@manifest-configuration-language/browser 0.0.0-stage → 0.1.2

package/README.md

@@ -1,3 +1,33 @@
-# Temporary Holding Version
+# @manifest-configuration-language/browser
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+`@manifest-configuration-language/browser` runs MCL parse, lint, format, check, evaluate, and render operations in a dedicated Web Worker. Its `prepack` step uses the shared WASM build script, which builds with the active Go toolchain, applies the mise-pinned Binaryen `wasm-opt -Oz`, selects the smaller binary, and copies the matching Go `wasm_exec.js` so both runtime assets ship together. GitHub Release assets use this same output. Update the Go and Binaryen pins in the repository's `mise.toml` when upgrading either tool.
+
+```js
+import { createMclRuntime } from "@manifest-configuration-language/browser";
+
+const runtime = createMclRuntime();
+try {
+  const project = runtime.openProject({
+    "main.mcl": source,
+    "values.json": JSON.stringify(values),
+  });
+  const result = await project.render({ entrypoint: "main.mcl" });
+  console.log(result.yaml);
+} finally {
+  runtime.dispose();
+}
+```
+
+Pass an `AbortSignal` through the final options argument to cancel an operation. The operation timeout covers both worker initialization and execution; `initializationTimeoutMs` is an additional upper bound for worker startup. Cancellation or a timeout terminates the current worker, and the runtime creates a fresh worker for the next operation. Operations are serialized because the current Go runtime uses one in-memory project root.
+
+Project files can be UTF-8 strings or `Uint8Array` values. UTF-8 files remain inline in the JSON request. The Browser SDK copies each `Uint8Array` and transfers its buffer to the Worker; the Worker sends only `{ "encoding": "binary" }` metadata in the request JSON and passes a path-to-`Uint8Array` map as the second argument to `mclWasm.run(requestJSON, binaryFiles)`. The Go runtime copies those bytes into its project filesystem. The SDK-owned and caller-owned arrays remain reusable after each operation.
+
+The package exports `maxSourceBytes`, `maxProjectFiles`, `maxProjectFileBytes`, and `maxProjectBytes` so browser interfaces can display the same limits enforced by the runtime.
+
+MCL decodes the request into a root-relative `io/fs` filesystem for project files, module imports, schemas, resource catalogs, and dependency locks. The runtime limits are defined in the [protocol schema](https://github.com/manifest-configuration-language/mcl/blob/main/cmd/mcl-wasm/protocol.schema.json). The worker blocks `fetch` after loading the WASM runtime assets, so MCL project evaluation cannot make external network requests.
+
+The wire format is described in [`protocol.schema.json`](https://github.com/manifest-configuration-language/mcl/blob/main/cmd/mcl-wasm/protocol.schema.json). Go protocol models are generated with `go generate ./cmd/mcl-wasm`, and the browser package declarations are generated with `npm run generate:protocol`. The browser API declarations reuse the generated operation, diagnostic, and result types. MCL decodes each request into a root-relative `io/fs` project filesystem. Kustomize project overlays and locked Git archives use kyaml's in-memory filesystem, and Helm source loading accepts an `io/fs` filesystem. The Go `wasm_exec.js` runtime supplies its standard browser fallbacks for process, path, and stdout APIs; the Browser SDK does not provide a Node-style project filesystem or require Node polyfills in Vite.
+
+`MclRuntimeError` and lint diagnostics report project-relative paths with UTF-16 start and end positions. Evaluation errors also include related source locations when the Go engine provides them, such as the schema declaration associated with a resource validation error.
+
+The [WebAssembly code size profile](https://github.com/manifest-configuration-language/mcl/blob/main/packages/browser/performance-profile.md) records package-level function body sizes and explains which WebAssembly sections it excludes.

package/dist/mcl.wasm

@@ -0,0 +1,4 @@
+[diffend] Oversized file quarantined before diffing.
+name: package/dist/mcl.wasm
+size: 95920350 bytes
+sha256: 3723f11f7acbd32086281639d28c5d0c25e7f1b9f0593b251876f2c60d1d5f2f

