@vibesdotdev/kernel-rpc 0.0.0-stage → 1.0.0-rc.2

package/dist/transports/cef/contracts2/mount.js

@@ -0,0 +1,63 @@
+import { projectionConsumer } from "../../../core/protocol/references/projection-consumer.js";
+import { RUNTIME_PROJECTION_ROOT_METHODS } from "../../../core/protocol/references/ref-table.js";
+import { projectionCloser } from "../../../core/protocol/transport/projection-close.js";
+import { asRefId } from "../../../core/protocol/wire/wire-value.js";
+import { CefProjectionHandshakeSchema } from "../contracts1/contracts.js";
+export async function mountCefRuntimeProjection(runtime, connection) {
+    const handshake = CefProjectionHandshakeSchema.safeParse('handshake' in connection ? connection.handshake : undefined);
+    if (!handshake.success) {
+        const failure = new Error('CEF_RPC_HANDSHAKE_MISSING');
+        try {
+            await connection.close();
+        }
+        catch (cleanup) {
+            throw new AggregateError([failure, cleanup], 'CEF projection setup and cleanup failed.');
+        }
+        throw failure;
+    }
+    const transport = {
+        rootRef: connection.rootRef, rootMethods: RUNTIME_PROJECTION_ROOT_METHODS,
+        send: (request) => connection.send(request),
+        openStream: (ref, channel) => connection.openStream(asRefId(ref), channel),
+        closed: connection.closed
+    };
+    if (connection.onRequest)
+        transport.onRequest = (handler) => connection.onRequest?.(handler);
+    const consumer = projectionConsumer(transport, `cef-${handshake.data.connectionGeneration}`);
+    let mounted;
+    const unmount = projectionCloser(runtime, () => mounted, connection, consumer);
+    try {
+        const projection = await consumer.snapshot();
+        if (projection.audience !== 'consumer-renderer')
+            throw new Error('CEF_RPC_AUDIENCE_DENIED');
+        if (projection.protocol.major !== handshake.data.protocol.major) {
+            throw new Error('CEF_RPC_PROJECTION_PROTOCOL_INCOMPATIBLE');
+        }
+        const ref = runtime.mountRuntime({
+            provenance: {
+                runtimeId: projection.runtimeId,
+                mountGeneration: handshake.data.mountGeneration,
+                connectionGeneration: handshake.data.connectionGeneration,
+                workspaceId: projection.workspaceId, principal: projection.principal,
+                remoteScope: projection.remoteScope, policyRevision: projection.policyRevision,
+                renderer: handshake.data.renderer, protocol: projection.protocol
+            },
+            descriptorRevision: projection.descriptorRevision, candidates: projection.candidates
+        }, (candidate) => consumer.resolve(candidate.kindId, candidate.assetId));
+        mounted = ref;
+        const close = async () => {
+            const failure = await unmount();
+            if (failure)
+                throw failure;
+        };
+        void connection.closed.then(unmount);
+        return { ref, connection, projection, close, [Symbol.dispose]: () => { void unmount(); } };
+    }
+    catch (failure) {
+        const cleanup = await unmount();
+        if (cleanup)
+            throw new AggregateError([failure, cleanup], 'CEF projection setup and cleanup failed.');
+        throw failure;
+    }
+}
+//# sourceMappingURL=mount.js.map

package/dist/transports/cef/contracts2/mount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount.js","sourceRoot":"","sources":["../../../../src/transports/cef/contracts2/mount.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0DAA0D,CAAC;AAC9F,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EAAE,gBAAgB,EAAE,MAAM,sDAAsD,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAC;AACpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAE1E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,OAAmB,EACnB,UAAyB;IAEzB,MAAM,SAAS,GAAG,4BAA4B,CAAC,SAAS,CACvD,WAAW,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAC5D,CAAC;IACF,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACvD,IAAI,CAAC;YAAC,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QACjC,OAAO,OAAO,EAAE,CAAC;YAAC,MAAM,IAAI,cAAc,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,0CAA0C,CAAC,CAAC;QAAC,CAAC;QAC7G,MAAM,OAAO,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAsB;QACpC,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,WAAW,EAAE,+BAA+B;QACzE,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3C,UAAU,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;QAC1E,MAAM,EAAE,UAAU,CAAC,MAAM;KACzB,CAAC;IACF,IAAI,UAAU,CAAC,SAAS;QAAE,SAAS,CAAC,SAAS,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,EAAE,OAAO,SAAS,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC7F,IAAI,OAAwC,CAAC;IAC7C,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC/E,IAAI,CAAC;QACJ,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC7C,IAAI,UAAU,CAAC,QAAQ,KAAK,mBAAmB;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC5F,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAC/B;YACC,UAAU,EAAE;gBACX,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,eAAe,EAAE,SAAS,CAAC,IAAI,CAAC,eAAe;gBAC/C,oBAAoB,EAAE,SAAS,CAAC,IAAI,CAAC,oBAAoB;gBACzD,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS;gBACpE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,cAAc,EAAE,UAAU,CAAC,cAAc;gBAC9E,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ;aAChE;YACD,kBAAkB,EAAE,UAAU,CAAC,kBAAkB,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU;SACpF,EACD,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,CACpE,CAAC;QACF,OAAO,GAAG,GAAG,CAAC;QACd,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;YACvC,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;YAChC,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC;QAC5B,CAAC,CAAC;QACF,KAAK,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,CAAC;IAAC,OAAO,OAAO,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;QAChC,IAAI,OAAO;YAAE,MAAM,IAAI,cAAc,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,0CAA0C,CAAC,CAAC;QACtG,MAAM,OAAO,CAAC;IACf,CAAC;AACF,CAAC"}

