@vibesdotdev/kernel-rpc 0.0.0-stage → 1.0.0-rc.2

package/dist/transports/http/listener/http-bindings.js

@@ -0,0 +1,234 @@
+import { CapabilityError, DefaultReferenceTable } from '@vibesdotdev/kernel';
+import { dispatchRequest, RPC_ERROR, rpcError } from '@vibesdotdev/kernel-rpc';
+import { createFunctionCallbacks } from "../../../core/protocol/references/function-callbacks.js";
+import { attempt } from "../../../core/protocol/lifecycle/attempt.js";
+import { BindingCloses, LegFailures } from "../../../core/protocol/lifecycle/binding-close.js";
+import { recordRootAdvertisement } from "../../../core/protocol/references/advertisement.js";
+import { CHANNEL_ID_IN_USE, ChannelIdClaims } from "../../../core/protocol/references/channel-ids.js";
+import { HTTP_BEARER_IDENTITY_SOURCE } from "./http-listen-session.js";
+export class HttpBindings {
+    target;
+    connectionId;
+    wireDates;
+    reverseCalls;
+    table = new DefaultReferenceTable('owner');
+    rootRef;
+    remotePeer;
+    /** Stream channels keyed by the consumer-minted channelId. */
+    channels = new Map();
+    channelClaims = new ChannelIdClaims(this.channels);
+    /** Every binding close this connection started; failures kept typed until reported. */
+    closes = new BindingCloses();
+    /** What became of each channel no longer live: the owner ended it, or its binding close (typed failure or `null`). */
+    settled = new Map();
+    /** The connection's close outcome, once it began closing (never rejects). */
+    closing = null;
+    closedFlag = false;
+    connection = new AbortController();
+    received;
+    callbacks;
+    reverseWrite;
+    reverseEnd;
+    /** @param auth the registry entry the connection's bearer resolved to, if any. */
+    constructor(target, connectionId = crypto.randomUUID(), auth, 
+    /** A verified local attestation's identity (RC08); it takes precedence over `auth.caller`. */
+    attested, 
+    /** Both peers explicitly admitted Date metadata before session allocation. */
+    wireDates = false, reverseCalls = false) {
+        this.target = target;
+        this.connectionId = connectionId;
+        this.wireDates = wireDates;
+        this.reverseCalls = reverseCalls;
+        this.received = new LegFailures(connectionId);
+        this.rootRef = this.table.retain(target.root, 'object').id;
+        recordRootAdvertisement(this.table, this.rootRef, target.rootMethods);
+        const verified = attested ?? (auth?.caller ? { source: HTTP_BEARER_IDENTITY_SOURCE, caller: auth.caller } : undefined);
+        const peer = { runtimeId: auth?.label ?? connectionId, transport: 'http', connectionId };
+        this.remotePeer = verified ? { ...peer, verified } : peer;
+        if (reverseCalls && target.callbacks) {
+            this.callbacks = createFunctionCallbacks(this.table, {
+                lifecycle: target.callbacks.lifecycle,
+                deadlineMs: target.callbacks.deadlineMs ?? 15_000,
+                maxRefs: target.callbacks.maxRefs ?? 64
+            }, request => {
+                if (!this.reverseWrite)
+                    throw rpcError(RPC_ERROR.NO_REVERSE_CHANNEL, 'The callback delivery leg is not attached.');
+                this.reverseWrite(request);
+            }, () => this.closedFlag);
+        }
+    }
+    /** A consumer-owned ref (callback) the OWNER would have to invoke back. */
+    proxyFactory = (id, kind, methods) => {
+        if (this.callbacks && this.reverseWrite && kind === 'function' && methods.includes('call')) {
+            return this.callbacks.callbackFor(id);
+        }
+        throw rpcError(RPC_ERROR.NO_REVERSE_CHANNEL, `Ref arg '${id}' cannot be decoded: the http transport has no owner→consumer reverse leg`);
+    };
+    get reverseAttached() { return this.reverseWrite !== undefined; }
+    attachReverse(write, end) {
+        if (this.closedFlag || !this.callbacks || this.reverseWrite)
+            return false;
+        this.reverseWrite = write;
+        this.reverseEnd = end;
+        return true;
+    }
+    answerReverse(response) {
+        const answer = this.callbacks?.callbackAnswers.get(response.id);
+        if (!answer)
+            return false;
+        this.callbacks?.callbackAnswers.delete(response.id);
+        answer(response);
+        return true;
+    }
+    closeReverse() {
+        this.connection.abort(new CapabilityError('The RPC connection closed.', 'CANCELLED', {
+            reason: 'rpc-connection-closed', details: { connectionId: this.connectionId }
+        }));
+        for (const [id, answer] of this.callbacks?.callbackAnswers ?? []) {
+            answer({ id, error: rpcError(RPC_ERROR.DISCONNECTED, 'The HTTP connection closed.') });
+        }
+        this.callbacks?.callbackAnswers.clear();
+        this.reverseWrite = undefined;
+        this.reverseEnd?.();
+        this.reverseEnd = undefined;
+    }
+    /** Open a stream channel for a `stream` request that arrived as the SSE GET. */
+    async openChannel(channelId, ref, channel) {
+        if (this.closedFlag)
+            return { ok: false, code: RPC_ERROR.DISCONNECTED };
+        if (!this.channelClaims.claim(channelId))
+            return { ok: false, code: RPC_ERROR.CHANNEL_IN_USE, reason: CHANNEL_ID_IN_USE };
+        try {
+            return await this.openClaimedChannel(channelId, ref, channel);
+        }
+        finally {
+            this.channelClaims.release(channelId);
+        }
+    }
+    async openClaimedChannel(channelId, ref, channel) {
