@rynx-ai/server 0.1.11-beta.5 → 0.1.11-beta.51

package/dist/remote-runtime-dispatcher.d.ts

@@ -34,8 +34,8 @@ export interface RemoteRuntimeProjectHost {
     update(projectId: string, input: RemoteRuntimeProjectCreateParams): RemoteRuntimeProject | undefined | Promise<RemoteRuntimeProject | undefined>;
     remove(projectId: string): boolean | Promise<boolean>;
 }
-export type RemoteRuntimeSessionHost = Pick<MachineSessionService, "list" | "snapshot" | "watch" | "interrupt" | "agentOptions" | "launchOptions" | "executionSettings" | "updateExecutionSettings" | "create" | "fork" | "sendMessage" | "resourcePolicy" | "beginResourceUpload" | "writeResourceUploadChunk" | "commitResourceUpload" | "getResource" | "readResource" | "deleteResource" | "enqueueMessage" | "startTerminal" | "delete" | "resolveInteraction">;
-export type RemoteRuntimeBrowserHost = Pick<SessionBrowserService, "getState" | "open" | "close" | "createPage" | "closePage" | "activatePage" | "navigatePage" | "goBack" | "goForward" | "reload">;
+export type RemoteRuntimeSessionHost = Pick<MachineSessionService, "list" | "snapshot" | "watch" | "interrupt" | "agentOptions" | "launchOptions" | "executionSettings" | "updateExecutionSettings" | "create" | "fork" | "sendMessage" | "resourcePolicy" | "beginResourceUpload" | "writeResourceUploadChunk" | "commitResourceUpload" | "getResource" | "readResource" | "deleteResource" | "getFile" | "readFile" | "getWorkspaceFile" | "readWorkspaceFile" | "enqueueMessage" | "startTerminal" | "delete" | "resolveInteraction">;
+export type RemoteRuntimeBrowserHost = Pick<SessionBrowserService, "getState" | "getRequestHeaders" | "setRequestHeaders" | "open" | "close" | "createPage" | "closePage" | "activatePage" | "navigatePage" | "goBack" | "goForward" | "reload">;
 export type RemoteRuntimeSessionEmulatorHost = Pick<SessionEmulatorService, "getState" | "listDevices" | "attach" | "detach" | "tap" | "type" | "button" | "rotate" | "launch" | "gesture" | "releaseDevice" | "stopDevice">;
 export interface OpenRemoteRuntimeSessionEvents {
     sessionId: string;

package/dist/remote-runtime-dispatcher.js

@@ -154,6 +154,14 @@ export class RemoteRuntimeDispatcher {
                     return await this.withSessions(request, (sessions) => sessions.readResource(request.params));
                 case "session.resource.delete":
                     return await this.withSessions(request, (sessions) => sessions.deleteResource(request.params));
+                case "session.file.get":
+                    return await this.withSessions(request, (sessions) => sessions.getFile(request.params));
+                case "session.file.read":
+                    return await this.withSessions(request, (sessions) => sessions.readFile(request.params));
+                case "session.workspace.file.get":
+                    return await this.withSessions(request, (sessions) => sessions.getWorkspaceFile(request.params));
+                case "session.workspace.file.read":
+                    return await this.withSessions(request, (sessions) => sessions.readWorkspaceFile(request.params));
                 case "session.message.enqueue":
                     return await this.withSessions(request, (sessions) => sessions.enqueueMessage(request.params.sessionId, request.params.message));
                 case "session.terminal.start":
@@ -168,6 +176,10 @@ export class RemoteRuntimeDispatcher {
                     return await this.withSessions(request, (sessions) => sessions.resolveInteraction(request.params.sessionId, request.params.interactionId, request.params.resolution));
