@vibesdotdev/kernel-rpc 0.0.0-stage → 1.0.0-rc.2

package/dist/transports/relay/listener/consumer-table.d.ts

@@ -0,0 +1,17 @@
+import { DefaultReferenceTable, type RemotePeerInfo, type CapabilityError } from '@vibesdotdev/kernel';
+/** One consumer's references keep the kernel's custody with unguessable IDs. */
+export declare class IsolatedConsumerTable extends DefaultReferenceTable {
+    constructor();
+}
+import { BindingCloses, LegFailures } from '../../../core/protocol/lifecycle/binding-close.ts';
+export interface ConsumerState {
+    readonly connection: AbortController;
+    readonly received: LegFailures;
+    readonly closes: BindingCloses;
+    closing: Promise<CapabilityError | null> | null;
+    readonly consumerId: string;
+    readonly table: IsolatedConsumerTable;
+    readonly rootRef: string;
+    readonly remotePeer: RemotePeerInfo;
+}
+//# sourceMappingURL=consumer-table.d.ts.map

package/dist/transports/relay/listener/consumer-table.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumer-table.d.ts","sourceRoot":"","sources":["../../../../src/transports/relay/listener/consumer-table.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,KAAK,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEvG,gFAAgF;AAChF,qBAAa,qBAAsB,SAAQ,qBAAqB;;CAI/D;AAED,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,mDAAmD,CAAC;AAE/F,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAChD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;CACpC"}

package/dist/transports/relay/listener/consumer-table.js

@@ -0,0 +1,9 @@
+import { DefaultReferenceTable } from '@vibesdotdev/kernel';
+/** One consumer's references keep the kernel's custody with unguessable IDs. */
+export class IsolatedConsumerTable extends DefaultReferenceTable {
+    constructor() {
+        super('relay-consumer', () => { }, () => crypto.randomUUID());
+    }
+}
+import { BindingCloses, LegFailures } from "../../../core/protocol/lifecycle/binding-close.js";
+//# sourceMappingURL=consumer-table.js.map

package/dist/transports/relay/listener/consumer-table.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumer-table.js","sourceRoot":"","sources":["../../../../src/transports/relay/listener/consumer-table.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAA6C,MAAM,qBAAqB,CAAC;AAEvG,gFAAgF;AAChF,MAAM,OAAO,qBAAsB,SAAQ,qBAAqB;IAC/D;QACC,KAAK,CAAC,gBAAgB,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9D,CAAC;CACD;AAED,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,mDAAmD,CAAC"}

package/dist/transports/relay/listener/relay-adapter.d.ts

@@ -0,0 +1,15 @@
+import type { RelayServerAdapter, RelayServerAdapterOptions } from "../../../schemas/contracts/transports/relay/relay-transport.impl.ts";
+/** {@link RelayServerAdapterOptions}, read once. */
+/**
+ * Create the relay server adapter for the daemon side. The daemon calls this once
+ * per accepted WS connection to the broker, supplying the injected `RelaySocket`
+ * and the same `RelayListenTarget` the http listener uses.
+ *
+ * The adapter:
+ *   1. Creates a `RelayListenSession` (mirrors `HttpListenSession`).
+ *   2. Wires the socket's `message` event to dispatch inbound frames through the
+ *      session (L5 pipeline fires on every invoke — no second code path).
+ *   3. Returns the root ref so the daemon can register it with the broker.
+ */
+export declare function createRelayServerAdapter(optionsInput: RelayServerAdapterOptions): RelayServerAdapter;
+//# sourceMappingURL=relay-adapter.d.ts.map

package/dist/transports/relay/listener/relay-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-adapter.d.ts","sourceRoot":"","sources":["../../../../src/transports/relay/listener/relay-adapter.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,qEAAqE,CAAC;AAezI,oDAAoD;AAEpD;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,yBAAyB,GAAG,kBAAkB,CAgEpG"}

