@vibesdotdev/kernel-rpc 0.0.0-stage → 1.0.0-rc.2

package/dist/transports/relay/consumer/relay-connection.js

@@ -0,0 +1,190 @@
+import { RPC_ERROR } from '@vibesdotdev/kernel-rpc';
+import { attempt, attemptAsync, rethrow, settled } from "../../../core/protocol/lifecycle/attempt.js";
+import { CONNECTION_CLOSE_DEADLINE_MS, isAlreadyClosedStatus } from "../../../core/protocol/lifecycle/binding-close.js";
+import { readSseRecords } from "../../../core/protocol/transport/sse.js";
+import { RpcResponseSchema } from "../../../core/protocol/wire/schemas.js";
+import { jsonResponse } from "../../../core/protocol/wire/json-wire.js";
+import { rpcFailure } from "../../../core/protocol/wire/verbs.js";
+import { RELAY_ROUTE, RelayReverseInvokeSchema } from "../wire.js";
+import { RelayExchange } from "./relay-exchange.js";
+import { buildHeaders } from "./relay-headers.js";
+export { ownRelayConnectionLifetime } from "./relay-exchange.js";
+export { RelayStreamChannel } from "./relay-channel.js";
+export { buildHeaders } from "./relay-headers.js";
+export class RelayConnection extends RelayExchange {
+    /** Register the handler for OWNER-initiated requests (reverse leg, §3.5). */
+    onRequest(handler) {
+        this.reverseHandler = handler;
+        // Start the reverse SSE channel so the broker can push invokes to us. It is
+        // long-lived, so close() does not wait on it; a failure other than our own
+        // close aborting it is kept and reported by close().
+        void settled(this.startReverseChannel()).then((started) => {
+            if (!started.ok)
+                this.legs.keep('reverse-channel', started.failure);
+        });
+    }
+    /**
+         * Close the connection: tear down channels and the reverse channel, reject
+         * future sends, then wait for every fire-and-forget leg. Rejects typed
+         * `rpc-leg-failed` when a leg failed; repeated calls share one outcome.
+         */
+    async close() {
+        const failure = await this.shutdown();
+        if (failure)
+            throw failure;
+    }
+    /** {@link close}, resolving to its typed failure instead of rejecting. */
+    shutdown() {
+        if (this.closing)
+            return this.closing;
+        const outcome = Promise.withResolvers();
+        this.closing = outcome.promise;
+        this.closedFlag = true;
+        this.resolveClosed();
+        this.unown();
+        this.connectionAbort.abort();
+        for (const abort of this.opening)
+            abort.abort();
+        this.opening.clear();
+        for (const channel of this.channels.values())
+            channel.disconnected();
+        this.channels.clear();
+        this.reverseAbort?.abort();
+        this.reverseAbort = null;
+        void (async () => {
+            // Already-issued releases must reach the broker before close revokes
+            // ordinary capability authority. Invokes are aborted, never joined here.
+            const released = await this.releases.settleWithin(this.init.lifecycle, this.releaseAbort);
+            if (released)
+                this.legs.keep('release', released);
+            this.legs.track('consumer-close', this.init.lifecycle.wait(signal => this.postConsumerClose(signal), {
+                timeoutMs: CONNECTION_CLOSE_DEADLINE_MS, reason: 'rpc-relay-consumer-close'
+            }));
+            const failure = await this.legs.settleWithin(this.init.lifecycle, this.finalizingAbort);
+            this.finishLifetime();
+            outcome.resolve(failure);
+        })();
+        return this.closing;
+    }
+    /** Send transport close with its own live response leg, after normal sends were fenced. */
+    async postConsumerClose(signal) {
+        const id = crypto.randomUUID();
+        const url = new URL(RELAY_ROUTE.RPC, this.init.brokerOrigin);
+        url.searchParams.set('hostId', this.init.hostId);
+        const response = await this.fetchImpl(url, {
+            method: 'POST',
+            headers: buildHeaders(this.init, { 'content-type': 'application/json' }),
+            body: JSON.stringify({ type: 'consumer_close', id,
+                consumerId: this.init.consumerId, sessionToken: this.init.sessionToken }),
+            signal
+        });
+        if (!response.ok) {
+            if (response.body)
+                await response.body.cancel();
+            throw rpcFailure(RPC_ERROR.DISCONNECTED, 'The broker refused consumer cleanup.', { status: response.status }, 'rpc-connection-close-failed');
+        }
+        const parsed = RpcResponseSchema.safeParse(await response.json());
+        if (!parsed.success || parsed.data.id !== id)
+            throw rpcFailure(RPC_ERROR.DISCONNECTED, 'Invalid consumer close acknowledgement.', undefined, 'rpc-connection-close-failed');
+        if (parsed.data.error) {
+            const failure = this.describer.describeWireError(parsed.data.error);
+            throw rpcFailure(failure.code, failure.message, failure.details, failure.reason);
+        }
+    }
+    /**
+         * Open the reverse SSE channel — a long-lived SSE GET that delivers
+         * OWNER-initiated RpcInvoke frames (callback invocations) to the consumer.
+         * The broker delivers JSON-encoded {type:'reverse_invoke', request:RpcInvoke}
+         * events on this channel.
+         */
+    async startReverseChannel() {
+        if (this.closedFlag || !this.reverseHandler)
+            return;
+        this.reverseAbort = new AbortController();
+        const url = new URL(RELAY_ROUTE.STREAM, this.init.brokerOrigin);
+        url.searchParams.set('hostId', this.init.hostId);
+        url.searchParams.set('reverse', '1');
+        // G + B: per-consumer reverse channel; include capability tokens for DO validation.
+        url.searchParams.set('consumerId', this.init.consumerId);
+        url.searchParams.set('sessionToken', this.init.sessionToken);
+        const abort = this.reverseAbort.signal;
+        const fetched = await attemptAsync(() => this.fetchImpl(url, {
+            method: 'GET',
+            headers: buildHeaders(this.init),
+            signal: abort
+        }));
+        if (!fetched.ok) {
+            // Our own close aborted it: nothing failed. Anything else is this leg's failure.
+            if (abort.aborted)
+                return;
+            return rethrow(fetched.failure);
+        }
+        const response = fetched.value;
+        if (!response.ok || !response.body) {
+            if (isAlreadyClosedStatus(response.status))
+                return;
+            throw new Error(`reverse channel refused: broker http ${response.status}`);
+        }
+        const read = await readSseRecords(response.body, (record) => this.handleReverseRecord(record), abort);
+        // Our own close aborted the read: nothing failed.
+        if (!read.ok)
+            rethrow(read.failure);
+    }
+    handleReverseRecord(record) {
+        let payload = null;
+        let eventType = null;
+        for (const line of record.split('\n')) {
+            if (line.startsWith('event:'))
+                eventType = line.slice(6).trim();
+            if (line.startsWith('data:'))
+                payload = line.slice(5).trimStart();
+        }
+        if (eventType !== 'reverse_invoke' || !payload || !this.reverseHandler)
+            return;
+        const json = attempt(() => JSON.parse(payload));
+        if (!json.ok) {
+            this.legs.keep('reverse-invoke', json.failure instanceof SyntaxError
+                ? rpcFailure(RPC_ERROR.DISCONNECTED, 'Invalid RPC reverse request.', undefined, 'rpc-reverse-request-invalid')
+                : json.failure);
+            void this.shutdown();
+            return;
+        }
+        const parsed = RelayReverseInvokeSchema.safeParse(json.value);
+        if (!parsed.success || (parsed.data.consumerId !== undefined && parsed.data.consumerId !== this.init.consumerId)) {
+            this.legs.keep('reverse-invoke', rpcFailure(RPC_ERROR.DISCONNECTED, 'Invalid RPC reverse request.', undefined, 'rpc-reverse-request-invalid'));
+            void this.shutdown();
+            return;
+        }
+        const { consumerId, request } = parsed.data;
+        const handler = this.reverseHandler;
+        this.legs.track('reverse-reply', (async () => {
+            const response = await handler(request);
+            return consumerId === undefined ? undefined : this.postReverseReply(consumerId, response);
+        })());
+    }
+    /**
+         * POST a reverse-leg response back to the broker (§3.7, G).
+         * G: include our sessionToken so the DO can validate the reverse-reply
+         * capability token before forwarding down the daemon socket.
+         */
+    async postReverseReply(consumerId, response) {
+        if (this.closedFlag)
+            return undefined;
+        const url = new URL(RELAY_ROUTE.RPC, this.init.brokerOrigin);
+        url.searchParams.set('hostId', this.init.hostId);
+        // G: include sessionToken so DO validates (consumerId, sessionToken) FAIL-CLOSED.
+        const envelope = {
+            type: 'rpc_response',
+            consumerId,
+            sessionToken: this.init.sessionToken,
+            response: jsonResponse(response, false)
+        };
+        return this.fetchImpl(url, {
+            method: 'POST',
+            headers: buildHeaders(this.init, { 'content-type': 'application/json' }),
+            body: JSON.stringify(envelope),
+            signal: this.connectionAbort.signal
+        });
+    }
+}
+//# sourceMappingURL=relay-connection.js.map

