@vibesdotdev/kernel-rpc 0.0.0-stage → 1.0.0-rc.2

package/dist/transports/messageport/messageport-listener.js

@@ -0,0 +1,162 @@
+import { ListenMessagePortInput, OversizedRequestIdSchema } from "../../schemas/contracts/transports/messageport/messageport-listener.js";
+import { createAppletCallbacks } from "./applet-callbacks.js";
+export { ListenMessagePortInput, OversizedRequestIdSchema } from "../../schemas/contracts/transports/messageport/messageport-listener.js";
+/** The LISTEN side — the host's half of an applet connection. */
+import { CapabilityError, DefaultReferenceTable } from '@vibesdotdev/kernel';
+import { dispatchRequest, isLifecycleDeadline, RPC_ERROR, rpcError } from '@vibesdotdev/kernel-rpc';
+import { attempt, attemptAsync, rethrow } from "../../core/protocol/lifecycle/attempt.js";
+import { recordRootAdvertisement } from "../../core/protocol/references/advertisement.js";
+import { readInput } from "../../core/protocol/references/caller-input.js";
+import { oversize } from "../../core/protocol/wire/limits.js";
+import { MESSAGEPORT_RPC_DEFAULT_REQUEST_DEADLINE_MS, MESSAGEPORT_RPC_MAX_IN_FLIGHT, MESSAGEPORT_RPC_MAX_MESSAGE_BYTES, MESSAGEPORT_RPC_PROTOCOL, MESSAGEPORT_RPC_TRANSPORT, MessagePortRpcFrameSchema } from "./connection/contracts.js";
+/** `listenMessagePort` input, read once (protocol/caller-input.ts). The port is the host's: kept by reference. */
+/** Bound one dispatch in time, on the owning runtime's lifecycle. */
+async function withDeadline(lifecycle, req, work, deadlineMs) {
+    const waited = await attemptAsync(() => lifecycle.wait(() => work, { timeoutMs: deadlineMs, reason: 'applet-rpc-dispatch' }));
+    if (waited.ok)
+        return waited.value;
+    if (isLifecycleDeadline(waited.failure))
+        throw new Error(`Applet request ${req.id} exceeded the host deadline.`);
+    return rethrow(waited.failure);
+}
+function byteLength(value) {
+    const encoded = attempt(() => new TextEncoder().encode(JSON.stringify(value) ?? '').length);
+    // A value that cannot be serialized is over any ceiling, so the caller
+    // refuses it as too large rather than sending it.
+    return encoded.ok ? encoded.value : Number.POSITIVE_INFINITY;
+}
+/** The id of an oversized request, read from one shallow property without parsing the frame. */
+/**
+ * Serve one applet over one MessagePort.
+ *
+ * The peer is UNTRUSTED — cross-origin and credential-free — so the same three
+ * bounds apply here as on the consumer side: a size ceiling before parsing, a
+ * concurrency cap, and no unhandled rejection reachable from a frame.
+ */
+export function listenMessagePort(portInput, targetInput) {
+    const { port, target } = readInput('listenMessagePort', ListenMessagePortInput, { port: portInput, target: targetInput });
+    const table = new DefaultReferenceTable('owner');
+    const rootRef = table.retain(target.root, 'object').id;
+    recordRootAdvertisement(table, rootRef, target.rootMethods);
+    const connectionId = crypto.randomUUID();
+    const remotePeer = Object.freeze({
+        runtimeId: connectionId,
+        transport: MESSAGEPORT_RPC_TRANSPORT,
+        connectionId,
+        verified: target.verifiedPeer === undefined ? undefined : Object.freeze({
+            source: target.verifiedPeer.source,
+            caller: Object.freeze(target.verifiedPeer.caller)
+        })
+    });
+    let inFlight = 0;
+    let closed = false;
+    // ---- Applet callbacks (SPEC rule 11): function refs only, `call` only, bounded, both directions ----
+    const { callbackFor, classifyOwnerResult, callbackAnswers } = createAppletCallbacks(table, target, (frame) => post(frame), () => closed);
+    const post = (frame) => {
+        if (closed)
+            return;
+        if (byteLength(frame) > MESSAGEPORT_RPC_MAX_MESSAGE_BYTES) {
+            throw oversize('MessagePort RPC frame exceeds the size ceiling.', 'rpc-message-too-large', MESSAGEPORT_RPC_MAX_MESSAGE_BYTES);
+        }
+        port.postMessage(frame);
+    };
+    const postSafely = (frame) => {
+        const posted = attempt(() => post(frame));
+        // The refusal itself cannot be posted: this port cannot carry an answer, so the listener stops serving it and the peer's own deadline answers each pending call RPC_DISCONNECTED.
+        if (!posted.ok)
+            stop();
+    };
+    const stop = () => {
+        closed = true;
+        // Every call the host made into a callback is answered now: the frame can no longer reply.
+        for (const [id, resolve] of callbackAnswers)
+            resolve({ id, error: rpcError(RPC_ERROR.DISCONNECTED, 'The applet connection closed.') });
