@vibesdotdev/kernel-rpc 0.0.0-stage → 1.0.0-rc.3

package/dist/schemas/contracts/transports/http/descriptors/http.rpc.descriptor.d.ts

@@ -0,0 +1,12 @@
+import * as z from 'zod/v4';
+export declare const HttpDescriptorInput: z.ZodObject<{
+    origin: z.ZodString;
+    id: z.ZodString;
+    auth: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        source: z.ZodLiteral<"secret">;
+        key: z.ZodString;
+        store: z.ZodOptional<z.ZodString>;
+        operation: z.ZodOptional<z.ZodCustom<object, object>>;
+    }, z.core.$strict>], "source">>;
+}, z.core.$strip>;
+//# sourceMappingURL=http.rpc.descriptor.d.ts.map

package/dist/schemas/contracts/transports/http/descriptors/http.rpc.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.rpc.descriptor.d.ts","sourceRoot":"","sources":["../../../../../../src/schemas/contracts/transports/http/descriptors/http.rpc.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,eAAO,MAAM,mBAAmB;;;;;;;;;iBAA6F,CAAC"}

package/dist/schemas/contracts/transports/http/descriptors/http.rpc.descriptor.js

@@ -0,0 +1,5 @@
+import * as z from 'zod/v4';
+import { CredentialReferenceSchema } from "../../../../../core/kinds/rpc.kind.js";
+import { TextInput } from "../../../../../core/protocol/references/caller-input.js";
+export const HttpDescriptorInput = z.object({ origin: TextInput, id: TextInput, auth: CredentialReferenceSchema.optional() });
+//# sourceMappingURL=http.rpc.descriptor.js.map

package/dist/schemas/contracts/transports/http/descriptors/http.rpc.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.rpc.descriptor.js","sourceRoot":"","sources":["../../../../../../src/schemas/contracts/transports/http/descriptors/http.rpc.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAC;AAClF,OAAO,EAAE,SAAS,EAAE,MAAM,yDAAyD,CAAC;AAEpF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,yBAAyB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC"}

package/dist/schemas/contracts/transports/http/http-connection.d.ts

@@ -0,0 +1,27 @@
+import { type RpcLifecycle } from '@vibesdotdev/kernel-rpc';
+import type { RuntimeLifecycle } from '@vibesdotdev/kernel';
+/** HTTP holds a remote session through handshake and finalization, not just a bounded request. */
+export type HttpLifecycle = RpcLifecycle & Pick<RuntimeLifecycle, 'own'>;
+export type HttpFetch = (input: URL | string, init?: RequestInit) => Promise<Response>;
+export interface HttpConnectionInit {
+    /** Absolute origin of the listening runtime, e.g. `https://host.fleet.example`. */
+    readonly origin: string;
+    /** The handshake's connection id (correlates the SSE legs with this connection). */
+    readonly connectionId: string;
+    /** The remote root ref id (advertised by the listen side at handshake). */
+    readonly rootRef: string;
+    /** Resolved bearer token (from the descriptor's `auth`), sent on every leg. */
+    readonly token?: string;
+    /** Injected fetch (tests pass the server's local fetch; defaults to global). */
+    readonly fetchImpl?: HttpFetch;
+    /** The owning runtime's lifecycle: it bounds the disconnect leg. */
+    readonly lifecycle: HttpLifecycle;
+    /** Both HTTP peers advertised wire.dates at the handshake. */
+    readonly wireDates?: boolean;
+    /** Both HTTP peers admitted lifecycle-owned callback delivery. */
+    readonly reverseCalls?: boolean;
+}
+export interface LegHeaders {
+    readonly [name: string]: string;
+}
+//# sourceMappingURL=http-connection.d.ts.map

package/dist/schemas/contracts/transports/http/http-connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-connection.d.ts","sourceRoot":"","sources":["../../../../../src/schemas/contracts/transports/http/http-connection.ts"],"names":[],"mappings":"AAAA,OAAO,EACP,KAAK,YAAY,EAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,kGAAkG;AAClG,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;AAEzE,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,GAAG,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvF,MAAM,WAAW,kBAAkB;IAClC,mFAAmF;IACnF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,oFAAoF;IACpF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,gFAAgF;IAChF,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,kEAAkE;IAClE,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,UAAU;IAC1B,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CAChC"}

package/dist/schemas/contracts/transports/http/http-connection.js

@@ -0,0 +1,2 @@
+import {} from '@vibesdotdev/kernel-rpc';
+//# sourceMappingURL=http-connection.js.map

package/dist/schemas/contracts/transports/http/http-connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-connection.js","sourceRoot":"","sources":["../../../../../src/schemas/contracts/transports/http/http-connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,MAAM,yBAAyB,CAAC"}

