@actcore/web-runtime 0.1.0

package/dist/patches.js

@@ -0,0 +1,76 @@
+/**
+ * Runtime patches applied to a jco-transpiled entry-module source string.
+ *
+ * History: under jco 1.19 this file carried eight patches working around
+ * wasip3-async bugs in jco's emitted code, plus a hand-rolled lift (`lift.ts`)
+ * that walked `act:tools` task-return records out of linear memory because jco
+ * mis-decoded the flat-fields ABI. The jco 1.20→1.24 upgrade (bindgen
+ * 1.17→2.0.3) fixed all of them upstream. Verified by transpiling real
+ * components (`time.wasm`, `http-client.wasm`) with jco 1.24.3 and running them
+ * under JSPI: the anchors are gone or the declarations now emitted, and the
+ * native lift returns correct results (tool descriptions, option/variant
+ * shapes, metadata, and error events all decode correctly):
+ *
+ *   - STREAM_TABLES / FUTURE_TABLES now declared        (jco 1.20, PR #1464)
+ *   - `class HostFuture` now emitted                    (jco 1.20+)
+ *   - host-imported resource lowers now populated       (no more throw-stubs)
+ *   - `rscTableCreateOwn` reshaped, resource origination tracked at runtime
+ *   - `StreamWritableEnd.write` count reshaped
+ *   - async-import `resultPtr: params[0]` → direct-param lifts (bindgen 2.0)
+ *   - `_liftFlatU{8,16,32}` storageLen accounting fixed  (jco 1.23.1)
+ *   - flat-fields `act:tools` task-return lift           (bindgen 2.0 — `lift.ts`
+ *     deleted; the custom lift now produces *worse* output than jco's native one)
+ *
+ * What remains is one defensive splice: short-circuiting future/stream drops
+ * whose wasm-side end was already transferred. It only matters for components
+ * importing wasi:http p3 (futures/streams in request/response bodies), goes
+ * through `replaceOrWarn` so a moved anchor warns instead of silently no-opping,
+ * and is a no-op for components that don't use host-boundary futures/streams.
+ */
+export function applyPatches(src) {
+    let out = src;
+    // PATCH: wit-bindgen Rust's future/stream destructor emits
+    // `{future,stream}-drop-{readable,writable}(idx)` even after the end has been
+    // transferred (e.g. into a `request.new` trailers param), at which point the
+    // wasm-side handle is 0. jco's drop helpers then crash on the missing handle.
+    // Short-circuit drops with idx=0 — the host already owns the end (or it never
+    // existed), so there is nothing to drop on the wasm side. These helpers are
+    // only emitted when the component uses futures/streams over the host
+    // boundary, so a miss is expected for plain components (e.g. time.wasm) and
+    // not flagged.
+    for (const fn of [
+        'function futureDropReadable(ctx, futureEndWaitableIdx) {',
+        'function futureDropWritable(ctx, futureEndWaitableIdx) {',
+        'function streamDropReadable(ctx, streamEndWaitableIdx) {',
+        'function streamDropWritable(ctx, streamEndWaitableIdx) {',
+    ]) {
+        if (out.includes(fn)) {
+            out = out.replace(fn, fn + '\n    if (!arguments[1]) return;');
+        }
+    }
+    return out;
+}
+/**
+ * Bare-specifier imports for `@bytecodealliance/preview2-shim/*` are emitted
+ * by jco's transpile (matching the `map` option we pass), but ES modules
+ * loaded from blob: URLs can't see the document's importmap. Rewrite to
+ * absolute URLs in-place.
+ */
+export function rewriteBareImports(src, shimBase) {
+    const base = shimBase.endsWith('/') ? shimBase : shimBase + '/';
+    const mapping = {
+        '@bytecodealliance/preview2-shim/cli': base + 'cli.js',
+        '@bytecodealliance/preview2-shim/clocks': base + 'clocks.js',
+        '@bytecodealliance/preview2-shim/io': base + 'io.js',
+        '@bytecodealliance/preview2-shim/filesystem': base + 'filesystem.js',
+        '@bytecodealliance/preview2-shim/http': base + 'http.js',
+        '@bytecodealliance/preview2-shim/random': base + 'random.js',
+        '@bytecodealliance/preview2-shim/sockets': base + 'sockets.js',
+    };
+    let out = src;
+    for (const [spec, url] of Object.entries(mapping)) {
+        out = out.replaceAll(`'${spec}'`, `'${url}'`).replaceAll(`"${spec}"`, `"${url}"`);
+    }
+    return out;
+}
+//# sourceMappingURL=patches.js.map