+        callbackAnswers.clear();
+        table.clear();
+        port.removeEventListener?.('message', listener);
+        port.close?.();
+    };
+    const respond = (id, code, message) => {
+        postSafely({ t: 'res', res: { id, error: rpcError(code, message) } });
+    };
+    const handle = async (req) => {
+        try {
+            // A DEADLINE on the owner side too.  `inFlight` only falls in this `finally`, so a host method that never settles held its slot forever: 32 of them and the connection answered "too many concurrent requests" permanently, for its whole life.
+            const dispatch = () => dispatchRequest(req, {
+                table,
+                pipeline: target.pipeline,
+                // The transport NAME comes from the shared constant both ends import.
+                remotePeer,
+                // An applet passes DATA or CALLBACKS (SPEC rule 11): a function ref becomes a host-side callable with no host authority; an object or stream ref is refused, so a frame still cannot hand the host an object.
+                decodeArgs: (wire) => wire.map((value) => {
+                    if (value.t === 'json')
+                        return value.v;
+                    // A function ref decodes to a callable (RpcSource admits functions).
+                    if (value.t === 'ref' && value.kind === 'function')
+                        return callbackFor(value.id);
+                    throw new CapabilityError('An applet passes data or callbacks, never object or stream refs.', 'INVALID_INPUT', {
+                        reason: 'rpc-applet-ref-refused'
+                    });
+                }),
+                // Only a FUNCTION the host returns (an unsubscribe) becomes a new,
+                // `call`-only ref; the applet's reachable objects stay the one root.
+                classifyResult: classifyOwnerResult,
+                // No byte channels to an applet. `stream` gets NO_CHANNEL, which is an
+                // answer; silence was the bug.
+                bindChannel: () => null,
+                kindOf: target.kindOf ?? (() => target.kindId ?? 'applet')
+            });
+            const dispatched = await attemptAsync(() => withDeadline(target.lifecycle, req, target.runInvocation ? target.runInvocation(dispatch) : dispatch(), target.deadlineMs ?? MESSAGEPORT_RPC_DEFAULT_REQUEST_DEADLINE_MS));
+            if (!dispatched.ok) {
+                // A pipeline veto or a backend crash, answered rather than thrown into
+                // an unhandled rejection that would take the host process with it.
+                respond(req.id, RPC_ERROR.INVOKE_FAILED, dispatched.failure instanceof Error ? dispatched.failure.message : 'failed');
+                return;
+            }
+            const posted = attempt(() => post({ t: 'res', res: dispatched.value.response }));
+            // The ANSWER did not fit.
+            if (!posted.ok)
+                respond(req.id, RPC_ERROR.INVOKE_FAILED, 'Response exceeds the frame size ceiling.');
+        }
+        finally {
+            inFlight -= 1;
+        }
+    };
+    const listener = (event) => {
+        if (closed)
+            return;
+        if (byteLength(event.data) > MESSAGEPORT_RPC_MAX_MESSAGE_BYTES) {
+            // ANSWER it, do not drop it.
+            const oversized = OversizedRequestIdSchema.safeParse(event.data);
+            if (oversized.success)
+                respond(oversized.data.req.id, RPC_ERROR.INVOKE_FAILED, 'Request exceeds the frame size ceiling.');
+            return;
+        }
+        const frame = MessagePortRpcFrameSchema.safeParse(event.data);
+        if (!frame.success)
+            return;
+        // The frame's answer to a call the host made into one of its callbacks.
+        if (frame.data.t === 'res') {
+            callbackAnswers.get(frame.data.res.id)?.(frame.data.res);
+            return;
+        }
+        if (frame.data.t !== 'req')
+            return;
+        const req = frame.data.req;
+        if (inFlight >= MESSAGEPORT_RPC_MAX_IN_FLIGHT) {
+            respond(req.id, RPC_ERROR.INVOKE_FAILED, 'Too many concurrent applet requests');
+            return;
+        }
+        inFlight += 1;
+        void handle(req);
+    };
+    port.addEventListener('message', listener);
+    port.start?.();
+    // The handshake ADVERTISES the root ref, which is how the consumer learns what to target.
+    postSafely({ t: 'handshake', protocol: MESSAGEPORT_RPC_PROTOCOL, rootRef });
+    return {
+        rootRef,
+        close: stop
+    };
+}
+//# sourceMappingURL=messageport-listener.js.map