                 case "browser.state.get":
                     return await this.withBrowsers(request, (browsers) => browsers.getState(request.params));
+                case "browser.request-headers.get":
+                    return await this.withBrowsers(request, (browsers) => browsers.getRequestHeaders(request.params));
+                case "browser.request-headers.set":
+                    return await this.withBrowsers(request, (browsers) => browsers.setRequestHeaders(request.params));
                 case "browser.open":
                     return await this.withBrowsers(request, (browsers) => browsers.open(request.params));
                 case "browser.close":
@@ -190,7 +202,7 @@ export class RemoteRuntimeDispatcher {
             return rpcError(request.id, "method_not_found", "Remote Runtime method is not supported");
         }
         catch (error) {
-            this.options.onError?.(error, request);
+            this.options.onError?.(error, diagnosticRequest(request));
             const mapped = mapHostError(request, error);
             return rpcError(request.id, mapped.code, mapped.message);
         }
@@ -294,6 +306,20 @@ export class RemoteRuntimeDispatcher {
         return rpcResult(request, await invoke(browsers));
     }
 }
+function diagnosticRequest(request) {
+    if (request.method !== "browser.request-headers.set")
+        return request;
+    return {
+        ...request,
+        params: {
+            ...request.params,
+            headers: request.params.headers.map((header) => ({
+                ...header,
+                value: "[redacted]",
+            })),
+        },
+    };
+}
 function mapHostError(request, error) {
     if (error instanceof ProjectNotFoundError) {
         return { code: "not_found", message: "Runtime Project was not found" };
@@ -314,11 +340,19 @@ function mapHostError(request, error) {
                 return { code: "not_found", message: "Browser resource was not found" };
             case "generation_mismatch":
                 return { code: "conflict", message: "Browser generation is stale" };
+            case "revision_mismatch":
+                return { code: "conflict", message: "Browser request headers revision is stale" };
+            case "unsupported":
+                return {
+                    code: "failed_precondition",
+                    message: "Browser request headers are unsupported by the active Browser Host",
+                };
             case "unavailable":
             case "capacity":
             case "shutting_down":
                 return { code: "failed_precondition", message: "Browser operation is unavailable" };
             case "outcome_unknown":
+            case "command_timeout":
                 return { code: "outcome_unknown", message: "Browser operation may have been applied" };
             case "host_failure":
                 return { code: "internal", message: "Browser Host request failed" };
@@ -347,7 +381,10 @@ function mapHostError(request, error) {
                 : error.code === "conflict"
                     ? "Remote Session resource conflicts with existing state"
                     : "Remote Session operation may have been applied";
-        return { code: error.code, message };
+        // Native lifecycle failures are already reduced to a user-safe phase and
+        // concrete Provider cause. Preserve that text over Direct Runtime so the
+        // remote UI does not collapse every startup failure into one wrapper.
+        return { code: error.code, message: error.runtimeFailure?.message ?? message };
     }