package/dist/transports/relay/listener/relay-adapter.js

@@ -0,0 +1,81 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { attempt, settled } from "../../../core/protocol/lifecycle/attempt.js";
+import { readInput } from "../../../core/protocol/references/caller-input.js";
+import { HOST_FAILURES } from "../../../core/protocol/transport/failure-describer.js";
+import { isString } from "../../../core/protocol/wire/value-kinds.js";
+import { RelayServerAdapterInput } from "../../../schemas/contracts/transports/relay/relay-transport.impl.js";
+import { RELAY_MESSAGE_FAILED } from "../relay-transport.impl.js";
+import { RelayListenSession } from "./relay-listen-session.js";
+/** {@link RelayServerAdapterOptions}, read once. */
+/**
+ * Create the relay server adapter for the daemon side. The daemon calls this once
+ * per accepted WS connection to the broker, supplying the injected `RelaySocket`
+ * and the same `RelayListenTarget` the http listener uses.
+ *
+ * The adapter:
+ *   1. Creates a `RelayListenSession` (mirrors `HttpListenSession`).
+ *   2. Wires the socket's `message` event to dispatch inbound frames through the
+ *      session (L5 pipeline fires on every invoke — no second code path).
+ *   3. Returns the root ref so the daemon can register it with the broker.
+ */
+export function createRelayServerAdapter(optionsInput) {
+    const options = readInput('createRelayServerAdapter', RelayServerAdapterInput, optionsInput);
+    const session = new RelayListenSession(options, crypto.randomUUID());
+    const { socket } = options;
+    /**
+     * Messages the session failed to handle (a send on a dead socket, a dispatch crash), bounded: the first is kept
+     * as the cause and the rest are counted, so a faulty broker cannot grow this without bound. Reported by close().
+     */
+    const messageFailures = { first: null, count: 0 };
+    const keepMessageFailure = (failure) => {
+        messageFailures.count += 1;
+        messageFailures.first ??= failure;
+    };
+    socket.addEventListener('message', (evt) => {
+        const data = evt.data;
+        if (data instanceof ArrayBuffer || data instanceof Uint8Array) {
+            // Binary frame: stream data from the broker (consumer→daemon).
+            const bytes = data instanceof ArrayBuffer ? new Uint8Array(data) : data;
+            const handled = attempt(() => session.handleBinaryFrame(bytes));
+            // The broker is authenticated: a binary frame it forwards that the frame decoder refuses is a broker
+            // fault, dropped and reported by close(), exactly as an unhandled text message is.
+            if (!handled.ok)
+                keepMessageFailure(handled.failure);
+        }
+        else if (isString(data)) {
+            // Text frame: RPC verb (invoke/release/stream metadata).
+            const msg = attempt(() => JSON.parse(data));
+            if (!msg.ok) {
+                // The broker is authenticated: a text frame it forwards that is not JSON
+                // is a broker fault, dropped unread and reported by close().
+                keepMessageFailure(msg.failure);
+                return;
+            }
+            void settled(session.handleJsonMessage(msg.value, socket)).then((handled) => {
+                if (!handled.ok)
+                    keepMessageFailure(handled.failure);
+            });
+        }
+    });
+    socket.addEventListener('close', () => {
+        // The socket went away: tear down now; a close failure is kept on the
+        // session and reported by the adapter's close().
+        void session.shutdown();
+    });
+    return {
+        rootRef: session.root,
+        listenSession: session,
+        async close() {
+            await session.close();
+            if (messageFailures.count > 0) {
+                throw new CapabilityError(`The relay session failed to handle ${messageFailures.count} message(s).`, 'INTERNAL', {
+                    reason: RELAY_MESSAGE_FAILED,
+                    retryable: false,
+                    details: { failures: messageFailures.count },
+                    cause: messageFailures.first ? HOST_FAILURES.describe(messageFailures.first) : undefined
+                });
+            }
+        }
+    };
+}
+//# sourceMappingURL=relay-adapter.js.map

