@microverse.ts/runtime-wasm 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 QADRAX
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/application/bootstrap/WasmBootstrapOrder.d.ts

@@ -0,0 +1,2 @@
+export declare const WASM_BOOTSTRAP_ORDER: readonly ["init", "execute"];
+//# sourceMappingURL=WasmBootstrapOrder.d.ts.map

package/dist/application/bootstrap/WasmBootstrapOrder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WasmBootstrapOrder.d.ts","sourceRoot":"","sources":["../../../src/application/bootstrap/WasmBootstrapOrder.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,8BAA+B,CAAC"}

package/dist/domain/worker/WorkerMicroverseMessages.d.ts

@@ -0,0 +1,20 @@
+export type WorkerHostToRuntimeMessage = {
+    readonly _tag: 'init';
+    readonly wasmEntrypoint: string;
+} | {
+    readonly _tag: 'execute';
+    readonly requestId: string;
+    readonly script: string;
+};
+export type WorkerRuntimeToHostMessage = {
+    readonly _tag: 'ready';
+} | {
+    readonly _tag: 'result';
+    readonly requestId: string;
+    readonly output: string;
+} | {
+    readonly _tag: 'error';
+    readonly requestId: string;
+    readonly message: string;
+};
+//# sourceMappingURL=WorkerMicroverseMessages.d.ts.map

package/dist/domain/worker/WorkerMicroverseMessages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkerMicroverseMessages.d.ts","sourceRoot":"","sources":["../../../src/domain/worker/WorkerMicroverseMessages.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,0BAA0B,GAClC;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtF,MAAM,MAAM,0BAA0B,GAClC;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChF;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export type { WorkerHostToRuntimeMessage, WorkerRuntimeToHostMessage, } from './domain/worker/WorkerMicroverseMessages';
+export { createWasmMicroverseRuntime, type WasmMicroverseRuntimeOptions, } from './infrastructure/runtime/createWasmMicroverseRuntime';
+export { MICROVERSE_LUA_DEFAULT_INSTRUCTION_BUDGET, MICROVERSE_LUA_SLOT_VM_BOOTSTRAP, } from './infrastructure/runtime/microverseLuaSlotVmBootstrap';
+export { MICROVERSE_LUA_DEFAULT_MAX_SCRIPT_CHARS } from './infrastructure/runtime/wasmoonExecutePolicy';
+export { WasmoonRuntimeAdapter, type WasmoonRuntimeAdapterOptions } from './infrastructure/runtime/WasmoonRuntimeAdapter';
+export { WorkerMicroverseHost } from './infrastructure/worker/WorkerMicroverseHost';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,2BAA2B,EAC3B,KAAK,4BAA4B,GAClC,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EACL,yCAAyC,EACzC,gCAAgC,GACjC,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,qBAAqB,EAAE,KAAK,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AAC1H,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC"}

