@wire-runtime/cli 0.0.0-stage → 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Wire contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/budget.d.ts

@@ -0,0 +1,35 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+export interface IssuerKeyFiles {
+    /** PKCS#8 PEM private key. Never copy this to the runtime host. */
+    privateFile: string;
+    /** Raw 32-byte public key as lowercase hex, plus a trailing newline. */
+    publicFile: string;
+    /** Raw 32-byte public key as lowercase hex. */
+    publicKey: string;
+}
+export interface BudgetClaims {
+    keyId: number;
+    sessionId: string;
+    maxToolCalls: number;
+    expiresAt: number;
+    nonce: string;
+}
+/**
+ * Create a dedicated issuer key pair. The target directory must not exist, so an
+ * existing private key can never be overwritten by an accidental rerun.
+ */
+export declare function keygen(dir: string): Promise<IssuerKeyFiles>;
+/**
+ * Mint one 112-byte token. Fields are big-endian:
+ * key_id[0..4], session[4..20], calls[20..24], expiry[24..32], nonce[32..48],
+ * Ed25519 signature[48..112] over the exact first 48 bytes.
+ */
+export declare function mint(privateKey: string | Buffer, session: Buffer, maxToolCalls: number, expiresAt: number, keyId: number, nonce: Buffer): Buffer;
+/** Read the raw claims without implying that the signature was verified. */
+export declare function claims(token: Buffer): BudgetClaims;
+export declare function readToken(file: string): Promise<Buffer>;
+/** Parse the independently authenticated session as exactly 16 bytes. */
+export declare function sessionBytes(hex: string): Buffer;
+/** Strict unsigned 32-bit decimal argument parser. */
+export declare function unsigned32(value: unknown, label: string, min?: number): number;

package/dist/budget.js

@@ -0,0 +1,93 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+import { generateKeyPairSync, sign } from "node:crypto";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import path from "node:path";
+/** Signed payload bytes, excluding the Ed25519 signature. */
+const PAYLOAD_LEN = 48;
+/** Exact flat token length: 48-byte payload + 64-byte signature. */
+const TOKEN_LEN = 112;
+const SESSION_LEN = 16;
+const NONCE_LEN = 16;
+const MAX_U32 = 0xffff_ffff;
+function unsigned(value, label, min, max) {
+    if (!Number.isSafeInteger(value) || value < min || value > max)
+        throw new Error(`${label} must be an integer between ${min} and ${max}`);
+    return value;
+}
+function rawPublicKey(publicKey) {
+    const der = publicKey.export({ format: "der", type: "spki" });
+    if (der.length < 32)
+        throw new Error("Generated Ed25519 public key is malformed");
+    return der.subarray(der.length - 32);
+}
+/**
+ * Create a dedicated issuer key pair. The target directory must not exist, so an
+ * existing private key can never be overwritten by an accidental rerun.
+ */
+export async function keygen(dir) {
+    await mkdir(dir, { recursive: false, mode: 0o700 });
+    const { privateKey, publicKey } = generateKeyPairSync("ed25519");
+    const privateFile = path.join(dir, "private.pem");
+    const publicFile = path.join(dir, "public.hex");
+    const hex = rawPublicKey(publicKey).toString("hex");
+    await writeFile(privateFile, privateKey.export({ format: "pem", type: "pkcs8" }), {
+        flag: "wx",
+        mode: 0o600,
+    });
+    await writeFile(publicFile, `${hex}\n`, { flag: "wx", mode: 0o644 });
+    return { privateFile, publicFile, publicKey: hex };
+}
+/**
+ * Mint one 112-byte token. Fields are big-endian:
+ * key_id[0..4], session[4..20], calls[20..24], expiry[24..32], nonce[32..48],
+ * Ed25519 signature[48..112] over the exact first 48 bytes.
+ */
+export function mint(privateKey, session, maxToolCalls, expiresAt, keyId, nonce) {
+    if (session.length !== SESSION_LEN)
+        throw new Error(`Session must be exactly ${SESSION_LEN} bytes`);
+    if (nonce.length !== NONCE_LEN)
+        throw new Error(`Nonce must be exactly ${NONCE_LEN} bytes`);
+    const payload = Buffer.alloc(PAYLOAD_LEN);
+    payload.writeUInt32BE(unsigned(keyId, "Key id", 0, MAX_U32), 0);
+    session.copy(payload, 4);
+    payload.writeUInt32BE(unsigned(maxToolCalls, "Calls", 1, MAX_U32), 20);
+    payload.writeBigUInt64BE(BigInt(unsigned(expiresAt, "Expiry", 0, Number.MAX_SAFE_INTEGER)), 24);
+    nonce.copy(payload, 32);
+    const signature = sign(null, payload, privateKey);
+    if (signature.length !== TOKEN_LEN - PAYLOAD_LEN)
+        throw new Error("Ed25519 signature length is invalid");
+    return Buffer.concat([payload, signature]);
+}
+/** Read the raw claims without implying that the signature was verified. */
+export function claims(token) {
+    if (token.length !== TOKEN_LEN)
+        throw new Error(`Budget token must be exactly ${TOKEN_LEN} bytes`);
+    return {
+        keyId: token.readUInt32BE(0),
+        sessionId: token.subarray(4, 20).toString("hex"),
+        maxToolCalls: token.readUInt32BE(20),
+        expiresAt: Number(token.readBigUInt64BE(24)),
+        nonce: token.subarray(32, 48).toString("hex"),
+    };
+}
+export async function readToken(file) {
+    const token = await readFile(file);
+    if (token.length !== TOKEN_LEN)
+        throw new Error(`${file} is not a ${TOKEN_LEN}-byte Wire budget token`);
+    return token;
+}
+/** Parse the independently authenticated session as exactly 16 bytes. */
+export function sessionBytes(hex) {
+    if (!/^[0-9a-f]{32}$/.test(hex))
+        throw new Error("Session must be exactly 32 lowercase hex characters");
+    return Buffer.from(hex, "hex");
+}
+/** Strict unsigned 32-bit decimal argument parser. */
+export function unsigned32(value, label, min = 0) {
+    if (typeof value !== "string" || !/^\d+$/.test(value))
+        throw new Error(`${label} must be a decimal unsigned 32-bit integer`);
+    const parsed = Number(value);
+    return unsigned(parsed, label, min, MAX_U32);
+}
+//# sourceMappingURL=budget.js.map

