@pulse-compute/provider-fastly 1.0.0-beta.1 → 1.0.0-beta.11

package/README.md

@@ -6,9 +6,10 @@
 > **Install directly:** Yes, for Fastly projects. Node-only projects do not need to import it directly.<br>
 > **Supported entry points:** `@pulse-compute/provider-fastly`, `@pulse-compute/provider-fastly/contract`, `@pulse-compute/provider-fastly/toolchain`, `@pulse-compute/provider-fastly/config-schema`, `@pulse-compute/provider-fastly/runtime/canonical-api-runtime`, `@pulse-compute/provider-fastly/build/canonical-target`, `@pulse-compute/provider-fastly/testing/fastly-cli`<br>
 > **Stability:** The listed entry points are supported for the Beta; all other exported subpaths are implementation-only.<br>
-> **Canonical documentation:** [Package guide](https://pulsecompute.io/v1.0.0-beta.1/packages/provider-fastly/)
+> **npm:** [`@pulse-compute/provider-fastly`](https://www.npmjs.com/package/@pulse-compute/provider-fastly)<br>
+> **Canonical documentation:** [Package guide](https://pulsecompute.io/v1.0.0-beta.11/packages/provider-fastly/)
 >
-> This release-status block is generated from the synchronized `Pulse 1.0.0-beta.1` package policy.
+> This release-status block is generated from the synchronized `Pulse 1.0.0-beta.11` package policy.
 <!-- pulse-package-status:end -->
 
 Fastly provider configuration, canonical capability lowering, local conformance execution, Compute target generation, and explicit external-tool boundaries.
@@ -48,7 +49,7 @@ trusted wall-clock authority. It does not fall back to Node execution.
 
 ## Documentation
 
-- [Fastly package guide](https://pulsecompute.io/v1.0.0-beta.1/packages/provider-fastly/)
-- [Project configuration](https://pulsecompute.io/v1.0.0-beta.1/reference/project-config/#fastly-provider-options)
-- [Fastly capabilities guide](https://pulsecompute.io/v1.0.0-beta.1/guides/fastly-capabilities/)
-- [Environment variables](https://pulsecompute.io/v1.0.0-beta.1/reference/environment/#pulse-fastly-bin)
+- [Fastly package guide](https://pulsecompute.io/v1.0.0-beta.11/packages/provider-fastly/)
+- [Project configuration](https://pulsecompute.io/v1.0.0-beta.11/reference/project-config/#fastly-provider-options)
+- [Fastly capabilities guide](https://pulsecompute.io/v1.0.0-beta.11/guides/fastly-capabilities/)
+- [Environment variables](https://pulsecompute.io/v1.0.0-beta.11/reference/environment/#pulse-fastly-bin)

package/dist/config-schema.json

@@ -1,6 +1,10 @@
 {
     "schemaVersion": "pulse.provider-fastly-config-schema.v1",
     "fields": {
+        "fastly.bindings.s3": {
+            "kind": "object",
+            "default": {}
+        },
         "fastly.configStore": {
             "kind": "string",
             "default": "pulse_config"
@@ -68,6 +72,32 @@
         "fastly.local.networkFetch": {
             "kind": "boolean",
             "default": false
+        },
+        "fastly.maxDurationMs": {
+            "kind": "optional-number"
+        },
+        "fastly.build.maxWasmBytes": {
+            "kind": "positive-safe-integer",
+            "default": 4194304
+        },
+        "fastly.maxWasmBytes": {
+            "kind": "positive-safe-integer"
+        },
+        "fastly.bodyForwarding": {
+            "kind": "object"
+        },
+        "fastly.bodyForwarding.requestMaxBytes": {
+            "kind": "integer",
+            "minimum": 1,
+            "maximum": 1048576
+        },
+        "fastly.bodyForwarding.responseMaxBytes": {
+            "kind": "integer",
+            "minimum": 1,
+            "maximum": 1048576
+        },
+        "fastly.logEndpoint": {
+            "kind": "optional-string"
         }
     }
 }