package/dist/index.js

@@ -0,0 +1,420 @@
+import { ConsoleLogger, createStubMicroverseRuntime } from "@microverse.ts/runtime-core";
+import { err, ok } from "@microverse.ts/shared";
+import { LuaFactory } from "wasmoon";
+//#region src/infrastructure/runtime/microverseLuaSlotVmBootstrap.ts
+/**
+* Lua 5.4 bootstrap for **one Wasmoon VM, many slots**:
+* - Slot `_ENV` uses a **safe global** table (no `debug`, `load`, `io`, `os`, …).
+* - Slot registry and internals are **closure-local** (not on `_G`).
+* - Bridge tables are **read-only** from Lua (`__newindex`); host re-injects via `mergeEnv` each run.
+* - **No auto-await**: async bridges return a handle with `:await()`; optional 2nd-arg callback runs after the current chunk step.
+* - Optional **instruction budget** per chunk via `debug.sethook` when available.
+*/
+var MICROVERSE_LUA_DEFAULT_INSTRUCTION_BUDGET = 5e6;
+var MICROVERSE_LUA_SLOT_VM_BOOTSTRAP = `
+do
+  local REAL_G = _G
+  local envs = {}
+  local pending_async = {}
+
+  local function copy_functions(lib)
+    if type(lib) ~= "table" then return nil end
+    local out = {}
+    for k, v in pairs(lib) do
+      if type(v) == "function" then
+        out[k] = v
+      end
+    end
+    return out
+  end
+
+  local function copy_math()
+    local src = REAL_G.math
+    if type(src) ~= "table" then return {} end
+    local blocked = { random = true, randomseed = true }
+    local out = {}
+    for k, v in pairs(src) do
+      if type(v) == "function" and not blocked[k] then
+        out[k] = v
+      end
+    end
+    return out
+  end
+
+  local SAFE_G = {
+    assert = assert,
+    error = error,
+    getmetatable = getmetatable,
+    ipairs = ipairs,
+    next = next,
+    pairs = pairs,
+    pcall = pcall,
+    rawequal = rawequal,
+    rawget = rawget,
+    rawlen = rawlen,
+    rawset = rawset,
+    select = select,
+    setmetatable = setmetatable,
+    tonumber = tonumber,
+    tostring = tostring,
+    type = type,
+    xpcall = xpcall,
+    table = copy_functions(REAL_G.table),
+    string = copy_functions(REAL_G.string),
+    math = copy_math(),
+    _VERSION = REAL_G._VERSION,
+  }
+
+  local ENV_MT = { __index = SAFE_G }
+
+  local function ensure_env(slot_key)
+    local e = envs[slot_key]
+    if not e then
+      e = {}
+      setmetatable(e, ENV_MT)
+      envs[slot_key] = e
+    end
+    return e
+  end
+
+  local debug_lib = REAL_G.debug
+  local DEFAULT_BUDGET = ${MICROVERSE_LUA_DEFAULT_INSTRUCTION_BUDGET}
+  local HOOK_STEP = 10000
+
+  local function is_awaitable(r)
+    if type(r) == "userdata" or type(r) == "table" then
+      return type(r.await) == "function"
+    end
+    return false
+  end
+
+  function __microverse_lua_await_value(r)
+    if not is_awaitable(r) then
+      return r
+    end
+    local ok, out = pcall(function()
+      return r:await()
+    end)
+    if not ok then
+      error(out, 0)
+    end
+    return out
+  end
+
+  function __microverse_lua_wrap_async_result(r)
+    if not is_awaitable(r) then
+      return r
+    end
+    return setmetatable({}, {
+      __index = function(_, key)
+        if key == "await" then
+          return function()
+            return __microverse_lua_await_value(r)
+          end
+        end
+        return nil
+      end,
+    })
+  end
+
+  local function is_lua_callback(v)
+    return type(v) == "function"
+  end
+
+  local function schedule_on_complete(onComplete, r)
+    pending_async[#pending_async + 1] = { cb = onComplete, r = r }
+  end
+
+  local function flush_pending_async()
+    for i = 1, #pending_async do
+      local job = pending_async[i]
+      local out = __microverse_lua_await_value(job.r)
+      job.cb(out)
+    end
+  end
+
+  local function proxy_bridge(impl)
+    return setmetatable({}, {
+      __index = function(_, method)
+        local f = impl[method]
+        if type(f) ~= "function" then
+          return nil
+        end
+        return function(...)
+          local n = select("#", ...)
+          local onComplete = nil
+          local payload
+          if n >= 3 and is_lua_callback(select(3, ...)) then
+            onComplete = select(3, ...)
+            payload = select(2, ...)
+          elseif n >= 2 and is_lua_callback(select(2, ...)) then
+            onComplete = select(2, ...)
+            payload = select(1, ...)
+          elseif n >= 2 then
+            payload = select(2, ...)
+          elseif n >= 1 then
+            payload = select(1, ...)
+          end
+          local r
+          if onComplete ~= nil then
+            if payload ~= nil then
+              r = f(impl, payload)
+            else
+              r = f(impl)
+            end
+            schedule_on_complete(onComplete, r)
+            return nil
+          end
+          if payload ~= nil then
+            r = f(impl, payload)
+          elseif n == 0 then
+            r = f(impl)
+          else
+            r = f(impl, select(1, ...))
+          end
+          return __microverse_lua_wrap_async_result(r)
+        end
+      end,
+      __newindex = function(_, key)
+        error("microverse: bridge table is read-only (" .. tostring(key) .. ")", 2)
+      end,
+    })
+  end
+
+  function __microverse_lua_put_bridge_from_global(slot_key, field_name, global_tmp_key)
+    local e = ensure_env(slot_key)
+    local v = REAL_G[global_tmp_key]
+    REAL_G[global_tmp_key] = nil
+    if type(v) == "userdata" or type(v) == "table" then
+      v = proxy_bridge(v)
+    end
+    rawset(e, field_name, v)
+  end
+
+  function __microverse_lua_execute_in_slot(slot_key, source, instr_budget)
+    instr_budget = instr_budget or DEFAULT_BUDGET
+    pending_async = {}
+    local env = ensure_env(slot_key)
+    local f, load_err = load(source, "@" .. tostring(slot_key), "t", env)
+    if not f then
+      error(load_err or "load failed", 0)
+    end
+    local count = 0
+    if debug_lib and debug_lib.sethook then
+      debug_lib.sethook(function()
+        count = count + HOOK_STEP
+        if count > instr_budget then
+          debug_lib.sethook()
+          error("microverse: instruction limit exceeded", 0)
+        end
+      end, "", HOOK_STEP)
+    end
+    local ok, result = pcall(f)
+    if debug_lib and debug_lib.sethook then
+      debug_lib.sethook()
+    end
+    flush_pending_async()
+    if not ok then
+      error(result, 0)
+    end
+    return result
+  end
+
+  function __microverse_lua_destroy_slot(slot_key)
+    envs[slot_key] = nil
+  end
+end
+`.trim();
+//#endregion
+//#region src/infrastructure/runtime/luaLongString.ts
+/** Builds a Lua long literal `[=*[ ... ]=*]` so `source` can contain `]`, newlines, etc. */
+function toLuaLongStringLiteral(source) {
+	let eq = 0;
+	while (true) {
+		const close = `]${"=".repeat(eq)}]`;
+		if (!source.includes(close)) break;
+		eq += 1;
+	}
+	return `${`[${"=".repeat(eq)}[`}${source}${`]${"=".repeat(eq)}]`}`;
+}
+//#endregion
+//#region src/infrastructure/runtime/wasmoonExecutePolicy.ts
+var MICROVERSE_LUA_DEFAULT_MAX_SCRIPT_CHARS = 512e3;
+var schedulerHost = () => globalThis;
