@vibesdotdev/kernel-rpc 0.0.0-stage → 1.0.0-rc.2

package/dist/transports/http/auth/nonces.js

@@ -0,0 +1,70 @@
+export const DEFAULT_NONCE_TTL_MS = 60_000;
+const NONCE_BYTES = 32;
+/** Generate a 256-bit random nonce, base64url-encoded. */
+function generateNonceValue() {
+    const bytes = new Uint8Array(NONCE_BYTES);
+    crypto.getRandomValues(bytes);
+    let binary = '';
+    for (let i = 0; i < bytes.length; i++) {
+        binary += String.fromCharCode(bytes[i]);
+    }
+    return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+/**
+ * Single-use nonce store for SSE stream openers. Lifetime is per-connection:
+ * the http listen session owns one store; it is disposed on session teardown.
+ *
+ * Expired nonces are swept as new ones are minted, at most once per
+ * `cleanupIntervalMs`: the store's memory stays bounded by its own traffic and
+ * it keeps no timer (RC07), so it never outlives or pins its owner.
+ */
+export class SubscribeNonceStore {
+    nonces = new Map();
+    defaultTtlMs;
+    cleanupIntervalMs;
+    lastSweepAt = Date.now();
+    constructor(options = {}) {
+        this.defaultTtlMs = options.defaultTtlMs ?? DEFAULT_NONCE_TTL_MS;
+        this.cleanupIntervalMs = options.cleanupIntervalMs ?? 30_000;
+    }
+    mint(options = {}) {
+        const now = Date.now();
+        if (now - this.lastSweepAt >= this.cleanupIntervalMs) {
+            this.lastSweepAt = now;
+            this.cleanup();
+        }
+        const ttlMs = options.ttlMs ?? this.defaultTtlMs;
+        const expiresAt = now + ttlMs;
+        const nonce = generateNonceValue();
+        this.nonces.set(nonce, { expiresAt, binding: options.binding });
+        return { nonce, expiresAt: new Date(expiresAt).toISOString() };
+    }
+    /**
+     * Consume a nonce. Returns the binding if the nonce exists and is unexpired,
+     * otherwise null. The nonce is removed regardless to prevent retries.
+     */
+    consume(nonce) {
+        const stored = this.nonces.get(nonce);
+        if (!stored)
+            return null;
+        this.nonces.delete(nonce);
+        if (stored.expiresAt < Date.now())
+            return null;
+        return { binding: stored.binding };
+    }
+    cleanup() {
+        const now = Date.now();
+        for (const [nonce, stored] of this.nonces) {
+            if (stored.expiresAt < now) {
+                this.nonces.delete(nonce);
+            }
+        }
+    }
+    size() {
+        return this.nonces.size;
+    }
+    dispose() {
+        this.nonces.clear();
+    }
+}
+//# sourceMappingURL=nonces.js.map

package/dist/transports/http/auth/nonces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonces.js","sourceRoot":"","sources":["../../../../src/transports/http/auth/nonces.ts"],"names":[],"mappings":"AAqBA,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAC3C,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB,0DAA0D;AAC1D,SAAS,kBAAkB;IAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,mBAAmB;IACd,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxC,YAAY,CAAS;IACrB,iBAAiB,CAAS;IACnC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEjC,YAAY,UAAiE,EAAE;QAC9E,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,oBAAoB,CAAC;QACjE,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,MAAM,CAAC;IAC9D,CAAC;IAED,IAAI,CAAC,UAA4B,EAAE;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACtD,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;YACvB,IAAI,CAAC,OAAO,EAAE,CAAC;QAChB,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC;QACjD,MAAM,SAAS,GAAG,GAAG,GAAG,KAAK,CAAC;QAC9B,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IAChE,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,KAAa;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACpC,CAAC;IAED,OAAO;QACN,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3C,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI;QACH,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,OAAO;QACN,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACD"}

package/dist/transports/http/auth/redact.d.ts

@@ -0,0 +1,17 @@
+import type { RedactStackOptions } from "../../../schemas/contracts/transports/http/auth/redact.ts";
+export type { RedactStackOptions } from "../../../schemas/contracts/transports/http/auth/redact.ts";
+import { type RpcData } from '../../../core/protocol/wire/rpc-data.ts';
+import type { JsonDocument } from '../../../schemas/descriptor-wire.ts';
+/**
+ * Strip any `stack` field (recursively) from wire data unless `debug` is set.
+ * The data is the validated snapshot of an error envelope (`snapshotInline`),
+ * so it is read as data, never re-read from the original.
+ *
+ * The walk is bounded and linear: each node is copied once and a node reached again (a shared subtree, a cycle)
+ * answers its one copy, so a shared DAG costs its node count, not its path count; a node nested deeper than
+ * `RPC_MAX_DATA_DEPTH` (128) is not `RpcData`. A value that is not wire data (too deep, or unreadable: a throwing
+ * getter, a Proxy) is refused `INVALID_INPUT` `rpc-input-invalid`, never a raw throw or a stack overflow.
+ */
+export declare function redactStackTraces(value: JsonDocument, options: RedactStackOptions): JsonDocument;
+export declare function redactStackTraces(value: RpcData, options: RedactStackOptions): RpcData;
+//# sourceMappingURL=redact.d.ts.map

