rea-agents 3.2.1 → 4.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +183 -332
- package/bridge/ghidra/ReaGhidraBridge.java +561 -74
- package/bridge/hopper_bridge.py +70 -27
- package/bridge/native/ReaNativeUI.swift +157 -0
- package/dist/application/AnalysisContextQueries.js +19 -5
- package/dist/application/AnalysisSnapshotCache.js +30 -11
- package/dist/application/AppleAssetCatalogAnalysis.js +171 -0
- package/dist/application/ArtifactExtractionDestination.js +0 -12
- package/dist/application/ArtifactGraphConstruction.js +44 -11
- package/dist/application/ArtifactInventory/classify.js +7 -15
- package/dist/application/ArtifactInventory/hash.js +4 -2
- package/dist/application/ArtifactInventory/policy.js +2 -17
- package/dist/application/ArtifactInventory/reader.js +3 -3
- package/dist/application/ArtifactInventory/scanCanonical.js +2 -2
- package/dist/application/ArtifactInventory/scanReader.js +12 -4
- package/dist/application/ArtifactInventory/types.js +0 -3
- package/dist/application/BinarySession.js +28 -43
- package/dist/application/BinarySessionExecution.js +37 -1
- package/dist/application/BinaryTargetResolver.js +50 -4
- package/dist/application/BrowserEvidence.js +36 -7
- package/dist/application/BrowserObservationService.js +17 -44
- package/dist/application/BrowserScenarioCaptureService.js +2 -35
- package/dist/application/BrowserScenarioEvidence.js +13 -9
- package/dist/application/CapabilityClientRequirements.js +2 -11
- package/dist/application/CapabilityInventory.js +21 -35
- package/dist/application/ClientConfigurationDocument.js +84 -7
- package/dist/application/ClientRegistrationIdentity.js +32 -0
- package/dist/application/ClientRegistrationStatus.js +59 -6
- package/dist/application/DirectAnalysis.js +37 -58
- package/dist/application/DirectAnalysisStatus.js +4 -4
- package/dist/application/Doctor.js +89 -80
- package/dist/application/DoctorDiagnostics.js +2 -26
- package/dist/application/DoctorScope.js +8 -14
- package/dist/application/ElectronActiveEvidence.js +10 -27
- package/dist/application/ElectronActiveObservationService.js +9 -36
- package/dist/application/ElectronBoundaryAnalysis.js +2 -0
- package/dist/application/ElectronBoundaryGraphNative.js +1 -1
- package/dist/application/ElectronEvidence.js +8 -3
- package/dist/application/ElectronObservationService.js +9 -25
- package/dist/application/EnhancedLiteralTracing.js +4 -8
- package/dist/application/EnhancedTools.js +15 -35
- package/dist/application/FilesystemSnapshot.js +7 -8
- package/dist/application/JavaScriptApplicationEvidenceGraph.js +2 -1
- package/dist/application/JavaScriptApplicationWorkflowService.js +31 -7
- package/dist/application/JavaScriptArtifactAnalysis.js +6 -4
- package/dist/application/JavaScriptArtifactFiles.js +5 -0
- package/dist/application/JavaScriptArtifactPathResolution.js +179 -47
- package/dist/application/JavaScriptRuntimeObservationEvidence.js +6 -3
- package/dist/application/JavaScriptRuntimeObservationService.js +9 -25
- package/dist/application/JavaScriptRuntimeReconciliationService.js +45 -4
- package/dist/application/JavaScriptSemanticGraphAsyncProjection.js +11 -0
- package/dist/application/JavaScriptSemanticGraphChildProcessProjection.js +11 -0
- package/dist/application/JavaScriptSemanticGraphDataProjection.js +11 -0
- package/dist/application/JavaScriptSemanticGraphFlowProjection.js +14 -5
- package/dist/application/JsonFiles.js +1 -1
- package/dist/application/LazyAnalysisProvider.js +27 -6
- package/dist/application/ManagedMemberComparisonService.js +19 -6
- package/dist/application/NativeApiInspection.js +2 -0
- package/dist/application/NativeCallRoutes.js +72 -0
- package/dist/application/NativeDispatchMetadataInspection.js +33 -0
- package/dist/application/NativeUiActionTrace.js +73 -49
- package/dist/application/NativeValueTrace.js +320 -0
- package/dist/application/ProcessCaptureCapability.js +32 -5
- package/dist/application/ProcessCaptureEnvironment.js +9 -26
- package/dist/application/ProcessCaptureError.js +1 -5
- package/dist/application/ProcessCaptureJournal.js +3 -40
- package/dist/application/ProcessCaptureLifecycle.js +102 -111
- package/dist/application/ProcessCli.js +18 -25
- package/dist/application/ProcessEvidence.js +5 -7
- package/dist/application/ProcessFilesystemEffects.js +36 -0
- package/dist/application/ProcessHarness.js +41 -120
- package/dist/application/ProcessNormalization.js +2 -17
- package/dist/application/ProcessScenarioRuntimeValidation.js +76 -0
- package/dist/application/ReferenceSourceImport.js +3 -4
- package/dist/application/Setup.js +236 -84
- package/dist/application/SetupClientConfiguration.js +14 -9
- package/dist/application/SetupPlan.js +138 -86
- package/dist/application/SetupSkill.js +0 -1
- package/dist/application/SupportedClients.js +102 -21
- package/dist/application/Uninstall.js +31 -20
- package/dist/application/Update.js +93 -0
- package/dist/application/UpdateMaintenance.js +108 -0
- package/dist/application/UpdateRuntime.js +126 -0
- package/dist/application/runtime.js +13 -2
- package/dist/artifacts/ArtifactPaths.js +6 -8
- package/dist/artifacts/ArtifactProvider.js +94 -41
- package/dist/artifacts/AsarArtifactReader.js +19 -4
- package/dist/artifacts/KeyedArchiveReader.js +110 -0
- package/dist/artifacts/MachOSliceArtifactReader.js +53 -5
- package/dist/artifacts/ZipArtifactReader.js +18 -1
- package/dist/browser/BrowserScenarioSecrets.js +28 -1
- package/dist/browser/CdpBrowserProvider.js +36 -15
- package/dist/browser/CdpCaptureDocuments.js +22 -8
- package/dist/browser/CdpCaptureEventHandlers.js +14 -5
- package/dist/browser/CdpCaptureEventHelpers.js +13 -0
- package/dist/browser/CdpCaptureEvents.js +10 -1
- package/dist/browser/CdpElectronInspection.js +5 -10
- package/dist/browser/CdpElectronProvider.js +1 -5
- package/dist/browser/CdpElectronScripts.js +1 -1
- package/dist/browser/CdpEndpoint.js +3 -2
- package/dist/browser/CdpObservationSession.js +14 -10
- package/dist/browser/CdpPageCapture.js +1 -1
- package/dist/browser/CdpPageCaptureScripts.js +1 -1
- package/dist/browser/CdpSafeMetadata.js +5 -4
- package/dist/browser/CdpScreenshot.js +16 -5
- package/dist/browser/CdpTargetSession.js +25 -4
- package/dist/browser/CdpWebMcpDiscovery.js +93 -20
- package/dist/browser/JavaScriptRuntimeScope.js +28 -2
- package/dist/browser/PlaywrightBrowserScenarioProvider.js +9 -8
- package/dist/browser/PlaywrightElectronActiveActions.js +3 -10
- package/dist/browser/PlaywrightElectronActiveProvider.js +5 -5
- package/dist/browser/PlaywrightScenarioActions.js +1 -1
- package/dist/browser/PlaywrightScenarioArtifacts.js +13 -25
- package/dist/browser/PlaywrightScenarioBrowser.js +28 -25
- package/dist/browser/PlaywrightScenarioEvents.js +82 -93
- package/dist/browser/PlaywrightScenarioSession.js +27 -123
- package/dist/browser/PngVisualDiff.js +22 -3
- package/dist/browser/V8InspectorCaptureProjection.js +7 -1
