@pulse-compute/wasm-contracts 0.0.0 → 1.0.0-beta.2

package/README.md

@@ -1,3 +1,36 @@
-# @pulse-compute/wasm-contracts
+# `@pulse-compute/wasm-contracts`
 
-This is an inert namespace-bootstrap package. It contains no executable code.
+<!-- pulse-package-status:start -->
+> **Support tier:** Implementation/transitive surface<br>
+> **Audience:** Pulse compiler, runtime, provider, and package-lowering maintainers.<br>
+> **Install directly:** Provider toolchain authors may install it for the versioned bootstrap contract; application projects receive it transitively.<br>
+> **Supported entry points:** `@pulse-compute/wasm-contracts/provider/toolchain`<br>
+> **Stability:** The provider toolchain contract is versioned and supported for the Beta; other protocol and proof interfaces remain internal.<br>
+> **npm:** [`@pulse-compute/wasm-contracts`](https://www.npmjs.com/package/@pulse-compute/wasm-contracts)<br>
+> **Canonical documentation:** [Package guide](https://pulsecompute.io/v1.0.0-beta.2/packages/implementation-packages/)
+>
+> This release-status block is generated from the synchronized `Pulse 1.0.0-beta.2` package policy.
+<!-- pulse-package-status:end -->
+
+This package owns stable data contracts shared by the compiler, runtime, and providers.
+
+Public contract categories include:
+
+- route/path/dispatch/execution contracts;
+- handler effect and context contracts;
+- host ABI, headers, JSON body, and streaming contracts;
+- package-owned lowerer contracts;
+- schema JSON contracts;
+- provider-neutral config, provider, and KV contracts;
+- the canonical app runtime facade;
+- project capability and Native optimization identity contracts.
+
+Canonical Beta imports:
+
+```js
+const runtimeApi = require('@pulse-compute/wasm-contracts/handler/runtime-api')
+const canonicalProvider = require('@pulse-compute/wasm-contracts/provider/canonical-provider')
+```
+
+Fastly primitive realization is owned by `@pulse-compute/provider-fastly`.
+Historical confidence-pass modules are private implementation sources. They are not package exports and must not be used as application or provider API.

package/package.json

@@ -1,15 +1,133 @@
 {
   "name": "@pulse-compute/wasm-contracts",
-  "version": "0.0.0",
-  "description": "Inert namespace bootstrap for Pulse.",
+  "version": "1.0.0-beta.2",
   "license": "Apache-2.0",
+  "engines": {
+    "node": "^22.14.0 || ^24.0.0"
+  },
+  "description": "Shared PulseWasm contracts, diagnostics, IDs, config/provider symbolic contracts, route/path grammar, host ABI/payload contracts, library/sidecar contracts, schema-json contracts, host capability registry, artifact contract constants, and provider shape helpers.",
+  "type": "commonjs",
+  "main": "./src/index.js",
+  "exports": {
+    ".": "./src/index.js",
+    "./compiler-spine": "./src/spine.js",
+    "./logging": "./src/logging.js",
+    "./handler/surface-contract": "./src/handler/surface-contract.js",
+    "./project/config-plan": "./src/project/config-plan.js",
+    "./project/config-factory": "./src/project/config-factory.js",
+    "./project/package-ownership": "./src/project/package-ownership.js",
+    "./diagnostics": "./src/diagnostics.js",
+    "./diagnostics/codes": "./src/diagnostics/codes.js",
+    "./diagnostics/reporter": "./src/diagnostics/reporter.js",
+    "./stable-id": "./src/stable-id.js",
+    "./sha256": "./src/sha256.js",
+    "./path": "./src/path.js",
+    "./route-plan": "./src/route-plan.js",
+    "./dispatch-table": "./src/dispatch-table.js",
+    "./execution-plan": "./src/execution-plan.js",
+    "./path-table": "./src/path-table.js",
+    "./handler-table": "./src/handler-table.js",
+    "./assets/contracts": "./src/assets/contracts.js",
+    "./crypto/contracts": "./src/crypto/contracts.js",
+    "./jwt/contracts": "./src/jwt/contracts.js",
+    "./events": "./src/events/contracts.js",
