mirror of
https://github.com/morluto/rea.git
synced 2026-11-14 10:43:30 +00:00
46728ca41d
Explicit deadlines at or below the project deadline only shortened it: a literal 30-second value also disabled the coverage scaling, which timed out wide-capacity regressions on main. Workloads above the built deadline use the long-running tag. Deadlines derived from an operation budget remain. Co-Authored-By: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com> Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
87 lines
3.2 KiB
TypeScript
87 lines
3.2 KiB
TypeScript
import { readFile, writeFile } from "node:fs/promises";
|
|
import { join } from "node:path";
|
|
import { expect } from "vitest";
|
|
import { toolContract } from "../../src/contracts/toolContracts.js";
|
|
import {
|
|
elfHardeningFixture,
|
|
peHardeningImage,
|
|
} from "../../src/native/hardening/BinaryHardening.fixture.js";
|
|
import { createTestTempDirectory } from "../fixtures/temporaryDirectory.js";
|
|
import { parseMcpToolError } from "../fixtures/mcpToolError.js";
|
|
import { cliTest } from "../support/cli/cliFixture.js";
|
|
|
|
const states = (
|
|
rows: readonly { property: string; state: string }[],
|
|
): Record<string, string> =>
|
|
Object.fromEntries(rows.map((row) => [row.property, row.state]));
|
|
|
|
cliTest(
|
|
"reads ELF and PE hardening through the CLI and MCP",
|
|
async ({ cli }) => {
|
|
const root = await createTestTempDirectory("rea-binary-hardening-cli-");
|
|
const call = await cli.sharedMcpCall!();
|
|
const elfPath = join(root, "app");
|
|
const elfBytes = elfHardeningFixture({ interp: true, gnuRelro: true });
|
|
await writeFile(elfPath, elfBytes);
|
|
const elfResult = await cli.run({
|
|
arguments: ["inspect-binary-hardening", "app", "--json"],
|
|
cwd: root,
|
|
});
|
|
expect(elfResult.exitCode, elfResult.stderr).toBe(0);
|
|
const elfResponse = await call("inspect_binary_hardening", {
|
|
path: elfPath,
|
|
});
|
|
expect(elfResponse.isError).not.toBe(true);
|
|
for (const value of [elfResult.json, elfResponse.structuredContent]) {
|
|
const report = toolContract(
|
|
"inspect_binary_hardening",
|
|
).outputSchema.parse(value).normalized_result;
|
|
expect(report.format).toBe("elf");
|
|
expect(states(report.images[0]?.rows ?? [])).toMatchObject({
|
|
pie: "enabled",
|
|
nx: "enabled",
|
|
relro: "partial",
|
|
stack_protector: "unknown",
|
|
});
|
|
}
|
|
expect(
|
|
toolContract("inspect_binary_hardening").outputSchema.parse(
|
|
elfResult.json,
|
|
).subject,
|
|
).toMatchObject({ local_path: elfPath });
|
|
expect((await readFile(elfPath)).equals(elfBytes)).toBe(true);
|
|
|
|
const pePath = join(root, "app.exe");
|
|
const peBytes = peHardeningImage();
|
|
await writeFile(pePath, peBytes);
|
|
const peResult = await cli.run({
|
|
arguments: ["inspect-binary-hardening", pePath, "--json"],
|
|
});
|
|
expect(peResult.exitCode, peResult.stderr).toBe(0);
|
|
const peReport = toolContract(
|
|
"inspect_binary_hardening",
|
|
).outputSchema.parse(peResult.json).normalized_result;
|
|
expect(states(peReport.images[0]?.rows ?? [])).toMatchObject({
|
|
dynamic_base: "enabled",
|
|
nx_compat: "enabled",
|
|
guard_cf: "enabled",
|
|
cfg_instrumented: "enabled",
|
|
authenticode_present: "disabled",
|
|
});
|
|
expect((await readFile(pePath)).equals(peBytes)).toBe(true);
|
|
|
|
const foreign = join(root, "notes.txt");
|
|
await writeFile(foreign, Buffer.from("not a binary"));
|
|
const rejected = await cli.run({
|
|
arguments: ["inspect-binary-hardening", foreign, "--json"],
|
|
});
|
|
expect(rejected.exitCode).toBe(1);
|
|
expect(rejected.json).toMatchObject({
|
|
details: { operation: "inspect_binary_hardening" },
|
|
});
|
|
const response = await call("inspect_binary_hardening", { path: foreign });
|
|
expect(response.isError).toBe(true);
|
|
expect(parseMcpToolError(response)).toEqual({ error: rejected.json });
|
|
},
|
|
);
|