wasm-platform-kit 0.0.0-stage → 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 brain-fuel
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,225 @@
-# Temporary Holding Version
+# Wasm Platform Kit — development preview
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+A capability-scoped platform SDK for WebAssembly applications in Node and browsers.
+Haskell bindings are generated directly from WIT using upstream `wit-parser`;
+there is no authored C bridge. GHC scalar foreign declarations, its RTS and libc
+remain below the typed application interface. A Rust guest tests the same host
+contract. Application-specific adapters live in their consuming repositories.
+
+## Release status
+
+Version 0.2.0 is released to npm under the owner's 9 November 2026 decision
+(`DEC-wpk-release-acceptance`). macOS and Linux ARM64 have recorded native
+execution. Linux x64 is accepted on the installation lifecycle executed under
+x64 emulation; native x64 hardware has not been recorded. **macOS x64 is
+cross-built and unverified: no execution has been recorded on that platform.**
+Existing acceptance JSON files record the runs they name; they do not certify
+other platforms or later changes. Mandatory definition validation passes, while
+optional law verification is not selected. Human Canon review remains pending.
+See `DEC-wpk-installation-preparation` for the installation contract.
+
+The npm lifecycle tests verify prebuilt installation, forced source preparation,
+missing-prebuilt preparation, failure cleanup and execution with the compiler
+removed. They do not establish full consumer application acceptance.
+
+## Packages
+
+- `wasm-platform-kit`: Node/browser runtime, broker and public declarations.
+- `wasm-platform-kit-<platform>`: execution-only Wasmtime helper, explicit source compiler and WIT metadata tool.
+- `wasm-platform-kit-build`: generation, packaging, WIT and Haskell support sources.
+
+The runtime tarball contains no compiler application, malicious fixtures or build
+tools.
+Platform packages target macOS and glibc Linux on x64 and ARM64. A cross-build
+alone is not execution evidence; the release status above names what has run. Native
+Windows and musl are unsupported; Windows users can use WSL. Consumers need no
+Haskell or Rust compiler.
+
+## Development
+
+Use Node 22+, Rust with wasm32-wasip2, GHC wasm32 9.14.1.20260731,
+wasm-tools 1.257.1, Binaryen and Ormolu 0.9.0.0. `HOST_SDK_TOOLCHAIN` selects a
+GHC Wasm toolchain directory (default ~/.ghc-wasm); `HOST_SDK_GHC_ENV` overrides
+its environment file. These are build-time settings, never guest environment.
+
+```sh
+npm ci
+npm run build
+npm test
+npm run pack:local
+```
+
+`dist/packages.json` records the local runtime, build-tool and platform tarballs.
+Install the runtime, build tools and matching platform into an authoring project
+with `npm install <tarballs...>`.
+Builds and tests use this repository's own dependencies and generic fixtures.
+No LawSpec checkout, compiler or application is required.
+
+`npm run build:platform` rebuilds just the native helpers and WIT tool from Rust,
+without a Haskell installation. Linux builds additionally use Cargo Zigbuild
+0.24.0 and Zig 0.16.0 with an explicit glibc 2.28 target; these are build-only
+dependencies. `node tools/platform.mjs --build linux-x64` (or `linux-arm64`)
+supports cross-compilation when the Rust target is installed. Linux staging
+requires `llvm-readobj` or `readelf`; `HOST_SDK_READOBJ` can select the executable.
+The actual linked glibc requirement must be at most 2.28, independent of the
+builder's libc. ref:DEC-host-sdk-linux-abi-baseline
+
+To collect cross-built binaries, place
+`host-sdk-runtime`, `host-sdk-source-runtime` and `wit-haskell` in
+`platforms/<platform>/bin/`, then run `node tools/platform.mjs --stage <platform>`.
+Staging checks executable architecture and records file hashes. `pack:local`
+includes every staged platform in the `platforms` map in `dist/packages.json`.
+The `platform` field remains an alias for the build host's package.
