@vibesdotdev/kernel-rpc 0.0.0-stage → 1.0.0-rc.3

package/dist/transports/unix/listener/socket-state.d.ts

@@ -0,0 +1,140 @@
+import { CapabilityError, DefaultReferenceTable, type RemotePeerInfo } from '@vibesdotdev/kernel';
+import { rpcError, type ProxyFactory, type RpcConnection, type StreamBinding } from '@vibesdotdev/kernel-rpc';
+import { BindingCloses, LegFailures } from '../../../core/protocol/lifecycle/binding-close.ts';
+import { ChannelIdClaims } from '../../../core/protocol/references/channel-ids.ts';
+import { type LocalAttestationVerifier } from '../../../core/protocol/transport/local-attestation.ts';
+import { type StreamEnding } from '../../../core/protocol/wire/frame.ts';
+import type { RpcSource } from '../../../core/protocol/wire/rpc-data.ts';
+import type { ListenTarget } from "../../../schemas/contracts/transports/unix/socket-listener.ts";
+import { RecordParser, encodeMessage, type DecodedRecord, type DuplexSocket } from '../codec/socket-codec.ts';
+export /** A callback the consumer owns, as the owner holds it: it sends the call back and awaits nothing. */ type ConsumerCallback = (...args: RpcSource[]) => undefined;
+export /** One bound stream channel and the unsubscribers of its binding. */ interface OwnerChannel {
+    binding: StreamBinding;
+    unsub?: () => void;
+    unsubEnd?: () => void;
+}
+export declare const UNGOVERNED_CREDIT: StreamEnding;
+export declare function creditsUnnegotiated(channel: string): ReturnType<typeof rpcError>;
+export declare abstract class SocketState {
+    protected readonly target: ListenTarget;
+    /** Verifies the client's local attestation (RC08); absent, no identity is ever verified. */
+    protected readonly attestation?: LocalAttestationVerifier | undefined;
+    /** Advertise Date metadata at the handshake; a client may then opt in. */
+    readonly wireDates: boolean;
+    /** Advertise stream credits at the handshake; a client may then opt in. */
+    readonly wireStreamCredits: boolean;
+    protected socket: DuplexSocket | null;
+    protected readonly table: DefaultReferenceTable;
+    protected readonly rootRef: string;
+    protected readonly parser: RecordParser;
+    /** Stream bindings keyed by the channelId (the stream request id). */
+    protected readonly channels: Map<string, OwnerChannel>;
+    protected readonly channelClaims: ChannelIdClaims;
+    protected remotePeer: RemotePeerInfo;
+    /** Every binding close this connection started; failures kept typed until {@link close} reports them. */
+    protected readonly closes: BindingCloses;
+    /** Every admitted receive operation settles before teardown is acknowledged. */
+    protected readonly received: LegFailures;
+    /** The connection's close outcome, once it began closing (never rejects). */
+    protected closing: Promise<CapabilityError | null> | null;
+    protected closed: boolean;
+    protected forwarded: Promise<RpcConnection> | undefined;
+    protected readonly reverseAnswers: Map<string, {
+        promise: Promise<Readonly<{
+            id: string;
+            result?: Readonly<{
+                t: "json";
+                v: import("@vibesdotdev/kernel-rpc").RpcData;
+                dates?: readonly (readonly (string | number)[])[] | undefined;
+            }> | Readonly<{
+                t: "ref";
+                id: string & import("zod").$brand<"RefId">;
+                kind: "object" | "function" | "stream";
+                methods?: readonly string[] | undefined;
+                channels?: readonly string[] | undefined;
+            }> | Readonly<{
+                t: "stream";
+                id: string & import("zod").$brand<"RefId">;
+                channel: string;
+            }> | undefined;
+            error?: Readonly<{
+                code: string;
+                message: string;
+                details?: unknown;
+                reason?: string | undefined;
+            }> | undefined;
+        }>>;
+        resolve: (value?: Readonly<{
+            id: string;
+            result?: Readonly<{
+                t: "json";
+                v: import("@vibesdotdev/kernel-rpc").RpcData;
+                dates?: readonly (readonly (string | number)[])[] | undefined;
+            }> | Readonly<{
+                t: "ref";
+                id: string & import("zod").$brand<"RefId">;
+                kind: "object" | "function" | "stream";
+                methods?: readonly string[] | undefined;
+                channels?: readonly string[] | undefined;
+            }> | Readonly<{
+                t: "stream";
+                id: string & import("zod").$brand<"RefId">;
+                channel: string;
+            }> | undefined;
+            error?: Readonly<{
+                code: string;
+                message: string;
+                details?: unknown;
+                reason?: string | undefined;
+            }> | undefined;
+        }> | PromiseLike<Readonly<{
+            id: string;
+            result?: Readonly<{
+                t: "json";
+                v: import("@vibesdotdev/kernel-rpc").RpcData;
+                dates?: readonly (readonly (string | number)[])[] | undefined;
+            }> | Readonly<{
+                t: "ref";
+                id: string & import("zod").$brand<"RefId">;
+                kind: "object" | "function" | "stream";
+                methods?: readonly string[] | undefined;
+                channels?: readonly string[] | undefined;
+            }> | Readonly<{
+                t: "stream";
+                id: string & import("zod").$brand<"RefId">;
+                channel: string;
+            }> | undefined;
+            error?: Readonly<{
+                code: string;
+                message: string;
+                details?: unknown;
+                reason?: string | undefined;
+            }> | undefined;
+        }>> | undefined) => void;
+        reject: (reason?: any) => void;
+    }>;
+    /** Aborted at shutdown: this connection's invokes observe it through a per-connection root. */
+    protected readonly connection: AbortController;
+    /** Open until the first request: an attestation is admitted only ahead of every call. */
+    protected attestationWindow: boolean;
+    /** Open until the first request: a wire opt-in is admitted only ahead of every call, once. */
+    protected wireWindow: boolean;
+    /** Date metadata, once the client opted in to this connection's advertised capability. */
+    protected datesNegotiated: boolean;
+    /** Stream credits, once the client opted in to this connection's advertised capability. */
+    protected creditsNegotiated: boolean;
+    constructor(target: ListenTarget, transport: RemotePeerInfo['transport'], connectionId?: `${string}-${string}-${string}-${string}-${string}`, 
+    /** Verifies the client's local attestation (RC08); absent, no identity is ever verified. */
+    attestation?: LocalAttestationVerifier | undefined, 
+    /** Advertise Date metadata at the handshake; a client may then opt in. */
+    wireDates?: boolean, 
+    /** Advertise stream credits at the handshake; a client may then opt in. */
+    wireStreamCredits?: boolean);
+    /** A consumer-owned ref (callback) the OWNER must invoke back across the socket. */
+    protected readonly proxyFactory: ProxyFactory<ConsumerCallback>;
+    protected abstract write(data: Uint8Array): void;
+    abstract shutdown(): Promise<CapabilityError | null>;
+    protected abstract encode(message: Parameters<typeof encodeMessage>[0]): Uint8Array;
+    protected abstract onRecord(record: DecodedRecord): Promise<void>;
+}
+//# sourceMappingURL=socket-state.d.ts.map

