@vibesdotdev/kernel-rpc 0.0.0-stage → 1.0.0-rc.2

package/dist/core/protocol/wire/verbs.js

@@ -0,0 +1,171 @@
+import { ThrownCodeSchema, ThrownEnvelopeSchema, WireReasonSchema } from "../../../schemas/contracts/protocol/wire/verbs.js";
+export { ThrownCodeSchema, ThrownEnvelopeSchema, WireReasonSchema } from "../../../schemas/contracts/protocol/wire/verbs.js";
+/**
+ * The RPC verb set — kind-agnostic, exactly three.
+ *
+ * The wire knows three verbs and nothing else. It never names a kind, a method,
+ * or a capability. `query` is `invoke(rootRef, 'query', [kindId])`;
+ * `execution.execute` is `invoke(execRef, 'execute', [opts])`;
+ * `session.resize` is `invoke(sessionRef, 'resize', [cols, rows])`. The protocol
+ * does not know any of those method names — they are opaque strings.
+ *
+ * If the words `resize`, `execute`, `session`, `spawn`, or `query` appeared here
+ * as protocol constants, the protocol would be wrong (doc 11 §L4). They do not.
+ */
+import { CapabilityError, isCapabilityError } from '@vibesdotdev/kernel';
+import { JsonObjectSchema } from '@vibesdotdev/kernel/schemas/json';
+/** The shape a wire reason has: a fixed kebab-case identifier. */
+export { RPC_ERROR_REASON } from "../../../schemas/contracts/protocol/wire/reason.js";
+/** A wire reason: a bounded identifier of the shape {@link RPC_ERROR_REASON}. */
+/** Stable error codes this lane raises directly. Gate codes (AUTHZ/FRICTION) come from L5. */
+export const RPC_ERROR = {
+    /** The connection closed; an in-flight or new invoke cannot complete. */
+    DISCONNECTED: 'RPC_DISCONNECTED',
+    /** `targetRef` (or a `ref`) is not held by the owner table. */
+    NO_TARGET: 'RPC_NO_TARGET',
+    /** The named method does not exist on the target. */
+    NO_METHOD: 'RPC_NO_METHOD',
+    /**
+     * The named method (or stream) was not advertised for this ref (or the
+     * root's declared list): the owner refuses it without touching the target.
+     */
+    NOT_ADVERTISED: 'RPC_NOT_ADVERTISED',
+    /** The named stream channel is not exposed by the target. */
+    NO_CHANNEL: 'RPC_NO_CHANNEL',
+    /**
+     * A ref-valued argument (a callback) was passed over a transport that has no
+     * owner→consumer reverse leg, so the owner could never invoke it back. The
+     * invoke is REJECTED rather than decoded to a silent no-op — silent data loss
+     * is never an outcome (the symmetric-table contract fails loud, doc 11 §L4).
+     */
+    NO_REVERSE_CHANNEL: 'RPC_NO_REVERSE_CHANNEL',
+    /** A method threw; `details` carries the (redacted) cause. */
+    INVOKE_FAILED: 'RPC_INVOKE_FAILED',
+    /** A `stream` request named a channel id that is live or opening on this end; the live channel is kept. */
+    CHANNEL_IN_USE: 'RPC_CHANNEL_IN_USE'
+};
+/** Construct a typed RpcError. `details` is the owner's diagnostic payload; a transport redacts it before it is sent. */
+export function rpcError(code, message, details, reason) {
+    return reason === undefined ? { code, message, details } : { code, message, details, reason };
+}
+/**
+ * A wire error envelope surfaced as a throwable Error.
+ *
+ * Consumers raise remote failures with this (via {@link throwRpcError}), never
+ * as a bare `{ code, message }` object: a plain-object throw defeats every
+ * downstream `instanceof Error` check and `String(err)` renders it as
+ * `"[object Object]"`, destroying the cause the wire carried. An RpcFailure
+ * keeps `.code`/`.details` for coded handling AND `.message`/stack for
+ * ordinary Error handling; `toJSON` preserves the envelope log shape.
+ *
+ * Its `code` is the wire's open vocabulary (`RPC_DISCONNECTED`, a gate's
+ * `AUTHZ_DENIED`, …), wider than the closed `CapabilityErrorCode` taxonomy, so
+ * it is an `Error` carrying that envelope rather than a `CapabilityError`;
+ * {@link isRpcFailure} names it.
+ */
+const rpcFailures = new WeakSet();
+/** Build an {@link RpcFailure}: an Error carrying the wire envelope it surfaced. */
+export function rpcFailure(code, message, details, reason) {
+    const failure = Object.assign(new Error(message), {
+        name: 'RpcFailure', code, details, toJSON: () => rpcError(code, message, details, reason)
+    });
+    if (reason !== undefined)
+        Object.assign(failure, { reason });
+    rpcFailures.add(failure);
+    return failure;
+}
+/** Whether a caught failure is an {@link RpcFailure} this module built. */
+export function isRpcFailure(failure) {
+    return failure instanceof Error && rpcFailures.has(failure);
+}