+
+## Authoring and embedding
+
+The build package exports `generateBindings`, `packageComponent`, `runHaskell`,
+`supportDirectory` and `witDirectory`. Generate Haskell into a project-owned
+output directory, implement `Application`, compile against the supplied Cabal
+support library, and package the core Wasm with its WIT world. Packaging emits
+Node and plain-browser entrypoints, declarations, worker and runtime assets,
+an integrity manifest and deployment-header templates into the application's
+output directory. It never modifies an installed SDK package.
+
+The generated `node.mjs` and `browser.mjs` export `createApplication(options)`;
+the returned instance has `invoke`, `identity`, `close` and `revoke`. Deploy the
+whole generated browser directory. Each generated worker pins its approved
+manifest digest before importing glue. The page entrypoint also pins registration.
+The embedding build alone chooses registered components; plugin manifests cannot
+register JavaScript. Application permissions remain a separate immutable `grants`
+argument. Informational component `requirements` confer no permissions.
+
+Files, approved network destinations, namespaced storage, explicit environment,
+validated native callbacks and isolated text UI are mediated capabilities. Node
+uses Wasmtime and cap-std; browser handles remain in the page broker. Redirects
+cannot expand grants. Revocation terminates the instance and aborts cooperative
+provider work. Trusted escape providers require the explicitly trusted profile.
+
+Browsers require JSPI, secure context, workers and WebCrypto. Optional isolated
+deployment requires effective COOP/COEP. WebKit file tests use a persistent
+profile because its ephemeral OPFS implementation rejects handles. Missing
+features fail explicitly. File-picker consent and server authorization remain
+embedding-application responsibilities.
+
+## Precompiled Node execution and source builds
+
+`packageComponent` emits a native artifact for the build platform and a separate
+`node-registration.mjs`. The generated Node entrypoint supplies this trusted
+registration automatically. Consumers do not locate native files or workers.
+
+Wire the generated `install.mjs` into the embedding package's `postinstall`
+script. Installation verifies its approved prebuilt artifact or compiles the
+pinned portable Wasm with the shipped compiler helper. Neither path requires
+Rust or Haskell on the consumer machine.
+
+```sh
+npm install
+# Explicitly compile during installation instead of selecting prebuilt code:
+WASM_PLATFORM_KIT_BUILD_FROM_SOURCE=1 npm rebuild
+```
+
+```js
+const app = await createApplication(); // loads prepared native code; never builds
+```
+
+Runtime `compilation: 'source'` is rejected. If lifecycle scripts were disabled
+and no prebuilt artifact is available, run `npm rebuild` with scripts enabled.
+Compilation has a separate 15-minute installation deadline; it does not relax
+runtime guest limits. Failed preparation never publishes a partial receipt or
+replaces a previously valid receipt. Local compilation products are excluded
+from subsequent npm archives. ref:DEC-wpk-installation-preparation
+
+To rebuild the SDK and its Haskell fixtures, use the development commands above.
+Application development builds still use GHC followed by `packageComponent`.
+
+Direct `createHost` callers must supply embedding-approved `nativeArtifacts`
+registration for a prepared artifact. A guest manifest
+cannot authorize native code even if it carries matching hashes. The registration
+binds component and native digests, target and pinned engine configuration. The
+helper hashes a bounded copy into a private, already-unlinked file and maps that
+immutable snapshot. Input mutation after verification cannot change executable
+pages. Missing, corrupt or incompatible artifacts fail without an implicit
+compilation fallback. Native artifacts are trusted compiler output, not safe
+inputs merely because they have a checksum. ref:DEC-host-sdk-precompiled-node
+
+The default helper is built without Cranelift. The installation-only compiler
+helper retains it. Both preserve fuel and capability enforcement. Execution
+identity includes compilation mode, configuration, target and native digest;
+applications must retain those distinctions in cache/evidence keys. Portable
+Wasm is still included for installation compilation and browser generation. Browser
+engines continue to compile portable Wasm independently.
