@rynx-ai/server 0.1.9 → 0.1.10-beta.2

package/dist/server.d.ts

@@ -2,46 +2,52 @@ import type { Server as HttpServer } from "node:http";
 import Koa from "koa";
 import { ConversationRuntime, type AgentCapabilities, type AgentSessionStore, type AppConfig, type ChannelInstanceDescriptor, type SessionEvent, type SessionBus, type SessionLogStore, type SessionRegistry } from "@rynx-ai/core";
 import type { SessionInteractionResolution } from "@rynx-ai/protocol";
-import type { ControlRuntimeShareAddress } from "@rynx-ai/protocol/control";
+import type { ControlRuntimeShareAddress, DaemonBrowserArtifactCleanResult, DaemonBrowserArtifactInstallInput, DaemonBrowserArtifactInstallResult, DaemonBrowserArtifactUpdateInput, DaemonBrowserArtifactVersionResult, DaemonCleanupSessionsInput, DaemonCleanupSessionsResult, DaemonChromeInspectionConfigureInput, DaemonChromeInspectionStatus, DaemonShutdownIfIdleResult } from "@rynx-ai/protocol/control";
+import type { PluginInstallCommitInput, PluginInstallCommitResult, PluginInstallPreparation, PluginInstallPrepareInput, PluginManagementItem } from "@rynx-ai/protocol/plugin-management";
 import type { PairingOffer } from "@rynx-ai/protocol/direct-runtime";
 import type { DaemonStatus } from "@rynx-ai/protocol/remote-runtime";
 import type { RuntimeBrowserBootstrapCredential, RuntimeBrowserEndpointDescriptor } from "@rynx-ai/protocol/runtime-browser-bootstrap";
+import type { RuntimeBrowserInspectMessage, RuntimeBrowserInspectTarget } from "@rynx-ai/protocol/runtime-browser-inspect";
 import type { RuntimeBrowserSurfaceClientFrame, RuntimeBrowserSurfaceImageFrame, RuntimeBrowserSurfaceOpenFrame, RuntimeBrowserSurfaceReadyFrame, RuntimeBrowserSurfaceServerFrame } from "@rynx-ai/protocol/runtime-browser-surface";
 import type { RuntimeEmulatorSurfaceImageFrame, RuntimeEmulatorSurfaceReadyFrame } from "@rynx-ai/protocol/runtime-emulator-surface";
 import type { RemoteRuntimeRpcMethod, RemoteRuntimeRpcParams, RemoteRuntimeRpcResultFor, RemoteRuntimeSequencedSessionEvent } from "@rynx-ai/protocol/remote-runtime-rpc";
 import type { PluginAgentSummary, PluginResolvedSessionExecution, PluginSessionExecutionSnapshot } from "@rynx-ai/plugin-sdk";
 import { RunnerManager, type CodexSessionStore, type RunnerSessionContextProvider } from "@rynx-ai/runtime";
 import { ChannelManager } from "./channel-manager.js";
-import { type ControlPlaneDeps, type SessionResourceLifecycle } from "./control-api.js";
+import { type ControlPlaneDeps, type LocalSessionResourceHost, type SessionResourceLifecycle } from "./control-api.js";
 import type { DaemonRuntimeHost } from "./remote-runtime.js";
 import { type AttachDesktopBrowserHostServerOptions } from "./desktop-browser-host.js";
 import { SessionRuntimeIndex } from "./session-runtime-index.js";
 import type { SessionEmulatorService } from "./session-emulator-service.js";
+import { type SessionTerminalHost } from "./session-terminal-host.js";
 import type { ProviderCliManagementHost } from "./provider-cli-host.js";
+import { type RuntimeWebAccessPolicy } from "./runtime-web-auth.js";
 export { ChannelManager } from "./channel-manager.js";
 export type { ChannelInstanceStatus } from "./channel-manager.js";
 export type { ProviderCliManagementHost, ProviderCliStatusHost, } from "./provider-cli-host.js";
 export { MachineSessionService, MachineSessionServiceFailure, MachineSessionServiceInputError, synthesizeSessionTitle, } from "./machine-session-service.js";
-export type { MachineSessionAgentCatalogPort, MachineSessionCreateInput, MachineSessionCreateResult, MachineSessionDeleteResult, MachineSessionInterruptPort, MachineSessionInterruptResult, MachineSessionInteractionResult, MachineSessionListInput, MachineSessionListPage, MachineSessionMessageResult, MachineSessionRunnerPort, MachineSessionRuntimeStatePort, MachineSessionServiceFailureCode, MachineSessionServiceOptions, MachineSessionServicePorts, MachineSessionSnapshotInput, MachineSessionSnapshotPage, MachineSessionWatch, } from "./machine-session-service.js";
