bla-agents 1.1.0 → 1.5.3

package/dist/shields/formats/erlang-beam.js

@@ -0,0 +1,319 @@
+import { REA_INTERNAL_LIMITS } from "../../identity.js";
+import { SeededPrng } from "../../core/prng.js";
+import { buildCanaryAndDiagnosticPayloads } from "../deception/format-payloads.js";
+const FOR1 = Buffer.from("FOR1", "latin1");
+const BEAM = Buffer.from("BEAM", "latin1");
+function u32be(value) {
+    const b = Buffer.alloc(4);
+    b.writeUInt32BE(value >>> 0);
+    return b;
+}
+function pad4(bytes) {
+    const pad = (4 - (bytes.length % 4)) % 4;
+    return pad === 0 ? bytes : Buffer.concat([bytes, Buffer.alloc(pad)]);
+}
+function encodeChunk(name, payload) {
+    if (name.length !== 4)
+        throw new Error(`BEAM chunk name must be 4 chars: ${name}`);
+    return Buffer.concat([
+        Buffer.from(name, "latin1"),
+        u32be(payload.length),
+        pad4(payload),
+    ]);
+}
+/** Non-compact AtU8 atom table (positive count, 1-byte lengths). */
+function encodeAtU8(names) {
+    const parts = [u32be(names.length)];
+    for (const name of names) {
+        const encoded = Buffer.from(name, "utf8");
+        if (encoded.length > 255) {
+            throw new Error(`BEAM atom name too long for non-compact encoding: ${name}`);
+        }
+        parts.push(Buffer.from([encoded.length]), encoded);
+    }
+    return encodeChunk("AtU8", Buffer.concat(parts));
+}
+function parseBeamChunks(bytes) {
+    if (bytes.length < 12 ||
+        bytes.subarray(0, 4).toString("latin1") !== "FOR1" ||
+        bytes.subarray(8, 12).toString("latin1") !== "BEAM") {
+        return { valid: false, formSize: 0, chunks: [] };
+    }
+    const formSize = bytes.readUInt32BE(4);
+    const formEnd = 8 + formSize;
+    if (formEnd > bytes.length)
+        return { valid: false, formSize, chunks: [] };
+    const chunks = [];
+    let at = 12;
+    while (at + 8 <= formEnd) {
+        const name = bytes.subarray(at, at + 4).toString("latin1");
+        const size = bytes.readUInt32BE(at + 4);
+        const payloadOffset = at + 8;
+        const padded = payloadOffset + size + ((4 - (size % 4)) % 4);
+        if (padded > formEnd || payloadOffset + size > bytes.length)
+            break;
+        chunks.push({
+            name,
+            payload: Buffer.from(bytes.subarray(payloadOffset, payloadOffset + size)),
+        });
+        at = padded;
+    }
+    return { valid: true, formSize, chunks };
+}
+/** OTP 28+ compact unsigned `u` tag encoder (mirrors REA BeamParser). */
+function encodeCompactU(value) {
+    if (!Number.isInteger(value) || value < 0) {
+        throw new Error(`compact u value must be a non-negative integer: ${value}`);
+    }
+    if (value < 16)
+        return Buffer.from([(value << 4) & 0xff]);
+    if (value < 0x800) {
+        return Buffer.from([0x08 | (((value >> 8) & 0x07) << 5), value & 0xff]);
+    }
+    if (value <= 0xffff) {
+        return Buffer.from([0x18, (value >> 8) & 0xff, value & 0xff]);
+    }
+    if (value <= 0xffffff) {
+        return Buffer.from([
+            0x38,
+            (value >> 16) & 0xff,
+            (value >> 8) & 0xff,
+            value & 0xff,
+        ]);
+    }
+    throw new Error(`compact u value too large for atom length: ${value}`);
+}
+function decodeCompactU(payload, at) {
+    if (at >= payload.length)
+        return null;
+    const first = payload[at];
+    if ((first & 0x07) !== 0)
+        return null;
+    if ((first & 0x08) === 0) {
+        return { value: first >> 4, next: at + 1 };
+    }
+    if ((first & 0x10) === 0) {
+        if (at + 1 >= payload.length)
+            return null;
+        return {
+            value: ((first >> 5) << 8) | payload[at + 1],
+            next: at + 2,
+        };
+    }
+    const byteCountCode = first >> 5;
+    if (byteCountCode === 7)
+        return null;
+    const byteCount = byteCountCode + 2;
+    const start = at + 1;