package/dist/transports/relay/consumer/relay-connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-connection.js","sourceRoot":"","sources":["../../../../src/transports/relay/consumer/relay-connection.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAoC,MAAM,yBAAyB,CAAC;AACtF,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,6CAA6C,CAAC;AACtG,OAAO,EAAE,4BAA4B,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AACxH,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIlD,MAAM,OAAO,eAAgB,SAAQ,aAAa;IAClD,6EAA6E;IAC5E,SAAS,CAAC,OAAiD;QAC1D,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;QAC9B,4EAA4E;QAC5E,2EAA2E;QAC3E,qDAAqD;QACrD,KAAK,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACzD,IAAI,CAAC,OAAO,CAAC,EAAE;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACJ,CAAC;IAEF;;;;WAII;IACH,KAAK,CAAC,KAAK;QACV,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC;IAC5B,CAAC;IAEF,0EAA0E;IACzE,QAAQ;QACP,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QAChC,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,EAA0B,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,OAAO,CAAC,YAAY,EAAE,CAAC;QACrE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,KAAK,CAAC,KAAK,IAAI,EAAE;YACb,qEAAqE;YACrE,yEAAyE;YACzE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YAC1F,IAAI,QAAQ;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE;gBACjG,SAAS,EAAE,4BAA4B,EAAE,MAAM,EAAE,0BAA0B;aAC9E,CAAC,CAAC,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YACxF,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAEF,2FAA2F;IAClF,KAAK,CAAC,iBAAiB,CAAC,MAAmB;QAClD,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YAC1C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;YACxE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE;gBAChD,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1E,MAAM;SACN,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,IAAI,QAAQ,CAAC,IAAI;gBAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAChD,MAAM,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE,sCAAsC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC;QAC9I,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE;YAAE,MAAM,UAAU,CAAC,SAAS,CAAC,YAAY,EACpF,yCAAyC,EAAE,SAAS,EAAE,6BAA6B,CAAC,CAAC;QACtF,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpE,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAClF,CAAC;IACF,CAAC;IAEF;;;;;WAKI;IACO,KAAK,CAAC,mBAAmB;QAClC,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO;QACpD,IAAI,CAAC,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACrC,oFAAoF;QACpF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAE7D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YAC5D,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,MAAM,EAAE,KAAK;SACb,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACjB,iFAAiF;YACjF,IAAI,KAAK,CAAC,OAAO;gBAAE,OAAO;YAC1B,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpC,IAAI,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO;YACnD,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;QACtG,kDAAkD;QAClD,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAEQ,mBAAmB,CAAC,MAAc;QAC1C,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,IAAI,SAAS,GAAkB,IAAI,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAChE,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QACnE,CAAC;QACD,IAAI,SAAS,KAAK,gBAAgB,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO;QAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,OAAO,YAAY,WAAW;gBACnE,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE,8BAA8B,EAAE,SAAS,EAAE,6BAA6B,CAAC;gBAC9G,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjB,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO;QACR,CAAC;QACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAClH,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE,8BAA8B,EAAE,SAAS,EAAE,6BAA6B,CAAC,CAAC,CAAC;YAC/I,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO;QACR,CAAC;QACD,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,KAAK,IAAI,EAAE;YAC5C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACxC,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC3F,CAAC,CAAC,EAAE,CAAC,CAAC;IACP,CAAC;IAEF;;;;WAII;IACO,KAAK,CAAC,gBAAgB,CAAC,UAAkB,EAAE,QAAqB;QACzE,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,kFAAkF;QAClF,MAAM,QAAQ,GAAG;YAChB,IAAI,EAAE,cAAc;YACpB,UAAU;YACV,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;YACpC,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC;SACvC,CAAC;QACF,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YAC1B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;YACxE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC9B,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM;SACnC,CAAC,CAAC;IACJ,CAAC;CACD"}

