@pulse-compute/provider-fastly 1.0.0-beta.7 → 1.0.0-beta.8

package/README.md

@@ -7,9 +7,9 @@
 > **Supported entry points:** `@pulse-compute/provider-fastly`, `@pulse-compute/provider-fastly/contract`, `@pulse-compute/provider-fastly/toolchain`, `@pulse-compute/provider-fastly/config-schema`, `@pulse-compute/provider-fastly/runtime/canonical-api-runtime`, `@pulse-compute/provider-fastly/build/canonical-target`, `@pulse-compute/provider-fastly/testing/fastly-cli`<br>
 > **Stability:** The listed entry points are supported for the Beta; all other exported subpaths are implementation-only.<br>
 > **npm:** [`@pulse-compute/provider-fastly`](https://www.npmjs.com/package/@pulse-compute/provider-fastly)<br>
-> **Canonical documentation:** [Package guide](https://pulsecompute.io/v1.0.0-beta.7/packages/provider-fastly/)
+> **Canonical documentation:** [Package guide](https://pulsecompute.io/v1.0.0-beta.8/packages/provider-fastly/)
 >
-> This release-status block is generated from the synchronized `Pulse 1.0.0-beta.7` package policy.
+> This release-status block is generated from the synchronized `Pulse 1.0.0-beta.8` package policy.
 <!-- pulse-package-status:end -->
 
 Fastly provider configuration, canonical capability lowering, local conformance execution, Compute target generation, and explicit external-tool boundaries.
@@ -49,7 +49,7 @@ trusted wall-clock authority. It does not fall back to Node execution.
 
 ## Documentation
 
-- [Fastly package guide](https://pulsecompute.io/v1.0.0-beta.7/packages/provider-fastly/)
-- [Project configuration](https://pulsecompute.io/v1.0.0-beta.7/reference/project-config/#fastly-provider-options)
-- [Fastly capabilities guide](https://pulsecompute.io/v1.0.0-beta.7/guides/fastly-capabilities/)
-- [Environment variables](https://pulsecompute.io/v1.0.0-beta.7/reference/environment/#pulse-fastly-bin)
+- [Fastly package guide](https://pulsecompute.io/v1.0.0-beta.8/packages/provider-fastly/)
+- [Project configuration](https://pulsecompute.io/v1.0.0-beta.8/reference/project-config/#fastly-provider-options)
+- [Fastly capabilities guide](https://pulsecompute.io/v1.0.0-beta.8/guides/fastly-capabilities/)
+- [Environment variables](https://pulsecompute.io/v1.0.0-beta.8/reference/environment/#pulse-fastly-bin)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pulse-compute/provider-fastly",
-  "version": "1.0.0-beta.7",
+  "version": "1.0.0-beta.8",
   "license": "Apache-2.0",
   "engines": {
     "node": "^22.14.0 || ^24.0.0"
@@ -59,15 +59,15 @@
     }
   },
   "dependencies": {
-    "@pulse-compute/crypto": "1.0.0-beta.7",
-    "@pulse-compute/jwt": "1.0.0-beta.7",
-    "@pulse-compute/runtime": "1.0.0-beta.7",
-    "@pulse-compute/s3": "1.0.0-beta.7",
-    "@pulse-compute/wasm-build-support": "1.0.0-beta.7",
-    "@pulse-compute/wasm-contracts": "1.0.0-beta.7",
-    "@pulse-compute/wasm-guest-link": "1.0.0-beta.7",
-    "@pulse-compute/wasm-host-runtime": "1.0.0-beta.7",
-    "@pulse-compute/wasm-runtime-core-as": "1.0.0-beta.7",
+    "@pulse-compute/crypto": "1.0.0-beta.8",
+    "@pulse-compute/jwt": "1.0.0-beta.8",
+    "@pulse-compute/runtime": "1.0.0-beta.8",
+    "@pulse-compute/s3": "1.0.0-beta.8",
+    "@pulse-compute/wasm-build-support": "1.0.0-beta.8",
+    "@pulse-compute/wasm-contracts": "1.0.0-beta.8",
+    "@pulse-compute/wasm-guest-link": "1.0.0-beta.8",
+    "@pulse-compute/wasm-host-runtime": "1.0.0-beta.8",
+    "@pulse-compute/wasm-runtime-core-as": "1.0.0-beta.8",
     "esbuild": "0.28.1"
   },
   "types": "./dist/index.d.ts",
@@ -87,7 +87,7 @@
     "url": "git+https://github.com/pulse-compute/pulse.git",
     "directory": "packages/provider-fastly"
   },
-  "homepage": "https://pulsecompute.io/v1.0.0-beta.7/packages/provider-fastly/",
+  "homepage": "https://pulsecompute.io/v1.0.0-beta.8/packages/provider-fastly/",
   "bugs": {
     "url": "https://github.com/pulse-compute/pulse/issues"
   },

package/src/build/canonical-target.js

@@ -244,6 +244,7 @@ function inspectFastlyCanonicalTarget(options = {}) {
           || (options.native && options.native.guestUnits),
         nativeOptimization: options.nativeOptimization
           || (options.experimentalNativeSize === true ? 'experimental-native-size' : undefined),
+        elideJsonCacheArena: options.elideJsonCacheArena,
         emitWat: options.emitWat,
         timeoutMs: options.compileTimeoutMs
       });
@@ -320,6 +321,7 @@ function writeFastlyCanonicalTarget(options = {}) {
         || (options.native && options.native.guestUnits),
       nativeOptimization: options.nativeOptimization
         || (options.experimentalNativeSize === true ? 'experimental-native-size' : undefined),
+      elideJsonCacheArena: options.elideJsonCacheArena,
       emitWat: options.emitWat,
       compileTimeoutMs: options.compileTimeoutMs
     });

package/src/build/entities-native.js

@@ -496,6 +496,7 @@ function compileFastlyEntitiesNative(sourceArtifact, options = {}) {
       '--path', path.join(compilerFallback, 'node_modules'),
       '--path', path.dirname(jsonAsRoot)
     ];
+    require('@pulse-compute/wasm-build-support/native-optimization').appendJsonCacheArenaArgs(args, options.elideJsonCacheArena, true);
     const startedAt = Date.now();
     const result = spawnSync(asc.executable, args, {
       cwd: staging,
@@ -546,6 +547,7 @@ function compileFastlyEntitiesNative(sourceArtifact, options = {}) {
         package: 'assemblyscript',
         version: JSON.parse(fs.readFileSync(path.join(asc.packageRoot, 'package.json'), 'utf8')).version,
         jsonAs: jsonAsManifest.version,
+        elideDisabledCacheArena: options.elideJsonCacheArena === true,
         durationMs: Date.now() - startedAt
       }),
       policy: generated.policy

package/src/build/kv-native.as.ts

@@ -80,12 +80,16 @@ function __kv_number(value: f64): string {
   // Count the portable serialized value budget, including this boundary case.
   return text.endsWith('.0') ? text.substring(0, text.length - 2) : text;
 }
-// Return the same quoted form registered for redaction so validation and writes
-// do not allocate and scan a second representation of each string or key.
-function __kv_private(text: string): string {
-  __pulse_fastly_remember_secret(text);
+// Object field names are complete quoted tokens, not substring secrets: a field
+// named "id" must not corrupt "considered", "invalidAcks", or numeric metrics.
+// Values, lookup keys and generations retain raw and JSON-escaped protection.
+function __kv_private(text: string, field: bool = false): string {
   const encoded = __pulse_fastly_quote(text);
-  __pulse_fastly_remember_secret(encoded.substring(1, encoded.length - 1));
+  if (field) __pulse_fastly_remember_secret(encoded, true);
+  else {
+    __pulse_fastly_remember_secret(text);
+    __pulse_fastly_remember_secret(encoded.substring(1, encoded.length - 1));
+  }
   return encoded;
 }
 class __KvEncoder {
@@ -107,7 +111,7 @@ class __KvEncoder {
       const object = value.kind == PULSE_VALUE_OBJECT; this.add(object ? '{' : '[');
       for (let i = 0; i < value.values.length && !this.reason.length; i++) {
         if (i) this.add(',');
-        if (object) this.add(__kv_private(value.keys[i]) + ':');
+        if (object) this.add(__kv_private(value.keys[i], true) + ':');
         this.visit(value.values[i], depth + 1);
       }
       this.add(object ? '}' : ']');

package/src/build/native-application-errors.js

@@ -4,8 +4,13 @@ function enabled(plan) {
   return (plan.routing?.entries || []).some(entry => entry.kind === 'error');
 }
 
+// Fetch-only applications also drain failed groups before their terminal response.
+function settlementEnabled(plan) {
+  return enabled(plan) || (!plan.packages?.application && (plan.effects || []).some(effect => effect.kind === 'fetch'));
+}
+
 // Capture provider diagnostics before clearing them. A failed continuation is
-// drained once; only its application data error can enter the next Router lane.
+// drained once; only an admitted application error can enter the next Router lane.
 function runtimeSource(plan) {
   const jwt = ['TOKEN_REQUIRED', 'BEARER_INVALID', 'MALFORMED', 'LIMIT_EXCEEDED',
     'ALGORITHM_NOT_ALLOWED', 'KEY_INVALID', 'SIGNATURE_INVALID', 'CLOCK_INVALID',
@@ -14,6 +19,7 @@ function runtimeSource(plan) {
 let __pulse_application_schema: i32 = 0
 let __pulse_application_failed_schema: i32 = 0
 function __pulse_application_code(): string {
+  if (__pulse_fastly_last_error == PULSE_ERROR_TRANSPORT && __pulse_fetch_failed()) return __pulse_fastly_error_stage == 271 ? "PULSE_FETCH_TIMEOUT" : "PULSE_FETCH_NETWORK"
   if (__pulse_fastly_last_error == PULSE_ERROR_REQUEST_BODY)
     return __pulse_fastly_error_stage == 21 ? "PULSE_BODY_TOO_LARGE" : "PULSE_REQUEST_BODY_INVALID_UTF8"
   if (__pulse_fastly_jwt_error > 0) {
@@ -40,7 +46,7 @@ function __pulse_application_clear(): void {
   __pulse_fastly_last_error = 0; __pulse_fastly_error_stage = 0; __pulse_fastly_error_effect = -1
   __pulse_fastly_jwt_error = 0; __pulse_application_failed_schema = 0
 }
-${(plan?.effects || []).length > 0 ? settlementSource() : ''}
+${(plan?.effects || []).length > 0 ? settlementSource(plan) : ''}
 function host_router_error_take(): i32 {
   if (__pulse_fastly_last_error == 0) return 0
   const code = __pulse_application_code()
@@ -52,7 +58,7 @@ function host_router_error_take(): i32 {
   const error = host_value_object()
   host_value_object_set(error, __pulse_fastly_string_value("code"), __pulse_fastly_string_value(code))
   host_value_object_set(error, __pulse_fastly_string_value("name"), __pulse_fastly_string_value("PulseApplicationError"))
-  host_value_object_set(error, __pulse_fastly_string_value("message"), __pulse_fastly_string_value("Pulse application data validation failed."))
+  host_value_object_set(error, __pulse_fastly_string_value("message"), __pulse_fastly_string_value(code == "PULSE_FETCH_TIMEOUT" ? "Fetch header deadline exceeded." : code == "PULSE_FETCH_NETWORK" ? "Fetch transport failed." : "Pulse application data validation failed."))
   return error
 }
 `;
@@ -61,7 +67,7 @@ function host_router_error_take(): i32 {
 // The caller retains the static pending-slot guards. The shared body owns one
 // site's resolution and authenticated settlement; diagnostics carry the saved
 // failure between calls without allocating an accumulator or merging slot state.
-function settlementSource() {
+function settlementSource(plan) {
   return `
 // Returns 0 for recoverable/no failure, 1 for fatal, -1 for rejected settlement.
 function __pulse_application_settle_effect(index: i32, fatal: bool): i32 {
@@ -78,7 +84,7 @@ function __pulse_application_settle_effect(index: i32, fatal: bool): i32 {
     if (result <= 0 && __pulse_fastly_last_error == 0) __pulse_fastly_fail(PULSE_ERROR_STATE, 101, index)
   } else if (failure == 0) __pulse_fastly_fail(PULSE_ERROR_STATE, 101, index)
   if (__pulse_fastly_last_error != 0) {
-    const terminal = __pulse_application_code().length == 0
+    const terminal = ${enabled(plan) ? '__pulse_application_code().length == 0' : 'true'}
     if (failure == 0 || (!fatal && terminal)) {
       failure = __pulse_fastly_last_error; stage = __pulse_fastly_error_stage; effect = __pulse_fastly_error_effect
       jwt = __pulse_fastly_jwt_error; schema = __pulse_application_failed_schema; fatal = terminal
@@ -99,13 +105,13 @@ function __pulse_application_settle_effect(index: i32, fatal: bool): i32 {
 // Preserve the fatal-return boundary consumed by request-budget instrumentation.
 function driverLoop(plan) {
   return `  while (runStatus == 1) {
-    let fatal = __pulse_fastly_last_error != 0 && __pulse_application_code().length == 0
+    let fatal = __pulse_fastly_last_error != 0${enabled(plan) ? ' && __pulse_application_code().length == 0' : ''}
 ${(plan.effects || []).map((_, index) => `    if (__pulse_effect_pending_${index} != 0) {
       const settled = __pulse_application_settle_effect(${index}, fatal)
       if (settled < 0) return
       fatal = settled != 0
     }`).join('\n')}
-    if (fatal) return
+    ${enabled(plan) ? 'if (fatal) return' : 'if (fatal) { __pulse_fastly_jwt_send_error(); return }'}
     runStatus = pulse_resume()
   }`;
 }
@@ -137,4 +143,4 @@ function instrument(source) {
   return source;
 }
 
