@vibesdotdev/kernel-rpc 0.0.0-stage → 1.0.0-rc.3

package/dist/core/protocol/lifecycle/connect-attempt.js

@@ -0,0 +1,31 @@
+import { CapabilityError, isCapabilityError } from '@vibesdotdev/kernel';
+import { attemptAsync, rethrow } from "./attempt.js";
+/** Whether `error` is the lifecycle's own deadline (`TIMEOUT` `wait-timeout`). */
+export function isLifecycleDeadline(error) {
+    return isCapabilityError(error) && error.code === 'TIMEOUT' && error.reason === 'wait-timeout';
+}
+/**
+ * Run one connect attempt under the owning runtime's lifecycle. Resolves the
+ * dialed connection; rejects with the dial's own failure, the transport's typed
+ * deadline (or the lifecycle's `TIMEOUT` `wait-timeout`), or `CANCELLED`
+ * `wait-aborted` when the caller or the runtime cancelled it.
+ */
+export async function attemptRpcConnect(attempt) {
+    const { lifecycle, dial, discard } = attempt;
+    const attempted = await attemptAsync(() => lifecycle.wait(async (signal) => {
+        const connection = await dial(signal);
+        // The dial finished after the deadline or a cancellation: the attempt
+        // has already settled, so this connection belongs to nobody.
+        if (signal.aborted) {
+            await discard(connection);
+            throw signal.reason;
+        }
+        return connection;
+    }, { timeoutMs: attempt.timeoutMs, reason: attempt.reason, signal: attempt.signal }));
+    if (attempted.ok)
+        return attempted.value;
+    if (attempt.timedOut && isLifecycleDeadline(attempted.failure))
+        throw attempt.timedOut(attempted.failure);
+    return rethrow(attempted.failure);
+}
+//# sourceMappingURL=connect-attempt.js.map

package/dist/core/protocol/lifecycle/connect-attempt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-attempt.js","sourceRoot":"","sources":["../../../../src/core/protocol/lifecycle/connect-attempt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAsB,MAAM,qBAAqB,CAAC;AAE7F,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAErD,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,KAAoB;IACvD,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,CAAC;AAChG,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAI,OAA6B;IACvE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC7C,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CACxD,KAAK,EAAE,MAAM,EAAE,EAAE;QAChB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,sEAAsE;QACtE,6DAA6D;QAC7D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;YAC1B,MAAM,MAAM,CAAC,MAAM,CAAC;QACrB,CAAC;QACD,OAAO,UAAU,CAAC;IACnB,CAAC,EACD,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAChF,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC,KAAK,CAAC;IACzC,IAAI,OAAO,CAAC,QAAQ,IAAI,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC;QAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1G,OAAO,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC"}

package/dist/core/protocol/lifecycle/connector.d.ts

@@ -0,0 +1,29 @@
+import type { RpcConnectorOptions, RpcConnectorState } from "../../../schemas/contracts/protocol/lifecycle/connector.ts";
+export { attemptRpcConnect, isLifecycleDeadline } from "./connect-attempt.ts";
+export type { RpcConnectAttempt, RpcConnectorOptions, RpcConnectorState, RpcDial, RpcLifecycle, RpcReconnectPolicy } from "../../../schemas/contracts/protocol/lifecycle/connector.ts";
+/** Reason for a `connect()` refused because the connector was disposed. */
+export declare const RPC_CONNECTOR_DISPOSED = "rpc-connector-disposed";
+/**
+ * The connect/reconnect state machine for one long-lived connection.
+ *
+ * `idle` → `connect()` → `connecting` → `open` → (the connection ends) → `idle`;
+ * any state → `dispose()` → `disposed`. There is at most one attempt in flight:
+ * a `connect()` while `connecting` joins it, a `connect()` while `open` returns
+ * the open connection.
+ */
+export declare class RpcConnector<T> {
+    #private;
+    constructor(options: RpcConnectorOptions<T>);
+    get state(): RpcConnectorState;
+    /** The open connection, if there is one. */
+    get connection(): T | undefined;
+    /** The open connection, or the one in-flight attempt, or a new attempt. */
+    connect(): Promise<T>;
+    /**
+     * Cancel the in-flight attempt or hold-off (its `connect()` callers reject
+     * `CANCELLED`) and close the open connection. Rejects with that close's
+     * failure. Concurrent and later calls join the same outcome.
+     */
+    dispose(): Promise<void>;
+}
+//# sourceMappingURL=connector.d.ts.map

package/dist/core/protocol/lifecycle/connector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol/lifecycle/connector.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,4DAA4D,CAAC;AAEzH,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE9E,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,4DAA4D,CAAC;AAEvL,2EAA2E;AAC3E,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAU/D;;;;;;;GAOG;AACH,qBAAa,YAAY,CAAC,CAAC;;gBASd,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAK3C,IAAI,KAAK,IAAI,iBAAiB,CAE7B;IAED,4CAA4C;IAC5C,IAAI,UAAU,IAAI,CAAC,GAAG,SAAS,CAE9B;IAED,2EAA2E;IAC3E,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC;IAkBrB;;;;OAIG;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CA6FxB"}

