fix(javascript): trace wrapped Electron IPC paths in large bundles (#1874)

Co-authored-by: David <17119984+fengdwx@users.noreply.github.com>

tests/boundary/javascript/javascriptAnalysisTransferBudgets.test.ts

@@ -0,0 +1,78 @@
+import { createHash } from "node:crypto";
+import { join } from "node:path";
+import { expect, it } from "vitest";
+import { createTestTempDirectory } from "../../fixtures/temporaryDirectory.js";
+import { analyzeJavaScriptSemantics } from "../../../src/domain/javascript/javascriptSemanticAnalysis.js";
+import { projectJavaScriptModuleSemantics } from "../../../src/domain/javascript/javascriptModuleSemanticIr.js";
+import type { JavaScriptArtifactFile } from "../../../src/domain/javascript/javascriptArtifactFiles.js";
+import { completeJavaScriptAnalysisSteps } from "../../../src/application/javascript/JavaScriptAnalysisControl.js";
+import { projectJavaScriptSemanticFileSteps } from "../../../src/application/javascript/JavaScriptSemanticGraphBuilder.js";
+import {
+  javaScriptTransferByteBudget,
+  writeJavaScriptAnalysisTransfer,
+  readJavaScriptAnalysisTransfer,
+} from "../../../src/javascript/analysis/JavaScriptAnalysisTransfer.js";
+
+it("allows larger streamed transfers only with corresponding parent capacity", () => {
+  const mib = 1024 * 1024;
+  expect(javaScriptTransferByteBudget(0)).toBe(512 * mib);
+  expect(javaScriptTransferByteBudget(4096 * mib)).toBe(512 * mib);
+  expect(javaScriptTransferByteBudget(12288 * mib)).toBe(1536 * mib);
+  expect(javaScriptTransferByteBudget(32768 * mib)).toBe(2048 * mib);
+});
+
+it("enforces the offered complete-file byte budget while preserving authenticated round trips", async () => {
+  const root = await createTestTempDirectory("rea-js-transfer-budget-");
+  const text = "export function add(value) { return value + 1; }";
+  const file: JavaScriptArtifactFile = {
+    path: "app.mjs",
+    sha256: createHash("sha256").update(text).digest("hex"),
+    container_sha256: "a".repeat(64),
+    bytes: Buffer.byteLength(text),
+    inventory_artifact_id: "fixture-source",
+    kind: "javascript",
+    unpacked: false,
+    text: { included: true, value: text },
+  };
+  const ir = analyzeJavaScriptSemantics(text);
+  const module = projectJavaScriptModuleSemantics(ir);
+  const projection = await completeJavaScriptAnalysisSteps(
+    projectJavaScriptSemanticFileSteps(file, ir, 100),
+  );
+  const observed = await writeJavaScriptAnalysisTransfer(
+    join(root, "observed"),
+    module,
+    projection,
+  );
+  const exactPath = join(root, "exact");
+  const exact = await writeJavaScriptAnalysisTransfer(
+    exactPath,
+    module,
+    projection,
+    observed.bytes,
+  );
+  expect(exact).toEqual(observed);
+  expect(await readJavaScriptAnalysisTransfer(exactPath, exact, file)).toEqual({
+    module,
+    projection,
+  });
+  await expect(
+    writeJavaScriptAnalysisTransfer(
+      join(root, "short"),
+      module,
+      projection,
+      observed.bytes - 1,
+    ),
+  ).rejects.toMatchObject({
+    resource: "transport",
+    reportedLimits: { transfer_file_bytes: observed.bytes - 1 },
+  });
+  await expect(
+    writeJavaScriptAnalysisTransfer(
+      join(root, "oversized"),
+      module,
+      projection,
+      2 ** 31 + 1,
+    ),
+  ).rejects.toBeInstanceOf(RangeError);
+});