@intutic/shared-types 2.2.0 → 2.4.0

package/dist/wasmFuel.js

@@ -0,0 +1,320 @@
+"use strict";
+/**
+ * Instruction budget for WASM rules: the stand-in for Wasmtime fuel, which
+ * the Rust proxy sets to 1,000,000 per evaluation (`limits.rs`), wherever a
+ * rule runs on V8 — the MCP proxy, and `intutic rules test`, `policy test`
+ * and `policy install`, so a rule that runs out in a proxy runs out there.
+ *
+ * V8 has no metering hook, so the rule's own code is rewritten at load to
+ * count. A new mutable i32 global starts at the budget, and a charge is
+ * inserted at every function entry and every loop header: subtract the number
+ * of instructions that can run before the next charge point, and trap
+ * (`unreachable`) once the counter goes negative. Code between two charge
+ * points is straight-line apart from forward branches, so each charge is an
+ * upper bound on what it pays for, and the budget bounds the instructions the
+ * rule actually executes. Structural instructions (`block`, `loop`, `end`,
+ * `else`, `nop`, `drop`, `return`, `unreachable`) cost nothing, roughly as
+ * Wasmtime prices them.
+ *
+ * The global is exported as `FUEL_EXPORT` so the worker can tell a trap caused
+ * by the budget from any other trap. Each evaluation instantiates the module
+ * afresh, so the budget is per evaluation, like a Wasmtime `Store`.
+ *
+ * The decoder knows the MVP instruction set plus the extensions compilers
+ * emit by default (sign extension, saturating truncation, bulk memory,
+ * reference types, multi-value, tail calls, SIMD). A module using anything
+ * else (exceptions, GC, threads) is refused at load rather than run unmetered.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FUEL_EXPORT = exports.REGO_FUEL_BUDGET = exports.DEFAULT_FUEL_BUDGET = void 0;
+exports.meterFuel = meterFuel;
+const wasmBinary_js_1 = require("./wasmBinary.js");
+/** `runner.rs`: `store.set_fuel(1_000_000)`. */
+exports.DEFAULT_FUEL_BUDGET = 1_000_000;
+/**
+ * A Rego rule's budget: three times the Rust proxy's 100,000,000
+ * (`limits::REGO`), because this meter counts differently.
+ *
+ * It charges each straight-line run in full at its entry, branches skipped or
+ * not, and an OPA build is mostly short runs with early exits: on the largest
+ * input (a 64 KB command) the destructive-shell and production-deploy examples
+ * count 74,000,000 here against 21,000,000 under Wasmtime, and the
+ * deny-writes and conformance policies about 8,000,000. The budget is four
+ * times the largest, so a heavier policy on the largest input still fits, and
+ * a rule that does not fit is stopped deterministically, whatever the load.
+ * Using it all up takes at most 350 ms idle and 4.4 s on a loaded machine;
+ * the deadline (`REGO_EVALUATE_TIMEOUT_MS`) is set above that.
+ */
+exports.REGO_FUEL_BUDGET = 300_000_000;
+/** The export the worker reads to tell budget exhaustion from other traps. */
+exports.FUEL_EXPORT = '__intutic_fuel';
+const SECTION = { import: 2, global: 6, export: 7, code: 10 };
+const EXPORT_KIND_GLOBAL = 0x03;
+const VALTYPES = new Set([0x7f, 0x7e, 0x7d, 0x7c, 0x7b, 0x70, 0x6f]);
+const ZERO_COST = new Set([0x00, 0x01, 0x02, 0x03, 0x05, 0x0b, 0x0f, 0x1a]);
+const OP = { block: 0x02, loop: 0x03, if: 0x04, end: 0x0b };
+function unsupported(op) {
+    return new Error(`WASM rule uses instruction ${op}, which the instruction budget cannot meter; rebuild it without exceptions, GC or threads`);
+}
+function skipBlockType(b, p) {
+    const t = b[p];
+    if (t === 0x40 || VALTYPES.has(t))
+        return p + 1;
+    // A type index, as a non-negative s33: a first byte below 0x40, or one
+    // with the continuation bit set.