+var scheduleTimeout = (fn, ms) => {
+	const host = schedulerHost();
+	if (typeof host.setTimeout !== "function") throw new Error("microverse: setTimeout is not available in this runtime");
+	return host.setTimeout(fn, ms);
+};
+var cancelTimeout = (handle) => {
+	const host = schedulerHost();
+	if (typeof host.clearTimeout === "function") host.clearTimeout(handle);
+};
+var MicroverseTimeoutError = class extends Error {
+	constructor() {
+		super("microverse: execution timed out");
+		this.name = "MicroverseTimeoutError";
+	}
+};
+function resolveTimeoutMs(timeout) {
+	if (timeout === void 0 || timeout.kind === "none") return;
+	return timeout.milliseconds;
+}
+function assertScriptSize(script, maxChars) {
+	if (script.length > maxChars) throw new Error(`microverse: script exceeds max size (${script.length} > ${maxChars})`);
+}
+function assertNotCancelled(cancellation) {
+	if (cancellation.isCancelled()) throw new Error("microverse: execution cancelled");
+}
+/**
+* Runs an async Lua invocation with optional wall-clock timeout.
+* Note: synchronous infinite Lua still blocks the thread until the instruction hook fires;
+* callers should combine with {@link MICROVERSE_LUA_DEFAULT_INSTRUCTION_BUDGET} in the bootstrap.
+*/
+async function runWithWallClockTimeout(run, timeoutMs) {
+	if (timeoutMs === void 0) {
+		await run();
+		return "ok";
+	}
+	let timer;
+	try {
+		await Promise.race([run(), new Promise((_, reject) => {
+			timer = scheduleTimeout(() => reject(new MicroverseTimeoutError()), timeoutMs);
+		})]);
+		return "ok";
+	} catch (e) {
+		if (e instanceof MicroverseTimeoutError) return "timeout";
+		throw e;
+	} finally {
+		if (timer !== void 0) cancelTimeout(timer);
+	}
+}
+function mapExecuteError(e) {
+	if (e instanceof MicroverseTimeoutError) return { _tag: "Timeout" };
+	const message = e instanceof Error ? e.message : String(e);
+	if (message.includes("execution cancelled")) return { _tag: "Cancelled" };
+	if (message.includes("instruction limit exceeded") || message.includes("script exceeds max size")) return {
+		_tag: "AdapterError",
+		message
+	};
+	return {
+		_tag: "AdapterError",
+		message
+	};
+}
+//#endregion
+//#region src/infrastructure/runtime/WasmoonRuntimeAdapter.ts
+var WasmoonRuntimeAdapter = class {
+	options;
+	factory = new LuaFactory();
+	maxScriptChars;
+	defaultInstructionBudget;
+	engineInit;
+	constructor(options = {}) {
+		this.options = options;
+		this.maxScriptChars = options.maxScriptChars ?? 512e3;
+		this.defaultInstructionBudget = options.defaultInstructionBudget ?? 5e6;
+	}
+	getEngine = () => {
+		if (this.engineInit === void 0) this.engineInit = (async () => {
+			const lua = await this.factory.createEngine({ injectObjects: true });
+			await lua.doString(MICROVERSE_LUA_SLOT_VM_BOOTSTRAP);
+			return lua;
+		})();
+		return this.engineInit;
+	};
+	resetEngine = async () => {
+		const current = this.engineInit;
+		this.engineInit = void 0;
+		if (current === void 0) return;
+		const lua = await current.catch(() => void 0);
+		if (lua !== void 0) try {
+			await Promise.resolve(lua.global.close());
+		} catch {}
+	};
+	runLua = async (lua, chunk) => {
+		await lua.doString(chunk);
+	};
+	execute = async (ctx, input) => {
+		try {
+			assertNotCancelled(ctx.cancellation);
+			assertScriptSize(String(input.script), this.maxScriptChars);
+		} catch (e) {
+			return err(mapExecuteError(e));
+		}
+		const timeoutMs = resolveTimeoutMs(input.timeout);
+		const budget = this.defaultInstructionBudget;
+		const runOnce = async () => {
+			const lua = await this.getEngine();
+			const slotLit = toLuaLongStringLiteral(String(ctx.microverseId));
+			const merge = input.mergeEnv;
+			if (merge !== void 0 && Object.keys(merge).length > 0) for (const name of Object.keys(merge)) {
+				if (!Object.prototype.hasOwnProperty.call(merge, name)) continue;
+				const tmp = `__microverse_lua_one_${randomMicroverseToken()}`;
+				lua.global.set(tmp, merge[name]);
+				const putChunk = `__microverse_lua_put_bridge_from_global(${slotLit}, ${toLuaLongStringLiteral(name)}, ${toLuaLongStringLiteral(tmp)})`;
+				if (await runWithWallClockTimeout(() => this.runLua(lua, putChunk), timeoutMs) === "timeout") {
+					await this.resetEngine();
+					return err({ _tag: "Timeout" });
+				}
+			}
+			const execChunk = `__microverse_lua_execute_in_slot(${slotLit}, ${toLuaLongStringLiteral(String(input.script))}, ${budget})`;
+			if (await runWithWallClockTimeout(() => this.runLua(lua, execChunk), timeoutMs) === "timeout") {
+				await this.resetEngine();
+				return err({ _tag: "Timeout" });
+			}
+			return ok({ output: "lua_ok" });
+		};
+		try {
+			return await runOnce();
+		} catch (e) {
+			const mapped = mapExecuteError(e);
+			if (mapped._tag === "AdapterError" && mapped.message.includes("instruction limit exceeded")) await this.resetEngine();
+			return err(mapped);
+		}
+	};
+	disposeMicroverse = async (microverseId) => {
+		if (this.engineInit === void 0) return;
+		const lua = await this.engineInit.catch(() => void 0);
+		if (lua === void 0) return;
+		const slotLit = toLuaLongStringLiteral(String(microverseId));
+		try {
+			await lua.doString(`__microverse_lua_destroy_slot(${slotLit})`);
+		} catch {}
+	};
+};
+function randomMicroverseToken() {
+	const g = globalThis;
+	if (g.crypto?.randomUUID) return g.crypto.randomUUID();
+	return Math.random().toString(16).slice(2);
+}
+//#endregion
+//#region src/infrastructure/runtime/createWasmMicroverseRuntime.ts
+/**
+* Wasmoon-backed {@link MicroverseRuntime} with hardened slot bootstrap (safe globals, instruction budget).
+*/
+function createWasmMicroverseRuntime(options = {}) {
+	const { defaultTimeout, ...adapterOptions } = options;
+	return createStubMicroverseRuntime({
+		adapter: new WasmoonRuntimeAdapter(adapterOptions),
+		logger: new ConsoleLogger(),
+		defaultTimeout
+	});
+}
+//#endregion
+//#region src/infrastructure/worker/WorkerMicroverseHost.ts
+var WorkerMicroverseHost = class {
+	last = null;
+	post = (message) => {
+		this.last = { _tag: "ready" };
+	};
+	drain = () => {
+		const v = this.last;
+		this.last = null;
+		return v === null ? void 0 : v;
+	};
+};
+//#endregion
+export { MICROVERSE_LUA_DEFAULT_INSTRUCTION_BUDGET, MICROVERSE_LUA_DEFAULT_MAX_SCRIPT_CHARS, MICROVERSE_LUA_SLOT_VM_BOOTSTRAP, WasmoonRuntimeAdapter, WorkerMicroverseHost, createWasmMicroverseRuntime };
+