package/dist/transports/relay/consumer/relay-exchange.d.ts

@@ -0,0 +1,49 @@
+import type { CapabilityError, CaughtFailure } from '@vibesdotdev/kernel';
+import { type RefId, type RpcChannel, type RpcInvoke, type RpcRequest, type RpcResponse } from '@vibesdotdev/kernel-rpc';
+import { LegFailures } from '../../../core/protocol/lifecycle/binding-close.ts';
+import { FailureDescriber } from '../../../core/protocol/transport/failure-describer.ts';
+import type { RelayConnectionInit, RelayFetch } from "../../../schemas/contracts/transports/relay/relay-connection.ts";
+import { RelayStreamChannel } from "./relay-channel.ts";
+export declare function ownRelayConnectionLifetime(lifecycle: RelayConnectionInit['lifecycle']): () => void;
+export declare abstract class RelayExchange {
+    protected readonly init: RelayConnectionInit;
+    protected readonly finishLifetime: () => void;
+    protected closedFlag: boolean;
+    protected readonly connectionAbort: AbortController;
+    protected readonly finalizingAbort: AbortController;
+    protected readonly releaseAbort: AbortController;
+    protected readonly releases: LegFailures;
+    protected resolveClosed: () => void;
+    readonly closed: Promise<void>;
+    protected readonly channels: Map<string, RelayStreamChannel>;
+    protected readonly fetchImpl: RelayFetch;
+    /** Handler for reverse-leg invokes (OWNER→consumer callback invocations). */
+    protected reverseHandler: ((req: RpcInvoke) => Promise<RpcResponse>) | null;
+    /** SSE connection for the reverse leg (broker→consumer invoke channel). */
+    protected reverseAbort: AbortController | null;
+    /** Fire-and-forget legs (release, stream write, reverse channel and reply): failures kept for the close. */
+    protected readonly legs: LegFailures;
+    /** The one close outcome, once a close began (never rejects). */
+    protected closing: Promise<CapabilityError | null> | null;
+    /** Every failure this connection keeps or returns passes through it: the sessionToken, bearer and header values never leave. */
+    protected readonly describer: FailureDescriber;
+    /** Stream fetches still opening: a close aborts them. */
+    protected readonly opening: Set<AbortController>;
+    /** Unhooks this connection from its runtime's lifecycle. */
+    protected readonly unown: () => void;
+    constructor(init: RelayConnectionInit, finishLifetime?: () => void);
+    get rootRef(): string;
+    /**
+         * Send a single request/response verb (`invoke` or `release`) via POST to the
+         * broker's /api/relay/rpc endpoint.
+         */
+    send(req: RpcRequest): Promise<RpcResponse>;
+    private exchange;
+    /** An exchange that failed before an answer parsed: an unreadable body is invalid, a dropped fetch is a disconnect. */
+    protected exchangeFailed(id: string, failure: CaughtFailure): RpcResponse;
+    /** Open a stream channel via SSE GET + POST write/close legs. */
+    openStream(ref: RefId, channelName: string): Promise<RpcChannel>;
+    protected postRpc(body: RpcRequest): Promise<Response>;
+    abstract shutdown(): Promise<CapabilityError | null>;
+}
+//# sourceMappingURL=relay-exchange.d.ts.map

package/dist/transports/relay/consumer/relay-exchange.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-exchange.d.ts","sourceRoot":"","sources":["../../../../src/transports/relay/consumer/relay-exchange.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAuB,KAAK,KAAK,EAAE,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE9I,OAAO,EAAE,WAAW,EAAE,MAAM,mDAAmD,CAAC;AAEhF,OAAO,EAAE,gBAAgB,EAAE,MAAM,uDAAuD,CAAC;AAIzF,OAAO,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,iEAAiE,CAAC;AAEvH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,mBAAmB,CAAC,WAAW,CAAC,GAAG,MAAM,IAAI,CAIlG;AAED,8BAAsB,aAAa;IAoCvB,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,mBAAmB;IACvD,SAAS,CAAC,QAAQ,CAAC,cAAc,QA3C6D,IAAI;IAOnG,SAAS,CAAC,UAAU,UAAS;IAC7B,SAAS,CAAC,QAAQ,CAAC,eAAe,kBAAyB;IAC3D,SAAS,CAAC,QAAQ,CAAC,eAAe,kBAAyB;IAC3D,SAAS,CAAC,QAAQ,CAAC,YAAY,kBAAyB;IACxD,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAEzC,SAAS,CAAC,aAAa,EAAE,MAAM,IAAI,CAAY;IAE/C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/B,SAAS,CAAC,QAAQ,CAAC,QAAQ,kCAAyC;IAEpE,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAEzC,6EAA6E;IAC5E,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC,GAAG,IAAI,CAAQ;IAEpF,2EAA2E;IAC1E,SAAS,CAAC,YAAY,EAAE,eAAe,GAAG,IAAI,CAAQ;IAEvD,4GAA4G;IAC3G,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAEtC,iEAAiE;IAChE,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,IAAI,CAAQ;IAElE,gIAAgI;IAC/H,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IAEhD,yDAAyD;IACxD,SAAS,CAAC,QAAQ,CAAC,OAAO,uBAA8B;IAEzD,4DAA4D;IAC3D,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAY;gBAElB,IAAI,EAAE,mBAAmB,EACpC,cAAc,SA3C6D,IA2ChB;IAc/E,IAAI,OAAO,IAAI,MAAM,CAEnB;IAEF;;;WAGI;IACH,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;YAU7B,QAAQ;IA6CvB,uHAAuH;IACtH,SAAS,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,WAAW;IAM1E,iEAAiE;IAC1D,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;cA2CvD,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC;aAiB5C,QAAQ,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;CAC1D"}