+export type { MachineSessionAgentCatalogPort, MachineSessionCreateInput, MachineSessionCreateResult, MachineSessionDeleteResult, MachineSessionInterruptPort, MachineSessionInterruptResult, MachineSessionInteractionResult, MachineSessionListInput, MachineSessionListPage, MachineSessionMessageResult, MachineSessionMessageEnqueueResult, MachineSessionMessageInput, MachineSessionMessageOperationState, MachineSessionPendingMessage, MachineSessionPendingMessagePort, MachineSessionPreparedInput, MachineSessionResourcePort, MachineSessionRunnerPort, MachineSessionRuntimeStatePort, MachineSessionServiceFailureCode, MachineSessionServiceOptions, MachineSessionServicePorts, MachineSessionSnapshotInput, MachineSessionSnapshotPage, MachineSessionWatch, } from "./machine-session-service.js";
 export { SessionBrowserHostError, SessionBrowserService, SessionBrowserServiceError, SessionBrowserSurfaceUnsupportedError, } from "./session-browser-service.js";
-export type { SessionBrowserHost, SessionBrowserHostCreateInput, SessionBrowserHostErrorCode, SessionBrowserHostEvent, SessionBrowserHostHandle, SessionBrowserHostPage, SessionBrowserHostSurfaceFrame, SessionBrowserHostSurfaceOpenInput, SessionBrowserHostSurfaceSource, SessionBrowserHostSurfaceTrustedInput, SessionBrowserHostSurfaceViewport, SessionBrowserHostSnapshot, SessionBrowserRegistryPort, SessionBrowserServiceErrorCode, SessionBrowserServiceOptions, SessionBrowserServicePorts, SessionBrowserSurfaceOpenInput, SessionBrowserSurfaceSource, } from "./session-browser-service.js";
+export type { SessionBrowserHost, SessionBrowserHostCreateInput, SessionBrowserHostErrorCode, SessionBrowserHostEvent, SessionBrowserHostHandle, SessionBrowserHostPage, SessionBrowserHostSurfaceFrame, SessionBrowserHostSurfaceOpenInput, SessionBrowserHostSurfaceSource, SessionBrowserHostSurfaceTrustedInput, SessionBrowserHostSurfaceViewport, SessionBrowserHostSnapshot, SessionBrowserInspectionEndpoint, SessionBrowserInspectionTarget, SessionBrowserRegistryPort, SessionBrowserServiceErrorCode, SessionBrowserServiceOptions, SessionBrowserServicePorts, SessionBrowserSurfaceOpenInput, SessionBrowserSurfaceSource, } from "./session-browser-service.js";
 export { SessionEmulatorBindingConflictError, SessionEmulatorService, SessionEmulatorServiceError, } from "./session-emulator-service.js";
 export type { SessionEmulatorBindingRecord, SessionEmulatorBindingStore, SessionEmulatorServiceErrorCode, SessionEmulatorServiceOptions, SessionEmulatorSurface, } from "./session-emulator-service.js";
 export { SessionBrowserSurfaceCoordinator } from "./session-browser-surface-coordinator.js";
 export type { SessionBrowserSurfaceCoordinatorOptions, } from "./session-browser-surface-coordinator.js";
 export { attachDesktopBrowserHostServer, createDesktopFirstSessionBrowserHost, DesktopBrowserHostAbsentError, DesktopBrowserHostProtocolError, DesktopBrowserHostRegistry, } from "./desktop-browser-host.js";
 export type { AttachDesktopBrowserHostServerOptions, DesktopBrowserHostRegistryOptions, } from "./desktop-browser-host.js";
-export type { ControlPlaneDeps, StoredSessionMeta } from "./control-api.js";
+export type { ControlPlaneDeps, LocalSessionResourceHost, StoredSessionMeta, } from "./control-api.js";
 export { createDaemonRuntimeHost, encodeDaemonStatus } from "./remote-runtime.js";
 export type { DaemonRuntimeHost, DaemonRuntimeSnapshot } from "./remote-runtime.js";
 export { DIRECT_RUNTIME_CONTROL_PATH, DirectRuntimeConnectionHub, startDirectRuntimeServer, } from "./direct-runtime-server.js";
 export type { DirectRuntimeAuthenticationResult, DirectRuntimeAuthenticator, DirectRuntimeEmulatorSurfaceAttachment, DirectRuntimeEmulatorSurfaceHost, DirectRuntimePeer, DirectRuntimeServer, DirectRuntimeServerLimits, StartDirectRuntimeServerOptions, } from "./direct-runtime-server.js";
 export { attachDirectRuntimeBrowserSurfaceServer, DirectRuntimeBrowserSurfaceHostError, } from "./direct-runtime-browser-surface-server.js";
+export { attachDirectRuntimeBrowserInspectServer, DirectRuntimeBrowserInspectHostError, } from "./direct-runtime-browser-inspect-server.js";
+export type { AttachDirectRuntimeBrowserInspectServerOptions, DirectRuntimeBrowserInspectAttachment, DirectRuntimeBrowserInspectConnectionHub, DirectRuntimeBrowserInspectHost, DirectRuntimeBrowserInspectServer, DirectRuntimeBrowserInspectServerLimits, DirectRuntimeBrowserInspectTransportCloseReason, } from "./direct-runtime-browser-inspect-server.js";
 export type { AttachDirectRuntimeBrowserSurfaceServerOptions, DirectRuntimeBrowserSurfaceAttachment, DirectRuntimeBrowserSurfaceAttachmentEvent, DirectRuntimeBrowserSurfaceConnectionHub, DirectRuntimeBrowserSurfaceHost, DirectRuntimeBrowserSurfaceServer, DirectRuntimeBrowserSurfaceServerLimits, DirectRuntimeBrowserSurfaceTransportCloseReason, } from "./direct-runtime-browser-surface-server.js";
