@intutic/mcp-governance-proxy 2.0.0 → 2.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +33 -18
- package/dist/anomaly/index.d.ts +2 -1
- package/dist/anomaly/index.d.ts.map +1 -1
- package/dist/anomaly/index.js.map +1 -1
- package/dist/approvalHold.d.ts +65 -0
- package/dist/approvalHold.d.ts.map +1 -0
- package/dist/approvalHold.js +142 -0
- package/dist/approvalHold.js.map +1 -0
- package/dist/config.d.ts +6 -1
- package/dist/config.d.ts.map +1 -1
- package/dist/config.js +1 -1
- package/dist/config.js.map +1 -1
- package/dist/daemon/healthMonitor.d.ts +2 -0
- package/dist/daemon/healthMonitor.d.ts.map +1 -1
- package/dist/daemon/healthMonitor.js +60 -26
- package/dist/daemon/healthMonitor.js.map +1 -1
- package/dist/daemon/instrumentation.d.ts +2 -2
- package/dist/daemon/instrumentation.js +2 -2
- package/dist/daemon/policyCache.d.ts +23 -0
- package/dist/daemon/policyCache.d.ts.map +1 -1
- package/dist/daemon/policyCache.js +28 -7
- package/dist/daemon/policyCache.js.map +1 -1
- package/dist/emitter.d.ts +43 -9
- package/dist/emitter.d.ts.map +1 -1
- package/dist/emitter.js +23 -43
- package/dist/emitter.js.map +1 -1
- package/dist/httpJson.d.ts +19 -0
- package/dist/httpJson.d.ts.map +1 -0
- package/dist/httpJson.js +62 -0
- package/dist/httpJson.js.map +1 -0
- package/dist/identity.d.ts +27 -0
- package/dist/identity.d.ts.map +1 -0
- package/dist/identity.js +36 -0
- package/dist/identity.js.map +1 -0
- package/dist/interceptor.d.ts +88 -4
- package/dist/interceptor.d.ts.map +1 -1
- package/dist/interceptor.js +161 -11
- package/dist/interceptor.js.map +1 -1
- package/dist/policy.d.ts +84 -1
- package/dist/policy.d.ts.map +1 -1
- package/dist/policy.js +160 -39
- package/dist/policy.js.map +1 -1
- package/dist/proxy.d.ts +12 -7
- package/dist/proxy.d.ts.map +1 -1
- package/dist/proxy.js +81 -26
- package/dist/proxy.js.map +1 -1
- package/dist/registryObserver.d.ts +33 -0
- package/dist/registryObserver.d.ts.map +1 -0
- package/dist/registryObserver.js +59 -0
- package/dist/registryObserver.js.map +1 -0
- package/dist/version.d.ts +12 -0
- package/dist/version.d.ts.map +1 -0
- package/dist/version.js +13 -0
- package/dist/version.js.map +1 -0
- package/dist/wasm/fuel.d.ts +35 -0
- package/dist/wasm/fuel.d.ts.map +1 -0
- package/dist/wasm/fuel.js +299 -0
- package/dist/wasm/fuel.js.map +1 -0
- package/dist/wasm/memoryCap.d.ts +21 -0
- package/dist/wasm/memoryCap.d.ts.map +1 -0
- package/dist/wasm/memoryCap.js +54 -0
- package/dist/wasm/memoryCap.js.map +1 -0
- package/dist/wasm/runner.d.ts +16 -15
- package/dist/wasm/runner.d.ts.map +1 -1
- package/dist/wasm/runner.js +36 -22
- package/dist/wasm/runner.js.map +1 -1
- package/dist/wasm/wasmBinary.d.ts +25 -0
- package/dist/wasm/wasmBinary.d.ts.map +1 -0
- package/dist/wasm/wasmBinary.js +100 -0
- package/dist/wasm/wasmBinary.js.map +1 -0
- package/dist/wasm/worker.d.ts +5 -8
- package/dist/wasm/worker.d.ts.map +1 -1
- package/dist/wasm/worker.js +23 -16
- package/dist/wasm/worker.js.map +1 -1
- package/package.json +5 -5
|
@@ -0,0 +1,299 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Instruction budget for WASM rules (TD-440): the MCP proxy's stand-in for
|
|
3
|
+
* Wasmtime fuel, which `runner.rs` sets to 1,000,000 per evaluation.
|
|
4
|
+
*
|
|
5
|
+
* V8 has no metering hook, so the rule's own code is rewritten at load to
|
|
6
|
+
* count. A new mutable i32 global starts at the budget, and a charge is
|
|
7
|
+
* inserted at every function entry and every loop header: subtract the number
|
|
8
|
+
* of instructions that can run before the next charge point, and trap
|
|
9
|
+
* (`unreachable`) once the counter goes negative. Code between two charge
|
|
10
|
+
* points is straight-line apart from forward branches, so each charge is an
|
|
11
|
+
* upper bound on what it pays for, and the budget bounds the instructions the
|
|
12
|
+
* rule actually executes. Structural instructions (`block`, `loop`, `end`,
|
|
13
|
+
* `else`, `nop`, `drop`, `return`, `unreachable`) cost nothing, roughly as
|
|
14
|
+
* Wasmtime prices them.
|
|
15
|
+
*
|
|
16
|
+
* The global is exported as `FUEL_EXPORT` so the worker can tell a trap caused
|
|
17
|
+
* by the budget from any other trap. Each evaluation instantiates the module
|
|
18
|
+
* afresh, so the budget is per evaluation, like a Wasmtime `Store`.
|
|
19
|
+
*
|
|
20
|
+
* The decoder knows the MVP instruction set plus the extensions compilers
|
|
21
|
+
* emit by default (sign extension, saturating truncation, bulk memory,
|
|
22
|
+
* reference types, multi-value, tail calls, SIMD). A module using anything
|
|
23
|
+
* else (exceptions, GC, threads) is refused at load rather than run unmetered.
|
|
24
|
+
*/
|
|
25
|
+
import { assembleModule, concat, malformed, putSection, readSections, readU32, skipLeb, writeS32, writeU32, } from './wasmBinary.js';
|
|
26
|
+
/** `runner.rs`: `store.set_fuel(1_000_000)`. */
|
|
27
|
+
export const DEFAULT_FUEL_BUDGET = 1_000_000;
|
|
28
|
+
/** The export the worker reads to tell budget exhaustion from other traps. */
|
|
29
|
+
export const FUEL_EXPORT = '__intutic_fuel';
|
|
30
|
+
const SECTION = { import: 2, global: 6, export: 7, code: 10 };
|
|
31
|
+
const EXPORT_KIND_GLOBAL = 0x03;
|
|
32
|
+
const VALTYPES = new Set([0x7f, 0x7e, 0x7d, 0x7c, 0x7b, 0x70, 0x6f]);
|
|
33
|
+
const ZERO_COST = new Set([0x00, 0x01, 0x02, 0x03, 0x05, 0x0b, 0x0f, 0x1a]);
|
|
34
|
+
const OP = { block: 0x02, loop: 0x03, if: 0x04, end: 0x0b };
|
|
35
|
+
function unsupported(op) {
|
|
36
|
+
return new Error(`WASM rule uses instruction ${op}, which the instruction budget cannot meter; rebuild it without exceptions, GC or threads`);
|
|
37
|
+
}
|
|
38
|
+
function skipBlockType(b, p) {
|
|
39
|
+
const t = b[p];
|
|
40
|
+
if (t === 0x40 || VALTYPES.has(t))
|
|
41
|
+
return p + 1;
|
|
42
|
+
// A type index, as a non-negative s33: a first byte below 0x40, or one
|
|
43
|
+
// with the continuation bit set.