- package/dist/browser/V8InspectorProvider.js +60 -7
- package/dist/browser/WebSourceMapFetcher.js +99 -53
- package/dist/cli/artifactCommands.js +56 -12
- package/dist/cli/coreAnalysisCommands.js +110 -0
- package/dist/cli/managedCommands.js +1 -31
- package/dist/cli/setupCommands.js +16 -14
- package/dist/cli/utilityCommands.js +61 -4
- package/dist/cli.js +5 -7
- package/dist/cliApplicationCommands.js +0 -83
- package/dist/cliBrowserAdvancedCommands.js +7 -11
- package/dist/cliBrowserCommands.js +15 -23
- package/dist/cliBrowserContext.js +3 -24
- package/dist/cliBrowserScenarioCommands.js +2 -10
- package/dist/cliCommandNames.js +82 -7
- package/dist/cliElectronCommands.js +10 -36
- package/dist/cliJavaScriptRuntimeCommands.js +6 -30
- package/dist/cliJsonInput.js +4 -2
- package/dist/cliLogging.js +16 -7
- package/dist/cliObservationOptions.js +1 -1
- package/dist/cliOutput.js +2 -4
- package/dist/cliProcessCommands.js +6 -33
- package/dist/cliSetup.js +90 -160
- package/dist/config/environment.js +2 -78
- package/dist/config/parseConfig.js +18 -109
- package/dist/config/parsers.js +0 -23
- package/dist/contracts/applicationToolContracts.js +1 -118
- package/dist/contracts/artifactToolContracts.js +11 -19
- package/dist/contracts/browserScenarioToolContracts.js +1 -5
- package/dist/contracts/browserToolContracts.js +9 -16
- package/dist/contracts/electronToolContracts.js +5 -6
- package/dist/contracts/enhancedInputs.js +3 -2
- package/dist/contracts/errorSchemas.js +16 -40
- package/dist/contracts/functionWorkflowToolContracts.js +2 -2
- package/dist/contracts/javascriptApplicationWorkflowExamples.js +2 -2
- package/dist/contracts/javascriptRuntimeObservationToolContracts.js +4 -4
- package/dist/contracts/javascriptRuntimeReconciliationExample.js +1 -1
- package/dist/contracts/managedToolContracts.js +7 -4
- package/dist/contracts/managedWorkflowExamples.js +0 -22
- package/dist/contracts/managedWorkflowToolContracts.js +16 -31
- package/dist/contracts/nativeToolContracts.js +9 -0
- package/dist/contracts/promptContracts.js +6 -6
- package/dist/contracts/sessionToolSchemas.js +3 -3
- package/dist/contracts/toolContractExamples.js +4 -3
- package/dist/contracts/toolContracts.js +18 -7
- package/dist/contracts/toolEffects.js +34 -21
- package/dist/contracts/toolOutputSchemaGroups.js +18 -5
- package/dist/contracts/toolOutputSchemaPrimitives.js +9 -6
- package/dist/contracts/toolSchemaMetadata.js +5 -8
- package/dist/doctorRuntime.js +0 -41
- package/dist/domain/analysisErrorPresentation.js +4 -28
- package/dist/domain/analysisErrorProjection.js +33 -50
- package/dist/domain/analysisProfile.js +1 -1
- package/dist/domain/analysisSnapshot.js +77 -3
- package/dist/domain/androidApplication.js +5 -4
- package/dist/domain/appleApplication.js +5 -4
- package/dist/domain/appleAssetCatalog.js +127 -0
- package/dist/domain/artifactComparison.js +7 -11
- package/dist/domain/artifactGraph.js +8 -6
- package/dist/domain/artifactInspection.js +13 -12
- package/dist/domain/binaryTarget.js +23 -9
- package/dist/domain/browserObservation.js +43 -24
- package/dist/domain/browserObservationSchemas.js +2 -1
- package/dist/domain/browserScenario.js +7 -107
- package/dist/domain/browserScenarioCapture.js +0 -1
- package/dist/domain/browserScenarioCaptureValues.js +5 -4
- package/dist/domain/browserScenarioDiff.js +1 -3
- package/dist/domain/browserScenarioValues.js +16 -107
- package/dist/domain/bundleComparison.js +18 -17
- package/dist/domain/callPathSchemas.js +17 -7
- package/dist/domain/changedBehavior.js +2 -3
- package/dist/domain/comparisonSemantics.js +19 -0
- package/dist/domain/completionLedgerGeneration.js +3 -2
- package/dist/domain/conformancePackage.js +2 -1
- package/dist/domain/conformanceTrustGate.js +3 -5
- package/dist/domain/customProtocolCapture.js +2 -2
- package/dist/domain/digests.js +30 -0
- package/dist/domain/dosMz.js +83 -0
- package/dist/domain/electronActiveObservation.js +7 -5
- package/dist/domain/electronObservation.js +3 -2
- package/dist/domain/electronStaticAnalysisNative.js +15 -6
- package/dist/domain/emptyArraySchema.js +3 -0
- package/dist/domain/errors.js +10 -28
- package/dist/domain/evidence.js +5 -3
- package/dist/domain/evidenceCompletionLedger.js +3 -2
- package/dist/domain/functionComparisonNormalization.js +24 -18
- package/dist/domain/functionComparisonResults.js +3 -7
- package/dist/domain/functionComparisonSchemas.js +3 -2
- package/dist/domain/hopperValues.js +108 -8
- package/dist/domain/javascriptApplicationAnalysis.js +4 -7
- package/dist/domain/javascriptApplicationEvidenceSchemas.js +4 -3
- package/dist/domain/javascriptApplicationGraphSchemas.js +8 -7
- package/dist/domain/javascriptApplicationVersionComparisonSchemas.js +9 -7
- package/dist/domain/javascriptApplicationVersionItems.js +12 -18
- package/dist/domain/javascriptAstValues.js +4 -0
- package/dist/domain/javascriptExportShapeComparison.js +1 -6
- package/dist/domain/javascriptExportShapeComparisonSchemas.js +6 -10
- package/dist/domain/javascriptExportShapeVariants.js +15 -2
- package/dist/domain/javascriptFeatureTraceSchemas.js +8 -7
- package/dist/domain/javascriptRuntimeObservation.js +14 -2
- package/dist/domain/javascriptRuntimeReconciliationMatching.js +8 -0
- package/dist/domain/javascriptRuntimeReconciliationParsing.js +4 -2
- package/dist/domain/javascriptRuntimeReconciliationResult.js +6 -4
- package/dist/domain/javascriptRuntimeReconciliationRuntime.js +15 -4
- package/dist/domain/javascriptRuntimeReconciliationSchemas.js +19 -18
- package/dist/domain/javascriptRuntimeStaticCandidates.js +18 -6
- package/dist/domain/javascriptSemanticAnalysis.js +57 -19
- package/dist/domain/javascriptSemanticAsyncEffects.js +39 -40
- package/dist/domain/javascriptSemanticCalls.js +46 -27
- package/dist/domain/javascriptSemanticChildProcesses.js +43 -50
- package/dist/domain/javascriptSemanticDataEffectHelpers.js +91 -18
- package/dist/domain/javascriptSemanticDataEffects.js +22 -10
- package/dist/domain/javascriptSemanticGraphSchemas.js +8 -6
- package/dist/domain/javascriptSemanticObjects.js +13 -3
- package/dist/domain/javascriptSemanticProjection.js +144 -38
- package/dist/domain/javascriptSemanticPromises.js +14 -27
- package/dist/domain/javascriptSemanticQuerySchemas.js +6 -9
- package/dist/domain/javascriptSemanticResources.js +2 -5
- package/dist/domain/javascriptSemanticState.js +4 -0
- package/dist/domain/javascriptSemanticTraceSchemas.js +2 -1
- package/dist/domain/javascriptSemanticTraversal.js +13 -5
- package/dist/domain/javascriptSemanticValues.js +10 -9
- package/dist/domain/javascriptSourceParser.js +5 -1
- package/dist/domain/javascriptStaticAnalysisCalls.js +8 -5
- package/dist/domain/javascriptStaticAnalysisHelpers.js +16 -7
- package/dist/domain/keyedArchive.js +181 -0
- package/dist/domain/managedApplicationGraph.js +4 -3
- package/dist/domain/managedArtifact.js +2 -1
