@vibesdotdev/kernel-rpc 0.0.0-stage → 1.0.0-rc.3

package/dist/transports/http/listener/http-sessions.js

@@ -0,0 +1,186 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { RPC_ERROR } from '@vibesdotdev/kernel-rpc';
+import { attempt, rethrow } from "../../../core/protocol/lifecycle/attempt.js";
+import { ConnectionCloses } from "../../../core/protocol/lifecycle/binding-close.js";
+import {} from "../../../core/protocol/lifecycle/channel-close.js";
+import { LOCAL_ATTESTATION_CALLER_HEADER, attestedIdentity, decodeAttestedCaller } from "../../../core/protocol/transport/local-attestation.js";
+import { toRpcError } from "../../../core/protocol/wire/verbs.js";
+import { HTTP_WIRE_DATES_QUERY, HTTP_REVERSE_CALLS_QUERY } from "../wire.js";
+import { readBoundedBody } from "./body.js";
+import { HttpListenSession } from "./http-listen-session.js";
+export class HttpSessions {
+    options;
+    sessions = new Map();
+    sessionTokens = new Map();
+    /**
+         * What each session counts against for the session cap: the bearer, only when the registry or the attestation
+         * verifier accepted it; otherwise `null`, the anonymous caller. Unverified bearer strings are free to mint, so
+         * they never open a cap of their own.
+         */
+    sessionCapKeys = new Map();
+    /** Connections the consumer disconnected: their binding close failures, kept for {@link closeAll}. */
+    closedConnections = new ConnectionCloses();
+    constructor(options) {
+        this.options = options;
+    }
+    /** Active connection count (diagnostic + teardown). */
+    get connectionCount() {
+        return this.sessions.size;
+    }
+    /** A session by id (tests assert the owner ref-table size through it). */
+    session(connectionId) {
+        return this.sessions.get(connectionId);
+    }
+    /** Live connection ids (diagnostic + tests). */
+    liveConnectionIds() {
+        return [...this.sessions.keys()];
+    }
+    /**
+         * Tear down every connection (free all refs + channels — no leak), then wait
+         * for their binding closes. Rejects with the typed close failures; every
+         * connection is torn down first either way.
+         */
+    closeAll() {
+        const outcomes = [...this.sessions.values()].map((session) => session.shutdown());
+        this.sessions.clear();
+        this.sessionTokens.clear();
+        this.sessionCapKeys.clear();
+        return this.closedConnections.drain(outcomes);
+    }
+    /** A close failure answers the request that asked for the close, typed. */
+    closeFailed(failure) {
+        return new Response(JSON.stringify({ error: toRpcError(failure) }), {
+            status: 500,
+            headers: { 'content-type': 'application/json' }
+        });
+    }
+    connectionId(req) {
+        return req.headers.get('x-rpc-connection');
+    }
+    onConnect(req) {
+        const token = bearer(req);
+        const capKey = token && (this.options.tokenRegistry?.accepts(token) === true || this.options.localAttestation?.verify(token) === true) ? token : null;
+        let held = 0;
+        for (const key of this.sessionCapKeys.values())
+            if (key === capKey)
+                held += 1;
+        if (held >= RPC_HTTP_MAX_SESSIONS_PER_BEARER) {
+            return Response.json({ error: { code: 'UNAVAILABLE', reason: RPC_SESSION_LIMIT, details: { limit: RPC_HTTP_MAX_SESSIONS_PER_BEARER } } }, { status: 503 });
+        }
+        // Only what the registry holds for this bearer: its minter's label and
+        // verified caller. Nothing the request itself claims becomes identity.
+        const auth = token ? this.options.tokenRegistry?.resolve(token) ?? undefined : undefined;
+        // A verified local attestation admits the launch identity the handshake
+        // declares; a malformed declaration refuses the connection (fails closed).
+        let attested;
+        if (this.options.localAttestation?.verify(token ?? undefined) === true) {
+            const declared = attempt(() => decodeAttestedCaller(req.headers.get(LOCAL_ATTESTATION_CALLER_HEADER)));
+            if (!declared.ok) {
+                return new Response(JSON.stringify({ error: toRpcError(declared.failure) }), {
+                    status: 400,
+                    headers: { 'content-type': 'application/json' }
+                });
+            }
+            attested = attestedIdentity(this.options.localAttestation, token ?? undefined, declared.value);
+        }
+        const wireDates = this.options.wireDates !== false && new URL(req.url).searchParams.get(HTTP_WIRE_DATES_QUERY) === '1';
+        const reverseCalls = this.options.callbacks !== undefined && new URL(req.url).searchParams.get(HTTP_REVERSE_CALLS_QUERY) === '1';
+        const session = new HttpListenSession(this.options, crypto.randomUUID(), auth, attested, wireDates, reverseCalls);
+        this.sessions.set(session.connectionId, session);
+        this.sessionTokens.set(session.connectionId, token);
+        this.sessionCapKeys.set(session.connectionId, capKey);
+        const body = wireDates
+            ? { connectionId: session.connectionId, rootRef: session.root, wire: { dates: true } }
+            : { connectionId: session.connectionId, rootRef: session.root };
+        const handshake = reverseCalls ? { ...body, reverseCalls: true } : body;
+        return new Response(JSON.stringify(handshake), {
+            status: 200,
+            headers: { 'content-type': 'application/json' }
+        });
+    }
+    async onDisconnect(req) {
+        const session = this.sessionFor(req);
+        if (session) {
+            const failure = await this.dropSession(session);
+            if (failure)
+                return this.closeFailed(failure);
+        }
+        return new Response(null, { status: 202 });
+    }
+    /** A transport leg can end without a final disconnect POST. Release its session capacity too. */
+    dropSession(session) {
+        const removed = this.sessions.delete(session.connectionId);
+        this.sessionTokens.delete(session.connectionId);
+        this.sessionCapKeys.delete(session.connectionId);
+        const outcome = session.shutdown();
+        if (removed)
+            this.closedConnections.keep(outcome);
+        return outcome;
+    }
+    invalidRequest() {
+        return Response.json({ error: { code: 'INVALID_INPUT', message: 'Invalid RPC request.', reason: 'rpc-request-invalid' } }, { status: 400 });
+    }
+    /** Parse the bounded body using the route's owning schema. */
+    async readBody(req, schema) {
+        const text = await readBoundedBody(req, failure => {
+            const described = routeFailed(new URL(req.url).pathname, failure);
+            const reported = this.options.reportFailure ? attempt(() => this.options.reportFailure?.(described)) : undefined;
+            if (!reported?.ok)
+                this.closedConnections.keep(Promise.resolve(described));
+        });
+        if (text instanceof Response)
+            return text;
+        const read = attempt(() => JSON.parse(text));
+        if (!read.ok)
+            return read.failure instanceof SyntaxError ? this.invalidRequest() : rethrow(read.failure);
+        const parsed = schema.safeParse(read.value);
+        return parsed.success ? parsed.data : this.invalidRequest();
+    }
+    closeAnswer(ack) {
+        return new Response(JSON.stringify({ ack }), {
+            status: 200,
+            headers: { 'content-type': 'application/json' }
+        });
+    }
+    sessionFor(req) {
+        const id = this.connectionId(req);
+        return id && this.sessionTokens.get(id) === bearer(req) ? this.sessions.get(id) : undefined;
+    }
+    noSession() {
+        return new Response(JSON.stringify({ error: { code: RPC_ERROR.DISCONNECTED } }), {
+            status: 409,
+            headers: { 'content-type': 'application/json' }
+        });
+    }
+}
+// ---------------------------------------------------------------------------
+// LISTEN SIDE (owner) — connection auth → L1 invoke pipeline
+// ---------------------------------------------------------------------------
+/** The reason a route failure is reported and answered with. */
+export const RPC_ROUTE_FAILED = 'rpc-route-failed';
+/**
+ * How many live sessions one accepted bearer (one the token registry or the attestation verifier accepted; every
+ * other bearer, and none, is the anonymous caller) may hold on a handler. A handshake past
+ * it is answered 503 `UNAVAILABLE` `rpc-session-limit` and allocates nothing: a caller cannot make the owner keep an
+ * unbounded number of sessions it never disconnects.
+ */
+export const RPC_HTTP_MAX_SESSIONS_PER_BEARER = 1024;
+export const RPC_SESSION_LIMIT = 'rpc-session-limit';
+export function routeFailed(path, cause) {
+    return new CapabilityError('An HTTP RPC route failed.', 'INTERNAL', { reason: RPC_ROUTE_FAILED, retryable: false, details: { path }, cause });
+}
+export /** The bearer token from an `Authorization` header, or null. */ function bearer(req) {
+    const header = req.headers.get('authorization');
+    if (!header)
+        return null;
+    const match = /^Bearer\s+(.+)$/i.exec(header);
+    return match ? match[1] : null;
+}
+export /** Decode a base64 write/frame body to bytes (server side). */ function decodeBase64ToBytes(b64) {
+    const binary = atob(b64);
+    const out = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++)
+        out[i] = binary.charCodeAt(i);
+    return out;
+}
+//# sourceMappingURL=http-sessions.js.map

