rea-agents 2.0.0 → 2.1.0

package/dist/dotnet/ManagedMetadataInventory.js

@@ -1,295 +1,7 @@
-import { METADATA_TABLE_NAMES, metadataRowOffset, } from "./ManagedMetadataLayout.js";
-import { MetadataRowCursor, metadataToken, readMetadataBlob, readMetadataGuid, readMetadataString, sha256Bytes, strongNameToken, } from "./ManagedMetadataHeaps.js";
-import { ManagedReaderFailure, managedFailure, } from "./ManagedReaderFailure.js";
-const rowCursor = (bytes, layout, table, row) => {
-    const descriptor = layout.table(table);
-    const start = metadataRowOffset(layout, table, row);
-    if (descriptor === undefined)
-        throw managedFailure("invalid-row", `metadata.${String(table)}`, "Metadata table is absent", start);
-    return new MetadataRowCursor(bytes, start, start + descriptor.rowSize, `metadata.${descriptor.name}`);
-};
-const publicKeyIdentity = (bytes, kind) => ({
-    kind: bytes.length === 0 ? "none" : kind,
-    byte_length: bytes.length,
-    sha256: bytes.length === 0 ? null : sha256Bytes(bytes),
-    token: bytes.length === 0
-        ? null
-        : kind === "public-key"
-            ? strongNameToken(bytes)
-            : bytes.length === 8
-                ? bytes.toString("hex")
-                : null,
-});
-const readModule = (bytes, layout, maxBytes) => {
-    const table = layout.table(0);
-    if (table === undefined || table.rowCount === 0)
-        return null;
-    const cursor = rowCursor(bytes, layout, 0, 1);
-    const generation = cursor.readUInt16();
-    const name = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), maxBytes);
-    const mvid = readMetadataGuid(bytes, layout, cursor.readIndex(layout.guidIndexSize));
-    const encId = readMetadataGuid(bytes, layout, cursor.readIndex(layout.guidIndexSize));
-    const encBaseId = readMetadataGuid(bytes, layout, cursor.readIndex(layout.guidIndexSize));
-    return {
-        name,
-        generation,
-        mvid,
-        enc_id: encId,
-        enc_base_id: encBaseId,
-        token: metadataToken(0, 1),
-        row_offset: table.offset,
-    };
-};
-const readAssembly = (bytes, layout, maxBytes) => {
-    const table = layout.table(32);
-    if (table === undefined || table.rowCount === 0)
-        return null;
-    const cursor = rowCursor(bytes, layout, 32, 1);
-    const hashAlgorithm = cursor.readUInt32();
-    const version = [
-        cursor.readUInt16(),
-        cursor.readUInt16(),
-        cursor.readUInt16(),
-        cursor.readUInt16(),
-    ].join(".");
-    const flags = cursor.readUInt32();
-    const key = readMetadataBlob(bytes, layout, cursor.readIndex(layout.blobIndexSize), maxBytes);
-    const name = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), maxBytes);
-    const culture = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), maxBytes);
-    return {
-        name,
-        version,
-        culture: culture.length === 0 ? null : culture,
-        flags,
-        hash_algorithm: hashAlgorithm,
-        public_key: publicKeyIdentity(key, (flags & 1) === 0 ? "public-key-token" : "public-key"),
-        token: metadataToken(32, 1),
-        row_offset: table.offset,
-    };
-};
-const readAssemblyReference = (bytes, layout, row, maxBytes) => {
-    const cursor = rowCursor(bytes, layout, 35, row);
-    const version = [
-        cursor.readUInt16(),
-        cursor.readUInt16(),
-        cursor.readUInt16(),
-        cursor.readUInt16(),
-    ].join(".");
-    const flags = cursor.readUInt32();
-    const keyOrToken = readMetadataBlob(bytes, layout, cursor.readIndex(layout.blobIndexSize), maxBytes);
-    const name = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), maxBytes);
-    const culture = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), maxBytes);
-    const hashValue = readMetadataBlob(bytes, layout, cursor.readIndex(layout.blobIndexSize), maxBytes);
-    return {
-        name,