package/dist/patches.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patches.js","sourceRoot":"","sources":["../src/patches.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,GAAG,GAAG,GAAG,CAAC;IAEd,2DAA2D;IAC3D,8EAA8E;IAC9E,6EAA6E;IAC7E,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,qEAAqE;IACrE,4EAA4E;IAC5E,eAAe;IACf,KAAK,MAAM,EAAE,IAAI;QACf,0DAA0D;QAC1D,0DAA0D;QAC1D,0DAA0D;QAC1D,0DAA0D;KAC3D,EAAE,CAAC;QACF,IAAI,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACrB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,kCAAkC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,QAAgB;IAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC;IAChE,MAAM,OAAO,GAA2B;QACtC,qCAAqC,EAAE,IAAI,GAAG,QAAQ;QACtD,wCAAwC,EAAE,IAAI,GAAG,WAAW;QAC5D,oCAAoC,EAAE,IAAI,GAAG,OAAO;QACpD,4CAA4C,EAAE,IAAI,GAAG,eAAe;QACpE,sCAAsC,EAAE,IAAI,GAAG,SAAS;QACxD,wCAAwC,EAAE,IAAI,GAAG,WAAW;QAC5D,yCAAyC,EAAE,IAAI,GAAG,YAAY;KAC/D,CAAC;IAEF,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/shims/sockets.d.ts

