[GH-ISSUE #884] [Feature] Integrate WABT for WebAssembly artifact inspection and website glue evidence #362

New issue

Closed

opened 2026-10-15 18:24:17 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-15 18:24:17 +00:00

Owner

Originally created by @N0zoM1z0 on GitHub (Oct 7, 2026).
Original GitHub issue: https://github.com/morluto/rea/issues/884

Parent: #774. The requested website roadmap includes mature-tool integration for WASM.

Scope

Bring-your-own WABT adapter behind a narrow typed port and shared application workflow. Retain upstream source/release identity and exact tool profile; no host package installation or own WASM parser/decompiler.
Exact selected artifact byte identity, validation, sections, imports/exports and WAT output using maintained upstream tools.
Associate selected JavaScript glue/static references with explicit WASM artifact candidates and preserve URL/path ambiguity.
Report that WAT is decoded representation, not original source or proven runtime behavior. No implicit fetching or execution.
Modular producer parsing, process lifecycle and optional capability discovery, with equivalent CLI/MCP Evidence and actionable unavailable/malformed diagnostics.

Acceptance

Real WABT generated and validated fixtures plus invalid/truncated/custom-section/module identities. Exact output/readback, SDK schema/parity, subprocess cancellation/timeout/cleanup, packaged-artifact verification and a separate conditional real-tool lane. Private website/binary data stays untracked.

Originally created by @N0zoM1z0 on GitHub (Oct 7, 2026). Original GitHub issue: https://github.com/morluto/rea/issues/884 Parent: #774. The requested website roadmap includes mature-tool integration for WASM. ## Scope - Bring-your-own WABT adapter behind a narrow typed port and shared application workflow. Retain upstream source/release identity and exact tool profile; no host package installation or own WASM parser/decompiler. - Exact selected artifact byte identity, validation, sections, imports/exports and WAT output using maintained upstream tools. - Associate selected JavaScript glue/static references with explicit WASM artifact candidates and preserve URL/path ambiguity. - Report that WAT is decoded representation, not original source or proven runtime behavior. No implicit fetching or execution. - Modular producer parsing, process lifecycle and optional capability discovery, with equivalent CLI/MCP Evidence and actionable unavailable/malformed diagnostics. ## Acceptance Real WABT generated and validated fixtures plus invalid/truncated/custom-section/module identities. Exact output/readback, SDK schema/parity, subprocess cancellation/timeout/cleanup, packaged-artifact verification and a separate conditional real-tool lane. Private website/binary data stays untracked.

bsakaguchi

2026-10-15 18:24:17 +00:00