package/dist/wasm_exec.js

@@ -0,0 +1,575 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+"use strict";
+
+(() => {
+	const enosys = () => {
+		const err = new Error("not implemented");
+		err.code = "ENOSYS";
+		return err;
+	};
+
+	if (!globalThis.fs) {
+		let outputBuf = "";
+		globalThis.fs = {
+			constants: { O_WRONLY: -1, O_RDWR: -1, O_CREAT: -1, O_TRUNC: -1, O_APPEND: -1, O_EXCL: -1, O_DIRECTORY: -1 }, // unused
+			writeSync(fd, buf) {
+				outputBuf += decoder.decode(buf);
+				const nl = outputBuf.lastIndexOf("\n");
+				if (nl != -1) {
+					console.log(outputBuf.substring(0, nl));
+					outputBuf = outputBuf.substring(nl + 1);
+				}
+				return buf.length;
+			},
+			write(fd, buf, offset, length, position, callback) {
+				if (offset !== 0 || length !== buf.length || position !== null) {
+					callback(enosys());
+					return;
+				}
+				const n = this.writeSync(fd, buf);
+				callback(null, n);
+			},
+			chmod(path, mode, callback) { callback(enosys()); },
+			chown(path, uid, gid, callback) { callback(enosys()); },
+			close(fd, callback) { callback(enosys()); },
+			fchmod(fd, mode, callback) { callback(enosys()); },
+			fchown(fd, uid, gid, callback) { callback(enosys()); },
+			fstat(fd, callback) { callback(enosys()); },
+			fsync(fd, callback) { callback(null); },
+			ftruncate(fd, length, callback) { callback(enosys()); },
+			lchown(path, uid, gid, callback) { callback(enosys()); },
+			link(path, link, callback) { callback(enosys()); },
+			lstat(path, callback) { callback(enosys()); },
+			mkdir(path, perm, callback) { callback(enosys()); },
+			open(path, flags, mode, callback) { callback(enosys()); },
+			read(fd, buffer, offset, length, position, callback) { callback(enosys()); },
+			readdir(path, callback) { callback(enosys()); },
+			readlink(path, callback) { callback(enosys()); },
+			rename(from, to, callback) { callback(enosys()); },
+			rmdir(path, callback) { callback(enosys()); },
+			stat(path, callback) { callback(enosys()); },
+			symlink(path, link, callback) { callback(enosys()); },
+			truncate(path, length, callback) { callback(enosys()); },
+			unlink(path, callback) { callback(enosys()); },
+			utimes(path, atime, mtime, callback) { callback(enosys()); },
+		};
+	}
+
+	if (!globalThis.process) {
+		globalThis.process = {
+			getuid() { return -1; },
+			getgid() { return -1; },
+			geteuid() { return -1; },
+			getegid() { return -1; },
+			getgroups() { throw enosys(); },
+			pid: -1,
+			ppid: -1,
+			umask() { throw enosys(); },
+			cwd() { throw enosys(); },
+			chdir() { throw enosys(); },
+		}
+	}
+
+	if (!globalThis.path) {
+		globalThis.path = {
+			resolve(...pathSegments) {
+				return pathSegments.join("/");
+			}
+		}
+	}
+
+	if (!globalThis.crypto) {
+		throw new Error("globalThis.crypto is not available, polyfill required (crypto.getRandomValues only)");
+	}
+
+	if (!globalThis.performance) {
+		throw new Error("globalThis.performance is not available, polyfill required (performance.now only)");
+	}
+
+	if (!globalThis.TextEncoder) {
+		throw new Error("globalThis.TextEncoder is not available, polyfill required");
+	}
+
+	if (!globalThis.TextDecoder) {
+		throw new Error("globalThis.TextDecoder is not available, polyfill required");
+	}
+
+	const encoder = new TextEncoder("utf-8");
+	const decoder = new TextDecoder("utf-8");
+
+	globalThis.Go = class {
+		constructor() {
+			this.argv = ["js"];
+			this.env = {};
+			this.exit = (code) => {
+				if (code !== 0) {
+					console.warn("exit code:", code);
+				}
+			};
+			this._exitPromise = new Promise((resolve) => {
+				this._resolveExitPromise = resolve;
+			});
+			this._pendingEvent = null;
+			this._scheduledTimeouts = new Map();
+			this._nextCallbackTimeoutID = 1;
+
+			const setInt64 = (addr, v) => {
+				this.mem.setUint32(addr + 0, v, true);
+				this.mem.setUint32(addr + 4, Math.floor(v / 4294967296), true);
+			}
+
+			const setInt32 = (addr, v) => {
+				this.mem.setUint32(addr + 0, v, true);
+			}
+
+			const getInt64 = (addr) => {
+				const low = this.mem.getUint32(addr + 0, true);
+				const high = this.mem.getInt32(addr + 4, true);
+				return low + high * 4294967296;
+			}
+
+			const loadValue = (addr) => {
+				const f = this.mem.getFloat64(addr, true);
+				if (f === 0) {
+					return undefined;
+				}
+				if (!isNaN(f)) {
+					return f;
+				}
+
+				const id = this.mem.getUint32(addr, true);
+				return this._values[id];
+			}
+
+			const storeValue = (addr, v) => {
+				const nanHead = 0x7FF80000;
+
+				if (typeof v === "number" && v !== 0) {
+					if (isNaN(v)) {
+						this.mem.setUint32(addr + 4, nanHead, true);
+						this.mem.setUint32(addr, 0, true);
+						return;
+					}
+					this.mem.setFloat64(addr, v, true);
+					return;
+				}
+
+				if (v === undefined) {
+					this.mem.setFloat64(addr, 0, true);
+					return;
+				}
+
+				let id = this._ids.get(v);
+				if (id === undefined) {
+					id = this._idPool.pop();
+					if (id === undefined) {
+						id = this._values.length;
+					}
+					this._values[id] = v;
+					this._goRefCounts[id] = 0;
+					this._ids.set(v, id);
+				}
+				this._goRefCounts[id]++;
+				let typeFlag = 0;
+				switch (typeof v) {
+					case "object":
+						if (v !== null) {
+							typeFlag = 1;
+						}
+						break;
+					case "string":
+						typeFlag = 2;
+						break;
+					case "symbol":
+						typeFlag = 3;
+						break;
+					case "function":
+						typeFlag = 4;
+						break;
+				}
+				this.mem.setUint32(addr + 4, nanHead | typeFlag, true);
+				this.mem.setUint32(addr, id, true);
+			}
+
+			const loadSlice = (addr) => {
+				const array = getInt64(addr + 0);
+				const len = getInt64(addr + 8);
+				return new Uint8Array(this._inst.exports.mem.buffer, array, len);
+			}
+
+			const loadSliceOfValues = (addr) => {
+				const array = getInt64(addr + 0);
+				const len = getInt64(addr + 8);
+				const a = new Array(len);
+				for (let i = 0; i < len; i++) {
+					a[i] = loadValue(array + i * 8);
+				}
+				return a;
+			}
+
+			const loadString = (addr) => {
+				const saddr = getInt64(addr + 0);
+				const len = getInt64(addr + 8);
+				return decoder.decode(new DataView(this._inst.exports.mem.buffer, saddr, len));
+			}
+
+			const testCallExport = (a, b) => {
+				this._inst.exports.testExport0();
+				return this._inst.exports.testExport(a, b);
+			}
+
+			const timeOrigin = Date.now() - performance.now();
+			this.importObject = {
+				_gotest: {
+					add: (a, b) => a + b,
+					callExport: testCallExport,
+				},
+				gojs: {
+					// Go's SP does not change as long as no Go code is running. Some operations (e.g. calls, getters and setters)
+					// may synchronously trigger a Go event handler. This makes Go code get executed in the middle of the imported
+					// function. A goroutine can switch to a new stack if the current stack is too small (see morestack function).
+					// This changes the SP, thus we have to update the SP used by the imported function.
+
+					// func wasmExit(code int32)
+					"runtime.wasmExit": (sp) => {
+						sp >>>= 0;
+						const code = this.mem.getInt32(sp + 8, true);
+						this.exited = true;
+						delete this._inst;
+						delete this._values;
+						delete this._goRefCounts;
+						delete this._ids;
+						delete this._idPool;
+						this.exit(code);
+					},
+
+					// func wasmWrite(fd uintptr, p unsafe.Pointer, n int32)
+					"runtime.wasmWrite": (sp) => {
+						sp >>>= 0;
+						const fd = getInt64(sp + 8);
+						const p = getInt64(sp + 16);
+						const n = this.mem.getInt32(sp + 24, true);
+						fs.writeSync(fd, new Uint8Array(this._inst.exports.mem.buffer, p, n));
+					},
+
+					// func resetMemoryDataView()
+					"runtime.resetMemoryDataView": (sp) => {
+						sp >>>= 0;
+						this.mem = new DataView(this._inst.exports.mem.buffer);
+					},
+
+					// func nanotime1() int64
+					"runtime.nanotime1": (sp) => {
+						sp >>>= 0;
+						setInt64(sp + 8, (timeOrigin + performance.now()) * 1000000);
+					},
+
+					// func walltime() (sec int64, nsec int32)
+					"runtime.walltime": (sp) => {
+						sp >>>= 0;
+						const msec = (new Date).getTime();
+						setInt64(sp + 8, msec / 1000);
+						this.mem.setInt32(sp + 16, (msec % 1000) * 1000000, true);
+					},
+
+					// func scheduleTimeoutEvent(delay int64) int32
+					"runtime.scheduleTimeoutEvent": (sp) => {
+						sp >>>= 0;
+						const id = this._nextCallbackTimeoutID;
+						this._nextCallbackTimeoutID++;
+						this._scheduledTimeouts.set(id, setTimeout(
+							() => {
+								this._resume();
+								while (this._scheduledTimeouts.has(id)) {
+									// for some reason Go failed to register the timeout event, log and try again
+									// (temporary workaround for https://github.com/golang/go/issues/28975)