package/dist/transports/http/auth/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../../../src/transports/http/auth/redact.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2DAA2D,CAAC;AACpG,YAAY,EAAE,kBAAkB,EAAE,MAAM,2DAA2D,CAAC;AAoBpG,OAAO,EAA6B,KAAK,OAAO,EAAE,MAAM,yCAAyC,CAAC;AAClG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAMxE;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,kBAAkB,GAAG,YAAY,CAAC;AAClG,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC"}

package/dist/transports/http/auth/redact.js

@@ -0,0 +1,60 @@
+/**
+ * Stack-trace redaction for error responses sent over http — lifted from the
+ * daemon's `auth/redact.ts`.
+ *
+ * The unix transport's caller already has OS-level access (the socket is `0o600`),
+ * so a leaked stack adds no risk. The http transport faces a remote caller across
+ * a reverse proxy / Tailscale / a paired peer — surfacing internal file paths and
+ * module structure hands an attacker free recon. Stacks cross only when the
+ * operator opts in (`debug: true`).
+ *
+ * This redacts the WIRE error response, not the in-process gate decision — a gate
+ * veto (authz/friction) still carries its stable SCREAMING_SNAKE `code` and
+ * `message`; only the `stack`/`details.stack` fields are stripped.
+ */
+import { isCapabilityError } from '@vibesdotdev/kernel';
+import { attempt, rethrow } from "../../../core/protocol/lifecycle/attempt.js";
+import { inputInvalid, RPC_INPUT_INVALID } from "../../../core/protocol/references/caller-input.js";
+import { RPC_MAX_DATA_DEPTH } from "../../../core/protocol/wire/limits.js";
+import { isDataArray, isDataObject } from "../../../core/protocol/wire/rpc-data.js";
+const STACK_KEY = 'stack';
+const ENTRY = 'redactStackTraces';
+export function redactStackTraces(value, options) {
+    if (options.debug)
+        return value;
+    const walked = attempt(() => walk(value, 0, new Map()));
+    if (walked.ok)
+        return walked.value;
+    if (isCapabilityError(walked.failure) && walked.failure.reason === RPC_INPUT_INVALID)
+        return rethrow(walked.failure);
+    throw inputInvalid(ENTRY, ['(unreadable)']);
+}
+function walk(value, depth, copies) {
+    if (depth > RPC_MAX_DATA_DEPTH)
+        throw inputInvalid(ENTRY, ['(depth)']);
+    if (!isDataArray(value) && !isDataObject(value))
+        return value;
+    const known = copies.get(value);
+    if (known !== undefined)
+        return known;
+    if (isDataArray(value)) {
+        const out = [];
+        copies.set(value, out);
+        for (const child of value)
+            out.push(walk(child, depth + 1, copies));
+        return out;
+    }
+    if (!isDataObject(value))
+        return value;
+    const out = {};
+    copies.set(value, out);
+    for (const [key, child] of Object.entries(value)) {
+        if (key === STACK_KEY)
+            continue;
+        Object.defineProperty(out, key, {
+            value: walk(child, depth + 1, copies), enumerable: true, writable: true, configurable: true
+        });
+    }
+    return out;
+}
+//# sourceMappingURL=redact.js.map

package/dist/transports/http/auth/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../../../src/transports/http/auth/redact.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,6CAA6C,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,mDAAmD,CAAC;AACpG,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,YAAY,EAAgB,MAAM,yCAAyC,CAAC;AAGlG,MAAM,SAAS,GAAG,OAAO,CAAC;AAE1B,MAAM,KAAK,GAAG,mBAAmB,CAAC;AAclC,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,OAA2B;IAC5E,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAChC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IACnC,IAAI,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,iBAAiB;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrH,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa,EAAE,MAA4B;IACxE,IAAI,KAAK,GAAG,kBAAkB;QAAE,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAc,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvB,KAAK,MAAM,KAAK,IAAI,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACpE,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI;SAC3F,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/dist/transports/http/auth/token-registry.d.ts

@@ -0,0 +1,22 @@
+import type { ConnectionAuthInfo } from "../../../schemas/contracts/transports/http/auth/token-registry.ts";
+export type { ConnectionAuthInfo } from "../../../schemas/contracts/transports/http/auth/token-registry.ts";
+/**
+ * In-memory registry of valid connection bearer tokens. Keyed by the raw token
+ * value. The owner registers the token(s) the listen side will accept; phase-4
+ * bootstrap resolves the descriptor's `auth` `CredentialReference` to the value
+ * registered here.
+ */
+export declare class TokenRegistry {
+    private readonly tokens;
+    /** Register a connection token. Idempotent. */
+    register(token: string, info?: ConnectionAuthInfo): void;
+    /** Drop a token (e.g. on rotation). */
+    unregister(token: string): void;
+    /** Resolve a bearer to its connection info, or `null` if unknown. */
+    resolve(token: string): ConnectionAuthInfo | null;
+    /** Is this bearer a known connection credential? Connection-level only — NO verb scope. */
+    accepts(token: string): boolean;
+    /** Number of registered tokens (diagnostic). */
+    get size(): number;
+}
+//# sourceMappingURL=token-registry.d.ts.map

package/dist/transports/http/auth/token-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-registry.d.ts","sourceRoot":"","sources":["../../../../src/transports/http/auth/token-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mEAAmE,CAAC;AAC5G,YAAY,EAAE,kBAAkB,EAAE,MAAM,mEAAmE,CAAC;AAC5G;;;;;GAKG;AACH,qBAAa,aAAa;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAEhE,+CAA+C;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,kBAAuB,GAAG,IAAI;IAI5D,uCAAuC;IACvC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI/B,qEAAqE;IACrE,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI;IAIjD,2FAA2F;IAC3F,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAI/B,gDAAgD;IAChD,IAAI,IAAI,IAAI,MAAM,CAEjB;CACD"}

