@intutic/shared-types 2.1.0 → 2.3.0

package/dist/toolPoison.d.ts

@@ -0,0 +1,33 @@
+/**
+ * toolPoison.ts — Tool-description poisoning patterns.
+ *
+ * Direct TypeScript port of `packages/proxy/src/tool_poison.rs`'s `scan`
+ * function and its seven named patterns. This is a SEPARATE pattern set from
+ * the MCP proxy's `injection.ts`, on purpose: `tool_poison.rs`'s own module
+ * doc records that it tried reusing `injection::scan` for this and measured
+ * that its five patterns match ZERO of the tool-poisoning payloads — they are
+ * tuned for conversational jailbreak phrasing ("ignore previous
+ * instructions"), while a poisoned tool description reads like documentation,
+ * not a jailbreak.
+ *
+ * Two consumers, which is why it lives here: the MCP proxy's
+ * `tool_poisoning` detector (`packages/mcp-proxy/src/anomaly/detectors.ts`)
+ * and the tool-change risk score (`mcpToolRisk.ts`), which the control plane
+ * computes when a server's tool set changes.
+ *
+ * The Rust source gates each pattern behind a cheap substring pre-check
+ * (`GATES`) before running the regex. That optimization is not ported — it is
+ * a performance detail proven equivalent to the plain regex loop (the Rust
+ * module's own `gating_never_changes_a_verdict` test), and the volume of tool
+ * descriptions scanned here is orders of magnitude below the Rust proxy's
+ * request path. The pattern SOURCE TEXT below is unchanged from the Rust
+ * `PATTERNS` array.
+ *
+ @module
+ */
+/**
+ * Pattern names matching this tool description, deduplicated, empty when it
+ * looks like ordinary prose (the overwhelmingly common case).
+ */
+export declare function scanToolDescription(description: string): string[];
+//# sourceMappingURL=toolPoison.d.ts.map

package/dist/toolPoison.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolPoison.d.ts","sourceRoot":"","sources":["../src/toolPoison.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAkDH;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAOjE"}

package/dist/toolPoison.js

@@ -0,0 +1,85 @@
+"use strict";
+/**
+ * toolPoison.ts — Tool-description poisoning patterns.
+ *
+ * Direct TypeScript port of `packages/proxy/src/tool_poison.rs`'s `scan`
+ * function and its seven named patterns. This is a SEPARATE pattern set from
+ * the MCP proxy's `injection.ts`, on purpose: `tool_poison.rs`'s own module
+ * doc records that it tried reusing `injection::scan` for this and measured
+ * that its five patterns match ZERO of the tool-poisoning payloads — they are
+ * tuned for conversational jailbreak phrasing ("ignore previous
+ * instructions"), while a poisoned tool description reads like documentation,
+ * not a jailbreak.
+ *
+ * Two consumers, which is why it lives here: the MCP proxy's
+ * `tool_poisoning` detector (`packages/mcp-proxy/src/anomaly/detectors.ts`)
+ * and the tool-change risk score (`mcpToolRisk.ts`), which the control plane
+ * computes when a server's tool set changes.
+ *
+ * The Rust source gates each pattern behind a cheap substring pre-check
+ * (`GATES`) before running the regex. That optimization is not ported — it is
+ * a performance detail proven equivalent to the plain regex loop (the Rust
+ * module's own `gating_never_changes_a_verdict` test), and the volume of tool
+ * descriptions scanned here is orders of magnitude below the Rust proxy's
+ * request path. The pattern SOURCE TEXT below is unchanged from the Rust
+ * `PATTERNS` array.
+ *
+ @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scanToolDescription = scanToolDescription;
+/**
+ * Ported verbatim from `tool_poison.rs`'s `PATTERNS` const. All bounded
+ * repetitions here are small fixed-width gaps (`{0,40}`, `{0,60}`, `{0,80}`)
+ * over a handful of alternations — the same "no wide bounded repetition, no
+ * RegexSet performance regression" shape the MCP proxy's `injection.ts` documents, not the
+ * `dlp.rs` shape that regressed.
+ */
+const PATTERNS = [
+    {
+        name: 'hidden-instruction-block',
+        regex: /<\s*(important|secret|system|hidden|instructions?)\s*>/i,
+    },
+    {
+        name: 'conceal-from-user',
+        regex: /\bdo\s+not\s+(mention|tell|inform|reveal|disclose|show)\b[^.!?]{0,40}\buser\b|\bwithout\s+(informing|telling|notifying|alerting)\s+the\s+user\b/i,
+    },
+    {
+        name: 'sidechannel-exfil',
+        regex: /\b(pass|send|include|append|forward|provide)\b[^.!?]{0,60}\b(content|value|text)s?\s+of\b[^.!?]{0,40}(~\/|\.env|\.ssh|id_rsa|credential|secret|token|api[_ ]?key)/i,
+    },
+    {
+        name: 'read-sensitive-path',
+        // Rust's own comment: no `\b` before the alternation, because a word
+        // boundary cannot exist before a literal `.` — `\b\.env` matches
+        // nothing. Preserved exactly, including that absence.
+        regex: /\b(read|open|cat|load|access)\b[^.!?]{0,30}(~\/\.\w+|\.ssh\/|id_rsa|\.env\b|\.aws\/|mcp\.json|\/etc\/passwd)/i,
+    },
+    {
+        name: 'cross-tool-shadowing',
+        regex: /\buse\s+this\s+tool\s+instead\s+of\b|\bdo\s+not\s+use\s+the\s+\w+\s+tool\b|\bthis\s+tool\s+supersedes\b/i,
+    },
+    {
+        name: 'agent-directed-precondition',
+        regex: /\bbefore\s+(using|calling|invoking)\s+(this|the)\s+tool\b[^.!?]{0,80}\b(you\s+must|first\s+read|first\s+call)\b/i,
+    },
+    {
+        name: 'tool-scoped-instruction-override',
+        regex: /\b(ignore|disregard|override)\b[^.!?]{0,40}\b(other\s+tools?|previous\s+tools?|system\s+prompt)\b/i,
+    },
+];
+/**
+ * Pattern names matching this tool description, deduplicated, empty when it
+ * looks like ordinary prose (the overwhelmingly common case).
+ */
+function scanToolDescription(description) {
+    if (!description)
+        return [];
+    const found = [];
+    for (const { name, regex } of PATTERNS) {
+        if (regex.test(description))
+            found.push(name);
+    }
+    return found;
+}
+//# sourceMappingURL=toolPoison.js.map