package/dist/transports/relay/listener/relay-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-adapter.js","sourceRoot":"","sources":["../../../../src/transports/relay/listener/relay-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAsB,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,6CAA6C,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,MAAM,mDAAmD,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,uDAAuD,CAAC;AACtF,OAAO,EAAE,QAAQ,EAAE,MAAM,4CAA4C,CAAC;AAEtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qEAAqE,CAAC;AAC9G,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAY/D,oDAAoD;AAEpD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CAAC,YAAuC;IAC/E,MAAM,OAAO,GAAG,SAAS,CAAC,0BAA0B,EAAE,uBAAuB,EAAE,YAAY,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAErE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC3B;;;OAGG;IACH,MAAM,eAAe,GAAwB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACvE,MAAM,kBAAkB,GAAG,CAAC,OAAsB,EAAQ,EAAE;QAC3D,eAAe,CAAC,KAAK,IAAI,CAAC,CAAC;QAC3B,eAAe,CAAC,KAAK,KAAK,OAAO,CAAC;IACnC,CAAC,CAAC;IAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,IAAI,IAAI,YAAY,WAAW,IAAI,IAAI,YAAY,UAAU,EAAE,CAAC;YAC/D,+DAA+D;YAC/D,MAAM,KAAK,GAAG,IAAI,YAAY,WAAW,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACxE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;YAChE,qGAAqG;YACrG,mFAAmF;YACnF,IAAI,CAAC,OAAO,CAAC,EAAE;gBAAE,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;aAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,yDAAyD;YACzD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5C,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACb,yEAAyE;gBACzE,6DAA6D;gBAC7D,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAChC,OAAO;YACR,CAAC;YACD,KAAK,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC3E,IAAI,CAAC,OAAO,CAAC,EAAE;oBAAE,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;QACJ,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;QACrC,sEAAsE;QACtE,iDAAiD;QACjD,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,OAAO;QACN,OAAO,EAAE,OAAO,CAAC,IAAI;QACrB,aAAa,EAAE,OAAO;QACtB,KAAK,CAAC,KAAK;YACV,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YACtB,IAAI,eAAe,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,eAAe,CACxB,sCAAsC,eAAe,CAAC,KAAK,cAAc,EACzE,UAAU,EACV;oBACC,MAAM,EAAE,oBAAoB;oBAC5B,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,EAAE,QAAQ,EAAE,eAAe,CAAC,KAAK,EAAE;oBAC5C,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;iBACxF,CACD,CAAC;YACH,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/transports/relay/listener/relay-consumers.d.ts

@@ -0,0 +1,72 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { type RpcRequest, type RpcResponse } from '@vibesdotdev/kernel-rpc';
+import { BindingCloses, ConnectionCloses } from '../../../core/protocol/lifecycle/binding-close.ts';
+import { ChannelIdClaims } from '../../../core/protocol/references/channel-ids.ts';
+import type { StreamBinding } from '../../../core/protocol/references/dispatch.ts';
+import type { RelayListenTarget } from "../../../schemas/contracts/transports/relay/relay-listen-session.ts";
+import type { RelaySocket } from '../relay-transport.impl.ts';
+import type { ConsumerState } from "./consumer-table.ts";
+import { IsolatedConsumerTable } from "./consumer-table.ts";
+export declare abstract class RelayConsumers {
+    protected readonly target: RelayListenTarget;
+    readonly connectionId: string;
+    /** Per-consumer isolated reference tables (§security rule 3). */
+    protected readonly consumerTables: Map<string, IsolatedConsumerTable>;
+    /** Per-consumer state map. */
+    protected readonly consumers: Map<string, ConsumerState>;
+    /** Channels keyed by channelId; each records its owning consumerId. */
+    protected readonly channels: Map<string, OwnerChannel>;
+    protected readonly channelClaims: ChannelIdClaims;
+    /** Every binding close this session started; failures kept typed until {@link close} reports them. */
+    protected readonly closes: BindingCloses;
+    protected readonly consumerCloses: ConnectionCloses;
+    /** The session's close outcome, once it began closing (never rejects). */
+    protected closing: Promise<CapabilityError | null> | null;
+    protected closedFlag: boolean;
+    /** The active WS socket. */
+    protected activeSocket: RelaySocket | null;
+    /**
+         * Total reference table size across all consumers.
+         * Used by tests / diagnostics.
+         */
+    get tableSize(): number;
+    /**
+         * Legacy `.root` accessor kept for RelayServerAdapter compatibility.
+         * Consumers MUST use the consumerId-based handshake to get their own rootRef.
+         */
+    get root(): string;
+    constructor(target: RelayListenTarget, connectionId?: string);
+    /**
+     * Get or create isolated per-consumer state.
+     * On first handshake, registers the consumerId and allocates a fresh
+     * IsolatedConsumerTable. The root object is retained in that table with a
+     * random (unguessable) ref id.
+     */
+    protected getOrCreateConsumer(consumerId: string): Promise<ConsumerState>;
+    /**
+         * The consumer cap: past {@link RELAY_MAX_CONSUMERS}, the least recently used consumer is evicted. Its channels
+         * close (their binding closes kept for close()) and its table is cleared; its next request is refused
+         * `RPC_NO_TARGET` `rpc-consumer-unknown` until it handshakes again.
+         */
+    protected evictLeastRecentConsumer(): Promise<void>;
+    /** Fence one consumer immediately; acknowledge only after its native work ends. */
+    protected closeConsumer(consumerId: string): Promise<CapabilityError | null>;
+    protected handleRpcRequest(req: RpcRequest, consumerId: string, socket: RelaySocket): Promise<RpcResponse>;
+    private dispatchRpcRequest;
+    protected abstract handleStreamRequest(req: RpcRequest, consumer: ConsumerState): Promise<RpcResponse>;
+    protected abstract closeChannel(channelId: string): void;
+}
+export /** A relay outbound message (JSON text frame). */ interface RelayOutboundResponse {
+    readonly type: 'rpc_response';
+    readonly consumerId: string;
+    readonly response: RpcResponse;
+}
+export /** Owner side of one live stream channel for a relay connection. */ interface OwnerChannel {
+    readonly binding: StreamBinding;
+    unsub: () => void;
+    /** The channelId used as prefix in binary frames. */
+    readonly channelId: string;
+    /** §security rule 2: Only this consumer may write/close the channel. */
+    readonly owningConsumerId: string;
+}
+//# sourceMappingURL=relay-consumers.d.ts.map

