@run402/runtime-kernel 0.1.3 → 0.1.5

package/dist/errors.js

@@ -1,3 +1,15 @@
+export class RuntimeKernelTypedError extends Error {
+    code;
+    status;
+    details;
+    constructor(code, status, message, details = {}) {
+        super(message);
+        this.code = code;
+        this.status = status;
+        this.name = "RuntimeKernelTypedError";
+        this.details = details;
+    }
+}
 export class UnsupportedCapabilityError extends Error {
     code = "unsupported_capability";
     status = 422;
@@ -15,4 +27,87 @@ export function unsupportedCapabilityEnvelope(error) {
         capability: error.details.capability,
     };
 }
+export class MissingRequiredSecretError extends RuntimeKernelTypedError {
+    constructor(secretName, functionName) {
+        super("missing_required_secret", 422, `Missing required secret: ${secretName}`, {
+            secret_name: secretName,
+            ...(functionName ? { function_name: functionName } : {}),
+        });
+        this.name = "MissingRequiredSecretError";
+    }
+}
+export class FunctionBundleValidationError extends RuntimeKernelTypedError {
+    constructor(code, message, details = {}) {
+        super(code, 422, message, details);
+        this.name = "FunctionBundleValidationError";
+    }
+}
+export class AstroSsrUnsupportedFeatureError extends RuntimeKernelTypedError {
+    constructor(feature, message = `Unsupported Astro SSR feature: ${feature}`, details = {}) {
+        super("astro_ssr_unsupported_feature", 422, message, {
+            feature,
+            ...details,
+        });
+        this.name = "AstroSsrUnsupportedFeatureError";
+    }
+}
+export class DependencyInstallRejectedError extends RuntimeKernelTypedError {
+    constructor(message, details = {}) {
+        super("dependency_install_rejected", 422, message, details);
+        this.name = "DependencyInstallRejectedError";
+    }
+}
+export class DependencyInstallFailedError extends RuntimeKernelTypedError {
+    constructor(message, details = {}) {
+        super("dependency_install_failed", 422, message, details);
+        this.name = "DependencyInstallFailedError";
+    }
+}
+export class DynamicRuntimeUnavailableError extends RuntimeKernelTypedError {
+    constructor(message = "Run402 Core dynamic functions runtime is not configured.", details = {}) {
+        super("dynamic_runtime_unavailable", 503, message, details);
+        this.name = "DynamicRuntimeUnavailableError";
+    }
+}
+export class DynamicRuntimeTimeoutError extends RuntimeKernelTypedError {
+    constructor(message = "Run402 Core dynamic runtime invocation timed out.", details = {}) {
+        super("dynamic_runtime_timeout", 504, message, details);
+        this.name = "DynamicRuntimeTimeoutError";
+    }
+}
+export class DynamicRuntimeBusyError extends RuntimeKernelTypedError {
+    constructor(message = "Run402 Core dynamic runtime is busy.", details = {}) {
+        super("dynamic_runtime_busy", 503, message, details);
+        this.name = "DynamicRuntimeBusyError";
+    }
+}
+export class RequestBodyTooLargeError extends RuntimeKernelTypedError {
+    constructor(limitBytes) {
+        super("request_body_too_large", 413, `Request body exceeds ${limitBytes} bytes.`, {
+            limit_bytes: limitBytes,
+        });
+        this.name = "RequestBodyTooLargeError";
+    }
+}
+export class ResponseBodyTooLargeError extends RuntimeKernelTypedError {
+    constructor(limitBytes) {
+        super("response_body_too_large", 502, `Function response body exceeds ${limitBytes} bytes.`, {
+            limit_bytes: limitBytes,
+        });
+        this.name = "ResponseBodyTooLargeError";
+    }
+}
+export class LocalExecutorError extends RuntimeKernelTypedError {
+    constructor(message, details = {}) {
+        super("local_executor_failed", 500, message, details);
+        this.name = "LocalExecutorError";
+    }
+}
+export function runtimeKernelErrorEnvelope(error) {
+    return {
+        error: error.code,
+        message: error.message,
+        ...(Object.keys(error.details).length > 0 ? { details: error.details } : {}),
+    };
+}