package/dist/core/protocol/lifecycle/connector.js

@@ -0,0 +1,168 @@
+import { CapabilityError, isCapabilityError } from '@vibesdotdev/kernel';
+import { attemptAsync, isFailureOf, rethrow, settled } from "./attempt.js";
+export { attemptRpcConnect, isLifecycleDeadline } from "./connect-attempt.js";
+/** Reason for a `connect()` refused because the connector was disposed. */
+export const RPC_CONNECTOR_DISPOSED = 'rpc-connector-disposed';
+function connectorDisposed(reason) {
+    return new CapabilityError(`The ${reason} connector was disposed; it opens no further connections.`, 'CANCELLED', {
+        reason: RPC_CONNECTOR_DISPOSED,
+        retryable: false,
+        details: { connector: reason }
+    });
+}
+/**
+ * The connect/reconnect state machine for one long-lived connection.
+ *
+ * `idle` → `connect()` → `connecting` → `open` → (the connection ends) → `idle`;
+ * any state → `dispose()` → `disposed`. There is at most one attempt in flight:
+ * a `connect()` while `connecting` joins it, a `connect()` while `open` returns
+ * the open connection.
+ */
+export class RpcConnector {
+    #options;
+    #controller = new AbortController();
+    #signal;
+    #state = 'idle';
+    #current;
+    #pending;
+    #disposal;
+    constructor(options) {
+        this.#options = options;
+        this.#signal = options.signal ? AbortSignal.any([this.#controller.signal, options.signal]) : this.#controller.signal;
+    }
+    get state() {
+        return this.#state;
+    }
+    /** The open connection, if there is one. */
+    get connection() {
+        return this.#current;
+    }
+    /** The open connection, or the one in-flight attempt, or a new attempt. */
+    connect() {
+        if (this.#state === 'disposed')
+            return Promise.reject(connectorDisposed(this.#options.reason));
+        let stale;
+        if (this.#current !== undefined) {
+            const live = this.#options.live;
+            if (!live || live(this.#current))
+                return Promise.resolve(this.#current);
+            stale = this.#current;
+            this.#current = undefined;
+        }
+        if (this.#pending)
+            return this.#pending;
+        this.#state = 'connecting';
+        const pending = this.#run(stale).finally(() => {
+            if (this.#pending === pending)
+                this.#pending = undefined;
+        });
+        this.#pending = pending;
+        return pending;
+    }
+    /**
+     * Cancel the in-flight attempt or hold-off (its `connect()` callers reject
+     * `CANCELLED`) and close the open connection. Rejects with that close's
+     * failure. Concurrent and later calls join the same outcome.
+     */
+    dispose() {
+        if (this.#disposal)
+            return this.#disposal;
+        this.#state = 'disposed';
+        const current = this.#current;
+        const pending = this.#pending;
+        this.#current = undefined;
+        // Publish the outcome before cancellation can re-enter disposal. Closing
+        // starts on the next microtask, once all callers can join that outcome.
+        this.#disposal = Promise.resolve().then(async () => {
+            const closes = [];
+            if (current !== undefined)
+                closes.push(Promise.resolve().then(() => this.#options.close(current)));
+            if (pending)
+                closes.push(settled(pending).then((attempted) => {
+                    if (attempted.ok)
+                        return;
+                    // Join the attempt's own cancellation; an independent connect or
+                    // late close failure still belongs to this disposal's outcome.
+                    const failure = attempted.failure;
+                    if (isFailureOf(failure, this.#signal.reason) || (isCapabilityError(failure) &&
+                        failure.code === 'CANCELLED' && failure.reason === 'wait-aborted' &&
+                        failure.cause === this.#signal.reason))
+                        return;
+                    rethrow(failure);
+                }));
+            const outcomes = await Promise.all(closes.map((close) => settled(close)));
+            const failures = outcomes.flatMap((outcome) => (outcome.ok ? [] : [outcome.failure]));
+            if (failures.length === 1)
+                rethrow(failures[0]);
+            if (failures.length > 1)
+                throw new AggregateError(failures, 'RPC connector disposal failed.');
+        });
+        this.#controller.abort(connectorDisposed(this.#options.reason));
+        return this.#disposal;
+    }
+    async #run(stale) {
+        const { lifecycle, open, reconnect } = this.#options;
+        if (stale !== undefined) {
+            const closed = await attemptAsync(() => this.#options.close(stale));
+            if (!closed.ok) {
+                this.#settleIdle();
+                return rethrow(closed.failure);
+            }
+        }
+        let failures = 0;
+        let delayMs = reconnect?.initialDelayMs ?? 0;
+        for (;;) {
+            if (this.#signal.aborted)
+                throw this.#cancelled();
+            const opened = await attemptAsync(() => open(this.#signal));
+            if (!opened.ok) {
+                failures += 1;
+                if (this.#signal.aborted || lifecycle.signal.aborted) {
+                    this.#settleIdle();
+                    return rethrow(opened.failure);
+                }
+                if (!reconnect || (reconnect.retry && !reconnect.retry(opened.failure, failures))) {
+                    this.#settleIdle();
+                    return rethrow(opened.failure);
+                }
+                // The hold-off is the lifecycle's own tracked pause: cancelled by the
+                // connector, the owner's signal and the runtime's disposal.
+                const held = await attemptAsync(() => lifecycle.delay(delayMs, this.#signal));
+                if (!held.ok) {
+                    this.#settleIdle();
+                    return rethrow(held.failure);
+                }
+                delayMs = Math.min(reconnect.maxDelayMs, Math.max(1, delayMs * 2));
+                continue;
+            }
+            const connection = opened.value;
+            if (this.#state === 'disposed') {
+                await this.#options.close(connection);
+                throw this.#cancelled();
+            }
+            this.#adopt(connection);
+            return connection;
+        }
+    }
+    #adopt(connection) {
+        this.#current = connection;
+        this.#state = 'open';
+        const ended = () => {
+            if (this.#current !== connection)
+                return;
+            this.#current = undefined;
+            if (this.#state === 'open')
+                this.#state = 'idle';
+        };
+        // A rejected `closed` is still an ended connection; both arms end it.
+        void settled(this.#options.closed(connection)).then(ended);
+    }
+    #settleIdle() {
+        if (this.#state === 'connecting')
+            this.#state = 'idle';
+    }
+    #cancelled() {
+        return this.#signal.reason ?? connectorDisposed(this.#options.reason);
+    }
+}
+//# sourceMappingURL=connector.js.map