package/dist/transports/http/listener/http-sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-sessions.js","sourceRoot":"","sources":["../../../../src/transports/http/listener/http-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAsB,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAGpD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,6CAA6C,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AACrF,OAAO,EAA2B,MAAM,mDAAmD,CAAC;AAC5F,OAAO,EAAE,+BAA+B,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,uDAAuD,CAAC;AAChJ,OAAO,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAC;AAElE,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAsB,MAAM,YAAY,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,OAAgB,YAAY;IAeH;IAdZ,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEhD,aAAa,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEpE;;;;WAII;IACgB,cAAc,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEtE,sGAAsG;IAClF,iBAAiB,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAE/D,YAA+B,OAA0B;QAA1B,YAAO,GAAP,OAAO,CAAmB;IAAG,CAAC;IAE7D,uDAAuD;IACtD,IAAI,eAAe;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC3B,CAAC;IAEF,0EAA0E;IACzE,OAAO,CAAC,YAAoB;QAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IAEF,gDAAgD;IAC/C,iBAAiB;QAChB,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;IAEF;;;;WAII;IACH,QAAQ;QACP,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAEF,2EAA2E;IAChE,WAAW,CAAC,OAAsB;QAC3C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;YACnE,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAC/C,CAAC,CAAC;IACJ,CAAC;IAEQ,YAAY,CAAC,GAAY;QACjC,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC5C,CAAC;IAEQ,SAAS,CAAC,GAAY;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACtJ,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE;YAAE,IAAI,GAAG,KAAK,MAAM;gBAAE,IAAI,IAAI,CAAC,CAAC;QAC9E,IAAI,IAAI,IAAI,gCAAgC,EAAE,CAAC;YAC9C,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5J,CAAC;QACD,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACzF,wEAAwE;QACxE,2EAA2E;QAC3E,IAAI,QAA+C,CAAC;QACpD,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;YACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC;YACvG,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;oBAC5E,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAC/C,CAAC,CAAC;YACJ,CAAC;YACD,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,KAAK,IAAI,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,CAAC,KAAK,GAAG,CAAC;QACvH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,wBAAwB,CAAC,KAAK,GAAG,CAAC;QACjI,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QAClH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,IAAI,GAAkB,SAAS;YACpC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtF,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QACjE,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACxE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;YAC9C,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAC/C,CAAC,CAAC;IACJ,CAAC;IAEQ,KAAK,CAAC,YAAY,CAAC,GAAY;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,OAAO;gBAAE,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,iGAAiG;IACvF,WAAW,CAAC,OAA0B;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,OAAO;YAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC;IAChB,CAAC;IAEQ,cAAc;QACtB,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7I,CAAC;IAEF,8DAA8D;IACnD,KAAK,CAAC,QAAQ,CAAI,GAAY,EAAE,MAAoB;QAC7D,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE;YACjD,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjH,IAAI,CAAC,QAAQ,EAAE,EAAE;gBAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QACH,IAAI,IAAI,YAAY,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,OAAO,YAAY,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzG,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;IAC7D,CAAC;IAEQ,WAAW,CAAC,GAAuB;QAC3C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE;YAC5C,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAC/C,CAAC,CAAC;IACJ,CAAC;IAEQ,UAAU,CAAC,GAAY;QAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,EAAE,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,CAAC;IAEQ,SAAS;QACjB,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE;YAChF,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAC/C,CAAC,CAAC;IACJ,CAAC;CACD;AAED,8EAA8E;AAC9E,6DAA6D;AAC7D,8EAA8E;AAE9E,gEAAgE;AAChE,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,CAAC;AAErD,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAErD,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAAoB;IAC7D,OAAO,IAAI,eAAe,CAAC,2BAA2B,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/I,CAAC;AAED,MAAM,CAAC,gEAAgE,UAC9D,MAAM,CAAC,GAAY;IAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,+DAA+D,UAC7D,mBAAmB,CAAC,GAAW;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/dist/transports/http/listener/http-transport.impl.d.ts