+        const { response, binding } = await dispatchRequest({ verb: 'stream', id: channelId, ref, channel }, {
+            table: this.table,
+            pipeline: this.target.pipeline,
+            remotePeer: this.remotePeer,
+            decodeArgs: () => [],
+            classifyResult: this.target.classifyResult,
+            bindChannel: this.target.bindChannel,
+            kindOf: this.target.kindOf ?? (() => 'runtime/rpc')
+        });
+        if (response.error || !binding) {
+            // A refused binding (credit-governed, no stream credits here) is closed, its failure kept.
+            if (binding)
+                this.closes.keep(binding, channelId);
+            return { ok: false, code: response.error?.code ?? RPC_ERROR.NO_CHANNEL };
+        }
+        // The connection closed while the binding was being made: close it (kept for close()) and refuse the channel.
+        if (this.closedFlag) {
+            this.closes.keep(binding, channelId);
+            return { ok: false, code: RPC_ERROR.DISCONNECTED };
+        }
+        // Subscribe owner→consumer bytes. Until the SSE GET attaches a writer, frames
+        // buffer in `pending` so the consumer never drops the session's first bytes.
+        const channelEntry = {
+            binding,
+            unsub: () => { },
+            pending: [],
+            write: null,
+            end: null,
+            endedEarly: false
+        };
+        const unsub = binding.onData((data) => {
+            if (channelEntry.write)
+                channelEntry.write(data);
+            else
+                channelEntry.pending.push(data);
+        });
+        channelEntry.unsub = unsub;
+        this.channels.set(channelId, channelEntry);
+        // The owner's end follows its last bytes: sent now on a live SSE leg, or
+        // after the buffered bytes when the leg attaches.
+        binding.onEnd?.(() => {
+            if (channelEntry.end)
+                this.endChannel(channelId);
+            else
+                channelEntry.endedEarly = true;
+        });
+        return { ok: true };
+    }
+    /** Attach the SSE writer for a channel: flushes whatever buffered before the SSE GET arrived, then routes every owner→consumer frame straight to the SSE leg. */
+    attachSse(channelId, write, end) {
+        const channel = this.channels.get(channelId);
+        if (!channel)
+            return;
+        channel.write = write;
+        channel.end = end;
+        // Drain frames captured before the writer attached, in order.
+        for (const frame of channel.pending.splice(0))
+            write(frame);
+        if (channel.endedEarly)
+            this.endChannel(channelId);
+    }
+    /** The owner ended the channel: its CLOSE frame follows its last bytes, and the owner is not torn down. */
+    endChannel(channelId) {
+        const channel = this.channels.get(channelId);
+        if (!channel)
+            return;
+        this.channels.delete(channelId);
+        this.settled.set(channelId, { ended: true });
+        this.unsubscribe(channelId, channel);
+        channel.end?.();
+    }
+    /** Consumer→owner bytes for a channel (PTY stdin). */
+    writeChannel(channelId, data) {
+        const channel = this.channels.get(channelId);
+        if (channel && data.length > 0)
+            channel.binding.write(data);
+    }
+    /** Forget a channel and stop its bytes; the caller closes its binding. */
+    detachChannel(channelId) {
+        const channel = this.channels.get(channelId);
+        if (!channel)
+            return undefined;
+        this.channels.delete(channelId);
+        this.unsubscribe(channelId, channel);
+        return channel;
+    }
+    /** Keep a failure of this channel's SSE leg, typed, for the connection's close. */
+    keepChannelFailure(channelId, failure) {
+        this.closes.keepFailure(channelId, failure);
+    }
+    /** Stop a channel's bytes; a binding whose unsubscribe failed is kept typed for the connection's close. */
+    unsubscribe(channelId, channel) {
+        const released = attempt(() => channel.unsub());
+        if (!released.ok)
+            this.closes.keepFailure(channelId, released.failure);
+    }
+    /** Close a channel the consumer asked to close and answer what became of it, once that settled: `closed` when its binding closed (now, or earlier when its SSE leg dropped — joined, never answered before it settles), */
+    async closeChannel(channelId) {
+        const channel = this.detachChannel(channelId);
+        const prior = this.settled.get(channelId);
+        const outcome = channel
+            ? this.closeBinding(channel, channelId)
+            : prior && !prior.ended
+                ? prior.outcome
+                : undefined;
+        if (!outcome)
+            return prior?.ended ? 'already-ended' : 'unknown';
+        const failure = await outcome;
+        if (failure)
+            throw failure;
+        return 'closed';
+    }
+    /** The consumer dropped a channel's SSE leg: close it; a failure is kept for {@link close}. */
+    dropChannel(channelId) {
+        const channel = this.detachChannel(channelId);
+        if (channel)
+            void this.closeBinding(channel, channelId);
+    }
+    /** Start a binding's close and record its outcome for a later consumer close (and {@link close}). */
+    closeBinding(channel, channelId) {
+        const outcome = this.closes.close(channel.binding, channelId);
+        this.settled.set(channelId, { ended: false, outcome });
+        return outcome;
+    }
+}
+//# sourceMappingURL=http-bindings.js.map