package/dist/core/protocol/lifecycle/connector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.js","sourceRoot":"","sources":["../../../../src/core/protocol/lifecycle/connector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAI9E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAE/D,SAAS,iBAAiB,CAAC,MAAc;IACxC,OAAO,IAAI,eAAe,CAAC,OAAO,MAAM,2DAA2D,EAAE,WAAW,EAAE;QACjH,MAAM,EAAE,sBAAsB;QAC9B,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;KAC9B,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,YAAY;IACf,QAAQ,CAAyB;IACjC,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,OAAO,CAAc;IAC9B,MAAM,GAAsB,MAAM,CAAC;IACnC,QAAQ,CAAgB;IACxB,QAAQ,CAAyB;IACjC,SAAS,CAA4B;IAErC,YAAY,OAA+B;QAC1C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;IACtH,CAAC;IAED,IAAI,KAAK;QACR,OAAO,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,4CAA4C;IAC5C,IAAI,UAAU;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC;IACtB,CAAC;IAED,2EAA2E;IAC3E,OAAO;QACN,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/F,IAAI,KAAoB,CAAC;QACzB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAChC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxE,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC;YACtB,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC3B,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YAC7C,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;gBAAE,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC1D,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,OAAO,OAAO,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,OAAO;QACN,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC1B,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAClD,MAAM,MAAM,GAAoB,EAAE,CAAC;YACnC,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACnG,IAAI,OAAO;gBAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;oBAC5D,IAAI,SAAS,CAAC,EAAE;wBAAE,OAAO;oBACzB,iEAAiE;oBACjE,+DAA+D;oBAC/D,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;oBAClC,IAAI,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;wBAC3E,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc;wBACjE,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;wBAAE,OAAO;oBAChD,OAAO,CAAC,OAAO,CAAC,CAAC;gBAClB,CAAC,CAAC,CAAC,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1E,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACtF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;YACjD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,gCAAgC,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAoB;QAC9B,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QACrD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YACpE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBAChB,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnB,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;QACF,CAAC;QACD,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,OAAO,GAAG,SAAS,EAAE,cAAc,IAAI,CAAC,CAAC;QAC7C,SAAS,CAAC;YACT,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO;gBAAE,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YAClD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBAChB,QAAQ,IAAI,CAAC,CAAC;gBACd,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACtD,IAAI,CAAC,WAAW,EAAE,CAAC;oBACnB,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAChC,CAAC;gBACD,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;oBACnF,IAAI,CAAC,WAAW,EAAE,CAAC;oBACnB,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAChC,CAAC;gBACD,sEAAsE;gBACtE,4DAA4D;gBAC5D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC9E,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;oBACd,IAAI,CAAC,WAAW,EAAE,CAAC;oBACnB,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC9B,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;gBACnE,SAAS;YACV,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC;YAChC,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACtC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACzB,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACxB,OAAO,UAAU,CAAC;QACnB,CAAC;IACF,CAAC;IAED,MAAM,CAAC,UAAa;QACnB,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,KAAK,GAAG,GAAS,EAAE;YACxB,IAAI,IAAI,CAAC,QAAQ,KAAK,UAAU;gBAAE,OAAO;YACzC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;YAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;gBAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAClD,CAAC,CAAC;QACF,sEAAsE;QACtE,KAAK,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,WAAW;QACV,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACxD,CAAC;IAED,UAAU;QACT,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvE,CAAC;CACD"}

