refactor: replace WASM DSL engines with subprocess calls

.github/workflows/ci.yml

@@ -1,6 +1,7 @@
 name: CI
 
 on:
+  workflow_dispatch:
   pull_request:
   push:
     branches: [main]
@@ -19,11 +20,13 @@ jobs:
       - uses: actions/checkout@v4
       - uses: dtolnay/rust-toolchain@stable
         with:
-          # build.rs cross-compiles hm-plugin-* wasm artifacts.
-          targets: wasm32-wasip1
           components: clippy
       - uses: Swatinem/rust-cache@v2
 
+      - name: Install esbuild (for harmont-ts bundle)
+        working-directory: dsls/harmont-ts
+        run: npm ci
+
       - name: cargo build (all targets)
         run: cargo build -p harmont-cli --all-targets
 
@@ -99,19 +102,22 @@ jobs:
       - uses: actions/checkout@v4
 
       - uses: dtolnay/rust-toolchain@stable
-        with:
-          targets: wasm32-wasip1
 
       - uses: Swatinem/rust-cache@v2
 
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "23"
+          cache: npm
+          cache-dependency-path: dsls/harmont-ts/package-lock.json
+
+      - name: Install esbuild (for harmont-ts bundle)
+        working-directory: dsls/harmont-ts
+        run: npm ci
+
       - name: Build hm
         run: cargo build -p harmont-cli
 
-      - name: Install harmont-py into system Python
-        run: |
-          sudo /usr/bin/python3 -m pip install --break-system-packages dsls/harmont-py
-          /usr/bin/python3 -c "import harmont; print('harmont', harmont.__file__)"
-
       - name: Restore harmont Docker cache
         uses: actions/cache/restore@v4
         with:
@@ -153,16 +159,11 @@ jobs:
       - uses: actions/checkout@v4
 
       - uses: dtolnay/rust-toolchain@stable
-        with:
-          targets: wasm32-wasip1
       - uses: Swatinem/rust-cache@v2
 
-      - uses: actions/setup-python@v5
-        with:
-          python-version: "3.12"
-
-      - name: Install harmont-py (editable)
-        run: pip install -e dsls/harmont-py
+      - name: Install esbuild (for harmont-ts bundle)
+        working-directory: dsls/harmont-ts
+        run: npm ci
 
       - name: cargo build --tests (with docker-integration feature)
         run: cargo build -p harmont-cli --tests --features docker-integration
@@ -171,8 +172,6 @@ jobs:
         run: docker pull python:3.12-alpine
 
       - name: cargo test --features docker-integration -- --ignored
-        env:
-          HARMONT_PYTHON: python3
         run: |
           cargo test -p harmont-cli \
             --features docker-integration \

.github/workflows/examples.yml

@@ -38,30 +38,26 @@ jobs:
           fi
 
   # Build `hm` once and share the binary across every matrix leg.
-  # Each leg only needs Python + Docker + the binary; making them
-  # re-compile the whole workspace 17× was the long tent-pole.
+  # Each leg only needs Docker + the binary; making them re-compile
+  # the whole workspace 17× was the long tent-pole.
   build-hm:
     needs: validate-matrix
     runs-on: ubuntu-latest
-    # Debug build only — examples just need a working `hm` binary;
-    # release-mode LTO/codegen on wasmtime+cranelift can't finish in
-    # GH's 6h cap on a 2-vCPU runner. Debug builds in ~10 minutes
-    # cold, ~1 minute warm.
+    # Debug build only — examples just need a working `hm` binary.
     timeout-minutes: 30
     steps:
       - uses: actions/checkout@v4
 
       - uses: dtolnay/rust-toolchain@stable
-        with:
-          # crates/hm/build.rs cross-compiles hm-plugin-docker as a wasm
-          # plugin embedded into the binary, so the target must be on
-          # the toolchain.
-          targets: wasm32-wasip1
 
       - uses: Swatinem/rust-cache@v2
         with:
           shared-key: examples-hm
 
+      - name: Install esbuild (for harmont-ts bundle)
+        working-directory: dsls/harmont-ts
+        run: npm ci
+
       - name: Build hm
         run: cargo build -p harmont-cli
 
@@ -90,7 +86,6 @@ jobs:
           - nextjs
           - ocaml
           - perl
-          - php-laravel
           - python-uv
           - react
           - ruby
@@ -101,15 +96,9 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      # `hm run` shells out to `/usr/bin/python3` with PATH restricted
-      # to /usr/bin:/usr/local/bin:/bin (see render.rs), so harmont-py
-      # has to land in the *system* Python's site-packages — not the
-      # actions/setup-python hostedtoolcache. PEP 668's
-      # externally-managed marker requires --break-system-packages.
-      - name: Install harmont-py into system Python
-        run: |
-          sudo /usr/bin/python3 -m pip install --break-system-packages dsls/harmont-py
-          /usr/bin/python3 -c "import harmont; print('harmont', harmont.__file__)"
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "23"
 