@@ -0,0 +1,36 @@
+import { HttpSessions } from "./http-sessions.ts";
+export { connectHttp } from "../consumer/connect-http.ts";
+export { createHttpRpcImplementation } from "../http-implementation.ts";
+export { ConnectHttpInput, ConnectHttpMountOptionsFields, ConnectHttpOptionsFields, HttpListenOptionsInput } from "../../../schemas/contracts/transports/http/http-transport.impl.ts";
+export type { ConnectHttpOptions, HttpListenOptions, HttpListener } from "../../../schemas/contracts/transports/http/http-transport.impl.ts";
+export { RPC_HTTP_MAX_SESSIONS_PER_BEARER, RPC_ROUTE_FAILED, RPC_SESSION_LIMIT } from "./http-sessions.ts";
+/**
+ * The http listen handler. A `(req) => Response` middleware: mount it on any
+ * server, or use {@link listenHttp} with the selected runtime HTTP host. It owns the
+ * per-connection sessions keyed by the handshake's connection id.
+ */
+export declare class RpcHttpHandler extends HttpSessions {
+    /**
+         * Handle one http request. Returns null when the path is not an rpc route. Never rejects: a failure inside a
+         * route is reported once ({@link HttpListenOptions.reportFailure}) and answered 500 `INTERNAL` `rpc-route-failed`.
+         */
+    handle(req: Request): Promise<Response | null>;
+    protected route(req: Request, url: URL, path: string): Promise<Response>;
+    protected withCors(response: Response, headers: Record<string, string> | undefined): Response;
+    protected onInvoke(req: Request): Promise<Response>;
+    protected onReverse(req: Request): Response;
+    protected onRelease(req: Request): Promise<Response>;
+    protected onStream(req: Request, url: URL): Promise<Response>;
+    protected onStreamWrite(req: Request): Promise<Response>;
+    /**
+         * Answer a consumer's channel close with its acknowledgement as a JSON body
+         * (`{ ack }`), only once the owner's binding close settled: acknowledged
+         * when it closed; `already-ended` when the owner ended the channel;
+         * `owner-unknown` when this owner holds no such connection or channel. A
+         * binding whose close failed answers 500 with its typed error. The
+         * consumer never reads a bare 2xx as an acknowledgement.
+         */
+    protected onStreamClose(req: Request): Promise<Response>;
+}
+export type { HttpListenTarget } from './http-listen-session.ts';
+//# sourceMappingURL=http-transport.impl.d.ts.map

