@source-repo/rpc-cli 3.0.0 → 3.1.0

package/dist/fake.d.ts

@@ -33,12 +33,51 @@ export interface FakeScript {
         every: number;
         params?: unknown[];
     }[];
+    /**
+     * Starting values for `state`, which the handlers below share and keep between calls.
+     *
+     * This is what makes a fake a simulator rather than a recording: a pump that ramps toward the
+     * setpoint it was last given cannot be expressed by `returns`, because the answer depends on
+     * what was called before it.
+     */
+    state?: {
+        [key: string]: unknown;
+    };
+    /**
+     * `plant.read` -> a JavaScript function, as source. It is called with the arguments the caller
+     * sent and shares the mutable `state` above.
+     *
+     * Needs `--allow-exec`: this is the script author's code running in this process. See handlers.ts.
+     */
+    handlers?: {
+        [target: string]: string;
+    };
+    /**
+     * A Python program answering calls, for a simulation with more arithmetic in it than a
+     * JavaScript one-liner wants to carry. Decorate functions with `@rpc('plant.read')`; the
+     * interpreter is started once and keeps its own state.
+     *
+     * Needs `--allow-exec`, and a `python3` on PATH.
+     */
+    python?: {
+        program: string;
+        targets: string[];
+        interpreter?: string;
+    };
 }
 export interface FakeOptions extends NetworkOptions {
     /** The contract to serve. Every namespace in it is exposed. */
     schema: RpcSchema;
     script?: FakeScript;
+    /**
+     * Permit `handlers` and `python`, which run code the script supplied. Off by default, and the
+     * container ships without it: the flag is the security boundary, so it has to be given
+     * deliberately rather than inherited from a config file somebody copied.
+     */
+    allowExec?: boolean;
 }
+/** What a script asks for that only `--allow-exec` grants. Empty when it asks for neither. */
+export declare const execUsedBy: (script?: FakeScript) => string[];
 /** Whether something handed over as a contract is one, so the wrong object is refused kindly. */
 export declare const looksLikeSchema: (value: unknown) => value is RpcSchema;
 /**

package/dist/fake.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fake.d.ts","sourceRoot":"","sources":["../src/fake.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAwB,KAAK,SAAS,EAAE,KAAK,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACjG,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,cAAc,CAAA;AAErE;;;;;;;;;;;;GAYG;AAEH,+EAA+E;AAC/E,MAAM,WAAW,UAAU;IACvB,4FAA4F;IAC5F,OAAO,CAAC,EAAE;QAAE,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;IACvC;;;;OAIG;IACH,KAAK,CAAC,EAAE;QAAE,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAA;IACpC,8FAA8F;IAC9F,KAAK,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAA;KAAE,EAAE,CAAA;CACjE;AAED,MAAM,WAAW,WAAY,SAAQ,cAAc;IAC/C,+DAA+D;IAC/D,MAAM,EAAE,SAAS,CAAA;IACjB,MAAM,CAAC,EAAE,UAAU,CAAA;CACtB;AAED,iGAAiG;AACjG,eAAO,MAAM,eAAe,UAAW,OAAO,KAAG,KAAK,IAAI,SAC0E,CAAA;AAcpI;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS,SAAU,QAAQ,GAAG,SAAS,SAAS,SAAS,CAAC,OAAO,CAAC,SAAQ,GAAG,CAAC,MAAM,CAAC,qBAA0B,OA8D3H,CAAA;AA8BD,eAAO,MAAM,SAAS,YAAmB,WAAW;;;;EA6CnD,CAAA"}
+{"version":3,"file":"fake.d.ts","sourceRoot":"","sources":["../src/fake.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAwB,KAAK,SAAS,EAAE,KAAK,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACjG,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,cAAc,CAAA;AAGrE;;;;;;;;;;;;GAYG;AAEH,+EAA+E;AAC/E,MAAM,WAAW,UAAU;IACvB,4FAA4F;IAC5F,OAAO,CAAC,EAAE;QAAE,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;IACvC;;;;OAIG;IACH,KAAK,CAAC,EAAE;QAAE,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAA;IACpC,8FAA8F;IAC9F,KAAK,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAA;KAAE,EAAE,CAAA;IAC9D;;;;;;OAMG;IACH,KAAK,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE;QAAE,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAA;IACvC;;;;;;OAMG;IACH,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACxE;AAED,MAAM,WAAW,WAAY,SAAQ,cAAc;IAC/C,+DAA+D;IAC/D,MAAM,EAAE,SAAS,CAAA;IACjB,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAA;CACtB;AAED,8FAA8F;AAC9F,eAAO,MAAM,UAAU,YAAa,UAAU,aAC+E,CAAA;AAE7H,iGAAiG;AACjG,eAAO,MAAM,eAAe,UAAW,OAAO,KAAG,KAAK,IAAI,SAC0E,CAAA;AAcpI;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS,SAAU,QAAQ,GAAG,SAAS,SAAS,SAAS,CAAC,OAAO,CAAC,SAAQ,GAAG,CAAC,MAAM,CAAC,qBAA0B,OA8D3H,CAAA;AAoCD,eAAO,MAAM,SAAS,YAAmB,WAAW;;;;EA6DnD,CAAA"}