package/dist/transports/messageport/messageport-listener.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messageport-listener.js","sourceRoot":"","sources":["../../../src/transports/messageport/messageport-listener.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,wEAAwE,CAAC;AAC1I,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,wEAAwE,CAAC;AAE1I,iEAAiE;AACjE,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EACP,eAAe,EACf,mBAAmB,EACnB,SAAS,EACT,QAAQ,EAKP,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,0CAA0C,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,iDAAiD,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,MAAM,gDAAgD,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAE9D,OAAO,EACP,2CAA2C,EAC3C,6BAA6B,EAC7B,iCAAiC,EACjC,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EAExB,MAAM,2BAA2B,CAAC;AAEnC,kHAAkH;AAElH,qEAAqE;AACrE,KAAK,UAAU,YAAY,CAC1B,SAAuB,EACvB,GAAmB,EACnB,IAAgB,EAChB,UAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;IAC9H,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IACnC,IAAI,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,EAAE,8BAA8B,CAAC,CAAC;IACjH,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5F,uEAAuE;IACvE,kDAAkD;IAClD,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;AAC9D,CAAC;AAED,gGAAgG;AAEhG;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAChC,SAAyB,EACzB,WAAoC;IAEpC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,mBAAmB,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1H,MAAM,KAAK,GAAG,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;IACvD,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QAChC,SAAS,EAAE,YAAY;QACvB,SAAS,EAAE,yBAAyB;QACpC,YAAY;QACZ,QAAQ,EAAE,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YACvE,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM;YAClC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;SACjD,CAAC;KACF,CAAC,CAAC;IACH,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,uGAAuG;IACvG,MAAM,EAAE,WAAW,EAAE,mBAAmB,EAAE,eAAe,EAAE,GAAG,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAEzI,MAAM,IAAI,GAAG,CAAsB,KAAQ,EAAQ,EAAE;QACpD,IAAI,MAAM;YAAE,OAAO;QACnB,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,iCAAiC,EAAE,CAAC;YAC3D,MAAM,QAAQ,CAAC,iDAAiD,EAAE,uBAAuB,EAAE,iCAAiC,CAAC,CAAC;QAC/H,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAsB,KAAQ,EAAQ,EAAE;QAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,kLAAkL;QAClL,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,IAAI,EAAE,CAAC;IACxB,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,GAAS,EAAE;QACvB,MAAM,GAAG,IAAI,CAAC;QACd,2FAA2F;QAC3F,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,eAAe;YAAE,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,+BAA+B,CAAC,EAAE,CAAC,CAAC;QACvI,eAAe,CAAC,KAAK,EAAE,CAAC;QACxB,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,CAAC,mBAAmB,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,IAAY,EAAE,OAAe,EAAQ,EAAE;QACnE,UAAU,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,EAAE,GAAe,EAAiB,EAAE;QACvD,IAAI,CAAC;YACJ,gPAAgP;YAChP,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE;gBAC3C,KAAK;gBACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,sEAAsE;gBACtE,UAAU;gBACV,8MAA8M;gBAC9M,UAAU,EAAE,CAAC,IAA0B,EAAE,EAAE,CAC1C,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;oBAClB,IAAI,KAAK,CAAC,CAAC,KAAK,MAAM;wBAAE,OAAO,KAAK,CAAC,CAAC,CAAC;oBACvC,qEAAqE;oBACrE,IAAI,KAAK,CAAC,CAAC,KAAK,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;wBAAE,OAAO,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBACjF,MAAM,IAAI,eAAe,CAAC,kEAAkE,EAAE,eAAe,EAAE;wBAC9G,MAAM,EAAE,wBAAwB;qBAChC,CAAC,CAAC;gBACJ,CAAC,CAAC;gBACH,mEAAmE;gBACnE,qEAAqE;gBACrE,cAAc,EAAE,mBAAmB;gBACnC,uEAAuE;gBACvE,+BAA+B;gBAC/B,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC;aAC1D,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAC7E,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAClE,MAAM,CAAC,UAAU,IAAI,2CAA2C,CAAC,CAAC,CAAC;YACpE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;gBACpB,uEAAuE;gBACvE,mEAAmE;gBACnE,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBACtH,OAAO;YACR,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YACjF,0BAA0B;YAC1B,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,aAAa,EAAE,0CAA0C,CAAC,CAAC;QACtG,CAAC;gBAAS,CAAC;YACV,QAAQ,IAAI,CAAC,CAAC;QACf,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,KAA0B,EAAQ,EAAE;QACrD,IAAI,MAAM;YAAE,OAAO;QACnB,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,iCAAiC,EAAE,CAAC;YAChE,6BAA6B;YAC7B,MAAM,SAAS,GAAG,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjE,IAAI,SAAS,CAAC,OAAO;gBAAE,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,aAAa,EAAE,yCAAyC,CAAC,CAAC;YAC1H,OAAO;QACR,CAAC;QACD,MAAM,KAAK,GAAG,yBAAyB,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,OAAO;QAC3B,wEAAwE;QACxE,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YAC5B,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzD,OAAO;QACR,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK;YAAE,OAAO;QACnC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;QAC3B,IAAI,QAAQ,IAAI,6BAA6B,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,aAAa,EAAE,qCAAqC,CAAC,CAAC;YAChF,OAAO;QACR,CAAC;QACD,QAAQ,IAAI,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;IACf,0FAA0F;IAC1F,UAAU,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC,CAAC;IAE5E,OAAO;QACN,OAAO;QACP,KAAK,EAAE,IAAI;KACX,CAAC;AACH,CAAC"}