package/dist/transports/http/listener/http-transport.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-transport.impl.d.ts","sourceRoot":"","sources":["../../../../src/transports/http/listener/http-transport.impl.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,EAA8D,MAAM,oBAAoB,CAAC;AAG9G,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAExE,OAAO,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,mEAAmE,CAAC;AAEtL,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,mEAAmE,CAAC;AAE7I,OAAO,EAAE,gCAAgC,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE3G;;;;GAIG;AACH,qBAAa,cAAe,SAAQ,YAAY;IAChD;;;WAGI;IACG,MAAM,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;cAgBrC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAyC9E,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GAAG,QAAQ;cAM7E,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAgBxD,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,QAAQ;cAQ5B,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;cAY1C,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC;cAsBnD,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAU9D;;;;;;;WAOI;cACa,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;CAa9D;AAED,YAAY,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/transports/http/listener/http-transport.impl.js

@@ -0,0 +1,188 @@
+import { RPC_ERROR, asRefId } from '@vibesdotdev/kernel-rpc';
+import * as z from 'zod/v4';
+import { attempt, attemptAsync } from "../../../core/protocol/lifecycle/attempt.js";
+import { CLOSE_ACKNOWLEDGED, closeUnacknowledged } from "../../../core/protocol/lifecycle/channel-close.js";
+import { hasWireDates } from "../../../core/protocol/wire/json-wire.js";
+import { RpcInvokeSchema, RpcReleaseSchema, RpcResponseSchema } from "../../../core/protocol/wire/schemas.js";
+import { HttpStreamCloseSchema, HttpStreamWriteSchema, RPC_HTTP_ROUTE } from "../wire.js";
+import { HttpSessions, RPC_ROUTE_FAILED, bearer, decodeBase64ToBytes, routeFailed } from "./http-sessions.js";
+import { streamResponse } from "./stream-response.js";
+import { reverseResponse } from "./reverse-response.js";
+export { connectHttp } from "../consumer/connect-http.js";
+export { createHttpRpcImplementation } from "../http-implementation.js";
+export { ConnectHttpInput, ConnectHttpMountOptionsFields, ConnectHttpOptionsFields, HttpListenOptionsInput } from "../../../schemas/contracts/transports/http/http-transport.impl.js";
+export { RPC_HTTP_MAX_SESSIONS_PER_BEARER, RPC_ROUTE_FAILED, RPC_SESSION_LIMIT } from "./http-sessions.js";
+/**
+ * The http listen handler. A `(req) => Response` middleware: mount it on any
+ * server, or use {@link listenHttp} with the selected runtime HTTP host. It owns the
+ * per-connection sessions keyed by the handshake's connection id.
+ */
+export class RpcHttpHandler extends HttpSessions {
+    /**
+         * Handle one http request. Returns null when the path is not an rpc route. Never rejects: a failure inside a
+         * route is reported once ({@link HttpListenOptions.reportFailure}) and answered 500 `INTERNAL` `rpc-route-failed`.
+         */
+    async handle(req) {
+        const url = new URL(req.url);
+        const path = url.pathname;
+        if (!path.startsWith('/rpc/'))
+            return null;
+        const routed = await attemptAsync(() => this.route(req, url, path));
+        if (routed.ok)
+            return routed.value;
+        const failure = routeFailed(path, routed.failure);
+        const sink = this.options.reportFailure;
+        const reported = sink ? attempt(() => sink(failure)) : undefined;
+        if (!reported?.ok)
+            this.closedConnections.keep(Promise.resolve(failure));
+        return new Response(JSON.stringify({ error: { code: failure.code, reason: RPC_ROUTE_FAILED } }), {
+            status: 500,
+            headers: { 'content-type': 'application/json' }
+        });
+    }
+    async route(req, url, path) {
+        const origin = req.headers.get('origin');
+        const cors = this.options.corsPolicy?.resolve(origin);
+        if (this.options.corsPolicy && origin && !cors?.allowed) {
+            return new Response('origin denied', { status: 403 });
+        }
+        if (req.method === 'OPTIONS') {
+            if (!this.options.corsPolicy || !origin || !cors?.allowed) {
+                return new Response('origin denied', { status: 403 });
+            }
+            return new Response(null, { status: 204, headers: cors.headers });
+        }
+        // CONNECTION AUTH — the ONE security thing this transport does itself.
+        if (this.options.tokenRegistry) {
+            const token = bearer(req);
+            const accepted = !!token && (this.options.tokenRegistry.accepts(token) || this.options.localAttestation?.verify(token) === true);
+            if (!accepted) {
+                return this.withCors(new Response(JSON.stringify({ error: { code: 'RPC_UNAUTHENTICATED' } }), {
+                    status: 401,
+                    headers: { 'content-type': 'application/json' }
+                }), cors?.headers);
+            }
+        }
+        let response;
+        if (path === RPC_HTTP_ROUTE.HEALTH && req.method === 'GET')
+            response = new Response(null, { status: 204 });
+        else if (path === RPC_HTTP_ROUTE.DISCONNECT && req.method === 'POST')
+            response = await this.onDisconnect(req);
+        else if (path === RPC_HTTP_ROUTE.CONNECT && req.method === 'GET')
+            response = this.onConnect(req);