-module.exports = Object.freeze({ enabled, runtimeSource, driverLoop, instrument });
+module.exports = Object.freeze({ enabled, settlementEnabled, runtimeSource, driverLoop, instrument });

package/src/build/native-fetch-deadlines.as.ts

@@ -0,0 +1,161 @@
+// Per-invocation, per-admission header deadlines. A reused effect site gets a new
+// clock sample; waiting on an earlier group member cannot replenish this budget.
+@external('fastly_async_io', 'select')
+declare function __pulse_fetch_select(handles: usize, count: i32, timeout: i32, done: usize): i32
+@external('fastly_http_req', 'pending_req_poll_v2')
+declare function __pulse_fetch_poll(handle: i32, detail: usize, done: usize, response: usize, body: usize): i32
+@external('fastly_http_resp', 'close')
+declare function __pulse_fetch_close_response(handle: i32): i32
+const __pulse_fetch_timeout = new StaticArray<f64>(PULSE_FASTLY_EFFECT_COUNT)
+const __pulse_fetch_started = new StaticArray<i64>(PULSE_FASTLY_EFFECT_COUNT)
+const __pulse_fetch_completed = new StaticArray<bool>(PULSE_FASTLY_EFFECT_COUNT)
+// Zero = headers, positive = Fastly status, -1 = timeout, -2 = protocol/clock.
+const __pulse_fetch_outcome = new StaticArray<i32>(PULSE_FASTLY_EFFECT_COUNT)
+const __pulse_fetch_retired = new Array<i32>()
+let __pulse_fetch_last_clock: i64 = -1
+let __pulse_fetch_retired_total: i32 = 0
+export function pulse_fastly_fetch_retired(): i32 { return __pulse_fetch_retired_total }
+export function pulse_fastly_fetch_unreaped(): i32 { return __pulse_fetch_retired.length }
+function __pulse_fetch_clock(index: i32): i64 {
+  const out = new StaticArray<i64>(1)
+  if (wasi_snapshot_preview1_clock_time_get(1, 1, changetype<usize>(out)) != 0
+    || out[0] < 0 || out[0] < __pulse_fetch_last_clock) {
+    __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 272, index); return -1
+  }
+  __pulse_fetch_last_clock = out[0]; return out[0]
+}
+function __pulse_fetch_begin_deadline(index: i32, init: __PulseFastlyValue): void {
+  __pulse_fetch_timeout[index] = 0; __pulse_fetch_completed[index] = false; __pulse_fetch_outcome[index] = 0
+  const field = __pulse_fastly_find(init, 'timeoutMs')
+  if (field < 0) return
+  const value = __pulse_fastly_value(unchecked(init.values[field]))
+  if (value.kind == PULSE_VALUE_UNDEFINED) return
+  const ms = value.number
+  if (value.kind != PULSE_VALUE_NUMBER || ms <= 0 || ms > 9007199254740991 || Math.floor(ms) != ms) {
+    __pulse_fastly_fail(PULSE_ERROR_VALUE, 270, index); return
+  }
+  __pulse_fetch_timeout[index] = ms
+  __pulse_fetch_started[index] = __pulse_fetch_clock(index)
+}
+function __pulse_fetch_remaining(index: i32, now: i64): f64 {
+  if (__pulse_fetch_timeout[index] == 0) return 2147483647.0
+  // Subtract elapsed nanoseconds before converting. Do not overflow by adding
+  // a safe-integer millisecond option to an i64 nanosecond clock.
+  return __pulse_fetch_timeout[index] - f64(now - __pulse_fetch_started[index]) / 1000000.0
+}
+function __pulse_fetch_before_send(index: i32): bool {
+  if (__pulse_fastly_effect_kind(index) != 1 || __pulse_fetch_timeout[index] == 0) return true
+  const now = __pulse_fetch_clock(index)
+  if (now < 0) return false
+  if (__pulse_fetch_remaining(index, now) > 0) return true
+  __pulse_fastly_fail(PULSE_ERROR_TRANSPORT, 271, index); return false
+}
+function __pulse_fetch_active(index: i32): bool {
+  return __pulse_fastly_effect_kind(index) == 1 && __pulse_fastly_pending_mode[index] == PULSE_FASTLY_PENDING_ASYNC
+}
+function __pulse_fetch_has_deadlines(): bool {
+  for (let i = 0; i < PULSE_FASTLY_EFFECT_COUNT; i++)
+    if (__pulse_fetch_active(i) && __pulse_fetch_timeout[i] > 0) return true
+  return false
+}
+function __pulse_fetch_complete(index: i32, outcome: i32, result: i32 = 0): void {
+  __pulse_fastly_pending_mode[index] = PULSE_FASTLY_PENDING_READY
+  __pulse_fastly_pending[index] = 0; __pulse_fastly_ready[index] = result
+  __pulse_fetch_completed[index] = true; __pulse_fetch_outcome[index] = outcome
+}
+function __pulse_fetch_retire(index: i32, outcome: i32): void {
+  // The Fastly ABI has no pending-request cancellation hostcall. Retain explicit
+  // ownership until invocation cleanup; never wait, retry, or claim rollback.
+  __pulse_fetch_retired.push(__pulse_fastly_pending[index]); __pulse_fetch_retired_total++
+  __pulse_fetch_complete(index, outcome)
+}
+function __pulse_fetch_retire_all(): void {
+  for (let i = 0; i < PULSE_FASTLY_EFFECT_COUNT; i++) if (__pulse_fetch_active(i)) __pulse_fetch_retire(i, -2)
+}
+function __pulse_fetch_reap(): void {
+  const detail = new StaticArray<i32>(4), done = new StaticArray<i32>(1)
+  const response = new StaticArray<i32>(1), body = new StaticArray<i32>(1)
+  for (let i = __pulse_fetch_retired.length - 1; i >= 0; i--) {
+    done[0] = 0
+    const status = __pulse_fetch_poll(__pulse_fetch_retired[i], changetype<usize>(detail), changetype<usize>(done), changetype<usize>(response), changetype<usize>(body))
+    if (status == 0 && done[0] == 0) continue
+    if (status == 0 && done[0] == 1) { __pulse_fetch_close_response(response[0]); __pulse_fetch_close_body(body[0]) }
+    __pulse_fetch_retired[i] = __pulse_fetch_retired[__pulse_fetch_retired.length - 1]; __pulse_fetch_retired.pop()
+  }
+  // Unready handles remain platform-owned until host teardown. No guest task
+  // survives _start and no response/body is exposed for an expired operation.
+}
+// Request-budget instrumentation replaces these hooks when maxDurationMs exists.
+function __pulse_fetch_request_check(index: i32): bool { return true }
+function __pulse_fetch_request_remaining(): i32 { return 2147483647 }
+function __pulse_fetch_take(index: i32): i32 {
+  const outcome = __pulse_fetch_outcome[index], result = __pulse_fastly_ready[index]
+  __pulse_fetch_completed[index] = false; __pulse_fastly_pending_mode[index] = PULSE_FASTLY_PENDING_NONE
+  __pulse_fastly_ready[index] = 0
+  if (outcome == -1) __pulse_fastly_fail(PULSE_ERROR_TRANSPORT, 271, index)
+  else if (outcome == -2) __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 272, index)
+  else if (outcome != 0) __pulse_fetch_fail(outcome, 81, index)
+  return outcome == 0 ? result : 0
+}
+function __pulse_fetch_wait(index: i32): i32 {
+  const handles = new StaticArray<i32>(PULSE_FASTLY_EFFECT_COUNT), selected = new StaticArray<i32>(1)
+  const detail = new StaticArray<i32>(4), done = new StaticArray<i32>(1)
+  const response = new StaticArray<i32>(1), body = new StaticArray<i32>(1)
+  while (!__pulse_fetch_completed[index]) {
+    if (!__pulse_fetch_request_check(index)) { __pulse_fetch_retire_all(); return 0 }
+    let now = __pulse_fetch_clock(index)
+    if (now < 0) { __pulse_fetch_retire_all(); return 0 }
+    let count = 0, remaining = 2147483647.0
+    // Observe all dispatched fetches, not just the first static slot. Otherwise
+    // a slow earlier sibling could turn timely later headers into a false timeout.
+    for (let i = 0; i < PULSE_FASTLY_EFFECT_COUNT; i++) {
+      if (!__pulse_fetch_active(i)) continue
+      if (__pulse_fetch_remaining(i, now) <= 0) { __pulse_fetch_retire(i, -1); continue }
+      done[0] = 0
+      const status = __pulse_fetch_poll(__pulse_fastly_pending[i], changetype<usize>(detail), changetype<usize>(done), changetype<usize>(response), changetype<usize>(body))
+      now = __pulse_fetch_clock(i)
+      if (status != 0) {
+        __pulse_fetch_complete(i, now < 0 ? -2 : __pulse_fetch_remaining(i, now) <= 0 ? -1 : status)
+        if (now < 0) { __pulse_fetch_retire_all(); return 0 }
+        continue
+      }
+      if (done[0] != 0 && done[0] != 1) {
+        __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 272, i); __pulse_fetch_retire_all(); return 0
+      }
+      if (now < 0 || __pulse_fetch_remaining(i, now) <= 0) {
+        if (done[0] == 1) {
+          __pulse_fetch_close_response(response[0]); __pulse_fetch_close_body(body[0]); __pulse_fetch_complete(i, now < 0 ? -2 : -1)
+        } else __pulse_fetch_retire(i, now < 0 ? -2 : -1)
+        if (now < 0) { __pulse_fetch_retire_all(); return 0 }
+        continue
+      }
+      if (done[0] == 1) {
+        const value = new __PulseFastlyValue(); value.kind = PULSE_VALUE_FETCH
+        value.responseHandle = response[0]; value.bodyHandle = body[0]
+        __pulse_fetch_complete(i, 0, __pulse_fastly_put(value)); continue
+      }
+    }
+    if (__pulse_fetch_completed[index]) break
+    if (!__pulse_fetch_request_check(index)) { __pulse_fetch_retire_all(); return 0 }
+    now = __pulse_fetch_clock(index)
+    if (now < 0) { __pulse_fetch_retire_all(); return 0 }
+    for (let i = 0; i < PULSE_FASTLY_EFFECT_COUNT; i++) {
+      if (!__pulse_fetch_active(i)) continue
+      const budget = __pulse_fetch_remaining(i, now)
+      if (budget <= 0) { __pulse_fetch_retire(i, -1); continue }
+      handles[count++] = __pulse_fastly_pending[i]; remaining = Math.min(remaining, budget)
+    }
+    if (__pulse_fetch_completed[index]) break
+    remaining = Math.min(remaining, f64(__pulse_fetch_request_remaining()))
+    if (count == 0 || remaining <= 0) {
+      __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 272, index); __pulse_fetch_retire_all(); return 0
+    }
+    selected[0] = -2
+    const status = __pulse_fetch_select(changetype<usize>(handles), count, i32(Math.ceil(remaining)), changetype<usize>(selected))
+    const after = __pulse_fetch_clock(index)
+    if (status != 0 || selected[0] < -1 || selected[0] >= count || after < 0 || (selected[0] == -1 && after <= now)) {
+      __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 272, index); __pulse_fetch_retire_all(); return 0
+    }
+  }
+  return __pulse_fetch_take(index)
+}