     if (request.method === "session.interrupt") {
         return {

package/dist/remote-runtime-session-projection.d.ts

@@ -9,6 +9,7 @@ export declare function projectRemoteRuntimeSessionListResult(value: unknown): R
 export declare function projectRemoteRuntimeSessionSnapshotResult(value: {
     sessionId: string;
     items: SessionItem[];
+    pendingInputs: NonNullable<RemoteRuntimeSessionSnapshotResult["pendingInputs"]>;
     runtime: unknown;
     hasMore: boolean;
     nextAfterId?: string;

package/dist/remote-runtime-session-projection.js

@@ -27,6 +27,7 @@ export function projectRemoteRuntimeSessionSnapshotResult(value) {
     const candidate = {
         sessionId: value.sessionId,
         items,
+        pendingInputs: structuredClone(value.pendingInputs),
         runtime,
         hasMore: value.hasMore,
         ...(value.nextAfterId === undefined ? {} : { nextAfterId: value.nextAfterId }),
@@ -65,6 +66,9 @@ function projectRuntimeSnapshot(value) {
     const projected = {
         status: runtime.status,
         ...(runtime.statusKind === undefined ? {} : { statusKind: runtime.statusKind }),
+        ...(runtime.backgroundTaskCount === undefined
+            ? {}
+            : { backgroundTaskCount: runtime.backgroundTaskCount }),
         activeResponseIds: [],
         pendingInteractions: [],
     };
@@ -225,6 +229,9 @@ function collectItemPayloadRefs(item) {
             collectInteractionResolution(data.resolution, "data.resolution", item, refs);
             addOptionalRef(data, "reason", "data.reason", item, refs, MAX_DESCRIPTION_CHARS, true);
             break;
+        case "compaction":
+            addRef(data, "summary", "data.summary", item, refs, 16_384, true);
+            break;
         case "error":
             addRef(data, "message", "data.message", item, refs, 16_384, true);
             break;
@@ -530,11 +537,16 @@ function assertEventScope(event, expectedSessionId) {
     let actual;
     switch (event.type) {
         case "session.status":
+        case "session.collaboration_mode":
         case "response.created":
         case "session.interaction.requested":
         case "session.interaction.resolved":
         case "session.interaction.cancelled":
+        case "session.interrupted":
         case "session.todos":
+        case "response.compaction.in_progress":
+        case "response.compaction.completed":
+        case "response.compaction.failed":
         case "session.rotated":
             actual = event.sessionId;
             break;

package/dist/server.d.ts

@@ -1,10 +1,10 @@
 import type { Server as HttpServer } from "node:http";
 import Koa from "koa";
 import { ConversationRuntime, type AdmissionReservation, type AgentCapabilities, type AgentSessionStore, type AppConfig, type SessionEvent, type SessionBus, type SessionLogStore, type SessionRegistry } from "@rynx-ai/core";
-import type { SessionInteractionResolution } from "@rynx-ai/protocol";
+import type { SessionImageFileReference, SessionInteractionResolution } from "@rynx-ai/protocol";
 import type { ControlRuntimeShareAddress, DaemonBrowserArtifactCleanResult, DaemonBrowserArtifactInstallInput, DaemonBrowserArtifactInstallResult, DaemonBrowserArtifactUpdateInput, DaemonBrowserArtifactVersionResult, DaemonCleanupSessionsInput, DaemonCleanupSessionsResult, DaemonChromeInspectionConfigureInput, DaemonChromeInspectionStatus, DaemonShutdownIfIdleResult } from "@rynx-ai/protocol/control";
 import type { PluginInstallCommitInput, PluginInstallCommitResult, PluginInstallPreparation, PluginInstallPrepareInput, PluginManagementItem, PluginMarketplaceAddInput, PluginMarketplaceItem } from "@rynx-ai/protocol/plugin-management";
