@vibesdotdev/kernel-rpc 0.0.0-stage → 1.0.0-rc.2

package/dist/core/protocol/lifecycle/stream-credits.d.ts

@@ -0,0 +1,41 @@
+import type { CreditedSource } from "../../../schemas/contracts/protocol/lifecycle/stream-credits.ts";
+import type { ChannelBinder, OwnerTarget, StreamBinding } from '../references/dispatch.ts';
+export { creditedEvents } from "./credited-events.ts";
+export type { CreditedEventsOptions, CreditedSource } from "../../../schemas/contracts/protocol/lifecycle/stream-credits.ts";
+/** The typed endings the ledger itself sends. Each is a code and a reason, never a value. */
+export declare const STREAM_ENDINGS: {
+    /** A grant that was not 1..1024, or that would leave more than the declared ceiling outstanding. */
+    readonly creditOverflow: {
+        readonly code: "INVALID_INPUT";
+        readonly reason: "rpc-stream-credit-overflow";
+    };
+    /** The consumer wrote into an owner-to-consumer event channel. */
+    readonly writeRefused: {
+        readonly code: "INVALID_INPUT";
+        readonly reason: "rpc-stream-write-refused";
+    };
+    /** One encoded event exceeded the channel's byte ceiling. */
+    readonly eventTooLarge: {
+        readonly code: "INVALID_INPUT";
+        readonly reason: "rpc-stream-event-too-large";
+    };
+    /** The source could not encode an event. */
+    readonly eventInvalid: {
+        readonly code: "INVALID_INPUT";
+        readonly reason: "rpc-stream-event-invalid";
+    };
+    /** The source failed, and its failure named no typed ending of its own. */
+    readonly sourceFailed: {
+        readonly code: "INTERNAL";
+        readonly reason: "rpc-stream-source-failed";
+    };
+};
+/** The owner's credit ledger over an async source, as a credit-governed {@link StreamBinding}. */
+export declare function creditedBinding<T>(source: CreditedSource<T>): StreamBinding;
+/**
+ * A {@link ChannelBinder} over an owner's credit-governed sources (a federation
+ * projection's `streamSource`): a target and channel it answers bind as a
+ * {@link creditedBinding}; anything else goes to `fallback`, or has no channel.
+ */
+export declare function creditedChannelBinder<T>(sourceOf: (target: OwnerTarget, channel: string) => CreditedSource<T> | null, fallback?: ChannelBinder): ChannelBinder;
+//# sourceMappingURL=stream-credits.d.ts.map

package/dist/core/protocol/lifecycle/stream-credits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-credits.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol/lifecycle/stream-credits.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iEAAiE,CAAC;AACtG,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAG3F,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,YAAY,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,iEAAiE,CAAC;AAE7H,6FAA6F;AAC7F,eAAO,MAAM,cAAc;IAC1B,oGAAoG;;;;;IAEpG,kEAAkE;;;;;IAElE,6DAA6D;;;;;IAE7D,4CAA4C;;;;;IAE5C,2EAA2E;;;;;CAE3B,CAAC;AA6HlD,kGAAkG;AAClG,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,aAAa,CAE3E;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EACtC,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,GAAG,IAAI,EAC5E,QAAQ,CAAC,EAAE,aAAa,GACtB,aAAa,CAMf"}