package/dist/schemas/contracts/transports/http/http-listen-session.d.ts

@@ -0,0 +1,47 @@
+import type { StreamBinding } from '@vibesdotdev/kernel-rpc';
+import { type InvokePipeline } from '@vibesdotdev/kernel';
+import { type ChannelBinder, type KindOf, type WireClassifier } from '@vibesdotdev/kernel-rpc';
+import type { RpcLifecycle } from '@vibesdotdev/kernel-rpc';
+export interface HttpListenTarget {
+    /** The root object — its methods are the remote runtime query surface. */
+    readonly root: object;
+    /**
+     * The root's methods when it is not the runtime root (`RUNTIME_ROOT_METHODS`).
+     * The owner admits only these on the root; anything else is refused.
+     */
+    readonly rootMethods?: readonly string[];
+    /** L1 invoke pipeline (authz → friction) every arriving invoke runs through. */
+    readonly pipeline: InvokePipeline;
+    /** Classify an owner return value: which become refs (session/handle/function). */
+    readonly classifyResult: WireClassifier;
+    /** Map an opaque channel name on a resolved object to a byte binding. */
+    readonly bindChannel: ChannelBinder;
+    /** Report the kind id for a target (gate context). Defaults to 'runtime/rpc'. */
+    readonly kindOf?: KindOf;
+    /** When true, error stacks cross the wire (operator opt-in). Default false. */
+    readonly debug?: boolean;
+    /** Explicitly admit function callbacks on this lifecycle-owned connection. */
+    readonly callbacks?: {
+        lifecycle: RpcLifecycle;
+        deadlineMs?: number;
+        maxRefs?: number;
+    };
+    /** The host binds identity and native connection cancellation around canonical dispatch. */
+    readonly runInvocation?: <T>(work: () => T, connection: {
+        id: string;
+        signal: AbortSignal;
+    }) => T;
+}
+export /** The owner side of one live stream channel for an http connection. */ interface OwnerChannel {
+    readonly binding: StreamBinding;
+    unsub: () => void;
+    /** Owner→consumer frames buffered until the SSE GET leg attaches its writer. */
+    readonly pending: Uint8Array[];
+    /** The live SSE writer, set when the SSE GET attaches. */
+    write: ((frame: Uint8Array) => void) | null;
+    /** The SSE leg's end writer (the CLOSE frame), set with `write`. */
+    end: (() => void) | null;
+    /** The owner ended the channel before the SSE leg attached. */
+    endedEarly: boolean;
+}
+//# sourceMappingURL=http-listen-session.d.ts.map

package/dist/schemas/contracts/transports/http/http-listen-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-listen-session.d.ts","sourceRoot":"","sources":["../../../../../src/schemas/contracts/transports/http/http-listen-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EACP,KAAK,aAAa,EAClB,KAAK,MAAM,EACX,KAAK,cAAc,EAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE5D,MAAM,WAAW,gBAAgB;IAChC,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,mFAAmF;IACnF,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,yEAAyE;IACzE,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC;IACpC,iFAAiF;IACjF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,SAAS,EAAE,YAAY,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF,4FAA4F;IAC5F,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,CAAA;KAAE,KAAK,CAAC,CAAC;CAClG;AAED,MAAM,CAAC,wEAAwE,WACrE,YAAY;IACrB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;IAC/B,0DAA0D;IAC1D,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5C,oEAAoE;IACpE,GAAG,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC;IACzB,+DAA+D;IAC/D,UAAU,EAAE,OAAO,CAAC;CACpB"}

package/dist/schemas/contracts/transports/http/http-listen-session.js

@@ -0,0 +1,3 @@
+import {} from '@vibesdotdev/kernel';
+import {} from '@vibesdotdev/kernel-rpc';
+//# sourceMappingURL=http-listen-session.js.map

package/dist/schemas/contracts/transports/http/http-listen-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-listen-session.js","sourceRoot":"","sources":["../../../../../src/schemas/contracts/transports/http/http-listen-session.ts"],"names":[],"mappings":"AACA,OAAO,EAAuB,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAIN,MAAM,yBAAyB,CAAC"}