+    if (start + byteCount > payload.length)
+        return null;
+    let value = 0;
+    for (let i = 0; i < byteCount; i++) {
+        value = (value << 8) | payload[start + i];
+    }
+    return { value, next: start + byteCount };
+}
+function decodeAtU8Table(payload) {
+    if (payload.length < 4)
+        return { names: [], compact: false };
+    const declared = payload.readInt32BE(0);
+    const compact = declared < 0;
+    const count = Math.abs(declared);
+    if (count === 0)
+        return { names: [], compact };
+    const names = [];
+    let at = 4;
+    for (let i = 0; i < count; i++) {
+        if (at >= payload.length)
+            break;
+        let length;
+        let next;
+        if (compact) {
+            const decoded = decodeCompactU(payload, at);
+            if (decoded === null)
+                break;
+            length = decoded.value;
+            next = decoded.next;
+        }
+        else {
+            length = payload[at];
+            next = at + 1;
+        }
+        at = next;
+        if (at + length > payload.length)
+            break;
+        names.push(payload.subarray(at, at + length).toString("utf8"));
+        at += length;
+    }
+    return { names, compact };
+}
+/** Encode AtU8 body (not wrapped in IFF chunk) in compact or classic form. */
+function encodeAtU8Body(names, compact) {
+    if (compact) {
+        const parts = [Buffer.alloc(4)];
+        parts[0].writeInt32BE(-names.length);
+        for (const name of names) {
+            const enc = Buffer.from(name, "utf8");
+            parts.push(encodeCompactU(enc.length), enc);
+        }
+        return Buffer.concat(parts);
+    }
+    const parts = [u32be(names.length)];
+    for (const name of names) {
+        const enc = Buffer.from(name, "utf8");
+        if (enc.length > 255)
+            continue;
+        parts.push(Buffer.from([enc.length]), enc);
+    }
+    return Buffer.concat(parts);
+}
+export function inspectErlangBeam(bytes) {
+    const parsed = parseBeamChunks(bytes);
+    let atomCount = 0;
+    for (const chunk of parsed.chunks) {
+        if (chunk.name === "AtU8" || chunk.name === "Atom") {
+            if (chunk.payload.length >= 4) {
+                atomCount = Math.abs(chunk.payload.readInt32BE(0));
+            }
+        }
+    }
+    const text = bytes.toString("latin1");
+    return {
+        validMagic: parsed.valid,
+        formSize: parsed.formSize,
+        chunkCount: parsed.chunks.length,
+        chunkNames: parsed.chunks.map((c) => c.name),
+        atomCount,
+        blaProtected: text.includes("[BLA-BEAM-SHIELD]") ||
+            parsed.chunks.some((c) => c.name.startsWith("Bla")),
+    };
+}
+function rebuildBeam(chunks) {
+    const body = Buffer.concat([
+        BEAM,
+        ...chunks.map((c) => encodeChunk(c.name, c.payload)),
+    ]);
+    return Buffer.concat([FOR1, u32be(body.length), body]);
+}
+/**
+ * Protects an Erlang BEAM IFF container:
+ * - Preserves original chunk order and non-AtU8 payloads (Code/ExpT/ImpT stay intact).
+ * - Appends canary atoms onto AtU8 tables (classic or OTP28+ compact), preserving
+ *   original atom indices and compact/classic encoding style.
+ * - Appends decoy IFF chunks past REA's default `max_chunks` (64) budget.
+ */
+export function protectErlangBeamBuffer(input, options = {}) {
+    const intensity = options.intensity ?? "balanced";
+    const prng = new SeededPrng(options.seed ?? "bla-beam-shield");
+    const deception = buildCanaryAndDiagnosticPayloads(prng, intensity);
+    const parsed = parseBeamChunks(input);
+    const baseChunks = parsed.valid
+        ? parsed.chunks.map((c) => ({ name: c.name, payload: Buffer.from(c.payload) }))
+        : [
+            {
+                name: "AtU8",
+                payload: (() => {
+                    // Minimal valid module atoms so ExpT can reference indices.