+									console.warn("scheduleTimeoutEvent: missed timeout event");
+									this._resume();
+								}
+							},
+							getInt64(sp + 8),
+						));
+						this.mem.setInt32(sp + 16, id, true);
+					},
+
+					// func clearTimeoutEvent(id int32)
+					"runtime.clearTimeoutEvent": (sp) => {
+						sp >>>= 0;
+						const id = this.mem.getInt32(sp + 8, true);
+						clearTimeout(this._scheduledTimeouts.get(id));
+						this._scheduledTimeouts.delete(id);
+					},
+
+					// func getRandomData(r []byte)
+					"runtime.getRandomData": (sp) => {
+						sp >>>= 0;
+						crypto.getRandomValues(loadSlice(sp + 8));
+					},
+
+					// func finalizeRef(v ref)
+					"syscall/js.finalizeRef": (sp) => {
+						sp >>>= 0;
+						const id = this.mem.getUint32(sp + 8, true);
+						this._goRefCounts[id]--;
+						if (this._goRefCounts[id] === 0) {
+							const v = this._values[id];
+							this._values[id] = null;
+							this._ids.delete(v);
+							this._idPool.push(id);
+						}
+					},
+
+					// func stringVal(value string) ref
+					"syscall/js.stringVal": (sp) => {
+						sp >>>= 0;
+						storeValue(sp + 24, loadString(sp + 8));
+					},
+
+					// func valueGet(v ref, p string) ref
+					"syscall/js.valueGet": (sp) => {
+						sp >>>= 0;
+						const result = Reflect.get(loadValue(sp + 8), loadString(sp + 16));
+						sp = this._inst.exports.getsp() >>> 0; // see comment above
+						storeValue(sp + 32, result);
+					},
+
+					// func valueSet(v ref, p string, x ref)
+					"syscall/js.valueSet": (sp) => {
+						sp >>>= 0;
+						Reflect.set(loadValue(sp + 8), loadString(sp + 16), loadValue(sp + 32));
+					},
+
+					// func valueDelete(v ref, p string)
+					"syscall/js.valueDelete": (sp) => {
+						sp >>>= 0;
+						Reflect.deleteProperty(loadValue(sp + 8), loadString(sp + 16));
+					},
+
+					// func valueIndex(v ref, i int) ref
+					"syscall/js.valueIndex": (sp) => {
+						sp >>>= 0;
+						storeValue(sp + 24, Reflect.get(loadValue(sp + 8), getInt64(sp + 16)));
+					},
+
+					// valueSetIndex(v ref, i int, x ref)
+					"syscall/js.valueSetIndex": (sp) => {
+						sp >>>= 0;
+						Reflect.set(loadValue(sp + 8), getInt64(sp + 16), loadValue(sp + 24));
+					},
+
+					// func valueCall(v ref, m string, args []ref) (ref, bool)
+					"syscall/js.valueCall": (sp) => {
+						sp >>>= 0;
+						try {
+							const v = loadValue(sp + 8);
+							const m = Reflect.get(v, loadString(sp + 16));
+							const args = loadSliceOfValues(sp + 32);
+							const result = Reflect.apply(m, v, args);
+							sp = this._inst.exports.getsp() >>> 0; // see comment above
+							storeValue(sp + 56, result);
+							this.mem.setUint8(sp + 64, 1);
+						} catch (err) {
+							sp = this._inst.exports.getsp() >>> 0; // see comment above
+							storeValue(sp + 56, err);
+							this.mem.setUint8(sp + 64, 0);
+						}
+					},
+
+					// func valueInvoke(v ref, args []ref) (ref, bool)
+					"syscall/js.valueInvoke": (sp) => {
+						sp >>>= 0;
+						try {
+							const v = loadValue(sp + 8);
+							const args = loadSliceOfValues(sp + 16);
+							const result = Reflect.apply(v, undefined, args);
+							sp = this._inst.exports.getsp() >>> 0; // see comment above
+							storeValue(sp + 40, result);
+							this.mem.setUint8(sp + 48, 1);
+						} catch (err) {
+							sp = this._inst.exports.getsp() >>> 0; // see comment above
+							storeValue(sp + 40, err);
+							this.mem.setUint8(sp + 48, 0);
+						}
+					},
+
+					// func valueNew(v ref, args []ref) (ref, bool)
+					"syscall/js.valueNew": (sp) => {
+						sp >>>= 0;
+						try {
+							const v = loadValue(sp + 8);
+							const args = loadSliceOfValues(sp + 16);
+							const result = Reflect.construct(v, args);
+							sp = this._inst.exports.getsp() >>> 0; // see comment above
+							storeValue(sp + 40, result);
+							this.mem.setUint8(sp + 48, 1);
+						} catch (err) {
+							sp = this._inst.exports.getsp() >>> 0; // see comment above
+							storeValue(sp + 40, err);
+							this.mem.setUint8(sp + 48, 0);
+						}
+					},
+
+					// func valueLength(v ref) int
+					"syscall/js.valueLength": (sp) => {
+						sp >>>= 0;
+						setInt64(sp + 16, parseInt(loadValue(sp + 8).length));
+					},
+
+					// valuePrepareString(v ref) (ref, int)
+					"syscall/js.valuePrepareString": (sp) => {
+						sp >>>= 0;
+						const str = encoder.encode(String(loadValue(sp + 8)));
+						storeValue(sp + 16, str);
+						setInt64(sp + 24, str.length);
+					},
+
+					// valueLoadString(v ref, b []byte)
+					"syscall/js.valueLoadString": (sp) => {
+						sp >>>= 0;
+						const str = loadValue(sp + 8);
+						loadSlice(sp + 16).set(str);
+					},
+
+					// func valueInstanceOf(v ref, t ref) bool
+					"syscall/js.valueInstanceOf": (sp) => {
+						sp >>>= 0;
+						this.mem.setUint8(sp + 24, (loadValue(sp + 8) instanceof loadValue(sp + 16)) ? 1 : 0);
+					},
+
+					// func copyBytesToGo(dst []byte, src ref) (int, bool)
+					"syscall/js.copyBytesToGo": (sp) => {
+						sp >>>= 0;
+						const dst = loadSlice(sp + 8);
+						const src = loadValue(sp + 32);
+						if (!(src instanceof Uint8Array || src instanceof Uint8ClampedArray)) {
+							this.mem.setUint8(sp + 48, 0);
+							return;
+						}
+						const toCopy = src.subarray(0, dst.length);
+						dst.set(toCopy);
+						setInt64(sp + 40, toCopy.length);
+						this.mem.setUint8(sp + 48, 1);
+					},
+
+					// func copyBytesToJS(dst ref, src []byte) (int, bool)
+					"syscall/js.copyBytesToJS": (sp) => {
+						sp >>>= 0;
+						const dst = loadValue(sp + 8);
+						const src = loadSlice(sp + 16);
+						if (!(dst instanceof Uint8Array || dst instanceof Uint8ClampedArray)) {
+							this.mem.setUint8(sp + 48, 0);
+							return;
+						}
+						const toCopy = src.subarray(0, dst.length);
+						dst.set(toCopy);
+						setInt64(sp + 40, toCopy.length);
+						this.mem.setUint8(sp + 48, 1);
+					},
+
+					"debug": (value) => {
+						console.log(value);
+					},
+				}
+			};
+		}
+
+		async run(instance) {
+			if (!(instance instanceof WebAssembly.Instance)) {
+				throw new Error("Go.run: WebAssembly.Instance expected");
+			}
+			this._inst = instance;
+			this.mem = new DataView(this._inst.exports.mem.buffer);
+			this._values = [ // JS values that Go currently has references to, indexed by reference id
+				NaN,
+				0,
+				null,
+				true,
+				false,
+				globalThis,
+				this,
+			];
+			this._goRefCounts = new Array(this._values.length).fill(Infinity); // number of references that Go has to a JS value, indexed by reference id
+			this._ids = new Map([ // mapping from JS values to reference ids
+				[0, 1],
+				[null, 2],
+				[true, 3],
+				[false, 4],
+				[globalThis, 5],
+				[this, 6],
+			]);
+			this._idPool = [];   // unused ids that have been garbage collected
+			this.exited = false; // whether the Go program has exited
+
+			// Pass command line arguments and environment variables to WebAssembly by writing them to the linear memory.
+			let offset = 4096;
+
+			const strPtr = (str) => {
+				const ptr = offset;
+				const bytes = encoder.encode(str + "\0");
+				new Uint8Array(this.mem.buffer, offset, bytes.length).set(bytes);
+				offset += bytes.length;
+				if (offset % 8 !== 0) {
+					offset += 8 - (offset % 8);
+				}
+				return ptr;
+			};
+
+			const argc = this.argv.length;
+
+			const argvPtrs = [];
+			this.argv.forEach((arg) => {
+				argvPtrs.push(strPtr(arg));
+			});
+			argvPtrs.push(0);
+
+			const keys = Object.keys(this.env).sort();
+			keys.forEach((key) => {
+				argvPtrs.push(strPtr(`${key}=${this.env[key]}`));
+			});
+			argvPtrs.push(0);
+
+			const argv = offset;
+			argvPtrs.forEach((ptr) => {
+				this.mem.setUint32(offset, ptr, true);
+				this.mem.setUint32(offset + 4, 0, true);
+				offset += 8;
+			});
+
+			// The linker guarantees global data starts from at least wasmMinDataAddr.
+			// Keep in sync with cmd/link/internal/ld/data.go:wasmMinDataAddr.
+			const wasmMinDataAddr = 4096 + 8192;
+			if (offset >= wasmMinDataAddr) {
+				throw new Error("total length of command line and environment variables exceeds limit");
+			}
+
+			this._inst.exports.run(argc, argv);
+			if (this.exited) {
+				this._resolveExitPromise();
+			}
+			await this._exitPromise;
+		}
+
+		_resume() {
+			if (this.exited) {
+				throw new Error("Go program has already exited");
+			}
+			this._inst.exports.resume();
+			if (this.exited) {
+				this._resolveExitPromise();
+			}
+		}
+
+		_makeFuncWrapper(id) {
+			const go = this;
+			return function () {
+				const event = { id: id, this: this, args: arguments };
+				go._pendingEvent = event;
+				go._resume();
+				return event.result;
+			};
+		}
+	}
+})();