-        version,
-        culture: culture.length === 0 ? null : culture,
-        flags,
-        public_key_or_token: publicKeyIdentity(keyOrToken, (flags & 1) === 0 ? "public-key-token" : "public-key"),
-        hash_value_sha256: hashValue.length === 0 ? null : sha256Bytes(hashValue),
-        hash_value_length: hashValue.length,
-        token: metadataToken(35, row),
-        row_offset: metadataRowOffset(layout, 35, row),
-    };
-};
-const codedToken = (raw, bits, tables) => {
-    if (raw === 0)
-        return null;
-    const tag = raw & (2 ** bits - 1);
-    const row = Math.floor(raw / 2 ** bits);
-    const table = tables[tag];
-    return table === undefined || row === 0 ? null : metadataToken(table, row);
-};
-const readTypeName = (bytes, layout, table, row, maxBytes) => {
-    const descriptor = layout.table(table);
-    if (descriptor === undefined || row < 1 || row > descriptor.rowCount)
-        return null;
-    const cursor = rowCursor(bytes, layout, table, row);
-    if (table === 1)
-        cursor.readIndex(layout.codedIndexSize("ResolutionScope"));
-    else
-        cursor.readUInt32();
-    const name = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), maxBytes);
-    const namespace = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), maxBytes);
-    return namespace.length === 0 ? name : `${namespace}.${name}`;
-};
-const declaringTypeForMethod = (bytes, layout, methodRow, maxBytes) => {
-    const types = layout.table(2);
-    const methods = layout.table(6);
-    if (types === undefined || methods === undefined)
-        return null;
-    for (let row = 1; row <= types.rowCount; row += 1) {
-        const cursor = rowCursor(bytes, layout, 2, row);
-        cursor.readUInt32();
-        const nameIndex = cursor.readIndex(layout.stringIndexSize);
-        const namespaceIndex = cursor.readIndex(layout.stringIndexSize);
-        cursor.readIndex(layout.codedIndexSize("TypeDefOrRef"));
-        cursor.readIndex(layout.tableIndexSize(4));
-        const methodStart = cursor.readIndex(layout.tableIndexSize(6));
-        const methodEnd = row === types.rowCount
-            ? methods.rowCount + 1
-            : methodListForType(bytes, layout, row + 1);
-        if (methodRow < methodStart || methodRow >= methodEnd)
-            continue;
-        const name = readMetadataString(bytes, layout, nameIndex, maxBytes);
-        const namespace = readMetadataString(bytes, layout, namespaceIndex, maxBytes);
-        return namespace.length === 0 ? name : `${namespace}.${name}`;
-    }
-    return null;
-};
-const methodListForType = (bytes, layout, row) => {
-    const cursor = rowCursor(bytes, layout, 2, row);
-    cursor.readUInt32();
-    cursor.readIndex(layout.stringIndexSize);
-    cursor.readIndex(layout.stringIndexSize);
-    cursor.readIndex(layout.codedIndexSize("TypeDefOrRef"));
-    cursor.readIndex(layout.tableIndexSize(4));
-    return cursor.readIndex(layout.tableIndexSize(6));
-};
-const attributeTypeName = (bytes, layout, rawType, maxBytes) => {
-    const tag = rawType & 7;
-    const row = Math.floor(rawType / 8);
-    if (row === 0)
-        return null;
-    if (tag === 2)
-        return declaringTypeForMethod(bytes, layout, row, maxBytes);
-    if (tag !== 3)
-        return null;
-    const memberRefs = layout.table(10);
-    if (memberRefs === undefined || row > memberRefs.rowCount)
-        return null;
-    const cursor = rowCursor(bytes, layout, 10, row);
-    const parent = cursor.readIndex(layout.codedIndexSize("MemberRefParent"));
-    const parentTag = parent & 7;
-    const parentRow = Math.floor(parent / 8);
-    if (parentTag === 0)
-        return readTypeName(bytes, layout, 2, parentRow, maxBytes);
-    if (parentTag === 1)
-        return readTypeName(bytes, layout, 1, parentRow, maxBytes);
-    if (parentTag === 3)
-        return declaringTypeForMethod(bytes, layout, parentRow, maxBytes);