@@ -0,0 +1,130 @@
+/**
+ * Browser wasi:sockets shim for @actcore/web-runtime.
+ *
+ * preview2-shim's browser build ships wasi:sockets as method-only stub objects
+ * that OMIT the resource-class constructors (ResolveAddressStream, Network,
+ * TcpSocket, UdpSocket, IncomingDatagramStream, OutgoingDatagramStream). jco's
+ * generated glue destructures those classes at instantiation
+ * (`const { ResolveAddressStream } = ipNameLookup`) and throws
+ * "unexpectedly undefined local import" if they're missing — which any
+ * wasi:http-importing component (whose wasip3 world transitively pulls in
+ * wasi:sockets) triggers even when it never touches the network.
+ *
+ * This shim provides the full export surface WITH the resource classes as inert
+ * stubs. Sockets/DNS are never actually exercised by the pure-compute components
+ * we run in the tab; the constructors only need to EXIST so instantiation
+ * succeeds. host-browser routes `wasi:sockets/*` here (see transpile.ts) instead
+ * of at the preview2-shim base.
+ *
+ * DENY, DON'T CRASH: the three resource-creation entry points below —
+ * `resolveAddresses` (DNS), `createTcpSocket`, `createUdpSocket` — are the only
+ * ways guest code can ever obtain a live socket/lookup resource; every other
+ * method in this file is unreachable unless one of those three succeeds. Their
+ * WIT signatures return `result<_, error-code>`, and jco's generated glue wraps
+ * each call in `try { ... } catch (e) { ret = { tag: 'err', val:
+ * getErrorPayload(e) } }` — but `getErrorPayload` only treats `e` as the error
+ * payload if `e` is NOT a plain `Error` (a thrown `Error` gets RE-THROWN
+ * uncaught instead of becoming a clean `result::err`, verified by reading the
+ * transpiled glue). So denial must throw the raw `error-code` string value
+ * (e.g. `'access-denied'`), never `new Error(...)` — a plain Error here
+ * doesn't deny the call, it corrupts the CPython/JSPI interpreter state
+ * (`Fatal Python error: ... the GIL is released`), which is worse than useless
+ * for a "sealed sandbox" story. Everything else in this file stays a bare
+ * no-op stub: unreachable code, so its shape doesn't matter.
+ *
+ * `instance-network()` is the one exception to "deny at the entry point": its
+ * WIT signature is `func() -> network` — no `result<>`, so it has NO error
+ * channel at all (getting the ambient network capability TOKEN is defined to
+ * never fail; the denial belongs at the point that token is actually used).
+ * It must return a real `Network` instance — returning `undefined` fails the
+ * caller's `instanceof Network` check with an uncaught "Resource error: Not a
+ * valid Network resource", which (same as above) never reaches Python as a
+ * clean exception. `Network` is declared once here so `instanceNetwork()` and
+ * `network.Network` share the identical class the generated glue checks
+ * `instanceof` against.
+ */
+declare function denyAccess(): never;
+declare class Network {
+}
+export declare const instanceNetwork: {
+    instanceNetwork(): Network;
+};
+export declare const ipNameLookup: {
+    ResolveAddressStream: {
+        new (): {};
+    };
+    dropResolveAddressStream(): void;
+    subscribe(): void;
+    resolveAddresses: typeof denyAccess;
+    resolveNextAddress(): void;
+    nonBlocking(): void;
+    setNonBlocking(): void;
+};
+export declare const network: {
+    Network: typeof Network;
+    dropNetwork(): void;
+};
+export declare const tcpCreateSocket: {
+    createTcpSocket: typeof denyAccess;
+};
+export declare const tcp: {
+    TcpSocket: {
+        new (): {};
+    };
+    subscribe(): void;
+    dropTcpSocket(): void;
+    bind(): void;
+    connect(): void;
+    listen(): void;
+    accept(): void;
+    localAddress(): void;
+    remoteAddress(): void;
+    addressFamily(): void;
+    setListenBacklogSize(): void;
+    keepAlive(): void;
+    setKeepAlive(): void;
+    noDelay(): void;
+    setNoDelay(): void;
+    unicastHopLimit(): void;
+    setUnicastHopLimit(): void;
+    receiveBufferSize(): void;
+    setReceiveBufferSize(): void;
+    sendBufferSize(): void;
+    setSendBufferSize(): void;
+    nonBlocking(): void;
+    setNonBlocking(): void;
+    shutdown(): void;
+};
+export declare const udpCreateSocket: {
+    createUdpSocket: typeof denyAccess;
+};
+export declare const udp: {
+    UdpSocket: {
+        new (): {};
+    };
+    IncomingDatagramStream: {
+        new (): {};
+    };
+    OutgoingDatagramStream: {
+        new (): {};
+    };
+    subscribe(): void;
+    dropUdpSocket(): void;
+    bind(): void;
+    connect(): void;
+    receive(): void;
+    send(): void;
+    localAddress(): void;
+    remoteAddress(): void;
+    addressFamily(): void;
+    unicastHopLimit(): void;
+    setUnicastHopLimit(): void;
+    receiveBufferSize(): void;
+    setReceiveBufferSize(): void;
+    sendBufferSize(): void;
+    setSendBufferSize(): void;
+    nonBlocking(): void;
+    setNonBlocking(): void;
+};
+export {};
+//# sourceMappingURL=sockets.d.ts.map

package/dist/shims/sockets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sockets.d.ts","sourceRoot":"","sources":["../../src/shims/sockets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,iBAAS,UAAU,IAAI,KAAK,CAE3B;AAED,cAAM,OAAO;CAAG;AAEhB,eAAO,MAAM,eAAe;;CAI3B,CAAC;AAEF,eAAO,MAAM,YAAY;;;;;;;;;;CAQxB,CAAC;AAEF,eAAO,MAAM,OAAO;;;CAGnB,CAAC;AAEF,eAAO,MAAM,eAAe;;CAE3B,CAAC;AAEF,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyBf,CAAC;AAEF,eAAO,MAAM,eAAe;;CAE3B,CAAC;AAEF,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqBf,CAAC"}

