@pulse-compute/wasm-contracts 1.0.0-beta.1 → 1.0.0-beta.3

package/README.md

@@ -6,9 +6,10 @@
 > **Install directly:** Provider toolchain authors may install it for the versioned bootstrap contract; application projects receive it transitively.<br>
 > **Supported entry points:** `@pulse-compute/wasm-contracts/provider/toolchain`<br>
 > **Stability:** The provider toolchain contract is versioned and supported for the Beta; other protocol and proof interfaces remain internal.<br>
-> **Canonical documentation:** [Package guide](https://pulsecompute.io/v1.0.0-beta.1/packages/implementation-packages/)
+> **npm:** [`@pulse-compute/wasm-contracts`](https://www.npmjs.com/package/@pulse-compute/wasm-contracts)<br>
+> **Canonical documentation:** [Package guide](https://pulsecompute.io/v1.0.0-beta.3/packages/implementation-packages/)
 >
-> This release-status block is generated from the synchronized `Pulse 1.0.0-beta.1` package policy.
+> This release-status block is generated from the synchronized `Pulse 1.0.0-beta.3` package policy.
 <!-- pulse-package-status:end -->
 
 This package owns stable data contracts shared by the compiler, runtime, and providers.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pulse-compute/wasm-contracts",
-  "version": "1.0.0-beta.1",
+  "version": "1.0.0-beta.3",
   "license": "Apache-2.0",
   "engines": {
     "node": "^22.14.0 || ^24.0.0"
@@ -109,7 +109,8 @@
     "./project/javascript-application": "./src/project/javascript-application.js",
     "./project/target-support-evidence": "./src/project/target-support-evidence.js",
     "./project/javascript-core-capabilities": "./src/project/javascript-core-capabilities.js",
-    "./project/native-optimization": "./src/project/native-optimization.js"
+    "./project/native-optimization": "./src/project/native-optimization.js",
+    "./s3/contracts": "./src/s3/contracts.js"
   },
   "publishConfig": {
     "access": "public"
@@ -125,7 +126,7 @@
     "url": "git+https://github.com/pulse-compute/pulse.git",
     "directory": "wasm/packages/contracts"
   },
-  "homepage": "https://pulsecompute.io/v1.0.0-beta.1/packages/implementation-packages/",
+  "homepage": "https://pulsecompute.io/v1.0.0-beta.3/packages/implementation-packages/",
   "bugs": {
     "url": "https://github.com/pulse-compute/pulse/issues"
   }

package/src/crypto/contracts.js

@@ -23,8 +23,18 @@ const CRYPTO_VERIFICATION_STATUSES = Object.freeze([
   'realization-failure'
 ]);
 
-const CRYPTO_ALGORITHMS = Object.freeze(['HS256', 'ES256']);
+const CRYPTO_ALGORITHMS = Object.freeze(['HS256', 'ES256', 'SHA-256', 'HMAC-SHA256']);
 const CRYPTO_REALIZATIONS = Object.freeze([
+  ...['SHA-256', 'HMAC-SHA256'].map((algorithm) => Object.freeze({
+    id: 'runtime-builtin', kind: 'runtime-builtin', algorithm, targets: Object.freeze(['javascript']),
+    implementation: algorithm === 'SHA-256' ? 'webcrypto.subtle.sha-256-bytes.v1' : 'webcrypto.subtle.hmac-sha-256-bytes.v1'
+  })),
+  ...['SHA-256', 'HMAC-SHA256'].map((algorithm) => Object.freeze({
+    id: 'guest-source:pulse-hmac-as', kind: 'guest-source', backend: 'pulse-hmac-as',
+    implementation: CRYPTO_GUEST_SOURCE_IMPLEMENTATION, algorithm, targets: Object.freeze(['native']),
+    source: Object.freeze({ package: '@pulse-compute/crypto', export: './pulsewasm-native',
+      contractVersion: 'pulse.crypto-guest-source.v1', contribution: 'pulse-hmac-as' })
+  })),
   Object.freeze({
     id: 'runtime-builtin',
     kind: 'runtime-builtin',
@@ -586,7 +596,7 @@ function planCryptoRealizations(input = {}) {
       algorithm: configured.algorithm,
       primitive: configured.algorithm === 'ES256'
         ? Object.freeze({ kind: 'ecdsa', curve: 'P-256', hash: 'SHA-256' })
-        : Object.freeze({ kind: 'hmac', hash: 'SHA-256' }),
+        : Object.freeze({ kind: configured.algorithm === 'SHA-256' ? 'digest' : 'hmac', hash: 'SHA-256' }),
       requestedBy: requirement ? requirement.requestedBy : Object.freeze([]),
       semanticOwner: requirements.semanticOwner,
       realization,