package/dist/toolPoison.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolPoison.js","sourceRoot":"","sources":["../src/toolPoison.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;AAsDH,kDAOC;AAtDD;;;;;;GAMG;AACH,MAAM,QAAQ,GAAiC;IAC7C;QACE,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,yDAAyD;KACjE;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EACH,kJAAkJ;KACrJ;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EACH,oKAAoK;KACvK;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,qEAAqE;QACrE,iEAAiE;QACjE,sDAAsD;QACtD,KAAK,EAAE,+GAA+G;KACvH;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,0GAA0G;KAClH;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,KAAK,EAAE,kHAAkH;KAC1H;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,KAAK,EAAE,oGAAoG;KAC5G;CACF,CAAA;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,WAAmB;IACrD,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAA;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,QAAQ,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/usage.d.ts

@@ -54,4 +54,190 @@ export interface VirtualKeyBreakdown {
     totalOutputTokens: number;
     traceCount: number;
 }
+/**
+ * One developer's usage for a period (`GET /api/v1/usage/members`).
+ *
+ * A call is attributed to the workspace member who owns the virtual key that
+ * authenticated it. `memberId: null` is the unattributed bucket: calls with no
+ * virtual-key auth context, and calls whose key prefix no single member owns.
+ */
+export interface MemberUsage {
+    memberId: string | null;
+    /** Null for the unattributed bucket, and for a member since removed. */
+    displayName: string | null;
+    email: string | null;
+    totalCostUsd: number;
+    totalRawCostUsd: number;
+    totalInputTokens: number;
+    totalOutputTokens: number;
+    traceCount: number;
+    /** Distinct requested models, sorted. */
+    models: string[];
+    /** Distinct UTC calendar days with at least one call. */
+    activeDays: number;
+}
+/**
+ * `GET /api/v1/usage/members`. `scope: 'self'` when the caller may only see
+ * their own row (DEVELOPER and VIEWER); `'workspace'` for OWNER, ADMIN and EM.
+ */
+export interface MemberUsageResponse {
+    scope: 'workspace' | 'self';
+    members: MemberUsage[];
+}
+/**
+ * One SCIM group's usage for a period (`GET /api/v1/usage/teams`): the sum over
+ * every member in the group, directly or through nested groups. A member in
+ * several groups counts in each, so team totals can add up to more than the
+ * workspace total.
+ */
+export interface TeamUsage {
+    groupId: string;
+    displayName: string;
+    /** Members in the group, transitively. */
+    memberCount: number;
+    /** Members of the group with at least one attributed call in the period. */
+    activeMembers: number;
+    totalCostUsd: number;
+    totalRawCostUsd: number;
+    totalInputTokens: number;
+    totalOutputTokens: number;
+    traceCount: number;
+}
+/**
+ * `GET /api/v1/usage/teams`. `scimGroups: false` means the workspace has no
+ * SCIM groups, so there are no teams to roll up to; per-member usage is the
+ * finest grouping available.
+ */
+export interface TeamUsageResponse {
+    scimGroups: boolean;
+    teams: TeamUsage[];
+}
+/**
+ * Usage per repository and branch (`GET /api/v1/usage/branches`), from the git
+ * context copied onto each trace when it was recorded. `repo` and `branch` are
+ * both null on the row for calls made with no git context.
+ */
+export interface BranchUsage {
+    /** Normalised `origin` remote, host/path. Null when the directory had no `origin`. */
+    repo: string | null;
+    branch: string | null;
+    /** Distinct HEAD commits the calls were made at. */
+    commitCount: number;
+    totalCostUsd: number;
+    totalRawCostUsd: number;
+    totalInputTokens: number;
+    totalOutputTokens: number;
+    traceCount: number;
+    /** Latest call, ISO 8601. */
+    lastCallAt: string;
+}
+/**
+ * Usage per HEAD commit (`GET /api/v1/usage/commits`): the calls made while