+    if (t < 0x40 || (t & 0x80) !== 0)
+        return (0, wasmBinary_js_1.skipLeb)(b, p);
+    throw unsupported(`with block type 0x${t.toString(16)}`);
+}
+function skipMemarg(b, p) {
+    const align = (0, wasmBinary_js_1.readU32)(b, p);
+    p = align.next;
+    if (align.value & 0x40)
+        p = (0, wasmBinary_js_1.skipLeb)(b, p); // multi-memory index
+    return (0, wasmBinary_js_1.skipLeb)(b, p);
+}
+function skipN(b, p, n) {
+    for (let i = 0; i < n; i++)
+        p = (0, wasmBinary_js_1.skipLeb)(b, p);
+    return p;
+}
+/** Offset just past the instruction at `p`, immediates included. */
+function nextInstruction(b, p) {
+    const op = b[p];
+    const q = p + 1;
+    if (op <= 0x01 || op === 0x05 || op === 0x0b || op === 0x0f || op === 0x1a || op === 0x1b || op === 0xd1)
+        return q;
+    if (op >= 0x45 && op <= 0xc4)
+        return q; // numeric, sign extension
+    switch (op) {
+        case 0x02:
+        case 0x03:
+        case 0x04: return skipBlockType(b, q);
+        case 0x0c:
+        case 0x0d:
+        case 0x10:
+        case 0x12:
+        case 0xd2: return (0, wasmBinary_js_1.skipLeb)(b, q);
+        case 0x0e: {
+            const n = (0, wasmBinary_js_1.readU32)(b, q);
+            return skipN(b, n.next, n.value + 1);
+        }
+        case 0x11:
+        case 0x13: return skipN(b, q, 2);
+        case 0x1c: {
+            const n = (0, wasmBinary_js_1.readU32)(b, q);
+            for (let i = 0; i < n.value; i++)
+                if (!VALTYPES.has(b[n.next + i]))
+                    throw unsupported('select with a non-numeric type');
+            return n.next + n.value;
+        }
+        case 0x3f:
+        case 0x40:
+        case 0x41:
+        case 0x42: return (0, wasmBinary_js_1.skipLeb)(b, q);
+        case 0x43: return q + 4;
+        case 0x44: return q + 8;
+        case 0xd0: {
+            if (b[q] !== 0x70 && b[q] !== 0x6f)
+                throw unsupported('ref.null with a GC heap type');
+            return q + 1;
+        }
+        case 0xfc: return nextPrefixedFc(b, q);
+        case 0xfd: return nextSimd(b, q);
+    }
+    if (op >= 0x20 && op <= 0x26)
+        return (0, wasmBinary_js_1.skipLeb)(b, q); // locals, globals, table.get/set
+    if (op >= 0x28 && op <= 0x3e)
+        return skipMemarg(b, q); // loads and stores
+    throw unsupported(`0x${op.toString(16)}`);
+}
+function nextPrefixedFc(b, q) {
+    const sub = (0, wasmBinary_js_1.readU32)(b, q);
+    const p = sub.next;
+    if (sub.value <= 7)
+        return p; // saturating truncation
+    switch (sub.value) {
+        case 8:
+        case 10:
+        case 12:
+        case 14: return skipN(b, p, 2); // memory.init, memory.copy, table.init, table.copy
+        case 9:
+        case 11:
+        case 13:
+        case 15:
+        case 16:
+        case 17: return (0, wasmBinary_js_1.skipLeb)(b, p);
+    }
+    throw unsupported(`0xfc ${sub.value}`);
+}
+function nextSimd(b, q) {
+    const sub = (0, wasmBinary_js_1.readU32)(b, q);
+    const p = sub.next;
+    const op = sub.value;
+    if (op <= 11 || op === 92 || op === 93)
+        return skipMemarg(b, p); // v128 loads/stores, load*_zero
+    if (op === 12 || op === 13)
+        return p + 16; // v128.const, i8x16.shuffle
+    if (op >= 21 && op <= 34)
+        return p + 1; // extract/replace lane
+    if (op >= 84 && op <= 91)
+        return skipMemarg(b, p) + 1; // load/store lane
+    if (op <= 0x113)
+        return p; // everything else in SIMD and relaxed SIMD has no immediate
+    throw unsupported(`0xfd ${op}`);
+}
+function chargeSequence(cost, global) {
+    const g = (0, wasmBinary_js_1.writeU32)(global);
+    return [
+        0x23, ...g, 0x41, ...(0, wasmBinary_js_1.writeS32)(cost), 0x6b, 0x24, ...g, // fuel -= cost
+        0x23, ...g, 0x41, 0x00, 0x48, 0x04, 0x40, 0x00, 0x0b, // if (fuel < 0) unreachable
+    ];
+}
+/** One function body with a charge at its entry and at every loop header. */
+function meterBody(body, global) {
+    let p = 0;
