dlintr 0.1.0 → 0.2.0

package/README.md

@@ -2,7 +2,6 @@
 
 [![GitHub Actions](https://github.com/wasmio/dlintr/workflows/CI/badge.svg)](https://github.com/wasmio/dlintr/actions/workflows/ci.yml)
 [![Codecov](https://img.shields.io/codecov/c/github/wasmio/dlintr.svg)](https://codecov.io/gh/wasmio/dlintr)
-[![Language grade: JavaScript](https://img.shields.io/lgtm/grade/javascript/g/wasmio/dlintr.svg?logo=lgtm&logoWidth=18)](https://lgtm.com/projects/g/wasmio/dlintr/context:javascript)
 [![type-coverage](https://img.shields.io/badge/dynamic/json.svg?label=type-coverage&prefix=%E2%89%A5&suffix=%&query=$.typeCoverage.atLeast&uri=https%3A%2F%2Fraw.githubusercontent.com%2Fwasmio%2Fdlintr%2Fmain%2Fpackage.json)](https://github.com/plantain-00/type-coverage)
 [![npm](https://img.shields.io/npm/v/dlintr.svg)](https://www.npmjs.com/package/dlintr)
 [![GitHub Release](https://img.shields.io/github/release/wasmio/dlintr)](https://github.com/wasmio/dlintr/releases)
@@ -21,6 +20,8 @@ Dockerfile linter, validate inline bash, powered by [`hadolint`](https://github.
   - [Install](#install)
   - [API](#api)
   - [How it works](#how-it-works)
+    - [The WASI surface, and its residual risk](#the-wasi-surface-and-its-residual-risk)
+    - [The digest, and what it does not promise](#the-digest-and-what-it-does-not-promise)
 - [Sponsors](#sponsors)
 - [Backers](#backers)
 - [Changelog](#changelog)
@@ -41,12 +42,13 @@ yarn add dlintr
 npm i dlintr
 ```
 
-Requires Node.js 20.1+ for the built-in [`node:wasi`][node-wasi].
+The only runtime dependency is `tslib`. The WASI surface hadolint needs is
+implemented in `src/wasi.ts` rather than taken from a library.
 
 ### API
 
 ```js
-import { getVersion, lint, run } from 'dlintr'
+import { getVersion, lint } from 'dlintr'
 
 // Lint Dockerfile content and get the findings back.
 const results = await lint('FROM ubuntu:latest\nRUN apt-get update\n')
@@ -56,34 +58,93 @@ const results = await lint('FROM ubuntu:latest\nRUN apt-get update\n')
 // ]
 
 await lint('FROM alpine:3.20\n', {
-  ignore: ['DL3009'], // rule codes to suppress
+  ignore: ['DL3009'], // rule codes to suppress, applied to the findings
   severityOverrides: { DL3007: 'error' }, // re-level a single rule
   env: { HADOLINT_TRUSTED_REGISTRIES: 'docker.io' }, // anything hadolint reads
 })
 
-await getVersion() // 'Haskell Dockerfile Linter 3.0.0'
-
-// Or drive the CLI directly, for options `lint` does not model.
-const { exitCode, stdout, stderr } = await run(
-  ['--no-color', '--failure-threshold', 'error', '-'],
-  {
-    stdin: 'FROM ubuntu:latest\n',
-  },
-)
+await getVersion() // 'Haskell Dockerfile Linter 2.15.1'
 ```
 
-An unparseable Dockerfile is reported, not thrown: hadolint returns it as a `DL1000` finding with `level: 'error'`. Anything that stops hadolint before linting — a rejected option, for instance — is thrown, since it would otherwise be indistinguishable from a clean Dockerfile.
+An unparseable Dockerfile is reported, not thrown: hadolint returns it as a
+`DL1000` finding with `level: 'error'`.
 
-`lint` returns findings and drops the exit code. To gate CI, either look at `level`, or use `run` with `--failure-threshold` and check `exitCode`.
