npm - @rynx-ai/server - Versions diffs - 0.1.11-beta.4 → 0.1.11-beta.6 - Mend

@rynx-ai/server 0.1.11-beta.4 → 0.1.11-beta.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (21) hide show

package/dist/control-api.d.ts +8 -1
package/dist/control-api.js +140 -3
package/dist/control-web/assets/{highlighted-body-OFNGDK62-DWWsUtHF.js → highlighted-body-OFNGDK62-IdclXfSt.js} +1 -1
package/dist/control-web/assets/index-5n6D-i-c.css +32 -0
package/dist/control-web/assets/index-DhsO7WjD.js +709 -0
package/dist/control-web/assets/{mermaid-GHXKKRXX-C1fxAgiw.js → mermaid-GHXKKRXX-BqMPrbIZ.js} +3 -3
package/dist/control-web/index.html +2 -2
package/dist/control-web-dist.d.ts +1 -1
package/dist/control-web-dist.js +4 -2
package/dist/machine-session-service.d.ts +12 -3
package/dist/machine-session-service.js +82 -5
package/dist/remote-runtime-dispatcher.d.ts +1 -1
package/dist/remote-runtime-dispatcher.js +4 -0
package/dist/server.d.ts +12 -1
package/dist/server.js +112 -41
package/dist/session-portal.d.ts +42 -0
package/dist/session-portal.js +746 -0
package/dist/terminal-ws.js +8 -6
package/package.json +7 -7
package/dist/control-web/assets/index-BnX7NWJX.js +0 -689
package/dist/control-web/assets/index-CUoWRX2i.css +0 -32

package/dist/control-web/index.html CHANGED Viewed

@@ -7,8 +7,8 @@
     <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
     <link rel="icon" type="image/png" href="/favicon.png" />
     <title>rynx · control</title>
-    <script type="module" crossorigin src="/assets/index-BnX7NWJX.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-CUoWRX2i.css">
+    <script type="module" crossorigin src="/assets/index-DhsO7WjD.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-5n6D-i-c.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/control-web-dist.d.ts CHANGED Viewed

@@ -3,4 +3,4 @@ import type { Context } from "koa";
 export declare function resolveControlWebDist(): string | null;
 /** Serve a static file from the SPA dir; missing non-asset paths fall back to
  *  index.html (client-side routing), missing assets return 404. */
-export declare function sendSpaFile(ctx: Context, distDir: string, basePath?: string): Promise<void>;
+export declare function sendSpaFile(ctx: Context, distDir: string, basePath?: string, transformIndex?: (html: string) => string): Promise<void>;

package/dist/control-web-dist.js CHANGED Viewed

@@ -37,7 +37,7 @@ export function resolveControlWebDist() {
 }
 /** Serve a static file from the SPA dir; missing non-asset paths fall back to
  *  index.html (client-side routing), missing assets return 404. */
-export async function sendSpaFile(ctx, distDir, basePath = "/") {
+export async function sendSpaFile(ctx, distDir, basePath = "/", transformIndex) {
     const path = basePath !== "/" && ctx.path.startsWith(basePath)
         ? ctx.path.slice(basePath.length) || "/"
         : ctx.path;
@@ -64,5 +64,7 @@ export async function sendSpaFile(ctx, distDir, basePath = "/") {
         }
     }
     ctx.type = CONTENT_TYPES[ext] ?? "application/octet-stream";
-    ctx.body = data;
+    ctx.body = ext === ".html" && transformIndex
+        ? transformIndex(data.toString("utf8"))
+        : data;
 }