- package/dist/domain/managedMemberComparison.js +18 -13
- package/dist/domain/managedMemberComparisonCoverage.js +2 -1
- package/dist/domain/managedMemberComparisonItems.js +27 -7
- package/dist/domain/managedMemberComparisonMatch.js +22 -6
- package/dist/domain/managedNativeVerificationMatch.js +2 -2
- package/dist/domain/managedNativeVerificationSchemas.js +7 -5
- package/dist/domain/managedReconstruction.js +6 -5
- package/dist/domain/nativeApiBoundary.js +7 -0
- package/dist/domain/nativeDataType.js +51 -0
- package/dist/domain/nativeInspection.js +0 -1
- package/dist/domain/nativeInstruction.js +82 -0
- package/dist/domain/nativeInvestigationGraph.js +9 -5
- package/dist/domain/nativeUiObservation.js +123 -0
- package/dist/domain/nativeValueFlow.js +17 -0
- package/dist/domain/nativeValueTrace.js +64 -0
- package/dist/domain/objcSwiftMetadata.js +39 -0
- package/dist/domain/peInspection.js +1 -0
- package/dist/domain/processCapture.js +5 -55
- package/dist/domain/processCaptureExample.js +0 -9
- package/dist/domain/processCaptureValidation.js +13 -144
- package/dist/domain/processComparison.js +3 -25
- package/dist/domain/processObservation.js +0 -29
- package/dist/domain/processScenario.js +28 -228
- package/dist/domain/processTraceDimensionProjection.js +0 -15
- package/dist/domain/processTraceEvaluation.js +0 -6
- package/dist/domain/protocolCapture.js +8 -36
- package/dist/domain/reconstructionCoverage.js +3 -2
- package/dist/domain/reconstructionObligationLedgerSchemas.js +4 -12
- package/dist/domain/reconstructionReadinessSchemas.js +4 -3
- package/dist/domain/reconstructionVerification.js +2 -1
- package/dist/domain/reconstructionVerificationSchemas.js +6 -13
- package/dist/domain/referenceSourceClassification.js +0 -110
- package/dist/domain/referenceSourceGraph.js +15 -5
- package/dist/domain/residualUnknown.js +3 -2
- package/dist/domain/runtimeIdentification.js +6 -5
- package/dist/domain/sourceMapContents.js +5 -0
- package/dist/domain/sourceToBundleComparison.js +3 -10
- package/dist/domain/sourceToBundleComparisonSchemas.js +7 -6
- package/dist/domain/sourceToBundleSignals.js +9 -3
- package/dist/domain/staticRuntimeCorrelation.js +5 -11
- package/dist/domain/webBundleAnalysis.js +17 -9
- package/dist/domain/webBundleAnalyzer.js +1 -1
- package/dist/domain/webCaptureDiff.js +5 -11
- package/dist/domain/webCaptureDiffSchemas.js +2 -1
- package/dist/domain/webMcpDiscovery.js +2 -1
- package/dist/dotnet/ManagedMemberInspectorCore.js +15 -7
- package/dist/dotnet/ManagedMemberInstructionDecoder.js +57 -40
- package/dist/dotnet/ManagedMemberRows.js +2 -0
- package/dist/dotnet/ManagedMethodBodyReader.js +15 -8
- package/dist/dotnet/ManagedPeReader.js +2 -0
- package/dist/generatedMcpToolCatalog.js +1 -1
- package/dist/generatedPackageMetadata.js +2 -2
- package/dist/ghidra/GhidraAnalysisProfile.js +15 -5
- package/dist/ghidra/GhidraClient.js +38 -8
- package/dist/ghidra/GhidraFunctionValues.js +56 -20
- package/dist/ghidra/GhidraInstallation.js +7 -4
- package/dist/ghidra/GhidraInventoryValues.js +44 -9
- package/dist/ghidra/GhidraLauncher.js +18 -3
- package/dist/ghidra/GhidraProvider.js +23 -2
- package/dist/ghidra/GhidraRequestQueue.js +45 -4
- package/dist/ghidra/GhidraSessionValues.js +5 -0
- package/dist/hopper/HopperAnalysisProfile.js +2 -0
- package/dist/hopper/HopperProvider.js +29 -6
- package/dist/hopper/HopperTargetLease.js +18 -4
- package/dist/logger.js +0 -13
- package/dist/main/messages.js +0 -1
- package/dist/main/reload.js +3 -32
- package/dist/main/shutdown.js +1 -2
- package/dist/main/transport.js +0 -17
- package/dist/main.js +0 -10
- package/dist/native/AppleDispatchMetadata.js +582 -0
- package/dist/native/AppleObjcProtocols.js +88 -0
- package/dist/native/AppleSwiftVtables.js +86 -0
- package/dist/native/CommandRunner.js +1 -1
- package/dist/native/NativeHostCapabilities.js +23 -0
- package/dist/native/NativeMacOSProvider.js +61 -9
- package/dist/native/NativeMachoInspection.js +39 -6
- package/dist/native/NativeUiHelperRuntime.js +42 -0
- package/dist/native/NativeUiObservation.js +174 -0
- package/dist/native/parsers/codesign.js +4 -1
- package/dist/native/parsers/dyldInfo.js +51 -25
- package/dist/native/parsers/lipo.js +13 -4
- package/dist/native/parsers/otool.js +84 -39
- package/dist/native/parsers/plist.js +2 -1
- package/dist/process/ExecFileOutput.js +5 -1
- package/dist/process/ProcessOwnership.js +69 -33
- package/dist/process/ProcessOwnershipObservation.js +31 -12
- package/dist/process/ProviderProcess.js +4 -2
- package/dist/reference/ReferenceSourceReaderEntries.js +48 -31
- package/dist/reference/ReferenceSourceReaderErrors.js +24 -0
- package/dist/reference/ReferenceSourceReaderFile.js +11 -5
- package/dist/reference/ReferenceSourceReaderValidate.js +22 -8
- package/dist/server/createServer.js +7 -62
- package/dist/server/registerApplicationTools/helpers.js +2 -9
- package/dist/server/registerApplicationTools.js +0 -4
- package/dist/server/registerArtifactComparisonTool.js +1 -1
- package/dist/server/registerBrowserScenarioTool.js +4 -2
- package/dist/server/registerBrowserTools.js +7 -7
- package/dist/server/registerBundleComparisonTool.js +1 -1
- package/dist/server/registerCloseLifecycleTool.js +1 -1
- package/dist/server/registerElectronTools.js +10 -4
- package/dist/server/registerEnhancedTools.js +20 -12
- package/dist/server/registerEvidenceTools.js +4 -28
- package/dist/server/registerFunctionComparisonTool.js +1 -1
- package/dist/server/registerInvestigationTools.js +6 -6
- package/dist/server/registerJavaScriptRuntimeObservationTools.js +2 -2
- package/dist/server/registerManagedTools.js +28 -14
- package/dist/server/registerManagedWorkflowTools.js +0 -2
- package/dist/server/registerProcessComparisonTool.js +1 -3
- package/dist/server/registerSessionRecordTools.js +9 -9
- package/dist/server/registerSessionStatusTool.js +1 -1
- package/dist/server/registerSessionTools.js +28 -57
- package/dist/server/sessionAvailabilityPolicy.js +2 -3
- package/dist/server/sessionToolPolicies.js +0 -4
- package/dist/server/toolResult.js +8 -10
- package/package.json +32 -22
- package/skills/reverse-engineer-anything/SKILL.md +15 -11
- package/skills/reverse-engineer-anything/references/evidence-workflows.md +3 -2
- package/skills/reverse-engineer-anything/references/javascript-applications.md +3 -2
- package/skills/reverse-engineer-anything/references/native-and-artifacts.md +8 -6
- package/skills/reverse-engineer-anything/references/runtime-observation.md +15 -11
- package/dist/application/CommandShimReplay.js +0 -152
- package/dist/application/ConfiguredRoots.js +0 -19
- package/dist/application/InstrumentedJavaScriptReplayHost.js +0 -36
- package/dist/application/JavaScriptReplayPermission.js +0 -16
- package/dist/application/JavaScriptReplayPlanning.js +0 -207
- package/dist/application/JavaScriptReplayService.js +0 -274