 //# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAKA,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC1C,IAAI,GAAG,wBAAwB,CAAC;IAChC,MAAM,GAAG,GAAG,CAAC;IACb,OAAO,CAA+B;IAE/C,YAAY,UAAkB,EAAE,OAAO,GAAG,mCAAmC,UAAU,EAAE;QACvF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,EAAE,UAAU,EAAE,CAAC;IAChC,CAAC;CACF;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAiC;IAK7E,OAAO;QACL,KAAK,EAAE,wBAAwB;QAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;KACrC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAG3B;IAAuB;IAFnC,OAAO,CAAiC;IAEjD,YAAqB,IAAY,EAAW,MAAc,EAAE,OAAe,EAAE,UAA0C,EAAE;QACvH,KAAK,CAAC,OAAO,CAAC,CAAC;QADI,SAAI,GAAJ,IAAI,CAAQ;QAAW,WAAM,GAAN,MAAM,CAAQ;QAExD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC1C,IAAI,GAAG,wBAAwB,CAAC;IAChC,MAAM,GAAG,GAAG,CAAC;IACb,OAAO,CAA+B;IAE/C,YAAY,UAAkB,EAAE,OAAO,GAAG,mCAAmC,UAAU,EAAE;QACvF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,EAAE,UAAU,EAAE,CAAC;IAChC,CAAC;CACF;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAiC;IAK7E,OAAO;QACL,KAAK,EAAE,wBAAwB;QAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,0BAA2B,SAAQ,uBAAuB;IACrE,YAAY,UAAkB,EAAE,YAAqB;QACnD,KAAK,CAAC,yBAAyB,EAAE,GAAG,EAAE,4BAA4B,UAAU,EAAE,EAAE;YAC9E,WAAW,EAAE,UAAU;YACvB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED,MAAM,OAAO,6BAA8B,SAAQ,uBAAuB;IACxE,YAAY,IAAY,EAAE,OAAe,EAAE,UAA0C,EAAE;QACrF,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,OAAO,+BAAgC,SAAQ,uBAAuB;IAC1E,YAAY,OAAe,EAAE,OAAO,GAAG,kCAAkC,OAAO,EAAE,EAAE,UAA0C,EAAE;QAC9H,KAAK,CAAC,+BAA+B,EAAE,GAAG,EAAE,OAAO,EAAE;YACnD,OAAO;YACP,GAAG,OAAO;SACX,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAED,MAAM,OAAO,8BAA+B,SAAQ,uBAAuB;IACzE,YAAY,OAAe,EAAE,UAA0C,EAAE;QACvE,KAAK,CAAC,6BAA6B,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AAED,MAAM,OAAO,4BAA6B,SAAQ,uBAAuB;IACvE,YAAY,OAAe,EAAE,UAA0C,EAAE;QACvE,KAAK,CAAC,2BAA2B,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,OAAO,8BAA+B,SAAQ,uBAAuB;IACzE,YAAY,OAAO,GAAG,0DAA0D,EAAE,UAA0C,EAAE;QAC5H,KAAK,CAAC,6BAA6B,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AAED,MAAM,OAAO,0BAA2B,SAAQ,uBAAuB;IACrE,YAAY,OAAO,GAAG,mDAAmD,EAAE,UAA0C,EAAE;QACrH,KAAK,CAAC,yBAAyB,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,uBAAuB;IAClE,YAAY,OAAO,GAAG,sCAAsC,EAAE,UAA0C,EAAE;QACxG,KAAK,CAAC,sBAAsB,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,MAAM,OAAO,wBAAyB,SAAQ,uBAAuB;IACnE,YAAY,UAAkB;QAC5B,KAAK,CAAC,wBAAwB,EAAE,GAAG,EAAE,wBAAwB,UAAU,SAAS,EAAE;YAChF,WAAW,EAAE,UAAU;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,MAAM,OAAO,yBAA0B,SAAQ,uBAAuB;IACpE,YAAY,UAAkB;QAC5B,KAAK,CAAC,yBAAyB,EAAE,GAAG,EAAE,kCAAkC,UAAU,SAAS,EAAE;YAC3F,WAAW,EAAE,UAAU;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,uBAAuB;IAC7D,YAAY,OAAe,EAAE,UAA0C,EAAE;QACvE,KAAK,CAAC,uBAAuB,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,UAAU,0BAA0B,CAAC,KAA8B;IAKvE,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,IAAI;QACjB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7E,CAAC;AACJ,CAAC"}

package/dist/functions-runtime.d.ts

@@ -0,0 +1,192 @@
+import type { RoutedHttpRequestV1, RoutedHttpResponseV1 } from "@run402/functions";
+import type { ContentRefHex, FunctionSpec, HttpMethod, PortableFunctionEntry, RoleGateSpec, RouteEntry } from "@run402/release";
+export declare const CORE_FUNCTION_RUNTIME_MATURITY: "developer_preview";
+export declare const CORE_FUNCTION_SECURITY_PROFILE: "trusted_local_code";
+export declare const CORE_FUNCTION_DEFAULT_EXECUTOR: "docker_compose_worker";
+export declare const CORE_FUNCTION_DEPENDENCY_MODE: "prebundled_no_external_deps";
+export declare const CORE_ASTRO_SSR_OUTPUT_CONTRACT_VERSION: "astro.ssr.v1";
+export declare const CORE_ASTRO_SSR_FALLBACK_PATTERN: "/*";
+export declare const CORE_FUNCTION_RESOURCE_DEFAULTS: {
+    readonly requestBodyLimitBytes: number;
+    readonly responseBodyLimitBytes: number;
+    readonly invocationTimeoutMs: 10000;
+    readonly startupTimeoutMs: 5000;
+    readonly dependencyInstallTimeoutMs: 120000;
+    readonly maxConcurrentInvocationsPerProject: 4;
+    readonly maxPendingInvocationQueue: 16;
+    readonly stdoutStderrLimitBytes: number;
+    readonly maxLogLineBytes: number;
+    readonly localLogRetentionBytes: number;
+    readonly localLogRetentionMs: number;
+    readonly workerMemoryLimitBytes: number;
+    readonly tempDirLimitBytes: number;
+    readonly nodeModulesLimitBytes: number;
+};
+export declare const CORE_FUNCTION_FILESYSTEM_LAYOUT: {
+    readonly bundleStagingDir: "functions/staging";
+    readonly activeBundleDir: "functions/active";
