@vibesdotdev/kernel-rpc 0.0.0-stage → 1.0.0-rc.3

package/dist/core/protocol/wire/inline-value.js

@@ -0,0 +1,114 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { isBigInt, isBoolean, isFunction, isNumber, isObject, isString, isSymbol } from "./value-kinds.js";
+import { CANCELLATION_REFUSED, ownRefusals, UNSERIALIZABLE_REFUSED } from "./wire-value.js";
+/** Default classifier: everything is inline JSON. Used when no refs are expected. */
+export const inlineOnly = () => ({ mode: 'inline' });
+function refuseInline(reason) {
+    const refusal = new CapabilityError(reason === 'rpc-cancellation-unsupported' ? CANCELLATION_REFUSED : UNSERIALIZABLE_REFUSED, 'INVALID_INPUT', { reason, retryable: false });
+    ownRefusals.add(refusal);
+    return refusal;
+}
+/** The refusal for any traversal failure that was not this module's own: fixed text, no serializer cause. */
+function unserializableRefusal() {
+    return new CapabilityError(UNSERIALIZABLE_REFUSED, 'INVALID_INPUT', {
+        reason: 'rpc-value-unserializable', retryable: false
+    });
+}
+/** Define an own enumerable data property, including a key named `__proto__`. */
+function defineOwn(target, key, value) {
+    Object.defineProperty(target, key, { value, enumerable: true, writable: true, configurable: true });
+}
+/**
+ * The one validated snapshot of an inline value: exactly what crosses the
+ * wire (Codex re-review: send the validated representation, never re-read the
+ * original).
+ *
+ * The declared inline types are JSON's plus `Date`. The walk reads every
+ * property, every array index and calls every `toJSON` exactly once, and it
+ * never calls a method the value supplies (arrays are walked by index over
+ * `length`, not through their own `map`), so a stateful getter, `toJSON` or
+ * overridden array method cannot hand the wire a different shape than the one
+ * validated. Own keys are kept as own data properties, a key named
+ * `__proto__` included, and the snapshot's prototype is always the plain one.
+ * A cancellation handle (`AbortSignal`) anywhere, including inside a class
+ * instance or behind a `toJSON`, is refused `rpc-cancellation-unsupported`;
+ * a cycle, a BigInt, or any failure while traversing (a throwing getter,
+ * index or `toJSON`) is refused `rpc-value-unserializable`. Every refusal
+ * carries a fixed message and no cause, so no serializer or application text
+ * leaks into the diagnostic envelope.
+ */
+export function snapshotInline(value) {
+    const ancestors = new Set();
+    const walk = (candidate, inArray) => {
+        if (candidate === null)
+            return null;
+        if (isString(candidate) || isBoolean(candidate))
+            return candidate;
+        if (isNumber(candidate))
+            return Number.isFinite(candidate) ? candidate : null;
+        if (isBigInt(candidate))
+            throw refuseInline('rpc-value-unserializable');
+        if (candidate === undefined || isFunction(candidate) || isSymbol(candidate))
+            return inArray ? null : undefined;
+        if (candidate instanceof AbortSignal)
+            throw refuseInline('rpc-cancellation-unsupported');
+        if (candidate instanceof Date)
+            return new Date(Date.prototype.getTime.call(candidate));
+        // Every other value is an object; nothing else remains after the kinds above.
+        if (!isObject(candidate))
+            throw refuseInline('rpc-value-unserializable');
+        const object = candidate;
+        if (ancestors.has(object))
+            throw refuseInline('rpc-value-unserializable');
+        const toJson = object.toJSON;
+        if (isFunction(toJson)) {
+            // The intrinsic `call`, so a function that supplies its own `call` or `apply` is not consulted.
+            const projected = Function.prototype.call.call(toJson, object);
+            ancestors.add(object);
+            try {
+                return walk(projected, inArray);
+            }
+            finally {
+                ancestors.delete(object);
+            }
+        }
+        ancestors.add(object);
+        try {
+            if (Array.isArray(object)) {
+                const length = object.length;
+                const items = [];
+                for (let index = 0; index < length; index += 1) {
+                    items.push(walk(object[index], true));
+                }
+                return items;
+            }
+            const out = {};
+            for (const key of Object.keys(object)) {
+                const snapped = walk(object[key], false);
+                if (snapped !== undefined)
+                    defineOwn(out, key, snapped);
+            }
+            return out;
+        }
+        finally {
+            ancestors.delete(object);
+        }
+    };
+    let snapshot;
+    try {
+        snapshot = walk(value, false);
+    }
+    catch (error) {
+        // Only this module's own refusals pass through; any other failure while
+        // traversing becomes the fixed refusal, without its text or cause.
+        if (error instanceof CapabilityError && ownRefusals.has(error))
+            throw error;
+        throw unserializableRefusal();
+    }
+    return snapshot === undefined ? null : snapshot;
+}
+/** Refuse, typed, an inline value the wire cannot carry (see {@link snapshotInline}). */
+export function assertInlineCarriable(value) {
+    snapshotInline(value);
+}
+//# sourceMappingURL=inline-value.js.map