package/dist/schemas/contracts/transports/http/http-listen.d.ts

@@ -0,0 +1,50 @@
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+import { type RuntimeRpcConfigRuntime } from "../../../../daemon/hosting/config/load.ts";
+export interface HttpListenBindOptions {
+    /**
+     * The runtime whose HTTP listener binds, whose config names the host, whose diagnostics port receives route
+     * failures, and whose lifecycle owns the listener: its disposal stops it.
+     */
+    readonly runtime: RuntimeRpcConfigRuntime & Pick<RuntimeRef, 'diagnostics' | 'lifecycle'>;
+    readonly host?: string;
+}
+export declare const ListenHttpInput: z.ZodObject<{
+    port: z.ZodNumber;
+    target: z.ZodObject<{
+        debug: z.ZodOptional<z.ZodBoolean>;
+        wireDates: z.ZodOptional<z.ZodBoolean>;
+        callbacks: z.ZodOptional<z.ZodObject<{
+            lifecycle: z.ZodCustom<import("../../protocol/lifecycle/connector.ts").RpcLifecycle, import("../../protocol/lifecycle/connector.ts").RpcLifecycle>;
+            deadlineMs: z.ZodOptional<z.ZodNumber>;
+            maxRefs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        runInvocation: z.ZodOptional<z.ZodCustom<(<T>(work: () => T, connection: {
+            id: string;
+            signal: AbortSignal;
+        }) => T) | undefined, (<T>(work: () => T, connection: {
+            id: string;
+            signal: AbortSignal;
+        }) => T) | undefined>>;
+        tokenRegistry: z.ZodOptional<z.ZodCustom<import("../../../../transports/http/index.ts").TokenRegistry, import("../../../../transports/http/index.ts").TokenRegistry>>;
+        corsPolicy: z.ZodOptional<z.ZodCustom<import("../../../../transports/http/index.ts").CorsPolicy, import("../../../../transports/http/index.ts").CorsPolicy>>;
+        localAttestation: z.ZodOptional<z.ZodCustom<import("../../protocol/local-attestation.ts").LocalAttestationVerifier, import("../../protocol/local-attestation.ts").LocalAttestationVerifier>>;
+        reportFailure: z.ZodOptional<z.ZodCustom<(failure: import("@vibesdotdev/kernel").CapabilityError) => void, (failure: import("@vibesdotdev/kernel").CapabilityError) => void>>;
+        root: z.ZodCustom<object, object>;
+        rootMethods: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+        pipeline: z.ZodCustom<import("@vibesdotdev/kernel").InvokePipeline, import("@vibesdotdev/kernel").InvokePipeline>;
+        classifyResult: z.ZodCustom<import("../../protocol/wire/wire-value.ts").WireClassifier, import("../../protocol/wire/wire-value.ts").WireClassifier>;
+        bindChannel: z.ZodCustom<import("../../protocol/references/dispatch.ts").ChannelBinder, import("../../protocol/references/dispatch.ts").ChannelBinder>;
+        kindOf: z.ZodOptional<z.ZodCustom<import("../../protocol/references/dispatch.ts").KindOf, import("../../protocol/references/dispatch.ts").KindOf>>;
+        forward: z.ZodOptional<z.ZodObject<{
+            connect: z.ZodCustom<(peer: import("@vibesdotdev/kernel").RemotePeerInfo) => Promise<import("../../core/kinds/rpc.kind.ts").RpcConnection>, (peer: import("@vibesdotdev/kernel").RemotePeerInfo) => Promise<import("../../core/kinds/rpc.kind.ts").RpcConnection>>;
+            lifecycle: z.ZodCustom<import("../../protocol/lifecycle/connector.ts").RpcLifecycle, import("../../protocol/lifecycle/connector.ts").RpcLifecycle>;
+            localMethods: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    options: z.ZodObject<{
+        runtime: z.ZodCustom<RuntimeRpcConfigRuntime & Pick<RuntimeRef, "lifecycle" | "diagnostics">, RuntimeRpcConfigRuntime & Pick<RuntimeRef, "lifecycle" | "diagnostics">>;
+        host: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+//# sourceMappingURL=http-listen.d.ts.map

package/dist/schemas/contracts/transports/http/http-listen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-listen.d.ts","sourceRoot":"","sources":["../../../../../src/schemas/contracts/transports/http/http-listen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,KAAK,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AAGzF,MAAM,WAAW,qBAAqB;IACrC;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,GAAG,WAAW,CAAC,CAAC;IAC1F,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAO1B,CAAC"}

package/dist/schemas/contracts/transports/http/http-listen.js

@@ -0,0 +1,14 @@
+import {} from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+import { memberInput, PortInput, TextInput } from "../../../../core/protocol/references/caller-input.js";
+import {} from "../../../../daemon/hosting/config/load.js";
+import { HttpListenOptionsInput } from "../../../../transports/http/listener/http-transport.impl.js";
+export const ListenHttpInput = z.object({
+    port: PortInput,
+    target: HttpListenOptionsInput,
+    options: z.object({
+        runtime: memberInput('hasKind', 'query', 'registerPlugin'),
+        host: TextInput.optional()
+    })
+});
+//# sourceMappingURL=http-listen.js.map

package/dist/schemas/contracts/transports/http/http-listen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-listen.js","sourceRoot":"","sources":["../../../../../src/schemas/contracts/transports/http/http-listen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,sDAAsD,CAAC;AACzG,OAAO,EAAgC,MAAM,2CAA2C,CAAC;AACzF,OAAO,EAAE,sBAAsB,EAAE,MAAM,6DAA6D,CAAC;AAWrG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,SAAS;IACf,MAAM,EAAE,sBAAsB;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,WAAW,CAAmC,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC;QAC5F,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE;KAC1B,CAAC;CACF,CAAC,CAAC"}