package/dist/transports/http/listener/http-bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-bindings.js","sourceRoot":"","sources":["../../../../src/transports/http/listener/http-bindings.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAuB,MAAM,qBAAqB,CAAC;AAClG,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAmE,MAAM,yBAAyB,CAAC;AAChJ,OAAO,EAAE,uBAAuB,EAAE,MAAM,yDAAyD,CAAC;AAElG,OAAO,EAAE,OAAO,EAAE,MAAM,6CAA6C,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AAGtG,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAEvE,MAAM,OAAgB,YAAY;IA8Bb;IACV;IAKA;IACA;IApCQ,KAAK,GAAG,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE3C,OAAO,CAAS;IAEhB,UAAU,CAAiB;IAE9C,8DAA8D;IAC1C,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAE5C,aAAa,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEtE,uFAAuF;IACnE,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;IAEjD,sHAAsH;IAClG,OAAO,GAAG,IAAI,GAAG,EAAwF,CAAC;IAE9H,6EAA6E;IAClE,OAAO,GAA2C,IAAI,CAAC;IAExD,UAAU,GAAG,KAAK,CAAC;IACV,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,QAAQ,CAAc;IACtB,SAAS,CAAyD;IAC7E,YAAY,CAA6C;IACvD,UAAU,CAA2B;IAE/C,kFAAkF;IACjF,YACoB,MAAwB,EAClC,eAAuB,MAAM,CAAC,UAAU,EAAE,EACnD,IAAyB;IACzB,8FAA8F;IAC9F,QAAoC;IACpC,8EAA8E;IACrE,YAAY,KAAK,EACjB,eAAe,KAAK;QAPV,WAAM,GAAN,MAAM,CAAkB;QAClC,iBAAY,GAAZ,YAAY,CAA8B;QAK1C,cAAS,GAAT,SAAS,CAAQ;QACjB,iBAAY,GAAZ,YAAY,CAAQ;QAE7B,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC3D,uBAAuB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACtE,MAAM,QAAQ,GACb,QAAQ,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvG,MAAM,IAAI,GAAmB,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,IAAI,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACzG,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,IAAI,YAAY,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,EAAE;gBACpD,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS;gBACrC,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,UAAU,IAAI,MAAM;gBACjD,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE;aACvC,EAAE,OAAO,CAAC,EAAE;gBACZ,IAAI,CAAC,IAAI,CAAC,YAAY;oBAAE,MAAM,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE,4CAA4C,CAAC,CAAC;gBACnH,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC;IACF,CAAC;IAEF,2EAA2E;IACvD,YAAY,GAAwF,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC5I,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5F,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,QAAQ,CACb,SAAS,CAAC,kBAAkB,EAC5B,YAAY,EAAE,2EAA2E,CACzF,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,eAAe,KAAc,OAAO,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC;IAE1E,aAAa,CAAC,KAAmC,EAAE,GAAe;QACjE,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAC1E,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;QACtB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,aAAa,CAAC,QAAqB;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACb,CAAC;IAES,YAAY;QACrB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,4BAA4B,EAAE,WAAW,EAAE;YACpF,MAAM,EAAE,uBAAuB,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE;SAC7E,CAAC,CAAC,CAAC;QACJ,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,eAAe,IAAI,EAAE,EAAE,CAAC;YAClE,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,6BAA6B,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,KAAK,EAAE,CAAC;QACxC,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAC9B,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC7B,CAAC;IAEF,gFAAgF;IAC/E,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,GAAU,EAAE,OAAe;QAC/D,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QAC1H,IAAI,CAAC;YACJ,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAC/D,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;IACF,CAAC;IAEQ,KAAK,CAAC,kBAAkB,CAAC,SAAiB,EAAE,GAAU,EAAE,OAAe;QAC/E,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAClD,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,EAC/C;YACC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,GAAG,EAAE,CAAC,EAAE;YACpB,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc;YAC1C,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC;SACnD,CACD,CAAC;QACF,IAAI,QAAQ,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YAChC,2FAA2F;YAC3F,IAAI,OAAO;gBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;QAC1E,CAAC;QACD,8GAA8G;QAC9G,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC;QACpD,CAAC;QACD,8EAA8E;QAC9E,6EAA6E;QAC7E,MAAM,YAAY,GAAiB;YAClC,OAAO;YACP,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;YACf,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,IAAI;YACT,UAAU,EAAE,KAAK;SACjB,CAAC;QACF,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACrC,IAAI,YAAY,CAAC,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;;gBAC5C,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,YAAY,CAAC,KAAK,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC3C,yEAAyE;QACzE,kDAAkD;QAClD,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE;YACpB,IAAI,YAAY,CAAC,GAAG;gBAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;;gBAC5C,YAAY,CAAC,UAAU,GAAG,IAAI,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACrB,CAAC;IAEF,iKAAiK;IAChK,SAAS,CAAC,SAAiB,EAAE,KAAkC,EAAE,GAAe;QAC/E,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QACtB,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC;QAClB,8DAA8D;QAC9D,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,UAAU;YAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;IAEF,2GAA2G;IAChG,UAAU,CAAC,SAAiB;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;IACjB,CAAC;IAEF,sDAAsD;IACrD,YAAY,CAAC,SAAiB,EAAE,IAAgB;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;IAEF,0EAA0E;IAC/D,aAAa,CAAC,SAAiB;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACrC,OAAO,OAAO,CAAC;IAChB,CAAC;IAEF,mFAAmF;IAClF,kBAAkB,CAAC,SAAiB,EAAE,OAAsB;QAC3D,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAEF,2GAA2G;IAChG,WAAW,CAAC,SAAiB,EAAE,OAAqB;QAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxE,CAAC;IAEF,2NAA2N;IAC1N,KAAK,CAAC,YAAY,CAAC,SAAiB;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,OAAO;YACtB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC;YACvC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK;gBACtB,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC;QAC9B,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC;QAC3B,OAAO,QAAQ,CAAC;IACjB,CAAC;IAEF,+FAA+F;IAC9F,WAAW,CAAC,SAAiB;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,OAAO;YAAE,KAAK,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACzD,CAAC;IAEF,qGAAqG;IAC1F,YAAY,CAAC,OAAqB,EAAE,SAAiB;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,OAAO,OAAO,CAAC;IAChB,CAAC;CACD"}