+    readonly dependencyCacheDir: "functions/deps";
+    readonly tempDir: "functions/tmp";
+    readonly logDir: "functions/logs";
+};
+export declare const CORE_FUNCTION_KNOWN_EXCLUSIONS: readonly ["hostile_code_isolation", "public_multi_tenant_hosting", "cloud_grade_sandbox", "external_npm_dependencies", "lockfile_npm_install", "lifecycle_scripts", "native_postinstall_builds", "file_link_workspace_dependencies", "git_or_tarball_dependencies", "private_registries", "websockets", "streaming_to_client", "scheduled_functions", "background_jobs", "managed_jobs", "managed_kms", "cloudwatch_logs", "cloud_quota_enforcement", "cloud_billing", "cloud_abuse_controls"];
+export declare const CORE_ASTRO_SSR_KNOWN_EXCLUSIONS: readonly ["full_astro_support", "arbitrary_astro_adapters", "streaming_to_client", "websockets", "http_upgrade", "isr_cache", "edge_runtime", "cloud_globals", "cloud_routing_hooks", "cloudwatch_logs", "cloud_quota_enforcement", "cloud_billing", "cloud_abuse_controls"];
+export interface CoreFunctionIsolationProfile {
+    maturity: typeof CORE_FUNCTION_RUNTIME_MATURITY;
+    security_profile: typeof CORE_FUNCTION_SECURITY_PROFILE;
+    hostile_code_isolation: false;
+    default_executor: typeof CORE_FUNCTION_DEFAULT_EXECUTOR;
+    app_code_runs_in_gateway_process: false;
+    environment_policy: "explicit_allowlist";
+    host_environment_inherited: false;
+    gateway_secrets_visible_by_default: false;
+    filesystem_policy: "project_worker_scoped";
+    network_policy: "developer_preview_not_hardened";
+}
+export declare const CORE_FUNCTION_ISOLATION_PROFILE: CoreFunctionIsolationProfile;
+export interface CoreFunctionDependencyPolicy {
+    mode: typeof CORE_FUNCTION_DEPENDENCY_MODE;
+    npm_install_supported: false;
+    platform_packages: ["@run402/functions"];
+    rejected_dependency_spec_kinds: readonly string[];
+    future_lockfile_install_command: readonly string[];
+}
+export declare const CORE_FUNCTION_DEPENDENCY_POLICY: CoreFunctionDependencyPolicy;
+export interface CoreFunctionRuntimeCapability {
+    capability: "core-functions";
+    status: "supported";
+    maturity: typeof CORE_FUNCTION_RUNTIME_MATURITY;
+    security_profile: typeof CORE_FUNCTION_SECURITY_PROFILE;
+    hostile_code_isolation: false;
+    default_executor: typeof CORE_FUNCTION_DEFAULT_EXECUTOR;
+    dependency_policy: CoreFunctionDependencyPolicy;
+    resource_defaults: typeof CORE_FUNCTION_RESOURCE_DEFAULTS;
+    filesystem_layout: typeof CORE_FUNCTION_FILESYSTEM_LAYOUT;
+    supported_output: {
+        runtime: "node22";
+        artifact: "prebundled_source_ref";
+        envelope: "run402.routed_http.v1";
+    };
+    known_exclusions: Array<(typeof CORE_FUNCTION_KNOWN_EXCLUSIONS)[number]>;
+}
+export interface CoreAstroSsrRuntimeCapability {
+    capability: "core-astro-ssr";
+    status: "supported";
+    maturity: typeof CORE_FUNCTION_RUNTIME_MATURITY;
+    output_contract_version: typeof CORE_ASTRO_SSR_OUTPUT_CONTRACT_VERSION;
+    supported_output: {
+        runtime: "node22";
+        module_format: "esm";
+        request: "web_request";
+        response: "web_response_buffered";
+        route: "fallback";
+    };
+    fallback: {
+        pattern: typeof CORE_ASTRO_SSR_FALLBACK_PATTERN;
+        precedence: readonly [
+            "explicit_static_alias",
+            "public_static_asset_path",
+            "prerendered_static_html",
+            "dynamic_function_route",
+            "astro_ssr_fallback",
+            "not_found"
+        ];
+    };
+    inherits_from_functions_runtime: true;
+    resource_defaults: typeof CORE_FUNCTION_RESOURCE_DEFAULTS;
+    isolation_profile: CoreFunctionIsolationProfile;
+    known_exclusions: Array<(typeof CORE_ASTRO_SSR_KNOWN_EXCLUSIONS)[number]>;
+}
+export interface CoreFunctionBundleMetadata {
+    name: string;
+    runtime: "node22";
+    entrypoint: string;
+    source: ContentRefHex;
+    bundle_sha256: string;
+    bundle_size_bytes: number;
+    dependency_mode: typeof CORE_FUNCTION_DEPENDENCY_MODE;
+    dependency_lock_digest: null;
+    deps: [];
+    required_secrets: string[];
+    timeout_ms: number;
+    memory_bytes: number;
+    require_auth: boolean;
+    require_role: RoleGateSpec | null;
+    class: "standard" | "ssr";
+    capabilities: string[];
+}
+export interface CoreDynamicFunctionRoute {