package/package.json

@@ -1,6 +1,38 @@
 {
   "name": "@manifest-configuration-language/browser",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.2",
+  "description": "Run MCL projects in a browser Web Worker using the Go WebAssembly runtime.",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/manifest-configuration-language/mcl.git",
+    "directory": "packages/browser"
+  },
+  "type": "module",
+  "license": "Apache-2.0",
+  "files": [
+    "dist",
+    "src",
+    "README.md"
+  ],
+  "exports": {
+    ".": {
+      "types": "./src/index.d.ts",
+      "import": "./src/index.js"
+    }
+  },
+  "scripts": {
+    "build:wasm": "node ./scripts/build-wasm.mjs",
+    "generate:protocol": "node ./scripts/generate-protocol.mjs",
+    "test:unit": "node --test ./test/runtime-lifecycle.test.mjs",
+    "prepack": "npm run build:wasm"
+  },
+  "engines": {
+    "node": ">=20.19"
+  },
+  "devDependencies": {
+    "json-schema-to-typescript": "16.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/src/index.d.ts

@@ -0,0 +1,81 @@
+import type {
+  CheckResult,
+  Error as ProtocolError,
+  EvaluateResult,
+  FormatResult,
+  LintDiagnostic as ProtocolLintDiagnostic,
+  ParseResult,
+  RelatedLocation as ProtocolRelatedLocation,
+  RenderResult,
+  Request as WasmRequest,
+} from "./protocol.js";
+
+export type MclOperation = WasmRequest["operation"];
+
+export declare const maxSourceBytes: number;
+export declare const maxProjectFiles: number;
+export declare const maxProjectFileBytes: number;
+export declare const maxProjectBytes: number;
+
+/** Root-relative project files passed to MCL's per-request filesystem. Uint8Array values are copied before transfer so callers can reuse them. */
+export type ProjectFile = string | Uint8Array;
+export type ProjectFiles = Readonly<Record<string, ProjectFile>>;
+
+export type MclError = ProtocolError;
+
+export type LintDiagnostic = ProtocolLintDiagnostic;
+
+export type MclResult =
+  | ({ operation: "parse" } & ParseResult)
+  | { operation: "lint"; diagnostics: ProtocolLintDiagnostic[] }
+  | ({ operation: "format" } & FormatResult)
+  | ({ operation: "check" } & CheckResult)
+  | ({ operation: "evaluate" } & EvaluateResult)
+  | ({ operation: "render" } & RenderResult);
+
+export interface RuntimeOptions {
+  initializationTimeoutMs?: number;
+  operationTimeoutMs?: number;
+  workerFactory?: () => Worker;
+}
+
+export interface MclRuntime {
+  openProject(files: ProjectFiles): MclProject;
+  parse(source: string, options?: RequestOptions): Promise<MclResult & { operation: "parse" }>;
+  lint(source: string, options?: RequestOptions): Promise<MclResult & { operation: "lint" }>;
+  format(source: string, options?: RequestOptions): Promise<MclResult & { operation: "format" }>;
+  check(source: string, files?: ProjectFiles, options?: RequestOptions): Promise<MclResult & { operation: "check" }>;
+  evaluate(source: string, files?: ProjectFiles, options?: RequestOptions): Promise<MclResult & { operation: "evaluate" }>;
+  render(source: string, files?: ProjectFiles, options?: RequestOptions): Promise<MclResult & { operation: "render" }>;
+  dispose(): void;
+}
+
+export interface MclProject {
+  parse(options?: ProjectOperationOptions): Promise<MclResult & { operation: "parse" }>;
+  lint(options?: ProjectOperationOptions): Promise<MclResult & { operation: "lint" }>;
+  format(options?: ProjectOperationOptions): Promise<MclResult & { operation: "format" }>;
+  check(options?: ProjectOperationOptions): Promise<MclResult & { operation: "check" }>;
+  evaluate(options?: ProjectOperationOptions): Promise<MclResult & { operation: "evaluate" }>;
+  render(options?: ProjectOperationOptions): Promise<MclResult & { operation: "render" }>;
+}
+
+export interface RequestOptions {
+  signal?: AbortSignal;
+  timeoutMs?: number;
+}
+
+export interface ProjectOperationOptions extends RequestOptions {
+  entrypoint?: string;
+}
+
+export declare class MclRuntimeError extends Error {
+  readonly code: string;
+  readonly path?: string;
+  readonly line?: number;
+  readonly column?: number;
+  readonly endLine?: number;
+  readonly endColumn?: number;
+  readonly related?: ProtocolRelatedLocation[];
+}
+
+export declare function createMclRuntime(options?: RuntimeOptions): MclRuntime;

