mirror of
https://github.com/morluto/rea.git
synced 2026-11-12 09:52:27 +00:00
morluto
cb4e5cfbff
* refactor(analysis): centralize resource budgets and recovery facts * feat(analysis): expose ASAR and Ghidra runtime admission controls * feat(artifacts): expose reader admission and preserve limited recognition * feat(javascript): expose recoverable semantic precision budgets * feat(web): add recoverable source-map budgets and compact retained views * feat(web): make historical capture decoding budgets recoverable * fix(desktop): enforce selected view policies across capture and export * feat(runtime): make Frida and LLDB retention budgets selectable * feat(native): expose diagnostic budgets and preserve exhaustion causes * feat(managed): expose recoverable snapshot and representation budgets * feat(metadata): make Go and Rust inspection budgets recoverable * feat(wasm): expose representation and producer admissions * feat(evm): expose per-call worker resource budgets * feat(android): make resource and string-pool omissions recoverable * feat(producers): expose command and recorded-capture budgets * docs(analysis): record recovery contracts and integrated validation * fix(docs): link calibration oracle from published verification pages * fix(docs): restore desktop task anchors and receipt links * test(analysis): align fixtures with selectable budget contracts * fix(analysis): remove source-location projector dependency cycle * test(analysis): refresh budget recovery and verifier regressions * test(analysis): preserve format and publication recovery expectations * test(windows): align conformance with owned runtime admission * fix(desktop): preserve selected alias kinds in exported state * test(analysis): align provider fixtures with recoverable budgets * test(desktop): validate emitted alias metadata structurally * fix(ghidra): classify bounded Windows endpoint refusals * test(cli): assert selectable artifact admission recovery * fix(cli): preserve capture provenance in environment builds
48 lines
2.7 KiB
Markdown
48 lines
2.7 KiB
Markdown
# Implementation plan
|
|
|
|
## Boundary and contract
|
|
|
|
Extend `goBinarySchema` in `src/domain/go/goBinary.ts` with optional
|
|
`string_literals` (`evidence_kind: "inferred"`, `items`, `discovered_count`,
|
|
`aggregate_bytes`, `max_items`, `truncated`, optional `limits_reached`), plus
|
|
`include_string_literals` and the Go-owned per-call budget controls on `src/contracts/go/goToolContracts.ts` and
|
|
`src/cli/goCommands.ts`. Add the `string_literals` view projection to
|
|
`src/domain/analysisView/goBinaryView.ts` so callers can page recovered literals
|
|
from retained Evidence without repeating file parsing.
|
|
|
|
Implement `recoverGoStringLiterals` in `src/go/GoStringLiterals.ts` on top of
|
|
`BinaryContainer` and `createFileMappingIndex`. Pre-index readable `LoadRegion`
|
|
intervals once in `O(R log R)` so Mach-O section eligibility runs in `O(log R)`
|
|
with periodic `checkActive` cancellation checks. Normalize header-scan spans by
|
|
pointer alignment phase, merge overlaps, and sort by ascending file offset so
|
|
`reference_count` counts each physical header once and `first_header_offset` is
|
|
minimal. Deduplicate target slices in memory with bounded candidate and rejection
|
|
caches before sorting deterministically by `(location.offset, location.bytes)`.
|
|
Use exact offset/length keys, so configurable string lengths cannot collide in
|
|
an arithmetic key encoding. Resolve budget defaults once in the image reader
|
|
and pass that policy to string recovery.
|
|
|
|
## Incremental work and validation
|
|
|
|
1. Define domain/MCP/CLI schemas, limitation notes and `string_literals` analysis
|
|
view behavior while preserving default omission when not requested.
|
|
2. Implement `recoverGoStringLiterals` and wire `GoBinaryImage`,
|
|
`GoBinaryProvider` and `GoBinaryService` with cooperative cancellation.
|
|
3. Add unit fixtures across ELF/PE/Mach-O, Unicode format-control filtering,
|
|
budget/cap truncation, overlapping ELF spans, bounded negative caching and
|
|
25,000-section Mach-O indexing/cancellation.
|
|
4. Extend `scripts/verify-go-binary.mjs` via `artifactMcpCall` so real compiled Go
|
|
targets verify both CLI and advertised MCP `outputSchema` parity.
|
|
5. Update the [Go binary guide](../../../guides/native/go-binaries.md), skill
|
|
guidance, generated catalogs and documentation route checks.
|
|
|
|
## Effects and compatibility
|
|
|
|
Default `inspect_go_binary` calls omit `string_literals` and preserve historical
|
|
Evidence compatibility. No external tool or target execution is introduced; only
|
|
bounded offline byte slicing over the admitted stable image buffer runs. The
|
|
input default remains `256 MiB`; callers can select byte and work budgets within
|
|
the advertised runtime representability. Count normalized report bytes before
|
|
allocating its JSON serialization. Every exhausted limit carries its own next
|
|
request repair, independently of transport delivery.
|