@secure-exec/core 0.1.1-rc.3 → 0.2.0-rc.1

package/dist/shared/bridge-contract.d.ts

@@ -1,4 +1,8 @@
 /**
+ * @deprecated Canonical source moved to @secure-exec/nodejs (US-002).
+ * This copy is retained for backward compatibility during phased migration.
+ * Will be removed in US-005 when kernel merges into core.
+ *
  * Bridge contract: typed declarations for the globals shared between the
  * host (Node.js) and the isolate (sandbox V8 context).
  *
@@ -6,7 +10,7 @@
  * - Host bridge globals: set by the host before bridge code runs (fs refs, timers, etc.)
  * - Runtime bridge globals: installed by the bridge bundle itself (active handles, modules, etc.)
  *
- * The typed `Ref` aliases describe the isolated-vm calling convention for each global.
+ * The typed `Ref` aliases describe the bridge calling convention for each global.
  */
 export type ValueOf<T> = T[keyof T];
 /** Globals injected by the host before the bridge bundle executes. */
@@ -14,9 +18,7 @@ export declare const HOST_BRIDGE_GLOBAL_KEYS: {
     readonly dynamicImport: "_dynamicImport";
     readonly loadPolyfill: "_loadPolyfill";
     readonly resolveModule: "_resolveModule";
-    readonly resolveModuleSync: "_resolveModuleSync";
     readonly loadFile: "_loadFile";
-    readonly loadFileSync: "_loadFileSync";
     readonly scheduleTimer: "_scheduleTimer";
     readonly cryptoRandomFill: "_cryptoRandomFill";
     readonly cryptoRandomUuid: "_cryptoRandomUUID";
@@ -31,7 +33,15 @@ export declare const HOST_BRIDGE_GLOBAL_KEYS: {
     readonly cryptoCipherivFinal: "_cryptoCipherivFinal";
     readonly cryptoSign: "_cryptoSign";
     readonly cryptoVerify: "_cryptoVerify";
+    readonly cryptoAsymmetricOp: "_cryptoAsymmetricOp";
+    readonly cryptoCreateKeyObject: "_cryptoCreateKeyObject";
     readonly cryptoGenerateKeyPairSync: "_cryptoGenerateKeyPairSync";
+    readonly cryptoGenerateKeySync: "_cryptoGenerateKeySync";
+    readonly cryptoGeneratePrimeSync: "_cryptoGeneratePrimeSync";
+    readonly cryptoDiffieHellman: "_cryptoDiffieHellman";
+    readonly cryptoDiffieHellmanGroup: "_cryptoDiffieHellmanGroup";
+    readonly cryptoDiffieHellmanSessionCreate: "_cryptoDiffieHellmanSessionCreate";
+    readonly cryptoDiffieHellmanSessionCall: "_cryptoDiffieHellmanSessionCall";
     readonly cryptoSubtle: "_cryptoSubtle";
     readonly fsReadFile: "_fsReadFile";
     readonly fsWriteFile: "_fsWriteFile";
@@ -62,14 +72,57 @@ export declare const HOST_BRIDGE_GLOBAL_KEYS: {
     readonly networkHttpRequestRaw: "_networkHttpRequestRaw";
     readonly networkHttpServerListenRaw: "_networkHttpServerListenRaw";
     readonly networkHttpServerCloseRaw: "_networkHttpServerCloseRaw";
+    readonly networkHttpServerRespondRaw: "_networkHttpServerRespondRaw";
+    readonly networkHttpServerWaitRaw: "_networkHttpServerWaitRaw";
+    readonly networkHttp2ServerListenRaw: "_networkHttp2ServerListenRaw";
+    readonly networkHttp2ServerCloseRaw: "_networkHttp2ServerCloseRaw";
+    readonly networkHttp2ServerWaitRaw: "_networkHttp2ServerWaitRaw";
+    readonly networkHttp2SessionConnectRaw: "_networkHttp2SessionConnectRaw";
+    readonly networkHttp2SessionRequestRaw: "_networkHttp2SessionRequestRaw";
+    readonly networkHttp2SessionSettingsRaw: "_networkHttp2SessionSettingsRaw";
+    readonly networkHttp2SessionSetLocalWindowSizeRaw: "_networkHttp2SessionSetLocalWindowSizeRaw";
+    readonly networkHttp2SessionGoawayRaw: "_networkHttp2SessionGoawayRaw";
+    readonly networkHttp2SessionCloseRaw: "_networkHttp2SessionCloseRaw";
+    readonly networkHttp2SessionDestroyRaw: "_networkHttp2SessionDestroyRaw";
+    readonly networkHttp2SessionWaitRaw: "_networkHttp2SessionWaitRaw";
+    readonly networkHttp2ServerPollRaw: "_networkHttp2ServerPollRaw";
+    readonly networkHttp2SessionPollRaw: "_networkHttp2SessionPollRaw";
+    readonly networkHttp2StreamRespondRaw: "_networkHttp2StreamRespondRaw";
+    readonly networkHttp2StreamPushStreamRaw: "_networkHttp2StreamPushStreamRaw";
+    readonly networkHttp2StreamWriteRaw: "_networkHttp2StreamWriteRaw";
+    readonly networkHttp2StreamEndRaw: "_networkHttp2StreamEndRaw";
+    readonly networkHttp2StreamPauseRaw: "_networkHttp2StreamPauseRaw";