package/dist/transports/unix/listener/socket-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket-state.d.ts","sourceRoot":"","sources":["../../../../src/transports/unix/listener/socket-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAClG,OAAO,EAA0B,QAAQ,EAAE,KAAK,YAAY,EAAE,KAAK,aAAa,EAAoC,KAAK,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExK,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,mDAAmD,CAAC;AAG/F,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AACnF,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+DAA+D,CAAC;AAClG,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC9G,MAAM,CAAC,sGAAsG,MACxG,gBAAgB,GAAG,CAAC,GAAG,IAAI,EAAE,SAAS,EAAE,KAAK,SAAS,CAAC;AAE5D,MAAM,CAAC,qEAAqE,WAClE,YAAY;IACrB,OAAO,EAAE,aAAa,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;CACtB;AAED,eACA,MAAM,iBAAiB,EAAE,YAAgF,CAAC;AAE1G,wBACS,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC,OAAO,QAAQ,CAAC,CAEzE;AACD,8BAAsB,WAAW;IA+C/B,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY;IAGvC,4FAA4F;IAC5F,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,wBAAwB;IACzD,0EAA0E;IAC1E,QAAQ,CAAC,SAAS;IAClB,2EAA2E;IAC3E,QAAQ,CAAC,iBAAiB;IAtD5B,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAAQ;IAE7C,SAAS,CAAC,QAAQ,CAAC,KAAK,wBAAsC;IAE9D,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEnC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAExC,sEAAsE;IACrE,SAAS,CAAC,QAAQ,CAAC,QAAQ,4BAAmC;IAE/D,SAAS,CAAC,QAAQ,CAAC,aAAa,kBAAsC;IAEtE,SAAS,CAAC,UAAU,EAAE,cAAc,CAAC;IAErC,yGAAyG;IACxG,SAAS,CAAC,QAAQ,CAAC,MAAM,gBAAuB;IAEjD,gFAAgF;IAC/E,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAE1C,6EAA6E;IAC5E,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,IAAI,CAAQ;IAElE,SAAS,CAAC,MAAM,UAAS;IAEzB,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;IAExD,SAAS,CAAC,QAAQ,CAAC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBA2Eq1vC,CAAC;OA3E1wvC;IAE7G,+FAA+F;IAC9F,SAAS,CAAC,QAAQ,CAAC,UAAU,kBAAyB;IAEvD,yFAAyF;IACxF,SAAS,CAAC,iBAAiB,UAAQ;IAEpC,8FAA8F;IAC7F,SAAS,CAAC,UAAU,UAAQ;IAE7B,0FAA0F;IACzF,SAAS,CAAC,eAAe,UAAS;IAEnC,2FAA2F;IAC1F,SAAS,CAAC,iBAAiB,UAAS;gBAGhB,MAAM,EAAE,YAAY,EACvC,SAAS,EAAE,cAAc,CAAC,WAAW,CAAC,EACtC,YAAY,sDAAsB;IAClC,4FAA4F;IACzE,WAAW,CAAC,EAAE,wBAAwB,YAAA;IACzD,0EAA0E;IACjE,SAAS,UAAQ;IAC1B,2EAA2E;IAClE,iBAAiB,UAAQ;IA4BpC,oFAAoF;IACnF,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC,gBAAgB,CAAC,CAc7D;IACH,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAChD,QAAQ,CAAC,QAAQ,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IACpD,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU;IACnF,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;CAChE"}