+    const groups = (0, wasmBinary_js_1.readU32)(body, p);
+    p = groups.next;
+    for (let i = 0; i < groups.value; i++) {
+        p = (0, wasmBinary_js_1.readU32)(body, p).next;
+        if (!VALTYPES.has(body[p]))
+            throw unsupported('a local of a GC type');
+        p += 1;
+    }
+    const regions = [{ at: p, cost: 0 }];
+    const closed = [];
+    const blocks = []; // true for a loop
+    let ended = false;
+    while (p < body.length) {
+        if (ended)
+            throw (0, wasmBinary_js_1.malformed)('instructions after a function body ends');
+        const op = body[p];
+        const next = nextInstruction(body, p);
+        if (!ZERO_COST.has(op))
+            regions[regions.length - 1].cost += 1;
+        if (op === OP.block || op === OP.if)
+            blocks.push(false);
+        else if (op === OP.loop) {
+            blocks.push(true);
+            regions.push({ at: next, cost: 0 });
+        }
+        else if (op === OP.end) {
+            if (blocks.length === 0) {
+                closed.push(regions.pop());
+                ended = true;
+            }
+            else if (blocks.pop()) {
+                closed.push(regions.pop());
+            }
+        }
+        p = next;
+    }
+    if (!ended || regions.length !== 0)
+        throw (0, wasmBinary_js_1.malformed)('unbalanced function body');
+    closed.sort((a, b) => a.at - b.at);
+    const parts = [];
+    let cursor = 0;
+    for (const r of closed) {
+        parts.push(body.subarray(cursor, r.at), Uint8Array.from(chargeSequence(Math.max(1, r.cost), global)));
+        cursor = r.at;
+    }
+    parts.push(body.subarray(cursor));
+    return (0, wasmBinary_js_1.concat)(parts);
+}
+function skipLimits(b, p) {
+    const flags = b[p];
+    p = (0, wasmBinary_js_1.skipLeb)(b, p + 1);
+    return flags & 0x01 ? (0, wasmBinary_js_1.skipLeb)(b, p) : p;
+}
+function countImportedGlobals(s) {
+    if (!s)
+        return 0;
+    const b = s.payload;
+    const n = (0, wasmBinary_js_1.readU32)(b, 0);
+    let p = n.next;
+    let globals = 0;
+    for (let i = 0; i < n.value; i++) {
+        for (let name = 0; name < 2; name++) {
+            const len = (0, wasmBinary_js_1.readU32)(b, p);
+            p = len.next + len.value;
+        }
+        const kind = b[p++];
+        if (kind === 0x00 || kind === 0x04)
+            p = (0, wasmBinary_js_1.skipLeb)(b, kind === 0x04 ? p + 1 : p);
+        else if (kind === 0x01) {
+            if (b[p] !== 0x70 && b[p] !== 0x6f)
+                throw unsupported('an imported table of a GC type');
+            p = skipLimits(b, p + 1);
+        }
+        else if (kind === 0x02)
+            p = skipLimits(b, p);
+        else if (kind === 0x03) {
+            if (!VALTYPES.has(b[p]))
+                throw unsupported('an imported global of a GC type');
+            p += 2;
+            globals += 1;
+        }
+        else
+            throw (0, wasmBinary_js_1.malformed)(`import kind ${kind}`);
+    }
+    return globals;
+}
+function exportNames(s) {
+    if (!s)
+        return [];
+    const b = s.payload;
+    const n = (0, wasmBinary_js_1.readU32)(b, 0);
+    let p = n.next;
+    const names = [];
+    for (let i = 0; i < n.value; i++) {
+        const len = (0, wasmBinary_js_1.readU32)(b, p);
+        names.push(new TextDecoder().decode(b.subarray(len.next, len.next + len.value)));
+        p = (0, wasmBinary_js_1.readU32)(b, len.next + len.value + 1).next;
+    }
+    return names;
+}
+/** Prepend-count helper: a vector section with `extra` appended. */
+function appendToVector(s, extra) {
+    if (!s)
+        return Uint8Array.from([0x01, ...extra]);
+    const n = (0, wasmBinary_js_1.readU32)(s.payload, 0);
+    return (0, wasmBinary_js_1.concat)([Uint8Array.from((0, wasmBinary_js_1.writeU32)(n.value + 1)), s.payload.subarray(n.next), Uint8Array.from(extra)]);
+}
+/**
+ * The module with every function metered against `budget` instructions per
+ * instantiation, and the counter exported as `FUEL_EXPORT`. Throws for a
+ * module the decoder cannot meter.
