@reallyme/codec 0.2.2 → 0.3.0

package/dist/wasmProvider.js

@@ -1,7 +1,8 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
-// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT OR Apache-2.0
 import { ReallyMeCodecError } from "./errors.js";
+import * as bundledWasm from "../dist/wasm/reallyme_codec_wasm.js";
 export const REALLYME_CODEC_WASM_EXPORTS = [
     "base64Decode",
     "base64Encode",
@@ -30,6 +31,8 @@ export const REALLYME_CODEC_WASM_EXPORTS = [
     "processOperationJson",
 ];
 let installedProvider;
+let providerPoisoned = false;
+const DAG_CBOR_CODEC_CODE = 0x71;
 const wasmErrorCode = (error) => {
     switch (error) {
         case "invalid-input":
@@ -38,10 +41,21 @@ const wasmErrorCode = (error) => {
             return "non-canonical";
         case "unsupported-codec":
             return "unsupported-codec";
+        case "unsupported-ipld-value":
+            return "unsupported-ipld-value";
         case "provider-failure":
-        default:
             return "provider-failure";
+        default:
+            return undefined;
+    }
+};
+const isWasmRuntimeError = (error) => {
+    const wasm = Reflect.get(globalThis, "WebAssembly");
+    if (typeof wasm !== "object" || wasm === null) {
+        return false;
     }
+    const runtimeError = Reflect.get(wasm, "RuntimeError");
+    return typeof runtimeError === "function" && error instanceof runtimeError;
 };
 const requireObject = (module) => {
     if (typeof module !== "object" || module === null) {
@@ -68,11 +82,23 @@ const requireFunction = (module, name) => {
         throw new ReallyMeCodecError("provider-failure");
     }
     return (...args) => {
+        if (providerPoisoned) {
+            throw new ReallyMeCodecError("provider-failure");
+        }
         try {
             return candidate(...args);
         }
         catch (error) {
-            throw new ReallyMeCodecError(wasmErrorCode(error));
+            const code = wasmErrorCode(error);
+            if (code === undefined) {
+                // A WASM trap may leave the instance partially unwound. Host-side
+                // errors do not prove that the instance is unusable.
+                if (isWasmRuntimeError(error)) {
+                    providerPoisoned = true;
+                }
+                throw new ReallyMeCodecError("provider-failure");
+            }
+            throw new ReallyMeCodecError(code);
         }
     };
 };
@@ -108,7 +134,30 @@ export const installReallyMeCodecWasmProvider = (module) => {
     if (installedProvider !== undefined) {
         throw new ReallyMeCodecError("provider-failure");
     }
+    // The generated ES module namespace is immutable. Identity pins the public
+    // installer to the Rust build shipped in this package instead of accepting
+    // a structurally compatible object supplied by another script.
+    if (module !== bundledWasm) {
+        throw new ReallyMeCodecError("provider-failure");
+    }
     const providerModule = requireObject(module);
+    // This zero-argument export accesses the initialized WASM module but does
+    // not handle caller data. Reject pre-init installation before making the
+    // install-once provider visible; a later initialized attempt can succeed.
+    const probe = Object.getOwnPropertyDescriptor(providerModule, "dagCborCodecCode")?.value;
+    if (typeof probe !== "function") {
+        throw new ReallyMeCodecError("provider-failure");
+    }
+    let codecCode;
+    try {
+        codecCode = probe();
+    }
+    catch {
+        throw new ReallyMeCodecError("provider-failure");
+    }
+    if (codecCode !== DAG_CBOR_CODEC_CODE) {
+        throw new ReallyMeCodecError("provider-failure");
+    }
     installedProvider = {
         base64Decode: stringFunction1(providerModule, "base64Decode"),
         base64Encode: bytesFunction1(providerModule, "base64Encode"),
@@ -138,7 +187,7 @@ export const installReallyMeCodecWasmProvider = (module) => {
     };
 };
 export const requireReallyMeCodecWasmProvider = () => {
-    if (installedProvider === undefined) {
+    if (installedProvider === undefined || providerPoisoned) {
         throw new ReallyMeCodecError("provider-failure");
     }
     return installedProvider;

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@reallyme/codec",
-  "version": "0.2.2",
+  "version": "0.3.0",
   "description": "TypeScript facade for the ReallyMe codec WASM package.",
-  "license": "Apache-2.0",
+  "license": "MIT OR Apache-2.0",
   "sideEffects": false,
   "type": "module",
   "main": "./dist/index.js",
@@ -39,10 +39,10 @@
     "test": "npm run build && node --test \"test/*.test.mjs\""
   },
   "dependencies": {
-    "@bufbuild/protobuf": "2.14.1"
+    "@bufbuild/protobuf": "2.16.0"
   },
   "devDependencies": {
-    "fast-check": "4.9.0",
+    "fast-check": "4.10.2",
     "typescript": "7.0.2"
   },
   "engines": {