+/** Throw a wire error as an RpcFailure — the only way consumers raise remote errors. */
+export function throwRpcError(code, message, details, reason) {
+    throw rpcFailure(code, message, details, reason);
+}
+/** Every code of the closed `CapabilityErrorCode` taxonomy; the type checks the table is exhaustive. */
+const CAPABILITY_CODES = {
+    NOT_FOUND: true,
+    INVALID_INPUT: true,
+    PERMISSION_DENIED: true,
+    AUTH_REQUIRED: true,
+    CONFLICT: true,
+    RATE_LIMITED: true,
+    TIMEOUT: true,
+    UNAVAILABLE: true,
+    CANCELLED: true,
+    INTERNAL: true
+};
+function isCapabilityCode(code) {
+    return Object.hasOwn(CAPABILITY_CODES, code);
+}
+/**
+ * Raise a response's wire error on the consumer. A remote `CapabilityError`
+ * (a capability code with its reason) is raised as the same typed refusal:
+ * a `CapabilityError` with its code, reason and object details. Every other
+ * wire error is an {@link RpcFailure}.
+ */
+export function throwWireError(error) {
+    throw wireError(error);
+}
+/** The failure a response's wire error raises on the consumer (see {@link throwWireError}), not yet thrown. */
+export function wireError(error) {
+    const reason = WireReasonSchema.safeParse(error.reason).data;
+    if (reason !== undefined && isCapabilityCode(error.code)) {
+        // The wire carries details as JSON; an object of JSON values is kept, anything else is not details.
+        const details = JsonObjectSchema.safeParse(error.details);
+        return new CapabilityError(error.message, error.code, { reason, details: details.data });
+    }
+    return rpcFailure(error.code, error.message, error.details, reason);
+}
+/** The envelope fields a thrown value may already carry; a reason that is not a fixed identifier is dropped. */
+/** The code a thrown value carries, when it has one. */
+/**
+ * Read a thrown value as the wire envelope it already carries, if any.
+ *
+ * Matches a consumer's RpcFailure AND a legacy bare `{ code, message }`
+ * rethrow (a nested hop's envelope on its way up). The owner dispatch uses
+ * this to passthrough code + message + details instead of re-wrapping the
+ * value into `"[object Object]"`.
+ */
+export function asRpcErrorValue(failure) {
+    const thrown = failure instanceof Error ? failure : failure.value;
+    const envelope = ThrownEnvelopeSchema.safeParse(thrown);
+    if (!envelope.success)
+        return undefined;
+    const { code, message, details, reason } = envelope.data;
+    // A reason travels only as the fixed identifier a CapabilityError (or a
+    // nested hop's envelope) carries.
+    const carried = !(failure instanceof Error) || isCapabilityError(failure) || isRpcFailure(failure) ? reason : undefined;
+    return rpcError(code, message, details, carried);
+}
+/**
+ * Convert a caught failure into the error half of a response envelope — the
+ * single choke point every rewrap site (owner dispatch, reverse-leg callback
+ * dispatch, transport last-resort responders) funnels through.
+ *
+ * A value already carrying an envelope (a consumer's RpcFailure, a nested
+ * hop's rethrow) passes through untouched so a forwarding hop never destroys
+ * the root cause into `"[object Object]"`. A coded throw (a gate veto, a
+ * system error) keeps its code; anything else is `RPC_INVOKE_FAILED`.
+ */
+export function toRpcError(failure) {
+    const passthrough = asRpcErrorValue(failure);
+    if (passthrough)
+        return rpcError(passthrough.code, passthrough.message, passthrough.details, passthrough.reason);
+    const coded = ThrownCodeSchema.safeParse(failure instanceof Error ? failure : failure.value);
+    const message = failure instanceof Error ? failure.message : failure.description;
+    return rpcError(coded.success ? coded.data.code : RPC_ERROR.INVOKE_FAILED, message);
+}
+/** The string `code` a caught failure carries (a Node errno such as `ENOENT`, say), when it has one. */
+export function thrownCode(failure) {
+    return ThrownCodeSchema.safeParse(failure instanceof Error ? failure : failure.value).data?.code;
+}
+/** A caught failure as text: an Error's message, or the description of what was thrown. */
+export function failureMessage(failure) {
+    return failure instanceof Error ? failure.message : failure.description;
+}
+/** Type guards for the three request verbs. */
+export const isInvoke = (r) => r.verb === 'invoke';
+export const isRelease = (r) => r.verb === 'release';
+export const isStream = (r) => r.verb === 'stream';
+//# sourceMappingURL=verbs.js.map