|
|
44
|
+
if (t < 0x40 || (t & 0x80) !== 0)
|
|
45
|
+
return skipLeb(b, p);
|
|
46
|
+
throw unsupported(`with block type 0x${t.toString(16)}`);
|
|
47
|
+
}
|
|
48
|
+
function skipMemarg(b, p) {
|
|
49
|
+
const align = readU32(b, p);
|
|
50
|
+
p = align.next;
|
|
51
|
+
if (align.value & 0x40)
|
|
52
|
+
p = skipLeb(b, p); // multi-memory index
|
|
53
|
+
return skipLeb(b, p);
|
|
54
|
+
}
|
|
55
|
+
function skipN(b, p, n) {
|
|
56
|
+
for (let i = 0; i < n; i++)
|
|
57
|
+
p = skipLeb(b, p);
|
|
58
|
+
return p;
|
|
59
|
+
}
|
|
60
|
+
/** Offset just past the instruction at `p`, immediates included. */
|
|
61
|
+
function nextInstruction(b, p) {
|
|
62
|
+
const op = b[p];
|
|
63
|
+
const q = p + 1;
|
|
64
|
+
if (op <= 0x01 || op === 0x05 || op === 0x0b || op === 0x0f || op === 0x1a || op === 0x1b || op === 0xd1)
|
|
65
|
+
return q;
|
|
66
|
+
if (op >= 0x45 && op <= 0xc4)
|
|
67
|
+
return q; // numeric, sign extension
|
|
68
|
+
switch (op) {
|
|
69
|
+
case 0x02:
|
|
70
|
+
case 0x03:
|
|
71
|
+
case 0x04: return skipBlockType(b, q);
|
|
72
|
+
case 0x0c:
|
|
73
|
+
case 0x0d:
|
|
74
|
+
case 0x10:
|
|
75
|
+
case 0x12:
|
|
76
|
+
case 0xd2: return skipLeb(b, q);
|
|
77
|
+
case 0x0e: {
|
|
78
|
+
const n = readU32(b, q);
|
|
79
|
+
return skipN(b, n.next, n.value + 1);
|
|
80
|
+
}
|
|
81
|
+
case 0x11:
|
|
82
|
+
case 0x13: return skipN(b, q, 2);
|
|
83
|
+
case 0x1c: {
|
|
84
|
+
const n = readU32(b, q);
|
|
85
|
+
for (let i = 0; i < n.value; i++)
|
|
86
|
+
if (!VALTYPES.has(b[n.next + i]))
|
|
87
|
+
throw unsupported('select with a non-numeric type');
|
|
88
|
+
return n.next + n.value;
|
|
89
|
+
}
|
|
90
|
+
case 0x3f:
|
|
91
|
+
case 0x40:
|
|
92
|
+
case 0x41:
|
|
93
|
+
case 0x42: return skipLeb(b, q);
|
|
94
|
+
case 0x43: return q + 4;
|
|
95
|
+
case 0x44: return q + 8;
|
|
96
|
+
case 0xd0: {
|
|
97
|
+
if (b[q] !== 0x70 && b[q] !== 0x6f)
|
|
98
|
+
throw unsupported('ref.null with a GC heap type');
|
|
99
|
+
return q + 1;
|
|
100
|
+
}
|
|
101
|
+
case 0xfc: return nextPrefixedFc(b, q);
|
|
102
|
+
case 0xfd: return nextSimd(b, q);
|
|
103
|
+
}
|
|
104
|
+
if (op >= 0x20 && op <= 0x26)
|
|
105
|
+
return skipLeb(b, q); // locals, globals, table.get/set
|
|
106
|
+
if (op >= 0x28 && op <= 0x3e)
|
|
107
|
+
return skipMemarg(b, q); // loads and stores
|
|
108
|
+
throw unsupported(`0x${op.toString(16)}`);
|
|
109
|
+
}
|
|
110
|
+
function nextPrefixedFc(b, q) {
|
|
111
|
+
const sub = readU32(b, q);
|
|
112
|
+
const p = sub.next;
|
|
113
|
+
if (sub.value <= 7)
|
|
114
|
+
return p; // saturating truncation
|
|
115
|
+
switch (sub.value) {
|
|
116
|
+
case 8:
|
|
117
|
+
case 10:
|
|
118
|
+
case 12:
|
|
119
|
+
case 14: return skipN(b, p, 2); // memory.init, memory.copy, table.init, table.copy
|
|
120
|
+
case 9:
|
|
121
|
+
case 11:
|
|
122
|
+
case 13:
|
|
123
|
+
case 15:
|
|
124
|
+
case 16:
|
|
125
|
+
case 17: return skipLeb(b, p);
|
|
126
|
+
}
|
|
127
|
+
throw unsupported(`0xfc ${sub.value}`);
|
|
128
|
+
}
|
|
129
|
+
function nextSimd(b, q) {
|
|
130
|
+
const sub = readU32(b, q);
|
|
131
|
+
const p = sub.next;
|
|
132
|
+
const op = sub.value;
|
|
133
|
+
if (op <= 11 || op === 92 || op === 93)
|
|
134
|
+
return skipMemarg(b, p); // v128 loads/stores, load*_zero
|
|
135
|
+
if (op === 12 || op === 13)
|
|
136
|
+
return p + 16; // v128.const, i8x16.shuffle
|
|
137
|
+
if (op >= 21 && op <= 34)
|
|
138
|
+
return p + 1; // extract/replace lane
|
|
139
|
+
if (op >= 84 && op <= 91)
|
|
140
|
+
return skipMemarg(b, p) + 1; // load/store lane
|
|
141
|
+
if (op <= 0x113)
|
|
142
|
+
return p; // everything else in SIMD and relaxed SIMD has no immediate
|
|
143
|
+
throw unsupported(`0xfd ${op}`);
|
|
144
|
+
}
|
|
145
|
+
function chargeSequence(cost, global) {
|
|
146
|
+
const g = writeU32(global);
|
|
147
|
+
return [
|
|
148
|
+
0x23, ...g, 0x41, ...writeS32(cost), 0x6b, 0x24, ...g, // fuel -= cost
|
|
149
|
+
0x23, ...g, 0x41, 0x00, 0x48, 0x04, 0x40, 0x00, 0x0b, // if (fuel < 0) unreachable
|
|
150
|
+
];
|
|
151
|
+
}
|
|
152
|
+
/** One function body with a charge at its entry and at every loop header. */
|
|
153
|
+
function meterBody(body, global) {
|
|
154
|
+
let p = 0;
|