+ */
+function meterFuel(bytes, budget) {
+    const sections = (0, wasmBinary_js_1.readSections)(bytes);
+    const find = (id) => sections.find((s) => s.id === id);
+    const code = find(SECTION.code);
+    if (!code)
+        return bytes;
+    const exportSection = find(SECTION.export);
+    if (exportNames(exportSection).includes(exports.FUEL_EXPORT)) {
+        throw new Error(`WASM rule already exports "${exports.FUEL_EXPORT}", which the instruction budget reserves`);
+    }
+    const globals = find(SECTION.global);
+    const fuelGlobal = countImportedGlobals(find(SECTION.import)) + (globals ? (0, wasmBinary_js_1.readU32)(globals.payload, 0).value : 0);
+    const count = (0, wasmBinary_js_1.readU32)(code.payload, 0);
+    const bodies = [Uint8Array.from((0, wasmBinary_js_1.writeU32)(count.value))];
+    let p = count.next;
+    for (let i = 0; i < count.value; i++) {
+        const size = (0, wasmBinary_js_1.readU32)(code.payload, p);
+        const end = size.next + size.value;
+        if (end > code.payload.length)
+            throw (0, wasmBinary_js_1.malformed)('function body runs past the code section');
+        const metered = meterBody(code.payload.subarray(size.next, end), fuelGlobal);
+        bodies.push(Uint8Array.from((0, wasmBinary_js_1.writeU32)(metered.length)), metered);
+        p = end;
+    }
+    if (p !== code.payload.length)
+        throw (0, wasmBinary_js_1.malformed)('code section length mismatch');
+    (0, wasmBinary_js_1.putSection)(sections, SECTION.global, appendToVector(globals, [0x7f, 0x01, 0x41, ...(0, wasmBinary_js_1.writeS32)(budget), 0x0b]));
+    const name = [...new TextEncoder().encode(exports.FUEL_EXPORT)];
+    (0, wasmBinary_js_1.putSection)(sections, SECTION.export, appendToVector(exportSection, [...(0, wasmBinary_js_1.writeU32)(name.length), ...name, EXPORT_KIND_GLOBAL, ...(0, wasmBinary_js_1.writeU32)(fuelGlobal)]));
+    (0, wasmBinary_js_1.putSection)(sections, SECTION.code, (0, wasmBinary_js_1.concat)(bodies));
+    return (0, wasmBinary_js_1.assembleModule)(bytes, sections);
+}
+//# sourceMappingURL=wasmFuel.js.map

package/dist/wasmFuel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasmFuel.js","sourceRoot":"","sources":["../src/wasmFuel.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;;AA4OH,8BA+BC;AAzQD,mDAWwB;AAExB,gDAAgD;AACnC,QAAA,mBAAmB,GAAG,SAAS,CAAA;AAE5C;;;;;;;;;;;;;GAaG;AACU,QAAA,gBAAgB,GAAG,WAAW,CAAA;AAE3C,8EAA8E;AACjE,QAAA,WAAW,GAAG,gBAAgB,CAAA;AAE3C,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAW,CAAA;AACtE,MAAM,kBAAkB,GAAG,IAAI,CAAA;AAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AACpE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAC3E,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAW,CAAA;AAEpE,SAAS,WAAW,CAAC,EAAU;IAC7B,OAAO,IAAI,KAAK,CAAC,8BAA8B,EAAE,2FAA2F,CAAC,CAAA;AAC/I,CAAC;AAED,SAAS,aAAa,CAAC,CAAa,EAAE,CAAS;IAC7C,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAA;IACf,IAAI,CAAC,KAAK,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,CAAA;IAC/C,uEAAuE;IACvE,iCAAiC;IACjC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACtD,MAAM,WAAW,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,CAAS;IAC1C,MAAM,KAAK,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3B,CAAC,GAAG,KAAK,CAAC,IAAI,CAAA;IACd,IAAI,KAAK,CAAC,KAAK,GAAG,IAAI;QAAE,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,qBAAqB;IAC/D,OAAO,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACtB,CAAC;AAED,SAAS,KAAK,CAAC,CAAa,EAAE,CAAS,EAAE,CAAS;IAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7C,OAAO,CAAC,CAAA;AACV,CAAC;AAED,oEAAoE;AACpE,SAAS,eAAe,CAAC,CAAa,EAAE,CAAS;IAC/C,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAA;IAChB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACf,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,CAAC,CAAA;IAClH,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI;QAAE,OAAO,CAAC,CAAA,CAAC,0BAA0B;IACjE,QAAQ,EAAE,EAAE,CAAC;QACX,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC,OAAO,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC3D,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC,OAAO,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC3E,KAAK,IAAI,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QAAC,CAAC;QAC5E,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAC3C,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAE,CAAC;oBAAE,MAAM,WAAW,CAAC,gCAAgC,CAAC,CAAA;YACxH,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAA;QACzB,CAAC;QACD,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC,OAAO,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAChE,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACvB,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACvB,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,MAAM,WAAW,CAAC,8BAA8B,CAAC,CAAA;YACrF,OAAO,CAAC,GAAG,CAAC,CAAA;QACd,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,OAAO,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACtC,KAAK,IAAI,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAClC,CAAC;IACD,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI;QAAE,OAAO,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,iCAAiC;IACpF,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI;QAAE,OAAO,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,mBAAmB;IACzE,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;AAC3C,CAAC;AAED,SAAS,cAAc,CAAC,CAAa,EAAE,CAAS;IAC9C,MAAM,GAAG,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACzB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAA;IAClB,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,CAAC,CAAA,CAAC,wBAAwB;IACrD,QAAQ,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,CAAC,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,mDAAmD;QAC5G,KAAK,CAAC,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC,CAAC,OAAO,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3E,CAAC;IACD,MAAM,WAAW,CAAC,QAAQ,GAAG,CAAC,KAAK,EAAE,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,CAAa,EAAE,CAAS;IACxC,MAAM,GAAG,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACzB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAA;IAClB,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAA;IACpB,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,gCAAgC;IAChG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,CAAC,GAAG,EAAE,CAAA,CAAC,4BAA4B;IACtE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;QAAE,OAAO,CAAC,GAAG,CAAC,CAAA,CAAC,uBAAuB;IAC9D,