rea-agents 3.1.0 → 3.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +72 -95
- package/bridge/ghidra/ReaGhidraBridge.java +609 -841
- package/bridge/hopper_bridge.py +99 -344
- package/dist/application/AbortablePromise.js +6 -3
- package/dist/application/AnalysisSnapshotCache.js +0 -1
- package/dist/application/AnalysisSnapshotFiles.js +7 -7
- package/dist/application/AndroidApplicationService.js +1 -1
- package/dist/application/AppleApplicationService.js +1 -1
- package/dist/application/ArtifactExtraction.js +35 -54
- package/dist/application/ArtifactExtractionDestination.js +17 -0
- package/dist/application/ArtifactGraphConstruction.js +2 -17
- package/dist/application/ArtifactInventory/classify.js +2 -6
- package/dist/application/ArtifactInventory/hash.js +2 -20
- package/dist/application/ArtifactInventory/scanCanonical.js +8 -12
- package/dist/application/ArtifactInventory/scanReader.js +69 -51
- package/dist/application/ArtifactInventory.js +6 -14
- package/dist/application/AuthorizedArtifactInventory.js +3 -13
- package/dist/application/BinarySession.js +41 -13
- package/dist/application/BinarySessionComposition.js +0 -11
- package/dist/application/BinarySessionOpen.js +2 -1
- package/dist/application/BinarySessionRecords.js +5 -93
- package/dist/application/BinarySessionStatus.js +5 -16
- package/dist/application/BinaryTargetResolver.js +216 -0
- package/dist/application/BrowserEvidence.js +42 -58
- package/dist/application/BrowserObservationService.js +3 -6
- package/dist/application/BrowserScenarioCaptureService.js +3 -6
- package/dist/application/BrowserScenarioEvidence.js +3 -3
- package/dist/application/CallPathTracing.js +2 -36
- package/dist/application/CapabilityInventory.js +10 -15
- package/dist/application/ClientConfigurationDocument.js +27 -0
- package/dist/application/ClientRegistrationStatus.js +16 -13
- package/dist/application/CommandShimReplay.js +14 -1
- package/dist/application/DirectAnalysis.js +22 -46
- package/dist/application/DirectAnalysisStatus.js +5 -61
- package/dist/application/Doctor.js +11 -32
- package/dist/application/DoctorDiagnostics.js +1 -2
- package/dist/application/DoctorScope.js +1 -1
- package/dist/application/ElectronActiveEvidence.js +3 -8
- package/dist/application/ElectronActiveObservationService.js +3 -6
- package/dist/application/ElectronBoundaryAnalysis.js +7 -8
- package/dist/application/ElectronBoundaryGraphContext.js +1 -1
- package/dist/application/ElectronBoundaryGraphIpc.js +3 -3
- package/dist/application/ElectronBoundaryGraphNative.js +1 -2
- package/dist/application/ElectronBoundaryGraphWindows.js +6 -8
- package/dist/application/ElectronEvidence.js +4 -7
- package/dist/application/ElectronObservationService.js +5 -9
- package/dist/application/EnhancedLiteralTracing.js +42 -65
- package/dist/application/EnhancedTools.js +76 -44
- package/dist/application/EvidenceBundleCommands.js +11 -11
- package/dist/application/EvidenceBundleFiles.js +9 -15
- package/dist/application/EvidenceLedger.js +6 -41
- package/dist/application/FilesystemSnapshot.js +2 -3
- package/dist/application/InterfaceBuilderAnalysis.js +266 -0
- package/dist/application/InventoryProjectionEvidence.js +4 -2
- package/dist/application/InvestigationProviders.js +1 -1
- package/dist/application/JavaScriptApplicationEvidence.js +2 -5
- package/dist/application/JavaScriptApplicationEvidenceGraph.js +6 -10
- package/dist/application/JavaScriptApplicationService.js +6 -29
- package/dist/application/JavaScriptApplicationWorkflowEvidence.js +5 -5
- package/dist/application/JavaScriptApplicationWorkflowService.js +0 -8
- package/dist/application/JavaScriptArtifactAnalysis.js +38 -127
- package/dist/application/JavaScriptArtifactFiles.js +67 -107
- package/dist/application/JavaScriptArtifactGraphAccumulator.js +0 -7
- package/dist/application/JavaScriptArtifactGraphBuilder.js +7 -58
- package/dist/application/JavaScriptArtifactGraphBundlers.js +1 -6
- package/dist/application/JavaScriptArtifactGraphContext.js +12 -39
- package/dist/application/JavaScriptArtifactGraphDocuments.js +4 -11
- package/dist/application/JavaScriptArtifactGraphEvidence.js +0 -14
- package/dist/application/JavaScriptArtifactGraphFindings.js +3 -3
- package/dist/application/JavaScriptArtifactGraphStructure.js +16 -17
- package/dist/application/JavaScriptArtifactPathResolution.js +61 -49
- package/dist/application/JavaScriptArtifactReconstruction.js +5 -10
- package/dist/application/JavaScriptArtifactReconstructionInput.js +2 -14
- package/dist/application/JavaScriptJsonModules.js +2 -2
- package/dist/application/JavaScriptModuleRelationships.js +22 -27
- package/dist/application/JavaScriptReplayPlanning.js +9 -3
- package/dist/application/JavaScriptReplayService.js +6 -32
- package/dist/application/JavaScriptReturnShapeProjection.js +12 -42
- package/dist/application/JavaScriptRuntimeObservationEvidence.js +7 -8
- package/dist/application/JavaScriptRuntimeObservationService.js +4 -8
- package/dist/application/JavaScriptRuntimeReconciliationEvidence.js +2 -3
- package/dist/application/JavaScriptSemanticGraphBuilder.js +11 -41
- package/dist/application/JavaScriptSemanticGraphConstruction.js +5 -29
- package/dist/application/JavaScriptSemanticGraphEvidence.js +1 -1
- package/dist/application/JavaScriptSemanticGraphFingerprintProjection.js +1 -1
- package/dist/application/JavaScriptSemanticGraphFlowProjection.js +0 -13
- package/dist/application/JavaScriptSemanticGraphProjection.js +1 -3
- package/dist/application/JavaScriptSemanticTraceService.js +1 -10
- package/dist/application/JsonFiles.js +79 -0
- package/dist/application/LinuxHopper.js +11 -9
- package/dist/application/LoopbackReplay.js +26 -23
- package/dist/application/LoopbackReplayRecorder.js +29 -1
- package/dist/application/ManagedApplicationGraphService.js +1 -2
- package/dist/application/ManagedMemberComparisonService.js +11 -41
- package/dist/application/ManagedNativeVerificationService.js +1 -2
- package/dist/application/ManagedReconstructionService.js +1 -1
- package/dist/application/ManagedRuntimeCorrelationService.js +5 -8
- package/dist/application/NativeApiInspection.js +2 -7
- package/dist/application/NativeUiActionTrace.js +394 -0
- package/dist/application/NodeRuntimeCharacterizationService.js +3 -7
- package/dist/application/PermissionAuthority.js +15 -7
- package/dist/application/PermissionFailure.js +5 -0
- package/dist/application/ProcessCaptureAuthority.js +5 -7
- package/dist/application/ProcessCaptureJournal.js +3 -2
- package/dist/application/ProcessCaptureLifecycle.js +5 -12
- package/dist/application/ProcessCheckpoints.js +29 -11
- package/dist/application/ProcessCli.js +6 -16
- package/dist/application/ProcessEvidence.js +5 -7
- package/dist/application/ProcessHarness.js +52 -17
- package/dist/application/ProcessReactiveCoordinator.js +2 -4
- package/dist/application/ProcessReactiveEffects.js +9 -3
- package/dist/application/ProcessReactiveHarness.js +13 -7
- package/dist/application/ProcessSampling.js +2 -4
- package/dist/application/ProcessTimer.js +39 -0
- package/dist/application/ProjectPermissionStore.js +39 -96
- package/dist/application/RealHopperAssertions.js +20 -66
- package/dist/application/ReconstructionCoverageService.js +12 -58
- package/dist/application/ReconstructionObligationAuthority.js +2 -2
- package/dist/application/ReconstructionObligationCandidates.js +4 -4
- package/dist/application/ReconstructionObligationLedgerEvaluation.js +8 -15
- package/dist/application/ReconstructionObligationLedgerProjection.js +3 -7
- package/dist/application/ReconstructionObligationLedgerService.js +19 -38
- package/dist/application/ReferenceSourceImport.js +19 -45
- package/dist/application/ReferenceSourceImportEntries.js +2 -4
- package/dist/application/ReferenceSourceImportPolicy.js +5 -32
- package/dist/application/ReferenceSourceImportTypes.js +0 -16
- package/dist/application/RuntimeExecutableDiagnostics.js +55 -29
- package/dist/application/SessionProviderRouter.js +2 -2
- package/dist/application/Setup.js +1 -3
- package/dist/application/SetupClientConfiguration.js +22 -93