+    readonly networkHttp2StreamResumeRaw: "_networkHttp2StreamResumeRaw";
+    readonly networkHttp2StreamRespondWithFileRaw: "_networkHttp2StreamRespondWithFileRaw";
+    readonly networkHttp2ServerRespondRaw: "_networkHttp2ServerRespondRaw";
     readonly upgradeSocketWriteRaw: "_upgradeSocketWriteRaw";
     readonly upgradeSocketEndRaw: "_upgradeSocketEndRaw";
     readonly upgradeSocketDestroyRaw: "_upgradeSocketDestroyRaw";
     readonly netSocketConnectRaw: "_netSocketConnectRaw";
+    readonly netSocketWaitConnectRaw: "_netSocketWaitConnectRaw";
+    readonly netSocketReadRaw: "_netSocketReadRaw";
+    readonly netSocketSetNoDelayRaw: "_netSocketSetNoDelayRaw";
+    readonly netSocketSetKeepAliveRaw: "_netSocketSetKeepAliveRaw";
     readonly netSocketWriteRaw: "_netSocketWriteRaw";
     readonly netSocketEndRaw: "_netSocketEndRaw";
     readonly netSocketDestroyRaw: "_netSocketDestroyRaw";
     readonly netSocketUpgradeTlsRaw: "_netSocketUpgradeTlsRaw";
+    readonly netSocketGetTlsClientHelloRaw: "_netSocketGetTlsClientHelloRaw";
+    readonly netSocketTlsQueryRaw: "_netSocketTlsQueryRaw";
+    readonly tlsGetCiphersRaw: "_tlsGetCiphersRaw";
+    readonly netServerListenRaw: "_netServerListenRaw";
+    readonly netServerAcceptRaw: "_netServerAcceptRaw";
+    readonly netServerCloseRaw: "_netServerCloseRaw";
+    readonly dgramSocketCreateRaw: "_dgramSocketCreateRaw";
+    readonly dgramSocketBindRaw: "_dgramSocketBindRaw";
+    readonly dgramSocketRecvRaw: "_dgramSocketRecvRaw";
+    readonly dgramSocketSendRaw: "_dgramSocketSendRaw";
+    readonly dgramSocketCloseRaw: "_dgramSocketCloseRaw";
+    readonly dgramSocketAddressRaw: "_dgramSocketAddressRaw";
+    readonly dgramSocketSetBufferSizeRaw: "_dgramSocketSetBufferSizeRaw";
+    readonly dgramSocketGetBufferSizeRaw: "_dgramSocketGetBufferSizeRaw";
+    readonly resolveModuleSync: "_resolveModuleSync";
+    readonly loadFileSync: "_loadFileSync";
     readonly ptySetRawMode: "_ptySetRawMode";
     readonly processConfig: "_processConfig";
     readonly osConfig: "_osConfig";
@@ -90,12 +143,14 @@ export declare const RUNTIME_BRIDGE_GLOBAL_KEYS: {
     readonly httpsModule: "_httpsModule";
     readonly http2Module: "_http2Module";
     readonly dnsModule: "_dnsModule";
+    readonly dgramModule: "_dgramModule";
     readonly httpServerDispatch: "_httpServerDispatch";
     readonly httpServerUpgradeDispatch: "_httpServerUpgradeDispatch";
+    readonly httpServerConnectDispatch: "_httpServerConnectDispatch";
+    readonly http2Dispatch: "_http2Dispatch";
+    readonly timerDispatch: "_timerDispatch";
     readonly upgradeSocketData: "_upgradeSocketData";
     readonly upgradeSocketEnd: "_upgradeSocketEnd";
-    readonly netModule: "_netModule";
-    readonly tlsModule: "_tlsModule";
     readonly netSocketDispatch: "_netSocketDispatch";
     readonly fsFacade: "_fs";
     readonly requireFrom: "_requireFrom";
@@ -109,9 +164,7 @@ export declare const HOST_BRIDGE_GLOBAL_KEY_LIST: ValueOf<{
     readonly dynamicImport: "_dynamicImport";
     readonly loadPolyfill: "_loadPolyfill";
     readonly resolveModule: "_resolveModule";
-    readonly resolveModuleSync: "_resolveModuleSync";
     readonly loadFile: "_loadFile";
-    readonly loadFileSync: "_loadFileSync";
     readonly scheduleTimer: "_scheduleTimer";
     readonly cryptoRandomFill: "_cryptoRandomFill";
     readonly cryptoRandomUuid: "_cryptoRandomUUID";
@@ -126,7 +179,15 @@ export declare const HOST_BRIDGE_GLOBAL_KEY_LIST: ValueOf<{
     readonly cryptoCipherivFinal: "_cryptoCipherivFinal";
     readonly cryptoSign: "_cryptoSign";
     readonly cryptoVerify: "_cryptoVerify";
+    readonly cryptoAsymmetricOp: "_cryptoAsymmetricOp";
+    readonly cryptoCreateKeyObject: "_cryptoCreateKeyObject";
     readonly cryptoGenerateKeyPairSync: "_cryptoGenerateKeyPairSync";
+    readonly cryptoGenerateKeySync: "_cryptoGenerateKeySync";
+    readonly cryptoGeneratePrimeSync: "_cryptoGeneratePrimeSync";
+    readonly cryptoDiffieHellman: "_cryptoDiffieHellman";
+    readonly cryptoDiffieHellmanGroup: "_cryptoDiffieHellmanGroup";
+    readonly cryptoDiffieHellmanSessionCreate: "_cryptoDiffieHellmanSessionCreate";
