Files
reverse-engineering-anything/tests/boundary/mcp/nodeSeaMcp.test.ts
T
morluto cb4e5cfbff feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)
* refactor(analysis): centralize resource budgets and recovery facts

* feat(analysis): expose ASAR and Ghidra runtime admission controls

* feat(artifacts): expose reader admission and preserve limited recognition

* feat(javascript): expose recoverable semantic precision budgets

* feat(web): add recoverable source-map budgets and compact retained views

* feat(web): make historical capture decoding budgets recoverable

* fix(desktop): enforce selected view policies across capture and export

* feat(runtime): make Frida and LLDB retention budgets selectable

* feat(native): expose diagnostic budgets and preserve exhaustion causes

* feat(managed): expose recoverable snapshot and representation budgets

* feat(metadata): make Go and Rust inspection budgets recoverable

* feat(wasm): expose representation and producer admissions

* feat(evm): expose per-call worker resource budgets

* feat(android): make resource and string-pool omissions recoverable

* feat(producers): expose command and recorded-capture budgets

* docs(analysis): record recovery contracts and integrated validation

* fix(docs): link calibration oracle from published verification pages

* fix(docs): restore desktop task anchors and receipt links

* test(analysis): align fixtures with selectable budget contracts

* fix(analysis): remove source-location projector dependency cycle

* test(analysis): refresh budget recovery and verifier regressions

* test(analysis): preserve format and publication recovery expectations

* test(windows): align conformance with owned runtime admission

* fix(desktop): preserve selected alias kinds in exported state

* test(analysis): align provider fixtures with recoverable budgets

* test(desktop): validate emitted alias metadata structurally

* fix(ghidra): classify bounded Windows endpoint refusals

* test(cli): assert selectable artifact admission recovery

* fix(cli): preserve capture provenance in environment builds
2026-11-10 05:11:20 -05:00