package/dist/machine-session-service.d.ts CHANGED Viewed

@@ -1,8 +1,8 @@
 import { type AdmissionReservation, type AgentRuntimeId, type ConversationRuntime, type ResolvedExecutionSnapshot, type SessionWorkspaceSnapshot, type SessionProviderId, type MachineSessionRecord, type ReasoningEffort, type RuntimeUserInput, type SessionBus, type SessionLogStore, type SessionRegistry } from "@rynx-ai/core";
 import type { SequencedSessionEvent, SessionEvent, SessionInteractionResolution, SessionItem, UserContentPart } from "@rynx-ai/protocol";
 import type { RemoteRuntimeSessionResourceDeleteParams, RemoteRuntimeSessionResourceDeleteResult, RemoteRuntimeSessionResourceGetParams, RemoteRuntimeSessionResourceGetResult, RemoteRuntimeSessionResourcePolicyResult, RemoteRuntimeSessionResourceReadParams, RemoteRuntimeSessionResourceReadResult, RemoteRuntimeSessionResourceUploadBeginParams, RemoteRuntimeSessionResourceUploadBeginResult, RemoteRuntimeSessionResourceUploadChunkParams, RemoteRuntimeSessionResourceUploadChunkResult, RemoteRuntimeSessionResourceUploadCommitParams, RemoteRuntimeSessionResourceUploadCommitResult } from "@rynx-ai/protocol/remote-runtime-rpc";
-import type { ControlAgentSummary, ControlSessionInteractionResolveDisposition, ControlSessionRuntimeSnapshot } from "@rynx-ai/protocol/control";
-import { type RemoteRuntimeSessionInterruptResult, type RemoteRuntimeSessionLaunchOptionsListResult, type RemoteRuntimeSessionListParams, type RemoteRuntimeSessionListResult, type RemoteRuntimeSessionSnapshotParams } from "@rynx-ai/protocol/remote-runtime-rpc";
+import type { ControlAgentModelOption, ControlAgentSummary, ControlSessionInteractionResolveDisposition, ControlSessionRuntimeSnapshot, SessionPermissionPreset } from "@rynx-ai/protocol/control";
+import { type RemoteRuntimeSessionInterruptResult, type RemoteRuntimeSessionExecutionGetResult, type RemoteRuntimeSessionExecutionUpdateParams, type RemoteRuntimeSessionExecutionUpdateResult, type RemoteRuntimeSessionLaunchOptionsListResult, type RemoteRuntimeSessionListParams, type RemoteRuntimeSessionListResult, type RemoteRuntimeSessionSnapshotParams } from "@rynx-ai/protocol/remote-runtime-rpc";
 import type { CodexRuntimeStatus, InjectOutcome } from "@rynx-ai/runtime";
 export interface MachineSessionRuntimeStatePort {
     snapshot(sessionId: string): ControlSessionRuntimeSnapshot;
@@ -130,7 +130,7 @@ export interface MachineSessionForkStorePort {
     markTargetDeleted(sessionId: string): void | Promise<void>;
 }
 export interface MachineSessionServicePorts {
-    registry: Pick<SessionRegistry, "create" | "get" | "list" | "setTitle" | "remove">;
+    registry: Pick<SessionRegistry, "create" | "get" | "list" | "setTitle" | "setExecution" | "remove">;
     log: Pick<SessionLogStore, "list" | "listSessions" | "snapshot" | "deleteSession">;
     events: Pick<SessionBus, "subscribe"> & Partial<Pick<SessionBus, "close">>;
     /** Canonical persistence + fan-out for user turns accepted before a native
@@ -156,8 +156,10 @@ export interface MachineSessionServicePorts {
             provider?: SessionProviderId;
             model?: string;
             reasoningEffort?: ReasoningEffort;
+            permissionPreset?: SessionPermissionPreset;
             cwd: string;
         }): Promise<ResolvedExecutionSnapshot>;
+        listModels?(provider: SessionProviderId): Promise<ControlAgentModelOption[]>;
         runner: MachineSessionRunnerPort;
     };
     /** Resolve a temporary Project selection, or create a Session-only fallback directory. */
@@ -206,6 +208,7 @@ export type MachineSessionInterruptResult = RemoteRuntimeSessionInterruptResult;
 interface MachineSessionCreateOptions {
     model?: string;
     reasoningEffort?: ReasoningEffort;
+    permissionPreset?: SessionPermissionPreset;
     title?: string;
     projectId?: string;
 }
@@ -306,6 +309,12 @@ export declare class MachineSessionService {
     }>;
     /** Target-owned Provider readiness plus the existing Agent preset catalog. */
     launchOptions(): Promise<RemoteRuntimeSessionLaunchOptionsListResult>;
+    /** Read the effective model defaults used for the next turn. */
+    executionSettings(sessionIdInput: string): Promise<RemoteRuntimeSessionExecutionGetResult>;
+    /** Replace only the model defaults of an idle Session. The runner is closed
+     * so every Provider resumes its native context with the new settings on the
+     * next turn. */
+    updateExecutionSettings(input: RemoteRuntimeSessionExecutionUpdateParams): Promise<RemoteRuntimeSessionExecutionUpdateResult>;
     /** Create target-owned Session identity from one Agent preset or direct Provider. */
     create(input: MachineSessionCreateInput): Promise<MachineSessionCreateResult>;
     private createAdmitted;

