Files
reverse-engineering-anything/scripts/verify/analysis/javascript-precision-calibration/task.py
T
morluto cb4e5cfbff feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)
* refactor(analysis): centralize resource budgets and recovery facts

* feat(analysis): expose ASAR and Ghidra runtime admission controls

* feat(artifacts): expose reader admission and preserve limited recognition

* feat(javascript): expose recoverable semantic precision budgets

* feat(web): add recoverable source-map budgets and compact retained views

* feat(web): make historical capture decoding budgets recoverable

* fix(desktop): enforce selected view policies across capture and export

* feat(runtime): make Frida and LLDB retention budgets selectable

* feat(native): expose diagnostic budgets and preserve exhaustion causes

* feat(managed): expose recoverable snapshot and representation budgets

* feat(metadata): make Go and Rust inspection budgets recoverable

* feat(wasm): expose representation and producer admissions

* feat(evm): expose per-call worker resource budgets

* feat(android): make resource and string-pool omissions recoverable

* feat(producers): expose command and recorded-capture budgets

* docs(analysis): record recovery contracts and integrated validation

* fix(docs): link calibration oracle from published verification pages

* fix(docs): restore desktop task anchors and receipt links

* test(analysis): align fixtures with selectable budget contracts

* fix(analysis): remove source-location projector dependency cycle

* test(analysis): refresh budget recovery and verifier regressions

* test(analysis): preserve format and publication recovery expectations

* test(windows): align conformance with owned runtime admission

* fix(desktop): preserve selected alias kinds in exported state

* test(analysis): align provider fixtures with recoverable budgets

* test(desktop): validate emitted alias metadata structurally

* fix(ghidra): classify bounded Windows endpoint refusals

* test(cli): assert selectable artifact admission recovery

* fix(cli): preserve capture provenance in environment builds
2026-11-10 05:11:20 -05:00

71 lines
3.2 KiB
Python

"""Run one complete CLI task and independently check the required source facts."""
import argparse
import hashlib
import json
import os
from pathlib import Path
import subprocess
def main():
parser = argparse.ArgumentParser(description=__doc__)
parser.add_argument('repo', type=Path)
parser.add_argument('node')
parser.add_argument('inputs', type=Path)
parser.add_argument('case', choices=['theme', 'ms'])
parser.add_argument('budget', choices=['default', 'double'])
parser.add_argument('output', type=Path)
options = parser.parse_args()
oracle = json.loads((options.inputs / 'oracle.json').read_text())[options.case]
target = options.inputs / 'cases' / options.case
source = target / oracle['source_file']
if hashlib.sha256(source.read_bytes()).hexdigest() != oracle['source_sha256']:
raise ValueError('Selected source digest does not match the oracle')
argv = [options.node, str(options.repo / 'scripts/rea.mjs'),
'analyze-javascript-application', str(target), '--max-heap-mb', '512',
'--format', 'json']
if options.budget == 'double':
argv += ['--semantic-precision', '{"primitive_bytes":2097152}']
environment = {**os.environ, 'NODE_OPTIONS': '--max-old-space-size=512'}
result = subprocess.run(argv, cwd=options.repo, env=environment, capture_output=True,
text=True, timeout=45)
options.output.parent.mkdir(parents=True, exist_ok=True)
options.output.write_text(json.dumps({
'argv': argv, 'stdout': result.stdout, 'stderr': result.stderr,
'exit_code': result.returncode,
}) + '\n')
if result.returncode != 0:
raise RuntimeError(f'CLI failed: {result.stderr[:500]}')
evidence = json.loads(result.stdout)
graph = evidence['normalized_result']['semantic_graph']
nodes = {node['node_id']: node for node in graph['nodes']}
if any(node['identity']['artifact_sha256'] != oracle['source_sha256']
for node in nodes.values()
if node['identity']['module_path'] == oracle['source_file']):
raise ValueError('Selected graph source identity differs from the oracle')
facts = {}
for edge in graph['relations']:
if edge['relation'] != 'defines':
continue
left, right = nodes[edge['source_node_id']], nodes[edge['target_node_id']]
if left['kind'] != 'literal':
continue
if options.case == 'theme' and right['kind'] == 'property-slot':
facts[right['properties']['name']] = left['properties']['value']
if options.case == 'ms' and right['kind'] == 'binding' and right['label'] == 's':
facts['s'] = left['properties']['value']
if facts != oracle['expected']:
raise ValueError('Required source facts differ from the independent oracle')
if any('primitive-bytes' in json.dumps(unknown) for unknown in graph['unknowns']):
raise ValueError('Selected byte allowance unexpectedly limited the task')
print(json.dumps({
'case': options.case, 'budget': options.budget, 'verified_facts': len(facts),
'source_sha256': oracle['source_sha256'],
'reply_bytes': len(result.stdout.encode()), 'unknowns': len(graph['unknowns']),
}))
if __name__ == '__main__':
main()