package/dist/shims/sockets.js

@@ -0,0 +1,128 @@
+/**
+ * Browser wasi:sockets shim for @actcore/web-runtime.
+ *
+ * preview2-shim's browser build ships wasi:sockets as method-only stub objects
+ * that OMIT the resource-class constructors (ResolveAddressStream, Network,
+ * TcpSocket, UdpSocket, IncomingDatagramStream, OutgoingDatagramStream). jco's
+ * generated glue destructures those classes at instantiation
+ * (`const { ResolveAddressStream } = ipNameLookup`) and throws
+ * "unexpectedly undefined local import" if they're missing — which any
+ * wasi:http-importing component (whose wasip3 world transitively pulls in
+ * wasi:sockets) triggers even when it never touches the network.
+ *
+ * This shim provides the full export surface WITH the resource classes as inert
+ * stubs. Sockets/DNS are never actually exercised by the pure-compute components
+ * we run in the tab; the constructors only need to EXIST so instantiation
+ * succeeds. host-browser routes `wasi:sockets/*` here (see transpile.ts) instead
+ * of at the preview2-shim base.
+ *
+ * DENY, DON'T CRASH: the three resource-creation entry points below —
+ * `resolveAddresses` (DNS), `createTcpSocket`, `createUdpSocket` — are the only
+ * ways guest code can ever obtain a live socket/lookup resource; every other
+ * method in this file is unreachable unless one of those three succeeds. Their
+ * WIT signatures return `result<_, error-code>`, and jco's generated glue wraps
+ * each call in `try { ... } catch (e) { ret = { tag: 'err', val:
+ * getErrorPayload(e) } }` — but `getErrorPayload` only treats `e` as the error
+ * payload if `e` is NOT a plain `Error` (a thrown `Error` gets RE-THROWN
+ * uncaught instead of becoming a clean `result::err`, verified by reading the
+ * transpiled glue). So denial must throw the raw `error-code` string value
+ * (e.g. `'access-denied'`), never `new Error(...)` — a plain Error here
+ * doesn't deny the call, it corrupts the CPython/JSPI interpreter state
+ * (`Fatal Python error: ... the GIL is released`), which is worse than useless
+ * for a "sealed sandbox" story. Everything else in this file stays a bare
+ * no-op stub: unreachable code, so its shape doesn't matter.
+ *
+ * `instance-network()` is the one exception to "deny at the entry point": its
+ * WIT signature is `func() -> network` — no `result<>`, so it has NO error
+ * channel at all (getting the ambient network capability TOKEN is defined to
+ * never fail; the denial belongs at the point that token is actually used).
+ * It must return a real `Network` instance — returning `undefined` fails the
+ * caller's `instanceof Network` check with an uncaught "Resource error: Not a
+ * valid Network resource", which (same as above) never reaches Python as a
+ * clean exception. `Network` is declared once here so `instanceNetwork()` and
+ * `network.Network` share the identical class the generated glue checks
+ * `instanceof` against.
+ */
+function denyAccess() {
+    throw 'access-denied';
+}
+class Network {
+}
+export const instanceNetwork = {
+    instanceNetwork() {
+        return new Network();
+    },
+};
+export const ipNameLookup = {
+    ResolveAddressStream: class ResolveAddressStream {
+    },
+    dropResolveAddressStream() { },
+    subscribe() { },
+    resolveAddresses: denyAccess,
+    resolveNextAddress() { },
+    nonBlocking() { },
+    setNonBlocking() { },
+};
+export const network = {
+    Network,
+    dropNetwork() { },
+};
+export const tcpCreateSocket = {
+    createTcpSocket: denyAccess,
+};
+export const tcp = {
+    TcpSocket: class TcpSocket {
+    },
+    subscribe() { },
+    dropTcpSocket() { },
+    bind() { },
+    connect() { },
+    listen() { },
+    accept() { },
+    localAddress() { },
+    remoteAddress() { },
+    addressFamily() { },
+    setListenBacklogSize() { },
+    keepAlive() { },
+    setKeepAlive() { },
+    noDelay() { },
+    setNoDelay() { },
+    unicastHopLimit() { },
+    setUnicastHopLimit() { },
+    receiveBufferSize() { },
+    setReceiveBufferSize() { },
+    sendBufferSize() { },
+    setSendBufferSize() { },
+    nonBlocking() { },
+    setNonBlocking() { },
+    shutdown() { },
+};
+export const udpCreateSocket = {
+    createUdpSocket: denyAccess,
+};
+export const udp = {
+    UdpSocket: class UdpSocket {
+    },
+    IncomingDatagramStream: class IncomingDatagramStream {
+    },
+    OutgoingDatagramStream: class OutgoingDatagramStream {
+    },
+    subscribe() { },
+    dropUdpSocket() { },
+    bind() { },
+    connect() { },
+    receive() { },
+    send() { },
+    localAddress() { },
+    remoteAddress() { },
+    addressFamily() { },
+    unicastHopLimit() { },
+    setUnicastHopLimit() { },
+    receiveBufferSize() { },
+    setReceiveBufferSize() { },
+    sendBufferSize() { },
+    setSendBufferSize() { },
+    nonBlocking() { },
+    setNonBlocking() { },
+};
+//# sourceMappingURL=sockets.js.map