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../src/infrastructure/runtime/microverseLuaSlotVmBootstrap.ts","../src/infrastructure/runtime/luaLongString.ts","../src/infrastructure/runtime/wasmoonExecutePolicy.ts","../src/infrastructure/runtime/WasmoonRuntimeAdapter.ts","../src/infrastructure/runtime/createWasmMicroverseRuntime.ts","../src/infrastructure/worker/WorkerMicroverseHost.ts"],"sourcesContent":["/**\n * Lua 5.4 bootstrap for **one Wasmoon VM, many slots**:\n * - Slot `_ENV` uses a **safe global** table (no `debug`, `load`, `io`, `os`, …).\n * - Slot registry and internals are **closure-local** (not on `_G`).\n * - Bridge tables are **read-only** from Lua (`__newindex`); host re-injects via `mergeEnv` each run.\n * - **No auto-await**: async bridges return a handle with `:await()`; optional 2nd-arg callback runs after the current chunk step.\n * - Optional **instruction budget** per chunk via `debug.sethook` when available.\n */\nexport const MICROVERSE_LUA_DEFAULT_INSTRUCTION_BUDGET = 5_000_000;\n\nexport const MICROVERSE_LUA_SLOT_VM_BOOTSTRAP = `\ndo\n  local REAL_G = _G\n  local envs = {}\n  local pending_async = {}\n\n  local function copy_functions(lib)\n    if type(lib) ~= \"table\" then return nil end\n    local out = {}\n    for k, v in pairs(lib) do\n      if type(v) == \"function\" then\n        out[k] = v\n      end\n    end\n    return out\n  end\n\n  local function copy_math()\n    local src = REAL_G.math\n    if type(src) ~= \"table\" then return {} end\n    local blocked = { random = true, randomseed = true }\n    local out = {}\n    for k, v in pairs(src) do\n      if type(v) == \"function\" and not blocked[k] then\n        out[k] = v\n      end\n    end\n    return out\n  end\n\n  local SAFE_G = {\n    assert = assert,\n    error = error,\n    getmetatable = getmetatable,\n    ipairs = ipairs,\n    next = next,\n    pairs = pairs,\n    pcall = pcall,\n    rawequal = rawequal,\n    rawget = rawget,\n    rawlen = rawlen,\n    rawset = rawset,\n    select = select,\n    setmetatable = setmetatable,\n    tonumber = tonumber,\n    tostring = tostring,\n    type = type,\n    xpcall = xpcall,\n    table = copy_functions(REAL_G.table),\n    string = copy_functions(REAL_G.string),\n    math = copy_math(),\n    _VERSION = REAL_G._VERSION,\n  }\n\n  local ENV_MT = { __index = SAFE_G }\n\n  local function ensure_env(slot_key)\n    local e = envs[slot_key]\n    if not e then\n      e = {}\n      setmetatable(e, ENV_MT)\n      envs[slot_key] = e\n    end\n    return e\n  end\n\n  local debug_lib = REAL_G.debug\n  local DEFAULT_BUDGET = ${MICROVERSE_LUA_DEFAULT_INSTRUCTION_BUDGET}\n  local HOOK_STEP = 10000\n\n  local function is_awaitable(r)\n    if type(r) == \"userdata\" or type(r) == \"table\" then\n      return type(r.await) == \"function\"\n    end\n    return false\n  end\n\n  function __microverse_lua_await_value(r)\n    if not is_awaitable(r) then\n      return r\n    end\n    local ok, out = pcall(function()\n      return r:await()\n    end)\n    if not ok then\n      error(out, 0)\n    end\n    return out\n  end\n\n  function __microverse_lua_wrap_async_result(r)\n    if not is_awaitable(r) then\n      return r\n    end\n    return setmetatable({}, {\n      __index = function(_, key)\n        if key == \"await\" then\n          return function()\n            return __microverse_lua_await_value(r)\n          end\n        end\n        return nil\n      end,\n    })\n  end\n\n  local function is_lua_callback(v)\n    return type(v) == \"function\"\n  end\n\n  local function schedule_on_complete(onComplete, r)\n    pending_async[#pending_async + 1] = { cb = onComplete, r = r }\n  end\n\n  local function flush_pending_async()\n    for i = 1, #pending_async do\n      local job = pending_async[i]\n      local out = __microverse_lua_await_value(job.r)\n      job.cb(out)\n    end\n  end\n\n  local function proxy_bridge(impl)\n    return setmetatable({}, {\n      __index = function(_, method)\n        local f = impl[method]\n        if type(f) ~= \"function\" then\n          return nil\n        end\n        return function(...)\n          local n = select(\"#\", ...)\n          local onComplete = nil\n          local payload\n          if n >= 3 and is_lua_callback(select(3, ...)) then\n            onComplete = select(3, ...)\n            payload = select(2, ...)\n          elseif n >= 2 and is_lua_callback(select(2, ...)) then\n            onComplete = select(2, ...)\n            payload = select(1, ...)\n          elseif n >= 2 then\n            payload = select(2, ...)\n          elseif n >= 1 then\n            payload = select(1, ...)\n          end\n          local r\n          if onComplete ~= nil then\n            if payload ~= nil then\n              r = f(impl, payload)\n            else\n              r = f(impl)\n            end\n            schedule_on_complete(onComplete, r)\n            return nil\n          end\n          if payload ~= nil then\n            r = f(impl, payload)\n          elseif n == 0 then\n            r = f(impl)\n          else\n            r = f(impl, select(1, ...))\n          end\n          return __microverse_lua_wrap_async_result(r)\n        end\n      end,\n      __newindex = function(_, key)\n        error(\"microverse: bridge table is read-only (\" .. tostring(key) .. \")\", 2)\n      end,\n    })\n  end\n\n  function __microverse_lua_put_bridge_from_global(slot_key, field_name, global_tmp_key)\n    local e = ensure_env(slot_key)\n    local v = REAL_G[global_tmp_key]\n    REAL_G[global_tmp_key] = nil\n    if type(v) == \"userdata\" or type(v) == \"table\" then\n      v = proxy_bridge(v)\n    end\n    rawset(e, field_name, v)\n  end\n\n  function __microverse_lua_execute_in_slot(slot_key, source, instr_budget)\n    instr_budget = instr_budget or DEFAULT_BUDGET\n    pending_async = {}\n    local env = ensure_env(slot_key)\n    local f, load_err = load(source, \"@\" .. tostring(slot_key), \"t\", env)\n    if not f then\n      error(load_err or \"load failed\", 0)\n    end\n    local count = 0\n    if debug_lib and debug_lib.sethook then\n      debug_lib.sethook(function()\n        count = count + HOOK_STEP\n        if count > instr_budget then\n          debug_lib.sethook()\n          error(\"microverse: instruction limit exceeded\", 0)\n        end\n      end, \"\", HOOK_STEP)\n    end\n    local ok, result = pcall(f)\n    if debug_lib and debug_lib.sethook then\n      debug_lib.sethook()\n    end\n    flush_pending_async()\n    if not ok then\n      error(result, 0)\n    end\n    return result\n  end\n\n  function __microverse_lua_destroy_slot(slot_key)\n    envs[slot_key] = nil\n  end\nend\n`.trim();\n","/** Builds a Lua long literal `[=*[ ... ]=*]` so `source` can contain `]`, newlines, etc. */\nexport function toLuaLongStringLiteral(source: string): string {\n  let eq = 0;\n  while (true) {\n    const close = `]${'='.repeat(eq)}]`;\n    if (!source.includes(close)) {\n      break;\n    }\n    eq += 1;\n  }\n  const open = `[${'='.repeat(eq)}[`;\n  const shut = `]${'='.repeat(eq)}]`;\n  return `${open}${source}${shut}`;\n}\n","import type { CancellationToken, TimeoutPolicy } from '@microverse.ts/runtime-core';\n\nexport const MICROVERSE_LUA_DEFAULT_MAX_SCRIPT_CHARS = 512_000;\n\ntype SchedulerHost = {\n  setTimeout(callback: () => void, ms: number): unknown;\n  clearTimeout(handle: unknown): void;\n};\n\ntype TimerHandle = unknown;\n\n// eslint-disable-next-line @typescript-eslint/no-unnecessary-type-assertion -- globalThis lacks SchedulerHost in lib.dom\nconst schedulerHost = (): SchedulerHost => globalThis as unknown as SchedulerHost;\n\nconst scheduleTimeout = (fn: () => void, ms: number): TimerHandle => {\n  const host = schedulerHost();\n  if (typeof host.setTimeout !