package/dist/transports/messageport/runtime-rpc-messageport.plugin.d.ts

@@ -0,0 +1,8 @@
+import type { RuntimeRpcMessagePortPluginOptions } from "../../schemas/contracts/transports/messageport/runtime-rpc-messageport.plugin.ts";
+export { PluginOptionsInput } from "../../schemas/contracts/transports/messageport/runtime-rpc-messageport.plugin.ts";
+export type { RuntimeRpcMessagePortPluginOptions } from "../../schemas/contracts/transports/messageport/runtime-rpc-messageport.plugin.ts";
+/** Transport plugin options, read once (protocol/caller-input.ts). */
+export declare function createRuntimeRpcMessagePortPlugin(optionsInput?: RuntimeRpcMessagePortPluginOptions): import("@vibesdotdev/kernel").RuntimePlugin;
+export declare const runtimeRpcMessagePortPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default runtimeRpcMessagePortPlugin;
+//# sourceMappingURL=runtime-rpc-messageport.plugin.d.ts.map

package/dist/transports/messageport/runtime-rpc-messageport.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-rpc-messageport.plugin.d.ts","sourceRoot":"","sources":["../../../src/transports/messageport/runtime-rpc-messageport.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,kFAAkF,CAAC;AAE3I,OAAO,EAAE,kBAAkB,EAAE,MAAM,kFAAkF,CAAC;AACtH,YAAY,EAAE,kCAAkC,EAAE,MAAM,kFAAkF,CAAC;AAuB3I,sEAAsE;AAEtE,wBAAgB,iCAAiC,CAChD,YAAY,GAAE,kCAAuC,+CAcrD;AAED,eAAO,MAAM,2BAA2B,6CAAsC,CAAC;AAC/E,eAAe,2BAA2B,CAAC"}

package/dist/transports/messageport/runtime-rpc-messageport.plugin.js

@@ -0,0 +1,38 @@
+import { PluginOptionsInput } from "../../schemas/contracts/transports/messageport/runtime-rpc-messageport.plugin.js";
+export { PluginOptionsInput } from "../../schemas/contracts/transports/messageport/runtime-rpc-messageport.plugin.js";
+/**
+ * Runtime RPC — MessagePort transport plugin.
+ *
+ * Requires the kind-owning `runtime-rpc` plugin and contributes only the
+ * descriptors this transport owns.
+ *
+ * It does NOT register a loader, and that is a real difference from the tcp and
+ * unix plugins rather than an omission to paper over. Those transports DIAL: a
+ * loader can open a socket from a descriptor alone. A MessagePort cannot be
+ * dialled — it is created by whoever owns both ends, handed over, and is
+ * single-use. The host that creates the channel calls `listenMessagePort`
+ * directly, which is why `AppletCanvas` does exactly that.
+ *
+ * The default descriptor list is also empty, where tcp's is empty for the same
+ * reason and this one was not: advertising a reachable `applet-sandbox` runtime
+ * with nothing behind it is the shape this branch exists to remove. A host that
+ * genuinely wants one passes `createMessagePortRpcDescriptor()` explicitly.
+ */
+import { createRuntimePlugin } from '@vibesdotdev/kernel';
+import { readInput } from "../../core/protocol/references/caller-input.js";
+import messagePortRpcDocsDescriptor from "./docs/runtime-rpc-messageport.docs.descriptor.js";
+/** Transport plugin options, read once (protocol/caller-input.ts). */
+export function createRuntimeRpcMessagePortPlugin(optionsInput = {}) {
+    const options = readInput('createRuntimeRpcMessagePortPlugin', PluginOptionsInput, optionsInput) ?? {};
+    const descriptors = (options.descriptors ?? []).filter((descriptor) => descriptor.transport === 'messageport');
+    return createRuntimePlugin({
+        id: 'runtime-rpc-messageport',
+        name: 'Runtime RPC — MessagePort transport',
+        description: 'Turns the MessagePort a sandboxed cross-origin frame already holds into an RpcConnection.',
+        dependencies: ['runtime-rpc'],
+        descriptors: [...descriptors, messagePortRpcDocsDescriptor]
+    });
+}
+export const runtimeRpcMessagePortPlugin = createRuntimeRpcMessagePortPlugin();
+export default runtimeRpcMessagePortPlugin;
+//# sourceMappingURL=runtime-rpc-messageport.plugin.js.map

package/dist/transports/messageport/runtime-rpc-messageport.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-rpc-messageport.plugin.js","sourceRoot":"","sources":["../../../src/transports/messageport/runtime-rpc-messageport.plugin.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kFAAkF,CAAC;AACtH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kFAAkF,CAAC;AAEtH;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,gDAAgD,CAAC;AAC3E,OAAO,4BAA4B,MAAM,mDAAmD,CAAC;AAE7F,sEAAsE;AAEtE,MAAM,UAAU,iCAAiC,CAChD,eAAmD,EAAE;IAErD,MAAM,OAAO,GAAG,SAAS,CAAC,mCAAmC,EAAE,kBAAkB,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC;IACvG,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CACrD,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,KAAK,aAAa,CACtD,CAAC;IACF,OAAO,mBAAmB,CAAC;QAC1B,EAAE,EAAE,yBAAyB;QAC7B,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EACV,2FAA2F;QAC5F,YAAY,EAAE,CAAC,aAAa,CAAC;QAC7B,WAAW,EAAE,CAAC,GAAG,WAAW,EAAE,4BAA4B,CAAC;KAC3D,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAG,iCAAiC,EAAE,CAAC;AAC/E,eAAe,2BAA2B,CAAC"}