package/dist/transports/relay/consumer/relay-exchange.js

@@ -0,0 +1,189 @@
+import { RPC_ERROR, rpcError } from '@vibesdotdev/kernel-rpc';
+import { attempt, attemptAsync, settled } from "../../../core/protocol/lifecycle/attempt.js";
+import { LegFailures } from "../../../core/protocol/lifecycle/binding-close.js";
+import { ownedByLifecycle } from "../../../core/protocol/lifecycle/lifecycle-owned.js";
+import { FailureDescriber } from "../../../core/protocol/transport/failure-describer.js";
+import { guardFetch } from "../../../core/protocol/transport/fetch-failure.js";
+import { hasWireDates, jsonRequest } from "../../../core/protocol/wire/json-wire.js";
+import { RpcResponseSchema } from "../../../core/protocol/wire/schemas.js";
+import { RELAY_ROUTE, RelayUnavailableSchema } from "../wire.js";
+import { RelayStreamChannel } from "./relay-channel.js";
+import { buildHeaders } from "./relay-headers.js";
+export function ownRelayConnectionLifetime(lifecycle) {
+    const finished = Promise.withResolvers();
+    void lifecycle.own(() => finished.promise);
+    return finished.resolve;
+}
+export class RelayExchange {
+    init;
+    finishLifetime;
+    closedFlag = false;
+    connectionAbort = new AbortController();
+    finalizingAbort = new AbortController();
+    releaseAbort = new AbortController();
+    releases;
+    resolveClosed = () => { };
+    closed;
+    channels = new Map();
+    fetchImpl;
+    /** Handler for reverse-leg invokes (OWNER→consumer callback invocations). */
+    reverseHandler = null;
+    /** SSE connection for the reverse leg (broker→consumer invoke channel). */
+    reverseAbort = null;
+    /** Fire-and-forget legs (release, stream write, reverse channel and reply): failures kept for the close. */
+    legs;
+    /** The one close outcome, once a close began (never rejects). */
+    closing = null;
+    /** Every failure this connection keeps or returns passes through it: the sessionToken, bearer and header values never leave. */
+    describer;
+    /** Stream fetches still opening: a close aborts them. */
+    opening = new Set();
+    /** Unhooks this connection from its runtime's lifecycle. */
+    unown = () => { };
+    constructor(init, finishLifetime = ownRelayConnectionLifetime(init.lifecycle)) {
+        this.init = init;
+        this.finishLifetime = finishLifetime;
+        this.describer = new FailureDescriber([init.sessionToken, init.token, ...Object.values(init.headers ?? {})]);
+        const fetchImpl = init.fetchImpl ?? globalThis.fetch.bind(globalThis);
+        this.fetchImpl = guardFetch((input, options) => fetchImpl(input, {
+            ...options, signal: options?.signal ? AbortSignal.any([options.signal, this.finalizingAbort.signal]) : this.finalizingAbort.signal
+        }), this.describer);
+        this.legs = new LegFailures(init.consumerId, this.describer);
+        this.releases = new LegFailures(init.consumerId, this.describer);
+        this.closed = new Promise((r) => {
+            this.resolveClosed = r;
+        });
+        this.unown = ownedByLifecycle(init.signal ?? init.lifecycle.signal, () => void this.shutdown());
+    }
+    get rootRef() {
+        return this.init.rootRef;
+    }
+    /**
+         * Send a single request/response verb (`invoke` or `release`) via POST to the
+         * broker's /api/relay/rpc endpoint.
+         */
+    send(req) {
+        const exchange = Promise.withResolvers();
+        this.legs.track('exchange', exchange.promise);
+        void settled(this.exchange(req)).then(answer => {
+            if (answer.ok)
+                exchange.resolve(answer.value);
+            else
+                exchange.reject(answer.failure);
+        });
+        return exchange.promise;
+    }
+    async exchange(req) {
+        if (this.closedFlag) {
+            return { id: req.id, error: rpcError(RPC_ERROR.DISCONNECTED, 'connection closed') };
+        }
+        // `release` is fire-and-forget; its failure is reported by close().
+        if (req.verb === 'release') {
+            this.releases.track('release', this.postRpc(req));
+            return { id: req.id };
+        }
+        const posted = await attemptAsync(() => this.postRpc(req));
+        if (!posted.ok)
+            return this.exchangeFailed(req.id, posted.failure);
+        const res = posted.value;
+        if (res.status === 503) {
+            // The broker's typed answer names the code; an error body that is not
+            // JSON is a typed failure carrying the status, never an empty object.
+            const text = await attemptAsync(() => res.text());
+            if (!text.ok)
+                return this.exchangeFailed(req.id, text.failure);
+            void this.shutdown();
+            const body = attempt(() => JSON.parse(text.value));
+            if (body.ok) {
+                const parsed = RelayUnavailableSchema.safeParse(body.value);
+                const code = parsed.success ? parsed.data.code ?? RPC_ERROR.DISCONNECTED : RPC_ERROR.DISCONNECTED;