== 'function') {\n    throw new Error('microverse: setTimeout is not available in this runtime');\n  }\n  return host.setTimeout(fn, ms);\n};\n\nconst cancelTimeout = (handle: TimerHandle): void => {\n  const host = schedulerHost();\n  if (typeof host.clearTimeout === 'function') {\n    host.clearTimeout(handle);\n  }\n};\n\nclass MicroverseTimeoutError extends Error {\n  constructor() {\n    super('microverse: execution timed out');\n    this.name = 'MicroverseTimeoutError';\n  }\n}\n\nexport function resolveTimeoutMs(timeout: TimeoutPolicy | undefined): number | undefined {\n  if (timeout === undefined || timeout.kind === 'none') {\n    return undefined;\n  }\n  return timeout.milliseconds;\n}\n\nexport function assertScriptSize(script: string, maxChars: number): void {\n  if (script.length > maxChars) {\n    throw new Error(`microverse: script exceeds max size (${script.length} > ${maxChars})`);\n  }\n}\n\nexport function assertNotCancelled(cancellation: CancellationToken): void {\n  if (cancellation.isCancelled()) {\n    throw new Error('microverse: execution cancelled');\n  }\n}\n\n/**\n * Runs an async Lua invocation with optional wall-clock timeout.\n * Note: synchronous infinite Lua still blocks the thread until the instruction hook fires;\n * callers should combine with {@link MICROVERSE_LUA_DEFAULT_INSTRUCTION_BUDGET} in the bootstrap.\n */\nexport async function runWithWallClockTimeout(\n  run: () => Promise<void>,\n  timeoutMs: number | undefined,\n): Promise<'ok' | 'timeout'> {\n  if (timeoutMs === undefined) {\n    await run();\n    return 'ok';\n  }\n  // TimerHandle is intentionally opaque (`unknown`).\n  // eslint-disable-next-line @typescript-eslint/no-redundant-type-constituents -- explicit optional slot\n  let timer: TimerHandle | undefined;\n  try {\n    await Promise.race([\n      run(),\n      new Promise<never>((_, reject) => {\n        timer = scheduleTimeout(() => reject(new MicroverseTimeoutError()), timeoutMs);\n      }),\n    ]);\n    return 'ok';\n  } catch (e) {\n    if (e instanceof MicroverseTimeoutError) {\n      return 'timeout';\n    }\n    throw e;\n  } finally {\n    if (timer !== undefined) {\n      cancelTimeout(timer);\n    }\n  }\n}\n\nexport function mapExecuteError(e: unknown): { readonly _tag: 'Timeout' } | { readonly _tag: 'Cancelled' } | { readonly _tag: 'AdapterError'; readonly message: string } {\n  if (e instanceof MicroverseTimeoutError) {\n    return { _tag: 'Timeout' };\n  }\n  const message = e instanceof Error ? e.message : String(e);\n  if (message.includes('execution cancelled')) {\n    return { _tag: 'Cancelled' };\n  }\n  if (message.includes('instruction limit exceeded') || message.includes('script exceeds max size')) {\n    return { _tag: 'AdapterError', message };\n  }\n  return { _tag: 'AdapterError', message };\n}\n","import { err, ok, type Result } from '@microverse.ts/shared';\nimport { LuaFactory } from 'wasmoon';\n\nimport type {\n  ExecutionContext,\n  ExecutionFailure,\n  RuntimeAdapter,\n  RunScriptInput,\n  RunScriptResult,\n  MicroverseId,\n} from '@microverse.ts/runtime-core';\n\nimport {\n  MICROVERSE_LUA_DEFAULT_INSTRUCTION_BUDGET,\n  MICROVERSE_LUA_SLOT_VM_BOOTSTRAP,\n} from './microverseLuaSlotVmBootstrap';\nimport { toLuaLongStringLiteral } from './luaLongString';\nimport {\n  assertNotCancelled,\n  assertScriptSize,\n  MICROVERSE_LUA_DEFAULT_MAX_SCRIPT_CHARS,\n  mapExecuteError,\n  resolveTimeoutMs,\n  runWithWallClockTimeout,\n} from './wasmoonExecutePolicy';\n\ntype WasmoonLuaEngine = Awaited<ReturnType<LuaFactory['createEngine']>>;\n\nexport type WasmoonRuntimeAdapterOptions = {\n  /** Rejects {@link RunScriptInput.script} larger than this (default {@link MICROVERSE_LUA_DEFAULT_MAX_SCRIPT_CHARS}). */\n  readonly maxScriptChars?: number | undefined;\n  /** Passed to `__microverse_lua_execute_in_slot` when the third argument is omitted (default {@link MICROVERSE_LUA_DEFAULT_INSTRUCTION_BUDGET}). */\n  readonly defaultInstructionBudget?: number | undefined;\n};\n\nexport class WasmoonRuntimeAdapter implements RuntimeAdapter {\n  private readonly factory = new LuaFactory();\n\n  private readonly maxScriptChars: number;\n\n  private readonly defaultInstructionBudget: number;\n\n  private engineInit: Promise<WasmoonLuaEngine> | undefined;\n\n  constructor(private readonly options: WasmoonRuntimeAdapterOptions = {}) {\n    this.maxScriptChars = options.maxScriptChars ?? MICROVERSE_LUA_DEFAULT_MAX_SCRIPT_CHARS;\n    this.defaultInstructionBudget =\n      options.defaultInstructionBudget ?? MICROVERSE_LUA_DEFAULT_INSTRUCTION_BUDGET;\n  }\n\n  private getEngine = (): Promise<WasmoonLuaEngine> => {\n    if (this.engineInit === undefined) {\n      this.engineInit = (async () => {\n        const lua = await this.factory.createEngine({ injectObjects: true });\n        await lua.doString(MICROVERSE_LUA_SLOT_VM_BOOTSTRAP);\n        return lua;\n      })();\n    }\n    return this.engineInit;\n  };\n\n  private resetEngine = async (): Promise<void> => {\n    const current = this.engineInit;\n    this.engineInit = undefined;\n    if (current === undefined) {\n      return;\n    }\n    const lua = await current.catch(() => undefined);\n    if (lua !== undefined) {\n      try {\n        await Promise.resolve(lua.global.close());\n      } catch {\n        // ignore\n      }\n    }\n  };\n\n  private runLua = async (lua: WasmoonLuaEngine, chunk: string): Promise<void> => {\n    await lua.doString(chunk);\n  };\n\n  readonly execute = async (\n    ctx: ExecutionContext,\n    input: RunScriptInput,\n  ): Promise<Result<RunScriptResult, ExecutionFailure>> => {\n    try {\n      assertNotCancelled(ctx.cancellation);\n      assertScriptSize(String(input.script), this.maxScriptChars);\n    } catch (e) {\n      return err(mapExecuteError(e));\n    }\n\n    const timeoutMs = resolveTimeoutMs(input.timeout);\n    const budget = this.defaultInstructionBudget;\n\n    const runOnce = async (): Promise<Result<RunScriptResult, ExecutionFailure>> => {\n      const lua = await this.getEngine();\n      const slotLit = toLuaLongStringLiteral(String(ctx.microverseId));\n      const merge = input.mergeEnv;\n      if (merge !