 export { RemoteRuntimeDispatcher } from "./remote-runtime-dispatcher.js";
 export type { AuthenticatedRuntimeSubject, RemoteRuntimeEmulatorHost, RemoteRuntimeSessionEmulatorHost, RemoteRuntimeDispatchContext, RemoteRuntimeDispatcherOptions, } from "./remote-runtime-dispatcher.js";
 export { createRunnerSessionTerminalHost, SessionTerminalOpenError, SessionTerminalStreamError, } from "./session-terminal-host.js";
-export type { RunnerSessionTerminalHostOptions, SessionTerminalAttachment, SessionTerminalCloseInfo, SessionTerminalCloseReason, SessionTerminalHost, SessionTerminalOpenErrorCode, SessionTerminalOpenOptions, SessionTerminalRole, } from "./session-terminal-host.js";
+export type { RunnerSessionTerminalHostOptions, RunnerSessionTerminalHost, SessionTerminalAttachment, SessionTerminalCloseInfo, SessionTerminalCloseReason, SessionTerminalHost, SessionTerminalOpenErrorCode, SessionTerminalOpenOptions, SessionTerminalRole, } from "./session-terminal-host.js";
 export type { ControlChannel, ControlChannelType, ControlInstanceConfig, ControlInstanceStatus, ControlAgentSummary, } from "@rynx-ai/protocol/control";
 export interface CreateAppOptions {
     config?: AppConfig;
@@ -63,7 +69,9 @@ export interface CreateAppOptions {
         remoteRuntime?: DaemonRuntimeHost;
         remoteRuntimeAdmin?: RemoteRuntimeAdminHost;
         runtimeTargetControl?: RuntimeTargetControlHost;
+        runtimeWebAccess?: RuntimeWebAccessPolicy;
         runtimeConnectionResolver?: RuntimeConnectionResolverHost;
+        localSessionResources?: LocalSessionResourceHost;
         sessionEmulators?: SessionEmulatorService;
         /** Host lifecycle signal for ending SSE/video streams before drain. */
         shutdownSignal?: AbortSignal;
@@ -114,6 +122,8 @@ export interface StartServerOptions {
     runtimeTargetControl?: RuntimeTargetControlHost;
     /** Secret-owning backend resolver for explicit Local or Direct Runtime calls. */
     runtimeConnectionResolver?: RuntimeConnectionResolverHost;
+    /** In-process resource authority used only by the Local Runtime BFF. */
+    localSessionResources?: LocalSessionResourceHost;
     /** Runtime-owned Session Emulator binding authority for Local compatibility routes. */
     sessionEmulators?: SessionEmulatorService;
     /** Pre-composed daemon-owned Session runtime. Supplying this lets the daemon
@@ -122,6 +132,9 @@ export interface StartServerOptions {
     sessionRuntimeServices?: SessionRuntimeServices;
     /** Shared fence for Session-owned resources on canonical and legacy deletes. */
     sessionLifecycle?: SessionResourceLifecycle;
+    /** Shared local terminal host. Supplying this lets Local HTTP/WebSocket and
+     *  Direct Runtime attachments contribute to one activity count. */
+    sessionTerminals?: SessionTerminalHost;
     /** Runtime-local, Session-capability-authorized CDP bootstrap. Never remote. */
     runtimeLocalBrowser?: RuntimeLocalBrowserAutomationHost;
     /** Runtime-owned provider CLI inspection and local lifecycle operations. */
@@ -182,10 +195,50 @@ export interface PluginCliInvocationOutput {
 export interface DaemonManagementInvocationContext {
     signal: AbortSignal;
 }
+export interface PluginManagementHost {
+    listPlugins(): {
+        plugins: PluginManagementItem[];
+    } | Promise<{
+        plugins: PluginManagementItem[];
+    }>;
+    setPluginEnabled(pluginId: string, enabled: boolean): PluginManagementItem | undefined | Promise<PluginManagementItem | undefined>;
+    uninstallPlugin(pluginId: string): Promise<boolean>;
+    prepareInstallation(input: PluginInstallPrepareInput, context: DaemonManagementInvocationContext): Promise<PluginInstallPreparation>;
+    commitInstallation(token: string, input: PluginInstallCommitInput, context: DaemonManagementInvocationContext): Promise<PluginInstallCommitResult>;
+    cancelPreparation(token: string): boolean | Promise<boolean>;
+    dispose?(): void | Promise<void>;
+}
+export interface BrowserArtifactManagementHost {
+    install(input: DaemonBrowserArtifactInstallInput, context: DaemonManagementInvocationContext): Promise<DaemonBrowserArtifactInstallResult>;