package/dist/transports/http/auth/token-registry.js

@@ -0,0 +1,30 @@
+/**
+ * In-memory registry of valid connection bearer tokens. Keyed by the raw token
+ * value. The owner registers the token(s) the listen side will accept; phase-4
+ * bootstrap resolves the descriptor's `auth` `CredentialReference` to the value
+ * registered here.
+ */
+export class TokenRegistry {
+    tokens = new Map();
+    /** Register a connection token. Idempotent. */
+    register(token, info = {}) {
+        this.tokens.set(token, info);
+    }
+    /** Drop a token (e.g. on rotation). */
+    unregister(token) {
+        this.tokens.delete(token);
+    }
+    /** Resolve a bearer to its connection info, or `null` if unknown. */
+    resolve(token) {
+        return this.tokens.get(token) ?? null;
+    }
+    /** Is this bearer a known connection credential? Connection-level only — NO verb scope. */
+    accepts(token) {
+        return this.tokens.has(token);
+    }
+    /** Number of registered tokens (diagnostic). */
+    get size() {
+        return this.tokens.size;
+    }
+}
+//# sourceMappingURL=token-registry.js.map

package/dist/transports/http/auth/token-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-registry.js","sourceRoot":"","sources":["../../../../src/transports/http/auth/token-registry.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,OAAO,aAAa;IACR,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEhE,+CAA+C;IAC/C,QAAQ,CAAC,KAAa,EAAE,OAA2B,EAAE;QACpD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,uCAAuC;IACvC,UAAU,CAAC,KAAa;QACvB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,qEAAqE;IACrE,OAAO,CAAC,KAAa;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IACvC,CAAC;IAED,2FAA2F;IAC3F,OAAO,CAAC,KAAa;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,gDAAgD;IAChD,IAAI,IAAI;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IACzB,CAAC;CACD"}

package/dist/transports/http/consumer/connect-http.d.ts

@@ -0,0 +1,8 @@
+import type { RpcConnection } from '@vibesdotdev/kernel-rpc';
+import type { ConnectHttpOptions } from "../../../schemas/contracts/transports/http/http-transport.impl.ts";
+/** `connectHttp` input, read once (protocol/caller-input.ts). */
+/** The `ConnectHttpOptions` fields a projection mount forwards (its lifecycle is the mounting runtime's). */
+/** Every field of {@link HttpListenOptions}, read once by `listenHttp`. */
+/** Open an http connection to a listening runtime. Returns an {@link RpcConnection}. */
+export declare function connectHttp(originInput: string, optionsInput: ConnectHttpOptions): Promise<RpcConnection>;
+//# sourceMappingURL=connect-http.d.ts.map

package/dist/transports/http/consumer/connect-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-http.d.ts","sourceRoot":"","sources":["../../../../src/transports/http/consumer/connect-http.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAc,MAAM,yBAAyB,CAAC;AASzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mEAAmE,CAAC;AAK5G,iEAAiE;AAEjE,6GAA6G;AAE7G,2EAA2E;AAM3E,wFAAwF;AACxF,wBAAsB,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CA2G/G"}