package/dist/transports/http/listener/http-listen-session.d.ts

@@ -0,0 +1,43 @@
+import { HttpBindings } from "./http-bindings.ts";
+export type { HttpListenTarget } from "../../../schemas/contracts/transports/http/http-listen-session.ts";
+/**
+ * One accepted http connection's owner-side handler — the http peer of unix's
+ * `SocketListenerSession`. It holds the per-connection owner reference table and
+ * the live stream channels, and it runs EVERY arriving request through the SAME
+ * {@link dispatchRequest} the unix transport uses.
+ *
+ * THE HARD SECURITY GATE (doc 11 §L5, acceptance #7/#8): an http-arrived `invoke`
+ * is dispatched through `dispatchRequest`, which wraps the target with L1's
+ * `InvokePipeline` (authz → friction) before applying the method. There is NO
+ * second code path: a remote peer with a valid connection token is still DENIED
+ * an out-of-policy command (e.g. `git push --force`) by friction, identically to
+ * a local invoke. Connection auth (the bearer) is checked at the listener BEFORE
+ * a request reaches this session; this session never re-implements a verb-level
+ * read/write split — that conflation is the bug the spec deletes.
+ *
+ * Per-connection state mirrors the socket session: a fresh `DefaultReferenceTable`
+ * (so two peers never collide on ref ids), and the live stream channels (torn
+ * down on disconnect — the no-leak guarantee, acceptance #3).
+ */
+import type { CapabilityError } from '@vibesdotdev/kernel';
+import { type RpcRequest, type RpcResponse } from '@vibesdotdev/kernel-rpc';
+/** The `VerifiedTransportIdentity.source` of a caller verified through a registered bearer. */
+export declare const HTTP_BEARER_IDENTITY_SOURCE = "http-bearer";
+export declare class HttpListenSession extends HttpBindings {
+    /** The root ref id the consumer targets (returned at the handshake). */
+    get root(): string;
+    /** Owner-side ref-table size — the leak assertion reads this. */
+    get tableSize(): number;
+    /** Handle a decoded `invoke`/`release` request. The SAME path the socket session runs. */
+    handleMessage(req: RpcRequest): Promise<RpcResponse>;
+    private dispatchMessage;
+    /**
+         * Tear down the connection: free every retained ref + stream channel (no leak),
+         * then wait for every binding close this connection started. Rejects with the
+         * typed close failures; the teardown itself is synchronous and complete first.
+         */
+    close(): Promise<void>;
+    /** {@link close}, resolving to the typed failure instead of rejecting. */
+    shutdown(): Promise<CapabilityError | null>;
+}
+//# sourceMappingURL=http-listen-session.d.ts.map

package/dist/transports/http/listener/http-listen-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-listen-session.d.ts","sourceRoot":"","sources":["../../../../src/transports/http/listener/http-listen-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,gBAAgB,EAAE,MAAM,mEAAmE,CAAC;AAC1G;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAKP,KAAK,UAAU,EACf,KAAK,WAAW,EAEf,MAAM,yBAAyB,CAAC;AAUjC,+FAA+F;AAC/F,eAAO,MAAM,2BAA2B,gBAAgB,CAAC;AAEzD,qBAAa,iBAAkB,SAAQ,YAAY;IACnD,wEAAwE;IACvE,IAAI,IAAI,IAAI,MAAM,CAEjB;IAEF,iEAAiE;IAChE,IAAI,SAAS,IAAI,MAAM,CAEtB;IAEF,0FAA0F;IACzF,aAAa,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;YAYtC,eAAe;IAqD9B;;;;WAII;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAMvB,0EAA0E;IACzE,QAAQ,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;CAsB3C"}