package/src/build/native-fetch-deadlines.js

@@ -0,0 +1,27 @@
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+function enabled(plan) { return (plan.effects || []).some(effect => effect.kind === 'fetch'); }
+function runtimeSource(plan) {
+  if (!enabled(plan)) return `function __pulse_fetch_has_deadlines(): bool { return false }
+function __pulse_fetch_request_check(index: i32): bool { return true }
+function __pulse_fetch_request_remaining(): i32 { return 2147483647 }`;
+  return fs.readFileSync(path.join(__dirname,'native-fetch-deadlines.as.ts'),'utf8');
+}
+function instrument(input, plan) {
+  if (!enabled(plan)) return input;
+  let source = input;
+  const replace = (before,after) => {
+    if (!source.includes(before)) throw new Error('Fastly fetch deadline boundary drift: ' + before.slice(0,80));
+    source = source.replace(before,after);
+  };
+  replace('const init = initIndex >= 0 ? __pulse_fastly_value(unchecked(payload.values[initIndex])) : new __PulseFastlyValue(); let method',
+    'const init = initIndex >= 0 ? __pulse_fastly_value(unchecked(payload.values[initIndex])) : new __PulseFastlyValue(); __pulse_fetch_begin_deadline(effectIndex, init); if (__pulse_fastly_last_error != 0) return; let method');
+  replace('const backendBytes = __pulse_fastly_utf8(backend); const pendingOut',
+    'if (!__pulse_fetch_before_send(effectIndex)) { __pulse_fetch_close_request(requestHandle); __pulse_fetch_close_body(bodyHandle); return; } const backendBytes = __pulse_fastly_utf8(backend); const pendingOut');
+  replace('function __pulse_fastly_wait_fetch(effectIndex: i32): i32 {',
+    'function __pulse_fastly_wait_fetch(effectIndex: i32): i32 { if (__pulse_fastly_effect_kind(effectIndex) == 1 && (__pulse_fetch_completed[effectIndex] || __pulse_fetch_has_deadlines())) return __pulse_fetch_wait(effectIndex);');
+  replace('function __pulse_invocation_close(): void {', 'function __pulse_invocation_close(): void { __pulse_fetch_reap();');
+  return source;
+}
+module.exports = {runtimeSource,instrument};

package/src/build/native-fetch-errors.js

@@ -0,0 +1,40 @@
+'use strict';
+
+function runtimeSource() {
+  return `
+@external("fastly_http_req", "close")
+declare function __pulse_fetch_close_request(handle: i32): i32
+@external("fastly_http_body", "close")
+declare function __pulse_fetch_close_body(handle: i32): i32
+function __pulse_fetch_fail(status: i32, stage: i32, effect: i32): void {
+  // Fastly ERROR and HTTP parse/user/incomplete/size/status errors represent
+  // failed exchanges. Invalid arguments, handles and unsupported ABI stay fatal.
+  const network = __pulse_fastly_effect_kind(effect) != 1 || status == 1 || status == 7 || status == 8 || status == 9 || status == 11 || status == 12;
+  __pulse_fastly_fail(network ? PULSE_ERROR_TRANSPORT : PULSE_ERROR_HOSTCALL, stage, effect);
+}
+function __pulse_fetch_failed(): bool {
+  return (__pulse_fastly_last_error == PULSE_ERROR_TRANSPORT || __pulse_fastly_last_error == PULSE_ERROR_HOSTCALL || __pulse_fastly_last_error == PULSE_ERROR_VALUE)
+    && (__pulse_fastly_error_stage == 77 || __pulse_fastly_error_stage == 81 || (__pulse_fastly_error_stage >= 270 && __pulse_fastly_error_stage <= 272))
+    && __pulse_fastly_effect_kind(__pulse_fastly_error_effect) == 1;
+}
+function __pulse_fetch_send_error(): bool {
+  if (!__pulse_fetch_failed()) return false;
+  const output = new __PulseFastlyValue(); output.kind = PULSE_VALUE_RESPONSE;
+  const network = __pulse_fastly_last_error == PULSE_ERROR_TRANSPORT;
+  output.status = __pulse_fastly_error_stage == 270 ? 400 : __pulse_fastly_error_stage == 271 ? 504 : network ? 502 : 500;
+  output.text = __pulse_fastly_error_stage == 270 ? "Invalid fetch timeoutMs" : __pulse_fastly_error_stage == 271 ? "Gateway Timeout" : network ? "Bad Gateway" : "Internal Server Error";
+  output.headers.push(new __PulseFastlyHeader("content-type", "text/plain; charset=utf-8"));
+  __pulse_fastly_send_result(__pulse_fastly_put(output));
+  return true;
+}
+`;
+}
+function instrument(source) {
+  // Keep the fatal marker for the deadline owner, which runs after this pass.
+  source = source.replace('if (fatal) return',
+    'if (fatal && __pulse_fetch_failed()) { __pulse_fastly_jwt_send_error(); return; }\n    if (fatal) return');
+  const marker = 'function __pulse_fastly_jwt_send_error(): void {';
+  if (!source.includes(marker)) throw new Error('Fastly fetch error boundary drift.');
+  return source.replace(marker, marker + ' if (__pulse_fetch_send_error()) return;');
+}
+module.exports = {runtimeSource, instrument};

package/src/build/native-header-lookup.js

@@ -0,0 +1,54 @@
+'use strict';
+
+function runtimeSource() {
+  return `
+@external("fastly_http_resp", "header_values_get")
+declare function __pulse_response_header_values(handle: i32, name: usize, length: i32, buffer: usize, size: i32, cursor: i32, end: usize, written: usize): i32
+function __pulse_header_lookup_failed(): bool {
+  return __pulse_fastly_last_error == PULSE_ERROR_HOSTCALL && (__pulse_fastly_error_stage == 22 || __pulse_fastly_error_stage == 23);
+}
+function __pulse_header_lookup(handle: i32, name: string, response: bool): string | null {
+  const key = __pulse_fastly_utf8(name), buffer = new Uint8Array(PULSE_FASTLY_BUFFER_BYTES);
+  const end = new StaticArray<i64>(1), written = new StaticArray<i32>(1);
+  written[0] = -1;
+  // The single-value getter reports INVALID_ARGUMENT for absence on Viceroy.
+  // The list ABI distinguishes no values (zero bytes) from an empty value (NUL).
+  const status = response
+    ? __pulse_response_header_values(handle, changetype<usize>(key), key.byteLength, buffer.dataStart, buffer.length, 0, changetype<usize>(end), changetype<usize>(written))
+    : __pulse_request_header_values(handle, changetype<usize>(key), key.byteLength, buffer.dataStart, buffer.length, 0, changetype<usize>(end), changetype<usize>(written));
+  const count = written[0], next = end[0];
+  if (status == FASTLY_STATUS_OK && count == 0 && (next == -1 || next == 0)) return null;
+  if (status != FASTLY_STATUS_OK || count <= 0 || count > buffer.length
+    || (next != -1 && (next <= 0 || next > 4294967295)) || buffer[count - 1] != 0) {
+    __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, response ? 23 : 22, -1); return null;
+  }
+  // Pulse's singular accessor returns the first value, including an empty one.
+  for (let i = 0; i < count; i++) {
+    if (buffer[i] == 0) return String.UTF8.decodeUnsafe(buffer.dataStart, i, false);
+  }
+  __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, response ? 23 : 22, -1); return null;
+}
+function __pulse_header_send_error(): bool {
+  if (!__pulse_header_lookup_failed()) return false;
+  const output = new __PulseFastlyValue(); output.kind = PULSE_VALUE_RESPONSE;
+  output.status = 500; output.text = "Internal Server Error";
+  output.headers.push(new __PulseFastlyHeader("content-type", "text/plain; charset=utf-8"));
+  // Keep the original hostcall stage available to diagnostics.
+  __pulse_fastly_send_result(__pulse_fastly_put(output));
+  return true;
+}
+`;
+}
+function instrument(source) {
+  source = source.replace(/function (host_\w+)\(([^)]*)\): (i32|void) \{/g,
+    (declaration, name, _args, result) => name === 'host_router_error_take' ? declaration
+      : `${declaration} if (__pulse_header_lookup_failed()) return${result === 'void' ? '' : ' 0'};`);
+  // Header reads performed while settling an effect have a separate fatal exit.
+  // Retain its marker so request-budget instrumentation still owns timeout priority.
+  source = source.replace('if (fatal) return',
+    'if (fatal && __pulse_header_lookup_failed()) { __pulse_fastly_jwt_send_error(); return; }\n    if (fatal) return');
+  const marker = 'function __pulse_fastly_jwt_send_error(): void {';
+  if (!source.includes(marker)) throw new Error('Fastly header-lookup error boundary drift.');
+  return source.replace(marker, marker + ' if (__pulse_header_send_error()) return;');
+}
+module.exports = {runtimeSource, instrument};

package/src/build/native-http-effects.js

@@ -880,6 +880,7 @@ function compileFastlyNativeHttpEffectsPlan(plan, options = {}) {
         '--path', jsonAs.dependencyRoot
       );
     }
+    require('@pulse-compute/wasm-build-support/native-optimization').appendJsonCacheArenaArgs(args, options.elideJsonCacheArena, schemaCodecsActive);
     const startedAt = Date.now();
     const result = spawnSync(asc.executable, args, {
       cwd: stagingDir,
@@ -910,7 +911,7 @@ function compileFastlyNativeHttpEffectsPlan(plan, options = {}) {
       compilerVersion: FASTLY_NATIVE_HTTP_EFFECTS_COMPILER_VERSION,
       assemblyScript: Object.freeze({ package: 'assemblyscript', version: require(path.join(asc.packageRoot, 'package.json')).version }),
       jsonAs: jsonAs
-        ? Object.freeze({ package: 'json-as', version: jsonAs.version, transform: true, strict: true, mode: 'NAIVE', fastPath: false })
+        ? Object.freeze({ package: 'json-as', version: jsonAs.version, transform: true, strict: true, mode: 'NAIVE', fastPath: false, elideDisabledCacheArena: options.elideJsonCacheArena === true })
         : undefined,
       wasm: Object.freeze({ bytes: inspection.bytes, sha256: inspection.sha256, magic: inspection.magic }),
       wat: Object.freeze({ bytes: Buffer.byteLength(wat), sha256: sha256(wat) }),

