@actcore/web-runtime 0.1.0

package/LICENSE

@@ -0,0 +1,10 @@
+This project is dual-licensed under your choice of:
+
+  - MIT License (see LICENSE-MIT or https://opensource.org/licenses/MIT)
+  - Apache License, Version 2.0 (see LICENSE-APACHE or http://www.apache.org/licenses/LICENSE-2.0)
+
+at your option.
+
+Unless you explicitly state otherwise, any contribution intentionally submitted
+for inclusion in this project by you, as defined in the Apache-2.0 license,
+shall be dual-licensed as above, without any additional terms or conditions.

package/README.md

@@ -0,0 +1,148 @@
+# @actcore/web-runtime
+
+> Web runtime for [ACT](https://actcore.dev) — load and run signed wasm agent tools in the browser, and expose them to browser agents via WebMCP.
+
+The whole agent stack, no server:
+
+| | Where it lives |
+|---|---|
+| LLM | wherever you want — remote API, or local via [WebLLM](https://github.com/mlc-ai/web-llm) |
+| **Tools** | **the browser, via this package** |
+| User data | the browser (IndexedDB, OPFS) |
+
+ACT components are sandboxed wasm modules signed by their author and distributed via OCI registries. This package loads one in a browser tab using [jco](https://github.com/bytecodealliance/jco)'s in-browser transpiler — no server, no Node, no `npm install` required for the *tool*. The end user opens a page; the tool runs in their tab.
+
+## Status
+
+`0.1.0`. The runtime works end-to-end for `act:tools/tool-provider@0.2.0` (immediate **and** streaming results) and `act:sessions/session-provider@0.2.0`. Loaded tools can be exposed to a browser agent via **WebMCP** (`document.modelContext`). OCI pull and Sigstore verification are scheduled for follow-up versions.
+
+## Browser support
+
+Requires [JSPI (JavaScript Promise Integration)](https://github.com/WebAssembly/js-promise-integration) for WebAssembly:
+
+| Browser | JSPI status (2026) | Source |
+|---|---|---|
+| Chrome 137+ stable / Edge | **shipped by default** | [Interop 2026 #10](https://webkit.org/blog/17818/announcing-interop-2026/) |
+| Firefox Nightly 152+ | 93% WPT pass rate | [wpt.fyi](https://wpt.fyi/results/wasm/jsapi/jspi?label=master&label=experimental&aligned&view=interop&q=label%3Ainterop-2026-jspi-for-wasm) |
+| Safari Tech Preview 243+ | 93% WPT pass rate | wpt.fyi |
+| Firefox stable / Safari stable | shipping during 2026 per [Interop 2026 pledge](https://webkit.org/blog/17818/announcing-interop-2026/) | — |
+
+All four major browsers committed to JSPI parity in Interop 2026.
+
+## Install
+
+```sh
+npm install @actcore/web-runtime @bytecodealliance/jco @bytecodealliance/preview2-shim
+```
+
+`jco` (which pulls in `@bytecodealliance/jco-transpile`) and `preview2-shim` are
+runtime dependencies; bundle them with your app or load via importmap.
+
+> **jco browser note.** jco's documented browser entry
+> (`@bytecodealliance/jco/component`) is broken in the published package — the
+> `obj/` glue it imports is gitignored out of the tarball — and
+> `@bytecodealliance/jco-transpile`'s `.` export statically imports node:
+> builtins, so it can't load under native ESM. This package therefore drives the
+> one browser-safe artifact jco ships: the vendored, componentized bindgen at
+> `@bytecodealliance/jco-transpile/vendor/js-component-bindgen-component.js`
+> (the same `generate()` jco's browser entry wraps). That subpath is not in
+> jco-transpile's `exports` map, so map it explicitly in your importmap (see
+> [`examples/basic.html`](examples/basic.html)) or add a bundler resolve alias.
+
+## Quick start
+
+```ts
+import { runComponent } from '@actcore/web-runtime';
+
+const wasm = new Uint8Array(await (await fetch('/time.wasm')).arrayBuffer());
+
+const { toolProvider } = await runComponent(wasm, {
+  // Where the @bytecodealliance/preview2-shim browser files live. Use a CDN,
+  // your bundler's resolved path, or your dev-server alias. preview2-shim 0.19
+  // serves its browser build from dist/browser/ (it was lib/browser/ before).
+  shimBase: 'https://esm.sh/@bytecodealliance/preview2-shim@0.19.0/dist/browser/',
+});
+
+const { tools } = await toolProvider.listTools([]);
+console.log(tools); // [{ name: 'get_current_time', description: ..., parametersSchema: ... }]
+
+const result = await toolProvider.callTool(
+  'get_current_time',
+  new Uint8Array([0xa0]),  // CBOR {} — empty args
+  [],
+);
+
+if (result.tag === 'immediate') {
+  for (const ev of result.val) {
+    if (ev.tag === 'content') {
+      console.log(new TextDecoder().decode(ev.val.data));  // → "2026-05-11T15:13:23.464+00:00"
+    }
+  }
+}
+```
+
+See [`examples/basic.html`](examples/basic.html) for a runnable demo. From a fresh
+clone, `npm run sync-wit` once to fetch the WIT deps (via [`wkg`](https://github.com/bytecodealliance/wasm-pkg-tools); see [`wit/README.md`](wit/README.md)), then `npm run build`. Run the demo with `npm run example` (serves the package root so the importmap's `/node_modules/…` paths resolve) and open `http://localhost:8765/examples/basic.html`.