+    pattern: string;
+    kind: RouteEntry["kind"];
+    prefix: string | null;
+    methods: HttpMethod[] | null;
+    function_name: string;
+}
+export interface CoreFunctionApplyEffects {
+    bundles: CoreFunctionBundleMetadata[];
+    dynamic_routes: CoreDynamicFunctionRoute[];
+    astro_ssr_fallback: {
+        function_name: string;
+        output_contract_version: typeof CORE_ASTRO_SSR_OUTPUT_CONTRACT_VERSION;
+        pattern: typeof CORE_ASTRO_SSR_FALLBACK_PATTERN;
+    } | null;
+    required_secrets: string[];
+    dependency_mode: typeof CORE_FUNCTION_DEPENDENCY_MODE;
+    noop: boolean;
+}
+export interface CoreFunctionInvocationInput {
+    projectId: string;
+    releaseId: string | null;
+    functionName: string;
+    invocationKind: "routed_http" | "direct";
+    requestId: string;
+    actor?: CoreFunctionActorContext | null;
+    request?: RoutedHttpRequestV1;
+}
+export interface CoreFunctionActorContext {
+    id: string;
+    role: string | null;
+}
+export interface CoreFunctionInvocationResult {
+    requestId: string;
+    response: RoutedHttpResponseV1;
+}
+export type CoreFunctionInvocationStatus = "succeeded" | "failed";
+export interface CoreFunctionInvocationRecord {
+    request_id: string;
+    project_id: string;
+    release_id: string | null;
+    function_name: string;
+    invocation_kind: CoreFunctionInvocationInput["invocationKind"];
+    status: CoreFunctionInvocationStatus;
+    started_at: string;
+    finished_at: string;
+    duration_ms: number;
+    error_code: string | null;
+}
+export interface CoreFunctionLogEntry {
+    timestamp: string;
+    request_id: string;
+    project_id: string;
+    release_id: string | null;
+    function_name: string;
+    stream: "platform" | "stdout" | "stderr";
+    level: "debug" | "info" | "warn" | "error";
+    message: string;
+    redacted: boolean;
+}
+export interface CoreFunctionSecretMetadata {
+    project_id: string;
+    name: string;
+    scope: "project" | "release" | "function";
+    function_name: string | null;
+    created_at: string;
+    updated_at: string;
+}
+export declare function coreFunctionRuntimeCapability(): CoreFunctionRuntimeCapability;
+export declare function coreAstroSsrRuntimeCapability(): CoreAstroSsrRuntimeCapability;
+export declare function emptyFunctionApplyEffects(): CoreFunctionApplyEffects;
+export declare function isAstroSsrFunction(entry: Pick<PortableFunctionEntry, "class" | "capabilities">): boolean;
+export declare function normalizeFunctionEntrypoint(spec: FunctionSpec): string;
+export declare function functionMemoryBytes(entry: Pick<PortableFunctionEntry, "memory_mb">): number;
+//# sourceMappingURL=functions-runtime.d.ts.map

package/dist/functions-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"functions-runtime.d.ts","sourceRoot":"","sources":["../src/functions-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EACV,aAAa,EACb,YAAY,EACZ,UAAU,EACV,qBAAqB,EACrB,YAAY,EACZ,UAAU,EACX,MAAM,iBAAiB,CAAC;AAEzB,eAAO,MAAM,8BAA8B,EAAG,mBAA4B,CAAC;AAC3E,eAAO,MAAM,8BAA8B,EAAG,oBAA6B,CAAC;AAC5E,eAAO,MAAM,8BAA8B,EAAG,uBAAgC,CAAC;AAC/E,eAAO,MAAM,6BAA6B,EAAG,6BAAsC,CAAC;AACpF,eAAO,MAAM,sCAAsC,EAAG,cAAuB,CAAC;AAC9E,eAAO,MAAM,+BAA+B,EAAG,IAAa,CAAC;AAE7D,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;CAelC,CAAC;AAEX,eAAO,MAAM,+BAA+B;;;;;;CAMlC,CAAC;AAEX,eAAO,MAAM,8BAA8B,geAqBjC,CAAC;AAEX,eAAO,MAAM,+BAA+B,8QAclC,CAAC;AAEX,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,OAAO,8BAA8B,CAAC;IAChD,gBAAgB,EAAE,OAAO,8BAA8B,CAAC;IACxD,sBAAsB,EAAE,KAAK,CAAC;IAC9B,gBAAgB,EAAE,OAAO,8BAA8B,CAAC;IACxD,gCAAgC,EAAE,KAAK,CAAC;IACxC,kBAAkB,EAAE,oBAAoB,CAAC;IACzC,0BAA0B,EAAE,KAAK,CAAC;IAClC,kCAAkC,EAAE,KAAK,CAAC;IAC1C,iBAAiB,EAAE,uBAAuB,CAAC;IAC3C,cAAc,EAAE,gCAAgC,CAAC;CAClD;AAED,eAAO,MAAM,+BAA+B,EAAE,4BAW7C,CAAC;AAEF,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,OAAO,6BAA6B,CAAC;IAC3C,qBAAqB,EAAE,KAAK,CAAC;IAC7B,iBAAiB,EAAE,CAAC,mBAAmB,CAAC,CAAC;IACzC,8BAA8B,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,+BAA+B,EAAE,SAAS,MAAM,EAAE,CAAC;CACpD;AAED,eAAO,MAAM,+BAA+B,EAAE,4BA0B7C,CAAC;AAEF,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,gBAAgB,CAAC;IAC7B,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,OAAO,8BAA8B,CAAC;IAChD,gBAAgB,EAAE,OAAO,8BAA8B,CAAC;IACxD,sBAAsB,EAAE,KAAK,CAAC;IAC9B,gBAAgB,EAAE,OAAO,8BAA8B,CAAC;IACxD,iBAAiB,EAAE,4BAA4B,CAAC;IAChD,iBAAiB,EAAE,OAAO,+BAA+B,CAAC;IAC1D,iBAAiB,EAAE,OAAO,+BAA+B,CAAC;IAC1D,gBAAgB,EAAE;QAChB,OAAO,EAAE,QAAQ,CAAC;QAClB,QAAQ,EAAE,uBAAuB,CAAC;QAClC,QAAQ,EAAE,uBAAuB,CAAC;KACnC,CAAC;IACF,gBAAgB,EAAE,KAAK,CAAC,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;CAC1E;AAED,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,gBAAgB,CAAC;IAC7B,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,OAAO,8BAA8B,CAAC;IAChD,uBAAuB,EAAE,OAAO,sCAAsC,CAAC;IACvE,gBAAgB,EAAE;QAChB,OAAO,EAAE,QAAQ,CAAC;QAClB,aAAa,EAAE,KAAK,CAAC;QACrB,OAAO,EAAE,aAAa,CAAC;QACvB,QAAQ,EAAE,uBAAuB,CAAC;QAClC,KAAK,EAAE,UAAU,CAAC;KACnB,CAAC;IACF,QAAQ,EAAE;QACR,OAAO,EAAE,OAAO,+BAA+B,CAAC;QAChD,UAAU,EAAE,SAAS;YACnB,uBAAuB;YACvB,0BAA0B;YAC1B,yBAAyB;YACzB,wBAAwB;YACxB,oBAAoB;YACpB,WAAW;SACZ,CAAC;KACH,CAAC;IACF,+BAA+B,EAAE,IAAI,CAAC;IACtC,iBAAiB,EAAE,OAAO,+BAA+B,CAAC;IAC1D,iBAAiB,EAAE,4BAA4B,CAAC;IAChD,gBAAgB,EAAE,KAAK,CAAC,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,QAAQ,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,aAAa,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,OAAO,6BAA6B,CAAC;IACtD,sBAAsB,EAAE,IAAI,CAAC;IAC7B,IAAI,EAAE,EAAE,CAAC;IACT,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAClC,KAAK,EAAE,UAAU,GAAG,KAAK,CAAC;IAC1B,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,0BAA0B,EAAE,CAAC;IACtC,cAAc,EAAE,wBAAwB,EAAE,CAAC;IAC3C,kBAAkB,EAAE;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,uBAAuB,EAAE,OAAO,sCAAsC,CAAC;QACvE,OAAO,EAAE,OAAO,+BAA+B,CAAC;KACjD,GAAG,IAAI,CAAC;IACT,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,OAAO,6BAA6B,CAAC;IACtD,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,aAAa,GAAG,QAAQ,CAAC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAC;IACxC,OAAO,CAAC,EAAE,mBAAmB,CAAC;CAC/B;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,4BAA4B;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,oBAAoB,CAAC;CAChC;AAED,MAAM,MAAM,4BAA4B,GAAG,WAAW,GAAG,QAAQ,CAAC;AAElE,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,2BAA2B,CAAC,gBAAgB,CAAC,CAAC;IAC/D,MAAM,EAAE,4BAA4B,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACzC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;IAC1C,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,6BAA6B,IAAI,6BAA6B,CAkB7E;AAED,wBAAgB,6BAA6B,IAAI,6BAA6B,CA6B7E;AAED,wBAAgB,yBAAyB,IAAI,wBAAwB,CASpE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE,OAAO,GAAG,cAAc,CAAC,GAAG,OAAO,CAIxG;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAEtE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE,WAAW,CAAC,GAAG,MAAM,CAE3F"}

package/dist/functions-runtime.js

@@ -0,0 +1,176 @@
+export const CORE_FUNCTION_RUNTIME_MATURITY = "developer_preview";
+export const CORE_FUNCTION_SECURITY_PROFILE = "trusted_local_code";
+export const CORE_FUNCTION_DEFAULT_EXECUTOR = "docker_compose_worker";
+export const CORE_FUNCTION_DEPENDENCY_MODE = "prebundled_no_external_deps";
+export const CORE_ASTRO_SSR_OUTPUT_CONTRACT_VERSION = "astro.ssr.v1";
+export const CORE_ASTRO_SSR_FALLBACK_PATTERN = "/*";
+export const CORE_FUNCTION_RESOURCE_DEFAULTS = {
+    requestBodyLimitBytes: 6 * 1024 * 1024,
+    responseBodyLimitBytes: 6 * 1024 * 1024,
+    invocationTimeoutMs: 10_000,
+    startupTimeoutMs: 5_000,
+    dependencyInstallTimeoutMs: 120_000,
+    maxConcurrentInvocationsPerProject: 4,
+    maxPendingInvocationQueue: 16,
+    stdoutStderrLimitBytes: 64 * 1024,
+    maxLogLineBytes: 16 * 1024,
+    localLogRetentionBytes: 10 * 1024 * 1024,
+    localLogRetentionMs: 24 * 60 * 60 * 1000,
+    workerMemoryLimitBytes: 512 * 1024 * 1024,
+    tempDirLimitBytes: 512 * 1024 * 1024,
+    nodeModulesLimitBytes: 256 * 1024 * 1024,
+};
+export const CORE_FUNCTION_FILESYSTEM_LAYOUT = {
+    bundleStagingDir: "functions/staging",
+    activeBundleDir: "functions/active",
+    dependencyCacheDir: "functions/deps",
+    tempDir: "functions/tmp",
+    logDir: "functions/logs",
+};
+export const CORE_FUNCTION_KNOWN_EXCLUSIONS = [
+    "hostile_code_isolation",
+    "public_multi_tenant_hosting",
+    "cloud_grade_sandbox",
+    "external_npm_dependencies",
+    "lockfile_npm_install",
+    "lifecycle_scripts",
+    "native_postinstall_builds",
+    "file_link_workspace_dependencies",
+    "git_or_tarball_dependencies",
+    "private_registries",
+    "websockets",
+    "streaming_to_client",
+    "scheduled_functions",