package/dist/core/protocol/lifecycle/stream-credits.js

@@ -0,0 +1,160 @@
+import { endingOfFailure, isCreditGrant } from "../wire/frame.js";
+import { attempt, attemptAsync, settled } from "./attempt.js";
+export { creditedEvents } from "./credited-events.js";
+/** The typed endings the ledger itself sends. Each is a code and a reason, never a value. */
+export const STREAM_ENDINGS = {
+    /** A grant that was not 1..1024, or that would leave more than the declared ceiling outstanding. */
+    creditOverflow: { code: 'INVALID_INPUT', reason: 'rpc-stream-credit-overflow' },
+    /** The consumer wrote into an owner-to-consumer event channel. */
+    writeRefused: { code: 'INVALID_INPUT', reason: 'rpc-stream-write-refused' },
+    /** One encoded event exceeded the channel's byte ceiling. */
+    eventTooLarge: { code: 'INVALID_INPUT', reason: 'rpc-stream-event-too-large' },
+    /** The source could not encode an event. */
+    eventInvalid: { code: 'INVALID_INPUT', reason: 'rpc-stream-event-invalid' },
+    /** The source failed, and its failure named no typed ending of its own. */
+    sourceFailed: { code: 'INTERNAL', reason: 'rpc-stream-source-failed' }
+};
+/** A source failure's own code and reason, when it carries a well-formed pair; nothing else of it crosses. */
+function ownEnding(failure) {
+    return (failure instanceof Error ? endingOfFailure(failure) : undefined) ?? STREAM_ENDINGS.sourceFailed;
+}
+class CreditedBinding {
+    source;
+    dataHandlers = new Set();
+    endHandlers = new Set();
+    abort = new AbortController();
+    iterator = null;
+    credits = 0;
+    /** A `next()` is in flight: the loop never asks the source twice at once. */
+    pulling = false;
+    finished = false;
+    returned = false;
+    constructor(source) {
+        this.source = source;
+    }
+    onData(handler) {
+        this.dataHandlers.add(handler);
+        return () => this.dataHandlers.delete(handler);
+    }
+    onEnd(handler) {
+        this.endHandlers.add(handler);
+        return () => this.endHandlers.delete(handler);
+    }
+    /** Events flow owner to consumer only: a consumer write ends the channel typed. */
+    write() {
+        this.finish(STREAM_ENDINGS.writeRefused);
+    }
+    demand(credits) {
+        if (this.finished)
+            return;
+        if (!isCreditGrant(credits) || this.credits + credits > this.source.maxCredits) {
+            this.finish(STREAM_ENDINGS.creditOverflow);
+            return;
+        }
+        this.credits += credits;
+        void this.pull();
+    }
+    /**
+     * Abort the source and tear down at once. A suspended source is returned and
+     * its cleanup awaited (a failure is the binding's close failure); a source
+     * still inside `next()` is told through its signal, and its `return()` is
+     * not awaited, since it would wait on a producer that may never yield.
+     */
+    async close() {
+        const wasPulling = this.pulling;
+        this.stop();
+        const returned = this.returnSource();
+        if (!wasPulling)
+            await returned;
+        // Its `return()` settles only after the pending `next()`: observed, never left unhandled.
+        else
+            void settled(returned);
+    }
+    async pull() {
+        if (this.pulling)
+            return;
+        this.pulling = true;
+        try {
+            while (this.credits > 0 && !this.finished) {
+                const step = await attemptAsync(() => {
+                    this.iterator ??= this.source.open(this.abort.signal)[Symbol.asyncIterator]();
+                    return this.iterator.next();
+                });
+                if (this.finished)
+                    return;
+                if (!step.ok) {
+                    this.finish(this.source.ending?.(step.failure) ?? ownEnding(step.failure));
+                    return;
+                }
+                if (step.value.done) {
+                    this.finish();
+                    return;
+                }
+                const encoded = attempt(() => this.source.encode(step.value.value));
+                if (!encoded.ok) {
+                    this.finish(STREAM_ENDINGS.eventInvalid);
+                    return;
+                }
+                if (encoded.value.byteLength > this.source.maxEventBytes) {
+                    this.finish(STREAM_ENDINGS.eventTooLarge);
+                    return;
+                }
+                this.credits -= 1;
+                for (const handler of this.dataHandlers)
+                    handler(encoded.value);
+            }
+        }
+        finally {
+            this.pulling = false;
+        }
+    }
+    /** The owner's end: abort the source, return it, and tell the transport (a typed ending rides its CLOSE). */
+    finish(ending) {
+        if (this.finished)
+            return;
+        this.stop();
+        // A source that finished or threw is already complete, so its `return()` is a no-op; one still
+        // inside `next()` (a refused grant or write) is told through its signal. Neither has a cleanup to await.
+        void settled(this.returnSource());
+        for (const handler of this.endHandlers)
+            handler(ending);
+        this.endHandlers.clear();
+        this.dataHandlers.clear();
+    }
+    stop() {
+        this.finished = true;
+        this.credits = 0;
+        if (!this.abort.signal.aborted)
+            this.abort.abort();
+    }
+    /** `return()` at most once, and only on a source that was started. Resolves when it settles; a failure rejects. */
+    returnSource() {
+        if (this.returned || !this.iterator?.return)
+            return Promise.resolve();
+        this.returned = true;
+        const iterator = this.iterator;
+        const returned = attemptAsync(() => iterator.return?.());
+        return returned.then((outcome) => {
+            if (!outcome.ok)
+                throw outcome.failure instanceof Error ? outcome.failure : new Error('The stream source failed to return.', { cause: outcome.failure });
+        });
+    }
+}
+/** The owner's credit ledger over an async source, as a credit-governed {@link StreamBinding}. */
+export function creditedBinding(source) {
+    return new CreditedBinding(source);
+}
+/**
+ * A {@link ChannelBinder} over an owner's credit-governed sources (a federation
+ * projection's `streamSource`): a target and channel it answers bind as a
+ * {@link creditedBinding}; anything else goes to `fallback`, or has no channel.
+ */
+export function creditedChannelBinder(sourceOf, fallback) {
+    return (target, channel) => {
+        const source = sourceOf(target, channel);
+        if (source)
+            return creditedBinding(source);
+        return fallback ? fallback(target, channel) : null;
+    };
+}
+//# sourceMappingURL=stream-credits.js.map