+    "./entities/contracts": {
+      "types": "./src/entities/contracts.d.ts",
+      "require": "./src/entities/contracts.js",
+      "default": "./src/entities/contracts.js"
+    },
+    "./entities/runtime": {
+      "types": "./src/entities/runtime.d.ts",
+      "require": "./src/entities/runtime.js",
+      "default": "./src/entities/runtime.js"
+    },
+    "./entities/json-rpc": {
+      "types": "./src/entities/json-rpc.d.ts",
+      "require": "./src/entities/json-rpc.js",
+      "default": "./src/entities/json-rpc.js"
+    },
+    "./entities/catalog": {
+      "types": "./src/entities/catalog.d.ts",
+      "require": "./src/entities/catalog.js",
+      "default": "./src/entities/catalog.js"
+    },
+    "./host/capabilities": "./src/host/capabilities.js",
+    "./host/wasm-host-abi": "./src/host/wasm-host-abi.js",
+    "./host/request-result-headers": "./src/host/request-result-headers.js",
+    "./host/channel-broadcaster": "./src/host/channel-broadcaster.js",
+    "./host/json-body": "./src/host/json-body.js",
+    "./host/streaming-passthrough": "./src/host/streaming-passthrough.js",
+    "./host/backend-capabilities": "./src/host/backend-capabilities.js",
+    "./library/contracts": "./src/library/contracts.js",
+    "./library/sidecars": "./src/library/sidecars.js",
+    "./library/api-surface": "./src/library/api-surface.js",
+    "./schema-json/contracts": "./src/schema-json/contracts.js",
+    "./schema-json/v1": "./src/schema-json/v1.js",
+    "./schema-json/v2": "./src/schema-json/v2.js",
+    "./schema-json/compile": "./src/schema-json/compile.js",
+    "./schema-json/generic-parser": "./src/schema-json/generic-parser.js",
+    "./schema-json/registry": "./src/schema-json/registry.js",
+    "./schema-json/semantic-trace": "./src/schema-json/semantic-trace.js",
+    "./config/symbolic-refs": "./src/config/symbolic-refs.js",
+    "./config/provider-resolution": "./src/config/provider-resolution.js",
+    "./config/runtime-provider-kv": "./src/config/runtime-provider-kv.js",
+    "./definitions/config-schema": "./src/definitions/config-schema.js",
+    "./definitions/handler-roles": "./src/definitions/handler-roles.js",
+    "./definitions/router-api": "./src/definitions/router-api.js",
+    "./definitions/path-grammar": "./src/definitions/path-grammar.js",
+    "./library/manifest": "./src/library/manifest.js",
+    "./handler/effects": "./src/handler/effects.js",
+    "./handler/context": "./src/handler/context.js",
+    "./handler/context-lowering": "./src/handler/context.js",
+    "./handler/io-lifecycle": "./src/handler/io-lifecycle.js",
+    "./handler/request-json-body": "./src/handler/request-json-body.js",
+    "./handler/schema-decode-result": "./src/handler/schema-decode-result.js",
+    "./handler/schema-response-codec": "./src/handler/schema-response-codec.js",
+    "./handler/backend-json-request-body": "./src/handler/backend-json-request-body.js",
+    "./handler/reference-node-lifecycle-golden": "./src/handler/reference-node-lifecycle-golden.js",
+    "./handler/beta-lifecycle-golden": "./src/handler/beta-lifecycle-golden.js",
+    "./handler/lifecycle-authoring-alignment": "./src/handler/lifecycle-authoring-alignment.js",
+    "./handler/doctor-readiness-aggregator": "./src/handler/doctor-readiness-aggregator.js",
+    "./grip/contracts": "./src/grip/contracts.js",
+    "./library/second-package-owned-lowering": "./src/library/second-package-owned-lowering.js",
+    "./handler/runtime-api": "./src/handler/runtime-api.js",
+    "./handler/canonical-runtime": "./src/handler/canonical-runtime.js",
+    "./handler/canonical-native-plan": "./src/handler/canonical-native-plan.js",
+    "./handler/canonical-native-runtime": "./src/handler/canonical-native-runtime.js",
+    "./provider/canonical-provider": "./src/provider/canonical-provider.js",