package/dist/transports/cef/contracts2/projection-controller.d.ts

@@ -0,0 +1,39 @@
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import { type RuntimeRpcDescriptor } from '@vibesdotdev/kernel-rpc';
+import type { CefRuntimeProjectionStatus } from '../../../schemas/contracts/transports/cef/runtime-rpc-cef.plugin.ts';
+import { type CefRuntimeHost } from '../contracts1/contracts.ts';
+import { type CefRuntimeMount } from './mount.ts';
+type ProjectionStatusListener = (status: CefRuntimeProjectionStatus) => void;
+/**
+ * Observable CEF projection lifecycle. This is transport health, not daemon
+ * domain state: feature surfaces still resolve ordinary runtime clients after
+ * the mount succeeds. The mount is held by runtime-rpc's connect state machine
+ * ({@link RpcConnector}): one attempt in flight, a live mount reused, and each
+ * `ensureMounted()` after a failure makes exactly one new attempt; there is no
+ * timer or retry loop. A caller that has just admitted the native runtime
+ * (native custody reports it ready) calls `ensureMounted()` again.
+ */
+export declare class CefRuntimeProjectionController {
+    private host;
+    private descriptor;
+    private connector;
+    /** Connectors a later bind replaced: each is disposed when replaced, and its outcome joined by {@link dispose}. */
+    private retired;
+    private listeners;
+    private current;
+    /**
+     * Bind the runtime, host and descriptor the projection mounts over. A second bind (a second plugin over a shared
+     * controller) first disposes the connector it replaces, so the earlier mount is unmounted, never orphaned; that
+     * disposal's outcome is kept and reported by {@link dispose}.
+     */
+    bind(runtime: RuntimeRef, host: CefRuntimeHost | null, descriptor: RuntimeRpcDescriptor): void;
+    snapshot(): CefRuntimeProjectionStatus;
+    subscribe(listener: ProjectionStatusListener): () => void;
+    ensureMounted(): Promise<CefRuntimeMount>;
+    /** Unmount and stop: an in-flight mount is cancelled. Resolves once the mount is disposed. */
+    dispose(): Promise<void>;
+    private mountInternal;
+    private publish;
+}
+export {};
+//# sourceMappingURL=projection-controller.d.ts.map

package/dist/transports/cef/contracts2/projection-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection-controller.d.ts","sourceRoot":"","sources":["../../../../src/transports/cef/contracts2/projection-controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2D,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC/G,OAAO,EAAyB,KAAK,oBAAoB,EAAiC,MAAM,yBAAyB,CAAC;AAI1H,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qEAAqE,CAAC;AACtH,OAAO,EAAuC,KAAK,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACtG,OAAO,EAA6B,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAU7E,KAAK,wBAAwB,GAAG,CAAC,MAAM,EAAE,0BAA0B,KAAK,IAAI,CAAC;AAE7E;;;;;;;;GAQG;AACH,qBAAa,8BAA8B;IAC1C,OAAO,CAAC,IAAI,CAA+B;IAC3C,OAAO,CAAC,UAAU,CAAqC;IACvD,OAAO,CAAC,SAAS,CAA8C;IAC/D,mHAAmH;IACnH,OAAO,CAAC,OAAO,CAAgC;IAC/C,OAAO,CAAC,SAAS,CAAuC;IACxD,OAAO,CAAC,OAAO,CAMb;IAEF;;;;OAIG;IACH,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,GAAG,IAAI,EAAE,UAAU,EAAE,oBAAoB,GAAG,IAAI;IAoB9F,QAAQ,IAAI,0BAA0B;IAItC,SAAS,CAAC,QAAQ,EAAE,wBAAwB,GAAG,MAAM,IAAI;IAMzD,aAAa,IAAI,OAAO,CAAC,eAAe,CAAC;IAUzC,8FAA8F;IACxF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAShB,aAAa;IAiC3B,OAAO,CAAC,OAAO;CAIf"}