+    "background_jobs",
+    "managed_jobs",
+    "managed_kms",
+    "cloudwatch_logs",
+    "cloud_quota_enforcement",
+    "cloud_billing",
+    "cloud_abuse_controls",
+];
+export const CORE_ASTRO_SSR_KNOWN_EXCLUSIONS = [
+    "full_astro_support",
+    "arbitrary_astro_adapters",
+    "streaming_to_client",
+    "websockets",
+    "http_upgrade",
+    "isr_cache",
+    "edge_runtime",
+    "cloud_globals",
+    "cloud_routing_hooks",
+    "cloudwatch_logs",
+    "cloud_quota_enforcement",
+    "cloud_billing",
+    "cloud_abuse_controls",
+];
+export const CORE_FUNCTION_ISOLATION_PROFILE = {
+    maturity: CORE_FUNCTION_RUNTIME_MATURITY,
+    security_profile: CORE_FUNCTION_SECURITY_PROFILE,
+    hostile_code_isolation: false,
+    default_executor: CORE_FUNCTION_DEFAULT_EXECUTOR,
+    app_code_runs_in_gateway_process: false,
+    environment_policy: "explicit_allowlist",
+    host_environment_inherited: false,
+    gateway_secrets_visible_by_default: false,
+    filesystem_policy: "project_worker_scoped",
+    network_policy: "developer_preview_not_hardened",
+};
+export const CORE_FUNCTION_DEPENDENCY_POLICY = {
+    mode: CORE_FUNCTION_DEPENDENCY_MODE,
+    npm_install_supported: false,
+    platform_packages: ["@run402/functions"],
+    rejected_dependency_spec_kinds: [
+        "semver_without_lockfile",
+        "file",
+        "link",
+        "workspace",
+        "git",
+        "http_tarball",
+        "https_tarball",
+        "local_path",
+        "private_registry",
+        "npm_alias",
+        "lifecycle_script_required",
+        "native_postinstall_required",
+    ],
+    future_lockfile_install_command: [
+        "npm",
+        "ci",
+        "--ignore-scripts",
+        "--omit=dev",
+        "--no-audit",
+        "--no-fund",
+    ],
+};
+export function coreFunctionRuntimeCapability() {
+    return {
+        capability: "core-functions",
+        status: "supported",
+        maturity: CORE_FUNCTION_RUNTIME_MATURITY,
+        security_profile: CORE_FUNCTION_SECURITY_PROFILE,
+        hostile_code_isolation: false,
+        default_executor: CORE_FUNCTION_DEFAULT_EXECUTOR,
+        dependency_policy: CORE_FUNCTION_DEPENDENCY_POLICY,
+        resource_defaults: CORE_FUNCTION_RESOURCE_DEFAULTS,
+        filesystem_layout: CORE_FUNCTION_FILESYSTEM_LAYOUT,
+        supported_output: {
+            runtime: "node22",
+            artifact: "prebundled_source_ref",
+            envelope: "run402.routed_http.v1",
+        },
+        known_exclusions: [...CORE_FUNCTION_KNOWN_EXCLUSIONS],
+    };
+}
+export function coreAstroSsrRuntimeCapability() {
+    return {
+        capability: "core-astro-ssr",
+        status: "supported",
+        maturity: CORE_FUNCTION_RUNTIME_MATURITY,
+        output_contract_version: CORE_ASTRO_SSR_OUTPUT_CONTRACT_VERSION,
+        supported_output: {
+            runtime: "node22",
+            module_format: "esm",
+            request: "web_request",
+            response: "web_response_buffered",
+            route: "fallback",
+        },
+        fallback: {
+            pattern: CORE_ASTRO_SSR_FALLBACK_PATTERN,
+            precedence: [
+                "explicit_static_alias",
+                "public_static_asset_path",
+                "prerendered_static_html",
+                "dynamic_function_route",
+                "astro_ssr_fallback",
+                "not_found",
+            ],
+        },
+        inherits_from_functions_runtime: true,
+        resource_defaults: CORE_FUNCTION_RESOURCE_DEFAULTS,
+        isolation_profile: CORE_FUNCTION_ISOLATION_PROFILE,
+        known_exclusions: [...CORE_ASTRO_SSR_KNOWN_EXCLUSIONS],
+    };
+}
+export function emptyFunctionApplyEffects() {
+    return {
+        bundles: [],
+        dynamic_routes: [],
+        astro_ssr_fallback: null,
+        required_secrets: [],
+        dependency_mode: CORE_FUNCTION_DEPENDENCY_MODE,
+        noop: true,
+    };
+}
+export function isAstroSsrFunction(entry) {
+    return entry.class === "ssr" &&
+        Array.isArray(entry.capabilities) &&
+        entry.capabilities.includes(CORE_ASTRO_SSR_OUTPUT_CONTRACT_VERSION);
+}
+export function normalizeFunctionEntrypoint(spec) {
+    return spec.entrypoint ?? "default";
+}
+export function functionMemoryBytes(entry) {
+    return entry.memory_mb * 1024 * 1024;
+}