package/src/build/native-platform-capabilities.js

@@ -126,6 +126,7 @@ const FASTLY_NATIVE_PLATFORM_CAPABILITIES_IMPORTS = Object.freeze([
   Object.freeze(['fastly_http_resp', 'new']),
   Object.freeze(['fastly_http_resp', 'header_append']),
   Object.freeze(['fastly_http_resp', 'header_value_get']),
+  Object.freeze(['fastly_http_resp', 'header_values_get']),
   Object.freeze(['fastly_http_resp', 'status_get']),
   Object.freeze(['fastly_http_resp', 'status_set']),
   Object.freeze(['fastly_http_resp', 'send_downstream']),
@@ -988,6 +989,7 @@ function requiredImportsForPlan(plan, bindings) {
       'fastly_http_req:header_insert', 'fastly_http_req:send_async', 'fastly_http_req:pending_req_wait'
     ]) keys.add(key);
   }
+  if (kinds.has('fetch')) for (const key of ['wasi_snapshot_preview1:clock_time_get', 'fastly_async_io:select', 'fastly_http_req:pending_req_poll_v2', 'fastly_http_resp:close', 'fastly_http_body:close']) keys.add(key);
   if (planRequiresFetchBodyRead(plan)) keys.add('fastly_http_body:read');
   if (kinds.has('config.get')) for (const key of ['fastly_config_store:open', 'fastly_config_store:get']) keys.add(key);
   const gripAuthenticationRequired = kinds.has('grip.broadcast')
@@ -1651,6 +1653,7 @@ const PULSE_FASTLY_PENDING_READY: i32 = 2
 @lazy const __pulse_fastly_ready = new StaticArray<i32>(PULSE_FASTLY_EFFECT_COUNT)
 @lazy const __pulse_fastly_grip_channels = new Array<string>()
 @lazy const __pulse_fastly_redactions = new Array<string>()
+@lazy const __pulse_fastly_field_redactions = new Array<string>()
 let __pulse_fastly_request_handle: i32 = 0
 let __pulse_fastly_request_body_handle: i32 = 0
 let __pulse_fastly_request_method: string = ""
@@ -1695,9 +1698,31 @@ function __pulse_fastly_string_value(value: string): i32 {
 function __pulse_fastly_find(object: __PulseFastlyValue, key: string): i32 { for (let i = 0; i < object.keys.length; i += 1) if (unchecked(object.keys[i]) == key) return i; return -1 }
 function __pulse_fastly_number_string(value: f64): string { if (value >= -9007199254740991.0 && value <= 9007199254740991.0 && Math.floor(value) == value) return i64(value).toString(); return value.toString() }
 function __pulse_fastly_string(handle: i32): string { const value = __pulse_fastly_value(handle); if (value.kind == PULSE_VALUE_STRING) return value.text; if (value.kind == PULSE_VALUE_NUMBER) return __pulse_fastly_number_string(value.number); if (value.kind == PULSE_VALUE_BOOLEAN) return value.boolean != 0 ? "true" : "false"; if (value.kind == PULSE_VALUE_NULL) return "null"; if (value.kind == PULSE_VALUE_UNDEFINED) return "undefined"; return __pulse_fastly_json(handle, 0) }
-function __pulse_fastly_remember_secret(value: string): string { if (value.length == 0) return value; for (let i = 0; i < __pulse_fastly_redactions.length; i += 1) if (unchecked(__pulse_fastly_redactions[i]) == value) return value; __pulse_fastly_redactions.push(value); return value }
+function __pulse_fastly_remember_secret(value: string, field: bool = false): string { if (value.length == 0) return value; const values = field ? __pulse_fastly_field_redactions : __pulse_fastly_redactions; for (let i = 0; i < values.length; i += 1) if (unchecked(values[i]) == value) return value; values.push(value); return value }
 function __pulse_fastly_replace_secret(input: string, secret: string): string { if (secret.length == 0) return input; let source = input; let output = ""; while (true) { const index = source.indexOf(secret); if (index < 0) return output + source; output += source.substring(0, index) + "<redacted>"; source = source.substring(index + secret.length) } }
-function __pulse_fastly_redact(input: string): string { let output = input; for (let i = 0; i < __pulse_fastly_redactions.length; i += 1) output = __pulse_fastly_replace_secret(output, unchecked(__pulse_fastly_redactions[i])); return output }
+// Walk complete JSON string tokens, including escaped quotes. Substring matching
+// a quoted field would still corrupt an unrelated token such as "prefix\\\"id".
+function __pulse_fastly_redact_fields(input: string): string {
+  if (__pulse_fastly_field_redactions.length == 0) return input;
+  let output = "", start = 0, cursor = 0;
+  while (cursor < input.length) {
+    if (input.charCodeAt(cursor) != 34) { cursor += 1; continue; }
+    const begin = cursor++;
+    while (cursor < input.length) {
+      const code = input.charCodeAt(cursor++);
+      if (code == 92 && cursor < input.length) cursor += 1;
+      else if (code == 34) break;
+    }
+    const token = input.substring(begin, cursor);
+    for (let i = 0; i < __pulse_fastly_field_redactions.length; i += 1) {
+      if (token != unchecked(__pulse_fastly_field_redactions[i])) continue;
+      output += input.substring(start, begin) + __pulse_fastly_quote("<redacted>");
+      start = cursor; break;
+    }
+  }
+  return output + input.substring(start);
+}
+function __pulse_fastly_redact(input: string): string { let output = __pulse_fastly_redact_fields(input); for (let i = 0; i < __pulse_fastly_redactions.length; i += 1) output = __pulse_fastly_replace_secret(output, unchecked(__pulse_fastly_redactions[i])); return output }
 function host_log(level: i32, messageHandle: i32): void { let endpoint = __pulse_fastly_log_handle; if (endpoint == -2) return; if (endpoint == -1) { const name = __pulse_fastly_utf8("stdout"); const out = __pulse_fastly_out_i32(); if (fastly_log_endpoint_get(changetype<usize>(name), name.byteLength, changetype<usize>(out)) != FASTLY_STATUS_OK) { __pulse_fastly_log_handle = -2; return } endpoint = __pulse_fastly_out_value(out); __pulse_fastly_log_handle = endpoint } let label = "unknown"; if (level == 1) label = "error"; else if (level == 2) label = "warn"; else if (level == 3) label = "info"; else if (level == 4) label = "debug"; const bytes = __pulse_fastly_utf8("[pulse:" + label + "] " + __pulse_fastly_redact(__pulse_fastly_string(messageHandle)) + "\n"); const written = __pulse_fastly_out_i32(); fastly_log_write(endpoint, changetype<usize>(bytes), bytes.byteLength, changetype<usize>(written)) }
 function __pulse_fastly_number(handle: i32): f64 { const value = __pulse_fastly_value(handle); if (value.kind == PULSE_VALUE_NUMBER) return value.number; if (value.kind == PULSE_VALUE_BOOLEAN) return value.boolean != 0 ? 1.0 : 0.0; if (value.kind == PULSE_VALUE_STRING) return F64.parseFloat(value.text); return 0.0 }
 function __pulse_fastly_hex(value: i32): string { return String.fromCharCode(value < 10 ? 48 + value : 87 + value) }
@@ -1768,8 +1793,8 @@ function __pulse_fastly_read_body(handle: i32, effectIndex: i32, requestText: bo
   if (requestText && !__pulse_request_utf8_valid(bytes)) { __pulse_fastly_fail(PULSE_ERROR_REQUEST_BODY, 24, effectIndex); return "" }
   return __pulse_fastly_decode(bytes, total);
 }
-function __pulse_fastly_request_header_text(name: string): string { const nameBytes = __pulse_fastly_utf8(name); const buffer = new Uint8Array(PULSE_FASTLY_BUFFER_BYTES); const written = __pulse_fastly_out_i32(); const status = fastly_http_req_header_value_get(__pulse_fastly_request_handle, changetype<usize>(nameBytes), nameBytes.byteLength, buffer.dataStart, PULSE_FASTLY_BUFFER_BYTES, changetype<usize>(written)); if (status == FASTLY_STATUS_NONE) return ""; if (status != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 22, -1); return "" } return __pulse_fastly_decode(buffer, __pulse_fastly_out_value(written)) }
-function __pulse_fastly_fetch_header_text(responseHandle: i32, name: string): string { const nameBytes = __pulse_fastly_utf8(name); const buffer = new Uint8Array(PULSE_FASTLY_BUFFER_BYTES); const written = __pulse_fastly_out_i32(); const status = fastly_http_resp_header_value_get(responseHandle, changetype<usize>(nameBytes), nameBytes.byteLength, buffer.dataStart, PULSE_FASTLY_BUFFER_BYTES, changetype<usize>(written)); if (status == FASTLY_STATUS_NONE) return ""; if (status != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 23, -1); return "" } return __pulse_fastly_decode(buffer, __pulse_fastly_out_value(written)) }
+function __pulse_fastly_request_header_text(name: string): string { const value = __pulse_header_lookup(__pulse_fastly_request_handle, name, false); return value === null ? "" : value }
+function __pulse_fastly_fetch_header_text(responseHandle: i32, name: string): string { const value = __pulse_header_lookup(responseHandle, name, true); return value === null ? "" : value }
 function __pulse_fastly_fetch_body(value: __PulseFastlyValue): string { if (value.bodyLoaded == 0) { value.text = __pulse_fastly_read_body(value.bodyHandle, -1); value.bodyLoaded = 1 } return value.text }
 