+                    const names = ["bla_beam_module", "module_info", "start"];
+                    const parts = [u32be(names.length)];
+                    for (const name of names) {
+                        const enc = Buffer.from(name, "utf8");
+                        parts.push(Buffer.from([enc.length]), enc);
+                    }
+                    return Buffer.concat(parts);
+                })(),
+            },
+            {
+                name: "Code",
+                payload: Buffer.concat([
+                    u32be(16),
+                    u32be(0),
+                    u32be(169),
+                    u32be(4),
+                    u32be(2),
+                    Buffer.from("code"),
+                ]),
+            },
+            {
+                name: "ExpT",
+                payload: Buffer.concat([u32be(1), u32be(2), u32be(0), u32be(1)]),
+            },
+        ];
+    // Expand non-compact AtU8 in place (keep original atom indices).
+    let atomsInjected = 0;
+    let exceedsDefaultAtomBudget = false;
+    const atomExtraTarget = intensity === "bankrupt" || intensity === "maximum"
+        ? REA_INTERNAL_LIMITS.BEAM_DEFAULT_MAX_ATOMS + 64
+        : 48;
+    for (let i = 0; i < baseChunks.length; i++) {
+        const chunk = baseChunks[i];
+        if (chunk.name !== "AtU8")
+            continue;
+        const table = decodeAtU8Table(chunk.payload);
+        if (table.names.length === 0 && chunk.payload.length >= 4) {
+            // Empty or undecodable — skip atom mutation; decoy chunks still apply.
+            break;
+        }
+        const existing = table.names;
+        const extras = [
+            "bla_beam_canary",
+            `[BLA-BEAM-SHIELD]`,
+            ...deception.textRecords
+                .map((r) => r.replace(/[^\w.:/=+-]/g, "_").slice(0, 200))
+                .filter((r) => r.length > 0)
+                .slice(0, 16),
+        ];
+        while (existing.length + extras.length < atomExtraTarget) {
+            extras.push(`bla_tarpit_atom_${extras.length}_${prng.hex(4)}`);
+        }
+        const merged = [...existing, ...extras];
+        atomsInjected = extras.length;
+        exceedsDefaultAtomBudget =
+            merged.length > REA_INTERNAL_LIMITS.BEAM_DEFAULT_MAX_ATOMS;
+        baseChunks[i] = {
+            name: "AtU8",
+            payload: encodeAtU8Body(merged, table.compact),
+        };
+        break;
+    }
+    // Decoy chunks: push past default max_chunks (64); bankrupt approaches hard 256.
+    const targetChunks = intensity === "bankrupt"
+        ? REA_INTERNAL_LIMITS.BEAM_MAX_CHUNKS + 4
+        : intensity === "maximum"
+            ? REA_INTERNAL_LIMITS.BEAM_DEFAULT_MAX_CHUNKS + 32
+            : REA_INTERNAL_LIMITS.BEAM_DEFAULT_MAX_CHUNKS + 8;
+    const decoyPayload = Buffer.from([
+        "[BLA-BEAM-SHIELD]",
+        ...deception.textRecords.slice(0, 8),
+        `BLA_BEAM_CANARY=${prng.hex(16)}`,
+    ].join("\0") + "\0", "utf8");
+    let chunksInjected = 0;
+    while (baseChunks.length < targetChunks) {
+        const idx = chunksInjected;
+        // 4-char IFF names; "Bla0".."Bla9" then "Bl10"+ via hex
+        const name = idx < 10
+            ? `Bla${idx}`
+            : idx < 36
+                ? `Bl${idx.toString(36).padStart(2, "0")}`.slice(0, 4)
+                : `B${idx.toString(36).padStart(3, "0")}`.slice(0, 4);
+        baseChunks.push({
+            name: name.padEnd(4, "x").slice(0, 4),
+            payload: Buffer.concat([
+                decoyPayload,
+                Buffer.from(`\nchunk=${idx}\n`, "utf8"),
+            ]),
+        });
+        chunksInjected++;
+    }
+    const buffer = rebuildBeam(baseChunks);
+    return {
+        buffer,
+        chunksInjected,
+        atomsInjected,
+        canaryTokensEmbedded: deception.canary.syntheticCanaryTokens.length,
+        diagnosticsEmbedded: deception.diagnostics.diagnosticsInjected.length,
+        exceedsDefaultChunkBudget: baseChunks.length > REA_INTERNAL_LIMITS.BEAM_DEFAULT_MAX_CHUNKS,
+        exceedsDefaultAtomBudget,
+    };
+}
+//# sourceMappingURL=erlang-beam.js.map