package/dist/machine-session-service.js CHANGED Viewed

@@ -159,11 +159,18 @@ export class MachineSessionService {
         const statusCache = new Map();
         const { agents } = await this.agentOptions();
         const [providers, launchAgents] = await Promise.all([
-            Promise.all(SESSION_PROVIDER_IDS.map(async (provider) => ({
-                id: provider,
-                name: getRuntimeProfile(provider).displayName,
-                ...await this.runtimeReadiness(provider, statusCache),
-            }))),
+            Promise.all(SESSION_PROVIDER_IDS.map(async (provider) => {
+                const execution = this.ports.execution;
+                const models = execution?.listModels
+                    ? await execution.listModels(provider).catch(() => [])
+                    : undefined;
+                return {
+                    id: provider,
+                    name: getRuntimeProfile(provider).displayName,
+                    ...await this.runtimeReadiness(provider, statusCache),
+                    ...(models === undefined ? {} : { models }),
+                };
+            })),
             Promise.all(agents.map(async (agent) => {
                 const execution = this.ports.execution;
                 if (!execution) {
@@ -192,6 +199,59 @@ export class MachineSessionService {
         ]);
         return { providers, agents: launchAgents };
     }
+    /** Read the effective model defaults used for the next turn. */
+    async executionSettings(sessionIdInput) {
+        const sessionId = validOpaqueToken(sessionIdInput, "sessionId", MAX_SESSION_ID_CHARS);
+        const meta = this.ports.registry.get(sessionId);
+        if (!meta) {
+            throw new MachineSessionServiceFailure("not_found", "session not found");
+        }
+        return executionSettingsResult(meta.execution);
+    }
+    /** Replace only the model defaults of an idle Session. The runner is closed
+     * so every Provider resumes its native context with the new settings on the
+     * next turn. */
+    async updateExecutionSettings(input) {
+        const sessionId = validOpaqueToken(input.sessionId, "sessionId", MAX_SESSION_ID_CHARS);
+        const modelId = validRequiredText(input.model, "model");
+        const meta = this.ports.registry.get(sessionId);
+        if (!meta) {
+            throw new MachineSessionServiceFailure("not_found", "session not found");
+        }
+        await this.assertNotForkReserved(sessionId);
+        const runtime = this.ports.runtimeState.snapshot(sessionId);
+        const pendingMessage = await this.ports.pendingMessages?.get(sessionId);
+        if (runtime.status !== "idle" ||
+            runtime.activeResponseIds.length > 0 ||
+            runtime.pendingInteractions.length > 0 ||
+            pendingMessage) {
+            throw new MachineSessionServiceFailure("failed_precondition", "Session must be idle before changing model settings");
+        }
+        const executionPort = this.requireExecution();
+        if (!executionPort.listModels) {
+            throw new MachineSessionServiceFailure("failed_precondition", "Runtime model catalog is unavailable");
+        }
+        const models = await executionPort.listModels(meta.execution.provider);
+        const model = models.find((candidate) => candidate.id === modelId);
+        if (!model) {
+            throw new MachineSessionServiceInputError(`model is not available for ${meta.execution.provider}`);
+        }
+        const reasoningEffort = input.reasoningEffort === null
+            ? null
+            : validRequiredText(input.reasoningEffort, "reasoningEffort");
+        if (reasoningEffort !== null &&
+            !model.reasoningOptions.some((option) => option.value === reasoningEffort)) {
+            throw new MachineSessionServiceInputError(`reasoningEffort is not available for model ${model.id}`);
+        }
+        const nextExecution = {
+            ...structuredClone(meta.execution),
+            model: model.id,
+            reasoningEffort,
+        };
+        this.ports.registry.setExecution(sessionId, nextExecution);
+        executionPort.runner.stopRunner(sessionId);
+        return executionSettingsResult(nextExecution);
+    }
     /** Create target-owned Session identity from one Agent preset or direct Provider. */
     async create(input) {
         return this.withAdmission(() => this.createAdmitted(input));
@@ -223,6 +283,7 @@ export class MachineSessionService {
                 ...target,
                 ...(input.model === undefined ? {} : { model: input.model }),
                 ...(input.reasoningEffort === undefined ? {} : { reasoningEffort: input.reasoningEffort }),
+                ...(input.permissionPreset === undefined ? {} : { permissionPreset: input.permissionPreset }),
                 cwd: workspace.cwd,
             });
             const sessionId = newSessionId();
@@ -997,6 +1058,13 @@ function sessionSummary(id, meta, log, runtimeState, pendingState) {
         updatedAt: validTimestamp(updatedAt, "updatedAt"),
     };
 }
+function executionSettingsResult(execution) {
+    return {
+        provider: execution.provider,
+        model: execution.model,
+        reasoningEffort: execution.reasoningEffort,
+    };
+}
 function compareMetaRecency(left, right) {
     const leftTime = validTimestamp(left.updatedAt ?? left.createdAt, "updatedAt");
     const rightTime = validTimestamp(right.updatedAt ?? right.createdAt, "updatedAt");
@@ -1091,6 +1159,15 @@ function validOpaqueToken(value, field, maximum) {
     }
     return value;
 }
+function validRequiredText(value, field) {
+    if (typeof value !== "string" || value.trim().length === 0 || value.length > 512) {
+        throw new MachineSessionServiceInputError(`${field} must be a non-empty string of at most 512 characters`);
+    }
+    if (/[\u0000-\u001f\u007f]/.test(value)) {
+        throw new MachineSessionServiceInputError(`${field} contains invalid control characters`);
+    }
+    return value.trim();
+}
 function validTimestamp(value, field) {
     if (typeof value !== "string" || !Number.isFinite(Date.parse(value))) {
         throw new MachineSessionServiceInputError(`${field} must be a valid timestamp`);