-    return null;
-};
-const decodeCompressedLength = (blob, offset) => {
-    const first = blob[offset];
-    if (first === undefined)
-        return undefined;
-    if ((first & 0x80) === 0)
-        return { length: first, prefix: 1 };
-    if ((first & 0xc0) === 0x80 && blob[offset + 1] !== undefined)
-        return {
-            length: ((first & 0x3f) << 8) | (blob[offset + 1] ?? 0),
-            prefix: 2,
-        };
-    if ((first & 0xe0) === 0xc0 &&
-        blob[offset + 1] !== undefined &&
-        blob[offset + 2] !== undefined &&
-        blob[offset + 3] !== undefined)
-        return {
-            length: (first & 0x1f) * 0x01_00_00_00 +
-                (blob[offset + 1] ?? 0) * 0x01_00_00 +
-                (blob[offset + 2] ?? 0) * 0x0100 +
-                (blob[offset + 3] ?? 0),
-            prefix: 4,
-        };
-    return undefined;
-};
-const decodeFixedString = (blob) => {
-    if (blob.length < 3 || blob.readUInt16LE(0) !== 1 || blob[2] === 0xff)
-        return null;
-    const length = decodeCompressedLength(blob, 2);
-    if (length === undefined)
-        return null;
-    const start = 2 + length.prefix;
-    if (start > blob.length - length.length)
-        return null;
-    try {
-        return new TextDecoder("utf-8", { fatal: true }).decode(blob.subarray(start, start + length.length));
-    }
-    catch {
-        return null;
-    }
-};
-const readCustomAttribute = (bytes, layout, row, maxBytes) => {
-    const cursor = rowCursor(bytes, layout, 12, row);
-    const parentRaw = cursor.readIndex(layout.codedIndexSize("HasCustomAttribute"));
-    const typeRaw = cursor.readIndex(layout.codedIndexSize("CustomAttributeType"));
-    const value = readMetadataBlob(bytes, layout, cursor.readIndex(layout.blobIndexSize), maxBytes);
-    const parent = codedToken(parentRaw, 5, [
-        6, 4, 1, 2, 8, 9, 10, 0, 14, 23, 20, 17, 26, 27, 32, 35, 38, 39, 40, 42,
-        44, 43,
-    ]);
-    if (parent === null)
-        throw managedFailure("invalid-row", "metadata.CustomAttribute", "CustomAttribute parent coded index is invalid", cursor.start);
-    const typeName = attributeTypeName(bytes, layout, typeRaw, maxBytes);
-    return {
-        parent_token: parent,
-        constructor_token: codedToken(typeRaw, 3, [undefined, undefined, 6, 10]),
-        type_name: typeName,
-        value_length: value.length,
-        value_sha256: sha256Bytes(value),
-        decoded_fixed_string: typeName === "System.Runtime.Versioning.TargetFrameworkAttribute"
-            ? decodeFixedString(value)
-            : null,
-        token: metadataToken(12, row),
-        row_offset: cursor.start,
-    };
-};
-const readResource = (bytes, layout, row, maxBytes, directory, issues) => {
-    const cursor = rowCursor(bytes, layout, 40, row);
-    const declaredOffset = cursor.readUInt32();
-    const flags = cursor.readUInt32();
-    const name = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), maxBytes);
-    const implementationRaw = cursor.readIndex(layout.codedIndexSize("Implementation"));
-    const implementationToken = codedToken(implementationRaw, 2, [38, 35, 39]);
-    let dataLength = null;
-    let dataSha256 = null;
-    if (implementationRaw === 0) {
-        if (directory === null || declaredOffset > directory.size - 4) {
-            issues.push({
-                code: "invalid-resource",
-                scope: `metadata.ManifestResource:${metadataToken(40, row)}`,
-                offset: directory?.offset ?? null,
-                detail: "Embedded resource offset leaves the CLI resources directory",
-            });
-        }
-        else {
-            const start = directory.offset + declaredOffset;
-            dataLength = bytes.readUInt32LE(start);
-            if (dataLength > directory.size - declaredOffset - 4) {
-                issues.push({
