mirror of
https://github.com/DeBrosOfficial/orama.git
synced 2026-06-17 00:14:13 +00:00
251630a5c7
HostFunctions is a process-wide singleton (one per gateway engine). Its `invCtx` field is shared across all WASM instances. For STATELESS execution the executor sets/clears it per-call but the lock is released before WASM runs — two concurrent invocations can race on the field and one's host call can read the other's identity. Window is microseconds. For PERSISTENT WS the bug was much worse: invCtx used to be bound ONCE at instantiation and reused for the connection's lifetime. Two simultaneous persistent WS connections from different namespaces / wallets overwrote each other's invCtx, and EVERY subsequent function_invoke / GetCallerJWTSubject / GetCallerWallet / GetSecret call from inside the WASM read whatever was bound LAST. Result: silent identity leak across tenants for as long as the connections overlapped. Fix: per-call invCtx propagation through Go's context.Context. wazero passes the ctx given to api.Function.Call through to host function callbacks, so every WASM-host hop carries its own invCtx. - pkg/serverless/invocation_context.go (new): WithInvocationContext + InvocationContextFromCtx helpers using an unexported invCtxKey. - pkg/serverless/hostfunctions/invocation_context.go (new): currentInvocationContext(ctx) — ctx-attached invCtx wins over the singleton field. - All host accessors (FunctionInvoke, GetEnv, GetSecret, GetRequestID, GetCallerWallet, GetWSClientID, GetCallerClaim, GetCallerJWTSubject) now route through currentInvocationContext(ctx). - pkg/serverless/persistent/instance.go: every export call's ctx is wrapped with the per-instance invCtx before being passed to wazero. - pkg/gateway/handlers/serverless/ws_persistent_handler.go: invCtx is built per-frame and attached to ctx, not stored on a shared field. - pkg/serverless/engine.go: removed the SetInvocationContext call at InstantiatePersistent (no longer needed; ctx carries it). Stateless still uses the singleton field — its race is latent since the host-functions split and migrating it is a separate scoped change. Tests: - hostfunctions/invocation_context_test.go covers ctx-wins-over-singleton. - gateway/handlers/serverless/ws_persistent_handler_test.go covers the per-frame ctx wiring. - cli/functions/build_test.go is new coverage for the build path touched in this change. VERSION bumped to 0.122.24.
83 lines
1.8 KiB
JSON
83 lines
1.8 KiB
JSON
{
|
|
"name": "@debros/orama",
|
|
"version": "0.122.24",
|
|
"description": "TypeScript SDK for Orama Network - Database, PubSub, Cache, Storage, Vault, and more",
|
|
"type": "module",
|
|
"main": "./dist/index.js",
|
|
"types": "./dist/index.d.ts",
|
|
"license": "MIT",
|
|
"author": "DeBrosOfficial",
|
|
"keywords": [
|
|
"debros",
|
|
"network",
|
|
"sdk",
|
|
"typescript",
|
|
"database",
|
|
"rqlite",
|
|
"pubsub",
|
|
"websocket",
|
|
"cache",
|
|
"olric",
|
|
"ipfs",
|
|
"storage",
|
|
"wasm",
|
|
"serverless",
|
|
"distributed",
|
|
"gateway",
|
|
"vault",
|
|
"secrets",
|
|
"shamir",
|
|
"encryption",
|
|
"guardian"
|
|
],
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://github.com/DeBrosOfficial/network",
|
|
"directory": "sdk"
|
|
},
|
|
"bugs": {
|
|
"url": "https://github.com/DeBrosOfficial/network/issues"
|
|
},
|
|
"exports": {
|
|
".": {
|
|
"types": "./dist/index.d.ts",
|
|
"default": "./dist/index.js"
|
|
}
|
|
},
|
|
"files": [
|
|
"dist",
|
|
"src"
|
|
],
|
|
"scripts": {
|
|
"build": "tsup",
|
|
"dev": "tsup --watch",
|
|
"typecheck": "tsc --noEmit",
|
|
"lint": "eslint src tests",
|
|
"test": "vitest",
|
|
"test:e2e": "vitest run tests/e2e",
|
|
"release:npm": "npm publish --access public --registry=https://registry.npmjs.org/",
|
|
"release:gh": "npm publish --registry=https://npm.pkg.github.com"
|
|
},
|
|
"dependencies": {
|
|
"@noble/ciphers": "^0.5.3",
|
|
"@noble/hashes": "^1.4.0",
|
|
"isomorphic-ws": "^5.0.0"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "^20.0.0",
|
|
"@typescript-eslint/eslint-plugin": "^6.0.0",
|
|
"@typescript-eslint/parser": "^6.0.0",
|
|
"@vitest/coverage-v8": "^1.0.0",
|
|
"dotenv": "^17.2.3",
|
|
"eslint": "^8.0.0",
|
|
"tsup": "^8.0.0",
|
|
"typedoc": "^0.25.0",
|
|
"typescript": "^5.3.0",
|
|
"vitest": "^1.0.0"
|
|
},
|
|
"publishConfig": {
|
|
"registry": "https://registry.npmjs.org/",
|
|
"access": "public"
|
|
}
|
|
}
|