package/dist/schemas/contracts/transports/http/http-transport.impl.d.ts

@@ -0,0 +1,130 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+import type { HttpLifecycle } from './http-connection.ts';
+import { type LocalAttestationPresentation, type LocalAttestationVerifier } from "../../../../core/protocol/transport/local-attestation.ts";
+import type { CorsPolicy } from "../../../../transports/http/auth/cors.ts";
+import { TokenRegistry } from "../../../../transports/http/auth/token-registry.ts";
+import { type HttpFetch } from "../../../../transports/http/consumer/http-connection.ts";
+import { type HttpListenTarget } from "../../../../transports/http/listener/http-listen-session.ts";
+import type { RpcHttpHandler } from "../../../../transports/http/listener/http-transport.impl.ts";
+export interface ConnectHttpOptions {
+    /** The owning runtime's lifecycle: it bounds and cancels the handshake. */
+    readonly lifecycle: HttpLifecycle;
+    /** Resolved bearer token sent as `Authorization: Bearer …`. */
+    readonly token?: string;
+    /** Injected fetch (tests pass the server's local fetch; defaults to global). */
+    readonly fetchImpl?: HttpFetch;
+    /** Advertise JSON Date preservation; false keeps legacy ISO-string semantics. */
+    readonly wireDates?: boolean;
+    /** Negotiate the function-reference reverse leg when the owner supports it. */
+    readonly callbacks?: boolean;
+    /** Upper bound for the handshake (default 5000). */
+    readonly timeoutMs?: number;
+    /** The caller's cancellation. */
+    readonly signal?: AbortSignal;
+    /**
+     * The local attestation and declared launch identity to present (RC08): the
+     * secret becomes this connection's bearer. Exclusive with `token`.
+     */
+    readonly attestation?: LocalAttestationPresentation;
+}
+export interface HttpListenOptions extends HttpListenTarget {
+    /** Advertise JSON Date preservation to capable clients; false serves the legacy ABI. */
+    readonly wireDates?: boolean;
+    /**
+     * The connection-auth registry. The listener checks the `Authorization: Bearer`
+     * header against it BEFORE a request reaches a session. When omitted, the
+     * listener is OPEN (no connection auth) — only valid for a trusted/loopback
+     * deployment; a remote bind MUST supply a registry. Per-invoke authz/friction
+     * still run regardless (they are L5's, inside the pipeline).
+     */
+    readonly tokenRegistry?: TokenRegistry;
+    /**
+     * Optional browser-origin policy. Non-browser callers without an Origin header
+     * remain valid; browser preflights and requests must match this policy.
+     */
+    readonly corsPolicy?: CorsPolicy;
+    /**
+     * Verifies a same-user client's local attestation, presented as its bearer
+     * (RC08). A verified bearer is an accepted connection credential, and its
+     * connection is admitted as the launch identity the handshake declares.
+     */
+    readonly localAttestation?: LocalAttestationVerifier;
+    /**
+     * Where a failure inside a route is reported, once (`INTERNAL` `rpc-route-failed`, the cause carried). The
+     * request that hit it is answered 500 with that code and reason only, never the cause's text or the host's error
+     * page. {@link listenHttp} reports to the runtime's diagnostics port; a handler mounted without a sink keeps the
+     * failure for {@link RpcHttpHandler.closeAll}.
+     */
+    readonly reportFailure?: (failure: CapabilityError) => void;
+}
+export interface HttpListener {
+    readonly origin: string;
+    readonly port: number;
+    readonly handler: RpcHttpHandler;
+    /** Stop listening; rejects with the typed binding close failures of the connections it tore down. */
+    stop(): Promise<void>;
+}
+export declare const ConnectHttpOptionsFields: {
+    token: z.ZodOptional<z.ZodString>;
+    fetchImpl: z.ZodOptional<z.ZodCustom<HttpFetch, HttpFetch>>;
+    wireDates: z.ZodOptional<z.ZodBoolean>;
+    callbacks: z.ZodOptional<z.ZodBoolean>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+    signal: z.ZodOptional<z.ZodCustom<AbortSignal, AbortSignal>>;
+    attestation: z.ZodOptional<z.ZodCustom<LocalAttestationPresentation, LocalAttestationPresentation>>;
+};
+export declare const ConnectHttpInput: z.ZodObject<{
+    origin: z.ZodString;
+    options: z.ZodObject<{
+        lifecycle: z.ZodCustom<HttpLifecycle, HttpLifecycle>;
+        token: z.ZodOptional<z.ZodString>;
+        fetchImpl: z.ZodOptional<z.ZodCustom<HttpFetch, HttpFetch>>;
+        wireDates: z.ZodOptional<z.ZodBoolean>;
+        callbacks: z.ZodOptional<z.ZodBoolean>;
+        timeoutMs: z.ZodOptional<z.ZodNumber>;
+        signal: z.ZodOptional<z.ZodCustom<AbortSignal, AbortSignal>>;
+        attestation: z.ZodOptional<z.ZodCustom<LocalAttestationPresentation, LocalAttestationPresentation>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const ConnectHttpMountOptionsFields: {
+    token: z.ZodOptional<z.ZodString>;
+    fetchImpl: z.ZodOptional<z.ZodCustom<HttpFetch, HttpFetch>>;
+    wireDates: z.ZodOptional<z.ZodBoolean>;
+    callbacks: z.ZodOptional<z.ZodBoolean>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+    signal: z.ZodOptional<z.ZodCustom<AbortSignal, AbortSignal>>;
+    attestation: z.ZodOptional<z.ZodCustom<LocalAttestationPresentation, LocalAttestationPresentation>>;
+};
+export declare const HttpListenOptionsInput: z.ZodObject<{
+    debug: z.ZodOptional<z.ZodBoolean>;
+    wireDates: z.ZodOptional<z.ZodBoolean>;
+    callbacks: z.ZodOptional<z.ZodObject<{
+        lifecycle: z.ZodCustom<import("../../protocol/lifecycle/connector.ts").RpcLifecycle, import("../../protocol/lifecycle/connector.ts").RpcLifecycle>;
+        deadlineMs: z.ZodOptional<z.ZodNumber>;
+        maxRefs: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    runInvocation: z.ZodOptional<z.ZodCustom<(<T>(work: () => T, connection: {
+        id: string;
+        signal: AbortSignal;
+    }) => T) | undefined, (<T>(work: () => T, connection: {
+        id: string;
+        signal: AbortSignal;
+    }) => T) | undefined>>;
+    tokenRegistry: z.ZodOptional<z.ZodCustom<TokenRegistry, TokenRegistry>>;
+    corsPolicy: z.ZodOptional<z.ZodCustom<CorsPolicy, CorsPolicy>>;
+    localAttestation: z.ZodOptional<z.ZodCustom<LocalAttestationVerifier, LocalAttestationVerifier>>;
+    reportFailure: z.ZodOptional<z.ZodCustom<(failure: CapabilityError) => void, (failure: CapabilityError) => void>>;
+    root: z.ZodCustom<object, object>;
+    rootMethods: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+    pipeline: z.ZodCustom<import("@vibesdotdev/kernel").InvokePipeline, import("@vibesdotdev/kernel").InvokePipeline>;
+    classifyResult: z.ZodCustom<import("../../protocol/wire/wire-value.ts").WireClassifier, import("../../protocol/wire/wire-value.ts").WireClassifier>;
+    bindChannel: z.ZodCustom<import("../../protocol/references/dispatch.ts").ChannelBinder, import("../../protocol/references/dispatch.ts").ChannelBinder>;
+    kindOf: z.ZodOptional<z.ZodCustom<import("../../protocol/references/dispatch.ts").KindOf, import("../../protocol/references/dispatch.ts").KindOf>>;
+    forward: z.ZodOptional<z.ZodObject<{
+        connect: z.ZodCustom<(peer: import("@vibesdotdev/kernel").RemotePeerInfo) => Promise<import("../../core/kinds/rpc.kind.ts").RpcConnection>, (peer: import("@vibesdotdev/kernel").RemotePeerInfo) => Promise<import("../../core/kinds/rpc.kind.ts").RpcConnection>>;
+        lifecycle: z.ZodCustom<import("../../protocol/lifecycle/connector.ts").RpcLifecycle, import("../../protocol/lifecycle/connector.ts").RpcLifecycle>;
+        localMethods: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+//# sourceMappingURL=http-transport.impl.d.ts.map