package/dist/core/protocol/wire/verbs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verbs.js","sourceRoot":"","sources":["../../../../src/core/protocol/wire/verbs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AAC7H,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AAE7H;;;;;;;;;;;GAWG;AAEH,OAAO,EACP,eAAe,EACf,iBAAiB,EAGhB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEpE,kEAAkE;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oDAAoD,CAAC;AAEtF,iFAAiF;AAEjF,8FAA8F;AAC9F,MAAM,CAAC,MAAM,SAAS,GAAG;IACxB,yEAAyE;IACzE,YAAY,EAAE,kBAAkB;IAChC,+DAA+D;IAC/D,SAAS,EAAE,eAAe;IAC1B,qDAAqD;IACrD,SAAS,EAAE,eAAe;IAC1B;;;OAGG;IACH,cAAc,EAAE,oBAAoB;IACpC,6DAA6D;IAC7D,UAAU,EAAE,gBAAgB;IAC5B;;;;;OAKG;IACH,kBAAkB,EAAE,wBAAwB;IAC5C,8DAA8D;IAC9D,aAAa,EAAE,mBAAmB;IAClC,2GAA2G;IAC3G,cAAc,EAAE,oBAAoB;CAC3B,CAAC;AAEX,yHAAyH;AACzH,MAAM,UAAU,QAAQ,CAAI,IAAY,EAAE,OAAe,EAAE,OAAW,EAAE,MAAe;IACtF,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC/F,CAAC;AAED;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,GAAG,IAAI,OAAO,EAAS,CAAC;AAEzC,oFAAoF;AACpF,MAAM,UAAU,UAAU,CAAI,IAAY,EAAE,OAAe,EAAE,OAAW,EAAE,MAAe;IACxF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE;QACjD,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAa,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;KACnG,CAAC,CAAC;IACH,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7D,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACzB,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,OAAsB;IAClD,OAAO,OAAO,YAAY,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAI,IAAY,EAAE,OAAe,EAAE,OAAW,EAAE,MAAe;IAC3F,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,wGAAwG;AACxG,MAAM,gBAAgB,GAAG;IACxB,SAAS,EAAE,IAAI;IACf,aAAa,EAAE,IAAI;IACnB,iBAAiB,EAAE,IAAI;IACvB,aAAa,EAAE,IAAI;IACnB,QAAQ,EAAE,IAAI;IACd,YAAY,EAAE,IAAI;IAClB,OAAO,EAAE,IAAI;IACb,WAAW,EAAE,IAAI;IACjB,SAAS,EAAE,IAAI;IACf,QAAQ,EAAE,IAAI;CACuC,CAAC;AAEvD,SAAS,gBAAgB,CAAC,IAAY;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAAe;IAC7C,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,SAAS,CAAC,KAAe;IACxC,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;IAC7D,IAAI,MAAM,KAAK,SAAS,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,oGAAoG;QACpG,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1D,OAAO,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACrE,CAAC;AAED,gHAAgH;AAEhH,wDAAwD;AAExD;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,OAAsB;IACrD,MAAM,MAAM,GAAG,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAClE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;IACzD,wEAAwE;IACxE,kCAAkC;IAClC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,YAAY,KAAK,CAAC,IAAI,iBAAiB,CAAC,OAAO,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACxH,OAAO,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CAAC,OAAsB;IAChD,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,WAAW;QAAE,OAAO,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACjH,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,CAAC,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IACjF,OAAO,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;AACrF,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,UAAU,CAAC,OAAsB;IAChD,OAAO,gBAAgB,CAAC,SAAS,CAAC,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC;AAClG,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,cAAc,CAAC,OAAsB;IACpD,OAAO,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;AACzE,CAAC;AAED,+CAA+C;AAC/C,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAa,EAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;AAC/E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAa,EAAmB,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;AAClF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAa,EAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC"}