package/dist/index.d.ts

@@ -13,7 +13,18 @@ export interface PulseFastlyGripOptions {
 export interface PulseFastlyLocalOptions {
     readonly networkFetch?: boolean;
 }
+export interface PulseFastlyBodyForwardingOptions {
+    readonly requestMaxBytes: number;
+    readonly responseMaxBytes: number;
+}
 export interface PulseFastlyProviderOptions {
+    /** Inclusive final Native Wasm byte budget; default 4 MiB. */
+    readonly maxWasmBytes?: number;
+    readonly maxDurationMs?: number;
+    /** Experimental Native metered pump; final close hands delivery to Fastly. */
+    readonly bodyForwarding?: PulseFastlyBodyForwardingOptions;
+    /** Named production log stream; omitted preserves stdout. */
+    readonly logEndpoint?: string;
     readonly configStore?: string;
     readonly secretStore?: string;
     readonly kv?: Readonly<Record<string, string>>;
@@ -26,9 +37,13 @@ export interface PulseFastlyProviderOptions {
     readonly local?: PulseFastlyLocalOptions;
 }
 export interface PulseFastlyProviderConfig {
+    readonly maxDurationMs?: number;
+    /** Experimental Native metered pump; final close hands delivery to Fastly. */
+    readonly bodyForwarding?: PulseFastlyBodyForwardingOptions;
     readonly kind: 'fastly';
     readonly version: typeof FASTLY_PROVIDER_API_VERSION;
     readonly bindings: {
+        readonly logEndpoint?: string;
         readonly configStore: string;
         readonly secretStore: string;
         readonly kv: Readonly<Record<string, string>>;
@@ -47,6 +62,7 @@ export interface PulseFastlyProviderConfig {
         readonly dynamicBackends: boolean;
     };
     readonly build: {
+        readonly maxWasmBytes: number;
         readonly name: string;
         readonly description: string;
         readonly authors: readonly string[];

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,2BAA2B,EAAG,8BAAuC,CAAC;AAEnF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,CAAC,EAAE;QACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;QAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACrD,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,uBAAuB,CAAC;CAC1C;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,2BAA2B,CAAC;IACrD,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,EAAE;YACd,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;YAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;YAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;YAC7B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YACjC,QAAQ,CAAC,cAAc,CAAC,EAAE;gBACxB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;gBAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;aAC5B,CAAC;YACF,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;SAC9B,CAAC;QACF,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;KACnC,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;QACpC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;KAC5B,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;KAChC,CAAC;IACF,QAAQ,CAAC,wBAAwB,EAAE,KAAK,CAAC;CAC1C;AA2BD,wBAAgB,MAAM,CAAC,OAAO,GAAE,0BAA+B,GAAG,yBAAyB,CAsB1F"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,2BAA2B,EAAG,8BAAuC,CAAC;AAEnF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,CAAC,EAAE;QACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;QAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,0BAA0B;IACzC,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,cAAc,CAAC,EAAE,gCAAgC,CAAC;IAC3D,6DAA6D;IAC7D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACrD,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,uBAAuB,CAAC;CAC1C;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,cAAc,CAAC,EAAE,gCAAgC,CAAC;IAC3D,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,2BAA2B,CAAC;IACrD,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,EAAE;YACd,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;YAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;YAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;YAC7B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YACjC,QAAQ,CAAC,cAAc,CAAC,EAAE;gBACxB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;gBAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;aAC5B,CAAC;YACF,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;SAC9B,CAAC;QACF,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;KACnC,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;QACpC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;KAC5B,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;KAChC,CAAC;IACF,QAAQ,CAAC,wBAAwB,EAAE,KAAK,CAAC;CAC1C;AA2BD,wBAAgB,MAAM,CAAC,OAAO,GAAE,0BAA+B,GAAG,yBAAyB,CA0B1F"}

package/dist/index.js

@@ -5,6 +5,10 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.FASTLY_PROVIDER_API_VERSION = void 0;
 exports.fastly = fastly;
+const { normalizeFastlyLogEndpoint } = require('../src/toolchain/logging.js');
+const { normalizeBodyForwarding } = require('../src/toolchain/body-forwarding.js');
+const { normalizeFastlyMaxWasmBytes } = require('../src/build/wasm-budget.js');
+const { normalizeRequestDuration } = require('@pulse-compute/runtime/host');
 const config_schema_json_1 = __importDefault(require("./config-schema.json"));
 const fastlySchemaFields = config_schema_json_1.default.fields;
 const fastlyDefaults = Object.freeze(Object.fromEntries(Object.entries(fastlySchemaFields).filter(([, rule]) => Object.prototype.hasOwnProperty.call(rule, 'default')).map(([key, rule]) => [key, rule.default])));
@@ -37,8 +41,11 @@ function fastly(options = {}) {
     const normalizedGrip = options.grip === undefined ? undefined : gripBindings(options.grip);
     return Object.freeze({
         kind: 'fastly',
+        maxDurationMs: normalizeRequestDuration(options.maxDurationMs),
+        bodyForwarding: normalizeBodyForwarding(options.bodyForwarding, options.maxDurationMs),
         version: exports.FASTLY_PROVIDER_API_VERSION,
         bindings: Object.freeze({
+            ...(options.logEndpoint === undefined ? {} : { logEndpoint: normalizeFastlyLogEndpoint(options.logEndpoint) }),
             configStore: String(options.configStore ?? fastlyDefaults['fastly.configStore']),
             secretStore: String(options.secretStore ?? fastlyDefaults['fastly.secretStore']),
             kv: stringMap(options.kv),
@@ -47,6 +54,7 @@ function fastly(options = {}) {
             dynamicBackends: options.dynamicBackends === undefined ? Boolean(fastlyDefaults['fastly.dynamicBackends']) : options.dynamicBackends === true
         }),
         build: Object.freeze({
+            maxWasmBytes: normalizeFastlyMaxWasmBytes(options.maxWasmBytes),
             name: String(options.name ?? fastlyDefaults['fastly.name']),
             description: String(options.description ?? fastlyDefaults['fastly.description']),
             authors: Object.freeze((options.authors ?? (Array.isArray(fastlyDefaults['fastly.authors']) ? fastlyDefaults['fastly.authors'] : [])).map(String)),