package/dist/remote-runtime-dispatcher.d.ts CHANGED Viewed

@@ -34,7 +34,7 @@ export interface RemoteRuntimeProjectHost {
     update(projectId: string, input: RemoteRuntimeProjectCreateParams): RemoteRuntimeProject | undefined | Promise<RemoteRuntimeProject | undefined>;
     remove(projectId: string): boolean | Promise<boolean>;
 }
-export type RemoteRuntimeSessionHost = Pick<MachineSessionService, "list" | "snapshot" | "watch" | "interrupt" | "agentOptions" | "launchOptions" | "create" | "fork" | "sendMessage" | "resourcePolicy" | "beginResourceUpload" | "writeResourceUploadChunk" | "commitResourceUpload" | "getResource" | "readResource" | "deleteResource" | "enqueueMessage" | "startTerminal" | "delete" | "resolveInteraction">;
+export type RemoteRuntimeSessionHost = Pick<MachineSessionService, "list" | "snapshot" | "watch" | "interrupt" | "agentOptions" | "launchOptions" | "executionSettings" | "updateExecutionSettings" | "create" | "fork" | "sendMessage" | "resourcePolicy" | "beginResourceUpload" | "writeResourceUploadChunk" | "commitResourceUpload" | "getResource" | "readResource" | "deleteResource" | "enqueueMessage" | "startTerminal" | "delete" | "resolveInteraction">;
 export type RemoteRuntimeBrowserHost = Pick<SessionBrowserService, "getState" | "open" | "close" | "createPage" | "closePage" | "activatePage" | "navigatePage" | "goBack" | "goForward" | "reload">;
 export type RemoteRuntimeSessionEmulatorHost = Pick<SessionEmulatorService, "getState" | "listDevices" | "attach" | "detach" | "tap" | "type" | "button" | "rotate" | "launch" | "gesture" | "releaseDevice" | "stopDevice">;
 export interface OpenRemoteRuntimeSessionEvents {