== undefined && Object.keys(merge).length > 0) {\n        for (const name of Object.keys(merge)) {\n          if (!Object.prototype.hasOwnProperty.call(merge, name)) {\n            continue;\n          }\n          const tmp = `__microverse_lua_one_${randomMicroverseToken()}`;\n          lua.global.set(tmp, merge[name]);\n          const nameLit = toLuaLongStringLiteral(name);\n          const tmpLit = toLuaLongStringLiteral(tmp);\n          const putChunk = `__microverse_lua_put_bridge_from_global(${slotLit}, ${nameLit}, ${tmpLit})`;\n          const putOutcome = await runWithWallClockTimeout(() => this.runLua(lua, putChunk), timeoutMs);\n          if (putOutcome === 'timeout') {\n            await this.resetEngine();\n            return err({ _tag: 'Timeout' });\n          }\n        }\n      }\n      const srcLit = toLuaLongStringLiteral(String(input.script));\n      const execChunk = `__microverse_lua_execute_in_slot(${slotLit}, ${srcLit}, ${budget})`;\n      const execOutcome = await runWithWallClockTimeout(() => this.runLua(lua, execChunk), timeoutMs);\n      if (execOutcome === 'timeout') {\n        await this.resetEngine();\n        return err({ _tag: 'Timeout' });\n      }\n      return ok({ output: 'lua_ok' });\n    };\n\n    try {\n      return await runOnce();\n    } catch (e) {\n      const mapped = mapExecuteError(e);\n      if (mapped._tag === 'AdapterError' && mapped.message.includes('instruction limit exceeded')) {\n        await this.resetEngine();\n      }\n      return err(mapped);\n    }\n  };\n\n  readonly disposeMicroverse = async (microverseId: MicroverseId): Promise<void> => {\n    if (this.engineInit === undefined) {\n      return;\n    }\n    const lua = await this.engineInit.catch(() => undefined);\n    if (lua === undefined) {\n      return;\n    }\n    const slotLit = toLuaLongStringLiteral(String(microverseId));\n    try {\n      await lua.doString(`__microverse_lua_destroy_slot(${slotLit})`);\n    } catch {\n      // ignore\n    }\n  };\n}\n\nfunction randomMicroverseToken(): string {\n  const g = globalThis as typeof globalThis & { crypto?: { randomUUID?: () => string } };\n  if (g.crypto?.randomUUID) {\n    return g.crypto.randomUUID();\n  }\n  return Math.random().toString(16).slice(2);\n}\n","import {\n  ConsoleLogger,\n  createStubMicroverseRuntime,\n  type MicroverseRuntime,\n  type TimeoutPolicy,\n} from '@microverse.ts/runtime-core';\n\nimport { WasmoonRuntimeAdapter, type WasmoonRuntimeAdapterOptions } from './WasmoonRuntimeAdapter';\n\nexport type WasmMicroverseRuntimeOptions = WasmoonRuntimeAdapterOptions & {\n  /** Default timeout forwarded to each {@link MicroverseSlot.run} when the call omits `timeout`. */\n  readonly defaultTimeout?: TimeoutPolicy | undefined;\n};\n\n/**\n * Wasmoon-backed {@link MicroverseRuntime} with hardened slot bootstrap (safe globals, instruction budget).\n */\nexport function createWasmMicroverseRuntime(options: WasmMicroverseRuntimeOptions = {}): MicroverseRuntime {\n  const { defaultTimeout, ...adapterOptions } = options;\n  return createStubMicroverseRuntime({\n    adapter: new WasmoonRuntimeAdapter(adapterOptions),\n    logger: new ConsoleLogger(),\n    defaultTimeout,\n  });\n}\n","import type {\n  WorkerHostToRuntimeMessage,\n  WorkerRuntimeToHostMessage,\n} from '../../domain/worker/WorkerMicroverseMessages';\n\nexport class WorkerMicroverseHost {\n  private last: WorkerRuntimeToHostMessage | null = null;\n\n  readonly post = (message: WorkerHostToRuntimeMessage): void => {\n    void message;\n    this.last = { _tag: 'ready' };\n  };\n\n  readonly drain = (): WorkerRuntimeToHostMessage | undefined => {\n    const v = this.last;\n    this.last = null;\n    return v === null ? undefined : v;\n  };\n}\n"],"mappings":";;;;;;;;;;;;AAQA,IAAa,4CAA4C;AAEzD,IAAa,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAmErB,0CAA0C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkJnE,KAAK;;;;AC9NP,SAAgB,uBAAuB,QAAwB;CAC7D,IAAI,KAAK;CACT,OAAO,MAAM;EACX,MAAM,QAAQ,IAAI,IAAI,OAAO,EAAE,EAAE;EACjC,IAAI,CAAC,OAAO,SAAS,KAAK,GACxB;EAEF,MAAM;CACR;CAGA,OAAO,GAAG,IAFO,IAAI,OAAO,EAAE,EAAE,KAEf,SAAS,IADT,IAAI,OAAO,EAAE,EAAE;AAElC;;;ACXA,IAAa,0CAA0C;AAUvD,IAAM,sBAAqC;AAE3C,IAAM,mBAAmB,IAAgB,OAA4B;CACnE,MAAM,OAAO,cAAc;CAC3B,IAAI,OAAO,KAAK,eAAe,YAC7B,MAAM,IAAI,MAAM,yDAAyD;CAE3E,OAAO,KAAK,WAAW,IAAI,EAAE;AAC/B;AAEA,IAAM,iBAAiB,WAA8B;CACnD,MAAM,OAAO,cAAc;CAC3B,IAAI,OAAO,KAAK,iBAAiB,YAC/B,KAAK,aAAa,MAAM;AAE5B;AAEA,IAAM,yBAAN,cAAqC,MAAM;CACzC,cAAc;EACZ,MAAM,iCAAiC;EACvC,KAAK,OAAO;CACd;AACF;AAEA,SAAgB,iBAAiB,SAAwD;CACvF,IAAI,YAAY,KAAA,KAAa,QAAQ,SAAS,QAC5C;CAEF,OAAO,QAAQ;AACjB;AAEA,SAAgB,iBAAiB,QAAgB,UAAwB;CACvE,IAAI,OAAO,SAAS,UAClB,MAAM,IAAI,MAAM,wCAAwC,OAAO,OAAO,KAAK,SAAS,EAAE;AAE1F;AAEA,SAAgB,mBAAmB,cAAuC;CACxE,IAAI,aAAa,YAAY,GAC3B,MAAM,IAAI,MAAM,iCAAiC;AAErD;;;;;;AAOA,eAAsB,wBACpB,KACA,WAC2B;CAC3B,IAAI,cAAc,KAAA,GAAW;EAC3B,MAAM,IAAI;EACV,OAAO;CACT;CAGA,IAAI;CACJ,IAAI;EACF,MAAM,QAAQ,KAAK,CACjB,IAAI,GACJ,IAAI,SAAgB,GAAG,WAAW;GAChC,QAAQ,sBAAsB,OAAO,IAAI,uBAAuB,CAAC,GAAG,SAAS;EAC/E,CAAC,CACH,CAAC;EACD,OAAO;CACT,SAAS,GAAG;EACV,IAAI,aAAa,wBACf,OAAO;EAET,MAAM;CACR,UAAU;EACR,IAAI,UAAU,KAAA,GACZ,cAAc,KAAK;CAEvB;AACF;AAEA,SAAgB,gBAAgB,GAAyI;CACvK,IAAI,aAAa,wBACf,OAAO,EAAE,MAAM,UAAU;CAE3B,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;CACzD,IAAI,QAAQ,SAAS,qBAAqB,GACxC,OAAO,EAAE,MAAM,YAAY;CAE7B,IAAI,QAAQ,SAAS,4BAA4B,KAAK,QAAQ,SAAS,yBAAyB,GAC9F,OAAO;EAAE,MAAM;EAAgB;CAAQ;CAEzC,OAAO;EAAE,MAAM;EAAgB;CAAQ;AACzC;;;ACpEA,IAAa,wBAAb,MAA6D;CAS9B;CAR7B,UAA2B,IAAI,WAAW;CAE1C;CAEA;CAEA;CAEA,YAAY,UAAyD,CAAC,GAAG;EAA5C,KAAA,UAAA;EAC3B,KAAK,iBAAiB,QAAQ,kBAAA;EAC9B,KAAK,2BACH,QAAQ,4BAAA;CACZ;CAEA,kBAAqD;EACnD,IAAI,KAAK,eAAe,KAAA,GACtB,KAAK,cAAc,YAAY;GAC7B,MAAM,MAAM,MAAM,KAAK,QAAQ,aAAa,EAAE,eAAe,KAAK,CAAC;GACnE,MAAM,IAAI,SAAS,gCAAgC;GACnD,OAAO;EACT,GAAG;EAEL,OAAO,KAAK;CACd;CAEA,cAAsB,YAA2B;EAC/C,MAAM,UAAU,KAAK;EACrB,KAAK,aAAa,KAAA;EAClB,IAAI,YAAY,KAAA,GACd;EAEF,MAAM,MAAM,MAAM,QAAQ,YAAY,KAAA,CAAS;EAC/C,IAAI,QAAQ,KAAA,GACV,IAAI;GACF,MAAM,QAAQ,QAAQ,IAAI,OAAO,MAAM,CAAC;EAC1C,QAAQ,CAER;CAEJ;CAEA,SAAiB,OAAO,KAAuB,UAAiC;EAC9E,MAAM,IAAI,SAAS,KAAK;CAC1B;CAEA,UAAmB,OACjB,KACA,UACuD;EACvD,IAAI;GACF,mBAAmB,IAAI,YAAY;GACnC,iBAAiB,OAAO,MAAM,MAAM,GAAG,KAAK,cAAc;EAC5D,SAAS,GAAG;GACV,OAAO,IAAI,gBAAgB,CAAC,CAAC;EAC/B;EAEA,MAAM,YAAY,iBAAiB,MAAM,OAAO;EAChD,MAAM,SAAS,KAAK;EAEpB,MAAM,UAAU,YAAgE;GAC9E,MAAM,MAAM,MAAM,KAAK,UAAU;GACjC,MAAM,UAAU,uBAAuB,OAAO,IAAI,YAAY,CAAC;GAC/D,MAAM,QAAQ,MAAM;GACpB,IAAI,UAAU,KAAA,KAAa,OAAO,KAAK,KAAK,EAAE,SAAS,GACrD,KAAK,MAAM,QAAQ,OAAO,KAAK,KAAK,GAAG;IACrC,IAAI,CAAC,OAAO,UAAU,eAAe,KAAK,OAAO,IAAI,GACnD;IAEF,MAAM,MAAM,wBAAwB,sBAAsB;IAC1D,IAAI,OAAO,IAAI,KAAK,MAAM,KAAK;IAG/B,MAAM,WAAW,2CAA2C,QAAQ,IAFpD,uBAAuB,IAEiC,EAAQ,IADjE,uBAAuB,GAC8C,EAAO;IAE3F,IAAI,MADqB,8BAA8B,KAAK,OAAO,KAAK,QAAQ,GAAG,SAAS,MACzE,WAAW;KAC5B,MAAM,KAAK,YAAY;KACvB,OAAO,IAAI,EAAE,MAAM,UAAU,CAAC;IAChC;GACF;GAGF,MAAM,YAAY,oCAAoC,QAAQ,IAD/C,uBAAuB,OAAO,MAAM,MAAM,CACS,EAAO,IAAI,OAAO;GAEpF,IAAI,MADsB,8BAA8B,KAAK,OAAO,KAAK,SAAS,GAAG,SAAS,MAC1E,WAAW;IAC7B,MAAM,KAAK,YAAY;IACvB,OAAO,IAAI,EAAE,MAAM,UAAU,CAAC;GAChC;GACA,OAAO,GAAG,EAAE,QAAQ,SAAS,CAAC;EAChC;EAEA,IAAI;GACF,OAAO,MAAM,QAAQ;EACvB,SAAS,GAAG;GACV,MAAM,SAAS,gBAAgB,CAAC;GAChC,IAAI,OAAO,SAAS,kBAAkB,OAAO,QAAQ,SAAS,4BAA4B,GACxF,MAAM,KAAK,YAAY;GAEzB,OAAO,IAAI,MAAM;EACnB;CACF;CAEA,oBAA6B,OAAO,iBAA8C;EAChF,IAAI,KAAK,eAAe,KAAA,GACtB;EAEF,MAAM,MAAM,MAAM,KAAK,WAAW,YAAY,KAAA,CAAS;EACvD,IAAI,QAAQ,KAAA,GACV;EAEF,MAAM,UAAU,uBAAuB,OAAO,YAAY,CAAC;EAC3D,IAAI;GACF,MAAM,IAAI,SAAS,iCAAiC,QAAQ,EAAE;EAChE,QAAQ,CAER;CACF;AACF;AAEA,SAAS,wBAAgC;CACvC,MAAM,IAAI;CACV,IAAI,EAAE,QAAQ,YACZ,OAAO,EAAE,OAAO,WAAW;CAE7B,OAAO,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC;AAC3C;;;;;;AC/IA,SAAgB,4BAA4B,UAAwC,CAAC,GAAsB;CACzG,MAAM,EAAE,gBAAgB,GAAG,mBAAmB;CAC9C,OAAO,4BAA4B;EACjC,SAAS,IAAI,sBAAsB,cAAc;EACjD,QAAQ,IAAI,cAAc;EAC1B;CACF,CAAC;AACH;;;ACnBA,IAAa,uBAAb,MAAkC;CAChC,OAAkD;CAElD,QAAiB,YAA8C;EAE7D,KAAK,OAAO,EAAE,MAAM,QAAQ;CAC9B;CAEA,cAA+D;EAC7D,MAAM,IAAI,KAAK;EACf,KAAK,OAAO;EACZ,OAAO,MAAM,OAAO,KAAA,IAAY;CAClC;AACF"}