package/dist/core/protocol/wire/inline-value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inline-value.js","sourceRoot":"","sources":["../../../../src/core/protocol/wire/inline-value.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC3G,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAE5F,qFAAqF;AACrF,MAAM,CAAC,MAAM,UAAU,GAAmB,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AAErE,SAAS,YAAY,CAAC,MAAmE;IACxF,MAAM,OAAO,GAAG,IAAI,eAAe,CAClC,MAAM,KAAK,8BAA8B,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,sBAAsB,EACzF,eAAe,EACf,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAC5B,CAAC;IACF,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACzB,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,6GAA6G;AAC7G,SAAS,qBAAqB;IAC7B,OAAO,IAAI,eAAe,CAAC,sBAAsB,EAAE,eAAe,EAAE;QACnE,MAAM,EAAE,0BAA0B,EAAE,SAAS,EAAE,KAAK;KACpD,CAAC,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,SAAS,SAAS,CAAC,MAA+B,EAAE,GAAW,EAAE,KAAc;IAC9E,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;AACrG,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,cAAc,CAAI,KAAQ;IACzC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAI,SAAY,EAAE,OAAgB,EAAW,EAAE;QAC3D,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAClE,IAAI,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9E,IAAI,QAAQ,CAAC,SAAS,CAAC;YAAE,MAAM,YAAY,CAAC,0BAA0B,CAAC,CAAC;QACxE,IAAI,SAAS,KAAK,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/G,IAAI,SAAS,YAAY,WAAW;YAAE,MAAM,YAAY,CAAC,8BAA8B,CAAC,CAAC;QACzF,IAAI,SAAS,YAAY,IAAI;YAAE,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACvF,8EAA8E;QAC9E,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,MAAM,YAAY,CAAC,0BAA0B,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,SAAS,CAAC;QACzB,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,YAAY,CAAC,0BAA0B,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,gGAAgG;YAChG,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC/D,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtB,IAAI,CAAC;gBACJ,OAAO,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACjC,CAAC;oBAAS,CAAC;gBACV,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;QACF,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,CAAC;YACJ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC7B,MAAM,KAAK,GAAc,EAAE,CAAC;gBAC5B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;oBAChD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;gBACvC,CAAC;gBACD,OAAO,KAAK,CAAC;YACd,CAAC;YACD,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;gBACzC,IAAI,OAAO,KAAK,SAAS;oBAAE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACV,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;IACF,CAAC,CAAC;IACF,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACJ,QAAQ,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,wEAAwE;QACxE,mEAAmE;QACnE,IAAI,KAAK,YAAY,eAAe,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QAC5E,MAAM,qBAAqB,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;AACjD,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,qBAAqB,CAAI,KAAQ;IAChD,cAAc,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/dist/core/protocol/wire/json-wire.d.ts

@@ -0,0 +1,7 @@
+/** Normalize JSON transport payloads only after both peers admit Date metadata. */
+import type { RpcRequest, RpcResponse } from './verbs.ts';
+export declare function jsonRequest(request: RpcRequest, datesEnabled: boolean): RpcRequest;
+export declare function jsonResponse(response: RpcResponse, datesEnabled: boolean): RpcResponse;
+/** Metadata from a peer that did not negotiate it is a protocol refusal. */
+export declare function hasWireDates(message: RpcRequest | RpcResponse): boolean;
+//# sourceMappingURL=json-wire.d.ts.map

package/dist/core/protocol/wire/json-wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-wire.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol/wire/json-wire.ts"],"names":[],"mappings":"AAAA,mFAAmF;AAOnF,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAkC1D,wBAAgB,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,GAAG,UAAU,CAIlF;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,GAAG,WAAW,CAEtF;AAED,4EAA4E;AAC5E,wBAAgB,YAAY,CAAC,OAAO,EAAE,UAAU,GAAG,WAAW,GAAG,OAAO,CAKvE"}