-import type { PluginJsonValue } from "@rynx-ai/plugin-sdk";
+import type { PluginAgentSummary, PluginJsonValue, PluginResolvedSessionExecution, PluginSessionActivitySnapshot, PluginSessionExecutionSnapshot } from "@rynx-ai/plugin-sdk";
 import type { PairingOffer } from "@rynx-ai/protocol/direct-runtime";
 import type { DaemonStatus } from "@rynx-ai/protocol/remote-runtime";
 import type { RuntimeBrowserBootstrapCredential, RuntimeBrowserEndpointDescriptor } from "@rynx-ai/protocol/runtime-browser-bootstrap";
@@ -12,22 +12,29 @@ import type { RuntimeBrowserInspectMessage, RuntimeBrowserInspectTarget } from "
 import type { RuntimeBrowserSurfaceClientFrame, RuntimeBrowserSurfaceImageFrame, RuntimeBrowserSurfaceOpenFrame, RuntimeBrowserSurfaceReadyFrame, RuntimeBrowserSurfaceServerFrame } from "@rynx-ai/protocol/runtime-browser-surface";
 import type { RuntimeEmulatorSurfaceImageFrame, RuntimeEmulatorSurfaceReadyFrame } from "@rynx-ai/protocol/runtime-emulator-surface";
 import type { RemoteRuntimeRpcMethod, RemoteRuntimeRpcParams, RemoteRuntimeRpcResultFor, RemoteRuntimeSequencedSessionEvent } from "@rynx-ai/protocol/remote-runtime-rpc";
-import type { PluginAgentSummary, PluginResolvedSessionExecution, PluginSessionExecutionSnapshot } from "@rynx-ai/plugin-sdk";
 import { RunnerManager, type CodexSessionStore, type RunnerSessionContextProvider } from "@rynx-ai/runtime";
 import { type ControlPlaneDeps, type LocalSessionResourceHost, type SessionResourceLifecycle } from "./control-api.js";
-import type { MachineSessionService } from "./machine-session-service.js";
+import { type MachineSessionService } from "./machine-session-service.js";
+import type { MachineSessionPendingInputPort } from "./session-pending-inputs.js";
 import type { DaemonRuntimeHost } from "./remote-runtime.js";
 import { type AttachDesktopBrowserHostServerOptions } from "./desktop-browser-host.js";
+import { type SessionPortalAuthorizationPorts } from "./session-portal.js";
+export { createSessionPortalApp, startSessionPortal } from "./session-portal.js";
+export type { SessionPortalAuthorization, SessionPortalAuthorizationPorts, SessionPortalOptions, SessionPortalServer, } from "./session-portal.js";
 import { SessionRuntimeIndex } from "./session-runtime-index.js";
 import type { SessionEmulatorService } from "./session-emulator-service.js";
 import { type SessionTerminalHost } from "./session-terminal-host.js";
 import type { ProviderCliManagementHost } from "./provider-cli-host.js";
 import { type RuntimeWebAccessPolicy } from "./runtime-web-auth.js";
+import type { SessionBrowserRequestHeadersPort } from "./session-browser-service.js";
+import type { RuntimeBrowserAutomationCommand, RuntimeBrowserAutomationResult } from "@rynx-ai/protocol/runtime-browser-bootstrap";
 export type { ProviderCliManagementHost, ProviderCliStatusHost, } from "./provider-cli-host.js";
 export { MachineSessionService, MachineSessionServiceFailure, MachineSessionServiceInputError, synthesizeSessionTitle, } from "./machine-session-service.js";