- package/dist/application/SetupRegistrationEnvironment.js +0 -7
- package/dist/application/StoreFileLock.js +119 -0
- package/dist/application/TerminalRenderer.js +2 -3
- package/dist/application/Uninstall.js +9 -14
- package/dist/application/UnknownEvidence.js +1 -1
- package/dist/artifacts/ArtifactPaths.js +2 -5
- package/dist/artifacts/ArtifactProvider.js +36 -58
- package/dist/artifacts/DirectoryArtifactReader.js +13 -8
- package/dist/artifacts/MachOSliceArtifactReader.js +1 -5
- package/dist/artifacts/NativeDmgArtifactReader.js +11 -11
- package/dist/artifacts/NibArchive.js +269 -0
- package/dist/artifacts/SafeOutputTree.js +15 -24
- package/dist/browser/BrowserProcessStartup.js +1 -2
- package/dist/browser/CdpAuthorizedMainFrame.js +16 -0
- package/dist/browser/CdpBrowserProvider.js +3 -13
- package/dist/browser/CdpCanonicalJsonDigest.js +9 -0
- package/dist/browser/CdpCaptureDocuments.js +28 -76
- package/dist/browser/CdpCaptureEventBodyShapes.js +13 -33
- package/dist/browser/CdpCaptureEventHandlers.js +22 -87
- package/dist/browser/CdpCaptureEvents.js +2 -8
- package/dist/browser/CdpCaptureStorage.js +9 -20
- package/dist/browser/CdpCaptureStorageFingerprints.js +85 -98
- package/dist/browser/CdpCaptureValues.js +21 -21
- package/dist/browser/CdpConnection.js +10 -25
- package/dist/browser/CdpElectronInspection.js +26 -50
- package/dist/browser/CdpElectronProvider.js +10 -35
- package/dist/browser/CdpElectronScriptEvents.js +8 -16
- package/dist/browser/CdpElectronScripts.js +6 -35
- package/dist/browser/CdpElectronWorkers.js +6 -10
- package/dist/browser/CdpEndpoint.js +25 -41
- package/dist/browser/CdpObservationSession.js +14 -26
- package/dist/browser/CdpPageCapture.js +34 -48
- package/dist/browser/CdpPageCaptureScripts.js +1 -19
- package/dist/browser/CdpPageCaptureWorkers.js +6 -10
- package/dist/browser/CdpSafeMetadata.js +19 -22
- package/dist/browser/CdpScreenshot.js +3 -5
- package/dist/browser/CdpTargetSession.js +1 -2
- package/dist/browser/CdpWebMcpDiscovery.js +13 -22
- package/dist/browser/ElectronFileScope.js +8 -19
- package/dist/browser/JavaScriptRuntimeScope.js +9 -14
- package/dist/browser/PlaywrightBrowserScenarioProvider.js +31 -64
- package/dist/browser/PlaywrightElectronActiveActions.js +54 -69
- package/dist/browser/PlaywrightElectronActiveProvider.js +14 -34
- package/dist/browser/PlaywrightExecutionBoundary.js +16 -5
- package/dist/browser/PlaywrightScenarioActions.js +3 -7
- package/dist/browser/PlaywrightScenarioArtifacts.js +23 -92
- package/dist/browser/PlaywrightScenarioBrowser.js +3 -5
- package/dist/browser/PlaywrightScenarioEvents.js +45 -94
- package/dist/browser/PlaywrightScenarioSession.js +14 -30
- package/dist/browser/PngVisualDiff.js +22 -14
- package/dist/browser/SensitiveTextCapture.js +0 -17
- package/dist/browser/V8InspectorCaptureProjection.js +7 -8
- package/dist/browser/V8InspectorEndpoint.js +12 -14
- package/dist/browser/V8InspectorProvider.js +20 -61
- package/dist/browser/WebSourceMapFetcher.js +56 -176
- package/dist/catalogIdentity.js +0 -54
- package/dist/cli/artifactCommands.js +49 -77
- package/dist/cli/coreAnalysisCommands.js +83 -133
- package/dist/cli/javascriptApplicationAnalysis.js +1 -9
- package/dist/cli/managedCommands.js +5 -270
- package/dist/cli/setupCommands.js +3 -12
- package/dist/cli/utilityCommands.js +7 -41
- package/dist/cli.js +0 -2
- package/dist/cliApplicationCommands.js +42 -112
- package/dist/cliBrowserAdvancedCommands.js +10 -106
- package/dist/cliBrowserCommands.js +15 -127
- package/dist/cliBrowserContext.js +30 -0
- package/dist/cliCommandNames.js +4 -5
- package/dist/cliElectronCommands.js +8 -72
- package/dist/cliEvidenceCommands.js +8 -77
- package/dist/cliJavaScriptRuntimeCommands.js +9 -91
- package/dist/cliJsonInput.js +4 -14
- package/dist/cliObservationOptions.js +11 -96
- package/dist/cliPolicyCommands.js +2 -17
- package/dist/cliProcessCommands.js +3 -3
- package/dist/cliSetup.js +0 -13
- package/dist/config/browserScenario.js +2 -2
- package/dist/config/environment.js +0 -9
- package/dist/config/parseConfig.js +1 -33
- package/dist/config/parsers.js +6 -27
- package/dist/config/passiveObservation.js +7 -77
- package/dist/config/permissions.js +0 -7
- package/dist/contracts/analysisSearchContract.js +2 -5
- package/dist/contracts/applicationToolContracts.js +56 -109
- package/dist/contracts/applicationWorkflowInputContracts.js +27 -102
- package/dist/contracts/artifactComparisonExample.js +58 -60
- package/dist/contracts/artifactToolContracts.js +20 -67
- package/dist/contracts/browserScenarioToolContracts.js +6 -51
- package/dist/contracts/browserToolContracts.js +8 -73
- package/dist/contracts/electronToolContracts.js +8 -108
- package/dist/contracts/enhancedInputs.js +23 -54
- package/dist/contracts/errorSchemas.js +0 -1
- package/dist/contracts/functionComparisonExample.js +10 -24
- package/dist/contracts/functionInstructionContract.js +1 -3
- package/dist/contracts/functionWorkflowToolContracts.js +2 -2
- package/dist/contracts/hopperMemoryContracts.js +3 -3
- package/dist/contracts/investigationExamples.js +14 -11
- package/dist/contracts/javascriptApplicationWorkflowExamples.js +12 -19
- package/dist/contracts/javascriptRuntimeObservationToolContracts.js +2 -20
- package/dist/contracts/javascriptRuntimeReconciliationExample.js +45 -12
- package/dist/contracts/managedToolContracts.js +6 -95
- package/dist/contracts/managedWorkflowExamples.js +77 -128
- package/dist/contracts/managedWorkflowToolContracts.js +51 -77
- package/dist/contracts/nativeToolContracts.js +7 -11
- package/dist/contracts/processCaptureExample.js +2 -69
- package/dist/contracts/promptContracts.js +49 -67
- package/dist/contracts/providerSelection.js +0 -1
- package/dist/contracts/reconstructionReadinessExample.js +1 -6
- package/dist/contracts/sessionStatusContract.js +1 -17
- package/dist/contracts/sessionToolSchemas.js +6 -15
- package/dist/contracts/toolContractExamples.js +11 -11
- package/dist/contracts/toolContractHelpers.js +0 -4
- package/dist/contracts/toolContracts.js +60 -71
- package/dist/contracts/toolEffects.js +5 -13
- package/dist/contracts/toolOutputSchemaGroups.js +37 -91
- package/dist/contracts/toolOutputSchemaPrimitives.js +16 -56
- package/dist/contracts/toolSchemaMetadata.js +8 -19
- package/dist/contracts/unknownContractExamples.js +0 -2
- package/dist/domain/analysisErrorPresentation.js +46 -54
- package/dist/domain/analysisErrorProjection.js +28 -37
- package/dist/domain/analysisProfile.js +3 -31
- package/dist/domain/analysisSnapshot.js +3 -12
- package/dist/domain/androidApplication.js +15 -54
- package/dist/domain/appleApplication.js +24 -67
- package/dist/domain/artifactComparison.js +11 -29
- package/dist/domain/artifactGraph.js +14 -44
- package/dist/domain/artifactInspection.js +38 -69
- package/dist/domain/artifactInventoryEvidence.js +27 -21
- package/dist/domain/binaryTarget.js +2 -221
- package/dist/domain/browserCaptureComparison.js +47 -24
- package/dist/domain/browserObservation.js +28 -193
- package/dist/domain/browserObservationSchemas.js +5 -23
- package/dist/domain/browserScenario.js +11 -14
- package/dist/domain/browserScenarioCapture.js +11 -12
- package/dist/domain/browserScenarioCaptureValues.js +146 -84
- package/dist/domain/browserScenarioDiff.js +2 -59
- package/dist/domain/browserScenarioDiffEvidence.js +51 -0
- package/dist/domain/browserScenarioDiffValues.js +21 -38
- package/dist/domain/browserScenarioValues.js +80 -109
- package/dist/domain/browserSession.js +4 -7
- package/dist/domain/bundleComparison.js +6 -32
- package/dist/domain/bytecodeProvider.js +20 -19
- package/dist/domain/callPath.js +47 -167
- package/dist/domain/callPathSchemas.js +79 -0
- package/dist/domain/changedBehavior.js +34 -60
- package/dist/domain/completionLedgerGeneration.js +8 -14
- package/dist/domain/conformancePackage.js +126 -97
- package/dist/domain/conformanceReplay.js +36 -8
- package/dist/domain/conformanceTrustGate.js +23 -14
- package/dist/domain/customProtocolCapture.js +1 -1
- package/dist/domain/electronActiveObservation.js +70 -103