+                return { id: req.id, error: rpcError(code, 'daemon not connected', { status: 503 }) };
+            }
+            if (!(body.failure instanceof SyntaxError))
+                return this.exchangeFailed(req.id, body.failure);
+            return { id: req.id, error: rpcError(RPC_ERROR.DISCONNECTED, 'daemon not connected: broker http 503 with an unparseable body', { status: 503 }) };
+        }
+        if (!res.ok) {
+            void this.shutdown();
+            return {
+                id: req.id,
+                error: rpcError(RPC_ERROR.DISCONNECTED, `broker http ${res.status}`)
+            };
+        }
+        const answer = await attemptAsync(() => res.json());
+        if (!answer.ok)
+            return this.exchangeFailed(req.id, answer.failure);
+        const parsed = RpcResponseSchema.safeParse(answer.value);
+        if (!parsed.success || parsed.data.id !== req.id || hasWireDates(parsed.data)) {
+            void this.shutdown();
+            return { id: req.id, error: rpcError(RPC_ERROR.DISCONNECTED, 'Invalid RPC response.', undefined, 'rpc-response-invalid') };
+        }
+        // A peer's error text is the peer's: every configured secret is removed before it reaches the caller.
+        return parsed.data.error ? { ...parsed.data, error: this.describer.describeWireError(parsed.data.error) } : parsed.data;
+    }
+    /** An exchange that failed before an answer parsed: an unreadable body is invalid, a dropped fetch is a disconnect. */
+    exchangeFailed(id, failure) {
+        void this.shutdown();
+        if (failure instanceof SyntaxError)
+            return { id, error: rpcError(RPC_ERROR.DISCONNECTED, 'Invalid RPC response.', undefined, 'rpc-response-invalid') };
+        return { id, error: rpcError(RPC_ERROR.DISCONNECTED, this.describer.describe(failure).message) };
+    }
+    /** Open a stream channel via SSE GET + POST write/close legs. */
+    async openStream(ref, channelName) {
+        if (this.closedFlag)
+            throw rpcError(RPC_ERROR.DISCONNECTED, 'connection closed');
+        // D: channelId is DO-minted; do NOT supply it to the broker. The DO returns it
+        // in the x-relay-channel-id response header.
+        const url = new URL(RELAY_ROUTE.STREAM, this.init.brokerOrigin);
+        url.searchParams.set('hostId', this.init.hostId);
+        url.searchParams.set('ref', ref);
+        url.searchParams.set('channel', channelName);
+        // B: include capability tokens for DO validation.
+        url.searchParams.set('consumerId', this.init.consumerId);
+        url.searchParams.set('sessionToken', this.init.sessionToken);
+        // One abort per channel: the channel's close, the connection's close and runtime disposal end this fetch.
+        const abort = new AbortController();
+        this.opening.add(abort);
+        const fetched = await attemptAsync(() => this.fetchImpl(url, { method: 'GET', headers: buildHeaders(this.init), signal: abort.signal }));
+        this.opening.delete(abort);
+        if (!fetched.ok) {
+            if (abort.signal.aborted)
+                throw rpcError(RPC_ERROR.DISCONNECTED, 'connection closed');
+            throw rpcError(RPC_ERROR.DISCONNECTED, this.describer.describe(fetched.failure).message);
+        }
+        const response = fetched.value;
+        if (this.closedFlag) {
+            abort.abort();
+            throw rpcError(RPC_ERROR.DISCONNECTED, 'connection closed');
+        }
+        if (!response.ok || !response.body) {
+            abort.abort();
+            const code = response.status === 404 ? RPC_ERROR.NO_CHANNEL : RPC_ERROR.DISCONNECTED;
+            throw rpcError(code, `stream open failed: broker http ${response.status}`);
+        }
+        // D: read the DO-minted channelId from the response header.
+        const channelId = response.headers.get('x-relay-channel-id') ?? crypto.randomUUID();
+        const channel = new RelayStreamChannel(channelId, this.init, this.fetchImpl, this.legs, this.describer, abort, () => this.channels.delete(channelId));
+        this.channels.set(channelId, channel);
+        void channel.pumpSse(response.body);
+        return channel;
+    }
+    async postRpc(body) {
+        const url = new URL(RELAY_ROUTE.RPC, this.init.brokerOrigin);
+        url.searchParams.set('hostId', this.init.hostId);
+        // B: embed consumerId + sessionToken in the request body so the DO can validate
+        // the capability pair FAIL-CLOSED. Never sent as query params (would be logged).
+        const enrichedBody = {
+            ...body,
+            consumerId: this.init.consumerId,
+            sessionToken: this.init.sessionToken
+        };
+        return this.fetchImpl(url, {
+            method: 'POST',
+            headers: buildHeaders(this.init, { 'content-type': 'application/json' }),
+            body: JSON.stringify(jsonRequest(enrichedBody, false)),
+            signal: body.verb === 'release' ? this.releaseAbort.signal : this.connectionAbort.signal
+        });
+    }
+}
+//# sourceMappingURL=relay-exchange.js.map