package/dist/schemas/contracts/transports/http/http-transport.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-transport.impl.d.ts","sourceRoot":"","sources":["../../../../../src/schemas/contracts/transports/http/http-transport.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EACP,KAAK,4BAA4B,EACjC,KAAK,wBAAwB,EAC5B,MAAM,0DAA0D,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0CAA0C,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,oDAAoD,CAAC;AACnF,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6DAA6D,CAAC;AAElG,MAAM,WAAW,kBAAkB;IAClC,2EAA2E;IAC3E,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,gFAAgF;IAChF,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,oDAAoD;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,iCAAiC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,4BAA4B,CAAC;CACpD;AAED,MAAM,WAAW,iBAAkB,SAAQ,gBAAgB;IAC1D,wFAAwF;IACxF,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;IACrD;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC;CAC5D;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,qGAAqG;IACrG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAED,eAAO,MAAM,wBAAwB;;;;;;;;CAQpC,CAAC;AAEF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;iBAG3B,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;;;CAA2B,CAAC;AAEtE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;uDASK,eAAe,KAAK,IAAI,YAAxB,eAAe,KAAK,IAAI;;;;;;;;;;;;iBAC9D,CAAC"}

package/dist/schemas/contracts/transports/http/http-transport.impl.js

@@ -0,0 +1,33 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+import { AbortSignalInput, BearerTokenInput, DurationInput, LifecycleInput, ListenTargetFields, TextInput, functionInput, memberInput, objectInput } from "../../../../core/protocol/references/caller-input.js";
+import {} from "../../../../core/protocol/transport/local-attestation.js";
+import { TokenRegistry } from "../../../../transports/http/auth/token-registry.js";
+import {} from "../../../../transports/http/consumer/http-connection.js";
+import {} from "../../../../transports/http/listener/http-listen-session.js";
+export const ConnectHttpOptionsFields = {
+    token: BearerTokenInput.optional(),
+    fetchImpl: functionInput().optional(),
+    wireDates: z.boolean().optional(),
+    callbacks: z.boolean().optional(),
+    timeoutMs: DurationInput.optional(),
+    signal: AbortSignalInput.optional(),
+    attestation: objectInput().optional()
+};
+export const ConnectHttpInput = z.object({
+    origin: TextInput,
+    options: z.object({ ...ConnectHttpOptionsFields, lifecycle: memberInput('wait', 'delay', 'own') })
+});
+export const ConnectHttpMountOptionsFields = ConnectHttpOptionsFields;
+export const HttpListenOptionsInput = z.object({
+    ...ListenTargetFields,
+    debug: z.boolean().optional(),
+    wireDates: z.boolean().optional(),
+    callbacks: z.object({ lifecycle: LifecycleInput, deadlineMs: DurationInput.optional(), maxRefs: z.number().int().positive().max(1024).optional() }).optional(),
+    runInvocation: functionInput().optional(),
+    tokenRegistry: memberInput('accepts').optional(),
+    corsPolicy: memberInput('resolve').optional(),
+    localAttestation: memberInput('verify').optional(),
+    reportFailure: functionInput().optional()
+});
+//# sourceMappingURL=http-transport.impl.js.map

