Files
reverse-engineering-anything/src/cliObservationOptions.ts
T
morluto cb4e5cfbff feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)
* refactor(analysis): centralize resource budgets and recovery facts

* feat(analysis): expose ASAR and Ghidra runtime admission controls

* feat(artifacts): expose reader admission and preserve limited recognition

* feat(javascript): expose recoverable semantic precision budgets

* feat(web): add recoverable source-map budgets and compact retained views

* feat(web): make historical capture decoding budgets recoverable

* fix(desktop): enforce selected view policies across capture and export

* feat(runtime): make Frida and LLDB retention budgets selectable

* feat(native): expose diagnostic budgets and preserve exhaustion causes

* feat(managed): expose recoverable snapshot and representation budgets

* feat(metadata): make Go and Rust inspection budgets recoverable

* feat(wasm): expose representation and producer admissions

* feat(evm): expose per-call worker resource budgets

* feat(android): make resource and string-pool omissions recoverable

* feat(producers): expose command and recorded-capture budgets

* docs(analysis): record recovery contracts and integrated validation

* fix(docs): link calibration oracle from published verification pages

* fix(docs): restore desktop task anchors and receipt links

* test(analysis): align fixtures with selectable budget contracts

* fix(analysis): remove source-location projector dependency cycle

* test(analysis): refresh budget recovery and verifier regressions

* test(analysis): preserve format and publication recovery expectations

* test(windows): align conformance with owned runtime admission

* fix(desktop): preserve selected alias kinds in exported state

* test(analysis): align provider fixtures with recoverable budgets

* test(desktop): validate emitted alias metadata structurally

* fix(ghidra): classify bounded Windows endpoint refusals

* test(cli): assert selectable artifact admission recovery

* fix(cli): preserve capture provenance in environment builds
2026-11-10 05:11:20 -05:00

143 lines
4.9 KiB
TypeScript

import { javascriptRouteDeliveryOptions } from "./cli/javascriptRouteDelivery.js";
import { z } from "incur";
import { cliDecimalField } from "./cli/options.js";
import {
browserDiscoveryTimeoutSchema,
webRuntimeCommandTimeoutSchema,
} from "./domain/browserDeadline.js";
import { javaScriptAnalysisResourceControlsSchema } from "./domain/javascript/javascriptAnalysisResourceControls.js";
import { javaScriptSourcePathsSchema } from "./domain/javascript/javascriptSourceSelection.js";
/** Accept an agent-selected browser observation duration without an artificial ceiling. */
export const observationDuration = (fallback: number, minimum = 0) =>
cliDecimalField(
z
.number()
.int()
.min(minimum)
.default(fallback)
.describe("Observation duration in milliseconds"),
);
/** Shared passive browser origin options. */
export const browserScopeOptions = {
allowedOrigins: z
.array(z.string().min(1))
.optional()
.describe("Optional exact-origin filter"),
commandTimeoutMs: cliDecimalField(webRuntimeCommandTimeoutSchema),
};
/** Shared options for passive browser commands that also accept discovery_timeout_ms. */
export const passiveBrowserScopeOptions = {
...browserScopeOptions,
discoveryTimeoutMs: cliDecimalField(browserDiscoveryTimeoutSchema),
};
/** Keep an omitted discovery deadline absent so Evidence records the caller selection only. */
export const selectedDiscoveryTimeout = (
discoveryTimeoutMs: number | undefined,
): { readonly discovery_timeout_ms?: number } =>
discoveryTimeoutMs === undefined
? {}
: { discovery_timeout_ms: discoveryTimeoutMs };
/** Keep an omitted command deadline absent so Evidence records the caller selection only. */
export const selectedCommandTimeout = (
commandTimeoutMs: number | undefined,
): { readonly command_timeout_ms?: number } =>
commandTimeoutMs === undefined
? {}
: { command_timeout_ms: commandTimeoutMs };
export const browserPageInspectionOptions = z.object({
...passiveBrowserScopeOptions,
observationMs: observationDuration(500),
includeAccessibilityText: z
.boolean()
.default(false)
.describe("Include accessibility text"),
includeConsoleText: z
.boolean()
.default(false)
.describe("Include console message text"),
includeJsonBodyShapes: z
.boolean()
.default(false)
.describe("Include structural shapes of JSON response bodies"),
includeWebsocketShapes: z
.boolean()
.default(false)
.describe("Include structural shapes of WebSocket payloads"),
includeScriptSources: z
.boolean()
.default(false)
.describe("Include JavaScript source text"),
includeStorageKeys: z
.boolean()
.default(false)
.describe("Include storage key names without values"),
includeStorageFingerprints: z
.boolean()
.default(false)
.describe("Include content-derived storage fingerprints"),
});
export const electronPageInspectionOptions = z.object({
observationMs: observationDuration(100),
includeScriptSources: z
.boolean()
.default(false)
.describe("Include JavaScript source text"),
commandTimeoutMs: cliDecimalField(webRuntimeCommandTimeoutSchema),
});
export const javascriptApplicationOptions = z.object({
semanticPrecision: z
.string()
.optional()
.describe(
"Inline JSON or JSON file with per-source semantic_precision evaluator budgets; independent of graph retention and worker memory.",
),
...javascriptRouteDeliveryOptions,
maxSemanticNodes: cliDecimalField(
javaScriptAnalysisResourceControlsSchema.shape.max_semantic_nodes,
),
maxSemanticNodesPerFile: cliDecimalField(
javaScriptAnalysisResourceControlsSchema.shape.max_semantic_nodes_per_file,
),
maxSemanticUnknowns: cliDecimalField(
javaScriptAnalysisResourceControlsSchema.shape.max_semantic_unknowns,
),
maxSemanticUnknownsPerFile: cliDecimalField(
javaScriptAnalysisResourceControlsSchema.shape
.max_semantic_unknowns_per_file,
),
sourcePath: javaScriptSourcePathsSchema
.optional()
.describe(
"Exact inventoried file path relative to the application root; repeat to select several. No implicit dependencies.",
),
sourcePathsJson: z
.string()
.min(1)
.optional()
.describe(
"Inline JSON array or JSON file path of exact inventoried file paths relative to the application root, selected after any --source-path values. Use a file for selections that exceed the host command-line limit.",
),
maxHeapMb: cliDecimalField(
javaScriptAnalysisResourceControlsSchema.shape.max_heap_mb,
),
analysisTimeoutMs: cliDecimalField(
javaScriptAnalysisResourceControlsSchema.shape.analysis_timeout_ms,
),
artifactFormat: z
.enum(["auto", "asar", "directory"])
.default("auto")
.describe("Application artifact format"),
integrityPolicy: z
.enum(["fail", "record-and-continue"])
.default("fail")
.describe("Behavior when declared application integrity does not match"),
});