+
+## Expose tools to a browser agent (WebMCP)
+
+Once a component is loaded, register its tools on the browser's native
+[WebMCP](https://webmachinelearning.github.io/webmcp/) surface
+(`document.modelContext`) so a WebMCP-capable agent can discover and call them:
+
+```ts
+import { runComponent, exposeToWebmcp, isWebmcpAvailable } from '@actcore/web-runtime';
+
+const { toolProvider } = await runComponent(wasm, { shimBase });
+const { tools } = await toolProvider.listTools([]);
+
+if (isWebmcpAvailable()) {
+  const exposure = await exposeToWebmcp(toolProvider, tools);
+  console.log(`${exposure.count} tools exposed on document.modelContext`);
+
+  // …later, when swapping components or tearing down:
+  exposure.dispose();  // unregisters every tool (aborts the registration signal)
+}
+```
+
+`exposeToWebmcp(provider, tools, options?)` is opt-in and headless — no UI, no
+side effects until you call it. It maps each ACT tool to a WebMCP descriptor
+(the tool's JSON-Schema parameters become `inputSchema`; `std:read-only`
+metadata becomes `readOnlyHint`; output is marked `untrustedContentHint`),
+bridges each descriptor's `execute` to the component's `callTool` (dcbor-encoded
+args, `std:session-id` forwarding via `options.getSessionId`, tool-events
+drained to text), and unregisters via an `AbortSignal` when you call `dispose()`.
+
+Native WebMCP ships in Chrome 149 behind an origin trial /
+`chrome://flags/#enable-webmcp-testing`. Where it is absent,
+`isWebmcpAvailable()` returns `false` and `exposeToWebmcp` no-ops
+(`{ count: 0, available: false }`), so this is safe to call unconditionally.
+
+## How it works
+
+`runComponent(bytes, options)`:
+
+1. Calls jco's low-level bindgen `generate()` with `asyncMode: jspi` and an explicit `map` pointing WASI specifiers at `preview2-shim` browser builds (and `wasi:http` p3 at the bundled shim). Driving `generate()` directly — rather than `transpileBytes` — keeps the transpiler node-free and lets us own the WASI map, sidestepping jco's default map that routes p3 WASI onto the Node-only `preview3-shim`. `generate()` is a single synchronous wasm call that blocks for ~250ms on a 1MB component but several **seconds** on a large one (e.g. a 100 MB+ Python component), so it runs in a **Web Worker** — the page stays responsive while a big component transpiles. If a worker can't be created or loaded (e.g. an importmap-only page, where workers can't resolve the bindgen specifier), it transparently falls back to a main-thread transpile.
+2. **Caches** the transpile output in IndexedDB, keyed by `@actcore/web-runtime`'s version and the SHA-256 of the component bytes. A second load of the same component skips `generate()` entirely (no worker, no multi-second wait). Bumping the package version invalidates the cache, since a new release may ship a different transpiler. Pass `cache: false` to bypass it; call `clearTranspileCache()` to wipe it. The cache silently disables itself where IndexedDB / `crypto.subtle` is unavailable.
+3. Applies a thin patch to the emitted JS:
+   - rewrite bare `preview2-shim` specifiers to absolute URLs (blob: contexts can't see the page's importmap),
+   - short-circuit future/stream drops whose wasm-side end was already transferred (a wit-bindgen Rust quirk on the wasi:http path).
+4. Materialises the patched JS + `.core.wasm` as blob URLs, dynamic-imports the entry module, and returns the exported `toolProvider` (and `sessionProvider`, if the component exports one).
+
+The wasip3-async lift bugs that needed heavy patching under jco 1.19 (STREAM_TABLES/FUTURE_TABLES declarations, `HostFuture`, host-resource lowering, `_liftFlatRecord` task-return, storageLen accounting) are all fixed upstream as of jco 1.24 (bindgen 2.0.3) — jco lifts `list-tools` / `call-tool` results natively. This package is now a thin glue layer.
+
+> **Bundler note (Web Worker).** The transpile worker is created with
+> `new Worker(new URL('./transpile.worker.js', import.meta.url), { type: 'module' })`
+> and dynamic-imports the bindgen, so it code-splits. Configure your bundler to
+> emit workers as ES modules — in Vite that's `worker: { format: 'es' }` (the
+> default `iife` rejects code-splitting workers). No config is needed for
+> importmap / no-bundler pages: they hit the main-thread fallback.
+
+## Roadmap
+
+- v0.2 — OCI pull and Sigstore (cosign) signature verification, via a shared `act-oci-verify` Rust crate compiled to both native (for `act-cli`) and `wasm32-wasip2` (loaded here, hash-pinned in source).
+- v0.x — Web Worker isolation (run *components* off the main thread; transpilation already runs in a worker).
+
+## License
+
+MIT OR Apache-2.0

