mirror of
https://github.com/morluto/rea.git
synced 2026-11-12 01:41:21 +00:00
* fix(javascript): preserve literal percent runtime paths * fix(javascript): ignore resolve prefixes before the final anchor * fix(electron): retain application roots for loadFile declarations * fix(electron): resolve loadFile from enclosing application package * fix(electron): retain outer application root across package scopes * fix(electron): derive application ownership from inventoried packages * fix(electron): retain resolved package entrypoint ownership * fix(electron): preserve competing application ownership * fix(electron): retain invalid and omitted runtime ownership * fix(electron): preserve omitted module ownership and runtime paths * fix(electron): preserve proven roots before confining page paths * fix(electron): retain possible owners behind missing imports * fix(electron): distinguish absent imports and owned page candidates * fix(electron): keep unavailable JSON out of owner gaps * fix(electron): retain exact loader formats and default entry status * fix(electron): retain unavailable entrypoint ownership candidates * test(ghidra): preserve Windows Node probe prerequisites * test(ghidra): assert cancellation during profile shutdown * fix(electron): separate examined imports from frontend ownership * fix(electron): retain unavailable directory entrypoint owners * test(jeb): retain Linux ownership prerequisite in isolation * fix(javascript): retain unchecked loader ownership and literal main paths * fix(javascript): preserve runtime paths and call-site module aliases * fix(javascript): bound module alias traversal and preserve projections * fix(javascript): retain host module and nested artifact path boundaries * fix(javascript): preserve ESM and archive module loader provenance * test(javascript): distinguish unmapped containers from missing exports * fix: retain default module aliases and Electron builtin imports * fix: preserve host file URL and inward ASAR ownership * fix: preserve CommonJS file URL classification in CI fixtures * fix: retain bound module loaders and Windows entrypoint uncertainty * fix: retain ASAR uncertainty and invalidate changed Electron app roots * fix(javascript): retain ownership uncertainty across loader boundaries * fix(javascript): preserve loader sources and bound alias queries * fix(javascript): retain destructured loader sources * fix(javascript): preserve loader uncertainty at resolution boundaries * fix(javascript): preserve callable and package launch ownership * fix(javascript): preserve captured values across member reads * test(process): assert tagged filesystem cancellation failures * fix(javascript): preserve inventory bases and invocation read timing * fix(javascript): preserve ownership across indirect and unread loads * test(javascript): order fixture directory creation on Windows * test(javascript): share ordered filesystem fixture writer * fix(javascript): unify loader provenance and package validation * fix(javascript): preserve captured Node require loader values * fix(javascript): preserve loader invocation authority * fix(javascript): verify generic loader invocation authority * fix(javascript): preserve conditional loader method alternatives * fix(javascript): require proven factories for source association * fix(javascript): honor replaced Electron app path setters * fix(javascript): prove path and assignment source ownership * fix(javascript): retain native delegate eligibility through shared writes * fix(process): settle stale baseline errors after confirmed absence * fix(javascript): preserve assignment and path boundary evidence * fix(javascript): prove source-directory resolve anchors * fix: preserve application path provenance and portable schemas * fix(javascript): retain CommonJS exported setter effects * fix: isolate Linux identity observations and retain native module exports * fix(javascript): preserve published app and helper provenance * fix(javascript): normalize typed stores and native path fixtures
88 lines
3.0 KiB
TypeScript
88 lines
3.0 KiB
TypeScript
import { expect, it } from "vitest";
|
|
|
|
import { analyzeJavaScriptSemantics } from "./javascriptSemanticAnalysis.js";
|
|
import { analyzeJavaScriptStaticSource } from "./javascriptStaticAnalysis.js";
|
|
|
|
const provenance = (source: string, name: string) => {
|
|
const result = analyzeJavaScriptSemantics(source);
|
|
const binding = result.bindings.find((candidate) => candidate.name === name);
|
|
if (binding === undefined) throw new Error(`Missing binding ${name}`);
|
|
return binding.provenance;
|
|
};
|
|
|
|
it.each([
|
|
"let api;({api}={api:require('node:fs')});",
|
|
"let api;[api]=[require('node:fs')];",
|
|
"let api;({api}={api:{readFileSync(){}}});",
|
|
"let api={};({api}={api:require('node:fs')});",
|
|
"let api;if(flag)({api}={api:require('node:fs')});",
|
|
])("keeps projected replacement provenance unresolved: %s", (source) => {
|
|
expect(provenance(source, "api")).toMatchObject({
|
|
status: "unknown",
|
|
origins: [],
|
|
});
|
|
});
|
|
|
|
it.each([
|
|
"let api=require('node:fs');({api}={api:{}});",
|
|
"let api=require('node:fs');if(flag)({api}={api:{}});",
|
|
"let api=require('node:fs');[api]=[{}];",
|
|
])(
|
|
"retains possible earlier module origins without proving them current: %s",
|
|
(source) => {
|
|
expect(provenance(source, "api")).toMatchObject({
|
|
status: "ambiguous",
|
|
origins: [{ specifier: "node:fs", importedPath: [] }],
|
|
});
|
|
},
|
|
);
|
|
|
|
it.each([
|
|
["let api=require('node:fs');const saved=api;({api}={api:{}});", "module"],
|
|
["let api=require('node:fs');({api}={api:{}});const saved=api;", "unknown"],
|
|
[
|
|
"let api=require('node:fs');if(flag)({api}={api:{}});const saved=api;",
|
|
"ambiguous",
|
|
],
|
|
])("selects provenance at the alias capture: %s", (source, status) => {
|
|
expect(provenance(source, "saved").status).toBe(status);
|
|
if (status === "module")
|
|
expect(provenance(source, "saved").origins).toEqual([
|
|
{ specifier: "node:fs", importedPath: [], resolutionMode: "require" },
|
|
]);
|
|
});
|
|
|
|
it.each([
|
|
["const {api=fallback}={};", "local"],
|
|
["const {...api}=require('node:fs');", "local"],
|
|
["const api=require('node:fs');", "module"],
|
|
])(
|
|
"preserves declaration and ordinary initializer policy: %s",
|
|
(source, status) => {
|
|
expect(provenance(source, "api").status).toBe(status);
|
|
},
|
|
);
|
|
|
|
it("retains an uncertain sqlite candidate instead of asserting a local constructor", () => {
|
|
const source =
|
|
"let Database;({Database}={Database:require('better-sqlite3')});new Database('x.db');";
|
|
expect(provenance(source, "Database").status).toBe("unknown");
|
|
expect(analyzeJavaScriptStaticSource(source).storage).toEqual([
|
|
expect.objectContaining({
|
|
kind: "sqlite",
|
|
interpretation: "candidate",
|
|
name: "x.db",
|
|
}),
|
|
]);
|
|
});
|
|
|
|
it("preserves captured Electron origin and rejects certainty after replacement", () => {
|
|
const source =
|
|
"let electron=require('electron');const saved=electron;({electron}={electron:{}});const later=electron;";
|
|
expect(provenance(source, "saved")).toMatchObject({
|
|
status: "module",
|
|
origins: [{ specifier: "electron" }],
|
|
});
|
|
expect(provenance(source, "later").status).toBe("unknown");
|
|
});
|