package/dist/schemas/contracts/transports/http/http-transport.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-transport.impl.js","sourceRoot":"","sources":["../../../../../src/schemas/contracts/transports/http/http-transport.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,aAAa,EAAE,cAAc,EAAE,kBAAkB,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,sDAAsD,CAAC;AAEjN,OAAO,EAGN,MAAM,0DAA0D,CAAC;AAElE,OAAO,EAAE,aAAa,EAAE,MAAM,oDAAoD,CAAC;AACnF,OAAO,EAAkB,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAyB,MAAM,6DAA6D,CAAC;AAgEpG,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACvC,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,aAAa,EAAa,CAAC,QAAQ,EAAE;IAChD,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,aAAa,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACnC,WAAW,EAAE,WAAW,EAAgC,CAAC,QAAQ,EAAE;CACnE,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,wBAAwB,EAAE,SAAS,EAAE,WAAW,CAAgB,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;CACjH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,wBAAwB,CAAC;AAEtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,GAAG,kBAAkB;IACrB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9J,aAAa,EAAE,aAAa,EAAqC,CAAC,QAAQ,EAAE;IAC5E,aAAa,EAAE,WAAW,CAAgB,SAAS,CAAC,CAAC,QAAQ,EAAE;IAC/D,UAAU,EAAE,WAAW,CAAa,SAAS,CAAC,CAAC,QAAQ,EAAE;IACzD,gBAAgB,EAAE,WAAW,CAA2B,QAAQ,CAAC,CAAC,QAAQ,EAAE;IAC5E,aAAa,EAAE,aAAa,EAAsC,CAAC,QAAQ,EAAE;CAC7E,CAAC,CAAC"}

package/dist/schemas/contracts/transports/http/projection-mount.d.ts

@@ -0,0 +1,43 @@
+import { type FederatedRuntimeRef, type RuntimeProjectionSnapshot, type RuntimeRendererIdentity } from '@vibesdotdev/kernel/federation';
+import * as z from 'zod/v4';
+import type { RpcConnection } from "../../../../core/kinds/rpc.kind.ts";
+import { type ConnectHttpOptions } from "../../../../transports/http/listener/http-transport.impl.ts";
+export interface HttpRuntimeProjectionMountOptions extends Omit<ConnectHttpOptions, 'lifecycle'> {
+    readonly mountGeneration: number;
+    readonly connectionGeneration: number;
+    readonly renderer: RuntimeRendererIdentity;
+}
+export interface HttpRuntimeMount extends Disposable {
+    readonly ref: FederatedRuntimeRef;
+    readonly connection: RpcConnection;
+    readonly projection: RuntimeProjectionSnapshot;
+    /**
+     * Unmount and close the connection, joining that close's outcome: rejects
+     * with the connection's typed close failure. Repeated calls (and a dispose
+     * or the connection ending first) share the one outcome.
+     */
+    close(): Promise<void>;
+    /** Starts {@link close}; its outcome is kept and reported by `close()`. */
+    readonly [Symbol.dispose]: () => void;
+}
+export declare const MountHttpProjectionInput: z.ZodObject<{
+    origin: z.ZodString;
+    options: z.ZodObject<{
+        mountGeneration: z.ZodNumber;
+        connectionGeneration: z.ZodNumber;
+        renderer: z.ZodObject<{
+            windowId: z.ZodString;
+            frameId: z.ZodString;
+            generation: z.ZodNumber;
+            origin: z.ZodString;
+        }, z.core.$strip>;
+        token: z.ZodOptional<z.ZodString>;
+        fetchImpl: z.ZodOptional<z.ZodCustom<import("./http-connection.ts").HttpFetch, import("./http-connection.ts").HttpFetch>>;
+        wireDates: z.ZodOptional<z.ZodBoolean>;
+        callbacks: z.ZodOptional<z.ZodBoolean>;
+        timeoutMs: z.ZodOptional<z.ZodNumber>;
+        signal: z.ZodOptional<z.ZodCustom<AbortSignal, AbortSignal>>;
+        attestation: z.ZodOptional<z.ZodCustom<import("../../protocol/local-attestation.ts").LocalAttestationPresentation, import("../../protocol/local-attestation.ts").LocalAttestationPresentation>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+//# sourceMappingURL=projection-mount.d.ts.map