package/dist/transports/relay/consumer/relay-exchange.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-exchange.js","sourceRoot":"","sources":["../../../../src/transports/relay/consumer/relay-exchange.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAkF,MAAM,yBAAyB,CAAC;AAC9I,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,6CAA6C,CAAC;AAC7F,OAAO,EAAE,WAAW,EAAE,MAAM,mDAAmD,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qDAAqD,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,uDAAuD,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,MAAM,mDAAmD,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAE3E,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,UAAU,0BAA0B,CAAC,SAA2C;IACrF,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,EAAQ,CAAC;IAC/C,KAAK,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC,OAAO,CAAC;AACzB,CAAC;AAED,MAAM,OAAgB,aAAa;IAoCJ;IACX;IApCV,UAAU,GAAG,KAAK,CAAC;IACV,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IACxC,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IACxC,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,QAAQ,CAAc;IAE/B,aAAa,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;IAEtC,MAAM,CAAgB;IAEZ,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEjD,SAAS,CAAa;IAEzC,6EAA6E;IAClE,cAAc,GAAsD,IAAI,CAAC;IAEpF,2EAA2E;IAChE,YAAY,GAA2B,IAAI,CAAC;IAEvD,4GAA4G;IACxF,IAAI,CAAc;IAEtC,iEAAiE;IACtD,OAAO,GAA2C,IAAI,CAAC;IAElE,gIAAgI;IAC5G,SAAS,CAAmB;IAEhD,yDAAyD;IACrC,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAEzD,4DAA4D;IACxC,KAAK,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;IAEjD,YAA+B,IAAyB,EACpC,iBAAiB,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC;QADhD,SAAI,GAAJ,IAAI,CAAqB;QACpC,mBAAc,GAAd,cAAc,CAA6C;QAC7E,IAAI,CAAC,SAAS,GAAG,IAAI,gBAAgB,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7G,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtE,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE;YAChE,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM;SAClI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE;YACrC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjG,CAAC;IAEF,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;IAC1B,CAAC;IAEF;;;WAGI;IACH,IAAI,CAAC,GAAe;QACnB,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,EAAe,CAAC;QACtD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,KAAK,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;YAC9C,IAAI,MAAM,CAAC,EAAE;gBAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;;gBACzC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,OAAO,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,GAAe;QACrC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC,EAAE,CAAC;QACrF,CAAC;QACD,oEAAoE;QACpE,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAClD,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC;QACzB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxB,sEAAsE;YACtE,sEAAsE;YACtE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/D,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACnD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC;gBAClG,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;YACvF,CAAC;YACD,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,YAAY,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7F,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,gEAAgE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACnJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACb,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO;gBACN,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,eAAe,GAAG,CAAC,MAAM,EAAE,CAAC;aACpE,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/E,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,uBAAuB,EAAE,SAAS,EAAE,sBAAsB,CAAC,EAAE,CAAC;QAC5H,CAAC;QACD,sGAAsG;QACtG,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IACzH,CAAC;IAEF,uHAAuH;IAC5G,cAAc,CAAC,EAAU,EAAE,OAAsB;QAC1D,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrB,IAAI,OAAO,YAAY,WAAW;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,uBAAuB,EAAE,SAAS,EAAE,sBAAsB,CAAC,EAAE,CAAC;QACvJ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClG,CAAC;IAEF,iEAAiE;IAChE,KAAK,CAAC,UAAU,CAAC,GAAU,EAAE,WAAmB;QAC/C,IAAI,IAAI,CAAC,UAAU;YAAE,MAAM,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QACjF,+EAA+E;QAC/E,6CAA6C;QAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACjC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC7C,kDAAkD;QAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAE7D,0GAA0G;QAC1G,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACzI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;YACtF,MAAM,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC;QAC/B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpC,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC;YACrF,MAAM,QAAQ,CAAC,IAAI,EAAE,mCAAmC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,4DAA4D;QAC5D,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAEpF,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CACnH,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAC/B,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACtC,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,OAAO,CAAC;IAChB,CAAC;IAEQ,KAAK,CAAC,OAAO,CAAC,IAAgB;QACtC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,gFAAgF;QAChF,iFAAiF;QACjF,MAAM,YAAY,GAAG;YACpB,GAAG,IAAI;YACP,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;YAChC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;SACpC,CAAC;QACF,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YAC1B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;YACxE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YACtD,MAAM,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM;SACxF,CAAC,CAAC;IACJ,CAAC;CAED"}

package/dist/transports/relay/consumer/relay-headers.d.ts

@@ -0,0 +1,4 @@
+import type { RelayConnectionInit, RelayHeaders } from "../../../schemas/contracts/transports/relay/relay-connection.ts";
+/** Build the common headers for a broker request. */
+export declare function buildHeaders(init: Pick<RelayConnectionInit, 'token' | 'headers'>, extra?: RelayHeaders): RelayHeaders;
+//# sourceMappingURL=relay-headers.d.ts.map

package/dist/transports/relay/consumer/relay-headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-headers.d.ts","sourceRoot":"","sources":["../../../../src/transports/relay/consumer/relay-headers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,iEAAiE,CAAC;AAEzH,qDAAqD;AACrD,wBAAgB,YAAY,CAC3B,IAAI,EAAE,IAAI,CAAC,mBAAmB,EAAE,OAAO,GAAG,SAAS,CAAC,EACpD,KAAK,CAAC,EAAE,YAAY,GAClB,YAAY,CAGd"}

package/dist/transports/relay/consumer/relay-headers.js

@@ -0,0 +1,6 @@
+/** Build the common headers for a broker request. */
+export function buildHeaders(init, extra) {
+    const base = { ...init.headers, ...extra };
+    return init.token ? { ...base, authorization: `Bearer ${init.token}` } : base;
+}
+//# sourceMappingURL=relay-headers.js.map

package/dist/transports/relay/consumer/relay-headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-headers.js","sourceRoot":"","sources":["../../../../src/transports/relay/consumer/relay-headers.ts"],"names":[],"mappings":"AAEA,qDAAqD;AACrD,MAAM,UAAU,YAAY,CAC3B,IAAoD,EACpD,KAAoB;IAEpB,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;IAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/E,CAAC"}

package/dist/transports/relay/descriptors/relay.rpc.descriptor.d.ts

@@ -0,0 +1,6 @@
+export { RelayDescriptorInput } from "../../../schemas/contracts/transports/relay/descriptors/relay.rpc.descriptor.ts";
+import { type CredentialReference, type RuntimeRpcDescriptor } from '../../../core/kinds/rpc.kind.ts';
+/** Build a relay `runtime/rpc` descriptor for a broker + host id. */
+export declare function createRelayRpcDescriptor(brokerOrigin: string, hostId: string, id: string, auth?: CredentialReference): RuntimeRpcDescriptor;
+export default createRelayRpcDescriptor;
+//# sourceMappingURL=relay.rpc.descriptor.d.ts.map