 function __pulse_fastly_scalar(kind: i32, boolean: i32, slot: i32): i32 {
@@ -1819,7 +1844,7 @@ function host_router_match(path: i32, pattern: i32): i32 { return host_value_boo
 function host_router_param(path: i32, pattern: i32, name: i32): i32 { const value = __pulse_router_param_text(__pulse_fastly_string(path), __pulse_fastly_string(pattern), __pulse_fastly_string(name)); return value === null ? host_value_undefined() : __pulse_fastly_string_value(value) }
 function host_request_path(): i32 { return __pulse_fastly_string_value(__pulse_fastly_request_path) }
 function host_request_headers(): i32 { return __pulse_request_headers_read() }
-function host_request_header(name: i32): i32 { const value = __pulse_fastly_request_header_text(__pulse_fastly_string(name)); return value.length == 0 ? host_value_undefined() : __pulse_fastly_string_value(value) }
+function host_request_header(name: i32): i32 { const value = __pulse_header_lookup(__pulse_fastly_request_handle, __pulse_fastly_string(name), false); return value === null ? host_value_undefined() : __pulse_fastly_string_value(value) }
 function host_request_text(): i32 { if (__pulse_request_body_failure != 0) { __pulse_fastly_fail(PULSE_ERROR_REQUEST_BODY, __pulse_request_body_failure, -1); return 0 } if (__pulse_fastly_request_body_loaded == 0) { __pulse_fastly_request_body = __pulse_fastly_read_body(__pulse_fastly_request_body_handle, -1, true); __pulse_fastly_request_body_loaded = 1; if (__pulse_fastly_last_error == PULSE_ERROR_REQUEST_BODY) __pulse_request_body_failure = __pulse_fastly_error_stage } if (__pulse_fastly_last_error != 0) return 0; return __pulse_fastly_string_value(__pulse_fastly_request_body) }
 function host_request_json(schema: i32): i32 { const parsed = ${hasJsonAdmission(plan) ? '__pulse_fastly_schema_parse_json(__pulse_fastly_string(host_request_text()), schema)' : '__pulse_fastly_parse_json(__pulse_fastly_string(host_request_text()))'}; if (parsed <= 0) return 0; const schemaValue = __pulse_fastly_value(schema); return schemaValue.kind == PULSE_VALUE_STRING ? __pulse_fastly_schema_apply(schemaValue.text, parsed, false) : parsed }
 function __pulse_fastly_headers_from_options(options: __PulseFastlyValue, output: __PulseFastlyValue): void { const index = __pulse_fastly_find(options, "headers"); if (index < 0) return; const headers = __pulse_fastly_value(unchecked(options.values[index])); if (headers.kind == PULSE_VALUE_OBJECT) { for (let i = 0; i < headers.keys.length; i += 1) { const name = unchecked(headers.keys[i]); const value = __pulse_fastly_value(unchecked(headers.values[i])); if (value.kind == PULSE_VALUE_ARRAY) { for (let j = 0; j < value.values.length; j += 1) output.headers.push(new __PulseFastlyHeader(name, __pulse_fastly_string(unchecked(value.values[j])))) } else output.headers.push(new __PulseFastlyHeader(name, __pulse_fastly_string(unchecked(headers.values[i])))) } return } if (headers.kind == PULSE_VALUE_ARRAY) { for (let i = 0; i < headers.values.length; i += 1) { const pair = __pulse_fastly_value(unchecked(headers.values[i])); if (pair.kind != PULSE_VALUE_ARRAY || pair.values.length < 2) continue; output.headers.push(new __PulseFastlyHeader(__pulse_fastly_string(unchecked(pair.values[0])), __pulse_fastly_string(unchecked(pair.values[1])))) } } }
@@ -1858,7 +1883,7 @@ function host_grip_handoff(optionsHandle: i32): i32 { const options = __pulse_fa
 function host_kv_namespace(name: i32): i32 { return name }
 function host_fetch_text(responseHandle: i32): i32 { const response = __pulse_fastly_value(responseHandle); if (response.kind != PULSE_VALUE_FETCH) { __pulse_fastly_fail(PULSE_ERROR_VALUE, 42, -1); return 0 } return __pulse_fastly_string_value(__pulse_fastly_fetch_body(response)) }
 function host_fetch_json(responseHandle: i32, schemaHandle: i32): i32 { const response = __pulse_fastly_value(responseHandle); if (response.kind != PULSE_VALUE_FETCH) { __pulse_fastly_fail(PULSE_ERROR_VALUE, 43, -1); return 0 } if (__PULSE_SCHEMA_REQUIRE_JSON) { const contentType = __pulse_fastly_fetch_header_text(response.responseHandle, "content-type"); if (contentType.length == 0 || contentType.toLowerCase().indexOf("json") < 0) { __pulse_fastly_fail(PULSE_ERROR_SCHEMA, 44, -1); return 0 } } const parsed = ${hasJsonAdmission(plan) ? '__pulse_fastly_schema_parse_json(__pulse_fastly_fetch_body(response), schemaHandle)' : '__pulse_fastly_parse_json(__pulse_fastly_fetch_body(response))'}; if (parsed <= 0) return 0; const schema = __pulse_fastly_value(schemaHandle); return schema.kind == PULSE_VALUE_STRING ? __pulse_fastly_schema_apply(schema.text, parsed, false) : parsed }
-function host_fetch_header(responseHandle: i32, nameHandle: i32): i32 { const response = __pulse_fastly_value(responseHandle); if (response.kind != PULSE_VALUE_FETCH) { __pulse_fastly_fail(PULSE_ERROR_VALUE, 45, -1); return 0 } const value = __pulse_fastly_fetch_header_text(response.responseHandle, __pulse_fastly_string(nameHandle)); return value.length == 0 ? host_value_undefined() : __pulse_fastly_string_value(value) }
+function host_fetch_header(responseHandle: i32, nameHandle: i32): i32 { const response = __pulse_fastly_value(responseHandle); if (response.kind != PULSE_VALUE_FETCH) { __pulse_fastly_fail(PULSE_ERROR_VALUE, 45, -1); return 0 } const value = __pulse_header_lookup(response.responseHandle, __pulse_fastly_string(nameHandle), true); return value === null ? host_value_undefined() : __pulse_fastly_string_value(value) }
 function __pulse_fastly_payload_field(payload: __PulseFastlyValue, name: string): i32 { const index = __pulse_fastly_find(payload, name); return index < 0 ? host_value_undefined() : unchecked(payload.values[index]) }
 function __pulse_fastly_ready_effect(effectIndex: i32, handle: i32): void { unchecked(__pulse_fastly_ready[effectIndex] = handle); unchecked(__pulse_fastly_pending_mode[effectIndex] = PULSE_FASTLY_PENDING_READY) }
 function __pulse_fastly_open_config_store(effectIndex: i32): i32 { const nameBytes = __pulse_fastly_utf8(__pulse_fastly_config_store(effectIndex)); const out = __pulse_fastly_out_i32(); const status = fastly_config_store_open(changetype<usize>(nameBytes), nameBytes.byteLength, changetype<usize>(out)); if (status != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 110, effectIndex); return 0 } return __pulse_fastly_out_value(out) }
@@ -1880,7 +1905,7 @@ function __pulse_fastly_jwt_capture_clock(effectIndex: i32): f64 { __pulse_fastl
 function __pulse_fastly_jwt_validate_schema(effectIndex: i32, schemaId: string, claimsHandle: i32): i32 { __pulse_fastly_jwt_schema_calls += 1; __pulse_fastly_jwt_event_order += "H"; if (__pulse_fastly_jwt_case_id() == "claims-schema-failure-after-registered-claims") return 0; return __pulse_fastly_schema_apply(schemaId, claimsHandle, false) }
 function __pulse_fastly_jwt_sign_begin(effectIndex: i32, payload: __PulseFastlyValue): void { const result = pulse_jwt_fastly_sign(effectIndex, unchecked(__pulse_fastly_payloads[effectIndex])); if (result > 0 && __pulse_fastly_last_error == 0) __pulse_fastly_ready_effect(effectIndex, result) }
 function __pulse_fastly_jwt_begin(effectIndex: i32, payload: __PulseFastlyValue): void { const result = pulse_jwt_fastly_verify(effectIndex, unchecked(__pulse_fastly_payloads[effectIndex])); if (result > 0 && __pulse_fastly_last_error == 0) __pulse_fastly_ready_effect(effectIndex, result) }
-function __pulse_fastly_start_request(effectIndex: i32, url: string, method: string, headers: __PulseFastlyValue, body: string, backend: string): void { const requestOut = __pulse_fastly_out_i32(); let status = fastly_http_req_new(changetype<usize>(requestOut)); if (status != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 70, effectIndex); return } const requestHandle = __pulse_fastly_out_value(requestOut); const bodyOut = __pulse_fastly_out_i32(); status = fastly_http_body_new(changetype<usize>(bodyOut)); if (status != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 71, effectIndex); return } const bodyHandle = __pulse_fastly_out_value(bodyOut); const methodBytes = __pulse_fastly_utf8(method); status = fastly_http_req_method_set(requestHandle, changetype<usize>(methodBytes), methodBytes.byteLength); if (status != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 72, effectIndex); return } const urlBytes = __pulse_fastly_utf8(url); status = fastly_http_req_uri_set(requestHandle, changetype<usize>(urlBytes), urlBytes.byteLength); if (status != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 73, effectIndex); return } if (headers.kind == PULSE_VALUE_OBJECT) { for (let i = 0; i < headers.keys.length; i += 1) { const nameBytes = __pulse_fastly_utf8(unchecked(headers.keys[i])); const valueBytes = __pulse_fastly_utf8(__pulse_fastly_string(unchecked(headers.values[i]))); status = fastly_http_req_header_insert(requestHandle, changetype<usize>(nameBytes), nameBytes.byteLength, changetype<usize>(valueBytes), valueBytes.byteLength); if (status != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 74, effectIndex); return } } } if (body.length > 0) { status = __pulse_fastly_write_body(bodyHandle, body); if (status != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 75, effectIndex); return } } if (backend.length == 0) { __pulse_fastly_fail(PULSE_ERROR_STATE, 76, effectIndex); return } const backendBytes = __pulse_fastly_utf8(backend); const pendingOut = __pulse_fastly_out_i32(); status = fastly_http_req_send_async(requestHandle, bodyHandle, changetype<usize>(backendBytes), backendBytes.byteLength, changetype<usize>(pendingOut)); if (status != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_TRANSPORT, 77, effectIndex); return } unchecked(__pulse_fastly_pending[effectIndex] = __pulse_fastly_out_value(pendingOut)); unchecked(__pulse_fastly_pending_mode[effectIndex] = PULSE_FASTLY_PENDING_ASYNC) }
+function __pulse_fastly_start_request(effectIndex: i32, url: string, method: string, headers: __PulseFastlyValue, body: string, backend: string): void { const requestOut = __pulse_fastly_out_i32(); let status = fastly_http_req_new(changetype<usize>(requestOut)); if (status != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 70, effectIndex); return } const requestHandle = __pulse_fastly_out_value(requestOut); const bodyOut = __pulse_fastly_out_i32(); status = fastly_http_body_new(changetype<usize>(bodyOut)); if (status != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 71, effectIndex); return } const bodyHandle = __pulse_fastly_out_value(bodyOut); const methodBytes = __pulse_fastly_utf8(method); status = fastly_http_req_method_set(requestHandle, changetype<usize>(methodBytes), methodBytes.byteLength); if (status != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 72, effectIndex); return } const urlBytes = __pulse_fastly_utf8(url); status = fastly_http_req_uri_set(requestHandle, changetype<usize>(urlBytes), urlBytes.byteLength); if (status != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 73, effectIndex); return } if (headers.kind == PULSE_VALUE_OBJECT) { for (let i = 0; i < headers.keys.length; i += 1) { const nameBytes = __pulse_fastly_utf8(unchecked(headers.keys[i])); const valueBytes = __pulse_fastly_utf8(__pulse_fastly_string(unchecked(headers.values[i]))); status = fastly_http_req_header_insert(requestHandle, changetype<usize>(nameBytes), nameBytes.byteLength, changetype<usize>(valueBytes), valueBytes.byteLength); if (status != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 74, effectIndex); return } } } if (body.length > 0) { status = __pulse_fastly_write_body(bodyHandle, body); if (status != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 75, effectIndex); return } } if (backend.length == 0) { __pulse_fastly_fail(PULSE_ERROR_STATE, 76, effectIndex); return } const backendBytes = __pulse_fastly_utf8(backend); const pendingOut = __pulse_fastly_out_i32(); status = fastly_http_req_send_async(requestHandle, bodyHandle, changetype<usize>(backendBytes), backendBytes.byteLength, changetype<usize>(pendingOut)); if (status != FASTLY_STATUS_OK) { __pulse_fetch_close_request(requestHandle); __pulse_fetch_close_body(bodyHandle); __pulse_fetch_fail(status, 77, effectIndex); return } unchecked(__pulse_fastly_pending[effectIndex] = __pulse_fastly_out_value(pendingOut)); unchecked(__pulse_fastly_pending_mode[effectIndex] = PULSE_FASTLY_PENDING_ASYNC) }
 function __pulse_fastly_fetch_begin(effectIndex: i32, payload: __PulseFastlyValue): void { const urlIndex = __pulse_fastly_find(payload, "url"); if (urlIndex < 0) { __pulse_fastly_fail(PULSE_ERROR_VALUE, 48, effectIndex); return } const url = __pulse_fastly_string(unchecked(payload.values[urlIndex])); const initIndex = __pulse_fastly_find(payload, "init"); const init = initIndex >= 0 ? __pulse_fastly_value(unchecked(payload.values[initIndex])) : new __PulseFastlyValue(); let method = "GET"; let body = ""; let headers = new __PulseFastlyValue(); headers.kind = PULSE_VALUE_OBJECT; if (init.kind == PULSE_VALUE_OBJECT) { const methodIndex = __pulse_fastly_find(init, "method"); if (methodIndex >= 0) method = __pulse_fastly_string(unchecked(init.values[methodIndex])).toUpperCase(); const headersIndex = __pulse_fastly_find(init, "headers"); if (headersIndex >= 0) headers = __pulse_fastly_value(unchecked(init.values[headersIndex])); const bodyIndex = __pulse_fastly_find(init, "body"); const jsonIndex = __pulse_fastly_find(init, "json"); if (bodyIndex >= 0) { const bodyValue = unchecked(init.values[bodyIndex]); const bodyObject = __pulse_fastly_value(bodyValue); body = bodyObject.kind == PULSE_VALUE_STRING ? bodyObject.text : __pulse_fastly_json(bodyValue, 0) } else if (jsonIndex >= 0) { body = __pulse_fastly_fetch_json_body(init, unchecked(init.values[jsonIndex])); if (__pulse_fastly_last_error != 0) return; headers = __pulse_fastly_fetch_json_headers(headers) } } __pulse_fastly_start_request(effectIndex, url, method, headers, body, __pulse_fastly_backend(effectIndex)) }