package/dist/core/protocol/lifecycle/credited-events.d.ts

@@ -0,0 +1,11 @@
+import type { CreditedEventsOptions } from "../../../schemas/contracts/protocol/lifecycle/stream-credits.ts";
+import type { RpcChannel } from '../references/ref-table.ts';
+/**
+ * Read a credit-governed channel as an async iterable of its events' bytes.
+ * The caller handles one event per `next()`; coming back for the next one
+ * re-grants the credit the last one used. `return()` (a `break`, a dispose)
+ * closes the channel. An owner's typed ending throws from `next()` once every
+ * event before it was read.
+ */
+export declare function creditedEvents(channel: RpcChannel, options: CreditedEventsOptions): AsyncIterableIterator<Uint8Array> & AsyncDisposable;
+//# sourceMappingURL=credited-events.d.ts.map

package/dist/core/protocol/lifecycle/credited-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credited-events.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol/lifecycle/credited-events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iEAAiE,CAAC;AAC7G,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAK7D;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,qBAAqB,GAAG,qBAAqB,CAAC,UAAU,CAAC,GAAG,eAAe,CA6FvI"}

package/dist/core/protocol/lifecycle/credited-events.js

@@ -0,0 +1,109 @@
+import { isCreditGrant } from "../wire/frame.js";
+import { RPC_ERROR, rpcFailure } from "../wire/verbs.js";
+import { settled } from "./attempt.js";
+/**
+ * Read a credit-governed channel as an async iterable of its events' bytes.
+ * The caller handles one event per `next()`; coming back for the next one
+ * re-grants the credit the last one used. `return()` (a `break`, a dispose)
+ * closes the channel. An owner's typed ending throws from `next()` once every
+ * event before it was read.
+ */
+export function creditedEvents(channel, options) {
+    const grant = channel.grant?.bind(channel);
+    if (!grant) {
+        throw rpcFailure(RPC_ERROR.NO_CHANNEL, 'This connection does not carry stream credits.', undefined, 'rpc-stream-credits-unnegotiated');
+    }
+    if (!channel.creditGoverned) {
+        throw rpcFailure(RPC_ERROR.NO_CHANNEL, 'The owner did not open this channel credit-governed.', undefined, 'rpc-stream-not-credit-governed');
+    }
+    if (!isCreditGrant(options.initialCredits)) {
+        throw rpcFailure(RPC_ERROR.NO_CHANNEL, 'The initial credit must be 1..1024.', undefined, 'rpc-stream-credit-overflow');
+    }
+    const queue = [];
+    let outstanding = options.initialCredits;
+    let owed = 0;
+    let ended = false;
+    let failure = null;
+    let closed = false;
+    let wake = null;
+    const notify = () => {
+        const resolve = wake;
+        wake = null;
+        resolve?.();
+    };
+    /** Close the channel; `discard` drops events not yet read (the caller is done), otherwise they stay readable. */
+    const close = async (discard = true) => {
+        if (discard)
+            queue.length = 0;
+        if (closed)
+            return;
+        closed = true;
+        unsubscribe();
+        notify();
+        await settled(channel.close());
+    };
+    const unsubscribe = channel.onData((data) => {
+        if (closed)
+            return;
+        if (outstanding === 0) {
+            // The owner sent past its grant: the channel is closed and the read fails typed.
+            // The events it was granted stay readable; the failure follows them.
+            failure = rpcFailure(RPC_ERROR.NO_CHANNEL, 'The owner sent more events than it was granted.', undefined, 'rpc-stream-credit-violated');
+            void close(false);
+            return;
+        }
+        outstanding -= 1;
+        queue.push(data);
+        notify();
+    });
+    void settled(channel.ended).then((end) => {
+        if (end.ok)
+            ended = true;
+        else
+            failure ??= end.failure instanceof Error ? end.failure : new Error('The stream channel failed.', { cause: end.failure });
+        notify();
+    });
+    grant(options.initialCredits);
+    const iterator = {
+        async next() {
+            for (;;) {
+                // The previous event has been handled: its credit returns to the owner.
+                if (owed > 0 && !closed && !ended && failure === null) {
+                    grant(owed);
+                    outstanding += owed;
+                    owed = 0;
+                }
+                const event = queue.shift();
+                if (event) {
+                    owed += 1;
+                    return { value: event, done: false };
+                }
+                if (failure) {
+                    const thrown = failure;
+                    await close();
+                    throw thrown;
+                }
+                if (ended || closed) {
+                    closed = true;
+                    unsubscribe();
+                    return { value: undefined, done: true };
+                }
+                await new Promise((resolve) => {
+                    wake = resolve;
+                });
+            }
+        },
+        async return() {
+            await close();
+            return { value: undefined, done: true };
+        },
+        [Symbol.asyncIterator]() {
+            return iterator;
+        },
+        async [Symbol.asyncDispose]() {
+            await close();
+        }
+    };
+    return iterator;
+}
+//# sourceMappingURL=credited-events.js.map