+
+For multi-platform distribution, the build package exports
+`precompileNative({component, output, target})` and `nativeTargets`. Precompilation
+returns the trusted registration receipt; write it alongside the resulting file
+in the build pipeline. `packageNativeArtifacts` takes a component `directory`
+and an `artifacts` array of `{platform, file, registration}`. Supplying
+`packagePrefix`, `version` and `packageDirectory` emits optional platform packages;
+`license` and `licenseFile` carry the application's licensing. It returns the
+optional dependency map for the application package manifest. Without a prefix,
+it stages inline artifacts. Both forms generate trusted Node registration and
+verify every input receipt against the component and native file before writing
+authority. ref:DEC-host-sdk-native-platform-packaging
+
+An optional native package is needed for default execution, but its absence does
+not prevent explicit source compilation. The generated registration resolves
+native files lazily so consumers never have to provide platform paths.
+
+## Limits and trust
+
+The 0.2.0 generator accepts memory32 bool/string and signed and unsigned
+8/16/32/64-bit integers, records, enums, variants, lists, options, results and
+imported or exported resources. Byte lists use Haskell ByteString. Both scalar
+and aggregate results are supported; large parameter tuples use upstream
+canonical indirect layouts. Resource constructors, methods and static functions
+are generated. Floats, chars, flags, tuples, WIT async/future/stream types and
+variants over 256 cases remain explicitly unsupported by the Haskell emitter.
+Asynchronous host operations use the existing JSPI/Wasmtime integration.
+
+Exported resources retain typed application state in `ResourceTypes` through
+StablePtr. Generated helpers allocate, read and drop them; application modules
+do not manipulate pointers. Consumed-owner flags and dynamic call epochs reject
+repeated transfers and retained borrows. Destructors free retained state and run
+consumer cleanup, using a safe GHC FFI drop import for synchronous re-entry.
+Emergency termination releases the whole process or worker; it cannot promise
+that application destructors finish. Resource lifetimes use bracket and runtime
+validation, not linear proof. The generator, canonical codecs, initializer, build
+instrumentation, runtime and providers are trusted code.
+
+Fuel on Node, worker deadlines, guest memory/table bounds, host resource limits,
+request/output limits and storage quotas bound execution. These are not universal
+limits on browser or native host heaps or trusted callback allocations. The
+containment suite establishes scoped execution evidence, not certification.
+
+Canonical decisions and reference sources are in this repository. Human review
+is pending. The original implementation was extracted from the LawSpec formatting
+pilot; that application's adapter and parity tests remain in LawSpec.
+
+Canon grammar snapshots and their provenance are checked in under `.ricestax/`;
+review configuration has no dependency on a neighboring checkout. Use Canon
+0.2.3 with this repository. The LawSpec model can be checked by an independently
+installed LawSpec CLI; it is not needed to build or test the runtime.
+
+## Generated application façades
+
+Generated `node.mjs` and `browser.mjs` now return a client with named asynchronous
+WIT methods as well as the low-level `invoke` operation. Adjacent `.d.mts` files
+contain generated input, result and opaque resource types. Every method accepts
+an optional final `{signal}`. Constructors appear as `new<Resource>`, resource
+methods are asynchronous, and `dispose()` releases the resource. Per-call
+cancellation still revokes that instance; separate long-lived UI/job lifecycles
+are not yet implemented.
+
+Use JavaScript `bigint` for WIT `u64`/`s64`, including small values. Node's helper
+protocol preserves all bits and rejects Numbers and out-of-range values. Typed
+byte-list façades use `Uint8Array`. Resource objects are bound to their creating
+client. Copies of serialized IDs and resources from another instance convey no
+access. The Wasmtime helper and browser worker cap retained public resources at
+1024 per instance.
+
+The implementation follows WIT's resource new/rep/drop intrinsics and upstream
+canonical parameter/result layouts. See the [WIT resource specification](https://github.com/WebAssembly/component-model/blob/main/design/mvp/WIT.md#item-resource)
+and [canonical ABI](https://github.com/WebAssembly/component-model/blob/main/design/mvp/CanonicalABI.md).
+The generated Haskell/backend support remains bespoke trusted implementation;
+`wit-parser`, component validation, Wasmtime and jco supply the upstream machinery.
