mirror of
https://github.com/morluto/rea.git
synced 2026-11-15 19:23:24 +00:00
* refactor: prune internal seams and preserve configuration ownership * fix(setup): keep YAML aliases and inherited registration settings on refresh - Reuse an unchanged YAML collection only while every alias in it still resolves after the edit; otherwise rebuild it so the alias becomes its value. A sibling anchor replaced or moved in the same refresh no longer leaves an unresolved alias in Hermes or Goose output. - Keep a connection selector whose existing value already chooses stdio (for example an inherited Hermes transport: stdio) instead of superseding it; remote selectors are still replaced. Explicit stdio selectors are therefore no longer rewritten (Kimi expectation updated). - When the whole Hermes registration is inherited through a merge, override it with that merge and write only the changed fields. * fix(setup): edit registration fields whose YAML key is an alias A key written as an alias to a string scalar (for example *field with field: &field env) was treated as a source-only key, so any change to its value was refused in Hermes and Goose. Resolve such keys to their string, keep the aliased spelling while its anchor survives the edit, and write the plain key when the same edit rebuilds the anchor. * test(process): bound cleanup-boundary waits and always release gates Both cancellation tests awaited a bare started promise and released their gates only on success, so a missed boundary waited for the outer deadline and could leave cleanup parked. Use awaitAcknowledgement and release and join the cleanup in finally. * fix(setup): repair only aliases an edit leaves unresolved Replace the pre-edit alias survival guess, which expanded aliases to sibling anchors that survive unchanged, with an exact repair: record what each alias in the replaced value resolves to, write the edit, then replace only aliases left without a preceding anchor by that value. - Keep an aliased key's source position, so its anchor stays ahead of later aliases. - Treat an aliased key as its string only when no other key in the map resolves to the same string; an ambiguous one stays guarded. - Override an inherited Hermes registration only when the requested entry keeps every inherited field, so an explicit replacement can drop remote selectors. * fix(setup): repair aliases whose binding an edit changes, keeping comments An alias whose own anchor was removed could resolve to an earlier anchor with the same name and silently change value. Record the node each alias resolved to and repair any alias that no longer resolves to that node. Carry the alias's comments and spacing onto the repaired value. * test(setup): split the Hermes anchor and merge refresh cases * fix(setup): refuse removing an overridden key its merge would restore The merge-retention check skipped keys the mapping also overrides, so dropping such a key (for example a remote url during an explicit stdio replacement) let the retained merge restore it. Check removal before skipping overridden keys, so the edit is refused with the existing message instead of producing a registration that cannot be applied.
318 lines
10 KiB
TypeScript
318 lines
10 KiB
TypeScript
import { describe, expect, it, vi } from "vitest";
|
|
import { interfaceBuilderAnalysisSchema } from "../apple/interfaceBuilderGraph.js";