-export type { MachineSessionAgentCatalogPort, MachineSessionCreateInput, MachineSessionCreateResult, MachineSessionDeleteResult, MachineSessionForkInput, MachineSessionForkOperationRecord, MachineSessionForkOperationState, MachineSessionForkResult, MachineSessionForkStorePort, MachineSessionNativeRotationInput, MachineSessionInterruptPort, MachineSessionInterruptResult, MachineSessionInteractionResult, MachineSessionListInput, MachineSessionListPage, MachineSessionMessageResult, MachineSessionMessageEnqueueResult, MachineSessionMessageInput, MachineSessionMessageOperationState, MachineSessionPendingMessage, MachineSessionPendingMessagePort, MachineSessionPreparedInput, MachineSessionResourcePort, MachineSessionRunnerPort, MachineSessionRuntimeStatePort, MachineSessionServiceFailureCode, MachineSessionServiceOptions, MachineSessionServicePorts, MachineSessionSnapshotInput, MachineSessionSnapshotPage, MachineSessionWatch, } from "./machine-session-service.js";
+export { SessionPendingInputIndex } from "./session-pending-inputs.js";
+export type { MachineSessionAgentCatalogPort, MachineSessionCreateInput, MachineSessionCreateResult, MachineSessionDeleteResult, MachineSessionForkInput, MachineSessionForkOperationRecord, MachineSessionForkOperationState, MachineSessionForkResult, MachineSessionForkStorePort, MachineSessionNativeRotationInput, MachineSessionInterruptPort, MachineSessionInterruptResult, MachineSessionInteractionResult, MachineSessionListInput, MachineSessionListPage, MachineSessionMessageResult, MachineSessionMessageEnqueueResult, MachineSessionMessageInput, MachineSessionMessageOperationState, MachineSessionPendingMessage, MachineSessionPendingMessagePort, MachineSessionPreparedInput, MachineSessionResourcePort, MachineSessionRunExecutionSelection, MachineSessionRunExecutionSnapshot, MachineSessionRunnerPort, MachineSessionRuntimeStatePort, MachineSessionServiceFailureCode, MachineSessionServiceOptions, MachineSessionServicePorts, MachineSessionSnapshotInput, MachineSessionSnapshotPage, MachineSessionWatch, StartedMachineSessionRun, } from "./machine-session-service.js";
+export type { MachineSessionPendingInput, MachineSessionPendingInputPort, } from "./session-pending-inputs.js";
 export { SessionBrowserHostError, SessionBrowserService, SessionBrowserServiceError, SessionBrowserSurfaceUnsupportedError, } from "./session-browser-service.js";
-export type { SessionBrowserHost, SessionBrowserHostCreateInput, SessionBrowserHostErrorCode, SessionBrowserHostEvent, SessionBrowserHostHandle, SessionBrowserHostPage, SessionBrowserHostSurfaceFrame, SessionBrowserHostSurfaceOpenInput, SessionBrowserHostSurfaceSource, SessionBrowserHostSurfaceTrustedInput, SessionBrowserHostSurfaceViewport, SessionBrowserHostSnapshot, SessionBrowserInspectionEndpoint, SessionBrowserInspectionTarget, SessionBrowserRegistryPort, SessionBrowserServiceErrorCode, SessionBrowserServiceOptions, SessionBrowserServicePorts, SessionBrowserSurfaceOpenInput, SessionBrowserSurfaceSource, } from "./session-browser-service.js";
+export type { SessionBrowserHost, SessionBrowserAutomationBinding, SessionBrowserAutomationVisibility, SessionBrowserHostCreateInput, SessionBrowserHostErrorCode, SessionBrowserHostEvent, SessionBrowserHostHandle, SessionBrowserHostPage, SessionBrowserHostSurfaceFrame, SessionBrowserHostSurfaceOpenInput, SessionBrowserHostSurfaceSource, SessionBrowserHostSurfaceTrustedInput, SessionBrowserHostSurfaceViewport, SessionBrowserHostSnapshot, SessionBrowserInspectionEndpoint, SessionBrowserInspectionTarget, SessionBrowserRegistryPort, SessionBrowserRequestHeadersPort, SessionBrowserServiceErrorCode, SessionBrowserServiceOptions, SessionBrowserServicePorts, SessionBrowserSurfaceOpenInput, SessionBrowserSurfaceSource, } from "./session-browser-service.js";
 export { SessionEmulatorBindingConflictError, SessionEmulatorService, SessionEmulatorServiceError, } from "./session-emulator-service.js";
 export type { SessionEmulatorBindingRecord, SessionEmulatorBindingStore, SessionEmulatorServiceErrorCode, SessionEmulatorServiceOptions, SessionEmulatorSurface, } from "./session-emulator-service.js";