package/src/index.js

@@ -0,0 +1,281 @@
+import { maxProjectBytes, maxProjectFileBytes, maxProjectFiles, maxSourceBytes } from "./limits.js";
+
+export { maxProjectBytes, maxProjectFileBytes, maxProjectFiles, maxSourceBytes };
+
+const defaultInitializationTimeoutMs = 30_000;
+const defaultOperationTimeoutMs = 10_000;
+const wasmURL = new URL("../dist/mcl.wasm", import.meta.url).href;
+const wasmExecURL = new URL("../dist/wasm_exec.js", import.meta.url).href;
+
+export class MclRuntimeError extends Error {
+  constructor(error) {
+    super(error.message);
+    this.name = "MclRuntimeError";
+    this.code = error.code;
+    this.path = error.path;
+    this.line = error.line;
+    this.column = error.column;
+    this.endLine = error.endLine;
+    this.endColumn = error.endColumn;
+    this.related = error.related;
+  }
+}
+
+export function createMclRuntime(options = {}) {
+  const workerFactory = options.workerFactory ?? (() => new Worker(new URL("./worker.js", import.meta.url), { type: "module" }));
+  const initializationTimeoutMs = options.initializationTimeoutMs ?? defaultInitializationTimeoutMs;
+  let worker;
+  let ready;
+  let disposed = false;
+  let queue = Promise.resolve();
+  let sequence = 0;
+  let workerGeneration = 0;
+  let stopCurrent;
+  let stopInitialization;
+
+  function startWorker() {
+    if (disposed) return Promise.reject(new Error("MCL runtime has been disposed"));
+    if (ready) return ready;
+    const currentWorker = workerFactory();
+    worker = currentWorker;
+    workerGeneration++;
+    let resolveReady;
+    let rejectReady;
+    const initialization = new Promise((resolve, reject) => {
+      resolveReady = resolve;
+      rejectReady = reject;
+    });
+    ready = initialization;
+    const timer = setTimeout(() => fail(new Error("MCL WebAssembly initialization timed out")), initializationTimeoutMs);
+    const onMessage = (event) => {
+      if (event.data?.type === "ready") {
+        clearTimeout(timer);
+        currentWorker.removeEventListener("message", onMessage);
+        currentWorker.removeEventListener("error", onError);
+        if (stopInitialization === fail) stopInitialization = undefined;
+        resolveReady();
+      } else if (event.data?.type === "fatal") {
+        fail(new Error(event.data.message || "MCL WebAssembly initialization failed"));
+      }
+    };
+    const onError = (event) => fail(new Error(event.message || "MCL worker failed"));
+    function fail(error) {
+      clearTimeout(timer);
+      currentWorker.removeEventListener("message", onMessage);
+      currentWorker.removeEventListener("error", onError);
+      currentWorker.terminate();
+      if (worker === currentWorker) {
+        worker = undefined;
+        ready = undefined;
+      }
+      if (stopInitialization === fail) stopInitialization = undefined;
+      rejectReady(error);
+    }
+    stopInitialization = fail;
+    try {
+      currentWorker.addEventListener("message", onMessage);
+      currentWorker.addEventListener("error", onError);
+      currentWorker.postMessage({ type: "configure", wasmURL, wasmExecURL });
+    } catch (error) {
+      fail(error);
+    }
+    return initialization;
+  }
+
+  async function waitUntilReady(signal) {
+    if (!signal) return startWorker();
+    if (signal.aborted) throw new DOMException("The operation was aborted", "AbortError");
+    let onAbort;
+    try {
+      await Promise.race([
+        startWorker(),
+        new Promise((_, reject) => {
+          onAbort = () => {
+            stopInitialization?.(new DOMException("The operation was aborted", "AbortError"));
+          };
+          signal.addEventListener("abort", onAbort, { once: true });
+        }),
+      ]);
+    } finally {
+      signal.removeEventListener("abort", onAbort);
+    }
+  }
+
+  async function execute(operation, source, files, requestOptions = {}, entrypoint = "main.mcl") {
+    const signal = requestOptions.signal;
+    if (signal?.aborted) throw new DOMException("The operation was aborted", "AbortError");
+    const run = async () => {
+      if (disposed) throw new Error("MCL runtime has been disposed");
+      if (requestOptions.signal?.aborted) throw new DOMException("The operation was aborted", "AbortError");
+      const timeoutMs = requestOptions.timeoutMs ?? options.operationTimeoutMs ?? defaultOperationTimeoutMs;
+      const timeoutError = new MclRuntimeError({ code: "MCL-WASM-TIMEOUT", message: "MCL operation timed out" });
+      let timer;
+      try {
+        if (timeoutMs <= 0) throw timeoutError;
+        timer = setTimeout(() => {
+          if (stopCurrent) stopCurrent(timeoutError);
+          else stopInitialization?.(timeoutError);
+        }, timeoutMs);
+        await waitUntilReady(requestOptions.signal);
+        if (requestOptions.signal?.aborted) throw new DOMException("The operation was aborted", "AbortError");
+        const preparedFiles = prepareFilesForTransfer(source, files, entrypoint);
+        const requestId = ++sequence;
+        const currentWorker = worker;
+        const currentGeneration = workerGeneration;
+        return await new Promise((resolve, reject) => {
+          let settled = false;
+          const cleanup = () => {
+            clearTimeout(timer);
+            currentWorker.removeEventListener("message", onMessage);
+            currentWorker.removeEventListener("error", onError);
+            requestOptions.signal?.removeEventListener("abort", onAbort);
+          };
+          const finish = (callback, value) => {
+            if (settled) return;
+            settled = true;
+            cleanup();
+            if (stopCurrent === stop) stopCurrent = undefined;
+            callback(value);
+          };
+          const onMessage = (event) => {
+            if (worker !== currentWorker || workerGeneration !== currentGeneration) return;
+            const response = event.data;
+            if (response?.type !== "response" || response.requestId !== requestId) return;
+            if (!response.value.ok) finish(reject, new MclRuntimeError(response.value.error));
+            else if (operation === "lint") finish(resolve, { operation, diagnostics: response.value.result });
+            else finish(resolve, { operation, ...response.value.result });
+          };
+          const onError = (event) => stop(new Error(event.message || "MCL worker failed"));
+          const onAbort = () => stop(new DOMException("The operation was aborted", "AbortError"));
+          const stop = (error) => {
+            finish(reject, error);
+            currentWorker.terminate();
+            if (worker === currentWorker) {
+              worker = undefined;
+              ready = undefined;
+            }
+          };
+          currentWorker.addEventListener("message", onMessage);
+          currentWorker.addEventListener("error", onError);
+          requestOptions.signal?.addEventListener("abort", onAbort, { once: true });
+          stopCurrent = stop;
+          try {
+            currentWorker.postMessage({ type: "run", requestId, operation, source, files: preparedFiles.files, entrypoint }, preparedFiles.transferables);