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;AA+FA,wBAsBC;AArHD,8EAAwD;AAGxD,MAAM,kBAAkB,GAAG,4BAAoB,CAAC,MAAoD,CAAC;AACrG,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAsC,CAAC;AAE3O,QAAA,2BAA2B,GAAG,8BAAuC,CAAC;AAgEnF,SAAS,SAAS,CAAC,KAAmD;IACpE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5H,CAAC;AAED,SAAS,kBAAkB,CAAC,KAA2D;IACrF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,IAAI,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;IAClG,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,QAAiB;QACzB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;KACnC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAAyC;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,KAAK,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC;QAC3F,eAAe,EAAE,KAAK,EAAE,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC;QACjG,UAAU,EAAE,KAAK,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;QAClF,cAAc,EAAE,KAAK,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC;QAC9F,cAAc,EAAE,kBAAkB,CAAC,KAAK,EAAE,cAAc,CAAC;QACzD,UAAU,EAAE,KAAK,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,KAAK,KAAK;KAC7H,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,MAAM,CAAC,UAAsC,EAAE;IAC7D,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3F,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,mCAA2B;QACpC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,cAAc,CAAC,oBAAoB,CAAC,CAAC;YAChF,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,cAAc,CAAC,oBAAoB,CAAC,CAAC;YAChF,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;YACrC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,eAAe,EAAE,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,KAAK,IAAI;SAC9I,CAAC;QACF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,cAAc,CAAC,aAAa,CAAC,CAAC;YAC3D,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,cAAc,CAAC,oBAAoB,CAAC,CAAC;YAChF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClJ,QAAQ,EAAE,OAAO;SAClB,CAAC;QACF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,IAAI,cAAc,CAAC,2BAA2B,CAAC,CAAC,EAAE,CAAC;QAC3H,wBAAwB,EAAE,KAAK;KAChC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;AAoHA,wBA0BC;AA9ID,MAAM,EAAE,0BAA0B,EAAE,GAAG,OAAO,CAAC,6BAA6B,CAAuE,CAAC;AACpJ,MAAM,EAAE,uBAAuB,EAAE,GAAG,OAAO,CAAC,qCAAqC,CAA2J,CAAC;AAC7O,MAAM,EAAE,2BAA2B,EAAE,GAAG,OAAO,CAAC,6BAA6B,CAA4D,CAAC;AAC1I,MAAM,EAAE,wBAAwB,EAAE,GAAG,OAAO,CAAC,6BAA6B,CAAqE,CAAC;AAChJ,8EAAwD;AAGxD,MAAM,kBAAkB,GAAG,4BAAoB,CAAC,MAAoD,CAAC;AACrG,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAsC,CAAC;AAE3O,QAAA,2BAA2B,GAAG,8BAAuC,CAAC;AAiFnF,SAAS,SAAS,CAAC,KAAmD;IACpE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5H,CAAC;AAED,SAAS,kBAAkB,CAAC,KAA2D;IACrF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,IAAI,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;IAClG,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,QAAiB;QACzB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;KACnC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAAyC;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,KAAK,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC;QAC3F,eAAe,EAAE,KAAK,EAAE,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC;QACjG,UAAU,EAAE,KAAK,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;QAClF,cAAc,EAAE,KAAK,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC;QAC9F,cAAc,EAAE,kBAAkB,CAAC,KAAK,EAAE,cAAc,CAAC;QACzD,UAAU,EAAE,KAAK,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,KAAK,KAAK;KAC7H,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,MAAM,CAAC,UAAsC,EAAE;IAC7D,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3F,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,aAAa,EAAE,wBAAwB,CAAC,OAAO,CAAC,aAAa,CAAC;QAC9D,cAAc,EAAE,uBAAuB,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,aAAa,CAAC;QACtF,OAAO,EAAE,mCAA2B;QACpC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,0BAA0B,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9G,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,cAAc,CAAC,oBAAoB,CAAC,CAAC;YAChF,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,cAAc,CAAC,oBAAoB,CAAC,CAAC;YAChF,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;YACrC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,eAAe,EAAE,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,KAAK,IAAI;SAC9I,CAAC;QACF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,YAAY,EAAE,2BAA2B,CAAC,OAAO,CAAC,YAAY,CAAC;YAC/D,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,cAAc,CAAC,aAAa,CAAC,CAAC;YAC3D,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,cAAc,CAAC,oBAAoB,CAAC,CAAC;YAChF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClJ,QAAQ,EAAE,OAAO;SAClB,CAAC;QACF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,IAAI,cAAc,CAAC,2BAA2B,CAAC,CAAC,EAAE,CAAC;QAC3H,wBAAwB,EAAE,KAAK;KAChC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pulse-compute/provider-fastly",
-  "version": "1.0.0-beta.1",
+  "version": "1.0.0-beta.11",
   "license": "Apache-2.0",
   "engines": {
     "node": "^22.14.0 || ^24.0.0"
@@ -59,14 +59,15 @@
     }
   },
   "dependencies": {
-    "@pulse-compute/crypto": "1.0.0-beta.1",
-    "@pulse-compute/jwt": "1.0.0-beta.1",
-    "@pulse-compute/runtime": "1.0.0-beta.1",
-    "@pulse-compute/wasm-build-support": "1.0.0-beta.1",
-    "@pulse-compute/wasm-contracts": "1.0.0-beta.1",
-    "@pulse-compute/wasm-guest-link": "1.0.0-beta.1",
-    "@pulse-compute/wasm-host-runtime": "1.0.0-beta.1",
-    "@pulse-compute/wasm-runtime-core-as": "1.0.0-beta.1",
+    "@pulse-compute/crypto": "1.0.0-beta.11",
+    "@pulse-compute/jwt": "1.0.0-beta.11",
+    "@pulse-compute/runtime": "1.0.0-beta.11",
+    "@pulse-compute/s3": "1.0.0-beta.11",
+    "@pulse-compute/wasm-build-support": "1.0.0-beta.11",
+    "@pulse-compute/wasm-contracts": "1.0.0-beta.11",
+    "@pulse-compute/wasm-guest-link": "1.0.0-beta.11",
+    "@pulse-compute/wasm-host-runtime": "1.0.0-beta.11",
+    "@pulse-compute/wasm-runtime-core-as": "1.0.0-beta.11",
     "esbuild": "0.28.1"
   },
   "types": "./dist/index.d.ts",
@@ -86,7 +87,7 @@
     "url": "git+https://github.com/pulse-compute/pulse.git",
     "directory": "packages/provider-fastly"
   },
-  "homepage": "https://pulsecompute.io/v1.0.0-beta.1/packages/provider-fastly/",
+  "homepage": "https://pulsecompute.io/v1.0.0-beta.11/packages/provider-fastly/",
   "bugs": {
     "url": "https://github.com/pulse-compute/pulse/issues"
   },