+    readonly cryptoDiffieHellmanSessionCall: "_cryptoDiffieHellmanSessionCall";
     readonly cryptoSubtle: "_cryptoSubtle";
     readonly fsReadFile: "_fsReadFile";
     readonly fsWriteFile: "_fsWriteFile";
@@ -157,14 +218,57 @@ export declare const HOST_BRIDGE_GLOBAL_KEY_LIST: ValueOf<{
     readonly networkHttpRequestRaw: "_networkHttpRequestRaw";
     readonly networkHttpServerListenRaw: "_networkHttpServerListenRaw";
     readonly networkHttpServerCloseRaw: "_networkHttpServerCloseRaw";
+    readonly networkHttpServerRespondRaw: "_networkHttpServerRespondRaw";
+    readonly networkHttpServerWaitRaw: "_networkHttpServerWaitRaw";
+    readonly networkHttp2ServerListenRaw: "_networkHttp2ServerListenRaw";
+    readonly networkHttp2ServerCloseRaw: "_networkHttp2ServerCloseRaw";
+    readonly networkHttp2ServerWaitRaw: "_networkHttp2ServerWaitRaw";
+    readonly networkHttp2SessionConnectRaw: "_networkHttp2SessionConnectRaw";
+    readonly networkHttp2SessionRequestRaw: "_networkHttp2SessionRequestRaw";
+    readonly networkHttp2SessionSettingsRaw: "_networkHttp2SessionSettingsRaw";
+    readonly networkHttp2SessionSetLocalWindowSizeRaw: "_networkHttp2SessionSetLocalWindowSizeRaw";
+    readonly networkHttp2SessionGoawayRaw: "_networkHttp2SessionGoawayRaw";
+    readonly networkHttp2SessionCloseRaw: "_networkHttp2SessionCloseRaw";
+    readonly networkHttp2SessionDestroyRaw: "_networkHttp2SessionDestroyRaw";
+    readonly networkHttp2SessionWaitRaw: "_networkHttp2SessionWaitRaw";
+    readonly networkHttp2ServerPollRaw: "_networkHttp2ServerPollRaw";
+    readonly networkHttp2SessionPollRaw: "_networkHttp2SessionPollRaw";
+    readonly networkHttp2StreamRespondRaw: "_networkHttp2StreamRespondRaw";
+    readonly networkHttp2StreamPushStreamRaw: "_networkHttp2StreamPushStreamRaw";
+    readonly networkHttp2StreamWriteRaw: "_networkHttp2StreamWriteRaw";
+    readonly networkHttp2StreamEndRaw: "_networkHttp2StreamEndRaw";
+    readonly networkHttp2StreamPauseRaw: "_networkHttp2StreamPauseRaw";
+    readonly networkHttp2StreamResumeRaw: "_networkHttp2StreamResumeRaw";
+    readonly networkHttp2StreamRespondWithFileRaw: "_networkHttp2StreamRespondWithFileRaw";
+    readonly networkHttp2ServerRespondRaw: "_networkHttp2ServerRespondRaw";
     readonly upgradeSocketWriteRaw: "_upgradeSocketWriteRaw";
     readonly upgradeSocketEndRaw: "_upgradeSocketEndRaw";
     readonly upgradeSocketDestroyRaw: "_upgradeSocketDestroyRaw";
     readonly netSocketConnectRaw: "_netSocketConnectRaw";
+    readonly netSocketWaitConnectRaw: "_netSocketWaitConnectRaw";
+    readonly netSocketReadRaw: "_netSocketReadRaw";
+    readonly netSocketSetNoDelayRaw: "_netSocketSetNoDelayRaw";
+    readonly netSocketSetKeepAliveRaw: "_netSocketSetKeepAliveRaw";
     readonly netSocketWriteRaw: "_netSocketWriteRaw";
     readonly netSocketEndRaw: "_netSocketEndRaw";
     readonly netSocketDestroyRaw: "_netSocketDestroyRaw";
     readonly netSocketUpgradeTlsRaw: "_netSocketUpgradeTlsRaw";
+    readonly netSocketGetTlsClientHelloRaw: "_netSocketGetTlsClientHelloRaw";
+    readonly netSocketTlsQueryRaw: "_netSocketTlsQueryRaw";
+    readonly tlsGetCiphersRaw: "_tlsGetCiphersRaw";
+    readonly netServerListenRaw: "_netServerListenRaw";
+    readonly netServerAcceptRaw: "_netServerAcceptRaw";
+    readonly netServerCloseRaw: "_netServerCloseRaw";
+    readonly dgramSocketCreateRaw: "_dgramSocketCreateRaw";
+    readonly dgramSocketBindRaw: "_dgramSocketBindRaw";
+    readonly dgramSocketRecvRaw: "_dgramSocketRecvRaw";
+    readonly dgramSocketSendRaw: "_dgramSocketSendRaw";
+    readonly dgramSocketCloseRaw: "_dgramSocketCloseRaw";
+    readonly dgramSocketAddressRaw: "_dgramSocketAddressRaw";
+    readonly dgramSocketSetBufferSizeRaw: "_dgramSocketSetBufferSizeRaw";
+    readonly dgramSocketGetBufferSizeRaw: "_dgramSocketGetBufferSizeRaw";
+    readonly resolveModuleSync: "_resolveModuleSync";
+    readonly loadFileSync: "_loadFileSync";
     readonly ptySetRawMode: "_ptySetRawMode";
     readonly processConfig: "_processConfig";
     readonly osConfig: "_osConfig";
@@ -184,12 +288,14 @@ export declare const RUNTIME_BRIDGE_GLOBAL_KEY_LIST: ValueOf<{