+ * that commit was checked out, which is the work that led to the next commit,
+ * not the work that produced this one.
+ */
+export interface CommitUsage {
+    repo: string | null;
+    branch: string | null;
+    commit: string | null;
+    totalCostUsd: number;
+    totalRawCostUsd: number;
+    totalInputTokens: number;
+    totalOutputTokens: number;
+    traceCount: number;
+    /** First and latest call at this commit, ISO 8601. */
+    firstCallAt: string;
+    lastCallAt: string;
+}
+/** `scope` as on {@link MemberUsageResponse}: `'self'` counts only the caller's own calls. */
+export interface BranchUsageResponse {
+    scope: 'workspace' | 'self';
+    branches: BranchUsage[];
+}
+export interface CommitUsageResponse {
+    scope: 'workspace' | 'self';
+    commits: CommitUsage[];
+}
+export type PullRequestState = 'open' | 'closed' | 'merged';
+/**
+ * One pull request's usage for a period (`GET /api/v1/usage/pull-requests`):
+ * the calls made on its head branch, in its repository, between the end of
+ * the previous pull request from that branch (or the branch's first call) and
+ * this one's merge or close. A call belongs to one pull request at most.
+ */
+export interface PullRequestUsage {
+    /** Normalised host/owner/name, lower-cased. */
+    repo: string;
+    number: number;
+    title: string;
+    /** GitHub login of whoever opened it. */
+    author: string | null;
+    state: PullRequestState;
+    headBranch: string;
+    baseBranch: string | null;
+    /** The pull request on GitHub. */
+    url: string;
+    /** ISO 8601. */
+    openedAt: string;
+    mergedAt: string | null;
+    closedAt: string | null;
+    totalCostUsd: number;
+    totalRawCostUsd: number;
+    totalInputTokens: number;
+    totalOutputTokens: number;
+    traceCount: number;
+    /** Members with an attributed call on it in the period. */
+    memberCount: number;
+    /** First and latest call in the period, ISO 8601. */
+    firstCallAt: string;
+    lastCallAt: string;
+}
+/** Where pull requests come from, and whether that is working, for the empty states. */
+export interface PullRequestSources {
+    /** The workspace has a GitHub source connector whose token lists pull requests. */
+    connector: boolean;
+    /** The pull-request webhook is set up. */
+    webhook: boolean;
+    /** The GitHub host the connector's token is used against, e.g. `github.com`. */
+    apiHost: string;
+    /** Repositories whose pull requests the connector's token was refused (missing scope or access). */
+    noAccessRepos: string[];
+    /** Pull requests mapped in the workspace, any period. */
+    mappedPullRequests: number;
+    /** Last time a branch was looked up through the connector, ISO 8601. */
+    lastCheckedAt: string | null;
+}
+/** `scope` as on {@link MemberUsageResponse}: `'self'` counts only the caller's own calls. */
+export interface PullRequestUsageResponse {
+    scope: 'workspace' | 'self';
+    github: PullRequestSources;
+    pullRequests: PullRequestUsage[];
+}
+/** `POST /api/v1/usage/pull-requests/refresh`. */
+export interface PullRequestRefreshResult {
+    /** Branches looked up. */
+    checked: number;
+    /** Answered 304: the ETag matched and nothing changed. */
+    notModified: number;
+    /** Pull requests written or updated. */
+    pullRequests: number;
+    /** Branches the token could not list. */
+    noAccess: number;
+    /** True when GitHub's rate limit stopped the run early. */
+    rateLimited: boolean;
+}
+/** `GET /api/v1/integrations/github/webhook`. The secret is never returned here. */
+export interface GitHubWebhookInfo {
+    configured: boolean;
+    /** Payload URL to paste into GitHub. Null until a secret has been made. */
+    url: string | null;
+    createdAt: string | null;
+    secretRotatedAt: string | null;
+    lastDeliveryAt: string | null;
+}
+/** `POST /api/v1/integrations/github/webhook/secret`: the new secret, shown once. */
+export interface GitHubWebhookSecret {
+    url: string;
+    secret: string;
+}
 //# sourceMappingURL=usage.d.ts.map