package/dist/transports/cef/contracts2/projection-controller.js

@@ -0,0 +1,129 @@
+import { CapabilityError, CaughtFailureSchema, isCapabilityError } from '@vibesdotdev/kernel';
+import { RpcConnector, rpcKind } from '@vibesdotdev/kernel-rpc';
+import { rethrow, settled } from "../../../core/protocol/lifecycle/attempt.js";
+import { RPC_HOST_FAILED } from "../../../core/protocol/transport/failure-describer.js";
+import { isRpcFailure } from "../../../core/protocol/wire/verbs.js";
+import { CEF_RPC_DEFAULT_REQUEST_DEADLINE_MS } from "../contracts1/contracts.js";
+import { mountCefRuntimeProjection } from "./mount.js";
+function cefHostUnavailable(message) {
+    return new CapabilityError(message, 'UNAVAILABLE', {
+        reason: 'host-unavailable',
+        retryable: false,
+        recoveryHint: 'Register the CEF transport only in builds the CEF host serves.'
+    });
+}
+/**
+ * Observable CEF projection lifecycle. This is transport health, not daemon
+ * domain state: feature surfaces still resolve ordinary runtime clients after
+ * the mount succeeds. The mount is held by runtime-rpc's connect state machine
+ * ({@link RpcConnector}): one attempt in flight, a live mount reused, and each
+ * `ensureMounted()` after a failure makes exactly one new attempt; there is no
+ * timer or retry loop. A caller that has just admitted the native runtime
+ * (native custody reports it ready) calls `ensureMounted()` again.
+ */
+export class CefRuntimeProjectionController {
+    host = null;
+    descriptor = null;
+    connector = null;
+    /** Connectors a later bind replaced: each is disposed when replaced, and its outcome joined by {@link dispose}. */
+    retired = [];
+    listeners = new Set();
+    current = {
+        phase: 'idle',
+        attempts: 0,
+        projection: null,
+        error: null,
+        updatedAt: Date.now()
+    };
+    /**
+     * Bind the runtime, host and descriptor the projection mounts over. A second bind (a second plugin over a shared
+     * controller) first disposes the connector it replaces, so the earlier mount is unmounted, never orphaned; that
+     * disposal's outcome is kept and reported by {@link dispose}.
+     */
+    bind(runtime, host, descriptor) {
+        if (this.connector)
+            this.retired.push(settled(this.connector.dispose()));
+        this.host = host;
+        this.descriptor = descriptor;
+        this.connector = new RpcConnector({
+            lifecycle: runtime.lifecycle,
+            reason: 'cef-projection',
+            open: () => this.mountInternal(runtime),
+            closed: (mount) => mount.connection.closed,
+            // Unmount and join the native close's outcome, bounded on the lifecycle
+            // (inside `onDispose`, by the finalization budget).
+            close: (mount) => runtime.lifecycle.wait(() => mount.close(), {
+                timeoutMs: CEF_RPC_DEFAULT_REQUEST_DEADLINE_MS,
+                reason: 'cef-projection-close'
+            }),
+            live: (mount) => runtime.isRuntimeMountLive(mount.ref)
+        });
+    }
+    snapshot() {
+        return { ...this.current };
+    }
+    subscribe(listener) {
+        this.listeners.add(listener);
+        listener(this.snapshot());
+        return () => this.listeners.delete(listener);
+    }
+    ensureMounted() {
+        if (!this.connector) {
+            this.publish({ phase: 'connecting', attempts: this.current.attempts + 1, projection: null, error: null });
+            const error = cefHostUnavailable('The CEF projection has no bound runtime host.');
+            this.publish({ phase: 'error', projection: null, error: error.reason });
+            return Promise.reject(error);
+        }
+        return this.connector.connect();
+    }
+    /** Unmount and stop: an in-flight mount is cancelled. Resolves once the mount is disposed. */
+    async dispose() {
+        const connector = this.connector;
+        this.connector = null;
+        this.publish({ phase: 'idle', projection: null, error: null });
+        const retired = await Promise.all(this.retired.splice(0));
+        await connector?.dispose();
+        for (const outcome of retired)
+            if (!outcome.ok)
+                rethrow(outcome.failure);
+    }
+    async mountInternal(runtime) {
+        this.publish({
+            phase: 'connecting',
+            attempts: this.current.attempts + 1,
+            projection: null,
+            error: null
+        });
+        const descriptor = this.descriptor;
+        if (!this.host || !descriptor) {
+            const error = cefHostUnavailable('The CEF projection has no bound runtime host.');
+            this.publish({ phase: 'error', projection: null, error: error.reason });
+            throw error;
+        }
+        try {
+            const implementation = await runtime
+                .query(rpcKind.id)
+                .withId(descriptor.id)
+                .resolve();
+            const mount = await mountCefRuntimeProjection(runtime, await implementation.connect());
+            this.publish({
+                phase: 'mounted',
+                projection: mount.projection,
+                error: null
+            });
+            return mount;
+        }
+        catch (cause) {
+            // The status names the failure's typed reason only, never its text (a host error can quote anything).
+            const failure = CaughtFailureSchema.parse(cause);
+            this.publish({ phase: 'error', projection: null, error: isCapabilityError(failure) ? failure.reason : isRpcFailure(failure) ? failure.reason ?? failure.code : RPC_HOST_FAILED });
+            throw cause;
+        }
+    }
+    publish(patch) {
+        this.current = { ...this.current, ...patch, updatedAt: Date.now() };
+        for (const listener of this.listeners)
+            listener(this.snapshot());
+    }
+}
+//# sourceMappingURL=projection-controller.js.map