package/dist/budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.js","sourceRoot":"","sources":["../src/budget.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,uCAAuC;AACvC,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAExD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,6DAA6D;AAC7D,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,oEAAoE;AACpE,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,OAAO,GAAG,WAAW,CAAC;AAmB5B,SAAS,QAAQ,CAAC,KAAa,EAAE,KAAa,EAAE,GAAW,EAAE,GAAW;IACtE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,GAAG;QAC5D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,+BAA+B,GAAG,QAAQ,GAAG,EAAE,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,SAAoB;IACxC,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAClF,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,GAAW;IACtC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE;QAChF,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,MAAM,SAAS,CAAC,UAAU,EAAE,GAAG,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,IAAI,CAClB,UAA2B,EAC3B,OAAe,EACf,YAAoB,EACpB,SAAiB,EACjB,KAAa,EACb,KAAa;IAEb,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW;QAChC,MAAM,IAAI,KAAK,CAAC,2BAA2B,WAAW,QAAQ,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,SAAS,QAAQ,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1C,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACzB,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACxB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAClD,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,GAAG,WAAW;QAC9C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAC5B,MAAM,IAAI,KAAK,CAAC,gCAAgC,SAAS,QAAQ,CAAC,CAAC;IACrE,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;QAC5B,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChD,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC5C,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,aAAa,SAAS,yBAAyB,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,UAAU,CAAC,KAAc,EAAE,KAAa,EAAE,GAAG,GAAG,CAAC;IAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4CAA4C,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC"}

package/dist/commands/budget.d.ts

@@ -0,0 +1,4 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+declare const _default: import("citty").CommandDef<import("citty").ArgsDef>;
+export default _default;

package/dist/commands/budget.js

@@ -0,0 +1,79 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+import { defineCommand } from "citty";
+import { readFile, writeFile } from "node:fs/promises";
+import { randomBytes } from "node:crypto";
+import path from "node:path";
+import { loadNativeEngine } from "@wire-runtime/sdk";
+import { keygen, mint, claims, readToken, sessionBytes, unsigned32, } from "../budget.js";
+function arg(value, label) {
+    if (typeof value !== "string" || !value)
+        throw new Error(`Missing ${label}`);
+    return value;
+}
+export default defineCommand({
+    meta: {
+        name: "budget",
+        description: "Generate keys, mint or inspect signed 112-byte budgets",
+    },
+    subCommands: {
+        keygen: defineCommand({
+            args: {
+                out: {
+                    type: "string",
+                    default: ".wire/keys",
+                    description: "New key directory",
+                },
+            },
+            async run({ args }) {
+                process.stdout.write(JSON.stringify(await keygen(path.resolve(arg(args.out, "out")))) +
+                    "\n");
+            },
+        }),
+        mint: defineCommand({
+            args: {
+                key: { type: "string", required: true },
+                session: { type: "string", required: true },
+                calls: { type: "string", required: true },
+                ttl: { type: "string", default: "3600" },
+                "key-id": { type: "string", default: "1" },
+                out: { type: "string", required: true },
+            },
+            async run({ args }) {
+                const t = mint(await readFile(arg(args.key, "key")), sessionBytes(arg(args.session, "session")), unsigned32(args.calls, "calls", 1), Math.floor(Date.now() / 1000) + unsigned32(args.ttl, "TTL", 1), unsigned32(args["key-id"], "key id"), randomBytes(16));
+                await writeFile(arg(args.out, "out"), t, { flag: "wx", mode: 0o600 });
+                process.stdout.write(JSON.stringify({ file: args.out, ...claims(t) }) + "\n");
+            },
+        }),
+        inspect: defineCommand({
+            args: {
+                token: { type: "string", required: true },
+                session: { type: "string" },
+                "public-key": { type: "string" },
+            },
+            async run({ args }) {
+                const t = await readToken(arg(args.token, "token"));
+                const info = claims(t);
+                let verified = false;
+                if (args.session || args["public-key"]) {
+                    if (!args.session || !args["public-key"])
+                        throw new Error("Verification requires --session and --public-key together");
+                    const pub = (await readFile(arg(args["public-key"], "public-key"), "utf8")).trim();
+                    if (!/^[0-9a-f]{64}$/.test(pub))
+                        throw new Error("Public key must be raw 32-byte hex");
+                    const native = loadNativeEngine();
+                    const result = native.verifyBudget(t, sessionBytes(arg(args.session, "session")), Buffer.from(pub, "hex"), info.keyId);
+                    if (result !== 0)
+                        throw new Error(`Rust token verification rejected (${result})`);
+                    verified = true;
+                }
+                process.stdout.write(JSON.stringify({
+                    ...info,
+                    verified,
+                    accounting: "Signed limit only; live remaining calls belong to the running native session",
+                }) + "\n");
+            },
+        }),
+    },
+});
+//# sourceMappingURL=budget.js.map

package/dist/commands/budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.js","sourceRoot":"","sources":["../../src/commands/budget.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,uCAAuC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,MAAM,EACN,IAAI,EACJ,MAAM,EACN,SAAS,EACT,YAAY,EACZ,UAAU,GACX,MAAM,cAAc,CAAC;AACtB,SAAS,GAAG,CAAC,KAAc,EAAE,KAAa;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;IAC7E,OAAO,KAAK,CAAC;AACf,CAAC;AACD,eAAe,aAAa,CAAC;IAC3B,IAAI,EAAE;QACJ,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,wDAAwD;KACtE;IACD,WAAW,EAAE;QACX,MAAM,EAAE,aAAa,CAAC;YACpB,IAAI,EAAE;gBACJ,GAAG,EAAE;oBACH,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,YAAY;oBACrB,WAAW,EAAE,mBAAmB;iBACjC;aACF;YACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;gBAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC9D,IAAI,CACP,CAAC;YACJ,CAAC;SACF,CAAC;QACF,IAAI,EAAE,aAAa,CAAC;YAClB,IAAI,EAAE;gBACJ,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACvC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC3C,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACzC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE;gBACxC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE;gBAC1C,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;aACxC;YACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;gBAChB,MAAM,CAAC,GAAG,IAAI,CACZ,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,EACpC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,EAC1C,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,EAClC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,EAC9D,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,EACpC,WAAW,CAAC,EAAE,CAAC,CAChB,CAAC;gBACF,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CACxD,CAAC;YACJ,CAAC;SACF,CAAC;QACF,OAAO,EAAE,aAAa,CAAC;YACrB,IAAI,EAAE;gBACJ,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACzC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC3B,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACjC;YACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;gBAChB,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;gBACpD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBACvB,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;oBACvC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;wBACtC,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;oBACJ,MAAM,GAAG,GAAG,CACV,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAC9D,CAAC,IAAI,EAAE,CAAC;oBACT,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;wBAC7B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;oBACxD,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;oBAClC,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAChC,CAAC,EACD,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,EAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EACvB,IAAI,CAAC,KAAK,CACX,CAAC;oBACF,IAAI,MAAM,KAAK,CAAC;wBACd,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,GAAG,CAAC,CAAC;oBAClE,QAAQ,GAAG,IAAI,CAAC;gBAClB,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;oBACb,GAAG,IAAI;oBACP,QAAQ;oBACR,UAAU,EACR,8EAA8E;iBACjF,CAAC,GAAG,IAAI,CACV,CAAC;YACJ,CAAC;SACF,CAAC;KACH;CACF,CAAC,CAAC"}