package/dist/core/protocol/wire/wire-dates.d.ts

@@ -0,0 +1,8 @@
+/** Date metadata is explicit: an identical ISO string never becomes a Date. */
+import { type RpcData } from './rpc-data.ts';
+import type { WireDatePath } from './schemas.ts';
+/** Every advertised leaf must exist; duplicate paths are an invalid envelope. */
+export declare function validWireDates(value: RpcData, paths: readonly WireDatePath[]): boolean;
+/** Reconstruct only the advertised leaves, without mutating the peer's wire object. */
+export declare function reviveWireDates(value: RpcData, paths: readonly WireDatePath[]): RpcData;
+//# sourceMappingURL=wire-dates.d.ts.map

package/dist/core/protocol/wire/wire-dates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-dates.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol/wire/wire-dates.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAE/E,OAAO,EAA6B,KAAK,OAAO,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAsBjD,iFAAiF;AACjF,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,YAAY,EAAE,GAAG,OAAO,CAQtF;AAED,uFAAuF;AACvF,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,YAAY,EAAE,GAAG,OAAO,CAmBvF"}

package/dist/core/protocol/wire/wire-dates.js

@@ -0,0 +1,64 @@
+/** Date metadata is explicit: an identical ISO string never becomes a Date. */
+import { isDataArray, isDataObject } from "./rpc-data.js";
+import { isNumber, isString } from "./value-kinds.js";
+function dateAt(value, path) {
+    let leaf = value;
+    for (const segment of path) {
+        if (isDataArray(leaf)) {
+            if (!isNumber(segment) || !Object.hasOwn(leaf, segment) || segment >= leaf.length)
+                return false;
+            leaf = leaf[segment];
+        }
+        else if (isDataObject(leaf)) {
+            if (!isString(segment) || !Object.hasOwn(leaf, segment))
+                return false;
+            leaf = leaf[segment];
+        }
+        else {
+            return false;
+        }
+    }
+    if (leaf === null)
+        return true; // An explicitly advertised invalid Date.
+    if (!isString(leaf))
+        return false;
+    const instant = new Date(leaf);
+    return Number.isFinite(instant.getTime()) && instant.toISOString() === leaf;
+}
+/** Every advertised leaf must exist; duplicate paths are an invalid envelope. */
+export function validWireDates(value, paths) {
+    const seen = new Set();
+    for (const path of paths) {
+        const key = JSON.stringify(path);
+        if (seen.has(key) || !dateAt(value, path))
+            return false;
+        seen.add(key);
+    }
+    return true;
+}
+/** Reconstruct only the advertised leaves, without mutating the peer's wire object. */
+export function reviveWireDates(value, paths) {
+    const advertised = new Set(paths.map((path) => JSON.stringify(path)));
+    const visit = (candidate, path) => {
+        if (advertised.has(JSON.stringify(path))) {
+            if (candidate === null)
+                return new Date(Number.NaN);
+            if (!isString(candidate))
+                throw new Error('Invalid advertised Date leaf.');
+            return new Date(candidate);
+        }
+        if (isDataArray(candidate))
+            return candidate.map((child, index) => visit(child, [...path, index]));
+        if (!isDataObject(candidate))
+            return candidate;
+        const out = {};
+        for (const [key, child] of Object.entries(candidate)) {
+            Object.defineProperty(out, key, {
+                value: visit(child, [...path, key]), enumerable: true, writable: true, configurable: true
+            });
+        }
+        return out;
+    };
+    return visit(value, []);
+}
+//# sourceMappingURL=wire-dates.js.map

package/dist/core/protocol/wire/wire-dates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-dates.js","sourceRoot":"","sources":["../../../../src/core/protocol/wire/wire-dates.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAE/E,OAAO,EAAE,WAAW,EAAE,YAAY,EAAgB,MAAM,eAAe,CAAC;AAExE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEtD,SAAS,MAAM,CAAC,KAAc,EAAE,IAAkB;IACjD,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAChG,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;aAAM,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAC;YACtE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IACD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,yCAAyC;IACzE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC;AAC7E,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,KAA8B;IAC5E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACxD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,KAA8B;IAC7E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,CAAC,SAAkB,EAAE,IAAyB,EAAW,EAAE;QACxE,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC1C,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAC3E,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,WAAW,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACnG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC/C,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACtD,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE;gBAC/B,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI;aACzF,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACZ,CAAC,CAAC;IACF,OAAO,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACzB,CAAC"}

package/dist/core/protocol/wire/wire-value.d.ts

@@ -0,0 +1,31 @@
+import type { ReferenceTable } from '@vibesdotdev/kernel';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import type { ProxyFactory, RefId, WireClassifier, WireValue } from "../../../schemas/contracts/protocol/wire/wire-value.ts";
+import type { RpcData } from './rpc-data.ts';
+export { assertInlineCarriable, inlineOnly, snapshotInline } from "./inline-value.ts";
+export type { ProxyFactory, RefId, RpcDecoded, WireClassifier, WireEncodeHint, WireValue } from "../../../schemas/contracts/protocol/wire/wire-value.ts";
+/** Narrow a raw string to a {@link RefId}. The table already guarantees uniqueness. */
+export declare function asRefId(id: string): RefId;
+export declare const CANCELLATION_REFUSED = "An RPC value carries an AbortSignal; cancellation does not cross this transport as data.";
+export declare const UNSERIALIZABLE_REFUSED = "An RPC value cannot be represented on the wire.";
+export declare const ownRefusals: WeakSet<CapabilityError>;
+/**
+ * Encode one value for the wire. A `ref`/`stream` value is retained in the
+ * *local* table (this end becomes its owner); an `inline` value is JSON-wrapped.
+ */
+export declare function encodeValue<T>(value: T, table: ReferenceTable, classify: WireClassifier): WireValue;
+/**
+ * Encode a positional argument list.
+ *
+ * JSON has no `undefined`. A trailing `undefined` is an omitted optional
+ * argument; encoding it would deliver `null` and fail a schema that accepts
+ * only an omitted value.
+ */
+export declare function encodeArgs<T>(args: readonly T[], table: ReferenceTable, classify: WireClassifier): WireValue[];
+/** A decoded wire value on a consumer: inline data (Dates revived where advertised), or a remote proxy. */
+export declare function decodeValue<P>(wire: WireValue, makeProxy: ProxyFactory<P>): RpcData | P;
+/** Decode a positional argument list. */
+export declare function decodeArgs<P>(wire: readonly WireValue[], makeProxy: ProxyFactory<P>): (RpcData | P)[];
+/** Re-export the L1 ref types so protocol consumers have one import surface. */
+export type { Ref, ReferenceTable, RefKind } from '@vibesdotdev/kernel';
+//# sourceMappingURL=wire-value.d.ts.map