package/dist/transports/cef/contracts2/projection-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection-controller.js","sourceRoot":"","sources":["../../../../src/transports/cef/contracts2/projection-controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,iBAAiB,EAAmB,MAAM,qBAAqB,CAAC;AAC/G,OAAO,EAAE,YAAY,EAAE,OAAO,EAA4D,MAAM,yBAAyB,CAAC;AAC1H,OAAO,EAAE,OAAO,EAAE,OAAO,EAAgB,MAAM,6CAA6C,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,uDAAuD,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAEpE,OAAO,EAAE,mCAAmC,EAAuB,MAAM,4BAA4B,CAAC;AACtG,OAAO,EAAE,yBAAyB,EAAwB,MAAM,YAAY,CAAC;AAE7E,SAAS,kBAAkB,CAAC,OAAe;IAC1C,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;QAClD,MAAM,EAAE,kBAAkB;QAC1B,SAAS,EAAE,KAAK;QAChB,YAAY,EAAE,gEAAgE;KAC9E,CAAC,CAAC;AACJ,CAAC;AAID;;;;;;;;GAQG;AACH,MAAM,OAAO,8BAA8B;IAClC,IAAI,GAA0B,IAAI,CAAC;IACnC,UAAU,GAAgC,IAAI,CAAC;IAC/C,SAAS,GAAyC,IAAI,CAAC;IAC/D,mHAAmH;IAC3G,OAAO,GAA6B,EAAE,CAAC;IACvC,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;IAChD,OAAO,GAA+B;QAC7C,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,CAAC;QACX,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACrB,CAAC;IAEF;;;;OAIG;IACH,IAAI,CAAC,OAAmB,EAAE,IAA2B,EAAE,UAAgC;QACtF,IAAI,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAkB;YAClD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,gBAAgB;YACxB,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;YACvC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM;YAC1C,wEAAwE;YACxE,oDAAoD;YACpD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE;gBAC3C,SAAS,EAAE,mCAAmC;gBAC9C,MAAM,EAAE,sBAAsB;aAC9B,CAAC;YACH,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC;SACtD,CAAC,CAAC;IACJ,CAAC;IAED,QAAQ;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC5B,CAAC;IAED,SAAS,CAAC,QAAkC;QAC3C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,aAAa;QACZ,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1G,MAAM,KAAK,GAAG,kBAAkB,CAAC,+CAA+C,CAAC,CAAC;YAClF,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACxE,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;IACjC,CAAC;IAED,8FAA8F;IAC9F,KAAK,CAAC,OAAO;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,SAAS,EAAE,OAAO,EAAE,CAAC;QAC3B,KAAK,MAAM,OAAO,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,CAAC,EAAE;gBAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1E,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAAmB;QAC9C,IAAI,CAAC,OAAO,CAAC;YACZ,KAAK,EAAE,YAAY;YACnB,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC;YACnC,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,IAAI;SACX,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,kBAAkB,CAAC,+CAA+C,CAAC,CAAC;YAClF,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACxE,MAAM,KAAK,CAAC;QACb,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,cAAc,GAAG,MAAM,OAAO;iBAClC,KAAK,CAAiD,OAAO,CAAC,EAAE,CAAC;iBACjE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;iBACrB,OAAO,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC,OAAO,EAAE,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC;YACvF,IAAI,CAAC,OAAO,CAAC;gBACZ,KAAK,EAAE,SAAS;gBAChB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,KAAK,EAAE,IAAI;aACX,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,sGAAsG;YACtG,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YAClL,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAEO,OAAO,CAAC,KAA0C;QACzD,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACpE,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC;CACD"}

package/dist/transports/cef/contracts2/runtime-rpc-cef.plugin.d.ts

@@ -0,0 +1,13 @@
+import type { RuntimeRpcCefPluginOptions } from "../../../schemas/contracts/transports/cef/runtime-rpc-cef.plugin.ts";
+export { CefPluginOptionsInput } from "../../../schemas/contracts/transports/cef/runtime-rpc-cef.plugin.ts";
+export type { CefRuntimeProjectionPhase, CefRuntimeProjectionStatus, RuntimeRpcCefPluginOptions } from "../../../schemas/contracts/transports/cef/runtime-rpc-cef.plugin.ts";
+export { CefRuntimeProjectionController } from './projection-controller.ts';
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import { CefRuntimeProjectionController } from './projection-controller.ts';
+/** Synchronous access after the CEF plugin has resolved its runtime-owned client. */
+export declare function getCefRuntimeProjectionController(runtime: RuntimeRef): CefRuntimeProjectionController;
+/** CEF plugin options, read once (protocol/caller-input.ts). The host is native custody (trusted composition): kept by reference and never read here. */
+export declare function createRuntimeRpcCefPlugin(optionsInput?: RuntimeRpcCefPluginOptions): import("@vibesdotdev/kernel").RuntimePlugin;
+export declare const runtimeRpcCefPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default runtimeRpcCefPlugin;
+//# sourceMappingURL=runtime-rpc-cef.plugin.d.ts.map

package/dist/transports/cef/contracts2/runtime-rpc-cef.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-rpc-cef.plugin.d.ts","sourceRoot":"","sources":["../../../../src/transports/cef/contracts2/runtime-rpc-cef.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qEAAqE,CAAC;AAEtH,OAAO,EAAE,qBAAqB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,YAAY,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,qEAAqE,CAAC;AAC7K,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAI5E,OAAO,EAAqE,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAQzH,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAY5E,qFAAqF;AACrF,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,UAAU,GAAG,8BAA8B,CAMrG;AAED,yJAAyJ;AAEzJ,wBAAgB,yBAAyB,CAAC,YAAY,GAAE,0BAA+B,+CAmDtF;AAED,eAAO,MAAM,mBAAmB,6CAA8B,CAAC;AAC/D,eAAe,mBAAmB,CAAC"}