package/dist/transports/unix/listener/socket-state.js

@@ -0,0 +1,102 @@
+import { CapabilityError, DefaultReferenceTable } from '@vibesdotdev/kernel';
+import { RPC_ERROR, encodeValue, rpcError } from '@vibesdotdev/kernel-rpc';
+import { settled } from "../../../core/protocol/lifecycle/attempt.js";
+import { BindingCloses, LegFailures } from "../../../core/protocol/lifecycle/binding-close.js";
+import { recordRootAdvertisement } from "../../../core/protocol/references/advertisement.js";
+import { inputInvalid } from "../../../core/protocol/references/caller-input.js";
+import { ChannelIdClaims } from "../../../core/protocol/references/channel-ids.js";
+import {} from "../../../core/protocol/transport/local-attestation.js";
+import {} from "../../../core/protocol/wire/frame.js";
+import { RecordParser, encodeMessage } from "../codec/socket-codec.js";
+export /** The ending a channel gets when its consumer grants credit it never needed. */ const UNGOVERNED_CREDIT = { code: 'INVALID_INPUT', reason: 'rpc-stream-credit-ungoverned' };
+export /** The refusal of a credit-governed channel on a connection that did not negotiate stream credits. */ function creditsUnnegotiated(channel) {
+    return rpcError(RPC_ERROR.NO_CHANNEL, `Channel '${channel}' is credit-governed and this connection did not negotiate stream credits`, undefined, 'rpc-stream-credits-unnegotiated');
+}
+export class SocketState {
+    target;
+    attestation;
+    wireDates;
+    wireStreamCredits;
+    socket = null;
+    table = new DefaultReferenceTable('owner');
+    rootRef;
+    parser;
+    /** Stream bindings keyed by the channelId (the stream request id). */
+    channels = new Map();
+    channelClaims = new ChannelIdClaims(this.channels);
+    remotePeer;
+    /** Every binding close this connection started; failures kept typed until {@link close} reports them. */
+    closes = new BindingCloses();
+    /** Every admitted receive operation settles before teardown is acknowledged. */
+    received;
+    /** The connection's close outcome, once it began closing (never rejects). */
+    closing = null;
+    closed = false;
+    forwarded;
+    reverseAnswers = new Map();
+    /** Aborted at shutdown: this connection's invokes observe it through a per-connection root. */
+    connection = new AbortController();
+    /** Open until the first request: an attestation is admitted only ahead of every call. */
+    attestationWindow = true;
+    /** Open until the first request: a wire opt-in is admitted only ahead of every call, once. */
+    wireWindow = true;
+    /** Date metadata, once the client opted in to this connection's advertised capability. */
+    datesNegotiated = false;
+    /** Stream credits, once the client opted in to this connection's advertised capability. */
+    creditsNegotiated = false;
+    constructor(target, transport, connectionId = crypto.randomUUID(), 
+    /** Verifies the client's local attestation (RC08); absent, no identity is ever verified. */
+    attestation, 
+    /** Advertise Date metadata at the handshake; a client may then opt in. */
+    wireDates = false, 
+    /** Advertise stream credits at the handshake; a client may then opt in. */
+    wireStreamCredits = false) {
+        this.target = target;
+        this.attestation = attestation;
+        this.wireDates = wireDates;
+        this.wireStreamCredits = wireStreamCredits;
+        if ((target.root === undefined) === (target.connectionRoot === undefined)) {
+            throw inputInvalid('SocketListenerSession', ['root']);
+        }
+        const root = target.connectionRoot?.({ connectionId, signal: this.connection.signal }) ?? target.root;
+        if (root === undefined)
+            throw inputInvalid('SocketListenerSession', ['connectionRoot']);
+        this.rootRef = this.table.retain(root, 'object').id;
+        recordRootAdvertisement(this.table, this.rootRef, target.rootMethods);
+        // No `verified` yet: the socket's mode and loopback bind admit a local peer but verify no caller identity.
+        this.remotePeer = { runtimeId: connectionId, transport, connectionId };
+        this.received = new LegFailures(connectionId);
+        this.parser = new RecordParser((record) => {
+            if (this.closed)
+                return;
+            // Publish this operation before callbacks can close the owner synchronously.
+            const receiving = Promise.withResolvers();
+            this.received.track('receive', receiving.promise);
+            void settled(this.onRecord(record)).then((handled) => {
+                if (handled.ok) {
+                    receiving.resolve();
+                    return;
+                }
+                receiving.reject(handled.failure);
+                void this.shutdown();
+            });
+        }, () => this.datesNegotiated, () => this.creditsNegotiated);
+    }
+    /** A consumer-owned ref (callback) the OWNER must invoke back across the socket. */
+    proxyFactory = (id) => {
+        return (...args) => {
+            const req = {
+                verb: 'invoke',
+                id: crypto.randomUUID(),
+                targetRef: id,
+                method: 'call',
+                args: args.map((a) => encodeValue(a, this.table, () => ({ mode: 'inline' })))
+            };
+            // Fire-and-forget callback to the consumer (no result awaited here — the
+            // owner side does not block a PTY pump on a callback ack).
+            this.write(this.encode(req));
+            return undefined;
+        };
+    };
+}
+//# sourceMappingURL=socket-state.js.map