package/dist/fake.js

@@ -1,6 +1,9 @@
 import { EventEmitter } from 'events';
 import { RpcServer } from '@source-repo/rpc';
 import { networkTransports } from './network.js';
+import { javascriptRuntime, pythonRuntime } from './handlers.js';
+/** What a script asks for that only `--allow-exec` grants. Empty when it asks for neither. */
+export const execUsedBy = (script) => [...(script?.handlers && Object.keys(script.handlers).length ? ['handlers'] : []), ...(script?.python ? ['python'] : [])];
 /** Whether something handed over as a contract is one, so the wrong object is refused kindly. */
 export const looksLikeSchema = (value) => !!value && typeof value === 'object' && !!value.namespaces && typeof value.namespaces === 'object';
 /** The code that means "never answer" rather than "answer with this error". */
@@ -95,13 +98,15 @@ export const sampleFor = (type, types, seen = new Set(), depth = 0) => {
  */
 class Fake extends EventEmitter {
 }
-const buildNamespace = (name, namespace, types, script) => {
+const buildNamespace = (name, namespace, types, script, runtimes = []) => {
     // Named, so a console describing this peer says `Fake` where a real one names its class. That
     // line is the only place the browser says out loud that it is not talking to a device.
     const instance = new Fake();
     for (const [method, described] of Object.entries(namespace.methods)) {
         const target = `${name}.${method}`;
-        instance[method] = async () => {
+        // The arguments are taken now, where before they were ignored: a handler is only worth
+        // having if it can see what it was called with.
+        instance[method] = async (...params) => {
             const failure = script?.fails?.[target];
             // Never answered rather than answered with a timeout: a caller has to see the call go
             // unanswered for its own timeout to be what fires, which is the behaviour being staged.
@@ -109,6 +114,11 @@ const buildNamespace = (name, namespace, types, script) => {
                 return await new Promise(() => { });
             if (failure)
                 throw Object.assign(new Error(`${target} is set to fail`), { code: failure });
+            // Before `returns`, because a handler is the more specific instruction: a script that
+            // carries both means the canned value for everything the handler does not answer.
+            const runtime = runtimes.find((candidate) => candidate.handles(target));
+            if (runtime)
+                return await runtime.call(target, params);
             if (script?.returns && target in script.returns)
                 return script.returns[target];
             return sampleFor(described.returns, types);
@@ -120,6 +130,17 @@ export const startFake = async (options) => {
     const namespaces = Object.entries(options.schema.namespaces).filter(([name]) => name !== 'msgrpc');
     if (!namespaces.length)
         throw new Error('startFake: the contract describes no namespaces to serve');
+    // Refused here rather than ignored. A script whose handlers were silently dropped would serve
+    // generated values that look plausible and answer nothing the simulation was written to answer,
+    // which is worse than not starting.
+    const wantsExec = execUsedBy(options.script);
+    if (wantsExec.length && !options.allowExec)
+        throw new Error(`startFake: this script uses ${wantsExec.join(' and ')}, which run code it supplied. Pass --allow-exec to permit that; it is off by default and not enabled in the container.`);
+    const runtimes = [];
+    if (options.allowExec && options.script?.handlers && Object.keys(options.script.handlers).length)
+        runtimes.push(javascriptRuntime(options.script.handlers, options.script.state ?? {}));
+    if (options.allowExec && options.script?.python)
+        runtimes.push(await pythonRuntime(options.script.python.program, options.script.python.targets, options.script.python.interpreter));
     // Built here rather than through connectNetwork, which makes a window onto the network; this
     // one is a peer that serves. The schema is handed over so the fake refuses exactly what the real
     // peer would - a stand-in that accepts calls the device rejects teaches the wrong lesson.
@@ -133,7 +154,7 @@ export const startFake = async (options) => {
     });
     const instances = new Map();
     for (const [name, namespace] of namespaces) {
-        const instance = buildNamespace(name, namespace, options.schema.types, options.script);
+        const instance = buildNamespace(name, namespace, options.schema.types, options.script, runtimes);
         network.exposeObject(instance, name);
         instances.set(name, instance);
     }
@@ -157,6 +178,8 @@ export const startFake = async (options) => {
         close: async () => {
             for (const timer of timers)
                 clearInterval(timer);
+            for (const runtime of runtimes)
+                await runtime.close();
             await network.close();
         }
     };