package/dist/shims/sockets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sockets.js","sourceRoot":"","sources":["../../src/shims/sockets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,SAAS,UAAU;IACjB,MAAM,eAAe,CAAC;AACxB,CAAC;AAED,MAAM,OAAO;CAAG;AAEhB,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,eAAe;QACb,OAAO,IAAI,OAAO,EAAE,CAAC;IACvB,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,oBAAoB,EAAE,MAAM,oBAAoB;KAAG;IACnD,wBAAwB,KAAI,CAAC;IAC7B,SAAS,KAAI,CAAC;IACd,gBAAgB,EAAE,UAAU;IAC5B,kBAAkB,KAAI,CAAC;IACvB,WAAW,KAAI,CAAC;IAChB,cAAc,KAAI,CAAC;CACpB,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,OAAO;IACP,WAAW,KAAI,CAAC;CACjB,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,eAAe,EAAE,UAAU;CAC5B,CAAC;AAEF,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,SAAS,EAAE,MAAM,SAAS;KAAG;IAC7B,SAAS,KAAI,CAAC;IACd,aAAa,KAAI,CAAC;IAClB,IAAI,KAAI,CAAC;IACT,OAAO,KAAI,CAAC;IACZ,MAAM,KAAI,CAAC;IACX,MAAM,KAAI,CAAC;IACX,YAAY,KAAI,CAAC;IACjB,aAAa,KAAI,CAAC;IAClB,aAAa,KAAI,CAAC;IAClB,oBAAoB,KAAI,CAAC;IACzB,SAAS,KAAI,CAAC;IACd,YAAY,KAAI,CAAC;IACjB,OAAO,KAAI,CAAC;IACZ,UAAU,KAAI,CAAC;IACf,eAAe,KAAI,CAAC;IACpB,kBAAkB,KAAI,CAAC;IACvB,iBAAiB,KAAI,CAAC;IACtB,oBAAoB,KAAI,CAAC;IACzB,cAAc,KAAI,CAAC;IACnB,iBAAiB,KAAI,CAAC;IACtB,WAAW,KAAI,CAAC;IAChB,cAAc,KAAI,CAAC;IACnB,QAAQ,KAAI,CAAC;CACd,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,eAAe,EAAE,UAAU;CAC5B,CAAC;AAEF,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,SAAS,EAAE,MAAM,SAAS;KAAG;IAC7B,sBAAsB,EAAE,MAAM,sBAAsB;KAAG;IACvD,sBAAsB,EAAE,MAAM,sBAAsB;KAAG;IACvD,SAAS,KAAI,CAAC;IACd,aAAa,KAAI,CAAC;IAClB,IAAI,KAAI,CAAC;IACT,OAAO,KAAI,CAAC;IACZ,OAAO,KAAI,CAAC;IACZ,IAAI,KAAI,CAAC;IACT,YAAY,KAAI,CAAC;IACjB,aAAa,KAAI,CAAC;IAClB,aAAa,KAAI,CAAC;IAClB,eAAe,KAAI,CAAC;IACpB,kBAAkB,KAAI,CAAC;IACvB,iBAAiB,KAAI,CAAC;IACtB,oBAAoB,KAAI,CAAC;IACzB,cAAc,KAAI,CAAC;IACnB,iBAAiB,KAAI,CAAC;IACtB,WAAW,KAAI,CAAC;IAChB,cAAc,KAAI,CAAC;CACpB,CAAC"}