package/dist/core/protocol/wire/json-wire.js

@@ -0,0 +1,58 @@
+/** Normalize JSON transport payloads only after both peers admit Date metadata. */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { isDataArray, isDataDate, isDataObject } from "./rpc-data.js";
+import { isBoolean, isNumber, isString } from "./value-kinds.js";
+import { snapshotInline } from "./wire-value.js";
+function jsonValue(wire, datesEnabled) {
+    if (wire.t !== 'json')
+        return wire;
+    if (wire.dates)
+        return datesEnabled ? wire : { t: 'json', v: wire.v };
+    if (!datesEnabled)
+        return wire;
+    const dates = [];
+    const visit = (candidate, path) => {
+        if (candidate === null || isString(candidate) || isBoolean(candidate))
+            return candidate;
+        if (isNumber(candidate) && Number.isFinite(candidate))
+            return candidate;
+        if (isDataDate(candidate)) {
+            dates.push([...path]);
+            return Number.isFinite(candidate.getTime()) ? candidate.toISOString() : null;
+        }
+        if (isDataArray(candidate))
+            return candidate.map((child, index) => visit(child, [...path, index]));
+        if (isDataObject(candidate)) {
+            const out = {};
+            for (const [key, child] of Object.entries(candidate)) {
+                Object.defineProperty(out, key, {
+                    value: visit(child, [...path, key]), enumerable: true, writable: true, configurable: true
+                });
+            }
+            return out;
+        }
+        throw new CapabilityError('An RPC value cannot be represented on the wire.', 'INVALID_INPUT', {
+            reason: 'rpc-value-unserializable', retryable: false
+        });
+    };
+    const value = visit(snapshotInline(wire.v), []);
+    if (dates.length === 0)
+        return { t: 'json', v: value };
+    return { t: 'json', v: value, dates };
+}
+export function jsonRequest(request, datesEnabled) {
+    return request.verb === 'invoke'
+        ? { ...request, args: request.args.map((argument) => jsonValue(argument, datesEnabled)) }
+        : request;
+}
+export function jsonResponse(response, datesEnabled) {
+    return response.result ? { ...response, result: jsonValue(response.result, datesEnabled) } : response;
+}
+/** Metadata from a peer that did not negotiate it is a protocol refusal. */
+export function hasWireDates(message) {
+    if ('verb' in message) {
+        return message.verb === 'invoke' && message.args.some((argument) => argument.t === 'json' && !!argument.dates);
+    }
+    return message.result?.t === 'json' && !!message.result.dates;
+}
+//# sourceMappingURL=json-wire.js.map

package/dist/core/protocol/wire/json-wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-wire.js","sourceRoot":"","sources":["../../../../src/core/protocol/wire/json-wire.ts"],"names":[],"mappings":"AAAA,mFAAmF;AAEnF,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAgB,MAAM,eAAe,CAAC;AAEpF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjE,OAAO,EAAE,cAAc,EAAkB,MAAM,iBAAiB,CAAC;AAEjE,SAAS,SAAS,CAAC,IAAe,EAAE,YAAqB;IACxD,IAAI,IAAI,CAAC,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;IACtE,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,CAAC,SAAkB,EAAE,IAAyB,EAAsC,EAAE;QACnG,IAAI,SAAS,KAAK,IAAI,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QACxF,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QACxE,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YACtB,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9E,CAAC;QACD,IAAI,WAAW,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACnG,IAAI,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAuD,EAAE,CAAC;YACnE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtD,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE;oBAC/B,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI;iBACzF,CAAC,CAAC;YACJ,CAAC;YACD,OAAO,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,iDAAiD,EAAE,eAAe,EAAE;YAC7F,MAAM,EAAE,0BAA0B,EAAE,SAAS,EAAE,KAAK;SACpD,CAAC,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;IACvD,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAmB,EAAE,YAAqB;IACrE,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAC/B,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,EAAE;QACzF,CAAC,CAAC,OAAO,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAqB,EAAE,YAAqB;IACxE,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AACvG,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,YAAY,CAAC,OAAiC;IAC7D,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;QACvB,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;AAC/D,CAAC"}

package/dist/core/protocol/wire/limits.d.ts

@@ -0,0 +1,23 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import type { OversizeReason } from "../../../schemas/contracts/protocol/wire/limits.ts";
+export type { OversizeReason } from "../../../schemas/contracts/protocol/wire/limits.ts";
+/**
+ * The most bytes one inbound RPC message (a socket record body, an HTTP request body) may carry. An unauthenticated
+ * peer reaches the parser before any attestation or bearer check, so a declared or streamed size above this is
+ * refused before the rest is buffered. It is the writer's own queue ceiling: no legitimate message exceeds what the
+ * peer's writer will hold.
+ */
+export declare const RPC_MAX_MESSAGE_BYTES: number;
+/**
+ * How deeply an inline payload may nest (arrays within objects within arrays). A peer controls this depth, and the
+ * checks that walk a payload recurse once per level, so an unbounded depth is a stack overflow (`RangeError`) that
+ * bypasses the typed refusal. Real payloads nest a handful of levels.
+ */
+export declare const RPC_MAX_DATA_DEPTH = 128;
+/**
+ * The one typed refusal for a message or chunk above a transport's ceiling (cef, tauri, messageport): `INVALID_INPUT`
+ * with the reason and the limit. `label` is the transport's stable name for it (`CEF_RPC_STREAM_CHUNK_TOO_LARGE`, …),
+ * kept as the message so existing diagnostics read the same.
+ */
+export declare function oversize(label: string, reason: OversizeReason, limit: number): CapabilityError;
+//# sourceMappingURL=limits.d.ts.map