+    update(input: DaemonBrowserArtifactUpdateInput, context: DaemonManagementInvocationContext): Promise<DaemonBrowserArtifactInstallResult>;
+    version(): DaemonBrowserArtifactVersionResult;
+    clean(): DaemonBrowserArtifactCleanResult;
+}
+export interface MaintenanceManagementHost {
+    cleanupSessions(input: DaemonCleanupSessionsInput): DaemonCleanupSessionsResult;
+}
+export interface ChromeInspectionManagementHost {
+    status(): DaemonChromeInspectionStatus | Promise<DaemonChromeInspectionStatus>;
+    configure(input: DaemonChromeInspectionConfigureInput): Promise<DaemonChromeInspectionStatus>;
+}
 /** The complete local management authority injected by the daemon composition root. */
 export interface DaemonManagementHost {
     managementToken: string;
     identity(): DaemonControlIdentity;
+    /** Public, non-secret health signal used to detect an in-place daemon rebuild. */
+    buildStatus?(): {
+        restartRequired: boolean;
+    };
+    /** Perform one final activity check and schedule shutdown only when idle. */
+    shutdownIfIdle?(): DaemonShutdownIfIdleResult;
+    /** Stateful plugin registry operations owned by the resident daemon. */
+    pluginManagement?: PluginManagementHost;
+    /** Stateful Chrome for Testing artifact operations owned by the daemon. */
+    browserArtifacts?: BrowserArtifactManagementHost;
+    /** Destructive maintenance operations over daemon-owned state. */
+    maintenance?: MaintenanceManagementHost;
+    /** Local Chrome DevTools discovery gateway configuration and readiness. */
+    chromeInspection?: ChromeInspectionManagementHost;
     invokePluginCli(input: PluginCliInvocationInput, context: DaemonManagementInvocationContext): Promise<PluginCliInvocationOutput>;
 }
 /**
@@ -221,6 +274,9 @@ export interface RemoteRuntimeAdminHost {
         revoked: boolean;
         closedConnections: number;
     };
+    deleteRevokedClientGrant(grantId: string): {
+        deleted: boolean;
+    };
 }
 /** Secret-free Runtime target projection safe for the local Control Plane UI. */
 export interface RuntimeTargetView {
@@ -248,6 +304,8 @@ export interface RuntimeTargetControlHost {
     pair(input: {
         offer: unknown;
         displayName?: string;
+        replaceExisting?: boolean;
+        expectedDaemonId?: string;
     }): RuntimeTargetPairResult | Promise<RuntimeTargetPairResult>;
     test(selector: string): RuntimeTargetTestResult | Promise<RuntimeTargetTestResult>;
     forget(daemonId: string): {
@@ -281,6 +339,10 @@ export interface RuntimeConnectionLease {
         signal?: AbortSignal;
         timeoutMs?: number;
     }): Promise<RuntimeBrowserSurfaceConnection>;
+    openBrowserInspect(target: RuntimeBrowserInspectTarget, options?: {
+        signal?: AbortSignal;
+        timeoutMs?: number;
+    }): Promise<RuntimeBrowserInspectConnection>;
     openEmulatorSurface(sessionId: string, bindingId: string, options?: {
         signal?: AbortSignal;
         timeoutMs?: number;
@@ -295,6 +357,12 @@ export interface RuntimeBrowserSurfaceConnection extends AsyncIterable<RuntimeBr
     close(): Promise<void>;
 }
 export type RuntimeBrowserSurfaceEvent = Exclude<RuntimeBrowserSurfaceServerFrame, RuntimeBrowserSurfaceReadyFrame> | RuntimeBrowserSurfaceImageFrame;
+/** Dedicated transparent CDP stream owned by one selected Runtime page. */
+export interface RuntimeBrowserInspectConnection extends AsyncIterable<RuntimeBrowserInspectMessage> {
+    readonly daemonInstanceId: string;
+    send(message: RuntimeBrowserInspectMessage): Promise<void>;
+    close(): Promise<void>;
+}
 export interface RuntimeEmulatorSurfaceConnection extends AsyncIterable<RuntimeEmulatorSurfaceImageFrame> {
     readonly ready: RuntimeEmulatorSurfaceReadyFrame;
     sendTouch(point: {
@@ -318,6 +386,8 @@ export interface RuntimeConnectionResolverHost {
 }
 /** HTTP server plus an idempotent join point for all daemon-owned resources. */
 export interface RynxServer extends HttpServer {
+    /** Synchronously stop new HTTP admission without closing upgraded Hosts. */
+    stopAccepting(): void;
     shutdown(): Promise<void>;
 }
 /** Preserve one session's mirror order without serializing unrelated sessions. */
@@ -344,5 +414,5 @@ export declare function createSessionRuntimeServices(input: {
  * Lark bot reaches its server over an outbound WebSocket long connection), so
  * no agent request / response / SSE endpoints are exposed here.