 function __pulse_fastly_kv_get_begin(effectIndex: i32, payload: __PulseFastlyValue): void { const store = __pulse_fastly_open_kv_store(effectIndex); if (__pulse_fastly_last_error != 0) return; const key = __pulse_fastly_string(__pulse_fastly_payload_field(payload, "key")); const keyBytes = __pulse_fastly_utf8(key); const lookupOut = __pulse_fastly_out_i32(); const config = new StaticArray<i32>(1); const status = fastly_kv_store_lookup(store, changetype<usize>(keyBytes), keyBytes.byteLength, 0, changetype<usize>(config), changetype<usize>(lookupOut)); if (status != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 116, effectIndex); return } unchecked(__pulse_fastly_pending[effectIndex] = __pulse_fastly_out_value(lookupOut)); unchecked(__pulse_fastly_pending_mode[effectIndex] = PULSE_FASTLY_PENDING_ASYNC) }
 ${assetBeginSource}
@@ -1892,7 +1917,7 @@ function __pulse_fastly_grip_hold_begin(effectIndex: i32, payload: __PulseFastly
 ${gripSecretSource}
 function __pulse_fastly_grip_publish_begin(effectIndex: i32, payload: __PulseFastlyValue): void { const valueHandle = __pulse_fastly_payload_field(payload, "payload"); const value = __pulse_fastly_value(valueHandle); if (value.kind != PULSE_VALUE_OBJECT) { __pulse_fastly_fail(PULSE_ERROR_VALUE, 122, effectIndex); return } const headers = new __PulseFastlyValue(); headers.kind = PULSE_VALUE_OBJECT; headers.keys.push("content-type"); headers.values.push(__pulse_fastly_string_value("application/json; charset=utf-8")); headers.keys.push("accept"); headers.values.push(__pulse_fastly_string_value("application/json")); ${gripAuthorizationSource} const body = __pulse_fastly_json(valueHandle, 0); if (String.UTF8.encode(body, false).byteLength > PULSE_FASTLY_BUFFER_BYTES) { __pulse_fastly_fail(PULSE_ERROR_VALUE, 145, effectIndex); return } __pulse_fastly_start_request(effectIndex, __pulse_fastly_grip_publish_url(effectIndex), "POST", headers, body, __pulse_fastly_backend(effectIndex)) }
 ${effectDispatchSource(plan)}
-function __pulse_fastly_wait_fetch(effectIndex: i32): i32 { if (unchecked(__pulse_fastly_pending_mode[effectIndex]) != PULSE_FASTLY_PENDING_ASYNC) { __pulse_fastly_fail(PULSE_ERROR_STATE, 80, effectIndex); return 0 } const pending = unchecked(__pulse_fastly_pending[effectIndex]); const responseOut = __pulse_fastly_out_i32(); const bodyOut = __pulse_fastly_out_i32(); const status = fastly_http_req_pending_req_wait(pending, changetype<usize>(responseOut), changetype<usize>(bodyOut)); unchecked(__pulse_fastly_pending_mode[effectIndex] = PULSE_FASTLY_PENDING_NONE); unchecked(__pulse_fastly_pending[effectIndex] = 0); if (status != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_TRANSPORT, 81, effectIndex); return 0 } const value = new __PulseFastlyValue(); value.kind = PULSE_VALUE_FETCH; value.responseHandle = __pulse_fastly_out_value(responseOut); value.bodyHandle = __pulse_fastly_out_value(bodyOut); return __pulse_fastly_put(value) }
+function __pulse_fastly_wait_fetch(effectIndex: i32): i32 { if (unchecked(__pulse_fastly_pending_mode[effectIndex]) != PULSE_FASTLY_PENDING_ASYNC) { __pulse_fastly_fail(PULSE_ERROR_STATE, 80, effectIndex); return 0 } const pending = unchecked(__pulse_fastly_pending[effectIndex]); const responseOut = __pulse_fastly_out_i32(); const bodyOut = __pulse_fastly_out_i32(); const status = fastly_http_req_pending_req_wait(pending, changetype<usize>(responseOut), changetype<usize>(bodyOut)); unchecked(__pulse_fastly_pending_mode[effectIndex] = PULSE_FASTLY_PENDING_NONE); unchecked(__pulse_fastly_pending[effectIndex] = 0); if (status != FASTLY_STATUS_OK) { __pulse_fetch_fail(status, 81, effectIndex); return 0 } const value = new __PulseFastlyValue(); value.kind = PULSE_VALUE_FETCH; value.responseHandle = __pulse_fastly_out_value(responseOut); value.bodyHandle = __pulse_fastly_out_value(bodyOut); return __pulse_fastly_put(value) }
 function __pulse_fastly_wait_grip_publish(effectIndex: i32): i32 { const responseHandle = __pulse_fastly_wait_fetch(effectIndex); if (responseHandle <= 0) return 0; const response = __pulse_fastly_value(responseHandle); if (response.kind != PULSE_VALUE_FETCH) { __pulse_fastly_fail(PULSE_ERROR_VALUE, 129, effectIndex); return 0 } const statusOut = __pulse_fastly_out_i32(); const statusCall = fastly_http_resp_status_get(response.responseHandle, changetype<usize>(statusOut)); if (statusCall != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 130, effectIndex); return 0 } const originStatus = __pulse_fastly_out_value(statusOut); if (originStatus < 200 || originStatus > 299) { __pulse_fastly_fail(PULSE_ERROR_TRANSPORT, 131, effectIndex); return 0 } const outer = __pulse_fastly_value(unchecked(__pulse_fastly_payloads[effectIndex])); const publicationHandle = __pulse_fastly_payload_field(outer, "payload"); const publication = __pulse_fastly_value(publicationHandle); if (publication.kind != PULSE_VALUE_OBJECT) { __pulse_fastly_fail(PULSE_ERROR_VALUE, 132, effectIndex); return 0 } const receipt = host_value_object(); host_value_object_set(receipt, __pulse_fastly_string_value("published"), host_value_boolean(1)); for (let i = 0; i < publication.keys.length; i += 1) host_value_object_set(receipt, __pulse_fastly_string_value(unchecked(publication.keys[i])), unchecked(publication.values[i])); const options = host_value_object(); host_value_object_set(options, __pulse_fastly_string_value("status"), host_value_number(202.0)); return host_response_json(receipt, options) }
 function __pulse_fastly_wait_grip_broadcast(effectIndex: i32): i32 { const responseHandle = __pulse_fastly_wait_fetch(effectIndex); if (responseHandle <= 0) return 0; const response = __pulse_fastly_value(responseHandle); if (response.kind != PULSE_VALUE_FETCH) { __pulse_fastly_fail(PULSE_ERROR_VALUE, 142, effectIndex); return 0 } const statusOut = __pulse_fastly_out_i32(); const statusCall = fastly_http_resp_status_get(response.responseHandle, changetype<usize>(statusOut)); if (statusCall != FASTLY_STATUS_OK) { __pulse_fastly_fail(PULSE_ERROR_HOSTCALL, 143, effectIndex); return 0 } const originStatus = __pulse_fastly_out_value(statusOut); if (originStatus < 200 || originStatus > 299) { __pulse_fastly_fail(PULSE_ERROR_TRANSPORT, 144, effectIndex); return 0 } const receipt = host_value_object(); host_value_object_set(receipt, __pulse_fastly_string_value("accepted"), host_value_boolean(1)); host_value_object_set(receipt, __pulse_fastly_string_value("status"), host_value_number(f64(originStatus))); return receipt }
 function __pulse_fastly_wait_ready(effectIndex: i32): i32 { if (unchecked(__pulse_fastly_pending_mode[effectIndex]) != PULSE_FASTLY_PENDING_READY) { __pulse_fastly_fail(PULSE_ERROR_STATE, 124, effectIndex); return 0 } const value = unchecked(__pulse_fastly_ready[effectIndex]); unchecked(__pulse_fastly_pending_mode[effectIndex] = PULSE_FASTLY_PENDING_NONE); unchecked(__pulse_fastly_pending[effectIndex] = 0); unchecked(__pulse_fastly_ready[effectIndex] = 0); return value }
@@ -1949,7 +1974,7 @@ function __pulse_fastly_run_invocation(): void {
   if (__pulse_fastly_last_error != 0) { __pulse_fastly_jwt_send_error(); return }
   __pulse_fastly_request_path = __pulse_fastly_path(__pulse_fastly_request_url)
   let runStatus = pulse_start()
-${packageApplication.enabled(plan) ? packageApplication.driverLoop() : applicationErrors.enabled(plan) ? applicationErrors.driverLoop(plan) : `  while (runStatus == 1 && __pulse_fastly_last_error == 0) {
+${packageApplication.enabled(plan) ? packageApplication.driverLoop() : applicationErrors.settlementEnabled(plan) ? applicationErrors.driverLoop(plan) : `  while (runStatus == 1 && __pulse_fastly_last_error == 0) {
     for (let effectIndex = 0; effectIndex < PULSE_FASTLY_EFFECT_COUNT; effectIndex += 1) {
       if (unchecked(__pulse_fastly_pending_mode[effectIndex]) == PULSE_FASTLY_PENDING_NONE) continue
       const invocation = unchecked(__pulse_invocation_tickets[effectIndex])
@@ -2052,14 +2077,20 @@ function generateFastlyNativePlatformCapabilitiesAssemblyScript(plan, options =
     conditionalKv.kvNativeSource(plan),
     require('./native-request-body.js').runtimeSource(),
     require('./native-request-headers.js').runtimeSource(),
-    applicationErrors.enabled(plan) ? applicationErrors.runtimeSource(plan) : '',
+    require('./native-header-lookup.js').runtimeSource(),
+    require('./native-fetch-errors.js').runtimeSource(),
+    require('./native-fetch-deadlines.js').runtimeSource(plan),
+    applicationErrors.settlementEnabled(plan) ? applicationErrors.runtimeSource(plan) : '',
     effectInvocations.runtimeSource({ packageCompletion: packageApplication.enabled(plan) }),
     portableSource,
     driverSource(plan, { guestLinked: facts.guestUnits.length > 0 }),
     ''
   ].join('\n');
-  if (applicationErrors.enabled(plan)) source = applicationErrors.instrument(source);
+  if (applicationErrors.settlementEnabled(plan)) source = applicationErrors.instrument(source);
   source = require('./native-request-headers.js').instrument(source, applicationErrors.enabled(plan), /\bhost_request_headers\(/.test(portableSource));
+  source = require('./native-header-lookup.js').instrument(source);
+  source = require('./native-fetch-errors.js').instrument(source);
+  source = require('./native-fetch-deadlines.js').instrument(source, plan);
   source = require('./native-request-body.js').instrument(source, applicationErrors.enabled(plan));
   if (packageApplication.enabled(plan)) source = packageApplication.instrument(source);
   source = effectInvocations.instrument(source);
@@ -2089,6 +2120,7 @@ function generateFastlyNativePlatformCapabilitiesAssemblyScript(plan, options =
     portableSourceHash: portable.sourceHash,
     schemaCodecs: portable.manifest.schemaCodecs,
     handlerBodies: portable.manifest.handlerBodies,
+    ...(portable.manifest.reportOwnership ? { reportOwnership: portable.manifest.reportOwnership } : {}),
     dispatcher: portable.manifest.dispatcher,
     stages: portable.manifest.stages,
     helperBodies: portable.manifest.helperBodies,
@@ -2139,7 +2171,7 @@ function generateFastlyNativePlatformCapabilitiesAssemblyScript(plan, options =
       providerNeutralInput: true,
       javascriptRuntime: false,
       jsComputeRuntime: false,
-      wasi: bindings.maxDurationMs !== undefined || hasJwt || hasSign || bindings.s3.length || plan.effects.some(effect => conditionalKv.KV_CONDITIONAL_KINDS.includes(effect.kind)) ? 'clock_time_get only' : false,
+      wasi: plan.effects.some(effect => effect.kind === 'fetch') || bindings.maxDurationMs !== undefined || hasJwt || hasSign || bindings.s3.length || plan.effects.some(effect => conditionalKv.KV_CONDITIONAL_KINDS.includes(effect.kind)) ? 'clock_time_get only' : false,
       effects: FASTLY_NATIVE_PLATFORM_EFFECT_KINDS.join(', '),
       continuations: true,
       groupedEffects: 'existing fetch start-before-wait ordering remains intact',
@@ -2304,9 +2336,10 @@ function compileFastlyNativePlatformCapabilitiesPlan(plan, options = {}) {
         '--path', jsonAs.dependencyRoot
       );
     }
+    require('@pulse-compute/wasm-build-support/native-optimization').appendJsonCacheArenaArgs(args, options.elideJsonCacheArena, schemaCodecsActive);
     const readReportCapture = options.reportCapture === false ? () => null : prepareReportCapture(args, stagingDir, generated.manifest,
       require(path.join(asc.packageRoot, 'package.json')).version, 'fastly-native-platform-capabilities.as/');
-    const startedAt = Date.now();
+    const startedAt = process.hrtime.bigint();
     const result = spawnSync(asc.executable, args, {
       cwd: stagingDir,
       encoding: 'utf8',
@@ -2316,7 +2349,7 @@ function compileFastlyNativePlatformCapabilitiesPlan(plan, options = {}) {
         ? { ...process.env, JSON_STRICT: 'true', JSON_USE_FAST_PATH: '0', JSON_MODE: 'NAIVE' }
         : process.env
     });
-    const assemblyScriptDurationMs = Date.now() - startedAt;
+    const assemblyScriptDurationMs = Math.round(Number(process.hrtime.bigint() - startedAt) / 1e6);
     if (result.error || result.status !== 0 || !fs.existsSync(assemblyScriptWasmFile)) {
       fail('AssemblyScript failed to compile the Fastly native platform capabilities module.', 'PULSE_FASTLY_NATIVE_PLATFORM_CAPABILITIES_ASC_FAILED', {
         status: result.status,
@@ -2454,7 +2487,7 @@ function compileFastlyNativePlatformCapabilitiesPlan(plan, options = {}) {
       compilerVersion: FASTLY_NATIVE_PLATFORM_CAPABILITIES_COMPILER_VERSION,
       assemblyScript: Object.freeze({ package: 'assemblyscript', version: require(path.join(asc.packageRoot, 'package.json')).version }),
       jsonAs: jsonAs
-        ? Object.freeze({ package: 'json-as', version: jsonAs.version, transform: true, strict: true, mode: 'NAIVE', fastPath: false })
+        ? Object.freeze({ package: 'json-as', version: jsonAs.version, transform: true, strict: true, mode: 'NAIVE', fastPath: false, elideDisabledCacheArena: options.elideJsonCacheArena === true })
         : undefined,
       optimization,
       wasm: Object.freeze({ bytes: inspection.bytes, sha256: inspection.sha256, magic: inspection.magic }),
@@ -2474,11 +2507,17 @@ function compileFastlyNativePlatformCapabilitiesPlan(plan, options = {}) {
         providerPackaging: realization.guestLink.providerPackaging
       } : {})
     });
-    const durationMs = Date.now() - startedAt;
+    const durationMs = Math.round(Number(process.hrtime.bigint() - startedAt) / 1e6);
     return Object.freeze({
       version: FASTLY_NATIVE_PLATFORM_CAPABILITIES_VERSION,
       compilerVersion: FASTLY_NATIVE_PLATFORM_CAPABILITIES_COMPILER_VERSION,
       reportAttribution: readReportCapture(wasm),
+      buildObservation: require('@pulse-compute/wasm-build-support/native-optimization').observeAssemblyScript(args, {
+        version: require(path.join(asc.packageRoot, 'package.json')).version,
+        assemblyScriptRoot: asc.packageRoot, timeoutMs: Number(options.timeoutMs || 180000),
+        compilerVersion: FASTLY_NATIVE_PLATFORM_CAPABILITIES_COMPILER_VERSION,
+        durationMs: assemblyScriptDurationMs, jsonAsVersion: jsonAs && jsonAs.version
+      }),
       plan,
       generated,
       source: generated.source,