package/dist/commands/build.d.ts

@@ -0,0 +1,10 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+declare const _default: import("citty").CommandDef<{
+    cwd: {
+        type: "string";
+        default: string;
+        description: string;
+    };
+}>;
+export default _default;

package/dist/commands/build.js

@@ -0,0 +1,18 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+import { defineCommand } from "citty";
+import path from "node:path";
+import { buildProject } from "../project.js";
+export default defineCommand({
+    meta: {
+        name: "build",
+        description: "Build a production Node deployment bundle",
+    },
+    args: {
+        cwd: { type: "string", default: ".", description: "Project directory" },
+    },
+    async run({ args }) {
+        process.stdout.write(`Built ${await buildProject(path.resolve(args.cwd))}\n`);
+    },
+});
+//# sourceMappingURL=build.js.map

package/dist/commands/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../src/commands/build.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,uCAAuC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,eAAe,aAAa,CAAC;IAC3B,IAAI,EAAE;QACJ,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,2CAA2C;KACzD;IACD,IAAI,EAAE;QACJ,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,mBAAmB,EAAE;KACxE;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,SAAS,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CACxD,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/commands/dev.d.ts

@@ -0,0 +1,22 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+declare const _default: import("citty").CommandDef<{
+    cwd: {
+        type: "string";
+        default: string;
+    };
+    port: {
+        type: "string";
+        default: string;
+    };
+    calls: {
+        type: "string";
+        default: string;
+    };
+    metrics: {
+        type: "boolean";
+        default: false;
+        description: string;
+    };
+}>;
+export default _default;

package/dist/commands/dev.js

@@ -0,0 +1,36 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+import { defineCommand } from "citty";
+import path from "node:path";
+import { devServer } from "../dev.js";
+import { unsigned32 } from "../budget.js";
+export default defineCommand({
+    meta: {
+        name: "dev",
+        description: "Loopback dev server, hot reload and native budget simulation",
+    },
+    args: {
+        cwd: { type: "string", default: "." },
+        port: { type: "string", default: "3000" },
+        calls: { type: "string", default: "100" },
+        metrics: {
+            type: "boolean",
+            default: false,
+            description: "Use the instrumented prebuilt addon",
+        },
+    },
+    async run({ args }) {
+        const port = unsigned32(args.port, "port");
+        if (port > 65535)
+            throw new Error("Invalid port");
+        const server = await devServer(path.resolve(args.cwd), port, unsigned32(args.calls, "calls", 1), args.metrics);
+        const stop = () => {
+            process.off("SIGINT", stop);
+            process.off("SIGTERM", stop);
+            void server.close();
+        };
+        process.once("SIGINT", stop);
+        process.once("SIGTERM", stop);
+    },
+});
+//# sourceMappingURL=dev.js.map

package/dist/commands/dev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.js","sourceRoot":"","sources":["../../src/commands/dev.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,uCAAuC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,eAAe,aAAa,CAAC;IAC3B,IAAI,EAAE;QACJ,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,8DAA8D;KAC5E;IACD,IAAI,EAAE;QACJ,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE;QACrC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE;QACzC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE;QACzC,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,qCAAqC;SACnD;KACF;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,IAAI,GAAG,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EACtB,IAAI,EACJ,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,EAClC,IAAI,CAAC,OAAO,CACb,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC7B,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;CACF,CAAC,CAAC"}

package/dist/commands/init.d.ts

@@ -0,0 +1,15 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+export declare function scaffold(directory: string, name: string): Promise<string>;
+declare const _default: import("citty").CommandDef<{
+    name: {
+        type: "positional";
+        description: string;
+    };
+    yes: {
+        type: "boolean";
+        description: string;
+        default: false;
+    };
+}>;
+export default _default;