+        else if (path === RPC_HTTP_ROUTE.INVOKE && req.method === 'POST')
+            response = await this.onInvoke(req);
+        else if (path === RPC_HTTP_ROUTE.INVOKE && req.method === 'GET')
+            response = this.onReverse(req);
+        else if (path === RPC_HTTP_ROUTE.RELEASE && req.method === 'POST')
+            response = await this.onRelease(req);
+        else if (path === RPC_HTTP_ROUTE.STREAM && req.method === 'GET')
+            response = await this.onStream(req, url);
+        else if (path === RPC_HTTP_ROUTE.STREAM_WRITE && req.method === 'POST')
+            response = await this.onStreamWrite(req);
+        else if (path === RPC_HTTP_ROUTE.STREAM_CLOSE && req.method === 'POST')
+            response = await this.onStreamClose(req);
+        else
+            response = new Response('not found', { status: 404 });
+        return this.withCors(response, cors?.headers);
+    }
+    withCors(response, headers) {
+        if (!headers)
+            return response;
+        for (const [name, value] of Object.entries(headers))
+            response.headers.set(name, value);
+        return response;
+    }
+    async onInvoke(req) {
+        const session = this.sessionFor(req);
+        if (!session)
+            return this.noSession();
+        const reqBody = await this.readBody(req, z.union([RpcInvokeSchema, RpcResponseSchema]));
+        if (reqBody instanceof Response)
+            return reqBody;
+        if (!session.wireDates && hasWireDates(reqBody))
+            return this.invalidRequest();
+        if (!('verb' in reqBody)) {
+            return session.answerReverse(reqBody) ? new Response(null, { status: 202 }) : this.invalidRequest();
+        }
+        const response = await session.handleMessage(reqBody);
+        return new Response(JSON.stringify(response), {
+            status: 200,
+            headers: { 'content-type': 'application/json' }
+        });
+    }
+    onReverse(req) {
+        const session = this.sessionFor(req);
+        return session ? reverseResponse(session, async () => {
+            const failure = await this.dropSession(session);
+            if (failure)
+                throw failure;
+        }) : this.noSession();
+    }
+    async onRelease(req) {
+        const session = this.sessionFor(req);
+        // A release on a vanished connection is a no-op (the session tore its table down).
+        if (session) {
+            const body = await this.readBody(req, RpcReleaseSchema);
+            if (body instanceof Response)
+                return body;
+            await session.handleMessage(body);
+        }
+        // Fire-and-forget: 202 Accepted, no body.
+        return new Response(null, { status: 202 });
+    }
+    async onStream(req, url) {
+        const session = this.sessionFor(req);
+        if (!session)
+            return this.noSession();
+        const ref = url.searchParams.get('ref');
+        const channel = url.searchParams.get('channel');
+        const channelId = url.searchParams.get('channelId');
+        if (!ref || !channel || !channelId)
+            return new Response('bad stream request', { status: 400 });
+        const opened = await session.openChannel(channelId, asRefId(ref), channel);
+        if (!opened.ok) {
+            const status = opened.code === RPC_ERROR.NO_CHANNEL ? 404 : opened.code === RPC_ERROR.CHANNEL_IN_USE ? 409 : 400;
+            return new Response(JSON.stringify({ error: opened.reason ? { code: opened.code, reason: opened.reason } : { code: opened.code } }), {
+                status,
+                headers: { 'content-type': 'application/json' }
+            });
+        }
+        // Open an SSE body. owner→consumer frames are emitted as base64 `data:` lines;
+        // each line is a framed record (1-byte header) the consumer decodes verbatim.
+        return streamResponse(session, channelId);
+    }
+    async onStreamWrite(req) {
+        const session = this.sessionFor(req);
+        if (session) {
+            const body = await this.readBody(req, HttpStreamWriteSchema);
+            if (body instanceof Response)
+                return body;
+            session.writeChannel(body.channelId, decodeBase64ToBytes(body.data));
+        }
+        return new Response(null, { status: 202 });
+    }
+    /**
+         * Answer a consumer's channel close with its acknowledgement as a JSON body
+         * (`{ ack }`), only once the owner's binding close settled: acknowledged
+         * when it closed; `already-ended` when the owner ended the channel;
+         * `owner-unknown` when this owner holds no such connection or channel. A
+         * binding whose close failed answers 500 with its typed error. The
+         * consumer never reads a bare 2xx as an acknowledgement.
+         */
+    async onStreamClose(req) {
+        const session = this.sessionFor(req);
+        if (!session)
+            return this.closeAnswer(closeUnacknowledged('owner-unknown'));
+        const body = await this.readBody(req, HttpStreamCloseSchema);
+        if (body instanceof Response)
+            return body;
+        const closed = await attemptAsync(() => session.closeChannel(body.channelId));
+        if (!closed.ok)
+            return this.closeFailed(closed.failure);
+        return this.closeAnswer(closed.value === 'closed'
+            ? CLOSE_ACKNOWLEDGED
+            : closeUnacknowledged(closed.value === 'already-ended' ? 'already-ended' : 'owner-unknown'));
+    }
+}
+//# sourceMappingURL=http-transport.impl.js.map