+          } catch (error) {
+            stop(error);
+          }
+        });
+      } catch (error) {
+        clearTimeout(timer);
+        throw error;
+      }
+    };
+    const result = queue.then(run, run);
+    queue = result.catch(() => {});
+    if (!signal) return result;
+
+    let onAbort;
+    const aborted = new Promise((_, reject) => {
+      onAbort = () => reject(new DOMException("The operation was aborted", "AbortError"));
+      signal.addEventListener("abort", onAbort, { once: true });
+      if (signal.aborted) onAbort();
+    });
+    return Promise.race([result, aborted]).finally(() => signal.removeEventListener("abort", onAbort));
+  }
+
+  function openProject(files) {
+    const entries = Object.entries(files ?? {});
+    if (entries.length === 0) throw new TypeError("Project must contain at least one MCL source file");
+    if (entries.length > maxProjectFiles) throw new RangeError(`Project has more than ${maxProjectFiles} files`);
+    let totalBytes = 0;
+    // Project paths are user controlled; a null prototype keeps names such as
+    // `__proto__` as ordinary file paths instead of mutating the file map.
+    const projectFiles = Object.create(null);
+    for (const [filePath, content] of entries) {
+      if (!isSafeRelativePath(filePath)) throw new TypeError(`Invalid project file path: ${filePath}`);
+      if (typeof content !== "string" && !(content instanceof Uint8Array)) throw new TypeError(`Project file ${filePath} must be a string or Uint8Array`);
+      const fileBytes = typeof content === "string" ? new TextEncoder().encode(content).byteLength : content.byteLength;
+      if (fileBytes > maxProjectFileBytes) throw new RangeError(`Project file ${filePath} exceeds the ${maxProjectFileBytes}-byte limit`);
+      totalBytes += fileBytes;
+      if (totalBytes > maxProjectBytes) throw new RangeError(`Project files exceed the ${maxProjectBytes}-byte limit`);
+      projectFiles[filePath] = typeof content === "string" ? content : new Uint8Array(content);
+    }
+
+    const sourcePaths = Object.keys(projectFiles).filter((filePath) => filePath.endsWith(".mcl")).sort();
+    const defaultEntrypoint = Object.hasOwn(projectFiles, "main.mcl") ? "main.mcl" : sourcePaths.length === 1 ? sourcePaths[0] : undefined;
+    const runProjectOperation = async (operation, requestOptions = {}) => {
+      const entrypoint = requestOptions.entrypoint ?? defaultEntrypoint;
+      if (!entrypoint) throw new TypeError("Set entrypoint when the project has multiple MCL source files");
+      if (!isSafeRelativePath(entrypoint) || !Object.hasOwn(projectFiles, entrypoint)) throw new TypeError(`Project entrypoint does not exist: ${entrypoint}`);
+      const entry = projectFiles[entrypoint];
+      const source = typeof entry === "string" ? entry : new TextDecoder("utf-8", { fatal: true }).decode(entry);
+      const sourceBytes = new TextEncoder().encode(source).byteLength;
+      if (sourceBytes > maxSourceBytes) throw new RangeError(`Source exceeds the ${maxSourceBytes}-byte limit`);
+      const projectBytes = Object.values(projectFiles).reduce((total, file) => total + (typeof file === "string" ? new TextEncoder().encode(file).byteLength : file.byteLength), 0);
+      if (projectBytes > maxProjectBytes) throw new RangeError(`Project files exceed the ${maxProjectBytes}-byte limit`);
+      const otherFiles = Object.fromEntries(Object.entries(projectFiles).filter(([filePath]) => filePath !== entrypoint));
+      return execute(operation, source, otherFiles, requestOptions, entrypoint);
+    };
+    return Object.freeze({
+      parse: (requestOptions) => runProjectOperation("parse", requestOptions),
+      lint: (requestOptions) => runProjectOperation("lint", requestOptions),
+      format: (requestOptions) => runProjectOperation("format", requestOptions),
+      check: (requestOptions) => runProjectOperation("check", requestOptions),
+      evaluate: (requestOptions) => runProjectOperation("evaluate", requestOptions),
+      render: (requestOptions) => runProjectOperation("render", requestOptions),
+    });
+  }
+
+  function isSafeRelativePath(filePath) {
+    return typeof filePath === "string" && filePath.length > 0 && !/^[a-z]:/i.test(filePath) && !filePath.startsWith("/") && !filePath.includes("\\") && filePath.split("/").every((part) => part && part !== "." && part !== "..");
+  }
+
+  function prepareFilesForTransfer(source, files, entrypoint) {
+    if (!isSafeRelativePath(entrypoint)) throw new TypeError(`Invalid project entrypoint: ${entrypoint}`);
+    const sourceBytes = new TextEncoder().encode(source).byteLength;
+    if (sourceBytes > maxSourceBytes) throw new RangeError(`Source exceeds the ${maxSourceBytes}-byte limit`);
+    const entries = Object.entries(files ?? {});
+    if (entries.length + 1 > maxProjectFiles) throw new RangeError(`Project has more than ${maxProjectFiles} files`);
+    let totalBytes = sourceBytes;
+    const transferredFiles = Object.create(null);
+    const transferables = [];
+    for (const [filePath, content] of entries) {
+      if (!isSafeRelativePath(filePath) || filePath === entrypoint) throw new TypeError(`Invalid project file path: ${filePath}`);
+      if (typeof content === "string") {
+        const fileBytes = new TextEncoder().encode(content).byteLength;
+        if (fileBytes > maxProjectFileBytes) throw new RangeError(`Project file ${filePath} exceeds the ${maxProjectFileBytes}-byte limit`);
+        totalBytes += fileBytes;
+        transferredFiles[filePath] = content;
+      } else if (content instanceof Uint8Array) {
+        if (content.byteLength > maxProjectFileBytes) throw new RangeError(`Project file ${filePath} exceeds the ${maxProjectFileBytes}-byte limit`);
+        totalBytes += content.byteLength;
+        const copy = new Uint8Array(content);
+        transferredFiles[filePath] = copy;
+        transferables.push(copy.buffer);
+      } else {
+        throw new TypeError(`Project file ${filePath} must be a string or Uint8Array`);
+      }
+      if (totalBytes > maxProjectBytes) throw new RangeError(`Project files exceed the ${maxProjectBytes}-byte limit`);
+    }
+    return { files: transferredFiles, transferables };
+  }
+
+  return {
+    openProject,
+    parse: (source, requestOptions) => execute("parse", source, undefined, requestOptions),
+    lint: (source, requestOptions) => execute("lint", source, undefined, requestOptions),
+    format: (source, requestOptions) => execute("format", source, undefined, requestOptions),
+    check: (source, files, requestOptions) => execute("check", source, files, requestOptions),
+    evaluate: (source, files, requestOptions) => execute("evaluate", source, files, requestOptions),
+    render: (source, files, requestOptions) => execute("render", source, files, requestOptions),
+    dispose() {
+      if (disposed) return;
+      disposed = true;
+      stopCurrent?.(new Error("MCL runtime has been disposed"));
+      stopInitialization?.(new Error("MCL runtime has been disposed"));
+      worker?.terminate();
+      worker = undefined;
+      ready = undefined;
+    },
+  };
+}