package/dist/commands/init.js

@@ -0,0 +1,105 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+import { defineCommand } from "citty";
+import * as prompt from "@clack/prompts";
+import { mkdir, readdir, writeFile, readFile } from "node:fs/promises";
+import path from "node:path";
+export async function scaffold(directory, name) {
+    if (!/^[a-z][a-z0-9-]{0,63}$/.test(name))
+        throw new Error("Use a lowercase project name with letters, numbers and hyphens");
+    try {
+        if ((await readdir(directory)).length)
+            throw new Error("Refusing to overwrite a nonempty directory");
+    }
+    catch (error) {
+        if (!(error instanceof Error) ||
+            !("code" in error) ||
+            error.code !== "ENOENT")
+            throw error;
+    }
+    await mkdir(path.join(directory, "tools"), { recursive: true });
+    const files = {
+        LICENSE: await readFile(new URL("../../LICENSE", import.meta.url), "utf8"),
+        "package.json": JSON.stringify({
+            name,
+            version: "0.1.0",
+            private: true,
+            license: "MIT",
+            type: "module",
+            engines: { node: ">=20" },
+            scripts: {
+                dev: "wire dev",
+                build: "wire build",
+                start: "node dist/server.mjs",
+            },
+            dependencies: {
+                "@wire-runtime/sdk": "1.0.0",
+                "@sinclair/typebox": "0.34.52",
+            },
+            devDependencies: { "@wire-runtime/cli": "1.0.0", typescript: "5.9.3" },
+        }, null, 2) + "\n",
+        "wire.config.json": JSON.stringify({
+            entry: "tools/index.ts",
+            rateLimit: { requestsPerSecond: 100, burst: 100 },
+            cacheEntries: 64,
+            maxRequestBytes: 16384,
+        }, null, 2) + "\n",
+        "tools/index.ts": `// SPDX-License-Identifier: MIT\n// Copyright (c) 2026 Wire contributors\nimport { createTool } from '@wire-runtime/sdk';\nimport { Type } from '@sinclair/typebox';\nexport const tools=[createTool({name:'echo',input:Type.Object({text:Type.String()},{additionalProperties:false}),output:Type.String(),cache:{pure:true,ttlMs:1000},handler:({text})=>text})];\n`,
+        "tsconfig.json": JSON.stringify({
+            compilerOptions: {
+                target: "ES2022",
+                module: "NodeNext",
+                moduleResolution: "NodeNext",
+                strict: true,
+                noEmit: true,
+            },
+            include: ["tools"],
+        }, null, 2) + "\n",
+        ".gitignore": "node_modules/\ndist/\n.wire/\n.env\n",
+        "README.md": "# " +
+            name +
+            "\n\nInstall dependencies, then run `npm run dev`. Development budgets are temporary simulations.\nFor production run `npm run build` and provide WIRE_BUDGET_FILE (raw token), WIRE_SESSION_ID\n(32 hex characters), and WIRE_TRUSTED_KEYS (JSON object of key IDs to raw public-key hex).\nUse `wire budget --help` for key generation, minting and Rust verification.\n",
+    };
+    for (const [file, data] of Object.entries(files))
+        await writeFile(path.join(directory, file), data, { flag: "wx" });
+    return directory;
+}
+export default defineCommand({
+    meta: { name: "init", description: "Create a typed Wire tool project" },
+    args: {
+        name: { type: "positional", description: "Project name" },
+        yes: {
+            type: "boolean",
+            description: "Use explicit name without prompts",
+            default: false,
+        },
+    },
+    async run({ args }) {
+        let name = args.name;
+        if (!args.yes) {
+            if (!process.stdin.isTTY)
+                throw new Error("Non-interactive scaffolding requires a name and --yes");
+            prompt.intro("Create a Wire project");
+            const answer = await prompt.text({
+                message: "Project name",
+                initialValue: name ?? "wire-tools",
+                validate: (v) => /^[a-z][a-z0-9-]{0,63}$/.test(v ?? "")
+                    ? undefined
+                    : "Use lowercase letters, digits and hyphens",
+            });
+            if (prompt.isCancel(answer)) {
+                prompt.cancel("Cancelled");
+                return;
+            }
+            name = answer;
+        }
+        if (!name)
+            throw new Error("Project name required");
+        const directory = await scaffold(path.resolve(name), path.basename(name));
+        if (!args.yes)
+            prompt.outro(`Created ${directory}`);
+        else
+            process.stdout.write(directory + "\n");
+    },
+});
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,uCAAuC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,SAAiB,EAAE,IAAY;IAC5D,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;YACnC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;YACzB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;YAClB,KAAK,CAAC,IAAI,KAAK,QAAQ;YAEvB,MAAM,KAAK,CAAC;IAChB,CAAC;IACD,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,KAAK,GAA2B;QACpC,OAAO,EAAE,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAC1E,cAAc,EACZ,IAAI,CAAC,SAAS,CACZ;YACE,IAAI;YACJ,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACzB,OAAO,EAAE;gBACP,GAAG,EAAE,UAAU;gBACf,KAAK,EAAE,YAAY;gBACnB,KAAK,EAAE,sBAAsB;aAC9B;YACD,YAAY,EAAE;gBACZ,mBAAmB,EAAE,OAAO;gBAC5B,mBAAmB,EAAE,SAAS;aAC/B;YACD,eAAe,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE;SACvE,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI;QACV,kBAAkB,EAChB,IAAI,CAAC,SAAS,CACZ;YACE,KAAK,EAAE,gBAAgB;YACvB,SAAS,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;YACjD,YAAY,EAAE,EAAE;YAChB,eAAe,EAAE,KAAK;SACvB,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI;QACV,gBAAgB,EAAE,uWAAuW;QACzX,eAAe,EACb,IAAI,CAAC,SAAS,CACZ;YACE,eAAe,EAAE;gBACf,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,UAAU;gBAClB,gBAAgB,EAAE,UAAU;gBAC5B,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,IAAI;aACb;YACD,OAAO,EAAE,CAAC,OAAO,CAAC;SACnB,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI;QACV,YAAY,EAAE,sCAAsC;QACpD,WAAW,EACT,IAAI;YACJ,IAAI;YACJ,2WAA2W;KAC9W,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAC9C,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,eAAe,aAAa,CAAC;IAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kCAAkC,EAAE;IACvE,IAAI,EAAE;QACJ,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE;QACzD,GAAG,EAAE;YACH,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,mCAAmC;YAChD,OAAO,EAAE,KAAK;SACf;KACF;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;gBACtB,MAAM,IAAI,KAAK,CACb,uDAAuD,CACxD,CAAC;YACJ,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;gBAC/B,OAAO,EAAE,cAAc;gBACvB,YAAY,EAAE,IAAI,IAAI,YAAY;gBAClC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CACd,wBAAwB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;oBACpC,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,2CAA2C;aAClD,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAC3B,OAAO;YACT,CAAC;YACD,IAAI,GAAG,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,MAAM,CAAC,KAAK,CAAC,WAAW,SAAS,EAAE,CAAC,CAAC;;YAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAC9C,CAAC;CACF,CAAC,CAAC"}

package/dist/dev-worker.d.ts

@@ -0,0 +1,3 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+export {};

package/dist/dev-worker.js

@@ -0,0 +1,64 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+import { randomBytes, generateKeyPairSync } from "node:crypto";
+import { pathToFileURL } from "node:url";
+import { Runtime } from "@wire-runtime/sdk";
+import { mint } from "./budget.js";
+const [filename, configText, callsText] = process.argv.slice(2);
+if (!filename || !configText || !callsText)
+    throw new Error("Missing dev worker configuration");
+const config = JSON.parse(configText);
+const { privateKey, publicKey } = generateKeyPairSync("ed25519");
+const session = randomBytes(16);
+const expires = Math.floor(Date.now() / 1000) + 3600;
+const pem = privateKey.export({ format: "pem", type: "pkcs8" });
+const token = mint(pem, session, Number(callsText), expires, 1, randomBytes(16));
+const exported = (await import(pathToFileURL(filename).href));
+if (!Array.isArray(exported.tools))
+    throw new Error("Tool entry must export tools[]");
+const runtime = Runtime.create({
+    tools: exported.tools,
+    transport: { kind: "stdio" },
+    budget: {
+        token,
+        sessionId: session,
+        trustedKeys: new Map([
+            [1, publicKey.export({ type: "spki", format: "der" }).subarray(-32)],
+        ]),
+    },
+    ...config,
+});
+// No private key is persisted or returned over IPC.
+process.on("message", (message) => {
+    const m = message;
+    void (async () => {
+        try {
+            if (m.kind === "close") {
+                await runtime.close();
+                process.disconnect();
+                return;
+            }
+            const result = m.kind === "request"
+                ? await runtime.request(Buffer.from(m.body ?? ""))
+                : runtime.diagnostics();
+            process.send?.({
+                id: m.id,
+                result: Buffer.isBuffer(result) ? result.toString() : result,
+            });
+        }
+        catch {
+            process.send?.({ id: m.id, error: "Development worker failed" });
+        }
+    })();
+});
+process.on("disconnect", () => {
+    void runtime.close().finally(() => process.exit(0));
+});
+process.send?.({
+    ready: true,
+    sessionId: session.toString("hex"),
+    expiresAt: expires,
+    maxToolCalls: Number(callsText),
+    telemetry: runtime.diagnostics().telemetry,
+});
+//# sourceMappingURL=dev-worker.js.map