- package/dist/application/LoopbackReplay.js +0 -389
- package/dist/application/LoopbackReplayRecorder.js +0 -129
- package/dist/application/ManagedRuntimeCorrelationService.js +0 -104
- package/dist/application/NodeRuntimeCharacterizationService.js +0 -191
- package/dist/application/PermissionAuthority.js +0 -268
- package/dist/application/PermissionConfiguration.js +0 -26
- package/dist/application/PermissionFailure.js +0 -5
- package/dist/application/ProcessCaptureAuthority.js +0 -24
- package/dist/application/ProcessCapturePermission.js +0 -13
- package/dist/application/ProcessCheckpoints.js +0 -178
- package/dist/application/ProcessReactiveCoordinator.js +0 -223
- package/dist/application/ProcessReactiveEffects.js +0 -153
- package/dist/application/ProcessReactiveHarness.js +0 -106
- package/dist/application/ProcessReactiveObservations.js +0 -105
- package/dist/application/ProjectPermissionStore.js +0 -199
- package/dist/application/RuntimeExecutableDiagnostics.js +0 -198
- package/dist/application/Upgrade.js +0 -134
- package/dist/browser/SensitiveTextCapture.js +0 -8
- package/dist/cliPolicyCommands.js +0 -185
- package/dist/config/browserScenario.js +0 -77
- package/dist/config/electronAutomation.js +0 -35
- package/dist/config/javascriptReplay.js +0 -41
- package/dist/config/managedRuntime.js +0 -25
- package/dist/config/passiveObservation.js +0 -87
- package/dist/config/permissions.js +0 -23
- package/dist/config/processCapture.js +0 -47
- package/dist/contracts/replayMachineExample.js +0 -37
- package/dist/domain/javascriptExportInstrumentation.js +0 -95
- package/dist/domain/javascriptReplay.js +0 -360
- package/dist/domain/managedRuntimeCorrelation.js +0 -181
- package/dist/domain/nodeRuntimeCharacterization.js +0 -63
- package/dist/domain/permissionPolicy.js +0 -176
- package/dist/domain/processCaptureReactiveSchema.js +0 -68
- package/dist/domain/processCaptureReactiveValidation.js +0 -180
- package/dist/domain/processReactiveCheckpointDataflow.js +0 -32
- package/dist/domain/processReactiveMatching.js +0 -196
- package/dist/domain/processReactiveRuntime.js +0 -116
- package/dist/domain/processReactiveScenario.js +0 -296
- package/dist/domain/processReactiveScenarioPreflight.js +0 -95
- package/dist/domain/processReactiveTransition.js +0 -187
- package/dist/domain/replayMachine.js +0 -320
- package/dist/domain/replayMachineRun.js +0 -168
- package/dist/domain/replayMachineRuntime.js +0 -296
- package/dist/domain/replayMachineValues.js +0 -84
- package/dist/domain/runtimeCharacterization.js +0 -84
- package/dist/replay/JavaScriptReplayWorker.js +0 -382
- package/dist/replay/JavaScriptReplayWorkerTypes.js +0 -1
- package/dist/replay/LinuxJavaScriptReplayRunner.js +0 -216
- package/dist/replay/LinuxJavaScriptReplaySandbox.js +0 -121
- package/dist/replay/LinuxRuntimeClosure.js +0 -44
- package/dist/replay/LinuxSeccompPolicy.js +0 -40
- package/dist/replay/ReplayOutcome.js +0 -104
- package/dist/replay/ReplayProcessLifecycle.js +0 -96
- package/dist/replay/ReplaySeccompFile.js +0 -29
- package/dist/replay/ReplayWorkerProtocol.js +0 -58
- package/dist/replay/SystemJavaScriptReplayHost.js +0 -153
- package/dist/server/ProcessCaptureElicitation.js +0 -153
- package/dist/server/registerApplicationTools/characterization.js +0 -46
- package/dist/server/registerApplicationTools/controlledReplay.js +0 -31
- package/dist/server/registerManagedWorkflowTools/planManagedRuntimeCorrelation.js +0 -29
- package/dist/server/registerReplayMachineTool.js +0 -14
- package/skills/reverse-engineer-anything/references/controlled-replay.md +0 -12
|
@@ -1,187 +0,0 @@
|
|
|
1
|
-
const createTransitionRecord = (input) => {
|
|
2
|
-
const state = {
|
|
3
|
-
sequence: input.sequence,
|
|
4
|
-
transition_id: input.transition.id,
|
|
5
|
-
state_before: input.stateBefore,
|
|
6
|
-
trigger_event_ids: input.triggerEventIds,
|
|
7
|
-
action_event_ids: input.effectResults.map(({ observation }) => observation.event_id),
|
|
8
|
-
action_types: input.transition.actions.map(({ type }) => type),
|
|
9
|
-
};
|
|
10
|
-
return input.transition.target.kind === "finish"
|
|
11
|
-
? {
|
|
12
|
-
...state,
|
|
13
|
-
state_after: null,
|
|
14
|
-
outcome: input.transition.target.outcome,
|
|
15
|
-
}
|
|
16
|
-
: {
|
|
17
|
-
...state,
|
|
18
|
-
state_after: input.transition.target.state,
|
|
19
|
-
outcome: null,
|
|
20
|
-
};
|
|
21
|
-
};
|
|
22
|
-
const counterValue = (counters, id) => counters.find((counter) => counter.id === id)?.count ?? 0;
|
|
23
|
-
const incrementCounter = (counters, id) => {
|
|
24
|
-
let found = false;
|
|
25
|
-
const updated = counters.map((counter) => {
|
|
26
|
-
if (counter.id !== id)
|
|
27
|
-
return counter;
|
|
28
|
-
found = true;
|
|
29
|
-
return { id, count: counter.count + 1 };
|
|
30
|
-
});
|
|
31
|
-
return found ? updated : [...updated, { id, count: 1 }];
|
|
32
|
-
};
|
|
33
|
-
/** Commit one uniquely selected transition after its declarative effects succeed. */
|
|
34
|
-
const applyProcessReactiveTransition = (input) => {
|
|
35
|
-
if (input.effectResults.length !== input.transition.actions.length)
|
|
36
|
-
throw new TypeError("Reactive transition effects do not match the admitted actions");
|
|
37
|
-
const record = createTransitionRecord({
|
|
38
|
-
sequence: input.snapshot.transitions.length,
|
|
39
|
-
stateBefore: input.snapshot.active_state,
|
|
40
|
-
transition: input.transition,
|
|
41
|
-
triggerEventIds: input.triggerEventIds,
|
|
42
|
-
effectResults: input.effectResults,
|
|
43
|
-
});
|
|
44
|
-
const outcome = record.outcome;
|
|
45
|
-
const stateAfter = record.state_after;
|
|
46
|
-
const consumed = new Set(input.snapshot.consumed_event_ids);
|
|
47
|
-
for (const eventId of input.consumeEventIds)
|
|
48
|
-
consumed.add(eventId);
|
|
49
|
-
const checkpoints = [...input.snapshot.checkpoints];
|
|
50
|
-
for (const [index, action] of input.transition.actions.entries()) {
|
|
51
|
-
const effect = input.effectResults[index];
|
|
52
|
-
if (effect === undefined)
|
|
53
|
-
throw new TypeError("Reactive transition effect is missing");
|
|
54
|
-
if (action.type === "checkpoint")
|
|
55
|
-
checkpoints.push({
|
|
56
|
-
name: action.name,
|
|
57
|
-
event_id: effect.observation.event_id,
|
|
58
|
-
capture_order: effect.observation.capture_order,
|
|
59
|
-
});
|
|
60
|
-
}
|
|
61
|
-
const completedCaptureOrder = Math.max(input.observation.capture_order, ...input.effectResults.map(({ observation }) => observation.capture_order));
|
|
62
|
-
const nextState = {
|
|
63
|
-
...input.snapshot,
|
|
64
|
-
active_state: stateAfter ?? input.snapshot.active_state,
|
|
65
|
-
state_entry_capture_order: stateAfter === null
|
|
66
|
-
? input.snapshot.state_entry_capture_order
|
|
67
|
-
: completedCaptureOrder + 1,
|
|
68
|
-
consumed_event_ids: [...consumed],
|
|
69
|
-
transition_uses: incrementCounter(input.snapshot.transition_uses, input.transition.id),