-                    code: "invalid-resource",
-                    scope: `metadata.ManifestResource:${metadataToken(40, row)}`,
-                    offset: start,
-                    detail: "Embedded resource length leaves the CLI resources directory",
-                });
-            }
-            else if (dataLength > maxBytes) {
-                issues.push({
-                    code: "limit-exceeded",
-                    scope: `metadata.ManifestResource:${metadataToken(40, row)}`,
-                    offset: start + 4,
-                    detail: `Embedded resource exceeds max_heap_item_bytes ${String(maxBytes)}; digest omitted`,
-                });
-            }
-            else {
-                dataSha256 = sha256Bytes(bytes.subarray(start + 4, start + 4 + dataLength));
-            }
-        }
-    }
-    return {
-        name,
-        flags,
-        visibility: (flags & 7) === 1 ? "public" : (flags & 7) === 2 ? "private" : "unknown",
-        implementation_token: implementationToken,
-        embedded: implementationRaw === 0,
-        declared_offset: declaredOffset,
-        data_length: dataLength,
-        data_sha256: dataSha256,
-        token: metadataToken(40, row),
-        row_offset: cursor.start,
-    };
-};
+import { METADATA_TABLE_NAMES, } from "./ManagedMetadataLayout.js";
+import { readAssembly, readAssemblyReference, readCustomAttribute, readModule, readResource, } from "./ManagedMetadataInventoryRows.js";
+import { metadataToken } from "./ManagedMetadataHeaps.js";
+import { ManagedReaderFailure } from "./ManagedReaderFailure.js";
 const safeRead = (operation, issues) => {
     try {
         return operation();
@@ -323,26 +35,31 @@ const pageRows = (descriptor, offset, limit, read) => {
 const uniqueIssues = (issues) => [
     ...new Map(issues.map((issue) => [JSON.stringify(issue), issue])).values(),
 ];
-/** Inventory bounded identity tables without CLR reflection or execution. */
-export const readManagedMetadataInventory = (bytes, layout, input, resourceDirectory) => {
-    const issues = [];
-    const module = safeRead(() => readModule(bytes, layout, input.maxHeapItemBytes), issues) ??
-        null;
-    const assembly = safeRead(() => readAssembly(bytes, layout, input.maxHeapItemBytes), issues) ?? null;
-    const references = pageRows(layout.table(35), input.referenceOffset, input.referenceLimit, (row) => safeRead(() => readAssemblyReference(bytes, layout, row, input.maxHeapItemBytes), issues));
-    const resources = pageRows(layout.table(40), input.resourceOffset, input.resourceLimit, (row) => safeRead(() => readResource(bytes, layout, row, input.maxHeapItemBytes, resourceDirectory, issues), issues));
-    const attributes = pageRows(layout.table(12), input.attributeOffset, input.attributeLimit, (row) => safeRead(() => readCustomAttribute(bytes, layout, row, input.maxHeapItemBytes), issues));
-    const referenceNames = [];
+const readPagedReferences = (bytes, layout, input, issues) => pageRows(layout.table(35), input.referenceOffset, input.referenceLimit, (row) => safeRead(() => readAssemblyReference(bytes, layout, row, input.maxHeapItemBytes), issues));
+const readPagedResources = ({ bytes, layout, input, resourceDirectory, issues, }) => pageRows(layout.table(40), input.resourceOffset, input.resourceLimit, (row) => safeRead(() => readResource({
+    bytes,
+    layout,
+    row,
+    maxBytes: input.maxHeapItemBytes,
+    directory: resourceDirectory,
+    issues,
+}), issues));
+const readPagedAttributes = (bytes, layout, input, issues) => pageRows(layout.table(12), input.attributeOffset, input.attributeLimit, (row) => safeRead(() => readCustomAttribute(bytes, layout, row, input.maxHeapItemBytes), issues));
+const collectReferenceNames = (bytes, layout, maxBytes, issues) => {
+    const names = [];
     const referenceTable = layout.table(35);