package/dist/fake.js.map

@@ -1 +1 @@
-{"version":3,"file":"fake.js","sourceRoot":"","sources":["../src/fake.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAA;AACrC,OAAO,EAAE,SAAS,EAAuD,MAAM,kBAAkB,CAAA;AACjG,OAAO,EAAE,iBAAiB,EAAuB,MAAM,cAAc,CAAA;AAoCrE,iGAAiG;AACjG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAc,EAAsB,EAAE,CAClE,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAE,KAAmB,CAAC,UAAU,IAAI,OAAQ,KAAmB,CAAC,UAAU,KAAK,QAAQ,CAAA;AAEpI,+EAA+E;AAC/E,MAAM,aAAa,GAAG,SAAS,CAAA;AAE/B;;;;GAIG;AACH,MAAM,SAAS,GAAG,CAAC,CAAA;AAEnB,MAAM,WAAW,GAAG,QAAQ,CAAA;AAE5B;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAA0B,EAAE,KAAyB,EAAE,IAAI,GAAgB,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,CAAC,EAAW,EAAE;IAClI,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3C,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,KAAK,CAAC;QACX,KAAK,MAAM;YACP,OAAO,IAAI,CAAA;QACf,KAAK,SAAS;YACV,OAAO,IAAI,CAAA;QACf,KAAK,QAAQ,EAAE,CAAC;YACZ,kFAAkF;YAClF,kFAAkF;YAClF,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACnD,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBACxC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;YACrD,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC9E,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QACnD,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACZ,IAAI,IAAI,GAAG,WAAW,CAAA;YACtB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS;gBAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;YACzG,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS;gBAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;YACtG,OAAO,IAAI,CAAA;QACf,CAAC;QACD,KAAK,OAAO;YACR,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAA;QACjF,KAAK,MAAM;YACP,yFAAyF;YACzF,OAAO,IAAI,IAAI,EAAE,CAAA;QACrB,KAAK,SAAS;YACV,OAAO,IAAI,CAAC,KAAK,CAAA;QACrB,KAAK,OAAO;YACR,OAAO,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;QACrF,KAAK,OAAO;YACR,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;QAC5E,KAAK,QAAQ;YACT,iFAAiF;YACjF,yFAAyF;YACzF,OAAO,MAAM,CAAC,WAAW,CACrB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;iBACtB,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;iBACtC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CACrF,CAAA;QACL,KAAK,QAAQ;YACT,wFAAwF;YACxF,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAA;YACvD,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAA;QAC5E,KAAK,OAAO,EAAE,CAAC;YACX,wFAAwF;YACxF,4DAA4D;YAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAA;YACtG,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;QAC3E,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACT,kFAAkF;YAClF,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAA;YACpC,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnC,OAAO,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;QAC/E,CAAC;QACD;YACI,OAAO,IAAI,CAAA;IACnB,CAAC;AACL,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,IAAK,SAAQ,YAAY;CAAG;AAElC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,SAA0B,EAAE,KAAyB,EAAE,MAAmB,EAAE,EAAE;IAChH,8FAA8F;IAC9F,uFAAuF;IACvF,MAAM,QAAQ,GAAG,IAAI,IAAI,EAA0C,CAAA;IACnE,KAAK,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,MAAM,MAAM,GAAG,GAAG,IAAI,IAAI,MAAM,EAAE,CAAA;QAClC,QAAQ,CAAC,MAAM,CAAC,GAAG,KAAK,IAAI,EAAE;YAC1B,MAAM,OAAO,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAA;YACvC,sFAAsF;YACtF,wFAAwF;YACxF,IAAI,OAAO,KAAK,aAAa;gBAAE,OAAO,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACjE,IAAI,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;YAC1F,IAAI,MAAM,EAAE,OAAO,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAC9E,OAAO,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC9C,CAAC,CAAA;IACL,CAAC;IACD,OAAO,QAAQ,CAAA;AACnB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAAE,OAAoB,EAAE,EAAE;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAA;IAClG,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAEnG,6FAA6F;IAC7F,iGAAiG;IACjG,0FAA0F;IAC1F,MAAM,OAAO,GAAG,IAAI,SAAS,CAAC;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,YAAY,EAAE,KAAK;QACnB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,mBAAmB,EAAE,IAAI;QACzB,UAAU,EAAE,iBAAiB,CAAC,OAAO,CAAC;KACzC,CAAC,CAAA;IAEF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAA;IACjD,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,UAAU,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QACtF,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACpC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IACjC,CAAC;IACD,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;IAErB,6FAA6F;IAC7F,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACvC,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACzD,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAA;QAC9D,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACzC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,SAAS,aAAa,IAAI,CAAC,KAAK,OAAO,CAAC,CAAA;QACrG,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,CAAA;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAC3G,sFAAsF;QACtF,OAAO,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAA;IAC/F,CAAC,CAAC,CAAA;IAEF,OAAO;QACH,OAAO;QACP,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;QAC5C,KAAK,EAAE,KAAK,IAAI,EAAE;YACd,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,aAAa,CAAC,KAAK,CAAC,CAAA;YAChD,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;QACzB,CAAC;KACJ,CAAA;AACL,CAAC,CAAA"}