package/dist/core/protocol/wire/limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol/wire/limits.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oDAAoD,CAAC;AACzF,YAAY,EAAE,cAAc,EAAE,MAAM,oDAAoD,CAAC;AAEzF;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,QAAmB,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,eAAe,CAE9F"}

package/dist/core/protocol/wire/limits.js

@@ -0,0 +1,23 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+/**
+ * The most bytes one inbound RPC message (a socket record body, an HTTP request body) may carry. An unauthenticated
+ * peer reaches the parser before any attestation or bearer check, so a declared or streamed size above this is
+ * refused before the rest is buffered. It is the writer's own queue ceiling: no legitimate message exceeds what the
+ * peer's writer will hold.
+ */
+export const RPC_MAX_MESSAGE_BYTES = 32 * 1024 * 1024;
+/**
+ * How deeply an inline payload may nest (arrays within objects within arrays). A peer controls this depth, and the
+ * checks that walk a payload recurse once per level, so an unbounded depth is a stack overflow (`RangeError`) that
+ * bypasses the typed refusal. Real payloads nest a handful of levels.
+ */
+export const RPC_MAX_DATA_DEPTH = 128;
+/**
+ * The one typed refusal for a message or chunk above a transport's ceiling (cef, tauri, messageport): `INVALID_INPUT`
+ * with the reason and the limit. `label` is the transport's stable name for it (`CEF_RPC_STREAM_CHUNK_TOO_LARGE`, …),
+ * kept as the message so existing diagnostics read the same.
+ */
+export function oversize(label, reason, limit) {
+    return new CapabilityError(label, 'INVALID_INPUT', { reason, retryable: false, details: { limit } });
+}
+//# sourceMappingURL=limits.js.map

package/dist/core/protocol/wire/limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../../../src/core/protocol/wire/limits.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAItD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAEtC;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,MAAsB,EAAE,KAAa;IAC5E,OAAO,IAAI,eAAe,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AACtG,CAAC"}

package/dist/core/protocol/wire/rpc-data.d.ts

@@ -0,0 +1,15 @@
+import type { RpcData, RpcDataObject } from "../../../schemas/contracts/protocol/wire/rpc-data.ts";
+export type { RpcData, RpcDataObject, RpcSource, RpcSourceFunction, RpcSourceMember, RpcSourceObject } from "../../../schemas/contracts/protocol/wire/rpc-data.ts";
+/** Whether a data value is an array. */
+export declare function isDataArray(value: RpcData): value is readonly RpcData[];
+/** Whether a data value is a plain object (not an array, not a `Date`). */
+export declare function isDataObject(value: RpcData): value is RpcDataObject;
+/** Whether a data value is a `Date`. */
+export declare function isDataDate(value: RpcData): value is Date;
+/**
+ * Whether a value is {@link RpcData}: JSON values (finite numbers only), `Date`s,
+ * arrays and plain objects, with no cycle. This is the check the wire schema
+ * runs on an inline payload; it reads the value, it never copies it.
+ */
+export declare function isRpcData<T>(value: T): value is T & RpcData;
+//# sourceMappingURL=rpc-data.d.ts.map

package/dist/core/protocol/wire/rpc-data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-data.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol/wire/rpc-data.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,sDAAsD,CAAC;AACnG,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,sDAAsD,CAAC;AAcnK,wCAAwC;AACxC,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,OAAO,EAAE,CAEvE;AAED,2EAA2E;AAC3E,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAEnE;AAED,wCAAwC;AACxC,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,IAAI,CAExD;AA4BD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,OAAO,CAE3D"}

