mirror of
https://github.com/morluto/rea.git
synced 2026-11-11 01:13:39 +00:00
* fix(cli): preserve caller paths in format inspections * fix(cli): retain caller path on partial evidence * test(cli): preserve caller path in adapter parity checks * test(rust): account for retained caller path * fix(wasm): compare shared cli and mcp evidence
122 lines
4.5 KiB
TypeScript
122 lines
4.5 KiB
TypeScript
import { z } from "incur";
|
|
import { createRustBinaryService } from "../composition/rust.js";
|
|
import { CLI_COMMANDS } from "../cliCommandNames.js";
|
|
import { logCliCommand } from "../cliLogging.js";
|
|
import {
|
|
analysisEvidenceDeliveryOptions,
|
|
deliverCliAnalysisEvidence,
|
|
} from "./analysisEvidenceDelivery.js";
|
|
import { inspectRustBinaryRequestSchema } from "../domain/rust/rustBinaryQuery.js";
|
|
import { analysisInputErrorFromIssues } from "../domain/inputIssueProjection.js";
|
|
import { AnalysisInputError } from "../domain/analysisErrorCore.js";
|
|
import { projectAnalysisError } from "../domain/analysisErrorProjection.js";
|
|
import { safeParseJson } from "../domain/safeJson.js";
|
|
import type { Logger } from "pino";
|
|
import type { CliInstance } from "./types.js";
|
|
import { withCommandCancellation } from "./commandCancellation.js";
|
|
import { localPathStringSchema } from "../domain/localPath.js";
|
|
import { absoluteCallerPath } from "../filesystem/callerPath.js";
|
|
import { machoSliceArchitectureSchema } from "../domain/apple/machoTargetSelection.js";
|
|
|
|
/** Resolve caller paths and inspect embedded Rust dependencies through the shared workflow. */
|
|
export const registerRustCommands = (
|
|
cli: CliInstance,
|
|
logger: Logger,
|
|
): void => {
|
|
cli.command(CLI_COMMANDS.inspectRustBinary, {
|
|
description:
|
|
"Inspect an embedded cargo-auditable Rust dependency list without target execution",
|
|
args: z.object({
|
|
path: localPathStringSchema.describe(
|
|
"Local ELF, PE, thin Mach-O or universal Mach-O image",
|
|
),
|
|
}),
|
|
options: z.object({
|
|
...analysisEvidenceDeliveryOptions,
|
|
architecture: machoSliceArchitectureSchema
|
|
.optional()
|
|
.describe(
|
|
"CPU family of the slice to read from a universal Mach-O; required for universal files",
|
|
),
|
|
detail: z
|
|
.enum(["complete", "summary"])
|
|
.optional()
|
|
.describe(
|
|
"Default complete; a view selects compact delivery with --evidence_output",
|
|
),
|
|
view: z
|
|
.string()
|
|
.optional()
|
|
.describe(
|
|
"JSON package or edge selection; retains complete Evidence with --evidence_output",
|
|
),
|
|
}),
|
|
run: ({ args, options }) =>
|
|
withCommandCancellation((signal) =>
|
|
logCliCommand(logger, CLI_COMMANDS.inspectRustBinary, async () => {
|
|
const decoded =
|
|
options.view === undefined
|
|
? { ok: true as const, value: undefined }
|
|
: safeParseJson(options.view);
|
|
if (!decoded.ok) {
|
|
return projectAnalysisError(
|
|
new AnalysisInputError(
|
|
"inspect_rust_binary",
|
|
{ cause: decoded.cause },
|
|
[
|
|
{
|
|
path: ["view"],
|
|
reason: "invalid_format",
|
|
message: "view must be a JSON package or edge selection",
|
|
},
|
|
],
|
|
),
|
|
);
|
|
}
|
|
const view = decoded.value;
|
|
const input = inspectRustBinaryRequestSchema.safeParse({
|
|
path: absoluteCallerPath(args.path),
|
|
...(options.architecture === undefined
|
|
? {}
|
|
: { architecture: options.architecture }),
|
|
...(options.detail === undefined ? {} : { detail: options.detail }),
|
|
...(view === undefined ? {} : { view }),
|
|
});
|
|
if (!input.success)
|
|
return projectAnalysisError(
|
|
analysisInputErrorFromIssues(
|
|
"inspect_rust_binary",
|
|
input.error.issues,
|
|
{ view },
|
|
),
|
|
);
|
|
const service = createRustBinaryService();
|
|
return deliverCliAnalysisEvidence({
|
|
callerInputPath: args.path,
|
|
run: () =>
|
|
service.inspect(
|
|
{
|
|
path: input.data.path,
|
|
...(input.data.architecture === undefined
|
|
? {}
|
|
: { architecture: input.data.architecture }),
|
|
},
|
|
{ signal },
|
|
),
|
|
service,
|
|
providerId: "rust-auditable",
|
|
operation: "inspect_rust_binary",
|
|
signal,
|
|
detail:
|
|
input.data.detail ??
|
|
(input.data.view === undefined ? "complete" : "summary"),
|
|
evidenceOutput: options.evidence_output,
|
|
...(input.data.view === undefined
|
|
? {}
|
|
: { view: { kind: "rust" as const, ...input.data.view } }),
|
|
});
|
|
}),
|
|
),
|
|
});
|
|
};
|