+{"version":3,"file":"fake.js","sourceRoot":"","sources":["../src/fake.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAA;AACrC,OAAO,EAAE,SAAS,EAAuD,MAAM,kBAAkB,CAAA;AACjG,OAAO,EAAE,iBAAiB,EAAuB,MAAM,cAAc,CAAA;AACrE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAuB,MAAM,eAAe,CAAA;AAiErF,8FAA8F;AAC9F,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAmB,EAAE,EAAE,CAC9C,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAE7H,iGAAiG;AACjG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAc,EAAsB,EAAE,CAClE,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAE,KAAmB,CAAC,UAAU,IAAI,OAAQ,KAAmB,CAAC,UAAU,KAAK,QAAQ,CAAA;AAEpI,+EAA+E;AAC/E,MAAM,aAAa,GAAG,SAAS,CAAA;AAE/B;;;;GAIG;AACH,MAAM,SAAS,GAAG,CAAC,CAAA;AAEnB,MAAM,WAAW,GAAG,QAAQ,CAAA;AAE5B;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAA0B,EAAE,KAAyB,EAAE,IAAI,GAAgB,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,CAAC,EAAW,EAAE;IAClI,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3C,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,KAAK,CAAC;QACX,KAAK,MAAM;YACP,OAAO,IAAI,CAAA;QACf,KAAK,SAAS;YACV,OAAO,IAAI,CAAA;QACf,KAAK,QAAQ,EAAE,CAAC;YACZ,kFAAkF;YAClF,kFAAkF;YAClF,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACnD,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBACxC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;YACrD,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC9E,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QACnD,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACZ,IAAI,IAAI,GAAG,WAAW,CAAA;YACtB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS;gBAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;YACzG,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS;gBAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;YACtG,OAAO,IAAI,CAAA;QACf,CAAC;QACD,KAAK,OAAO;YACR,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAA;QACjF,KAAK,MAAM;YACP,yFAAyF;YACzF,OAAO,IAAI,IAAI,EAAE,CAAA;QACrB,KAAK,SAAS;YACV,OAAO,IAAI,CAAC,KAAK,CAAA;QACrB,KAAK,OAAO;YACR,OAAO,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;QACrF,KAAK,OAAO;YACR,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;QAC5E,KAAK,QAAQ;YACT,iFAAiF;YACjF,yFAAyF;YACzF,OAAO,MAAM,CAAC,WAAW,CACrB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;iBACtB,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;iBACtC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CACrF,CAAA;QACL,KAAK,QAAQ;YACT,wFAAwF;YACxF,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAA;YACvD,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAA;QAC5E,KAAK,OAAO,EAAE,CAAC;YACX,wFAAwF;YACxF,4DAA4D;YAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAA;YACtG,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;QAC3E,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACT,kFAAkF;YAClF,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAA;YACpC,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnC,OAAO,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;QAC/E,CAAC;QACD;YACI,OAAO,IAAI,CAAA;IACnB,CAAC;AACL,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,IAAK,SAAQ,YAAY;CAAG;AAElC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,SAA0B,EAAE,KAAyB,EAAE,MAAmB,EAAE,QAAQ,GAAqB,EAAE,EAAE,EAAE;IACjJ,8FAA8F;IAC9F,uFAAuF;IACvF,MAAM,QAAQ,GAAG,IAAI,IAAI,EAA0C,CAAA;IACnE,KAAK,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,MAAM,MAAM,GAAG,GAAG,IAAI,IAAI,MAAM,EAAE,CAAA;QAClC,uFAAuF;QACvF,gDAAgD;QAChD,QAAQ,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,GAAG,MAAiB,EAAE,EAAE;YAC9C,MAAM,OAAO,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAA;YACvC,sFAAsF;YACtF,wFAAwF;YACxF,IAAI,OAAO,KAAK,aAAa;gBAAE,OAAO,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACjE,IAAI,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;YAC1F,sFAAsF;YACtF,kFAAkF;YAClF,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;YACvE,IAAI,OAAO;gBAAE,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACtD,IAAI,MAAM,EAAE,OAAO,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAC9E,OAAO,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC9C,CAAC,CAAA;IACL,CAAC;IACD,OAAO,QAAQ,CAAA;AACnB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAAE,OAAoB,EAAE,EAAE;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAA;IAClG,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAEnG,8FAA8F;IAC9F,gGAAgG;IAChG,oCAAoC;IACpC,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC5C,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS;QACtC,MAAM,IAAI,KAAK,CAAC,+BAA+B,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,wHAAwH,CAAC,CAAA;IAEnM,MAAM,QAAQ,GAAqB,EAAE,CAAA;IACrC,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM;QAC5F,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAA;IACzF,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM;QAC3C,QAAQ,CAAC,IAAI,CACT,MAAM,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CACvH,CAAA;IAEL,6FAA6F;IAC7F,iGAAiG;IACjG,0FAA0F;IAC1F,MAAM,OAAO,GAAG,IAAI,SAAS,CAAC;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,YAAY,EAAE,KAAK;QACnB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,mBAAmB,EAAE,IAAI;QACzB,UAAU,EAAE,iBAAiB,CAAC,OAAO,CAAC;KACzC,CAAC,CAAA;IAEF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAA;IACjD,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,UAAU,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAChG,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACpC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IACjC,CAAC;IACD,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;IAErB,6FAA6F;IAC7F,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACvC,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACzD,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAA;QAC9D,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACzC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,SAAS,aAAa,IAAI,CAAC,KAAK,OAAO,CAAC,CAAA;QACrG,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,CAAA;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAC3G,sFAAsF;QACtF,OAAO,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAA;IAC/F,CAAC,CAAC,CAAA;IAEF,OAAO;QACH,OAAO;QACP,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;QAC5C,KAAK,EAAE,KAAK,IAAI,EAAE;YACd,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,aAAa,CAAC,KAAK,CAAC,CAAA;YAChD,KAAK,MAAM,OAAO,IAAI,QAAQ;gBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;YACrD,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;QACzB,CAAC;KACJ,CAAA;AACL,CAAC,CAAA"}