-
-### How it works
+To gate CI, look at `level`:
 
-[`hadolint`][hadolint] is compiled to WASI with the GHC backend and executed in-process; there is no native binary and no Docker.
+```js
+const problems = (await lint(dockerfile)).filter(
+  ({ level }) => level === 'error',
+)
+```
 
-- **Node** drives it with the built-in `node:wasi`, so there is nothing to install.
-- **Browsers** get [`@bjorn3/browser_wasi_shim`][bjorn3] (~29 kB minified) through the `browser` export condition. It is an optional peer dependency — install it if you target the browser, and Node users never pay for it.
+### How it works
 
-The Dockerfile is fed over stdin, which is why no filesystem has to be mounted: only what you pass to `lint`/`run` is ever visible to the linter, and it cannot read files from the host.
+[`hadolint`][hadolint] is compiled to a WebAssembly _reactor_ with the GHC
+backend and called in-process; there is no native binary and no Docker. The
+module is instantiated once and `lint` is called on it.
+
+**This is a breaking change from 0.1.x.** The module previously exposed
+hadolint's command-line interface, and now exports `lint()` and
+`getVersion():`
+
+- **`run()` is gone**, and with it the whole CLI surface. `--failure-threshold`,
+  `--config`, `--format`, `--no-color` and the rest are no longer reachable
+  from JavaScript. `lint` returns the findings as JSON, and the output format is
+  no longer configurable.
+- `ignore` and `severityOverrides` survive, applied to the returned findings —
+  they only ever filtered and relabelled, so they never needed the Haskell side.
+- `env` survives too, and reaches hadolint through WASI as before.
+- **`node:wasi` cannot host this module at all.** Its `initialize` ends in
+  `proc_exit(71)` and the RTS never starts, so every call answers "RTS is not
+  initialised". That is true of upstream's published reactor as well, so it is a
+  limitation of `node:wasi` rather than of this build. Node and the browser
+  therefore share one WASI implementation, from `src/wasi.ts`.
+
+Nothing is fed over stdin any more: the Dockerfile is passed straight to `lint`,
+so the module never sees a file descriptor that could read the host.
+
+### The WASI surface, and its residual risk
+
+hadolint needs five WASI calls — `args_get`, `args_sizes_get`, `environ_get`,
+`environ_sizes_get` and `clock_time_get` — and never touches the other fifteen
+it declares, including all of `fd_*`, `path_*` and `proc_exit`. That is
+**measured, not assumed**: `node wasm/calls.mjs` instruments every import and
+reports what is actually called on each path. Run it when the hadolint submodule
+or the wasm recipe moves.
+
+`src/wasi.ts` implements those five and makes the rest **throw by name**, so a
+module that reaches further fails at `fd_write` with an explanation rather than
+silently losing output.
+
+Two things follow, stated plainly:
+
+- **The implemented surface is version-bound.** It is correct for the build that
+  was measured. That is exactly why the unimplemented imports throw rather than
+  doing nothing, and why `wasm/calls.mjs` is committed.
+- **This is not a tested third-party WASI implementation.** The stubs protect the
+  paths the test suite exercises. A path it does not exercise could reach an
+  unimplemented import in your hands, and the failure there is an exception
+  rather than a wrong answer — better than silent corruption, but not the same
+  guarantee a maintained WASI library gives.
+
+### The digest, and what it does not promise
+
+The build is attested and the npm tarball is content-addressed, so what you
+install is what was published. **A digest identifies a build; it does not
+guarantee one.**
+
+This module is **not reproducible**. Two from-scratch builds of the same source,
+with the same toolchain and no build cache, produce different bytes — eight
+distinct digests are on record for one pinned revision of hadolint. So the
+digest is useful for telling one published artifact from another and for tying an
+artifact to its attestation, and for nothing stronger than that.