package/dist/schemas/contracts/transports/http/projection-mount.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection-mount.d.ts","sourceRoot":"","sources":["../../../../../src/schemas/contracts/transports/http/projection-mount.ts"],"names":[],"mappings":"AAAA,OAAO,EAEP,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AAExE,OAAO,EAAiC,KAAK,kBAAkB,EAAE,MAAM,6DAA6D,CAAC;AAErI,MAAM,WAAW,iCAAkC,SAAQ,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC;IAC/F,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;CAC3C;AAED,MAAM,WAAW,gBAAiB,SAAQ,UAAU;IACnD,QAAQ,CAAC,GAAG,EAAE,mBAAmB,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C;;;;OAIG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,2EAA2E;IAC3E,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACtC;AAED,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;iBAQnC,CAAC"}

package/dist/schemas/contracts/transports/http/projection-mount.js

@@ -0,0 +1,14 @@
+import { RuntimeRendererIdentitySchema } from '@vibesdotdev/kernel/federation';
+import * as z from 'zod/v4';
+import { TextInput } from "../../../../core/protocol/references/caller-input.js";
+import { ConnectHttpMountOptionsFields } from "../../../../transports/http/listener/http-transport.impl.js";
+export const MountHttpProjectionInput = z.object({
+    origin: TextInput,
+    options: z.object({
+        ...ConnectHttpMountOptionsFields,
+        mountGeneration: z.number().int().positive(),
+        connectionGeneration: z.number().int().positive(),
+        renderer: RuntimeRendererIdentitySchema
+    })
+});
+//# sourceMappingURL=projection-mount.js.map

package/dist/schemas/contracts/transports/http/projection-mount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection-mount.js","sourceRoot":"","sources":["../../../../../src/schemas/contracts/transports/http/projection-mount.ts"],"names":[],"mappings":"AAAA,OAAO,EACP,6BAA6B,EAI5B,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,MAAM,sDAAsD,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAA2B,MAAM,6DAA6D,CAAC;AAsBrI,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,GAAG,6BAA6B;QAChC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC5C,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACjD,QAAQ,EAAE,6BAA6B;KACvC,CAAC;CACF,CAAC,CAAC"}

package/dist/schemas/contracts/transports/http/runtime-rpc-http.plugin.d.ts

@@ -0,0 +1,79 @@
+import { type RuntimeRpcDescriptor } from '@vibesdotdev/kernel-rpc';
+import * as z from 'zod/v4';
+export interface RuntimeRpcHttpPluginOptions {
+    /** Concrete http descriptors to register (e.g. a fleet host origin + auth ref). */
+    descriptors?: RuntimeRpcDescriptor[];
+}
+export declare const PluginOptionsInput: z.ZodOptional<z.ZodObject<{
+    descriptors: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        priority: z.ZodOptional<z.ZodNumber>;
+        capabilityId: z.ZodOptional<z.ZodString>;
+        requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        config: z.ZodOptional<z.ZodUnknown>;
+        retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            maxAgeDays: z.ZodOptional<z.ZodNumber>;
+            maxEntries: z.ZodOptional<z.ZodNumber>;
+            maxBytes: z.ZodOptional<z.ZodNumber>;
+            cascadeFrom: z.ZodOptional<z.ZodString>;
+            ageField: z.ZodOptional<z.ZodString>;
+            reason: z.ZodString;
+            enforcedBy: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>]>>;
+        kind: z.ZodLiteral<"runtime/rpc">;
+        transport: z.ZodEnum<{
+            cef: "cef";
+            unix: "unix";
+            tcp: "tcp";
+            http: "http";
+            relay: "relay";
+            messageport: "messageport";
+            tauri: "tauri";
+        }>;
+        target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            transport: z.ZodLiteral<"unix">;
+            socketPath: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            transport: z.ZodLiteral<"tcp">;
+            host: z.ZodString;
+            port: z.ZodNumber;
+        }, z.core.$strip>, z.ZodObject<{
+            transport: z.ZodLiteral<"http">;
+            origin: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            transport: z.ZodLiteral<"cef">;
+            channel: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            transport: z.ZodLiteral<"messageport">;
+            channel: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            transport: z.ZodLiteral<"relay">;
+            brokerOrigin: z.ZodString;
+            hostId: z.ZodString;
+            actingOrgId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            transport: z.ZodLiteral<"tauri">;
+            channel: z.ZodString;
+        }, z.core.$strip>], "transport">;
+        auth: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            source: z.ZodLiteral<"secret">;
+            key: z.ZodString;
+            store: z.ZodOptional<z.ZodString>;
+            operation: z.ZodOptional<z.ZodCustom<object, object>>;
+        }, z.core.$strict>], "source">>;
+        remoteScope: z.ZodOptional<z.ZodObject<{
+            hardware: z.ZodOptional<z.ZodEnum<{
+                consumer: "consumer";
+                cloud: "cloud";
+            }>>;
+            substrate: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>>;
+//# sourceMappingURL=runtime-rpc-http.plugin.d.ts.map