|
155
|
+
const groups = readU32(body, p);
|
|
156
|
+
p = groups.next;
|
|
157
|
+
for (let i = 0; i < groups.value; i++) {
|
|
158
|
+
p = readU32(body, p).next;
|
|
159
|
+
if (!VALTYPES.has(body[p]))
|
|
160
|
+
throw unsupported('a local of a GC type');
|
|
161
|
+
p += 1;
|
|
162
|
+
}
|
|
163
|
+
const regions = [{ at: p, cost: 0 }];
|
|
164
|
+
const closed = [];
|
|
165
|
+
const blocks = []; // true for a loop
|
|
166
|
+
let ended = false;
|
|
167
|
+
while (p < body.length) {
|
|
168
|
+
if (ended)
|
|
169
|
+
throw malformed('instructions after a function body ends');
|
|
170
|
+
const op = body[p];
|
|
171
|
+
const next = nextInstruction(body, p);
|
|
172
|
+
if (!ZERO_COST.has(op))
|
|
173
|
+
regions[regions.length - 1].cost += 1;
|
|
174
|
+
if (op === OP.block || op === OP.if)
|
|
175
|
+
blocks.push(false);
|
|
176
|
+
else if (op === OP.loop) {
|
|
177
|
+
blocks.push(true);
|
|
178
|
+
regions.push({ at: next, cost: 0 });
|
|
179
|
+
}
|
|
180
|
+
else if (op === OP.end) {
|
|
181
|
+
if (blocks.length === 0) {
|
|
182
|
+
closed.push(regions.pop());
|
|
183
|
+
ended = true;
|
|
184
|
+
}
|
|
185
|
+
else if (blocks.pop()) {
|
|
186
|
+
closed.push(regions.pop());
|
|
187
|
+
}
|
|
188
|
+
}
|
|
189
|
+
p = next;
|
|
190
|
+
}
|
|
191
|
+
if (!ended || regions.length !== 0)
|
|
192
|
+
throw malformed('unbalanced function body');
|
|
193
|
+
closed.sort((a, b) => a.at - b.at);
|
|
194
|
+
const parts = [];
|
|
195
|
+
let cursor = 0;
|
|
196
|
+
for (const r of closed) {
|
|
197
|
+
parts.push(body.subarray(cursor, r.at), Uint8Array.from(chargeSequence(Math.max(1, r.cost), global)));
|
|
198
|
+
cursor = r.at;
|
|
199
|
+
}
|
|
200
|
+
parts.push(body.subarray(cursor));
|
|
201
|
+
return concat(parts);
|
|
202
|
+
}
|
|
203
|
+
function skipLimits(b, p) {
|
|
204
|
+
const flags = b[p];
|
|
205
|
+
p = skipLeb(b, p + 1);
|
|
206
|
+
return flags & 0x01 ? skipLeb(b, p) : p;
|
|
207
|
+
}
|
|
208
|
+
function countImportedGlobals(s) {
|
|
209
|
+
if (!s)
|
|
210
|
+
return 0;
|
|
211
|
+
const b = s.payload;
|
|
212
|
+
const n = readU32(b, 0);
|
|
213
|
+
let p = n.next;
|
|
214
|
+
let globals = 0;
|
|
215
|
+
for (let i = 0; i < n.value; i++) {
|
|
216
|
+
for (let name = 0; name < 2; name++) {
|
|
217
|
+
const len = readU32(b, p);
|
|
218
|
+
p = len.next + len.value;
|
|
219
|
+
}
|
|
220
|
+
const kind = b[p++];
|
|
221
|
+
if (kind === 0x00 || kind === 0x04)
|
|
222
|
+
p = skipLeb(b, kind === 0x04 ? p + 1 : p);
|
|
223
|
+
else if (kind === 0x01) {
|
|
224
|
+
if (b[p] !== 0x70 && b[p] !== 0x6f)
|
|
225
|
+
throw unsupported('an imported table of a GC type');
|
|
226
|
+
p = skipLimits(b, p + 1);
|
|
227
|
+
}
|
|
228
|
+
else if (kind === 0x02)
|
|
229
|
+
p = skipLimits(b, p);
|
|
230
|
+
else if (kind === 0x03) {
|
|
231
|
+
if (!VALTYPES.has(b[p]))
|
|
232
|
+
throw unsupported('an imported global of a GC type');
|
|
233
|
+
p += 2;
|
|
234
|
+
globals += 1;
|
|
235
|
+
}
|
|
236
|
+
else
|
|
237
|
+
throw malformed(`import kind ${kind}`);
|
|
238
|
+
}
|
|
239
|
+
return globals;
|
|
240
|
+
}
|
|
241
|
+
function exportNames(s) {
|
|
242
|
+
if (!s)
|
|
243
|
+
return [];
|
|
244
|
+
const b = s.payload;
|
|
245
|
+
const n = readU32(b, 0);
|
|
246
|
+
let p = n.next;
|
|
247
|
+
const names = [];
|
|
248
|
+
for (let i = 0; i < n.value; i++) {
|
|
249
|
+
const len = readU32(b, p);
|
|
250
|
+
names.push(new TextDecoder().decode(b.subarray(len.next, len.next + len.value)));
|
|
251
|
+
p = readU32(b, len.next + len.value + 1).next;
|
|
252
|
+
}
|
|
253
|
+
return names;
|
|
254
|
+
}
|
|
255
|
+
/** Prepend-count helper: a vector section with `extra` appended. */
|
|
256
|
+
function appendToVector(s, extra) {
|
|
257
|
+
if (!s)
|
|
258
|
+
return Uint8Array.from([0x01, ...extra]);
|
|
259
|
+
const n = readU32(s.payload, 0);
|
|
260
|
+
return concat([Uint8Array.from(writeU32(n.value + 1)), s.payload.subarray(n.next), Uint8Array.from(extra)]);
|
|
261
|
+
}
|
|
262
|
+
/**
|
|
263
|
+
* The module with every function metered against `budget` instructions per
|
|
264
|
+
* instantiation, and the counter exported as `FUEL_EXPORT`. Throws for a
|
|
265
|
+
* module the decoder cannot meter.