package/src/limits.js

@@ -0,0 +1,7 @@
+// Generated from cmd/mcl-wasm/protocol.schema.json. Do not edit.
+export const maxSourceBytes = 65536;
+export const maxProjectFiles = 4096;
+export const maxProjectFileBytes = 16777216;
+export const maxProjectBytes = 67108864;
+export const maxOutputBytes = 1048576;
+export const evaluationTimeoutMillis = 4000;

package/src/protocol.d.ts

@@ -0,0 +1,84 @@
+/* Generated from cmd/mcl-wasm/protocol.schema.json. Do not edit. */
+
+export type MCLWebAssemblyRequestAndResponseProtocol = Request | Response;
+/**
+ * Binary files omit content and are supplied in the optional second run argument under the same path.
+ */
+export type FileInput = {
+  encoding: "utf8" | "binary";
+  content?: string;
+};
+export type LintResult = LintDiagnostic[];
+
+export interface Request {
+  requestId?: number;
+  revision?: number;
+  operation: "parse" | "lint" | "format" | "check" | "evaluate" | "render";
+  /**
+   * Project-relative MCL source path. Defaults to main.mcl.
+   */
+  entrypoint?: string;
+  /**
+   * UTF-8 entrypoint source, limited by the runtime.
+   */
+  source: string;
+  /**
+   * Project files are limited by the runtime; this count excludes the entrypoint.
+   */
+  files?: {
+    [k: string]: FileInput;
+  };
+}
+export interface Response {
+  requestId: number;
+  revision?: number;
+  ok: boolean;
+  result?: ParseResult | LintResult | FormatResult | CheckResult | EvaluateResult | RenderResult;
+  error?: Error;
+}
+export interface ParseResult {
+  declarations: number;
+}
+export interface LintDiagnostic {
+  code: string;
+  message: string;
+  severity: string;
+  path: string;
+  line: number;
+  column: number;
+  endLine: number;
+  endColumn: number;
+}
+export interface FormatResult {
+  source: string;
+}
+export interface CheckResult {
+  valid: true;
+  artifacts: number;
+}
+export interface EvaluateResult {
+  artifacts: number;
+  renderedBytes: number;
+}
+export interface RenderResult {
+  yaml: string;
+  artifacts: number;
+}
+export interface Error {
+  code: string;
+  message: string;
+  path?: string;
+  line?: number;
+  column?: number;
+  endLine?: number;
+  endColumn?: number;
+  related?: RelatedLocation[];
+}
+export interface RelatedLocation {
+  path: string;
+  message: string;
+  line: number;
+  column: number;
+  endLine: number;
+  endColumn: number;
+}