package/dist/remote-runtime-dispatcher.js CHANGED Viewed

@@ -125,6 +125,10 @@ export class RemoteRuntimeDispatcher {
                     return await this.withSessions(request, (sessions) => sessions.agentOptions());
                 case "session.launchOptions.list":
                     return await this.withSessions(request, (sessions) => sessions.launchOptions());
+                case "session.execution.get":
+                    return await this.withSessions(request, (sessions) => sessions.executionSettings(request.params.sessionId));
+                case "session.execution.update":
+                    return await this.withSessions(request, (sessions) => sessions.updateExecutionSettings(request.params));
                 case "session.create":
                     return await this.withSessions(request, (sessions) => sessions.create(request.params));
                 case "session.fork":

package/dist/server.d.ts CHANGED Viewed

@@ -18,6 +18,9 @@ import { type ControlPlaneDeps, type LocalSessionResourceHost, type SessionResou
 import type { MachineSessionService } from "./machine-session-service.js";
 import type { DaemonRuntimeHost } from "./remote-runtime.js";
 import { type AttachDesktopBrowserHostServerOptions } from "./desktop-browser-host.js";
+import { type SessionPortalAuthorizationPorts } from "./session-portal.js";
+export { createSessionPortalApp, startSessionPortal } from "./session-portal.js";
+export type { SessionPortalAuthorization, SessionPortalAuthorizationPorts, SessionPortalOptions, SessionPortalServer, } from "./session-portal.js";
 import { SessionRuntimeIndex } from "./session-runtime-index.js";
 import type { SessionEmulatorService } from "./session-emulator-service.js";
 import { type SessionTerminalHost } from "./session-terminal-host.js";
@@ -132,6 +135,9 @@ export interface StartServerOptions {
     providerClis?: ProviderCliManagementHost;
     /** Private resident-app Browser Host socket, authenticated by daemonManagement. */
     desktopBrowserHost?: Omit<AttachDesktopBrowserHostServerOptions, "managementToken">;
+    /** Hashed ticket/grant authority for the native Session Portal. Required
+     * when RYNX_SESSION_PORTAL_PORT enables that listener. */
+    sessionPortalAuthorization?: SessionPortalAuthorizationPorts;
 }
 export interface SessionRuntimeServices {
     sessionStore: CodexSessionStore;
@@ -163,6 +169,11 @@ export interface PluginRuntimeHostServices {
      * closed, but cannot provision Sessions or begin Turns. */
     admissionOpen?: () => boolean;
     admissionReserve?: () => AdmissionReservation | undefined;
+    sessionPortal?: {
+        scheme: "http" | "https";
+        bindHost: string;
+        port: number;
+    };
 }
 export interface PluginRuntimeLifecycle {
     bindHostServices(services: PluginRuntimeHostServices): void;
@@ -434,4 +445,4 @@ export declare function createSessionRuntimeServices(input: {
  * no agent request / response / SSE endpoints are exposed here.
  */
 export declare function createApp({ config, control }?: CreateAppOptions): Koa<Koa.DefaultState, Koa.DefaultContext>;
-export declare function startServer({ config, control, sessionLog, sessionRegistry, pluginRuntime, daemonManagement, remoteRuntime, remoteRuntimeAdmin, runtimeTargetControl, runtimeConnectionResolver, localSessionResources, localMachineSessions, sessionEmulators, sessionRuntimeServices, sessionLifecycle, sessionTerminals, runtimeLocalBrowser, providerClis, desktopBrowserHost, }?: StartServerOptions): Promise<RynxServer>;
+export declare function startServer({ config, control, sessionLog, sessionRegistry, pluginRuntime, daemonManagement, remoteRuntime, remoteRuntimeAdmin, runtimeTargetControl, runtimeConnectionResolver, localSessionResources, localMachineSessions, sessionEmulators, sessionRuntimeServices, sessionLifecycle, sessionTerminals, runtimeLocalBrowser, providerClis, desktopBrowserHost, sessionPortalAuthorization, }?: StartServerOptions): Promise<RynxServer>;