package/dist/core/protocol/lifecycle/stream-credits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-credits.js","sourceRoot":"","sources":["../../../../src/core/protocol/lifecycle/stream-credits.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,aAAa,EAAqB,MAAM,kBAAkB,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAItD,6FAA6F;AAC7F,MAAM,CAAC,MAAM,cAAc,GAAG;IAC7B,oGAAoG;IACpG,cAAc,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,4BAA4B,EAAE;IAC/E,kEAAkE;IAClE,YAAY,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,0BAA0B,EAAE;IAC3E,6DAA6D;IAC7D,aAAa,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,4BAA4B,EAAE;IAC9E,4CAA4C;IAC5C,YAAY,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,0BAA0B,EAAE;IAC3E,2EAA2E;IAC3E,YAAY,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,0BAA0B,EAAE;CACtB,CAAC;AAElD,8GAA8G;AAC9G,SAAS,SAAS,CAAC,OAAsB;IACxC,OAAO,CAAC,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC,YAAY,CAAC;AACzG,CAAC;AAED,MAAM,eAAe;IAWS;IAVZ,YAAY,GAAG,IAAI,GAAG,EAA8B,CAAC;IACrD,WAAW,GAAG,IAAI,GAAG,EAAmC,CAAC;IACzD,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,QAAQ,GAA4B,IAAI,CAAC;IACzC,OAAO,GAAG,CAAC,CAAC;IACpB,6EAA6E;IACrE,OAAO,GAAG,KAAK,CAAC;IAChB,QAAQ,GAAG,KAAK,CAAC;IACjB,QAAQ,GAAG,KAAK,CAAC;IAEzB,YAA6B,MAAyB;QAAzB,WAAM,GAAN,MAAM,CAAmB;IAAG,CAAC;IAE1D,MAAM,CAAC,OAAmC;QACzC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,OAAwC;QAC7C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,mFAAmF;IACnF,KAAK;QACJ,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,CAAC,OAAe;QACrB,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,GAAG,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAChF,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;YAC3C,OAAO;QACR,CAAC;QACD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC;QACxB,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK;QACV,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,IAAI,CAAC,UAAU;YAAE,MAAM,QAAQ,CAAC;QAChC,0FAA0F;;YACrF,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,IAAI;QACjB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC3C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE;oBACpC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;oBAC9E,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC7B,CAAC,CAAC,CAAC;gBACH,IAAI,IAAI,CAAC,QAAQ;oBAAE,OAAO;gBAC1B,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;oBACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;oBAC3E,OAAO;gBACR,CAAC;gBACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;oBACrB,IAAI,CAAC,MAAM,EAAE,CAAC;oBACd,OAAO;gBACR,CAAC;gBACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;gBACpE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;oBACjB,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;oBACzC,OAAO;gBACR,CAAC;gBACD,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;oBAC1D,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;oBAC1C,OAAO;gBACR,CAAC;gBACD,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;gBAClB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,YAAY;oBAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACjE,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACtB,CAAC;IACF,CAAC;IAED,6GAA6G;IACrG,MAAM,CAAC,MAAqB;QACnC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,+FAA+F;QAC/F,yGAAyG;QACzG,KAAK,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAClC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAEO,IAAI;QACX,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACpD,CAAC;IAED,mHAAmH;IAC3G,YAAY;QACnB,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QACtE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAChC,IAAI,CAAC,OAAO,CAAC,EAAE;gBAAE,MAAM,OAAO,CAAC,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1J,CAAC,CAAC,CAAC;IACJ,CAAC;CACD;AAED,kGAAkG;AAClG,MAAM,UAAU,eAAe,CAAI,MAAyB;IAC3D,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACpC,QAA4E,EAC5E,QAAwB;IAExB,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,MAAM;YAAE,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,CAAC,CAAC;AACH,CAAC"}