|
|
266
|
+
*/
|
|
267
|
+
export function meterFuel(bytes, budget) {
|
|
268
|
+
const sections = readSections(bytes);
|
|
269
|
+
const find = (id) => sections.find((s) => s.id === id);
|
|
270
|
+
const code = find(SECTION.code);
|
|
271
|
+
if (!code)
|
|
272
|
+
return bytes;
|
|
273
|
+
const exports = find(SECTION.export);
|
|
274
|
+
if (exportNames(exports).includes(FUEL_EXPORT)) {
|
|
275
|
+
throw new Error(`WASM rule already exports "${FUEL_EXPORT}", which the instruction budget reserves`);
|
|
276
|
+
}
|
|
277
|
+
const globals = find(SECTION.global);
|
|
278
|
+
const fuelGlobal = countImportedGlobals(find(SECTION.import)) + (globals ? readU32(globals.payload, 0).value : 0);
|
|
279
|
+
const count = readU32(code.payload, 0);
|
|
280
|
+
const bodies = [Uint8Array.from(writeU32(count.value))];
|
|
281
|
+
let p = count.next;
|
|
282
|
+
for (let i = 0; i < count.value; i++) {
|
|
283
|
+
const size = readU32(code.payload, p);
|
|
284
|
+
const end = size.next + size.value;
|
|
285
|
+
if (end > code.payload.length)
|
|
286
|
+
throw malformed('function body runs past the code section');
|
|
287
|
+
const metered = meterBody(code.payload.subarray(size.next, end), fuelGlobal);
|
|
288
|
+
bodies.push(Uint8Array.from(writeU32(metered.length)), metered);
|
|
289
|
+
p = end;
|
|
290
|
+
}
|
|
291
|
+
if (p !== code.payload.length)
|
|
292
|
+
throw malformed('code section length mismatch');
|
|
293
|
+
putSection(sections, SECTION.global, appendToVector(globals, [0x7f, 0x01, 0x41, ...writeS32(budget), 0x0b]));
|
|
294
|
+
const name = [...new TextEncoder().encode(FUEL_EXPORT)];
|
|
295
|
+
putSection(sections, SECTION.export, appendToVector(exports, [...writeU32(name.length), ...name, EXPORT_KIND_GLOBAL, ...writeU32(fuelGlobal)]));
|
|
296
|
+
putSection(sections, SECTION.code, concat(bodies));
|
|
297
|
+
return assembleModule(bytes, sections);
|
|
298
|
+
}
|
|
299
|
+
//# sourceMappingURL=fuel.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"fuel.js","sourceRoot":"","sources":["../../src/wasm/fuel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EACL,cAAc,EACd,MAAM,EACN,SAAS,EACT,UAAU,EACV,YAAY,EACZ,OAAO,EACP,OAAO,EACP,QAAQ,EACR,QAAQ,GAET,MAAM,iBAAiB,CAAA;AAExB,gDAAgD;AAChD,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAA;AAE5C,8EAA8E;AAC9E,MAAM,CAAC,MAAM,WAAW,GAAG,gBAAgB,CAAA;AAE3C,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAW,CAAA;AACtE,MAAM,kBAAkB,GAAG,IAAI,CAAA;AAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AACpE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAC3E,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAW,CAAA;AAEpE,SAAS,WAAW,CAAC,EAAU;IAC7B,OAAO,IAAI,KAAK,CAAC,8BAA8B,EAAE,2FAA2F,CAAC,CAAA;AAC/I,CAAC;AAED,SAAS,aAAa,CAAC,CAAa,EAAE,CAAS;IAC7C,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAA;IACf,IAAI,CAAC,KAAK,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,CAAA;IAC/C,uEAAuE;IACvE,iCAAiC;IACjC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACtD,MAAM,WAAW,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,CAAS;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3B,CAAC,GAAG,KAAK,CAAC,IAAI,CAAA;IACd,IAAI,KAAK,CAAC,KAAK,GAAG,IAAI;QAAE,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,qBAAqB;IAC/D,OAAO,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACtB,CAAC;AAED,SAAS,KAAK,CAAC,CAAa,EAAE,CAAS,EAAE,CAAS;IAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7C,OAAO,CAAC,CAAA;AACV,CAAC;AAED,oEAAoE;AACpE,SAAS,eAAe,CAAC,CAAa,EAAE,CAAS;IAC/C,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAA;IAChB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACf,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,CAAC,CAAA;IAClH,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI;QAAE,OAAO,CAAC,CAAA,CAAC,0BAA0B;IACjE,QAAQ,EAAE,EAAE,CAAC;QACX,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC,OAAO,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC3D,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC3E,KAAK,IAAI,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QAAC,CAAC;QAC5E,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAC3C,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAE,CAAC;oBAAE,MAAM,WAAW,CAAC,gCAAgC,CAAC,CAAA;YACxH,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAA;QACzB,CAAC;QACD,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAChE,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACvB,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACvB,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,MAAM,WAAW,CAAC,8BAA8B,CAAC,CAAA;YACrF,OAAO,CAAC,GAAG,CAAC,CAAA;QACd,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,OAAO,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACtC,KAAK,IAAI,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAClC,CAAC;IACD,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI;QAAE,OAAO,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,iCAAiC;IACpF,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI;QAAE,OAAO,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,mBAAmB;IACzE,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;AAC3C,CAAC;AAED,SAAS,cAAc,CAAC,CAAa,EAAE,CAAS;IAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACzB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAA;IAClB,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,CAAC,CAAA,CAAC,wBAAwB;IACrD,QAAQ,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,CAAC,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,mDAAmD;QAC5G,KAAK,CAAC,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3E,CAAC;IACD,MAAM,WAAW,CAAC,QAAQ,GAAG,CAAC,KAAK,EAAE,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,CAAa,EAAE,CAAS;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACzB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAA;IAClB,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAA;IACpB,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,gCAAgC;IAChG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,CAAC,GAAG,EAAE,CAAA,CAAC,4BAA4B;IACtE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;QAAE,OAAO,CAAC,GAAG,CAAC,CAAA,CAAC,uBAAuB;IAC9D,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;QAAE,OAAO,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA,CAAC,kBAAkB;IACxE,IAAI,EAAE,IAAI,KAAK;QAAE,OAAO,CAAC,CAAA,CAAC,4DAA4D;IACtF,MAAM,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;AACjC,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,MAAc;IAClD,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC1B,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,eAAe;QACtE,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,4BAA4B;KACnF,CAAA;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,SAAS,CAAC,IAAgB,EAAE,MAAc;IACjD,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAC/B,CAAC,GAAG,MAAM,CAAC,IAAI,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QACzB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;YAAE,MAAM,WAAW,CAAC,sBAAsB,CAAC,CAAA;QACtE,CAAC,IAAI,CAAC,CAAA;IACR,CAAC;IAGD,MAAM,OAAO,GAAa,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,MAAM,GAAc,EAAE,CAAA,CAAC,kBAAkB;IAC/C,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,IAAI,KAAK;YAAE,MAAM,SAAS,CAAC,yCAAyC,CAAC,CAAA;QACrE,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAE,CAAA;QACnB,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,IAAI,IAAI,CAAC,CAAA;QAC9D,IAAI,EAAE,KAAK,EAAE,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;aAClD,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;QACrC,CAAC;aAAM,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,CAAC;YACzB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAG,CAAC,CAAA;gBAC3B,KAAK,GAAG,IAAI,CAAA;YACd,CAAC;iBAAM,IAAI,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAG,CAAC,CAAA;YAC7B,CAAC;QACH,CAAC;QACD,CAAC,GAAG,IAAI,CAAA;IACV,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,SAAS,CAAC,0BAA0B,CAAC,CAAA;IAE/E,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAA;IAClC,MAAM,KAAK,GAAiB,EAAE,CAAA;IAC9B,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;QACrG,MAAM,GAAG,CAAC,CAAC,EAAE,CAAA;IACf,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IACjC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,CAAS;IAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,CAAA;IACnB,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;IACrB,OAAO,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACzC,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAsB;IAClD,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IAChB,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAA;IACnB,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACvB,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAA;IACd,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YACzB,CAAC,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAA;QAC1B,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACnB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;aACxE,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,MAAM,WAAW,CAAC,gCAAgC,CAAC,CAAA;YACvF,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1B,CAAC;aAAM,IAAI,IAAI,KAAK,IAAI;YAAE,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;aACzC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;gBAAE,MAAM,WAAW,CAAC,iCAAiC,CAAC,CAAA;YAC9E,CAAC,IAAI,CAAC,CAAA;YACN,OAAO,IAAI,CAAC,CAAA;QACd,CAAC;;YAAM,MAAM,SAAS,CAAC,eAAe,IAAI,EAAE,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,CAAsB;IACzC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IACjB,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAA;IACnB,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACvB,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAA;IACd,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACzB,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAChF,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;IAC/C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,oEAAoE;AACpE,SAAS,cAAc,CAAC,CAAsB,EAAE,KAAe;IAC7D,IAAI,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAA;IAChD,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IAC/B,OAAO,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAC7G,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,KAA8B,EAAE,MAAc;IACtE,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IAEvB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACpC,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,8BAA8B,WAAW,0CAA0C,CAAC,CAAA;IACtG,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACpC,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAEjH,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACtC,MAAM,MAAM,GAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACrE,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAA;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAA;QAClC,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,SAAS,CAAC,0CAA0C,CAAC,CAAA;QAC1F,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC,CAAA;QAC5E,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;QAC/D,CAAC,GAAG,GAAG,CAAA;IACT,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,SAAS,CAAC,8BAA8B,CAAC,CAAA;IAE9E,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IAC5G,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;IACvD,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,kBAAkB,EAAE,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/I,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;IAClD,OAAO,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;AACxC,CAAC"}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Bound a rule's linear memory before V8 ever compiles it (TD-440).