package/dist/dev-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-worker.js","sourceRoot":"","sources":["../src/dev-worker.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,uCAAuC;AACvC,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAChE,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS;IACxC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AACtD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAInC,CAAC;AACF,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;AACjE,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;AAChC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;AACrD,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAChE,MAAM,KAAK,GAAG,IAAI,CAChB,GAAG,EACH,OAAO,EACP,MAAM,CAAC,SAAS,CAAC,EACjB,OAAO,EACP,CAAC,EACD,WAAW,CAAC,EAAE,CAAC,CAChB,CAAC;AACF,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAE3D,CAAC;AACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IAChC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;AACpD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK;IACrB,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5B,MAAM,EAAE;QACN,KAAK;QACL,SAAS,EAAE,OAAO;QAClB,WAAW,EAAE,IAAI,GAAG,CAAC;YACnB,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;SACrE,CAAC;KACH;IACD,GAAG,MAAM;CACV,CAAC,CAAC;AACH,oDAAoD;AACpD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAgB,EAAE,EAAE;IACzC,MAAM,CAAC,GAAG,OAAsD,CAAC;IACjE,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,IAAI,CAAC;YACH,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACvB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;gBACtB,OAAO,CAAC,UAAU,EAAE,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GACV,CAAC,CAAC,IAAI,KAAK,SAAS;gBAClB,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBAClD,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,EAAE,CAAC;gBACb,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM;aAC7D,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;AACP,CAAC,CAAC,CAAC;AACH,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE;IAC5B,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AACH,OAAO,CAAC,IAAI,EAAE,CAAC;IACb,KAAK,EAAE,IAAI;IACX,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IAClC,SAAS,EAAE,OAAO;IAClB,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC;IAC/B,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,SAAS;CAC3C,CAAC,CAAC"}

package/dist/dev.d.ts

@@ -0,0 +1,5 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+export declare function devServer(cwd: string, port: number, calls: number, telemetry?: boolean): Promise<{
+    close(): Promise<void>;
+}>;