package/dist/core/protocol/references/advertisement.d.ts

@@ -0,0 +1,22 @@
+import type { AdvertisedRef, AdvertisingTable } from "../../../schemas/contracts/protocol/references/advertisement.ts";
+export type { AdvertisedRef, AdvertisedStore, AdvertisingAdapter, AdvertisingTable } from "../../../schemas/contracts/protocol/references/advertisement.ts";
+/** Record what `refId` advertised when the owner in `table` retained it. */
+export declare function recordAdvertisement(table: AdvertisingTable, refId: string, advertised: AdvertisedRef): void;
+/** What `refId` advertised in `table`, or undefined when the owner never advertised it. */
+export declare function advertisementOf(table: AdvertisingTable, refId: string): AdvertisedRef | undefined;
+/** Forget `refId` once its owner entry is released. */
+export declare function forgetAdvertisement(table: AdvertisingTable, refId: string): void;
+/** Whether `method` may be invoked on a ref that advertised `advertised`. */
+export declare function admitsMethod(advertised: AdvertisedRef | undefined, method: string): boolean;
+/**
+ * Whether stream `channel` may be opened on a ref that advertised
+ * `advertised`: never on a function ref; on an object ref that advertised its
+ * channels, only one of them; otherwise the listen side's binder decides.
+ */
+export declare function admitsStream(advertised: AdvertisedRef | undefined, channel?: string): boolean;
+/**
+ * Record a listener's root: the runtime root API unless the listen target
+ * declares its own root's methods (a PM, worker or projection root).
+ */
+export declare function recordRootAdvertisement(table: AdvertisingTable, rootRefId: string, rootMethods: readonly string[] | undefined): void;
+//# sourceMappingURL=advertisement.d.ts.map

package/dist/core/protocol/references/advertisement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"advertisement.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol/references/advertisement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAmB,gBAAgB,EAAE,MAAM,iEAAiE,CAAC;AACxI,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,iEAAiE,CAAC;AAqC5J,4EAA4E;AAC5E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,GAAG,IAAI,CAE3G;AAED,2FAA2F;AAC3F,wBAAgB,eAAe,CAAC,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAEjG;AAED,uDAAuD;AACvD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAEhF;AAED,6EAA6E;AAC7E,wBAAgB,YAAY,CAAC,UAAU,EAAE,aAAa,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAK3F;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,aAAa,GAAG,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAM7F;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACtC,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GACxC,IAAI,CAKN"}