+
+An earlier version of this repository used the digest as a drift gate, comparing
+each build against a recorded value and failing on a mismatch. It was retired,
+because it failed on every run: a gate that presupposes a property the build does
+not have is not a gate. The measurements are written up in
+[`wasm/upstream-report.md`](./wasm/upstream-report.md) and filed upstream as
+[haskell-wasm/ghc-wasm-bindists#49](https://github.com/haskell-wasm/ghc-wasm-bindists/issues/49).
 
 ## Sponsors
 
@@ -108,8 +169,6 @@ Detailed changes for each release are documented in [CHANGELOG.md](./CHANGELOG.m
 [MIT][] © [JounQin][]@[1stG.me][]
 
 [1stg.me]: https://www.1stg.me
-[bjorn3]: https://github.com/bjorn3/browser_wasi_shim
 [hadolint]: https://github.com/hadolint/hadolint
 [jounqin]: https://GitHub.com/JounQin
 [mit]: http://opensource.org/licenses/MIT
-[node-wasi]: https://nodejs.org/api/wasi.html

package/ghc_wasm_jsffi.js

@@ -0,0 +1,114 @@
+// This file implements the JavaScript runtime logic for Haskell
+// modules that use JSFFI. It is not an ESM module, but the template
+// of one; the post-linker script will copy all contents into a new
+// ESM module.
+
+// Manage a mapping from 32-bit ids to actual JavaScript values.
+class JSValManager {
+  #lastk = 0;
+  #kv = new Map();
+
+  newJSVal(v) {
+    const k = ++this.#lastk;
+    this.#kv.set(k, v);
+    return k;
+  }
+
+  // A separate has() call to ensure we can store undefined as a value
+  // too. Also, unconditionally check this since the check is cheap
+  // anyway, if the check fails then there's a use-after-free to be
+  // fixed.
+  getJSVal(k) {
+    if (!this.#kv.has(k)) {
+      throw new WebAssembly.RuntimeError(`getJSVal(${k})`);
+    }
+    return this.#kv.get(k);
+  }
+
+  // Check for double free as well.
+  freeJSVal(k) {
+    if (!this.#kv.delete(k)) {
+      throw new WebAssembly.RuntimeError(`freeJSVal(${k})`);
+    }
+  }
+}
+
+// The actual setImmediate() to be used. This is a ESM module top
+// level binding and doesn't pollute the globalThis namespace.
+//
+// To benchmark different setImmediate() implementations in the
+// browser, use https://github.com/jphpsf/setImmediate-shim-demo as a
+// starting point.
+const setImmediate = await (async () => {
+  // node, bun, or other scripts might have set this up in the browser
+  if (globalThis.setImmediate) {
+    return globalThis.setImmediate;
+  }
+
+  // deno
+  if (globalThis.Deno) {
+    try {
+      return (await import("node:timers")).setImmediate;
+    } catch {}
+  }
+
+  // https://developer.mozilla.org/en-US/docs/Web/API/Scheduler/postTask
+  if (globalThis.scheduler) {
+    return (cb, ...args) => scheduler.postTask(() => cb(...args));
+  }
+
+  // Cloudflare workers doesn't support MessageChannel
+  if (globalThis.MessageChannel) {
+    // A simple & fast setImmediate() implementation for browsers. It's
+    // not a drop-in replacement for node.js setImmediate() because:
+    // 1. There's no clearImmediate(), and setImmediate() doesn't return
+    //    anything
+    // 2. There's no guarantee that callbacks scheduled by setImmediate()
+    //    are executed in the same order (in fact it's the opposite lol),
+    //    but you are never supposed to rely on this assumption anyway
+    class SetImmediate {
+      #fs = [];
+      #mc = new MessageChannel();
+
+      constructor() {
+        this.#mc.port1.addEventListener("message", () => {
+          this.#fs.pop()();
+        });
+        this.#mc.port1.start();
+      }
+
+      setImmediate(cb, ...args) {
+        this.#fs.push(() => cb(...args));
+        this.#mc.port2.postMessage(undefined);
+      }
+    }
+
+    const sm = new SetImmediate();
+    return (cb, ...args) => sm.setImmediate(cb, ...args);
+  }
+
+  return (cb, ...args) => setTimeout(cb, 0, ...args);