     for (let row = 1; row <= (referenceTable?.rowCount ?? 0); row += 1) {
-        const reference = safeRead(() => readAssemblyReference(bytes, layout, row, input.maxHeapItemBytes), issues);
+        const reference = safeRead(() => readAssemblyReference(bytes, layout, row, maxBytes), issues);
         if (reference !== undefined)
-            referenceNames.push(reference.name);
+            names.push(reference.name);
     }
+    return names;
+};
+const collectTargetFrameworks = (bytes, layout, maxBytes, issues) => {
     const targetFrameworks = [];
     const attributeTable = layout.table(12);
     for (let row = 1; row <= (attributeTable?.rowCount ?? 0); row += 1) {
-        const attribute = safeRead(() => readCustomAttribute(bytes, layout, row, input.maxHeapItemBytes), issues);
+        const attribute = safeRead(() => readCustomAttribute(bytes, layout, row, maxBytes), issues);
         if (attribute?.parent_token === metadataToken(32, 1) &&
             attribute.type_name ===
                 "System.Runtime.Versioning.TargetFrameworkAttribute" &&
@@ -350,10 +67,29 @@ export const readManagedMetadataInventory = (bytes, layout, input, resourceDirec
             !targetFrameworks.includes(attribute.decoded_fixed_string))
             targetFrameworks.push(attribute.decoded_fixed_string);
     }
+    return targetFrameworks;
+};
+/** Inventory bounded identity tables without CLR reflection or execution. */
+export const readManagedMetadataInventory = (bytes, layout, input, resourceDirectory) => {
+    const issues = [];
+    const module = safeRead(() => readModule(bytes, layout, input.maxHeapItemBytes), issues) ??
+        null;
+    const assembly = safeRead(() => readAssembly(bytes, layout, input.maxHeapItemBytes), issues) ?? null;
+    const references = readPagedReferences(bytes, layout, input, issues);
+    const resources = readPagedResources({
+        bytes,
+        layout,
+        input,
+        resourceDirectory,
+        issues,
+    });
+    const attributes = readPagedAttributes(bytes, layout, input, issues);
+    const referenceNames = collectReferenceNames(bytes, layout, input.maxHeapItemBytes, issues);
+    const targetFrameworks = collectTargetFrameworks(bytes, layout, input.maxHeapItemBytes, issues);
     return {
         module,
         assembly,
-        targetFrameworks: targetFrameworks.sort(),
+        targetFrameworks: [...targetFrameworks].sort(),
         referenceNames: [...new Set(referenceNames)].sort(),
         references,
         resources,

package/dist/dotnet/ManagedMetadataInventoryRows.js

@@ -0,0 +1,292 @@
+import { metadataRowOffset, } from "./ManagedMetadataLayout.js";
+import { MetadataRowCursor, metadataToken, readMetadataBlob, readMetadataGuid, readMetadataString, sha256Bytes, strongNameToken, } from "./ManagedMetadataHeaps.js";
+import { managedFailure } from "./ManagedReaderFailure.js";
+const rowCursor = ({ bytes, layout, table, row, }) => {
+    const descriptor = layout.table(table);
+    const start = metadataRowOffset(layout, table, row);
+    if (descriptor === undefined)
+        throw managedFailure("invalid-row", `metadata.${String(table)}`, "Metadata table is absent", start);
+    return new MetadataRowCursor(bytes, start, start + descriptor.rowSize, `metadata.${descriptor.name}`);
+};
+const publicKeyIdentity = (bytes, kind) => ({
+    kind: bytes.length === 0 ? "none" : kind,
+    byte_length: bytes.length,
+    sha256: bytes.length === 0 ? null : sha256Bytes(bytes),
+    token: bytes.length === 0
+        ? null
+        : kind === "public-key"
+            ? strongNameToken(bytes)
+            : bytes.length === 8
+                ? bytes.toString("hex")
+                : null,
+});
+export const readModule = (bytes, layout, maxBytes) => {
+    const table = layout.table(0);
+    if (table === undefined || table.rowCount === 0)
+        return null;
+    const cursor = rowCursor({ bytes, layout, table: 0, row: 1 });