package/dist/core/protocol/references/advertisement.js

@@ -0,0 +1,76 @@
+/**
+ * Owner-side method admission (Codex review 12:08, limit 4).
+ *
+ * A consumer proxy exposing only advertised methods is not admission: a peer
+ * can put any method name on the wire. The owner therefore records, per
+ * owner table, what each retained ref advertised when it crossed (its method
+ * list; a function ref's only method is `call`; a stream ref has none), and a
+ * listener records its root's declared methods. Dispatch invokes only a
+ * recorded method on a recorded ref; anything else is refused before the
+ * target is touched.
+ *
+ * The registry is keyed by the owner table instance (one per connection), so
+ * it holds no process-wide state and is collected with the connection.
+ */
+import { RUNTIME_ROOT_METHODS, validateRootMethods } from "./ref-table.js";
+/** What admission records are kept against: an owner table, its store, or an adapter over that store. */
+const byTable = new WeakMap();
+/** The registry key of an owner table: the store its adapter names, else the table itself. */
+function keyOf(table) {
+    return 'advertisementKey' in table ? table.advertisementKey : table;
+}
+function refsOf(table) {
+    const key = keyOf(table);
+    let refs = byTable.get(key);
+    if (!refs) {
+        refs = new Map();
+        byTable.set(key, refs);
+    }
+    return refs;
+}
+/** Record what `refId` advertised when the owner in `table` retained it. */
+export function recordAdvertisement(table, refId, advertised) {
+    refsOf(table).set(refId, advertised);
+}
+/** What `refId` advertised in `table`, or undefined when the owner never advertised it. */
+export function advertisementOf(table, refId) {
+    return byTable.get(keyOf(table))?.get(refId);
+}
+/** Forget `refId` once its owner entry is released. */
+export function forgetAdvertisement(table, refId) {
+    byTable.get(keyOf(table))?.delete(refId);
+}
+/** Whether `method` may be invoked on a ref that advertised `advertised`. */
+export function admitsMethod(advertised, method) {
+    if (!advertised)
+        return false;
+    if (advertised.kind === 'function')
+        return method === 'call';
+    if (advertised.kind === 'stream')
+        return false;
+    return advertised.methods.has(method);
+}
+/**
+ * Whether stream `channel` may be opened on a ref that advertised
+ * `advertised`: never on a function ref; on an object ref that advertised its
+ * channels, only one of them; otherwise the listen side's binder decides.
+ */
+export function admitsStream(advertised, channel) {
+    if (advertised === undefined || advertised.kind === 'function')
+        return false;
+    if (advertised.kind === 'object' && advertised.channels) {
+        return channel !== undefined && advertised.channels.has(channel);
+    }
+    return true;
+}
+/**
+ * Record a listener's root: the runtime root API unless the listen target
+ * declares its own root's methods (a PM, worker or projection root).
+ */
+export function recordRootAdvertisement(table, rootRefId, rootMethods) {
+    recordAdvertisement(table, rootRefId, {
+        kind: 'object',
+        methods: new Set(validateRootMethods(rootMethods ?? RUNTIME_ROOT_METHODS))
+    });
+}
+//# sourceMappingURL=advertisement.js.map

package/dist/core/protocol/references/advertisement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"advertisement.js","sourceRoot":"","sources":["../../../../src/core/protocol/references/advertisement.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE3E,yGAAyG;AAEzG,MAAM,OAAO,GAAG,IAAI,OAAO,EAA+C,CAAC;AAE3E,8FAA8F;AAC9F,SAAS,KAAK,CAAC,KAAuB;IACrC,OAAO,kBAAkB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC;AACrE,CAAC;AAED,SAAS,MAAM,CAAC,KAAuB;IACtC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CAAC,KAAuB,EAAE,KAAa,EAAE,UAAyB;IACpG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;AACtC,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,eAAe,CAAC,KAAuB,EAAE,KAAa;IACrE,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,mBAAmB,CAAC,KAAuB,EAAE,KAAa;IACzE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,YAAY,CAAC,UAAqC,EAAE,MAAc;IACjF,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,MAAM,KAAK,MAAM,CAAC;IAC7D,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,UAAqC,EAAE,OAAgB;IACnF,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IAC7E,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACzD,OAAO,OAAO,KAAK,SAAS,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACtC,KAAuB,EACvB,SAAiB,EACjB,WAA0C;IAE1C,mBAAmB,CAAC,KAAK,EAAE,SAAS,EAAE;QACrC,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,IAAI,GAAG,CAAC,mBAAmB,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC;KAC1E,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/protocol/references/caller-input.d.ts

