@intutic/shared-types 2.2.0 → 2.3.0

package/dist/wasmBinary.js

@@ -0,0 +1,111 @@
+"use strict";
+/**
+ * The few pieces of the WebAssembly binary format the load-time rewrites
+ * (`wasmMemoryCap.ts`, `wasmFuel.ts`) share: LEB128 integers, the section list, and
+ * reassembly. Not a general decoder; each rewrite parses only what it changes.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.malformed = malformed;
+exports.readU32 = readU32;
+exports.skipLeb = skipLeb;
+exports.writeU32 = writeU32;
+exports.writeS32 = writeS32;
+exports.readSections = readSections;
+exports.putSection = putSection;
+exports.assembleModule = assembleModule;
+exports.concat = concat;
+const HEADER_BYTES = 8; // `\0asm` + version
+function malformed(what) {
+    return new Error(`malformed WASM module: ${what}`);
+}
+function readU32(bytes, at) {
+    let value = 0;
+    let shift = 0;
+    for (let i = at; i < bytes.length && i < at + 5; i++) {
+        const byte = bytes[i];
+        value += (byte & 0x7f) * 2 ** shift;
+        if ((byte & 0x80) === 0)
+            return { value, next: i + 1 };
+        shift += 7;
+    }
+    throw malformed('truncated or oversized LEB128 integer');
+}
+/** Skip any LEB128 integer, signed or unsigned, up to 64 bits. */
+function skipLeb(bytes, at) {
+    for (let i = at; i < bytes.length && i < at + 10; i++) {
+        if ((bytes[i] & 0x80) === 0)
+            return i + 1;
+    }
+    throw malformed('truncated or oversized LEB128 integer');
+}
+function writeU32(value) {
+    const out = [];
+    do {
+        let byte = value & 0x7f;
+        value = Math.floor(value / 128);
+        if (value !== 0)
+            byte |= 0x80;
+        out.push(byte);
+    } while (value !== 0);
+    return out;
+}
+/** Signed LEB128, for `i32.const` immediates. */
+function writeS32(value) {
+    const out = [];
+    for (;;) {
+        const byte = value & 0x7f;
+        value >>= 7;
+        const done = (value === 0 && (byte & 0x40) === 0) || (value === -1 && (byte & 0x40) !== 0);
+        out.push(done ? byte : byte | 0x80);
+        if (done)
+            return out;
+    }
+}
+function readSections(bytes) {
+    const sections = [];
+    let at = HEADER_BYTES;
+    while (at < bytes.length) {
+        const id = bytes[at];
+        const size = readU32(bytes, at + 1);
+        const end = size.next + size.value;
+        if (end > bytes.length)
+            throw malformed('section runs past the end');
+        sections.push({ id, payload: bytes.subarray(size.next, end) });
+        at = end;
+    }
+    return sections;
+}
+/** Section order the spec requires; custom sections (id 0) may sit anywhere. */
+const SECTION_RANK = { 1: 1, 2: 2, 3: 3, 4: 4, 5: 5, 13: 6, 6: 7, 7: 8, 8: 9, 9: 10, 12: 11, 10: 12, 11: 13 };
+/** Replace the section with `id`, or insert it where the spec's order puts it. */
+function putSection(sections, id, payload) {
+    const existing = sections.findIndex((s) => s.id === id);
+    if (existing >= 0) {
+        sections[existing] = { id, payload };
+        return;
+    }
+    const rank = SECTION_RANK[id];
+    let insertAt = 0;
+    sections.forEach((s, i) => {
+        if (s.id !== 0 && SECTION_RANK[s.id] < rank)
+            insertAt = i + 1;
+    });
+    sections.splice(insertAt, 0, { id, payload });
+}
+function assembleModule(header, sections) {
+    const parts = [header.subarray(0, HEADER_BYTES)];
+    for (const s of sections) {
+        parts.push(Uint8Array.from([s.id, ...writeU32(s.payload.length)]), s.payload);
+    }
+    return concat(parts);
+}
+function concat(parts) {
+    const out = new Uint8Array(parts.reduce((n, p) => n + p.length, 0));
+    let at = 0;
+    for (const p of parts) {
+        out.set(p, at);
+        at += p.length;
+    }
+    return out;
+}
+//# sourceMappingURL=wasmBinary.js.map

package/dist/wasmBinary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasmBinary.js","sourceRoot":"","sources":["../src/wasmBinary.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AASH,8BAEC;AAED,0BAUC;AAGD,0BAKC;AAED,4BASC;AAGD,4BASC;AAED,oCAYC;AAMD,gCAYC;AAED,wCAMC;AAED,wBAQC;AAtGD,MAAM,YAAY,GAAG,CAAC,CAAA,CAAC,oBAAoB;AAO3C,SAAgB,SAAS,CAAC,IAAY;IACpC,OAAO,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAA;AACpD,CAAC;AAED,SAAgB,OAAO,CAAC,KAAiB,EAAE,EAAU;IACnD,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;QACtB,KAAK,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAA;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAA;QACtD,KAAK,IAAI,CAAC,CAAA;IACZ,CAAC;IACD,MAAM,SAAS,CAAC,uCAAuC,CAAC,CAAA;AAC1D,CAAC;AAED,kEAAkE;AAClE,SAAgB,OAAO,CAAC,KAAiB,EAAE,EAAU;IACnD,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAA;IAC5C,CAAC;IACD,MAAM,SAAS,CAAC,uCAAuC,CAAC,CAAA;AAC1D,CAAC;AAED,SAAgB,QAAQ,CAAC,KAAa;IACpC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,GAAG,CAAC;QACF,IAAI,IAAI,GAAG,KAAK,GAAG,IAAI,CAAA;QACvB,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAA;QAC/B,IAAI,KAAK,KAAK,CAAC;YAAE,IAAI,IAAI,IAAI,CAAA;QAC7B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChB,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAC;IACrB,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,iDAAiD;AACjD,SAAgB,QAAQ,CAAC,KAAa;IACpC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,KAAK,GAAG,IAAI,CAAA;QACzB,KAAK,KAAK,CAAC,CAAA;QACX,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1F,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;QACnC,IAAI,IAAI;YAAE,OAAO,GAAG,CAAA;IACtB,CAAC;AACH,CAAC;AAED,SAAgB,YAAY,CAAC,KAA8B;IACzD,MAAM,QAAQ,GAAc,EAAE,CAAA;IAC9B,IAAI,EAAE,GAAG,YAAY,CAAA;IACrB,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAE,CAAA;QACrB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAA;QAClC,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM;YAAE,MAAM,SAAS,CAAC,2BAA2B,CAAC,CAAA;QACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9D,EAAE,GAAG,GAAG,CAAA;IACV,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,gFAAgF;AAChF,MAAM,YAAY,GAA2B,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAA;AAErI,kFAAkF;AAClF,SAAgB,UAAU,CAAC,QAAmB,EAAE,EAAU,EAAE,OAAgC;IAC1F,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACvD,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAClB,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,CAAA;QACpC,OAAM;IACR,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,CAAE,CAAA;IAC9B,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,CAAE,GAAG,IAAI;YAAE,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IACF,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;AAC/C,CAAC;AAED,SAAgB,cAAc,CAAC,MAAkB,EAAE,QAAmB;IACpE,MAAM,KAAK,GAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAA;IAC9D,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;AACtB,CAAC;AAED,SAAgB,MAAM,CAAC,KAAmB;IACxC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA;IACnE,IAAI,EAAE,GAAG,CAAC,CAAA;IACV,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACd,EAAE,IAAI,CAAC,CAAC,MAAM,CAAA;IAChB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/wasmFuel.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Instruction budget for WASM rules: the stand-in for Wasmtime fuel, which
+ * the Rust proxy sets to 1,000,000 per evaluation (`limits.rs`), wherever a
+ * rule runs on V8 — the MCP proxy, and `intutic rules test`, `policy test`
+ * and `policy install`, so a rule that runs out in a proxy runs out there.
+ *
+ * V8 has no metering hook, so the rule's own code is rewritten at load to
+ * count. A new mutable i32 global starts at the budget, and a charge is
+ * inserted at every function entry and every loop header: subtract the number
+ * of instructions that can run before the next charge point, and trap
+ * (`unreachable`) once the counter goes negative. Code between two charge
+ * points is straight-line apart from forward branches, so each charge is an
+ * upper bound on what it pays for, and the budget bounds the instructions the
+ * rule actually executes. Structural instructions (`block`, `loop`, `end`,
+ * `else`, `nop`, `drop`, `return`, `unreachable`) cost nothing, roughly as
+ * Wasmtime prices them.
+ *
+ * The global is exported as `FUEL_EXPORT` so the worker can tell a trap caused
+ * by the budget from any other trap. Each evaluation instantiates the module
+ * afresh, so the budget is per evaluation, like a Wasmtime `Store`.
+ *
+ * The decoder knows the MVP instruction set plus the extensions compilers
+ * emit by default (sign extension, saturating truncation, bulk memory,
+ * reference types, multi-value, tail calls, SIMD). A module using anything
+ * else (exceptions, GC, threads) is refused at load rather than run unmetered.
+ */
+/** `runner.rs`: `store.set_fuel(1_000_000)`. */
+export declare const DEFAULT_FUEL_BUDGET = 1000000;
+/**
+ * A Rego rule's budget: three times the Rust proxy's 100,000,000
+ * (`limits::REGO`), because this meter counts differently.
+ *
+ * It charges each straight-line run in full at its entry, branches skipped or
+ * not, and an OPA build is mostly short runs with early exits: on the largest
+ * input (a 64 KB command) the destructive-shell and production-deploy examples
+ * count 74,000,000 here against 21,000,000 under Wasmtime, and the
+ * deny-writes and conformance policies about 8,000,000. The budget is four
+ * times the largest, so a heavier policy on the largest input still fits, and
+ * a rule that does not fit is stopped deterministically, whatever the load.
+ * Using it all up takes at most 350 ms idle and 4.4 s on a loaded machine;
+ * the deadline (`REGO_EVALUATE_TIMEOUT_MS`) is set above that.
+ */
+export declare const REGO_FUEL_BUDGET = 300000000;
+/** The export the worker reads to tell budget exhaustion from other traps. */
+export declare const FUEL_EXPORT = "__intutic_fuel";
+/**
+ * The module with every function metered against `budget` instructions per
+ * instantiation, and the counter exported as `FUEL_EXPORT`. Throws for a
+ * module the decoder cannot meter.