package/dist/shields/formats/erlang-beam.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erlang-beam.js","sourceRoot":"","sources":["../../../src/shields/formats/erlang-beam.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAC;AAEnF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAE3C,SAAS,KAAK,CAAC,KAAa;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,aAAa,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;IAC7B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,OAAe;IAChD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;IACnF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC3B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC;KACd,CAAC,CAAC;AACL,CAAC;AAED,oEAAoE;AACpE,SAAS,UAAU,CAAC,KAAwB;IAC1C,MAAM,KAAK,GAAa,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,qDAAqD,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnD,CAAC;AAgBD,SAAS,eAAe,CAAC,KAAa;IAKpC,IACE,KAAK,CAAC,MAAM,GAAG,EAAE;QACjB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM;QAClD,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM,EACnD,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC;IAC7B,IAAI,OAAO,GAAG,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC1E,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,OAAO,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACxC,MAAM,aAAa,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,IAAI,MAAM,GAAG,OAAO,IAAI,aAAa,GAAG,IAAI,GAAG,KAAK,CAAC,MAAM;YAAE,MAAM;QACnE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI;YACJ,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC,CAAC;SAC1E,CAAC,CAAC;QACH,EAAE,GAAG,MAAM,CAAC;IACd,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED,yEAAyE;AACzE,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,mDAAmD,KAAK,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1D,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;QAClB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,IAAI,CAAC;YACjB,IAAI;YACJ,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,IAAI;YACpB,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI;YACnB,KAAK,GAAG,IAAI;SACb,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,8CAA8C,KAAK,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,cAAc,CACrB,OAAe,EACf,EAAU;IAEV,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,CAAE,CAAC;IAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO;YACL,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC,EAAE,GAAG,CAAC,CAAE;YAC7C,IAAI,EAAE,EAAE,GAAG,CAAC;SACb,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,KAAK,IAAI,CAAC,CAAC;IACjC,IAAI,aAAa,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,SAAS,GAAG,aAAa,GAAG,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC;IACrB,IAAI,KAAK,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,SAAS,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IAItC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,QAAQ,GAAG,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM;QAChC,IAAI,MAAc,CAAC;QACnB,IAAI,IAAY,CAAC;QACjB,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC5C,IAAI,OAAO,KAAK,IAAI;gBAAE,MAAM;YAC5B,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;YACvB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,OAAO,CAAC,EAAE,CAAE,CAAC;YACtB,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;QAChB,CAAC;QACD,EAAE,GAAG,IAAI,CAAC;QACV,IAAI,EAAE,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM;YAAE,MAAM;QACxC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,EAAE,IAAI,MAAM,CAAC;IACf,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED,8EAA8E;AAC9E,SAAS,cAAc,CACrB,KAAwB,EACxB,OAAgB;IAEhB,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,KAAK,GAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,KAAK,CAAC,CAAC,CAAE,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,KAAK,GAAa,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;YAAE,SAAS;QAC/B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACnD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBAC9B,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,KAAK;QACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;QAChC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5C,SAAS;QACT,YAAY,EACV,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAgC;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;QACzB,IAAI;QACJ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;KACrD,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,UAGI,EAAE;IAUN,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,iBAAiB,