       - name: Download hm binary
         uses: actions/download-artifact@v4

.github/workflows/release.yml

@@ -18,13 +18,12 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - uses: dtolnay/rust-toolchain@stable
-        with:
-          # crates/hm/build.rs cross-compiles hm-plugin-docker as a wasm
-          # plugin embedded into the binary, so the target must be on
-          # the toolchain for the `cargo check` in the next step.
-          targets: wasm32-wasip1
       - uses: Swatinem/rust-cache@v2
 
+      - name: Install esbuild (for harmont-ts bundle)
+        working-directory: dsls/harmont-ts
+        run: npm ci
+
       - name: Set version from tag
         run: |
           VERSION="${GITHUB_REF_NAME#v}"
@@ -61,25 +60,6 @@ jobs:
       - name: Wait for crates.io index
         run: sleep 30
 
-      - name: Build embedded WASM plugins
-        # The harmont-cli build.rs prefers crates/hm/embedded/*.wasm
-        # over the in-workspace cross-compile. Stage them here so the
-        # `cargo publish -p harmont-cli` verify-build (which runs in
-        # target/package/harmont-cli-<ver>/ without the sibling plugin
-        # crates) and any downstream `cargo install harmont-cli` both
-        # find the wasms already cooked. The include = [...] in
-        # crates/hm/Cargo.toml carries them into the tarball.
-        run: |
-          set -euo pipefail
-          for crate in hm-plugin-docker hm-plugin-output-human hm-plugin-output-json hm-plugin-cloud; do
-            cargo build --target wasm32-wasip1 -p "$crate" --release
-          done
-          mkdir -p crates/hm/embedded
-          for name in hm_plugin_docker hm_plugin_output_human hm_plugin_output_json hm_plugin_cloud; do
-            cp "target/wasm32-wasip1/release/$name.wasm" "crates/hm/embedded/$name.wasm"
-          done
-          ls -la crates/hm/embedded/
-
       - name: Publish harmont-cli
         run: |
           if curl -sf -A "harmont-release-ci (github-actions)" "https://crates.io/api/v1/crates/harmont-cli/$VERSION" > /dev/null 2>&1; then

CLAUDE.md

@@ -5,11 +5,8 @@ The `cli/` directory is a Cargo workspace.
 - `crates/hm-util/` — shared OS and filesystem utilities.
 - `crates/hm-plugin-protocol/` — wire types (serde structs only).
 - `crates/hm-plugin-sdk/` — authoring SDK for plugin writers.
-- `crates/hm-fixtures/` — test-only WASM plugins; compiled to
-  `target/wasm32-wasip1/debug/` by the test harness.
-
-Run `cargo build` from the workspace root. Plugin fixtures need the
-`wasm32-wasip1` target; install with `rustup target add wasm32-wasip1`.
+Run `cargo build` from the workspace root. Build requires esbuild
+(`npm ci` in `dsls/harmont-ts/`).
 
 For cross-cutting doctrine see [PRINCIPLES.md](../PRINCIPLES.md).
 

Cargo.toml

@@ -6,13 +6,15 @@ members = [
     "crates/hm-pipeline-ir",
     "crates/hm-util",
     "crates/hm-plugin-cloud",
+    "crates/hm-dsl-engine",
 ]
 default-members = [
     "crates/hm",
     "crates/hm-plugin-protocol",
     "crates/hm-pipeline-ir",
     "crates/hm-util",
     "crates/hm-plugin-cloud",
+    "crates/hm-dsl-engine",
 ]
 
 [workspace.package]
@@ -24,7 +26,10 @@ repository = "https://github.com/harmont-dev/harmont-cli"
 hm-plugin-protocol = { path = "crates/hm-plugin-protocol", version = "0.0.0-dev" }
 hm-pipeline-ir     = { path = "crates/hm-pipeline-ir",     version = "0.0.0-dev" }
 hm-util            = { path = "crates/hm-util",            version = "0.0.0-dev" }
+hm-dsl-engine      = { path = "crates/hm-dsl-engine",     version = "0.0.0-dev" }
 anyhow      = "1"
+async-trait = "0.1"
+dirs        = "6"
 daggy       = { version = "0.9", features = ["serde-1"] }
 serde       = { version = "1", features = ["derive"] }
 serde_json  = "1"

crates/hm-dsl-engine/Cargo.toml

@@ -0,0 +1,30 @@
+[package]
+name = "hm-dsl-engine"
+version = "0.0.0-dev"
+edition.workspace = true
+license.workspace = true
+repository.workspace = true
+description = "DSL engine: evaluate Python/TypeScript pipeline definitions via system runtimes."
+publish = false
+
+[lib]
+path = "src/lib.rs"
+
+[dependencies]
+anyhow      = { workspace = true }
+async-trait = { workspace = true }
+serde       = { workspace = true }
+serde_json  = { workspace = true }
+include_dir = "0.7"
+tempfile    = "3"
+tokio       = { version = "1", features = ["process", "fs"] }
+tracing     = "0.1"
+which       = "7"
+
+[dev-dependencies]
+tempfile    = "3"
+tokio       = { version = "1", features = ["macros", "rt-multi-thread"] }
+which       = "7"
+
+[lints]
+workspace = true