package/dist/handlers.d.ts

@@ -0,0 +1,29 @@
+export interface HandlerRuntime {
+    /** Whether this runtime answers for a `namespace.method`. */
+    handles: (target: string) => boolean;
+    /** Run it. Throwing an error carrying `code` selects the RPC error the caller sees. */
+    call: (target: string, params: unknown[]) => Promise<unknown>;
+    close: () => Promise<void>;
+}
+/**
+ * JavaScript method bodies over shared state.
+ *
+ * The functions are defined once, so a handler can close over whatever it likes, and *called* by a
+ * script with a timeout - the budget has to be on the call rather than on the definition, since a
+ * loop that never ends is written in the body and not at the top level.
+ */
+export declare const javascriptRuntime: (handlers: {
+    [target: string]: string;
+}, state: {
+    [key: string]: unknown;
+}) => HandlerRuntime;
+/**
+ * A Python program that answers calls, spoken to over stdio as newline-delimited JSON.
+ *
+ * One interpreter per fake, started once and kept, so state is whatever the program keeps in its own
+ * variables - which is the point, and the thing a JSON script cannot express. The protocol is
+ * deliberately tiny; the shim below is the whole of what the program has to satisfy.
+ */
+export declare const PYTHON_SHIM = "\nimport sys, json\n_handlers = {}\n\ndef rpc(target):\n    \"\"\"Decorate a function to answer 'namespace.method'.\"\"\"\n    def register(fn):\n        _handlers[target] = fn\n        return fn\n    return register\n\ndef _serve():\n    for line in sys.stdin:\n        line = line.strip()\n        if not line:\n            continue\n        try:\n            call = json.loads(line)\n        except Exception as e:\n            print(json.dumps({\"id\": None, \"error\": \"bad request: %s\" % e}), flush=True)\n            continue\n        fn = _handlers.get(call.get(\"target\"))\n        if fn is None:\n            print(json.dumps({\"id\": call.get(\"id\"), \"error\": \"no handler for %s\" % call.get(\"target\")}), flush=True)\n            continue\n        try:\n            print(json.dumps({\"id\": call.get(\"id\"), \"result\": fn(*call.get(\"params\", []))}), flush=True)\n        except Exception as e:\n            print(json.dumps({\"id\": call.get(\"id\"), \"error\": str(e)}), flush=True)\n";
+export declare const pythonRuntime: (program: string, targets: string[], interpreter?: string) => Promise<HandlerRuntime>;
+//# sourceMappingURL=handlers.d.ts.map

package/dist/handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../src/handlers.ts"],"names":[],"mappings":"AA+BA,MAAM,WAAW,cAAc;IAC3B,6DAA6D;IAC7D,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAA;IACpC,uFAAuF;IACvF,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7D,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B;AAMD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,aAAc;IAAE,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,SAAS;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,KAAG,cAkD7G,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,u/BA6BvB,CAAA;AAED,eAAO,MAAM,aAAa,YAAmB,MAAM,WAAW,MAAM,EAAE,2BAA4B,OAAO,CAAC,cAAc,CA2EvH,CAAA"}