     readonly httpsModule: "_httpsModule";
     readonly http2Module: "_http2Module";
     readonly dnsModule: "_dnsModule";
+    readonly dgramModule: "_dgramModule";
     readonly httpServerDispatch: "_httpServerDispatch";
     readonly httpServerUpgradeDispatch: "_httpServerUpgradeDispatch";
+    readonly httpServerConnectDispatch: "_httpServerConnectDispatch";
+    readonly http2Dispatch: "_http2Dispatch";
+    readonly timerDispatch: "_timerDispatch";
     readonly upgradeSocketData: "_upgradeSocketData";
     readonly upgradeSocketEnd: "_upgradeSocketEnd";
-    readonly netModule: "_netModule";
-    readonly tlsModule: "_tlsModule";
     readonly netSocketDispatch: "_netSocketDispatch";
     readonly fsFacade: "_fs";
     readonly requireFrom: "_requireFrom";
@@ -200,9 +306,7 @@ export declare const BRIDGE_GLOBAL_KEY_LIST: readonly (ValueOf<{
     readonly dynamicImport: "_dynamicImport";
     readonly loadPolyfill: "_loadPolyfill";
     readonly resolveModule: "_resolveModule";
-    readonly resolveModuleSync: "_resolveModuleSync";
     readonly loadFile: "_loadFile";
-    readonly loadFileSync: "_loadFileSync";
     readonly scheduleTimer: "_scheduleTimer";
     readonly cryptoRandomFill: "_cryptoRandomFill";
     readonly cryptoRandomUuid: "_cryptoRandomUUID";
@@ -217,7 +321,15 @@ export declare const BRIDGE_GLOBAL_KEY_LIST: readonly (ValueOf<{
     readonly cryptoCipherivFinal: "_cryptoCipherivFinal";
     readonly cryptoSign: "_cryptoSign";
     readonly cryptoVerify: "_cryptoVerify";
+    readonly cryptoAsymmetricOp: "_cryptoAsymmetricOp";
+    readonly cryptoCreateKeyObject: "_cryptoCreateKeyObject";
     readonly cryptoGenerateKeyPairSync: "_cryptoGenerateKeyPairSync";
+    readonly cryptoGenerateKeySync: "_cryptoGenerateKeySync";
+    readonly cryptoGeneratePrimeSync: "_cryptoGeneratePrimeSync";
+    readonly cryptoDiffieHellman: "_cryptoDiffieHellman";
+    readonly cryptoDiffieHellmanGroup: "_cryptoDiffieHellmanGroup";
+    readonly cryptoDiffieHellmanSessionCreate: "_cryptoDiffieHellmanSessionCreate";
+    readonly cryptoDiffieHellmanSessionCall: "_cryptoDiffieHellmanSessionCall";
     readonly cryptoSubtle: "_cryptoSubtle";
     readonly fsReadFile: "_fsReadFile";
     readonly fsWriteFile: "_fsWriteFile";
@@ -248,14 +360,57 @@ export declare const BRIDGE_GLOBAL_KEY_LIST: readonly (ValueOf<{
     readonly networkHttpRequestRaw: "_networkHttpRequestRaw";
     readonly networkHttpServerListenRaw: "_networkHttpServerListenRaw";
     readonly networkHttpServerCloseRaw: "_networkHttpServerCloseRaw";
+    readonly networkHttpServerRespondRaw: "_networkHttpServerRespondRaw";
+    readonly networkHttpServerWaitRaw: "_networkHttpServerWaitRaw";
+    readonly networkHttp2ServerListenRaw: "_networkHttp2ServerListenRaw";
+    readonly networkHttp2ServerCloseRaw: "_networkHttp2ServerCloseRaw";
+    readonly networkHttp2ServerWaitRaw: "_networkHttp2ServerWaitRaw";
+    readonly networkHttp2SessionConnectRaw: "_networkHttp2SessionConnectRaw";
+    readonly networkHttp2SessionRequestRaw: "_networkHttp2SessionRequestRaw";
+    readonly networkHttp2SessionSettingsRaw: "_networkHttp2SessionSettingsRaw";
+    readonly networkHttp2SessionSetLocalWindowSizeRaw: "_networkHttp2SessionSetLocalWindowSizeRaw";
+    readonly networkHttp2SessionGoawayRaw: "_networkHttp2SessionGoawayRaw";
+    readonly networkHttp2SessionCloseRaw: "_networkHttp2SessionCloseRaw";
+    readonly networkHttp2SessionDestroyRaw: "_networkHttp2SessionDestroyRaw";
+    readonly networkHttp2SessionWaitRaw: "_networkHttp2SessionWaitRaw";
+    readonly networkHttp2ServerPollRaw: "_networkHttp2ServerPollRaw";
+    readonly networkHttp2SessionPollRaw: "_networkHttp2SessionPollRaw";
+    readonly networkHttp2StreamRespondRaw: "_networkHttp2StreamRespondRaw";
+    readonly networkHttp2StreamPushStreamRaw: "_networkHttp2StreamPushStreamRaw";
+    readonly networkHttp2StreamWriteRaw: "_networkHttp2StreamWriteRaw";
+    readonly networkHttp2StreamEndRaw: "_networkHttp2StreamEndRaw";
+    readonly networkHttp2StreamPauseRaw: "_networkHttp2StreamPauseRaw";
+    readonly networkHttp2StreamResumeRaw: "_networkHttp2StreamResumeRaw";