package/dist/core/protocol/wire/rpc-data.js

@@ -0,0 +1,66 @@
+/**
+ * The value domains of the RPC wire, named once.
+ *
+ * - {@link RpcData}: what an `inline` wire value carries — JSON plus `Date`
+ *   (see `snapshotInline`). Parsed where it enters ({@link RpcDataSchema} in
+ *   `schemas.ts`), so every reader holds data that was checked, not trusted.
+ * - {@link RpcSource}: any value a local endpoint may hand the wire encoder
+ *   (a result, a callback, a class instance). The encoder narrows it with the
+ *   kind guards in `value-kinds.ts` and never reads it as anything else.
+ */
+import { RPC_MAX_DATA_DEPTH } from "./limits.js";
+/** Whether a data value is an array. */
+export function isDataArray(value) {
+    return Array.isArray(value);
+}
+/** Whether a data value is a plain object (not an array, not a `Date`). */
+export function isDataObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value) && !(value instanceof Date);
+}
+/** Whether a data value is a `Date`. */
+export function isDataDate(value) {
+    return value instanceof Date;
+}
+/** Whether an object is plain: an `Object.prototype` or null-prototype object, never a class instance. */
+function isPlainObject(value) {
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+function dataWithin(value, ancestors) {
+    // `ancestors` holds the objects above this value, so its size is the depth: a deeper payload is refused, not recursed into.
+    if (ancestors.size > RPC_MAX_DATA_DEPTH)
+        return false;
+    if (value === null || value === undefined)
+        return true;
+    if (typeof value === 'string' || typeof value === 'boolean')
+        return true;
+    if (typeof value === 'number')
+        return Number.isFinite(value);
+    if (typeof value !== 'object')
+        return false;
+    if (value instanceof Date)
+        return true;
+    // A cycle is never data: a structured-clone peer can send one.
+    if (ancestors.has(value))
+        return false;
+    ancestors.add(value);
+    try {
+        if (Array.isArray(value))
+            return value.every((item) => dataWithin(item, ancestors));
+        if (!isPlainObject(value))
+            return false;
+        return Object.values(value).every((member) => dataWithin(member, ancestors));
+    }
+    finally {
+        ancestors.delete(value);
+    }
+}
+/**
+ * Whether a value is {@link RpcData}: JSON values (finite numbers only), `Date`s,
+ * arrays and plain objects, with no cycle. This is the check the wire schema
+ * runs on an inline payload; it reads the value, it never copies it.
+ */
+export function isRpcData(value) {
+    return dataWithin(value, new Set());
+}
+//# sourceMappingURL=rpc-data.js.map

package/dist/core/protocol/wire/rpc-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-data.js","sourceRoot":"","sources":["../../../../src/core/protocol/wire/rpc-data.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,wCAAwC;AACxC,MAAM,UAAU,WAAW,CAAC,KAAc;IACzC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC;AACzG,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,UAAU,CAAC,KAAc;IACxC,OAAO,KAAK,YAAY,IAAI,CAAC;AAC9B,CAAC;AAED,0GAA0G;AAC1G,SAAS,aAAa,CAAI,KAAQ;IACjC,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC7D,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ,EAAE,SAAiB;IACjD,4HAA4H;IAC5H,IAAI,SAAS,CAAC,IAAI,GAAG,kBAAkB;QAAE,OAAO,KAAK,CAAC;IACtD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACzE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,IAAI,CAAC;IACvC,+DAA+D;IAC/D,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,CAAC;QACJ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9E,CAAC;YAAS,CAAC;QACV,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAI,KAAQ;IACpC,OAAO,UAAU,CAAC,KAAK,EAAE,IAAI,GAAG,EAAK,CAAC,CAAC;AACxC,CAAC"}

package/dist/core/protocol/wire/schemas.d.ts

@@ -0,0 +1,14 @@
+export { JsonWireDataSchema, RefIdSchema, RpcDataSchema, RpcDeclaredCallerSchema, RpcErrorSchema, RpcInvokeObjectSchema, RpcInvokeSchema, RpcReleaseObjectSchema, RpcReleaseSchema, RpcRequestSchema, RpcResponseSchema, RpcStreamObjectSchema, RpcStreamSchema, WireCapabilitiesSchema, WireDatePathSchema, WireValueSchema } from "../../../schemas/contracts/protocol/wire/schemas.ts";
+export type { RpcDeclaredCaller, WireCapabilities, WireDatePath } from "../../../schemas/contracts/protocol/wire/schemas.ts";
+/** Canonical Zod schemas for the transport-neutral runtime RPC wire. */
+/**
+ * Inline wire data: JSON values plus `Date`. The check reads the payload and
+ * returns it as it arrived (identity, never a copy), so a peer's own keys,
+ * `__proto__` included, reach the decoder untouched.
+ */
+/**
+ * The caller an invoke declares: untrusted fields. The owner parses them with
+ * the runtime's `WireInvokeCallerSchema` and admits them against what its
+ * transport verified; nothing here adopts an identity.
+ */
+//# sourceMappingURL=schemas.d.ts.map

package/dist/core/protocol/wire/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol/wire/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,EAAE,uBAAuB,EAAE,cAAc,EAAE,qBAAqB,EAAE,eAAe,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,eAAe,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,qDAAqD,CAAC;AAC1X,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,qDAAqD,CAAC;AAC7H,wEAAwE;AAExE;;;;GAIG;AAEH;;;;GAIG"}