package/dist/server.js CHANGED Viewed

@@ -10,6 +10,8 @@ import { attachBrowserSurfaceWs } from "./browser-surface-ws.js";
 import { attachEmulatorSurfaceWs } from "./emulator-surface-ws.js";
 import { attachDesktopBrowserHostServer, } from "./desktop-browser-host.js";
 import { resolveControlWebDist, sendSpaFile } from "./control-web-dist.js";
+import { startSessionPortal, } from "./session-portal.js";
+export { createSessionPortalApp, startSessionPortal } from "./session-portal.js";
 import { SessionRuntimeIndex } from "./session-runtime-index.js";
 import { createRunnerSessionTerminalHost, } from "./session-terminal-host.js";
 import { runtimeWebAccessPolicyForBindHost, } from "./runtime-web-auth.js";
@@ -137,7 +139,7 @@ export function createApp({ config = loadConfig(), control } = {}) {
     }
     return app;
 }
-export async function startServer({ config = loadConfig(), control, sessionLog, sessionRegistry, pluginRuntime, daemonManagement, remoteRuntime, remoteRuntimeAdmin, runtimeTargetControl, runtimeConnectionResolver, localSessionResources, localMachineSessions, sessionEmulators, sessionRuntimeServices, sessionLifecycle, sessionTerminals, runtimeLocalBrowser, providerClis, desktopBrowserHost, } = {}) {
+export async function startServer({ config = loadConfig(), control, sessionLog, sessionRegistry, pluginRuntime, daemonManagement, remoteRuntime, remoteRuntimeAdmin, runtimeTargetControl, runtimeConnectionResolver, localSessionResources, localMachineSessions, sessionEmulators, sessionRuntimeServices, sessionLifecycle, sessionTerminals, runtimeLocalBrowser, providerClis, desktopBrowserHost, sessionPortalAuthorization, } = {}) {
     const runtimeWebAccess = runtimeWebAccessPolicyForBindHost(config.HOST);
     const desktopBrowserManagementToken = desktopBrowserHost
         ? requireDaemonManagementToken(daemonManagement)
@@ -160,6 +162,46 @@ export async function startServer({ config = loadConfig(), control, sessionLog,
                 return { cwd: session.workspace.cwd };
             },
         });
+    const controlShutdown = new AbortController();
+    const controlSurface = control
+        ? {
+            deps: control,
+            runtime: conversationRuntime,
+            sessionBus,
+            sessionLog,
+            runnerManager,
+            sessionStore,
+            pluginRuntimeStatus: pluginRuntime
+                ? () => pluginRuntime.statusSnapshot()
+                : undefined,
+            daemonManagement,
+            remoteRuntime,
+            remoteRuntimeAdmin,
+            runtimeTargetControl,
+            runtimeConnectionResolver,
+            localSessionResources,
+            localMachineSessions,
+            sessionEmulators,
+            shutdownSignal: controlShutdown.signal,
+            sessionRuntimeIndex,
+            sessionLifecycle,
+            runtimeLocalBrowser,
+            providerClis,
+        }
+        : undefined;
+    const sessionPortalConfig = config.RYNX_SESSION_PORTAL_PORT !== undefined
+        ? (() => {
+            if (runtimeWebAccess.mode !== "loopback") {
+                throw new Error("Session Portal requires the ordinary Control listener to bind loopback only");
+            }
+            const controlWebDist = resolveControlWebDist();
+            if (!sessionPortalAuthorization || !controlSurface || !controlWebDist) {
+                throw new Error("Session Portal requires authorization, Control services, and the native Control Web build");
+            }
+            return { authorization: sessionPortalAuthorization, controlWebDist };
+        })()
+        : undefined;
+    let sessionPortalServer;
     if (pluginRuntime) {
         if (!sessionRegistry)
             throw new Error("plugin runtime requires a machine session registry");
@@ -183,6 +225,15 @@ export async function startServer({ config = loadConfig(), control, sessionLog,
             interruptSession: (sessionId) => runnerManager.interruptLiveSession(sessionId),
             terminateSession: (sessionId) => runnerManager.terminateLiveSession(sessionId),
             resolveSessionInteraction: (sessionId, interactionId, resolution) => runnerManager.resolveInteraction(sessionId, interactionId, resolution),
+            ...(sessionPortalConfig
+                ? {
+                    sessionPortal: {
+                        scheme: "http",
+                        bindHost: config.RYNX_SESSION_PORTAL_HOST,
+                        port: config.RYNX_SESSION_PORTAL_PORT,
+                    },
+                }
+                : {}),
         });
     }
     // Provider TUI `/clear`·`/fork` uses the same publication boundary as an
@@ -198,38 +249,32 @@ export async function startServer({ config = loadConfig(), control, sessionLog,
             kind: r.kind,
         });
     });
-    const controlShutdown = new AbortController();
     const app = createApp({
         config,
-        control: control
-            ? {
-                deps: control,
-                runtime: conversationRuntime,
-                sessionBus,
-                sessionLog,
-                runnerManager,
-                sessionStore,
-                pluginRuntimeStatus: pluginRuntime
-                    ? () => pluginRuntime.statusSnapshot()
-                    : undefined,
-                daemonManagement,
-                remoteRuntime,
-                remoteRuntimeAdmin,
-                runtimeTargetControl,
-                runtimeConnectionResolver,