package/dist/core/protocol/wire/wire-value.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-value.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol/wire/wire-value.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,wDAAwD,CAAC;AAG7H,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAG7C,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEtF,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,wDAAwD,CAAC;AAEzJ,uFAAuF;AACvF,wBAAgB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,KAAK,CAEzC;AAED,eACA,MAAM,oBAAoB,6FAA6F,CAAC;AAExH,eAAO,MAAM,sBAAsB,oDAAoD,CAAC;AAExF,eACA,MAAM,WAAW,0BAAiC,CAAC;AAEnD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,GAAG,SAAS,CAuBnG;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,GAAG,SAAS,EAAE,CAK9G;AAED,2GAA2G;AAE3G,wBAAgB,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAUvF;AAED,yCAAyC;AACzC,wBAAgB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,SAAS,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAErG;AAED,gFAAgF;AAChF,YAAY,EAAE,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/core/protocol/wire/wire-value.js

@@ -0,0 +1,72 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { recordAdvertisement } from "../references/advertisement.js";
+import { snapshotInline } from "./inline-value.js";
+import { RefIdSchema } from "./schemas.js";
+import { reviveWireDates } from "./wire-dates.js";
+export { assertInlineCarriable, inlineOnly, snapshotInline } from "./inline-value.js";
+/** Narrow a raw string to a {@link RefId}. The table already guarantees uniqueness. */
+export function asRefId(id) {
+    return RefIdSchema.parse(id);
+}
+export /** The fixed diagnostics of an inline value refused at the boundary (no serializer text, no cause). */ const CANCELLATION_REFUSED = 'An RPC value carries an AbortSignal; cancellation does not cross this transport as data.';
+export const UNSERIALIZABLE_REFUSED = 'An RPC value cannot be represented on the wire.';
+export /** The refusals this module raised, so a traversal failure is never mistaken for one. */ const ownRefusals = new WeakSet();
+/**
+ * Encode one value for the wire. A `ref`/`stream` value is retained in the
+ * *local* table (this end becomes its owner); an `inline` value is JSON-wrapped.
+ */
+export function encodeValue(value, table, classify) {
+    const hint = classify(value);
+    if (hint.mode === 'inline') {
+        // The validated snapshot is what crosses, never the original object.
+        return { t: 'json', v: snapshotInline(value) };
+    }
+    const ref = table.retain(value, hint.kind, hint.ownership);
+    // Owner-side admission: remember exactly what this ref advertised.
+    if (hint.channel !== undefined) {
+        recordAdvertisement(table, ref.id, { kind: 'stream' });
+        return { t: 'stream', id: asRefId(ref.id), channel: hint.channel };
+    }
+    if (hint.kind === 'function') {
+        recordAdvertisement(table, ref.id, { kind: 'function' });
+        return { t: 'ref', id: asRefId(ref.id), kind: hint.kind, methods: hint.methods };
+    }
+    const methods = new Set(hint.methods ?? []);
+    if (hint.channels) {
+        recordAdvertisement(table, ref.id, { kind: 'object', methods, channels: new Set(hint.channels) });
+        return { t: 'ref', id: asRefId(ref.id), kind: hint.kind, methods: hint.methods, channels: hint.channels };
+    }
+    recordAdvertisement(table, ref.id, { kind: 'object', methods });
+    return { t: 'ref', id: asRefId(ref.id), kind: hint.kind, methods: hint.methods };
+}
+/**
+ * Encode a positional argument list.
+ *
+ * JSON has no `undefined`. A trailing `undefined` is an omitted optional
+ * argument; encoding it would deliver `null` and fail a schema that accepts
+ * only an omitted value.
+ */
+export function encodeArgs(args, table, classify) {
+    let end = args.length;
+    while (end > 0 && args[end - 1] === undefined)
+        end -= 1;
+    const positional = end === args.length ? args : args.slice(0, end);
+    return positional.map((a) => encodeValue(a, table, classify));
+}
+/** A decoded wire value on a consumer: inline data (Dates revived where advertised), or a remote proxy. */
+export function decodeValue(wire, makeProxy) {
+    switch (wire.t) {
+        case 'json':
+            return wire.dates ? reviveWireDates(wire.v, wire.dates) : wire.v;
+        case 'ref':
+            return makeProxy(wire.id, wire.kind, wire.methods ?? [], undefined, wire.channels);
+        case 'stream':
+            // A stream handle is an object ref whose only declared surface is its channel.
+            return makeProxy(wire.id, 'stream', [], wire.channel);
+    }
+}
+/** Decode a positional argument list. */
+export function decodeArgs(wire, makeProxy) {
+    return wire.map((w) => decodeValue(w, makeProxy));
+}
+//# sourceMappingURL=wire-value.js.map