package/dist/core/protocol/wire/schemas.js

@@ -0,0 +1,13 @@
+export { JsonWireDataSchema, RefIdSchema, RpcDataSchema, RpcDeclaredCallerSchema, RpcErrorSchema, RpcInvokeObjectSchema, RpcInvokeSchema, RpcReleaseObjectSchema, RpcReleaseSchema, RpcRequestSchema, RpcResponseSchema, RpcStreamObjectSchema, RpcStreamSchema, WireCapabilitiesSchema, WireDatePathSchema, WireValueSchema } from "../../../schemas/contracts/protocol/wire/schemas.js";
+/** Canonical Zod schemas for the transport-neutral runtime RPC wire. */
+/**
+ * Inline wire data: JSON values plus `Date`. The check reads the payload and
+ * returns it as it arrived (identity, never a copy), so a peer's own keys,
+ * `__proto__` included, reach the decoder untouched.
+ */
+/**
+ * The caller an invoke declares: untrusted fields. The owner parses them with
+ * the runtime's `WireInvokeCallerSchema` and admits them against what its
+ * transport verified; nothing here adopts an identity.
+ */
+//# sourceMappingURL=schemas.js.map

package/dist/core/protocol/wire/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../../src/core/protocol/wire/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,EAAE,uBAAuB,EAAE,cAAc,EAAE,qBAAqB,EAAE,eAAe,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,eAAe,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,qDAAqD,CAAC;AAE1X,wEAAwE;AAExE;;;;GAIG;AAEH;;;;GAIG"}

package/dist/core/protocol/wire/value-kinds.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Kind guards over local values.
+ *
+ * The encoder meets values of every kind (data, callbacks, class instances);
+ * it narrows them here, in type guards, so each narrowing is a named fact about
+ * the value rather than a scattered `typeof`. Each guard is generic over what
+ * it narrows: it refines the caller's own type, it never widens it.
+ */
+import type { RpcSourceFunction, RpcSourceObject } from './rpc-data.ts';
+/** Whether a value is a string. */
+export declare function isString<T>(value: T): value is T & string;
+/** Whether a value is a number (NaN and infinities included). */
+export declare function isNumber<T>(value: T): value is T & number;
+/** Whether a value is a boolean. */
+export declare function isBoolean<T>(value: T): value is T & boolean;
+/** Whether a value is a bigint. */
+export declare function isBigInt<T>(value: T): value is T & bigint;
+/** Whether a value is a symbol. */
+export declare function isSymbol<T>(value: T): value is T & symbol;
+/** Whether a value is callable. */
+export declare function isFunction<T>(value: T): value is T & RpcSourceFunction;
+/** Whether a value is a non-null object (arrays and class instances included). */
+export declare function isObject<T>(value: T): value is T & RpcSourceObject;
+/** Whether a value has members to read by name: an object, or a function (which has its own). */
+export declare function hasMembers<T>(value: T): value is T & RpcSourceObject;
+//# sourceMappingURL=value-kinds.d.ts.map

package/dist/core/protocol/wire/value-kinds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"value-kinds.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol/wire/value-kinds.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAExE,mCAAmC;AACnC,wBAAgB,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,MAAM,CAEzD;AAED,iEAAiE;AACjE,wBAAgB,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,MAAM,CAEzD;AAED,oCAAoC;AACpC,wBAAgB,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,OAAO,CAE3D;AAED,mCAAmC;AACnC,wBAAgB,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,MAAM,CAEzD;AAED,mCAAmC;AACnC,wBAAgB,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,MAAM,CAEzD;AAED,mCAAmC;AACnC,wBAAgB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,iBAAiB,CAEtE;AAED,kFAAkF;AAClF,wBAAgB,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,eAAe,CAElE;AAED,iGAAiG;AACjG,wBAAgB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,eAAe,CAEpE"}

package/dist/core/protocol/wire/value-kinds.js

@@ -0,0 +1,41 @@
+/**
+ * Kind guards over local values.
+ *
+ * The encoder meets values of every kind (data, callbacks, class instances);
+ * it narrows them here, in type guards, so each narrowing is a named fact about
+ * the value rather than a scattered `typeof`. Each guard is generic over what
+ * it narrows: it refines the caller's own type, it never widens it.
+ */
+/** Whether a value is a string. */
+export function isString(value) {
+    return typeof value === 'string';
+}
+/** Whether a value is a number (NaN and infinities included). */
+export function isNumber(value) {
+    return typeof value === 'number';
+}
+/** Whether a value is a boolean. */
+export function isBoolean(value) {
+    return typeof value === 'boolean';
+}
+/** Whether a value is a bigint. */
+export function isBigInt(value) {
+    return typeof value === 'bigint';
+}
+/** Whether a value is a symbol. */
+export function isSymbol(value) {
+    return typeof value === 'symbol';
+}
+/** Whether a value is callable. */
+export function isFunction(value) {
+    return typeof value === 'function';
+}
+/** Whether a value is a non-null object (arrays and class instances included). */
+export function isObject(value) {
+    return typeof value === 'object' && value !== null;
+}
+/** Whether a value has members to read by name: an object, or a function (which has its own). */
+export function hasMembers(value) {
+    return (typeof value === 'object' && value !== null) || typeof value === 'function';
+}
+//# sourceMappingURL=value-kinds.js.map