+ */
+export declare function meterFuel(bytes: Uint8Array<ArrayBuffer>, budget: number): Uint8Array<ArrayBuffer>;
+//# sourceMappingURL=wasmFuel.d.ts.map

package/dist/wasmFuel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasmFuel.d.ts","sourceRoot":"","sources":["../src/wasmFuel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAeH,gDAAgD;AAChD,eAAO,MAAM,mBAAmB,UAAY,CAAA;AAE5C;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB,YAAc,CAAA;AAE3C,8EAA8E;AAC9E,eAAO,MAAM,WAAW,mBAAmB,CAAA;AAoM3C;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CA+BjG"}

package/dist/wasmFuel.js

@@ -0,0 +1,320 @@
+"use strict";
+/**
+ * Instruction budget for WASM rules: the stand-in for Wasmtime fuel, which
+ * the Rust proxy sets to 1,000,000 per evaluation (`limits.rs`), wherever a
+ * rule runs on V8 — the MCP proxy, and `intutic rules test`, `policy test`
+ * and `policy install`, so a rule that runs out in a proxy runs out there.
+ *
+ * V8 has no metering hook, so the rule's own code is rewritten at load to
+ * count. A new mutable i32 global starts at the budget, and a charge is
+ * inserted at every function entry and every loop header: subtract the number
+ * of instructions that can run before the next charge point, and trap
+ * (`unreachable`) once the counter goes negative. Code between two charge
+ * points is straight-line apart from forward branches, so each charge is an
+ * upper bound on what it pays for, and the budget bounds the instructions the
+ * rule actually executes. Structural instructions (`block`, `loop`, `end`,
+ * `else`, `nop`, `drop`, `return`, `unreachable`) cost nothing, roughly as
+ * Wasmtime prices them.
+ *
+ * The global is exported as `FUEL_EXPORT` so the worker can tell a trap caused
+ * by the budget from any other trap. Each evaluation instantiates the module
+ * afresh, so the budget is per evaluation, like a Wasmtime `Store`.
+ *
+ * The decoder knows the MVP instruction set plus the extensions compilers
+ * emit by default (sign extension, saturating truncation, bulk memory,
+ * reference types, multi-value, tail calls, SIMD). A module using anything
+ * else (exceptions, GC, threads) is refused at load rather than run unmetered.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FUEL_EXPORT = exports.REGO_FUEL_BUDGET = exports.DEFAULT_FUEL_BUDGET = void 0;
+exports.meterFuel = meterFuel;
+const wasmBinary_js_1 = require("./wasmBinary.js");
+/** `runner.rs`: `store.set_fuel(1_000_000)`. */
+exports.DEFAULT_FUEL_BUDGET = 1_000_000;
+/**
+ * A Rego rule's budget: three times the Rust proxy's 100,000,000
+ * (`limits::REGO`), because this meter counts differently.
+ *
+ * It charges each straight-line run in full at its entry, branches skipped or
+ * not, and an OPA build is mostly short runs with early exits: on the largest
+ * input (a 64 KB command) the destructive-shell and production-deploy examples
+ * count 74,000,000 here against 21,000,000 under Wasmtime, and the
+ * deny-writes and conformance policies about 8,000,000. The budget is four
+ * times the largest, so a heavier policy on the largest input still fits, and
+ * a rule that does not fit is stopped deterministically, whatever the load.
+ * Using it all up takes at most 350 ms idle and 4.4 s on a loaded machine;
+ * the deadline (`REGO_EVALUATE_TIMEOUT_MS`) is set above that.
+ */
+exports.REGO_FUEL_BUDGET = 300_000_000;
+/** The export the worker reads to tell budget exhaustion from other traps. */
+exports.FUEL_EXPORT = '__intutic_fuel';
+const SECTION = { import: 2, global: 6, export: 7, code: 10 };
+const EXPORT_KIND_GLOBAL = 0x03;
+const VALTYPES = new Set([0x7f, 0x7e, 0x7d, 0x7c, 0x7b, 0x70, 0x6f]);
+const ZERO_COST = new Set([0x00, 0x01, 0x02, 0x03, 0x05, 0x0b, 0x0f, 0x1a]);
+const OP = { block: 0x02, loop: 0x03, if: 0x04, end: 0x0b };
+function unsupported(op) {
+    return new Error(`WASM rule uses instruction ${op}, which the instruction budget cannot meter; rebuild it without exceptions, GC or threads`);
+}
+function skipBlockType(b, p) {
+    const t = b[p];
+    if (t === 0x40 || VALTYPES.has(t))
+        return p + 1;
+    // A type index, as a non-negative s33: a first byte below 0x40, or one
+    // with the continuation bit set.