+ref:DEC-host-sdk-typed-application-boundary

package/assets/wasi/LICENSE

@@ -0,0 +1,220 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+--- LLVM Exceptions to the Apache 2.0 License ----
+
+As an exception, if, as a result of your compiling your source code, portions
+of this Software are embedded into an Object form of such source code, you
+may redistribute such embedded portions in such Object form without complying
+with the conditions of Sections 4(a), 4(b) and 4(d) of the License.
+
+In addition, if you combine or link compiled forms of this Software with
+software that is licensed under the GPLv2 ("Combined Software") and if a
+court of competent jurisdiction determines that the patent provision (Section
+3), the indemnity provision (Section 9) or other Section of the License
+conflicts with the conditions of the GPLv2, you may retroactively and
+prospectively choose to deem waived or otherwise exclude such Section(s) of
+the License, but only in their entirety and only with respect to the Combined
+Software.
+

package/assets/wasi/cli.d.ts

@@ -0,0 +1,43 @@
+import type { environment as EnvironmentNamespace, exit as ExitNamespace, stderr as StderrNamespace, stdin as StdinNamespace, stdout as StdoutNamespace, terminalInput as TerminalInputNamespace, terminalOutput as TerminalOutputNamespace, terminalStderr as TerminalStderrNamespace, terminalStdin as TerminalStdinNamespace, terminalStdout as TerminalStdoutNamespace } from "../../types/cli.js";
+import { type InputStreamHandler, type OutputStreamHandler } from "./io.js";
+export { _setEnv, _setArgs, environment } from "./environment.js";
+export { _setCwd } from "./config.js";
+export declare class ComponentExit extends Error {
+    exitError: boolean;
+    code: number;
+    constructor(code: number);
+}
+export declare const exit: typeof ExitNamespace;
+export declare function _setStdin(handler: InputStreamHandler): void;
+export declare function _setStderr(handler: OutputStreamHandler): void;
+export declare function _setStdout(handler: OutputStreamHandler): void;
+export interface BrowserCliConfig {
+    environment?: Record<string, string>;
+    arguments?: string[];
+    initialCwd?: string;
+    stdin?: InputStreamHandler;
+    stdout?: OutputStreamHandler;
+    stderr?: OutputStreamHandler;
+    onExit?: (code: number) => void;
+}
+export declare const stdin: typeof StdinNamespace;
+export declare const stdout: typeof StdoutNamespace;
+export declare const stderr: typeof StderrNamespace;
+export declare const terminalInput: typeof TerminalInputNamespace;
+export declare const terminalOutput: typeof TerminalOutputNamespace;
+export declare const terminalStderr: typeof TerminalStderrNamespace;
+export declare const terminalStdin: typeof TerminalStdinNamespace;
+export declare const terminalStdout: typeof TerminalStdoutNamespace;
+/** Create isolated browser CLI interfaces without changing compatibility globals. */
+export declare function createCli(config?: BrowserCliConfig): {
+    environment: typeof EnvironmentNamespace;
+    exit: typeof ExitNamespace;
+    stdin: typeof StdinNamespace;
+    stdout: typeof StdoutNamespace;
+    stderr: typeof StderrNamespace;
+    terminalInput: typeof TerminalInputNamespace;
+    terminalOutput: typeof TerminalOutputNamespace;
+    terminalStdin: typeof TerminalStdinNamespace;
+    terminalStdout: typeof TerminalStdoutNamespace;
+    terminalStderr: typeof TerminalStderrNamespace;
+};

package/assets/wasi/cli.js

@@ -0,0 +1,147 @@
+import { inputStreamCreate, outputStreamCreate, pollableCreate, } from "./io.js";
+export { _setEnv, _setArgs, environment } from "./environment.js";
+export { _setCwd } from "./config.js";
+const symbolDispose = Symbol.dispose ?? Symbol.for("dispose");
+export class ComponentExit extends Error {
+    exitError = true;
+    code;
+    constructor(code) {
+        super(`Component exited ${code === 0 ? "successfully" : "with error"}`);
+        this.code = code;
+    }
+}
+function createExit(onExit) {
+    return {
+        exit(status) {