package/dist/dev.js

@@ -0,0 +1,314 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+import { createServer } from "node:http";
+import { fork } from "node:child_process";
+import { watch } from "node:fs";
+import { mkdir } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+import path from "node:path";
+import { context } from "esbuild";
+import { readProject } from "./project.js";
+function startWorker(file, config, calls, telemetry) {
+    return new Promise((resolve, reject) => {
+        const child = fork(fileURLToPath(new URL("./dev-worker.js", import.meta.url)), [file, JSON.stringify(config), String(calls)], {
+            serialization: "advanced",
+            stdio: ["ignore", "inherit", "inherit", "ipc"],
+            env: { ...process.env, WIRE_TELEMETRY: telemetry ? "1" : "0" },
+        });
+        const pending = new Map();
+        let next = 1;
+        let ready = false;
+        const timeout = setTimeout(() => {
+            child.kill();
+            reject(new Error("Development worker startup timed out"));
+        }, 10000);
+        child.on("error", (error) => {
+            clearTimeout(timeout);
+            if (!ready)
+                reject(error);
+            for (const p of pending.values()) {
+                clearTimeout(p.timer);
+                p.reject(error);
+            }
+            pending.clear();
+        });
+        child.on("exit", () => {
+            clearTimeout(timeout);
+            if (!ready)
+                reject(new Error("New worker failed; previous worker retained"));
+            for (const p of pending.values()) {
+                clearTimeout(p.timer);
+                p.reject(new Error("Development worker exited"));
+            }
+            pending.clear();
+        });
+        child.on("message", (value) => {
+            const m = value;
+            if (m.ready) {
+                clearTimeout(timeout);
+                ready = true;
+                resolve({
+                    child,
+                    ready: m,
+                    call(kind, body) {
+                        if (pending.size >= 32)
+                            return Promise.reject(new Error("Development worker busy"));
+                        return new Promise((resolve, reject) => {
+                            const id = next++;
+                            const timer = setTimeout(() => {
+                                pending.delete(id);
+                                reject(new Error("Development request timed out"));
+                            }, 30000);
+                            pending.set(id, { resolve, reject, timer });
+                            child.send({ id, kind, body }, (error) => {
+                                if (error) {
+                                    clearTimeout(timer);
+                                    pending.delete(id);
+                                    reject(error);
+                                }
+                            });
+                        });
+                    },
+                    stop() {
+                        if (child.connected)
+                            child.send({ id: 0, kind: "close" }, () => { });
+                        const t = setTimeout(() => child.kill(), 5000);
+                        t.unref();
+                    },
+                });
+                return;
+            }
+            if (m.id !== undefined) {
+                const p = pending.get(m.id);
+                if (p) {
+                    clearTimeout(p.timer);
+                    pending.delete(m.id);
+                    if (m.error)
+                        p.reject(new Error(m.error));
+                    else
+                        p.resolve(m.result);
+                }
+            }
+        });
+    });
+}
+async function body(req, max) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let size = 0;
+        req.on("data", (c) => {
+            size += c.length;
+            if (size <= max)
+                chunks.push(c);
+        });
+        req.on("end", () => size > max
+            ? reject(new Error("Request body too large"))
+            : resolve(Buffer.concat(chunks).toString()));
+        req.on("error", reject);
+    });
+}
+function send(res, code, value) {
+    res.writeHead(code, {
+        "content-type": "application/json",
+        "cache-control": "no-store",
+    });
+    res.end(JSON.stringify(value));
+}
+export async function devServer(cwd, port, calls, telemetry = false) {
+    const config = await readProject(cwd);
+    const dir = path.join(cwd, ".wire/dev");
+    await mkdir(dir, { recursive: true });
+    let active;
+    let stopped = false;
+    let generation = 0;
+    let initialResolve = () => { };
+    let initialReject = () => { };
+    const initial = new Promise((resolve, reject) => {
+        initialResolve = resolve;
+        initialReject = reject;
+    });
+    const buildContext = await context({
+        absWorkingDir: cwd,
+        entryPoints: [config.entry],
+        outfile: path.join(dir, "tools.mjs"),
+        bundle: true,
+        packages: "external",
+        platform: "node",
+        format: "esm",
+        target: "node20",
+        banner: { js: "// SPDX-License-Identifier: MIT\n// Copyright (c) 2026 Wire contributors" },
+        sourcemap: true,
+        logLevel: "silent",
+        plugins: [
+            {
+                name: "wire-reload",
+                setup(build) {
+                    build.onEnd(async (result) => {
+                        if (result.errors.length) {
+                            if (!active)
+                                initialReject(new Error("Initial tool build failed"));
+                            process.stderr.write(JSON.stringify({
+                                event: "build_error",
+                                errors: result.errors.map((e) => e.text),
+                            }) + "\n");
+                            return;
+                        }
+                        try {
+                            const nextConfig = await readProject(cwd);
+                            if (nextConfig.entry !== config.entry)
+                                throw new Error("Entry changes require restarting wire dev");
+                            const next = await startWorker(path.join(dir, "tools.mjs"), nextConfig, calls, telemetry);
+                            if (stopped) {
+                                next.stop();
+                                return;
+                            }
+                            const old = active;
+                            active = next;
+                            generation++;
+                            old?.stop();
+                            initialResolve();
+                            process.stdout.write(JSON.stringify({
+                                event: "wire_worker_ready",
+                                generation,
+                                ...next.ready,
+                            }) + "\n");
+                        }
+                        catch (error) {
+                            if (!active)
+                                initialReject(error instanceof Error ? error : new Error(String(error)));
+                            process.stderr.write(JSON.stringify({
+                                event: "reload_error",
+                                message: String(error),
+                            }) + "\n");
+                        }
+                    });
+                },
+            },
+        ],
+    });
+    await buildContext.watch();
+    try {
+        await initial;
+    }
+    catch (error) {
+        await buildContext.dispose();
+        throw error;
+    }
+    const server = createServer((req, res) => {
+        void (async () => {
+            const host = req.headers.host ?? "";
+            const address = server.address();
+            const actualPort = typeof address === "object" && address ? address.port : port;
+            if (![`127.0.0.1:${actualPort}`, `localhost:${actualPort}`].includes(host)) {
+                send(res, 403, { error: "Loopback host required" });
+                return;
+            }
+            if (req.headers.origin && req.headers.origin !== `http://${host}`) {
+                send(res, 403, { error: "Origin denied" });
+                return;
+            }
+            const worker = active;
+            const workerGeneration = generation;
+            if (!worker) {
+                send(res, 503, { error: "Worker unavailable" });
+                return;
+            }
+            if (req.method === "GET" && req.url === "/__wire/budget") {
+                const d = (await worker.call("diagnostics"));
+                send(res, 200, {
+                    ...worker.ready,
+                    remaining: d.remaining,
+                    generation: workerGeneration,
+                });
+                return;
+            }
+            if (req.method === "GET" && req.url === "/metrics") {
+                const d = (await worker.call("diagnostics"));
+                res.writeHead(200, {
+                    "content-type": "text/plain; version=0.0.4; charset=utf-8",
+                });
+                res.end(d.prometheus);
+                return;
+            }
+            if (req.method === "GET" && req.url === "/") {
+                res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
+                res.end(`<title>Wire development</title><h1>Wire development</h1><p>Temporary signed budget; requests are enforced in Rust.</p><pre id="budget"></pre><textarea id="request" rows="7" cols="72">{"jsonrpc":"2.0","id":1,"method":"echo","params":{"text":"hello"}}</textarea><p><button id="send">Execute</button></p><pre id="result"></pre><script>async function refresh(){document.querySelector('#budget').textContent=JSON.stringify(await(await fetch('/__wire/budget')).json(),null,2)}document.querySelector('#send').onclick=async()=>{document.querySelector('#result').textContent=await(await fetch('/rpc',{method:'POST',headers:{'content-type':'application/json'},body:document.querySelector('#request').value})).text();refresh()};refresh();setInterval(refresh,2000)</script>`);
+                return;
+            }
+            if (req.method !== "POST" || req.url !== "/rpc") {
+                send(res, 404, { error: "Not found" });
+                return;
+            }
+            if (!req.headers["content-type"]?.startsWith("application/json")) {
+                send(res, 415, { error: "application/json required" });
+                return;
+            }
+            const text = await body(req, config.maxRequestBytes);
+            const start = performance.now();
+            const result = (await worker.call("request", text));
+            let method = "<invalid>";
+            let errorCode;
+            try {
+                const parsed = JSON.parse(text);
+                if (typeof parsed.method === "string" &&
+                    /^[A-Za-z0-9_-]{1,64}$/.test(parsed.method))
+                    method = parsed.method;
+                const response = result
+                    ? JSON.parse(result)
+                    : undefined;
+                errorCode = response?.error?.code;
+            }
+            catch {
+                /* No request payload enters logs. */
+            }
+            process.stderr.write(JSON.stringify({
+                event: "request",
+                method,
+                durationMs: performance.now() - start,
+                errorCode,
+                generation: workerGeneration,
+            }) + "\n");
+            if (result === null) {
+                res.writeHead(204);
+                res.end();
+            }
+            else {
+                res.writeHead(200, { "content-type": "application/json" });
+                res.end(result);
+            }
+        })().catch((error) => {
+            if (!res.headersSent)
+                send(res, 503, { error: String(error) });
+            else
+                res.end();
+        });
+    });
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(port, "127.0.0.1", resolve);
+    });
+    const bound = server.address();
+    process.stdout.write(JSON.stringify({
+        event: "wire_dev_ready",
+        url: `http://127.0.0.1:${typeof bound === "object" && bound ? bound.port : port}`,
+    }) + "\n");
+    const configWatcher = watch(cwd, (_event, name) => {
+        if (name?.toString() === "wire.config.json")
+            void buildContext
+                .rebuild()
+                .catch((error) => process.stderr.write(String(error) + "\n"));
+    });
+    return {
+        async close() {
+            if (stopped)
+                return;
+            stopped = true;
+            configWatcher.close();
+            await buildContext.dispose();
+            active?.stop();
+            server.closeAllConnections();
+            await new Promise((resolve) => server.close(() => resolve()));
+        },
+    };
+}
+//# sourceMappingURL=dev.js.map