package/dist/transports/unix/listener/socket-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket-state.js","sourceRoot":"","sources":["../../../../src/transports/unix/listener/socket-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAuB,MAAM,qBAAqB,CAAC;AAClG,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAA+F,MAAM,yBAAyB,CAAC;AACxK,OAAO,EAAE,OAAO,EAAE,MAAM,6CAA6C,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,MAAM,mDAAmD,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AACnF,OAAO,EAAiC,MAAM,uDAAuD,CAAC;AACtG,OAAO,EAAqB,MAAM,sCAAsC,CAAC;AAGzE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAyC,MAAM,0BAA0B,CAAC;AAW9G,MAAM,CAAC,iFAAiF,CACxF,MAAM,iBAAiB,GAAiB,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;AAE1G,MAAM,CAAC,sGAAsG,UACpG,mBAAmB,CAAC,OAAe;IAC3C,OAAO,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,YAAY,OAAO,2EAA2E,EAAE,SAAS,EAAE,iCAAiC,CAAC,CAAC;AACrL,CAAC;AACD,MAAM,OAAgB,WAAW;IA+CZ;IAIA;IAEV;IAEA;IAtDD,MAAM,GAAwB,IAAI,CAAC;IAE1B,KAAK,GAAG,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE3C,OAAO,CAAS;IAEhB,MAAM,CAAe;IAExC,sEAAsE;IAClD,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAE5C,aAAa,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE5D,UAAU,CAAiB;IAErC,yGAAyG;IACrF,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;IAEjD,gFAAgF;IAC5D,QAAQ,CAAc;IAE1C,6EAA6E;IAClE,OAAO,GAA2C,IAAI,CAAC;IAExD,MAAM,GAAG,KAAK,CAAC;IAEf,SAAS,CAAqC;IAErC,cAAc,GAAG,IAAI,GAAG,EAAiE,CAAC;IAE7G,+FAA+F;IAC3E,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IAEvD,yFAAyF;IAC9E,iBAAiB,GAAG,IAAI,CAAC;IAEpC,8FAA8F;IACnF,UAAU,GAAG,IAAI,CAAC;IAE7B,0FAA0F;IAC/E,eAAe,GAAG,KAAK,CAAC;IAEnC,2FAA2F;IAChF,iBAAiB,GAAG,KAAK,CAAC;IAErC,YACqB,MAAoB,EACvC,SAAsC,EACtC,YAAY,GAAG,MAAM,CAAC,UAAU,EAAE;IAClC,4FAA4F;IACzE,WAAsC;IACzD,0EAA0E;IACjE,YAAY,KAAK;IAC1B,2EAA2E;IAClE,oBAAoB,KAAK;QARf,WAAM,GAAN,MAAM,CAAc;QAIpB,gBAAW,GAAX,WAAW,CAA2B;QAEhD,cAAS,GAAT,SAAS,CAAQ;QAEjB,sBAAiB,GAAjB,iBAAiB,CAAQ;QAElC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,EAAE,CAAC;YAC3E,MAAM,YAAY,CAAC,uBAAuB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC;QACtG,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,YAAY,CAAC,uBAAuB,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACpD,uBAAuB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACtE,2GAA2G;QAC3G,IAAI,CAAC,UAAU,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;QACvE,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;YACzC,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO;YACxB,6EAA6E;YAC7E,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,EAAQ,CAAC;YAChD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;YAClD,KAAK,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;gBACpD,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;oBAChB,SAAS,CAAC,OAAO,EAAE,CAAC;oBACpB,OAAO;gBACR,CAAC;gBACD,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAClC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,CAAC,CAAC,CAAC;QACJ,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC9D,CAAC;IAEF,oFAAoF;IAChE,YAAY,GAAmC,CAAC,EAAE,EAAE,EAAE;QACxE,OAAO,CAAC,GAAG,IAAiB,EAAE,EAAE;YAC/B,MAAM,GAAG,GAAc;gBACtB,IAAI,EAAE,QAAQ;gBACd,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;gBACvB,SAAS,EAAE,EAAE;gBACb,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;aAC7E,CAAC;YACF,yEAAyE;YACzE,2DAA2D;YAC3D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7B,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC;IACH,CAAC,CAAC;CAKF"}

package/dist/transports/unix/runtime-rpc-unix.plugin.d.ts

@@ -0,0 +1,8 @@
+import type { RuntimeRpcUnixPluginOptions } from "../../schemas/contracts/transports/unix/runtime-rpc-unix.plugin.ts";
+export { PluginOptionsInput } from "../../schemas/contracts/transports/unix/runtime-rpc-unix.plugin.ts";
+export type { RuntimeRpcUnixPluginOptions } from "../../schemas/contracts/transports/unix/runtime-rpc-unix.plugin.ts";
+/** Transport plugin options, read once (protocol/caller-input.ts). */
+export declare function createRuntimeRpcUnixPlugin(optionsInput?: RuntimeRpcUnixPluginOptions): import("@vibesdotdev/kernel").RuntimePlugin;
+export declare const runtimeRpcUnixPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default runtimeRpcUnixPlugin;
+//# sourceMappingURL=runtime-rpc-unix.plugin.d.ts.map