  */
-export declare function createApp({ control }?: CreateAppOptions): Koa<Koa.DefaultState, Koa.DefaultContext>;
-export declare function startServer({ config, channelInstances, loadInstances, control, sessionLog, sessionRegistry, pluginRuntime, daemonManagement, remoteRuntime, remoteRuntimeAdmin, runtimeTargetControl, runtimeConnectionResolver, sessionEmulators, sessionRuntimeServices, sessionLifecycle, runtimeLocalBrowser, providerClis, desktopBrowserHost, }?: StartServerOptions): Promise<RynxServer>;
+export declare function createApp({ config, control }?: CreateAppOptions): Koa<Koa.DefaultState, Koa.DefaultContext>;
+export declare function startServer({ config, channelInstances, loadInstances, control, sessionLog, sessionRegistry, pluginRuntime, daemonManagement, remoteRuntime, remoteRuntimeAdmin, runtimeTargetControl, runtimeConnectionResolver, localSessionResources, sessionEmulators, sessionRuntimeServices, sessionLifecycle, sessionTerminals, runtimeLocalBrowser, providerClis, desktopBrowserHost, }?: StartServerOptions): Promise<RynxServer>;

package/dist/server.js

@@ -12,7 +12,8 @@ import { attachEmulatorSurfaceWs } from "./emulator-surface-ws.js";
 import { attachDesktopBrowserHostServer, } from "./desktop-browser-host.js";
 import { resolveControlWebDist, sendSpaFile } from "./control-web-dist.js";
 import { SessionRuntimeIndex } from "./session-runtime-index.js";
-import { createRunnerSessionTerminalHost } from "./session-terminal-host.js";
+import { createRunnerSessionTerminalHost, } from "./session-terminal-host.js";
+import { runtimeWebAccessPolicyForBindHost, } from "./runtime-web-auth.js";
 export { ChannelManager } from "./channel-manager.js";
 export { MachineSessionService, MachineSessionServiceFailure, MachineSessionServiceInputError, synthesizeSessionTitle, } from "./machine-session-service.js";
 export { SessionBrowserHostError, SessionBrowserService, SessionBrowserServiceError, SessionBrowserSurfaceUnsupportedError, } from "./session-browser-service.js";
@@ -22,6 +23,7 @@ export { attachDesktopBrowserHostServer, createDesktopFirstSessionBrowserHost, D
 export { createDaemonRuntimeHost, encodeDaemonStatus } from "./remote-runtime.js";
 export { DIRECT_RUNTIME_CONTROL_PATH, DirectRuntimeConnectionHub, startDirectRuntimeServer, } from "./direct-runtime-server.js";
 export { attachDirectRuntimeBrowserSurfaceServer, DirectRuntimeBrowserSurfaceHostError, } from "./direct-runtime-browser-surface-server.js";
+export { attachDirectRuntimeBrowserInspectServer, DirectRuntimeBrowserInspectHostError, } from "./direct-runtime-browser-inspect-server.js";
 export { RemoteRuntimeDispatcher } from "./remote-runtime-dispatcher.js";
 export { createRunnerSessionTerminalHost, SessionTerminalOpenError, SessionTerminalStreamError, } from "./session-terminal-host.js";
 /** Preserve one session's mirror order without serializing unrelated sessions. */
@@ -87,7 +89,7 @@ export function createSessionRuntimeServices(input) {
  * Lark bot reaches its server over an outbound WebSocket long connection), so
  * no agent request / response / SSE endpoints are exposed here.
  */
-export function createApp({ control } = {}) {
+export function createApp({ config = loadConfig(), control } = {}) {
     const app = new Koa();
     const router = new Router();
     router.get("/health", (ctx) => {
@@ -96,7 +98,11 @@ export function createApp({ control } = {}) {
     app.use(router.routes());
     app.use(router.allowedMethods());
     if (control) {
-        const controlRouter = createControlRouter(control);
+        const controlRouter = createControlRouter({
+            ...control,
+            runtimeWebAccess: control.runtimeWebAccess ??