package/dist/transports/http/listener/http-transport.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-transport.impl.js","sourceRoot":"","sources":["../../../../src/transports/http/listener/http-transport.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AAC5G,OAAO,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAC9G,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC9G,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAExE,OAAO,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,mEAAmE,CAAC;AAItL,OAAO,EAAE,gCAAgC,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE3G;;;;GAIG;AACH,MAAM,OAAO,cAAe,SAAQ,YAAY;IAChD;;;WAGI;IACH,KAAK,CAAC,MAAM,CAAC,GAAY;QACxB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;QACnC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjE,IAAI,CAAC,QAAQ,EAAE,EAAE;YAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QACzE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,CAAC,EAAE;YAChG,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAC/C,CAAC,CAAC;IACJ,CAAC;IAEQ,KAAK,CAAC,KAAK,CAAC,GAAY,EAAE,GAAQ,EAAE,IAAY;QAExD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,MAAM,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;YACzD,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;gBAC3D,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,uEAAuE;QACvE,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,QAAQ,GACb,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;YACjH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,CAAC,EAAE;oBAC7F,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAC/C,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YACpB,CAAC;QACF,CAAC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,IAAI,KAAK,cAAc,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;YAAE,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;aACtG,IAAI,IAAI,KAAK,cAAc,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;aACzG,IAAI,IAAI,KAAK,cAAc,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;YAAE,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;aAC5F,IAAI,IAAI,KAAK,cAAc,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;aACjG,IAAI,IAAI,KAAK,cAAc,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;YAAE,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;aAC3F,IAAI,IAAI,KAAK,cAAc,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;aACnG,IAAI,IAAI,KAAK,cAAc,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;YAAE,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;aACrG,IAAI,IAAI,KAAK,cAAc,CAAC,YAAY,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;aAC5G,IAAI,IAAI,KAAK,cAAc,CAAC,YAAY,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;;YAC5G,QAAQ,GAAG,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAEQ,QAAQ,CAAC,QAAkB,EAAE,OAA2C;QAChF,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvF,OAAO,QAAQ,CAAC;IACjB,CAAC;IAEQ,KAAK,CAAC,QAAQ,CAAC,GAAY;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;QACxF,IAAI,OAAO,YAAY,QAAQ;YAAE,OAAO,OAAO,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;QAC9E,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACrG,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;YAC7C,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAC/C,CAAC,CAAC;IACJ,CAAC;IAES,SAAS,CAAC,GAAY;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrC,OAAO,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC;QAC5B,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACvB,CAAC;IAEQ,KAAK,CAAC,SAAS,CAAC,GAAY;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrC,mFAAmF;QACnF,IAAI,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;YACxD,IAAI,IAAI,YAAY,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,0CAA0C;QAC1C,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAEQ,KAAK,CAAC,QAAQ,CAAC,GAAY,EAAE,GAAQ;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAE/F,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACjH,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE;gBACpI,MAAM;gBACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAC/C,CAAC,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,8EAA8E;QAC9E,OAAO,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC3C,CAAC;IAEQ,KAAK,CAAC,aAAa,CAAC,GAAY;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;YAC7D,IAAI,IAAI,YAAY,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC1C,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAEF;;;;;;;WAOI;IACO,KAAK,CAAC,aAAa,CAAC,GAAY;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;QAC7D,IAAI,IAAI,YAAY,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,WAAW,CACtB,MAAM,CAAC,KAAK,KAAK,QAAQ;YACxB,CAAC,CAAC,kBAAkB;YACpB,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAC5F,CAAC;IACH,CAAC;CACD"}