+    readonly networkHttp2StreamRespondWithFileRaw: "_networkHttp2StreamRespondWithFileRaw";
+    readonly networkHttp2ServerRespondRaw: "_networkHttp2ServerRespondRaw";
     readonly upgradeSocketWriteRaw: "_upgradeSocketWriteRaw";
     readonly upgradeSocketEndRaw: "_upgradeSocketEndRaw";
     readonly upgradeSocketDestroyRaw: "_upgradeSocketDestroyRaw";
     readonly netSocketConnectRaw: "_netSocketConnectRaw";
+    readonly netSocketWaitConnectRaw: "_netSocketWaitConnectRaw";
+    readonly netSocketReadRaw: "_netSocketReadRaw";
+    readonly netSocketSetNoDelayRaw: "_netSocketSetNoDelayRaw";
+    readonly netSocketSetKeepAliveRaw: "_netSocketSetKeepAliveRaw";
     readonly netSocketWriteRaw: "_netSocketWriteRaw";
     readonly netSocketEndRaw: "_netSocketEndRaw";
     readonly netSocketDestroyRaw: "_netSocketDestroyRaw";
     readonly netSocketUpgradeTlsRaw: "_netSocketUpgradeTlsRaw";
+    readonly netSocketGetTlsClientHelloRaw: "_netSocketGetTlsClientHelloRaw";
+    readonly netSocketTlsQueryRaw: "_netSocketTlsQueryRaw";
+    readonly tlsGetCiphersRaw: "_tlsGetCiphersRaw";
+    readonly netServerListenRaw: "_netServerListenRaw";
+    readonly netServerAcceptRaw: "_netServerAcceptRaw";
+    readonly netServerCloseRaw: "_netServerCloseRaw";
+    readonly dgramSocketCreateRaw: "_dgramSocketCreateRaw";
+    readonly dgramSocketBindRaw: "_dgramSocketBindRaw";
+    readonly dgramSocketRecvRaw: "_dgramSocketRecvRaw";
+    readonly dgramSocketSendRaw: "_dgramSocketSendRaw";
+    readonly dgramSocketCloseRaw: "_dgramSocketCloseRaw";
+    readonly dgramSocketAddressRaw: "_dgramSocketAddressRaw";
+    readonly dgramSocketSetBufferSizeRaw: "_dgramSocketSetBufferSizeRaw";
+    readonly dgramSocketGetBufferSizeRaw: "_dgramSocketGetBufferSizeRaw";
+    readonly resolveModuleSync: "_resolveModuleSync";
+    readonly loadFileSync: "_loadFileSync";
     readonly ptySetRawMode: "_ptySetRawMode";
     readonly processConfig: "_processConfig";
     readonly osConfig: "_osConfig";
@@ -274,19 +429,21 @@ export declare const BRIDGE_GLOBAL_KEY_LIST: readonly (ValueOf<{
     readonly httpsModule: "_httpsModule";
     readonly http2Module: "_http2Module";
     readonly dnsModule: "_dnsModule";
+    readonly dgramModule: "_dgramModule";
     readonly httpServerDispatch: "_httpServerDispatch";
     readonly httpServerUpgradeDispatch: "_httpServerUpgradeDispatch";
+    readonly httpServerConnectDispatch: "_httpServerConnectDispatch";
+    readonly http2Dispatch: "_http2Dispatch";
+    readonly timerDispatch: "_timerDispatch";
     readonly upgradeSocketData: "_upgradeSocketData";
     readonly upgradeSocketEnd: "_upgradeSocketEnd";
-    readonly netModule: "_netModule";
-    readonly tlsModule: "_tlsModule";
     readonly netSocketDispatch: "_netSocketDispatch";
     readonly fsFacade: "_fs";
     readonly requireFrom: "_requireFrom";
     readonly moduleCache: "_moduleCache";
     readonly processExitError: "ProcessExitError";
 }>)[];
-/** An isolated-vm Reference that resolves async via `{ result: { promise: true } }`. */
+/** A bridge Reference that resolves async via `{ result: { promise: true } }`. */
 export interface BridgeApplyRef<TArgs extends unknown[], TResult> {
     apply(ctx: undefined, args: TArgs, options: {
         result: {
@@ -294,12 +451,12 @@ export interface BridgeApplyRef<TArgs extends unknown[], TResult> {
         };
     }): Promise<TResult>;
 }
-/** An isolated-vm Reference called synchronously (blocks the isolate). */
+/** A bridge Reference called synchronously (blocks the isolate). */
 export interface BridgeApplySyncRef<TArgs extends unknown[], TResult> {
     applySync(ctx: undefined, args: TArgs): TResult;
 }
 /**
- * An isolated-vm Reference that blocks the isolate while the host resolves
+ * A bridge Reference that blocks the isolate while the host resolves
  * a Promise. Used for sync-looking APIs (require, readFileSync) that need
  * async host operations.
  */
@@ -341,31 +498,70 @@ export type CryptoScryptBridgeRef = BridgeApplySyncRef<[
 export type CryptoCipherivBridgeRef = BridgeApplySyncRef<[
     string,
     string,
+    string | null,
     string,
-    string
+    string?