|
|
import { freezeJsonSnapshot } from "../immutableJson.js";
|
|
|
|
import { projectAnalysisView } from "./analysisView.js";
|
|
import type { AnalysisViewParent } from "./analysisViewParent.js";
|
|
import { analysisViewResultSchema } from "./analysisViewResult.js";
|
|
|
|
const target = "a".repeat(64);
|
|
const resourceRoot = {
|
|
caller_path: "/Applications/Keyless.app",
|
|
canonical_path: "/Applications/Keyless.app",
|
|
info_plist_path: "/Applications/Keyless.app/Info.plist",
|
|
layout: "root" as const,
|
|
executable_sha256: null,
|
|
};
|
|
const evidence = (artifact_path: string) => [
|
|
{
|
|
kind: "interface_builder_resource" as const,
|
|
description: "compiled document",
|
|
location: { address: null, file_offset: null },
|
|
artifact_path,
|
|
artifact_sha256: "b".repeat(64),
|
|
},
|
|
];
|
|
const node = (id: string, kind: string, document: string) => ({
|
|
id,
|
|
kind,
|
|
name: id,
|
|
location: null,
|
|
attributes: {},
|
|
evidence: evidence(document),
|
|
});
|
|
const main = "Contents/Resources/Main.nib";
|
|
const second = "Contents/Resources/Second.nib";
|
|
const document = (relative_path: string) => ({
|
|
relative_path,
|
|
archive_sha256: "b".repeat(64),
|
|
document_kind: "nib" as const,
|
|
object_count: 2,
|
|
connection_count: 1,
|
|
hierarchy_complete: true,
|
|
});
|
|
const report = (truncated = false) => ({
|
|
target_sha256: target,
|
|
documents: [document(main), document(second)],
|
|
graph: {
|
|
target_sha256: target,
|
|
provider: { id: "rea-ib", version: "1", tool_version: "1" },
|
|
nodes: [
|
|
node("main:root", "scene", main),
|
|
node("main:button", "control", main),
|
|
node("second:root", "scene", second),
|
|
],
|
|
edges: [
|
|
{
|
|
id: "main:edge",
|
|
from: "main:root",
|
|
to: "main:button",
|
|
relation: "contains",
|
|
resolution: "observed",
|
|
evidence: evidence(main),
|
|
limitations: [],
|
|
},
|
|
],
|
|
coverage: [
|
|
{
|
|
facet: `objects:${main}`,
|
|
status: "complete",
|
|
reason: null,
|
|
examined: 2,
|
|
omitted: 0,
|
|
},
|
|
],
|
|
truncated,
|
|
},
|
|
limitations: ["Recognized archive fields only."],
|
|
});
|
|
const resourceReport = () => {
|
|
const decoded = report();
|
|
return {
|
|
...decoded,
|
|
target_sha256: null,
|
|
resource_root: resourceRoot,
|
|
graph: { ...decoded.graph, target_sha256: null },
|
|
};
|
|
};
|
|
const parent = (
|
|
normalizedResult: unknown = report(),
|
|
sha256 = target,
|
|
): AnalysisViewParent => ({
|
|
predicateType: "rea.analysis",
|
|
evidenceId: `ev_${"c".repeat(64)}`,
|
|
operation: "decode_interface_builder",
|
|
normalizedResult,
|
|
subject: {
|
|
name: "Fixture",
|
|
digest: { sha256 },
|
|
format: "mach-o",
|
|
architecture: "arm64",
|
|
local_path: "/Applications/Fixture.app/Contents/MacOS/Fixture",
|
|
},
|
|
limitations: [],
|
|
});
|
|
|
|
describe("Interface Builder immutable interpretation", () => {
|
|
it("validates a sealed graph once while checking the current parent binding every time", () => {
|
|
const source = {
|
|
...parent(freezeJsonSnapshot(report())),
|
|
sealedResult: true,
|
|
};
|
|
const parse = vi.spyOn(interfaceBuilderAnalysisSchema, "safeParse");
|
|
try {
|
|
expect(projectAnalysisView(source, { kind: "summary" }).ok).toBe(true);
|
|
expect(
|
|
projectAnalysisView(source, {
|
|
kind: "interface-builder",
|
|
collection: "nodes",