package/dist/transports/cef/contracts2/runtime-rpc-cef.plugin.js

@@ -0,0 +1,79 @@
+import { CefPluginOptionsInput } from "../../../schemas/contracts/transports/cef/runtime-rpc-cef.plugin.js";
+export { CefPluginOptionsInput } from "../../../schemas/contracts/transports/cef/runtime-rpc-cef.plugin.js";
+export { CefRuntimeProjectionController } from "./projection-controller.js";
+/** Registers and optionally mounts the native-custody CEF runtime transport. */
+import { BaseRuntimeClient, getVibesClient, runtimeClientPlugin, tryGetVibesClient } from '@vibesdotdev/kernel/client';
+import { CapabilityError, createRuntimeImplementation, createRuntimePlugin } from '@vibesdotdev/kernel';
+import { rpcKind } from '@vibesdotdev/kernel-rpc';
+import { readInput } from "../../../core/protocol/references/caller-input.js";
+import { createCefRpcDescriptor } from "../contracts1/cef.rpc.descriptor.js";
+import { getCefRuntimeHost } from "./global-host.js";
+import { CefRuntimeProjectionController } from "./projection-controller.js";
+const CEF_PROJECTION_CLIENT_ID = 'runtime-rpc-cef-projection';
+class CefProjectionClient extends BaseRuntimeClient {
+    controller = new CefRuntimeProjectionController();
+    onDispose() {
+        return this.controller.dispose();
+    }
+}
+/** Synchronous access after the CEF plugin has resolved its runtime-owned client. */
+export function getCefRuntimeProjectionController(runtime) {
+    const client = tryGetVibesClient(CEF_PROJECTION_CLIENT_ID, runtime);
+    if (!client)
+        throw new CapabilityError('The CEF projection has no active runtime client.', 'UNAVAILABLE', {
+            reason: 'host-unavailable', retryable: false
+        });
+    return client.controller;
+}
+/** CEF plugin options, read once (protocol/caller-input.ts). The host is native custody (trusted composition): kept by reference and never read here. */
+export function createRuntimeRpcCefPlugin(optionsInput = {}) {
+    const options = readInput('createRuntimeRpcCefPlugin', CefPluginOptionsInput, optionsInput) ?? {};
+    const descriptor = options.descriptor ?? createCefRpcDescriptor();
+    const controllerFor = (runtime) => options.controller ?? getCefRuntimeProjectionController(runtime);
+    return createRuntimePlugin({
+        id: 'runtime-rpc-cef',
+        name: 'Runtime RPC — CEF transport',
+        description: 'Native-custody CEF transport and consumer-runtime federation mount.',
+        async onRegister(runtime) {
+            if (!runtime.hasKind('runtime/client'))
+                await runtime.registerPlugin(runtimeClientPlugin);
+            runtime.registerDescriptor('runtime/client', { kind: 'runtime/client', id: CEF_PROJECTION_CLIENT_ID });
+            runtime.registerLoader('runtime/client', CEF_PROJECTION_CLIENT_ID, async () => ({ impl: CefProjectionClient }));
+            await getVibesClient(CEF_PROJECTION_CLIENT_ID, runtime);
+            // Idempotent: the kind owner (`runtimeRpcPlugin`) or another transport may
+            // already hold runtime/rpc. `kinds: [rpcKind]` would throw on that second owner.
+            if (!runtime.hasKind(rpcKind.id))
+                runtime.registerKind(rpcKind);
+            // Selected only in builds the CEF host serves: the CEF environment (registered first, which orders its
+            // wait for the native ready event ahead of this plugin) serves the namespace as a runtime binding, and a
+            // runtime without it is `host-unavailable` (no polls, no timers, no optional mode).
+            // Per registration: one plugin value registered on several runtimes keeps each runtime's own host.
+            const host = options.host ?? getCefRuntimeHost(runtime);
+            controllerFor(runtime).bind(runtime, host, descriptor);
+            runtime.registerDescriptor(rpcKind.id, descriptor);
+            runtime.registerLoader(rpcKind.id, descriptor.id, async () => {
+                const { createCefRpcImplementation } = await import("../contracts1/cef-transport.impl.js");
+                return createRuntimeImplementation({
+                    kind: rpcKind.id,
+                    id: descriptor.id,
+                    constraint: { hardware: ['consumer'] },
+                    implementation: createCefRpcImplementation(descriptor, host, runtime.lifecycle)
+                });
+            }, { constraint: { hardware: ['consumer'] }, origin: 'runtime-rpc-cef' });
+        },
+        async onActivate(runtime) {
+            if (options.autoMount === false)
+                return;
+            await controllerFor(runtime).ensureMounted();
+        },
+        async onDispose(runtime) {
+            const controller = options.controller ?? runtime
+                .query('runtime/client')
+                .withId(CEF_PROJECTION_CLIENT_ID).peek?.()?.controller;
+            await controller?.dispose();
+        }
+    });
+}
+export const runtimeRpcCefPlugin = createRuntimeRpcCefPlugin();
+export default runtimeRpcCefPlugin;
+//# sourceMappingURL=runtime-rpc-cef.plugin.js.map