package/dist/cache.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Persistent cache for jco transpile output.
+ *
+ * Transpiling a wasm component (jco's `generate()`) is the expensive step in
+ * {@link ./transpile.ts}: for large components (tens of MB) it runs for several
+ * seconds. The output is a pure function of the input bytes plus a handful of
+ * options, so we cache it in IndexedDB keyed by a content hash and replay it on
+ * subsequent loads, skipping `generate()` entirely.
+ *
+ * Cache key (see {@link deriveTranspileCacheKey}) includes, by construction:
+ *   - {@link HOST_VERSION} — a new @actcore/host release may ship new transpiler
+ *     patches or a new bundled jco/bindgen, so its output format can change.
+ *   - the SHA-256 of the original component bytes ("original module hash").
+ *   - the transpile options that change `generate()`'s output (`name`, and the
+ *     shim URLs that get baked into the emitted import specifiers).
+ *
+ * Everything here is best-effort and browser-only: if IndexedDB or
+ * `crypto.subtle` is unavailable (non-secure context, Node, old engine) the
+ * cache silently disables itself and callers fall back to a live transpile.
+ */
+/** jco transpile output: `[filename, bytes]` pairs (entry .js, .core.wasm, …). */
+export type TranspiledFiles = Array<[string, Uint8Array]>;
+/**
+ * The same files as `Blob`s — the shape we persist and replay.
+ *
+ * IndexedDB structured-clones a stored value: a `Uint8Array` is copied byte for
+ * byte (a full ~100MB+ copy of the core wasm on *every* write and *every* read),
+ * whereas a `Blob` is cloned by reference and stored disk-backed. Replaying a
+ * cached `Blob` is then a zero-copy `URL.createObjectURL(blob)` instead of
+ * materializing the bytes and wrapping them in a fresh `Blob`. So we store and
+ * hand back Blobs; the caller converts `generate()`'s Uint8Array output once.
+ */
+export type CachedFiles = Array<[string, Blob]>;
+/** Inputs that determine a transpile output, and thus the cache key. */
+export interface TranspileCacheKeyInput {
+    /** The original (packed) wasm component bytes. */
+    bytes: Uint8Array;
+    /** jco output basename — affects emitted filenames and identifiers. */
+    name: string;
+    /** preview2-shim base URL — baked into emitted WASI import specifiers. */
+    shimBase: string;
+    /** wasi:http p3 shim URL — baked into emitted wasi:http import specifiers. */
+    wasiHttpShimUrl: string;
+    /** wasi:sockets shim URL — baked into emitted wasi:sockets import specifiers. */
+    wasiSocketsShimUrl: string;
+}
+/**
+ * Derive the stable cache key for a transpile. Pure (modulo the SHA-256 of the
+ * bytes) and deterministic — same inputs always yield the same key. NUL
+ * separators keep the otherwise-free-form fields unambiguous.
+ *
+ * The returned string always contains {@link HOST_VERSION} and the module hash,
+ * satisfying the "key must include host-browser version + original module hash"
+ * contract.
+ */
+export declare function deriveTranspileCacheKey(input: TranspileCacheKeyInput): Promise<string>;
+/**
+ * Look up a cached transpile output. Returns `null` on miss, on any error, or
+ * when the cache is unavailable — never throws. A record written by a different
+ * `HOST_VERSION` is ignored (defensive; the key already encodes the version).
+ */
+export declare function getCachedFiles(key: string): Promise<CachedFiles | null>;
+/**
+ * Store a transpile output. Best-effort: quota errors and the like are swallowed
+ * (caching is an optimization, never a correctness requirement).
+ */
+export declare function putCachedFiles(key: string, files: CachedFiles): Promise<void>;
+/** Drop every cached transpile output. Useful for debugging / "force refresh". */
+export declare function clearTranspileCache(): Promise<void>;
+//# sourceMappingURL=cache.d.ts.map