package/dist/transports/unix/runtime-rpc-unix.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-rpc-unix.plugin.d.ts","sourceRoot":"","sources":["../../../src/transports/unix/runtime-rpc-unix.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oEAAoE,CAAC;AAEtH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oEAAoE,CAAC;AACxG,YAAY,EAAE,2BAA2B,EAAE,MAAM,oEAAoE,CAAC;AAqBtH,sEAAsE;AAEtE,wBAAgB,0BAA0B,CAAC,YAAY,GAAE,2BAAgC,+CAgCxF;AAED,eAAO,MAAM,oBAAoB,6CAA+B,CAAC;AAEjE,eAAe,oBAAoB,CAAC"}

package/dist/transports/unix/runtime-rpc-unix.plugin.js

@@ -0,0 +1,37 @@
+import { PluginOptionsInput } from "../../schemas/contracts/transports/unix/runtime-rpc-unix.plugin.js";
+export { PluginOptionsInput } from "../../schemas/contracts/transports/unix/runtime-rpc-unix.plugin.js";
+import { createRuntimeImplementation, createRuntimePlugin } from '@vibesdotdev/kernel';
+import { rpcKind } from '@vibesdotdev/kernel-rpc';
+import { readInput } from "../../core/protocol/references/caller-input.js";
+/** Transport plugin options, read once (protocol/caller-input.ts). */
+export function createRuntimeRpcUnixPlugin(optionsInput = {}) {
+    const options = readInput('createRuntimeRpcUnixPlugin', PluginOptionsInput, optionsInput) ?? {};
+    const descriptors = (options.descriptors ?? []).filter((d) => d.transport === 'unix');
+    return createRuntimePlugin({
+        id: 'runtime-rpc-unix',
+        name: 'Runtime RPC — unix transport',
+        description: 'Unix-socket (and in-process) transport for the runtime/rpc kind. connect()/listen() over the runtime socket capability with the three-verb protocol; per-invoke gates run via the L1 pipeline.',
+        dependencies: [],
+        descriptors,
+        async onRegister(runtime) {
+            // Idempotent: the kind owner (`runtimeRpcPlugin`) or another transport may
+            // already hold runtime/rpc. `kinds: [rpcKind]` would throw on that second owner.
+            if (!runtime.hasKind(rpcKind.id))
+                runtime.registerKind(rpcKind);
+            for (const descriptor of descriptors) {
+                runtime.registerLoader('runtime/rpc', descriptor.id, async () => {
+                    const { createUnixRpcImplementation } = await import("./unix-transport.impl.js");
+                    return createRuntimeImplementation({
+                        kind: 'runtime/rpc',
+                        id: descriptor.id,
+                        constraint: { hardware: ['consumer'] },
+                        implementation: createUnixRpcImplementation(descriptor, runtime)
+                    });
+                }, { constraint: { hardware: ['consumer'] } });
+            }
+        }
+    });
+}
+export const runtimeRpcUnixPlugin = createRuntimeRpcUnixPlugin();
+export default runtimeRpcUnixPlugin;
+//# sourceMappingURL=runtime-rpc-unix.plugin.js.map

package/dist/transports/unix/runtime-rpc-unix.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-rpc-unix.plugin.js","sourceRoot":"","sources":["../../../src/transports/unix/runtime-rpc-unix.plugin.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oEAAoE,CAAC;AACxG,OAAO,EAAE,kBAAkB,EAAE,MAAM,oEAAoE,CAAC;AAkBxG,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,gDAAgD,CAAC;AAE3E,sEAAsE;AAEtE,MAAM,UAAU,0BAA0B,CAAC,eAA4C,EAAE;IACxF,MAAM,OAAO,GAAG,SAAS,CAAC,4BAA4B,EAAE,kBAAkB,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC;IAChG,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC;IACtF,OAAO,mBAAmB,CAAC;QAC1B,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,8BAA8B;QACpC,WAAW,EACV,gMAAgM;QACjM,YAAY,EAAE,EAAE;QAChB,WAAW;QACX,KAAK,CAAC,UAAU,CAAC,OAAmB;YACnC,2EAA2E;YAC3E,iFAAiF;YACjF,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAAE,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAChE,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACtC,OAAO,CAAC,cAAc,CACrB,aAAa,EACb,UAAU,CAAC,EAAE,EACb,KAAK,IAAI,EAAE;oBACV,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;oBACjF,OAAO,2BAA2B,CAAC;wBAClC,IAAI,EAAE,aAAa;wBACnB,EAAE,EAAE,UAAU,CAAC,EAAE;wBACjB,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE;wBACtC,cAAc,EAAE,2BAA2B,CAAC,UAAU,EAAE,OAAO,CAAC;qBAChE,CAAC,CAAC;gBACJ,CAAC,EACD,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAC1C,CAAC;YACH,CAAC;QACF,CAAC;KACD,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,EAAE,CAAC;AAEjE,eAAe,oBAAoB,CAAC"}