package/src/build/request-budget.js

@@ -23,7 +23,7 @@ function instrumentRequestBudget(input, duration, plan) {
   replace('function __pulse_fastly_resolve_effect(effectIndex: i32): i32 {', `function __pulse_fastly_resolve_effect(effectIndex: i32): i32 {
   if (!__request_check(effectIndex)) return 0;
   const kind = __pulse_fastly_effect_kind(effectIndex);
-  if (unchecked(__pulse_fastly_pending_mode[effectIndex]) == PULSE_FASTLY_PENDING_ASYNC && kind != 12 && kind != 13 && kind != 14 && kind != 21 && ${plan.effects.filter(e=>e.kind.startsWith('kv.')&&['kv.getVersioned','kv.insertIfAbsent','kv.compareAndSwap'].includes(e.kind)).map(e=>'effectIndex != '+plan.effects.indexOf(e)).join(' && ')||'true'}) {
+  if (unchecked(__pulse_fastly_pending_mode[effectIndex]) == PULSE_FASTLY_PENDING_ASYNC && !(kind == 1 && __pulse_fetch_has_deadlines()) && kind != 12 && kind != 13 && kind != 14 && kind != 21 && ${plan.effects.filter(e=>e.kind.startsWith('kv.')&&['kv.getVersioned','kv.insertIfAbsent','kv.compareAndSwap'].includes(e.kind)).map(e=>'effectIndex != '+plan.effects.indexOf(e)).join(' && ')||'true'}) {
     if (!__request_wait(unchecked(__pulse_fastly_pending[effectIndex]), effectIndex)) return 0;
   }`);
   replace('    const buffer = new Uint8Array(PULSE_FASTLY_BUFFER_BYTES), read = __pulse_fastly_out_i32();', '    if (!__request_wait(handle, effectIndex)) return "";\n    const buffer = new Uint8Array(PULSE_FASTLY_BUFFER_BYTES), read = __pulse_fastly_out_i32();');
@@ -40,6 +40,8 @@ function instrumentRequestBudget(input, duration, plan) {
   if (source.includes('__kv_deadline[index] = start +')) replace('__kv_deadline[index] = start + i64(__KV_timeoutMs) * 1000000;', '__kv_deadline[index] = min<i64>(__request_deadline, start + i64(__KV_timeoutMs) * 1000000);');
   if (source.includes('__s3_deadlines[index] = start +')) replace('__s3_deadlines[index] = start + i64(binding.timeout) * 1000000;', '__s3_deadlines[index] = min<i64>(__request_deadline, start + i64(binding.timeout) * 1000000);');
   if (source.includes('function __pulse_fastly_write_binary(')) replace('const written = new StaticArray<i32>(1); let offset = 0;\n  while (offset < data.length) {', 'const written = new StaticArray<i32>(1); let offset = 0;\n  while (offset < data.length) { if (!__request_check()) return 1;');
+  replace('function __pulse_fetch_request_check(index: i32): bool { return true }', 'function __pulse_fetch_request_check(index: i32): bool { return __request_check(index) }');
+  replace('function __pulse_fetch_request_remaining(): i32 { return 2147483647 }', 'function __pulse_fetch_request_remaining(): i32 { return __request_remaining() }');
   return source + '\n' + fs.readFileSync(path.join(__dirname,'request-budget.as.ts'),'utf8');
 }
 module.exports = {instrumentRequestBudget};

package/src/testing/native-platform-capabilities-host.js

@@ -4,6 +4,7 @@ const fs = require('node:fs');
 const path = require('node:path');
 
