mirror of
https://github.com/morluto/rea.git
synced 2026-11-10 16:57:19 +00:00
morluto
cb4e5cfbff
* refactor(analysis): centralize resource budgets and recovery facts * feat(analysis): expose ASAR and Ghidra runtime admission controls * feat(artifacts): expose reader admission and preserve limited recognition * feat(javascript): expose recoverable semantic precision budgets * feat(web): add recoverable source-map budgets and compact retained views * feat(web): make historical capture decoding budgets recoverable * fix(desktop): enforce selected view policies across capture and export * feat(runtime): make Frida and LLDB retention budgets selectable * feat(native): expose diagnostic budgets and preserve exhaustion causes * feat(managed): expose recoverable snapshot and representation budgets * feat(metadata): make Go and Rust inspection budgets recoverable * feat(wasm): expose representation and producer admissions * feat(evm): expose per-call worker resource budgets * feat(android): make resource and string-pool omissions recoverable * feat(producers): expose command and recorded-capture budgets * docs(analysis): record recovery contracts and integrated validation * fix(docs): link calibration oracle from published verification pages * fix(docs): restore desktop task anchors and receipt links * test(analysis): align fixtures with selectable budget contracts * fix(analysis): remove source-location projector dependency cycle * test(analysis): refresh budget recovery and verifier regressions * test(analysis): preserve format and publication recovery expectations * test(windows): align conformance with owned runtime admission * fix(desktop): preserve selected alias kinds in exported state * test(analysis): align provider fixtures with recoverable budgets * test(desktop): validate emitted alias metadata structurally * fix(ghidra): classify bounded Windows endpoint refusals * test(cli): assert selectable artifact admission recovery * fix(cli): preserve capture provenance in environment builds
80 lines
2.5 KiB
TypeScript
80 lines
2.5 KiB
TypeScript
import { mkdir, open, writeFile } from "node:fs/promises";
|
|
import { join } from "node:path";
|
|
import { expect } from "vitest";
|
|
import { z } from "zod";
|
|
import { createTestTempDirectory } from "../../fixtures/temporaryDirectory.js";
|
|
import { cliTest } from "../../support/cli/cliFixture.js";
|
|
|
|
for (const { command, limit, recovery } of [
|
|
{
|
|
command: "inspect-go-binary",
|
|
limit: 256 * 1024 * 1024,
|
|
recovery: "max_input_bytes",
|
|
},
|
|
{
|
|
command: "inspect-rust-binary",
|
|
limit: 256 * 1024 * 1024,
|
|
recovery: "producer_limits.input_bytes",
|
|
},
|
|
{
|
|
command: "inspect-il2cpp-metadata",
|
|
limit: 256 * 1024 * 1024,
|
|
recovery: "within the fixed IL2CPP input allowance",
|
|
},
|
|
{
|
|
command: "inspect-wasm-artifact",
|
|
limit: 8 * 1024 * 1024,
|
|
recovery: "max_input_bytes",
|
|
},
|
|
]) {
|
|
cliTest.skipIf(process.platform === "win32")(
|
|
`${command} identifies input-size refusal and applicable recovery`,
|
|
async ({ cli }) => {
|
|
const root = await createTestTempDirectory("rea-artifact-input-limit-");
|
|
const selected = join(root, "oversized.bin");
|
|
const handle = await open(selected, "wx");
|
|
try {
|
|
await handle.truncate(limit + 1);
|
|
} finally {
|
|
await handle.close();
|
|
}
|
|
const tools = join(root, "tools");
|
|
await mkdir(tools);
|
|
for (const tool of ["wasm-validate", "wasm-objdump", "wasm2wat"])
|
|
await writeFile(
|
|
join(tools, tool),
|
|
`#!/bin/sh
|
|
if [ "$1" = --version ]; then printf '1.0.42\\n'; exit 0; fi
|
|
printf 'Unexpected analysis command\\n' >&2
|
|
exit 1
|
|
`,
|
|
{ mode: 0o700 },
|
|
);
|
|
const output = await cli.run({
|
|
arguments: [command, selected, "--json"],
|
|
environment: { REA_WABT_BIN_DIRECTORY: tools },
|
|
});
|
|
expect(output.exitCode).toBe(1);
|
|
const refusal = z
|
|
.object({
|
|
code: z.literal("resource_constraint"),
|
|
category: z.literal("resource_constraint"),
|
|
retryable: z.literal(false),
|
|
details: z.object({
|
|
resource: z.literal("file-size"),
|
|
reported_limits: z.object({
|
|
maximum_input_bytes: z.literal(limit),
|
|
}),
|
|
}),
|
|
remediation: z.object({ action: z.string() }),
|
|
})
|
|
.parse(output.json);
|
|
// Raising the evidence-reply allowance cannot admit an oversized input.
|
|
expect(refusal.remediation.action).toContain(recovery);
|
|
expect(refusal.remediation.action).not.toMatch(
|
|
/allowance for the evidence reply/u,
|
|
);
|
|
},
|
|
);
|
|
}
|