package/dist/handlers.js

@@ -0,0 +1,204 @@
+import { createContext, runInContext } from 'node:vm';
+import { spawn } from 'node:child_process';
+import { createInterface } from 'node:readline';
+/**
+ * Behaviour for a fake that the contract cannot describe: state.
+ *
+ * `returns` answers the same value every time and `emits` fires on a timer, which covers a screen
+ * that needs something to draw. What neither covers is a device that *reacts* - a pump that ramps
+ * toward the setpoint it was last given, a batch that will not start twice, a valve that reports
+ * closed until something opens it. Those are the behaviours an HMI is actually wrong about, and
+ * they need a variable and a method that can read what it was called with.
+ *
+ * So a script may supply the method bodies, in JavaScript or in Python. Both are **off unless
+ * `--allow-exec` says otherwise**, and the reason is worth stating rather than leaving implied:
+ *
+ * **This runs code the script author supplied, and the flag is the security boundary - not the
+ * runtime.** The JavaScript context has no `require`, no `process`, no filesystem and a per-call
+ * time budget, which stops a careless handler wedging the process; `node:vm` is documented as not
+ * being a security mechanism, and a determined script can get out of it. Python is a subprocess with
+ * the privileges of whoever started it and no confinement at all. Both are the right tool for a
+ * simulator on a development machine and the wrong thing to reach from a plant network, which is why
+ * the container ships without the flag.
+ */
+/** How long one handler may run before the call is failed rather than waited out. */
+const CALL_BUDGET_MS = 200;
+/** How long Python gets to answer, allowing for an interpreter doing real work on the first call. */
+const PYTHON_BUDGET_MS = 5000;
+/** Thrown for a handler that failed on its own terms, so the caller gets Exception and the reason. */
+const handlerFailed = (target, reason) => Object.assign(new Error(`${target}: ${reason instanceof Error ? reason.message : String(reason)}`), { code: 'Exception' });
+/**
+ * JavaScript method bodies over shared state.
+ *
+ * The functions are defined once, so a handler can close over whatever it likes, and *called* by a
+ * script with a timeout - the budget has to be on the call rather than on the definition, since a
+ * loop that never ends is written in the body and not at the top level.
+ */
+export const javascriptRuntime = (handlers, state) => {
+    // Deliberately spare. Everything a simulator needs to compute a reading, and nothing that
+    // reaches the machine it is running on.
+    const context = createContext({
+        state,
+        Math,
+        JSON,
+        Date,
+        Number,
+        String,
+        Boolean,
+        Array,
+        Object,
+        isNaN,
+        parseFloat,
+        parseInt,
+        __handlers: {},
+        __target: '',
+        __params: []
+    });
+    for (const [target, source] of Object.entries(handlers)) {
+        try {
+            // Wrapped in parentheses so `(v) => …` and `function (v) { … }` both read as expressions.
+            runInContext(`__handlers[${JSON.stringify(target)}] = (${source})`, context, { timeout: CALL_BUDGET_MS });
+        }
+        catch (e) {
+            // At construction, so a typo is a startup failure rather than a call that fails later on
+            // a screen somebody is watching.
+            throw new Error(`handler for ${target} did not compile: ${e instanceof Error ? e.message : String(e)}`, { cause: e });
+        }
+        if (typeof context.__handlers[target] !== 'function')
+            throw new Error(`handler for ${target} is not a function - give it \`(a, b) => …\` or \`function (a, b) { … }\``);
+    }
+    return {
+        handles: (target) => target in handlers,
+        call: async (target, params) => {
+            context.__target = target;
+            context.__params = params;
+            try {
+                // Awaited outside the context: a handler may be async, and the timeout only bounds
+                // the synchronous run. A promise that never settles is caught by the call timeout
+                // the caller already carries.
+                return await runInContext('__handlers[__target](...__params)', context, { timeout: CALL_BUDGET_MS });
+            }
+            catch (e) {
+                throw handlerFailed(target, e);
+            }
+        },
+        close: async () => undefined
+    };
+};
+/**
+ * A Python program that answers calls, spoken to over stdio as newline-delimited JSON.
+ *
+ * One interpreter per fake, started once and kept, so state is whatever the program keeps in its own
+ * variables - which is the point, and the thing a JSON script cannot express. The protocol is
+ * deliberately tiny; the shim below is the whole of what the program has to satisfy.
+ */
+export const PYTHON_SHIM = `
+import sys, json
+_handlers = {}
+
+def rpc(target):
+    """Decorate a function to answer 'namespace.method'."""
+    def register(fn):
+        _handlers[target] = fn
+        return fn
+    return register
+
+def _serve():
+    for line in sys.stdin:
+        line = line.strip()
+        if not line:
+            continue
+        try:
+            call = json.loads(line)
+        except Exception as e:
+            print(json.dumps({"id": None, "error": "bad request: %s" % e}), flush=True)
+            continue
+        fn = _handlers.get(call.get("target"))
+        if fn is None:
+            print(json.dumps({"id": call.get("id"), "error": "no handler for %s" % call.get("target")}), flush=True)
+            continue
+        try:
+            print(json.dumps({"id": call.get("id"), "result": fn(*call.get("params", []))}), flush=True)
+        except Exception as e:
+            print(json.dumps({"id": call.get("id"), "error": str(e)}), flush=True)
+`;
+export const pythonRuntime = async (program, targets, interpreter = 'python3') => {
+    let child;
+    try {
+        // `-u` because a buffered interpreter answers the first call when the second arrives.
+        child = spawn(interpreter, ['-u', '-c', `${PYTHON_SHIM}\n${program}\n_serve()\n`], { stdio: ['pipe', 'pipe', 'pipe'] });
+    }
+    catch (e) {
+        throw new Error(`could not start ${interpreter}: ${e instanceof Error ? e.message : String(e)}`, { cause: e });
+    }
+    const pending = new Map();
+    let nextId = 1;
+    let died;
+    createInterface({ input: child.stdout }).on('line', (line) => {
+        if (!line.trim())
+            return;
+        let message;
+        try {
+            message = JSON.parse(line);
+        }
+        catch {
+            // A print() in the program rather than a reply. Passed through, since a simulator author
+            // debugging with print deserves to see it somewhere.
+            process.stderr.write(`source-rpc fake (python): ${line}\n`);
+            return;
+        }
+        const waiting = message.id !== undefined ? pending.get(message.id) : undefined;
+        if (!waiting)
+            return;
+        pending.delete(message.id);
+        if (message.error !== undefined)
+            waiting.reject(new Error(message.error));
+        else
+            waiting.resolve(message.result);
+    });
+    const stderr = [];
+    child.stderr.on('data', (chunk) => {
+        const text = chunk.toString();
+        stderr.push(text);
+        process.stderr.write(`source-rpc fake (python): ${text}`);
+    });
+    child.on('exit', (code) => {
+        // Everything still waiting is failed now rather than left to time out one by one, and the
+        // reason names the interpreter's own complaint - a traceback is the useful part.
+        died = new Error(`the python program exited (${code})${stderr.length ? `: ${stderr.join('').trim().split('\n').pop()}` : ''}`);
+        for (const [, waiting] of pending)
+            waiting.reject(died);
+        pending.clear();
+    });
+    child.on('error', (e) => {
+        died = new Error(`could not run ${interpreter}: ${e.message}. Is it installed and on PATH?`);
+        for (const [, waiting] of pending)
+            waiting.reject(died);
+        pending.clear();
+    });
+    return {
+        handles: (target) => targets.includes(target),
+        call: async (target, params) => {
+            if (died)
+                throw handlerFailed(target, died);
+            const id = nextId++;
+            const answer = new Promise((resolve, reject) => pending.set(id, { resolve, reject }));
+            child.stdin.write(`${JSON.stringify({ id, target, params })}\n`);
+            const budget = new Promise((_, reject) => setTimeout(() => {
+                pending.delete(id);
+                reject(new Error(`did not answer within ${PYTHON_BUDGET_MS} ms`));
+            }, PYTHON_BUDGET_MS).unref());
+            try {
+                return await Promise.race([answer, budget]);
+            }
+            catch (e) {
+                throw handlerFailed(target, e);
+            }
+        },
+        close: async () => {
+            child.stdin.end();
+            child.kill();
+        }
+    };
+};
+//# sourceMappingURL=handlers.js.map