package/dist/transports/http/listener/http-listen-session.js

@@ -0,0 +1,123 @@
+import { HttpBindings } from "./http-bindings.js";
+import { isCapabilityError } from '@vibesdotdev/kernel';
+import { decodeValue, dispatchRequest, RPC_ERROR, rpcError } from '@vibesdotdev/kernel-rpc';
+import { attempt, attemptAsync, rethrow, settled } from "../../../core/protocol/lifecycle/attempt.js";
+import { jsonResponse } from "../../../core/protocol/wire/json-wire.js";
+import { RpcErrorSchema } from "../../../core/protocol/wire/schemas.js";
+import { toRpcError } from "../../../core/protocol/wire/verbs.js";
+import { snapshotInline } from "../../../core/protocol/wire/wire-value.js";
+import { isFunction } from "../../../core/protocol/wire/value-kinds.js";
+import { connectionCloseFailure } from "../../../core/protocol/lifecycle/binding-close.js";
+import { redactStackTraces } from "../auth/redact.js";
+/** The `VerifiedTransportIdentity.source` of a caller verified through a registered bearer. */
+export const HTTP_BEARER_IDENTITY_SOURCE = 'http-bearer';
+export class HttpListenSession extends HttpBindings {
+    /** The root ref id the consumer targets (returned at the handshake). */
+    get root() {
+        return this.rootRef;
+    }
+    /** Owner-side ref-table size — the leak assertion reads this. */
+    get tableSize() {
+        return this.table.size;
+    }
+    /** Handle a decoded `invoke`/`release` request. The SAME path the socket session runs. */
+    handleMessage(req) {
+        if (this.closedFlag)
+            return Promise.resolve({ id: req.id, error: rpcError(RPC_ERROR.DISCONNECTED, 'connection closed') });
+        // Publish custody before invoking owner code, which may close synchronously.
+        const receiving = Promise.withResolvers();
+        this.received.track('receive', receiving.promise);
+        void settled(this.dispatchMessage(req)).then(handled => {
+            if (handled.ok)
+                receiving.resolve(handled.value);
+            else
+                receiving.reject(handled.failure);
+        });
+        return receiving.promise;
+    }
+    async dispatchMessage(req) {
+        if (this.closedFlag) {
+            return { id: req.id, error: rpcError(RPC_ERROR.DISCONNECTED, 'connection closed') };
+        }
+        // A function ref requires the negotiated, attached reverse leg. Refuse
+        // unsupported arguments before dispatch can perform any side effect.
+        if (req.verb === 'invoke') {
+            const refArg = req.args.find((a) => a.t === 'stream' || (a.t === 'ref' && (!this.reverseAttached || a.kind !== 'function')));
+            if (refArg) {
+                return {
+                    id: req.id,
+                    error: rpcError(RPC_ERROR.NO_REVERSE_CHANNEL, `Method '${req.method}' was passed a ${refArg.t === 'ref' ? 'callback/ref' : 'stream'} argument, ` +
+                        `but the http transport has no owner→consumer reverse leg to invoke it back on. ` +
+                        `Use a duplex transport (unix/tcp) for callback args, or a stream channel for byte flows.`)
+                };
+            }
+        }
+        const dispatch = () => dispatchRequest(req, {
+            table: this.table,
+            pipeline: this.target.pipeline,
+            remotePeer: this.remotePeer,
+            decodeArgs: (wire) => wire.map((w) => decodeValue(w, this.proxyFactory)),
+            classifyResult: value => this.callbacks && isFunction(value)
+                ? this.callbacks.classifyCallbackResult(value) : this.target.classifyResult(value),
+            bindChannel: this.target.bindChannel,
+            kindOf: this.target.kindOf ?? (() => 'runtime/rpc')
+        });
+        const { response } = await (this.target.runInvocation
+            ? this.target.runInvocation(dispatch, { id: this.connectionId, signal: this.connection.signal })
+            : dispatch());
+        if (!response.error)
+            return jsonResponse(response, this.wireDates);
+        // Snapshot debug responses too: the error envelope has the same inline boundary.
+        const redacted = attempt(() => RpcErrorSchema.safeParse(redactStackTraces(snapshotInline(response.error), { debug: this.target.debug ?? false })));
+        if (!redacted.ok) {
+            // A non-carriable error envelope is refused with its fixed diagnostic; any other failure is surfaced.
+            const failure = redacted.failure;
+            if (isCapabilityError(failure) && (failure.reason === 'rpc-value-unserializable' || failure.reason === 'rpc-cancellation-unsupported'))
+                return { id: response.id, error: toRpcError(failure) };
+            return rethrow(failure);
+        }
+        const error = redacted.value;
+        return error.success ? { id: response.id, error: error.data } : {
+            id: response.id,
+            error: rpcError('INVALID_INPUT', 'Invalid RPC error.', undefined, 'rpc-error-invalid')
+        };
+    }
+    /**
+         * Tear down the connection: free every retained ref + stream channel (no leak),
+         * then wait for every binding close this connection started. Rejects with the
+         * typed close failures; the teardown itself is synchronous and complete first.
+         */
+    close() {
+        return this.shutdown().then((failure) => {
+            if (failure)
+                throw failure;
+        });
+    }
+    /** {@link close}, resolving to the typed failure instead of rejecting. */
+    shutdown() {
+        if (this.closing)
+            return this.closing;
+        const outcome = Promise.withResolvers();
+        this.closing = outcome.promise;
+        this.closedFlag = true;
+        this.closeReverse();
+        for (const channelId of this.channels.keys())
+            this.dropChannel(channelId);
+        // Hard-disconnect teardown: clear the WHOLE table — the root AND every
+        // entry the consumer never got to `release` (returned sessions/handles) —
+        // so nothing the connection retained leaks past it (acceptance #3).
+        this.table.seal();
+        void (async () => {
+            const receiveFailure = await this.received.settle();
+            const references = await attemptAsync(() => this.table.drain());
+            if (!references.ok)
+                this.closes.keepError(connectionCloseFailure(this.connectionId, references.failure));
+            const closeFailure = await this.closes.settle();
+            outcome.resolve(receiveFailure && closeFailure
+                ? connectionCloseFailure(this.connectionId, new AggregateError([receiveFailure, closeFailure], 'The receive operation and connection cleanup failed.'))
+                : receiveFailure ?? closeFailure);
+        })();
+        return this.closing;
+    }
+}
+//# sourceMappingURL=http-listen-session.js.map