package/dist/core/protocol/lifecycle/credited-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credited-events.js","sourceRoot":"","sources":["../../../../src/core/protocol/lifecycle/credited-events.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,OAAmB,EAAE,OAA8B;IACjF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,gDAAgD,EAAE,SAAS,EAAE,iCAAiC,CAAC,CAAC;IACxI,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC7B,MAAM,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,sDAAsD,EAAE,SAAS,EAAE,gCAAgC,CAAC,CAAC;IAC7I,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5C,MAAM,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,qCAAqC,EAAE,SAAS,EAAE,4BAA4B,CAAC,CAAC;IACxH,CAAC;IACD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC;IACzC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,OAAO,GAAiB,IAAI,CAAC;IACjC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,IAAI,GAAwB,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,GAAS,EAAE;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC;QACrB,IAAI,GAAG,IAAI,CAAC;QACZ,OAAO,EAAE,EAAE,CAAC;IACb,CAAC,CAAC;IACF,iHAAiH;IACjH,MAAM,KAAK,GAAG,KAAK,EAAE,OAAO,GAAG,IAAI,EAAiB,EAAE;QACrD,IAAI,OAAO;YAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAC9B,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,WAAW,EAAE,CAAC;QACd,MAAM,EAAE,CAAC;QACT,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3C,IAAI,MAAM;YAAE,OAAO;QACnB,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;YACvB,iFAAiF;YACjF,qEAAqE;YACrE,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,iDAAiD,EAAE,SAAS,EAAE,4BAA4B,CAAC,CAAC;YACvI,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC;YAClB,OAAO;QACR,CAAC;QACD,WAAW,IAAI,CAAC,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,EAAE,CAAC;IACV,CAAC,CAAC,CAAC;IACH,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QACxC,IAAI,GAAG,CAAC,EAAE;YAAE,KAAK,GAAG,IAAI,CAAC;;YACpB,OAAO,KAAK,GAAG,CAAC,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9H,MAAM,EAAE,CAAC;IACV,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAE9B,MAAM,QAAQ,GAAwD;QACrE,KAAK,CAAC,IAAI;YACT,SAAS,CAAC;gBACT,wEAAwE;gBACxE,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACvD,KAAK,CAAC,IAAI,CAAC,CAAC;oBACZ,WAAW,IAAI,IAAI,CAAC;oBACpB,IAAI,GAAG,CAAC,CAAC;gBACV,CAAC;gBACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC5B,IAAI,KAAK,EAAE,CAAC;oBACX,IAAI,IAAI,CAAC,CAAC;oBACV,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;gBACtC,CAAC;gBACD,IAAI,OAAO,EAAE,CAAC;oBACb,MAAM,MAAM,GAAG,OAAO,CAAC;oBACvB,MAAM,KAAK,EAAE,CAAC;oBACd,MAAM,MAAM,CAAC;gBACd,CAAC;gBACD,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;oBACrB,MAAM,GAAG,IAAI,CAAC;oBACd,WAAW,EAAE,CAAC;oBACd,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACzC,CAAC;gBACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBACnC,IAAI,GAAG,OAAO,CAAC;gBAChB,CAAC,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QACD,KAAK,CAAC,MAAM;YACX,MAAM,KAAK,EAAE,CAAC;YACd,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACzC,CAAC;QACD,CAAC,MAAM,CAAC,aAAa,CAAC;YACrB,OAAO,QAAQ,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;YAC1B,MAAM,KAAK,EAAE,CAAC;QACf,CAAC;KACD,CAAC;IACF,OAAO,QAAQ,CAAC;AACjB,CAAC"}