package/dist/handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.js","sourceRoot":"","sources":["../src/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACrD,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAA;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE/C;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,qFAAqF;AACrF,MAAM,cAAc,GAAG,GAAG,CAAA;AAE1B,qGAAqG;AACrG,MAAM,gBAAgB,GAAG,IAAI,CAAA;AAU7B,sGAAsG;AACtG,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,MAAe,EAAE,EAAE,CACtD,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,MAAM,KAAK,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;AAE9H;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAsC,EAAE,KAAiC,EAAkB,EAAE;IAC3H,0FAA0F;IAC1F,wCAAwC;IACxC,MAAM,OAAO,GAAG,aAAa,CAAC;QAC1B,KAAK;QACL,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,MAAM;QACN,MAAM;QACN,OAAO;QACP,KAAK;QACL,MAAM;QACN,KAAK;QACL,UAAU;QACV,QAAQ;QACR,UAAU,EAAE,EAAmC;QAC/C,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAe;KAC5B,CAAC,CAAA;IAEF,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC;YACD,0FAA0F;YAC1F,YAAY,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,MAAM,GAAG,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAA;QAC7G,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,yFAAyF;YACzF,iCAAiC;YACjC,MAAM,IAAI,KAAK,CAAC,eAAe,MAAM,qBAAqB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QACzH,CAAC;QACD,IAAI,OAAQ,OAAO,CAAC,UAAuC,CAAC,MAAM,CAAC,KAAK,UAAU;YAC9E,MAAM,IAAI,KAAK,CAAC,eAAe,MAAM,2EAA2E,CAAC,CAAA;IACzH,CAAC;IAED,OAAO;QACH,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,QAAQ;QACvC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YAC3B,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAA;YACzB,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAA;YACzB,IAAI,CAAC;gBACD,mFAAmF;gBACnF,kFAAkF;gBAClF,8BAA8B;gBAC9B,OAAO,MAAM,YAAY,CAAC,mCAAmC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAA;YACxG,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;YAClC,CAAC;QACL,CAAC;QACD,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;KAC/B,CAAA;AACL,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6B1B,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,OAAe,EAAE,OAAiB,EAAE,WAAW,GAAG,SAAS,EAA2B,EAAE;IACxH,IAAI,KAAqC,CAAA;IACzC,IAAI,CAAC;QACD,sFAAsF;QACtF,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,WAAW,KAAK,OAAO,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;IAC3H,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,mBAAmB,WAAW,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;IAClH,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkF,CAAA;IACzG,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,IAAuB,CAAA;IAE3B,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QACzD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAM;QACxB,IAAI,OAA0D,CAAA;QAC9D,IAAI,CAAC;YACD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAA;QAChD,CAAC;QAAC,MAAM,CAAC;YACL,yFAAyF;YACzF,qDAAqD;YACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,IAAI,IAAI,CAAC,CAAA;YAC3D,OAAM;QACV,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC9E,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAG,CAAC,CAAA;QAC3B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;;YACpE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAA;QAC7B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QACtB,0FAA0F;QAC1F,iFAAiF;QACjF,IAAI,GAAG,IAAI,KAAK,CAAC,8BAA8B,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC9H,KAAK,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,OAAO;YAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACvD,OAAO,CAAC,KAAK,EAAE,CAAA;IACnB,CAAC,CAAC,CAAA;IACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACpB,IAAI,GAAG,IAAI,KAAK,CAAC,iBAAiB,WAAW,KAAK,CAAC,CAAC,OAAO,gCAAgC,CAAC,CAAA;QAC5F,KAAK,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,OAAO;YAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACvD,OAAO,CAAC,KAAK,EAAE,CAAA;IACnB,CAAC,CAAC,CAAA;IAEF,OAAO;QACH,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YAC3B,IAAI,IAAI;gBAAE,MAAM,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAC3C,MAAM,EAAE,GAAG,MAAM,EAAE,CAAA;YACnB,MAAM,MAAM,GAAG,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;YAC9F,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,CAAA;YAChE,MAAM,MAAM,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC5C,UAAU,CAAC,GAAG,EAAE;gBACZ,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;gBAClB,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,gBAAgB,KAAK,CAAC,CAAC,CAAA;YACrE,CAAC,EAAE,gBAAgB,CAAC,CAAC,KAAK,EAAE,CAC/B,CAAA;YACD,IAAI,CAAC;gBACD,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;YAC/C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;YAClC,CAAC;QACL,CAAC;QACD,KAAK,EAAE,KAAK,IAAI,EAAE;YACd,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;YACjB,KAAK,CAAC,IAAI,EAAE,CAAA;QAChB,CAAC;KACJ,CAAA;AACL,CAAC,CAAA"}