package/dist/core/protocol/wire/wire-value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-value.js","sourceRoot":"","sources":["../../../../src/core/protocol/wire/wire-value.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAItF,uFAAuF;AACvF,MAAM,UAAU,OAAO,CAAC,EAAU;IACjC,OAAO,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,uGAAuG,CAC9G,MAAM,oBAAoB,GAAG,0FAA0F,CAAC;AAExH,MAAM,CAAC,MAAM,sBAAsB,GAAG,iDAAiD,CAAC;AAExF,MAAM,CAAC,yFAAyF,CAChG,MAAM,WAAW,GAAG,IAAI,OAAO,EAAmB,CAAC;AAEnD;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAI,KAAQ,EAAE,KAAqB,EAAE,QAAwB;IACvF,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,qEAAqE;QACrE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3D,mEAAmE;IACnE,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvD,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAClF,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC5C,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnB,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAClG,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC3G,CAAC;IACD,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAChE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AAClF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAI,IAAkB,EAAE,KAAqB,EAAE,QAAwB;IAChG,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,SAAS;QAAE,GAAG,IAAI,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnE,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,2GAA2G;AAE3G,MAAM,UAAU,WAAW,CAAI,IAAe,EAAE,SAA0B;IACzE,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC;QAChB,KAAK,MAAM;YACV,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,KAAK,KAAK;YACT,OAAO,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpF,KAAK,QAAQ;YACZ,+EAA+E;YAC/E,OAAO,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;AACF,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,UAAU,CAAI,IAA0B,EAAE,SAA0B;IACnF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;AACnD,CAAC"}

package/dist/core/runtime-rpc.plugin.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Registers the RPC kind and protocol metadata plus the universal execution-wire
+ * client. Transport implementations remain on their explicit plugin subpaths.
+ */
+export declare const runtimeRpcPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default runtimeRpcPlugin;
+//# sourceMappingURL=runtime-rpc.plugin.d.ts.map

package/dist/core/runtime-rpc.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-rpc.plugin.d.ts","sourceRoot":"","sources":["../../src/core/runtime-rpc.plugin.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,eAAO,MAAM,gBAAgB,6CAW3B,CAAC;AAEH,eAAe,gBAAgB,CAAC"}

package/dist/core/runtime-rpc.plugin.js

@@ -0,0 +1,22 @@
+/**
+ * Registers the RPC kind and protocol metadata plus the universal execution-wire
+ * client. Transport implementations remain on their explicit plugin subpaths.
+ */
+import { runtimeRpcExecutionPlugin } from "../execution/execution.plugin.js";
+import { createRuntimePlugin } from '@vibesdotdev/kernel';
+import runtimeRpcConfigDescriptor from "../daemon/hosting/config/runtime-rpc.config.descriptor.js";
+import runtimeRpcDocs from "../docs/runtime-rpc.docs.descriptor.js";
+import { rpcKind } from "./kinds/rpc.kind.js";
+export const runtimeRpcPlugin = createRuntimePlugin({
+    id: 'runtime-rpc',
+    name: 'Runtime RPC — kind + protocol',
+    description: 'The runtime/rpc kind: three kind-agnostic verbs (invoke/release/stream) over symmetric reference tables. Transport implementations register through explicit package subpaths.',
+    dependencies: [],
+    async onRegister(runtime) {
+        await runtime.registerPlugin(runtimeRpcExecutionPlugin);
+    },
+    kinds: [rpcKind],
+    descriptors: [runtimeRpcDocs, runtimeRpcConfigDescriptor]
+});
+export default runtimeRpcPlugin;
+//# sourceMappingURL=runtime-rpc.plugin.js.map

package/dist/core/runtime-rpc.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-rpc.plugin.js","sourceRoot":"","sources":["../../src/core/runtime-rpc.plugin.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,0BAA0B,MAAM,2DAA2D,CAAC;AACnG,OAAO,cAAc,MAAM,wCAAwC,CAAC;AACpE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAE9C,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;IACnD,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,+BAA+B;IACrC,WAAW,EACV,gLAAgL;IACjL,YAAY,EAAE,EAAE;IAChB,KAAK,CAAC,UAAU,CAAC,OAAO;QACvB,MAAM,OAAO,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAAC;IACzD,CAAC;IACD,KAAK,EAAE,CAAC,OAAO,CAAC;IAChB,WAAW,EAAE,CAAC,cAAc,EAAE,0BAA0B,CAAC;CACzD,CAAC,CAAC;AAEH,eAAe,gBAAgB,CAAC"}

package/dist/core/utils/exec.d.ts

@@ -0,0 +1,2 @@
+export { runCapture, runTimedCapture, spawnLogged, spawnSupervised, type RunCaptureOptions, type RunCaptureResult, type SupervisedChild, type TimedRunResult } from '@vibesdotdev/kernel/execution';
+//# sourceMappingURL=exec.d.ts.map

package/dist/core/utils/exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../../src/core/utils/exec.ts"],"names":[],"mappings":"AAAA,OAAO,EACP,UAAU,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAClJ,MAAM,+BAA+B,CAAC"}