+    "./provider/toolchain": "./src/provider/toolchain.js",
+    "./provider/final-wasm-policy": "./src/provider/final-wasm-policy.js",
+    "./handler/ctx-contract": "./src/handler/ctx-contract.js",
+    "./project/config-runtime": "./src/project/config-runtime.js",
+    "./project/reachable-graph": "./src/project/reachable-graph.js",
+    "./project/reachable-graph.schema.json": "./src/project/reachable-graph.schema.json",
+    "./handler/types-contract": "./src/handler/types-contract.js",
+    "./package/runtime-pulse-live": "./src/package/runtime-pulse-live.js",
+    "./package/package-contract": "./src/package/package-contract.js",
+    "./package/package-contract.schema.json": "./src/package/package-contract.schema.json",
+    "./project/package-product-projection": "./src/project/package-product-projection.js",
+    "./project/javascript-application": "./src/project/javascript-application.js",
+    "./project/target-support-evidence": "./src/project/target-support-evidence.js",
+    "./project/javascript-core-capabilities": "./src/project/javascript-core-capabilities.js",
+    "./project/native-optimization": "./src/project/native-optimization.js",
+    "./s3/contracts": "./src/s3/contracts.js"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
   "files": [
+    "src",
     "README.md",
     "LICENSE",
     "NOTICE"
   ],
-  "publishConfig": {
-    "access": "public",
-    "tag": "bootstrap"
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/pulse-compute/pulse.git",
+    "directory": "wasm/packages/contracts"
+  },
+  "homepage": "https://pulsecompute.io/v1.0.0-beta.2/packages/implementation-packages/",
+  "bugs": {
+    "url": "https://github.com/pulse-compute/pulse/issues"
   }
-}
+}

package/src/assets/contracts.js

@@ -0,0 +1,296 @@
+'use strict';
+
+const {
+  LOWERABLE_LIBRARY_PAYLOAD_MODE_STATUSES
+} = require('../library/manifest.js');
+
+const ASSETS_CONTRACT_VERSION = 'pulsewasm.assets-contract.v1';
+const ASSETS_HOST_ABI_VERSION = 'pulsewasm.assets-host-abi.v1';
+const ASSETS_PROVIDER_CONFIG_VERSION = 'pulsewasm.assets-provider-config.v1';
+const ASSETS_LOOKUP_RESULT_VERSION = 'pulsewasm.assets-lookup-result.v1';
+const ASSETS_RESPONSE_POLICY_VERSION = 'pulsewasm.assets-response-policy.v1';
+const ASSETS_LOWERING_PLAN_VERSION = 'pulsewasm.assets-lowering-plan.v1';
+const ASSETS_ARTIFACT_VERSION = 'pulsewasm.assets-artifact.v1';
+const ASSETS_NODE_PROVIDER_RUNTIME_VERSION = 'pulsewasm.assets-node-provider-runtime.v1';
+const ASSETS_NODE_PROVIDER_PROOF_VERSION = 'pulsewasm.assets-node-provider-proof.v1';
+const ASSETS_NODE_COMPILED_WASM_LIFECYCLE_RUNTIME_VERSION = 'pulsewasm.assets-node-compiled-wasm-lifecycle-runtime.v1';
+const ASSETS_NODE_COMPILED_WASM_LIFECYCLE_PROOF_VERSION = 'pulsewasm.node-compiled-wasm-assets-lifecycle-proof.v1';
+const ASSETS_NODE_COMPILED_WASM_LIFECYCLE_PROOF_ARTIFACT = 'node-compiled-wasm-assets-lifecycle-proof.json';
+const ASSETS_FASTLY_PROVIDER_RUNTIME_VERSION = 'pulsewasm.assets-fastly-provider-runtime.v1';
+const ASSETS_FASTLY_PROVIDER_PROOF_VERSION = 'pulsewasm.assets-fastly-provider-proof.v1';
+const ASSETS_FASTLY_PACKAGE_OUT_PARITY_PROOF_VERSION = 'pulsewasm.fastly-assets-package-out-parity-proof.v1';
+const ASSETS_FASTLY_PACKAGE_OUT_PARITY_PROOF_ARTIFACT = 'fastly-assets-package-out-parity-proof.json';
+const ASSETS_PACKAGE_OWNED_LOWERING_PROOF_VERSION = 'pulsewasm.assets-package-owned-lowering-proof.v1';
+const ASSETS_PACKAGE_OWNED_LOWERING_PROOF_ARTIFACT = 'assets-package-owned-lowering-proof.json';
+const ASSETS_PACKAGE_OUT_DISCOVERY_PROOF_VERSION = 'pulsewasm.assets-package-out-discovery-proof.v1';
+const ASSETS_PACKAGE_OUT_DISCOVERY_PROOF_ARTIFACT = 'assets-package-out-discovery-proof.json';
+const ASSETS_COMPILED_WASM_SIDECAR_PLAN_VERSION = 'pulsewasm.assets-compiled-wasm-sidecar-plan.v1';
+const ASSETS_COMPILED_WASM_SIDECAR_PLAN_ARTIFACT = 'assets-compiled-wasm-sidecar-plan.json';