package/dist/transports/http/consumer/connect-http.js

@@ -0,0 +1,137 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { RPC_ERROR, asRefId, attemptRpcConnect } from '@vibesdotdev/kernel-rpc';
+import { attempt, attemptAsync } from "../../../core/protocol/lifecycle/attempt.js";
+import { readInput } from "../../../core/protocol/references/caller-input.js";
+import { FailureDescriber } from "../../../core/protocol/transport/failure-describer.js";
+import { guardFetch } from "../../../core/protocol/transport/fetch-failure.js";
+import { LOCAL_ATTESTATION_CALLER_HEADER, encodeAttestedCaller, revealLocalAttestation } from "../../../core/protocol/transport/local-attestation.js";
+import { rpcError, rpcFailure, wireError } from "../../../core/protocol/wire/verbs.js";
+import { ConnectHttpInput } from "../../../schemas/contracts/transports/http/http-transport.impl.js";
+import { HTTP_REVERSE_CALLS_QUERY, HTTP_WIRE_DATES_QUERY, HttpHandshakeRefusalSchema, HttpHandshakeSchema, RPC_HTTP_ROUTE } from "../wire.js";
+import { HttpConnection, ownHttpConnectionLifetime } from "./http-connection.js";
+/** `connectHttp` input, read once (protocol/caller-input.ts). */
+/** The `ConnectHttpOptions` fields a projection mount forwards (its lifecycle is the mounting runtime's). */
+/** Every field of {@link HttpListenOptions}, read once by `listenHttp`. */
+// ---------------------------------------------------------------------------
+// CONNECT SIDE (consumer)
+// ---------------------------------------------------------------------------
+/** Open an http connection to a listening runtime. Returns an {@link RpcConnection}. */
+export async function connectHttp(originInput, optionsInput) {
+    const { origin, options } = readInput('connectHttp', ConnectHttpInput, { origin: originInput, options: optionsInput });
+    if (options.token && options.attestation) {
+        throw new CapabilityError('connectHttp takes a bearer token or a local attestation, not both.', 'INVALID_INPUT', {
+            reason: 'rpc-connect-credential-ambiguous',
+            retryable: false
+        });
+    }
+    const bearerToken = options.attestation ? revealLocalAttestation(options.attestation.token) : options.token;
+    // The bearer (a token, or the attestation secret) is this connection's secret: no failure it keeps or returns carries it.
+    const describer = new FailureDescriber([bearerToken]);
+    const fetchImpl = guardFetch(options.fetchImpl ?? globalThis.fetch.bind(globalThis), describer);
+    const url = new URL(RPC_HTTP_ROUTE.CONNECT, origin);
+    const headers = {};
+    if (options.wireDates !== false)
+        url.searchParams.set(HTTP_WIRE_DATES_QUERY, '1');
+    if (options.callbacks)
+        url.searchParams.set(HTTP_REVERSE_CALLS_QUERY, '1');
+    if (bearerToken)
+        headers['authorization'] = `Bearer ${bearerToken}`;
+    if (options.attestation)
+        headers[LOCAL_ATTESTATION_CALLER_HEADER] = encodeAttestedCaller(options.attestation.caller);
+    const timeoutMs = options.timeoutMs ?? 5000;
+    const finishLifetime = ownHttpConnectionLifetime(options.lifecycle);
+    let dialStarted = false;
+    try {
+        return await attemptRpcConnect({
+            lifecycle: options.lifecycle,
+            timeoutMs,
+            reason: 'rpc-http-connect',
+            signal: options.signal,
+            dial: async (signal) => {
+                dialStarted = true;
+                let transferred = false;
+                try {
+                    const fetched = await attemptAsync(() => fetchImpl(url, { method: 'GET', headers, signal }));
+                    if (!fetched.ok) {
+                        if (signal.aborted)
+                            throw signal.reason;
+                        throw rpcFailure(RPC_ERROR.DISCONNECTED, describer.describe(fetched.failure).message);
+                    }
+                    const res = fetched.value;
+                    if (res.status === 401 || res.status === 403) {
+                        throw rpcFailure('RPC_UNAUTHENTICATED', `connection rejected: http ${res.status}`);
+                    }
+                    if (res.status === 400) {
+                        // The owner refused the handshake typed (e.g. `rpc-attested-caller-invalid`): its code and reason are the
+                        // failure, never its text or details, which are response text and may echo the bearer. An unreadable
+                        // body still carries the status.
+                        const text = await attemptAsync(() => res.text());
+                        if (!text.ok)
+                            throw describer.describe(text.failure);
+                        let refusal;
+                        const body = attempt(() => JSON.parse(text.value));
+                        if (body.ok) {
+                            const parsed = HttpHandshakeRefusalSchema.safeParse(body.value);
+                            if (parsed.success)
+                                refusal = parsed.data;
+                        }
+                        else if (!(body.failure instanceof SyntaxError)) {
+                            throw describer.describe(body.failure);
+                        }
+                        if (refusal) {
+                            const { code, reason } = describer.describeWireError(refusal.error);
+                            throw wireError(rpcError(code, 'The owner refused the handshake.', undefined, reason));
+                        }
+                        throw rpcFailure(RPC_ERROR.DISCONNECTED, 'handshake refused: http 400', { status: 400 });
+                    }
+                    if (!res.ok) {
+                        throw rpcFailure(RPC_ERROR.DISCONNECTED, `handshake failed: http ${res.status}`);
+                    }
+                    const read = await attemptAsync(() => res.json());
+                    if (!read.ok) {
+                        if (read.failure instanceof SyntaxError)
+                            throw rpcFailure(RPC_ERROR.DISCONNECTED, 'Invalid RPC handshake.', undefined, 'rpc-handshake-invalid');
+                        throw describer.describe(read.failure);
+                    }
+                    const parsedHandshake = HttpHandshakeSchema.safeParse(read.value);
+                    if (!parsedHandshake.success)
+                        throw rpcFailure(RPC_ERROR.DISCONNECTED, 'Invalid RPC handshake.', undefined, 'rpc-handshake-invalid');
+                    const handshake = parsedHandshake.data;
+                    const connection = new HttpConnection({
+                        origin,
+                        connectionId: handshake.connectionId,
+                        rootRef: handshake.rootRef,
+                        token: bearerToken,
+                        fetchImpl,
+                        lifecycle: options.lifecycle,
+                        wireDates: options.wireDates !== false && handshake.wire?.dates === true,
+                        reverseCalls: options.callbacks === true && handshake.reverseCalls === true
+                    }, finishLifetime);
+                    transferred = true;
+                    const transport = {
+                        rootRef: asRefId(handshake.rootRef),
+                        send: (req) => connection.send(req),
+                        openStream: (ref, channel) => connection.openStream(ref, channel),
+                        closed: connection.closed,
+                        close: async () => connection.close()
+                    };
+                    return options.callbacks === true && handshake.reverseCalls === true
+                        ? { ...transport, onRequest: (handler) => connection.onRequest(handler) }
+                        : transport;
+                }
+                finally {
+                    if (!transferred)
+                        finishLifetime();
+                }
+            },
+            discard: (late) => late.close(),
+            timedOut: (deadline) => rpcFailure(RPC_ERROR.DISCONNECTED, `handshake timed out after ${timeoutMs}ms`, deadline.details, 'rpc-handshake-timeout')
+        });
+    }
+    finally {
+        // A refused wait starts no dial. An in-flight dial retains this ownership until it settles.
+        if (!dialStarted)
+            finishLifetime();
+    }
+}
+//# sourceMappingURL=connect-http.js.map

