@contrast/agentify 1.1.2 → 1.2.0

package/lib/contrast-methods.js

@@ -15,20 +15,72 @@
 
 'use strict';
 
-module.exports = function(deps) {
+module.exports = function(core) {
+  const { logger, patcher } = core;
+
+  const getOrig = (v) => patcher.unwrap(v);
+  const slice = patcher.unwrap(String.prototype.slice);
+  const toUntrackedString = (v) => slice.call(` ${v}`, 1);
+
   /**
    * Components e.g. Assess, Protect, can
    * 1) configure rewriter to add desired ContrastMethod functions to source code
    * 2) patch those functions on `contrastMethods.api` in order to add instrumentation
    */
-  const contrastMethods = deps.contrastMethods = {
+  const contrastMethods = {
     // TODO: Assess will require add'l methods
     // TODO: ESM will require add'l methods
     api: {
       eval(v) {
         return v;
       },
-      Function: deps.patcher.patch(global.Function, {
+      plus(left, right) {
+        const ret = getOrig(left) + getOrig(right);
+        return ret;
+      },
+      doubleEqual(left, right) {
+        left = getOrig(left);
+        right = getOrig(right);
+
+        return left == right;
+      },
+      notTripleEqual(left, right) {
+        left = getOrig(left);
+        right = getOrig(right);
+
+        return left !== right;
+      },
+      tripleEqual(left, right) {
+        left = getOrig(left);
+        right = getOrig(right);
+
+        return left === right;
+      },
+      notDoubleEqual(left, right) {
+        left = getOrig(left);
+        right = getOrig(right);
+
+        return left != right;
+      },
+      forceCopy(handle) {
+        // Used to force a copy of handle:
+        // https://stackoverflow.com/a/31733628
+        // This is a workaround for CONTRAST-30333, in which something we
+        // suspect is a v8 bug means that handle will otherwise be clobbered
+        // and if it was externalized, we will lose the data associated with it
+        if (typeof handle === 'string') {
+          handle = toUntrackedString(handle);
+        }
+        return handle;
+      },
+      cast: function __cast(val) {
+        return getOrig(val);
+      },
+      tag: function __contrastTag(strings) {
+        // XXX implemented in lib/assess/propagators/templates.js
+      },
+
+      Function: core.patcher.patch(global.Function, {
         name: 'global.Function',
         patchType: 'rewrite-injection'
       }),
@@ -56,9 +108,9 @@ module.exports = function(deps) {
     } catch (err) {
       // We should never expect this since the installation process is well
       // controlled, but still we should have the defensive code.
-      deps.logger.error({ err }, 'Unable to install global.ContrastMethods');
+      logger.error({ err }, 'Unable to install global.ContrastMethods');
     }
   };
 
-  return deps.contrastMethods;
+  return core.contrastMethods = contrastMethods;
 };

package/lib/index.js

@@ -22,9 +22,10 @@ const defaultOpts = {
   svcList: [
     'reporter',
     'contrastMethods',
-    'instrumentationLocks',
+    'deadzones',
     'scopes',
     'sources',
+    'assess',
     'protect',
     'depHooks',
     'rewriteHooks',
@@ -36,10 +37,8 @@ module.exports = function(deps) {
   // compose add'l local services
   require('./sources')(deps);
   require('./contrast-methods')(deps);
-  require('./instrumentation-locks')(deps);
   require('./function-hooks')(deps);
   require('./rewrite-hooks')(deps);
-  // TODO: NODE-2229
 
   /**
    * The interface is a function, which when called, will hook runMain

package/lib/rewrite-hooks.js

@@ -28,6 +28,7 @@ module.exports = function(deps) {
       Module.prototype._compile = function(content, filename) {
         let compiled;
         const { code } = deps.rewriter.rewrite(content, { filename, inject: true, wrap: true });
+
         try {
           compiled = origCompile.call(this, code, filename);
         } catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/agentify",
-  "version": "1.1.2",
+  "version": "1.2.0",
   "description": "Configures Contrast agent services and instrumentation within an application",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -16,4 +16,4 @@
   "scripts": {
     "test": "../scripts/test.sh"
   }
-}
+}

package/lib/instrumentation-locks.js

@@ -1,51 +0,0 @@
-/*
- * Copyright: 2022 Contrast Security, Inc
- * Contact: support@contrastsecurity.com
- * License: Commercial
-
- * NOTICE: This Software and the patented inventions embodied within may only be
- * used as part of Contrast Security’s commercial offerings. Even though it is
- * made available through public repositories, use of this Software is subject to
- * the applicable End User Licensing Agreement found at
- * https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
- * between Contrast Security and the End User. The Software may not be reverse
- * engineered, modified, repackaged, sold, redistributed or otherwise used in a
- * way not consistent with the End User License Agreement.
- */
-
-'use strict';
-
-const Module = require('module');
-
-module.exports = function(deps) {
-  const {
-    patcher: { patch },
-    scopes: { instrumentation }
-  } = deps;
-
-  deps.instrumentationLocks = {
-    install() {
-      const name = 'Module.prototype.require';
-      const store = {
-        name: `${name}`,
-        lock: true,
-      };
-
-      // `require` has sinks and propagators that run
-      patch(Module.prototype, 'require', {
-        name,
-        patchType: 'instrumentation-lock',
-        around(next, data) {
-          if (!instrumentation.isLocked()) {
-            return instrumentation.run(store, next);
-          }
-          return next();
-        }
-      });
-
-      // likely more to come e.g. v4 deadzones
-    }
-  };
-
-  return deps.instrumentationLocks;
-};