package/dist/transports/relay/consumer/relay-channel.d.ts

@@ -0,0 +1,48 @@
+import type { CaughtFailure } from '@vibesdotdev/kernel';
+import { type RpcChannel } from '@vibesdotdev/kernel-rpc';
+import { LegFailures } from '../../../core/protocol/lifecycle/binding-close.ts';
+import { type RpcChannelCloseAck } from '../../../core/protocol/lifecycle/channel-close.ts';
+import { FailureDescriber } from '../../../core/protocol/transport/failure-describer.ts';
+import type { RelayConnectionInit, RelayFetch } from "../../../schemas/contracts/transports/relay/relay-connection.ts";
+/**
+ * A stream channel over the relay: SSE for owner→consumer bytes; POST write/close
+ * for consumer→owner bytes. Frame format is identical to the http transport.
+ */
+export declare class RelayStreamChannel implements RpcChannel {
+    private readonly channelId;
+    private readonly init;
+    private readonly fetchImpl;
+    /** The connection's leg keeper: a failed write is reported by the connection's close. */
+    private readonly legs;
+    /** Aborts this channel's SSE fetch: on its close, on a disconnect, and on the connection's close. */
+    private readonly abort;
+    private readonly onClose;
+    private readonly handlers;
+    private readonly end;
+    readonly ended: Promise<void>;
+    /** Bytes held in {@link pending}, bounded by `CHANNEL_PENDING_MAX_BYTES`. */
+    private pendingBytes;
+    /** The transport channel is live (neither end has closed it). */
+    private open;
+    /** The consumer discarded the channel locally. */
+    private disposed;
+    /** Pre-attach buffer — same pattern as HttpStreamChannel. */
+    private pending;
+    constructor(channelId: string, init: RelayConnectionInit, fetchImpl: RelayFetch, 
+    /** The connection's leg keeper: a failed write is reported by the connection's close. */
+    legs: LegFailures, describer: FailureDescriber, 
+    /** Aborts this channel's SSE fetch: on its close, on a disconnect, and on the connection's close. */
+    abort: AbortController, onClose: () => void);
+    write(data: Uint8Array): void;
+    onData(handler: (data: Uint8Array) => void): () => void;
+    /** The one close outcome; repeated closes return it. */
+    private closing;
+    close(): Promise<RpcChannelCloseAck>;
+    remoteClosed(): void;
+    /** The SSE leg or the connection dropped before the owner's CLOSE frame. */
+    disconnected(cause?: CaughtFailure): void;
+    /** Pump the SSE body from the broker stream endpoint. */
+    pumpSse(body: ReadableStream<Uint8Array>): Promise<void>;
+    private handleSseRecord;
+}
+//# sourceMappingURL=relay-channel.d.ts.map

package/dist/transports/relay/consumer/relay-channel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-channel.d.ts","sourceRoot":"","sources":["../../../../src/transports/relay/consumer/relay-channel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE9E,OAAO,EAAE,WAAW,EAAE,MAAM,mDAAmD,CAAC;AAChF,OAAO,EAAwD,KAAK,kBAAkB,EAAE,MAAM,mDAAmD,CAAC;AAElJ,OAAO,EAAE,gBAAgB,EAAE,MAAM,uDAAuD,CAAC;AAEzF,OAAO,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,iEAAiE,CAAC;AAIvH;;;GAGG;AACH,qBAAa,kBAAmB,YAAW,UAAU;IAcnD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,yFAAyF;IACzF,OAAO,CAAC,QAAQ,CAAC,IAAI;IAErB,qGAAqG;IACrG,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IArBzB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAyC;IAClE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,6EAA6E;IAC7E,OAAO,CAAC,YAAY,CAAK;IACzB,iEAAiE;IACjE,OAAO,CAAC,IAAI,CAAQ;IACpB,kDAAkD;IAClD,OAAO,CAAC,QAAQ,CAAS;IACzB,6DAA6D;IAC7D,OAAO,CAAC,OAAO,CAA2B;gBAGxB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,mBAAmB,EACzB,SAAS,EAAE,UAAU;IACtC,yFAAyF;IACxE,IAAI,EAAE,WAAW,EAClC,SAAS,EAAE,gBAAgB;IAC3B,qGAAqG;IACpF,KAAK,EAAE,eAAe,EACtB,OAAO,EAAE,MAAM,IAAI;IAMrC,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAgB7B,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI;IAkBvD,wDAAwD;IACxD,OAAO,CAAC,OAAO,CAA4C;IAE3D,KAAK,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAmCpC,YAAY,IAAI,IAAI;IAOpB,4EAA4E;IAC5E,YAAY,CAAC,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI;IAMzC,yDAAyD;IACnD,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAW9D,OAAO,CAAC,eAAe;CAiCvB"}