package/dist/transports/http/consumer/connect-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-http.js","sourceRoot":"","sources":["../../../../src/transports/http/consumer/connect-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEhF,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,EAAE,SAAS,EAAE,MAAM,mDAAmD,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,uDAAuD,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,MAAM,mDAAmD,CAAC;AAC/E,OAAO,EAAE,+BAA+B,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,uDAAuD,CAAC;AACtJ,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,sCAAsC,CAAC;AAEvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,mEAAmE,CAAC;AACrG,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC9I,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEjF,iEAAiE;AAEjE,6GAA6G;AAE7G,2EAA2E;AAE3E,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,WAAmB,EAAE,YAAgC;IACtF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,aAAa,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IACvH,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,IAAI,eAAe,CAAC,oEAAoE,EAAE,eAAe,EAAE;YAChH,MAAM,EAAE,kCAAkC;YAC1C,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5G,0HAA0H;IAC1H,MAAM,SAAS,GAAG,IAAI,gBAAgB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC;IAChG,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;IAClF,IAAI,OAAO,CAAC,SAAS;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAC3E,IAAI,WAAW;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,WAAW,EAAE,CAAC;IACpE,IAAI,OAAO,CAAC,WAAW;QAAE,OAAO,CAAC,+BAA+B,CAAC,GAAG,oBAAoB,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACrH,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;IAC5C,MAAM,cAAc,GAAG,yBAAyB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpE,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,IAAI,CAAC;QACJ,OAAO,MAAM,iBAAiB,CAAC;YAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS;YACT,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACtB,WAAW,GAAG,IAAI,CAAC;gBACnB,IAAI,WAAW,GAAG,KAAK,CAAC;gBACxB,IAAI,CAAC;oBACJ,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;oBAC7F,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;wBACjB,IAAI,MAAM,CAAC,OAAO;4BAAE,MAAM,MAAM,CAAC,MAAM,CAAC;wBACxC,MAAM,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC;oBACvF,CAAC;oBACD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC;oBAC1B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBAC9C,MAAM,UAAU,CAAC,qBAAqB,EAAE,6BAA6B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;oBACpF,CAAC;oBACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACxB,0GAA0G;wBAC1G,qGAAqG;wBACrG,iCAAiC;wBACjC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;wBAClD,IAAI,CAAC,IAAI,CAAC,EAAE;4BAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBACrD,IAAI,OAA+D,CAAC;wBACpE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;wBACnD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;4BACb,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;4BAChE,IAAI,MAAM,CAAC,OAAO;gCAAE,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;wBAC3C,CAAC;6BAAM,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,YAAY,WAAW,CAAC,EAAE,CAAC;4BACnD,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBACxC,CAAC;wBACD,IAAI,OAAO,EAAE,CAAC;4BACb,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;4BACpE,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,kCAAkC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;wBACxF,CAAC;wBACD,MAAM,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE,6BAA6B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC1F,CAAC;oBACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;wBACb,MAAM,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE,0BAA0B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;oBAClF,CAAC;oBACD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;oBAClD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;wBACd,IAAI,IAAI,CAAC,OAAO,YAAY,WAAW;4BAAE,MAAM,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE,wBAAwB,EAAE,SAAS,EAAE,uBAAuB,CAAC,CAAC;wBAChJ,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACxC,CAAC;oBACD,MAAM,eAAe,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAClE,IAAI,CAAC,eAAe,CAAC,OAAO;wBAAE,MAAM,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE,wBAAwB,EAAE,SAAS,EAAE,uBAAuB,CAAC,CAAC;oBACrI,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC;oBAEvC,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC;wBACrC,MAAM;wBACN,YAAY,EAAE,SAAS,CAAC,YAAY;wBACpC,OAAO,EAAE,SAAS,CAAC,OAAO;wBAC1B,KAAK,EAAE,WAAW;wBAClB,SAAS;wBACT,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS,KAAK,KAAK,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI;wBACxE,YAAY,EAAE,OAAO,CAAC,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,YAAY,KAAK,IAAI;qBAC3E,EAAE,cAAc,CAAC,CAAC;oBACnB,WAAW,GAAG,IAAI,CAAC;oBAEnB,MAAM,SAAS,GAAG;wBACjB,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC;wBACnC,IAAI,EAAE,CAAC,GAAe,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;wBAC/C,UAAU,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;wBACjE,MAAM,EAAE,UAAU,CAAC,MAAM;wBACzB,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE;qBACb,CAAC;oBAC1B,OAAO,OAAO,CAAC,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,YAAY,KAAK,IAAI;wBACnE,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,CAAC,OAAmD,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;wBACrH,CAAC,CAAC,SAAS,CAAC;gBACd,CAAC;wBAAS,CAAC;oBACV,IAAI,CAAC,WAAW;wBAAE,cAAc,EAAE,CAAC;gBACpC,CAAC;YACF,CAAC;YACD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE;YAC/B,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CACtB,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE,6BAA6B,SAAS,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;SAC1H,CAAC,CAAC;IACJ,CAAC;YAAS,CAAC;QACV,4FAA4F;QAC5F,IAAI,CAAC,WAAW;YAAE,cAAc,EAAE,CAAC;IACpC,CAAC;AACF,CAAC"}