package/dist/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../src/cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,kFAAkF;AAClF,MAAM,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAE1D;;;;;;;;;GASG;AACH,MAAM,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AAEhD,wEAAwE;AACxE,MAAM,WAAW,sBAAsB;IACrC,kDAAkD;IAClD,KAAK,EAAE,UAAU,CAAC;IAClB,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,eAAe,EAAE,MAAM,CAAC;IACxB,iFAAiF;IACjF,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AA6BD;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,MAAM,CAAC,CAWjB;AAwBD;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAqB7E;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBnF;AAED,kFAAkF;AAClF,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAiBzD"}

package/dist/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../src/cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AA+B5C,MAAM,OAAO,GAAG,cAAc,CAAC;AAC/B,MAAM,UAAU,GAAG,iBAAiB,CAAC;AACrC,MAAM,UAAU,GAAG,CAAC,CAAC;AAcrB,kFAAkF;AAClF,KAAK,UAAU,SAAS,CAAC,KAAiB;IACxC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC;IACzC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAqB,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7D,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAA6B;IAE7B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO;QACL,IAAI;QACJ,YAAY;QACZ,IAAI;QACJ,KAAK,CAAC,IAAI;QACV,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,eAAe;QACrB,KAAK,CAAC,kBAAkB;KACzB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,sEAAsE;AACtE,SAAS,cAAc;IACrB,OAAO,CACL,OAAO,SAAS,KAAK,WAAW;QAChC,OAAO,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,UAAU,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,MAAM;IACb,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAChD,GAAG,CAAC,eAAe,GAAG,GAAG,EAAE;YACzB,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;YACtB,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9C,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACnC,CAAC;QACH,CAAC,CAAC;QACF,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,GAAG,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAW;IAC9C,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC5E,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;gBAClD,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAChD,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAiC,CAAC,CAAC;gBACrE,GAAG,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACzE,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;gBAC1E,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,KAAkB;IAClE,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO;IAC9B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBACnD,MAAM,MAAM,GAAgB;oBAC1B,MAAM,EAAE,CAAC;oBACT,WAAW,EAAE,YAAY;oBACzB,KAAK;oBACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC;gBACF,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAC5C,EAAE,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;gBAChC,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBACrE,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;YACxE,CAAC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO;IAC9B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBACnD,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;gBACnC,EAAE,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;gBAChC,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;YACzE,CAAC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,UAAU;IACZ,CAAC;AACH,CAAC"}