package/dist/transports/unix/socket-handshake.d.ts

@@ -0,0 +1,23 @@
+import type { SocketHandshakeFailures } from "../../schemas/contracts/transports/unix/socket-handshake.ts";
+export { SocketHandshakeSchema } from "../../schemas/contracts/transports/unix/socket-handshake.ts";
+export type { SocketHandshake, SocketHandshakeFailures } from "../../schemas/contracts/transports/unix/socket-handshake.ts";
+/**
+ * The consumer's half of the socket handshake, shared by the unix and tcp
+ * transports: read the owner's root-ref MSG record off a freshly connected
+ * socket, then attach a {@link SocketConnection} to it.
+ *
+ * This is the socket transports' I/O primitive for the connect state machine
+ * (`attemptRpcConnect`). It keeps no timer: the attempt's deadline, the
+ * caller's cancellation and runtime disposal all arrive as `signal`, and an
+ * abort destroys the socket and rejects with the signal's reason.
+ */
+import { type RpcConnection } from '@vibesdotdev/kernel-rpc';
+import type { DuplexSocketStream } from '@vibesdotdev/kernel/socket';
+import { type LocalAttestationPresentation } from '../../core/protocol/transport/local-attestation.ts';
+/**
+ * Complete the handshake on `socket`. Resolves the attached connection once the
+ * owner advertises its root ref; rejects (and destroys the socket) on a
+ * malformed handshake, an early close or error, or when `signal` aborts.
+ */
+export declare function dialSocketSession(socket: DuplexSocketStream, signal: AbortSignal, failures: SocketHandshakeFailures, attestation?: LocalAttestationPresentation): Promise<RpcConnection>;
+//# sourceMappingURL=socket-handshake.d.ts.map

package/dist/transports/unix/socket-handshake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket-handshake.d.ts","sourceRoot":"","sources":["../../../src/transports/unix/socket-handshake.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6DAA6D,CAAC;AAE3G,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,YAAY,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,6DAA6D,CAAC;AAC5H;;;;;;;;;GASG;AAEH,OAAO,EAAW,KAAK,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,EAA2B,KAAK,4BAA4B,EAAE,MAAM,oDAAoD,CAAC;AA0HhI;;;;GAIG;AACH,wBAAgB,iBAAiB,CAChC,MAAM,EAAE,kBAAkB,EAC1B,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,uBAAuB,EACjC,WAAW,CAAC,EAAE,4BAA4B,GACxC,OAAO,CAAC,aAAa,CAAC,CAIxB"}