package/dist/transports/cef/contracts2/runtime-rpc-cef.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-rpc-cef.plugin.js","sourceRoot":"","sources":["../../../../src/transports/cef/contracts2/runtime-rpc-cef.plugin.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,OAAO,EAAE,qBAAqB,EAAE,MAAM,qEAAqE,CAAC;AAE5G,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAC5E,gFAAgF;AAEhF,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,mBAAmB,EAAE,iBAAiB,EAAgC,MAAM,4BAA4B,CAAC;AACrJ,OAAO,EAAE,eAAe,EAAE,2BAA2B,EAAE,mBAAmB,EAAmB,MAAM,qBAAqB,CAAC;AACzH,OAAO,EACP,OAAO,EACN,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,mDAAmD,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAE5E,MAAM,wBAAwB,GAAG,4BAA4B,CAAC;AAE9D,MAAM,mBAAoB,SAAQ,iBAAiB;IACtC,UAAU,GAAG,IAAI,8BAA8B,EAAE,CAAC;IAExC,SAAS;QACxB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;IACrC,CAAC;CACJ;AAED,qFAAqF;AACrF,MAAM,UAAU,iCAAiC,CAAC,OAAmB;IACjE,MAAM,MAAM,GAAG,iBAAiB,CAAsB,wBAAwB,EAAE,OAAO,CAAC,CAAC;IACzF,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,eAAe,CAAC,kDAAkD,EAAE,aAAa,EAAE;YACtG,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK;SAC/C,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,UAAU,CAAC;AAC7B,CAAC;AAED,yJAAyJ;AAEzJ,MAAM,UAAU,yBAAyB,CAAC,eAA2C,EAAE;IACtF,MAAM,OAAO,GAAG,SAAS,CAAC,2BAA2B,EAAE,qBAAqB,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC;IAClG,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,sBAAsB,EAAE,CAAC;IAClE,MAAM,aAAa,GAAG,CAAC,OAAmB,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,IAAI,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAEhH,OAAO,mBAAmB,CAAC;QAC1B,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,qEAAqE;QAClF,KAAK,CAAC,UAAU,CAAC,OAAO;YACd,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBAAE,MAAM,OAAO,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC;YAC1F,OAAO,CAAC,kBAAkB,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,wBAAwB,EAAE,CAAC,CAAC;YACvG,OAAO,CAAC,cAAc,CAAC,gBAAgB,EAAE,wBAAwB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;YAChH,MAAM,cAAc,CAAsB,wBAAwB,EAAE,OAAO,CAAC,CAAC;YAEtF,2EAA2E;YAC3E,iFAAiF;YACjF,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAAE,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAChE,uGAAuG;YACvG,yGAAyG;YACzG,oFAAoF;YACpF,mGAAmG;YACnG,MAAM,IAAI,GAAmB,OAAO,CAAC,IAAI,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACxE,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;YACvD,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YACnD,OAAO,CAAC,cAAc,CACrB,OAAO,CAAC,EAAE,EACV,UAAU,CAAC,EAAE,EACb,KAAK,IAAI,EAAE;gBACV,MAAM,EAAE,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;gBAC3F,OAAO,2BAA2B,CAAC;oBAClC,IAAI,EAAE,OAAO,CAAC,EAAE;oBAChB,EAAE,EAAE,UAAU,CAAC,EAAE;oBACjB,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE;oBACtC,cAAc,EAAE,0BAA0B,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC;iBAC/E,CAAC,CAAC;YACJ,CAAC,EACD,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CACrE,CAAC;QACH,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,OAAO;YACvB,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK;gBAAE,OAAO;YACxC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QAC9C,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,OAAO;YACtB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO;iBAClC,KAAK,CAA+C,gBAAgB,CAAC;iBACrE,MAAM,CAAC,wBAAwB,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,UAAU,CAAC;YAC3D,MAAM,UAAU,EAAE,OAAO,EAAE,CAAC;QACtC,CAAC;KACD,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,yBAAyB,EAAE,CAAC;AAC/D,eAAe,mBAAmB,CAAC"}

package/dist/transports/http/auth/cors.d.ts

@@ -0,0 +1,25 @@
+import type { CorsConfig, CorsResolution } from "../../../schemas/contracts/transports/http/auth/cors.ts";
+export type { CorsConfig, CorsResolution } from "../../../schemas/contracts/transports/http/auth/cors.ts";
+/**
+ * CORS allowlist for the runtime rpc-http transport — lifted from the daemon's
+ * `auth/cors.ts`, adapted for the rpc-http package.
+ *
+ * Defaults to a small set of trusted origins (`workspace://`, `vibes://`, the
+ * dev origin). Entries are matched by exact string or scheme-prefix (`vibes://`
+ * matches any origin starting with that scheme). `*` is opt-in via `allowAny`.
+ */
+export declare const DEFAULT_CORS_ALLOWED_ORIGINS: readonly string[];
+export declare class CorsPolicy {
+    private readonly allowedOrigins;
+    private readonly allowAny;
+    constructor(config?: Partial<CorsConfig>);
+    isAllowed(origin: string | null): boolean;
+    /**
+     * Build CORS response headers for a request from {@link origin}.
+     * Returns `allowed=false` and an empty header set if not permitted.
+     */
+    resolve(origin: string | null): CorsResolution;
+}
+/** Parse an env-var allowlist string into entries. */
+export declare function parseAllowedOriginsEnv(raw: string | undefined): string[] | undefined;
+//# sourceMappingURL=cors.d.ts.map

package/dist/transports/http/auth/cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../../src/transports/http/auth/cors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AAC1G,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AAC1G;;;;;;;GAOG;AAEH,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAKzD,CAAC;AAKF,qBAAa,UAAU;IACtB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoB;IACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;gBAEvB,MAAM,GAAE,OAAO,CAAC,UAAU,CAAM;IAK5C,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO;IAczC;;;OAGG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,cAAc;CAyB9C;AAED,sDAAsD;AACtD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,SAAS,CAMpF"}