package/dist/transports/relay/descriptors/relay.rpc.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.rpc.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/transports/relay/descriptors/relay.rpc.descriptor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iFAAiF,CAAC;AAYvH,OAAO,EAA8B,KAAK,mBAAmB,EAAE,KAAK,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAGlI,qEAAqE;AACrE,wBAAgB,wBAAwB,CACvC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,MAAM,EACV,IAAI,CAAC,EAAE,mBAAmB,GACxB,oBAAoB,CActB;AAED,eAAe,wBAAwB,CAAC"}

package/dist/transports/relay/descriptors/relay.rpc.descriptor.js

@@ -0,0 +1,31 @@
+import { RelayDescriptorInput } from "../../../schemas/contracts/transports/relay/descriptors/relay.rpc.descriptor.js";
+export { RelayDescriptorInput } from "../../../schemas/contracts/transports/relay/descriptors/relay.rpc.descriptor.js";
+/**
+ * A relay `runtime/rpc` descriptor — the fleet-relay transport address.
+ *
+ * Discovery is registration: the L1 resolver walks this; it is never a client
+ * `discover()` method. The shape is the §3.2 extension to the frozen schema.
+ *
+ * `auth` is a `CredentialReference` that resolves to the durable host-token
+ * (`host_…`) the daemon uses to authenticate the WS upgrade. Never a bare token.
+ */
+import * as z from 'zod/v4';
+import { RuntimeRpcDescriptorSchema } from "../../../core/kinds/rpc.kind.js";
+import { readInput } from "../../../core/protocol/references/caller-input.js";
+/** Build a relay `runtime/rpc` descriptor for a broker + host id. */
+export function createRelayRpcDescriptor(brokerOrigin, hostId, id, auth) {
+    const input = readInput('createRelayRpcDescriptor', RelayDescriptorInput, { brokerOrigin, hostId, id, auth });
+    const descriptor = {
+        id: input.id,
+        kind: 'runtime/rpc',
+        name: `Runtime over relay (host ${input.hostId})`,
+        description: 'A vibes runtime reachable via a Durable Object relay broker. The daemon dials out over a WebSocket; the consumer reaches it through the broker HTTP endpoints. Arriving invokes pass the L1 authz → friction pipeline; connection auth uses the durable host-token.',
+        enabled: true,
+        transport: 'relay',
+        target: { transport: 'relay', brokerOrigin: input.brokerOrigin, hostId: input.hostId },
+        remoteScope: { hardware: 'consumer' }
+    };
+    return readInput('createRelayRpcDescriptor', RuntimeRpcDescriptorSchema, input.auth ? { ...descriptor, auth: input.auth } : descriptor);
+}
+export default createRelayRpcDescriptor;
+//# sourceMappingURL=relay.rpc.descriptor.js.map

package/dist/transports/relay/descriptors/relay.rpc.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.rpc.descriptor.js","sourceRoot":"","sources":["../../../../src/transports/relay/descriptors/relay.rpc.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iFAAiF,CAAC;AACvH,OAAO,EAAE,oBAAoB,EAAE,MAAM,iFAAiF,CAAC;AACvH;;;;;;;;GAQG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,0BAA0B,EAAuD,MAAM,iCAAiC,CAAC;AAClI,OAAO,EAAE,SAAS,EAAE,MAAM,mDAAmD,CAAC;AAE9E,qEAAqE;AACrE,MAAM,UAAU,wBAAwB,CACvC,YAAoB,EACpB,MAAc,EACd,EAAU,EACV,IAA0B;IAE1B,MAAM,KAAK,GAAG,SAAS,CAAC,0BAA0B,EAAE,oBAAoB,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9G,MAAM,UAAU,GAAG;QAClB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,4BAA4B,KAAK,CAAC,MAAM,GAAG;QACjD,WAAW,EACV,qQAAqQ;QACtQ,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,OAAO;QAClB,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;QACtF,WAAW,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;KACgB,CAAC;IACvD,OAAO,SAAS,CAAC,0BAA0B,EAAE,0BAA0B,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AACzI,CAAC;AAED,eAAe,wBAAwB,CAAC"}