package/dist/transports/unix/socket-handshake.js

@@ -0,0 +1,156 @@
+import { SocketHandshakeSchema } from "../../schemas/contracts/transports/unix/socket-handshake.js";
+export { SocketHandshakeSchema } from "../../schemas/contracts/transports/unix/socket-handshake.js";
+/**
+ * The consumer's half of the socket handshake, shared by the unix and tcp
+ * transports: read the owner's root-ref MSG record off a freshly connected
+ * socket, then attach a {@link SocketConnection} to it.
+ *
+ * This is the socket transports' I/O primitive for the connect state machine
+ * (`attemptRpcConnect`). It keeps no timer: the attempt's deadline, the
+ * caller's cancellation and runtime disposal all arrive as `signal`, and an
+ * abort destroys the socket and rejects with the signal's reason.
+ */
+import { asRefId } from '@vibesdotdev/kernel-rpc';
+import { attempt } from "../../core/protocol/lifecycle/attempt.js";
+import { socketAttestationRecord } from "../../core/protocol/transport/local-attestation.js";
+import { BackpressureWriter, RecordParser, encodeMessage, wrapNodeSocket } from "./codec/socket-codec.js";
+import { SocketConnection } from "./consumer/socket-connection.js";
+/** Wrap an attached {@link SocketConnection} as an {@link RpcConnection}. */
+function toRpcConnection(connection) {
+    let closing;
+    return {
+        rootRef: asRefId(connection.rootRef),
+        send: (req) => connection.send(req),
+        openStream: (ref, channel) => connection.openStream(ref, channel),
+        // The reverse leg: owner-initiated callback invokes route into the handler
+        // `wireConsumer` registers here (the symmetric-table contract over a socket).
+        onRequest: (handler) => connection.setRequestHandler(handler),
+        closed: connection.closed,
+        // The close reports a kept teardown failure (a dead socket, a refused end), typed.
+        close: () => {
+            if (closing)
+                return closing;
+            const outcome = Promise.withResolvers();
+            closing = outcome.promise;
+            const closed = attempt(() => {
+                connection.close();
+                return connection.closeFailure();
+            });
+            if (!closed.ok)
+                outcome.reject(closed.failure);
+            else if (closed.value)
+                outcome.reject(closed.value);
+            else
+                outcome.resolve();
+            return closing;
+        }
+    };
+}
+/** One dial: the socket's events drive it to a connection, or to the typed failure that ended it. */
+class SocketDial {
+    socket;
+    signal;
+    failures;
+    attestation;
+    resolve;
+    reject;
+    connection = null;
+    writer = null;
+    settled = false;
+    handshakeParser = new RecordParser((record) => this.onHandshake(record));
+    constructor(socket, signal, failures, attestation, resolve, reject) {
+        this.socket = socket;
+        this.signal = signal;
+        this.failures = failures;
+        this.attestation = attestation;
+        this.resolve = resolve;
+        this.reject = reject;
+    }
+    start() {
+        this.socket.on('data', this.onData);
+        this.socket.on('drain', this.onDrain);
+        this.socket.on('close', this.onClose);
+        // Post-handshake socket errors tear the connection down instead of throwing.
+        this.socket.on('error', this.onSocketError);
+        if (this.signal.aborted)
+            this.onAbort();
+        else
+            this.signal.addEventListener('abort', this.onAbort, { once: true });
+    }
+    fail(failure) {
+        if (this.settled)
+            return;
+        this.settled = true;
+        this.signal.removeEventListener('abort', this.onAbort);
+        this.socket.destroy();
+        this.reject(failure);
+    }
+    onAbort = () => this.fail(this.signal.reason);
+    onHandshake(record) {
+        if (this.settled)
+            return;
+        if (record.kind !== 'msg') {
+            this.fail(this.failures.invalid('Invalid RPC handshake record'));
+            return;
+        }
+        const parsed = SocketHandshakeSchema.safeParse(record.message);
+        if (!parsed.success) {
+            this.fail(this.failures.invalid('Invalid RPC handshake root reference'));
+            return;
+        }
+        const result = parsed.data.result;
+        this.settled = true;
+        this.signal.removeEventListener('abort', this.onAbort);
+        // Stream credits are taken whenever the owner advertises them: they govern only the channels the owner opens credit-governed.
+        const streamCredits = result.v.wire?.streamCredits === true;
+        const connection = new SocketConnection(result.v.rootRef, streamCredits);
+        const writer = new BackpressureWriter(wrapNodeSocket(this.socket));
+        this.connection = connection;
+        this.writer = writer;
+        connection.attach(writer);
+        // Present the local attestation first, ahead of any request, so the owner
+        // admits the declared launch identity for this connection's whole life.
+        if (this.attestation)
+            writer.write(encodeMessage(socketAttestationRecord(this.attestation)));
+        // The one wire opt-in, also ahead of any request.
+        if (streamCredits)
+            writer.write(encodeMessage({ wire: { streamCredits: true } }));
+        this.resolve(toRpcConnection(connection));
+    }
+    onData = (data) => {
+        if (this.connection) {
+            this.connection.feed(data);
+            return;
+        }
+        const pushed = attempt(() => this.handshakeParser.push(data));
+        if (!pushed.ok)
+            this.fail(this.failures.invalid('Invalid RPC handshake', pushed.failure));
+    };
+    onDrain = () => {
+        this.writer?.drain();
+    };
+    onClose = () => {
+        if (this.connection)
+            this.connection.close();
+        else
+            this.fail(this.failures.closed());
+    };
+    /** A socket error before the handshake fails the dial; after it, the connection closes carrying why. */
+    onSocketError = (error) => {
+        if (this.connection)
+            this.connection.close(error);
+        else
+            this.fail(this.failures.failed(error));
+    };
+}
+/**
+ * Complete the handshake on `socket`. Resolves the attached connection once the
+ * owner advertises its root ref; rejects (and destroys the socket) on a
+ * malformed handshake, an early close or error, or when `signal` aborts.
+ */
+export function dialSocketSession(socket, signal, failures, attestation) {
+    return new Promise((resolve, reject) => {
+        new SocketDial(socket, signal, failures, attestation, resolve, reject).start();
+    });
+}
+//# sourceMappingURL=socket-handshake.js.map

