mirror of
https://github.com/morluto/rea.git
synced 2026-11-05 22:36:08 +00:00
Nitin Kushwaha
cf5194f68e
Separate extraction/inventory and caller-selectable publication budgets in the shared firmware workflow. Preserve phase, selected timeout, verified progress, caller cancellation identity and committed observations through cleanup. Enforce monotonic expiry even before timer callbacks run. Validated with 101 targeted tests, full static checks, documentation checks and real OpenWrt CLI/MCP workflows with digest and cleanup verification. Existing main CI failures are documented separately. Fixes #4176.
63 lines
2.3 KiB
TypeScript
63 lines
2.3 KiB
TypeScript
import type { ExecutionOptions } from "../AnalysisProvider.js";
|
|
import type { FirmwareAnalysisPort } from "./FirmwareAnalysisPort.js";
|
|
import {
|
|
firmwareRequestSchema,
|
|
type FirmwareOperation,
|
|
} from "../../domain/firmware/firmwareAnalysis.js";
|
|
import {
|
|
AnalysisCancelledError,
|
|
AnalysisInputError,
|
|
AnalysisOutputError,
|
|
} from "../../domain/analysisErrorCore.js";
|
|
import type { AnalysisError } from "../../domain/analysisErrorBase.js";
|
|
import { createEvidence, type Evidence } from "../../domain/evidence.js";
|
|
import { jsonObjectSchema } from "../../domain/jsonValue.js";
|
|
import { err, type Result } from "../../domain/result.js";
|
|
import { completeProviderEvidence } from "../ProviderOperationExecution.js";
|
|
|
|
/** Shared CLI/MCP validation and Evidence composition for arbitrary firmware files. */
|
|
export class FirmwareAnalysisService {
|
|
constructor(readonly provider: FirmwareAnalysisPort) {}
|
|
|
|
close(): Promise<void> {
|
|
return this.provider.close?.() ?? Promise.resolve();
|
|
}
|
|
|
|
/** Execute an explicit inspection or extraction and preserve its producing identity. */
|
|
async execute(
|
|
operation: FirmwareOperation,
|
|
input: unknown,
|
|
options?: ExecutionOptions,
|
|
): Promise<Result<Evidence, AnalysisError>> {
|
|
if (options?.signal?.aborted === true)
|
|
return err(
|
|
new AnalysisCancelledError(operation, { cause: options.signal.reason }),
|
|
);
|
|
const parsed = firmwareRequestSchema.safeParse({ operation, input });
|
|
if (!parsed.success)
|
|
return err(new AnalysisInputError(operation, { cause: parsed.error }));
|
|
const executed = await this.provider.execute(parsed.data, options);
|
|
if (!executed.ok) return executed;
|
|
const execution = executed.value;
|
|
if (execution.subject === null)
|
|
return err(
|
|
new AnalysisOutputError(
|
|
operation,
|
|
"Firmware execution did not bind its source artifact",
|
|
),
|
|
);
|
|
return completeProviderEvidence(
|
|
createEvidence(execution.subject, execution.provider, {
|
|
operation,
|
|
parameters: jsonObjectSchema.parse(parsed.data.input),
|
|
result: execution.result,
|
|
rawResult: execution.rawResult,
|
|
locations: execution.locations,
|
|
limitations: execution.limitations,
|
|
confidence: "observed",
|
|
}),
|
|
options?.signal,
|
|
);
|
|
}
|
|
}
|