+})();
+
+export default (__exports) => {
+const __ghc_wasm_jsffi_jsval_manager = new JSValManager();
+const __ghc_wasm_jsffi_finalization_registry = globalThis.FinalizationRegistry ? new FinalizationRegistry(sp => __exports.rts_freeStablePtr(sp)) : { register: () => {}, unregister: () => true };
+return {
+newJSVal: (v) => __ghc_wasm_jsffi_jsval_manager.newJSVal(v),
+getJSVal: (k) => __ghc_wasm_jsffi_jsval_manager.getJSVal(k),
+freeJSVal: (k) => __ghc_wasm_jsffi_jsval_manager.freeJSVal(k),
+scheduleWork: () => setImmediate(__exports.rts_schedulerLoop),
+ZC0ZCghczminternalZCGHCziInternalziWasmziPrimziExportsZC: ($1,$2) => ($1.reject(new WebAssembly.RuntimeError($2))),
+ZC18ZCghczminternalZCGHCziInternalziWasmziPrimziExportsZC: ($1,$2) => ($1.resolve($2)),
+ZC20ZCghczminternalZCGHCziInternalziWasmziPrimziExportsZC: ($1) => {$1.throwTo = () => {};},
+ZC21ZCghczminternalZCGHCziInternalziWasmziPrimziExportsZC: ($1,$2) => {$1.throwTo = (err) => __exports.rts_promiseThrowTo($2, err);},
+ZC22ZCghczminternalZCGHCziInternalziWasmziPrimziExportsZC: () => {let res, rej; const p = new Promise((resolve, reject) => { res = resolve; rej = reject; }); p.resolve = res; p.reject = rej; return p;},
+ZC0ZCghczminternalZCGHCziInternalziWasmziPrimziTypesZC: ($1) => (`${$1.stack ? $1.stack : $1}`),
+ZC1ZCghczminternalZCGHCziInternalziWasmziPrimziTypesZC: ($1,$2) => ((new TextDecoder('utf-8', {fatal: true})).decode(new Uint8Array(__exports.memory.buffer, $1, $2))),
+ZC2ZCghczminternalZCGHCziInternalziWasmziPrimziTypesZC: ($1,$2,$3) => ((new TextEncoder()).encodeInto($1, new Uint8Array(__exports.memory.buffer, $2, $3)).written),
+ZC3ZCghczminternalZCGHCziInternalziWasmziPrimziTypesZC: ($1) => ($1.length),
+ZC4ZCghczminternalZCGHCziInternalziWasmziPrimziTypesZC: ($1) => {try { __ghc_wasm_jsffi_finalization_registry.unregister($1); } catch {}},
+ZC18ZCghczminternalZCGHCziInternalziWasmziPrimziImportsZC: ($1,$2) => ($1.then(() => __exports.rts_promiseResolveUnit($2), err => __exports.rts_promiseReject($2, err))),
+ZC0ZCghczminternalZCGHCziInternalziWasmziPrimziConcziInternalZC: async ($1) => (new Promise(res => setTimeout(res, $1 / 1000))),
+};
+};

package/lib/api.d.ts

@@ -1,8 +1,8 @@
-import type { WasiRuntime } from './runtime.js';
-import type { LintOptions, LintResult, RunOptions, RunResult } from './types.js';
+import type { Reactor } from './reactor.js';
+import type { LintOptions, LintResult } from './types.js';
 export interface Dlinter {
-    run: (args: string[], options?: RunOptions) => Promise<RunResult>;
     lint: (dockerfile: string, options?: LintOptions) => Promise<LintResult[]>;
     getVersion: () => Promise<string>;
 }
-export declare const createDlinter: (runtime: WasiRuntime) => Dlinter;
+export type LoadReactor = (env: readonly string[]) => Promise<Reactor>;
+export declare const createDlinter: (load: LoadReactor) => Dlinter;

package/lib/api.js

@@ -1,37 +1,36 @@
-export const createDlinter = (runtime) => {
-    let version;
+const HOME = 'HOME=/';
+export const createDlinter = (load) => {
+    const reactors = new Map();
+    const instance = (env) => {
+        const pairs = [
+            HOME,
+            ...Object.entries(env ?? {}).map(([key, value]) => `${key}=${value}`),
+        ];
+        const key = JSON.stringify(pairs);
+        let reactor = reactors.get(key);
+        if (!reactor) {
+            reactor = load(pairs);
+            reactors.set(key, reactor);
+            reactor.catch(() => reactors.delete(key));
+        }
+        return reactor;
+    };
     return {
-        run: runtime.run,
         lint: async (dockerfile, options = {}) => {
-            const args = ['--format', 'json'];
-            for (const code of options.ignore ?? []) {
-                args.push('--ignore', code);