 ], string>;
 export type CryptoDecipherivBridgeRef = BridgeApplySyncRef<[
     string,
+    string,
+    string | null,
+    string,
+    string
+], string>;
+export type CryptoCipherivCreateBridgeRef = BridgeApplySyncRef<[
     string,
     string,
     string,
+    string | null,
+    string
+], number>;
+export type CryptoCipherivUpdateBridgeRef = BridgeApplySyncRef<[
+    number,
     string
 ], string>;
+export type CryptoCipherivFinalBridgeRef = BridgeApplySyncRef<[
+    number
+], string>;
 export type CryptoSignBridgeRef = BridgeApplySyncRef<[
-    string,
+    string | null,
     string,
     string
 ], string>;
 export type CryptoVerifyBridgeRef = BridgeApplySyncRef<[
-    string,
+    string | null,
     string,
     string,
     string
 ], boolean>;
+export type CryptoAsymmetricOpBridgeRef = BridgeApplySyncRef<[
+    string,
+    string,
+    string
+], string>;
+export type CryptoCreateKeyObjectBridgeRef = BridgeApplySyncRef<[
+    string,
+    string
+], string>;
 export type CryptoGenerateKeyPairSyncBridgeRef = BridgeApplySyncRef<[
     string,
     string
 ], string>;
+export type CryptoGenerateKeySyncBridgeRef = BridgeApplySyncRef<[
+    string,
+    string
+], string>;
+export type CryptoGeneratePrimeSyncBridgeRef = BridgeApplySyncRef<[
+    number,
+    string
+], string>;
+export type CryptoDiffieHellmanBridgeRef = BridgeApplySyncRef<[string], string>;
+export type CryptoDiffieHellmanGroupBridgeRef = BridgeApplySyncRef<[string], string>;
+export type CryptoDiffieHellmanSessionCreateBridgeRef = BridgeApplySyncRef<[string], number>;
+export type CryptoDiffieHellmanSessionCallBridgeRef = BridgeApplySyncRef<[
+    number,
+    string
+], string>;
 export type CryptoSubtleBridgeRef = BridgeApplySyncRef<[string], string>;
 export type FsReadFileBridgeRef = BridgeApplySyncPromiseRef<[string], string>;
 export type FsWriteFileBridgeRef = BridgeApplySyncPromiseRef<[string, string], void>;
@@ -432,14 +628,127 @@ export type NetworkDnsLookupRawBridgeRef = BridgeApplyRef<[string], string>;
 export type NetworkHttpRequestRawBridgeRef = BridgeApplyRef<[string, string], string>;
 export type NetworkHttpServerListenRawBridgeRef = BridgeApplyRef<[string], string>;
 export type NetworkHttpServerCloseRawBridgeRef = BridgeApplyRef<[number], void>;
+export type NetworkHttpServerRespondRawBridgeRef = BridgeApplySyncRef<[
+    number,
+    number,
+    string
+], void>;
+export type NetworkHttpServerWaitRawBridgeRef = BridgeApplyRef<[number], void>;
+export type NetworkHttp2ServerListenRawBridgeRef = BridgeApplySyncPromiseRef<[
+    string
+], string>;
+export type NetworkHttp2ServerCloseRawBridgeRef = BridgeApplyRef<[number], void>;
+export type NetworkHttp2ServerWaitRawBridgeRef = BridgeApplyRef<[number], void>;
+export type NetworkHttp2SessionConnectRawBridgeRef = BridgeApplySyncPromiseRef<[
+    string
+], string>;
+export type NetworkHttp2SessionRequestRawBridgeRef = BridgeApplySyncRef<[
+    number,
+    string,
+    string
+], number>;
+export type NetworkHttp2SessionSettingsRawBridgeRef = BridgeApplySyncRef<[
+    number,
+    string
+], void>;
+export type NetworkHttp2SessionSetLocalWindowSizeRawBridgeRef = BridgeApplySyncRef<[
+    number,
+    number
+], string>;
+export type NetworkHttp2SessionGoawayRawBridgeRef = BridgeApplySyncRef<[
+    number,
+    number,
+    number,
+    string | null
+], void>;
+export type NetworkHttp2SessionCloseRawBridgeRef = BridgeApplySyncRef<[
+    number
+], void>;
+export type NetworkHttp2SessionDestroyRawBridgeRef = BridgeApplySyncRef<[
+    number
+], void>;
+export type NetworkHttp2SessionWaitRawBridgeRef = BridgeApplyRef<[number], void>;
+export type NetworkHttp2ServerPollRawBridgeRef = BridgeApplySyncRef<[
+    number
+], string | null>;
+export type NetworkHttp2SessionPollRawBridgeRef = BridgeApplySyncRef<[
+    number
+], string | null>;
+export type NetworkHttp2StreamRespondRawBridgeRef = BridgeApplySyncRef<[
+    number,
+    string
+], void>;
+export type NetworkHttp2StreamPushStreamRawBridgeRef = BridgeApplySyncPromiseRef<[
+    number,
+    string,
+    string
+], string>;
+export type NetworkHttp2StreamWriteRawBridgeRef = BridgeApplySyncRef<[
+    number,
+    string
+], boolean>;
+export type NetworkHttp2StreamEndRawBridgeRef = BridgeApplySyncRef<[
+    number,
+    string | null
+], void>;
+export type NetworkHttp2StreamPauseRawBridgeRef = BridgeApplySyncRef<[number], void>;
+export type NetworkHttp2StreamResumeRawBridgeRef = BridgeApplySyncRef<[number], void>;
+export type NetworkHttp2StreamRespondWithFileRawBridgeRef = BridgeApplySyncRef<[
+    number,
+    string,
+    string,
+    string
+], void>;
+export type NetworkHttp2ServerRespondRawBridgeRef = BridgeApplySyncRef<[
+    number,
+    number,
+    string
+], void>;
 export type UpgradeSocketWriteRawBridgeRef = BridgeApplySyncRef<[number, string], void>;
 export type UpgradeSocketEndRawBridgeRef = BridgeApplySyncRef<[number], void>;
 export type UpgradeSocketDestroyRawBridgeRef = BridgeApplySyncRef<[number], void>;
-export type NetSocketConnectRawBridgeRef = BridgeApplySyncRef<[string, number], number>;
+export type NetSocketConnectRawBridgeRef = BridgeApplySyncRef<[string], number>;
+export type NetSocketWaitConnectRawBridgeRef = BridgeApplyRef<[number], string>;
+export type NetSocketReadRawBridgeRef = BridgeApplySyncRef<[number], string | null>;
+export type NetSocketSetNoDelayRawBridgeRef = BridgeApplySyncRef<[number, boolean], void>;
+export type NetSocketSetKeepAliveRawBridgeRef = BridgeApplySyncRef<[number, boolean, number], void>;
 export type NetSocketWriteRawBridgeRef = BridgeApplySyncRef<[number, string], void>;
 export type NetSocketEndRawBridgeRef = BridgeApplySyncRef<[number], void>;
 export type NetSocketDestroyRawBridgeRef = BridgeApplySyncRef<[number], void>;
 export type NetSocketUpgradeTlsRawBridgeRef = BridgeApplySyncRef<[number, string], void>;
+export type NetSocketGetTlsClientHelloRawBridgeRef = BridgeApplySyncRef<[number], string>;
+export type NetSocketTlsQueryRawBridgeRef = BridgeApplySyncRef<[
+    number,
+    string,
+    boolean?