package/src/build/canonical-target.js

@@ -1,12 +1,14 @@
 'use strict';
 
 const crypto = require('node:crypto');
+const { normalizeFastlyMaxWasmBytes, assertFastlyWasmBudget } = require('./wasm-budget.js');
 const fs = require('node:fs');
 const path = require('node:path');
 const { CANONICAL_NATIVE_PLAN_VERSION } = require('@pulse-compute/wasm-contracts/handler/canonical-native-plan');
 const {
   FASTLY_NATIVE_PLATFORM_CAPABILITIES_VERSION,
   compileFastlyNativePlatformCapabilitiesPlan,
+  resolveCapabilityBindings,
   writeFastlyNativePlatformCapabilitiesModule
 } = require('./native-platform-capabilities.js');
 
@@ -80,6 +82,12 @@ function assertExactProviderNative(native) {
       }
     );
   }
+  if (native.manifest.hostExtensions) {
+    const evidence = native.manifest.hostExtensions;
+    if (evidence.finalWasmSha256 !== observedSha256) throw providerBuildError(
+      'PULSE_HOST_EXTENSION_IMPORT', 'Terminal service evidence does not identify the packaged Wasm.', { automaticFallback: false });
+    require('@pulse-compute/wasm-contracts/provider/toolchain').hostExtensions.auditWasm(native.wasm, evidence.importPolicy);
+  }
   if (native.guestLink) {
     const audit = native.guestLink.audit;
     if (
@@ -222,6 +230,8 @@ function inspectFastlyCanonicalTarget(options = {}) {
   }
   const providerConfig = options.providerConfig || {};
   const bindings = options.bindings || providerConfig.bindings || {};
+  const maxWasmBytes = normalizeFastlyMaxWasmBytes(providerConfig.build?.maxWasmBytes);
+  if (isFastlyNativeArtifact(options.native)) assertFastlyWasmBudget(options.native.wasm.length, maxWasmBytes);
   const native = isFastlyNativeArtifact(options.native)
     ? assertExactProviderNative(options.native)
     : compileFastlyNativePlatformCapabilitiesPlan(plan, {
@@ -229,6 +239,9 @@ function inspectFastlyCanonicalTarget(options = {}) {
         projectRoot: options.projectRoot,
         profile: options.profile,
         bindings,
+        maxDurationMs: providerConfig.maxDurationMs,
+        bodyForwarding: providerConfig.bodyForwarding,
+        maxWasmBytes,
         requirePlatformCapability: false,
         canonicalBuild: true,
         targetDescriptor: options.targetDescriptor,
@@ -239,8 +252,30 @@ function inspectFastlyCanonicalTarget(options = {}) {
           || (options.native && options.native.guestUnits),
         nativeOptimization: options.nativeOptimization
           || (options.experimentalNativeSize === true ? 'experimental-native-size' : undefined),
+        elideJsonCacheArena: options.elideJsonCacheArena,
+        emitWat: options.emitWat,
         timeoutMs: options.compileTimeoutMs
       });
+  if (native.manifest.bindings?.logEndpoint !== require('../toolchain/logging.js').normalizeFastlyLogEndpoint(bindings.logEndpoint)) {
+    throw providerBuildError('PULSE_FASTLY_NATIVE_ARTIFACT_INVALID', 'Fastly artifact logging destination does not match the selected provider profile; rebuild the Native artifact.');
+  }
+  const duration = require('@pulse-compute/runtime/host').normalizeRequestDuration(providerConfig.maxDurationMs);
+  if (native.manifest.bindings?.maxDurationMs !== duration) {
+    throw providerBuildError('PULSE_REQUEST_DURATION_ARTIFACT_MISMATCH', 'Fastly artifact request deadline does not match the selected provider profile.');
+  }
+  const forwarding = require('../toolchain/body-forwarding.js').normalizeBodyForwarding(providerConfig.bodyForwarding, duration);
+  if (JSON.stringify(native.manifest.bindings?.bodyForwarding) !== JSON.stringify(forwarding)) {
+    throw providerBuildError('PULSE_FASTLY_BODY_FORWARDING_ARTIFACT_MISMATCH', 'Fastly artifact forwarding bounds do not match the selected provider profile.');
+  }
+  if (native.manifest.dynamicBackends || (isFastlyNativeArtifact(options.native) && bindings.dynamicBackends === true)) {
+    const dynamic = require('./native-dynamic-backends.js');
+    const expected = resolveCapabilityBindings(plan, { bindings, maxDurationMs: duration, bodyForwarding: forwarding });
+    const expectedPolicy = dynamic.active(expected) ? dynamic.describe(bindings.backends) : undefined;
+    if (JSON.stringify(native.manifest.dynamicBackends) !== JSON.stringify(expectedPolicy)
+      || JSON.stringify(native.manifest.backends) !== JSON.stringify(expected.backends)) {
+      throw providerBuildError('PULSE_FASTLY_NATIVE_ARTIFACT_INVALID', 'Fastly artifact backend selection does not match the selected provider profile; rebuild the Native artifact.');
+    }
+  }
   return Object.freeze({
     target: FASTLY_CANONICAL_TARGET,
     provider: 'fastly',
@@ -287,6 +322,8 @@ function writeFastlyCanonicalTarget(options = {}) {
   fs.mkdirSync(binDir, { recursive: true });
 