+const ASSETS_SIDECAR_COMPILE_LINK_PROOF_VERSION = 'pulsewasm.assets-sidecar-compile-link-proof.v1';
+const ASSETS_SIDECAR_COMPILE_LINK_PROOF_ARTIFACT = 'assets-sidecar-compile-link-proof.json';
+
+const ASSETS_CONTRACT_ID = 'pulse.assets';
+
+const ASSETS_ALLOWED_METHODS = Object.freeze(['GET', 'HEAD']);
+const ASSETS_ALLOWED_MODES = Object.freeze(['hosted-origin', 'provider-object-store']);
+const ASSETS_INITIAL_PROVIDER_TARGETS = Object.freeze(['node', 'fastly']);
+
+const ASSETS_PAYLOAD_MODE_STATUSES = LOWERABLE_LIBRARY_PAYLOAD_MODE_STATUSES;
+
+const ASSETS_SUPPORTED_BODY_KINDS = Object.freeze(['text-response-body']);
+const ASSETS_LOWERING_PLAN_ONLY_BODY_KINDS = Object.freeze(['stream-pass-through-response']);
+const ASSETS_RESERVED_BODY_KINDS = Object.freeze(['binary-buffer']);
+const ASSETS_UNSUPPORTED_BODY_KINDS = Object.freeze(['json-response-body']);
+
+const ASSETS_DIAGNOSTIC_CODES = Object.freeze({
+  NON_LITERAL_LOOKUP: 'PULSEWASM_ASSETS_NON_LITERAL_LOOKUP',
+  UNSUPPORTED_METHOD: 'PULSEWASM_ASSETS_UNSUPPORTED_METHOD',
+  ROUTE_METHOD_MISMATCH: 'PULSEWASM_ASSETS_ROUTE_METHOD_MISMATCH',
+  RUNTIME_EXECUTION_UNSUPPORTED: 'PULSEWASM_ASSETS_RUNTIME_EXECUTION_UNSUPPORTED',
+  RESPOND_REQUIRES_LOOKUP: 'PULSEWASM_ASSETS_RESPOND_REQUIRES_LOOKUP',
+  BINARY_BODY_RESERVED: 'PULSEWASM_ASSETS_BINARY_BODY_RESERVED',
+  STREAM_PROVIDER_NOT_WIRED: 'PULSEWASM_ASSETS_STREAM_PROVIDER_NOT_WIRED',
+  PAYLOAD_MODE_UNSUPPORTED: 'PULSEWASM_ASSETS_PAYLOAD_MODE_UNSUPPORTED',
+  NODE_PROVIDER_PLAN_REQUIRED: 'PULSEWASM_ASSETS_NODE_PROVIDER_PLAN_REQUIRED',
+  NODE_PROVIDER_ASSET_NOT_FOUND: 'PULSEWASM_ASSETS_NODE_PROVIDER_ASSET_NOT_FOUND',
+  NODE_PROVIDER_SMOKE_FAILED: 'PULSEWASM_ASSETS_NODE_PROVIDER_SMOKE_FAILED',
+  NODE_COMPILED_LIFECYCLE_SMOKE_FAILED: 'PULSEWASM_ASSETS_NODE_COMPILED_LIFECYCLE_SMOKE_FAILED',
+  STORE_CONFIG_REQUIRED: 'PULSEWASM_ASSETS_STORE_CONFIG_REQUIRED',
+  STORE_NOT_CONFIGURED: 'PULSEWASM_ASSETS_STORE_NOT_CONFIGURED',
+  STORE_CONFIG_INVALID: 'PULSEWASM_ASSETS_STORE_CONFIG_INVALID',
+  STORE_ASSET_FILE_NOT_FOUND: 'PULSEWASM_ASSETS_STORE_ASSET_FILE_NOT_FOUND',
+  FASTLY_PROVIDER_PLAN_REQUIRED: 'PULSEWASM_ASSETS_FASTLY_PROVIDER_PLAN_REQUIRED',
+  FASTLY_PROVIDER_ASSET_NOT_FOUND: 'PULSEWASM_ASSETS_FASTLY_PROVIDER_ASSET_NOT_FOUND',
+  FASTLY_PROVIDER_SMOKE_FAILED: 'PULSEWASM_ASSETS_FASTLY_PROVIDER_SMOKE_FAILED',
+  FASTLY_PACKAGE_OUT_PARITY_PLAN_REQUIRED: 'PULSEWASM_FASTLY_ASSETS_PACKAGE_OUT_PARITY_PLAN_REQUIRED',
+  FASTLY_PACKAGE_OUT_PARITY_SMOKE_FAILED: 'PULSEWASM_FASTLY_ASSETS_PACKAGE_OUT_PARITY_SMOKE_FAILED',
+  FASTLY_ASSETS_COMPILED_WASM_PLAN_ONLY: 'PULSEWASM_FASTLY_ASSETS_COMPILED_WASM_PLAN_ONLY',
+  DYNAMIC_KEY_UNSUPPORTED: 'PULSEWASM_ASSETS_DYNAMIC_KEY_UNSUPPORTED',
+  COMPILED_BINARY_RESERVED: 'PULSEWASM_ASSETS_COMPILED_BINARY_RESERVED',
+  COMPILED_STREAM_PLAN_ONLY: 'PULSEWASM_ASSETS_COMPILED_STREAM_PLAN_ONLY',
+  HANDLE_ESCAPE_UNSUPPORTED: 'PULSEWASM_ASSETS_HANDLE_ESCAPE_UNSUPPORTED',
+  COMPILED_METHOD_UNSUPPORTED: 'PULSEWASM_ASSETS_COMPILED_METHOD_UNSUPPORTED',
+  SIDECAR_FILE_MISSING: 'PULSEWASM_ASSETS_SIDECAR_FILE_MISSING',
+  SIDECAR_SYMBOL_MISSING: 'PULSEWASM_ASSETS_SIDECAR_SYMBOL_MISSING',
+  SIDECAR_HOST_IMPORT_MISSING: 'PULSEWASM_ASSETS_SIDECAR_HOST_IMPORT_MISSING',
+  SIDECAR_LINK_SMOKE_FAILED: 'PULSEWASM_ASSETS_SIDECAR_LINK_SMOKE_FAILED',
+  SIDECAR_ASC_DEPENDENCY_GATED: 'PULSEWASM_ASSETS_SIDECAR_ASC_DEPENDENCY_GATED'
+});
+
+const ASSETS_PAYLOAD_MODE_CLASSIFICATION = Object.freeze({
+  textResponseBody: Object.freeze({
+    mode: 'text-response-body',
+    status: 'implemented-now',
+    hostResultKind: 'RESULT_TEXT',
+    hostCapabilities: Object.freeze(['result', 'body']),
+    owner: '@pulse-compute/wasm-host-runtime',
+    notes: 'Text results are already supported by the host result ABI and are sufficient for the first text-only provider proof.'