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;QAAE,OAAO,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA,CAAC,kBAAkB;IACxE,IAAI,EAAE,IAAI,KAAK;QAAE,OAAO,CAAC,CAAA,CAAC,4DAA4D;IACtF,MAAM,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;AACjC,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,MAAc;IAClD,MAAM,CAAC,GAAG,IAAA,wBAAQ,EAAC,MAAM,CAAC,CAAA;IAC1B,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,IAAA,wBAAQ,EAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,eAAe;QACtE,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,4BAA4B;KACnF,CAAA;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,SAAS,CAAC,IAAgB,EAAE,MAAc;IACjD,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,MAAM,MAAM,GAAG,IAAA,uBAAO,EAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAC/B,CAAC,GAAG,MAAM,CAAC,IAAI,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,CAAC,GAAG,IAAA,uBAAO,EAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QACzB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;YAAE,MAAM,WAAW,CAAC,sBAAsB,CAAC,CAAA;QACtE,CAAC,IAAI,CAAC,CAAA;IACR,CAAC;IAGD,MAAM,OAAO,GAAa,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,MAAM,GAAc,EAAE,CAAA,CAAC,kBAAkB;IAC/C,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,IAAI,KAAK;YAAE,MAAM,IAAA,yBAAS,EAAC,yCAAyC,CAAC,CAAA;QACrE,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAE,CAAA;QACnB,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,IAAI,IAAI,CAAC,CAAA;QAC9D,IAAI,EAAE,KAAK,EAAE,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;aAClD,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;QACrC,CAAC;aAAM,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,CAAC;YACzB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAG,CAAC,CAAA;gBAC3B,KAAK,GAAG,IAAI,CAAA;YACd,CAAC;iBAAM,IAAI,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAG,CAAC,CAAA;YAC7B,CAAC;QACH,CAAC;QACD,CAAC,GAAG,IAAI,CAAA;IACV,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAA,yBAAS,EAAC,0BAA0B,CAAC,CAAA;IAE/E,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAA;IAClC,MAAM,KAAK,GAAiB,EAAE,CAAA;IAC9B,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;QACrG,MAAM,GAAG,CAAC,CAAC,EAAE,CAAA;IACf,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IACjC,OAAO,IAAA,sBAAM,EAAC,KAAK,CAAC,CAAA;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,CAAS;IAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,CAAA;IACnB,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;IACrB,OAAO,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACzC,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAsB;IAClD,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IAChB,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAA;IACnB,MAAM,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACvB,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAA;IACd,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YACzB,CAAC,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAA;QAC1B,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACnB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;aACxE,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,MAAM,WAAW,CAAC,gCAAgC,CAAC,CAAA;YACvF,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1B,CAAC;aAAM,IAAI,IAAI,KAAK,IAAI;YAAE,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;aACzC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;gBAAE,MAAM,WAAW,CAAC,iCAAiC,CAAC,CAAA;YAC9E,CAAC,IAAI,CAAC,CAAA;YACN,OAAO,IAAI,CAAC,CAAA;QACd,CAAC;;YAAM,MAAM,IAAA,yBAAS,EAAC,eAAe,IAAI,EAAE,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,CAAsB;IACzC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IACjB,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAA;IACnB,MAAM,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACvB,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAA;IACd,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACzB,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAChF,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;IAC/C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,oEAAoE;AACpE,SAAS,cAAc,CAAC,CAAsB,EAAE,KAAe;IAC7D,IAAI,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAA;IAChD,MAAM,CAAC,GAAG,IAAA,uBAAO,EAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IAC/B,OAAO,IAAA,sBAAM,EAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAA,wBAAQ,EAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAC7G,CAAC;AAED;;;;GAIG;AACH,SAAgB,SAAS,CAAC,KAA8B,EAAE,MAAc;IACtE,MAAM,QAAQ,GAAG,IAAA,4BAAY,EAAC,KAAK,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IAEvB,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC1C,IAAI,WAAW,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,mBAAW,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,8BAA8B,mBAAW,0CAA0C,CAAC,CAAA;IACtG,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACpC,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAA,uBAAO,EAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAEjH,MAAM,KAAK,GAAG,IAAA,uBAAO,EAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACtC,MAAM,MAAM,GAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACrE,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAA;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAA,uBAAO,EAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAA;QAClC,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAA,yBAAS,EAAC,0CAA0C,CAAC,CAAA;QAC1F,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC,CAAA;QAC5E,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAA,wBAAQ,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;QAC/D,CAAC,GAAG,GAAG,CAAA;IACT,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,IAAA,yBAAS,EAAC,8BAA8B,CAAC,CAAA;IAE9E,IAAA,0BAAU,EAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAA,wBAAQ,EAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IAC5G,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,mBAAW,CAAC,CAAC,CAAA;IACvD,IAAA,0BAAU,EAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,aAAa,EAAE,CAAC,GAAG,IAAA,wBAAQ,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,kBAAkB,EAAE,GAAG,IAAA,wBAAQ,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IACrJ,IAAA,0BAAU,EAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,IAAA,sBAAM,EAAC,MAAM,CAAC,CAAC,CAAA;IAClD,OAAO,IAAA,8BAAc,EAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;AACxC,CAAC"}

package/dist/wasmMemoryCap.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Bound a rule's linear memory before V8 ever compiles it.