- package/dist/domain/electronObservation.js +14 -80
- package/dist/domain/electronStaticAnalysisBrowser.js +36 -46
- package/dist/domain/electronStaticAnalysisIpc.js +38 -14
- package/dist/domain/electronStaticAnalysisNative.js +1 -8
- package/dist/domain/electronStaticAnalysisValues.js +10 -17
- package/dist/domain/errors.js +33 -54
- package/dist/domain/eventProcessTree.js +20 -12
- package/dist/domain/evidence.js +2 -10
- package/dist/domain/evidenceBundle.js +3 -5
- package/dist/domain/evidenceCompletionLedger.js +6 -8
- package/dist/domain/functionComparison.js +4 -14
- package/dist/domain/functionComparisonNormalization.js +4 -11
- package/dist/domain/functionComparisonResults.js +25 -15
- package/dist/domain/functionComparisonSchemas.js +49 -33
- package/dist/domain/functionDossierEvidence.js +31 -156
- package/dist/domain/hopperStartupFailure.js +1 -1
- package/dist/domain/hopperValues.js +15 -136
- package/dist/domain/interfaceBuilderGraph.js +654 -0
- package/dist/domain/javascriptApplicationAnalysis.js +8 -112
- package/dist/domain/javascriptApplicationChangeGraph.js +22 -82
- package/dist/domain/javascriptApplicationEvidenceSchemas.js +59 -47
- package/dist/domain/javascriptApplicationGraph.js +3 -13
- package/dist/domain/javascriptApplicationGraphSchemas.js +12 -34
- package/dist/domain/javascriptApplicationVersionComparison.js +26 -30
- package/dist/domain/javascriptApplicationVersionComparisonSchemas.js +123 -68
- package/dist/domain/javascriptApplicationVersionItems.js +120 -53
- package/dist/domain/javascriptApplicationVersionKeys.js +24 -11
- package/dist/domain/javascriptAstFingerprint.js +25 -58
- package/dist/domain/javascriptAstValues.js +9 -0
- package/dist/domain/javascriptExportInstrumentation.js +2 -4
- package/dist/domain/javascriptExportShapeComparison.js +6 -7
- package/dist/domain/javascriptExportShapeComparisonSchemas.js +68 -75
- package/dist/domain/javascriptExportShapeSelection.js +17 -19
- package/dist/domain/javascriptFeatureSeed.js +20 -12
- package/dist/domain/javascriptFeatureTrace.js +13 -67
- package/dist/domain/javascriptFeatureTraceSchemas.js +24 -52
- package/dist/domain/javascriptFeatureTraversal.js +1 -44
- package/dist/domain/javascriptNativeHandoff.js +1 -1
- package/dist/domain/javascriptReplay.js +24 -41
- package/dist/domain/javascriptRuntimeLoadState.js +3 -8
- package/dist/domain/javascriptRuntimeObservation.js +42 -103
- package/dist/domain/javascriptRuntimeReconciliation.js +1 -3
- package/dist/domain/javascriptRuntimeReconciliationActive.js +8 -17
- package/dist/domain/javascriptRuntimeReconciliationGraph.js +10 -23
- package/dist/domain/javascriptRuntimeReconciliationMatching.js +18 -12
- package/dist/domain/javascriptRuntimeReconciliationParsing.js +16 -45
- package/dist/domain/javascriptRuntimeReconciliationResult.js +4 -5
- package/dist/domain/javascriptRuntimeReconciliationRuntime.js +8 -12
- package/dist/domain/javascriptRuntimeReconciliationSchemas.js +33 -48
- package/dist/domain/javascriptRuntimeStaticCandidates.js +3 -3
- package/dist/domain/javascriptSemanticAnalysis.js +12 -45
- package/dist/domain/javascriptSemanticAsyncEffects.js +1 -9
- package/dist/domain/javascriptSemanticCallResolution.js +6 -16
- package/dist/domain/javascriptSemanticCalls.js +5 -32
- package/dist/domain/javascriptSemanticChildProcesses.js +1 -11
- package/dist/domain/javascriptSemanticCoverage.js +11 -0
- package/dist/domain/javascriptSemanticDataEffectHelpers.js +1 -8
- package/dist/domain/javascriptSemanticDataEffects.js +1 -11
- package/dist/domain/javascriptSemanticFingerprints.js +3 -5
- package/dist/domain/javascriptSemanticGraphSchemas.js +25 -51
- package/dist/domain/javascriptSemanticGraphSerialization.js +2 -13
- package/dist/domain/javascriptSemanticIr.js +1 -29
- package/dist/domain/javascriptSemanticObjects.js +1 -5
- package/dist/domain/javascriptSemanticPrimitives.js +2 -9
- package/dist/domain/javascriptSemanticProjection.js +0 -18
- package/dist/domain/javascriptSemanticPromises.js +9 -16
- package/dist/domain/javascriptSemanticProvenance.js +16 -19
- package/dist/domain/javascriptSemanticQuery.js +17 -139
- package/dist/domain/javascriptSemanticQueryAssessment.js +9 -37
- package/dist/domain/javascriptSemanticQueryIdentity.js +2 -23
- package/dist/domain/javascriptSemanticQuerySchemas.js +14 -107
- package/dist/domain/javascriptSemanticResources.js +1 -6
- package/dist/domain/javascriptSemanticReturns.js +10 -27
- package/dist/domain/javascriptSemanticValueTypes.js +1 -0
- package/dist/domain/javascriptSemanticValues.js +44 -62
- package/dist/domain/javascriptStaticAnalysis.js +21 -43
- package/dist/domain/javascriptStaticAnalysisBundler.js +34 -93
- package/dist/domain/javascriptStaticAnalysisCalls.js +17 -16
- package/dist/domain/javascriptStaticAnalysisFindings.js +3 -19
- package/dist/domain/javascriptStaticAnalysisHelpers.js +47 -88
- package/dist/domain/javascriptStaticAnalysisState.js +1 -5
- package/dist/domain/javascriptStaticAnalysisTypes.js +1 -0
- package/dist/domain/jsonShape.js +7 -33
- package/dist/domain/localPath.js +7 -0
- package/dist/domain/managedApplicationGraph.js +9 -41
- package/dist/domain/managedApplicationGraphCoverage.js +24 -156
- package/dist/domain/managedApplicationGraphNodes.js +10 -13
- package/dist/domain/managedArtifact.js +14 -27
- package/dist/domain/managedMemberComparison.js +90 -92
- package/dist/domain/managedMemberComparisonCoverage.js +11 -33
- package/dist/domain/managedMemberComparisonItems.js +221 -0
- package/dist/domain/managedMemberComparisonMatch.js +8 -208
- package/dist/domain/managedNativeVerification.js +3 -6
- package/dist/domain/managedNativeVerificationMatch.js +55 -59
- package/dist/domain/managedNativeVerificationSchemas.js +83 -47
- package/dist/domain/managedReconstruction.js +19 -23
- package/dist/domain/managedRuntimeCorrelation.js +6 -9
- package/dist/domain/nativeApiBoundary.js +2 -7
- package/dist/domain/nativeInspection.js +0 -2
- package/dist/domain/nativeInvestigationGraph.js +351 -0
- package/dist/domain/nativeValueFlow.js +61 -0
- package/dist/domain/nodeRuntimeCharacterization.js +1 -5
- package/dist/domain/objcSwiftMetadata.js +254 -0
- package/dist/domain/peInspection.js +1 -1
- package/dist/domain/permissionPolicy.js +13 -0
- package/dist/domain/processCapture.js +76 -113
- package/dist/domain/processCaptureExample.js +68 -0
- package/dist/domain/processCaptureParsing.js +21 -0
- package/dist/domain/processCaptureReactiveSchema.js +68 -0
- package/dist/domain/processCaptureValidation.js +1 -7
- package/dist/domain/processComparison.js +3 -12
- package/dist/domain/processReactiveMatching.js +29 -50
- package/dist/domain/processReactiveRuntime.js +4 -8
- package/dist/domain/processReactiveScenario.js +28 -94
- package/dist/domain/processReactiveScenarioPreflight.js +5 -30
- package/dist/domain/processReactiveTransition.js +33 -18
- package/dist/domain/processScenario.js +56 -90
- package/dist/domain/processTraceComparison.js +0 -8
- package/dist/domain/processTraceEvaluation.js +14 -4
- package/dist/domain/processTraceSpecification.js +11 -17
- package/dist/domain/protocolCapture.js +3 -3
- package/dist/domain/reconstructionCoverage.js +62 -129
- package/dist/domain/reconstructionCoverageEvaluation.js +17 -17
- package/dist/domain/reconstructionObligationLedgerSchemas.js +45 -72
- package/dist/domain/reconstructionReadiness.js +1 -2
- package/dist/domain/reconstructionReadinessSchemas.js +36 -38
- package/dist/domain/reconstructionUnknowns.js +3 -3
- package/dist/domain/reconstructionVerification.js +13 -47
- package/dist/domain/reconstructionVerificationSchemas.js +50 -38
- package/dist/domain/referenceSourceGraph.js +53 -61
- package/dist/domain/referenceSourceImportParsing.js +1 -5
- package/dist/domain/replayMachine.js +19 -31
- package/dist/domain/replayMachineRun.js +15 -63
- package/dist/domain/replayMachineRuntime.js +41 -41
- package/dist/domain/replayMachineValues.js +84 -0
- package/dist/domain/residualUnknown.js +25 -30
- package/dist/domain/runtimeCharacterization.js +15 -16
- package/dist/domain/runtimeIdentification.js +48 -47