|
|
3
|
+
*
|
|
4
|
+
* V8 has no grow hook, but it enforces the maximum a module DECLARES for its
|
|
5
|
+
* own memory: past it, `memory.grow` returns -1 instead of growing. So the
|
|
6
|
+
* memory section is rewritten to declare a maximum no larger than the ceiling,
|
|
7
|
+
* and the engine does the rest, the same guarantee `runner.rs` gets from
|
|
8
|
+
* Wasmtime's `StoreLimits`. A rule that asks for more is refused at load.
|
|
9
|
+
*
|
|
10
|
+
* Only the memory section (id 5) is touched; every other byte is copied
|
|
11
|
+
* through. Shared and 64-bit memories are refused rather than rewritten: the
|
|
12
|
+
* runner never supplies either, and their limits encode differently.
|
|
13
|
+
*/
|
|
14
|
+
/** One WebAssembly page. */
|
|
15
|
+
export declare const WASM_PAGE_BYTES: number;
|
|
16
|
+
/**
|
|
17
|
+
* The module with every memory declaring `max <= maxPages`. Throws when a
|
|
18
|
+
* memory's initial size is already over the ceiling, or it is shared/64-bit.
|
|
19
|
+
*/
|
|
20
|
+
export declare function capDeclaredMemory(bytes: Uint8Array<ArrayBuffer>, maxPages: number): Uint8Array<ArrayBuffer>;
|
|
21
|
+
//# sourceMappingURL=memoryCap.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"memoryCap.d.ts","sourceRoot":"","sources":["../../src/wasm/memoryCap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,4BAA4B;AAC5B,eAAO,MAAM,eAAe,QAAY,CAAA;AAIxC;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CA+B3G"}
|
|
@@ -0,0 +1,54 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Bound a rule's linear memory before V8 ever compiles it (TD-440).
|
|
3
|
+
*
|
|
4
|
+
* V8 has no grow hook, but it enforces the maximum a module DECLARES for its
|
|
5
|
+
* own memory: past it, `memory.grow` returns -1 instead of growing. So the
|
|
6
|
+
* memory section is rewritten to declare a maximum no larger than the ceiling,
|
|
7
|
+
* and the engine does the rest, the same guarantee `runner.rs` gets from
|
|
8
|
+
* Wasmtime's `StoreLimits`. A rule that asks for more is refused at load.
|
|
9
|
+
*
|
|
10
|
+
* Only the memory section (id 5) is touched; every other byte is copied
|
|
11
|
+
* through. Shared and 64-bit memories are refused rather than rewritten: the
|
|
12
|
+
* runner never supplies either, and their limits encode differently.
|
|
13
|
+
*/
|
|
14
|
+
import { assembleModule, malformed, putSection, readSections, readU32, writeU32 } from './wasmBinary.js';
|
|
15
|
+
/** One WebAssembly page. */
|
|
16
|
+
export const WASM_PAGE_BYTES = 64 * 1024;
|
|
17
|
+
const MEMORY_SECTION_ID = 5;
|
|
18
|
+
/**
|
|
19
|
+
* The module with every memory declaring `max <= maxPages`. Throws when a
|
|
20
|
+
* memory's initial size is already over the ceiling, or it is shared/64-bit.
|
|
21
|
+
*/
|
|
22
|
+
export function capDeclaredMemory(bytes, maxPages) {
|
|
23
|
+
const sections = readSections(bytes);
|
|
24
|
+
const memory = sections.find((s) => s.id === MEMORY_SECTION_ID);
|
|
25
|
+
if (!memory)
|
|
26
|
+
return bytes;
|
|
27
|
+
const b = memory.payload;
|
|
28
|
+
const count = readU32(b, 0);
|
|
29
|
+
let p = count.next;
|
|
30
|
+
const payload = writeU32(count.value);
|
|
31
|
+
for (let i = 0; i < count.value; i++) {
|
|
32
|
+
const flags = b[p];
|
|
33
|
+
if (flags !== 0x00 && flags !== 0x01) {
|
|
34
|
+
throw new Error(`WASM rule declares a shared or 64-bit memory (limits flag 0x${(flags ?? 0).toString(16)}), which the runner does not support`);
|
|
35
|
+
}
|
|
36
|
+
const min = readU32(b, p + 1);
|
|
37
|
+
p = min.next;
|
|
38
|
+
let max = maxPages;
|
|
39
|
+
if (flags === 0x01) {
|
|
40
|
+
const declared = readU32(b, p);
|
|
41
|
+
p = declared.next;
|
|
42
|
+
max = Math.min(declared.value, maxPages);
|
|
43
|
+
}
|
|
44
|
+
if (min.value > maxPages) {
|
|
45
|
+
throw new Error(`WASM rule declares ${min.value * WASM_PAGE_BYTES} bytes of initial memory, over the ${maxPages * WASM_PAGE_BYTES}-byte ceiling`);
|
|
46
|
+
}
|
|
47
|
+
payload.push(0x01, ...writeU32(min.value), ...writeU32(max));
|
|
48
|
+
}
|
|
49
|
+
if (p !== b.length)
|
|
50
|
+
throw malformed('memory section length mismatch');
|
|
51
|
+
putSection(sections, MEMORY_SECTION_ID, Uint8Array.from(payload));
|
|
52
|
+
return assembleModule(bytes, sections);
|
|
53
|
+
}
|
|
54
|
+
//# sourceMappingURL=memoryCap.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"memoryCap.js","sourceRoot":"","sources":["../../src/wasm/memoryCap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAExG,4BAA4B;AAC5B,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAA;AAExC,MAAM,iBAAiB,GAAG,CAAC,CAAA;AAE3B;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAA8B,EAAE,QAAgB;IAChF,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,iBAAiB,CAAC,CAAA;IAC/D,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAEzB,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAA;IACxB,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3B,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAA;IAClB,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAClB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAAA;QACjJ,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7B,CAAC,GAAG,GAAG,CAAC,IAAI,CAAA;QACZ,IAAI,GAAG,GAAG,QAAQ,CAAA;QAClB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAC9B,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAA;YACjB,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;QAC1C,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,GAAG,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,KAAK,GAAG,eAAe,sCAAsC,QAAQ,GAAG,eAAe,eAAe,CAAC,CAAA;QACnJ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;QAAE,MAAM,SAAS,CAAC,gCAAgC,CAAC,CAAA;IAErE,UAAU,CAAC,QAAQ,EAAE,iBAAiB,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IACjE,OAAO,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;AACxC,CAAC"}
|
package/dist/wasm/runner.d.ts
CHANGED
|
@@ -7,21 +7,21 @@
|
|
|
7
7
|
*
|
|
8
8
|
* ## Divergences from the Rust runner (all recorded as TD entries)
|
|
9
9
|
*
|
|
10
|
-
* - **
|
|
11
|
-
*
|
|
12
|
-
*
|
|
13
|
-
*
|
|
14
|
-
*
|
|
15
|
-
* the
|
|
16
|
-
*
|
|
17
|
-
*
|
|
18
|
-
*
|
|
19
|
-
*
|
|
20
|
-
* V8
|
|
21
|
-
*
|
|
22
|
-
*
|
|
23
|
-
*
|
|
24
|
-
*
|
|
10
|
+
* - **Fuel: the same 1,000,000-instruction budget, metered a different
|
|
11
|
+
* way.** V8 has no fuel hook, so `fuel.ts` rewrites each rule at load to
|
|
12
|
+
* count its own instructions and trap when the budget runs out (TD-440).