package/dist/index.js

@@ -102,6 +102,11 @@ const usage = `source-rpc <command> [options]
                                 unsafe by design: for a development bus, never a plant
     --contracts <dir>           let it save and load contracts here; without it those tools
                                 are not offered at all
+    --allow-exec                let start_fake take JavaScript or Python method bodies; without it
+                                those fields are not offered at all. Development only
+    --scripts <dir>             a directory of peers written as programs, which this can add to,
+                                change, start and stop; without it those tools are not offered at
+                                all. A script is a process with your privileges. Development only
                                 stdio carries the protocol, so it is not for interactive use
 
   serve
@@ -109,6 +114,9 @@ const usage = `source-rpc <command> [options]
     --script <file>             canned returns, deliberate failures and events on a timer
     --fail <ns.method=Code>     answer with that RPC error code, repeatable
                                 Timeout is the special one: the call is never answered at all
+    --allow-exec                let a script supply JavaScript or Python method bodies, so a fake
+                                can hold state and react. Off by default: it runs code the script
+                                supplied, on this machine. Development only
     --broker / --hub / --prefix / --timeout / --name / --sign as above
 
   record
@@ -352,6 +360,7 @@ const VALUE_FLAGS = new Set([
     '--against',
     '--speed',
     '--contracts',
+    '--scripts',
     '--rate',
     '--concurrency',
     '--idempotency-key',
@@ -451,11 +460,16 @@ const runFake = async (argv) => {
         script = { ...script, fails: { ...script.fails, [pair.slice(0, equals)]: pair.slice(equals + 1) } };
     }
     const { signing: _keys, ...network } = resolveNetworkFlags(argv, 'serve', 'fake');
-    const running = await startFake({ ...network, schema, ...(Object.keys(script).length ? { script } : {}) });
+    const allowExec = argv.includes('--allow-exec');
+    const running = await startFake({ ...network, schema, ...(Object.keys(script).length ? { script } : {}), ...(allowExec ? { allowExec } : {}) });
     process.stdout.write(`source-rpc serve: ${network.name} answering ${running.namespaces.join(', ')} from ${contractPath}\n`);
     // Anything calling this is talking to a stand-in. Worth one line, since a fake that is mistaken
     // for the device is worse than no fake at all.
     process.stderr.write('source-rpc serve: this is a fake. It answers from the contract, not from a device.\n');
+    // Said out loud for the same reason the broker says it relays for anyone: the flag is the whole
+    // of the protection, so the run that has it should be visibly different from the run that does not.
+    if (allowExec)
+        process.stderr.write('source-rpc serve: --allow-exec is on, so this fake runs code its script supplied. Development machines only.\n');
     const stop = () => void running
         .close()
         .then(() => process.exit(0))
@@ -732,7 +746,9 @@ const runBroker = async (argv) => {
 const runMcp = async (argv) => {
     const { signing: _keys, ...network } = resolveNetworkFlags(argv, 'mcp', 'mcp');
     const contracts = argument(argv, '--contracts', '');
-    const running = await startMcp({ ...network, ...(contracts ? { contracts: resolve(contracts) } : {}) });
+    const scriptsDir = argument(argv, '--scripts', '');
+    const running = await startMcp({ ...network, ...(contracts ? { contracts: resolve(contracts) } : {}), ...(argv.includes('--allow-exec') ? { allowExec: true } : {}),
+        ...(scriptsDir ? { scripts: resolve(scriptsDir) } : {}) });
     // Nothing is written to stdout here: it carries the protocol. See mcp.ts.
     const stop = () => void running
         .close()