package/dist/core/protocol/wire/value-kinds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"value-kinds.js","sourceRoot":"","sources":["../../../../src/core/protocol/wire/value-kinds.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,mCAAmC;AACnC,MAAM,UAAU,QAAQ,CAAI,KAAQ;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AAClC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,QAAQ,CAAI,KAAQ;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AAClC,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,SAAS,CAAI,KAAQ;IACpC,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;AACnC,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,QAAQ,CAAI,KAAQ;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AAClC,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,QAAQ,CAAI,KAAQ;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AAClC,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,UAAU,CAAI,KAAQ;IACrC,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC;AACpC,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,QAAQ,CAAI,KAAQ;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACpD,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,UAAU,CAAI,KAAQ;IACrC,OAAO,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,UAAU,CAAC;AACrF,CAAC"}

package/dist/core/protocol/wire/verbs.d.ts

@@ -0,0 +1,94 @@
+import type { RpcError, RpcFailure, RpcInvoke, RpcRelease, RpcRequest, RpcStream } from "../../../schemas/contracts/protocol/wire/verbs.ts";
+export { ThrownCodeSchema, ThrownEnvelopeSchema, WireReasonSchema } from "../../../schemas/contracts/protocol/wire/verbs.ts";
+export type { RpcError, RpcErrorCode, RpcFailure, RpcInvoke, RpcLocalInvoke, RpcLocalRequest, RpcRelease, RpcRequest, RpcResponse, RpcStream, RpcVerb } from "../../../schemas/contracts/protocol/wire/verbs.ts";
+/**
+ * The RPC verb set — kind-agnostic, exactly three.
+ *
+ * The wire knows three verbs and nothing else. It never names a kind, a method,
+ * or a capability. `query` is `invoke(rootRef, 'query', [kindId])`;
+ * `execution.execute` is `invoke(execRef, 'execute', [opts])`;
+ * `session.resize` is `invoke(sessionRef, 'resize', [cols, rows])`. The protocol
+ * does not know any of those method names — they are opaque strings.
+ *
+ * If the words `resize`, `execute`, `session`, `spawn`, or `query` appeared here
+ * as protocol constants, the protocol would be wrong (doc 11 §L4). They do not.
+ */
+import { CapabilityError, type CaughtFailure } from '@vibesdotdev/kernel';
+/** The shape a wire reason has: a fixed kebab-case identifier. */
+export { RPC_ERROR_REASON } from '../../../schemas/contracts/protocol/wire/reason.ts';
+/** A wire reason: a bounded identifier of the shape {@link RPC_ERROR_REASON}. */
+/** Stable error codes this lane raises directly. Gate codes (AUTHZ/FRICTION) come from L5. */
+export declare const RPC_ERROR: {
+    /** The connection closed; an in-flight or new invoke cannot complete. */
+    readonly DISCONNECTED: "RPC_DISCONNECTED";
+    /** `targetRef` (or a `ref`) is not held by the owner table. */
+    readonly NO_TARGET: "RPC_NO_TARGET";
+    /** The named method does not exist on the target. */
+    readonly NO_METHOD: "RPC_NO_METHOD";
+    /**
+     * The named method (or stream) was not advertised for this ref (or the
+     * root's declared list): the owner refuses it without touching the target.
+     */
+    readonly NOT_ADVERTISED: "RPC_NOT_ADVERTISED";
+    /** The named stream channel is not exposed by the target. */
+    readonly NO_CHANNEL: "RPC_NO_CHANNEL";
+    /**
+     * A ref-valued argument (a callback) was passed over a transport that has no
+     * owner→consumer reverse leg, so the owner could never invoke it back. The
+     * invoke is REJECTED rather than decoded to a silent no-op — silent data loss
+     * is never an outcome (the symmetric-table contract fails loud, doc 11 §L4).
+     */
+    readonly NO_REVERSE_CHANNEL: "RPC_NO_REVERSE_CHANNEL";
+    /** A method threw; `details` carries the (redacted) cause. */
+    readonly INVOKE_FAILED: "RPC_INVOKE_FAILED";
+    /** A `stream` request named a channel id that is live or opening on this end; the live channel is kept. */
+    readonly CHANNEL_IN_USE: "RPC_CHANNEL_IN_USE";
+};
+/** Construct a typed RpcError. `details` is the owner's diagnostic payload; a transport redacts it before it is sent. */
+export declare function rpcError<D>(code: string, message: string, details?: D, reason?: string): RpcError;
+/** Build an {@link RpcFailure}: an Error carrying the wire envelope it surfaced. */
+export declare function rpcFailure<D>(code: string, message: string, details?: D, reason?: string): RpcFailure;
+/** Whether a caught failure is an {@link RpcFailure} this module built. */
+export declare function isRpcFailure(failure: CaughtFailure): failure is RpcFailure;
+/** Throw a wire error as an RpcFailure — the only way consumers raise remote errors. */
+export declare function throwRpcError<D>(code: string, message: string, details?: D, reason?: string): never;
+/**
+ * Raise a response's wire error on the consumer. A remote `CapabilityError`
+ * (a capability code with its reason) is raised as the same typed refusal:
+ * a `CapabilityError` with its code, reason and object details. Every other
+ * wire error is an {@link RpcFailure}.
+ */
+export declare function throwWireError(error: RpcError): never;
+/** The failure a response's wire error raises on the consumer (see {@link throwWireError}), not yet thrown. */
+export declare function wireError(error: RpcError): CapabilityError | RpcFailure;
+/** The envelope fields a thrown value may already carry; a reason that is not a fixed identifier is dropped. */
+/** The code a thrown value carries, when it has one. */
+/**
+ * Read a thrown value as the wire envelope it already carries, if any.
+ *
+ * Matches a consumer's RpcFailure AND a legacy bare `{ code, message }`
+ * rethrow (a nested hop's envelope on its way up). The owner dispatch uses
+ * this to passthrough code + message + details instead of re-wrapping the
+ * value into `"[object Object]"`.
+ */
+export declare function asRpcErrorValue(failure: CaughtFailure): RpcError | undefined;
+/**
+ * Convert a caught failure into the error half of a response envelope — the
+ * single choke point every rewrap site (owner dispatch, reverse-leg callback
+ * dispatch, transport last-resort responders) funnels through.
+ *
+ * A value already carrying an envelope (a consumer's RpcFailure, a nested
+ * hop's rethrow) passes through untouched so a forwarding hop never destroys
+ * the root cause into `"[object Object]"`. A coded throw (a gate veto, a
+ * system error) keeps its code; anything else is `RPC_INVOKE_FAILED`.
+ */
+export declare function toRpcError(failure: CaughtFailure): RpcError;
+/** The string `code` a caught failure carries (a Node errno such as `ENOENT`, say), when it has one. */
+export declare function thrownCode(failure: CaughtFailure): string | undefined;
+/** A caught failure as text: an Error's message, or the description of what was thrown. */
+export declare function failureMessage(failure: CaughtFailure): string;
+/** Type guards for the three request verbs. */
+export declare const isInvoke: (r: RpcRequest) => r is RpcInvoke;
+export declare const isRelease: (r: RpcRequest) => r is RpcRelease;
+export declare const isStream: (r: RpcRequest) => r is RpcStream;
+//# sourceMappingURL=verbs.d.ts.map