   let native;
+  const maxWasmBytes = normalizeFastlyMaxWasmBytes(providerConfig.build?.maxWasmBytes);
+  if (isFastlyNativeArtifact(options.native)) assertFastlyWasmBudget(options.native.wasm.length, maxWasmBytes);
   const auditedNative = isFastlyNativeArtifact(options.native)
     ? assertExactProviderNative(options.native)
     : null;
@@ -308,6 +345,8 @@ function writeFastlyCanonicalTarget(options = {}) {
         || (options.native && options.native.guestUnits),
       nativeOptimization: options.nativeOptimization
         || (options.experimentalNativeSize === true ? 'experimental-native-size' : undefined),
+      elideJsonCacheArena: options.elideJsonCacheArena,
+      emitWat: options.emitWat,
       compileTimeoutMs: options.compileTimeoutMs
     });
     native = realization.native;
@@ -373,7 +412,7 @@ function writeFastlyCanonicalTarget(options = {}) {
     }),
     optimization: native.manifest.optimization,
     wasm: Object.freeze({ file: 'bin/main.wasm', ...native.manifest.wasm }),
-    wat: Object.freeze({ file: 'bin/main.wat', ...native.manifest.wat }),
+    wat: Object.freeze({ file: written.watFile ? 'bin/main.wat' : null, ...native.manifest.wat }),
     imports: native.manifest.imports,
     importModules: native.manifest.importModules,
     exports: native.manifest.exports,
@@ -402,7 +441,7 @@ function writeFastlyCanonicalTarget(options = {}) {
       localEntry: 'fastly-entry.cjs',
       sourceEntry: 'src/main.as.ts',
       wasm: 'bin/main.wasm',
-      wat: 'bin/main.wat',
+      wat: written.watFile ? 'bin/main.wat' : null,
       nativePlan: 'fastly-native-plan.json',
       nativeManifest: 'fastly-native-manifest.json',
       fastlyToml: 'fastly.toml',

package/src/build/digest-native.js

@@ -0,0 +1,25 @@
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+function digestNativeSource(plan) {
+  if (!plan.effects.some(effect => effect.kind === 'crypto.digestText')) return '';
+  const selected = plan.crypto?.algorithms.find(entry => entry.algorithm === 'SHA-256');
+  if (!selected || selected.realization !== 'guest-source:pulse-hmac-as' || selected.automaticFallback !== false) throw new TypeError('Digest requires the selected Crypto SHA-256 guest source.');
+  const root = path.dirname(require.resolve('@pulse-compute/crypto/pulsewasm-native'));
+  return fs.readFileSync(path.join(root, 'as/digest-text.as.ts'), 'utf8') + `
+function __pulse_fastly_digest_begin(index: i32, outer: __PulseFastlyValue): void {
+  const payload = __pulse_fastly_value(__pulse_fastly_payload_field(outer, 'invocation'))
+  const text = __pulse_fastly_value(__pulse_fastly_payload_field(payload, 'text'))
+  const digest = __pulse_crypto_digest_text(text.kind == PULSE_VALUE_STRING ? text.text : null)
+  if (text.kind == PULSE_VALUE_STRING) __pulse_fastly_remember_secret(text.text)
+  const result = host_value_object()
+  host_value_object_set(result, __pulse_fastly_string_value('status'), __pulse_fastly_string_value(digest.status))
+  if (digest.status == 'ok') {
+    host_value_object_set(result, __pulse_fastly_string_value('sha256'), __pulse_fastly_string_value(digest.sha256))
+    host_value_object_set(result, __pulse_fastly_string_value('byteLength'), host_value_number(f64(digest.byteLength)))
+  } else host_value_object_set(result, __pulse_fastly_string_value('reason'), __pulse_fastly_string_value(digest.reason))
+  __pulse_fastly_ready_effect(index, result)
+}
+`;
+}
+module.exports = { digestNativeSource };