-                localSessionResources,
-                localMachineSessions,
-                sessionEmulators,
-                shutdownSignal: controlShutdown.signal,
-                sessionRuntimeIndex,
-                sessionLifecycle,
-                runtimeLocalBrowser,
-                providerClis,
-            }
-            : undefined,
+        control: controlSurface,
     });
-    return new Promise((resolve) => {
+    return new Promise((resolve, reject) => {
+        let startupWebSocketServers = [];
+        const rejectBeforeListening = (error) => reject(error);
         const server = app.listen(config.PORT, config.HOST, () => {
+            server.off("error", rejectBeforeListening);
+            void finishStartup(server).catch(async (error) => {
+                controlShutdown.abort(asError(error));
+                sessionPortalServer?.stopAccepting();
+                server.closeAllConnections?.();
+                await Promise.allSettled([
+                    closeWebSocketServers(startupWebSocketServers),
+                    sessionPortalServer?.shutdown() ?? Promise.resolve(),
+                    new Promise((done) => server.close(() => done())),
+                    Promise.resolve(daemonManagement?.pluginManagement?.dispose?.()),
+                    Promise.resolve(pluginRuntime?.dispose()),
+                    runnerManager.stop(),
+                ]);
+                reject(error);
+            });
+        });
+        server.once("error", rejectBeforeListening);
+        const finishStartup = async (server) => {
             console.log(JSON.stringify({
                 level: config.LOG_LEVEL,
                 msg: "Harness agent server listening",
@@ -238,15 +283,6 @@ export async function startServer({ config = loadConfig(), control, sessionLog,
                 runtime: config.DEFAULT_RUNTIME,
                 model: resolveRuntimeModel(config, config.DEFAULT_RUNTIME),
             }));
-            const startup = pluginRuntime?.startPluginRuntimes() ?? Promise.resolve();
-            void startup.catch((error) => {
-                console.error(JSON.stringify({
-                    level: "error",
-                    type: "plugin-runtime",
-                    event: "startup_failed",
-                    error: error instanceof Error ? error.message : String(error),
-                }));
-            });
             const webSocketServers = [
                 attachTerminalWs(server, {
                     runtimeConnectionResolver,
@@ -265,9 +301,36 @@ export async function startServer({ config = loadConfig(), control, sessionLog,
             if (control?.emulator) {
                 webSocketServers.push(attachEmulatorTouchWs(server, { emulator: control.emulator }));
             }
+            startupWebSocketServers = webSocketServers;
+            if (sessionPortalConfig) {
+                sessionPortalServer = await startSessionPortal({
+                    host: config.RYNX_SESSION_PORTAL_HOST,
+                    port: config.RYNX_SESSION_PORTAL_PORT,
+                    scheme: "http",
+                    authorization: sessionPortalConfig.authorization,
+                    controlOrigin: listeningHttpOrigin(server),
+                    controlWebDist: sessionPortalConfig.controlWebDist,
+                    shutdownSignal: controlShutdown.signal,
+                });
+            }
+            const startup = pluginRuntime?.startPluginRuntimes() ?? Promise.resolve();
+            void startup.catch((error) => {
+                console.error(JSON.stringify({
+                    level: "error",
+                    type: "plugin-runtime",
+                    event: "startup_failed",
+                    error: error instanceof Error ? error.message : String(error),
+                }));
+            });
             resolve(bindServerLifecycle(server, {
-                fence: () => controlShutdown.abort(new Error("Rynx server is shutting down")),
-                closeUpgrades: () => closeWebSocketServers(webSocketServers),
+                fence: () => {
+                    controlShutdown.abort(new Error("Rynx server is shutting down"));
+                    sessionPortalServer?.stopAccepting();
+                },
+                closeUpgrades: () => Promise.all([
+                    closeWebSocketServers(webSocketServers),
+                    sessionPortalServer?.shutdown() ?? Promise.resolve(),
+                ]).then(() => undefined),
                 cleanup: async () => runCleanupSteps([
                     () => startup.catch(() => undefined),
                     () => Promise.resolve(daemonManagement?.pluginManagement?.dispose?.()),
@@ -275,9 +338,17 @@ export async function startServer({ config = loadConfig(), control, sessionLog,
                     () => runnerManager.stop(),
                 ]),
             }));
-        });
+        };
     });
 }
+function listeningHttpOrigin(server) {
+    const address = server.address();
+    if (!address || typeof address === "string") {
+        throw new Error("Control listener did not expose an HTTP address");
+    }
+    const host = address.address.includes(":") ? `[${address.address}]` : address.address;
+    return `http://${host}:${address.port}`;
+}
 function requireDaemonManagementToken(host) {
     const token = host?.managementToken;
     const bytes = typeof token === "string" ? Buffer.byteLength(token, "utf8") : 0;