package/dist/transports/relay/listener/relay-consumers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-consumers.d.ts","sourceRoot":"","sources":["../../../../src/transports/relay/listener/relay-consumers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAwE,KAAK,UAAU,EAAE,KAAK,WAAW,EAAkB,MAAM,yBAAyB,CAAC;AAElK,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAuC,MAAM,mDAAmD,CAAC;AAEzI,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AACnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+CAA+C,CAAC;AACnF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qEAAqE,CAAC;AAC7G,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAK5D,8BAAsB,cAAc;IA2C5B,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB;IAC5C,QAAQ,CAAC,YAAY,EAAE,MAAM;IA3CrC,iEAAiE;IAC7D,SAAS,CAAC,QAAQ,CAAC,cAAc,qCAA4C;IAEjF,8BAA8B;IAC1B,SAAS,CAAC,QAAQ,CAAC,SAAS,6BAAoC;IAEpE,uEAAuE;IACnE,SAAS,CAAC,QAAQ,CAAC,QAAQ,4BAAmC;IAElE,SAAS,CAAC,QAAQ,CAAC,aAAa,kBAAsC;IAEtE,sGAAsG;IAClG,SAAS,CAAC,QAAQ,CAAC,MAAM,gBAAuB;IACpD,SAAS,CAAC,QAAQ,CAAC,cAAc,mBAA0B;IAE3D,0EAA0E;IACtE,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,IAAI,CAAQ;IAErE,SAAS,CAAC,UAAU,UAAS;IAE7B,4BAA4B;IACxB,SAAS,CAAC,YAAY,EAAE,WAAW,GAAG,IAAI,CAAQ;IAEtD;;;WAGO;IACH,IAAI,SAAS,IAAI,MAAM,CAItB;IAEL;;;WAGO;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;gBAGsB,MAAM,EAAE,iBAAiB,EACnC,YAAY,GAAE,MAA4B;IAOvD;;;;;OAKG;cACa,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAiCnF;;;;WAIO;cACa,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC;IAOzD,mFAAmF;IACnF,SAAS,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAmC5E,SAAS,CAAC,gBAAgB,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;YAa5F,kBAAkB;IAsCpC,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC;IACtG,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;CACvD;AAED,MAAM,CAAC,kDAAkD,WAC/C,qBAAqB;IAC3B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;CAClC;AAED,MAAM,CAAC,oEAAoE,WACjE,YAAY;IAClB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,qDAAqD;IACrD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACrC"}