176 lines
6.3 KiB
TypeScript

import { readFile, writeFile, rm } from "node:fs/promises";
import { join } from "node:path";
import { expect, it } from "vitest";
import { createTestTempDirectory } from "../../fixtures/temporaryDirectory.js";
import { connectLocalToolsMcp } from "../../fixtures/localToolsMcp.js";
import {
nodeSeaPe,
buildNodeSeaBlob,
} from "../../../src/artifacts/nodeSea/NodeSea.fixture.js";
import { parseEvidence } from "../../../src/domain/evidence.js";
import { artifactExtractionResultSchema } from "../../../src/domain/artifactGraph.js";
import { toolContract } from "../../../src/contracts/toolContracts.js";
import { parseMcpToolError } from "../../fixtures/mcpToolError.js";
import {
analysisViewResultSchema,
artifactInventorySummaryViewResultSchema,
} from "../../../src/domain/analysisView/analysisView.js";
const expectBlobAdmissionFailure = (
reply: Parameters<typeof parseMcpToolError>[0],
) => {
expect(parseMcpToolError(reply).error).toMatchObject({
code: "truncated",
retryable: true,
details: {
reader_limit: {
parameter: "artifact_limits.node_sea.blob_bytes",
effective_value: 1,
unit: "bytes",
can_increase: true,
},
},
});
};
// The compiled stdio fixture checks advertised schemas against their dialect and
// validates actual tool responses, avoiding a second source server module graph.
it.each(["full", "compact"] as const)(
"exposes SEA facts and extraction through MCP (%s)",
async (profile) => {
const root = await createTestTempDirectory("rea-sea-mcp-");
const path = join(root, "application.exe");
await writeFile(
path,
nodeSeaPe({
codePath: "main.js",
main: "throw 1;",
fuse: "set",
assets: [{ name: "data.txt", body: "data" }],
}),
);
const { call } = await connectLocalToolsMcp({
REA_MCP_INPUT_SCHEMA_PROFILE: profile,
});
let outputRoot: string | undefined;
try {
const opened = await call("open_binary", { path });
expect(opened.isError, JSON.stringify(opened)).not.toBe(true);
const lowerPolicy = { node_sea: { blob_bytes: 1 } };
const refused = await call("inspect_artifact", {
detail: "summary",
artifact_limits: lowerPolicy,
});
expectBlobAdmissionFailure(refused);
const selectedPolicy = { node_sea: { blob_bytes: 4096 } };
const reply = await call("inspect_artifact", {
detail: "summary",
artifact_limits: selectedPolicy,
});
expect(reply.isError, JSON.stringify(reply)).not.toBe(true);
const summary = artifactInventorySummaryViewResultSchema.parse(
parseEvidence(reply.structuredContent).normalized_result,
);
expect(summary.summary.effective_limits?.node_sea.blob_bytes).toBe(4096);
expect(summary.summary.root_format_metadata).toMatchObject({
kind: "node-sea",
carrier: "pe",
fuse_state: "set",
code_path: "main.js",
});
const bundleReply = await call("get_evidence_bundle", {
detail: "complete",
});
expect(bundleReply.isError, JSON.stringify(bundleReply)).not.toBe(true);
const bundle = toolContract("get_evidence_bundle").outputSchema.parse(
bundleReply.structuredContent,
).result;
if ("kind" in bundle)
throw new Error("Expected complete retained Evidence");
const parent = parseEvidence(
bundle.records.find(
(record) => record.evidence_id === summary.parent_evidence_id,
),
);
expect(parent.parameters.artifact_limits).toEqual(selectedPolicy);
const retained = await call("inspect_analysis_view", {
source: {
kind: "retained-evidence",
evidence_id: summary.parent_evidence_id,
},
view: {
kind: "inventory",
collection: "occurrences",
logical_paths: ["main.js"],
fields: ["logical_path", "format_metadata"],
},
});
expect(retained.isError, JSON.stringify(retained)).not.toBe(true);
const view = analysisViewResultSchema.parse(
parseEvidence(retained.structuredContent).normalized_result,
);
expect(view).toMatchObject({
kind: "inventory",
items: [
{
logical_path: "main.js",
format_metadata: { kind: "node-sea-entry", role: "main-script" },
},
],
});
const loweredAfterRetention = await call("inspect_artifact", {
detail: "summary",
artifact_limits: lowerPolicy,
});
expectBlobAdmissionFailure(loweredAfterRetention);
const extracted = await call("extract_artifact", {});
expect(extracted.isError, JSON.stringify(extracted)).not.toBe(true);
const result = artifactExtractionResultSchema.parse(
parseEvidence(extracted.structuredContent).normalized_result,
);
outputRoot = result.output_root;
expect(await readFile(join(result.output_root, "data.txt"), "utf8")).toBe(
"data",
);
expect((await call("close_binary", {})).isError).not.toBe(true);
await writeFile(path, nodeSeaPe({ blob: Buffer.alloc(16) }));
expect((await call("open_binary", { path })).isError).not.toBe(true);
const invalid = await call("inspect_artifact", {});
expect(parseMcpToolError(invalid).error).toMatchObject({
code: "artifact_operation_failed",
details: {
operation: "inspect_artifact",
reason: "format",
detail: expect.stringContaining("magic"),
},
});
expect((await call("close_binary", {})).isError).not.toBe(true);
await writeFile(
path,
nodeSeaPe({
blob: buildNodeSeaBlob({
assets: Array.from({ length: 100_001 }, (_, index) => ({
name: `a${String(index)}`,
body: "",
})),
}),
}),
);
expect((await call("open_binary", { path })).isError).not.toBe(true);
const overLimit = await call("inspect_artifact", {});
expect(parseMcpToolError(overLimit).error).toMatchObject({
code: "truncated",
details: {
operation: "inspect_artifact",
reason: "limit",
boundary: "capacity",
truncated: true,
},
});
} finally {
if (outputRoot !== undefined)
await rm(outputRoot, { recursive: true, force: true });
}
},
);