|
|
70
|
-
state_visits: stateAfter === null
|
|
71
|
-
? input.snapshot.state_visits
|
|
72
|
-
: incrementCounter(input.snapshot.state_visits, stateAfter),
|
|
73
|
-
checkpoints,
|
|
74
|
-
transitions: [...input.snapshot.transitions, record],
|
|
75
|
-
};
|
|
76
|
-
let next = outcome === null
|
|
77
|
-
? { ...nextState, status: "running", outcome: null }
|
|
78
|
-
: { ...nextState, status: "finished", outcome };
|
|
79
|
-
if (stateAfter !== null) {
|
|
80
|
-
const nextState = input.scenario.states.find(({ id }) => id === stateAfter);
|
|
81
|
-
if (nextState === undefined ||
|
|
82
|
-
counterValue(next.state_visits, stateAfter) > nextState.max_visits)
|
|
83
|
-
next = { ...next, status: "finished", outcome: "capture_incomplete" };
|
|
84
|
-
}
|
|
85
|
-
return next.outcome === "capture_incomplete"
|
|
86
|
-
? {
|
|
87
|
-
kind: "finished",
|
|
88
|
-
snapshot: next,
|
|
89
|
-
evaluations: input.evaluations,
|
|
90
|
-
outcome: next.outcome,
|
|
91
|
-
}
|
|
92
|
-
: {
|
|
93
|
-
kind: "transition",
|
|
94
|
-
snapshot: next,
|
|
95
|
-
evaluations: input.evaluations,
|
|
96
|
-
record,
|
|
97
|
-
};
|
|
98
|
-
};
|
|
99
|
-
const terminalControlObservationMatches = (action, payload) => {
|
|
100
|
-
if (action.type === "resize")
|
|
101
|
-
return (payload["type"] === "resize" &&
|
|
102
|
-
payload["data"] === `${String(action.columns)}x${String(action.rows)}`);
|
|
103
|
-
if (action.type === "close_stdin")
|
|
104
|
-
return payload["type"] === "stdin_close" && payload["data"] === "";
|
|
105
|
-
return payload["type"] === "signal" && payload["data"] === action.signal;
|
|
106
|
-
};
|
|
107
|
-
const effectObservationMatchesAction = (action, observation, committedSensitiveInputs) => {
|
|
108
|
-
const payload = typeof observation.payload === "object" &&
|
|
109
|
-
observation.payload !== null &&
|
|
110
|
-
!Array.isArray(observation.payload)
|
|
111
|
-
? observation.payload
|
|
112
|
-
: null;
|
|
113
|
-
const journalIdentityMatches = observation.source_sequence === observation.location.index &&
|
|
114
|
-
observation.capture_order === observation.location.capture_order &&
|
|
115
|
-
observation.event_id ===
|
|
116
|
-
`obs.${observation.location.collection}.${String(observation.location.index)}`;
|
|
117
|
-
if (!journalIdentityMatches || payload === null)
|
|
118
|
-
return false;
|
|
119
|
-
if (action.type === "checkpoint")
|
|
120
|
-
return (observation.source === "filesystem" &&
|
|
121
|
-
observation.location.collection === "filesystem_checkpoints" &&
|
|
122
|
-
payload["name"] === action.name);
|
|
123
|
-
if (observation.source !== "interaction" ||
|
|
124
|
-
observation.location.collection !== "interaction_events" ||
|
|
125
|
-
payload["outcome"] !== "dispatched")
|
|
126
|
-
return false;
|
|
127
|
-
if (action.type === "send_input")
|
|
128
|
-
return (payload["type"] === "input" &&
|
|
129
|
-
payload["data"] ===
|
|
130
|
-
expectedInputEvidence(action.data, action.sensitive, committedSensitiveInputs));
|
|
131
|
-
return terminalControlObservationMatches(action, payload);
|
|
132
|
-
};
|
|
133
|
-
const expectedInputEvidence = (data, sensitive, committedSensitiveInput) => !sensitive ||
|
|
134
|
-
(committedSensitiveInput && /^<redacted-input:\d+-bytes>$/.test(data))
|
|
135
|
-
? data
|
|
136
|
-
: `<redacted-input:${String(Buffer.byteLength(data))}-bytes>`;
|
|
137
|
-
const failedProposal = (proposed, outcome) => ({
|
|
138
|
-
kind: "finished",
|
|
139
|
-
outcome,
|
|
140
|
-
evaluations: proposed.evaluations,
|
|
141
|
-
snapshot: { ...proposed.snapshot, status: "finished", outcome },
|
|
142
|
-
});
|
|
143
|
-
/** Commit a proposal only after the host reports every effect as successful. */
|
|
144
|
-
export const commitProcessReactiveProposal = (scenario, proposed, results, options = {}) => {
|
|
145
|
-
if (results.some(({ status }) => status === "target_lost"))
|
|
146
|
-
return failedProposal(proposed, "target_lost");
|
|
147
|
-
const state = scenario.states.find(({ id }) => id === proposed.snapshot.active_state);
|
|
148
|
-
const transition = state?.on.find(({ id }) => id === proposed.proposal.transition_id);
|
|
149
|
-
const observation = proposed.snapshot.observations.find(({ event_id }) => event_id === proposed.proposal.observation_event_id);
|
|
150
|
-
if (transition === undefined ||
|
|
151
|
-
observation === undefined ||
|
|
152
|
-
canonicalize(transition) !== proposed.proposal.transition_identity ||
|
|
153
|
-
canonicalize(proposed.effects) !== canonicalize(transition.actions))
|
|
154
|
-
return failedProposal(proposed, "target_lost");
|
|
155
|
-
if (results.length !== transition.actions.length ||
|
|
156
|
-
results.some(({ status }) => status === "rejected"))
|
|
157
|
-
return failedProposal(proposed, "action_rejected");
|
|
158
|
-
const succeeded = results.filter((result) => result.status === "succeeded");
|
|
159
|
-
let previousOrder = proposed.snapshot.observations.find(({ event_id }) => event_id === proposed.proposal.observation_event_id)?.capture_order ?? -1;
|
|
160
|
-
const knownEventIds = new Set([
|
|
161
|
-
...proposed.snapshot.observations.map(({ event_id }) => event_id),
|
|
162
|
-
...proposed.snapshot.transitions.flatMap(({ action_event_ids }) => action_event_ids),
|
|
163
|
-
]);
|
|
164
|
-
for (const [index, result] of succeeded.entries()) {
|
|
165
|
-
const action = transition.actions[index];
|
|
166
|
-
const effectObservation = result.observation;
|
|
167
|
-
if (action === undefined ||
|
|
168
|
-
!effectObservationMatchesAction(action, effectObservation, options.committedSensitiveInputs ?? false) ||
|
|
169
|
-
!Number.isSafeInteger(effectObservation.capture_order) ||
|
|
170
|
-
effectObservation.capture_order <= previousOrder ||
|
|
171
|
-
knownEventIds.has(effectObservation.event_id))
|
|
172
|
-
return failedProposal(proposed, "action_rejected");
|
|
173
|
-
knownEventIds.add(effectObservation.event_id);
|
|
174
|
-
previousOrder = effectObservation.capture_order;
|
|
175
|
-
}
|
|
176
|
-
return applyProcessReactiveTransition({
|
|
177
|
-
scenario,
|
|
178
|
-
snapshot: proposed.snapshot,
|
|
179
|
-
observation,
|
|
180
|
-
transition,
|
|
181
|
-
triggerEventIds: proposed.proposal.trigger_event_ids,
|
|
182
|
-
consumeEventIds: proposed.proposal.consume_event_ids,
|
|
183
|
-
effectResults: succeeded,
|
|
184
|
-
evaluations: proposed.evaluations,
|
|
185
|
-
});
|
|
186
|
-
};
|
|
187
|
-
import canonicalize from "canonicalize";
|
|
@@ -1,320 +0,0 @@
|
|
|
1
|
-
import { MultiDirectedGraph } from "graphology";
|
|
2
|
-
import { singleSource } from "graphology-shortest-path";
|
|
3
|
-
import canonicalize from "canonicalize";
|
|
4
|
-
import { z } from "zod";
|
|
5
|
-
const replayIdentifierSchema = z.string().regex(/^[A-Za-z][A-Za-z0-9_-]*$/u);
|
|
6
|
-
const replayPathSchema = z.array(z.union([z.string(), z.number().int().nonnegative()]));
|
|
7
|
-