package/dist/transports/relay/index.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @vibesdotdev/kernel-rpc/relay
+ *
+ * Relay transport for the `runtime/rpc` kind. The daemon dials out to a
+ * Durable Object broker over a WebSocket; the consumer (e.g. hq-web worker)
+ * reaches the daemon through the broker's HTTP endpoints:
+ *
+ *   POST /api/relay/rpc?hostId=<id>             → RpcResponse (unary invoke)
+ *   GET  /api/relay/stream?hostId=<id>&...      → SSE (owner→consumer stream)
+ *   POST /api/relay/stream/write                → consumer→owner bytes
+ *   POST /api/relay/stream/close                → close stream channel
+ *
+ * The reverse leg (§3.5) is supported: callback refs the consumer passes can
+ * be invoked by the daemon over the same duplex socket.
+ *
+ * Security contract: every inbound invoke on the daemon side passes the L5
+ * InvokePipeline (authz → friction) by construction. Connection auth (the
+ * host-token WS upgrade) authorizes ONLY the socket, not any invoke.
+ */
+export { RelayConnection, RelayStreamChannel, type RelayConnectionInit, type RelayFetch } from './consumer/relay-connection.ts';
+export { connectRelay, createRelayRpcImplementation, type ConnectRelayOptions } from './relay-transport.impl.ts';
+export { RelayListenSession } from './listener/relay-listen-session.ts';
+export { RELAY_MESSAGE_FAILED, createRelayServerAdapter, type RelayListenTarget, type RelayServerAdapter, type RelayServerAdapterOptions, type RelaySocket } from './relay-transport.impl.ts';
+export { serveRelaySocket, type RelaySocket as RelayServerSocket } from './relay-server.ts';
+export { RelayConsumerCloseBodySchema, RelayConsumerClosedMessageSchema, type RelayConsumerClosedMessage, RelayConsumerCloseMessageSchema, type RelayConsumerCloseMessage, RELAY_BINARY_CHANNEL_ID_LEN, RELAY_ROUTE, RELAY_SSE_FRAME_EVENT, decodeBase64, decodeBinaryFrame, encodeBase64, encodeBinaryFrame, type RelayJsonMessage, type RelayKeepaliveMessage, type RelayRpcRequestMessage, type RelayRpcResponseMessage, type RelayStreamMetaMessage } from './wire.ts';
+export { createRelayRpcDescriptor } from './descriptors/relay.rpc.descriptor.ts';
+export { registerDynamicRelayRpcAsset, registerRelayRpcLoader } from './relay-rpc-loader.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/transports/relay/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/transports/relay/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,KAAK,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAChI,OAAO,EAAE,YAAY,EAAE,4BAA4B,EAAE,KAAK,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAGjH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EACP,oBAAoB,EAAE,wBAAwB,EAAE,KAAK,iBAAiB,EAAE,KAAK,kBAAkB,EAC/F,KAAK,yBAAyB,EAAE,KAAK,WAAW,EAC/C,MAAM,2BAA2B,CAAC;AAOnC,OAAO,EAAE,gBAAgB,EAAE,KAAK,WAAW,IAAI,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAG5F,OAAO,EACP,4BAA4B,EAAE,gCAAgC,EAAE,KAAK,0BAA0B,EAAE,+BAA+B,EAAE,KAAK,yBAAyB,EAAE,2BAA2B,EAAE,WAAW,EAC1M,qBAAqB,EAAE,YAAY,EAAE,iBAAiB,EACtD,YAAY,EAAE,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,KAAK,qBAAqB,EAAE,KAAK,sBAAsB,EAC/G,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC1B,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AAGjF,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/transports/relay/index.js

@@ -0,0 +1,38 @@
+/**
+ * @vibesdotdev/kernel-rpc/relay
+ *
+ * Relay transport for the `runtime/rpc` kind. The daemon dials out to a
+ * Durable Object broker over a WebSocket; the consumer (e.g. hq-web worker)
+ * reaches the daemon through the broker's HTTP endpoints:
+ *
+ *   POST /api/relay/rpc?hostId=<id>             → RpcResponse (unary invoke)
+ *   GET  /api/relay/stream?hostId=<id>&...      → SSE (owner→consumer stream)
+ *   POST /api/relay/stream/write                → consumer→owner bytes
+ *   POST /api/relay/stream/close                → close stream channel
+ *
+ * The reverse leg (§3.5) is supported: callback refs the consumer passes can
+ * be invoked by the daemon over the same duplex socket.
+ *
+ * Security contract: every inbound invoke on the daemon side passes the L5
+ * InvokePipeline (authz → friction) by construction. Connection auth (the
+ * host-token WS upgrade) authorizes ONLY the socket, not any invoke.
+ */
+// --- Connect side (consumer) ---
+export { RelayConnection, RelayStreamChannel } from "./consumer/relay-connection.js";
+export { connectRelay, createRelayRpcImplementation } from "./relay-transport.impl.js";
+// --- Server adapter (daemon side) ---
+export { RelayListenSession } from "./listener/relay-listen-session.js";
+export { RELAY_MESSAGE_FAILED, createRelayServerAdapter } from "./relay-transport.impl.js";
+// --- Canonical server adapter (the §3.7 daemon seam R3 consumes) ---
+// `serveRelaySocket(socket, target) => Promise<void>` matches fleet-daemon's
+// `RelayServerAdapterFn`. The canonical socket shape (onMessage/onBinary/closed) is
+// exported as `RelayServerSocket` to avoid colliding with R1's internal `RelaySocket`.
+// Also available at the dedicated subpath `@vibesdotdev/kernel-rpc/relay/server`.
+export { serveRelaySocket } from "./relay-server.js";
+// --- Wire shape ---
+export { RelayConsumerCloseBodySchema, RelayConsumerClosedMessageSchema, RelayConsumerCloseMessageSchema, RELAY_BINARY_CHANNEL_ID_LEN, RELAY_ROUTE, RELAY_SSE_FRAME_EVENT, decodeBase64, decodeBinaryFrame, encodeBase64, encodeBinaryFrame } from "./wire.js";
+// --- Descriptor ---
+export { createRelayRpcDescriptor } from "./descriptors/relay.rpc.descriptor.js";
+// --- Runtime registration values ---
+export { registerDynamicRelayRpcAsset, registerRelayRpcLoader } from "./relay-rpc-loader.js";
+//# sourceMappingURL=index.js.map

package/dist/transports/relay/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/transports/relay/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,kCAAkC;AAClC,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAA6C,MAAM,gCAAgC,CAAC;AAChI,OAAO,EAAE,YAAY,EAAE,4BAA4B,EAA4B,MAAM,2BAA2B,CAAC;AAEjH,uCAAuC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EACP,oBAAoB,EAAE,wBAAwB,EAE7C,MAAM,2BAA2B,CAAC;AAEnC,sEAAsE;AACtE,6EAA6E;AAC7E,oFAAoF;AACpF,uFAAuF;AACvF,kFAAkF;AAClF,OAAO,EAAE,gBAAgB,EAAyC,MAAM,mBAAmB,CAAC;AAE5F,qBAAqB;AACrB,OAAO,EACP,4BAA4B,EAAE,gCAAgC,EAAmC,+BAA+B,EAAkC,2BAA2B,EAAE,WAAW,EAC1M,qBAAqB,EAAE,YAAY,EAAE,iBAAiB,EACtD,YAAY,EAAE,iBAAiB,EAG9B,MAAM,WAAW,CAAC;AAEnB,qBAAqB;AACrB,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AAEjF,sCAAsC;AACtC,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC"}