package/dist/transports/relay/consumer/relay-channel.js

@@ -0,0 +1,179 @@
+import { FRAME, decodeFrame } from '@vibesdotdev/kernel-rpc';
+import { attempt } from "../../../core/protocol/lifecycle/attempt.js";
+import { LegFailures } from "../../../core/protocol/lifecycle/binding-close.js";
+import { closeUnacknowledged, observableClose, postedCloseAck } from "../../../core/protocol/lifecycle/channel-close.js";
+import { ChannelEnd } from "../../../core/protocol/lifecycle/channel-end.js";
+import { FailureDescriber } from "../../../core/protocol/transport/failure-describer.js";
+import { CHANNEL_PENDING_MAX_BYTES, CHANNEL_PENDING_MAX_FRAMES, channelBufferFull, readSseRecords } from "../../../core/protocol/transport/sse.js";
+import { RELAY_ROUTE, RELAY_SSE_FRAME_EVENT, decodeBase64, encodeBase64 } from "../wire.js";
+import { buildHeaders } from "./relay-headers.js";
+/**
+ * A stream channel over the relay: SSE for owner→consumer bytes; POST write/close
+ * for consumer→owner bytes. Frame format is identical to the http transport.
+ */
+export class RelayStreamChannel {
+    channelId;
+    init;
+    fetchImpl;
+    legs;
+    abort;
+    onClose;
+    handlers = new Set();
+    end;
+    ended;
+    /** Bytes held in {@link pending}, bounded by `CHANNEL_PENDING_MAX_BYTES`. */
+    pendingBytes = 0;
+    /** The transport channel is live (neither end has closed it). */
+    open = true;
+    /** The consumer discarded the channel locally. */
+    disposed = false;
+    /** Pre-attach buffer — same pattern as HttpStreamChannel. */
+    pending = [];
+    constructor(channelId, init, fetchImpl, 
+    /** The connection's leg keeper: a failed write is reported by the connection's close. */
+    legs, describer, 
+    /** Aborts this channel's SSE fetch: on its close, on a disconnect, and on the connection's close. */
+    abort, onClose) {
+        this.channelId = channelId;
+        this.init = init;
+        this.fetchImpl = fetchImpl;
+        this.legs = legs;
+        this.abort = abort;
+        this.onClose = onClose;
+        this.end = new ChannelEnd(describer);
+        this.ended = this.end.ended;
+    }
+    write(data) {
+        if (!this.open)
+            return;
+        const url = new URL(RELAY_ROUTE.STREAM_WRITE, this.init.brokerOrigin);
+        // B + D: include consumerId + sessionToken so the DO validates capability and
+        // channel ownership fail-closed.
+        const body = {
+            hostId: this.init.hostId,
+            channelId: this.channelId,
+            consumerId: this.init.consumerId,
+            sessionToken: this.init.sessionToken,
+            data: encodeBase64(data)
+        };
+        const h = buildHeaders(this.init, { 'content-type': 'application/json' });
+        this.legs.track('stream-write', this.fetchImpl(url, { method: 'POST', headers: h, body: JSON.stringify(body) }));
+    }
+    onData(handler) {
+        if (this.disposed)
+            return () => { };
+        // First subscriber: flush frames that arrived before it attached, in order.
+        // Runs even after a remote close — bytes received while the channel was
+        // open are never lost to the attach race.
+        if (this.pending) {
+            const buffered = this.pending;
+            this.pending = null;
+            this.pendingBytes = 0;
+            for (const data of buffered)
+                handler(data);
+            this.end.flushed();
+        }
+        // An ended channel delivers nothing more: keep no reference to the handler.
+        if (!this.open)
+            return () => { };
+        this.handlers.add(handler);
+        return () => this.handlers.delete(handler);
+    }
+    /** The one close outcome; repeated closes return it. */
+    closing = null;
+    close() {
+        // A LOCAL close always discards and settles, even after the owner ended the
+        // channel; only a still-open transport channel gets an outbound close.
+        if (this.closing)
+            return this.closing;
+        this.disposed = true;
+        this.pending = null;
+        this.handlers.clear();
+        this.end.closedLocally();
+        this.abort.abort();
+        if (!this.open) {
+            this.closing = Promise.resolve(closeUnacknowledged('already-ended'));
+            return this.closing;
+        }
+        this.open = false;
+        const url = new URL(RELAY_ROUTE.STREAM_CLOSE, this.init.brokerOrigin);
+        // B + D: include consumerId + sessionToken so the DO validates capability and
+        // channel ownership fail-closed.
+        const body = {
+            hostId: this.init.hostId,
+            channelId: this.channelId,
+            consumerId: this.init.consumerId,
+            sessionToken: this.init.sessionToken
+        };
+        const h = buildHeaders(this.init, { 'content-type': 'application/json' });
+        // The broker's 2xx means it accepted and forwarded the CLOSE frame; the owner
+        // sends no answer back through it, so the close is forwarded, not acknowledged.
+        const starting = attempt(() => this.fetchImpl(url, { method: 'POST', headers: h, body: JSON.stringify(body) }));
+        const posted = starting.ok ? starting.value : Promise.reject(starting.failure);
+        this.onClose();
+        this.closing = observableClose(postedCloseAck(this.channelId, posted, closeUnacknowledged('forwarded-unacknowledged')));
+        return this.closing;
+    }
+    remoteClosed() {
+        if (!this.open)
+            return;
+        this.open = false;
+        this.handlers.clear();
+        this.onClose();
+    }
+    /** The SSE leg or the connection dropped before the owner's CLOSE frame. */
+    disconnected(cause) {
+        this.end.disconnected(cause);
+        this.remoteClosed();
+        this.abort.abort();
+    }
+    /** Pump the SSE body from the broker stream endpoint. */
+    async pumpSse(body) {
+        const pumped = await readSseRecords(body, (record) => this.handleSseRecord(record));
+        if (!pumped.ok) {
+            // An SSE read error is a disconnect; its cause travels on the rejected `ended`.
+            this.disconnected(pumped.failure);
+            return;
+        }
+        // A body that ends without the owner's CLOSE frame is a disconnect.
+        this.disconnected();
+    }
+    handleSseRecord(record) {
+        let payload = null;
+        for (const line of record.split('\n')) {
+            if (line.startsWith(`event: ${RELAY_SSE_FRAME_EVENT}`) || line.startsWith(`event:${RELAY_SSE_FRAME_EVENT}`)) {
+                // just mark it
+            }
+            else if (line.startsWith('data:')) {
+                payload = line.slice(5).trimStart();
+            }
+        }
+        if (payload === null)
+            return;
+        const frameBytes = decodeBase64(payload);
+        const frame = decodeFrame(frameBytes);
+        if (frame.type === FRAME.CLOSE) {
+            // The owner's end: every DATA frame before it was handled first.
+            this.end.remoteEnded(!this.pending?.length);
+            this.remoteClosed();
+            return;
+        }
+        if (this.pending) {
+            // Bounded: a peer cannot make this end hold an unbounded backlog for a subscriber that never attaches.
+            if (this.pending.length >= CHANNEL_PENDING_MAX_FRAMES || this.pendingBytes + frame.payload.byteLength > CHANNEL_PENDING_MAX_BYTES) {
+                this.pending = null;
+                this.pendingBytes = 0;
+                this.disconnected(channelBufferFull(this.channelId));
+                return;
+            }
+            this.pending.push(frame.payload);
+            this.pendingBytes += frame.payload.byteLength;
+            return;
+        }
+        if (!this.open)
+            return;
+        for (const h of this.handlers)
+            h(frame.payload);
+    }
+}
+//# sourceMappingURL=relay-channel.js.map