 const FASTLY_STATUS_OK = 0;
+const FASTLY_STATUS_INVALID_ARGUMENT = 2;
 const FASTLY_STATUS_ERROR = 1;
 const FASTLY_STATUS_BADF = 3;
 const FASTLY_STATUS_BUFLEN = 4;
@@ -229,7 +230,7 @@ function executeFastlyNativePlatformCapabilities(input, options = {}) {
     new Uint8Array(memory().buffer, Number(buffer), output.length).set(output);
     return FASTLY_STATUS_OK;
   }
-  function requestHeaderList(values, buffer, size, cursor, end, written, kind) {
+  function requestHeaderList(values, buffer, size, cursor, end, written, kind, lookupKind) {
     const limit = Math.min(Number(size), options.requestHeaderPageBytes ?? Number(size));
     let index = Number(cursor), count = 0;
     if (index < 0 || index > values.length) return FASTLY_STATUS_ERROR;
@@ -245,7 +246,7 @@ function executeFastlyNativePlatformCapabilities(input, options = {}) {
     writeU32(written, count);
     view().setBigInt64(Number(end), index === values.length ? -1n : BigInt(index), true);
     // Fault injection is host-fixture-only; neither values nor faults enter traces.
-    const fault = options.requestHeaderFault?.({kind, cursor: Number(cursor)});
+    const fault = (lookupKind && options.headerLookupFault?.({kind:lookupKind})) || options.requestHeaderFault?.({kind, cursor: Number(cursor)});
     if (fault?.written !== undefined) writeU32(written, fault.written);
     if (fault?.cursor !== undefined) view().setBigInt64(Number(end), BigInt(fault.cursor), true);
     if (fault?.unterminated && count) new Uint8Array(memory().buffer)[Number(buffer) + count - 1] = 65;
@@ -254,14 +255,17 @@ function executeFastlyNativePlatformCapabilities(input, options = {}) {
   const imports = {
     fastly_async_io: {
       select(handles, count, timeout, done) {
-        if (Number(count) !== 1 || Number(timeout) <= 0) return FASTLY_STATUS_ERROR;
-        const handle = view().getUint32(Number(handles), true);
-        const item = pending.get(handle) || bodies.get(handle);
-        if (!item) return FASTLY_STATUS_BADF;
-        const wait = Math.max(0, Number(item.readyAt || 0) - monotonicMs);
-        monotonicMs += Math.min(wait, Number(timeout));
-        writeU32(done, wait >= Number(timeout) ? 0xffffffff : 0);
-        trace.push({ module: 'fastly_async_io', name: 'select', timeout: Number(timeout), timedOut: wait >= Number(timeout) });
+        if (Number(count) < 1 || Number(timeout) <= 0) return FASTLY_STATUS_ERROR;
+        const selected = Array.from({length:Number(count)},(_,i) => view().getUint32(Number(handles)+4*i,true));
+        const items = selected.map(handle => pending.get(handle) || bodies.get(handle));
+        if (items.some(item => !item)) return FASTLY_STATUS_BADF;
+        const waits = items.map(item => Math.max(0, Number(item.readyAt || 0) - monotonicMs));
+        const wait = Math.min(...waits), timedOut = wait >= Number(timeout);
+        const fault = options.asyncSelectFault?.({handles:selected,timeout:Number(timeout),now:monotonicMs});
+        monotonicMs += fault?.advanceMs ?? Math.min(wait,Number(timeout));
+        writeU32(done, fault?.selected ?? (timedOut ? 0xffffffff : waits.indexOf(wait)));
+        trace.push({ module: 'fastly_async_io', name: 'select', handles:selected, timeout:Number(timeout), timedOut, now:monotonicMs });
+        if (fault?.status) return fault.status;
         return FASTLY_STATUS_OK;
       }
     },
@@ -325,7 +329,11 @@ function executeFastlyNativePlatformCapabilities(input, options = {}) {
           trace.push({ module: 'fastly_log', name: 'write', endpoint, accepted: false });
           return FASTLY_STATUS_ERROR;
         }
-        const message = redactText(readUtf8(messagePointer, messageLength));
+        const emitted = readUtf8(messagePointer, messageLength);
+        // Test-only assertion seam before proof-trace redaction. Never retain raw
+        // guest bytes in the returned evidence, even when the guest regresses.
+        if (typeof options.onLogWrite === 'function') options.onLogWrite(emitted);
+        const message = redactText(emitted);
         writeU32(writtenOut, Buffer.byteLength(message));
         logs.push(Object.freeze({ endpoint, message }));
         trace.push({ module: 'fastly_log', name: 'write', endpoint, message, accepted: true });
@@ -360,7 +368,8 @@ function executeFastlyNativePlatformCapabilities(input, options = {}) {
         const request = requests.get(Number(handle));
         if (!request) return FASTLY_STATUS_BADF;
         const name = readUtf8(pointer, length).toLowerCase();
-        return requestHeaderList(request.headers.filter(([key]) => key.toLowerCase() === name).map(([, value]) => value), buffer, size, cursor, end, written, 'values');
+        if (!/^[!#$%&'*+.^_`|~0-9a-z-]+$/.test(name)) return FASTLY_STATUS_INVALID_ARGUMENT;
+        return requestHeaderList(request.headers.filter(([key]) => key.toLowerCase() === name).map(([, value]) => value), buffer, size, cursor, end, written, 'values', 'request');
       },
       header_value_get(handle, namePointer, nameLength, valuePointer, valueLength, writtenOut) {
         const request = requests.get(Number(handle));
@@ -368,7 +377,7 @@ function executeFastlyNativePlatformCapabilities(input, options = {}) {
         trace.push({ module: 'fastly_http_req', name: 'header_value_get', handle: Number(handle), header: name });
         if (!request) return FASTLY_STATUS_BADF;
         const value = headerValue(request.headers, name);
-        return value === undefined ? FASTLY_STATUS_NONE : writeUtf8(value, valuePointer, valueLength, writtenOut);
+        return value === undefined ? FASTLY_STATUS_INVALID_ARGUMENT : writeUtf8(value, valuePointer, valueLength, writtenOut);
       },
       new(handleOut) {
         const handle = alloc('request');
@@ -413,6 +422,7 @@ function executeFastlyNativePlatformCapabilities(input, options = {}) {
       close(handle) { return requests.delete(Number(handle)) ? FASTLY_STATUS_OK : FASTLY_STATUS_BADF; },
       pending_req_poll_v2(handle, detail, done, responseOut, bodyOut) {
         const item = pending.get(Number(handle)); if (!item) return FASTLY_STATUS_BADF;
+        trace.push({module:'fastly_http_req',name:'pending_req_poll_v2',pendingHandle:Number(handle)});
         if (monotonicMs < item.readyAt) { writeU32(done, 0); return FASTLY_STATUS_OK; }
         writeU32(done, 1); return imports.fastly_http_req.pending_req_wait(handle, responseOut, bodyOut);
       },
@@ -430,7 +440,7 @@ function executeFastlyNativePlatformCapabilities(input, options = {}) {
         }
         const pendingHandle = alloc('pending');
         const capturedBody = bodyBytes(bodyHandle);
-        pending.set(pendingHandle, { request: { ...request, headers: request.headers.map((entry) => [...entry]), body: capturedBody }, backend, fixture, readyAt: monotonicMs + Number(fixture.delayMs || 0) });
+        pending.set(pendingHandle, { request: { ...request, headers: request.headers.map((entry) => [...entry]), body: capturedBody }, backend, fixture, readyAt: fixture.neverHeaders ? Infinity : monotonicMs + Number(fixture.delayMs || 0) });
         if (typeof options.onOutboundRequest === 'function') options.onOutboundRequest({ ...request, backend, headers: request.headers.map((entry) => [...entry]), body: capturedBody });
         if (fixture.sendStatus) { pending.delete(pendingHandle); return Number(fixture.sendStatus); }
         if (request.headers.some(([name, value]) => name.toLowerCase() === 'authorization' && value.startsWith('AWS4-HMAC-SHA256 '))) privateUrls.add(request.url);
@@ -576,13 +586,21 @@ function executeFastlyNativePlatformCapabilities(input, options = {}) {
         trace.push({ module: 'fastly_http_resp', name: 'header_append', handle: Number(handle), header: [name, value] });
         return FASTLY_STATUS_OK;
       },
+      header_values_get(handle, pointer, length, buffer, size, cursor, end, written) {
+        trace.push({module:'fastly_http_resp', name:'header_values_get', cursor:Number(cursor)});
+        const response = responses.get(Number(handle));
+        if (!response) return FASTLY_STATUS_BADF;
+        const name = readUtf8(pointer, length).toLowerCase();
+        if (!/^[!#$%&'*+.^_`|~0-9a-z-]+$/.test(name)) return FASTLY_STATUS_INVALID_ARGUMENT;
+        return requestHeaderList(response.headers.filter(([key]) => key.toLowerCase() === name).map(([, value]) => value), buffer, size, cursor, end, written, 'response-values', 'response');
+      },
       header_value_get(handle, namePointer, nameLength, valuePointer, valueLength, writtenOut) {
         const response = responses.get(Number(handle));
         const name = readUtf8(namePointer, nameLength);
         trace.push({ module: 'fastly_http_resp', name: 'header_value_get', handle: Number(handle), header: name });
         if (!response) return FASTLY_STATUS_BADF;
         const value = headerValue(response.headers, name);
-        return value === undefined ? FASTLY_STATUS_NONE : writeUtf8(value, valuePointer, valueLength, writtenOut);
+        return value === undefined ? FASTLY_STATUS_INVALID_ARGUMENT : writeUtf8(value, valuePointer, valueLength, writtenOut);
       },
       status_get(handle, statusOut) {
         const response = responses.get(Number(handle));
@@ -702,7 +720,16 @@ function executeFastlyNativePlatformCapabilities(input, options = {}) {
   const handledJwtError = options.allowHandledJwtError === true
     && lastError === 1008
     && Boolean(downstream);
-  if (lastError !== FASTLY_STATUS_OK && !handledJwtError && !(options.allowAbortedResponse === true && downstream?.aborted)) {
+  const handledHeaderError = options.allowHandledHeaderError === true
+    && lastError === 1003 && (errorStage === 22 || errorStage === 23) && downstream?.status === 500;
+  const handledTransportError = options.allowHandledTransportError === true
+    && (errorStage === 77 || errorStage === 81)
+    && ((lastError === 1006 && downstream?.status === 502) || (lastError === 1003 && downstream?.status === 500));
+  const handledDeadlineError = options.allowHandledFetchDeadlineError === true
+    && ((lastError === 1006 && errorStage === 271 && downstream?.status === 504)
+      || (lastError === 1001 && errorStage === 270 && downstream?.status === 400)
+      || (lastError === 1003 && errorStage === 272 && downstream?.status === 500));
+  if (lastError !== FASTLY_STATUS_OK && !handledDeadlineError && !handledTransportError && !handledHeaderError && !handledJwtError && !(options.allowAbortedResponse === true && downstream?.aborted)) {
     throw new FastlyNativePlatformCapabilitiesMockError('Fastly native platform capabilities module reported an execution error.', 'PULSE_FASTLY_NATIVE_PLATFORM_CAPABILITIES_MOCK_EXECUTION_FAILED', { lastError, errorStage, errorEffect, pulseLastError, trace });
   }
   if (!downstream) {
@@ -729,6 +756,9 @@ function executeFastlyNativePlatformCapabilities(input, options = {}) {
     outboundRequests: Object.freeze(outboundRequests),
     stores: Object.freeze({ config: snapshotStores(configStores), secrets: Object.fromEntries([...secretStores].map(([name, values]) => [name, Object.fromEntries([...values].map(([key]) => [key, '[REDACTED]']))])), kv: snapshotStores(kvStores, true) }),
     kvEvidence,
+    monotonicMs,
+    transportResources: Object.freeze({pendingRequests: pending.size,
+      outboundRequests: requests.size - Number(requests.has(downstreamRequestHandle))}),
     instance
   });
 }

package/src/toolchain/index.js

@@ -285,6 +285,7 @@ function createDriver() {
         realizationArtifacts: invocation.nativeArtifact.realizationArtifacts,
         guestUnits: invocation.nativeArtifact.guestUnits,
         nativeOptimization: invocation.optimization,
+        elideJsonCacheArena: invocation.nativeArtifact.manifest.elideJsonCacheArena === true,
         emitWat: invocation.nativeArtifact.manifest.wat?.emitted === true,
         compileTimeoutMs: invocation.timeoutMs
       });
@@ -314,6 +315,7 @@ function createDriver() {
         realizationArtifacts: invocation.nativeArtifact.realizationArtifacts,
         guestUnits: invocation.nativeArtifact.guestUnits,
         nativeOptimization: invocation.optimization,
+        elideJsonCacheArena: invocation.nativeArtifact.manifest.elideJsonCacheArena === true,
         emitWat: invocation.nativeArtifact.manifest.wat?.emitted === true,
         compileTimeoutMs: invocation.timeoutMs
       });
@@ -350,7 +352,7 @@ function createDriver() {
           providerPackage: providerBuild.packageFile,
           providerSourceEntry: providerBuild.sourceEntryFile
         }),
-        build: { ...providerBuild.build, reportAttribution: native.reportAttribution },
+        build: { ...providerBuild.build, reportAttribution: native.reportAttribution, buildObservation: native.buildObservation },
         realization: publicRealization,
         packaging: audit ? Object.freeze({
           version: PROVIDER_PACKAGING_AUDIT_VERSION,

package/src/toolchain/native-execution.js

@@ -18,6 +18,7 @@ function prepareFastlyNativeExecution(invocation) {
     realizationArtifacts: invocation.nativeArtifact.realizationArtifacts,
     guestUnits: invocation.nativeArtifact.guestUnits,
     nativeOptimization: invocation.optimization,
+    elideJsonCacheArena: invocation.nativeArtifact.manifest.elideJsonCacheArena === true,
     emitWat: invocation.nativeArtifact.manifest.wat?.emitted === true,
     compileTimeoutMs: invocation.timeoutMs || undefined
   });