@peerbit/trusted-network 6.0.112 → 6.0.114

package/src/v2.ts

@@ -42,6 +42,13 @@ export const TRUSTED_NETWORK_V2_ENTRY_V0_AUTHORITY_ONLY_SIGNATURE_PROFILE = 1;
  */
 export const TRUSTED_NETWORK_V2_MAX_POLICY_ENTRY_BYTES = 128 * 1024;
 
+/**
+ * Consensus bounds for a canonical signed resource-fence EntryV0. These are
+ * protocol constants, not resource-adapter configuration.
+ */
+export const TRUSTED_NETWORK_V2_MAX_RESOURCE_FENCE_ENTRY_BYTES = 8 * 1024;
+export const TRUSTED_NETWORK_V2_MAX_RESOURCE_FENCE_DIRECT_PARENTS = 64;
+
 export const TRUSTED_NETWORK_V2_NETWORK_ID_DOMAIN =
 	"peerbit/trusted-network/v2/network-id/v1";
 export const TRUSTED_NETWORK_V2_POLICY_DIGEST_DOMAIN =
@@ -76,7 +83,7 @@ const TYPED_ARRAY_TAG = Object.getOwnPropertyDescriptor(
 	Symbol.toStringTag,
 )!.get!;
 
-const exactUint8ArrayByteLength = (value: unknown): number => {
+export const exactUint8ArrayByteLengthV2 = (value: unknown): number => {
 	if (
 		!ArrayBuffer.isView(value) ||
 		TYPED_ARRAY_TAG.call(value) !== "Uint8Array"
@@ -90,6 +97,20 @@ const exactUint8ArrayByteLength = (value: unknown): number => {
 	return byteLength;
 };
 
+export const copyUint8ArrayWithLengthV2 = (
+	value: Uint8Array,
+	byteLength: number,
+): Uint8Array => {
+	const copy = new Uint8Array(byteLength);
+	Uint8Array.prototype.set.call(copy, value);
+	return copy;
+};
+
+export const copyUint8ArrayV2 = (value: Uint8Array): Uint8Array => {
+	const byteLength = exactUint8ArrayByteLengthV2(value);
+	return copyUint8ArrayWithLengthV2(value, byteLength);
+};
+
 const assertByte = (value: number, label: string): void => {
 	if (!Number.isInteger(value) || value < 0 || value > 0xff) {
 		throw new Error(`${label} must be a u8`);
@@ -111,7 +132,7 @@ const assertU64 = (value: bigint, label: string): void => {
 const assertBytes32 = (value: Uint8Array, label: string): void => {
 	let byteLength: number;
 	try {
-		byteLength = exactUint8ArrayByteLength(value);
+		byteLength = exactUint8ArrayByteLengthV2(value);
 	} catch {
 		throw new Error(`${label} must contain exactly 32 bytes`);
 	}
@@ -457,6 +478,31 @@ export const decodePolicySnapshotBodyV2 = (
 	bytes: Uint8Array,
 	descriptor: NetworkDescriptorV2,
 ): PolicySnapshotBodyV2 => {
+	const byteLength = exactUint8ArrayByteLengthV2(bytes);
+	// [2, 1] variant (2), network id (32), sequence (8), and previous
+	// digest (32) place the bindings vec<u32 LE> count at offset 74 and its
+	// elements at offset 78. Bound that count by captured input before Borsh can
+	// allocate from it. This is only a feasibility guard, not a member cap.
+	const bindingsCountOffset = 74;
+	const bindingsOffset = 78;
+	if (byteLength < bindingsOffset) {
+		throw new Error("Policy snapshot body has truncated bindings framing");
+	}
+	const bindingsCount =
+		bytes[bindingsCountOffset]! +
+		bytes[bindingsCountOffset + 1]! * 0x100 +
+		bytes[bindingsCountOffset + 2]! * 0x10000 +
+		bytes[bindingsCountOffset + 3]! * 0x1000000;
+	// An Ed25519 key variant and key consume 33 bytes; roles and the absent
+	// encryption-commitment option consume one byte each. This 35-byte minimum
+	// is structural, so it bounds allocation without imposing a policy size.
+	const minimumBindingBytes = 35;
+	if (
+		bindingsCount >
+		Math.floor((byteLength - bindingsOffset) / minimumBindingBytes)
+	) {
+		throw new Error("Policy snapshot body has impossible bindings count");
+	}
 	const body = deserialize(bytes, PolicySnapshotBodyV2);
 	assertCanonicalEncoding(bytes, body);
 	assertPolicySnapshotBodyV2(body, descriptor);
@@ -513,7 +559,7 @@ const decodeExactCanonicalV2 = <T>(
 ): T => {
 	let byteLength: number;
 	try {
-		byteLength = exactUint8ArrayByteLength(bytes);
+		byteLength = exactUint8ArrayByteLengthV2(bytes);
 	} catch {
 		throw new Error(
 			`TrustedNetwork v2 record must contain ${exactLength} bytes`,
@@ -524,8 +570,7 @@ const decodeExactCanonicalV2 = <T>(
 			`TrustedNetwork v2 record must contain ${exactLength} bytes`,
 		);
 	}
-	const captured = new Uint8Array(byteLength);
-	Uint8Array.prototype.set.call(captured, bytes);
+	const captured = copyUint8ArrayWithLengthV2(bytes, byteLength);
 	const value = deserialize(captured, type);
 	assertCanonicalEncoding(captured, value);
 	return value;