package/dist/infrastructure/runtime/WasmoonRuntimeAdapter.d.ts

@@ -0,0 +1,22 @@
+import { Result } from '@microverse.ts/shared';
+import { ExecutionContext, ExecutionFailure, RuntimeAdapter, RunScriptInput, RunScriptResult, MicroverseId } from '@microverse.ts/runtime-core';
+export type WasmoonRuntimeAdapterOptions = {
+    /** Rejects {@link RunScriptInput.script} larger than this (default {@link MICROVERSE_LUA_DEFAULT_MAX_SCRIPT_CHARS}). */
+    readonly maxScriptChars?: number | undefined;
+    /** Passed to `__microverse_lua_execute_in_slot` when the third argument is omitted (default {@link MICROVERSE_LUA_DEFAULT_INSTRUCTION_BUDGET}). */
+    readonly defaultInstructionBudget?: number | undefined;
+};
+export declare class WasmoonRuntimeAdapter implements RuntimeAdapter {
+    private readonly options;
+    private readonly factory;
+    private readonly maxScriptChars;
+    private readonly defaultInstructionBudget;
+    private engineInit;
+    constructor(options?: WasmoonRuntimeAdapterOptions);
+    private getEngine;
+    private resetEngine;
+    private runLua;
+    readonly execute: (ctx: ExecutionContext, input: RunScriptInput) => Promise<Result<RunScriptResult, ExecutionFailure>>;
+    readonly disposeMicroverse: (microverseId: MicroverseId) => Promise<void>;
+}
+//# sourceMappingURL=WasmoonRuntimeAdapter.d.ts.map

package/dist/infrastructure/runtime/WasmoonRuntimeAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WasmoonRuntimeAdapter.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/runtime/WasmoonRuntimeAdapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAG7D,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,eAAe,EACf,YAAY,EACb,MAAM,6BAA6B,CAAC;AAkBrC,MAAM,MAAM,4BAA4B,GAAG;IACzC,wHAAwH;IACxH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,mJAAmJ;IACnJ,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxD,CAAC;AAEF,qBAAa,qBAAsB,YAAW,cAAc;IAS9C,OAAO,CAAC,QAAQ,CAAC,OAAO;IARpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAE5C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IAExC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAS;IAElD,OAAO,CAAC,UAAU,CAAwC;gBAE7B,OAAO,GAAE,4BAAiC;IAMvE,OAAO,CAAC,SAAS,CASf;IAEF,OAAO,CAAC,WAAW,CAcjB;IAEF,OAAO,CAAC,MAAM,CAEZ;IAEF,QAAQ,CAAC,OAAO,GACd,KAAK,gBAAgB,EACrB,OAAO,cAAc,KACpB,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAmDnD;IAEF,QAAQ,CAAC,iBAAiB,GAAU,cAAc,YAAY,KAAG,OAAO,CAAC,IAAI,CAAC,CAc5E;CACH"}