|
|
13
|
+
* A rule that exhausts it fails open for that call, as under Wasmtime.
|
|
14
|
+
* - **50ms per-rule deadline, not 5ms.** Fuel bounds the guest's own work;
|
|
15
|
+
* the deadline is the backstop for everything else, and it races a
|
|
16
|
+
* `postMessage` round trip that pays IPC overhead the in-process Wasmtime
|
|
17
|
+
* call never did. 50ms, not 5ms, keeps that overhead from
|
|
18
|
+
* false-positiving a legitimate rule under normal load.
|
|
19
|
+
* - **Guest memory ceiling: the same 16MB, enforced a different way.**
|
|
20
|
+
* `runner.rs` sets a `StoreLimits` cap; V8 has no such hook, but it does
|
|
21
|
+
* enforce the maximum a module declares, so `worker.ts` rewrites the
|
|
22
|
+
* module's memory section to declare 16MB as its maximum before compiling
|
|
23
|
+
* (`memoryCap.ts`). A `memory.grow` past it returns -1 as it would under
|
|
24
|
+
* Wasmtime. Not a divergence any more; TD-440 records how it got here.
|
|
25
25
|
* - **`read_referenced_file` is served from a pre-read table**
|
|
26
26
|
* (`referencedFiles.ts`, the port of `referenced_files.rs`), prefetched
|
|
27
27
|
* once per `evaluate()` only when a loaded rule imports the function and
|
|
@@ -84,6 +84,7 @@ export declare class WasmRunner implements CompileBridge {
|
|
|
84
84
|
private prefetchReferencedFiles;
|
|
85
85
|
/** One rule's evaluation, raced against `EVALUATE_TIMEOUT_MS`. `null` means fail-open (timeout, worker error, or guest trap). */
|
|
86
86
|
private evaluateOne;
|
|
87
|
+
private countRunaway;
|
|
87
88
|
/** Terminates the worker. Safe to call even if one was never spawned. */
|
|
88
89
|
shutdown(): Promise<void>;
|
|
89
90
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/wasm/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAMH,OAAO,EAA8B,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAA;AACjG,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAA;
|
|
1
|
+
{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/wasm/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAMH,OAAO,EAA8B,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAA;AACjG,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAqBtE,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAyCrD,qBAAa,UAAW,YAAW,aAAa;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,aAAa,CAAI;IACzB,OAAO,CAAC,OAAO,CAAkC;IACjD,OAAO,CAAC,mBAAmB,CAA4B;IACvD,OAAO,CAAC,eAAe,CAAoB;gBAE/B,WAAW,CAAC,EAAE,MAAM;IAIhC,uDAAuD;IACvD,MAAM,IAAI,MAAM;IAIhB,yGAAyG;IACzG,gBAAgB,IAAI,MAAM,EAAE;IAI5B,OAAO,CAAC,YAAY;IAmBpB,gFAAgF;IAChF,OAAO,CAAC,IAAI;IAYZ,OAAO,CAAC,OAAO;IAQT,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC;IAmBzE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAQ5B;;;;OAIG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAM7B,oIAAoI;YACtH,aAAa;IAqB3B;;;;;;OAMG;IACG,QAAQ,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC;IAuD7D;;;OAGG;YACW,uBAAuB;IAUrC,iIAAiI;YACnH,WAAW;IA+CzB,OAAO,CAAC,YAAY;IAYpB,yEAAyE;IACnE,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAUhC;AAWD,YAAY,EAAE,gBAAgB,EAAE,CAAA"}
|
package/dist/wasm/runner.js
CHANGED
|
@@ -7,21 +7,21 @@
|
|
|
7
7
|
*
|
|
8
8
|
* ## Divergences from the Rust runner (all recorded as TD entries)
|
|
9
9
|
*
|
|
10
|
-
* - **
|
|
11
|
-
*
|
|
12
|
-
*
|
|
13
|
-
*
|
|
14
|
-
*
|
|
15
|
-
* the
|
|
16
|
-
*
|
|
17
|
-
*
|
|
18
|
-
*
|
|
19
|
-
*
|
|
20
|
-
* V8
|
|
21
|
-
*
|
|
22
|
-
*
|
|
23
|
-
*
|
|
24
|
-
*
|
|
10
|
+
* - **Fuel: the same 1,000,000-instruction budget, metered a different
|
|
11
|
+
* way.** V8 has no fuel hook, so `fuel.ts` rewrites each rule at load to
|
|
12
|
+
* count its own instructions and trap when the budget runs out (TD-440).
|
|
13
|
+
* A rule that exhausts it fails open for that call, as under Wasmtime.
|
|
14
|
+
* - **50ms per-rule deadline, not 5ms.** Fuel bounds the guest's own work;
|
|
15
|
+
* the deadline is the backstop for everything else, and it races a
|
|
16
|
+
* `postMessage` round trip that pays IPC overhead the in-process Wasmtime
|
|
17
|
+
* call never did. 50ms, not 5ms, keeps that overhead from
|
|
18
|
+
* false-positiving a legitimate rule under normal load.
|
|
19
|
+
* - **Guest memory ceiling: the same 16MB, enforced a different way.**
|
|
20
|
+
* `runner.rs` sets a `StoreLimits` cap; V8 has no such hook, but it does
|
|
21
|
+
* enforce the maximum a module declares, so `worker.ts` rewrites the
|
|
22
|
+
* module's memory section to declare 16MB as its maximum before compiling
|
|
23
|
+
* (`memoryCap.ts`). A `memory.grow` past it returns -1 as it would under
|
|
24
|
+
* Wasmtime. Not a divergence any more; TD-440 records how it got here.