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,gCAAgC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAEpE,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,UAAU,GAAoB,MAAM,CAAC,KAAK;QAC9C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC,CAAC;YACE;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,CAAC,GAAG,EAAE;oBACb,4DAA4D;oBAC5D,MAAM,KAAK,GAAG,CAAC,iBAAiB,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;oBAC1D,MAAM,KAAK,GAAa,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;wBACzB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;wBACtC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBAC7C,CAAC;oBACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC9B,CAAC,CAAC,EAAE;aACL;YACD;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;oBACrB,KAAK,CAAC,EAAE,CAAC;oBACT,KAAK,CAAC,CAAC,CAAC;oBACR,KAAK,CAAC,GAAG,CAAC;oBACV,KAAK,CAAC,CAAC,CAAC;oBACR,KAAK,CAAC,CAAC,CAAC;oBACR,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;iBACpB,CAAC;aACH;YACD;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;aACjE;SACF,CAAC;IAEN,iEAAiE;IACjE,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,wBAAwB,GAAG,KAAK,CAAC;IACrC,MAAM,eAAe,GACnB,SAAS,KAAK,UAAU,IAAI,SAAS,KAAK,SAAS;QACjD,CAAC,CAAC,mBAAmB,CAAC,sBAAsB,GAAG,EAAE;QACjD,CAAC,CAAC,EAAE,CAAC;IAET,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACpC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC1D,uEAAuE;YACvE,MAAM;QACR,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC;QAC7B,MAAM,MAAM,GAAa;YACvB,iBAAiB;YACjB,mBAAmB;YACnB,GAAG,SAAS,CAAC,WAAW;iBACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;iBACxD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;iBAC3B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SAChB,CAAC;QACF,OAAO,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAC;QACxC,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,wBAAwB;YACtB,MAAM,CAAC,MAAM,GAAG,mBAAmB,CAAC,sBAAsB,CAAC;QAC7D,UAAU,CAAC,CAAC,CAAC,GAAG;YACd,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC;SAC/C,CAAC;QACF,MAAM;IACR,CAAC;IAED,iFAAiF;IACjF,MAAM,YAAY,GAChB,SAAS,KAAK,UAAU;QACtB,CAAC,CAAC,mBAAmB,CAAC,eAAe,GAAG,CAAC;QACzC,CAAC,CAAC,SAAS,KAAK,SAAS;YACvB,CAAC,CAAC,mBAAmB,CAAC,uBAAuB,GAAG,EAAE;YAClD,CAAC,CAAC,mBAAmB,CAAC,uBAAuB,GAAG,CAAC,CAAC;IAExD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAC9B;QACE,mBAAmB;QACnB,GAAG,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACpC,mBAAmB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;KAClC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EACnB,MAAM,CACP,CAAC;IAEF,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,OAAO,UAAU,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,cAAc,CAAC;QAC3B,wDAAwD;QACxD,MAAM,IAAI,GACR,GAAG,GAAG,EAAE;YACN,CAAC,CAAC,MAAM,GAAG,EAAE;YACb,CAAC,CAAC,GAAG,GAAG,EAAE;gBACR,CAAC,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBACtD,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YACrC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;gBACrB,YAAY;gBACZ,MAAM,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,EAAE,MAAM,CAAC;aACxC,CAAC;SACH,CAAC,CAAC;QACH,cAAc,EAAE,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACvC,OAAO;QACL,MAAM;QACN,cAAc;QACd,aAAa;QACb,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,qBAAqB,CAAC,MAAM;QACnE,mBAAmB,EAAE,SAAS,CAAC,WAAW,CAAC,mBAAmB,CAAC,MAAM;QACrE,yBAAyB,EACvB,UAAU,CAAC,MAAM,GAAG,mBAAmB,CAAC,uBAAuB;QACjE,wBAAwB;KACzB,CAAC;AACJ,CAAC"}

package/dist/shields/formats/evm-bytecode.d.ts

@@ -0,0 +1,28 @@
+import type { ProtectionIntensity } from "../../core/types.js";
+/** Build Solidity terminal metadata CBOR + 2-byte big-endian length trailer. */
+export declare function buildSolidityMetadataTrailer(entries: readonly (readonly [string, string | Buffer])[]): Buffer;
+export interface EvmBytecodeInspection {
+    readonly byteLength: number;
+    readonly hasSolidityMetadata: boolean;
+    readonly metadataBytes: number;
+    readonly blaProtected: boolean;
+}
+export declare function inspectEvmBytecode(bytes: Buffer): EvmBytecodeInspection;
+/**
+ * Protects EVM contract bytecode by appending Solidity-compatible terminal
+ * CBOR metadata packed with canary/diagnostic strings. Optional bankrupt
+ * padding inserts JUMPDEST filler before the metadata (runtime-equivalent for
+ * contracts that never fall through into the padding).