package/dist/transports/relay/listener/relay-consumers.js

@@ -0,0 +1,193 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { decodeValue, dispatchRequest, RPC_ERROR, rpcError } from '@vibesdotdev/kernel-rpc';
+import { attemptAsync, settled } from "../../../core/protocol/lifecycle/attempt.js";
+import { BindingCloses, ConnectionCloses, LegFailures, connectionCloseFailure } from "../../../core/protocol/lifecycle/binding-close.js";
+import { recordRootAdvertisement } from "../../../core/protocol/references/advertisement.js";
+import { ChannelIdClaims } from "../../../core/protocol/references/channel-ids.js";
+import { IsolatedConsumerTable } from "./consumer-table.js";
+import { RELAY_MAX_CONSUMERS } from "./relay-listen-session.js";
+import { buildReverseProxy } from "./reverse-proxy.js";
+export class RelayConsumers {
+    target;
+    connectionId;
+    /** Per-consumer isolated reference tables (§security rule 3). */
+    consumerTables = new Map();
+    /** Per-consumer state map. */
+    consumers = new Map();
+    /** Channels keyed by channelId; each records its owning consumerId. */
+    channels = new Map();
+    channelClaims = new ChannelIdClaims(this.channels);
+    /** Every binding close this session started; failures kept typed until {@link close} reports them. */
+    closes = new BindingCloses();
+    consumerCloses = new ConnectionCloses();
+    /** The session's close outcome, once it began closing (never rejects). */
+    closing = null;
+    closedFlag = false;
+    /** The active WS socket. */
+    activeSocket = null;
+    /**
+         * Total reference table size across all consumers.
+         * Used by tests / diagnostics.
+         */
+    get tableSize() {
+        let total = 0;
+        for (const t of this.consumerTables.values())
+            total += t.size;
+        return total;
+    }
+    /**
+         * Legacy `.root` accessor kept for RelayServerAdapter compatibility.
+         * Consumers MUST use the consumerId-based handshake to get their own rootRef.
+         */
+    get root() {
+        return '__relay_root__';
+    }
+    constructor(target, connectionId = crypto.randomUUID()) {
+        this.target = target;
+        this.connectionId = connectionId;
+    }
+    // ---------------------------------------------------------------------------
+    // Consumer state management (§security rules 1, 3, 4)
+    // ---------------------------------------------------------------------------
+    /**
+     * Get or create isolated per-consumer state.
+     * On first handshake, registers the consumerId and allocates a fresh
+     * IsolatedConsumerTable. The root object is retained in that table with a
+     * random (unguessable) ref id.
+     */
+    async getOrCreateConsumer(consumerId) {
+        const existing = this.consumers.get(consumerId);
+        if (existing)
+            return existing;
+        while (this.consumers.size >= RELAY_MAX_CONSUMERS) {
+            await this.evictLeastRecentConsumer();
+            const concurrent = this.consumers.get(consumerId);
+            if (concurrent)
+                return concurrent;
+        }
+        if (this.closedFlag)
+            throw new CapabilityError('The relay closed.', 'CANCELLED', { reason: 'rpc-connection-closed' });
+        // §security rule 3+4: fresh isolated table, random ref ids.
+        const table = new IsolatedConsumerTable();
+        const rootRef = table.retain(this.target.root, 'object').id;
+        recordRootAdvertisement(table, rootRef, this.target.rootMethods);
+        const state = {
+            consumerId,
+            connection: new AbortController(), received: new LegFailures(consumerId), closes: new BindingCloses(), closing: null,
+            table,
+            rootRef,
+            // No `verified`: the broker-minted consumerId identifies a consumer,
+            // not a caller, so a declared identity is refused (RC08).
+            remotePeer: {
+                runtimeId: consumerId,
+                transport: 'relay',
+                connectionId: consumerId
+            }
+        };
+        this.consumerTables.set(consumerId, table);
+        this.consumers.set(consumerId, state);
+        return state;
+    }
+    /**
+         * The consumer cap: past {@link RELAY_MAX_CONSUMERS}, the least recently used consumer is evicted. Its channels
+         * close (their binding closes kept for close()) and its table is cleared; its next request is refused
+         * `RPC_NO_TARGET` `rpc-consumer-unknown` until it handshakes again.
+         */
+    async evictLeastRecentConsumer() {
+        const oldest = this.consumers.keys().next();