package/dist/core/utils/exec.js

@@ -0,0 +1,2 @@
+export { runCapture, runTimedCapture, spawnLogged, spawnSupervised } from '@vibesdotdev/kernel/execution';
+//# sourceMappingURL=exec.js.map

package/dist/core/utils/exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.js","sourceRoot":"","sources":["../../../src/core/utils/exec.ts"],"names":[],"mappings":"AAAA,OAAO,EACP,UAAU,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EACxD,MAAM,+BAA+B,CAAC"}

package/dist/core/utils/http-serve.d.ts

@@ -0,0 +1,13 @@
+import type { FetchServer, ServeFetchOptions } from "../../schemas/contracts/core/utils/http-serve.ts";
+export type { FetchServer, ServeFetchOptions } from "../../schemas/contracts/core/utils/http-serve.ts";
+/**
+ * Fetch-handler HTTP server on the handed host's HTTP listener.
+ *
+ * The host owns the transport (sockets, streaming, binding); this module
+ * only wraps the feature's fetch handler with its required failure report:
+ * a request the handler failed answers 500, never silence.
+ */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+/** Serve `options.fetch` on the handed runtime's HTTP listener. */
+export declare function serveFetch(runtime: Pick<RuntimeRef, 'hasKind' | 'query' | 'diagnostics'>, options: ServeFetchOptions): Promise<FetchServer>;
+//# sourceMappingURL=http-serve.d.ts.map

package/dist/core/utils/http-serve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-serve.d.ts","sourceRoot":"","sources":["../../../src/core/utils/http-serve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,kDAAkD,CAAC;AACvG,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,kDAAkD,CAAC;AACvG;;;;;;GAMG;AAEH,OAAO,EAA0D,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAE9G,mEAAmE;AACnE,wBAAsB,UAAU,CAC/B,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,GAAG,OAAO,GAAG,aAAa,CAAC,EAC9D,OAAO,EAAE,iBAAiB,GACxB,OAAO,CAAC,WAAW,CAAC,CAkCtB"}

package/dist/core/utils/http-serve.js

@@ -0,0 +1,46 @@
+/**
+ * Fetch-handler HTTP server on the handed host's HTTP listener.
+ *
+ * The host owns the transport (sockets, streaming, binding); this module
+ * only wraps the feature's fetch handler with its required failure report:
+ * a request the handler failed answers 500, never silence.
+ */
+import { CaughtFailureSchema, getRuntimeHttpListener, settleNow } from '@vibesdotdev/kernel';
+/** Serve `options.fetch` on the handed runtime's HTTP listener. */
+export async function serveFetch(runtime, options) {
+    const listener = await getRuntimeHttpListener(runtime);
+    const binding = await listener.listen({
+        hostname: options.hostname,
+        port: options.port,
+        fetch: async (request) => {
+            try {
+                return await options.fetch(request);
+            }
+            catch (error) {
+                const failure = CaughtFailureSchema.parse(error);
+                // A refusing reporter must not replace the original failure:
+                // settle the report, route its refusal to the kernel port, and
+                // still answer 500 with the original cause.
+                const reported = settleNow(() => options.onError(failure, { method: request.method, url: request.url }));
+                if (!reported.ok) {
+                    settleNow(() => {
+                        runtime.diagnostics.error('http-serve.on-error-refused', {
+                            scope: 'runtime-plugin',
+                            plugin: 'http-serve',
+                            error: reported.cause
+                        });
+                    });
+                }
+                const init = { status: 500, cause: failure };
+                return new Response(null, init);
+            }
+        }
+    });
+    return {
+        port: binding.port,
+        stop() {
+            return binding.stop();
+        }
+    };
+}
+//# sourceMappingURL=http-serve.js.map

package/dist/core/utils/http-serve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-serve.js","sourceRoot":"","sources":["../../../src/core/utils/http-serve.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AAEH,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,SAAS,EAAmB,MAAM,qBAAqB,CAAC;AAE9G,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,OAA8D,EAC9D,OAA0B;IAE1B,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACxB,IAAI,CAAC;gBACJ,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACjD,6DAA6D;gBAC7D,+DAA+D;gBAC/D,4CAA4C;gBAC5C,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACzG,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAClB,SAAS,CAAC,GAAG,EAAE;wBACd,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,6BAA6B,EAAE;4BACxD,KAAK,EAAE,gBAAgB;4BACvB,MAAM,EAAE,YAAY;4BACpB,KAAK,EAAE,QAAQ,CAAC,KAAK;yBACrB,CAAC,CAAC;oBACJ,CAAC,CAAC,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;gBAC7C,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACjC,CAAC;QACF,CAAC;KACD,CAAC,CAAC;IACH,OAAO;QACN,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI;YACH,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/daemon/auth/cors.d.ts