package/src/worker.js

@@ -0,0 +1,145 @@
+let initialized;
+let runtimeAssets;
+let wasmMemory;
+let networkAccessDenied = false;
+const runtimeFetch = globalThis.fetch.bind(globalThis);
+const networkAPINames = [
+  "Worker",
+  "SharedWorker",
+  "XMLHttpRequest",
+  "WebSocket",
+  "EventSource",
+  "WebTransport",
+  "WebSocketStream",
+  "RTCPeerConnection",
+  "importScripts",
+];
+const originalFetch = globalThis.fetch;
+const originalNetworkAPIs = new Map(
+  networkAPINames
+    .filter((name) => typeof globalThis[name] === "function")
+    .map((name) => [name, globalThis[name]]),
+);
+
+function denyNetworkAccess() {
+  globalThis.fetch = () => Promise.reject(new TypeError("Network access is disabled in the MCL runtime"));
+  for (const [name] of originalNetworkAPIs) {
+    Object.defineProperty(globalThis, name, {
+      configurable: true,
+      writable: true,
+      value: function MclNetworkAccessDenied() {
+        throw new TypeError("Network access is disabled in the MCL runtime");
+      },
+    });
+  }
+  networkAccessDenied = true;
+}
+
+async function probeNetworkAccess(url) {
+  let fetchBlocked = false;
+  try {
+    await globalThis.fetch(url);
+  } catch {
+    fetchBlocked = true;
+  }
+
+  const availableAPIs = ["fetch", ...originalNetworkAPIs.keys()];
+  const blockedAPIs = availableAPIs.filter(
+    (name) => name === "fetch" ? globalThis.fetch !== originalFetch : globalThis[name] !== originalNetworkAPIs.get(name),
+  );
+  return { fetchBlocked, availableAPIs, blockedAPIs };
+}
+
+async function initialize() {
+  if (initialized) return initialized;
+  initialized = (async () => {
+    if (!runtimeAssets?.wasmURL || !runtimeAssets?.wasmExecURL) throw new Error("MCL runtime assets were not configured");
+    await import(runtimeAssets.wasmExecURL);
+    const go = new Go();
+    const response = await runtimeFetch(runtimeAssets.wasmURL);
+    if (!response.ok) throw new Error(`Unable to load MCL WebAssembly: ${response.status}`);
+    const instantiateStartedAt = performance.now();
+    // Load the runtime before denying network APIs, then lock them before Go starts.
+    denyNetworkAccess();
+    let instance;
+    try {
+      ({ instance } = await WebAssembly.instantiateStreaming(response.clone(), go.importObject));
+    } catch {
+      ({ instance } = await WebAssembly.instantiate(await response.arrayBuffer(), go.importObject));
+    }
+    const wasmInstantiateMs = performance.now() - instantiateStartedAt;
+    wasmMemory = instance.exports.mem;
+    void go.run(instance);
+    while (!globalThis.mclWasmReady) await new Promise((resolve) => setTimeout(resolve, 0));
+    postMessage({
+      type: "ready",
+      wasmInstantiateMs,
+      wasmMemoryBytes: wasmMemory.buffer.byteLength,
+    });
+  })().catch((error) => {
+    postMessage({ type: "fatal", message: error instanceof Error ? error.message : String(error) });
+    throw error;
+  });
+  return initialized;
+}
+
+function encodeFiles(files) {
+  // Paths come from project input and may legally contain object property
+  // names such as `__proto__`; keep them as data when serializing the request.
+  const encoded = Object.create(null);
+  const binaryFiles = Object.create(null);
+  for (const [filePath, content] of Object.entries(files ?? {})) {
+    if (typeof content === "string") {
+      encoded[filePath] = { encoding: "utf8", content };
+    } else if (content instanceof Uint8Array) {
+      encoded[filePath] = { encoding: "binary" };
+      binaryFiles[filePath] = content;
+    } else {
+      throw new TypeError(`Project file ${filePath} must be a string or Uint8Array`);
+    }
+  }
+  return { files: encoded, binaryFiles };
+}
+
+self.addEventListener("message", async (event) => {
+  const message = event.data;
+  if (message?.type === "network-probe" && networkAccessDenied) {
+    const result = await probeNetworkAccess(message.url);
+    postMessage({ type: "network-probe-result", requestId: message.requestId, ...result });
+    return;
+  }
+  if (message?.type === "configure") {
+    runtimeAssets = message;
+    initialize().catch(() => {});
+    return;
+  }
+  if (message?.type !== "run") return;
+  try {
+    await initialize();
+    const encodedFiles = encodeFiles(message.files);
+    const request = {
+      requestId: message.requestId,
+      revision: message.requestId,
+      operation: message.operation,
+      entrypoint: message.entrypoint,
+      source: message.source,
+      files: encodedFiles.files,
+    };
+    const value = JSON.parse(globalThis.mclWasm.run(JSON.stringify(request), encodedFiles.binaryFiles));
+    postMessage({
+      type: "response",
+      requestId: message.requestId,
+      value,
+      wasmMemoryBytes: wasmMemory.buffer.byteLength,
+    });
+  } catch (error) {
+    postMessage({
+      type: "response",
+      requestId: message.requestId,
+      value: {
+        ok: false,
+        error: { code: "MCL-WASM-INPUT", message: error instanceof Error ? error.message : String(error) },
+      },
+    });
+  }
+});