package/dist/schemas/contracts/transports/http/runtime-rpc-http.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-rpc-http.plugin.d.ts","sourceRoot":"","sources":["../../../../../src/schemas/contracts/transports/http/runtime-rpc-http.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,MAAM,WAAW,2BAA2B;IAC3C,mFAAmF;IACnF,WAAW,CAAC,EAAE,oBAAoB,EAAE,CAAC;CACrC;AAED,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAAiG,CAAC"}

package/dist/schemas/contracts/transports/http/runtime-rpc-http.plugin.js

@@ -0,0 +1,5 @@
+import {} from '@vibesdotdev/kernel-rpc';
+import * as z from 'zod/v4';
+import { RuntimeRpcDescriptorSchema } from "../../../../core/kinds/rpc.kind.js";
+export const PluginOptionsInput = z.object({ descriptors: z.array(RuntimeRpcDescriptorSchema).max(1024).optional() }).optional();
+//# sourceMappingURL=runtime-rpc-http.plugin.js.map

package/dist/schemas/contracts/transports/http/runtime-rpc-http.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-rpc-http.plugin.js","sourceRoot":"","sources":["../../../../../src/schemas/contracts/transports/http/runtime-rpc-http.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6B,MAAM,yBAAyB,CAAC;AACpE,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAOhF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC"}

package/dist/schemas/contracts/transports/http/wire.d.ts

@@ -0,0 +1,29 @@
+import * as z from 'zod/v4';
+export declare const HttpHandshakeSchema: z.ZodObject<{
+    connectionId: z.ZodString;
+    rootRef: z.ZodString;
+    reverseCalls: z.ZodOptional<z.ZodLiteral<true>>;
+    wire: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+        dates: z.ZodOptional<z.ZodLiteral<true>>;
+        streamCredits: z.ZodOptional<z.ZodLiteral<true>>;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export type HttpHandshake = Readonly<z.infer<typeof HttpHandshakeSchema>>;
+export declare const HttpStreamWriteSchema: z.ZodObject<{
+    channelId: z.ZodString;
+    data: z.ZodString;
+}, z.core.$strict>;
+export type HttpStreamWrite = Readonly<z.infer<typeof HttpStreamWriteSchema>>;
+export declare const HttpStreamCloseSchema: z.ZodObject<{
+    channelId: z.ZodString;
+}, z.core.$strict>;
+export type HttpStreamClose = Readonly<z.infer<typeof HttpStreamCloseSchema>>;
+export declare const HttpHandshakeRefusalSchema: z.ZodObject<{
+    error: z.ZodReadonly<z.ZodObject<{
+        code: z.ZodString;
+        message: z.ZodString;
+        details: z.ZodOptional<z.ZodUnknown>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+//# sourceMappingURL=wire.d.ts.map

package/dist/schemas/contracts/transports/http/wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../../../../src/schemas/contracts/transports/http/wire.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,eAAO,MAAM,mBAAmB;;;;;;;;kBAK9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC;AAE1E,eAAO,MAAM,qBAAqB;;;kBAQhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC;AAE9E,eAAO,MAAM,qBAAqB;;kBAAmD,CAAC;AAEtF,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC;AAE9E,eAAO,MAAM,0BAA0B;;;;;;;kBAA4C,CAAC"}

package/dist/schemas/contracts/transports/http/wire.js

@@ -0,0 +1,23 @@
+import * as z from 'zod/v4';
+import { attempt, rethrow } from "../../../../core/protocol/lifecycle/attempt.js";
+import { RpcErrorSchema, WireCapabilitiesSchema } from "../../../../core/protocol/wire/schemas.js";
+export const HttpHandshakeSchema = z.strictObject({
+    connectionId: z.string().min(1),
+    rootRef: z.string().min(1),
+    reverseCalls: z.literal(true).optional(),
+    wire: WireCapabilitiesSchema.optional()
+});
+export const HttpStreamWriteSchema = z.strictObject({
+    channelId: z.string().min(1),
+    data: z.string().refine((value) => {
+        const decoded = attempt(() => atob(value));
+        if (decoded.ok)
+            return true;
+        if (decoded.failure instanceof DOMException && decoded.failure.name === 'InvalidCharacterError')
+            return false;
+        return rethrow(decoded.failure);
+    }, 'Invalid base64 payload.')
+});
+export const HttpStreamCloseSchema = z.strictObject({ channelId: z.string().min(1) });
+export const HttpHandshakeRefusalSchema = z.strictObject({ error: RpcErrorSchema });
+//# sourceMappingURL=wire.js.map

package/dist/schemas/contracts/transports/http/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../../../../src/schemas/contracts/transports/http/wire.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,2CAA2C,CAAC;AAEnG,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,YAAY,CAAC;IACjD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACxC,IAAI,EAAE,sBAAsB,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,YAAY,CAAC;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACjC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC5B,IAAI,OAAO,CAAC,OAAO,YAAY,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,uBAAuB;YAAE,OAAO,KAAK,CAAC;QAC9G,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC,EAAE,yBAAyB,CAAC;CAC7B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAItF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC"}