+  }),
+  jsonResponseBody: Object.freeze({
+    mode: 'json-response-body',
+    status: 'unsupported',
+    hostResultKind: 'RESULT_JSON',
+    hostCapabilities: Object.freeze(['json', 'result']),
+    owner: '@pulse-compute/wasm-host-runtime',
+    notes: 'Assets do not lower to parsed JSON result builders. JSON files should be served as text/stream payloads with headers, not through the generic JSON helper.'
+  }),
+  streamPassThroughResponse: Object.freeze({
+    mode: 'stream-pass-through-response',
+    status: 'lowering-plan-only',
+    hostSurfaceStatus: 'implemented-now',
+    hostResultKind: 'RESULT_STREAM',
+    hostCapabilities: Object.freeze(['headers', 'result', 'body']),
+    owner: '@pulse-compute/wasm-host-runtime',
+    notes: 'Host-owned response/stream refs and header merge policy exist; assets lowering/provider proof has not consumed them yet.'
+  }),
+  binaryBodyBufferResponse: Object.freeze({
+    mode: 'binary-buffer',
+    status: 'reserved-with-diagnostic',
+    hostResultKind: 'RESULT_BINARY',
+    hostCapabilities: Object.freeze(['result', 'body']),
+    owner: '@pulse-compute/wasm-host-runtime',
+    diagnosticCode: ASSETS_DIAGNOSTIC_CODES.BINARY_BODY_RESERVED,
+    notes: 'First-class byte buffers are intentionally reserved until a concrete binary ABI/provider path exists.'
+  }),
+  headerPassThrough: Object.freeze({
+    mode: 'header-pass-through',
+    status: 'implemented-now',
+    hostCapabilities: Object.freeze(['headers']),
+    owner: '@pulse-compute/wasm-host-runtime',
+    notes: 'Request/result header exports and ordered response header merge policy are implemented.'
+  }),
+  statusResultPassThrough: Object.freeze({
+    mode: 'status-result-pass-through',
+    status: 'implemented-now',
+    hostCapabilities: Object.freeze(['result']),
+    owner: '@pulse-compute/wasm-host-runtime',
+    notes: 'Status is already part of text, JSON, empty, stream, and response-ref result surfaces.'
+  }),
+  notFoundPassThrough: Object.freeze({
+    mode: '404-pass-through',
+    status: 'provider-specific',
+    hostCapabilities: Object.freeze(['assets', 'result']),
+    owner: '@pulse-compute/provider-node and @pulse-compute/provider-fastly',
+    notes: '404/pass-through policy is stable, but concrete behavior depends on the provider proof that consumes the lowering plan.'
+  })
+});
+
+const ASSETS_LOOKUP_RESULT_SHAPE = Object.freeze({
+  version: ASSETS_LOOKUP_RESULT_VERSION,
+  kind: 'pulse.assets.lookup-result',
+  fields: Object.freeze({
+    found: 'boolean',
+    store: 'literal store name from assets.lookup',
+    key: 'literal normalized asset key from assets.lookup',
+    method: 'GET or HEAD',
+    status: 'provider status, usually 200 or 404',
+    headers: 'ordered response headers or header ref',
+    body: 'text body, host stream/response ref, or reserved binary diagnostic'
+  })
+});
+
+const ASSETS_PROVIDER_CONFIG_SHAPE = Object.freeze({
+  version: ASSETS_PROVIDER_CONFIG_VERSION,
+  modes: ASSETS_ALLOWED_MODES,
+  providerTargets: ASSETS_INITIAL_PROVIDER_TARGETS,
+  fields: Object.freeze({
+    mode: 'one of ASSETS_ALLOWED_MODES',
+    store: 'static lowerable store name',
+    origin: 'symbolic hosted-origin ref when mode is hosted-origin',
+    bucket: 'symbolic provider object-store bucket ref when mode is provider-object-store',