package/dist/transports/relay/consumer/relay-channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-channel.js","sourceRoot":"","sources":["../../../../src/transports/relay/consumer/relay-channel.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAmB,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,6CAA6C,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,mDAAmD,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,cAAc,EAA2B,MAAM,mDAAmD,CAAC;AAClJ,OAAO,EAAE,UAAU,EAAE,MAAM,iDAAiD,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,uDAAuD,CAAC;AACzF,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAEnJ,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC5F,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IAcZ;IACA;IACA;IAEA;IAGA;IACA;IArBD,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;IACjD,GAAG,CAAa;IACxB,KAAK,CAAgB;IAC9B,6EAA6E;IACrE,YAAY,GAAG,CAAC,CAAC;IACzB,iEAAiE;IACzD,IAAI,GAAG,IAAI,CAAC;IACpB,kDAAkD;IAC1C,QAAQ,GAAG,KAAK,CAAC;IACzB,6DAA6D;IACrD,OAAO,GAAwB,EAAE,CAAC;IAE1C,YACkB,SAAiB,EACjB,IAAyB,EACzB,SAAqB;IACtC,yFAAyF;IACxE,IAAiB,EAClC,SAA2B;IAC3B,qGAAqG;IACpF,KAAsB,EACtB,OAAmB;QARnB,cAAS,GAAT,SAAS,CAAQ;QACjB,SAAI,GAAJ,IAAI,CAAqB;QACzB,cAAS,GAAT,SAAS,CAAY;QAErB,SAAI,GAAJ,IAAI,CAAa;QAGjB,UAAK,GAAL,KAAK,CAAiB;QACtB,YAAO,GAAP,OAAO,CAAY;QAEpC,IAAI,CAAC,GAAG,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,IAAgB;QACrB,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtE,8EAA8E;QAC9E,iCAAiC;QACjC,MAAM,IAAI,GAAG;YACZ,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;YACxB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;YAChC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;YACpC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC;SACxB,CAAC;QACF,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAClH,CAAC;IAED,MAAM,CAAC,OAAmC;QACzC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;QACnC,4EAA4E;QAC5E,wEAAwE;QACxE,0CAA0C;QAC1C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;YAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;YACtB,KAAK,MAAM,IAAI,IAAI,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACpB,CAAC;QACD,4EAA4E;QAC5E,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,wDAAwD;IAChD,OAAO,GAAuC,IAAI,CAAC;IAE3D,KAAK;QACJ,4EAA4E;QAC5E,uEAAuE;QACvE,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC,CAAC;YACrE,OAAO,IAAI,CAAC,OAAO,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QAClB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtE,8EAA8E;QAC9E,iCAAiC;QACjC,MAAM,IAAI,GAAG;YACZ,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;YACxB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;YAChC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;SACpC,CAAC;QACF,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC1E,8EAA8E;QAC9E,gFAAgF;QAChF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAChH,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/E,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,eAAe,CAC7B,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,mBAAmB,CAAC,0BAA0B,CAAC,CAAC,CACvF,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAED,YAAY;QACX,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,EAAE,CAAC;IAChB,CAAC;IAED,4EAA4E;IAC5E,YAAY,CAAC,KAAqB;QACjC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,OAAO,CAAC,IAAgC;QAC7C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,gFAAgF;YAChF,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO;QACR,CAAC;QACD,oEAAoE;QACpE,IAAI,CAAC,YAAY,EAAE,CAAC;IACrB,CAAC;IAEO,eAAe,CAAC,MAAc;QACrC,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,qBAAqB,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,qBAAqB,EAAE,CAAC,EAAE,CAAC;gBAC7G,eAAe;YAChB,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACrC,CAAC;QACF,CAAC;QACD,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO;QAC7B,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;YAChC,iEAAiE;YACjE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO;QACR,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,uGAAuG;YACvG,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,0BAA0B,IAAI,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,yBAAyB,EAAE,CAAC;gBACnI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;gBACtB,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;gBACrD,OAAO;YACR,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAC9C,OAAO;QACR,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;CACD"}