- package/dist/domain/sourceToBundleComparison.js +9 -85
- package/dist/domain/sourceToBundleComparisonSchemas.js +17 -42
- package/dist/domain/sourceToBundleSignals.js +4 -15
- package/dist/domain/staticRuntimeCorrelation.js +37 -49
- package/dist/domain/symbolAnalysis.js +10 -19
- package/dist/domain/unicodeCodePointOrder.js +12 -0
- package/dist/domain/webBundleAnalysis.js +70 -99
- package/dist/domain/webBundleAnalyzer.js +2 -4
- package/dist/domain/webBundleAnalyzerAst.js +0 -13
- package/dist/domain/webBundleAnalyzerInspection.js +26 -52
- package/dist/domain/webBundleAnalyzerResult.js +7 -24
- package/dist/domain/webCaptureDiff.js +33 -73
- package/dist/domain/webCaptureDiffSchemas.js +86 -0
- package/dist/domain/webContentArtifact.js +1 -10
- package/dist/domain/webMcpDiscovery.js +3 -14
- package/dist/domain/webScreenshot.js +58 -34
- package/dist/domain/zipPackageFormat.js +7 -0
- package/dist/dotnet/ManagedArtifactInspector.js +17 -50
- package/dist/dotnet/ManagedMemberInspector.js +27 -58
- package/dist/dotnet/ManagedMemberInspectorCore.js +14 -51
- package/dist/dotnet/ManagedMemberInstructionDecoder.js +2 -2
- package/dist/dotnet/ManagedMemberRows.js +16 -16
- package/dist/dotnet/ManagedMetadataHeaps.js +26 -8
- package/dist/dotnet/ManagedMetadataInventory.js +21 -30
- package/dist/dotnet/ManagedMetadataInventoryRows.js +57 -63
- package/dist/dotnet/ManagedMetadataLayout.js +3 -5
- package/dist/dotnet/ManagedMethodBodyReader.js +5 -30
- package/dist/dotnet/ManagedNativeBoundaryHelpers.js +19 -49
- package/dist/dotnet/ManagedNativeBoundaryInspector.js +13 -41
- package/dist/dotnet/ManagedPeReader.js +2 -2
- package/dist/dotnet/ManagedStaticProvider.js +13 -71
- package/dist/generatedMcpToolCatalog.js +1 -1
- package/dist/generatedPackageMetadata.js +1 -1
- package/dist/ghidra/GhidraAnalysisProfile.js +3 -8
- package/dist/ghidra/GhidraClient.js +4 -12
- package/dist/ghidra/GhidraClientWire.js +9 -5
- package/dist/ghidra/GhidraDefaults.js +0 -18
- package/dist/ghidra/GhidraDiagnostics.js +0 -2
- package/dist/ghidra/GhidraDoctor.js +16 -12
- package/dist/ghidra/GhidraFunctionValues.js +65 -108
- package/dist/ghidra/GhidraInstallation.js +98 -42
- package/dist/ghidra/GhidraInventoryValues.js +16 -85
- package/dist/ghidra/GhidraLauncher.js +0 -8
- package/dist/ghidra/GhidraProvider.js +15 -22
- package/dist/ghidra/GhidraProviderCapabilities.js +6 -47
- package/dist/ghidra/GhidraRequestQueue.js +6 -30
- package/dist/ghidra/GhidraResponseBuffer.js +1 -7
- package/dist/ghidra/GhidraSessionValues.js +0 -2
- package/dist/ghidra/GhidraTransport.js +4 -7
- package/dist/ghidra/protocol.js +2 -2
- package/dist/hopper/BridgeLauncher.js +112 -36
- package/dist/hopper/HopperAnalysisProfile.js +1 -1
- package/dist/hopper/HopperCleanup.js +6 -3
- package/dist/hopper/HopperClient.js +4 -7
- package/dist/hopper/HopperProcessDiagnostic.js +2 -2
- package/dist/hopper/HopperProvider.js +0 -16
- package/dist/hopper/HopperRequestQueue.js +21 -40
- package/dist/hopper/HopperResponseStream.js +1 -9
- package/dist/hopper/HopperSessionValues.js +3 -2
- package/dist/hopper/HopperTargetLease.js +119 -0
- package/dist/hopper/LinuxPrivateDisplayDiagnostic.js +24 -31
- package/dist/hopper/LinuxPrivateDisplayProbe.js +5 -16
- package/dist/hopper/protocol.js +6 -4
- package/dist/main/reload.js +0 -3
- package/dist/main/shutdown.js +1 -1
- package/dist/main/state.js +0 -9
- package/dist/main/transport.js +0 -5
- package/dist/mcpDoctor.js +25 -45
- package/dist/native/CommandRunner.js +18 -25
- package/dist/native/NativeMacOSProvider.js +13 -38
- package/dist/native/NativeMachoInspection.js +1 -1
- package/dist/process/BoundedFileBytes.js +17 -0
- package/dist/process/ExecFileOutput.js +11 -0
- package/dist/process/PendingOperations.js +8 -6
- package/dist/process/ProcessOwnership.js +3 -2
- package/dist/process/ProcessOwnershipObservation.js +0 -1
- package/dist/process/ProviderProcess.js +7 -28
- package/dist/reference/ReferenceSourceReader.js +8 -24
- package/dist/reference/ReferenceSourceReaderEntries.js +11 -39
- package/dist/reference/ReferenceSourceReaderFile.js +13 -31
- package/dist/reference/ReferenceSourceReaderPaths.js +3 -18
- package/dist/reference/ReferenceSourceReaderValidate.js +3 -6
- package/dist/replay/JavaScriptReplayWorker.js +3 -5
- package/dist/replay/LinuxJavaScriptReplayRunner.js +33 -29
- package/dist/replay/LinuxJavaScriptReplaySandbox.js +0 -19
- package/dist/replay/LinuxRuntimeClosure.js +1 -3
- package/dist/replay/ReplayOutcome.js +1 -3
- package/dist/replay/ReplayProcessLifecycle.js +32 -7
- package/dist/replay/ReplaySeccompFile.js +29 -0
- package/dist/replay/ReplayWorkerProtocol.js +0 -2
- package/dist/replay/SystemJavaScriptReplayHost.js +45 -74
- package/dist/server/ProcessCaptureElicitation.js +4 -8
- package/dist/server/createServer.js +6 -44
- package/dist/server/promptCompletion.js +37 -61
- package/dist/server/recordDerivedEvidence.js +1 -1
- package/dist/server/registerApplicationTools/characterization.js +4 -8
- package/dist/server/registerApplicationTools/compareExportShapes.js +5 -10
- package/dist/server/registerApplicationTools/compareSourceToBundle.js +6 -10
- package/dist/server/registerApplicationTools/compareVersions.js +5 -10
- package/dist/server/registerApplicationTools/controlledReplay.js +3 -5
- package/dist/server/registerApplicationTools/coverage.js +6 -71
- package/dist/server/registerApplicationTools/helpers.js +1 -13
- package/dist/server/registerApplicationTools/obligationLedger.js +3 -2
- package/dist/server/registerApplicationTools/traceFeature.js +5 -9
- package/dist/server/registerApplicationTools/traceSemantics.js +5 -8
- package/dist/server/registerApplicationTools.js +0 -2
- package/dist/server/registerArtifactComparisonTool.js +23 -27
- package/dist/server/registerBrowserScenarioTool.js +4 -4
- package/dist/server/registerBrowserTools.js +5 -8
- package/dist/server/registerBundleComparisonTool.js +5 -7
- package/dist/server/registerCloseLifecycleTool.js +2 -16
- package/dist/server/registerElectronTools.js +10 -29
- package/dist/server/registerEnhancedTools.js +10 -11
- package/dist/server/registerEvidenceTools.js +15 -22
- package/dist/server/registerFunctionComparisonTool.js +30 -25
- package/dist/server/registerInvestigationTools/helpers.js +3 -32
- package/dist/server/registerInvestigationTools.js +20 -116
- package/dist/server/registerJavaScriptRuntimeObservationTools.js +6 -4
- package/dist/server/registerManagedWorkflowTools/compareManagedMembers.js +15 -17
- package/dist/server/registerManagedWorkflowTools/evidence.js +19 -35
- package/dist/server/registerManagedWorkflowTools/importManagedReconstruction.js +3 -8
- package/dist/server/registerManagedWorkflowTools/planManagedRuntimeCorrelation.js +3 -8
- package/dist/server/registerManagedWorkflowTools/projectManagedApplicationGraph.js +10 -14
- package/dist/server/registerManagedWorkflowTools/verifyManagedNativeBoundaries.js +9 -15
- package/dist/server/registerOfficialTools.js +1 -43
- package/dist/server/registerProcessComparisonTool.js +33 -23
- package/dist/server/registerPrompts.js +19 -17
- package/dist/server/registerSessionRecordTools.js +10 -156
- package/dist/server/registerSessionStatusTool.js +6 -69
- package/dist/server/registerSessionTools.js +10 -51
- package/dist/server/sessionAvailabilityPolicy.js +0 -2
- package/dist/server/sessionEvidence.js +9 -15
- package/dist/server/sessionToolPolicies.js +0 -8
- package/dist/server/toolResult.js +14 -50
- package/dist/serverIdentity.js +0 -20
- package/install.sh +1 -1
- package/package.json +11 -7
- package/scripts/electron-active-hook.cjs +23 -55
- package/scripts/hopper-demo-x11.py +13 -32
- package/skills/reverse-engineer-anything/SKILL.md +47 -12
- package/skills/reverse-engineer-anything/references/evidence-workflows.md +6 -4
- package/skills/reverse-engineer-anything/references/javascript-applications.md +13 -13
- package/skills/reverse-engineer-anything/references/native-and-artifacts.md +12 -8
- package/dist/application/ApplicationWorkflowEvidenceResolver.js +0 -188
- package/dist/application/BoundedJsonFiles.js +0 -86