package/src/build/effect-invocations.js

@@ -0,0 +1,51 @@
+'use strict';
+
+const { CANONICAL_EFFECT_INVOCATION_POLICY } = require('@pulse-compute/wasm-contracts/handler/canonical-runtime');
+
+function runtimeSource(options = {}) {
+  const lifecycle = options.lifecycle;
+  const delivery = options.packageCompletion ? 'result == 0 ? pulse_package_set_effect_failure(index) : pulse_set_effect_result(index, result)' : 'pulse_set_effect_result(index, result)';
+  return `
+const PULSE_FASTLY_MAX_EFFECT_INVOCATIONS: i32 = ${CANONICAL_EFFECT_INVOCATION_POLICY.defaultMaxEffects}
+let __pulse_invocation_count: i32 = 0
+let __pulse_invocation_started: bool = false
+let __pulse_invocation_closed: bool = false
+let __pulse_invocation_failure: i32 = 171
+const __pulse_invocation_tickets = new StaticArray<i32>(PULSE_FASTLY_EFFECT_COUNT)
+function __pulse_invocation_begin(index: i32): bool {
+  if (__pulse_invocation_closed || index < 0 || index >= PULSE_FASTLY_EFFECT_COUNT
+    || unchecked(__pulse_invocation_tickets[index]) != 0) {
+    __pulse_fastly_fail(PULSE_ERROR_STATE, __pulse_invocation_failure, index); return false
+  }
+  if (__pulse_invocation_count >= PULSE_FASTLY_MAX_EFFECT_INVOCATIONS) {
+    __pulse_invocation_closed = true
+    __pulse_invocation_failure = 170
+    __pulse_fastly_fail(PULSE_ERROR_STATE, 170, index); return false
+  }
+  unchecked(__pulse_invocation_tickets[index] = ++__pulse_invocation_count)
+  return true
+}
+function __pulse_invocation_settle(index: i32, ticket: i32, result: i32): i32 {
+  if (__pulse_invocation_closed || index < 0 || index >= PULSE_FASTLY_EFFECT_COUNT
+    || ticket <= 0 || unchecked(__pulse_invocation_tickets[index]) != ticket) {
+    __pulse_fastly_fail(PULSE_ERROR_STATE, __pulse_invocation_failure, index); return 0
+  }
+${lifecycle?.site('effect-settle') ? lifecycle.site('effect-settle') + '\n' : ''}  unchecked(__pulse_invocation_tickets[index] = 0)
+  ${lifecycle ? lifecycle.site('effect-deliver', delivery) : 'return ' + delivery}
+}
+function __pulse_invocation_close(): void {
+${lifecycle?.site('invocation-close') ? lifecycle.site('invocation-close') + '\n' : ''}  __pulse_invocation_closed = true
+  for (let i = 0; i < PULSE_FASTLY_EFFECT_COUNT; i += 1) unchecked(__pulse_invocation_tickets[i] = 0)
+${lifecycle?.site('invocation-closed') ? lifecycle.site('invocation-closed') + '\n' : ''}}
+`;
+}
+
+function instrument(source) {
+  const signature = 'function host_effect_begin(effectIndex: i32, payload: i32): void {';
+  if (!source.includes(signature)) throw new Error('Fastly invocation admission boundary drift.');
+  // Every guest-requested slot gets a ticket, including a group member suppressed
+  // by an earlier application error. Its undefined result can then be drained.
+  return source.replace(signature, signature + '\n  if (!__pulse_invocation_begin(effectIndex)) return;');
+}
+
+module.exports = { runtimeSource, instrument, policy: CANONICAL_EFFECT_INVOCATION_POLICY };

package/src/build/embedded-assets.as.ts

@@ -0,0 +1,32 @@
+function __pulse_embedded_request_header(name: string): string | null {
+  const values = __pulse_request_header_list(name, false);
+  return values.length ? values.join(', ') : null;
+}
+function __pulse_embedded_field(payload: __PulseFastlyValue, name: string): string { return __pulse_fastly_string(__pulse_fastly_payload_field(payload, name)); }
+function __pulse_fastly_embedded_asset(payload: __PulseFastlyValue): i32 {
+  // Avoid exposing provider buffers as canonical application values.
+  const length = __pulse_fastly_value(__pulse_fastly_payload_field(payload, 'embeddedFound')).boolean != 0 ? i32(__pulse_fastly_number(__pulse_fastly_payload_field(payload, 'embeddedLength'))) : -1;
+  const etag = __pulse_embedded_field(payload, 'embeddedEtag'), method = __pulse_embedded_field(payload, 'method');
+  const selected = __pulse_embedded_selection(length, method, etag,
+    __pulse_embedded_request_header('if-none-match'), __pulse_embedded_request_header('range'), __pulse_embedded_request_header('if-range'));
+  if (__pulse_request_headers_failed) return 0;
+  const output = new __PulseFastlyValue(); output.kind = PULSE_VALUE_RESPONSE; output.status = selected.status;
+  if (selected.status != 400 && selected.status != 404) {
+    output.headers.push(new __PulseFastlyHeader('content-type', __pulse_embedded_field(payload, 'embeddedType')));
+    output.headers.push(new __PulseFastlyHeader('etag', etag)); output.headers.push(new __PulseFastlyHeader('accept-ranges', 'bytes'));
+    if (selected.contentRange.length) output.headers.push(new __PulseFastlyHeader('content-range', selected.contentRange));
+    if (selected.status == 200 || selected.status == 206) {
+      output.headers.push(new __PulseFastlyHeader('content-length', max<i32>(0, selected.end - selected.start + 1).toString()));
+      if (method != 'HEAD') output.binaryBody = __pulse_embedded_bytes(__pulse_embedded_field(payload, 'embeddedData'), selected.start, selected.end);
+    }
+  }
+  return __pulse_fastly_put(output);
+}
+function __pulse_fastly_write_binary(handle: i32, data: Uint8Array): i32 {
+  const written = new StaticArray<i32>(1); let offset = 0;
+  while (offset < data.length) {
+    if (fastly_http_body_write(handle, data.dataStart + offset, data.length - offset, 0, changetype<usize>(written)) != 0 || written[0] <= 0 || written[0] > data.length - offset) return 1;
+    offset += written[0];
+  }
+  return 0;
+}

package/src/build/entities-native.js

@@ -1,5 +1,6 @@
 'use strict';
 