-            }
-            for (const [code, level] of Object.entries(options.severityOverrides ?? {})) {
-                if (level) {
-                    args.push(`--${level}`, code);
-                }
-            }
-            args.push('-');
-            const { stdout, stderr } = await runtime.run(args, {
-                stdin: dockerfile,
-                env: options.env,
+            const { lint } = await instance(options.env);
+            const findings = JSON.parse(await lint(dockerfile));
+            const ignored = new Set(options.ignore ?? []);
+            return findings
+                .filter(({ code }) => !ignored.has(code))
+                .map(finding => {
+                const level = options.severityOverrides?.[finding.code];
+                return level ? { ...finding, level } : finding;
             });
-            if (!stdout) {
-                if (stderr) {
-                    throw new Error(stderr.trim());
-                }
-                return [];
-            }
-            return JSON.parse(stdout);
         },
-        getVersion: () => (version ??= runtime
-            .run(['--version'])
-            .then(({ stdout }) => stdout.trim())
-            .catch((error) => {
-            version = undefined;
-            throw error;
-        })),
+        getVersion: async () => {
+            const { version } = await instance();
+            return version();
+        },
     };
 };
 //# sourceMappingURL=api.js.map

package/lib/api.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAwBA,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAoB,EAAW,EAAE;IAC7D,IAAI,OAAoC,CAAA;IAExC,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAEhB,IAAI,EAAE,KAAK,EACT,UAAkB,EAClB,OAAO,GAAgB,EAAE,EACF,EAAE;YACzB,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YACjC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;YAC7B,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CACxC,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAChC,EAAE,CAAC;gBACF,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,EAAE,IAAI,CAAC,CAAA;gBAC/B,CAAC;YACH,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAEd,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;gBACjD,KAAK,EAAE,UAAU;gBACjB,GAAG,EAAE,OAAO,CAAC,GAAG;aACjB,CAAC,CAAA;YAKF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;gBAChC,CAAC;gBACD,OAAO,EAAE,CAAA;YACX,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAiB,CAAA;QAC3C,CAAC;QAED,UAAU,EAAE,GAAG,EAAE,CACf,CAAC,OAAO,KAAK,OAAO;aACjB,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;aAClB,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;aACnC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAExB,OAAO,GAAG,SAAS,CAAA;YACnB,MAAM,KAAK,CAAA;QACb,CAAC,CAAC,CAAC;KACR,CAAA;AACH,CAAC,CAAA"}
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AA+BA,MAAM,IAAI,GAAG,QAAQ,CAAA;AAGrB,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAiB,EAAW,EAAE;IAC1D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAA;IAEpD,MAAM,QAAQ,GAAG,CAAC,GAA4B,EAAoB,EAAE;QAClE,MAAM,KAAK,GAAG;YACZ,IAAI;YACJ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;SACtE,CAAA;QAGD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAEjC,IAAI,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;YACrB,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;YAE1B,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QAC3C,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;IAED,OAAO;QACL,IAAI,EAAE,KAAK,EACT,UAAkB,EAClB,OAAO,GAAgB,EAAE,EACF,EAAE;YACzB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAiB,CAAA;YAMnE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;YAC7C,OAAO,QAAQ;iBACZ,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;iBACxC,GAAG,CAAC,OAAO,CAAC,EAAE;gBACb,MAAM,KAAK,GACT,OAAO,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBAG3C,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA;YAChD,CAAC,CAAC,CAAA;QACN,CAAC;QAED,UAAU,EAAE,KAAK,IAAqB,EAAE;YACtC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAA;YACpC,OAAO,OAAO,EAAE,CAAA;QAClB,CAAC;KACF,CAAA;AACH,CAAC,CAAA"}