+                runtimeWebAccessPolicyForBindHost(config.HOST),
+        });
         app.use(controlRouter.routes());
         app.use(controlRouter.allowedMethods());
     }
@@ -125,7 +131,8 @@ export function createApp({ control } = {}) {
     }
     return app;
 }
-export async function startServer({ config = loadConfig(), channelInstances, loadInstances, control, sessionLog, sessionRegistry, pluginRuntime, daemonManagement, remoteRuntime, remoteRuntimeAdmin, runtimeTargetControl, runtimeConnectionResolver, sessionEmulators, sessionRuntimeServices, sessionLifecycle, runtimeLocalBrowser, providerClis, desktopBrowserHost, } = {}) {
+export async function startServer({ config = loadConfig(), channelInstances, loadInstances, control, sessionLog, sessionRegistry, pluginRuntime, daemonManagement, remoteRuntime, remoteRuntimeAdmin, runtimeTargetControl, runtimeConnectionResolver, localSessionResources, sessionEmulators, sessionRuntimeServices, sessionLifecycle, sessionTerminals, runtimeLocalBrowser, providerClis, desktopBrowserHost, } = {}) {
+    const runtimeWebAccess = runtimeWebAccessPolicyForBindHost(config.HOST);
     const desktopBrowserManagementToken = desktopBrowserHost
         ? requireDaemonManagementToken(daemonManagement)
         : undefined;
@@ -137,15 +144,16 @@ export async function startServer({ config = loadConfig(), channelInstances, loa
         },
     });
     const { sessionStore, runnerManager, sessionBus, sessionRuntimeIndex, conversationRuntime, } = sessionServices;
-    const legacyLocalTerminalHost = createRunnerSessionTerminalHost({
-        runnerManager,
-        resolveLiveSession: async (sessionId) => {
-            const session = await sessionStore.get(sessionId);
-            if (!session || !runnerManager.hasLiveSession(sessionId))
-                return undefined;
-            return { cwd: session.cwd };
-        },
-    });
+    const legacyLocalTerminalHost = sessionTerminals ??
+        createRunnerSessionTerminalHost({
+            runnerManager,
+            resolveLiveSession: async (sessionId) => {
+                const session = await sessionStore.get(sessionId);
+                if (!session || !runnerManager.hasLiveSession(sessionId))
+                    return undefined;
+                return { cwd: session.cwd };
+            },
+        });
     if (pluginRuntime) {
         if (!sessionRegistry)
             throw new Error("plugin runtime requires a machine session registry");
@@ -203,6 +211,7 @@ export async function startServer({ config = loadConfig(), channelInstances, loa
             loadInstances: resolveInstances,
         });
         const app = createApp({
+            config,
             control: control
                 ? {
                     manager,
@@ -226,6 +235,7 @@ export async function startServer({ config = loadConfig(), channelInstances, loa
                     remoteRuntimeAdmin,
                     runtimeTargetControl,
                     runtimeConnectionResolver,
+                    localSessionResources,
                     sessionEmulators,
                     shutdownSignal: controlShutdown.signal,
                     sessionRuntimeIndex,
@@ -262,9 +272,10 @@ export async function startServer({ config = loadConfig(), channelInstances, loa
                     attachTerminalWs(server, {
                         runtimeConnectionResolver,
                         legacyLocalTerminalHost,
+                        runtimeWebAccess,
                     }),
-                    attachBrowserSurfaceWs(server, { runtimeConnectionResolver }),
-                    attachEmulatorSurfaceWs(server, { runtimeConnectionResolver }),
+                    attachBrowserSurfaceWs(server, { runtimeConnectionResolver, runtimeWebAccess }),
+                    attachEmulatorSurfaceWs(server, { runtimeConnectionResolver, runtimeWebAccess }),
                 ];
                 if (desktopBrowserHost && desktopBrowserManagementToken) {
                     webSocketServers.push(attachDesktopBrowserHostServer(server, {
@@ -276,14 +287,17 @@ export async function startServer({ config = loadConfig(), channelInstances, loa
                     webSocketServers.push(attachEmulatorTouchWs(server, { emulator: control.emulator }));
                 }
                 resolve(bindServerLifecycle(server, {
-                    closeUpgrades: async () => {
+                    fence: () => {
                         controlShutdown.abort(new Error("Rynx server is shutting down"));
+                    },
+                    closeUpgrades: async () => {
                         await closeWebSocketServers(webSocketServers);
                     },
                     cleanup: async () => {
                         await runCleanupSteps([
                             () => startup.catch(() => undefined),
                             () => manager.stopAll(),
+                            () => Promise.resolve(daemonManagement?.pluginManagement?.dispose?.()),
                             () => pluginRuntime?.dispose() ?? Promise.resolve(),
                             () => runnerManager.stop(),
                         ]);
@@ -330,20 +344,31 @@ function requireDaemonManagementToken(host) {
 }
 function bindServerLifecycle(server, lifecycle) {
     let closed = false;
+    let acceptanceClosePromise;
     let shutdownPromise;
     const nativeClose = server.close.bind(server);
     server.once("close", () => {
         closed = true;
     });
     const managed = server;
+    managed.stopAccepting = () => {
+        if (acceptanceClosePromise)
+            return;
+        lifecycle.fence?.();
+        acceptanceClosePromise = closeHttpServer(server, nativeClose, () => closed);
+        // The full shutdown joins this promise immediately; retain a rejection
+        // handler so a caller cannot create an unhandled rejection in between.