@@ -0,0 +1,44 @@
+export { AbortSignalInput, BearerTokenInput, CallerObjectSchema, DurationInput, HeaderNameInput, HeaderRecordSchema, HeadersInput, HeaderValueInput, LifecycleInput, ListenTargetFields, PortInput, RootMethodsInput, SocketListenTargetInput, TextInput } from "../../../schemas/contracts/protocol/references/caller-input.ts";
+/**
+ * Caller input is read once, inside a guard (class checklist 1). Every public entry that takes caller options,
+ * positional values or descriptor input (the descriptor factories, `connect*`, `listen*`, the projection mounts, the
+ * transport plugins' options) parses them with {@link readInput} at its top and uses only the parsed snapshot after.
+ * A hostile value (a throwing getter, a Proxy or a revoked one, a wrong-typed field, a null prototype, a cycle, a
+ * huge value) never throws into the caller as a `TypeError`, `RangeError` or `ZodError`: it is refused
+ * `INVALID_INPUT` `rpc-input-invalid`, naming the entry and the issue paths only. Neither the values nor the parse
+ * error are carried, because an option can be a credential.
+ *
+ * Kernel objects (a runtime), native host objects, connections this package produced and the low-level classes
+ * `listen*` and `connect*` construct are trusted composition and are not re-read here.
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+export declare const RPC_INPUT_INVALID = "rpc-input-invalid";
+/** The typed refusal for caller input `entry` could not read. */
+export declare function inputInvalid(entry: string, issues: readonly string[]): CapabilityError;
+/** Parse `value` with `schema` once; refuse anything unreadable or invalid as {@link RPC_INPUT_INVALID}. */
+export declare function readInput<S extends z.ZodType>(entry: string, schema: S, value: z.input<S>): z.output<S>;
+/** An object or a function object; reads none of its keys (`z.object` strips, it does not walk). */
+export { functionInput, memberInput, objectInput } from '../../../schemas/contracts/protocol/references/caller-input.ts';
+/** A bounded identifier, path, origin or channel. */
+/**
+ * A connection credential as it rides an `Authorization: Bearer` header: 1 to 65536 visible-ASCII characters
+ * (0x21-0x7E), no space, CR, LF or non-ASCII character. `fetch` refuses anything else by quoting the whole header
+ * value in its error, so such a token is refused here, typed and value-free, before any request is built.
+ */
+/** An HTTP field name: an RFC 9110 `token`. */
+/** An HTTP field value as a client sends it: visible ASCII, with spaces and tabs only inside. */
+/**
+ * Caller headers, read into a snapshot. A malformed name or value is one issue at the headers field itself: the
+ * issue path never names a header (a record key is caller text, and can be a credential).
+ */
+/** A bounded optional duration in milliseconds. */
+/** A port number. */
+/** A root's declared method list: bounded breadth and length. */
+/** The owner side every listen target shares. */
+/**
+ * A socket listen target (unix, tcp): the shared fields, with its root served
+ * either as one object or built per accepted connection (`connectionRoot`).
+ * Exactly one of the two is given.
+ */
+//# sourceMappingURL=caller-input.d.ts.map

package/dist/core/protocol/references/caller-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller-input.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol/references/caller-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,SAAS,EAAE,MAAM,gEAAgE,CAAC;AACjU;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAMrD,iEAAiE;AACjE,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,eAAe,CAMtF;AASD,4GAA4G;AAC5G,wBAAgB,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAKvG;AAED,oGAAoG;AAEpG,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,gEAAgE,CAAC;AAEzH,qDAAqD;AAErD;;;;GAIG;AAEH,+CAA+C;AAE/C,iGAAiG;AAEjG;;;GAGG;AAEH,mDAAmD;AAEnD,qBAAqB;AAErB,iEAAiE;AAEjE,iDAAiD;AAEjD;;;;GAIG"}