package/dist/transports/http/listener/http-listen-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-listen-session.js","sourceRoot":"","sources":["../../../../src/transports/http/listener/http-listen-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAuBlD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACP,WAAW,EACX,eAAe,EACf,SAAS,EACT,QAAQ,EAIP,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,6CAA6C,CAAC;AACtG,OAAO,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,4CAA4C,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mDAAmD,CAAC;AAC3F,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,+FAA+F;AAC/F,MAAM,CAAC,MAAM,2BAA2B,GAAG,aAAa,CAAC;AAEzD,MAAM,OAAO,iBAAkB,SAAQ,YAAY;IACnD,wEAAwE;IACvE,IAAI,IAAI;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAEF,iEAAiE;IAChE,IAAI,SAAS;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACxB,CAAC;IAEF,0FAA0F;IACzF,aAAa,CAAC,GAAe;QAC5B,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC1H,6EAA6E;QAC7E,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,EAAe,CAAC;QACvD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;QAClD,KAAK,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;YACtD,IAAI,OAAO,CAAC,EAAE;gBAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;;gBAC5C,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QACH,OAAO,SAAS,CAAC,OAAO,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,GAAe;QAC5C,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC,EAAE,CAAC;QACrF,CAAC;QACD,uEAAuE;QACvE,qEAAqE;QACrE,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC;YAC7H,IAAI,MAAM,EAAE,CAAC;gBACZ,OAAO;oBACN,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,KAAK,EAAE,QAAQ,CACd,SAAS,CAAC,kBAAkB,EAC5B,WAAW,GAAG,CAAC,MAAM,kBAAkB,MAAM,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,aAAa;wBACjG,iFAAiF;wBACjF,0FAA0F,CAC3F;iBACD,CAAC;YACH,CAAC;QACF,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE;YAC3C,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,CAAC,IAA0B,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YAC9F,cAAc,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;gBAC3D,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC;YACnF,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa;YACpD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YAChG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACf,IAAI,CAAC,QAAQ,CAAC,KAAK;YAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnE,iFAAiF;QACjF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,iBAAiB,CACxE,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,KAAK,EAAE,CACrE,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,sGAAsG;YACtG,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;YACjC,IAAI,iBAAiB,CAAC,OAAO,CAAC,IAAI,CACjC,OAAO,CAAC,MAAM,KAAK,0BAA0B,IAAI,OAAO,CAAC,MAAM,KAAK,8BAA8B,CAClG;gBAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC/D,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,KAAK,EAAE,QAAQ,CAAC,eAAe,EAAE,oBAAoB,EAAE,SAAS,EAAE,mBAAmB,CAAC;SACtF,CAAC;IACH,CAAC;IAEF;;;;WAII;IACH,KAAK;QACJ,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACvC,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC;QAC5B,CAAC,CAAC,CAAC;IACJ,CAAC;IAEF,0EAA0E;IACzE,QAAQ;QACP,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,EAA0B,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC1E,uEAAuE;QACvE,0EAA0E;QAC1E,oEAAoE;QACpE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,CAAC,KAAK,IAAI,EAAE;YAChB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpD,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAChE,IAAI,CAAC,UAAU,CAAC,EAAE;gBAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YACzG,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAChD,OAAO,CAAC,OAAO,CAAC,cAAc,IAAI,YAAY;gBAC7C,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,cAAc,CAAC,CAAC,cAAc,EAAE,YAAY,CAAC,EAAE,sDAAsD,CAAC,CAAC;gBACvJ,CAAC,CAAC,cAAc,IAAI,YAAY,CAAC,CAAC;QACpC,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;CACD"}

package/dist/transports/http/listener/http-listen.d.ts

@@ -0,0 +1,8 @@
+import type { HttpListenBindOptions } from "../../../schemas/contracts/transports/http/http-listen.ts";
+export { ListenHttpInput } from "../../../schemas/contracts/transports/http/http-listen.ts";
+export type { HttpListenBindOptions } from "../../../schemas/contracts/transports/http/http-listen.ts";
+import { type HttpListener, type HttpListenOptions } from './http-transport.impl.ts';
+/** `listenHttp` input, read once (protocol/caller-input.ts). */
+/** Bind a standalone RPC listener; the selected host owns its native transport. */
+export declare function listenHttp(portInput: number, targetInput: HttpListenOptions, optionsInput: HttpListenBindOptions): Promise<HttpListener>;
+//# sourceMappingURL=http-listen.d.ts.map

package/dist/transports/http/listener/http-listen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-listen.d.ts","sourceRoot":"","sources":["../../../../src/transports/http/listener/http-listen.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2DAA2D,CAAC;AAEvG,OAAO,EAAE,eAAe,EAAE,MAAM,2DAA2D,CAAC;AAC5F,YAAY,EAAE,qBAAqB,EAAE,MAAM,2DAA2D,CAAC;AAQvG,OAAO,EAAkB,KAAK,YAAY,EAAE,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAErG,gEAAgE;AAEhE,mFAAmF;AACnF,wBAAsB,UAAU,CAC/B,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,iBAAiB,EAC9B,YAAY,EAAE,qBAAqB,GACjC,OAAO,CAAC,YAAY,CAAC,CA6CvB"}