+ */
+export declare function protectEvmBytecodeBuffer(input: Buffer, options?: {
+    readonly intensity?: ProtectionIntensity;
+    readonly seed?: string;
+}): {
+    readonly buffer: Buffer;
+    readonly metadataBytes: number;
+    readonly canaryTokensEmbedded: number;
+    readonly diagnosticsEmbedded: number;
+    readonly paddingBytes: number;
+    readonly approachesInputBudget: boolean;
+};
+//# sourceMappingURL=evm-bytecode.d.ts.map

package/dist/shields/formats/evm-bytecode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evm-bytecode.d.ts","sourceRoot":"","sources":["../../../src/shields/formats/evm-bytecode.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAkC/D,gFAAgF;AAChF,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,GACvD,MAAM,CAaR;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,qBAAqB,CAmBvE;AAgBD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IACP,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACnB,GACL;IACD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;CACzC,CA2CA"}

package/dist/shields/formats/evm-bytecode.js

@@ -0,0 +1,124 @@
+import { REA_INTERNAL_LIMITS } from "../../identity.js";
+import { SeededPrng } from "../../core/prng.js";
+import { buildCanaryAndDiagnosticPayloads } from "../deception/format-payloads.js";
+function cborHeader(major, length) {
+    if (length < 24)
+        return Buffer.from([(major << 5) | length]);
+    if (length < 256)
+        return Buffer.from([(major << 5) | 24, length]);
+    if (length < 65536) {
+        const b = Buffer.alloc(3);
+        b[0] = (major << 5) | 25;
+        b.writeUInt16BE(length, 1);
+        return b;
+    }
+    const b = Buffer.alloc(5);
+    b[0] = (major << 5) | 26;
+    b.writeUInt32BE(length, 1);
+    return b;
+}
+function cborText(value) {
+    const body = Buffer.from(value, "utf8");
+    return Buffer.concat([cborHeader(3, body.length), body]);
+}
+function cborBytes(value) {
+    return Buffer.concat([cborHeader(2, value.length), value]);
+}
+function cborMap(entries) {
+    return Buffer.concat([
+        cborHeader(5, entries.length),
+        ...entries.flatMap(([k, v]) => [k, v]),
+    ]);
+}
+/** Build Solidity terminal metadata CBOR + 2-byte big-endian length trailer. */
+export function buildSolidityMetadataTrailer(entries) {
+    const encoded = cborMap(entries.map(([key, value]) => [
+        cborText(key),
+        typeof value === "string" ? cborText(value) : cborBytes(value),
+    ]));
+    if (encoded.length > 0xffff) {
+        throw new Error("Solidity metadata CBOR exceeds uint16 length");
+    }
+    const len = Buffer.alloc(2);
+    len.writeUInt16BE(encoded.length);
+    return Buffer.concat([encoded, len]);
+}
+export function inspectEvmBytecode(bytes) {
+    let hasSolidityMetadata = false;
+    let metadataBytes = 0;
+    if (bytes.length >= 3) {
+        const length = bytes[bytes.length - 2] * 256 + bytes[bytes.length - 1];
+        const offset = bytes.length - 2 - length;
+        if (length > 0 && offset >= 0 && bytes[offset] >> 5 === 5) {
+            hasSolidityMetadata = true;
+            metadataBytes = length;
+        }
+    }
+    const text = bytes.toString("utf8");
+    return {
+        byteLength: bytes.length,
+        hasSolidityMetadata,
+        metadataBytes,
+        blaProtected: text.includes("[BLA-EVM-SHIELD]") || text.includes("bla_evm_canary"),
+    };
+}
+/**
+ * Strips a prior terminal Solidity metadata CBOR (if present) so a fresh
+ * adversarial trailer can be appended without nesting length suffixes.
+ */
+function stripTerminalMetadata(bytes) {
+    if (bytes.length < 3)
+        return bytes;
+    const length = bytes[bytes.length - 2] * 256 + bytes[bytes.length - 1];
+    const offset = bytes.length - 2 - length;
+    if (length > 0 && offset >= 0 && bytes[offset] >> 5 === 5) {
+        return bytes.subarray(0, offset);
+    }
+    return bytes;
+}
+/**
+ * Protects EVM contract bytecode by appending Solidity-compatible terminal
+ * CBOR metadata packed with canary/diagnostic strings. Optional bankrupt
+ * padding inserts JUMPDEST filler before the metadata (runtime-equivalent for
+ * contracts that never fall through into the padding).