package/dist/core/protocol/wire/verbs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verbs.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol/wire/verbs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,mDAAmD,CAAC;AAE5I,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AAC7H,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AACjN;;;;;;;;;;;GAWG;AAEH,OAAO,EACP,eAAe,EAGf,KAAK,aAAa,EACjB,MAAM,qBAAqB,CAAC;AAG7B,kEAAkE;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oDAAoD,CAAC;AAEtF,iFAAiF;AAEjF,8FAA8F;AAC9F,eAAO,MAAM,SAAS;IACrB,yEAAyE;;IAEzE,+DAA+D;;IAE/D,qDAAqD;;IAErD;;;OAGG;;IAEH,6DAA6D;;IAE7D;;;;;OAKG;;IAEH,8DAA8D;;IAE9D,2GAA2G;;CAElG,CAAC;AAEX,yHAAyH;AACzH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,QAAQ,CAEjG;AAoBD,oFAAoF;AACpF,wBAAgB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,CAOrG;AAED,2EAA2E;AAC3E,wBAAgB,YAAY,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,IAAI,UAAU,CAE1E;AAED,wFAAwF;AACxF,wBAAgB,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,CAEnG;AAoBD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,QAAQ,GAAG,KAAK,CAErD;AAED,+GAA+G;AAC/G,wBAAgB,SAAS,CAAC,KAAK,EAAE,QAAQ,GAAG,eAAe,GAAG,UAAU,CAQvE;AAED,gHAAgH;AAEhH,wDAAwD;AAExD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,aAAa,GAAG,QAAQ,GAAG,SAAS,CAS5E;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,QAAQ,CAM3D;AAED,wGAAwG;AACxG,wBAAgB,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,GAAG,SAAS,CAErE;AAED,2FAA2F;AAC3F,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAE7D;AAED,+CAA+C;AAC/C,eAAO,MAAM,QAAQ,GAAI,GAAG,UAAU,KAAG,CAAC,IAAI,SAAgC,CAAC;AAC/E,eAAO,MAAM,SAAS,GAAI,GAAG,UAAU,KAAG,CAAC,IAAI,UAAkC,CAAC;AAClF,eAAO,MAAM,QAAQ,GAAI,GAAG,UAAU,KAAG,CAAC,IAAI,SAAgC,CAAC"}