package/dist/transports/http/listener/http-listen.js

@@ -0,0 +1,62 @@
+import { ListenHttpInput } from "../../../schemas/contracts/transports/http/http-listen.js";
+export { ListenHttpInput } from "../../../schemas/contracts/transports/http/http-listen.js";
+/** Standalone HTTP binding through the supplied runtime's selected host. */
+import { getRuntimeHttpListener } from '@vibesdotdev/kernel';
+import { settled } from "../../../core/protocol/lifecycle/attempt.js";
+import { ownedByLifecycle } from "../../../core/protocol/lifecycle/lifecycle-owned.js";
+import { readInput } from "../../../core/protocol/references/caller-input.js";
+import { HOST_FAILURES } from "../../../core/protocol/transport/failure-describer.js";
+import { loadRuntimeRpcConfig } from "../../../daemon/hosting/config/load.js";
+import { RpcHttpHandler } from "./http-transport.impl.js";
+/** `listenHttp` input, read once (protocol/caller-input.ts). */
+/** Bind a standalone RPC listener; the selected host owns its native transport. */
+export async function listenHttp(portInput, targetInput, optionsInput) {
+    const { port, target, options } = readInput('listenHttp', ListenHttpInput, { port: portInput, target: targetInput, options: optionsInput });
+    const host = options.host ?? (await loadRuntimeRpcConfig(options.runtime)).httpHost;
+    const runtime = options.runtime;
+    const handler = new RpcHttpHandler({
+        ...target,
+        reportFailure: target.reportFailure ?? ((failure) => runtime.diagnostics.error('HTTP RPC route failed', { scope: 'runtime-rpc', plugin: 'listen-http', error: failure }))
+    });
+    const selected = await getRuntimeHttpListener(options.runtime);
+    let stopped;
+    const binding = await selected.listen({
+        port,
+        hostname: host,
+        // A stopping listener admits nothing more: a request that still arrives is refused typed, never served.
+        fetch: async (request) => stopped
+            ? Response.json({ error: { code: 'RPC_DISCONNECTED', reason: 'rpc-listener-stopped' } }, { status: 503 })
+            : await handler.handle(request) ?? new Response('not found', { status: 404 })
+    });
+    let unown = () => { };
+    const listener = {
+        origin: binding.origin,
+        port: binding.port,
+        handler,
+        stop() {
+            unown();
+            stopped ??= Promise.resolve().then(async () => {
+                // Native admission and every RPC binding end even when either cleanup refuses.
+                const outcomes = await Promise.allSettled([
+                    // The native host's stop refusal is a host error: kept described (typed, its text never), like every other.
+                    settled(Promise.resolve().then(() => binding.stop())).then((stoppedNative) => {
+                        if (!stoppedNative.ok)
+                            throw HOST_FAILURES.describe(stoppedNative.failure);
+                    }),
+                    Promise.resolve().then(() => handler.closeAll())
+                ]);
+                const failures = outcomes.flatMap(outcome => outcome.status === 'rejected' ? [outcome.reason] : []);
+                if (failures.length === 1)
+                    throw failures[0];
+                if (failures.length > 1)
+                    throw new AggregateError(failures, 'The HTTP listener did not close cleanly.');
+            });
+            return stopped;
+        }
+    };
+    // Owned by the runtime it listens for: its disposal stops admission and closes every session and binding; the
+    // outcome is kept for the holder's stop().
+    unown = ownedByLifecycle(runtime.lifecycle.signal, () => void settled(listener.stop()));
+    return listener;
+}
+//# sourceMappingURL=http-listen.js.map

package/dist/transports/http/listener/http-listen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-listen.js","sourceRoot":"","sources":["../../../../src/transports/http/listener/http-listen.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,2DAA2D,CAAC;AAC5F,OAAO,EAAE,eAAe,EAAE,MAAM,2DAA2D,CAAC;AAE5F,4EAA4E;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,6CAA6C,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qDAAqD,CAAC;AACvF,OAAO,EAAE,SAAS,EAAE,MAAM,mDAAmD,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,uDAAuD,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,cAAc,EAA6C,MAAM,0BAA0B,CAAC;AAErG,gEAAgE;AAEhE,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,SAAiB,EACjB,WAA8B,EAC9B,YAAmC;IAEnC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,YAAY,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAC5I,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IACpF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC;QAClC,GAAG,MAAM;QACT,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;KACzK,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,OAAkC,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACrC,IAAI;QACJ,QAAQ,EAAE,IAAI;QACd,wGAAwG;QACxG,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO;YAChC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YACzG,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;KAC9E,CAAC,CAAC;IACH,IAAI,KAAK,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAiB;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO;QACP,IAAI;YACH,KAAK,EAAE,CAAC;YACR,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAC7C,+EAA+E;gBAC/E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;oBACzC,4GAA4G;oBAC5G,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE;wBAC5E,IAAI,CAAC,aAAa,CAAC,EAAE;4BAAE,MAAM,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;oBAC5E,CAAC,CAAC;oBACF,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;iBAChD,CAAC,CAAC;gBACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpG,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC7C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,0CAA0C,CAAC,CAAC;YACzG,CAAC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QAChB,CAAC;KACD,CAAC;IACF,8GAA8G;IAC9G,2CAA2C;IAC3C,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACxF,OAAO,QAAQ,CAAC;AACjB,CAAC"}