package/dist/dev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.js","sourceRoot":"","sources":["../src/dev.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,uCAAuC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAE1C,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAc3C,SAAS,WAAW,CAClB,IAAY,EACZ,MAAe,EACf,KAAa,EACb,SAAkB;IAElB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,IAAI,CAChB,aAAa,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC1D,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAC7C;YACE,aAAa,EAAE,UAAU;YACzB,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC;YAC9C,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;SAC/D,CACF,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,GAAG,EAOpB,CAAC;QACJ,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,KAAK,CAAC,IAAI,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAC5D,CAAC,EAAE,KAAK,CAAC,CAAC;QACV,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,CAAC,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBACjC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACpB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,CAAC,KAAK;gBACR,MAAM,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC;YACnE,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBACjC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;YACnD,CAAC;YACD,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,KAAc,EAAE,EAAE;YACrC,MAAM,CAAC,GAAG,KAIT,CAAC;YACF,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBACZ,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,KAAK,GAAG,IAAI,CAAC;gBACb,OAAO,CAAC;oBACN,KAAK;oBACL,KAAK,EAAE,CAAC;oBACR,IAAI,CAAC,IAAI,EAAE,IAAI;wBACb,IAAI,OAAO,CAAC,IAAI,IAAI,EAAE;4BACpB,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;wBAC9D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;4BACrC,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;4BAClB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gCAC5B,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gCACnB,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;4BACrD,CAAC,EAAE,KAAK,CAAC,CAAC;4BACV,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;4BAC5C,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE;gCACvC,IAAI,KAAK,EAAE,CAAC;oCACV,YAAY,CAAC,KAAK,CAAC,CAAC;oCACpB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oCACnB,MAAM,CAAC,KAAK,CAAC,CAAC;gCAChB,CAAC;4BACH,CAAC,CAAC,CAAC;wBACL,CAAC,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI;wBACF,IAAI,KAAK,CAAC,SAAS;4BAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;wBACpE,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;wBAC/C,CAAC,CAAC,KAAK,EAAE,CAAC;oBACZ,CAAC;iBACF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC5B,IAAI,CAAC,EAAE,CAAC;oBACN,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;oBACtB,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACrB,IAAI,CAAC,CAAC,KAAK;wBAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;;wBACrC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AACD,KAAK,UAAU,IAAI,CAAC,GAAoB,EAAE,GAAW;IACnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YAC3B,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC;YACjB,IAAI,IAAI,IAAI,GAAG;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CACjB,IAAI,GAAG,GAAG;YACR,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC7C,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAC9C,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AACD,SAAS,IAAI,CAAC,GAAmB,EAAE,IAAY,EAAE,KAAc;IAC7D,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE;QAClB,cAAc,EAAE,kBAAkB;QAClC,eAAe,EAAE,UAAU;KAC5B,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACjC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAW,EACX,IAAY,EACZ,KAAa,EACb,SAAS,GAAG,KAAK;IAEjB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACxC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,cAAc,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;IAC1C,IAAI,aAAa,GAAuB,GAAG,EAAE,GAAE,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpD,cAAc,GAAG,OAAO,CAAC;QACzB,aAAa,GAAG,MAAM,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC;QACjC,aAAa,EAAE,GAAG;QAClB,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;QAC3B,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;QACpC,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,EAAE,EAAE,EAAE,0EAA0E,EAAE;QAC1F,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,aAAa;gBACnB,KAAK,CAAC,KAAK;oBACT,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;wBAC3B,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;4BACzB,IAAI,CAAC,MAAM;gCACT,aAAa,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;4BACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;gCACb,KAAK,EAAE,aAAa;gCACpB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;6BACzC,CAAC,GAAG,IAAI,CACV,CAAC;4BACF,OAAO;wBACT,CAAC;wBACD,IAAI,CAAC;4BACH,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;4BAC1C,IAAI,UAAU,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;gCACnC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;4BAC/D,MAAM,IAAI,GAAG,MAAM,WAAW,CAC5B,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAC3B,UAAU,EACV,KAAK,EACL,SAAS,CACV,CAAC;4BACF,IAAI,OAAO,EAAE,CAAC;gCACZ,IAAI,CAAC,IAAI,EAAE,CAAC;gCACZ,OAAO;4BACT,CAAC;4BACD,MAAM,GAAG,GAAG,MAAM,CAAC;4BACnB,MAAM,GAAG,IAAI,CAAC;4BACd,UAAU,EAAE,CAAC;4BACb,GAAG,EAAE,IAAI,EAAE,CAAC;4BACZ,cAAc,EAAE,CAAC;4BACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;gCACb,KAAK,EAAE,mBAAmB;gCAC1B,UAAU;gCACV,GAAG,IAAI,CAAC,KAAK;6BACd,CAAC,GAAG,IAAI,CACV,CAAC;wBACJ,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,IAAI,CAAC,MAAM;gCACT,aAAa,CACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;4BACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;gCACb,KAAK,EAAE,cAAc;gCACrB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC;6BACvB,CAAC,GAAG,IAAI,CACV,CAAC;wBACJ,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC;aACF;SACF;KACF,CAAC,CAAC;IACH,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,OAAO,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,UAAU,GACd,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/D,IACE,CAAC,CAAC,aAAa,UAAU,EAAE,EAAE,aAAa,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EACtE,CAAC;gBACD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,EAAE,EAAE,CAAC;gBAClE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC;YACtB,MAAM,gBAAgB,GAAG,UAAU,CAAC;YACpC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,gBAAgB,EAAE,CAAC;gBACzD,MAAM,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAG1C,CAAC;gBACF,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;oBACb,GAAG,MAAM,CAAC,KAAK;oBACf,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,UAAU,EAAE,gBAAgB;iBAC7B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;gBACnD,MAAM,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAA2B,CAAC;gBACvE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;oBACjB,cAAc,EAAE,0CAA0C;iBAC3D,CAAC,CAAC;gBACH,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;gBAC5C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CACL,2vBAA2vB,CAC5vB,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;gBAChD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACjE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBACvD,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAkB,CAAC;YACrE,IAAI,MAAM,GAAG,WAAW,CAAC;YACzB,IAAI,SAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAyB,CAAC;gBACxD,IACE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;oBACjC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;oBAE3C,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBACzB,MAAM,QAAQ,GAAG,MAAM;oBACrB,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAoC;oBACxD,CAAC,CAAC,SAAS,CAAC;gBACd,SAAS,GAAG,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,qCAAqC;YACvC,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,SAAS;gBAChB,MAAM;gBACN,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK;gBACrC,SAAS;gBACT,UAAU,EAAE,gBAAgB;aAC7B,CAAC,GAAG,IAAI,CACV,CAAC;YACF,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACnB,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;;gBAC1D,GAAG,CAAC,GAAG,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;QACb,KAAK,EAAE,gBAAgB;QACvB,GAAG,EAAE,oBAAoB,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;KAClF,CAAC,GAAG,IAAI,CACV,CAAC;IACF,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;QAChD,IAAI,IAAI,EAAE,QAAQ,EAAE,KAAK,kBAAkB;YACzC,KAAK,YAAY;iBACd,OAAO,EAAE;iBACT,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,OAAO;QACL,KAAK,CAAC,KAAK;YACT,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,aAAa,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,EAAE,IAAI,EAAE,CAAC;YACf,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC7B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACtE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+export {};

package/dist/index.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+import { defineCommand, runMain } from "citty";
+const main = defineCommand({
+    meta: { name: "wire", version: "1.0.0", description: "@wire-runtime CLI" },
+    subCommands: {
+        init: () => import("./commands/init.js").then((m) => m.default),
+        dev: () => import("./commands/dev.js").then((m) => m.default),
+        build: () => import("./commands/build.js").then((m) => m.default),
+        budget: () => import("./commands/budget.js").then((m) => m.default),
+    },
+});
+void runMain(main);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,+BAA+B;AAC/B,uCAAuC;AACvC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAE/C,MAAM,IAAI,GAAG,aAAa,CAAC;IACzB,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE;IAC1E,WAAW,EAAE;QACX,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAC/D,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAC7D,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QACjE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;KACpE;CACF,CAAC,CAAC;AAEH,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/project.d.ts

