Entities lowering maintainer reference

@pulse-compute/entities uses a synchronized, trusted first-party package lowerer. This page records the package-specific boundary; the general protocol remains authoritative in Package lowerer contract.

The package is part of the synchronized Beta release. Changes here do not alter release membership, publish it, or make its internal toolchain subpaths a public extension API.

Synchronized surfaces

Surface	Authority
packages/entities/pulse.package.json	Product status, root symbols, target policy, provider requirements
packages/entities/pulsewasm.manifest.cjs	Trusted first-party manifest and compiler entry
packages/entities/pulsewasm.compiler.cjs	Static extraction, plan/catalog/inspection, managed-handler descriptors
packages/entities/pulsewasm.native.cjs	Package-owned bounded Native dispatcher source
packages/entities/as/index.as.ts	Native source template/contract input
packages/entities/as/canonical.as.ts	Package-owned canonical host ABI adapter
wasm/packages/contracts/src/entities/	Versioned shared normalization, limits, JSON-RPC, catalog, and plan contracts
packages/entities/conformance/i9.json	Shared four-mode corpus/evidence declaration

Keep product metadata, manifest exports, compiler output versions, Native source expectations, and conformance evidence synchronized. The manifest and compiler subpaths under the package's pulsewasm namespace, plus the ./pulsewasm-native export, are for the trusted toolchain only.

Static extraction contract

The lowerer may inspect source and declared schema metadata; it must not execute application code. It accepts one module-level const EntityRouter, an inline jsonRpc adapter, standalone module-level registrations, literal discriminators, literal schema IDs or null, bounded static metadata, resolvable named handlers, and one terminal request binding.

Every rejected form needs a deterministic PULSE_ENTITIES_* diagnostic with a specific remediation. Never recover by evaluating dynamic source, discovering dependencies at runtime, scanning arbitrary installed packages, or changing the selected target.

Managed handlers and schemas

Each registration becomes one managed-handler descriptor. The descriptor owns the declared input/result shape and points to one reachable named handler. The normal reachable-graph compiler owns effects and continuations. The package lowerer must report redacted summaries and provider requirements without copying runtime values, raw payloads, request IDs, resolved secrets, or provider objects into plans or inspection.

Schema codecs remain private request-bound capabilities. The adapter can decode only the selected registration's input schema and encode only its output schema. Do not expose codec objects, registry enumeration, raw body access, or a second body consumer to package code.

Native realization

The package-owned Native source must preserve the JavaScript runtime semantics: one bounded envelope scan, selection before schema decoding, one handler invocation, stable failure categories, output validation, JSON-RPC framing, and synchronous 204 notification acknowledgement. It may use only the provider requirements declared by the package contract.

Native status remains provider-dependent. The trusted manifest declares compiler.nativeApplicationExport: 'buildEntitiesCanonicalNativeApplication'. The generic compiler passes only the static entity plan, managed-handler Native bundle, and schema bundle. The package returns the versioned source contribution, effects, continuations, capabilities, and codec manifest. Source and effect identity are bound into the canonical Native plan hash; the ordinary compiler appends that hash and validates the resulting Wasm ABI.

Node's explicit package-native-application realization enables the ordinary build, test, and dev path. Tests report the executed plan/Wasm hashes. The guest owns dispatch, selected schema validation, continuations, notification completion, and failure framing. The canonical host owns fetch, configuration, secrets, KV, and time effects. The current adapter accepts fetch, config.get, secret.get, kv.get, kv.put, and time.now; other managed effect kinds fail closed.

The optional pulse_host.value_json import copies a host value into a guest managed string, with a 1 MiB UTF-8 limit before guest allocation. It grants no I/O authority. Effect rejection uses a single-use invocation ticket and the conditional pulse_package_set_effect_failure export; only failure status crosses the boundary. Cancellation and execution budgets remain host failures.

Fastly Native ordinary builds bind the same package application through provider-fastly's canonical platform runtime. The provider maps the canonical imports, uses the package's codecs, enforces a 1 MiB UTF-8 value-copy limit, and settles operational failures through single-use effect tickets. Grouped results drain before the package resumes; request deadlines, body admission and invalid lifecycle state remain provider-terminal failures. Binding resolution and final Wasm import/export audits use the ordinary build pipeline.

fastly-entities-native-workflow checks doctor, inspect, build, test and dev, compares emitted/tested Wasm hashes, and optionally replays that exact bin/main.wasm with PULSE_VICEROY_BIN. Fixture ABI, local Viceroy and live deployment are distinct evidence levels. The older standalone adapter remains bounded proof infrastructure; it is not the ordinary build implementation.

The package schema generator preserves absent optional fields at every typed nesting level and enforces schemas.maxBytes before decoding input text. Shared Entities schema eligibility rejects dynamic JSON nodes, open objects and JSON admission policies that this generator cannot realize. Both catalog inspection and source generation use that decision; rejection belongs to PULSE_ENTITIES_TARGET_INELIGIBLE, without data loss or automatic fallback. Catalog eligibility covers declared entity input/output schemas; source generation also checks reachable managed fetch schemas.

The entities-hardening task exercises ordinary tests in all four modes, including nested optional/nullable schemas, invalid input/output, selected-only effects, notification completion, effect failures and redaction. It also checks byte admission using emitted Native artifacts and verifies JavaScript dynamic JSON behavior against Native eligibility and diagnostics. Provider request-body rejection precedes package envelope handling and can therefore return a provider status instead of a JSON-RPC error.

Catalog and evidence invariants

• Catalog ordering and hashes are checkout-independent and deterministic.
• Declaration, eligibility, measured execution, and release assignment are separate claims.
• Fastly execution evidence must name the external engine and run the generated artifacts; compile-only evidence is insufficient.
• Every target keeps automaticFallback: false.
• A tools/MCP facade may consume the static catalog but does not add protocol lifecycle state or direct handler access to Pulse runtime core.

Run the focused Entities tasks, the package/tarball clean-consumer candidate seal, affected H5 authority gate, executable docs, aggregate profiles, and external Viceroy evidence before recording a candidate decision. A seal may record a blocker; it must not fix an unrelated product problem in place.