package/dist/host-api.d.ts

@@ -0,0 +1,81 @@
+import type { ListToolsResponse, ToolResult } from './generated/interfaces/act-tools-tool-provider.js';
+import type { Cbor, Metadata } from './generated/interfaces/act-core-types.js';
+/**
+ * Typed mirror of the `act:tools/tool-provider@0.2.0` interface as exposed
+ * by jco-transpiled modules. Matches the generated types in
+ * `./generated/interfaces/act-tools-tool-provider.js`.
+ */
+export interface ToolProvider {
+    listTools(metadata: Metadata): Promise<ListToolsResponse>;
+    callTool(name: string, args: Cbor, metadata: Metadata): Promise<ToolResult>;
+}
+/**
+ * Typed mirror of `act:sessions/session-provider@0.2.0` as exposed by
+ * jco-transpiled modules (present only on session-provider components).
+ */
+export interface SessionProvider {
+    getOpenSessionArgsSchema(metadata: Metadata): Promise<string>;
+    openSession(args: Metadata, metadata: Metadata): Promise<{
+        id: string;
+        metadata: Metadata;
+    }>;
+    closeSession(sessionId: string): void;
+}
+export interface ComponentInstance {
+    /** `act:tools/tool-provider@0.2.0` if the component exports it. */
+    toolProvider: ToolProvider;
+    /** `act:sessions/session-provider@0.2.0` if the component exports it. */
+    sessionProvider?: SessionProvider;
+}
+export interface RunComponentOptions {
+    /** Human-readable component name; used for output filenames during transpile. */
+    name?: string;
+    /**
+     * Absolute base URL for the `@bytecodealliance/preview2-shim` browser-build
+     * directory (`dist/browser/` as of preview2-shim 0.19; it was `lib/browser/`
+     * before). Required: we drive jco's low-level bindgen `generate()` directly
+     * and pass our own WASI specifier map, so callers must point at a concrete
+     * shim location (CDN, vendored copy, or bundler-resolved path).
+     *
+     * Example: `'https://cdn.jsdelivr.net/npm/@bytecodealliance/preview2-shim@0.19.0/dist/browser/'`
+     */
+    shimBase: string;
+    /**
+     * Optional absolute URL of `dist/shims/wasi-http.js` from `@actcore/web-runtime`.
+     * Defaults to the bundled shim resolved relative to host-api's module URL.
+     * Override when `@actcore/web-runtime` is loaded from one origin and you want the
+     * wasi:http p3 shim served from another.
+     */
+    wasiHttpShimUrl?: string;
+    /**
+     * Optional absolute URL of `dist/shims/sockets.js` from `@actcore/web-runtime`.
+     * Defaults to the bundled shim resolved relative to host-api's module URL.
+     * host-browser ships its own wasi:sockets shim because preview2-shim's
+     * browser build omits the resource-class constructors (ResolveAddressStream,
+     * Network, TcpSocket, UdpSocket, …) that any wasi:http-importing component
+     * needs present at instantiation. Override when serving shims from another
+     * origin (same reason as {@link wasiHttpShimUrl}).
+     */
+    wasiSocketsShimUrl?: string;
+    /**
+     * Persist + reuse the jco transpile output in IndexedDB, keyed by
+     * `@actcore/web-runtime`'s version and the SHA-256 of the component bytes. Defaults
+     * to `true`. Set `false` to always transpile fresh (e.g. when debugging the
+     * transpiler). No effect where IndexedDB / `crypto.subtle` is unavailable —
+     * the cache silently disables itself there. See {@link clearTranspileCache}.
+     */
+    cache?: boolean;
+}
+/**
+ * Transpile and instantiate an ACT wasm component in the current page,
+ * returning a typed handle to its exported provider interfaces.
+ *
+ * Requires:
+ * - `WebAssembly.promising` (JSPI). Available by default in Chrome 137+,
+ *   in Firefox Nightly 152+, and in Safari Tech Preview 243+. Tracking
+ *   issue: Interop 2026 focus area #10.
+ * - The component must be a `wasip3`-style ACT component packed via
+ *   `act-build pack` and exporting `act:tools/tool-provider@0.2.0`.
+ */
+export declare function runComponent(bytes: Uint8Array, options: RunComponentOptions): Promise<ComponentInstance>;
+//# sourceMappingURL=host-api.d.ts.map

package/dist/host-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-api.d.ts","sourceRoot":"","sources":["../src/host-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,UAAU,EACX,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,0CAA0C,CAAC;AAM/E;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC1D,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAC7E;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAC;IAC7F,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,mEAAmE;IACnE,YAAY,EAAE,YAAY,CAAC;IAC3B,yEAAyE;IACzE,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;OAQG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,iBAAiB,CAAC,CA2C5B"}