package/dist/shims/wasi-http-internal.d.ts

@@ -0,0 +1,7 @@
+import type { ErrorCode as GenErrorCode } from '../generated/interfaces/wasi-http-types.js';
+export type ErrorCode = GenErrorCode;
+export declare function internalError(msg: string): ErrorCode;
+export declare const TOKEN_RE: RegExp;
+export declare const FIELD_VALUE_RE: RegExp;
+export declare const FORBIDDEN: Set<string>;
+//# sourceMappingURL=wasi-http-internal.d.ts.map

package/dist/shims/wasi-http-internal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasi-http-internal.d.ts","sourceRoot":"","sources":["../../src/shims/wasi-http-internal.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,SAAS,IAAI,YAAY,EAC1B,MAAM,4CAA4C,CAAC;AAEpD,MAAM,MAAM,SAAS,GAAG,YAAY,CAAC;AAErC,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAEpD;AAGD,eAAO,MAAM,QAAQ,QAAmC,CAAC;AAGzD,eAAO,MAAM,cAAc,QAA8B,CAAC;AAE1D,eAAO,MAAM,SAAS,aAIpB,CAAC"}

package/dist/shims/wasi-http-internal.js

@@ -0,0 +1,19 @@
+// Internal helpers + WIT-mapped TS types not exported from jco's gen-types.
+// jco-generated types live in src/generated/interfaces/wasi-http-{types,client}.d.ts
+// and govern the public shim surface; this file holds private types and
+// validation helpers used inside the shim.
+export function internalError(msg) {
+    return { tag: 'internal-error', val: msg };
+}
+// RFC 9110 token: 1*tchar
+export const TOKEN_RE = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
+// RFC 9110 field-value: any VCHAR / OWS / obs-text. We allow tab, printable
+// ASCII, and obs-text (0x80-0xFF). No CR/LF.
+export const FIELD_VALUE_RE = /^[\t\x20-\x7E\x80-\xFF]*$/;
+// Hop-by-hop / connection-management headers a guest cannot set.
+export const FORBIDDEN = new Set([
+    'connection',
+    'keep-alive',
+    'host',
+]);
+//# sourceMappingURL=wasi-http-internal.js.map

package/dist/shims/wasi-http-internal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasi-http-internal.js","sourceRoot":"","sources":["../../src/shims/wasi-http-internal.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,qFAAqF;AACrF,wEAAwE;AACxE,2CAA2C;AAQ3C,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC7C,CAAC;AAED,0BAA0B;AAC1B,MAAM,CAAC,MAAM,QAAQ,GAAG,gCAAgC,CAAC;AACzD,4EAA4E;AAC5E,6CAA6C;AAC7C,MAAM,CAAC,MAAM,cAAc,GAAG,2BAA2B,CAAC;AAC1D,iEAAiE;AACjE,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IAC/B,YAAY;IACZ,YAAY;IACZ,MAAM;CACP,CAAC,CAAC"}