+        void acceptanceClosePromise.catch(() => undefined);
+    };
     managed.shutdown = () => {
         if (shutdownPromise)
             return shutdownPromise;
+        managed.stopAccepting();
         shutdownPromise = (async () => {
             // Stop accepting first, close upgraded sockets so they cannot hold the
             // HTTP drain open, then keep runtime dependencies alive until every
             // in-flight HTTP request has completed.
-            const closeResult = closeHttpServer(server, nativeClose, () => closed);
+            const closeResult = acceptanceClosePromise;
             const upgradeResult = lifecycle.closeUpgrades?.() ?? Promise.resolve();
             const drainResults = await Promise.allSettled([upgradeResult, closeResult]);
             const errors = drainResults

package/dist/session-browser-service.d.ts

@@ -79,6 +79,20 @@ export interface SessionBrowserSurfaceOpenInput {
     signal?: AbortSignal;
 }
 export type SessionBrowserSurfaceSource = Omit<SessionBrowserHostSurfaceSource, "hostPageId">;
+/** One already-running semantic Page that can be exposed by a local inspection gateway. */
+export interface SessionBrowserInspectionTarget {
+    sessionId: string;
+    browserGeneration: number;
+    pageId: string;
+    executionBackend: RuntimeBrowserExecutionBackend;
+    url: string;
+    title: string;
+}
+/** Exact loopback Page endpoint resolved only after the semantic tuple is fenced. */
+export interface SessionBrowserInspectionEndpoint {
+    endpoint: string;
+    engineVersion: string;
+}
 export declare class SessionBrowserSurfaceUnsupportedError extends Error {
     constructor();
 }
@@ -105,7 +119,10 @@ export interface SessionBrowserHostHandle {
     getCdpEndpoint(): Promise<{
         endpoint: string;
         engineVersion: string;
+        pageTargetId?: string;
     }>;
+    /** Optional exact physical Page handoff for the daemon-local inspection gateway. */
+    getPageCdpEndpoint?(hostPageId: string): Promise<SessionBrowserInspectionEndpoint>;
     /** Optional physical presentation primitive; it never projects native CDP. */
     openSurface?(input: SessionBrowserHostSurfaceOpenInput): Promise<SessionBrowserHostSurfaceSource>;
     snapshot(): Promise<SessionBrowserHostSnapshot>;
@@ -167,6 +184,19 @@ export declare class SessionBrowserService {
     private shuttingDown;
     private closeAllPromise?;
     constructor(ports: SessionBrowserServicePorts, options?: SessionBrowserServiceOptions);
+    /** Number of Session Browsers that still own a physical Host handle. */
+    activeBrowserCount(): number;
+    /**
+     * Snapshot the current in-memory inspection inventory. Discovery is
+     * deliberately passive: it neither creates Browsers nor asks a Host to
+     * reconcile physical state.
+     */
+    listInspectionTargets(): SessionBrowserInspectionTarget[];
+    /**
+     * Resolve one semantic inspection target to an exact Runtime-local Page
+     * endpoint. The physical Page identity never enters discovery or Direct RPC.
+     */
+    getInspectionPageEndpoint(input: RuntimeBrowserPageMutationParams): Promise<SessionBrowserInspectionEndpoint>;
     getState(input: RuntimeBrowserStateGetParams): Promise<RuntimeBrowserState | null>;
     /**
      * Runtime-local automation handoff. This method is deliberately absent from

package/dist/session-browser-service.js

@@ -4,6 +4,7 @@ import { parseRuntimeBrowserEndpointDescriptor, } from "@rynx-ai/protocol/runtim
 const MAX_HOST_PAGE_ID_CHARS = 2_048;
 const MAX_PAGE_ID_FACTORY_ATTEMPTS = 64;
 const MAX_RETIRED_HOST_PAGE_IDS = 64;
+const INSPECTION_PAGE_CDP_PATH_PATTERN = /^\/devtools\/page\/[A-Za-z0-9._~%-]+$/;
 export class SessionBrowserSurfaceUnsupportedError extends Error {
     constructor() {
         super("Browser Host does not support presentation");
@@ -53,6 +54,81 @@ export class SessionBrowserService {
             throw new Error("Browser boot generation seed must be a nonnegative safe integer");
         }
     }
+    /** Number of Session Browsers that still own a physical Host handle. */
+    activeBrowserCount() {
+        return this.records.size;
+    }
+    /**
+     * Snapshot the current in-memory inspection inventory. Discovery is
+     * deliberately passive: it neither creates Browsers nor asks a Host to
+     * reconcile physical state.