@@ -0,0 +1,7 @@
+/** Daemon compatibility surface; HTTP owns origin matching and header policy. */
+import { CorsPolicy as HttpCorsPolicy } from '../../transports/http/auth/cors.ts';
+export { DEFAULT_CORS_ALLOWED_ORIGINS, type CorsConfig, type CorsResolution } from '../../transports/http/auth/cors.ts';
+export declare class CorsPolicy extends HttpCorsPolicy {
+    resolve(origin: string | null): import("./cors.ts").CorsResolution;
+}
+//# sourceMappingURL=cors.d.ts.map

package/dist/daemon/auth/cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../src/daemon/auth/cors.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,OAAO,EAAE,UAAU,IAAI,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,EAAE,4BAA4B,EAAE,KAAK,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAExH,qBAAa,UAAW,SAAQ,cAAc;IACpC,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;CAKtC"}

package/dist/daemon/auth/cors.js

@@ -0,0 +1,12 @@
+/** Daemon compatibility surface; HTTP owns origin matching and header policy. */
+import { CorsPolicy as HttpCorsPolicy } from "../../transports/http/auth/cors.js";
+export { DEFAULT_CORS_ALLOWED_ORIGINS } from "../../transports/http/auth/cors.js";
+export class CorsPolicy extends HttpCorsPolicy {
+    resolve(origin) {
+        const resolution = super.resolve(origin);
+        if (resolution.allowed)
+            resolution.headers['Access-Control-Allow-Headers'] = 'Content-Type, Authorization';
+        return resolution;
+    }
+}
+//# sourceMappingURL=cors.js.map

package/dist/daemon/auth/cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.js","sourceRoot":"","sources":["../../../src/daemon/auth/cors.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,OAAO,EAAE,UAAU,IAAI,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,EAAE,4BAA4B,EAAwC,MAAM,oCAAoC,CAAC;AAExH,MAAM,OAAO,UAAW,SAAQ,cAAc;IACpC,OAAO,CAAC,MAAqB;QACrC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,UAAU,CAAC,OAAO;YAAE,UAAU,CAAC,OAAO,CAAC,8BAA8B,CAAC,GAAG,6BAA6B,CAAC;QAC3G,OAAO,UAAU,CAAC;IACnB,CAAC;CACD"}

package/dist/daemon/auth/ingress/body.d.ts

@@ -0,0 +1,6 @@
+import type { BearerAuth, TcpHandlerDeps } from '../../../schemas/daemon/daemon-http.ts';
+import type { TokenRegistry } from '../../../transports/http/auth/token-registry.ts';
+export declare function authenticateBearer(req: Request, registry: TokenRegistry): BearerAuth | null;
+/** The host reports cleanup failures; without a sink the failure remains observable. */
+export declare function readDaemonBody(req: Request, deps: TcpHandlerDeps): Promise<string | Response>;
+//# sourceMappingURL=body.d.ts.map

package/dist/daemon/auth/ingress/body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.d.ts","sourceRoot":"","sources":["../../../../src/daemon/auth/ingress/body.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAEzF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iDAAiD,CAAC;AAErF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,GAAG,UAAU,GAAG,IAAI,CAM3F;AAED,wFAAwF;AACxF,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,CAK7F"}

package/dist/daemon/auth/ingress/body.js

@@ -0,0 +1,19 @@
+import { readBoundedBody } from "../../../transports/http/listener/body.js";
+export function authenticateBearer(req, registry) {
+    const authHeader = req.headers.get('Authorization');
+    if (!authHeader?.startsWith('Bearer '))
+        return null;
+    const token = authHeader.slice(7);
+    const info = registry.resolve(token);
+    return info ? { token, info } : null;
+}
+/** The host reports cleanup failures; without a sink the failure remains observable. */
+export function readDaemonBody(req, deps) {
+    return readBoundedBody(req, failure => {
+        if (deps.reportFailure)
+            deps.reportFailure(failure);
+        else
+            throw failure;
+    });
+}
+//# sourceMappingURL=body.js.map

package/dist/daemon/auth/ingress/body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.js","sourceRoot":"","sources":["../../../../src/daemon/auth/ingress/body.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAG5E,MAAM,UAAU,kBAAkB,CAAC,GAAY,EAAE,QAAuB;IACvE,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtC,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,cAAc,CAAC,GAAY,EAAE,IAAoB;IAChE,OAAO,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE;QACrC,IAAI,IAAI,CAAC,aAAa;YAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;;YAC/C,MAAM,OAAO,CAAC;IACpB,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/daemon/auth/ingress/finalize.d.ts

@@ -0,0 +1,2 @@
+export declare function finalize(response: Response, corsHeaders: Record<string, string>, httpDebug: boolean): Promise<Response>;
+//# sourceMappingURL=finalize.d.ts.map

package/dist/daemon/auth/ingress/finalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finalize.d.ts","sourceRoot":"","sources":["../../../../src/daemon/auth/ingress/finalize.ts"],"names":[],"mappings":"AAIA,wBAAsB,QAAQ,CAC7B,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,SAAS,EAAE,OAAO,GAChB,OAAO,CAAC,QAAQ,CAAC,CAqCnB"}