+ */
+export function protectEvmBytecodeBuffer(input, options = {}) {
+    const intensity = options.intensity ?? "balanced";
+    const prng = new SeededPrng(options.seed ?? "bla-evm-shield");
+    const deception = buildCanaryAndDiagnosticPayloads(prng, intensity);
+    const base = stripTerminalMetadata(input.length > 0 ? input : Buffer.from([0x00]));
+    const metaEntries = [
+        ["solc", Buffer.from([0x00, 0x08, 0x1e])], // 0.8.30
+        ["bla", "[BLA-EVM-SHIELD]"],
+        ["bla_evm_canary", prng.hex(16)],
+    ];
+    for (const rec of deception.textRecords.slice(0, 12)) {
+        const key = `bla_${metaEntries.length}`;
+        metaEntries.push([key, rec.slice(0, 200)]);
+    }
+    const metadata = buildSolidityMetadataTrailer(metaEntries);
+    let padding = Buffer.alloc(0);
+    if (intensity === "bankrupt") {
+        // Full approach of REA's 4 MiB `inputBytes` budget (leave a small slack
+        // so the artifact still fits under the hard ceiling after metadata).
+        const target = REA_INTERNAL_LIMITS.EVM_INPUT_BYTES - 4096;
+        const need = Math.max(0, target - base.length - metadata.length);
+        // 0x5b = JUMPDEST; inert when never jumped to (runtime-equivalent).
+        padding = Buffer.alloc(need, 0x5b);
+    }
+    else if (intensity === "maximum") {
+        const need = 64 * 1024;
+        padding = Buffer.alloc(need, 0x5b);
+    }
+    // balanced stays lean: metadata only, no JUMPDEST padding.
+    const buffer = Buffer.concat([base, padding, metadata]);
+    return {
+        buffer,
+        metadataBytes: metadata.length - 2,
+        canaryTokensEmbedded: deception.canary.syntheticCanaryTokens.length,
+        diagnosticsEmbedded: deception.diagnostics.diagnosticsInjected.length,
+        paddingBytes: padding.length,
+        approachesInputBudget: buffer.length >= REA_INTERNAL_LIMITS.EVM_INPUT_BYTES - 8192,
+    };
+}
+//# sourceMappingURL=evm-bytecode.js.map

package/dist/shields/formats/evm-bytecode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evm-bytecode.js","sourceRoot":"","sources":["../../../src/shields/formats/evm-bytecode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAC;AAEnF,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc;IAC/C,IAAI,MAAM,GAAG,EAAE;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IAC7D,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,IAAI,MAAM,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;QACzB,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;IACzB,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,OAAO,CAAC,OAA+C;IAC9D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC;QAC7B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;KACvC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,4BAA4B,CAC1C,OAAwD;IAExD,MAAM,OAAO,GAAG,OAAO,CACrB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QAC5B,QAAQ,CAAC,GAAG,CAAC;QACb,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC;KAC/D,CAAC,CACH,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AASD,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QACzE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC;QACzC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,CAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,mBAAmB,GAAG,IAAI,CAAC;YAC3B,aAAa,GAAG,MAAM,CAAC;QACzB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,MAAM;QACxB,mBAAmB;QACnB,aAAa;QACb,YAAY,EACV,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;KACvE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IACzE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC;IACzC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,CAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAa,EACb,UAGI,EAAE;IASN,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,gBAAgB,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,gCAAgC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAEpE,MAAM,IAAI,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEnF,MAAM,WAAW,GAAgC;QAC/C,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS;QACpD,CAAC,KAAK,EAAE,kBAAkB,CAAC;QAC3B,CAAC,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;KACjC,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,OAAO,WAAW,CAAC,MAAM,EAAE,CAAC;QACxC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,QAAQ,GAAG,4BAA4B,CAAC,WAAW,CAAC,CAAC;IAE3D,IAAI,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QAC7B,wEAAwE;QACxE,qEAAqE;QACrE,MAAM,MAAM,GAAG,mBAAmB,CAAC,eAAe,GAAG,IAAI,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjE,oEAAoE;QACpE,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC;QACvB,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,2DAA2D;IAE3D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxD,OAAO;QACL,MAAM;QACN,aAAa,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC;QAClC,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,qBAAqB,CAAC,MAAM;QACnE,mBAAmB,EAAE,SAAS,CAAC,WAAW,CAAC,mBAAmB,CAAC,MAAM;QACrE,YAAY,EAAE,OAAO,CAAC,MAAM;QAC5B,qBAAqB,EACnB,MAAM,CAAC,MAAM,IAAI,mBAAmB,CAAC,eAAe,GAAG,IAAI;KAC9D,CAAC;AACJ,CAAC"}

package/dist/shields/formats/go-flutter-exhaustion.d.ts

@@ -0,0 +1,55 @@
+import { SeededPrng } from "../../core/prng.js";
+import type { ProtectionIntensity } from "../../core/types.js";
+/**
+ * Framed Go buildinfo (magic `\xff Go buildinf:` + inline encoding) with
+ * MODULE_START/END wrapping, plus `.gopclntab` / `runtime.moduledata` bait.