package/dist/usage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAA;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,aAAa,EAAE,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAAA;CAC1C;AAED,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;OAKG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB"}
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAA;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,aAAa,EAAE,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAAA;CAC1C;AAED,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;OAKG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,wEAAwE;IACxE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,yCAAyC;IACzC,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,yDAAyD;IACzD,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,WAAW,GAAG,MAAM,CAAA;IAC3B,OAAO,EAAE,WAAW,EAAE,CAAA;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAA;IACnB,4EAA4E;IAC5E,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,OAAO,CAAA;IACnB,KAAK,EAAE,SAAS,EAAE,CAAA;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,sFAAsF;IACtF,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,sDAAsD;IACtD,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,8FAA8F;AAC9F,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,WAAW,GAAG,MAAM,CAAA;IAC3B,QAAQ,EAAE,WAAW,EAAE,CAAA;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,WAAW,GAAG,MAAM,CAAA;IAC3B,OAAO,EAAE,WAAW,EAAE,CAAA;CACvB;AAED,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAE3D;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,yCAAyC;IACzC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,KAAK,EAAE,gBAAgB,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAA;IACX,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAA;IACnB,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,wFAAwF;AACxF,MAAM,WAAW,kBAAkB;IACjC,mFAAmF;IACnF,SAAS,EAAE,OAAO,CAAA;IAClB,0CAA0C;IAC1C,OAAO,EAAE,OAAO,CAAA;IAChB,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAA;IACf,oGAAoG;IACpG,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,yDAAyD;IACzD,kBAAkB,EAAE,MAAM,CAAA;IAC1B,wEAAwE;IACxE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,8FAA8F;AAC9F,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,WAAW,GAAG,MAAM,CAAA;IAC3B,MAAM,EAAE,kBAAkB,CAAA;IAC1B,YAAY,EAAE,gBAAgB,EAAE,CAAA;CACjC;AAED,kDAAkD;AAClD,MAAM,WAAW,wBAAwB;IACvC,0BAA0B;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAA;IACnB,wCAAwC;IACxC,YAAY,EAAE,MAAM,CAAA;IACpB,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAA;IAChB,2DAA2D;IAC3D,WAAW,EAAE,OAAO,CAAA;CACrB;AAED,oFAAoF;AACpF,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,OAAO,CAAA;IACnB,2EAA2E;IAC3E,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAC9B;AAED,qFAAqF;AACrF,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;CACf"}