+    if (t < 0x40 || (t & 0x80) !== 0)
+        return (0, wasmBinary_js_1.skipLeb)(b, p);
+    throw unsupported(`with block type 0x${t.toString(16)}`);
+}
+function skipMemarg(b, p) {
+    const align = (0, wasmBinary_js_1.readU32)(b, p);
+    p = align.next;
+    if (align.value & 0x40)
+        p = (0, wasmBinary_js_1.skipLeb)(b, p); // multi-memory index
+    return (0, wasmBinary_js_1.skipLeb)(b, p);
+}
+function skipN(b, p, n) {
+    for (let i = 0; i < n; i++)
+        p = (0, wasmBinary_js_1.skipLeb)(b, p);
+    return p;
+}
+/** Offset just past the instruction at `p`, immediates included. */
+function nextInstruction(b, p) {
+    const op = b[p];
+    const q = p + 1;
+    if (op <= 0x01 || op === 0x05 || op === 0x0b || op === 0x0f || op === 0x1a || op === 0x1b || op === 0xd1)
+        return q;
+    if (op >= 0x45 && op <= 0xc4)
+        return q; // numeric, sign extension
+    switch (op) {
+        case 0x02:
+        case 0x03:
+        case 0x04: return skipBlockType(b, q);
+        case 0x0c:
+        case 0x0d:
+        case 0x10:
+        case 0x12:
+        case 0xd2: return (0, wasmBinary_js_1.skipLeb)(b, q);
+        case 0x0e: {
+            const n = (0, wasmBinary_js_1.readU32)(b, q);
+            return skipN(b, n.next, n.value + 1);
+        }
+        case 0x11:
+        case 0x13: return skipN(b, q, 2);
+        case 0x1c: {
+            const n = (0, wasmBinary_js_1.readU32)(b, q);
+            for (let i = 0; i < n.value; i++)
+                if (!VALTYPES.has(b[n.next + i]))
+                    throw unsupported('select with a non-numeric type');
+            return n.next + n.value;
+        }
+        case 0x3f:
+        case 0x40:
+        case 0x41:
+        case 0x42: return (0, wasmBinary_js_1.skipLeb)(b, q);
+        case 0x43: return q + 4;
+        case 0x44: return q + 8;
+        case 0xd0: {
+            if (b[q] !== 0x70 && b[q] !== 0x6f)
+                throw unsupported('ref.null with a GC heap type');
+            return q + 1;
+        }
+        case 0xfc: return nextPrefixedFc(b, q);
+        case 0xfd: return nextSimd(b, q);
+    }
+    if (op >= 0x20 && op <= 0x26)
+        return (0, wasmBinary_js_1.skipLeb)(b, q); // locals, globals, table.get/set
+    if (op >= 0x28 && op <= 0x3e)
+        return skipMemarg(b, q); // loads and stores
+    throw unsupported(`0x${op.toString(16)}`);
+}
+function nextPrefixedFc(b, q) {
+    const sub = (0, wasmBinary_js_1.readU32)(b, q);
+    const p = sub.next;
+    if (sub.value <= 7)
+        return p; // saturating truncation
+    switch (sub.value) {
+        case 8:
+        case 10:
+        case 12:
+        case 14: return skipN(b, p, 2); // memory.init, memory.copy, table.init, table.copy
+        case 9:
+        case 11:
+        case 13:
+        case 15:
+        case 16:
+        case 17: return (0, wasmBinary_js_1.skipLeb)(b, p);
+    }
+    throw unsupported(`0xfc ${sub.value}`);
+}
+function nextSimd(b, q) {
+    const sub = (0, wasmBinary_js_1.readU32)(b, q);
+    const p = sub.next;
+    const op = sub.value;
+    if (op <= 11 || op === 92 || op === 93)
+        return skipMemarg(b, p); // v128 loads/stores, load*_zero
+    if (op === 12 || op === 13)
+        return p + 16; // v128.const, i8x16.shuffle
+    if (op >= 21 && op <= 34)
+        return p + 1; // extract/replace lane
+    if (op >= 84 && op <= 91)
+        return skipMemarg(b, p) + 1; // load/store lane
+    if (op <= 0x113)
+        return p; // everything else in SIMD and relaxed SIMD has no immediate
+    throw unsupported(`0xfd ${op}`);
+}
+function chargeSequence(cost, global) {
+    const g = (0, wasmBinary_js_1.writeU32)(global);
+    return [
+        0x23, ...g, 0x41, ...(0, wasmBinary_js_1.writeS32)(cost), 0x6b, 0x24, ...g, // fuel -= cost
+        0x23, ...g, 0x41, 0x00, 0x48, 0x04, 0x40, 0x00, 0x0b, // if (fuel < 0) unreachable
+    ];
+}
+/** One function body with a charge at its entry and at every loop header. */
+function meterBody(body, global) {
+    let p = 0;
+    const groups = (0, wasmBinary_js_1.readU32)(body, p);
+    p = groups.next;
+    for (let i = 0; i < groups.value; i++) {
+        p = (0, wasmBinary_js_1.readU32)(body, p).next;
+        if (!VALTYPES.has(body[p]))
+            throw unsupported('a local of a GC type');
+        p += 1;
+    }
+    const regions = [{ at: p, cost: 0 }];
+    const closed = [];
+    const blocks = []; // true for a loop
+    let ended = false;
+    while (p < body.length) {
+        if (ended)
+            throw (0, wasmBinary_js_1.malformed)('instructions after a function body ends');
+        const op = body[p];
+        const next = nextInstruction(body, p);
+        if (!ZERO_COST.has(op))
+            regions[regions.length - 1].cost += 1;
+        if (op === OP.block || op === OP.if)
+            blocks.push(false);
+        else if (op === OP.loop) {
+            blocks.push(true);
+            regions.push({ at: next, cost: 0 });
+        }
+        else if (op === OP.end) {
+            if (blocks.length === 0) {
+                closed.push(regions.pop());
+                ended = true;
+            }
+            else if (blocks.pop()) {
+                closed.push(regions.pop());
+            }
+        }
+        p = next;
+    }
+    if (!ended || regions.length !== 0)
+        throw (0, wasmBinary_js_1.malformed)('unbalanced function body');
+    closed.sort((a, b) => a.at - b.at);
+    const parts = [];
+    let cursor = 0;