|
|
document: main,
|
|
offset: 0,
|
|
limit: 1,
|
|
}).ok,
|
|
).toBe(true);
|
|
expect(parse).toHaveBeenCalledTimes(1);
|
|
const changed = {
|
|
...source,
|
|
subject: { ...source.subject!, digest: { sha256: "d".repeat(64) } },
|
|
};
|
|
const rejected = projectAnalysisView(changed, { kind: "summary" });
|
|
if (rejected.ok)
|
|
throw new Error("expected a subject refusal after reuse");
|
|
expect(rejected.error).toMatchObject({
|
|
issues: [{ path: ["source", "subject"] }],
|
|
});
|
|
expect(parse).toHaveBeenCalledTimes(1);
|
|
} finally {
|
|
parse.mockRestore();
|
|
}
|
|
});
|
|
|
|
it("revalidates mutable and shallow-frozen imports despite a claimed seal", () => {
|
|
const mutable = report();
|
|
const source = { ...parent(mutable), sealedResult: true };
|
|
expect(projectAnalysisView(source, { kind: "summary" }).ok).toBe(true);
|
|
Object.freeze(mutable);
|
|
mutable.graph.nodes[0]!.name = "";
|
|
expect(projectAnalysisView(source, { kind: "summary" }).ok).toBe(false);
|
|
mutable.graph.nodes[0]!.name = "corrected";
|
|
const corrected = projectAnalysisView(source, {
|
|
kind: "interface-builder",
|
|
collection: "nodes",
|
|
offset: 0,
|
|
limit: 1,
|
|
});
|
|
if (!corrected.ok) throw corrected.error;
|
|
expect(corrected.value).toMatchObject({ items: [{ name: "corrected" }] });
|
|
});
|
|
|
|
it("does not reuse a claimed immutable graph without the owning seal", () => {
|
|
const source = parent(freezeJsonSnapshot(report()));
|
|
const parse = vi.spyOn(interfaceBuilderAnalysisSchema, "safeParse");
|
|
try {
|
|
expect(projectAnalysisView(source, { kind: "summary" }).ok).toBe(true);
|
|
expect(projectAnalysisView(source, { kind: "summary" }).ok).toBe(true);
|
|
expect(parse).toHaveBeenCalledTimes(2);
|
|
} finally {
|
|
parse.mockRestore();
|
|
}
|
|
});
|
|
|
|
it("counts matching rows once, preserves their order, and exhausts empty or late pages", () => {
|
|
const decoded = report(true);
|
|
decoded.graph.nodes.splice(1, 0, node("other:middle", "control", second));
|
|
decoded.graph.nodes[0]!.evidence.push(...evidence(main));
|
|
const source = {
|
|
...parent(freezeJsonSnapshot(decoded)),
|
|
sealedResult: true,
|
|
};
|
|
for (const offset of [0, 1, 2, 20]) {
|
|
const result = projectAnalysisView(source, {
|
|
kind: "interface-builder",
|
|
collection: "nodes",
|
|
document: main,
|
|
offset,
|
|
limit: 1,
|
|
});
|
|
if (!result.ok) throw result.error;
|
|
expect(result.value).toMatchObject({
|
|
items: offset < 2 ? [decoded.graph.nodes[offset === 0 ? 0 : 2]] : [],
|
|
source_truncated: true,
|
|
coverage: { total: 2, exhausted: offset >= 1 },
|
|
});
|
|
}
|
|
const empty = projectAnalysisView(source, {
|
|
kind: "interface-builder",
|
|
collection: "edges",
|
|
document: second,
|
|
offset: 0,
|
|
limit: 1,
|
|
});
|
|
if (!empty.ok) throw empty.error;
|
|
expect(empty.value).toMatchObject({
|
|
items: [],
|
|
source_truncated: true,
|
|
coverage: { total: 0, exhausted: true },
|
|
});
|
|
});
|
|
});
|
|
|
|
describe("Interface Builder analysis views", () => {
|
|
it("keeps resource-root provenance in both summary and detail views without a subject", () => {
|
|
const source: AnalysisViewParent = {
|
|
...parent(resourceReport()),
|
|
subject: null,
|
|
};
|
|
const summary = projectAnalysisView(source, { kind: "summary" });
|
|
const detail = projectAnalysisView(source, {