+     */
+    listInspectionTargets() {
+        const targets = [];
+        for (const record of this.records.values()) {
+            if (record.status !== "ready" || !record.handle.getPageCdpEndpoint)
+                continue;
+            for (const pageId of record.pageOrder) {
+                const page = record.pagesById.get(pageId);
+                if (!page)
+                    continue;
+                targets.push({
+                    sessionId: record.sessionId,
+                    browserGeneration: record.browserGeneration,
+                    pageId,
+                    executionBackend: record.executionBackend,
+                    url: page.url,
+                    title: page.title,
+                });
+            }
+        }
+        return targets;
+    }
+    /**
+     * Resolve one semantic inspection target to an exact Runtime-local Page
+     * endpoint. The physical Page identity never enters discovery or Direct RPC.
+     */
+    async getInspectionPageEndpoint(input) {
+        const params = parseInput(() => parseRuntimeBrowserPageMutationParams(input, "Browser inspection"), "Browser inspection request is invalid");
+        return this.exclusive(params.sessionId, async () => {
+            this.ensureRunning();
+            await this.ensureSessionExists(params.sessionId);
+            const record = this.requireReadyRecord(params.sessionId, params.browserGeneration);
+            await this.reconcileForMutation(record);
+            const page = record.pagesById.get(params.pageId);
+            if (!page) {
+                throw new SessionBrowserServiceError("not_found", "Browser Page was not found");
+            }
+            const resolveEndpoint = record.handle.getPageCdpEndpoint;
+            if (!resolveEndpoint) {
+                throw new SessionBrowserServiceError("unavailable", "Browser Host does not support inspection");
+            }
+            try {
+                const endpoint = await resolveEndpoint.call(record.handle, page.hostPageId);
+                const parsed = parseRuntimeBrowserEndpointDescriptor({
+                    sessionId: record.sessionId,
+                    browserGeneration: record.browserGeneration,
+                    executionBackend: record.executionBackend,
+                    endpoint: endpoint.endpoint,
+                    engineVersion: endpoint.engineVersion,
+                });
+                if (!INSPECTION_PAGE_CDP_PATH_PATTERN.test(new URL(parsed.endpoint).pathname)) {
+                    throw new Error("Browser Host returned a non-Page inspection endpoint");
+                }
+                return {
+                    endpoint: parsed.endpoint,
+                    engineVersion: parsed.engineVersion,
+                };
+            }
+            catch (error) {
+                if (error instanceof SessionBrowserHostError &&
+                    (error.code === "unavailable" || error.code === "outcome_unknown")) {
+                    record.status = "unavailable";
+                }
+                throw mapHostError(error, "Browser inspection endpoint is unavailable");
+            }
+        });
+    }
     async getState(input) {
         const params = parseInput(() => parseRuntimeBrowserStateGetParams(input), "Browser state request is invalid");
         return this.exclusive(params.sessionId, async () => {
@@ -88,6 +164,7 @@ export class SessionBrowserService {
                     executionBackend: record.executionBackend,
                     endpoint: endpoint.endpoint,
                     engineVersion: endpoint.engineVersion,
+                    ...(endpoint.pageTargetId ? { pageTargetId: endpoint.pageTargetId } : {}),
                 });
             }
             catch (error) {
@@ -152,11 +229,20 @@ export class SessionBrowserService {
             this.ensureRunning();
             await this.ensureSessionExists(params.sessionId);
             const existing = this.records.get(params.sessionId);
-            if (existing?.status === "ready" || existing?.status === "opening") {
-                if (existing.status === "ready")
-                    await this.reconcileForRead(existing);
+            if (existing?.status === "opening") {
                 return this.project(existing);
             }
+            if (existing?.status === "ready") {
+                try {
+                    await this.reconcileForRead(existing);
+                    return this.project(existing);
+                }
+                catch {
+                    // An App Host may have gone away immediately before this open. The
+                    // failed reconciliation marks the old generation unavailable, so an
+                    // idempotent open can recreate it on the current preferred Host.
+                }
+            }
             if (existing)
                 await this.closeUnavailableForRecreate(existing);
             return this.createBrowser(params);

package/dist/session-browser-surface-coordinator.d.ts

@@ -7,12 +7,13 @@ export interface SessionBrowserSurfaceCoordinatorOptions {
     maxPendingEventBytes?: number;
 }
 /**
- * Owns the one-stream-per-Page lease, frame acknowledgement, and human-driver
- * rules above physical Browser capture. It never exposes a Host Page ID or CDP.
+ * Owns one physical capture stream per Page, fans it out to bounded logical
+ * subscribers, and arbitrates the single human-driver lease. It never exposes a
+ * Host Page ID or CDP.
  */
 export declare class SessionBrowserSurfaceCoordinator implements DirectRuntimeBrowserSurfaceHost {
     private readonly browsers;
-    private readonly attachments;
+    private readonly pages;
     private readonly pageQueues;
     private readonly frameAcknowledgeTimeoutMs;
     private readonly maxPendingEvents;