+    for (const r of closed) {
+        parts.push(body.subarray(cursor, r.at), Uint8Array.from(chargeSequence(Math.max(1, r.cost), global)));
+        cursor = r.at;
+    }
+    parts.push(body.subarray(cursor));
+    return (0, wasmBinary_js_1.concat)(parts);
+}
+function skipLimits(b, p) {
+    const flags = b[p];
+    p = (0, wasmBinary_js_1.skipLeb)(b, p + 1);
+    return flags & 0x01 ? (0, wasmBinary_js_1.skipLeb)(b, p) : p;
+}
+function countImportedGlobals(s) {
+    if (!s)
+        return 0;
+    const b = s.payload;
+    const n = (0, wasmBinary_js_1.readU32)(b, 0);
+    let p = n.next;
+    let globals = 0;
+    for (let i = 0; i < n.value; i++) {
+        for (let name = 0; name < 2; name++) {
+            const len = (0, wasmBinary_js_1.readU32)(b, p);
+            p = len.next + len.value;
+        }
+        const kind = b[p++];
+        if (kind === 0x00 || kind === 0x04)
+            p = (0, wasmBinary_js_1.skipLeb)(b, kind === 0x04 ? p + 1 : p);
+        else if (kind === 0x01) {
+            if (b[p] !== 0x70 && b[p] !== 0x6f)
+                throw unsupported('an imported table of a GC type');
+            p = skipLimits(b, p + 1);
+        }
+        else if (kind === 0x02)
+            p = skipLimits(b, p);
+        else if (kind === 0x03) {
+            if (!VALTYPES.has(b[p]))
+                throw unsupported('an imported global of a GC type');
+            p += 2;
+            globals += 1;
+        }
+        else
+            throw (0, wasmBinary_js_1.malformed)(`import kind ${kind}`);
+    }
+    return globals;
+}
+function exportNames(s) {
+    if (!s)
+        return [];
+    const b = s.payload;
+    const n = (0, wasmBinary_js_1.readU32)(b, 0);
+    let p = n.next;
+    const names = [];
+    for (let i = 0; i < n.value; i++) {
+        const len = (0, wasmBinary_js_1.readU32)(b, p);
+        names.push(new TextDecoder().decode(b.subarray(len.next, len.next + len.value)));
+        p = (0, wasmBinary_js_1.readU32)(b, len.next + len.value + 1).next;
+    }
+    return names;
+}
+/** Prepend-count helper: a vector section with `extra` appended. */
+function appendToVector(s, extra) {
+    if (!s)
+        return Uint8Array.from([0x01, ...extra]);
+    const n = (0, wasmBinary_js_1.readU32)(s.payload, 0);
+    return (0, wasmBinary_js_1.concat)([Uint8Array.from((0, wasmBinary_js_1.writeU32)(n.value + 1)), s.payload.subarray(n.next), Uint8Array.from(extra)]);
+}
+/**
+ * The module with every function metered against `budget` instructions per
+ * instantiation, and the counter exported as `FUEL_EXPORT`. Throws for a
+ * module the decoder cannot meter.
+ */
+function meterFuel(bytes, budget) {
+    const sections = (0, wasmBinary_js_1.readSections)(bytes);
+    const find = (id) => sections.find((s) => s.id === id);
+    const code = find(SECTION.code);
+    if (!code)
+        return bytes;
+    const exportSection = find(SECTION.export);
+    if (exportNames(exportSection).includes(exports.FUEL_EXPORT)) {
+        throw new Error(`WASM rule already exports "${exports.FUEL_EXPORT}", which the instruction budget reserves`);
+    }
+    const globals = find(SECTION.global);
+    const fuelGlobal = countImportedGlobals(find(SECTION.import)) + (globals ? (0, wasmBinary_js_1.readU32)(globals.payload, 0).value : 0);
+    const count = (0, wasmBinary_js_1.readU32)(code.payload, 0);
+    const bodies = [Uint8Array.from((0, wasmBinary_js_1.writeU32)(count.value))];
+    let p = count.next;
+    for (let i = 0; i < count.value; i++) {
+        const size = (0, wasmBinary_js_1.readU32)(code.payload, p);
+        const end = size.next + size.value;
+        if (end > code.payload.length)
+            throw (0, wasmBinary_js_1.malformed)('function body runs past the code section');
+        const metered = meterBody(code.payload.subarray(size.next, end), fuelGlobal);
+        bodies.push(Uint8Array.from((0, wasmBinary_js_1.writeU32)(metered.length)), metered);
+        p = end;
+    }
+    if (p !== code.payload.length)
+        throw (0, wasmBinary_js_1.malformed)('code section length mismatch');
+    (0, wasmBinary_js_1.putSection)(sections, SECTION.global, appendToVector(globals, [0x7f, 0x01, 0x41, ...(0, wasmBinary_js_1.writeS32)(budget), 0x0b]));
+    const name = [...new TextEncoder().encode(exports.FUEL_EXPORT)];
+    (0, wasmBinary_js_1.putSection)(sections, SECTION.export, appendToVector(exportSection, [...(0, wasmBinary_js_1.writeU32)(name.length), ...name, EXPORT_KIND_GLOBAL, ...(0, wasmBinary_js_1.writeU32)(fuelGlobal)]));
+    (0, wasmBinary_js_1.putSection)(sections, SECTION.code, (0, wasmBinary_js_1.concat)(bodies));
+    return (0, wasmBinary_js_1.assembleModule)(bytes, sections);
+}
+//# sourceMappingURL=wasmFuel.js.map