+    credentials: 'symbolic refs only; never compiled into Wasm artifacts',
+    cache: 'optional ASSETS_CACHE_POLICY-compatible cache metadata'
+  })
+});
+
+const ASSETS_KEY_POLICY = Object.freeze({
+  store: 'non-empty static string literal selected by a package-owned pulse.assets lookup facade',
+  key: 'non-empty static string literal; canonical examples use absolute web paths such as /app.js',
+  normalization: 'providers may normalize leading slash/prefix, but lowering records the literal key for diagnostics',
+  traversal: 'dot-segment traversal is provider-invalid and must not be silently normalized into another store key',
+  dynamicKeys: 'reserved for a later pass; first lowering plan diagnostics require static store/key literals',
+  routeMethodAlignment: 'when route metadata is available, an asset lookup method must match the owning route method unless a later explicit override policy is introduced'
+});
+
+const ASSETS_CACHE_POLICY = Object.freeze({
+  defaultCacheControl: 'provider default unless cacheControl is supplied by lookup/respond options',
+  explicitCacheControl: 'preserved as a response header under header merge policy',
+  immutable: 'represented through Cache-Control header text, not a separate Wasm ABI feature',
+  ttl: 'provider-specific seconds value when supplied by provider config',
+  revalidation: 'not implemented by the lowering contract'
+});
+
+const ASSETS_RESPONSE_POLICY = Object.freeze({
+  version: ASSETS_RESPONSE_POLICY_VERSION,
+  allowedMethods: ASSETS_ALLOWED_METHODS,
+  headDropsBody: true,
+  lookupMiss: Object.freeze({
+    status: 404,
+    behavior: 'provider-specific pass-through or explicit 404 according to provider proof',
+    bodyMode: 'text-response-body or empty result for proof lanes'
+  }),
+  headers: Object.freeze({
+    passThrough: true,
+    mergePolicy: 'contracts/host/request-result-headers plus contracts/host/streaming-passthrough response header merge rules'
+  }),
+  bodyModes: Object.freeze(Object.fromEntries(
+    Object.values(ASSETS_PAYLOAD_MODE_CLASSIFICATION).map((entry) => [entry.mode, entry.status])
+  )),
+  binary: Object.freeze({
+    status: ASSETS_PAYLOAD_MODE_CLASSIFICATION.binaryBodyBufferResponse.status,
+    diagnosticCode: ASSETS_DIAGNOSTIC_CODES.BINARY_BODY_RESERVED
+  }),
+  stream: Object.freeze({
+    status: ASSETS_PAYLOAD_MODE_CLASSIFICATION.streamPassThroughResponse.status,
+    hostSurfaceStatus: ASSETS_PAYLOAD_MODE_CLASSIFICATION.streamPassThroughResponse.hostSurfaceStatus,
+    diagnosticCode: ASSETS_DIAGNOSTIC_CODES.STREAM_PROVIDER_NOT_WIRED
+  })
+});
+
+const ASSETS_PROTOCOL_POLICY = Object.freeze({
+  packageIdentityOwnedByManifest: true,
+  lowerableFacadeOwnedByPackage: true,
+  protocolPayloadRulesOwnedByContracts: true,
+  compilerOwnsPackageMappings: false,
+  thirdPartyPackagesRequireCoreConstants: false,
+  binaryBodyStillReserved: true,
+  payloadModesExplicit: true,
+  routeMethodAlignmentExplicit: true
+});
+
+function clone(value) {
+  if (Array.isArray(value)) return value.map(clone);
+  if (value && typeof value === 'object') {
+    return Object.fromEntries(Object.entries(value).map(([key, entry]) => [key, clone(entry)]));
+  }
+  return value;
+}
+
+function assetsPayloadModeClassification() {
+  return clone(ASSETS_PAYLOAD_MODE_CLASSIFICATION);
+}
+
+function assetsPayloadMode(mode) {