package/dist/host-api.js

@@ -0,0 +1,46 @@
+import { transpileToBlobUrl } from './transpile.js';
+import { fmtDuration, measurePhase } from './timing.js';
+import { installCompileStreamingFallback } from './streaming-fallback.js';
+/**
+ * Transpile and instantiate an ACT wasm component in the current page,
+ * returning a typed handle to its exported provider interfaces.
+ *
+ * Requires:
+ * - `WebAssembly.promising` (JSPI). Available by default in Chrome 137+,
+ *   in Firefox Nightly 152+, and in Safari Tech Preview 243+. Tracking
+ *   issue: Interop 2026 focus area #10.
+ * - The component must be a `wasip3`-style ACT component packed via
+ *   `act-build pack` and exporting `act:tools/tool-provider@0.2.0`.
+ */
+export async function runComponent(bytes, options) {
+    if (typeof WebAssembly.promising !== 'function') {
+        throw new Error('@actcore/web-runtime requires JSPI (WebAssembly.promising). Use Chrome 137+ ' +
+            '(stable), Firefox Nightly 152+, or Safari Technology Preview 243+. ' +
+            'Per Interop 2026 commitment, stable Firefox/Safari ship JSPI in 2026.');
+    }
+    installCompileStreamingFallback();
+    const { url: entryBlobUrl, revoke: revokeBlobUrls } = await transpileToBlobUrl(bytes, options);
+    // Dynamic import from a blob: URL compiles + instantiates the component's core
+    // wasm in the page realm — a synchronous, main-thread-blocking step that, for
+    // large components, freezes the tab *after* the off-thread transpile above.
+    // Measure it separately so that freeze is quantified, not hidden.
+    const tInstantiate = performance.now();
+    let mod;
+    try {
+        mod = (await import(/* @vite-ignore */ entryBlobUrl));
+    }
+    finally {
+        // The module has fetched + compiled its (~100MB) core wasm by now; free the
+        // blob URLs so they don't accumulate (leak ~100MB) across runs.
+        revokeBlobUrls();
+    }
+    measurePhase('actcore:instantiate', tInstantiate, { component: options.name ?? 'component' });
+    console.debug(`[@actcore/web-runtime] instantiated on main thread in ${fmtDuration(performance.now() - tInstantiate)}`);
+    if (!mod.toolProvider) {
+        throw new Error('Component does not export act:tools/tool-provider@0.2.0');
+    }
+    // sessionProvider is present only on session-provider components; pass it
+    // through so callers can open sessions (stateful components need it).
+    return { toolProvider: mod.toolProvider, sessionProvider: mod.sessionProvider };
+}
+//# sourceMappingURL=host-api.js.map

package/dist/host-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-api.js","sourceRoot":"","sources":["../src/host-api.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAqE1E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAiB,EACjB,OAA4B;IAE5B,IAAI,OAAQ,WAAkD,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CACb,8EAA8E;YAC5E,qEAAqE;YACrE,uEAAuE,CAC1E,CAAC;IACJ,CAAC;IAED,+BAA+B,EAAE,CAAC;IAElC,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAE/F,+EAA+E;IAC/E,8EAA8E;IAC9E,4EAA4E;IAC5E,kEAAkE;IAClE,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACvC,IAAI,GAAuE,CAAC;IAC5E,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAGnD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,4EAA4E;QAC5E,gEAAgE;QAChE,cAAc,EAAE,CAAC;IACnB,CAAC;IACD,YAAY,CAAC,qBAAqB,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;IAC9F,OAAO,CAAC,KAAK,CACX,yDAAyD,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,EAAE,CACzG,CAAC;IAEF,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,sEAAsE;IACtE,OAAO,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC;AAClF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,30 @@
+/**
+ * @actcore/web-runtime — browser host for ACT (Agent Component Tools).
+ *
+ * Loads ACT wasm components in a browser tab via {@link
+ * https://github.com/bytecodealliance/jco | jco}'s in-browser transpiler and
+ * exposes the component's `act:tools/tool-provider` as a typed JS object.
+ *
+ * @example
+ * ```ts
+ * import { runComponent } from '@actcore/web-runtime';
+ *
+ * const wasm = new Uint8Array(await (await fetch('/time.wasm')).arrayBuffer());
+ * const { toolProvider } = await runComponent(wasm);
+ *
+ * const { tools } = await toolProvider.listTools([]);
+ * const result = await toolProvider.callTool('get_current_time', new Uint8Array([0xa0]), []);
+ * ```
+ */
+export type { ToolDefinition, ContentPart, ToolEvent, ToolEventContent, ToolEventError, ListToolsResponse, } from './generated/interfaces/act-tools-types.js';
+export type { ToolResult, ToolResultImmediate, ToolResultStreaming, } from './generated/interfaces/act-tools-tool-provider.js';
+export type { Cbor, LocalizedString, LocalizedStringPlain, LocalizedStringLocalized, Metadata, Error as ActError, } from './generated/interfaces/act-core-types.js';
+export type { Session, } from './generated/interfaces/act-sessions-types.js';
+export type { RunComponentOptions, ComponentInstance, ToolProvider } from './host-api.js';
+export { runComponent } from './host-api.js';
+export { clearTranspileCache } from './cache.js';
+export type { ResolveLocalizedStringOptions } from './locale.js';
+export { resolveLocalizedString } from './locale.js';
+export { isWebmcpAvailable, exposeToWebmcp } from './webmcp.js';
+export type { ModelContext, WebmcpToolDescriptor, WebmcpCallResult, ExposeWebmcpOptions, WebmcpExposure, } from './webmcp.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,YAAY,EACV,cAAc,EACd,WAAW,EACX,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,iBAAiB,GAClB,MAAM,2CAA2C,CAAC;AACnD,YAAY,EACV,UAAU,EACV,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,mDAAmD,CAAC;AAC3D,YAAY,EACV,IAAI,EACJ,eAAe,EACf,oBAAoB,EACpB,wBAAwB,EACxB,QAAQ,EACR,KAAK,IAAI,QAAQ,GAClB,MAAM,0CAA0C,CAAC;AAClD,YAAY,EACV,OAAO,GACR,MAAM,8CAA8C,CAAC;AAEtD,YAAY,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,YAAY,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAChE,YAAY,EACV,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,GACf,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,23 @@
+/**
+ * @actcore/web-runtime — browser host for ACT (Agent Component Tools).
+ *
+ * Loads ACT wasm components in a browser tab via {@link
+ * https://github.com/bytecodealliance/jco | jco}'s in-browser transpiler and
+ * exposes the component's `act:tools/tool-provider` as a typed JS object.
+ *
+ * @example
+ * ```ts
+ * import { runComponent } from '@actcore/web-runtime';
+ *
+ * const wasm = new Uint8Array(await (await fetch('/time.wasm')).arrayBuffer());
+ * const { toolProvider } = await runComponent(wasm);
+ *
+ * const { tools } = await toolProvider.listTools([]);
+ * const result = await toolProvider.callTool('get_current_time', new Uint8Array([0xa0]), []);
+ * ```
+ */
+export { runComponent } from './host-api.js';
+export { clearTranspileCache } from './cache.js';
+export { resolveLocalizedString } from './locale.js';
+export { isWebmcpAvailable, exposeToWebmcp } from './webmcp.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AA4BH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC"}