const sensitiveHeaderNames = new Set([
|
|
8
|
-
"authorization",
|
|
9
|
-
"cookie",
|
|
10
|
-
"proxy-authorization",
|
|
11
|
-
"set-cookie",
|
|
12
|
-
]);
|
|
13
|
-
const headerNameSchema = z
|
|
14
|
-
.string()
|
|
15
|
-
.min(1)
|
|
16
|
-
.regex(/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u);
|
|
17
|
-
const headerValueSchema = z.string().regex(/^[\t\x20-\x7e\x80-\xff]*$/u);
|
|
18
|
-
const replayHeaderMatchersSchema = z
|
|
19
|
-
.record(headerNameSchema, headerValueSchema)
|
|
20
|
-
.superRefine((headers, context) => {
|
|
21
|
-
const names = Object.keys(headers).map((name) => name.toLowerCase());
|
|
22
|
-
if (new Set(names).size !== names.length)
|
|
23
|
-
context.addIssue({
|
|
24
|
-
code: "custom",
|
|
25
|
-
message: "replay header matchers must be unique ignoring case",
|
|
26
|
-
input: headers,
|
|
27
|
-
});
|
|
28
|
-
if (names.some((name) => sensitiveHeaderNames.has(name)))
|
|
29
|
-
context.addIssue({
|
|
30
|
-
code: "custom",
|
|
31
|
-
message: "replay header matchers cannot persist authorization or cookie values; capture and guard through a secret alias instead",
|
|
32
|
-
input: headers,
|
|
33
|
-
});
|
|
34
|
-
})
|
|
35
|
-
.transform((headers) => Object.fromEntries(Object.entries(headers).map(([name, value]) => [
|
|
36
|
-
name.toLowerCase(),
|
|
37
|
-
value,
|
|
38
|
-
])));
|
|
39
|
-
const replayValueSourceSchema = z.discriminatedUnion("source", [
|
|
40
|
-
z.strictObject({
|
|
41
|
-
source: z.literal("request_header"),
|
|
42
|
-
name: z
|
|
43
|
-
.string()
|
|
44
|
-
.min(1)
|
|
45
|
-
.transform((name) => name.toLowerCase()),
|
|
46
|
-
}),
|
|
47
|
-
z.strictObject({ source: z.literal("request_json"), path: replayPathSchema }),
|
|
48
|
-
z.strictObject({
|
|
49
|
-
source: z.literal("websocket_json"),
|
|
50
|
-
path: replayPathSchema,
|
|
51
|
-
}),
|
|
52
|
-
z.strictObject({ source: z.literal("action_json"), path: replayPathSchema }),
|
|
53
|
-
]);
|
|
54
|
-
const replayTriggerSchema = z.discriminatedUnion("protocol", [
|
|
55
|
-
z.strictObject({
|
|
56
|
-
protocol: z.literal("http"),
|
|
57
|
-
method: z
|
|
58
|
-
.string()
|
|
59
|
-
.min(1)
|
|
60
|
-
.transform((method) => method.toUpperCase()),
|
|
61
|
-
path: z.string().startsWith("/"),
|
|
62
|
-
headers: replayHeaderMatchersSchema.default({}),
|
|
63
|
-
body: z.string().nullable().default(null),
|
|
64
|
-
}),
|
|
65
|
-
z.strictObject({
|
|
66
|
-
protocol: z.literal("websocket_connect"),
|
|
67
|
-
path: z.string().startsWith("/"),
|
|
68
|
-
headers: replayHeaderMatchersSchema.default({}),
|
|
69
|
-
}),
|
|
70
|
-
z.strictObject({
|
|
71
|
-
protocol: z.literal("websocket_message"),
|
|
72
|
-
path: z.string().startsWith("/"),
|
|
73
|
-
body: z.string().nullable().default(null),
|
|
74
|
-
}),
|
|
75
|
-
]);
|
|
76
|
-
const replayActionSchema = z.discriminatedUnion("type", [
|
|
77
|
-
z.strictObject({
|
|
78
|
-
type: z.literal("http_response"),
|
|
79
|
-
status: z.number().int().min(100).max(599),
|
|
80
|
-
headers: z.record(headerNameSchema, headerValueSchema).default({}),
|
|
81
|
-
body: z.string(),
|
|
82
|
-
}),
|
|
83
|
-
z.strictObject({
|
|
84
|
-
type: z.literal("websocket_send"),
|
|
85
|
-
data: z.string(),
|
|
86
|
-
}),
|
|
87
|
-
z.strictObject({ type: z.literal("disconnect") }),
|
|
88
|
-
z.strictObject({
|
|
89
|
-
type: z.literal("delay"),
|
|
90
|
-
duration_ms: z.number().int().safe().nonnegative(),
|
|
91
|
-
}),
|
|
92
|
-
]);
|
|
93
|
-
const replayTransitionSchema = z.strictObject({
|
|
94
|
-
id: replayIdentifierSchema,
|
|
95
|
-
from: replayIdentifierSchema,
|
|
96
|
-
to: replayIdentifierSchema,
|
|
97
|
-
priority: z.number().int().min(0).default(100),
|
|
98
|
-
trigger: replayTriggerSchema,
|
|
99
|
-
guards: z
|
|
100
|
-
.array(z.strictObject({
|
|
101
|
-
variable: replayIdentifierSchema,
|
|
102
|
-
value: replayValueSourceSchema,
|
|
103
|
-
}))
|
|
104
|
-
.default([]),
|
|
105
|
-
captures: z
|
|
106
|
-
.array(z.strictObject({
|
|
107
|
-
variable: replayIdentifierSchema,
|
|
108
|
-
value: replayValueSourceSchema,
|
|
109
|
-
sensitive: z.boolean().default(false),
|
|
110
|
-
}))
|
|
111
|
-
.default([]),
|
|
112
|
-
actions: z.array(replayActionSchema).min(1),
|
|
113
|
-
max_uses: z.number().int().min(1),
|
|
114
|
-
});
|
|
115
|
-
const transitionSignature = (transition) => {
|
|
116
|
-
const signature = canonicalize({
|
|
117
|
-
from: transition.from,
|
|
118
|
-
priority: transition.priority,
|
|
119
|
-
trigger: transition.trigger,
|
|
120
|
-
});
|
|
121
|
-
if (signature === undefined)
|
|
122
|
-
throw new TypeError("Replay transition signature is not canonical JSON");
|
|
123
|
-
return signature;
|
|
124
|
-
};
|
|
125
|
-
const replayMachineBaseSchema = z.strictObject({
|
|
126
|
-
initial_state: replayIdentifierSchema,
|
|
127
|
-
states: z
|
|
128
|
-
.array(z.strictObject({
|
|
129
|
-
name: replayIdentifierSchema,
|
|
130
|
-
terminal: z.boolean().default(false),
|
|
131
|
-
max_visits: z.number().int().min(1).default(100_000),
|
|
132
|
-
}))
|
|
133
|
-
.min(1),
|
|
134
|
-
transitions: z.array(replayTransitionSchema).min(1),
|
|
135
|
-
max_transitions: z.number().int().min(1),
|
|
136
|
-
limits: z
|
|
137
|
-
.strictObject({
|
|
138
|
-
connections: z.number().int().min(1).default(100),
|
|
139
|
-
messages: z.number().int().min(1).default(10_000),
|
|
140
|
-
bytes: z.number().int().min(1).default(1_000_000),
|
|
141
|
-
duration_ms: z.number().int().min(1).default(30_000),
|
|
142
|
-
})
|
|
143
|
-
.default({
|
|
144
|
-
connections: 100,
|
|
145
|
-
messages: 10_000,
|
|
146
|
-
bytes: 1_000_000,
|
|
147
|
-
duration_ms: 30_000,
|
|
148
|
-
}),
|
|
149
|
-
});
|
|
150
|
-
const validateReplayIdentities = (machine, context) => {
|
|
151
|
-
const names = machine.states.map(({ name }) => name);
|
|
152
|
-
const nameSet = new Set(names);
|
|
153
|
-
if (nameSet.size !== names.length)
|
|
154
|
-
context.addIssue({
|
|
155
|
-
code: "custom",
|
|
156
|
-
message: "replay machine state names must be unique",
|
|
157
|
-
path: ["states"],
|
|
158
|
-
input: machine,
|
|
159
|
-
});
|
|
160
|
-
if (!nameSet.has(machine.initial_state))
|
|
161
|
-
context.addIssue({
|
|
162
|
-
code: "custom",
|
|
163
|
-
message: "replay machine initial state is not declared",
|
|
164
|
-
path: ["initial_state"],
|
|
165
|
-
input: machine,
|
|
166
|
-
});
|
|
167
|
-
const transitionIds = machine.transitions.map(({ id }) => id);
|
|
168
|
-
if (new Set(transitionIds).size !== transitionIds.length)
|
|
169
|
-
context.addIssue({
|
|
170
|
-
code: "custom",
|
|
171
|
-
message: "replay machine transition IDs must be unique",
|
|
172
|
-
path: ["transitions"],
|
|
173
|
-
input: machine,
|
|
174
|
-
});
|
|
175
|
-
const signatures = machine.transitions.map(transitionSignature);
|
|
176
|
-
if (new Set(signatures).size !== signatures.length)
|
|
177
|
-
context.addIssue({
|
|
178
|
-
code: "custom",
|
|
179