+ * Bankrupt/maximum pad the module past `MAX_BUILD_INFO_BYTES` (1 MiB).
+ *
+ * Trailer placement poisons whole-file scanners. Prefer
+ * {@link buildMappedGoBuildInfoPlant} inside a real `.go.buildinfo` section /
+ * writable PT_LOAD so REA's mapped parser (`GoBuildInfoSearch`) trips.
+ */
+export declare function buildGoBuildInfoExhaustionPayload(prng: SeededPrng, intensity?: ProtectionIntensity): {
+    readonly buffer: Buffer;
+    readonly exceedsMaxBuildInfoBytes: boolean;
+    readonly moduleBytes: number;
+};
+/**
+ * Compact plant for a real mapped `.go.buildinfo` / writable PT_LOAD region.
+ * Bankrupt claims an inline version length past `MAX_BUILD_INFO_BYTES` so REA's
+ * mapped parser resource-fails without needing a 1 MiB section. Balanced writes
+ * a valid small framed module. Capacity is respected (never overflows the section).
+ */
+export declare function buildMappedGoBuildInfoPlant(intensity: ProtectionIntensity, capacity: number): {
+    readonly buffer: Buffer;
+    readonly tripsMaxBuildInfoBytes: boolean;
+};
+/**
+ * Dense NUL-terminated package:/dart:/class-like pool sized to fit `capacity`,
+ * for planting inside a real Dart isolate snapshot data region.
+ */
+export declare function buildMappedFlutterIsolatePoolPlant(capacity: number, prng: SeededPrng, options?: {
+    readonly includeSnapshotHeader?: boolean;
+}): {
+    readonly buffer: Buffer;
+    readonly packageAndDartUris: number;
+    readonly classLikeTokens: number;
+    readonly snapshotHeaderBytes: number;
+};
+/**
+ * Dart snapshot-hash overflow (>64) plus string-pool URI/token flood past
+ * `MAX_POOL_URIS` (500) and `MAX_POOL_TOKENS` (2000).
+ */
+export declare function buildFlutterPoolExhaustionPayload(prng: SeededPrng): {
+    readonly buffer: Buffer;
+    readonly snapshotHashes: number;
+    readonly packageAndDartUris: number;
+    readonly classLikeTokens: number;
+};
+/**
+ * Synthetic ELF64 with a mapped `.go.buildinfo` section and an isolate-data
+ * region (plus dynsym for `_kDartIsolateSnapshotData`) so REA's real Go /
+ * Flutter parsers can be exercised in tests and the benchmark.
+ */
+export declare function buildMappedGoFlutterElfFixture(): Buffer;
+//# sourceMappingURL=go-flutter-exhaustion.d.ts.map

package/dist/shields/formats/go-flutter-exhaustion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"go-flutter-exhaustion.d.ts","sourceRoot":"","sources":["../../../src/shields/formats/go-flutter-exhaustion.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAiB/D;;;;;;;;GAQG;AACH,wBAAgB,iCAAiC,CAC/C,IAAI,EAAE,UAAU,EAChB,SAAS,GAAE,mBAAgC,GAC1C;IACD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,CA4DA;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,mBAAmB,EAC9B,QAAQ,EAAE,MAAM,GACf;IACD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;CAC1C,CAsCA;AAED;;;GAGG;AACH,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,UAAU,EAChB,OAAO,GAAE;IAAE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAA;CAAO,GACzD;IACD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC,CA2EA;AAED;;;GAGG;AACH,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,UAAU,GAAG;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC,CAgDA;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,IAAI,MAAM,CAgHvD"}