package/dist/locale.d.ts

@@ -0,0 +1,32 @@
+import type { LocalizedString } from './generated/interfaces/act-core-types.js';
+export interface ResolveLocalizedStringOptions {
+    /**
+     * BCP 47 language tag declared by the component under
+     * `act:component.std.default-language`. Used as a fallback when none of
+     * the user's preferred locales is present.
+     */
+    defaultLanguage?: string;
+    /**
+     * Caller-preferred locales in priority order. Defaults to
+     * `navigator.languages` if available, else `[navigator.language]`,
+     * else `[]`.
+     */
+    userLocales?: readonly string[];
+}
+/**
+ * Resolve an {@link LocalizedString} to a concrete UTF-8 string.
+ *
+ * Resolution order:
+ * 1. If `plain` — return `val` (language undefined; callers may assume it
+ *    matches `act:component.std.default-language` if declared).
+ * 2. Each entry in `userLocales` (BCP 47), preferring exact match
+ *    (`en-US` → `en-US`), then language-only match (`en-US` → `en`).
+ * 3. `defaultLanguage`, same matching rules.
+ * 4. `en`, same matching rules.
+ * 5. First entry in the list.
+ * 6. Empty string if the list is empty.
+ *
+ * Matching is case-insensitive on language tags.
+ */
+export declare function resolveLocalizedString(loc: LocalizedString, options?: ResolveLocalizedStringOptions): string;
+//# sourceMappingURL=locale.d.ts.map

package/dist/locale.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"locale.d.ts","sourceRoot":"","sources":["../src/locale.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAEhF,MAAM,WAAW,6BAA6B;IAC5C;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,eAAe,EACpB,OAAO,GAAE,6BAAkC,GAC1C,MAAM,CAmBR"}