|
-
message: "replay machine transitions with the same state, trigger, and priority are ambiguous",
|
|
180
|
-
path: ["transitions"],
|
|
181
|
-
input: machine,
|
|
182
|
-
});
|
|
183
|
-
return nameSet;
|
|
184
|
-
};
|
|
185
|
-
const validateReplayVariables = (machine, context) => {
|
|
186
|
-
const capturedVariables = new Map();
|
|
187
|
-
for (const [transitionIndex, transition] of machine.transitions.entries()) {
|
|
188
|
-
for (const capture of transition.captures) {
|
|
189
|
-
if (capture.sensitive && capture.value.source === "action_json")
|
|
190
|
-
context.addIssue({
|
|
191
|
-
code: "custom",
|
|
192
|
-
message: "sensitive replay captures cannot read literal action JSON persisted in the replay plan",
|
|
193
|
-
path: ["transitions", transitionIndex, "captures"],
|
|
194
|
-
input: machine,
|
|
195
|
-
});
|
|
196
|
-
const sensitivity = capturedVariables.get(capture.variable);
|
|
197
|
-
if (sensitivity !== undefined && sensitivity !== capture.sensitive)
|
|
198
|
-
context.addIssue({
|
|
199
|
-
code: "custom",
|
|
200
|
-
message: "a replay variable cannot change secret classification between captures",
|
|
201
|
-
path: ["transitions", transitionIndex, "captures"],
|
|
202
|
-
input: machine,
|
|
203
|
-
});
|
|
204
|
-
capturedVariables.set(capture.variable, capture.sensitive);
|
|
205
|
-
}
|
|
206
|
-
}
|
|
207
|
-
const availableByState = new Map([
|
|
208
|
-
[machine.initial_state, new Set()],
|
|
209
|
-
]);
|
|
210
|
-
let changed = true;
|
|
211
|
-
while (changed) {
|
|
212
|
-
changed = false;
|
|
213
|
-
for (const transition of machine.transitions) {
|
|
214
|
-
const available = availableByState.get(transition.from);
|
|
215
|
-
if (available === undefined ||
|
|
216
|
-
transition.guards.some(({ variable }) => !available.has(variable)))
|
|
217
|
-
continue;
|
|
218
|
-
const nextAvailable = new Set(available);
|
|
219
|
-
for (const { variable } of transition.captures)
|
|
220
|
-
nextAvailable.add(variable);
|
|
221
|
-
const existing = availableByState.get(transition.to);
|
|
222
|
-
if (existing === undefined) {
|
|
223
|
-
availableByState.set(transition.to, nextAvailable);
|
|
224
|
-
changed = true;
|
|
225
|
-
continue;
|
|
226
|
-
}
|
|
227
|
-
for (const variable of nextAvailable)
|
|
228
|
-
if (!existing.has(variable)) {
|
|
229
|
-
existing.add(variable);
|
|
230
|
-
changed = true;
|
|
231
|
-
}
|
|
232
|
-
}
|
|
233
|
-
}
|
|
234
|
-
for (const [transitionIndex, transition] of machine.transitions.entries())
|
|
235
|
-
for (const [guardIndex, guard] of transition.guards.entries())
|
|
236
|
-
if (!availableByState.get(transition.from)?.has(guard.variable))
|
|
237
|
-
context.addIssue({
|
|
238
|
-
code: "custom",
|
|
239
|
-
message: "replay guard variable is not captured on an executable path before use",
|
|
240
|
-
path: ["transitions", transitionIndex, "guards", guardIndex],
|
|
241
|
-
input: machine,
|
|
242
|
-
});
|
|
243
|
-
};
|
|
244
|
-
const validateReplayActions = (machine, context) => {
|
|
245
|
-
for (const [index, transition] of machine.transitions.entries()) {
|
|
246
|
-
const httpResponses = transition.actions.filter(({ type }) => type === "http_response").length;
|
|
247
|
-
const websocketSends = transition.actions.some(({ type }) => type === "websocket_send");
|
|
248
|
-
const invalid = transition.trigger.protocol === "http"
|
|
249
|
-
? httpResponses !== 1 || websocketSends
|
|
250
|
-
: httpResponses !== 0;
|
|
251
|
-
if (invalid)
|
|
252
|
-
context.addIssue({
|
|
253
|
-
code: "custom",
|
|
254
|
-
message: "replay actions must match the transition protocol and HTTP transitions require exactly one response",
|
|
255
|
-
path: ["transitions", index, "actions"],
|
|
256
|
-
input: machine,
|
|
257
|
-
});
|
|
258
|
-
}
|
|
259
|
-
};
|
|
260
|
-
const validateReplayGraph = (machine, names, context) => {
|
|
261
|
-
const graph = new MultiDirectedGraph();
|
|
262
|
-
for (const name of names)
|
|
263
|
-
graph.addNode(name);
|
|
264
|
-
for (const [index, transition] of machine.transitions.entries()) {
|
|
265
|
-
if (!names.has(transition.from) || !names.has(transition.to)) {
|
|
266
|
-
context.addIssue({
|
|
267
|
-
code: "custom",
|
|
268
|
-
message: "replay machine transition references an unknown state",
|
|
269
|
-
path: ["transitions", index],
|
|
270
|
-
input: machine,
|
|
271
|
-
});
|
|
272
|
-
continue;
|
|
273
|
-
}
|
|
274
|
-
graph.addDirectedEdgeWithKey(`${transition.id}:${String(index)}`, transition.from, transition.to);
|
|
275
|
-
}
|
|
276
|
-
if (!graph.hasNode(machine.initial_state))
|
|
277
|
-
return;
|
|
278
|
-
if (!machine.states.some(({ terminal }) => terminal))
|
|
279
|
-
context.addIssue({
|
|
280
|
-
code: "custom",
|
|
281
|
-
message: "replay machine must declare at least one terminal state",
|
|
282
|
-
path: ["states"],
|
|
283
|
-
input: machine,
|
|
284
|
-
});
|
|
285
|
-
const reachable = new Set(Object.keys(singleSource(graph, machine.initial_state)));
|
|
286
|
-
reachable.add(machine.initial_state);
|
|
287
|
-
for (const [index, state] of machine.states.entries()) {
|
|
288
|
-
if (!reachable.has(state.name))
|
|
289
|
-
context.addIssue({
|
|
290
|
-
code: "custom",
|
|
291
|
-
message: "replay machine state is unreachable from the initial state",
|
|
292
|
-
path: ["states", index],
|
|
293
|
-
input: machine,
|
|
294
|
-
});
|
|
295
|
-
if (state.terminal && graph.outDegree(state.name) > 0)
|
|
296
|
-
context.addIssue({
|
|
297
|
-
code: "custom",
|
|
298
|
-
message: "terminal replay machine state cannot have outgoing transitions",
|
|
299
|
-
path: ["states", index],
|
|
300
|
-
input: machine,
|
|
301
|
-
});
|
|
302
|
-
if (!state.terminal && graph.outDegree(state.name) === 0)
|
|
303
|
-
context.addIssue({
|
|
304
|
-
code: "custom",
|
|
305
|
-
message: "non-terminal replay machine state has no outgoing transition",
|
|
306
|
-
path: ["states", index],
|
|
307
|
-
input: machine,
|
|
308
|
-
});
|
|
309
|
-
}
|
|
310
|
-
};
|
|
311
|
-
/** Portable finite replay machine with no executable callbacks. */
|
|
312
|
-
export const replayMachineSchema = z
|
|
313
|
-
.object(replayMachineBaseSchema.shape)
|
|
314
|
-
.strict()
|
|
315
|
-
.superRefine((machine, context) => {
|
|
316
|
-
const names = validateReplayIdentities(machine, context);
|
|
317
|
-
validateReplayVariables(machine, context);
|
|
318
|
-
validateReplayActions(machine, context);
|
|
319
|
-
validateReplayGraph(machine, names, context);
|
|
320
|
-
});
|
|
@@ -1,168 +0,0 @@
|
|
|
1
|
-
import { z } from "zod";
|
|
2
|
-
import { replayMachineSchema } from "./replayMachine.js";
|
|
3
|
-
import { replayMachineEventSchema, ReplayMachineRuntime, } from "./replayMachineRuntime.js";
|
|
4
|
-
const refusalOutcomeSchema = z.enum([
|
|
5
|
-
"unmatched",
|
|
6
|
-
"invalid_state",
|
|
7
|
-
"guard_failed",
|
|
8
|
-
"transition_exhausted",
|
|
9
|
-
"invalid_capture",
|
|
10
|
-
