-
Notifications
You must be signed in to change notification settings - Fork 29
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* WIP: add sandboxing features * WIP: sandboxing types * Fix up support for timeouts via workers * Bump version and include docs
- Loading branch information
Showing
16 changed files
with
585 additions
and
69 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,128 @@ | ||
| import type { WASIExecutionResult, WASIContextOptions } from "@runno/wasi"; | ||
| import type { HostMessage, WorkerMessage } from "./worker.ts"; | ||
|
|
||
| function sendMessage(worker: Worker, message: WorkerMessage) { | ||
| worker.postMessage(message); | ||
| } | ||
|
|
||
| type WASIWorkerHostContext = Partial<Omit<WASIContextOptions, "stdin">>; | ||
|
|
||
| export class WASIWorkerHostKilledError extends Error {} | ||
|
|
||
| export class WASIWorkerHost { | ||
| binaryURL: string; | ||
|
|
||
| // 8kb should be big enough | ||
| stdinBuffer: SharedArrayBuffer = new SharedArrayBuffer(8 * 1024); | ||
|
|
||
| context: WASIWorkerHostContext; | ||
|
|
||
| result?: Promise<WASIExecutionResult>; | ||
| worker?: Worker; | ||
| reject?: (reason?: unknown) => void; | ||
|
|
||
| constructor(binaryURL: string, context: WASIWorkerHostContext) { | ||
| this.binaryURL = binaryURL; | ||
| this.context = context; | ||
| } | ||
|
|
||
| start() { | ||
| if (this.result) { | ||
| throw new Error("WASIWorker Host can only be started once"); | ||
| } | ||
|
|
||
| this.result = new Promise<WASIExecutionResult>((resolve, reject) => { | ||
| this.reject = reject; | ||
| this.worker = new Worker(new URL("./worker.ts", import.meta.url), { | ||
| type: "module", | ||
| }); | ||
|
|
||
| this.worker.addEventListener("message", (messageEvent) => { | ||
| const message: HostMessage = messageEvent.data; | ||
| switch (message.type) { | ||
| case "stdout": | ||
| this.context.stdout?.(message.text); | ||
| break; | ||
| case "stderr": | ||
| this.context.stderr?.(message.text); | ||
| break; | ||
| case "debug": | ||
| this.context.debug?.( | ||
| message.name, | ||
| message.args, | ||
| message.ret, | ||
| message.data | ||
| ); | ||
| break; | ||
| case "result": | ||
| resolve(message.result); | ||
| break; | ||
| case "crash": | ||
| reject(message.error); | ||
| break; | ||
| } | ||
| }); | ||
|
|
||
| sendMessage(this.worker, { | ||
| target: "client", | ||
| type: "start", | ||
| binaryURL: this.binaryURL, | ||
| stdinBuffer: this.stdinBuffer, | ||
|
|
||
| // Unfortunately can't just splat these because it includes types | ||
| // that can't be sent as a message. | ||
| args: this.context.args, | ||
| env: this.context.env, | ||
| fs: this.context.fs, | ||
| isTTY: this.context.isTTY, | ||
| }); | ||
| }).then((result) => { | ||
| this.worker?.terminate(); | ||
| return result; | ||
| }); | ||
|
|
||
| return this.result; | ||
| } | ||
|
|
||
| kill() { | ||
| if (!this.worker) { | ||
| throw new Error("WASIWorker has not started"); | ||
| } | ||
| this.worker.terminate(); | ||
| this.reject?.(new WASIWorkerHostKilledError("WASI Worker was killed")); | ||
| } | ||
|
|
||
| async pushStdin(data: string) { | ||
| const view = new DataView(this.stdinBuffer); | ||
|
|
||
| // Wait until the stdinbuffer is fully consumed at the other end | ||
| // before pushing more data on. | ||
|
|
||
| // first four bytes (Int32) is the length of the text | ||
| while (view.getInt32(0) !== 0) { | ||
| // TODO: Switch to Atomics.waitAsync when supported by firefox | ||
| await new Promise((resolve) => setTimeout(resolve, 0)); | ||
| } | ||
|
|
||
| // Store the encoded text offset by 4 bytes | ||
| const encodedText = new TextEncoder().encode(data); | ||
| const buffer = new Uint8Array(this.stdinBuffer, 4); | ||
| buffer.set(encodedText); | ||
|
|
||
| // Store how long the text is in the first 4 bytes | ||
| view.setInt32(0, encodedText.byteLength); | ||
| Atomics.notify(new Int32Array(this.stdinBuffer), 0); | ||
| } | ||
|
|
||
| async pushEOF() { | ||
| const view = new DataView(this.stdinBuffer); | ||
|
|
||
| // TODO: Switch to Atomics.waitAsync when supported by firefox | ||
| while (view.getInt32(0) !== 0) { | ||
| await new Promise((resolve) => setTimeout(resolve, 0)); | ||
| } | ||
|
|
||
| view.setInt32(0, -1); | ||
| Atomics.notify(new Int32Array(this.stdinBuffer), 0); | ||
| } | ||
| } |
Oops, something went wrong.