|
|
25
25
|
* - **`read_referenced_file` is served from a pre-read table**
|
|
26
26
|
* (`referencedFiles.ts`, the port of `referenced_files.rs`), prefetched
|
|
27
27
|
* once per `evaluate()` only when a loaded rule imports the function and
|
|
@@ -46,7 +46,10 @@ const EVALUATE_TIMEOUT_MS = 50;
|
|
|
46
46
|
/** Generous — compilation is not guest-controlled per evaluation, but a
|
|
47
47
|
* pathological file must not hang a rescan forever. */
|
|
48
48
|
const COMPILE_TIMEOUT_MS = 3_000;
|
|
49
|
-
/**
|
|
49
|
+
/**
|
|
50
|
+
* Consecutive per-rule runaways (a timeout, or the instruction budget running
|
|
51
|
+
* out) before that rule is disabled until the next rescan.
|
|
52
|
+
*/
|
|
50
53
|
const MAX_CONSECUTIVE_TIMEOUTS = 3;
|
|
51
54
|
/**
|
|
52
55
|
* Resolves the worker script to spawn.
|
|
@@ -262,17 +265,20 @@ export class WasmRunner {
|
|
|
262
265
|
// fails open — plus the MCP-specific per-rule consecutive-timeout
|
|
263
266
|
// disable ladder the task calls for.
|
|
264
267
|
log.warn({ action: 'wasm_evaluate_timeout', ruleId, timeoutMs: EVALUATE_TIMEOUT_MS }, 'WASM rule evaluation timed out — failing open');
|
|
265
|
-
const attempts = (this.consecutiveTimeouts.get(ruleId) ?? 0) + 1;
|
|
266
|
-
this.consecutiveTimeouts.set(ruleId, attempts);
|
|
267
268
|
// terminate + lazily respawn: the NEXT evaluate() call pays the
|
|
268
269
|
// respawn cost via ensureWorker()/rescan(force); triggered here so a
|
|
269
270
|
// wedged worker does not keep timing out every rule behind it in this
|
|
270
271
|
// same evaluate() loop.
|
|
271
272
|
await this.respawnWorker();
|
|
272
|
-
|
|
273
|
-
|
|
274
|
-
|
|
275
|
-
|
|
273
|
+
this.countRunaway(ruleId);
|
|
274
|
+
return null;
|
|
275
|
+
}
|
|
276
|
+
if (!reply.ok && reply.fuelExhausted) {
|
|
277
|
+
// The budget trapped the guest, so the worker is healthy: no respawn,
|
|
278
|
+
// but the same disable ladder as a timeout, since it is the same
|
|
279
|
+
// runaway rule caught sooner.
|
|
280
|
+
log.warn({ action: 'wasm_evaluate_fuel_exhausted', ruleId }, 'WASM rule ran out of its instruction budget — failing open');
|
|
281
|
+
this.countRunaway(ruleId);
|
|
276
282
|
return null;
|
|
277
283
|
}
|
|
278
284
|
if (!reply.ok) {
|
|
@@ -286,6 +292,14 @@ export class WasmRunner {
|
|
|
286
292
|
this.consecutiveTimeouts.delete(ruleId);
|
|
287
293
|
return { code: reply.code ?? -1, reason: reply.reason };
|
|
288
294
|
}
|
|
295
|
+
countRunaway(ruleId) {
|
|
296
|
+
const attempts = (this.consecutiveTimeouts.get(ruleId) ?? 0) + 1;
|
|
297
|
+
this.consecutiveTimeouts.set(ruleId, attempts);
|
|
298
|
+
if (attempts >= MAX_CONSECUTIVE_TIMEOUTS) {
|
|
299
|
+
this.disabledRuleIds.add(ruleId);
|
|
300
|
+
log.warn({ action: 'wasm_rule_disabled', ruleId, consecutiveRunaways: attempts }, 'WASM rule disabled after consecutive timeouts or budget exhaustion — will retry on the next policy-driven rescan');
|
|
301
|
+
}
|
|
302
|
+
}
|
|
289
303
|
/** Terminates the worker. Safe to call even if one was never spawned. */
|
|
290
304
|
async shutdown() {
|
|
291
305
|
const worker = this.worker;
|
package/dist/wasm/runner.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/wasm/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,kBAAkB,IAAI,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACpE,OAAO,EAAE,UAAU,EAAE,cAAc,EAA2C,MAAM,aAAa,CAAA;AACjG,OAAO,EAAE,gBAAgB,EAAyB,MAAM,cAAc,CAAA;AACtE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAA6B,MAAM,sBAAsB,CAAA;AAExG,MAAM,GAAG,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAA;AAEjD;;;GAGG;AACH,MAAM,mBAAmB,GAAG,EAAE,CAAA;AAE9B;wDACwD;AACxD,MAAM,kBAAkB,GAAG,KAAK,CAAA;AAEhC
|
|
1
|
+
{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/wasm/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,kBAAkB,IAAI,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACpE,OAAO,EAAE,UAAU,EAAE,cAAc,EAA2C,MAAM,aAAa,CAAA;AACjG,OAAO,EAAE,gBAAgB,EAAyB,MAAM,cAAc,CAAA;AACtE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAA6B,MAAM,sBAAsB,CAAA;AAExG,MAAM,GAAG,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAA;AAEjD;;;GAGG;AACH,MAAM,mBAAmB,GAAG,EAAE,CAAA;AAE9B;wDACwD;AACxD,MAAM,kBAAkB,GAAG,KAAK,CAAA;AAEhC;;;GAGG;AACH,MAAM,wBAAwB,GAAG,CAAC,CAAA;AAYlC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAS,gBAAgB;IACvB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACtD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,0BAA0B,EAAE,sBAAsB,CAAC,CAAA;IAClG,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,GAAG,EAAE,IAAI,GAAG,CAAC,UAAU,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IAC7D,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAChD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9E,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;AACnE,CAAC;AAED,MAAM,OAAO,UAAU;IACJ,MAAM,CAAY;IAC3B,MAAM,GAAkB,IAAI,CAAA;IAC5B,aAAa,GAAG,CAAC,CAAA;IACjB,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAA;IACzC,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC/C,eAAe,GAAG,IAAI,GAAG,EAAU,CAAA;IAE3C,YAAY,WAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,UAAU,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CAAA;IAC3D,CAAC;IAED,uDAAuD;IACvD,MAAM;QACJ,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAA;IAC7B,CAAC;IAED,yGAAyG;IACzG,gBAAgB;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IACpD,CAAC;IAEO,YAAY;QAClB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAA;QACnC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,gBAAgB,EAAE,CAAA;QAC5C,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAC9E,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAkC,EAAE,EAAE;YAC1D,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ;gBAAE,OAAM;YACtC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACtC,IAAI,CAAC,KAAK;gBAAE,OAAM,CAAC,gCAAgC;YACnD,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC3B,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACpB,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,0BAA0B,CAAC,CAAA;QAC1F,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,OAAO,MAAM,CAAA;IACf,CAAC;IAED,gFAAgF;IACxE,IAAI,CAAI,GAA6C,EAAE,SAAiB;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;QAClC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAW,CAAC,CAAA;gBACxC,OAAO,CAAC,IAAI,CAAC,CAAA;YACf,CAAC,EAAE,SAAS,CAAC,CAAA;YACb,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;YACjF,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACzB,CAAC,CAAC,CAAA;IACJ,CAAC;IAEO,OAAO;QACb,MAAM,EAAE,GAAG,IAAI,CAAC,aAAa,CAAA;QAC7B,IAAI,CAAC,aAAa,IAAI,CAAC,CAAA;QACvB,OAAO,EAAE,CAAA;IACX,CAAC;IAED,yEAAyE;IAEzE,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,KAAiB;QAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;QACzB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAK1B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAA;QACpF,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,kBAAkB,IAAI,EAAE,CAAA;QAC1F,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,QAAQ,GACZ,KAAK,CAAC,kBAAkB,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;gBAC7D,CAAC,CAAC,WAAW,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC;gBACrF,CAAC,CAAC,uBAAuB,CAAA;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,QAAQ,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,CAAA;QACpG,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,IAAI,KAAK,EAAE,CAAA;IAChF,CAAC;IAED,MAAM,CAAC,MAAc;QACnB,IAAI,CAAC,YAAY,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;QAC3D,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACvC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACrC,CAAC;IAED,0EAA0E;IAE1E;;;;OAIG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAA;QAC5B,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAA;IAClC,CAAC;IAED,oIAAoI;IAC5H,KAAK,CAAC,aAAa;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAA;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,IAAI,GAAG,EAAE,CAAC;YACR,kEAAkE;YAClE,0CAA0C;YAC1C,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACvC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;gBACzB,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAA;gBACxD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACzB,CAAC;YACD,MAAM,GAAG,CAAC,SAAS,EAAE,CAAA;QACvB,CAAC;QACD,oEAAoE;QACpE,sEAAsE;QACtE,uDAAuD;QACvD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACtC,CAAC;IAED,wEAAwE;IAExE;;;;;;OAMG;IACH,KAAK,CAAC,QAAQ,CAAC,KAAuB;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;QACvF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QAEhD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACzE,IAAI,YAAY,GAA6D,IAAI,CAAA;QAEjF,kEAAkE;QAClE,wEAAwE;QACxE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAE/G,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;YAC/G,IAAI,MAAM,KAAK,IAAI;gBAAE,SAAQ,CAAC,iEAAiE;YAE/F,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,CAAC;oBACJ,MAAK,CAAC,6BAA6B;gBACrC,KAAK,CAAC;oBACJ,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,wCAAwC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAA;gBAClH,KAAK,CAAC;oBACJ,gEAAgE;oBAChE,+DAA+D;oBAC/D,2DAA2D;oBAC3D,oCAAoC;oBACpC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,yBAAyB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAC1D,+GAA+G,CAChH,CAAA;oBACD,OAAO;wBACL,IAAI,EAAE,OAAO;wBACb,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,wDAAwD;wBACjF,MAAM,EAAE,IAAI,CAAC,MAAM;qBACpB,CAAA;gBACH,KAAK,CAAC;oBACJ,IAAI,CAAC,YAAY,EAAE,CAAC;wBAClB,YAAY,GAAG;4BACb,IAAI,EAAE,OAAO;4BACb,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,2DAA2D;4BACpF,MAAM,EAAE,IAAI,CAAC,MAAM;yBACpB,CAAA;oBACH,CAAC;oBACD,MAAK;gBACP;oBACE,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAC3E,yGAAyG,CAC1G,CAAA;oBACD,MAAK;YACT,CAAC;QACH,CAAC;QAED,OAAO,YAAY,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IAC1C,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,uBAAuB,CAAC,KAAuB;QAC3D,MAAM,IAAI,GAAG,WAAW,EAAE,CAAA;QAC1B,IAAI,CAAC,IAAI;YAAE,OAAO,eAAe,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAA;QACnD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;QACpG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACrB,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,QAAQ,EAAE,KAAK,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,0CAA0C,CAAC,CAAA;QACtJ,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,EAAE,CAAA;IACxB,CAAC;IAED,iIAAiI;IACzH,KAAK,CAAC,WAAW,CACvB,MAAc,EACd,YAAoB,EACpB,KAA4B;QAE5B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;QACzB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAC3B,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EACjG,mBAAmB,CACpB,CAAA;QAED,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,kEAAkE;YAClE,kEAAkE;YAClE,qCAAqC;YACrC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,+CAA+C,CAAC,CAAA;YACtI,gEAAgE;YAChE,qEAAqE;YACrE,sEAAsE;YACtE,wBAAwB;YACxB,MAAM,IAAI,CAAC,aAAa,EAAE,CAAA;YAC1B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;YACzB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACrC,sEAAsE;YACtE,iEAAiE;YACjE,8BAA8B;YAC9B,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,8BAA8B,EAAE,MAAM,EAAE,EAAE,4DAA4D,CAAC,CAAA;YAC1H,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;YACzB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,oEAAoE;YACpE,qEAAqE;YACrE,2DAA2D;YAC3D,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,4CAA4C,CAAC,CAAA;YACnH,OAAO,IAAI,CAAA;QACb,CAAC;QAED,mDAAmD;QACnD,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACvC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAA;IACzD,CAAC;IAEO,YAAY,CAAC,MAAc;QACjC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QAChE,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC9C,IAAI,QAAQ,IAAI,wBAAwB,EAAE,CAAC;YACzC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAChC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,EACvE,kHAAkH,CACnH,CAAA;QACH,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,QAAQ;QACZ,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACvC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACzB,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAA;YACvD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACzB,CAAC;QACD,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC,SAAS,EAAE,CAAA;IACtC,CAAC;CACF;AAED,SAAS,aAAa,CAAC,KAAiB;IACtC,yEAAyE;IACzE,sEAAsE;IACtE,+DAA+D;IAC/D,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAgB,CAAA;AACjG,CAAC"}
|
|
@@ -0,0 +1,25 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* The few pieces of the WebAssembly binary format the load-time rewrites
|
|
3
|
+
* (`memoryCap.ts`, `fuel.ts`) share: LEB128 integers, the section list, and
|
|
4
|
+
* reassembly. Not a general decoder; each rewrite parses only what it changes.
|
|
5
|
+
*/
|
|
6
|
+
export interface Section {
|
|
7
|
+
id: number;
|
|
8
|
+
payload: Uint8Array<ArrayBuffer>;
|
|
9
|
+
}
|
|
10
|
+
export declare function malformed(what: string): Error;
|
|
11
|
+
export declare function readU32(bytes: Uint8Array, at: number): {
|
|
12
|
+
value: number;
|
|
13
|
+
next: number;
|
|
14
|
+
};
|
|
15
|
+
/** Skip any LEB128 integer, signed or unsigned, up to 64 bits. */
|
|
16
|
+
export declare function skipLeb(bytes: Uint8Array, at: number): number;
|
|
17
|
+
export declare function writeU32(value: number): number[];
|
|
18
|
+
/** Signed LEB128, for `i32.const` immediates. */
|
|
19
|
+
export declare function writeS32(value: number): number[];
|
|
20
|
+
export declare function readSections(bytes: Uint8Array<ArrayBuffer>): Section[];
|
|
21
|
+
/** Replace the section with `id`, or insert it where the spec's order puts it. */
|
|
22
|
+
export declare function putSection(sections: Section[], id: number, payload: Uint8Array<ArrayBuffer>): void;
|
|
23
|
+
export declare function assembleModule(header: Uint8Array, sections: Section[]): Uint8Array<ArrayBuffer>;
|
|
24
|
+
export declare function concat(parts: Uint8Array[]): Uint8Array<ArrayBuffer>;
|
|
25
|
+
//# sourceMappingURL=wasmBinary.d.ts.map
|