mirror of
https://github.com/morluto/rea.git
synced 2026-11-15 19:23:24 +00:00
* feat(evidence)!: give Evidence bundles a format revision owned by one module `src/domain/evidenceFormat.ts` owns Evidence format evolution. Bundles now carry `evidence_format: 1`; every bundle reader admits only the current revision and refuses an unmarked or other-revision bundle once, with the single recreate-observations guidance, instead of admitting earlier shapes one optional field at a time. The 6.7-era artifact inventory summary identities are no longer rebuilt: compare_artifacts checks the current projection only and reports a mismatch with the owner's guidance. The pre-6.6 identity diagnosis uses the same guidance. SQLite `worker_timeout_ms` and Dart AOT `string_pool.policy`, optional only for historical Evidence, are now required. BREAKING CHANGE: Evidence bundles written by REA 6.x (no `evidence_format`) are refused by import, comparison, reconstruction and analysis-snapshot readers as an integrity mismatch telling the caller to recreate the observations; re-exporting an earlier bundle does not update its format or identities. Bundles constructed by hand must include `"evidence_format": 1`. 6.7-era artifact summaries are refused by compare_artifacts, and SQLite and Dart AOT Evidence without the newly required fields fails validation. * fix(evidence): let the ledger application admit its bundle's format build_reconstruction_obligation_ledger registered the full bundle schema with the SDK, so an unmarked or other-revision bundle was refused as invalid_request before the format owner ran. Register it like coverage: the application parses the request envelope and admits the bundle. * feat(pcap)!: read capture Evidence through the current result schema only (#10879) Delete the pcap read-compatibility schema that defaulted executable identity for historical capture Evidence, and require query_labels_hex (null when unknown) now that every producer writes it. Evidence from an earlier format is refused at the bundle format owner; a record that omits these fields is reported as malformed instead of defaulted. BREAKING CHANGE: inspect_pcap_capture results always carry query_labels_hex, and analysis views no longer default missing tshark/capinfos identity fields. * feat(desktop)!: require the effective view policy in desktop state Evidence (#10886) inspect_desktop_application_state always records the complete policy it used, including sqlite_view_bytes. Drop the optional historical shape and the task draft's absent-policy branch. BREAKING CHANGE: desktop application state results without effective_view_policy, or with a policy missing sqlite_view_bytes, are refused as malformed. * feat(android)!: require component declaration facets and reference aggregates in Android Evidence (#10904) * feat(android)!: require component declaration facets and reference aggregates in Android Evidence The JADX producers always write the manifest component projection with every declaration facet, target_definition and direct_invokes_coverage. Require them, delete the duplicate observed component schema, drop the unknown declaration coverage that only described historical omission, and give manifest view results their explicit facet. BREAKING CHANGE: Android package, component and reference results missing these fields are refused as malformed; component declaration_coverage and its summary counts no longer include unknown; manifest view results always carry facet manifest. * refactor(android): parse package results with the domain schema directly * feat(browser)!: require the DOM length unit and redirect-scoped prior-hop facts (#10897) * feat(browser)!: require the DOM length unit and redirect-scoped prior-hop facts Both CDP producers always declare node_value_length_unit, and the observation session writes redirect_response on every redirect event and no other. Require the unit, drop the diff's absent-unit branch, and admit redirect_response exactly on redirect rows. BREAKING CHANGE: DOM snapshots without node_value_length_unit and redirect timeline rows without redirect_response are refused as malformed, including inline inspections passed to compare_web_captures. * docs(browser): drop the historical redirect_response omission note * feat(native)!: require native Evidence fields that were optional only for historical Evidence (#10946) Mach-O encryption, slice malformed cause, symbol runtime names and import facts; ELF export encoding facts and visibility; value-flow limits; load-image permissions and relocation symbols; Swift type-reference kind and GPU AMD target metadata are required. Legacy enum values (unrecorded, unknown visibility, undecodable, modinfo_field_exceeds_limit) and the retained schemas, view defaults and reinterpretations that served historical Evidence are deleted. BREAKING CHANGE: native records missing these fields are refused as malformed; recreate the observation.