+const { nativeLoggingSource } = require('./native-stdio.js');
 const crypto = require('node:crypto');
 const fs = require('node:fs');
 const os = require('node:os');
@@ -41,6 +42,7 @@ const ALLOWED_IMPORTS = new Set([
   'fastly_http_resp:new',
   'fastly_http_resp:send_downstream',
   'fastly_http_resp:status_set',
+  'wasi_snapshot_preview1:fd_write',
   'fastly_log:endpoint_get',
   'fastly_log:write',
   'fastly_secret_store:get',
@@ -178,8 +180,7 @@ function providerRuntimeSource(bindings, options) {
 @external("fastly_secret_store", "open") declare function fastly_secret_store_open(name: usize, nameLength: i32, handleOut: usize): i32
 @external("fastly_secret_store", "get") declare function fastly_secret_store_get(handle: i32, key: usize, keyLength: i32, secretOut: usize): i32
 @external("fastly_secret_store", "plaintext") declare function fastly_secret_store_plaintext(secret: i32, value: usize, valueLength: i32, writtenOut: usize): i32
-@external("fastly_log", "endpoint_get") declare function fastly_log_endpoint_get(name: usize, nameLength: i32, handleOut: usize): i32
-@external("fastly_log", "write") declare function fastly_log_write(handle: i32, message: usize, messageLength: i32, writtenOut: usize): i32
+${nativeLoggingSource(options.logEndpoint)}
 
 const __PULSE_FASTLY_ENTITIES_ABI: i64 = 1
 const __PULSE_FASTLY_ENTITIES_BUFFER: i32 = ${BUFFER_BYTES}
@@ -191,7 +192,6 @@ let __pulse_fastly_entities_results = new Array<string>()
 let __pulse_fastly_entities_ready = new Array<i32>()
 let __pulse_fastly_entities_ok = new Array<i32>()
 let __pulse_fastly_entities_redactions = new Array<string>()
-let __pulse_fastly_entities_log_handle: i32 = -1
 
 function __pulse_fastly_entities_out(): StaticArray<i32> { return new StaticArray<i32>(1) }
 function __pulse_fastly_entities_out_value(value: StaticArray<i32>): i32 { return load<i32>(changetype<usize>(value)) }
@@ -327,15 +327,8 @@ function pulse_entities_host_effect_begin(effectIndex: i32, payloadPointer: i32,
 }
 function pulse_entities_host_log(level: i32, payloadPointer: i32, payloadLength: i32): void {
   if (payloadPointer <= 0 || payloadLength < 0) return
-  if (__pulse_fastly_entities_log_handle < 0) {
-    const endpoint = __pulse_fastly_entities_utf8("stdout")
-    const handleOut = __pulse_fastly_entities_out()
-    if (fastly_log_endpoint_get(changetype<usize>(endpoint), endpoint.byteLength, changetype<usize>(handleOut)) != __PULSE_FASTLY_OK) return
-    __pulse_fastly_entities_log_handle = __pulse_fastly_entities_out_value(handleOut)
-  }
   const message = __pulse_fastly_entities_utf8("[pulse:entities:" + level.toString() + "] " + __pulse_fastly_entities_redact(changetype<string>(payloadPointer)) + "\n")
-  const written = __pulse_fastly_entities_out()
-  fastly_log_write(__pulse_fastly_entities_log_handle, changetype<usize>(message), message.byteLength, changetype<usize>(written))
+  __pulse_fastly_write_stdout(message)
 }
 function __pulse_fastly_entities_write_body(handle: i32, value: string): i32 {
   const bytes = __pulse_fastly_entities_utf8(value)
@@ -496,6 +489,7 @@ function compileFastlyEntitiesNative(sourceArtifact, options = {}) {
       '--path', path.join(compilerFallback, 'node_modules'),
       '--path', path.dirname(jsonAsRoot)
     ];
+    require('@pulse-compute/wasm-build-support/native-optimization').appendJsonCacheArenaArgs(args, options.elideJsonCacheArena, true);
     const startedAt = Date.now();
     const result = spawnSync(asc.executable, args, {
       cwd: staging,
@@ -546,6 +540,7 @@ function compileFastlyEntitiesNative(sourceArtifact, options = {}) {
         package: 'assemblyscript',
         version: JSON.parse(fs.readFileSync(path.join(asc.packageRoot, 'package.json'), 'utf8')).version,
         jsonAs: jsonAsManifest.version,
+        elideDisabledCacheArena: options.elideJsonCacheArena === true,
         durationMs: Date.now() - startedAt
       }),
       policy: generated.policy