package/dist/session-portal.d.ts ADDED Viewed

@@ -0,0 +1,42 @@
+import { type IncomingMessage, type Server as HttpServer } from "node:http";
+import type { Duplex } from "node:stream";
+import Koa from "koa";
+export declare const SESSION_PORTAL_HEADER = "x-rynx-session-portal";
+export declare const SESSION_PORTAL_QUERY = "portal";
+export interface SessionPortalAuthorization {
+    portalId: string;
+    pluginId: string;
+    scope: "plugin_sessions" | "single_session";
+    access: "read_only" | "read_write";
+    sessionId?: string;
+    expiresAt: string;
+}
+export interface SessionPortalAuthorizationPorts {
+    redeem(ticket: string): (SessionPortalAuthorization & {
+        secret: string;
+    }) | undefined;
+    authorize(portalId: string, secret: string): SessionPortalAuthorization | undefined;
+    ownsSession(pluginId: string, sessionId: string): boolean;
+}
+export interface SessionPortalOptions {
+    host: string;
+    port: number;
+    scheme: "http" | "https";
+    authorization: SessionPortalAuthorizationPorts;
+    controlOrigin: string;
+    controlWebDist: string;
+    shutdownSignal?: AbortSignal;
+}
+export interface SessionPortalServer {
+    server: HttpServer;
+    stopAccepting(): void;
+    shutdown(): Promise<void>;
+}
+/** Session Portal is a narrow adapter in front of the one Control service. It
+ * serves the native SPA, validates Portal grants, and forwards only authorized
+ * Session HTTP calls to Control; it owns no Session or Runtime handlers. */
+export declare function createSessionPortalApp(options: SessionPortalOptions): Koa;
+export declare function startSessionPortal(options: SessionPortalOptions): Promise<SessionPortalServer>;
+export declare function authorizeSessionPortalWebSocket(request: IncomingMessage, ports: SessionPortalAuthorizationPorts, runtimeSelector: string, sessionId: string): SessionPortalAuthorization | undefined;
+export declare function rejectSessionPortalUpgrade(socket: Duplex): void;
+export declare function scheduleSessionPortalExpiry(expiresAt: string, onExpire: () => void): () => void;