106 lines
3.2 KiB
TypeScript
106 lines
3.2 KiB
TypeScript
import { z } from "zod";
|
|
import { utcDateTimeSchema } from "./offsetDateTime.js";
|
|
|
|
import {
|
|
browserDiscoveryTimeoutSchema,
|
|
webRuntimeCommandTimeoutSchema,
|
|
} from "./browserDeadline.js";
|
|
import {
|
|
browserAllowedOriginsSchema,
|
|
browserObservationEndpointSchema,
|
|
} from "./browserObservation.js";
|
|
import { browserCompletenessSchema } from "./browserCompleteness.js";
|
|
import { browserVersionSchema } from "./browserObservationSchemas.js";
|
|
|
|
/** Input for a navigation-aware browser observation window. */
|
|
export const observeWebSessionInputSchema = z.strictObject({
|
|
cdp_endpoint: browserObservationEndpointSchema,
|
|
allowed_origins: browserAllowedOriginsSchema,
|
|
discovery_timeout_ms: browserDiscoveryTimeoutSchema,
|
|
target_id: z.string().min(1),
|
|
observation_ms: z.int().min(1).default(10_000),
|
|
command_timeout_ms: webRuntimeCommandTimeoutSchema,
|
|
});
|
|
export type ObserveWebSessionInput = z.infer<
|
|
typeof observeWebSessionInputSchema
|
|
>;
|
|
|
|
const destinationScopeSchema = z.enum([
|
|
"approved",
|
|
"outside_policy",
|
|
"unsupported",
|
|
]);
|
|
const timelineEventSchema = z
|
|
.object({
|
|
sequence: z.int().min(1),
|
|
type: z.enum([
|
|
"navigation_requested",
|
|
"navigation_committed",
|
|
"same_origin_reload",
|
|
"same_document_navigation",
|
|
"redirect",
|
|
"load_failed",
|
|
"lifecycle",
|
|
"target_terminated",
|
|
"session_detached",
|
|
"transport_disconnected",
|
|
]),
|
|
timestamp: z
|
|
.number()
|
|
.min(0)
|
|
.nullable()
|
|
.describe(
|
|
"CDP monotonic seconds when supplied; null when the event has no valid comparable producer timestamp.",
|
|
),
|
|
frame_id: z.string().nullable(),
|
|
loader_id: z.string().nullable(),
|
|
request_id: z.string().nullable(),
|
|
url: z.string().nullable(),
|
|
destination_scope: destinationScopeSchema.nullable(),
|
|
detail: z.string().nullable(),
|
|
redirect_response: z
|
|
.object({
|
|
url: z.string().nullable(),
|
|
status: z.number().nullable(),
|
|
scope: destinationScopeSchema.nullable(),
|
|
})
|
|
.optional()
|
|
.describe(
|
|
"Prior-hop response metadata, present exactly on redirect events. URL and status require an approved response origin; null scope is unknown.",
|
|
),
|
|
})
|
|
.refine(
|
|
(event) =>
|
|
(event.type === "redirect") === (event.redirect_response !== undefined),
|
|
{
|
|
path: ["redirect_response"],
|
|
message: "redirect_response is present exactly on redirect events.",
|
|
},
|
|
);
|
|
|
|
/** Navigation-aware session result for external user actions. */
|
|
export const webObservationSessionSchema = z.object({
|
|
browser: browserVersionSchema,
|
|
target: z.object({
|
|
target_id: z.string(),
|
|
initial_url: z.string(),
|
|
final_url: z.string().nullable(),
|
|
}),
|
|
window: z.object({
|
|
armed_at: utcDateTimeSchema,
|
|
ended_at: utcDateTimeSchema,
|
|
requested_ms: z.int().min(1),
|
|
end_reason: z.enum([
|
|
"window_elapsed",
|
|
"target_left_scope",
|
|
"target_terminated",
|
|
"session_detached",
|
|
"transport_disconnected",
|
|
]),
|
|
}),
|
|
timeline: z.array(timelineEventSchema),
|
|
completeness: browserCompletenessSchema,
|
|
limitations: z.array(z.string()),
|
|
});
|
|
export type WebObservationSession = z.infer<typeof webObservationSessionSchema>;
|