+        if (oldest.done)
+            return;
+        const failure = await this.closeConsumer(oldest.value);
+        if (failure)
+            throw failure;
+    }
+    /** Fence one consumer immediately; acknowledge only after its native work ends. */
+    closeConsumer(consumerId) {
+        const consumer = this.consumers.get(consumerId);
+        if (!consumer)
+            return Promise.resolve(null);
+        if (consumer.closing)
+            return consumer.closing;
+        const outcome = Promise.withResolvers();
+        consumer.closing = outcome.promise;
+        this.consumerCloses.keep(outcome.promise);
+        consumer.connection.abort(new CapabilityError('The relay consumer closed.', 'CANCELLED', {
+            reason: 'rpc-connection-closed', retryable: false
+        }));
+        consumer.table.seal();
+        for (const [channelId, channel] of this.channels) {
+            if (channel.owningConsumerId === consumerId)
+                this.closeChannel(channelId);
+        }
+        void (async () => {
+            const received = await consumer.received.settle();
+            const references = await attemptAsync(() => consumer.table.drain());
+            if (!references.ok)
+                consumer.closes.keepError(connectionCloseFailure(consumerId, references.failure));
+            const channels = await consumer.closes.settle();
+            const failure = received && channels
+                ? connectionCloseFailure(consumerId, new AggregateError([received, channels]))
+                : received ?? channels;
+            if (!failure) {
+                this.consumerTables.delete(consumerId);
+                this.consumers.delete(consumerId);
+            }
+            outcome.resolve(failure);
+        })();
+        return outcome.promise;
+    }
+    // ---------------------------------------------------------------------------
+    // RPC dispatch (per-consumer isolated)
+    // ---------------------------------------------------------------------------
+    handleRpcRequest(req, consumerId, socket) {
+        const consumer = this.consumers.get(consumerId);
+        if (consumer?.closing)
+            return Promise.resolve({ id: req.id, error: rpcError(RPC_ERROR.DISCONNECTED, 'connection closed') });
+        if (!consumer)
+            return this.dispatchRpcRequest(req, consumerId, socket);
+        const receiving = Promise.withResolvers();
+        consumer.received.track('receive', receiving.promise);
+        void settled(this.dispatchRpcRequest(req, consumerId, socket)).then(handled => {
+            if (handled.ok)
+                receiving.resolve(handled.value);
+            else
+                receiving.reject(handled.failure);
+        });
+        return receiving.promise;
+    }
+    async dispatchRpcRequest(req, consumerId, socket) {
+        if (this.closedFlag) {
+            return { id: req.id, error: rpcError(RPC_ERROR.DISCONNECTED, 'connection closed') };
+        }
+        const consumer = this.consumers.get(consumerId);
+        if (!consumer) {
+            // A fixed message: the consumer id is the peer's, never echoed.
+            return { id: req.id, error: rpcError(RPC_ERROR.NO_TARGET, 'Unknown consumer.', undefined, 'rpc-consumer-unknown') };
+        }
+        // Most recently used last: the consumer cap evicts from the front.
+        this.consumers.delete(consumerId);
+        this.consumers.set(consumerId, consumer);
+        // §security rule 6: the reverse proxy enforces the methods allowlist. Its reverse invokes go back over the
+        // socket this request arrived on.
+        const proxyFactory = (id, kind, methods) => {
+            return buildReverseProxy(id, kind, methods, socket, consumerId, this.target.lifecycle);
+        };
+        if (req.verb === 'stream') {
+            return this.handleStreamRequest(req, consumer);
+        }
+        const dispatch = () => dispatchRequest(req, {
+            table: consumer.table,
+            pipeline: this.target.pipeline,
+            remotePeer: consumer.remotePeer,
+            decodeArgs: (wire) => wire.map((w) => decodeValue(w, proxyFactory)),
+            classifyResult: this.target.classifyResult,
+            bindChannel: this.target.bindChannel,
+            kindOf: this.target.kindOf ?? (() => 'runtime/rpc')
+        });
+        const { response } = await (this.target.runInvocation
+            ? this.target.runInvocation(dispatch, { id: consumerId, signal: consumer.connection.signal })
+            : dispatch());
+        return response;
+    }
+}
+//# sourceMappingURL=relay-consumers.js.map