package/dist/transports/http/auth/cors.js

@@ -0,0 +1,81 @@
+/**
+ * CORS allowlist for the runtime rpc-http transport — lifted from the daemon's
+ * `auth/cors.ts`, adapted for the rpc-http package.
+ *
+ * Defaults to a small set of trusted origins (`workspace://`, `vibes://`, the
+ * dev origin). Entries are matched by exact string or scheme-prefix (`vibes://`
+ * matches any origin starting with that scheme). `*` is opt-in via `allowAny`.
+ */
+export const DEFAULT_CORS_ALLOWED_ORIGINS = [
+    'workspace://',
+    'vibes://',
+    'http://localhost:5173',
+    'http://127.0.0.1:5173'
+];
+const ALLOWED_HEADERS = 'Content-Type, Authorization, X-RPC-Connection';
+const ALLOWED_METHODS = 'GET, POST, OPTIONS';
+export class CorsPolicy {
+    allowedOrigins;
+    allowAny;
+    constructor(config = {}) {
+        this.allowedOrigins = config.allowedOrigins ?? DEFAULT_CORS_ALLOWED_ORIGINS;
+        this.allowAny = config.allowAny ?? false;
+    }
+    isAllowed(origin) {
+        if (this.allowAny)
+            return true;
+        if (!origin)
+            return false;
+        for (const entry of this.allowedOrigins) {
+            if (entry === '*')
+                return true;
+            if (entry.endsWith('://')) {
+                if (origin.startsWith(entry))
+                    return true;
+            }
+            else if (origin === entry) {
+                return true;
+            }
+        }
+        return false;
+    }
+    /**
+     * Build CORS response headers for a request from {@link origin}.
+     * Returns `allowed=false` and an empty header set if not permitted.
+     */
+    resolve(origin) {
+        if (this.allowAny) {
+            return {
+                allowed: true,
+                headers: {
+                    'Access-Control-Allow-Origin': '*',
+                    'Access-Control-Allow-Methods': ALLOWED_METHODS,
+                    'Access-Control-Allow-Headers': ALLOWED_HEADERS,
+                    Vary: 'Origin'
+                }
+            };
+        }
+        if (!this.isAllowed(origin)) {
+            return { allowed: false, headers: {} };
+        }
+        return {
+            allowed: true,
+            headers: {
+                'Access-Control-Allow-Origin': origin,
+                'Access-Control-Allow-Methods': ALLOWED_METHODS,
+                'Access-Control-Allow-Headers': ALLOWED_HEADERS,
+                Vary: 'Origin'
+            }
+        };
+    }
+}
+/** Parse an env-var allowlist string into entries. */
+export function parseAllowedOriginsEnv(raw) {
+    if (!raw)
+        return undefined;
+    return raw
+        .split(',')
+        .map((s) => s.trim())
+        .filter((s) => s.length > 0);
+}
+//# sourceMappingURL=cors.js.map

package/dist/transports/http/auth/cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.js","sourceRoot":"","sources":["../../../../src/transports/http/auth/cors.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAsB;IAC9D,cAAc;IACd,UAAU;IACV,uBAAuB;IACvB,uBAAuB;CACvB,CAAC;AAEF,MAAM,eAAe,GAAG,+CAA+C,CAAC;AACxE,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAE7C,MAAM,OAAO,UAAU;IACL,cAAc,CAAoB;IAClC,QAAQ,CAAU;IAEnC,YAAY,SAA8B,EAAE;QAC3C,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,4BAA4B,CAAC;QAC5E,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC;IAC1C,CAAC;IAED,SAAS,CAAC,MAAqB;QAC9B,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACzC,IAAI,KAAK,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YAC/B,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;YAC3C,CAAC;iBAAM,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,MAAqB;QAC5B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO;gBACN,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACR,6BAA6B,EAAE,GAAG;oBAClC,8BAA8B,EAAE,eAAe;oBAC/C,8BAA8B,EAAE,eAAe;oBAC/C,IAAI,EAAE,QAAQ;iBACd;aACD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACxC,CAAC;QACD,OAAO;YACN,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACR,6BAA6B,EAAE,MAAO;gBACtC,8BAA8B,EAAE,eAAe;gBAC/C,8BAA8B,EAAE,eAAe;gBAC/C,IAAI,EAAE,QAAQ;aACd;SACD,CAAC;IACH,CAAC;CACD;AAED,sDAAsD;AACtD,MAAM,UAAU,sBAAsB,CAAC,GAAuB;IAC7D,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,GAAG;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC/B,CAAC"}

package/dist/transports/http/auth/credential.d.ts

@@ -0,0 +1,11 @@
+import type { RpcCredentialRuntime } from "../../../schemas/contracts/transports/http/auth/credential.ts";
+export type { RpcCredentialRuntime } from "../../../schemas/contracts/transports/http/auth/credential.ts";
+import { type CredentialReference } from '@vibesdotdev/kernel/credentials';
+/** The reason a resolved credential that cannot ride a bearer header is refused with. */
+export declare const RPC_CREDENTIAL_INVALID = "rpc-credential-invalid";
+/**
+ * Resolve a connection-credential reference to the bearer string the consumer
+ * sends. Rejects with the runtime's typed failure (names only, never a value).
+ */
+export declare function resolveConnectionToken(refInput: CredentialReference, runtime: RpcCredentialRuntime): Promise<string>;
+//# sourceMappingURL=credential.d.ts.map

package/dist/transports/http/auth/credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.d.ts","sourceRoot":"","sources":["../../../../src/transports/http/auth/credential.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+DAA+D,CAAC;AAC1G,YAAY,EAAE,oBAAoB,EAAE,MAAM,+DAA+D,CAAC;AAiB1G,OAAO,EAA6B,KAAK,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAGtG,yFAAyF;AACzF,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAE/D;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAY1H"}