package/dist/wasmBinary.d.ts

@@ -0,0 +1,25 @@
+/**
+ * The few pieces of the WebAssembly binary format the load-time rewrites
+ * (`wasmMemoryCap.ts`, `wasmFuel.ts`) share: LEB128 integers, the section list, and
+ * reassembly. Not a general decoder; each rewrite parses only what it changes.
+ */
+export interface Section {
+    id: number;
+    payload: Uint8Array<ArrayBuffer>;
+}
+export declare function malformed(what: string): Error;
+export declare function readU32(bytes: Uint8Array, at: number): {
+    value: number;
+    next: number;
+};
+/** Skip any LEB128 integer, signed or unsigned, up to 64 bits. */
+export declare function skipLeb(bytes: Uint8Array, at: number): number;
+export declare function writeU32(value: number): number[];
+/** Signed LEB128, for `i32.const` immediates. */
+export declare function writeS32(value: number): number[];
+export declare function readSections(bytes: Uint8Array<ArrayBuffer>): Section[];
+/** Replace the section with `id`, or insert it where the spec's order puts it. */
+export declare function putSection(sections: Section[], id: number, payload: Uint8Array<ArrayBuffer>): void;
+export declare function assembleModule(header: Uint8Array, sections: Section[]): Uint8Array<ArrayBuffer>;
+export declare function concat(parts: Uint8Array[]): Uint8Array<ArrayBuffer>;
+//# sourceMappingURL=wasmBinary.d.ts.map

package/dist/wasmBinary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasmBinary.d.ts","sourceRoot":"","sources":["../src/wasmBinary.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,CAAA;CACjC;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAE7C;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAUtF;AAED,kEAAkE;AAClE,wBAAgB,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAK7D;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAShD;AAED,iDAAiD;AACjD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAShD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,OAAO,EAAE,CAYtE;AAKD,kFAAkF;AAClF,wBAAgB,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,IAAI,CAYlG;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,WAAW,CAAC,CAM/F;AAED,wBAAgB,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC,WAAW,CAAC,CAQnE"}

package/dist/wasmBinary.js

@@ -0,0 +1,111 @@
+"use strict";
+/**
+ * The few pieces of the WebAssembly binary format the load-time rewrites
+ * (`wasmMemoryCap.ts`, `wasmFuel.ts`) share: LEB128 integers, the section list, and
+ * reassembly. Not a general decoder; each rewrite parses only what it changes.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.malformed = malformed;
+exports.readU32 = readU32;
+exports.skipLeb = skipLeb;
+exports.writeU32 = writeU32;
+exports.writeS32 = writeS32;
+exports.readSections = readSections;
+exports.putSection = putSection;
+exports.assembleModule = assembleModule;
+exports.concat = concat;
+const HEADER_BYTES = 8; // `\0asm` + version
+function malformed(what) {
+    return new Error(`malformed WASM module: ${what}`);
+}
+function readU32(bytes, at) {
+    let value = 0;
+    let shift = 0;
+    for (let i = at; i < bytes.length && i < at + 5; i++) {
+        const byte = bytes[i];
+        value += (byte & 0x7f) * 2 ** shift;
+        if ((byte & 0x80) === 0)
+            return { value, next: i + 1 };
+        shift += 7;
+    }
+    throw malformed('truncated or oversized LEB128 integer');
+}
+/** Skip any LEB128 integer, signed or unsigned, up to 64 bits. */
+function skipLeb(bytes, at) {
+    for (let i = at; i < bytes.length && i < at + 10; i++) {
+        if ((bytes[i] & 0x80) === 0)
+            return i + 1;
+    }
+    throw malformed('truncated or oversized LEB128 integer');
+}
+function writeU32(value) {
+    const out = [];
+    do {
+        let byte = value & 0x7f;
+        value = Math.floor(value / 128);
+        if (value !== 0)
+            byte |= 0x80;
+        out.push(byte);
+    } while (value !== 0);
+    return out;
+}
+/** Signed LEB128, for `i32.const` immediates. */
+function writeS32(value) {
+    const out = [];
+    for (;;) {
+        const byte = value & 0x7f;
+        value >>= 7;
+        const done = (value === 0 && (byte & 0x40) === 0) || (value === -1 && (byte & 0x40) !== 0);
+        out.push(done ? byte : byte | 0x80);
+        if (done)
+            return out;
+    }
+}
+function readSections(bytes) {
+    const sections = [];
+    let at = HEADER_BYTES;
+    while (at < bytes.length) {
+        const id = bytes[at];
+        const size = readU32(bytes, at + 1);
+        const end = size.next + size.value;
+        if (end > bytes.length)
+            throw malformed('section runs past the end');
+        sections.push({ id, payload: bytes.subarray(size.next, end) });
+        at = end;
+    }
+    return sections;
+}
+/** Section order the spec requires; custom sections (id 0) may sit anywhere. */
+const SECTION_RANK = { 1: 1, 2: 2, 3: 3, 4: 4, 5: 5, 13: 6, 6: 7, 7: 8, 8: 9, 9: 10, 12: 11, 10: 12, 11: 13 };
+/** Replace the section with `id`, or insert it where the spec's order puts it. */
+function putSection(sections, id, payload) {
+    const existing = sections.findIndex((s) => s.id === id);
+    if (existing >= 0) {
+        sections[existing] = { id, payload };
+        return;
+    }
+    const rank = SECTION_RANK[id];
+    let insertAt = 0;
+    sections.forEach((s, i) => {
+        if (s.id !== 0 && SECTION_RANK[s.id] < rank)
+            insertAt = i + 1;
+    });
+    sections.splice(insertAt, 0, { id, payload });
+}
+function assembleModule(header, sections) {
+    const parts = [header.subarray(0, HEADER_BYTES)];
+    for (const s of sections) {
+        parts.push(Uint8Array.from([s.id, ...writeU32(s.payload.length)]), s.payload);
+    }
+    return concat(parts);
+}
+function concat(parts) {
+    const out = new Uint8Array(parts.reduce((n, p) => n + p.length, 0));
+    let at = 0;
+    for (const p of parts) {
+        out.set(p, at);
+        at += p.length;
+    }
+    return out;
+}
+//# sourceMappingURL=wasmBinary.js.map