+ *
+ * V8 has no grow hook, but it enforces the maximum a module DECLARES for its
+ * own memory: past it, `memory.grow` returns -1 instead of growing. So the
+ * memory section is rewritten to declare a maximum no larger than the ceiling,
+ * and the engine does the rest, the same guarantee `runner.rs` gets from
+ * Wasmtime's `StoreLimits`. A rule that asks for more is refused at load.
+ *
+ * Only the memory section (id 5) is touched; every other byte is copied
+ * through. Shared and 64-bit memories are refused rather than rewritten: the
+ * runner never supplies either, and their limits encode differently.
+ */
+/** One WebAssembly page. */
+export declare const WASM_PAGE_BYTES: number;
+/**
+ * The module with every memory declaring `max <= maxPages`. Throws when a
+ * memory's initial size is already over the ceiling, or it is shared/64-bit.
+ */
+export declare function capDeclaredMemory(bytes: Uint8Array<ArrayBuffer>, maxPages: number): Uint8Array<ArrayBuffer>;
+//# sourceMappingURL=wasmMemoryCap.d.ts.map

package/dist/wasmMemoryCap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasmMemoryCap.d.ts","sourceRoot":"","sources":["../src/wasmMemoryCap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,4BAA4B;AAC5B,eAAO,MAAM,eAAe,QAAY,CAAA;AAIxC;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CA+B3G"}

package/dist/wasmMemoryCap.js

@@ -0,0 +1,58 @@
+"use strict";
+/**
+ * Bound a rule's linear memory before V8 ever compiles it.
+ *
+ * V8 has no grow hook, but it enforces the maximum a module DECLARES for its
+ * own memory: past it, `memory.grow` returns -1 instead of growing. So the
+ * memory section is rewritten to declare a maximum no larger than the ceiling,
+ * and the engine does the rest, the same guarantee `runner.rs` gets from
+ * Wasmtime's `StoreLimits`. A rule that asks for more is refused at load.
+ *
+ * Only the memory section (id 5) is touched; every other byte is copied
+ * through. Shared and 64-bit memories are refused rather than rewritten: the
+ * runner never supplies either, and their limits encode differently.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WASM_PAGE_BYTES = void 0;
+exports.capDeclaredMemory = capDeclaredMemory;
+const wasmBinary_js_1 = require("./wasmBinary.js");
+/** One WebAssembly page. */
+exports.WASM_PAGE_BYTES = 64 * 1024;
+const MEMORY_SECTION_ID = 5;
+/**
+ * The module with every memory declaring `max <= maxPages`. Throws when a
+ * memory's initial size is already over the ceiling, or it is shared/64-bit.