package/dist/transports/http/listener/http-sessions.d.ts

@@ -0,0 +1,59 @@
+import { CapabilityError, type CaughtFailure } from '@vibesdotdev/kernel';
+import type * as z from 'zod/v4';
+import { ConnectionCloses } from '../../../core/protocol/lifecycle/binding-close.ts';
+import { type RpcChannelCloseAck } from '../../../core/protocol/lifecycle/channel-close.ts';
+import type { HttpListenOptions } from "../../../schemas/contracts/transports/http/http-transport.impl.ts";
+import { HttpListenSession } from './http-listen-session.ts';
+export declare abstract class HttpSessions {
+    protected readonly options: HttpListenOptions;
+    protected readonly sessions: Map<string, HttpListenSession>;
+    protected readonly sessionTokens: Map<string, string | null>;
+    /**
+         * What each session counts against for the session cap: the bearer, only when the registry or the attestation
+         * verifier accepted it; otherwise `null`, the anonymous caller. Unverified bearer strings are free to mint, so
+         * they never open a cap of their own.
+         */
+    protected readonly sessionCapKeys: Map<string, string | null>;
+    /** Connections the consumer disconnected: their binding close failures, kept for {@link closeAll}. */
+    protected readonly closedConnections: ConnectionCloses;
+    constructor(options: HttpListenOptions);
+    /** Active connection count (diagnostic + teardown). */
+    get connectionCount(): number;
+    /** A session by id (tests assert the owner ref-table size through it). */
+    session(connectionId: string): HttpListenSession | undefined;
+    /** Live connection ids (diagnostic + tests). */
+    liveConnectionIds(): string[];
+    /**
+         * Tear down every connection (free all refs + channels — no leak), then wait
+         * for their binding closes. Rejects with the typed close failures; every
+         * connection is torn down first either way.
+         */
+    closeAll(): Promise<void>;
+    /** A close failure answers the request that asked for the close, typed. */
+    protected closeFailed(failure: CaughtFailure): Response;
+    protected connectionId(req: Request): string | null;
+    protected onConnect(req: Request): Response;
+    protected onDisconnect(req: Request): Promise<Response>;
+    /** A transport leg can end without a final disconnect POST. Release its session capacity too. */
+    protected dropSession(session: HttpListenSession): Promise<CapabilityError | null>;
+    protected invalidRequest(): Response;
+    /** Parse the bounded body using the route's owning schema. */
+    protected readBody<T>(req: Request, schema: z.ZodType<T>): Promise<T | Response>;
+    protected closeAnswer(ack: RpcChannelCloseAck): Response;
+    protected sessionFor(req: Request): HttpListenSession | undefined;
+    protected noSession(): Response;
+}
+/** The reason a route failure is reported and answered with. */
+export declare const RPC_ROUTE_FAILED = "rpc-route-failed";
+/**
+ * How many live sessions one accepted bearer (one the token registry or the attestation verifier accepted; every
+ * other bearer, and none, is the anonymous caller) may hold on a handler. A handshake past
+ * it is answered 503 `UNAVAILABLE` `rpc-session-limit` and allocates nothing: a caller cannot make the owner keep an
+ * unbounded number of sessions it never disconnects.
+ */
+export declare const RPC_HTTP_MAX_SESSIONS_PER_BEARER = 1024;
+export declare const RPC_SESSION_LIMIT = "rpc-session-limit";
+export declare function routeFailed(path: string, cause: CaughtFailure): CapabilityError;
+export declare function bearer(req: Request): string | null;
+export declare function decodeBase64ToBytes(b64: string): Uint8Array;
+//# sourceMappingURL=http-sessions.d.ts.map

package/dist/transports/http/listener/http-sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-sessions.d.ts","sourceRoot":"","sources":["../../../../src/transports/http/listener/http-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAG1E,OAAO,KAAK,KAAK,CAAC,MAAM,QAAQ,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AACrF,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,mDAAmD,CAAC;AAG5F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mEAAmE,CAAC;AAG3G,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,8BAAsB,YAAY;IAetB,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,iBAAiB;IAdzD,SAAS,CAAC,QAAQ,CAAC,QAAQ,iCAAwC;IAEnE,SAAS,CAAC,QAAQ,CAAC,aAAa,6BAAoC;IAEpE;;;;WAII;IACH,SAAS,CAAC,QAAQ,CAAC,cAAc,6BAAoC;IAEtE,sGAAsG;IACrG,SAAS,CAAC,QAAQ,CAAC,iBAAiB,mBAA0B;gBAEhC,OAAO,EAAE,iBAAiB;IAEzD,uDAAuD;IACtD,IAAI,eAAe,IAAI,MAAM,CAE5B;IAEF,0EAA0E;IACzE,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;IAI7D,gDAAgD;IAC/C,iBAAiB,IAAI,MAAM,EAAE;IAI9B;;;;WAII;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ1B,2EAA2E;IAC1E,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,QAAQ;IAOxD,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI;IAInD,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,QAAQ;cAwC3B,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAS5D,iGAAiG;IACjG,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,iBAAiB;IASjD,SAAS,CAAC,cAAc,IAAI,QAAQ;IAIpC,8DAA8D;cAC7C,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,QAAQ,CAAC;IAavF,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,kBAAkB,GAAG,QAAQ;IAOxD,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,iBAAiB,GAAG,SAAS;IAKjE,SAAS,CAAC,SAAS,IAAI,QAAQ;CAM9B;AAMD,gEAAgE;AAChE,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,OAAO,CAAC;AAErD,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,eAAe,CAE/E;AAED,wBACS,MAAM,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAK3C;AAED,wBACS,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAKpD"}