package/dist/wasmFuel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasmFuel.js","sourceRoot":"","sources":["../src/wasmFuel.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;;AA4OH,8BA+BC;AAzQD,mDAWwB;AAExB,gDAAgD;AACnC,QAAA,mBAAmB,GAAG,SAAS,CAAA;AAE5C;;;;;;;;;;;;;GAaG;AACU,QAAA,gBAAgB,GAAG,WAAW,CAAA;AAE3C,8EAA8E;AACjE,QAAA,WAAW,GAAG,gBAAgB,CAAA;AAE3C,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAW,CAAA;AACtE,MAAM,kBAAkB,GAAG,IAAI,CAAA;AAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AACpE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAC3E,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAW,CAAA;AAEpE,SAAS,WAAW,CAAC,EAAU;IAC7B,OAAO,IAAI,KAAK,CAAC,8BAA8B,EAAE,2FAA2F,CAAC,CAAA;AAC/I,CAAC;AAED,SAAS,aAAa,CAAC,CAAa,EAAE,CAAS;IAC7C,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAA;IACf,IAAI,CAAC,KAAK,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,CAAA;IAC/C,uEAAuE;IACvE,iCAAiC;IACjC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACtD,MAAM,WAAW,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,CAAS;IAC1C,MAAM,KAAK,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3B,CAAC,GAAG,KAAK,CAAC,IAAI,CAAA;IACd,IAAI,KAAK,CAAC,KAAK,GAAG,IAAI;QAAE,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,qBAAqB;IAC/D,OAAO,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACtB,CAAC;AAED,SAAS,KAAK,CAAC,CAAa,EAAE,CAAS,EAAE,CAAS;IAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7C,OAAO,CAAC,CAAA;AACV,CAAC;AAED,oEAAoE;AACpE,SAAS,eAAe,CAAC,CAAa,EAAE,CAAS;IAC/C,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAA;IAChB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACf,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,CAAC,CAAA;IAClH,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI;QAAE,OAAO,CAAC,CAAA,CAAC,0BAA0B;IACjE,QAAQ,EAAE,EAAE,CAAC;QACX,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC,OAAO,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC3D,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC,OAAO,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC3E,KAAK,IAAI,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QAAC,CAAC;QAC5E,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAC3C,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAE,CAAC;oBAAE,MAAM,WAAW,CAAC,gCAAgC,CAAC,CAAA;YACxH,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAA;QACzB,CAAC;QACD,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC,OAAO,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAChE,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACvB,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACvB,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,MAAM,WAAW,CAAC,8BAA8B,CAAC,CAAA;YACrF,OAAO,CAAC,GAAG,CAAC,CAAA;QACd,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,OAAO,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACtC,KAAK,IAAI,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAClC,CAAC;IACD,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI;QAAE,OAAO,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,iCAAiC;IACpF,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI;QAAE,OAAO,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,mBAAmB;IACzE,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;AAC3C,CAAC;AAED,SAAS,cAAc,CAAC,CAAa,EAAE,CAAS;IAC9C,MAAM,GAAG,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACzB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAA;IAClB,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,CAAC,CAAA,CAAC,wBAAwB;IACrD,QAAQ,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,CAAC,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,mDAAmD;QAC5G,KAAK,CAAC,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC,CAAC,OAAO,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3E,CAAC;IACD,MAAM,WAAW,CAAC,QAAQ,GAAG,CAAC,KAAK,EAAE,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,CAAa,EAAE,CAAS;IACxC,MAAM,GAAG,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACzB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAA;IAClB,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAA;IACpB,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,gCAAgC;IAChG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,CAAC,GAAG,EAAE,CAAA,CAAC,4BAA4B;IACtE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;QAAE,OAAO,CAAC,GAAG,CAAC,CAAA,CAAC,uBAAuB;IAC9D,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;QAAE,OAAO,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA,CAAC,kBAAkB;IACxE,IAAI,EAAE,IAAI,KAAK;QAAE,OAAO,CAAC,CAAA,CAAC,4DAA4D;IACtF,MAAM,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;AACjC,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,MAAc;IAClD,MAAM,CAAC,GAAG,IAAA,wBAAQ,EAAC,MAAM,CAAC,CAAA;IAC1B,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,IAAA,wBAAQ,EAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,eAAe;QACtE,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,4BAA4B;KACnF,CAAA;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,SAAS,CAAC,IAAgB,EAAE,MAAc;IACjD,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,MAAM,MAAM,GAAG,IAAA,uBAAO,EAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAC/B,CAAC,GAAG,MAAM,CAAC,IAAI,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,CAAC,GAAG,IAAA,uBAAO,EAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QACzB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;YAAE,MAAM,WAAW,CAAC,sBAAsB,CAAC,CAAA;QACtE,CAAC,IAAI,CAAC,CAAA;IACR,CAAC;IAGD,MAAM,OAAO,GAAa,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,MAAM,GAAc,EAAE,CAAA,CAAC,kBAAkB;IAC/C,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,IAAI,KAAK;YAAE,MAAM,IAAA,yBAAS,EAAC,yCAAyC,CAAC,CAAA;QACrE,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAE,CAAA;QACnB,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,IAAI,IAAI,CAAC,CAAA;QAC9D,IAAI,EAAE,KAAK,EAAE,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;aAClD,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;QACrC,CAAC;aAAM,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,CAAC;YACzB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAG,CAAC,CAAA;gBAC3B,KAAK,GAAG,IAAI,CAAA;YACd,CAAC;iBAAM,IAAI,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAG,CAAC,CAAA;YAC7B,CAAC;QACH,CAAC;QACD,CAAC,GAAG,IAAI,CAAA;IACV,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAA,yBAAS,EAAC,0BAA0B,CAAC,CAAA;IAE/E,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAA;IAClC,MAAM,KAAK,GAAiB,EAAE,CAAA;IAC9B,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;QACrG,MAAM,GAAG,CAAC,CAAC,EAAE,CAAA;IACf,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IACjC,OAAO,IAAA,sBAAM,EAAC,KAAK,CAAC,CAAA;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,CAAS;IAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,CAAA;IACnB,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;IACrB,OAAO,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACzC,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAsB;IAClD,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IAChB,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAA;IACnB,MAAM,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACvB,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAA;IACd,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YACzB,CAAC,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAA;QAC1B,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACnB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;aACxE,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,MAAM,WAAW,CAAC,gCAAgC,CAAC,CAAA;YACvF,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1B,CAAC;aAAM,IAAI,IAAI,KAAK,IAAI;YAAE,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;aACzC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;gBAAE,MAAM,WAAW,CAAC,iCAAiC,CAAC,CAAA;YAC9E,CAAC,IAAI,CAAC,CAAA;YACN,OAAO,IAAI,CAAC,CAAA;QACd,CAAC;;YAAM,MAAM,IAAA,yBAAS,EAAC,eAAe,IAAI,EAAE,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,CAAsB;IACzC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IACjB,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAA;IACnB,MAAM,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACvB,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAA;IACd,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACzB,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAChF,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;IAC/C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,oEAAoE;AACpE,SAAS,cAAc,CAAC,CAAsB,EAAE,KAAe;IAC7D,IAAI,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAA;IAChD,MAAM,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IAC/B,OAAO,IAAA,sBAAM,EAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAA,wBAAQ,EAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAC7G,CAAC;AAED;;;;GAIG;AACH,SAAgB,SAAS,CAAC,KAA8B,EAAE,MAAc;IACtE,MAAM,QAAQ,GAAG,IAAA,4BAAY,EAAC,KAAK,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IAEvB,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC1C,IAAI,WAAW,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,mBAAW,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,8BAA8B,mBAAW,0CAA0C,CAAC,CAAA;IACtG,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACpC,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAA,uBAAO,EAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAEjH,MAAM,KAAK,GAAG,IAAA,uBAAO,EAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACtC,MAAM,MAAM,GAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACrE,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAA;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAA,uBAAO,EAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAA;QAClC,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAA,yBAAS,EAAC,0CAA0C,CAAC,CAAA;QAC1F,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC,CAAA;QAC5E,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAA,wBAAQ,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;QAC/D,CAAC,GAAG,GAAG,CAAA;IACT,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,IAAA,yBAAS,EAAC,8BAA8B,CAAC,CAAA;IAE9E,IAAA,0BAAU,EAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAA,wBAAQ,EAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IAC5G,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,mBAAW,CAAC,CAAC,CAAA;IACvD,IAAA,0BAAU,EAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,aAAa,EAAE,CAAC,GAAG,IAAA,wBAAQ,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,kBAAkB,EAAE,GAAG,IAAA,wBAAQ,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IACrJ,IAAA,0BAAU,EAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,IAAA,sBAAM,EAAC,MAAM,CAAC,CAAC,CAAA;IAClD,OAAO,IAAA,8BAAc,EAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;AACxC,CAAC"}

package/dist/wasmMemoryCap.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Bound a rule's linear memory before V8 ever compiles it.
+ *
+ * V8 has no grow hook, but it enforces the maximum a module DECLARES for its
+ * own memory: past it, `memory.grow` returns -1 instead of growing. So the
+ * memory section is rewritten to declare a maximum no larger than the ceiling,
+ * and the engine does the rest, the same guarantee `runner.rs` gets from
+ * Wasmtime's `StoreLimits`. A rule that asks for more is refused at load.
+ *
+ * Only the memory section (id 5) is touched; every other byte is copied
+ * through. Shared and 64-bit memories are refused rather than rewritten: the
+ * runner never supplies either, and their limits encode differently.
+ */
+/** One WebAssembly page. */
+export declare const WASM_PAGE_BYTES: number;
+/**
+ * The module with every memory declaring `max <= maxPages`. Throws when a
+ * memory's initial size is already over the ceiling, or it is shared/64-bit.