package/src/definitions/router-api.js

@@ -34,6 +34,9 @@ const ROUTER_API_DEFINITIONS = Object.freeze([
   createHttpRouteDefinition('get', 'GET'),
   createHttpRouteDefinition('head', 'HEAD'),
   createHttpRouteDefinition('post', 'POST'),
+  createHttpRouteDefinition('put', 'PUT'),
+  createHttpRouteDefinition('patch', 'PATCH'),
+  createHttpRouteDefinition('delete', 'DELETE'),
   Object.freeze({
     name: 'mount',
     kind: 'mount',

package/src/diagnostics.js

@@ -2,7 +2,7 @@
 
 const path = require('node:path');
 
-const PACKAGE_VERSION = 'pulsewasm-route-extractor@1.0.0-beta.1';
+const PACKAGE_VERSION = 'pulsewasm-route-extractor@1.0.0-beta.3';
 const DIAGNOSTICS_VERSION = 'pulsewasm.diagnostics.v1';
 
 function stableFileName(fileName, cwd) {

package/src/handler/ctx-contract.js

@@ -8,7 +8,7 @@ const CTX_SURFACE_IDS = Object.freeze([
   'ctx.param','ctx.req.method','ctx.req.url','ctx.req.path','ctx.req.header','ctx.req.headers',
   'ctx.state.get','ctx.state.set','ctx.json','ctx.text','ctx.response','ctx.req.text','ctx.req.json.schema',
   'ctx.req.json.generic','ctx.fetch.projected','ctx.fetch.opaque-return','ctx.config.get','ctx.secret.get',
-  'ctx.kv.get','ctx.kv.put','ctx.emit','package.operation'
+  'ctx.kv.get','ctx.kv.put','ctx.kv.getVersioned','ctx.kv.insertIfAbsent','ctx.kv.compareAndSwap','ctx.emit','package.operation'
 ]);
 const surfaceById = new Map(HANDLER_SURFACE_DEFINITIONS.map((entry) => [entry.id, entry]));
 const CTX_SURFACES = Object.freeze(CTX_SURFACE_IDS.map((id) => {

package/src/handler/lifecycle-authoring-alignment.js

@@ -1,5 +1,7 @@
 'use strict';
 
+const { ROUTER_API_DEFINITIONS } = require('../definitions/router-api.js');
+
 const LIFECYCLE_AUTHORING_ALIGNMENT_VERSION = 'pulsewasm.lifecycle-authoring-alignment.v1';
 const LIFECYCLE_AUTHORING_ALIGNMENT_PHASE = '52';
 const LIFECYCLE_AUTHORING_ALIGNMENT_ARTIFACT = 'lifecycle-authoring-alignment.json';
@@ -19,7 +21,9 @@ const LIFECYCLE_AUTHORING_ALIGNMENT_POLICY = Object.freeze({
   purpose: 'make the beta lowerable authoring subset explicit and fail fast when route methods and package-owned lowerable effect methods diverge',
   productionCompletenessRequired: false,
   simpleUserFunctionLoweringIntentional: true,
-  routerMethods: Object.freeze(['GET', 'HEAD', 'POST']),
+  routerMethods: Object.freeze(ROUTER_API_DEFINITIONS
+    .filter((definition) => definition.kind === 'route')
+    .map((definition) => definition.method)),
   packageEffectAlignment: Object.freeze({
     assets: Object.freeze({
       rule: 'assets.lookup method must match the owning router route method when route metadata is available',

package/src/handler/surface-contract.js

@@ -348,6 +348,13 @@ const HANDLER_SURFACE_DEFINITIONS = Object.freeze([
     nativeBehavior: 'emit-kv-put-effect',
     status: 'supported'
   }),
+  ...['getVersioned', 'insertIfAbsent', 'compareAndSwap'].map((method) => surface({
+    id: `ctx.kv.${method}`, class: 'effect', canonicalOperation: `effect.kv.${method}`,
+    publicForms: [`ctx.kv<T>('namespace').${method}(${method === 'getVersioned' ? 'key' : method === 'compareAndSwap' ? 'key, generation, value' : 'key, value'})`],
+    awaitPolicy: 'required-when-consumed', validPositions: ['await-expression', 'parallel-member'],
+    targetSupport: { javascript: true, native: true }, nativeBehavior: 'emit-conditional-kv-effect-and-continuation',
+    redaction: 'key-generation-value-required', status: 'supported'
+  })),
   surface({
     id: 'ctx.emit',
     class: 'effect',