|
|
kind: "interface-builder",
|
|
collection: "documents",
|
|
offset: 0,
|
|
limit: 64,
|
|
});
|
|
if (!summary.ok) throw summary.error;
|
|
if (!detail.ok) throw detail.error;
|
|
|
|
expect(analysisViewResultSchema.parse(summary.value)).toMatchObject({
|
|
artifact: { path: resourceRoot.canonical_path, sha256: null },
|
|
resource_root: resourceRoot,
|
|
summary: { target_sha256: null },
|
|
});
|
|
expect(analysisViewResultSchema.parse(detail.value)).toMatchObject({
|
|
artifact: { path: resourceRoot.canonical_path, sha256: null },
|
|
resource_root: resourceRoot,
|
|
items: report().documents,
|
|
});
|
|
});
|
|
|
|
it("summarizes documents and graph counts without rows", () => {
|
|
const projected = projectAnalysisView(parent(), { kind: "summary" });
|
|
if (!projected.ok) throw projected.error;
|
|
expect(projected.value).toMatchObject({
|
|
kind: "summary",
|
|
parent_operation: "decode_interface_builder",
|
|
artifact: { sha256: target },
|
|
summary: {
|
|
documents: report().documents,
|
|
available_counts: { nodes: 3, edges: 1, coverage: 1 },
|
|
node_kinds: { control: 1, scene: 2 },
|
|
edge_relations: { contains: 1 },
|
|
coverage_statuses: { complete: 1 },
|
|
truncated: false,
|
|
},
|
|
coverage: { examined: 7, total: 7 },
|
|
});
|
|
expect(JSON.stringify(projected.value)).not.toContain("main:button");
|
|
});
|
|
|
|
it("pages one document's nodes and keeps decoder truncation visible", () => {
|
|
const projected = projectAnalysisView(parent(), {
|
|
kind: "interface-builder",
|
|
collection: "nodes",
|
|
document: main,
|
|
offset: 1,
|
|
limit: 5,
|
|
});
|
|
if (!projected.ok) throw projected.error;
|
|
expect(projected.value).toMatchObject({
|
|
kind: "interface-builder",
|
|
items: [node("main:button", "control", main)],
|
|
source_truncated: false,
|
|
coverage: { status: "page", examined: 1, total: 2, exhausted: true },
|
|
});
|
|
const truncated = projectAnalysisView(parent(report(true)), {
|
|
kind: "interface-builder",
|
|
collection: "coverage",
|
|
offset: 0,
|
|
limit: 64,
|
|
});
|
|
if (!truncated.ok) throw truncated.error;
|
|
expect(truncated.value).toMatchObject({
|
|
items: report().graph.coverage,
|
|
source_truncated: true,
|
|
unknowns: expect.arrayContaining([
|
|
expect.stringContaining("The decoded graph is incomplete"),
|
|
]),
|
|
});
|
|
});
|
|
|
|
it("refuses unknown documents, other views and mismatched targets", () => {
|
|
const unknown = projectAnalysisView(parent(), {
|
|
kind: "interface-builder",
|
|
collection: "edges",
|
|
document: "Contents/Resources/Missing.nib",
|
|
offset: 0,
|
|
limit: 64,
|
|
});
|
|
if (unknown.ok) throw new Error("expected an unknown-document refusal");
|
|
expect(unknown.error).toMatchObject({
|
|
issues: [{ path: ["view", "document"] }],
|
|
});
|
|
const wrongKind = projectAnalysisView(parent(), {
|
|
kind: "macho",
|
|
facet: "imports",
|
|
offset: 0,
|
|
limit: 64,
|
|
});
|
|
if (wrongKind.ok) throw new Error("expected a view-kind refusal");
|
|
expect(wrongKind.error).toMatchObject({ issues: [{ path: ["view"] }] });
|
|
const mismatched = projectAnalysisView(parent(report(), "d".repeat(64)), {
|
|
kind: "summary",
|
|
});
|
|
if (mismatched.ok) throw new Error("expected a subject refusal");
|
|
expect(mismatched.error).toMatchObject({
|
|
issues: [{ path: ["source", "subject"] }],
|
|
});
|
|
});
|
|
});
|