package/dist/wasmBinary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasmBinary.js","sourceRoot":"","sources":["../src/wasmBinary.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AASH,8BAEC;AAED,0BAUC;AAGD,0BAKC;AAED,4BASC;AAGD,4BASC;AAED,oCAYC;AAMD,gCAYC;AAED,wCAMC;AAED,wBAQC;AAtGD,MAAM,YAAY,GAAG,CAAC,CAAA,CAAC,oBAAoB;AAO3C,SAAgB,SAAS,CAAC,IAAY;IACpC,OAAO,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAA;AACpD,CAAC;AAED,SAAgB,OAAO,CAAC,KAAiB,EAAE,EAAU;IACnD,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;QACtB,KAAK,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAA;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAA;QACtD,KAAK,IAAI,CAAC,CAAA;IACZ,CAAC;IACD,MAAM,SAAS,CAAC,uCAAuC,CAAC,CAAA;AAC1D,CAAC;AAED,kEAAkE;AAClE,SAAgB,OAAO,CAAC,KAAiB,EAAE,EAAU;IACnD,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAA;IAC5C,CAAC;IACD,MAAM,SAAS,CAAC,uCAAuC,CAAC,CAAA;AAC1D,CAAC;AAED,SAAgB,QAAQ,CAAC,KAAa;IACpC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,GAAG,CAAC;QACF,IAAI,IAAI,GAAG,KAAK,GAAG,IAAI,CAAA;QACvB,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAA;QAC/B,IAAI,KAAK,KAAK,CAAC;YAAE,IAAI,IAAI,IAAI,CAAA;QAC7B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChB,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAC;IACrB,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,iDAAiD;AACjD,SAAgB,QAAQ,CAAC,KAAa;IACpC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,KAAK,GAAG,IAAI,CAAA;QACzB,KAAK,KAAK,CAAC,CAAA;QACX,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1F,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;QACnC,IAAI,IAAI;YAAE,OAAO,GAAG,CAAA;IACtB,CAAC;AACH,CAAC;AAED,SAAgB,YAAY,CAAC,KAA8B;IACzD,MAAM,QAAQ,GAAc,EAAE,CAAA;IAC9B,IAAI,EAAE,GAAG,YAAY,CAAA;IACrB,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAE,CAAA;QACrB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAA;QAClC,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM;YAAE,MAAM,SAAS,CAAC,2BAA2B,CAAC,CAAA;QACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9D,EAAE,GAAG,GAAG,CAAA;IACV,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,gFAAgF;AAChF,MAAM,YAAY,GAA2B,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAA;AAErI,kFAAkF;AAClF,SAAgB,UAAU,CAAC,QAAmB,EAAE,EAAU,EAAE,OAAgC;IAC1F,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACvD,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAClB,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,CAAA;QACpC,OAAM;IACR,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,CAAE,CAAA;IAC9B,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,CAAE,GAAG,IAAI;YAAE,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IACF,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;AAC/C,CAAC;AAED,SAAgB,cAAc,CAAC,MAAkB,EAAE,QAAmB;IACpE,MAAM,KAAK,GAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAA;IAC9D,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;AACtB,CAAC;AAED,SAAgB,MAAM,CAAC,KAAmB;IACxC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA;IACnE,IAAI,EAAE,GAAG,CAAC,CAAA;IACV,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACd,EAAE,IAAI,CAAC,CAAC,MAAM,CAAA;IAChB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/wasmFuel.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Instruction budget for WASM rules: the stand-in for Wasmtime fuel, which
+ * the Rust proxy sets to 1,000,000 per evaluation (`limits.rs`), wherever a