 export { SessionBrowserSurfaceCoordinator } from "./session-browser-surface-coordinator.js";
@@ -132,6 +139,9 @@ export interface StartServerOptions {
     providerClis?: ProviderCliManagementHost;
     /** Private resident-app Browser Host socket, authenticated by daemonManagement. */
     desktopBrowserHost?: Omit<AttachDesktopBrowserHostServerOptions, "managementToken">;
+    /** Hashed ticket/grant authority for the native Session Portal. Required
+     * when RYNX_SESSION_PORTAL_PORT enables that listener. */
+    sessionPortalAuthorization?: SessionPortalAuthorizationPorts;
 }
 export interface SessionRuntimeServices {
     sessionStore: CodexSessionStore;
@@ -142,10 +152,12 @@ export interface SessionRuntimeServices {
     publishSessionEvent: (sessionId: string, event: SessionEvent) => Promise<void>;
 }
 export interface PluginRuntimeHostServices {
-    conversationRuntime: ConversationRuntime;
     capabilities: AgentCapabilities;
     sessionStore: AgentSessionStore;
     sessionRegistry: SessionRegistry;
+    sessionRuns: Pick<MachineSessionService, "startRun">;
+    sessionFiles: Pick<MachineSessionService, "resolveResourcePath">;
+    sessionBrowserRequestHeaders?: SessionBrowserRequestHeadersPort;
     agentCatalog: {
         list(): Promise<PluginAgentSummary[]>;
         get(id: string): Promise<PluginAgentSummary | null>;
@@ -154,8 +166,18 @@ export interface PluginRuntimeHostServices {
             session: PluginSessionExecutionSnapshot;
         }): Promise<PluginResolvedSessionExecution>;
     };
+    sessionActivity(sessionId: string): PluginSessionActivitySnapshot;
     interruptSession(sessionId: string): Promise<boolean>;
     terminateSession?(sessionId: string): Promise<boolean>;
+    sessionTimeline?: {
+        hasItem(sessionId: string, itemId: string): Promise<boolean>;
+        projectText(input: {
+            sessionId: string;
+            responseId: string;
+            itemId: string;
+            text: string;
+        }): Promise<void>;
+    };
     resolveSessionInteraction(sessionId: string, interactionId: string, resolution: SessionInteractionResolution): Promise<{
         disposition: "applied" | "already_resolved" | "not_found" | "invalid";
     }>;
@@ -163,6 +185,11 @@ export interface PluginRuntimeHostServices {
      * closed, but cannot provision Sessions or begin Turns. */
     admissionOpen?: () => boolean;
     admissionReserve?: () => AdmissionReservation | undefined;
+    sessionPortal?: {
+        scheme: "http" | "https";
+        bindHost: string;
+        port: number;
+    };
 }
 export interface PluginRuntimeLifecycle {
     bindHostServices(services: PluginRuntimeHostServices): void;
@@ -241,11 +268,7 @@ export interface DaemonManagementHost {
         restartRequired: boolean;
     };
     /** Perform one final activity check and schedule shutdown only when idle. */
-    shutdownIfIdle?(maintenanceLeaseToken?: string): DaemonShutdownIfIdleResult | Promise<DaemonShutdownIfIdleResult>;
-    /** Release a cross-process maintenance fence after a verified cutover. */
-    releaseMaintenanceLease?(maintenanceLeaseToken: string): {
-        outcome: "released" | "not_active" | "denied";
-    };
+    shutdownIfIdle?(): DaemonShutdownIfIdleResult | Promise<DaemonShutdownIfIdleResult>;
     /** Stateful plugin registry operations owned by the resident daemon. */
     pluginManagement?: PluginManagementHost;
     /** Registered Git/local plugin catalogs. */
@@ -264,6 +287,7 @@ export interface DaemonManagementHost {
  * half of the credential was wrong.