package/dist/transports/http/listener/projection-mount.d.ts

@@ -0,0 +1,9 @@
+import type { HttpRuntimeMount, HttpRuntimeProjectionMountOptions } from "../../../schemas/contracts/transports/http/projection-mount.ts";
+export { MountHttpProjectionInput } from "../../../schemas/contracts/transports/http/projection-mount.ts";
+export type { HttpRuntimeMount, HttpRuntimeProjectionMountOptions } from "../../../schemas/contracts/transports/http/projection-mount.ts";
+/** Mount a launch-authorized HTTP daemon projection into ordinary runtime queries. */
+import type { RuntimeRef } from '@vibesdotdev/kernel';
+/** `mountHttpRuntimeProjection` input, read once (protocol/caller-input.ts). */
+/** Connect options without the lifecycle: the mounting runtime's own lifecycle bounds the connect. */
+export declare function mountHttpRuntimeProjection(runtime: RuntimeRef, originInput: string, optionsInput: HttpRuntimeProjectionMountOptions): Promise<HttpRuntimeMount>;
+//# sourceMappingURL=projection-mount.d.ts.map

package/dist/transports/http/listener/projection-mount.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection-mount.d.ts","sourceRoot":"","sources":["../../../../src/transports/http/listener/projection-mount.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iCAAiC,EAAE,MAAM,gEAAgE,CAAC;AAE1I,OAAO,EAAE,wBAAwB,EAAE,MAAM,gEAAgE,CAAC;AAC1G,YAAY,EAAE,gBAAgB,EAAE,iCAAiC,EAAE,MAAM,gEAAgE,CAAC;AAC1I,sFAAsF;AAEtF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AActD,gFAAgF;AAEhF,sGAAsG;AAEtG,wBAAgB,0BAA0B,CACzC,OAAO,EAAE,UAAU,EACnB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,iCAAiC,GAC7C,OAAO,CAAC,gBAAgB,CAAC,CAM3B"}

package/dist/transports/http/listener/projection-mount.js

@@ -0,0 +1,78 @@
+import { MountHttpProjectionInput } from "../../../schemas/contracts/transports/http/projection-mount.js";
+export { MountHttpProjectionInput } from "../../../schemas/contracts/transports/http/projection-mount.js";
+import {} from '@vibesdotdev/kernel/federation';
+import { attempt, rethrow } from "../../../core/protocol/lifecycle/attempt.js";
+import { readInput } from "../../../core/protocol/references/caller-input.js";
+import { projectionConsumer } from "../../../core/protocol/references/projection-consumer.js";
+import { RUNTIME_PROJECTION_ROOT_METHODS } from "../../../core/protocol/references/ref-table.js";
+import { projectionCloser } from "../../../core/protocol/transport/projection-close.js";
+import { asRefId } from "../../../core/protocol/wire/wire-value.js";
+import { connectHttp } from "./http-transport.impl.js";
+import { ownHttpProjection } from "./projection-owner.js";
+/** `mountHttpRuntimeProjection` input, read once (protocol/caller-input.ts). */
+/** Connect options without the lifecycle: the mounting runtime's own lifecycle bounds the connect. */
+export function mountHttpRuntimeProjection(runtime, originInput, optionsInput) {
+    const read = attempt(() => readInput('mountHttpRuntimeProjection', MountHttpProjectionInput, { origin: originInput, options: optionsInput }));
+    // The refusal settles the returned promise; it never throws synchronously out of a promise-returning call.
+    if (!read.ok)
+        return Promise.resolve().then(() => rethrow(read.failure));
+    const { origin, options } = read.value;
+    return ownHttpProjection(runtime, signal => mountProjection(runtime, origin, { ...options, signal }), options.signal);
+}
+async function mountProjection(runtime, origin, options) {
+    // Parsed once by `mountHttpRuntimeProjection` (renderer identity, positive generations).
+    const { renderer, mountGeneration, connectionGeneration } = options;
+    const connection = await connectHttp(origin, { ...options, lifecycle: runtime.lifecycle });
+    // The projection root serves the projection API, not the runtime root API.
+    const transport = {
+        rootRef: connection.rootRef,
+        rootMethods: RUNTIME_PROJECTION_ROOT_METHODS,
+        send: (request) => connection.send(request),
+        openStream: (ref, channel) => connection.openStream(asRefId(ref), channel),
+        closed: connection.closed
+    };
+    if (connection.onRequest)
+        transport.onRequest = (handler) => connection.onRequest?.(handler);
+    const consumer = projectionConsumer(transport, `http-${options.connectionGeneration}`);
+    let mounted;
+    const unmount = projectionCloser(runtime, () => mounted, connection, consumer);
+    try {
+        const projection = await consumer.snapshot();
+        if (projection.audience !== 'consumer-renderer') {
+            throw new Error('HTTP_RPC_AUDIENCE_DENIED');
+        }
+        if (projection.protocol.major !== 1) {
+            throw new Error('HTTP_RPC_PROJECTION_PROTOCOL_INCOMPATIBLE');
+        }
+        const ref = runtime.mountRuntime({
+            provenance: {
+                runtimeId: projection.runtimeId,
+                mountGeneration,
+                connectionGeneration,
+                workspaceId: projection.workspaceId,
+                principal: projection.principal,
+                remoteScope: projection.remoteScope,
+                policyRevision: projection.policyRevision,
+                renderer,
+                protocol: projection.protocol
+            },
+            descriptorRevision: projection.descriptorRevision,
+            candidates: projection.candidates
+        }, (candidate) => consumer.resolve(candidate.kindId, candidate.assetId));
+        mounted = ref;
+        const close = async () => {
+            const failure = await unmount();
+            if (failure)
+                throw failure;
+        };
+        void connection.closed.then(unmount);
+        return { ref, connection, projection, close, [Symbol.dispose]: () => void unmount() };
+    }
+    catch (failure) {
+        const cleanup = await unmount();
+        if (cleanup)
+            throw new AggregateError([failure, cleanup], 'HTTP projection setup and cleanup failed.');
+        throw failure;
+    }
+}
+//# sourceMappingURL=projection-mount.js.map