+ */
+function capDeclaredMemory(bytes, maxPages) {
+    const sections = (0, wasmBinary_js_1.readSections)(bytes);
+    const memory = sections.find((s) => s.id === MEMORY_SECTION_ID);
+    if (!memory)
+        return bytes;
+    const b = memory.payload;
+    const count = (0, wasmBinary_js_1.readU32)(b, 0);
+    let p = count.next;
+    const payload = (0, wasmBinary_js_1.writeU32)(count.value);
+    for (let i = 0; i < count.value; i++) {
+        const flags = b[p];
+        if (flags !== 0x00 && flags !== 0x01) {
+            throw new Error(`WASM rule declares a shared or 64-bit memory (limits flag 0x${(flags ?? 0).toString(16)}), which the runner does not support`);
+        }
+        const min = (0, wasmBinary_js_1.readU32)(b, p + 1);
+        p = min.next;
+        let max = maxPages;
+        if (flags === 0x01) {
+            const declared = (0, wasmBinary_js_1.readU32)(b, p);
+            p = declared.next;
+            max = Math.min(declared.value, maxPages);
+        }
+        if (min.value > maxPages) {
+            throw new Error(`WASM rule declares ${min.value * exports.WASM_PAGE_BYTES} bytes of initial memory, over the ${maxPages * exports.WASM_PAGE_BYTES}-byte ceiling`);
+        }
+        payload.push(0x01, ...(0, wasmBinary_js_1.writeU32)(min.value), ...(0, wasmBinary_js_1.writeU32)(max));
+    }
+    if (p !== b.length)
+        throw (0, wasmBinary_js_1.malformed)('memory section length mismatch');
+    (0, wasmBinary_js_1.putSection)(sections, MEMORY_SECTION_ID, Uint8Array.from(payload));
+    return (0, wasmBinary_js_1.assembleModule)(bytes, sections);
+}
+//# sourceMappingURL=wasmMemoryCap.js.map

package/dist/wasmMemoryCap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasmMemoryCap.js","sourceRoot":"","sources":["../src/wasmMemoryCap.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAaH,8CA+BC;AA1CD,mDAAwG;AAExG,4BAA4B;AACf,QAAA,eAAe,GAAG,EAAE,GAAG,IAAI,CAAA;AAExC,MAAM,iBAAiB,GAAG,CAAC,CAAA;AAE3B;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,KAA8B,EAAE,QAAgB;IAChF,MAAM,QAAQ,GAAG,IAAA,4BAAY,EAAC,KAAK,CAAC,CAAA;IACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,iBAAiB,CAAC,CAAA;IAC/D,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAEzB,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAA;IACxB,MAAM,KAAK,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3B,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAA;IAClB,MAAM,OAAO,GAAG,IAAA,wBAAQ,EAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAClB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAAA;QACjJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7B,CAAC,GAAG,GAAG,CAAC,IAAI,CAAA;QACZ,IAAI,GAAG,GAAG,QAAQ,CAAA;QAClB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,IAAA,uBAAO,EAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAC9B,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAA;YACjB,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;QAC1C,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,GAAG,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,KAAK,GAAG,uBAAe,sCAAsC,QAAQ,GAAG,uBAAe,eAAe,CAAC,CAAA;QACnJ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAA,wBAAQ,EAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,IAAA,wBAAQ,EAAC,GAAG,CAAC,CAAC,CAAA;IAC9D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;QAAE,MAAM,IAAA,yBAAS,EAAC,gCAAgC,CAAC,CAAA;IAErE,IAAA,0BAAU,EAAC,QAAQ,EAAE,iBAAiB,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IACjE,OAAO,IAAA,8BAAc,EAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;AACxC,CAAC"}

package/dist/wasmRuleDescriptor.d.ts

@@ -0,0 +1,43 @@
+/**
+ * The descriptor of a custom rule uploaded to the control plane — one shape
+ * for every proxy that enforces it.
+ *
+ * The control plane publishes the workspace's active rules as a list of these:
+ * to Valkey for the LLM proxy (`wasm:plugins:{workspaceId}`, read by
+ * `packages/proxy/src/wasm/registry.rs` as `WasmPluginDescriptor`), and as
+ * `wasmRules` on the MCP proxy's policy responses (`GET /api/v1/sop/rules`,
+ * `GET /api/v1/policy/resolve`). The binary is fetched separately, by the
+ * SHA-256 the descriptor names, and checked against it before it loads.
+ *
+ * {@link parseWasmRuleDescriptors} reads the list the way the Rust proxy's
+ * serde does: one malformed entry makes the whole list unreadable, and a
+ * proxy keeps the rules it already enforces rather than applying part of a
+ * list — dropping the entry would silently stop enforcing that rule.
+ *
+ * @module
+ */
+/** `ENFORCE` decides calls; `SHADOW` is evaluated and reported, and never changes one. */
+export type WasmRuleMode = 'ENFORCE' | 'SHADOW';
+export interface WasmRuleDescriptor {
+    /** The control plane's rule id (`wasm_…`), the id both proxies report the rule by. */
+    ruleId: string;
+    name: string;
+    /** Lowercase hex SHA-256 of the binary; the binary is fetched and verified by it. */
+    sha256: string;
+    /** Ascending: lower runs first. Local rules default to 100. */
+    priority: number;
+    mode: WasmRuleMode;
+}
+export type WasmRuleDescriptorsParse = {
+    ok: true;
+    rules: WasmRuleDescriptor[];
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Reads a descriptor list. Anything but an array of well-formed descriptors is
+ * unreadable, with the first problem as the reason.