+ */
+export declare function capDeclaredMemory(bytes: Uint8Array<ArrayBuffer>, maxPages: number): Uint8Array<ArrayBuffer>;
+//# sourceMappingURL=wasmMemoryCap.d.ts.map

package/dist/wasmMemoryCap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasmMemoryCap.d.ts","sourceRoot":"","sources":["../src/wasmMemoryCap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,4BAA4B;AAC5B,eAAO,MAAM,eAAe,QAAY,CAAA;AAIxC;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CA+B3G"}

package/dist/wasmMemoryCap.js

@@ -0,0 +1,58 @@
+"use strict";
+/**
+ * Bound a rule's linear memory before V8 ever compiles it.
+ *
+ * V8 has no grow hook, but it enforces the maximum a module DECLARES for its
+ * own memory: past it, `memory.grow` returns -1 instead of growing. So the
+ * memory section is rewritten to declare a maximum no larger than the ceiling,
+ * and the engine does the rest, the same guarantee `runner.rs` gets from
+ * Wasmtime's `StoreLimits`. A rule that asks for more is refused at load.
+ *
+ * Only the memory section (id 5) is touched; every other byte is copied
+ * through. Shared and 64-bit memories are refused rather than rewritten: the
+ * runner never supplies either, and their limits encode differently.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WASM_PAGE_BYTES = void 0;
+exports.capDeclaredMemory = capDeclaredMemory;
+const wasmBinary_js_1 = require("./wasmBinary.js");
+/** One WebAssembly page. */
+exports.WASM_PAGE_BYTES = 64 * 1024;
+const MEMORY_SECTION_ID = 5;
+/**
+ * The module with every memory declaring `max <= maxPages`. Throws when a
+ * memory's initial size is already over the ceiling, or it is shared/64-bit.
+ */
+function capDeclaredMemory(bytes, maxPages) {
+    const sections = (0, wasmBinary_js_1.readSections)(bytes);
+    const memory = sections.find((s) => s.id === MEMORY_SECTION_ID);
+    if (!memory)
+        return bytes;
+    const b = memory.payload;
+    const count = (0, wasmBinary_js_1.readU32)(b, 0);
+    let p = count.next;
+    const payload = (0, wasmBinary_js_1.writeU32)(count.value);
+    for (let i = 0; i < count.value; i++) {
+        const flags = b[p];
+        if (flags !== 0x00 && flags !== 0x01) {
+            throw new Error(`WASM rule declares a shared or 64-bit memory (limits flag 0x${(flags ?? 0).toString(16)}), which the runner does not support`);
+        }
+        const min = (0, wasmBinary_js_1.readU32)(b, p + 1);
+        p = min.next;
+        let max = maxPages;
+        if (flags === 0x01) {
+            const declared = (0, wasmBinary_js_1.readU32)(b, p);
+            p = declared.next;
+            max = Math.min(declared.value, maxPages);
+        }
+        if (min.value > maxPages) {
+            throw new Error(`WASM rule declares ${min.value * exports.WASM_PAGE_BYTES} bytes of initial memory, over the ${maxPages * exports.WASM_PAGE_BYTES}-byte ceiling`);
+        }
+        payload.push(0x01, ...(0, wasmBinary_js_1.writeU32)(min.value), ...(0, wasmBinary_js_1.writeU32)(max));
+    }
+    if (p !== b.length)
+        throw (0, wasmBinary_js_1.malformed)('memory section length mismatch');
+    (0, wasmBinary_js_1.putSection)(sections, MEMORY_SECTION_ID, Uint8Array.from(payload));
+    return (0, wasmBinary_js_1.assembleModule)(bytes, sections);
+}
+//# sourceMappingURL=wasmMemoryCap.js.map

package/dist/wasmMemoryCap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasmMemoryCap.js","sourceRoot":"","sources":["../src/wasmMemoryCap.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAaH,8CA+BC;AA1CD,mDAAwG;AAExG,4BAA4B;AACf,QAAA,eAAe,GAAG,EAAE,GAAG,IAAI,CAAA;AAExC,MAAM,iBAAiB,GAAG,CAAC,CAAA;AAE3B;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,KAA8B,EAAE,QAAgB;IAChF,MAAM,QAAQ,GAAG,IAAA,4BAAY,EAAC,KAAK,CAAC,CAAA;IACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,iBAAiB,CAAC,CAAA;IAC/D,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAEzB,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAA;IACxB,MAAM,KAAK,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3B,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAA;IAClB,MAAM,OAAO,GAAG,IAAA,wBAAQ,EAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAClB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAAA;QACjJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7B,CAAC,GAAG,GAAG,CAAC,IAAI,CAAA;QACZ,IAAI,GAAG,GAAG,QAAQ,CAAA;QAClB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAC9B,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAA;YACjB,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;QAC1C,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,GAAG,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,KAAK,GAAG,uBAAe,sCAAsC,QAAQ,GAAG,uBAAe,eAAe,CAAC,CAAA;QACnJ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAA,wBAAQ,EAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,IAAA,wBAAQ,EAAC,GAAG,CAAC,CAAC,CAAA;IAC9D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;QAAE,MAAM,IAAA,yBAAS,EAAC,gCAAgC,CAAC,CAAA;IAErE,IAAA,0BAAU,EAAC,QAAQ,EAAE,iBAAiB,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IACjE,OAAO,IAAA,8BAAc,EAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;AACxC,CAAC"}