package/dist/transports/http/listener/projection-mount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection-mount.js","sourceRoot":"","sources":["../../../../src/transports/http/listener/projection-mount.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,gEAAgE,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,gEAAgE,CAAC;AAK1G,OAAO,EAEN,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,6CAA6C,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,MAAM,mDAAmD,CAAC;AAE9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,0DAA0D,CAAC;AAC9F,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EAAE,gBAAgB,EAAE,MAAM,sDAAsD,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,gFAAgF;AAEhF,sGAAsG;AAEtG,MAAM,UAAU,0BAA0B,CACzC,OAAmB,EACnB,WAAmB,EACnB,YAA+C;IAE/C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,4BAA4B,EAAE,wBAAwB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IAC9I,2GAA2G;IAC3G,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACzE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;IACvC,OAAO,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;AACvH,CAAC;AAED,KAAK,UAAU,eAAe,CAC7B,OAAmB,EACnB,MAAc,EACd,OAA0C;IAE1C,yFAAyF;IACzF,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,oBAAoB,EAAE,GAAG,OAAO,CAAC;IACpE,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC3F,2EAA2E;IAC3E,MAAM,SAAS,GAAsB;QACpC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,WAAW,EAAE,+BAA+B;QAC5C,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3C,UAAU,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;QAC1E,MAAM,EAAE,UAAU,CAAC,MAAM;KACzB,CAAC;IACF,IAAI,UAAU,CAAC,SAAS;QAAE,SAAS,CAAC,SAAS,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,EAAE,QAAQ,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACvF,IAAI,OAAwC,CAAC;IAC7C,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAE/E,IAAI,CAAC;QACJ,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC7C,IAAI,UAAU,CAAC,QAAQ,KAAK,mBAAmB,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAC/B;YACC,UAAU,EAAE;gBACX,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,eAAe;gBACf,oBAAoB;gBACpB,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,cAAc,EAAE,UAAU,CAAC,cAAc;gBACzC,QAAQ;gBACR,QAAQ,EAAE,UAAU,CAAC,QAAQ;aAC7B;YACD,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;YACjD,UAAU,EAAE,UAAU,CAAC,UAAU;SACjC,EACD,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,CACpE,CAAC;QAEF,OAAO,GAAG,GAAG,CAAC;QACd,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;YACvC,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;YAChC,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC;QAC5B,CAAC,CAAC;QACF,KAAK,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,OAAO,EAAE,EAAE,CAAC;IACvF,CAAC;IAAC,OAAO,OAAO,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;QAChC,IAAI,OAAO;YAAE,MAAM,IAAI,cAAc,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,2CAA2C,CAAC,CAAC;QACvG,MAAM,OAAO,CAAC;IACf,CAAC;AACF,CAAC"}

package/dist/transports/http/listener/projection-owner.d.ts

@@ -0,0 +1,6 @@
+/** HTTP projections finalize through the supplied Runtime's canonical plugin lifecycle. */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import type { HttpRuntimeMount } from './projection-mount.ts';
+/** Each mount is a runtime client owned by the exact plugin view that opened it. */
+export declare function ownHttpProjection(runtime: RuntimeRef, open: (signal: AbortSignal) => Promise<HttpRuntimeMount>, signal?: AbortSignal): Promise<HttpRuntimeMount>;
+//# sourceMappingURL=projection-owner.d.ts.map

package/dist/transports/http/listener/projection-owner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection-owner.d.ts","sourceRoot":"","sources":["../../../../src/transports/http/listener/projection-owner.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAE3F,OAAO,EAEP,KAAK,UAAU,EACd,MAAM,qBAAqB,CAAC;AAI7B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAgE9D,oFAAoF;AACpF,wBAAsB,iBAAiB,CACnC,OAAO,EAAE,UAAU,EACnB,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,gBAAgB,CAAC,EACxD,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAe3B"}