package/lib/browser.d.ts

@@ -1,6 +1,5 @@
-export declare const run: (args: string[], options?: import("./types.js").RunOptions) => Promise<import("./types.js").RunResult>;
 export declare const lint: (dockerfile: string, options?: import("./types.js").LintOptions) => Promise<import("./types.js").LintResult[]>;
 export declare const getVersion: () => Promise<string>;
-export type { Dlinter } from './api.js';
-export type { WasiRuntime } from './runtime.js';
-export type { LintOptions, LintResult, OutputFormat, RunOptions, RunResult, Severity, } from './types.js';
+export type { Dlinter, LoadReactor } from './api.js';
+export type { Reactor } from './reactor.js';
+export type { LintOptions, LintResult, Severity } from './types.js';

package/lib/browser.js

@@ -1,7 +1,26 @@
+import { __rewriteRelativeImportExtension } from "tslib";
 import { createDlinter } from './api.js';
-import { createBrowserRuntime } from './wasi-browser.js';
-const dlinter = createDlinter(createBrowserRuntime());
-export const run = dlinter.run;
+import { memoize } from './memoize.js';
+import { createReactor } from './reactor.js';
+const loadAssets = memoize(async () => {
+    const wasmUrl = new URL('../hadolint.wasm', import.meta.url);
+    const glueUrl = new URL('../ghc_wasm_jsffi.js', import.meta.url);
+    const [response, glue] = await Promise.all([
+        fetch(wasmUrl),
+        import(__rewriteRelativeImportExtension(glueUrl.href, true)),
+    ]);
+    if (!response.ok) {
+        throw new Error(`dlintr: could not fetch ${wasmUrl.pathname}: ${response.status} ${response.statusText}`);
+    }
+    return [
+        await WebAssembly.compile(await response.arrayBuffer()),
+        glue.default,
+    ];
+});
+const dlinter = createDlinter(async (env) => {
+    const [module, glue] = await loadAssets();
+    return createReactor(module, glue, env);
+});
 export const lint = dlinter.lint;
 export const getVersion = dlinter.getVersion;
 //# sourceMappingURL=browser.js.map

package/lib/browser.js.map

@@ -1 +1 @@
-{"version":3,"file":"browser.js","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAExD,MAAM,OAAO,GAAG,aAAa,CAAC,oBAAoB,EAAE,CAAC,CAAA;AAErD,MAAM,CAAC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;AAC9B,MAAM,CAAC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;AAChC,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA"}
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":";AAQA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAO5C,MAAM,UAAU,GAAG,OAAO,CACxB,KAAK,IAA0D,EAAE;IAC/D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,kBAAkB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAA;IAC5D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,sBAAsB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAA;IAEhE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzC,KAAK,CAAC,OAAO,CAAC;QACd,MAAM,kCAAC,OAAO,CAAC,IAAI,QAAuC;KAC3D,CAAC,CAAA;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,2BAA2B,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CACzF,CAAA;IACH,CAAC;IAED,OAAO;QACL,MAAM,WAAW,CAAC,OAAO,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;QACvD,IAAI,CAAC,OAAO;KACJ,CAAA;AACZ,CAAC,CACF,CAAA;AAED,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAC,GAAG,EAAC,EAAE;IACxC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,MAAM,UAAU,EAAE,CAAA;IACzC,OAAO,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;AACzC,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;AAChC,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA"}