+ */
+export declare function parseWasmRuleDescriptors(value: unknown): WasmRuleDescriptorsParse;
+//# sourceMappingURL=wasmRuleDescriptor.d.ts.map

package/dist/wasmRuleDescriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasmRuleDescriptor.d.ts","sourceRoot":"","sources":["../src/wasmRuleDescriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,0FAA0F;AAC1F,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,QAAQ,CAAA;AAE/C,MAAM,WAAW,kBAAkB;IACjC,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,qFAAqF;IACrF,MAAM,EAAE,MAAM,CAAA;IACd,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,YAAY,CAAA;CACnB;AAED,MAAM,MAAM,wBAAwB,GAChC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,kBAAkB,EAAE,CAAA;CAAE,GACzC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAWjC;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,wBAAwB,CAsBjF"}

package/dist/wasmRuleDescriptor.js

@@ -0,0 +1,65 @@
+"use strict";
+/**
+ * The descriptor of a custom rule uploaded to the control plane — one shape
+ * for every proxy that enforces it.
+ *
+ * The control plane publishes the workspace's active rules as a list of these:
+ * to Valkey for the LLM proxy (`wasm:plugins:{workspaceId}`, read by
+ * `packages/proxy/src/wasm/registry.rs` as `WasmPluginDescriptor`), and as
+ * `wasmRules` on the MCP proxy's policy responses (`GET /api/v1/sop/rules`,
+ * `GET /api/v1/policy/resolve`). The binary is fetched separately, by the
+ * SHA-256 the descriptor names, and checked against it before it loads.
+ *
+ * {@link parseWasmRuleDescriptors} reads the list the way the Rust proxy's
+ * serde does: one malformed entry makes the whole list unreadable, and a
+ * proxy keeps the rules it already enforces rather than applying part of a
+ * list — dropping the entry would silently stop enforcing that rule.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseWasmRuleDescriptors = parseWasmRuleDescriptors;
+function parseMode(value) {
+    // Absent on a descriptor written before modes existed, which must keep
+    // enforcing — the same default `registry.rs` gives `RuleMode`.
+    if (value === undefined)
+        return 'ENFORCE';
+    if (value === 'ENFORCE' || value === 'enforce')
+        return 'ENFORCE';
+    if (value === 'SHADOW' || value === 'shadow')
+        return 'SHADOW';
+    return undefined;
+}
+/**
+ * Reads a descriptor list. Anything but an array of well-formed descriptors is
+ * unreadable, with the first problem as the reason.
+ */
+function parseWasmRuleDescriptors(value) {
+    if (!Array.isArray(value))
+        return { ok: false, reason: 'the rule list is not an array' };
+    const rules = [];
+    for (const [index, entry] of value.entries()) {
+        if (typeof entry !== 'object' || entry === null || Array.isArray(entry)) {
+            return { ok: false, reason: `entry ${index} is not an object` };
+        }
+        const e = entry;
+        const { ruleId, name, sha256, priority } = e;
+        if (typeof ruleId !== 'string' || ruleId.length === 0)
+            return { ok: false, reason: `entry ${index} has no ruleId` };
+        if (typeof name !== 'string')
+            return { ok: false, reason: `rule ${ruleId} has no name` };
+        // Any string, as serde reads it: a hash that names no binary is refused
+        // per rule when the binary is fetched, with an incident, not here.
+        if (typeof sha256 !== 'string')
+            return { ok: false, reason: `rule ${ruleId} has no SHA-256` };
+        if (typeof priority !== 'number' || !Number.isInteger(priority) || priority < 0) {
+            return { ok: false, reason: `rule ${ruleId} has no priority` };
+        }
+        const mode = parseMode(e['mode']);
+        if (!mode)
+            return { ok: false, reason: `rule ${ruleId} has an unknown mode` };
+        rules.push({ ruleId, name, sha256, priority, mode });
+    }
+    return { ok: true, rules };
+}
+//# sourceMappingURL=wasmRuleDescriptor.js.map

package/dist/wasmRuleDescriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasmRuleDescriptor.js","sourceRoot":"","sources":["../src/wasmRuleDescriptor.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;AAiCH,4DAsBC;AAnCD,SAAS,SAAS,CAAC,KAAc;IAC/B,uEAAuE;IACvE,+DAA+D;IAC/D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAChE,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAC7D,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;GAGG;AACH,SAAgB,wBAAwB,CAAC,KAAc;IACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAA;IACxF,MAAM,KAAK,GAAyB,EAAE,CAAA;IACtC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,KAAK,mBAAmB,EAAE,CAAA;QACjE,CAAC;QACD,MAAM,CAAC,GAAG,KAAgC,CAAA;QAC1C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA;QAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,KAAK,gBAAgB,EAAE,CAAA;QACnH,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,MAAM,cAAc,EAAE,CAAA;QACxF,wEAAwE;QACxE,mEAAmE;QACnE,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,MAAM,iBAAiB,EAAE,CAAA;QAC7F,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YAChF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,MAAM,kBAAkB,EAAE,CAAA;QAChE,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;QACjC,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,MAAM,sBAAsB,EAAE,CAAA;QAC7E,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;AAC5B,CAAC"}