package/dist/transports/http/consumer/http-channel.d.ts

@@ -0,0 +1,51 @@
+import type { CaughtFailure } from '@vibesdotdev/kernel';
+import { type RpcChannel } from '@vibesdotdev/kernel-rpc';
+import { LegFailures } from '../../../core/protocol/lifecycle/binding-close.ts';
+import { type RpcChannelCloseAck } from '../../../core/protocol/lifecycle/channel-close.ts';
+import { FailureDescriber } from '../../../core/protocol/transport/failure-describer.ts';
+import type { HttpConnectionInit, HttpFetch } from "../../../schemas/contracts/transports/http/http-connection.ts";
+export declare class HttpStreamChannel implements RpcChannel {
+    private readonly channelId;
+    private readonly init;
+    private readonly fetchImpl;
+    /** The connection's leg keeper: a failed write is reported by the connection's close. */
+    private readonly legs;
+    /** Aborts this channel's SSE fetch: on its close, on a disconnect, and on the connection's close. */
+    private readonly abort;
+    private readonly onClose;
+    private readonly handlers;
+    private readonly end;
+    readonly ended: Promise<void>;
+    /** Bytes held in {@link pending}, bounded by `CHANNEL_PENDING_MAX_BYTES`. */
+    private pendingBytes;
+    /** The transport channel is live (neither end has closed it). */
+    private open;
+    /** The consumer discarded the channel locally. */
+    private disposed;
+    /**
+     * Frames decoded off the SSE before the FIRST `onData` handler attaches. The
+     * SSE pump starts the moment `openStream` resolves, so an owner emitting
+     * immediately can deliver bytes before the caller attaches its handler — those
+     * buffer here and flush, in order, on the first attach (the same pre-attach
+     * guarantee `OwnerChannel.pending` gives the owner side). `null` once attached.
+     */
+    private pending;
+    constructor(channelId: string, init: HttpConnectionInit, fetchImpl: HttpFetch, 
+    /** The connection's leg keeper: a failed write is reported by the connection's close. */
+    legs: LegFailures, describer: FailureDescriber, 
+    /** Aborts this channel's SSE fetch: on its close, on a disconnect, and on the connection's close. */
+    abort: AbortController, onClose: () => void);
+    write(data: Uint8Array): void;
+    onData(handler: (data: Uint8Array) => void): () => void;
+    /** The one close outcome; repeated closes return it. */
+    private closing;
+    close(): Promise<RpcChannelCloseAck>;
+    /** The owner end (or the SSE body) closed: stop locally, no outbound close. */
+    remoteClosed(): void;
+    /** The SSE leg or the connection dropped before the owner's CLOSE frame. */
+    disconnected(cause?: CaughtFailure): void;
+    /** Read the SSE body, decode each base64 frame, deliver DATA, honor CLOSE. */
+    pumpSse(body: ReadableStream<Uint8Array>): Promise<void>;
+    private handleSseRecord;
+}
+//# sourceMappingURL=http-channel.d.ts.map

package/dist/transports/http/consumer/http-channel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-channel.d.ts","sourceRoot":"","sources":["../../../../src/transports/http/consumer/http-channel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE9E,OAAO,EAAE,WAAW,EAAE,MAAM,mDAAmD,CAAC;AAChF,OAAO,EAAwD,KAAK,kBAAkB,EAAE,MAAM,mDAAmD,CAAC;AAElJ,OAAO,EAAE,gBAAgB,EAAE,MAAM,uDAAuD,CAAC;AAEzF,OAAO,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,+DAA+D,CAAC;AAInH,qBAMM,iBAAkB,YAAW,UAAU;IAoB3C,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,yFAAyF;IACzF,OAAO,CAAC,QAAQ,CAAC,IAAI;IAErB,qGAAqG;IACrG,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IA3BzB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAyC;IAClE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,6EAA6E;IAC7E,OAAO,CAAC,YAAY,CAAK;IACzB,iEAAiE;IACjE,OAAO,CAAC,IAAI,CAAQ;IACpB,kDAAkD;IAClD,OAAO,CAAC,QAAQ,CAAS;IACzB;;;;;;OAMG;IACH,OAAO,CAAC,OAAO,CAA2B;gBAGxB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,kBAAkB,EACxB,SAAS,EAAE,SAAS;IACrC,yFAAyF;IACxE,IAAI,EAAE,WAAW,EAClC,SAAS,EAAE,gBAAgB;IAC3B,qGAAqG;IACpF,KAAK,EAAE,eAAe,EACtB,OAAO,EAAE,MAAM,IAAI;IAMrC,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAU7B,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI;IAkBvD,wDAAwD;IACxD,OAAO,CAAC,OAAO,CAA4C;IAE3D,KAAK,IAAI,OAAO,CAAC,kBAAkB,CAAC;IA0BpC,+EAA+E;IAC/E,YAAY,IAAI,IAAI;IAOpB,4EAA4E;IAC5E,YAAY,CAAC,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI;IAMzC,8EAA8E;IACxE,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAW9D,OAAO,CAAC,eAAe;CAgCvB"}