package/dist/locale.js

@@ -0,0 +1,64 @@
+/**
+ * Resolve an {@link LocalizedString} to a concrete UTF-8 string.
+ *
+ * Resolution order:
+ * 1. If `plain` — return `val` (language undefined; callers may assume it
+ *    matches `act:component.std.default-language` if declared).
+ * 2. Each entry in `userLocales` (BCP 47), preferring exact match
+ *    (`en-US` → `en-US`), then language-only match (`en-US` → `en`).
+ * 3. `defaultLanguage`, same matching rules.
+ * 4. `en`, same matching rules.
+ * 5. First entry in the list.
+ * 6. Empty string if the list is empty.
+ *
+ * Matching is case-insensitive on language tags.
+ */
+export function resolveLocalizedString(loc, options = {}) {
+    if (loc.tag === 'plain')
+        return loc.val;
+    const entries = loc.val;
+    if (entries.length === 0)
+        return '';
+    const userLocales = options.userLocales ?? defaultUserLocales();
+    const candidates = [];
+    for (const l of userLocales)
+        if (l)
+            candidates.push(l);
+    if (options.defaultLanguage)
+        candidates.push(options.defaultLanguage);
+    candidates.push('en');
+    for (const candidate of candidates) {
+        const hit = matchLocale(entries, candidate);
+        if (hit !== undefined)
+            return hit;
+    }
+    return entries[0][1];
+}
+function matchLocale(entries, candidate) {
+    const want = candidate.toLowerCase();
+    for (const [lang, text] of entries) {
+        if (lang.toLowerCase() === want)
+            return text;
+    }
+    const wantPrimary = primarySubtag(want);
+    for (const [lang, text] of entries) {
+        if (primarySubtag(lang.toLowerCase()) === wantPrimary)
+            return text;
+    }
+    return undefined;
+}
+function primarySubtag(tag) {
+    const dash = tag.indexOf('-');
+    return dash === -1 ? tag : tag.slice(0, dash);
+}
+function defaultUserLocales() {
+    const nav = globalThis.navigator;
+    if (!nav)
+        return [];
+    if (nav.languages && nav.languages.length > 0)
+        return nav.languages;
+    if (nav.language)
+        return [nav.language];
+    return [];
+}
+//# sourceMappingURL=locale.js.map

package/dist/locale.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"locale.js","sourceRoot":"","sources":["../src/locale.ts"],"names":[],"mappings":"AAiBA;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAoB,EACpB,UAAyC,EAAE;IAE3C,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC;IAExC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC;IACxB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,kBAAkB,EAAE,CAAC;IAEhE,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,WAAW;QAAE,IAAI,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,eAAe;QAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACtE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEtB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC5C,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC;IACpC,CAAC;IAED,OAAO,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,WAAW,CAClB,OAAiD,EACjD,SAAiB;IAEjB,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IAC/C,CAAC;IACD,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;IACrE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,GAAG,GAAI,UAAmF,CAAC,SAAS,CAAC;IAC3G,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,SAAS,CAAC;IACpE,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxC,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/patches.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Runtime patches applied to a jco-transpiled entry-module source string.
+ *
+ * History: under jco 1.19 this file carried eight patches working around
+ * wasip3-async bugs in jco's emitted code, plus a hand-rolled lift (`lift.ts`)
+ * that walked `act:tools` task-return records out of linear memory because jco
+ * mis-decoded the flat-fields ABI. The jco 1.20→1.24 upgrade (bindgen
+ * 1.17→2.0.3) fixed all of them upstream. Verified by transpiling real
+ * components (`time.wasm`, `http-client.wasm`) with jco 1.24.3 and running them
+ * under JSPI: the anchors are gone or the declarations now emitted, and the
+ * native lift returns correct results (tool descriptions, option/variant
+ * shapes, metadata, and error events all decode correctly):
+ *
+ *   - STREAM_TABLES / FUTURE_TABLES now declared        (jco 1.20, PR #1464)
+ *   - `class HostFuture` now emitted                    (jco 1.20+)
+ *   - host-imported resource lowers now populated       (no more throw-stubs)
+ *   - `rscTableCreateOwn` reshaped, resource origination tracked at runtime
+ *   - `StreamWritableEnd.write` count reshaped
+ *   - async-import `resultPtr: params[0]` → direct-param lifts (bindgen 2.0)
+ *   - `_liftFlatU{8,16,32}` storageLen accounting fixed  (jco 1.23.1)
+ *   - flat-fields `act:tools` task-return lift           (bindgen 2.0 — `lift.ts`
+ *     deleted; the custom lift now produces *worse* output than jco's native one)
+ *
+ * What remains is one defensive splice: short-circuiting future/stream drops
+ * whose wasm-side end was already transferred. It only matters for components
+ * importing wasi:http p3 (futures/streams in request/response bodies), goes
+ * through `replaceOrWarn` so a moved anchor warns instead of silently no-opping,
+ * and is a no-op for components that don't use host-boundary futures/streams.
+ */
+export declare function applyPatches(src: string): string;
+/**
+ * Bare-specifier imports for `@bytecodealliance/preview2-shim/*` are emitted
+ * by jco's transpile (matching the `map` option we pass), but ES modules
+ * loaded from blob: URLs can't see the document's importmap. Rewrite to
+ * absolute URLs in-place.
+ */
+export declare function rewriteBareImports(src: string, shimBase: string): string;
+//# sourceMappingURL=patches.d.ts.map

package/dist/patches.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patches.d.ts","sourceRoot":"","sources":["../src/patches.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAwBhD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAiBxE"}