+  return Object.values(ASSETS_PAYLOAD_MODE_CLASSIFICATION).find((entry) => entry.mode === mode) || null;
+}
+
+function assetsProtocolExtension() {
+  return {
+    assets: {
+      payloadModes: assetsPayloadModeClassification(),
+      responsePolicy: clone(ASSETS_RESPONSE_POLICY)
+    },
+    policy: {
+      binaryBodyStillReserved: true,
+      payloadModesExplicit: true,
+  routeMethodAlignmentExplicit: true
+    }
+  };
+}
+
+module.exports = {
+  ASSETS_CONTRACT_VERSION,
+  ASSETS_HOST_ABI_VERSION,
+  ASSETS_PROVIDER_CONFIG_VERSION,
+  ASSETS_LOOKUP_RESULT_VERSION,
+  ASSETS_RESPONSE_POLICY_VERSION,
+  ASSETS_LOWERING_PLAN_VERSION,
+  ASSETS_ARTIFACT_VERSION,
+  ASSETS_NODE_PROVIDER_RUNTIME_VERSION,
+  ASSETS_NODE_PROVIDER_PROOF_VERSION,
+  ASSETS_NODE_COMPILED_WASM_LIFECYCLE_RUNTIME_VERSION,
+  ASSETS_NODE_COMPILED_WASM_LIFECYCLE_PROOF_VERSION,
+  ASSETS_NODE_COMPILED_WASM_LIFECYCLE_PROOF_ARTIFACT,
+  ASSETS_FASTLY_PROVIDER_RUNTIME_VERSION,
+  ASSETS_FASTLY_PROVIDER_PROOF_VERSION,
+  ASSETS_FASTLY_PACKAGE_OUT_PARITY_PROOF_VERSION,
+  ASSETS_FASTLY_PACKAGE_OUT_PARITY_PROOF_ARTIFACT,
+  ASSETS_PACKAGE_OWNED_LOWERING_PROOF_VERSION,
+  ASSETS_PACKAGE_OWNED_LOWERING_PROOF_ARTIFACT,
+  ASSETS_PACKAGE_OUT_DISCOVERY_PROOF_VERSION,
+  ASSETS_PACKAGE_OUT_DISCOVERY_PROOF_ARTIFACT,
+  ASSETS_COMPILED_WASM_SIDECAR_PLAN_VERSION,
+  ASSETS_COMPILED_WASM_SIDECAR_PLAN_ARTIFACT,
+  ASSETS_SIDECAR_COMPILE_LINK_PROOF_VERSION,
+  ASSETS_SIDECAR_COMPILE_LINK_PROOF_ARTIFACT,
+  ASSETS_CONTRACT_ID,
+  ASSETS_ALLOWED_METHODS,
+  ASSETS_ALLOWED_MODES,
+  ASSETS_INITIAL_PROVIDER_TARGETS,
+  ASSETS_PAYLOAD_MODE_STATUSES,
+  ASSETS_SUPPORTED_BODY_KINDS,
+  ASSETS_LOWERING_PLAN_ONLY_BODY_KINDS,
+  ASSETS_RESERVED_BODY_KINDS,
+  ASSETS_UNSUPPORTED_BODY_KINDS,
+  ASSETS_DIAGNOSTIC_CODES,
+  ASSETS_PAYLOAD_MODE_CLASSIFICATION,
+  ASSETS_LOOKUP_RESULT_SHAPE,
+  ASSETS_PROVIDER_CONFIG_SHAPE,
+  ASSETS_RESPONSE_POLICY,
+  ASSETS_KEY_POLICY,
+  ASSETS_CACHE_POLICY,
+  ASSETS_PROTOCOL_POLICY,
+  assetsPayloadModeClassification,
+  assetsPayloadMode,
+  assetsProtocolExtension
+};

package/src/config/provider-resolution.js

@@ -0,0 +1,54 @@
+'use strict';
+
+const {
+  plainObject,
+  hasOwn,
+  platformFastly,
+  collectRefs,
+  collectSymbolicRefs,
+  isSymbolicRef,
+  refKind,
+  refKey
+} = require('./symbolic-refs.js');
+
+const CONFIG_PROVIDER_RESOLUTION_PHASE = '13D';
+const CONFIG_PROVIDER_CONTRACT_VERSION = 'pulsewasm.config-provider-contract.v1';
+const RUNTIME_PROVIDER_RESOLUTION_VERSION = 'pulsewasm.runtime-provider-resolution.v1';
+const FASTLY_PROVIDER_MAP_VERSION = 'pulsewasm.fastly-provider-map.v1';
+const CONFIG_PROVIDER_SMOKE_VERSION = 'pulsewasm.config-provider-smoke.v1';
+
+const CONFIG_PROVIDER_SURFACE = Object.freeze({
+  config: 'get(name): string | undefined',
+  secret: 'get(name): string | undefined'
+});
+const RUNTIME_CONFIG_PROVIDER_SURFACE = CONFIG_PROVIDER_SURFACE;
+
+const CONFIG_PROVIDER_POLICY = Object.freeze({
+  runtimeResolved: true,
+  secretsCompiledIntoBinary: false,
+  fastlyStoresAreProviders: true,
+  localProvidersSupported: true,
+  envHelperRequired: false
+});
+
+module.exports = {
+  CONFIG_PROVIDER_RESOLUTION_PHASE,
+  CONFIG_PROVIDER_CONTRACT_VERSION,
+  RUNTIME_PROVIDER_RESOLUTION_VERSION,
+  FASTLY_PROVIDER_MAP_VERSION,
+  CONFIG_PROVIDER_SMOKE_VERSION,
+  CONTRACT_VERSION: CONFIG_PROVIDER_CONTRACT_VERSION,