package/dist/transports/unix/socket-handshake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket-handshake.js","sourceRoot":"","sources":["../../../src/transports/unix/socket-handshake.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AAEpG;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAsB,MAAM,yBAAyB,CAAC;AAEtE,OAAO,EAAE,OAAO,EAAE,MAAM,0CAA0C,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAqC,MAAM,oDAAoD,CAAC;AAChI,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAsB,MAAM,yBAAyB,CAAC;AAC9H,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAEnE,6EAA6E;AAC7E,SAAS,eAAe,CAAC,UAA4B;IACpD,IAAI,OAAkC,CAAC;IACvC,OAAO;QACN,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QACpC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QACnC,UAAU,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;QACjE,2EAA2E;QAC3E,8EAA8E;QAC9E,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,OAAO,CAAC;QAC7D,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,mFAAmF;QACnF,KAAK,EAAE,GAAG,EAAE;YACX,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;YAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,EAAQ,CAAC;YAC9C,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;YAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE;gBAC3B,UAAU,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,UAAU,CAAC,YAAY,EAAE,CAAC;YAClC,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;iBAC1C,IAAI,MAAM,CAAC,KAAK;gBAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;;gBAC/C,OAAO,CAAC,OAAO,EAAE,CAAC;YACvB,OAAO,OAAO,CAAC;QAChB,CAAC;KACD,CAAC;AACH,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU;IAOG;IACA;IACA;IACA;IACA;IACA;IAXV,UAAU,GAA4B,IAAI,CAAC;IAC3C,MAAM,GAA8B,IAAI,CAAC;IACzC,OAAO,GAAG,KAAK,CAAC;IACP,eAAe,GAAG,IAAI,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAE1F,YACkB,MAA0B,EAC1B,MAAmB,EACnB,QAAiC,EACjC,WAAqD,EACrD,OAA4C,EAC5C,MAAgC;QALhC,WAAM,GAAN,MAAM,CAAoB;QAC1B,WAAM,GAAN,MAAM,CAAa;QACnB,aAAQ,GAAR,QAAQ,CAAyB;QACjC,gBAAW,GAAX,WAAW,CAA0C;QACrD,YAAO,GAAP,OAAO,CAAqC;QAC5C,WAAM,GAAN,MAAM,CAA0B;IAC/C,CAAC;IAEJ,KAAK;QACJ,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,6EAA6E;QAC7E,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,EAAE,CAAC;;YACnC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IAEO,IAAI,CAAC,OAAc;QAC1B,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IAEgB,OAAO,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE7D,WAAW,CAAC,MAAqB;QACxC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACjE,OAAO;QACR,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,CAAC;YACzE,OAAO;QACR,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,8HAA8H;QAC9H,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,aAAa,KAAK,IAAI,CAAC;QAC5D,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1B,0EAA0E;QAC1E,wEAAwE;QACxE,IAAI,IAAI,CAAC,WAAW;YAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAC7F,kDAAkD;QAClD,IAAI,aAAa;YAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3C,CAAC;IAEgB,MAAM,GAAG,CAAC,IAAgB,EAAQ,EAAE;QACpD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO;QACR,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC;IAEe,OAAO,GAAG,GAAS,EAAE;QACrC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC;IAEe,OAAO,GAAG,GAAS,EAAE;QACrC,IAAI,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;;YACxC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC;IAEF,wGAAwG;IACvF,aAAa,GAAG,CAAC,KAAY,EAAQ,EAAE;QACvD,IAAI,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;;YAC7C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAChC,MAA0B,EAC1B,MAAmB,EACnB,QAAiC,EACjC,WAA0C;IAE1C,OAAO,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrD,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;IAChF,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/transports/unix/unix-transport.impl.d.ts

@@ -0,0 +1,31 @@
+import { wireConsumer, type RuntimeRpcDescriptor, type RuntimeRpcImplementation } from '@vibesdotdev/kernel-rpc';
+import type { LocalAttestationVerifier } from '../../core/protocol/transport/local-attestation.ts';
+import type { RpcSocketRuntime, UnixListener } from "../../schemas/contracts/transports/unix/unix-transport.impl.ts";
+import { type ListenTarget } from './listener/socket-listener.ts';
+export { connectUnix } from "./consumer/connect-unix.ts";
+export { ConnectUnixInput, ListenUnixInput } from "../../schemas/contracts/transports/unix/unix-transport.impl.ts";
+export type { RpcSocketRuntime, UnixListener } from "../../schemas/contracts/transports/unix/unix-transport.impl.ts";
+/**
+ * Listen on a unix socket, exposing `target` as a remote runtime. Each accepted
+ * connection gets its own {@link SocketListenerSession} (per-connection ref table).
+ */
+export declare function listenUnix(socketPathInput: string, targetInput: ListenTarget, optionsInput: {
+    runtime: RpcSocketRuntime;
+    /** Verifies a client's local attestation; a verified client's declared identity is admitted (RC08). */
+    attestation?: LocalAttestationVerifier;
+    /**
+     * Advertise Date metadata at each handshake; a client that opts in ahead of its
+     * first request gets Dates encoded both ways. Off by default.
+     */
+    wireDates?: boolean;
+    /**
+     * Advertise stream credits at each handshake; a client that opts in may open
+     * credit-governed channels (CREDIT frames, typed CLOSE endings). Off by default.
+     */
+    streamCredits?: boolean;
+}): Promise<UnixListener>;
+/** Build a `runtime/rpc` impl (a transport) for a unix descriptor. */
+export declare function createUnixRpcImplementation(descriptorInput: RuntimeRpcDescriptor, runtime: RpcSocketRuntime): RuntimeRpcImplementation;
+export type { ListenTarget } from './listener/socket-listener.ts';
+export { wireConsumer };
+//# sourceMappingURL=unix-transport.impl.d.ts.map

package/dist/transports/unix/unix-transport.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unix-transport.impl.d.ts","sourceRoot":"","sources":["../../../src/transports/unix/unix-transport.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,oBAAoB,EAAE,KAAK,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAOjH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,gEAAgE,CAAC;AAIrH,OAAO,EAAyB,KAAK,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAEzF,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gEAAgE,CAAC;AAEnH,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,gEAAgE,CAAC;AAErH;;;GAGG;AACH,wBAAsB,UAAU,CAC/B,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,YAAY,EACzB,YAAY,EAAE;IACb,OAAO,EAAE,gBAAgB,CAAC;IAC1B,uGAAuG;IACvG,WAAW,CAAC,EAAE,wBAAwB,CAAC;IACvC;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACxB,GACC,OAAO,CAAC,YAAY,CAAC,CA4EvB;AAED,sEAAsE;AACtE,wBAAgB,2BAA2B,CAC1C,eAAe,EAAE,oBAAoB,EACrC,OAAO,EAAE,gBAAgB,GACvB,wBAAwB,CAQ1B;AAED,YAAY,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAElE,OAAO,EAAE,YAAY,EAAE,CAAC"}