+//# sourceMappingURL=functions-runtime.js.map

package/dist/functions-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"functions-runtime.js","sourceRoot":"","sources":["../src/functions-runtime.ts"],"names":[],"mappings":"AAaA,MAAM,CAAC,MAAM,8BAA8B,GAAG,mBAA4B,CAAC;AAC3E,MAAM,CAAC,MAAM,8BAA8B,GAAG,oBAA6B,CAAC;AAC5E,MAAM,CAAC,MAAM,8BAA8B,GAAG,uBAAgC,CAAC;AAC/E,MAAM,CAAC,MAAM,6BAA6B,GAAG,6BAAsC,CAAC;AACpF,MAAM,CAAC,MAAM,sCAAsC,GAAG,cAAuB,CAAC;AAC9E,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAa,CAAC;AAE7D,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,qBAAqB,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IACtC,sBAAsB,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IACvC,mBAAmB,EAAE,MAAM;IAC3B,gBAAgB,EAAE,KAAK;IACvB,0BAA0B,EAAE,OAAO;IACnC,kCAAkC,EAAE,CAAC;IACrC,yBAAyB,EAAE,EAAE;IAC7B,sBAAsB,EAAE,EAAE,GAAG,IAAI;IACjC,eAAe,EAAE,EAAE,GAAG,IAAI;IAC1B,sBAAsB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IACxC,mBAAmB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IACxC,sBAAsB,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IACzC,iBAAiB,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IACpC,qBAAqB,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;CAChC,CAAC;AAEX,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,gBAAgB,EAAE,mBAAmB;IACrC,eAAe,EAAE,kBAAkB;IACnC,kBAAkB,EAAE,gBAAgB;IACpC,OAAO,EAAE,eAAe;IACxB,MAAM,EAAE,gBAAgB;CAChB,CAAC;AAEX,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,wBAAwB;IACxB,6BAA6B;IAC7B,qBAAqB;IACrB,2BAA2B;IAC3B,sBAAsB;IACtB,mBAAmB;IACnB,2BAA2B;IAC3B,kCAAkC;IAClC,6BAA6B;IAC7B,oBAAoB;IACpB,YAAY;IACZ,qBAAqB;IACrB,qBAAqB;IACrB,iBAAiB;IACjB,cAAc;IACd,aAAa;IACb,iBAAiB;IACjB,yBAAyB;IACzB,eAAe;IACf,sBAAsB;CACd,CAAC;AAEX,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,oBAAoB;IACpB,0BAA0B;IAC1B,qBAAqB;IACrB,YAAY;IACZ,cAAc;IACd,WAAW;IACX,cAAc;IACd,eAAe;IACf,qBAAqB;IACrB,iBAAiB;IACjB,yBAAyB;IACzB,eAAe;IACf,sBAAsB;CACd,CAAC;AAeX,MAAM,CAAC,MAAM,+BAA+B,GAAiC;IAC3E,QAAQ,EAAE,8BAA8B;IACxC,gBAAgB,EAAE,8BAA8B;IAChD,sBAAsB,EAAE,KAAK;IAC7B,gBAAgB,EAAE,8BAA8B;IAChD,gCAAgC,EAAE,KAAK;IACvC,kBAAkB,EAAE,oBAAoB;IACxC,0BAA0B,EAAE,KAAK;IACjC,kCAAkC,EAAE,KAAK;IACzC,iBAAiB,EAAE,uBAAuB;IAC1C,cAAc,EAAE,gCAAgC;CACjD,CAAC;AAUF,MAAM,CAAC,MAAM,+BAA+B,GAAiC;IAC3E,IAAI,EAAE,6BAA6B;IACnC,qBAAqB,EAAE,KAAK;IAC5B,iBAAiB,EAAE,CAAC,mBAAmB,CAAC;IACxC,8BAA8B,EAAE;QAC9B,yBAAyB;QACzB,MAAM;QACN,MAAM;QACN,WAAW;QACX,KAAK;QACL,cAAc;QACd,eAAe;QACf,YAAY;QACZ,kBAAkB;QAClB,WAAW;QACX,2BAA2B;QAC3B,6BAA6B;KAC9B;IACD,+BAA+B,EAAE;QAC/B,KAAK;QACL,IAAI;QACJ,kBAAkB;QAClB,YAAY;QACZ,YAAY;QACZ,WAAW;KACZ;CACF,CAAC;AAiJF,MAAM,UAAU,6BAA6B;IAC3C,OAAO;QACL,UAAU,EAAE,gBAAgB;QAC5B,MAAM,EAAE,WAAW;QACnB,QAAQ,EAAE,8BAA8B;QACxC,gBAAgB,EAAE,8BAA8B;QAChD,sBAAsB,EAAE,KAAK;QAC7B,gBAAgB,EAAE,8BAA8B;QAChD,iBAAiB,EAAE,+BAA+B;QAClD,iBAAiB,EAAE,+BAA+B;QAClD,iBAAiB,EAAE,+BAA+B;QAClD,gBAAgB,EAAE;YAChB,OAAO,EAAE,QAAQ;YACjB,QAAQ,EAAE,uBAAuB;YACjC,QAAQ,EAAE,uBAAuB;SAClC;QACD,gBAAgB,EAAE,CAAC,GAAG,8BAA8B,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC3C,OAAO;QACL,UAAU,EAAE,gBAAgB;QAC5B,MAAM,EAAE,WAAW;QACnB,QAAQ,EAAE,8BAA8B;QACxC,uBAAuB,EAAE,sCAAsC;QAC/D,gBAAgB,EAAE;YAChB,OAAO,EAAE,QAAQ;YACjB,aAAa,EAAE,KAAK;YACpB,OAAO,EAAE,aAAa;YACtB,QAAQ,EAAE,uBAAuB;YACjC,KAAK,EAAE,UAAU;SAClB;QACD,QAAQ,EAAE;YACR,OAAO,EAAE,+BAA+B;YACxC,UAAU,EAAE;gBACV,uBAAuB;gBACvB,0BAA0B;gBAC1B,yBAAyB;gBACzB,wBAAwB;gBACxB,oBAAoB;gBACpB,WAAW;aACZ;SACF;QACD,+BAA+B,EAAE,IAAI;QACrC,iBAAiB,EAAE,+BAA+B;QAClD,iBAAiB,EAAE,+BAA+B;QAClD,gBAAgB,EAAE,CAAC,GAAG,+BAA+B,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,OAAO,EAAE,EAAE;QACX,cAAc,EAAE,EAAE;QAClB,kBAAkB,EAAE,IAAI;QACxB,gBAAgB,EAAE,EAAE;QACpB,eAAe,EAAE,6BAA6B;QAC9C,IAAI,EAAE,IAAI;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAA4D;IAC7F,OAAO,KAAK,CAAC,KAAK,KAAK,KAAK;QAC1B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;QACjC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAkB;IAC5D,OAAO,IAAI,CAAC,UAAU,IAAI,SAAS,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAA+C;IACjF,OAAO,KAAK,CAAC,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,CAAC"}

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 export * from "./apply.js";
 export * from "./capabilities.js";
 export * from "./errors.js";
+export * from "./functions-runtime.js";
 export * from "./health.js";
 export * from "./ports.js";