package/dist/shims/wasi-http.d.ts

@@ -0,0 +1,83 @@
+import { type ErrorCode } from './wasi-http-internal.js';
+import type { Duration, FieldName, FieldValue, Method, Scheme, StatusCode, Result } from '../generated/interfaces/wasi-http-types.js';
+type Headers = Fields;
+type Trailers = Fields;
+export declare class Fields {
+    #private;
+    constructor();
+    static fromList(entries: Array<[FieldName, FieldValue]>): Fields;
+    get(name: FieldName): Array<FieldValue>;
+    has(name: FieldName): boolean;
+    set(name: FieldName, value: Array<FieldValue>): void;
+    'delete'(name: FieldName): void;
+    getAndDelete(name: FieldName): Array<FieldValue>;
+    append(name: FieldName, value: FieldValue): void;
+    copyAll(): Array<[FieldName, FieldValue]>;
+    clone(): Fields;
+    _lockInternal(): void;
+}
+export declare class RequestOptions {
+    #private;
+    constructor();
+    getConnectTimeout(): Duration | undefined;
+    setConnectTimeout(duration: Duration | undefined): void;
+    getFirstByteTimeout(): Duration | undefined;
+    setFirstByteTimeout(duration: Duration | undefined): void;
+    getBetweenBytesTimeout(): Duration | undefined;
+    setBetweenBytesTimeout(duration: Duration | undefined): void;
+    clone(): RequestOptions;
+    _lockInternal(): void;
+}
+export declare class Request {
+    method: Method;
+    pathWithQuery: string | undefined;
+    scheme: Scheme | undefined;
+    authority: string | undefined;
+    headers: Fields;
+    body: ReadableStream<number> | undefined;
+    trailers: Promise<Result<Trailers | undefined, ErrorCode>>;
+    options: RequestOptions | undefined;
+    private constructor();
+    static 'new'(headers: Headers, contents: ReadableStream<number> | undefined, trailers: Promise<Result<Trailers | undefined, ErrorCode>>, options: RequestOptions | undefined): [Request, Promise<Result<void, ErrorCode>>];
+    getMethod(): Method;
+    setMethod(method: Method): void;
+    getPathWithQuery(): string | undefined;
+    setPathWithQuery(pathWithQuery: string | undefined): void;
+    getScheme(): Scheme | undefined;
+    setScheme(scheme: Scheme | undefined): void;
+    getAuthority(): string | undefined;
+    setAuthority(authority: string | undefined): void;
+    getOptions(): RequestOptions | undefined;
+    getHeaders(): Headers;
+    static consumeBody(this_: Request, _res: Promise<Result<void, ErrorCode>>): [
+        ReadableStream<number>,
+        Promise<Result<Trailers | undefined, ErrorCode>>
+    ];
+}
+export declare class Response {
+    statusCode: StatusCode;
+    headers: Fields;
+    body: ReadableStream<number> | undefined;
+    _bufferedBody: Uint8Array | undefined;
+    trailers: Promise<Result<Trailers | undefined, ErrorCode>>;
+    private constructor();
+    static 'new'(headers: Headers, contents: ReadableStream<number> | undefined, trailers: Promise<Result<Trailers | undefined, ErrorCode>>): [Response, Promise<Result<void, ErrorCode>>];
+    getStatusCode(): StatusCode;
+    setStatusCode(statusCode: StatusCode): void;
+    getHeaders(): Headers;
+    static consumeBody(this_: Response, _res: Promise<Result<void, ErrorCode>>): [
+        ReadableStream<number>,
+        Promise<Result<Trailers | undefined, ErrorCode>>
+    ];
+}
+export declare const types: {
+    Fields: typeof Fields;
+    Request: typeof Request;
+    RequestOptions: typeof RequestOptions;
+    Response: typeof Response;
+};
+export declare const client: {
+    send(request: Request): Promise<Response>;
+};
+export type { ErrorCode };
+//# sourceMappingURL=wasi-http.d.ts.map