+], string>;
+export type TlsGetCiphersRawBridgeRef = BridgeApplySyncRef<[], string>;
+export type NetServerListenRawBridgeRef = BridgeApplyRef<[string], string>;
+export type NetServerAcceptRawBridgeRef = BridgeApplySyncRef<[number], string | null>;
+export type NetServerCloseRawBridgeRef = BridgeApplyRef<[number], void>;
+export type DgramSocketCreateRawBridgeRef = BridgeApplySyncRef<[string], number>;
+export type DgramSocketBindRawBridgeRef = BridgeApplySyncPromiseRef<[number, string], string>;
+export type DgramSocketRecvRawBridgeRef = BridgeApplySyncRef<[number], string | null>;
+export type DgramSocketSendRawBridgeRef = BridgeApplySyncPromiseRef<[number, string], number>;
+export type DgramSocketCloseRawBridgeRef = BridgeApplySyncPromiseRef<[number], void>;
+export type DgramSocketAddressRawBridgeRef = BridgeApplySyncRef<[number], string>;
+export type DgramSocketSetBufferSizeRawBridgeRef = BridgeApplySyncRef<[
+    number,
+    "recv" | "send",
+    number
+], void>;
+export type DgramSocketGetBufferSizeRawBridgeRef = BridgeApplySyncRef<[
+    number,
+    "recv" | "send"
+], number>;
+export type ResolveModuleSyncBridgeRef = BridgeApplySyncRef<[
+    string,
+    string
+], string | null>;
+export type LoadFileSyncBridgeRef = BridgeApplySyncRef<[string], string | null>;
 export type PtySetRawModeBridgeRef = BridgeApplySyncRef<[boolean], void>;
 export type RegisterHandleBridgeFn = (id: string, description: string) => void;
 export type UnregisterHandleBridgeFn = (id: string) => void;
+export type BatchResolveModulesBridgeRef = BridgeApplySyncPromiseRef<[
+    string
+], string>;

package/dist/shared/bridge-contract.js

@@ -1,4 +1,8 @@
 /**
+ * @deprecated Canonical source moved to @secure-exec/nodejs (US-002).
+ * This copy is retained for backward compatibility during phased migration.
+ * Will be removed in US-005 when kernel merges into core.
+ *
  * Bridge contract: typed declarations for the globals shared between the
  * host (Node.js) and the isolate (sandbox V8 context).
  *
@@ -6,7 +10,7 @@
  * - Host bridge globals: set by the host before bridge code runs (fs refs, timers, etc.)
  * - Runtime bridge globals: installed by the bridge bundle itself (active handles, modules, etc.)
  *
- * The typed `Ref` aliases describe the isolated-vm calling convention for each global.
+ * The typed `Ref` aliases describe the bridge calling convention for each global.
  */
 function valuesOf(object) {
     return Object.values(object);
@@ -16,9 +20,7 @@ export const HOST_BRIDGE_GLOBAL_KEYS = {
     dynamicImport: "_dynamicImport",
     loadPolyfill: "_loadPolyfill",
     resolveModule: "_resolveModule",
-    resolveModuleSync: "_resolveModuleSync",
     loadFile: "_loadFile",
-    loadFileSync: "_loadFileSync",
     scheduleTimer: "_scheduleTimer",
     cryptoRandomFill: "_cryptoRandomFill",
     cryptoRandomUuid: "_cryptoRandomUUID",
@@ -33,7 +35,15 @@ export const HOST_BRIDGE_GLOBAL_KEYS = {
     cryptoCipherivFinal: "_cryptoCipherivFinal",
     cryptoSign: "_cryptoSign",
     cryptoVerify: "_cryptoVerify",
+    cryptoAsymmetricOp: "_cryptoAsymmetricOp",
+    cryptoCreateKeyObject: "_cryptoCreateKeyObject",
     cryptoGenerateKeyPairSync: "_cryptoGenerateKeyPairSync",
+    cryptoGenerateKeySync: "_cryptoGenerateKeySync",
+    cryptoGeneratePrimeSync: "_cryptoGeneratePrimeSync",
+    cryptoDiffieHellman: "_cryptoDiffieHellman",
+    cryptoDiffieHellmanGroup: "_cryptoDiffieHellmanGroup",
+    cryptoDiffieHellmanSessionCreate: "_cryptoDiffieHellmanSessionCreate",
+    cryptoDiffieHellmanSessionCall: "_cryptoDiffieHellmanSessionCall",
     cryptoSubtle: "_cryptoSubtle",
     fsReadFile: "_fsReadFile",
     fsWriteFile: "_fsWriteFile",
@@ -64,14 +74,57 @@ export const HOST_BRIDGE_GLOBAL_KEYS = {
     networkHttpRequestRaw: "_networkHttpRequestRaw",
     networkHttpServerListenRaw: "_networkHttpServerListenRaw",