package/dist/transports/relay/consumer/relay-connection.d.ts

@@ -0,0 +1,36 @@
+import type { CapabilityError } from '@vibesdotdev/kernel';
+import { type RpcInvoke, type RpcResponse } from '@vibesdotdev/kernel-rpc';
+import { RelayExchange } from "./relay-exchange.ts";
+export { ownRelayConnectionLifetime } from './relay-exchange.ts';
+export { RelayStreamChannel } from "./relay-channel.ts";
+export { buildHeaders } from "./relay-headers.ts";
+export type { RelayConnectionInit, RelayFetch, RelayHeaders } from "../../../schemas/contracts/transports/relay/relay-connection.ts";
+export declare class RelayConnection extends RelayExchange {
+    /** Register the handler for OWNER-initiated requests (reverse leg, §3.5). */
+    onRequest(handler: (req: RpcInvoke) => Promise<RpcResponse>): void;
+    /**
+         * Close the connection: tear down channels and the reverse channel, reject
+         * future sends, then wait for every fire-and-forget leg. Rejects typed
+         * `rpc-leg-failed` when a leg failed; repeated calls share one outcome.
+         */
+    close(): Promise<void>;
+    /** {@link close}, resolving to its typed failure instead of rejecting. */
+    shutdown(): Promise<CapabilityError | null>;
+    /** Send transport close with its own live response leg, after normal sends were fenced. */
+    private postConsumerClose;
+    /**
+         * Open the reverse SSE channel — a long-lived SSE GET that delivers
+         * OWNER-initiated RpcInvoke frames (callback invocations) to the consumer.
+         * The broker delivers JSON-encoded {type:'reverse_invoke', request:RpcInvoke}
+         * events on this channel.
+         */
+    protected startReverseChannel(): Promise<void>;
+    protected handleReverseRecord(record: string): void;
+    /**
+         * POST a reverse-leg response back to the broker (§3.7, G).
+         * G: include our sessionToken so the DO can validate the reverse-reply
+         * capability token before forwarding down the daemon socket.
+         */
+    protected postReverseReply(consumerId: string, response: RpcResponse): Promise<Response | undefined>;
+}
+//# sourceMappingURL=relay-connection.d.ts.map

package/dist/transports/relay/consumer/relay-connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-connection.d.ts","sourceRoot":"","sources":["../../../../src/transports/relay/consumer/relay-connection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAa,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAQtF,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,YAAY,EAAE,mBAAmB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,iEAAiE,CAAC;AAErI,qBAAa,eAAgB,SAAQ,aAAa;IAClD,6EAA6E;IAC5E,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI;IAUnE;;;;WAII;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK7B,0EAA0E;IACzE,QAAQ,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IA6B5C,2FAA2F;YAC5E,iBAAiB;IAwBhC;;;;;WAKI;cACa,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IA+BrD,SAAS,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IA8BnD;;;;WAII;cACa,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;CAkB1G"}