package/dist/transports/relay/listener/relay-consumers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-consumers.js","sourceRoot":"","sources":["../../../../src/transports/relay/listener/relay-consumers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAwE,MAAM,yBAAyB,CAAC;AAClK,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,mDAAmD,CAAC;AACzI,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AAKnF,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,OAAgB,cAAc;IA2CT;IACV;IA3CjB,iEAAiE;IAC1C,cAAc,GAAG,IAAI,GAAG,EAAiC,CAAC;IAEjF,8BAA8B;IACP,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEpE,uEAAuE;IAChD,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAE/C,aAAa,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEtE,sGAAsG;IAC/E,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;IACjC,cAAc,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAE3D,0EAA0E;IAC5D,OAAO,GAA2C,IAAI,CAAC;IAE3D,UAAU,GAAG,KAAK,CAAC;IAE7B,4BAA4B;IACd,YAAY,GAAuB,IAAI,CAAC;IAEtD;;;WAGO;IACH,IAAI,SAAS;QACT,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE;YAAE,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC;QAC9D,OAAO,KAAK,CAAC;IACjB,CAAC;IAEL;;;WAGO;IACH,IAAI,IAAI;QACJ,OAAO,gBAAgB,CAAC;IAC5B,CAAC;IAEL,YAC2B,MAAyB,EACnC,eAAuB,MAAM,CAAC,UAAU,EAAE;QADhC,WAAM,GAAN,MAAM,CAAmB;QACnC,iBAAY,GAAZ,YAAY,CAA8B;IACpD,CAAC;IAER,8EAA8E;IAC1E,sDAAsD;IACtD,8EAA8E;IAE9E;;;;;OAKG;IACO,KAAK,CAAC,mBAAmB,CAAC,UAAkB;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,mBAAmB,EAAE,CAAC;YAChD,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC;YACtC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,UAAU;gBAAE,OAAO,UAAU,CAAC;QACtC,CAAC;QACD,IAAI,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAEtH,4DAA4D;QAC5D,MAAM,KAAK,GAAG,IAAI,qBAAqB,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC5D,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAEjE,MAAM,KAAK,GAAkB;YACzB,UAAU;YACV,UAAU,EAAE,IAAI,eAAe,EAAE,EAAE,QAAQ,EAAE,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,aAAa,EAAE,EAAE,OAAO,EAAE,IAAI;YACpH,KAAK;YACL,OAAO;YACP,qEAAqE;YACrE,0DAA0D;YAC1D,UAAU,EAAE;gBACR,SAAS,EAAE,UAAU;gBACrB,SAAS,EAAE,OAAO;gBAClB,YAAY,EAAE,UAAU;aAC3B;SACJ,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC;IACjB,CAAC;IAEL;;;;WAIO;IACO,KAAK,CAAC,wBAAwB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,IAAI;YAAE,OAAO;QACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC;IAC/B,CAAC;IAED,mFAAmF;IACzE,aAAa,CAAC,UAAkB;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,QAAQ,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,OAAO,CAAC;QAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,EAA0B,CAAC;QAChE,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QACnC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1C,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,4BAA4B,EAAE,WAAW,EAAE;YACrF,MAAM,EAAE,uBAAuB,EAAE,SAAS,EAAE,KAAK;SACpD,CAAC,CAAC,CAAC;QACJ,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/C,IAAI,OAAO,CAAC,gBAAgB,KAAK,UAAU;gBAAE,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC9E,CAAC;QACD,KAAK,CAAC,KAAK,IAAI,EAAE;YACb,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAClD,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC,UAAU,CAAC,EAAE;gBAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YACtG,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,QAAQ,IAAI,QAAQ;gBAChC,CAAC,CAAC,sBAAsB,CAAC,UAAU,EAAE,IAAI,cAAc,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAC9E,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC;YAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACvC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,OAAO,CAAC,OAAO,CAAC;IAC3B,CAAC;IAEL,8EAA8E;IAC1E,uCAAuC;IACvC,8EAA8E;IAEpE,gBAAgB,CAAC,GAAe,EAAE,UAAkB,EAAE,MAAmB;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,QAAQ,EAAE,OAAO;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC5H,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,EAAe,CAAC;QACvD,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;QACtD,KAAK,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;YAC1E,IAAI,OAAO,CAAC,EAAE;gBAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;;gBAC5C,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QACH,OAAO,SAAS,CAAC,OAAO,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,GAAe,EAAE,UAAkB,EAAE,MAAmB;QACrF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC,EAAE,CAAC;QACxF,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,gEAAgE;YAChE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,mBAAmB,EAAE,SAAS,EAAE,sBAAsB,CAAC,EAAE,CAAC;QACxH,CAAC;QACD,mEAAmE;QACnE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAEzC,2GAA2G;QAC3G,kCAAkC;QAClC,MAAM,YAAY,GAA+B,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;YACnE,OAAO,iBAAiB,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3F,CAAC,CAAC;QAEF,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE;YACxC,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,UAAU,EAAE,CAAC,IAA0B,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;YACzF,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc;YAC1C,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC;SACtD,CAAC,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa;YACjD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YAC7F,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClB,OAAO,QAAQ,CAAC;IACpB,CAAC;CAGJ"}

