min-height:100vh;place-items:center;background:#f6f6f8;color:#17171b}.box{text-align:center}.spin{width:22px;height:22px;margin:0 auto 14px;border:2px solid #d8d8df;border-top-color:#6d5ce7;border-radius:50%;animation:s .8s linear infinite}@keyframes s{to{transform:rotate(360deg)}}</style></head><body><main class="box"><div class="spin"></div><p id="status">正在打开 Rynx Sessions…</p></main><script>(()=>{const el=document.getElementById('status');const p=new URLSearchParams(location.hash.slice(1));const ticket=p.get('ticket');history.replaceState(null,'',location.pathname+location.search);if(!ticket){el.textContent='访问链接缺少票据。';return}fetch(location.pathname+location.search,{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({ticket})}).then(async r=>{const b=await r.json();if(!r.ok)throw new Error(b.error||'票据兑换失败');if(b.authorization){sessionStorage.setItem('rynx_session_portal_'+b.authorization.portalId,JSON.stringify(b.authorization))}location.replace(b.location)}).catch(e=>{el.textContent='无法打开：'+e.message})})();</script></body></html>`;
+}