+  RESOLUTION_VERSION: RUNTIME_PROVIDER_RESOLUTION_VERSION,
+  SMOKE_VERSION: CONFIG_PROVIDER_SMOKE_VERSION,
+  CONFIG_PROVIDER_SURFACE,
+  RUNTIME_CONFIG_PROVIDER_SURFACE,
+  CONFIG_PROVIDER_POLICY,
+  plainObject,
+  hasOwn,
+  platformFastly,
+  collectRefs,
+  collectSymbolicRefs,
+  isSymbolicRef,
+  refKind,
+  refKey
+};

package/src/config/runtime-provider-kv.js

@@ -0,0 +1,73 @@
+'use strict';
+
+const {
+  CONFIG_AUTHORING_SHAPE_VERSION,
+  PLATFORM_STORE_MAP_VERSION
+} = require('./symbolic-refs.js');
+
+const RUNTIME_PROVIDER_KV_PHASE = '14B';
+const KV_ADAPTER_INTEGRATION_PHASE = '14C';
+const KV_ADAPTER_PHASE = KV_ADAPTER_INTEGRATION_PHASE;
+
+const RUNTIME_PROVIDER_CONTRACT_VERSION = 'pulsewasm.runtime-provider-contract.v1';
+const RUNTIME_PROVIDER_KV_RESOLUTION_VERSION = 'pulsewasm.runtime-provider-kv-resolution.v1';
+const KV_CAPABILITY_CONTRACT_VERSION = 'pulsewasm.kv-capability-contract.v1';
+const KV_PROVIDER_MAP_VERSION = 'pulsewasm.kv-provider-map.v1';
+const RUNTIME_PROVIDER_API_SURFACE_VERSION = 'pulsewasm.runtime-provider-api-surface.v1';
+const RUNTIME_PROVIDER_SMOKE_VERSION = 'pulsewasm.runtime-provider-smoke.v1';
+const KV_ADAPTER_INTEGRATION_VERSION = 'pulsewasm.kv-adapter-integration.v1';
+const KV_PROVIDER_RUNTIME_MAP_VERSION = 'pulsewasm.kv-provider-runtime-map.v1';
+
+const RUNTIME_PROVIDER_AUTHORING_SHAPE = 'runtime.provider';
+const RUNTIME_PROVIDER_DEFAULT_POLICY = 'one provider per profile';
+const RUNTIME_PROVIDER_KINDS = Object.freeze(['fastly', 'local', 'node']);
+
+const KV_CAPABILITY_POLICY = Object.freeze({
+  handlerSurface: 'ctx.kv(name)',
+  compiledHandlerLowering: 'reserved',
+  hostEffectExecution: 'reserved',
+  localAdapterProof: 'phase14C',
+  reservedExecution: 'reserved-effect'
+});
+
+const KV_HANDLER_SURFACE = KV_CAPABILITY_POLICY.handlerSurface;
+const KV_COMPILED_HANDLER_LOWERING = KV_CAPABILITY_POLICY.compiledHandlerLowering;
+const KV_HOST_EFFECT_EXECUTION = KV_CAPABILITY_POLICY.hostEffectExecution;
+const KV_LOCAL_ADAPTER_PROOF = KV_CAPABILITY_POLICY.localAdapterProof;
+const KV_RESERVED_EXECUTION = KV_CAPABILITY_POLICY.reservedExecution;
+
+const RUNTIME_PROVIDER_API_SURFACES = Object.freeze([
+  Object.freeze({ name: 'runtime.provider', scope: 'config', status: 'canonical' }),
+  Object.freeze({ name: 'ctx.kv(name)', scope: 'handler', status: 'reserved for compiled-handler lowering; available in local adapter proof' })
+]);
+
+function runtimeProviderApiSurfaces() {
+  return RUNTIME_PROVIDER_API_SURFACES.map((surface) => ({ ...surface }));
+}
+
+module.exports = {
+  RUNTIME_PROVIDER_KV_PHASE,
+  KV_ADAPTER_PHASE,
+  KV_ADAPTER_INTEGRATION_PHASE,
+  RUNTIME_PROVIDER_CONTRACT_VERSION,
+  RUNTIME_PROVIDER_KV_RESOLUTION_VERSION,
+  CONFIG_AUTHORING_SHAPE_VERSION,
+  PLATFORM_STORE_MAP_VERSION,
+  KV_CAPABILITY_CONTRACT_VERSION,
+  KV_PROVIDER_MAP_VERSION,
+  RUNTIME_PROVIDER_API_SURFACE_VERSION,
+  RUNTIME_PROVIDER_SMOKE_VERSION,
+  KV_ADAPTER_INTEGRATION_VERSION,
+  KV_PROVIDER_RUNTIME_MAP_VERSION,
+  RUNTIME_PROVIDER_AUTHORING_SHAPE,
+  RUNTIME_PROVIDER_DEFAULT_POLICY,
+  RUNTIME_PROVIDER_KINDS,
+  KV_HANDLER_SURFACE,
+  KV_COMPILED_HANDLER_LOWERING,
+  KV_HOST_EFFECT_EXECUTION,
+  KV_LOCAL_ADAPTER_PROOF,
+  KV_RESERVED_EXECUTION,
+  KV_CAPABILITY_POLICY,
+  RUNTIME_PROVIDER_API_SURFACES,
+  runtimeProviderApiSurfaces
+};