package/dist/transports/http/consumer/http-channel.js

@@ -0,0 +1,173 @@
+import { FRAME, decodeFrame } from '@vibesdotdev/kernel-rpc';
+import { attempt } from "../../../core/protocol/lifecycle/attempt.js";
+import { LegFailures } from "../../../core/protocol/lifecycle/binding-close.js";
+import { closeUnacknowledged, observableClose, postedCloseAck } from "../../../core/protocol/lifecycle/channel-close.js";
+import { ChannelEnd } from "../../../core/protocol/lifecycle/channel-end.js";
+import { FailureDescriber } from "../../../core/protocol/transport/failure-describer.js";
+import { CHANNEL_PENDING_MAX_BYTES, CHANNEL_PENDING_MAX_FRAMES, channelBufferFull, readSseRecords } from "../../../core/protocol/transport/sse.js";
+import { RPC_HTTP_ROUTE, decodeBase64, encodeBase64 } from "../wire.js";
+import { headers } from "./http-headers.js";
+export /**
+ * A stream channel multiplexed over HTTP: owner→consumer bytes arrive on the SSE
+ * body; consumer→owner bytes go out as `POST /rpc/stream/write`. Closing posts a
+ * `/rpc/stream/close`. The frame format is the SAME 1-byte header the socket
+ * codec uses — the bytes are just base64-wrapped for the SSE/JSON transport.
+ */ class HttpStreamChannel {
+    channelId;
+    init;
+    fetchImpl;
+    legs;
+    abort;
+    onClose;
+    handlers = new Set();
+    end;
+    ended;
+    /** Bytes held in {@link pending}, bounded by `CHANNEL_PENDING_MAX_BYTES`. */
+    pendingBytes = 0;
+    /** The transport channel is live (neither end has closed it). */
+    open = true;
+    /** The consumer discarded the channel locally. */
+    disposed = false;
+    /**
+     * Frames decoded off the SSE before the FIRST `onData` handler attaches. The
+     * SSE pump starts the moment `openStream` resolves, so an owner emitting
+     * immediately can deliver bytes before the caller attaches its handler — those
+     * buffer here and flush, in order, on the first attach (the same pre-attach
+     * guarantee `OwnerChannel.pending` gives the owner side). `null` once attached.
+     */
+    pending = [];
+    constructor(channelId, init, fetchImpl, 
+    /** The connection's leg keeper: a failed write is reported by the connection's close. */
+    legs, describer, 
+    /** Aborts this channel's SSE fetch: on its close, on a disconnect, and on the connection's close. */
+    abort, onClose) {
+        this.channelId = channelId;
+        this.init = init;
+        this.fetchImpl = fetchImpl;
+        this.legs = legs;
+        this.abort = abort;
+        this.onClose = onClose;
+        this.end = new ChannelEnd(describer);
+        this.ended = this.end.ended;
+    }
+    write(data) {
+        if (!this.open)
+            return;
+        const body = { channelId: this.channelId, data: encodeBase64(data) };
+        const url = new URL(RPC_HTTP_ROUTE.STREAM_WRITE, this.init.origin);
+        // Never blocks the writer; a failed write is kept and reported by the connection's close.
+        this.legs.track('stream-write', this.fetchImpl(url, {
+            method: 'POST', headers: headers(this.init, { 'content-type': 'application/json' }), body: JSON.stringify(body)
+        }));
+    }
+    onData(handler) {
+        if (this.disposed)
+            return () => { };
+        // First subscriber: flush frames that arrived before it attached, in order.
+        // Runs even after a remote close — bytes received while the channel was
+        // open are never lost to the attach race.
+        if (this.pending) {
+            const buffered = this.pending;
+            this.pending = null;
+            this.pendingBytes = 0;
+            for (const data of buffered)
+                handler(data);
+            this.end.flushed();
+        }
+        // An ended channel delivers nothing more: keep no reference to the handler.
+        if (!this.open)
+            return () => { };
+        this.handlers.add(handler);
+        return () => this.handlers.delete(handler);
+    }
+    /** The one close outcome; repeated closes return it. */
+    closing = null;
+    close() {
+        // A LOCAL close always discards and settles, even after the owner ended the
+        // channel; only a still-open transport channel gets an outbound close.
+        if (this.closing)
+            return this.closing;
+        this.disposed = true;
+        this.pending = null;
+        this.handlers.clear();
+        this.end.closedLocally();
+        this.abort.abort();
+        if (!this.open) {
+            this.closing = Promise.resolve(closeUnacknowledged('already-ended'));
+            return this.closing;
+        }
+        this.open = false;
+        const body = { channelId: this.channelId };
+        const url = new URL(RPC_HTTP_ROUTE.STREAM_CLOSE, this.init.origin);
+        // The owner answers only once its binding close settled, with the outcome in its body.
+        const starting = attempt(() => this.fetchImpl(url, {
+            method: 'POST', headers: headers(this.init, { 'content-type': 'application/json' }), body: JSON.stringify(body)
+        }));
+        const posted = starting.ok ? starting.value : Promise.reject(starting.failure);
+        this.onClose();
+        this.closing = observableClose(postedCloseAck(this.channelId, posted, 'owner-answer'));
+        return this.closing;
+    }
+    /** The owner end (or the SSE body) closed: stop locally, no outbound close. */
+    remoteClosed() {
+        if (!this.open)
+            return;
+        this.open = false;
+        this.handlers.clear();
+        this.onClose();
+    }
+    /** The SSE leg or the connection dropped before the owner's CLOSE frame. */
+    disconnected(cause) {
+        this.end.disconnected(cause);
+        this.remoteClosed();
+        this.abort.abort();
+    }
+    /** Read the SSE body, decode each base64 frame, deliver DATA, honor CLOSE. */
+    async pumpSse(body) {
+        const pumped = await readSseRecords(body, (record) => this.handleSseRecord(record));
+        if (!pumped.ok) {
+            // An SSE read error is a disconnect; its cause travels on the rejected `ended`.
+            this.disconnected(pumped.failure);
+            return;
+        }
+        // A body that ends without the owner's CLOSE frame is a disconnect.
+        this.disconnected();
+    }
+    handleSseRecord(record) {
+        // Parse the one `data:` line we emit per record.
+        let payload = null;
+        for (const line of record.split('\n')) {
+            if (line.startsWith('data:'))
+                payload = line.slice(5).trimStart();
+        }
+        if (payload === null)
+            return;
+        const frameBytes = decodeBase64(payload);
+        const frame = decodeFrame(frameBytes);
+        if (frame.type === FRAME.CLOSE) {
+            // The owner's end: every DATA frame before it was handled first.
+            this.end.remoteEnded(!this.pending?.length);
+            this.remoteClosed();
+            return;
+        }
+        // Buffer until the first onData attaches (`remoteClosed` keeps `pending`
+        // alive so a late first subscriber still receives pre-close bytes).
+        if (this.pending) {
+            // Bounded: a peer cannot make this end hold an unbounded backlog for a subscriber that never attaches.
+            if (this.pending.length >= CHANNEL_PENDING_MAX_FRAMES || this.pendingBytes + frame.payload.byteLength > CHANNEL_PENDING_MAX_BYTES) {
+                this.pending = null;
+                this.pendingBytes = 0;
+                this.disconnected(channelBufferFull(this.channelId));
+                return;
+            }
+            this.pending.push(frame.payload);
+            this.pendingBytes += frame.payload.byteLength;
+            return;
+        }
+        if (!this.open)
+            return;
+        for (const h of this.handlers)
+            h(frame.payload);
+    }
+}
+//# sourceMappingURL=http-channel.js.map