- package/dist/application/CrossVersionInventory.js +0 -129
- package/dist/application/CrossVersionInvestigation.js +0 -301
- package/dist/application/CrossVersionInvestigationCollections.js +0 -23
- package/dist/application/CrossVersionInvestigationEvidence.js +0 -64
- package/dist/application/CrossVersionInvestigationReplay.js +0 -170
- package/dist/application/DeferredFileAuthorization.js +0 -61
- package/dist/application/DoctorProjection.js +0 -43
- package/dist/application/EnhancedToolPagination.js +0 -22
- package/dist/application/EvidenceReferenceResolver.js +0 -26
- package/dist/application/InvestigationWorkspaceStore.js +0 -204
- package/dist/application/ProcessPairedExperiment.js +0 -72
- package/dist/application/ReconstructionCoverageWorkspaceStore.js +0 -31
- package/dist/application/ReconstructionReadinessService.js +0 -48
- package/dist/cliInvestigationCommands.js +0 -173
- package/dist/domain/boundedCartesianProjection.js +0 -15
- package/dist/domain/investigationWorkspace.js +0 -347
- package/dist/domain/jsonLimits.js +0 -26
- package/dist/domain/knownPageCoverage.js +0 -29
- package/dist/domain/processPairedExperiment.js +0 -128
- package/dist/server/javascriptApplicationResult.js +0 -106
- package/dist/server/permissionFailure.js +0 -12
- package/dist/server/registerApplicationTools/readiness.js +0 -50
- package/dist/server/registerEvidenceResources.js +0 -315
- package/dist/server/registerJavaScriptApplicationGraphResource.js +0 -65
- package/dist/server/registerReconstructionObligationLedgerResource.js +0 -32
- package/dist/server/registerReconstructionReadinessResource.js +0 -32
|
@@ -1,347 +0,0 @@
|
|
|
1
|
-
import { createHash } from "node:crypto";
|
|
2
|
-
import canonicalize from "canonicalize";
|
|
3
|
-
import { z } from "zod";
|
|
4
|
-
import { evidenceBundleSchema, parseEvidenceBundle, } from "./evidenceBundle.js";
|
|
5
|
-
const digestSchema = z.string().regex(/^[a-f0-9]{64}$/u);
|
|
6
|
-
const evidenceIdSchema = z.string().regex(/^ev_[a-f0-9]{64}$/u);
|
|
7
|
-
const artifactFormatSchema = evidenceBundleSchema.shape.artifacts.element.shape.format;
|
|
8
|
-
/** Bounded controls for one automatic, provider-neutral artifact comparison. */
|
|
9
|
-
const investigationRunOptionsSchema = z.object({
|
|
10
|
-
max_entries: z.number().int().min(1).max(50_000).default(10_000),
|
|
11
|
-
max_total_bytes: z
|
|
12
|
-
.number()
|
|
13
|
-
.int()
|
|
14
|
-
.min(1)
|
|
15
|
-
.max(Number.MAX_SAFE_INTEGER)
|
|
16
|
-
.default(1_073_741_824),
|
|
17
|
-
max_entry_bytes: z
|
|
18
|
-
.number()
|
|
19
|
-
.int()
|
|
20
|
-
.min(1)
|
|
21
|
-
.max(Number.MAX_SAFE_INTEGER)
|
|
22
|
-
.default(268_435_456),
|
|
23
|
-
max_compression_ratio: z.number().min(1).max(100_000).default(1_000),
|
|
24
|
-
max_depth: z.number().int().min(0).max(100).default(20),
|
|
25
|
-
max_path_bytes: z.number().int().min(1).max(65_535).default(4_096),
|
|
26
|
-
page_size: z.number().int().min(1).max(500).default(500),
|
|
27
|
-
change_limit: z.number().int().min(1).max(500).default(500),
|
|
28
|
-
});
|
|
29
|
-
const DEFAULT_INVESTIGATION_RUN_OPTIONS = {
|
|
30
|
-
max_entries: 10_000,
|
|
31
|
-
max_total_bytes: 1_073_741_824,
|
|
32
|
-
max_entry_bytes: 268_435_456,
|
|
33
|
-
max_compression_ratio: 1_000,
|
|
34
|
-
max_depth: 20,
|
|
35
|
-
max_path_bytes: 4_096,
|
|
36
|
-
page_size: 500,
|
|
37
|
-
change_limit: 500,
|
|
38
|
-
};
|
|
39
|
-
/** Explicit write approval and two local versions for an automatic run. */
|
|
40
|
-
const crossVersionInvestigationFacts = {
|
|
41
|
-
approved: z.literal(true),
|
|
42
|
-
workspace_path: z.string().min(1).max(4_096),
|
|
43
|
-
workspace_name: z.string().trim().min(1).max(200).default("default"),
|
|
44
|
-
expected_workspace_revision: z.number().int().min(1).optional(),
|
|
45
|
-
replay_run_id: z
|
|
46
|
-
.string()
|
|
47
|
-
.regex(/^run_[a-f0-9]{64}$/u)
|
|
48
|
-
.optional(),
|
|
49
|
-
left_path: z.string().min(1).max(4_096),
|
|
50
|
-
right_path: z.string().min(1).max(4_096),
|
|
51
|
-
options: investigationRunOptionsSchema.default(DEFAULT_INVESTIGATION_RUN_OPTIONS),
|
|
52
|
-
};
|
|
53
|
-
export const crossVersionInvestigationInputSchema = z.union([
|
|
54
|
-
z.object({
|
|
55
|
-
...crossVersionInvestigationFacts,
|
|
56
|
-
integrity_policy: z.literal("fail").default("fail"),
|
|
57
|
-
integrity_continue_approved: z.literal(false).default(false),
|
|
58
|
-
max_integrity_mismatches: z.number().int().min(1).max(100).default(10),
|
|
59
|
-
}),
|
|
60
|
-
z.object({
|
|
61
|
-
...crossVersionInvestigationFacts,
|
|
62
|
-
integrity_policy: z.literal("record-and-continue"),
|
|
63
|
-
integrity_continue_approved: z.literal(true),
|
|
64
|
-
max_integrity_mismatches: z.number().int().min(1).max(100).default(10),
|
|
65
|
-
}),
|
|
66
|
-
]);
|
|
67
|
-
const targetSchema = z.object({
|
|
68
|
-
root_sha256: digestSchema,
|
|
69
|
-
graph_sha256: digestSchema,
|
|
70
|
-
manifest_id: z.string().regex(/^agm_[a-f0-9]{64}$/u),
|
|
71
|
-
format: artifactFormatSchema,
|
|
72
|
-
});
|
|
73
|
-
const stageSchema = z.enum([
|
|
74
|
-
"inventory_left",
|
|
75
|
-
"inventory_right",
|
|
76
|
-
"compare_artifacts",
|
|
77
|
-
"find_changed_behavior",
|
|
78
|
-
]);
|
|
79
|
-
const investigationRunBaseSchema = z.object({
|
|
80
|
-
schema_version: z.literal(1),
|
|
81
|
-
run_id: z.string().regex(/^run_[a-f0-9]{64}$/u),
|
|
82
|
-
request_sha256: digestSchema,
|
|
83
|
-
left: targetSchema,
|
|
84
|
-
right: targetSchema,
|
|
85
|
-
options: investigationRunOptionsSchema,
|
|
86
|
-
integrity_policy: z.enum(["fail", "record-and-continue"]),
|
|
87
|
-
integrity_continue_approved: z.boolean(),
|
|
88
|
-
max_integrity_mismatches: z.number().int().min(1).max(100),
|
|
89
|
-
status: z.enum(["running", "complete"]),
|
|
90
|
-
completed_stages: z.array(stageSchema).max(4),
|
|
91
|
-
left_inventory_evidence_ids: z.array(evidenceIdSchema).min(1).max(100),
|
|
92
|
-
right_inventory_evidence_ids: z.array(evidenceIdSchema).min(1).max(100),
|
|
93
|
-
comparison_evidence_id: evidenceIdSchema.nullable(),
|
|
94
|
-
result_evidence_id: evidenceIdSchema.nullable(),
|
|
95
|
-
limitations: z.array(z.string().max(4_096)).max(100),
|
|
96
|
-
});
|
|
97
|
-
export const investigationRunSchema = z
|
|
98
|
-
.union([
|
|
99
|
-
investigationRunBaseSchema.extend({
|
|
100
|
-
legacy_request_identity: z.literal(true),
|
|
101
|
-
}),
|
|
102
|
-
investigationRunBaseSchema,
|
|
103
|
-
])
|
|
104
|
-
.superRefine((run, context) => {
|
|
105
|
-
if (!("legacy_request_identity" in run))
|
|
106
|
-
return;
|
|
107
|
-
const legacyIdentity = createLegacyInvestigationRunIdentity(run);
|
|
108
|
-
if (run.integrity_policy !== "fail" ||
|
|
109
|
-
run.integrity_continue_approved ||
|
|
110
|
-
run.max_integrity_mismatches !== 10 ||
|
|
111
|
-
run.run_id !== legacyIdentity.runId ||
|
|
112
|
-
run.request_sha256 !== legacyIdentity.requestSha256)
|
|
113
|
-
context.addIssue({
|
|
114
|
-
code: "custom",
|
|
115
|
-
path: ["legacy_request_identity"],
|
|
116
|
-
message: "Legacy request identity is valid only for migrated strict runs",
|
|
117
|
-
});
|
|
118
|
-
});
|
|
119
|
-
export const investigationRunSummarySchema = z.object({
|
|
120
|
-
schema_version: z.literal(1),
|
|
121
|
-
workspace_id: z.string().regex(/^ws_[a-f0-9]{64}$/u),
|
|
122
|
-
run_id: z.string().regex(/^run_[a-f0-9]{64}$/u),
|
|
123
|
-
left_manifest_id: z.string().regex(/^agm_[a-f0-9]{64}$/u),
|
|
124
|
-
right_manifest_id: z.string().regex(/^agm_[a-f0-9]{64}$/u),
|
|
125
|
-
inventory_evidence_count: z.number().int().min(2).max(200),
|
|
126
|
-
comparison_evidence_id: evidenceIdSchema,
|
|
127
|
-
limitations: z.array(z.string().max(4_096)).max(100),
|
|
128
|
-
});
|
|
129
|
-
/** Durable schema for one revisioned cross-version investigation workspace. */
|
|
130
|
-
export const investigationWorkspaceSchema = z.object({
|
|
131
|
-
workspace_version: z.literal(1),
|
|
132
|
-
workspace_id: z.string().regex(/^ws_[a-f0-9]{64}$/u),
|
|
133
|
-
name: z.string().trim().min(1).max(200),
|
|
134
|
-
revision: z.number().int().min(1),
|
|
135
|
-
previous_revision_digest: z