+    const generation = cursor.readUInt16();
+    const name = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), maxBytes);
+    const mvid = readMetadataGuid(bytes, layout, cursor.readIndex(layout.guidIndexSize));
+    const encId = readMetadataGuid(bytes, layout, cursor.readIndex(layout.guidIndexSize));
+    const encBaseId = readMetadataGuid(bytes, layout, cursor.readIndex(layout.guidIndexSize));
+    return {
+        name,
+        generation,
+        mvid,
+        enc_id: encId,
+        enc_base_id: encBaseId,
+        token: metadataToken(0, 1),
+        row_offset: table.offset,
+    };
+};
+export const readAssembly = (bytes, layout, maxBytes) => {
+    const table = layout.table(32);
+    if (table === undefined || table.rowCount === 0)
+        return null;
+    const cursor = rowCursor({ bytes, layout, table: 32, row: 1 });
+    const hashAlgorithm = cursor.readUInt32();
+    const version = [
+        cursor.readUInt16(),
+        cursor.readUInt16(),
+        cursor.readUInt16(),
+        cursor.readUInt16(),
+    ].join(".");
+    const flags = cursor.readUInt32();
+    const key = readMetadataBlob(bytes, layout, cursor.readIndex(layout.blobIndexSize), maxBytes);
+    const name = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), maxBytes);
+    const culture = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), maxBytes);
+    return {
+        name,
+        version,
+        culture: culture.length === 0 ? null : culture,
+        flags,
+        hash_algorithm: hashAlgorithm,
+        public_key: publicKeyIdentity(key, (flags & 1) === 0 ? "public-key-token" : "public-key"),
+        token: metadataToken(32, 1),
+        row_offset: table.offset,
+    };
+};
+export const readAssemblyReference = (bytes, layout, row, maxBytes) => {
+    const cursor = rowCursor({ bytes, layout, table: 35, row });
+    const version = [
+        cursor.readUInt16(),
+        cursor.readUInt16(),
+        cursor.readUInt16(),
+        cursor.readUInt16(),
+    ].join(".");
+    const flags = cursor.readUInt32();
+    const keyOrToken = readMetadataBlob(bytes, layout, cursor.readIndex(layout.blobIndexSize), maxBytes);
+    const name = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), maxBytes);
+    const culture = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), maxBytes);
+    const hashValue = readMetadataBlob(bytes, layout, cursor.readIndex(layout.blobIndexSize), maxBytes);
+    return {
+        name,
+        version,
+        culture: culture.length === 0 ? null : culture,
+        flags,
+        public_key_or_token: publicKeyIdentity(keyOrToken, (flags & 1) === 0 ? "public-key-token" : "public-key"),
+        hash_value_sha256: hashValue.length === 0 ? null : sha256Bytes(hashValue),
+        hash_value_length: hashValue.length,
+        token: metadataToken(35, row),
+        row_offset: metadataRowOffset(layout, 35, row),
+    };
+};
+const codedToken = (raw, bits, tables) => {
+    if (raw === 0)
+        return null;
+    const tag = raw & (2 ** bits - 1);
+    const row = Math.floor(raw / 2 ** bits);
+    const table = tables[tag];
+    return table === undefined || row === 0 ? null : metadataToken(table, row);
+};
+const readTypeName = ({ bytes, layout, table, row, maxBytes, }) => {
+    const descriptor = layout.table(table);
+    if (descriptor === undefined || row < 1 || row > descriptor.rowCount)
+        return null;
+    const cursor = rowCursor({ bytes, layout, table, row });
+    if (table === 1)
+        cursor.readIndex(layout.codedIndexSize("ResolutionScope"));
+    else
+        cursor.readUInt32();
+    const name = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), maxBytes);
+    const namespace = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), maxBytes);
+    return namespace.length === 0 ? name : `${namespace}.${name}`;
+};