package/dist/core/protocol/lifecycle/leg-failures.d.ts

@@ -0,0 +1,37 @@
+import { CapabilityError, type CaughtFailure, type RuntimeLifecycle } from '@vibesdotdev/kernel';
+import { FailureDescriber } from '../transport/failure-describer.ts';
+/** The reason a connection's close reports fire-and-forget legs (release, write, reverse reply) that failed. */
+export declare const LEG_FAILED = "rpc-leg-failed";
+/** Existing transport disconnect policy, also bounding final cleanup legs. */
+export declare const CONNECTION_CLOSE_DEADLINE_MS = 5000;
+/** Whether an HTTP status confirms the far side already closed what the request named. */
+export declare function isAlreadyClosedStatus(status: number): boolean;
+/**
+ * One connection's fire-and-forget legs. A leg never blocks its caller, and its
+ * failure is never dropped: a rejected request or a refused (non-2xx) answer
+ * becomes a typed `rpc-leg-failed` failure kept until the connection's close
+ * reports it. Only a confirmed already-closed answer is not a failure.
+ */
+export declare class LegFailures {
+    private readonly connectionId;
+    private readonly describer;
+    private readonly inFlight;
+    private readonly kept;
+    /**
+     * @param describer the connection's failure describer: every kept cause passes through it, so a leg failure
+     *   never keeps a host error's text or a configured secret.
+     */
+    constructor(connectionId: string, describer?: FailureDescriber);
+    /** Track `request` for `leg`; its failure is kept for {@link settle}. */
+    track<R>(leg: string, request: Promise<R>): void;
+    /** Await one leg's request and keep whatever it failed with. */
+    private answered;
+    /** Keep a leg failure that happened outside a tracked request; its cause is described, never kept raw. */
+    keep(leg: string, cause: CaughtFailure): void;
+    /** Wait for every tracked leg; resolve to the kept failures as one typed error, or `null`. Never rejects. */
+    settle(): Promise<CapabilityError | null>;
+    settleWithin(lifecycle: Pick<RuntimeLifecycle, 'wait'>, controller: AbortController): Promise<CapabilityError | null>;
+    private takeFailures;
+    private refused;
+}
+//# sourceMappingURL=leg-failures.d.ts.map

package/dist/core/protocol/lifecycle/leg-failures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"leg-failures.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol/lifecycle/leg-failures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,KAAK,aAAa,EAAE,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEjG,OAAO,EAAE,gBAAgB,EAAiB,MAAM,mCAAmC,CAAC;AAGpF,gHAAgH;AAChH,eAAO,MAAM,UAAU,mBAAmB,CAAC;AAC3C,8EAA8E;AAC9E,eAAO,MAAM,4BAA4B,OAAO,CAAC;AASjD,0FAA0F;AAC1F,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED;;;;;GAKG;AACH,qBAAa,WAAW;IAQX,OAAO,CAAC,QAAQ,CAAC,YAAY;IAAU,OAAO,CAAC,QAAQ,CAAC,SAAS;IAP7E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IACrD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAyB;IAE9C;;;OAGG;gBAC0B,YAAY,EAAE,MAAM,EAAmB,SAAS,GAAE,gBAAgC;IAE/G,yEAAyE;IACzE,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI;IAMhD,gEAAgE;YAClD,QAAQ;IAmBtB,0GAA0G;IAC1G,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;IAU7C,6GAA6G;IACvG,MAAM,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAKzC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAa3H,OAAO,CAAC,YAAY;IAepB,OAAO,CAAC,OAAO;CAOf"}