|
|
136
|
-
.string()
|
|
137
|
-
.regex(/^wrev_[a-f0-9]{64}$/u)
|
|
138
|
-
.nullable(),
|
|
139
|
-
revision_digest: z.string().regex(/^wrev_[a-f0-9]{64}$/u),
|
|
140
|
-
bundle: evidenceBundleSchema,
|
|
141
|
-
runs: z.array(investigationRunSchema).max(1_000),
|
|
142
|
-
});
|
|
143
|
-
const legacyInvestigationRunSchema = investigationRunBaseSchema
|
|
144
|
-
.omit({
|
|
145
|
-
integrity_policy: true,
|
|
146
|
-
integrity_continue_approved: true,
|
|
147
|
-
max_integrity_mismatches: true,
|
|
148
|
-
})
|
|
149
|
-
.strict();
|
|
150
|
-
const legacyInvestigationWorkspaceSchema = investigationWorkspaceSchema
|
|
151
|
-
.extend({
|
|
152
|
-
runs: z.array(legacyInvestigationRunSchema).max(1_000),
|
|
153
|
-
})
|
|
154
|
-
.strict();
|
|
155
|
-
/** Derive a stable run identity from content commitments and bounded controls. */
|
|
156
|
-
export const createInvestigationRunIdentity = (input) => {
|
|
157
|
-
const requestSha256 = digestCanonical({
|
|
158
|
-
schema: "rea.cross-version-investigation-request/v1",
|
|
159
|
-
left: input.left,
|
|
160
|
-
right: input.right,
|
|
161
|
-
options: input.options,
|
|
162
|
-
integrity: {
|
|
163
|
-
policy: input.integrity_policy,
|
|
164
|
-
approved: input.integrity_continue_approved,
|
|
165
|
-
max_mismatches: input.max_integrity_mismatches,
|
|
166
|
-
},
|
|
167
|
-
});
|
|
168
|
-
return { runId: `run_${requestSha256}`, requestSha256 };
|
|
169
|
-
};
|
|
170
|
-
/** Build the first canonical workspace revision. */
|
|
171
|
-
export const createInvestigationWorkspace = (name, bundle, runs) => buildWorkspace({
|
|
172
|
-
workspaceId: `ws_${digestCanonical({ schema: "rea.workspace/v1", name })}`,
|
|
173
|
-
name,
|
|
174
|
-
revision: 1,
|
|
175
|
-
previousRevisionDigest: null,
|
|
176
|
-
bundle,
|
|
177
|
-
runs,
|
|
178
|
-
});
|
|
179
|
-
/** Create the next immutable workspace revision. */
|
|
180
|
-
export const reviseInvestigationWorkspace = (current, bundle, runs) => buildWorkspace({
|
|
181
|
-
workspaceId: current.workspace_id,
|
|
182
|
-
name: current.name,
|
|
183
|
-
revision: current.revision + 1,
|
|
184
|
-
previousRevisionDigest: current.revision_digest,
|
|
185
|
-
bundle,
|
|
186
|
-
runs,
|
|
187
|
-
});
|
|
188
|
-
/** Parse a workspace and verify identities, revision digest, and references. */
|
|
189
|
-
export const parseInvestigationWorkspace = (input) => {
|
|
190
|
-
if (isLegacyWorkspace(input))
|
|
191
|
-
return migrateLegacyWorkspace(input);
|
|
192
|
-
const parsed = investigationWorkspaceSchema.parse(input);
|
|
193
|
-
const bundle = parseEvidenceBundle(parsed.bundle);
|
|
194
|
-
const canonical = buildWorkspace({
|
|
195
|
-
workspaceId: parsed.workspace_id,
|
|
196
|
-
name: parsed.name,
|
|
197
|
-
revision: parsed.revision,
|
|
198
|
-
previousRevisionDigest: parsed.previous_revision_digest,
|
|
199
|
-
bundle,
|
|
200
|
-
runs: parsed.runs,
|
|
201
|
-
});
|
|
202
|
-
if (parsed.workspace_id !== workspaceIdFor(parsed.name))
|
|
203
|
-
throw new TypeError("Investigation workspace ID does not match its name");
|
|
204
|
-
if (parsed.revision_digest !== canonical.revision_digest)
|
|
205
|
-
throw new TypeError("Investigation workspace revision digest is invalid");
|
|
206
|
-
if (JSON.stringify(parsed) !== JSON.stringify(canonical))
|
|
207
|
-
throw new TypeError("Investigation workspace is not canonical");
|
|
208
|
-
validateRunReferences(canonical);
|
|
209
|
-
return canonical;
|
|
210
|
-
};
|
|
211
|
-
/** Encode a validated workspace as byte-stable canonical JSON. */
|
|
212
|
-
export const serializeInvestigationWorkspace = (workspace) => canonicalJson(parseInvestigationWorkspace(workspace));
|
|
213
|
-
const buildWorkspace = (input) => {
|
|
214
|
-
const runs = [...input.runs]
|
|
215
|
-
.map((run) => investigationRunSchema.parse(run))
|
|
216
|
-
.sort((left, right) => left.run_id.localeCompare(right.run_id));
|
|
217
|
-
assertUnique(runs.map(({ run_id: id }) => id), "investigation run ID");
|
|
218
|
-
const semantic = {
|
|
219
|
-
workspace_version: 1,
|
|
220
|
-
workspace_id: input.workspaceId,
|
|
221
|
-
name: input.name,
|
|
222
|
-
revision: input.revision,
|
|
223
|
-
previous_revision_digest: input.previousRevisionDigest,
|
|
224
|
-
bundle: parseEvidenceBundle(input.bundle),
|
|
225
|
-
runs,
|
|
226
|
-
};
|
|
227
|
-
return investigationWorkspaceSchema.parse({
|
|
228
|
-
...semantic,
|
|
229
|
-
revision_digest: `wrev_${digestCanonical(semantic)}`,
|
|
230
|
-
});
|
|
231
|
-
};
|
|
232
|
-
const validateRunReferences = (workspace) => {
|
|
233
|
-
const evidenceIds = new Set(workspace.bundle.records.map(({ evidence_id: id }) => id));
|
|
234
|
-
for (const run of workspace.runs) {
|
|
235
|
-
const expectedIdentity = createInvestigationRunIdentity(run);
|
|
236
|
-
const legacyIdentity = createLegacyInvestigationRunIdentity(run);
|
|
237
|
-
if ((run.run_id !== expectedIdentity.runId ||
|
|
238
|
-
run.request_sha256 !== expectedIdentity.requestSha256) &&
|
|
239
|
-
(!("legacy_request_identity" in run) ||
|
|
240
|
-
run.integrity_policy !== "fail" ||
|
|
241
|
-
run.integrity_continue_approved ||
|
|
242
|
-
run.max_integrity_mismatches !== 10 ||
|
|
243
|
-
run.run_id !== legacyIdentity.runId ||
|
|
244
|
-
run.request_sha256 !== legacyIdentity.requestSha256))
|
|
245
|
-
throw new TypeError("Investigation run identity is invalid");
|
|
246
|
-
validateRunStages(run);
|
|
247
|
-
const references = [
|
|
248
|
-
...run.left_inventory_evidence_ids,
|
|
249
|
-
...run.right_inventory_evidence_ids,
|
|
250
|
-
...(run.comparison_evidence_id === null
|
|
251
|
-
? []
|
|
252
|
-
: [run.comparison_evidence_id]),
|
|
253
|
-
...(run.result_evidence_id === null ? [] : [run.result_evidence_id]),
|
|
254
|
-
];
|
|
255
|
-
if (references.some((evidenceId) => !evidenceIds.has(evidenceId)))
|
|
256
|
-
throw new TypeError("Investigation run references missing Evidence");
|
|
257
|
-
}
|
|
258
|
-
};
|
|
259
|
-
/** Derive the pre-integrity-policy run identity for strict workspace migration. */
|
|
260
|
-
export const createLegacyInvestigationRunIdentity = (input) => {
|
|
261
|
-
const requestSha256 = digestCanonical({
|
|
262
|
-
schema: "rea.cross-version-investigation-request/v1",
|
|
263
|
-
left: input.left,
|
|
264
|
-
right: input.right,
|
|
265
|
-
options: input.options,
|
|
266
|
-
});
|
|
267
|
-
return { runId: `run_${requestSha256}`, requestSha256 };
|
|
268
|
-
};
|
|
269
|
-
const isLegacyWorkspace = (input) => {
|
|
270
|
-
if (typeof input !== "object" || input === null || !("runs" in input))
|
|
271
|
-
return false;
|
|
272
|
-
const runs = input.runs;
|
|
273
|
-
return (Array.isArray(runs) &&
|
|
274
|
-
runs.some((run) => typeof run === "object" && run !== null && !("integrity_policy" in run)));
|
|
275
|
-
};
|
|
276
|
-
const migrateLegacyWorkspace = (input) => {
|
|
277
|
-
const parsed = legacyInvestigationWorkspaceSchema.parse(input);
|
|
278
|
-
const bundle = parseEvidenceBundle(parsed.bundle);
|
|
279
|
-
const runs = [...parsed.runs].sort((left, right) => left.run_id.localeCompare(right.run_id));
|
|
280
|
-
const semantic = {
|
|
281
|
-
workspace_version: 1,
|
|
282
|
-
workspace_id: parsed.workspace_id,
|
|
283
|
-
name: parsed.name,
|
|
284
|
-
revision: parsed.revision,
|
|
285
|
-
previous_revision_digest: parsed.previous_revision_digest,
|
|
286
|
-
bundle,
|
|
287
|
-
runs,
|
|
288
|
-
};
|
|
289
|
-
if (parsed.workspace_id !== workspaceIdFor(parsed.name))
|
|
290
|
-
throw new TypeError("Investigation workspace ID does not match its name");
|
|
291
|
-
if (parsed.revision_digest !== `wrev_${digestCanonical(semantic)}`)
|
|
292
|
-
throw new TypeError("Investigation workspace revision digest is invalid");
|
|
293
|
-
const canonical = legacyInvestigationWorkspaceSchema.parse({
|
|
294
|
-
...semantic,
|
|
295
|
-
revision_digest: parsed.revision_digest,
|
|
296
|
-
});
|
|
297
|
-
if (JSON.stringify(parsed) !== JSON.stringify(canonical))
|
|
298
|
-
throw new TypeError("Investigation workspace is not canonical");
|
|
299
|
-
for (const run of runs) {
|
|
300
|
-