package/src/provider/canonical-provider.js

@@ -13,6 +13,7 @@ const CANONICAL_PROVIDER_CAPABILITIES = Object.freeze([
   'secret.get',
   'kv.get',
   'kv.put',
+  'kv.getVersioned', 'kv.insertIfAbsent', 'kv.compareAndSwap',
   'event.ingress',
   'event.emit',
   'assets.lookup',
@@ -21,6 +22,9 @@ const CANONICAL_PROVIDER_CAPABILITIES = Object.freeze([
   'grip.publish',
   'grip.broadcast',
   'jwt.verify',
+  's3.head',
+  's3.getText',
+  's3.putText',
   'opaque.pass-through'
 ]);
 

package/src/provider/toolchain.js

@@ -51,6 +51,7 @@ const DRIVER_FIELDS = Object.freeze([
   'events',
   'targets',
   'execute',
+  'prepareNativeExecution',
   'createLoweringPlan',
   'inspectRealization',
   'writeTarget',
@@ -366,6 +367,9 @@ function defineProviderDriver(input, expected = {}) {
   if ((targets.native && (targets.native.commands.test || targets.native.commands.dev)) && typeof input.execute !== 'function') {
     throw new TypeError(`Pulse provider driver ${id} is missing execute().`);
   }
+  if (input.prepareNativeExecution !== undefined && typeof input.prepareNativeExecution !== 'function') {
+    throw new TypeError(`Pulse provider driver ${id} prepareNativeExecution must be a function.`);
+  }
   const descriptor = input.descriptor === undefined ? undefined : normalizeDescriptor(input.descriptor);
   if (descriptor && descriptor.id !== id) throw new TypeError(`Pulse provider driver ${id} descriptor identity does not match.`);
   const javascript = normalizeJavascriptDriver(input.javascript, targets.javascript);
@@ -392,6 +396,7 @@ function defineProviderDriver(input, expected = {}) {
     events,
     targets,
     execute: input.execute,
+    prepareNativeExecution: input.prepareNativeExecution,
     createLoweringPlan: input.createLoweringPlan,
     inspectRealization: input.inspectRealization,
     writeTarget: input.writeTarget,
@@ -622,7 +627,7 @@ function createProviderTargetInvocation(input) {
     throw new TypeError(`Pulse provider target invocation version must be ${PROVIDER_TARGET_INVOCATION_VERSION}.`);
   }
   const action = nonEmpty(input.action, 'invocation action');
-  if (!['inspect-native', 'write-native', 'write-javascript'].includes(action)) {
+  if (!['inspect-native', 'write-native', 'write-javascript', 'execute-native'].includes(action)) {
     throw new TypeError(`Pulse provider target invocation action ${action} is unsupported.`);
   }
   const target = action.endsWith('javascript') ? 'javascript' : 'native';

package/src/s3/contracts.js

@@ -0,0 +1,12 @@
+'use strict';
+
+const S3_CONTRACT_ID = 'pulse.s3';
+const S3_PACKAGE = '@pulse-compute/s3';
+const S3_LOWERING_PLAN_VERSION = 'pulse.s3-lowering-plan.v1';
+const S3_LIMITS = Object.freeze({ keyBytes: 1024, textBytes: 32768, metadataBytes: 1024, headerBytes: 16384, envelopeBytes: 262144 });
+const S3_OPERATIONS = Object.freeze(Object.fromEntries(['head', 'getText', 'putText'].map((name) => [name, Object.freeze({
+  kind: `s3.${name}`, capability: `s3.${name}`, result: name === 'head' ? 's3-head-result' : name === 'getText' ? 's3-get-text-result' : 's3-put-text-result'
+})])));
+const S3_PROVIDER_REQUIREMENTS = Object.freeze(['s3.head', 's3.getText', 's3.putText', 'secret.get', 'time.wall-clock']);
+const S3_CRYPTO_ALGORITHMS = Object.freeze(['SHA-256', 'HMAC-SHA256']);
+module.exports = Object.freeze({ S3_CONTRACT_ID, S3_PACKAGE, S3_LOWERING_PLAN_VERSION, S3_LIMITS, S3_OPERATIONS, S3_PROVIDER_REQUIREMENTS, S3_CRYPTO_ALGORITHMS });