@rynx-ai/server 0.1.9 → 0.1.10-beta.3

package/dist/browser-surface-ws.d.ts

@@ -1,8 +1,10 @@
 import type { Server } from "node:http";
 import { WebSocketServer } from "ws";
+import { type RuntimeWebAccessPolicy } from "./runtime-web-auth.js";
 import type { RuntimeConnectionResolverHost } from "./server.js";
 export interface BrowserSurfaceWsDeps {
     runtimeConnectionResolver?: RuntimeConnectionResolverHost;
+    runtimeWebAccess?: RuntimeWebAccessPolicy;
     keepAliveMs?: number;
     peerLivenessTimeoutMs?: number;
 }

package/dist/browser-surface-ws.js

@@ -35,6 +35,7 @@ export function attachBrowserSurfaceWs(server, deps) {
         const authorization = authorizeRuntimeWebRequest(request, {
             mutation: true,
             capability: parsed.url.searchParams.get(RUNTIME_WEB_CAPABILITY_QUERY) ?? "",
+            access: deps.runtimeWebAccess,
         });
         if (authorization) {
             rejectUpgrade(socket, authorization.status, authorization.error);

package/dist/control-api.d.ts

@@ -2,6 +2,7 @@ import Router from "@koa/router";
 import { type AgentSpec, type AuthMaterial, type ConversationRuntime, type MachineSessionRecord, type AgentRuntimeId, type SessionBus, type SessionLogStore, type SkillInstallRecipe } from "@rynx-ai/core";
 import type { ControlChannel, ControlChannelType, ControlInstanceConfig, ControlAgentSummary, SkillSummary, SkillDetail } from "@rynx-ai/protocol/control";
 import type { SessionInteractionResolution } from "@rynx-ai/protocol";
+import { type RemoteRuntimeRpcParams, type RemoteRuntimeRpcResultFor } from "@rynx-ai/protocol/remote-runtime-rpc";
 import type { CodexSessionStore, InjectOutcome } from "@rynx-ai/runtime";
 import type { ChannelManager } from "./channel-manager.js";
 import type { DaemonManagementHost, RemoteRuntimeAdminHost, RuntimeTargetControlHost, RuntimeConnectionResolverHost, RuntimeLocalBrowserAutomationHost } from "./server.js";
@@ -9,6 +10,7 @@ import type { ProviderCliManagementHost } from "./provider-cli-host.js";
 import { type DaemonRuntimeHost } from "./remote-runtime.js";
 import { SessionRuntimeIndex } from "./session-runtime-index.js";
 import type { SessionEmulatorService } from "./session-emulator-service.js";
+import { type RuntimeWebAccessPolicy } from "./runtime-web-auth.js";
 export interface ControlEmulatorDeps {
     doctor(): Promise<unknown>;
     devices(): Promise<unknown[]>;
@@ -184,6 +186,17 @@ export interface SessionResourceLifecycle {
     beforeDelete?(sessionId: string): void | Promise<void>;
     afterDelete?(sessionId: string): void | Promise<void>;
 }
+/** In-process Local Runtime resource authority. Direct targets continue through
+ * the bounded Remote Runtime RPC transport; Local avoids serial base64 frames. */
+export interface LocalSessionResourceHost {
+    resourcePolicy(sessionId: string): Promise<RemoteRuntimeRpcResultFor<"session.resource.policy.get">> | RemoteRuntimeRpcResultFor<"session.resource.policy.get">;
+    beginResourceUpload(input: RemoteRuntimeRpcParams<"session.resource.upload.begin">): Promise<RemoteRuntimeRpcResultFor<"session.resource.upload.begin">>;
+    writeResourceUploadChunk(input: RemoteRuntimeRpcParams<"session.resource.upload.chunk">): Promise<RemoteRuntimeRpcResultFor<"session.resource.upload.chunk">>;
+    commitResourceUpload(input: RemoteRuntimeRpcParams<"session.resource.upload.commit">): Promise<RemoteRuntimeRpcResultFor<"session.resource.upload.commit">>;
+    getResource(input: RemoteRuntimeRpcParams<"session.resource.get">): Promise<RemoteRuntimeRpcResultFor<"session.resource.get">>;
+    readResource(input: RemoteRuntimeRpcParams<"session.resource.read">): Promise<RemoteRuntimeRpcResultFor<"session.resource.read">>;
+    deleteResource(input: RemoteRuntimeRpcParams<"session.resource.delete">): Promise<RemoteRuntimeRpcResultFor<"session.resource.delete">>;
+}
 export declare function createControlRouter(opts: {
     manager: ChannelManager;
     deps: ControlPlaneDeps;
@@ -227,8 +240,12 @@ export declare function createControlRouter(opts: {
     remoteRuntimeAdmin?: RemoteRuntimeAdminHost;
     /** Local BFF authority for Local and explicitly paired Direct Runtime targets. */
     runtimeTargetControl?: RuntimeTargetControlHost;
+    /** Browser-facing access boundary. Internal daemon management remains loopback-only. */
+    runtimeWebAccess?: RuntimeWebAccessPolicy;
     /** Resolves an explicit Runtime selector without exposing Direct credentials. */
     runtimeConnectionResolver?: RuntimeConnectionResolverHost;
+    /** Same-daemon resource authority for the `local` selector. */
+    localSessionResources?: LocalSessionResourceHost;
     sessionEmulators?: SessionEmulatorService;
     /** Ends host-owned long-lived HTTP responses before the server drains. */
     shutdownSignal?: AbortSignal;