+const declaringTypeForMethod = (bytes, layout, methodRow, maxBytes) => {
+    const types = layout.table(2);
+    const methods = layout.table(6);
+    if (types === undefined || methods === undefined)
+        return null;
+    for (let row = 1; row <= types.rowCount; row += 1) {
+        const cursor = rowCursor({ bytes, layout, table: 2, row });
+        cursor.readUInt32();
+        const nameIndex = cursor.readIndex(layout.stringIndexSize);
+        const namespaceIndex = cursor.readIndex(layout.stringIndexSize);
+        cursor.readIndex(layout.codedIndexSize("TypeDefOrRef"));
+        cursor.readIndex(layout.tableIndexSize(4));
+        const methodStart = cursor.readIndex(layout.tableIndexSize(6));
+        const methodEnd = row === types.rowCount
+            ? methods.rowCount + 1
+            : methodListForType(bytes, layout, row + 1);
+        if (methodRow < methodStart || methodRow >= methodEnd)
+            continue;
+        const name = readMetadataString(bytes, layout, nameIndex, maxBytes);
+        const namespace = readMetadataString(bytes, layout, namespaceIndex, maxBytes);
+        return namespace.length === 0 ? name : `${namespace}.${name}`;
+    }
+    return null;
+};
+const methodListForType = (bytes, layout, row) => {
+    const cursor = rowCursor({ bytes, layout, table: 2, row });
+    cursor.readUInt32();
+    cursor.readIndex(layout.stringIndexSize);
+    cursor.readIndex(layout.stringIndexSize);
+    cursor.readIndex(layout.codedIndexSize("TypeDefOrRef"));
+    cursor.readIndex(layout.tableIndexSize(4));
+    return cursor.readIndex(layout.tableIndexSize(6));
+};
+const attributeTypeName = (bytes, layout, rawType, maxBytes) => {
+    const tag = rawType & 7;
+    const row = Math.floor(rawType / 8);
+    if (row === 0)
+        return null;
+    if (tag === 2)
+        return declaringTypeForMethod(bytes, layout, row, maxBytes);
+    if (tag !== 3)
+        return null;
+    const memberRefs = layout.table(10);
+    if (memberRefs === undefined || row > memberRefs.rowCount)
+        return null;
+    const cursor = rowCursor({ bytes, layout, table: 10, row });
+    const parent = cursor.readIndex(layout.codedIndexSize("MemberRefParent"));
+    const parentTag = parent & 7;
+    const parentRow = Math.floor(parent / 8);
+    if (parentTag === 0)
+        return readTypeName({ bytes, layout, table: 2, row: parentRow, maxBytes });
+    if (parentTag === 1)
+        return readTypeName({ bytes, layout, table: 1, row: parentRow, maxBytes });
+    if (parentTag === 3)
+        return declaringTypeForMethod(bytes, layout, parentRow, maxBytes);
+    return null;
+};
+const decodeCompressedLength = (blob, offset) => {
+    const first = blob[offset];
+    if (first === undefined)
+        return undefined;
+    if ((first & 0x80) === 0)
+        return { length: first, prefix: 1 };
+    if ((first & 0xc0) === 0x80 && blob[offset + 1] !== undefined)
+        return {
+            length: ((first & 0x3f) << 8) | (blob[offset + 1] ?? 0),
+            prefix: 2,
+        };
+    if ((first & 0xe0) === 0xc0 &&
+        blob[offset + 1] !== undefined &&
+        blob[offset + 2] !== undefined &&
+        blob[offset + 3] !== undefined)
+        return {
+            length: (first & 0x1f) * 0x01_00_00_00 +
+                (blob[offset + 1] ?? 0) * 0x01_00_00 +
+                (blob[offset + 2] ?? 0) * 0x0100 +
+                (blob[offset + 3] ?? 0),
+            prefix: 4,
+        };
+    return undefined;
+};
+const decodeFixedString = (blob) => {
+    if (blob.length < 3 || blob.readUInt16LE(0) !== 1 || blob[2] === 0xff)
+        return null;
+    const length = decodeCompressedLength(blob, 2);
+    if (length === undefined)
+        return null;
+    const start = 2 + length.prefix;
+    if (start > blob.length - length.length)
+        return null;
+    try {