  */
 export interface RuntimeLocalBrowserAutomationHost {
+    executeForSession?(sessionId: string, command: RuntimeBrowserAutomationCommand): Promise<RuntimeBrowserAutomationResult>;
     authorizeCredential(credential: RuntimeBrowserBootstrapCredential): boolean | Promise<boolean>;
     endpointForCredential(credential: RuntimeBrowserBootstrapCredential): Promise<RuntimeBrowserEndpointDescriptor | undefined>;
     endpointForSession(sessionId: string): Promise<RuntimeBrowserEndpointDescriptor>;
@@ -339,7 +363,7 @@ export interface RuntimeConnectionLease {
     };
     call<M extends RemoteRuntimeRpcMethod>(method: M, params: RemoteRuntimeRpcParams<M>, options?: {
         signal?: AbortSignal;
-        timeoutMs?: number;
+        timeoutMs?: number | null;
     }): Promise<RemoteRuntimeRpcResultFor<M>>;
     subscribeSessionEvents(sessionId: string, options?: {
         signal?: AbortSignal;
@@ -407,11 +431,23 @@ export interface RynxServer extends HttpServer {
     stopAccepting(): void;
     shutdown(): Promise<void>;
 }
-/** Preserve one session's mirror order without serializing unrelated sessions. */
+interface PreparedSessionMirrorPersistence {
+    /** The persistence result. It may settle after the caller's deadline. */
+    promise: Promise<void>;
+    /** Exact optimistic projection claimed by this write, if any. */
+    abandonToken?: string;
+    /** Retire the claimed projection before the next queued record may start. */
+    onAmbiguous?: () => void;
+}
+type SessionMirrorPersistence = Promise<void> | PreparedSessionMirrorPersistence;
+/** Preserve one session's mirror order without serializing unrelated sessions.
+ * A timed-out operation is not cancelled: like an HTTP read timeout, it may
+ * still commit later. Its caller receives `ambiguous` and must not retry. */
 export declare class SessionMirrorQueue {
     private readonly persist;
+    private readonly stallTimeoutMs;
     private readonly tails;
-    constructor(persist: (sessionId: string, event: SessionEvent) => Promise<void>);
+    constructor(persist: (sessionId: string, event: SessionEvent) => SessionMirrorPersistence, stallTimeoutMs?: number);
     enqueue(sessionId: string, event: SessionEvent): Promise<void>;
 }
 /**
@@ -422,10 +458,25 @@ export declare class SessionMirrorQueue {
 export declare function createSessionRuntimeServices(input: {
     config: AppConfig;
     sessionLog?: SessionLogStore;
+    pendingInputs?: MachineSessionPendingInputPort;
+    onPendingInputPersisted?: (input: {
+        sessionId: string;
+        pendingId: string;
+        clientMessageId: string;
+        responseId: string;
+        messageItemId: string;
+    }) => void | Promise<void>;
     onMirrorError?: (error: unknown, sessionId: string) => void;
+    /** Test seam for the IPC persistence-result deadline. */
+    mirrorStallTimeoutMs?: number;
     sessionContextProvider?: RunnerSessionContextProvider;
     admissionOpen?: () => boolean;
     admissionReserve?: () => AdmissionReservation | undefined;
+    materializeGeneratedImage?: (input: {
+        sessionId: string;
+        sourceId: string;
+        result: string;
+    }) => Promise<SessionImageFileReference>;
 }): SessionRuntimeServices;
 /**
  * The HTTP surface is just a liveness probe for container orchestration — all
@@ -434,4 +485,4 @@ export declare function createSessionRuntimeServices(input: {
  * no agent request / response / SSE endpoints are exposed here.
  */
 export declare function createApp({ config, control }?: CreateAppOptions): Koa<Koa.DefaultState, Koa.DefaultContext>;
-export declare function startServer({ config, control, sessionLog, sessionRegistry, pluginRuntime, daemonManagement, remoteRuntime, remoteRuntimeAdmin, runtimeTargetControl, runtimeConnectionResolver, localSessionResources, localMachineSessions, sessionEmulators, sessionRuntimeServices, sessionLifecycle, sessionTerminals, runtimeLocalBrowser, providerClis, desktopBrowserHost, }?: StartServerOptions): Promise<RynxServer>;
+export declare function startServer({ config, control, sessionLog, sessionRegistry, pluginRuntime, daemonManagement, remoteRuntime, remoteRuntimeAdmin, runtimeTargetControl, runtimeConnectionResolver, localSessionResources, localMachineSessions, sessionEmulators, sessionRuntimeServices, sessionLifecycle, sessionTerminals, runtimeLocalBrowser, providerClis, desktopBrowserHost, sessionPortalAuthorization, }?: StartServerOptions): Promise<RynxServer>;