package/dist/core/protocol/references/caller-input.js

@@ -0,0 +1,67 @@
+export { AbortSignalInput, BearerTokenInput, CallerObjectSchema, DurationInput, HeaderNameInput, HeaderRecordSchema, HeadersInput, HeaderValueInput, LifecycleInput, ListenTargetFields, PortInput, RootMethodsInput, SocketListenTargetInput, TextInput } from "../../../schemas/contracts/protocol/references/caller-input.js";
+/**
+ * Caller input is read once, inside a guard (class checklist 1). Every public entry that takes caller options,
+ * positional values or descriptor input (the descriptor factories, `connect*`, `listen*`, the projection mounts, the
+ * transport plugins' options) parses them with {@link readInput} at its top and uses only the parsed snapshot after.
+ * A hostile value (a throwing getter, a Proxy or a revoked one, a wrong-typed field, a null prototype, a cycle, a
+ * huge value) never throws into the caller as a `TypeError`, `RangeError` or `ZodError`: it is refused
+ * `INVALID_INPUT` `rpc-input-invalid`, naming the entry and the issue paths only. Neither the values nor the parse
+ * error are carried, because an option can be a credential.
+ *
+ * Kernel objects (a runtime), native host objects, connections this package produced and the low-level classes
+ * `listen*` and `connect*` construct are trusted composition and are not re-read here.
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+import { attempt } from "../lifecycle/attempt.js";
+export const RPC_INPUT_INVALID = 'rpc-input-invalid';
+/** How many issue paths a refusal names, and how long each may be. */
+const MAX_ISSUES = 16;
+const MAX_ISSUE_PATH = 256;
+/** The typed refusal for caller input `entry` could not read. */
+export function inputInvalid(entry, issues) {
+    return new CapabilityError(`${entry}: the caller input is invalid.`, 'INVALID_INPUT', {
+        reason: RPC_INPUT_INVALID,
+        retryable: false,
+        details: { entry, issues: [...issues] }
+    });
+}
+function issuePaths(error) {
+    return error.issues.slice(0, MAX_ISSUES).map((issue) => {
+        const path = issue.path.map((segment) => String(segment)).join('.');
+        return (path === '' ? '(input)' : path).slice(0, MAX_ISSUE_PATH);
+    });
+}
+/** Parse `value` with `schema` once; refuse anything unreadable or invalid as {@link RPC_INPUT_INVALID}. */
+export function readInput(entry, schema, value) {
+    const read = attempt(() => schema.safeParse(value));
+    if (!read.ok)
+        throw inputInvalid(entry, ['(unreadable)']);
+    if (!read.value.success)
+        throw inputInvalid(entry, issuePaths(read.value.error));
+    return read.value.data;
+}
+/** An object or a function object; reads none of its keys (`z.object` strips, it does not walk). */
+export { functionInput, memberInput, objectInput } from "../../../schemas/contracts/protocol/references/caller-input.js";
+/** A bounded identifier, path, origin or channel. */
+/**
+ * A connection credential as it rides an `Authorization: Bearer` header: 1 to 65536 visible-ASCII characters
+ * (0x21-0x7E), no space, CR, LF or non-ASCII character. `fetch` refuses anything else by quoting the whole header
+ * value in its error, so such a token is refused here, typed and value-free, before any request is built.
+ */
+/** An HTTP field name: an RFC 9110 `token`. */
+/** An HTTP field value as a client sends it: visible ASCII, with spaces and tabs only inside. */
+/**
+ * Caller headers, read into a snapshot. A malformed name or value is one issue at the headers field itself: the
+ * issue path never names a header (a record key is caller text, and can be a credential).
+ */
+/** A bounded optional duration in milliseconds. */
+/** A port number. */
+/** A root's declared method list: bounded breadth and length. */
+/** The owner side every listen target shares. */
+/**
+ * A socket listen target (unix, tcp): the shared fields, with its root served
+ * either as one object or built per accepted connection (`connectionRoot`).
+ * Exactly one of the two is given.
+ */
+//# sourceMappingURL=caller-input.js.map

package/dist/core/protocol/references/caller-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller-input.js","sourceRoot":"","sources":["../../../../src/core/protocol/references/caller-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,SAAS,EAAE,MAAM,gEAAgE,CAAC;AACjU;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAElD,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAErD,sEAAsE;AACtE,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,iEAAiE;AACjE,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,MAAyB;IACpE,OAAO,IAAI,eAAe,CAAC,GAAG,KAAK,gCAAgC,EAAE,eAAe,EAAE;QACrF,MAAM,EAAE,iBAAiB;QACzB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE;KACvC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACpC,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACtD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,SAAS,CAAsB,KAAa,EAAE,MAAS,EAAE,KAAiB;IACzF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,MAAM,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACjF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;AACxB,CAAC;AAED,oGAAoG;AAEpG,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,gEAAgE,CAAC;AAEzH,qDAAqD;AAErD;;;;GAIG;AAEH,+CAA+C;AAE/C,iGAAiG;AAEjG;;;GAGG;AAEH,mDAAmD;AAEnD,qBAAqB;AAErB,iEAAiE;AAEjE,iDAAiD;AAEjD;;;;GAIG"}

package/dist/core/protocol/references/channel-ids.d.ts

@@ -0,0 +1,23 @@
+/**
+ * One live channel per id on a listening end. A `stream` request's id names its channel, and on the relay that id is
+ * shared by every consumer of one daemon, so a second request naming a live or opening id (another consumer's, or
+ * the same peer's) must not replace the first binding: it is refused `RPC_CHANNEL_IN_USE`
+ * `rpc-channel-id-in-use` before the owner's target is touched, and the live channel keeps its bytes and its close.
+ */
+import { type RpcResponse } from '../wire/verbs.ts';
+export declare const CHANNEL_ID_IN_USE = "rpc-channel-id-in-use";
+/** Claims a channel id for the stream request in flight; the session's live channel table answers the rest. */
+export declare class ChannelIdClaims {
+    #private;
+    private readonly live;
+    constructor(live: {
+        has(channelId: string): boolean;
+    });
+    /** Claim `channelId` for an opening stream; false when it is live or already opening. */
+    claim(channelId: string): boolean;
+    /** The opening stream settled: it is now live in the session's table, or it failed. */
+    release(channelId: string): void;
+}
+/** The typed refusal for a stream request naming a live or opening channel id. */
+export declare function channelIdInUse(channelId: string): RpcResponse;
+//# sourceMappingURL=channel-ids.d.ts.map