package/dist/transports/http/consumer/http-channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-channel.js","sourceRoot":"","sources":["../../../../src/transports/http/consumer/http-channel.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAmB,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,6CAA6C,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,mDAAmD,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,cAAc,EAA2B,MAAM,mDAAmD,CAAC;AAClJ,OAAO,EAAE,UAAU,EAAE,MAAM,iDAAiD,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,uDAAuD,CAAC;AACzF,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAEnJ,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAA8C,MAAM,YAAY,CAAC;AACpH,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,MAAM,CAAC;;;;;GAKJ,OACG,iBAAiB;IAoBJ;IACA;IACA;IAEA;IAGA;IACA;IA3BD,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;IACjD,GAAG,CAAa;IACxB,KAAK,CAAgB;IAC9B,6EAA6E;IACrE,YAAY,GAAG,CAAC,CAAC;IACzB,iEAAiE;IACzD,IAAI,GAAG,IAAI,CAAC;IACpB,kDAAkD;IAC1C,QAAQ,GAAG,KAAK,CAAC;IACzB;;;;;;OAMG;IACK,OAAO,GAAwB,EAAE,CAAC;IAE1C,YACkB,SAAiB,EACjB,IAAwB,EACxB,SAAoB;IACrC,yFAAyF;IACxE,IAAiB,EAClC,SAA2B;IAC3B,qGAAqG;IACpF,KAAsB,EACtB,OAAmB;QARnB,cAAS,GAAT,SAAS,CAAQ;QACjB,SAAI,GAAJ,IAAI,CAAoB;QACxB,cAAS,GAAT,SAAS,CAAW;QAEpB,SAAI,GAAJ,IAAI,CAAa;QAGjB,UAAK,GAAL,KAAK,CAAiB;QACtB,YAAO,GAAP,OAAO,CAAY;QAEpC,IAAI,CAAC,GAAG,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,IAAgB;QACrB,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,MAAM,IAAI,GAAoB,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACtF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnE,0FAA0F;QAC1F,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YACnD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC/G,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,OAAmC;QACzC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;QACnC,4EAA4E;QAC5E,wEAAwE;QACxE,0CAA0C;QAC1C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;YAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;YACtB,KAAK,MAAM,IAAI,IAAI,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACpB,CAAC;QACD,4EAA4E;QAC5E,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,wDAAwD;IAChD,OAAO,GAAuC,IAAI,CAAC;IAE3D,KAAK;QACJ,4EAA4E;QAC5E,uEAAuE;QACvE,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC,CAAC;YACrE,OAAO,IAAI,CAAC,OAAO,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QAClB,MAAM,IAAI,GAAoB,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnE,uFAAuF;QACvF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YAClD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC/G,CAAC,CAAC,CAAC;QACJ,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/E,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,eAAe,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAED,+EAA+E;IAC/E,YAAY;QACX,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,EAAE,CAAC;IAChB,CAAC;IAED,4EAA4E;IAC5E,YAAY,CAAC,KAAqB;QACjC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,OAAO,CAAC,IAAgC;QAC7C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,gFAAgF;YAChF,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO;QACR,CAAC;QACD,oEAAoE;QACpE,IAAI,CAAC,YAAY,EAAE,CAAC;IACrB,CAAC;IAEO,eAAe,CAAC,MAAc;QACrC,iDAAiD;QACjD,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QACnE,CAAC;QACD,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO;QAC7B,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;YAChC,iEAAiE;YACjE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO;QACR,CAAC;QACD,yEAAyE;QACzE,oEAAoE;QACpE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,uGAAuG;YACvG,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,0BAA0B,IAAI,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,yBAAyB,EAAE,CAAC;gBACnI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;gBACtB,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;gBACrD,OAAO;YACR,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAC9C,OAAO;QACR,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;CACD"}