 export * from "./projects.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,wBAAwB,CAAC;AACvC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC"}

package/dist/index.js

@@ -1,6 +1,7 @@
 export * from "./apply.js";
 export * from "./capabilities.js";
 export * from "./errors.js";
+export * from "./functions-runtime.js";
 export * from "./health.js";
 export * from "./ports.js";
 export * from "./projects.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,wBAAwB,CAAC;AACvC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC"}

package/dist/ports.d.ts

@@ -1,5 +1,6 @@
 import type { ContentRefHex, MaterializedRoutes, PortableReleaseState, StaticManifest } from "@run402/release";
 import type { RuntimeCapabilityDocument } from "./capabilities.js";
+import type { CoreFunctionApplyEffects, CoreFunctionBundleMetadata, CoreFunctionInvocationInput, CoreFunctionInvocationResult, CoreFunctionInvocationRecord, CoreFunctionLogEntry, CoreFunctionSecretMetadata } from "./functions-runtime.js";
 export interface CoreProject {
     project_id: string;
     schema_slot: string;
@@ -43,6 +44,7 @@ export interface CoreApplyPlan {
     target_release_id: string;
     target_release_digest: string;
     storage_effects?: CoreStorageApplyEffects;
+    function_effects?: CoreFunctionApplyEffects;
     noop: boolean;
     status: "planned" | "committed";
     created_at: string;
@@ -58,6 +60,7 @@ export interface CoreApplyCommitContext {
     release_digest: string;
     target_release: PortableReleaseState;
     storage_effects?: CoreStorageApplyEffects;
+    function_effects?: CoreFunctionApplyEffects;
 }
 export interface CoreApplyDeferredResult {
     status: "deferred";
@@ -216,8 +219,75 @@ export interface CleanupResult {
     removed_objects: number;
     removed_versions: number;
     removed_cas_objects: number;
+    removed_function_bundles?: number;
+    removed_function_logs?: number;
     retained_live_sha256: string[];
 }
+export interface FunctionRuntimePort {
+    stageBundles(input: {
+        projectId: string;
+        releaseId: string;
+        bundles: CoreFunctionBundleMetadata[];
+    }): Promise<void>;
+    activateRelease(input: {
+        projectId: string;
+        releaseId: string;
+        expectedBaseReleaseId: string | null;
+        effects: CoreFunctionApplyEffects;
+    }): Promise<void>;
+    invoke(input: CoreFunctionInvocationInput): Promise<CoreFunctionInvocationResult>;
+    listLogs(input: {
+        projectId: string;
+        functionName?: string;
+        requestId?: string;
+        since?: string;
+        tail?: number;
+    }): Promise<CoreFunctionLogEntry[]>;
+    listSecrets(input: {
+        projectId: string;
+        functionName?: string;
+    }): Promise<CoreFunctionSecretMetadata[]>;
+    cleanup(projectId?: string): Promise<{
+        removed_function_bundles: number;
+        removed_function_logs: number;
+        retained_live_sha256: string[];
+    }>;
+}
+export interface FunctionSecretPort {
+    setSecret(input: {
+        projectId: string;
+        name: string;
+        value: string;
+        scope?: "project" | "release" | "function";
+        functionName?: string | null;
+    }): Promise<CoreFunctionSecretMetadata>;
+    listSecrets(input: {
+        projectId: string;
+        functionName?: string;
+    }): Promise<CoreFunctionSecretMetadata[]>;
+    getSecretValues(input: {
+        projectId: string;
+        functionName: string;
+        names: string[];
+    }): Promise<Record<string, string>>;
+}
+export interface FunctionLogPort {
+    recordInvocation(input: {
+        invocation: CoreFunctionInvocationRecord;
+        logs: CoreFunctionLogEntry[];
+        retention?: {
+            maxAgeMs?: number;
+            maxBytes?: number;
+        };
+    }): Promise<void>;
+    listLogs(input: {
+        projectId: string;
+        functionName?: string;
+        requestId?: string;
+        since?: string;
+        tail?: number;
+    }): Promise<CoreFunctionLogEntry[]>;
+}
 export interface StoragePort {
     createUploadSession(input: {
         projectId: string;
@@ -336,6 +406,8 @@ export interface RuntimeKernelPorts {
     signedReads?: SignedReadPort;
     routes?: RouteManifestPort;
     cleanup?: CleanupPort;
+    functions?: FunctionRuntimePort;
+    secrets?: FunctionSecretPort;
     migrations: MigrationPort;
     lifecycle?: ApplyLifecyclePort;
 }