+ * rule runs on V8 — the MCP proxy, and `intutic rules test`, `policy test`
+ * and `policy install`, so a rule that runs out in a proxy runs out there.
+ *
+ * V8 has no metering hook, so the rule's own code is rewritten at load to
+ * count. A new mutable i32 global starts at the budget, and a charge is
+ * inserted at every function entry and every loop header: subtract the number
+ * of instructions that can run before the next charge point, and trap
+ * (`unreachable`) once the counter goes negative. Code between two charge
+ * points is straight-line apart from forward branches, so each charge is an
+ * upper bound on what it pays for, and the budget bounds the instructions the
+ * rule actually executes. Structural instructions (`block`, `loop`, `end`,
+ * `else`, `nop`, `drop`, `return`, `unreachable`) cost nothing, roughly as
+ * Wasmtime prices them.
+ *
+ * The global is exported as `FUEL_EXPORT` so the worker can tell a trap caused
+ * by the budget from any other trap. Each evaluation instantiates the module
+ * afresh, so the budget is per evaluation, like a Wasmtime `Store`.
+ *
+ * The decoder knows the MVP instruction set plus the extensions compilers
+ * emit by default (sign extension, saturating truncation, bulk memory,
+ * reference types, multi-value, tail calls, SIMD). A module using anything
+ * else (exceptions, GC, threads) is refused at load rather than run unmetered.
+ */
+/** `runner.rs`: `store.set_fuel(1_000_000)`. */
+export declare const DEFAULT_FUEL_BUDGET = 1000000;
+/**
+ * A Rego rule's budget: three times the Rust proxy's 100,000,000
+ * (`limits::REGO`), because this meter counts differently.
+ *
+ * It charges each straight-line run in full at its entry, branches skipped or
+ * not, and an OPA build is mostly short runs with early exits: on the largest
+ * input (a 64 KB command) the destructive-shell and production-deploy examples
+ * count 74,000,000 here against 21,000,000 under Wasmtime, and the
+ * deny-writes and conformance policies about 8,000,000. The budget is four
+ * times the largest, so a heavier policy on the largest input still fits, and
+ * a rule that does not fit is stopped deterministically, whatever the load.
+ * Using it all up takes at most 350 ms idle and 4.4 s on a loaded machine;
+ * the deadline (`REGO_EVALUATE_TIMEOUT_MS`) is set above that.
+ */
+export declare const REGO_FUEL_BUDGET = 300000000;
+/** The export the worker reads to tell budget exhaustion from other traps. */
+export declare const FUEL_EXPORT = "__intutic_fuel";
+/**
+ * The module with every function metered against `budget` instructions per
+ * instantiation, and the counter exported as `FUEL_EXPORT`. Throws for a
+ * module the decoder cannot meter.
+ */
+export declare function meterFuel(bytes: Uint8Array<ArrayBuffer>, budget: number): Uint8Array<ArrayBuffer>;
+//# sourceMappingURL=wasmFuel.d.ts.map

package/dist/wasmFuel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasmFuel.d.ts","sourceRoot":"","sources":["../src/wasmFuel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAeH,gDAAgD;AAChD,eAAO,MAAM,mBAAmB,UAAY,CAAA;AAE5C;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB,YAAc,CAAA;AAE3C,8EAA8E;AAC9E,eAAO,MAAM,WAAW,mBAAmB,CAAA;AAoM3C;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CA+BjG"}