package/dist/transports/http/auth/credential.js

@@ -0,0 +1,38 @@
+/**
+ * Connect-time credential resolution for the http and relay transports' `auth`.
+ *
+ * The descriptor's `auth` is a kernel `CredentialReference`, never a bare token
+ * (doc 11 §L4). At connect time the transport resolves it through the owning
+ * runtime's `resolveCredential` (D-RC05: the runtime is the only credential
+ * resolver) and sends the value as `Authorization: Bearer …`. A failed
+ * resolution is the runtime's typed `CapabilityError`, thrown as is.
+ *
+ * The reference is read once (`readInput`): a hostile one is `INVALID_INPUT` `rpc-input-invalid`. A resolved value
+ * that cannot ride a bearer header (empty, over 65536 characters, or holding anything but visible ASCII: a newline,
+ * a space, a non-ASCII character) is refused `INVALID_INPUT` `rpc-credential-invalid` naming the reference's key
+ * only: `fetch` would refuse it by quoting the whole value in its error.
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { CredentialReferenceSchema } from '@vibesdotdev/kernel/credentials';
+import { BearerTokenInput, readInput } from "../../../core/protocol/references/caller-input.js";
+/** The reason a resolved credential that cannot ride a bearer header is refused with. */
+export const RPC_CREDENTIAL_INVALID = 'rpc-credential-invalid';
+/**
+ * Resolve a connection-credential reference to the bearer string the consumer
+ * sends. Rejects with the runtime's typed failure (names only, never a value).
+ */
+export async function resolveConnectionToken(refInput, runtime) {
+    const ref = readInput('resolveConnectionToken', CredentialReferenceSchema, refInput);
+    const resolution = await runtime.resolveCredential(ref);
+    if (!resolution.ok)
+        throw resolution.error;
+    if (!BearerTokenInput.safeParse(resolution.value).success) {
+        throw new CapabilityError(`The connection credential '${ref.key}' cannot be sent as a bearer token.`, 'INVALID_INPUT', {
+            reason: RPC_CREDENTIAL_INVALID,
+            retryable: false,
+            details: { key: ref.key }
+        });
+    }
+    return resolution.value;
+}
+//# sourceMappingURL=credential.js.map

package/dist/transports/http/auth/credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.js","sourceRoot":"","sources":["../../../../src/transports/http/auth/credential.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAA4B,MAAM,iCAAiC,CAAC;AACtG,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,mDAAmD,CAAC;AAEhG,yFAAyF;AACzF,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAE/D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,QAA6B,EAAE,OAA6B;IACxG,MAAM,GAAG,GAAG,SAAS,CAAC,wBAAwB,EAAE,yBAAyB,EAAE,QAAQ,CAAC,CAAC;IACrF,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,MAAM,UAAU,CAAC,KAAK,CAAC;IAC3C,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;QAC3D,MAAM,IAAI,eAAe,CAAC,8BAA8B,GAAG,CAAC,GAAG,qCAAqC,EAAE,eAAe,EAAE;YACtH,MAAM,EAAE,sBAAsB;YAC9B,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE;SACzB,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC,KAAK,CAAC;AACzB,CAAC"}

package/dist/transports/http/auth/nonces.d.ts

@@ -0,0 +1,31 @@
+import type { NonceConsumption, NonceMintOptions, NonceMintResult } from "../../../schemas/contracts/transports/http/auth/nonces.ts";
+export type { NonceConsumption, NonceMintOptions, NonceMintResult } from "../../../schemas/contracts/transports/http/auth/nonces.ts";
+export declare const DEFAULT_NONCE_TTL_MS = 60000;
+/**
+ * Single-use nonce store for SSE stream openers. Lifetime is per-connection:
+ * the http listen session owns one store; it is disposed on session teardown.
+ *
+ * Expired nonces are swept as new ones are minted, at most once per
+ * `cleanupIntervalMs`: the store's memory stays bounded by its own traffic and
+ * it keeps no timer (RC07), so it never outlives or pins its owner.
+ */
+export declare class SubscribeNonceStore {
+    private readonly nonces;
+    private readonly defaultTtlMs;
+    private readonly cleanupIntervalMs;
+    private lastSweepAt;
+    constructor(options?: {
+        defaultTtlMs?: number;
+        cleanupIntervalMs?: number;
+    });
+    mint(options?: NonceMintOptions): NonceMintResult;
+    /**
+     * Consume a nonce. Returns the binding if the nonce exists and is unexpired,
+     * otherwise null. The nonce is removed regardless to prevent retries.
+     */
+    consume(nonce: string): NonceConsumption | null;
+    cleanup(): void;
+    size(): number;
+    dispose(): void;
+}
+//# sourceMappingURL=nonces.d.ts.map

package/dist/transports/http/auth/nonces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonces.d.ts","sourceRoot":"","sources":["../../../../src/transports/http/auth/nonces.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,2DAA2D,CAAC;AACrI,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,2DAA2D,CAAC;AAoBrI,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAc3C;;;;;;;GAOG;AACH,qBAAa,mBAAmB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IACzD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,WAAW,CAAc;gBAErB,OAAO,GAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAO;IAK/E,IAAI,CAAC,OAAO,GAAE,gBAAqB,GAAG,eAAe;IAarD;;;OAGG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAQ/C,OAAO,IAAI,IAAI;IASf,IAAI,IAAI,MAAM;IAId,OAAO,IAAI,IAAI;CAGf"}