const identity = createLegacyInvestigationRunIdentity(run);
|
|
301
|
-
if (run.run_id !== identity.runId ||
|
|
302
|
-
run.request_sha256 !== identity.requestSha256)
|
|
303
|
-
throw new TypeError("Investigation run identity is invalid");
|
|
304
|
-
}
|
|
305
|
-
const migrated = buildWorkspace({
|
|
306
|
-
workspaceId: parsed.workspace_id,
|
|
307
|
-
name: parsed.name,
|
|
308
|
-
revision: parsed.revision,
|
|
309
|
-
previousRevisionDigest: parsed.previous_revision_digest,
|
|
310
|
-
bundle,
|
|
311
|
-
runs: runs.map((run) => ({
|
|
312
|
-
...run,
|
|
313
|
-
legacy_request_identity: true,
|
|
314
|
-
integrity_policy: "fail",
|
|
315
|
-
integrity_continue_approved: false,
|
|
316
|
-
max_integrity_mismatches: 10,
|
|
317
|
-
})),
|
|
318
|
-
});
|
|
319
|
-
validateRunReferences(migrated);
|
|
320
|
-
return migrated;
|
|
321
|
-
};
|
|
322
|
-
const validateRunStages = (run) => {
|
|
323
|
-
const expected = [
|
|
324
|
-
"inventory_left",
|
|
325
|
-
"inventory_right",
|
|
326
|
-
...(run.comparison_evidence_id === null ? [] : ["compare_artifacts"]),
|
|
327
|
-
...(run.result_evidence_id === null ? [] : ["find_changed_behavior"]),
|
|
328
|
-
];
|
|
329
|
-
if (JSON.stringify(run.completed_stages) !== JSON.stringify(expected))
|
|
330
|
-
throw new TypeError("Investigation run stages are inconsistent");
|
|
331
|
-
if (run.status === "complete" && run.result_evidence_id === null)
|
|
332
|
-
throw new TypeError("Completed investigation run has no result Evidence");
|
|
333
|
-
if (run.status === "running" && run.result_evidence_id !== null)
|
|
334
|
-
throw new TypeError("Running investigation run has final result Evidence");
|
|
335
|
-
};
|
|
336
|
-
const workspaceIdFor = (name) => `ws_${digestCanonical({ schema: "rea.workspace/v1", name })}`;
|
|
337
|
-
const digestCanonical = (value) => createHash("sha256").update(canonicalJson(value)).digest("hex");
|
|
338
|
-
const canonicalJson = (value) => {
|
|
339
|
-
const encoded = canonicalize(value);
|
|
340
|
-
if (encoded === undefined)
|
|
341
|
-
throw new TypeError("Investigation workspace could not canonicalize data");
|
|
342
|
-
return encoded;
|
|
343
|
-
};
|
|
344
|
-
const assertUnique = (values, description) => {
|
|
345
|
-
if (new Set(values).size !== values.length)
|
|
346
|
-
throw new TypeError(`Duplicate ${description}`);
|
|
347
|
-
};
|
|
@@ -1,26 +0,0 @@
|
|
|
1
|
-
/** Return whether every node, key, and string fits within the supplied limits. */
|
|
2
|
-
export const isJsonWithinLimits = (root, limits) => {
|
|
3
|
-
const pending = [
|
|
4
|
-
{ value: root, depth: 0 },
|
|
5
|
-
];
|
|
6
|
-
let nodes = 0;
|
|
7
|
-
while (pending.length > 0) {
|
|
8
|
-
const current = pending.pop();
|
|
9
|
-
if (current === undefined)
|
|
10
|
-
break;
|
|
11
|
-
nodes += 1;
|
|
12
|
-
if (nodes > limits.maxNodes || current.depth > limits.maxDepth)
|
|
13
|
-
return false;
|
|
14
|
-
if (typeof current.value === "string" &&
|
|
15
|
-
current.value.length > limits.maxStringLength)
|
|
16
|
-
return false;
|
|
17
|
-
if (typeof current.value !== "object" || current.value === null)
|
|
18
|
-
continue;
|
|
19
|
-
for (const [key, value] of Object.entries(current.value)) {
|
|
20
|
-
if (key.length > limits.maxStringLength)
|
|
21
|
-
return false;
|
|
22
|
-
pending.push({ value, depth: current.depth + 1 });
|
|
23
|
-
}
|
|
24
|
-
}
|
|
25
|
-
return true;
|
|
26
|
-
};
|
|
@@ -1,29 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Assess source-page and downstream-projection completeness without treating an
|
|
3
|
-
* unreturned row as absent. `includedCount` is the number retained downstream.
|
|
4
|
-
*/
|
|
5
|
-
export const assessKnownPageCoverage = (page, includedCount = page.items.length) => {
|
|
6
|
-
const observedCount = Math.min(page.total, page.returned, page.items.length);
|
|
7
|
-
const retainedCount = Math.min(observedCount, Math.max(0, Math.floor(includedCount)));
|
|
8
|
-
const sourceOmittedCount = Math.max(0, page.total - observedCount);
|
|
9
|
-
const sourceComplete = page.complete &&
|
|
10
|
-
page.offset === 0 &&
|
|
11
|
-
page.returned === page.total &&
|
|
12
|
-
sourceOmittedCount === 0;
|
|
13
|
-
const omittedCount = Math.max(0, page.total - retainedCount);
|
|
14
|
-
return sourceComplete && omittedCount === 0
|
|
15
|
-
? {
|
|
16
|
-
complete: true,
|
|
17
|
-
sourceComplete: true,
|
|
18
|
-
includedCount: retainedCount,
|
|
19
|
-
omittedCount: 0,
|
|
20
|
-
sourceOmittedCount: 0,
|
|
21
|
-
}
|
|
22
|
-
: {
|
|
23
|
-
complete: false,
|
|
24
|
-
sourceComplete,
|
|
25
|
-
includedCount: retainedCount,
|
|
26
|
-
omittedCount,
|
|
27
|
-
sourceOmittedCount,
|
|
28
|
-
};
|
|
29
|
-
};
|
|
@@ -1,128 +0,0 @@
|
|
|
1
|
-
import { z } from "zod";
|
|
2
|
-
import { PROCESS_COMPARISON_DIMENSIONS, compareProcessCaptures, processDimensionObservations, } from "./processComparison.js";
|
|
3
|
-
import { digestProcessCommitment, processScenarioSchema, } from "./processScenario.js";
|
|
4
|
-
const sideIdentifierSchema = z
|
|
5
|
-
.string()
|
|
6
|
-
.regex(/^[A-Za-z][A-Za-z0-9._-]{0,127}$/u);
|
|
7
|
-
const environmentNameSchema = z.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/u);
|
|
8
|
-
const processDimensionSchema = z.enum(PROCESS_COMPARISON_DIMENSIONS);
|
|
9
|
-
const sideBindingSchema = z
|
|
10
|
-
.object({
|
|
11
|
-
id: sideIdentifierSchema,
|
|
12
|
-
executable: z.string().startsWith("/"),
|
|
13
|
-
arguments: z.array(z.string()).max(256).optional(),
|
|
14
|
-
environment: z.record(environmentNameSchema, z.string()).default({}),
|
|
15
|
-
})
|
|
16
|
-
.strict();
|
|
17
|
-
/** Boundary contract for one bounded authority/candidate process experiment. */
|
|
18
|
-
export const processPairedExperimentSchema = z
|
|
19
|
-
.object({
|
|
20
|
-
approved: z.literal(true),
|
|
21
|
-
shared_scenario: processScenarioSchema,
|
|
22
|
-
authority: sideBindingSchema,
|
|
23
|
-
candidate: sideBindingSchema,
|
|
24
|
-
repeat_count: z.number().int().min(2).max(10).default(3),
|
|
25
|
-
freshness_policy: z
|
|
26
|
-
.object({
|
|
27
|
-
max_capture_age_ms: z.number().int().positive().max(86_400_000),
|
|
28
|
-
})
|
|
29
|
-
.strict(),
|
|
30
|
-
required_dimensions: z
|
|
31
|
-
.array(processDimensionSchema)
|
|
32
|
-
.min(1)
|
|
33
|
-
.max(PROCESS_COMPARISON_DIMENSIONS.length)
|
|
34
|
-
.default([...PROCESS_COMPARISON_DIMENSIONS]),
|
|
35
|
-
})
|
|
36
|
-
.strict()
|
|
37
|
-
.superRefine((experiment, context) => {
|
|
38
|
-
if (experiment.authority.id === experiment.candidate.id)
|
|
39
|
-
context.addIssue({
|
|
40
|
-
code: "custom",
|
|
41
|
-
message: "authority and candidate identities must differ",
|
|
42
|
-
path: ["candidate", "id"],
|
|
43
|
-
});
|
|
44
|
-
if (new Set(experiment.required_dimensions).size !==
|
|
45
|
-
experiment.required_dimensions.length)
|
|
46
|
-
context.addIssue({
|
|
47
|
-
code: "custom",
|
|
48
|
-
message: "required process dimensions must be unique",
|
|
49
|
-
path: ["required_dimensions"],
|
|
50
|
-
});
|
|
51
|
-
});
|
|
52
|
-
/** Apply a side binding without changing the shared observation contract. */
|
|
53
|
-
export const bindProcessScenario = (shared, side) => processScenarioSchema.parse({
|
|
54
|
-
...shared,
|
|
55
|
-
executable: side.executable,
|
|
56
|
-
arguments: side.arguments ?? shared.arguments,
|
|
57
|
-
environment: { ...shared.environment, ...side.environment },
|
|
58
|
-
});
|
|
59
|
-
const classifyInstability = (dimensions) => {
|
|
60
|
-
if (dimensions.has("exit"))
|
|
61
|
-
return "flaky_exit";
|
|
62
|
-
if (dimensions.has("filesystem") || dimensions.has("process"))
|
|
63
|
-
return "environmental_drift";
|
|
64
|
-
return "nondeterministic_output";
|
|
65
|
-
};
|
|
66
|
-
const timingKeys = new Set([
|
|
67
|
-
"at_ms",
|
|
68
|
-
"scheduled_at_ms",
|
|
69
|
-
"dispatched_at_ms",
|
|
70
|
-
"elapsed_ms",
|
|
71
|
-
]);
|
|
72
|
-
const withoutTiming = (value) => typeof value !== "object" || value === null || Array.isArray(value)
|
|
73
|
-
? value
|
|
74
|
-
: Object.fromEntries(Object.entries(value).filter(([key]) => !timingKeys.has(key)));
|
|
75
|
-