package/dist/infrastructure/runtime/createWasmMicroverseRuntime.d.ts

@@ -0,0 +1,11 @@
+import { MicroverseRuntime, TimeoutPolicy } from '@microverse.ts/runtime-core';
+import { WasmoonRuntimeAdapterOptions } from './WasmoonRuntimeAdapter';
+export type WasmMicroverseRuntimeOptions = WasmoonRuntimeAdapterOptions & {
+    /** Default timeout forwarded to each {@link MicroverseSlot.run} when the call omits `timeout`. */
+    readonly defaultTimeout?: TimeoutPolicy | undefined;
+};
+/**
+ * Wasmoon-backed {@link MicroverseRuntime} with hardened slot bootstrap (safe globals, instruction budget).
+ */
+export declare function createWasmMicroverseRuntime(options?: WasmMicroverseRuntimeOptions): MicroverseRuntime;
+//# sourceMappingURL=createWasmMicroverseRuntime.d.ts.map

package/dist/infrastructure/runtime/createWasmMicroverseRuntime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createWasmMicroverseRuntime.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/runtime/createWasmMicroverseRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,aAAa,EACnB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAyB,KAAK,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAEnG,MAAM,MAAM,4BAA4B,GAAG,4BAA4B,GAAG;IACxE,kGAAkG;IAClG,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;CACrD,CAAC;AAEF;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,GAAE,4BAAiC,GAAG,iBAAiB,CAOzG"}

package/dist/infrastructure/runtime/luaLongString.d.ts

@@ -0,0 +1,3 @@
+/** Builds a Lua long literal `[=*[ ... ]=*]` so `source` can contain `]`, newlines, etc. */
+export declare function toLuaLongStringLiteral(source: string): string;
+//# sourceMappingURL=luaLongString.d.ts.map

package/dist/infrastructure/runtime/luaLongString.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"luaLongString.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/runtime/luaLongString.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAY7D"}

package/dist/infrastructure/runtime/microverseLuaSlotVmBootstrap.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Lua 5.4 bootstrap for **one Wasmoon VM, many slots**:
+ * - Slot `_ENV` uses a **safe global** table (no `debug`, `load`, `io`, `os`, …).
+ * - Slot registry and internals are **closure-local** (not on `_G`).
+ * - Bridge tables are **read-only** from Lua (`__newindex`); host re-injects via `mergeEnv` each run.
+ * - **No auto-await**: async bridges return a handle with `:await()`; optional 2nd-arg callback runs after the current chunk step.
+ * - Optional **instruction budget** per chunk via `debug.sethook` when available.
+ */
+export declare const MICROVERSE_LUA_DEFAULT_INSTRUCTION_BUDGET = 5000000;
+export declare const MICROVERSE_LUA_SLOT_VM_BOOTSTRAP: string;
+//# sourceMappingURL=microverseLuaSlotVmBootstrap.d.ts.map

package/dist/infrastructure/runtime/microverseLuaSlotVmBootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"microverseLuaSlotVmBootstrap.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/runtime/microverseLuaSlotVmBootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,eAAO,MAAM,yCAAyC,UAAY,CAAC;AAEnE,eAAO,MAAM,gCAAgC,QAqNrC,CAAC"}

package/dist/infrastructure/runtime/wasmoonExecutePolicy.d.ts

@@ -0,0 +1,20 @@
+import { CancellationToken, TimeoutPolicy } from '@microverse.ts/runtime-core';
+export declare const MICROVERSE_LUA_DEFAULT_MAX_SCRIPT_CHARS = 512000;
+export declare function resolveTimeoutMs(timeout: TimeoutPolicy | undefined): number | undefined;
+export declare function assertScriptSize(script: string, maxChars: number): void;
+export declare function assertNotCancelled(cancellation: CancellationToken): void;
+/**
+ * Runs an async Lua invocation with optional wall-clock timeout.
+ * Note: synchronous infinite Lua still blocks the thread until the instruction hook fires;
+ * callers should combine with {@link MICROVERSE_LUA_DEFAULT_INSTRUCTION_BUDGET} in the bootstrap.
+ */
+export declare function runWithWallClockTimeout(run: () => Promise<void>, timeoutMs: number | undefined): Promise<'ok' | 'timeout'>;
+export declare function mapExecuteError(e: unknown): {
+    readonly _tag: 'Timeout';
+} | {
+    readonly _tag: 'Cancelled';
+} | {
+    readonly _tag: 'AdapterError';
+    readonly message: string;
+};
+//# sourceMappingURL=wasmoonExecutePolicy.d.ts.map

package/dist/infrastructure/runtime/wasmoonExecutePolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasmoonExecutePolicy.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/runtime/wasmoonExecutePolicy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEpF,eAAO,MAAM,uCAAuC,SAAU,CAAC;AAkC/D,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAKvF;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAIvE;AAED,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,iBAAiB,GAAG,IAAI,CAIxE;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EACxB,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CA0B3B;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,OAAO,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAYvK"}

package/dist/infrastructure/worker/WorkerMicroverseHost.d.ts

@@ -0,0 +1,7 @@
+import { WorkerHostToRuntimeMessage, WorkerRuntimeToHostMessage } from '../../domain/worker/WorkerMicroverseMessages';
+export declare class WorkerMicroverseHost {
+    private last;
+    readonly post: (message: WorkerHostToRuntimeMessage) => void;
+    readonly drain: () => WorkerRuntimeToHostMessage | undefined;
+}
+//# sourceMappingURL=WorkerMicroverseHost.d.ts.map

package/dist/infrastructure/worker/WorkerMicroverseHost.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkerMicroverseHost.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/worker/WorkerMicroverseHost.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,0BAA0B,EAC1B,0BAA0B,EAC3B,MAAM,8CAA8C,CAAC;AAEtD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,IAAI,CAA2C;IAEvD,QAAQ,CAAC,IAAI,GAAI,SAAS,0BAA0B,KAAG,IAAI,CAGzD;IAEF,QAAQ,CAAC,KAAK,QAAO,0BAA0B,GAAG,SAAS,CAIzD;CACH"}

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "@microverse.ts/runtime-wasm",
+  "version": "0.1.0",
+  "type": "module",
+  "license": "MIT",
+  "sideEffects": false,
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/QADRAX/Microverse.ts.git",
+    "directory": "packages/runtime-wasm"
+  },
+  "bugs": "https://github.com/QADRAX/Microverse.ts/issues",
+  "homepage": "https://github.com/QADRAX/Microverse.ts/tree/main/packages/runtime-wasm",
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "wasmoon": "^1.15.0",
+    "@microverse.ts/runtime-core": "0.1.0",
+    "@microverse.ts/runtime-lua": "0.1.0",
+    "@microverse.ts/shared": "0.1.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.8.3",
+    "vite": "^8.0.0",
+    "vite-plugin-dts": "^4.5.4",
+    "vitest": "^3.1.4"
+  },
+  "scripts": {
+    "build": "vite build",
+    "lint": "eslint .",
+    "test": "vitest run",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  }
+}