package/dist/shims/wasi-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasi-http.d.ts","sourceRoot":"","sources":["../../src/shims/wasi-http.ts"],"names":[],"mappings":"AAOA,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EACV,QAAQ,EACR,SAAS,EACT,UAAU,EACV,MAAM,EACN,MAAM,EACN,UAAU,EACV,MAAM,EACP,MAAM,4CAA4C,CAAC;AAQpD,KAAK,OAAO,GAAG,MAAM,CAAC;AACtB,KAAK,QAAQ,GAAG,MAAM,CAAC;AASvB,qBAAa,MAAM;;;IAWjB,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,GAAG,MAAM;IAMhE,GAAG,CAAC,IAAI,EAAE,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC;IAIvC,GAAG,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO;IAI7B,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI;IA2BpD,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI;IAU/B,YAAY,CAAC,IAAI,EAAE,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC;IAMhD,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI;IAehD,OAAO,IAAI,KAAK,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAOzC,KAAK,IAAI,MAAM;IAKf,aAAa,IAAI,IAAI;CAGtB;AAED,qBAAa,cAAc;;;IAQzB,iBAAiB,IAAI,QAAQ,GAAG,SAAS;IAGzC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI;IAIvD,mBAAmB,IAAI,QAAQ,GAAG,SAAS;IAG3C,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI;IAIzD,sBAAsB,IAAI,QAAQ,GAAG,SAAS;IAG9C,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI;IAK5D,KAAK,IAAI,cAAc;IAYvB,aAAa,IAAI,IAAI;CAGtB;AAED,qBAAa,OAAO;IAGlB,MAAM,EAAE,MAAM,CAAkB;IAChC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAa;IAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAa;IACvC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAa;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAa;IACrD,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3D,OAAO,EAAE,cAAc,GAAG,SAAS,CAAa;IAMhD,OAAO;IAYP,MAAM,CAAC,KAAK,CACV,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,EAC5C,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,SAAS,EAAE,SAAS,CAAC,CAAC,EAC1D,OAAO,EAAE,cAAc,GAAG,SAAS,GAClC,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IAe9C,SAAS,IAAI,MAAM;IAGnB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAG/B,gBAAgB,IAAI,MAAM,GAAG,SAAS;IAGtC,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAGzD,SAAS,IAAI,MAAM,GAAG,SAAS;IAG/B,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAG3C,YAAY,IAAI,MAAM,GAAG,SAAS;IAGlC,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAGjD,UAAU,IAAI,cAAc,GAAG,SAAS;IAGxC,UAAU,IAAI,OAAO;IAIrB,MAAM,CAAC,WAAW,CAChB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,GACrC;QACD,cAAc,CAAC,MAAM,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,SAAS,EAAE,SAAS,CAAC,CAAC;KACjD;CAUF;AAkBD,qBAAa,QAAQ;IACnB,UAAU,EAAE,UAAU,CAAO;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAa;IAGrD,aAAa,EAAE,UAAU,GAAG,SAAS,CAAa;IAClD,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAE3D,OAAO;IAUP,MAAM,CAAC,KAAK,CACV,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,EAC5C,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,SAAS,EAAE,SAAS,CAAC,CAAC,GACzD,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IAU/C,aAAa,IAAI,UAAU;IAG3B,aAAa,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI;IAS3C,UAAU,IAAI,OAAO;IAIrB,MAAM,CAAC,WAAW,CAChB,KAAK,EAAE,QAAQ,EACf,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,GACrC;QACD,cAAc,CAAC,MAAM,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,SAAS,EAAE,SAAS,CAAC,CAAC;KACjD;CA+BF;AAED,eAAO,MAAM,KAAK;;;;;CAKjB,CAAC;AAmCF,eAAO,MAAM,MAAM;kBACG,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;CAkEhD,CAAC;AAEF,YAAY,EAAE,SAAS,EAAE,CAAC"}