package/dist/core/protocol/lifecycle/leg-failures.js

@@ -0,0 +1,115 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { FailedLegSchema } from "../../../schemas/contracts/protocol/lifecycle/binding-close.js";
+import { FailureDescriber, HOST_FAILURES } from "../transport/failure-describer.js";
+import { attemptAsync, settled } from "./attempt.js";
+/** The reason a connection's close reports fire-and-forget legs (release, write, reverse reply) that failed. */
+export const LEG_FAILED = 'rpc-leg-failed';
+/** Existing transport disconnect policy, also bounding final cleanup legs. */
+export const CONNECTION_CLOSE_DEADLINE_MS = 5000;
+/**
+ * HTTP statuses that confirm the far side already closed what the leg named:
+ * the owner holds no such connection, channel or ref (404), or it is gone (410).
+ * Such a leg had nothing left to do; it is not a failure.
+ */
+const ALREADY_CLOSED_STATUSES = new Set([404, 410]);
+/** Whether an HTTP status confirms the far side already closed what the request named. */
+export function isAlreadyClosedStatus(status) {
+    return ALREADY_CLOSED_STATUSES.has(status);
+}
+/**
+ * One connection's fire-and-forget legs. A leg never blocks its caller, and its
+ * failure is never dropped: a rejected request or a refused (non-2xx) answer
+ * becomes a typed `rpc-leg-failed` failure kept until the connection's close
+ * reports it. Only a confirmed already-closed answer is not a failure.
+ */
+export class LegFailures {
+    connectionId;
+    describer;
+    inFlight = new Set();
+    kept = [];
+    /**
+     * @param describer the connection's failure describer: every kept cause passes through it, so a leg failure
+     *   never keeps a host error's text or a configured secret.
+     */
+    constructor(connectionId, describer = HOST_FAILURES) {
+        this.connectionId = connectionId;
+        this.describer = describer;
+    }
+    /** Track `request` for `leg`; its failure is kept for {@link settle}. */
+    track(leg, request) {
+        const tracked = this.answered(leg, request);
+        this.inFlight.add(tracked);
+        void tracked.then(() => this.inFlight.delete(tracked));
+    }
+    /** Await one leg's request and keep whatever it failed with. */
+    async answered(leg, request) {
+        const sent = await settled(request);
+        if (!sent.ok) {
+            this.keep(leg, sent.failure);
+            return;
+        }
+        const answer = sent.value;
+        if (!(answer instanceof Response))
+            return;
+        // The leg reads no answer body; release it (a failure here is the leg's too).
+        const released = await attemptAsync(async () => {
+            if (answer.body)
+                await answer.body.cancel();
+        });
+        if (!released.ok) {
+            this.keep(leg, released.failure);
+            return;
+        }
+        if (!answer.ok && !isAlreadyClosedStatus(answer.status))
+            this.kept.push(this.refused(leg, answer.status));
+    }
+    /** Keep a leg failure that happened outside a tracked request; its cause is described, never kept raw. */
+    keep(leg, cause) {
+        this.kept.push(new CapabilityError(`The ${leg} request on connection '${this.connectionId}' could not be delivered.`, 'UNAVAILABLE', { reason: LEG_FAILED, retryable: false, details: { connectionId: this.connectionId, leg }, cause: this.describer.describe(cause) }));
+    }
+    /** Wait for every tracked leg; resolve to the kept failures as one typed error, or `null`. Never rejects. */
+    async settle() {
+        while (this.inFlight.size > 0)
+            await Promise.all(this.inFlight);
+        return this.takeFailures();
+    }
+    async settleWithin(lifecycle, controller) {
+        const outcome = await settled(lifecycle.wait(async (signal) => {
+            const abort = () => controller.abort(signal.reason);
+            if (signal.aborted)
+                abort();
+            else
+                signal.addEventListener('abort', abort, { once: true });
+            try {
+                return await this.settle();
+            }
+            finally {
+                signal.removeEventListener('abort', abort);
+            }
+        }, { timeoutMs: CONNECTION_CLOSE_DEADLINE_MS, reason: 'rpc-connection-leg-settlement' }));
+        if (outcome.ok)
+            return outcome.value;
+        this.keep('settlement', outcome.failure);
+        return this.takeFailures();
+    }
+    takeFailures() {
+        const failures = this.kept.splice(0);
+        if (failures.length === 0)
+            return null;
+        if (failures.length === 1)
+            return failures[0];
+        return new CapabilityError(`${failures.length} requests on connection '${this.connectionId}' failed.`, 'UNAVAILABLE', {
+            reason: LEG_FAILED,
+            retryable: false,
+            details: {
+                connectionId: this.connectionId,
+                legs: failures.map((failure) => FailedLegSchema.parse(failure.details).leg)
+            },
+            cause: new AggregateError(failures)
+        });
+    }
+    refused(leg, status) {
+        return new CapabilityError(`The ${leg} request on connection '${this.connectionId}' was refused (http ${status}).`, 'UNAVAILABLE', { reason: LEG_FAILED, retryable: false, details: { connectionId: this.connectionId, leg, status } });
+    }
+}
+//# sourceMappingURL=leg-failures.js.map

package/dist/core/protocol/lifecycle/leg-failures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leg-failures.js","sourceRoot":"","sources":["../../../../src/core/protocol/lifecycle/leg-failures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAA6C,MAAM,qBAAqB,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,gEAAgE,CAAC;AACjG,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAErD,gHAAgH;AAChH,MAAM,CAAC,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAC3C,8EAA8E;AAC9E,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAEjD;;;;GAIG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEpD,0FAA0F;AAC1F,MAAM,UAAU,qBAAqB,CAAC,MAAc;IACnD,OAAO,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,WAAW;IAQM;IAAuC;IAPnD,QAAQ,GAAG,IAAI,GAAG,EAAiB,CAAC;IACpC,IAAI,GAAsB,EAAE,CAAC;IAE9C;;;OAGG;IACH,YAA6B,YAAoB,EAAmB,YAA8B,aAAa;QAAlF,iBAAY,GAAZ,YAAY,CAAQ;QAAmB,cAAS,GAAT,SAAS,CAAkC;IAAG,CAAC;IAEnH,yEAAyE;IACzE,KAAK,CAAI,GAAW,EAAE,OAAmB;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,gEAAgE;IACxD,KAAK,CAAC,QAAQ,CAAI,GAAW,EAAE,OAAmB;QACzD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO;QACR,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,CAAC,MAAM,YAAY,QAAQ,CAAC;YAAE,OAAO;QAC1C,8EAA8E;QAC9E,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,KAAK,IAAI,EAAE;YAC9C,IAAI,MAAM,CAAC,IAAI;gBAAE,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7C,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO;QACR,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3G,CAAC;IAED,0GAA0G;IAC1G,IAAI,CAAC,GAAW,EAAE,KAAoB;QACrC,IAAI,CAAC,IAAI,CAAC,IAAI,CACb,IAAI,eAAe,CAClB,OAAO,GAAG,2BAA2B,IAAI,CAAC,YAAY,2BAA2B,EACjF,aAAa,EACb,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAClI,CACD,CAAC;IACH,CAAC;IAED,6GAA6G;IAC7G,KAAK,CAAC,MAAM;QACX,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;YAAE,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAyC,EAAE,UAA2B;QACxF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAC,MAAM,EAAC,EAAE;YAC3D,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,OAAO;gBAAE,KAAK,EAAE,CAAC;;gBACvB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC;gBAAC,OAAO,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,CAAC;oBAC3B,CAAC;gBAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAAC,CAAC;QACxD,CAAC,EAAE,EAAE,SAAS,EAAE,4BAA4B,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC,CAAC,CAAC;QAC1F,IAAI,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;IAC5B,CAAC;IAEO,YAAY;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC,CAAC,CAAE,CAAC;QAC/C,OAAO,IAAI,eAAe,CAAC,GAAG,QAAQ,CAAC,MAAM,4BAA4B,IAAI,CAAC,YAAY,WAAW,EAAE,aAAa,EAAE;YACrH,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE;gBACR,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC;aAC3E;YACD,KAAK,EAAE,IAAI,cAAc,CAAC,QAAQ,CAAC;SACnC,CAAC,CAAC;IACJ,CAAC;IAEO,OAAO,CAAC,GAAW,EAAE,MAAc;QAC1C,OAAO,IAAI,eAAe,CACzB,OAAO,GAAG,2BAA2B,IAAI,CAAC,YAAY,uBAAuB,MAAM,IAAI,EACvF,aAAa,EACb,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CACnG,CAAC;IACH,CAAC;CACD"}