+            const code = status.tag === "err" ? 1 : 0;
+            onExit?.(code);
+            throw new ComponentExit(code);
+        },
+        // @ts-expect-error - Available only wasi-cli v0.2.12
+        exitWithCode(code) {
+            onExit?.(code);
+            throw new ComponentExit(code);
+        },
+    };
+}
+export const exit = createExit();
+export function _setStdin(handler) {
+    stdinStream.handler = handler;
+}
+export function _setStderr(handler) {
+    stderrStream.handler = handler;
+}
+export function _setStdout(handler) {
+    stdoutStream.handler = handler;
+}
+const stdinStream = inputStreamCreate({
+    blockingRead() {
+        throw { tag: "closed" };
+    },
+    subscribe() {
+        return pollableCreate();
+    },
+    [symbolDispose]() { },
+});
+function consoleStream(writeLine) {
+    const decoder = new TextDecoder();
+    let pending = "";
+    const emitCompleteLines = () => {
+        const lines = pending.split("\n");
+        pending = lines.pop();
+        for (const line of lines) {
+            writeLine(line.endsWith("\r") ? line.slice(0, -1) : line);
+        }
+    };
+    const flush = () => {
+        pending += decoder.decode();
+        if (pending) {
+            writeLine(pending);
+        }
+        pending = "";
+    };
+    return {
+        write(contents) {
+            pending += decoder.decode(contents, { stream: true });
+            emitCompleteLines();
+        },
+        flush,
+        blockingFlush() {
+            this.flush?.();
+        },
+        // OutputStream marks itself closed before calling the handler's drop.
+        drop: flush,
+    };
+}
+const stdoutStream = outputStreamCreate(consoleStream((line) => console.log(line)));
+const stderrStream = outputStreamCreate(consoleStream((line) => console.error(line)));
+export const stdin = {
+    getStdin() {
+        return stdinStream;
+    },
+};
+export const stdout = {
+    getStdout() {
+        return stdoutStream;
+    },
+};
+export const stderr = {
+    getStderr() {
+        return stderrStream;
+    },
+};
+class TerminalInput {
+}
+class TerminalOutput {
+}
+export const terminalInput = {
+    TerminalInput,
+};
+export const terminalOutput = {
+    TerminalOutput,
+};
+export const terminalStderr = {
+    getTerminalStderr() {
+        return undefined;
+    },
+};
+export const terminalStdin = {
+    getTerminalStdin() {
+        return undefined;
+    },
+};
+export const terminalStdout = {
+    getTerminalStdout() {
+        return undefined;
+    },
+};
+/** Create isolated browser CLI interfaces without changing compatibility globals. */
+export function createCli(config = {}) {
+    const stdinInstance = inputStreamCreate(config.stdin ?? {
+        blockingRead() {
+            throw { tag: "closed" };
+        },
+        subscribe: () => pollableCreate(),
+    });
+    const stdoutInstance = outputStreamCreate(config.stdout ?? consoleStream((line) => console.log(line)));
+    const stderrInstance = outputStreamCreate(config.stderr ?? consoleStream((line) => console.error(line)));
+    const env = Object.entries(config.environment ?? {});
+    const args = [...(config.arguments ?? [])];
+    const cwd = config.initialCwd ?? "/";
+    return {
+        environment: {
+            getEnvironment: () => env.map(([key, value]) => [key, value]),
+            getArguments: () => [...args],
+            initialCwd: () => cwd,
+        },
+        exit: createExit(config.onExit),
+        stdin: { getStdin: () => stdinInstance },
+        stdout: { getStdout: () => stdoutInstance },
+        stderr: { getStderr: () => stderrInstance },
+        terminalInput,
+        terminalOutput,
+        terminalStdin,
+        terminalStdout,
+        terminalStderr,
+    };
+}

package/assets/wasi/clocks.d.ts

@@ -0,0 +1,3 @@
+import type { monotonicClock as MonotonicClockNamespace, wallClock as WallClockNamespace } from "../../types/clocks.js";
+export declare const monotonicClock: typeof MonotonicClockNamespace;
+export declare const wallClock: typeof WallClockNamespace;