"unexpected_reconnect",
|
|
11
|
-
"limit_exhausted",
|
|
12
|
-
]);
|
|
13
|
-
/** Complete declarative input for one direct replay-machine run. */
|
|
14
|
-
export const replayMachineRunInputSchema = z.strictObject({
|
|
15
|
-
machine: replayMachineSchema,
|
|
16
|
-
events: z.array(replayMachineEventSchema),
|
|
17
|
-
});
|
|
18
|
-
const replayMachineRunDecisionSchema = z.strictObject({
|
|
19
|
-
event_sequence: z.number().int().nonnegative(),
|
|
20
|
-
outcome: z.union([z.literal("matched"), refusalOutcomeSchema]),
|
|
21
|
-
transition_sequence: z.number().int().nonnegative().nullable(),
|
|
22
|
-
});
|
|
23
|
-
const replayRunActionSchema = z.discriminatedUnion("type", [
|
|
24
|
-
z.strictObject({
|
|
25
|
-
type: z.literal("http_response"),
|
|
26
|
-
status: z.number().int().min(100).max(599),
|
|
27
|
-
headers: z.record(z
|
|
28
|
-
.string()
|
|
29
|
-
.min(1)
|
|
30
|
-
.regex(/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u), z.string()),
|
|
31
|
-
body: z.string(),
|
|
32
|
-
}),
|
|
33
|
-
z.strictObject({
|
|
34
|
-
type: z.literal("websocket_send"),
|
|
35
|
-
data: z.string(),
|
|
36
|
-
}),
|
|
37
|
-
z.strictObject({ type: z.literal("disconnect") }),
|
|
38
|
-
z.strictObject({
|
|
39
|
-
type: z.literal("delay"),
|
|
40
|
-
duration_ms: z.number().int().nonnegative(),
|
|
41
|
-
}),
|
|
42
|
-
]);
|
|
43
|
-
const replayRunIdentifierSchema = z
|
|
44
|
-
.string()
|
|
45
|
-
.regex(/^[A-Za-z][A-Za-z0-9_-]{0,63}$/u);
|
|
46
|
-
const replayMachineRunJournalEntrySchema = z.strictObject({
|
|
47
|
-
sequence: z.number().int().nonnegative(),
|
|
48
|
-
at_ms: z.number().int().nonnegative(),
|
|
49
|
-
transition_id: replayRunIdentifierSchema,
|
|
50
|
-
state_before: replayRunIdentifierSchema,
|
|
51
|
-
state_after: replayRunIdentifierSchema,
|
|
52
|
-
captured_aliases: z.array(z.strictObject({
|
|
53
|
-
name: replayRunIdentifierSchema,
|
|
54
|
-
sensitive: z.boolean(),
|
|
55
|
-
})),
|
|
56
|
-
});
|
|
57
|
-
/** Capture-value-free result of directly evaluating a finite replay machine. */
|
|
58
|
-
export const replayMachineRunOutputSchema = z.strictObject({
|
|
59
|
-
initial_state: replayRunIdentifierSchema,
|
|
60
|
-
final_state: replayRunIdentifierSchema,
|
|
61
|
-
terminal: z.boolean(),
|
|
62
|
-
decisions: z.array(replayMachineRunDecisionSchema),
|
|
63
|
-
transition_journal: z.array(replayMachineRunJournalEntrySchema),
|
|
64
|
-
transition_actions: z.array(z.strictObject({
|
|
65
|
-
transition_id: replayRunIdentifierSchema,
|
|
66
|
-
actions: z.array(replayRunActionSchema),
|
|
67
|
-
})),
|
|
68
|
-
limits: z.strictObject({
|
|
69
|
-
configured: z.strictObject({
|
|
70
|
-
transitions: z.number().int().positive(),
|
|
71
|
-
connections: z.number().int().positive(),
|
|
72
|
-
messages: z.number().int().positive(),
|
|
73
|
-
bytes: z.number().int().positive(),
|
|
74
|
-
duration_ms: z.number().int().positive(),
|
|
75
|
-
}),
|
|
76
|
-
usage: z.strictObject({
|
|
77
|
-
offered_events: z.number().int().nonnegative(),
|
|
78
|
-
admitted_events: z.number().int().nonnegative(),
|
|
79
|
-
transitions: z.number().int().nonnegative(),
|
|
80
|
-
connections: z.number().int().nonnegative(),
|
|
81
|
-
messages: z.number().int().nonnegative(),
|
|
82
|
-
bytes: z.number().int().nonnegative(),
|
|
83
|
-
last_at_ms: z.number().int().nonnegative(),
|
|
84
|
-
}),
|
|
85
|
-
}),
|
|
86
|
-
});
|
|
87
|
-
const redactAction = (runtime, action) => {
|
|
88
|
-
switch (action.type) {
|
|
89
|
-
case "http_response":
|
|
90
|
-
return {
|
|
91
|
-
...action,
|
|
92
|
-
headers: Object.fromEntries(Object.entries(action.headers).map(([name, value]) => [
|
|
93
|
-
name,
|
|
94
|
-
runtime.redactField(value),
|
|
95
|
-
])),
|
|
96
|
-
body: runtime.redactField(action.body),
|
|
97
|
-
};
|
|
98
|
-
case "websocket_send":
|
|
99
|
-
return { ...action, data: runtime.redactField(action.data) };
|
|
100
|
-
case "delay":
|
|
101
|
-
case "disconnect":
|
|
102
|
-
return action;
|
|
103
|
-
}
|
|
104
|
-
};
|
|
105
|
-
/** Evaluate every supplied event in order without opening sockets or processes. */
|
|
106
|
-
export const runReplayMachine = (input) => {
|
|
107
|
-
const runtime = new ReplayMachineRuntime(input.machine);
|
|
108
|
-
const decisions = [];
|
|
109
|
-
const transitionJournal = [];
|
|
110
|
-
const usedTransitionIds = new Set();
|
|
111
|
-
const transitionById = new Map(input.machine.transitions.map((transition) => [transition.id, transition]));
|
|
112
|
-
for (const [eventSequence, event] of input.events.entries()) {
|
|
113
|
-
const decision = runtime.dispatch(event);
|
|
114
|
-
decisions.push({
|
|
115
|
-
event_sequence: eventSequence,
|
|
116
|
-
outcome: decision.outcome,
|
|
117
|
-
transition_sequence: decision.transition?.sequence ?? null,
|
|
118
|
-
});
|
|
119
|
-
if (decision.outcome !== "matched")
|
|
120
|
-
continue;
|
|
121
|
-
usedTransitionIds.add(decision.transition.transition_id);
|
|
122
|
-
const definition = transitionById.get(decision.transition.transition_id);
|
|
123
|
-
if (definition === undefined)
|
|
124
|
-
throw new TypeError("Replay runtime selected an unknown transition");
|
|
125
|
-
transitionJournal.push({
|
|
126
|
-
sequence: decision.transition.sequence,
|
|
127
|
-
at_ms: decision.transition.at_ms,
|
|
128
|
-
transition_id: decision.transition.transition_id,
|
|
129
|
-
state_before: decision.transition.state_before,
|
|
130
|
-
state_after: decision.transition.state_after,
|
|
131
|
-
captured_aliases: definition.captures.map(({ variable, sensitive }) => ({
|
|
132
|
-
name: variable,
|
|
133
|
-
sensitive,
|
|
134
|
-
})),
|
|
135
|
-
});
|
|
136
|
-
}
|
|
137
|
-
const usage = runtime.usage;
|
|
138
|
-
const transitionActions = input.machine.transitions
|
|
139
|
-
.filter(({ id }) => usedTransitionIds.has(id))
|
|
140
|
-
.map(({ id, actions }) => ({
|
|
141
|
-
transition_id: id,
|
|
142
|
-
actions: actions.map((action) => redactAction(runtime, action)),
|
|
143
|
-
}));
|
|
144
|
-
return replayMachineRunOutputSchema.parse({
|
|
145
|
-
initial_state: input.machine.initial_state,
|
|
146
|
-
final_state: runtime.state,
|
|
147
|
-
terminal: input.machine.states.find(({ name }) => name === runtime.state)
|
|
148
|
-
?.terminal ?? false,
|
|
149
|
-
decisions,
|
|
150
|
-
transition_journal: transitionJournal,
|
|
151
|
-
transition_actions: transitionActions,
|
|
152
|
-
limits: {
|
|
153
|
-
configured: {
|
|
154
|
-
transitions: input.machine.max_transitions,
|
|
155
|
-
...input.machine.limits,
|
|
156
|
-
},
|
|
157
|
-
usage: {
|
|
158
|
-
offered_events: input.events.length,
|
|
159
|
-
admitted_events: usage.events,
|
|
160
|
-
transitions: usage.transitions,
|
|
161
|
-
connections: usage.connections,
|
|
162
|
-
messages: usage.messages,
|
|
163
|
-
bytes: usage.bytes,
|
|
164
|
-
last_at_ms: usage.last_at_ms,
|
|
165
|
-
},
|
|
166
|
-
},
|
|
167
|
-
});
|
|
168
|
-
};
|