const observationsWithoutTiming = (capture, dimension) => dimension === "exit"
|
|
76
|
-
? [
|
|
77
|
-
{
|
|
78
|
-
...capture.exit,
|
|
79
|
-
settlement: {
|
|
80
|
-
state: capture.settlement.state,
|
|
81
|
-
cleanup_outcome: capture.settlement.cleanup_outcome,
|
|
82
|
-
},
|
|
83
|
-
},
|
|
84
|
-
]
|
|
85
|
-
: processDimensionObservations(capture, dimension).map(withoutTiming);
|
|
86
|
-
const hasOnlyTimingVariance = (captures, dimensions) => dimensions.every((dimension) => {
|
|
87
|
-
const first = captures[0];
|
|
88
|
-
if (first === undefined)
|
|
89
|
-
return false;
|
|
90
|
-
const baseline = JSON.stringify(observationsWithoutTiming(first, dimension));
|
|
91
|
-
return captures
|
|
92
|
-
.slice(1)
|
|
93
|
-
.every((capture) => JSON.stringify(observationsWithoutTiming(capture, dimension)) ===
|
|
94
|
-
baseline);
|
|
95
|
-
});
|
|
96
|
-
/** Compare same-side repeats before permitting a cross-side claim. */
|
|
97
|
-
export const analyzeProcessRepeatability = (captures, requiredDimensions) => {
|
|
98
|
-
if (captures.length < 2)
|
|
99
|
-
return {
|
|
100
|
-
classification: "insufficient_samples",
|
|
101
|
-
stable: false,
|
|
102
|
-
digest: digestProcessCommitment({ captures: [], requiredDimensions }),
|
|
103
|
-
comparisons: [],
|
|
104
|
-
unstable_dimensions: [],
|
|
105
|
-
};
|
|
106
|
-
const baseline = captures[0];
|
|
107
|
-
if (baseline === undefined)
|
|
108
|
-
throw new TypeError("Repeatability analysis lost its baseline capture");
|
|
109
|
-
const comparisons = captures
|
|
110
|
-
.slice(1)
|
|
111
|
-
.map((capture) => compareProcessCaptures(baseline, capture));
|
|
112
|
-
const unstable = new Set(requiredDimensions.filter((dimension) => comparisons.some((comparison) => comparison[dimension] !== "unchanged")));
|
|
113
|
-
const unstableDimensions = PROCESS_COMPARISON_DIMENSIONS.filter((dimension) => unstable.has(dimension));
|
|
114
|
-
return {
|
|
115
|
-
classification: unstable.size === 0
|
|
116
|
-
? "stable"
|
|
117
|
-
: hasOnlyTimingVariance(captures, unstableDimensions)
|
|
118
|
-
? "timing_variance"
|
|
119
|
-
: classifyInstability(unstable),
|
|
120
|
-
stable: unstable.size === 0,
|
|
121
|
-
digest: digestProcessCommitment({
|
|
122
|
-
requiredDimensions,
|
|
123
|
-
comparisons,
|
|
124
|
-
}),
|
|
125
|
-
comparisons,
|
|
126
|
-
unstable_dimensions: unstableDimensions,
|
|
127
|
-
};
|
|
128
|
-
};
|
|
@@ -1,106 +0,0 @@
|
|
|
1
|
-
import { javascriptApplicationAnalysisResultSchema } from "../domain/javascriptApplicationAnalysis.js";
|
|
2
|
-
import { compareCodePoints } from "../domain/javascriptApplicationGraph.js";
|
|
3
|
-
import { javascriptApplicationAnalysisSummarySchema } from "../contracts/electronToolContracts.js";
|
|
4
|
-
const DEFAULT_GRAPH_PAGE_LIMIT = 100;
|
|
5
|
-
const ROOT_SAMPLE_LIMIT = 10;
|
|
6
|
-
const TOP_FINDING_LIMIT = 20;
|
|
7
|
-
const FINDING_PRIORITY = {
|
|
8
|
-
"browser-window": 0,
|
|
9
|
-
"electron-preload": 1,
|
|
10
|
-
"context-bridge-api": 2,
|
|
11
|
-
"ipc-channel": 3,
|
|
12
|
-
"ipc-handler": 4,
|
|
13
|
-
"electron-utility": 5,
|
|
14
|
-
endpoint: 6,
|
|
15
|
-
storage: 7,
|
|
16
|
-
worker: 8,
|
|
17
|
-
"service-worker": 9,
|
|
18
|
-
"native-addon": 10,
|
|
19
|
-
"native-export": 11,
|
|
20
|
-
"source-map": 12,
|
|
21
|
-
};
|
|
22
|
-
/** Project complete JavaScript application Evidence into a bounded agent result. */
|
|
23
|
-
export const summarizeJavaScriptApplicationEvidence = (evidence) => {
|
|
24
|
-
const result = javascriptApplicationAnalysisResultSchema.parse(evidence.normalized_result);
|
|
25
|
-
const nodeKinds = new Map();
|
|
26
|
-
for (const node of result.graph.nodes)
|
|
27
|
-
nodeKinds.set(node.kind, (nodeKinds.get(node.kind) ?? 0) + 1);
|
|
28
|
-
const rootItems = result.graph.root_node_ids.slice(0, ROOT_SAMPLE_LIMIT);
|
|
29
|
-
const pageRoot = `rea://evidence/${evidence.evidence_id}/application-graph`;
|
|
30
|
-
const topFindings = [...result.graph.nodes]
|
|
31
|
-
.sort((left, right) => (FINDING_PRIORITY[left.kind] ?? Number.MAX_SAFE_INTEGER) -
|
|
32
|
-
(FINDING_PRIORITY[right.kind] ?? Number.MAX_SAFE_INTEGER) ||
|
|
33
|
-
compareCodePoints(left.node_id, right.node_id))
|
|
34
|
-
.slice(0, TOP_FINDING_LIMIT)
|
|
35
|
-
.map((node) => {
|
|
36
|
-
const observation = node.observations[0];
|
|
37
|
-
if (observation === undefined)
|
|
38
|
-
throw new TypeError("Application graph node has no observation");
|
|
39
|
-
return {
|
|
40
|
-
node_id: node.node_id,
|
|
41
|
-
kind: node.kind,
|
|
42
|
-
label: observation.label,
|
|
43
|
-
authority: observation.evidence.authority,
|
|
44
|
-
state: observation.evidence.state,
|
|
45
|
-
confidence: observation.evidence.confidence,
|
|
46
|
-
location: observation.evidence.location,
|
|
47
|
-
};
|
|
48
|
-
});
|
|
49
|
-
const summary = result.schema_version === 1 ? omitGraph(result) : omitGraphs(result);
|
|
50
|
-
const unknowns = new Set([
|
|
51
|
-
...result.limitations,
|
|
52
|
-
...result.graph.limitations,
|
|
53
|
-
]);
|
|
54
|
-
if (result.statistics.parse_failures > 0)
|
|
55
|
-
unknowns.add(`${String(result.statistics.parse_failures)} JavaScript file(s) could not be parsed.`);
|
|
56
|
-
if (result.statistics.truncated_scopes > 0)
|
|
57
|
-
unknowns.add(`${String(result.statistics.truncated_scopes)} analysis scope(s) were truncated.`);
|
|
58
|
-
if (result.graph.coverage.status !== "complete")
|
|
59
|
-
unknowns.add(`Application graph coverage is ${result.graph.coverage.status}; omitted facts remain unknown.`);
|
|
60
|
-
return javascriptApplicationAnalysisSummarySchema.parse({
|
|
61
|
-
...summary,
|
|
62
|
-
...(result.schema_version === 1
|
|
63
|
-
? {}
|
|
64
|
-
: {
|
|
65
|
-
semantic_graph: {
|
|
66
|
-
graph_id: result.semantic_graph.graph_id,
|
|
67
|
-
nodes: result.semantic_graph.nodes.length,
|
|
68
|
-
relations: result.semantic_graph.relations.length,
|
|
69
|
-
unknown_frontiers: result.semantic_graph.unknowns.length,
|
|
70
|
-
fingerprints: result.semantic_graph.fingerprints.length,
|
|
71
|
-
coverage: result.semantic_graph.coverage.status,
|
|
72
|
-
query_tool: "trace_javascript_semantics",
|
|
73
|
-
},
|
|
74
|
-
}),
|
|
75
|
-
unknowns: [...unknowns],
|
|
76
|
-
graph: {
|
|
77
|
-
graph_id: result.graph.graph_id,
|
|
78
|
-
node_count: result.graph.nodes.length,
|
|
79
|
-
edge_count: result.graph.edges.length,
|
|
80
|
-
roots: {
|
|
81
|
-
items: rootItems,
|
|
82
|
-
total: result.graph.root_node_ids.length,
|
|
83
|
-
truncated: rootItems.length < result.graph.root_node_ids.length,
|
|
84
|
-
},
|
|
85
|
-
node_kinds: [...nodeKinds]
|
|
86
|
-
.sort(([left], [right]) => compareCodePoints(left, right))
|
|
87
|
-
.map(([kind, count]) => ({ kind, count })),
|
|
88
|
-
top_findings: topFindings,
|
|
89
|
-
coverage: result.graph.coverage,
|
|
90
|
-
limitations: result.graph.limitations,
|
|
91
|
-
pages: {
|
|
92
|
-
nodes: `${pageRoot}/nodes/offset/0/limit/${String(DEFAULT_GRAPH_PAGE_LIMIT)}`,
|
|
93
|
-
edges: `${pageRoot}/edges/offset/0/limit/${String(DEFAULT_GRAPH_PAGE_LIMIT)}`,
|
|
94
|
-
page_limit: DEFAULT_GRAPH_PAGE_LIMIT,
|
|
95
|
-
},
|
|
96
|
-
},
|
|
97
|
-
});
|
|
98
|
-
};
|
|
99
|
-
const omitGraph = (result) => {
|
|
100
|
-
const { graph: _graph, ...summary } = result;
|
|
101
|
-
return summary;
|
|
102
|
-
};
|
|
103
|
-
const omitGraphs = (result) => {
|
|
104
|
-
const { graph: _graph, semantic_graph: _semanticGraph, ...summary } = result;
|
|
105
|
-
return summary;
|
|
106
|
-
};
|
|
@@ -1,12 +0,0 @@
|
|
|
1
|
-
import { AnalysisProtocolError, PermissionRequiredError, } from "../domain/errors.js";
|
|
2
|
-
import { err } from "../domain/result.js";
|
|
3
|
-
/** Preserve a typed permission denial or contain an unexpected authority error. */
|
|
4
|
-
export const permissionFailure = (failure) => {
|
|
5
|
-
if (failure.ok)
|
|
6
|
-
return err(new AnalysisProtocolError("Expected a denied permission"));
|
|
7
|
-
return err(failure.error instanceof PermissionRequiredError
|
|
8
|
-
? failure.error
|
|
9
|
-
: new AnalysisProtocolError(failure.error.message, {
|
|
10
|
-
cause: failure.error,
|
|
11
|
-
}));
|
|
12
|
-
};
|