+        return new TextDecoder("utf-8", { fatal: true }).decode(blob.subarray(start, start + length.length));
+    }
+    catch {
+        return null;
+    }
+};
+export const readCustomAttribute = (bytes, layout, row, maxBytes) => {
+    const cursor = rowCursor({ bytes, layout, table: 12, row });
+    const parentRaw = cursor.readIndex(layout.codedIndexSize("HasCustomAttribute"));
+    const typeRaw = cursor.readIndex(layout.codedIndexSize("CustomAttributeType"));
+    const value = readMetadataBlob(bytes, layout, cursor.readIndex(layout.blobIndexSize), maxBytes);
+    const parent = codedToken(parentRaw, 5, [
+        6, 4, 1, 2, 8, 9, 10, 0, 14, 23, 20, 17, 26, 27, 32, 35, 38, 39, 40, 42,
+        44, 43,
+    ]);
+    if (parent === null)
+        throw managedFailure("invalid-row", "metadata.CustomAttribute", "CustomAttribute parent coded index is invalid", cursor.start);
+    const typeName = attributeTypeName(bytes, layout, typeRaw, maxBytes);
+    return {
+        parent_token: parent,
+        constructor_token: codedToken(typeRaw, 3, [undefined, undefined, 6, 10]),
+        type_name: typeName,
+        value_length: value.length,
+        value_sha256: sha256Bytes(value),
+        decoded_fixed_string: typeName === "System.Runtime.Versioning.TargetFrameworkAttribute"
+            ? decodeFixedString(value)
+            : null,
+        token: metadataToken(12, row),
+        row_offset: cursor.start,
+    };
+};
+export const readResource = ({ bytes, layout, row, maxBytes, directory, issues, }) => {
+    const cursor = rowCursor({ bytes, layout, table: 40, row });
+    const declaredOffset = cursor.readUInt32();
+    const flags = cursor.readUInt32();
+    const name = readMetadataString(bytes, layout, cursor.readIndex(layout.stringIndexSize), maxBytes);
+    const implementationRaw = cursor.readIndex(layout.codedIndexSize("Implementation"));
+    const implementationToken = codedToken(implementationRaw, 2, [38, 35, 39]);
+    let dataLength = null;
+    let dataSha256 = null;
+    if (implementationRaw === 0) {
+        if (directory === null || declaredOffset > directory.size - 4) {
+            issues.push({
+                code: "invalid-resource",
+                scope: `metadata.ManifestResource:${metadataToken(40, row)}`,
+                offset: directory?.offset ?? null,
+                detail: "Embedded resource offset leaves the CLI resources directory",
+            });
+        }
+        else {
+            const start = directory.offset + declaredOffset;
+            dataLength = bytes.readUInt32LE(start);
+            if (dataLength > directory.size - declaredOffset - 4) {
+                issues.push({
+                    code: "invalid-resource",
+                    scope: `metadata.ManifestResource:${metadataToken(40, row)}`,
+                    offset: start,
+                    detail: "Embedded resource length leaves the CLI resources directory",
+                });
+            }
+            else if (dataLength > maxBytes) {
+                issues.push({
+                    code: "limit-exceeded",
+                    scope: `metadata.ManifestResource:${metadataToken(40, row)}`,
+                    offset: start + 4,
+                    detail: `Embedded resource exceeds max_heap_item_bytes ${String(maxBytes)}; digest omitted`,
+                });
+            }
+            else {
+                dataSha256 = sha256Bytes(bytes.subarray(start + 4, start + 4 + dataLength));
+            }
+        }
+    }
+    return {
+        name,
+        flags,
+        visibility: (flags & 7) === 1 ? "public" : (flags & 7) === 2 ? "private" : "unknown",
+        implementation_token: implementationToken,
+        embedded: implementationRaw === 0,
+        declared_offset: declaredOffset,
+        data_length: dataLength,
+        data_sha256: dataSha256,
+        token: metadataToken(40, row),
+        row_offset: cursor.start,
+    };
+};