package/dist/core/protocol/references/channel-ids.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-ids.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol/references/channel-ids.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAuB,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEzE,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AAEzD,+GAA+G;AAC/G,qBAAa,eAAe;;IAGf,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE;QAAE,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE;IAEtE,yFAAyF;IACzF,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAMjC,uFAAuF;IACvF,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;CAGhC;AAED,kFAAkF;AAClF,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,CAK7D"}

package/dist/core/protocol/references/channel-ids.js

@@ -0,0 +1,35 @@
+/**
+ * One live channel per id on a listening end. A `stream` request's id names its channel, and on the relay that id is
+ * shared by every consumer of one daemon, so a second request naming a live or opening id (another consumer's, or
+ * the same peer's) must not replace the first binding: it is refused `RPC_CHANNEL_IN_USE`
+ * `rpc-channel-id-in-use` before the owner's target is touched, and the live channel keeps its bytes and its close.
+ */
+import { RPC_ERROR, rpcError } from "../wire/verbs.js";
+export const CHANNEL_ID_IN_USE = 'rpc-channel-id-in-use';
+/** Claims a channel id for the stream request in flight; the session's live channel table answers the rest. */
+export class ChannelIdClaims {
+    live;
+    #opening = new Set();
+    constructor(live) {
+        this.live = live;
+    }
+    /** Claim `channelId` for an opening stream; false when it is live or already opening. */
+    claim(channelId) {
+        if (this.live.has(channelId) || this.#opening.has(channelId))
+            return false;
+        this.#opening.add(channelId);
+        return true;
+    }
+    /** The opening stream settled: it is now live in the session's table, or it failed. */
+    release(channelId) {
+        this.#opening.delete(channelId);
+    }
+}
+/** The typed refusal for a stream request naming a live or opening channel id. */
+export function channelIdInUse(channelId) {
+    return {
+        id: channelId,
+        error: rpcError(RPC_ERROR.CHANNEL_IN_USE, 'The stream channel id names a live channel on this connection.', undefined, CHANNEL_ID_IN_USE)
+    };
+}
+//# sourceMappingURL=channel-ids.js.map

package/dist/core/protocol/references/channel-ids.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-ids.js","sourceRoot":"","sources":["../../../../src/core/protocol/references/channel-ids.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAoB,MAAM,kBAAkB,CAAC;AAEzE,MAAM,CAAC,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AAEzD,+GAA+G;AAC/G,MAAM,OAAO,eAAe;IAGE;IAFpB,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,YAA6B,IAAyC;QAAzC,SAAI,GAAJ,IAAI,CAAqC;IAAG,CAAC;IAE1E,yFAAyF;IACzF,KAAK,CAAC,SAAiB;QACtB,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,uFAAuF;IACvF,OAAO,CAAC,SAAiB;QACxB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;CACD;AAED,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC/C,OAAO;QACN,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,gEAAgE,EAAE,SAAS,EAAE,iBAAiB,CAAC;KACzI,CAAC;AACH,CAAC"}

package/dist/core/protocol/references/consumer.d.ts

@@ -0,0 +1,11 @@
+import type { ConsumerEnd, ConsumerTransport } from "../../../schemas/contracts/protocol/references/consumer.ts";
+export type { ConsumerEnd, ConsumerTransport } from "../../../schemas/contracts/protocol/references/consumer.ts";
+/**
+ * Wire a consumer end onto a transport. Returns the remote-root proxy plus the
+ * consumer table and a callback-dispatch entry point the transport calls when the
+ * owner invokes a consumer-owned ref.
+ */
+export declare function wireConsumer(transport: ConsumerTransport, idPrefix?: string): ConsumerEnd;
+/** A disposable remote-root proxy — disposing releases the root ref. */
+export type { RemoteRef, RpcChannel } from './ref-table.ts';
+//# sourceMappingURL=consumer.d.ts.map

package/dist/core/protocol/references/consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumer.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol/references/consumer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,4DAA4D,CAAC;AACjH,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,4DAA4D,CAAC;AA4DjH;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,iBAAiB,EAAE,QAAQ,SAAa,GAAG,WAAW,CA+G7F;AAED,wEAAwE;AACxE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC"}