package/dist/core/protocol/lifecycle/lifecycle-owned.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Connections and listeners are owned by the runtime that opened them (class checklist 5): when that runtime's
+ * `lifecycle.signal` aborts (disposal began), `onAbort` runs once, so the connection closes and the listener stops
+ * accepting, closes its bindings and sessions, and refuses later sends typed. A runtime already disposed runs it at
+ * once. The returned function unhooks it, for a close the holder started first.
+ */
+import type { RpcConnection } from '../../kinds/rpc.kind.ts';
+export declare function ownedByLifecycle(signal: AbortSignal | undefined, onAbort: () => void): () => void;
+/**
+ * `connection`, owned by the runtime whose `signal` is given: that runtime's disposal closes it (its sends then
+ * answer `RPC_DISCONNECTED`), and the close's outcome is kept, so the holder's own `close()` later reports it. One
+ * close outcome either way. A connection the peer ended unhooks itself, so a long-lived runtime holds no hook for it.
+ */
+export declare function ownedConnection(connection: RpcConnection, signal: AbortSignal): RpcConnection;
+//# sourceMappingURL=lifecycle-owned.d.ts.map

package/dist/core/protocol/lifecycle/lifecycle-owned.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-owned.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol/lifecycle/lifecycle-owned.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAG7D,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAQjG;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,GAAG,aAAa,CAa7F"}

package/dist/core/protocol/lifecycle/lifecycle-owned.js

@@ -0,0 +1,32 @@
+import { settled } from "./attempt.js";
+export function ownedByLifecycle(signal, onAbort) {
+    if (!signal)
+        return () => { };
+    if (signal.aborted) {
+        onAbort();
+        return () => { };
+    }
+    signal.addEventListener('abort', onAbort, { once: true });
+    return () => signal.removeEventListener('abort', onAbort);
+}
+/**
+ * `connection`, owned by the runtime whose `signal` is given: that runtime's disposal closes it (its sends then
+ * answer `RPC_DISCONNECTED`), and the close's outcome is kept, so the holder's own `close()` later reports it. One
+ * close outcome either way. A connection the peer ended unhooks itself, so a long-lived runtime holds no hook for it.
+ */
+export function ownedConnection(connection, signal) {
+    let closing;
+    let unown = () => { };
+    const close = () => {
+        if (closing)
+            return closing;
+        unown();
+        closing = connection.close();
+        return closing;
+    };
+    unown = ownedByLifecycle(signal, () => void settled(close()));
+    // A connection that ended on its own (the peer closed it) no longer needs its runtime's hook.
+    void settled(connection.closed).then(() => unown());
+    return { ...connection, close };
+}
+//# sourceMappingURL=lifecycle-owned.js.map

package/dist/core/protocol/lifecycle/lifecycle-owned.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-owned.js","sourceRoot":"","sources":["../../../../src/core/protocol/lifecycle/lifecycle-owned.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,UAAU,gBAAgB,CAAC,MAA+B,EAAE,OAAmB;IACpF,IAAI,CAAC,MAAM;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,CAAC;QACV,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IACjB,CAAC;IACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,UAAyB,EAAE,MAAmB;IAC7E,IAAI,OAAkC,CAAC;IACvC,IAAI,KAAK,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,GAAkB,EAAE;QACjC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,KAAK,EAAE,CAAC;QACR,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC;IAChB,CAAC,CAAC;IACF,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC9D,8FAA8F;IAC9F,KAAK,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IACpD,OAAO,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC"}