     networkHttpServerCloseRaw: "_networkHttpServerCloseRaw",
+    networkHttpServerRespondRaw: "_networkHttpServerRespondRaw",
+    networkHttpServerWaitRaw: "_networkHttpServerWaitRaw",
+    networkHttp2ServerListenRaw: "_networkHttp2ServerListenRaw",
+    networkHttp2ServerCloseRaw: "_networkHttp2ServerCloseRaw",
+    networkHttp2ServerWaitRaw: "_networkHttp2ServerWaitRaw",
+    networkHttp2SessionConnectRaw: "_networkHttp2SessionConnectRaw",
+    networkHttp2SessionRequestRaw: "_networkHttp2SessionRequestRaw",
+    networkHttp2SessionSettingsRaw: "_networkHttp2SessionSettingsRaw",
+    networkHttp2SessionSetLocalWindowSizeRaw: "_networkHttp2SessionSetLocalWindowSizeRaw",
+    networkHttp2SessionGoawayRaw: "_networkHttp2SessionGoawayRaw",
+    networkHttp2SessionCloseRaw: "_networkHttp2SessionCloseRaw",
+    networkHttp2SessionDestroyRaw: "_networkHttp2SessionDestroyRaw",
+    networkHttp2SessionWaitRaw: "_networkHttp2SessionWaitRaw",
+    networkHttp2ServerPollRaw: "_networkHttp2ServerPollRaw",
+    networkHttp2SessionPollRaw: "_networkHttp2SessionPollRaw",
+    networkHttp2StreamRespondRaw: "_networkHttp2StreamRespondRaw",
+    networkHttp2StreamPushStreamRaw: "_networkHttp2StreamPushStreamRaw",
+    networkHttp2StreamWriteRaw: "_networkHttp2StreamWriteRaw",
+    networkHttp2StreamEndRaw: "_networkHttp2StreamEndRaw",
+    networkHttp2StreamPauseRaw: "_networkHttp2StreamPauseRaw",
+    networkHttp2StreamResumeRaw: "_networkHttp2StreamResumeRaw",
+    networkHttp2StreamRespondWithFileRaw: "_networkHttp2StreamRespondWithFileRaw",
+    networkHttp2ServerRespondRaw: "_networkHttp2ServerRespondRaw",
     upgradeSocketWriteRaw: "_upgradeSocketWriteRaw",
     upgradeSocketEndRaw: "_upgradeSocketEndRaw",
     upgradeSocketDestroyRaw: "_upgradeSocketDestroyRaw",
     netSocketConnectRaw: "_netSocketConnectRaw",
+    netSocketWaitConnectRaw: "_netSocketWaitConnectRaw",
+    netSocketReadRaw: "_netSocketReadRaw",
+    netSocketSetNoDelayRaw: "_netSocketSetNoDelayRaw",
+    netSocketSetKeepAliveRaw: "_netSocketSetKeepAliveRaw",
     netSocketWriteRaw: "_netSocketWriteRaw",
     netSocketEndRaw: "_netSocketEndRaw",
     netSocketDestroyRaw: "_netSocketDestroyRaw",
     netSocketUpgradeTlsRaw: "_netSocketUpgradeTlsRaw",
+    netSocketGetTlsClientHelloRaw: "_netSocketGetTlsClientHelloRaw",
+    netSocketTlsQueryRaw: "_netSocketTlsQueryRaw",
+    tlsGetCiphersRaw: "_tlsGetCiphersRaw",
+    netServerListenRaw: "_netServerListenRaw",
+    netServerAcceptRaw: "_netServerAcceptRaw",
+    netServerCloseRaw: "_netServerCloseRaw",
+    dgramSocketCreateRaw: "_dgramSocketCreateRaw",
+    dgramSocketBindRaw: "_dgramSocketBindRaw",
+    dgramSocketRecvRaw: "_dgramSocketRecvRaw",
+    dgramSocketSendRaw: "_dgramSocketSendRaw",
+    dgramSocketCloseRaw: "_dgramSocketCloseRaw",
+    dgramSocketAddressRaw: "_dgramSocketAddressRaw",
+    dgramSocketSetBufferSizeRaw: "_dgramSocketSetBufferSizeRaw",
+    dgramSocketGetBufferSizeRaw: "_dgramSocketGetBufferSizeRaw",
+    resolveModuleSync: "_resolveModuleSync",
+    loadFileSync: "_loadFileSync",
     ptySetRawMode: "_ptySetRawMode",
     processConfig: "_processConfig",
     osConfig: "_osConfig",
@@ -92,12 +145,14 @@ export const RUNTIME_BRIDGE_GLOBAL_KEYS = {
     httpsModule: "_httpsModule",
     http2Module: "_http2Module",
     dnsModule: "_dnsModule",
+    dgramModule: "_dgramModule",
     httpServerDispatch: "_httpServerDispatch",
     httpServerUpgradeDispatch: "_httpServerUpgradeDispatch",
+    httpServerConnectDispatch: "_httpServerConnectDispatch",
+    http2Dispatch: "_http2Dispatch",
+    timerDispatch: "_timerDispatch",
     upgradeSocketData: "_upgradeSocketData",
     upgradeSocketEnd: "_upgradeSocketEnd",
-    netModule: "_netModule",
-    tlsModule: "_tlsModule",
     netSocketDispatch: "_netSocketDispatch",
     fsFacade: "_fs",
     requireFrom: "_requireFrom",