@@ -0,0 +1,15 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+export interface Project {
+    entry: string;
+    rateLimit: {
+        requestsPerSecond: number;
+        burst: number;
+    };
+    maxRequestBytes: number;
+    cacheEntries: number;
+}
+export declare function readProject(cwd: string): Promise<Project>;
+export declare function compileTools(cwd: string, outfile: string): Promise<void>;
+export declare function atomicWrite(filename: string, data: string | Buffer): Promise<void>;
+export declare function buildProject(cwd: string): Promise<string>;

package/dist/project.js

@@ -0,0 +1,79 @@
+// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+import { readFile, mkdir, writeFile, rename } from "node:fs/promises";
+import path from "node:path";
+import { build } from "esbuild";
+export async function readProject(cwd) {
+    const data = await readFile(path.join(cwd, "wire.config.json"));
+    if (data.length > 65536)
+        throw new Error("wire.config.json exceeds 64 KiB");
+    const value = JSON.parse(data.toString());
+    if (Object.keys(value).some((k) => !["entry", "rateLimit", "maxRequestBytes", "cacheEntries"].includes(k)))
+        throw new Error("Unknown Wire config field");
+    const entry = value.entry ?? "tools/index.ts";
+    if (typeof entry !== "string" ||
+        path.isAbsolute(entry) ||
+        path.relative(cwd, path.resolve(cwd, entry)).startsWith(".."))
+        throw new Error("Entry must be inside the project");
+    const rate = value.rateLimit;
+    const result = {
+        entry,
+        rateLimit: rate ?? { requestsPerSecond: 100, burst: 100 },
+        maxRequestBytes: Number(value.maxRequestBytes ?? 16384),
+        cacheEntries: Number(value.cacheEntries ?? 64),
+    };
+    if (!Number.isFinite(result.rateLimit.requestsPerSecond) ||
+        result.rateLimit.requestsPerSecond <= 0 ||
+        !Number.isInteger(result.rateLimit.burst) ||
+        result.rateLimit.burst < 1 ||
+        !Number.isInteger(result.maxRequestBytes) ||
+        result.maxRequestBytes < 256 ||
+        result.maxRequestBytes > 1048576 ||
+        !Number.isInteger(result.cacheEntries) ||
+        result.cacheEntries < 0 ||
+        result.cacheEntries > 4096)
+        throw new Error("Invalid Wire limits");
+    return result;
+}
+export async function compileTools(cwd, outfile) {
+    await build({
+        absWorkingDir: cwd,
+        entryPoints: [(await readProject(cwd)).entry],
+        outfile,
+        bundle: true,
+        packages: "external",
+        platform: "node",
+        format: "esm",
+        target: "node20",
+        banner: { js: "// SPDX-License-Identifier: MIT\n// Copyright (c) 2026 Wire contributors" },
+        sourcemap: true,
+        logLevel: "silent",
+    });
+}
+export async function atomicWrite(filename, data) {
+    await mkdir(path.dirname(filename), { recursive: true });
+    const temp = `${filename}.${process.pid}.tmp`;
+    await writeFile(temp, data, { mode: 0o600 });
+    await rename(temp, filename);
+}
+export async function buildProject(cwd) {
+    const config = await readProject(cwd);
+    const dist = path.join(cwd, "dist");
+    await mkdir(dist, { recursive: true });
+    await compileTools(cwd, path.join(dist, "tools.mjs"));
+    const server = `// SPDX-License-Identifier: MIT
+// Copyright (c) 2026 Wire contributors
+import { Runtime } from '@wire-runtime/sdk';
+import { serveMcp } from '@wire-runtime/sdk/mcp';
+import { credentialsFromEnv, claimSessionLease } from '@wire-runtime/sdk/credentials';
+import { tools } from './tools.mjs';
+const budget=credentialsFromEnv();
+if(process.env.WIRE_SESSION_GUARD_DIR)claimSessionLease(budget,process.env.WIRE_SESSION_GUARD_DIR);
+if(process.env.WIRE_PROTOCOL && !['mcp','wire'].includes(process.env.WIRE_PROTOCOL))throw new Error('Invalid WIRE_PROTOCOL');
+const serve=process.env.WIRE_PROTOCOL === 'mcp' ? serveMcp : Runtime.serve;
+await serve({tools,transport:{kind:'stdio'},budget,rateLimit:${JSON.stringify(config.rateLimit)},cacheEntries:${config.cacheEntries},maxRequestBytes:${config.maxRequestBytes}});
+`;
+    await atomicWrite(path.join(dist, "server.mjs"), server);
+    return dist;
+}
+//# sourceMappingURL=project.js.map

package/dist/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../src/project.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,uCAAuC;AACvC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAOhC,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW;IAC3C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAA4B,CAAC;IACrE,IACE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CACrB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CACzE;QAED,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,gBAAgB,CAAC;IAC9C,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAE7D,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,KAAK,CAAC,SAA6C,CAAC;IACjE,MAAM,MAAM,GAAG;QACb,KAAK;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;QACzD,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC;QACvD,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;KAC/C,CAAC;IACF,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC;QACpD,MAAM,CAAC,SAAS,CAAC,iBAAiB,IAAI,CAAC;QACvC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QACzC,MAAM,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC;QAC1B,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC;QACzC,MAAM,CAAC,eAAe,GAAG,GAAG;QAC5B,MAAM,CAAC,eAAe,GAAG,OAAO;QAChC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;QACtC,MAAM,CAAC,YAAY,GAAG,CAAC;QACvB,MAAM,CAAC,YAAY,GAAG,IAAI;QAE1B,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,OAAe;IAC7D,MAAM,KAAK,CAAC;QACV,aAAa,EAAE,GAAG;QAClB,WAAW,EAAE,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QAC7C,OAAO;QACP,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,EAAE,EAAE,EAAE,0EAA0E,EAAE;QAC1F,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC;AACL,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,IAAqB;IACvE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC9C,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,MAAM,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC/B,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW;IAC5C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG;;;;;;;;;;+DAU8C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,MAAM,CAAC,YAAY,oBAAoB,MAAM,CAAC,eAAe;CAC5K,CAAC;IAEA,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,42 @@
 {
   "name": "@wire-runtime/cli",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.0",
+  "private": false,
+  "description": "Wire CLI: scaffold, build and run bounded MCP servers on the native Wire runtime.",
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "cli",
+    "native",
+    "budget"
+  ],
+  "type": "module",
+  "bin": {
+    "wire": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json && node ../../scripts/native.mjs license-output dist",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run --maxWorkers=1 --no-file-parallelism"
+  },
+  "dependencies": {
+    "@wire-runtime/sdk": "workspace:*",
+    "citty": "0.1.6",
+    "@clack/prompts": "0.11.0",
+    "esbuild": "0.25.12"
+  },
+  "devDependencies": {
+    "@types/node": "22.20.5",
+    "typescript": "5.9.3",
+    "vitest": "5.0.5",
+    "vite": "8.3.5"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "license": "MIT"
+}

package/README.md

@@ -1,3 +0,0 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.