package/dist/transports/relay/listener/relay-listen-session.d.ts

@@ -0,0 +1,27 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { type RpcRequest, type RpcResponse, type RpcStream } from '@vibesdotdev/kernel-rpc';
+import type { JsonValue } from '@vibesdotdev/kernel/schemas/json';
+import type { RelaySocket } from '../relay-transport.impl.ts';
+import type { ConsumerState } from "./consumer-table.ts";
+import { RelayConsumers, type OwnerChannel } from "./relay-consumers.ts";
+export type { RelayListenTarget } from "../../../schemas/contracts/transports/relay/relay-listen-session.ts";
+/** How many handshaken consumers one relay session holds; past it the least recently used is evicted. */
+export declare const RELAY_MAX_CONSUMERS = 1024;
+export declare class RelayListenSession extends RelayConsumers {
+    /** Handle an incoming JSON message from the broker. §security rule 1: validates consumerId on every non-handshake request. */
+    handleJsonMessage(msg: JsonValue, socket: RelaySocket): Promise<void>;
+    /** Handle an incoming binary frame from the broker (consumer→owner stream data). §security rule 2: consumerId ownership is validated against the channel record. */
+    handleBinaryFrame(data: Uint8Array, consumerId?: string): void;
+    /** Tear down the session and free all refs, then wait for every binding close it started. */
+    close(): Promise<void>;
+    /** {@link close}, resolving to the typed failure instead of rejecting. */
+    shutdown(): Promise<CapabilityError | null>;
+    protected handleStreamRequest(req: RpcRequest, consumer: ConsumerState): Promise<RpcResponse>;
+    protected openClaimedStream(req: RpcStream, consumer: ConsumerState): Promise<RpcResponse>;
+    /** The owner ended the channel: send its CLOSE frame and forget it, without tearing the owner down. */
+    protected endChannel(channelId: string): void;
+    /** Stop the channel's bytes; a binding whose unsubscribe failed is kept typed for close(). */
+    protected unsubscribe(channelId: string, channel: OwnerChannel): void;
+    protected closeChannel(channelId: string): void;
+}
+//# sourceMappingURL=relay-listen-session.d.ts.map

package/dist/transports/relay/listener/relay-listen-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-listen-session.d.ts","sourceRoot":"","sources":["../../../../src/transports/relay/listener/relay-listen-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAA+C,KAAK,UAAU,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACzI,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAKlE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,KAAK,YAAY,EAA8B,MAAM,sBAAsB,CAAC;AAErG,YAAY,EAAE,iBAAiB,EAAE,MAAM,qEAAqE,CAAC;AAE7G,yGAAyG;AACzG,eAAO,MAAM,mBAAmB,OAAO,CAAC;AAExC,qBAAa,kBAAmB,SAAQ,cAAc;IAGlD,8HAA8H;IACxH,iBAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAwD/E,oKAAoK;IAChK,iBAAiB,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAiBlE,6FAA6F;IACzF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAM1B,0EAA0E;IACtE,QAAQ,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;cAgB/B,mBAAmB,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC;cAanF,iBAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC;IAgDhG,uGAAuG;IACnG,SAAS,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAWjD,8FAA8F;IAC1F,SAAS,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI;IAKzE,SAAS,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;CAa9C"}