dilim/rea
1
0 Fork 0
mirror of https://github.com/morluto/rea.git synced 2026-11-06 05:17:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(kuna): verify release 1.990 (#8813)

Browse Source
This commit is contained in:
morluto authored and GitHub committed 2026-11-04 11:49:36 +08:00
1 parent e75d1c741c
commit f8f9095d2d
8 files changed
+22 -17
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

THIRD_PARTY_NOTICES.md
+1 -1
View File
@@ -60,7 +60,7 @@ pin inspection sources; they are not included in the npm package.
| ghidra-nativeaot | [MIT](https://github.com/Washi1337/ghidra-nativeaot/blob/effeb734fc570c32650f88b159608979dc7b423e/LICENSE.md) | Pinned inspection source; derived parser attribution above. |
| JADX | [Apache-2.0](https://github.com/skylot/jadx/blob/v1.5.6/LICENSE) | The audited jadx-headless-mcp source uses JADX 1.5.6 for Android decompilation; the engine JAR is separately supplied. |
| jadx-headless-mcp | [Apache-2.0](https://github.com/1013503897/jadx-headless-mcp/blob/5844800a486d2248fa949b74c9896285f5b54de2/LICENSE) | v0.7.1; pinned submodule and user-supplied JAR. |
| Kuna | [Apache-2.0](https://github.com/Noelo-Lab/kuna/blob/v1.989/LICENSE), with its [NOTICE](https://github.com/Noelo-Lab/kuna/blob/v1.989/NOTICE) | Bring your own `kuna`; REA verified 1.989 and never downloads, installs or bundles it. REA invokes it as a separate process. |
| Kuna | [Apache-2.0](https://github.com/Noelo-Lab/kuna/blob/v1.990/LICENSE), with its [NOTICE](https://github.com/Noelo-Lab/kuna/blob/v1.990/NOTICE) | Bring your own `kuna`; REA verified 1.990 and never downloads, installs or bundles it. REA invokes it as a separate process. |
| Apktool | [Apache-2.0](https://github.com/iBotPeaches/Apktool/blob/master/LICENSE.md) | User-supplied Android resource decoder. |
| Binwalk | [MIT](https://github.com/ReFirmLabs/binwalk/blob/4fdab3d464d97b68e0af9088df3f9e2e1545b21c/LICENSE) | v3.1.0; pinned submodule and user-supplied firmware engine. |
| Unblob | [MIT](https://github.com/onekey-sec/unblob/blob/1fcc7a0a584a70a96c31f5a276c20944d199a089/LICENSE) | 26.6.4; pinned submodule and user-supplied firmware engine. |
docs/kuna-provider.md
+1 -1
View File
@@ -1,6 +1,6 @@
# Kuna provider
[Kuna](https://github.com/Noelo-Lab/kuna) is an Apache-2.0 decompiler distributed as one `kuna` executable. For a new installation, use Kuna 1.989, REA's recommended verified release. REA uses a `kuna` you supply; it does not download, install, update or bundle Kuna. REA accepts other releases; `rea doctor` and analysis Evidence report them as unverified. Verification compares the reported version; it does not authenticate the executable. Analysis profiles retain the observed version and executable digest, independently of REA's current verified-release policy. The 1.989 real-provider checks ran on macOS arm64; Linux and other hosts have not been verified with that release.
[Kuna](https://github.com/Noelo-Lab/kuna) is an Apache-2.0 decompiler distributed as one `kuna` executable. For a new installation, use Kuna 1.990, REA's recommended verified release. REA uses a `kuna` you supply; it does not download, install, update or bundle Kuna. REA accepts other releases; `rea doctor` and analysis Evidence report them as unverified. Verification compares the reported version; it does not authenticate the executable. Analysis profiles retain the observed version and executable digest, independently of REA's current verified-release policy. The 1.990 real-provider checks ran on macOS arm64; Linux and other hosts have not been verified with that release.
Kuna is static: it reads the selected image and never executes it.
docs/testing-lanes.md
+5
View File
@@ -459,6 +459,11 @@ symbol-bearing and stripped Mach-O fixtures, including cold and warm reads,
references, and cleanup. Linux, other hosts, and the larger 1.833 target matrix
were not verified with 1.989.
Kuna 1.990 passed the real-provider lane on macOS arm64 with the generated
symbol-bearing and stripped Mach-O fixtures, including cold and warm reads,
references, timeout recovery, and cleanup. Linux, other hosts, and the larger
1.833 target matrix were not verified with 1.990.
## DOS Ghidra analysis
`npm run verify:ghidra:dos` requires the supported Ghidra and JDK installation
src/kuna/KunaRelease.ts
+1 -1
View File
@@ -1,5 +1,5 @@
/** Kuna release whose CLI and project layout REA verified; others report as unverified. */
export const KUNA_VERIFIED_VERSION = "1.989";
export const KUNA_VERIFIED_VERSION = "1.990";
/** Stable provider ID shared by readiness, doctor and Evidence. */
export const KUNA_PROVIDER_ID = "kuna";
tests/boundary/providers/kuna/kunaBatchDecompileMcp.test.ts
+1 -1
View File
@@ -93,7 +93,7 @@ test("keeps each Kuna no-pseudocode observation's limitations on its batch item"
// profile commits only analysis inputs. Composed and retained views must
// preserve the same warning for agents reading those results.
const verificationWarning =
"Kuna 1.833 is not REA's verified 1.989 release";
"Kuna 1.833 is not REA's verified 1.990 release";
expect(batch.limitations).toContainEqual(
expect.stringContaining(verificationWarning),
);
tests/boundary/providers/kuna/kunaDoctor.test.ts
+5 -5
View File
@@ -34,7 +34,7 @@ it("reports an unconfigured Kuna as a missing optional engine", async () => {
it("publishes the caller's explicit settings once the installation validates", async () => {
const root = await createTestTempDirectory("rea-kuna-doctor-");
const kuna = await writeFakeKuna(root, {
version: { stdout: "kuna 1.989\n" },
version: { stdout: "kuna 1.990\n" },
});
const cache = join(root, "cache");
@@ -48,7 +48,7 @@ it("publishes the caller's explicit settings once the installation validates", a
expect(inspection).toMatchObject({
configured: true,
available: true,
providerVersion: "1.989",
providerVersion: "1.990",
registrationEnvironment: {
REA_KUNA_COMMAND: kuna,
REA_KUNA_CACHE_DIR: cache,
@@ -59,10 +59,10 @@ it("publishes the caller's explicit settings once the installation validates", a
name: "installation",
ok: true,
detail: expect.stringMatching(
/reports Kuna 1\.989 \(sha256 [a-f0-9]{64}\)\.$/u,
/reports Kuna 1\.990 \(sha256 [a-f0-9]{64}\)\.$/u,
),
remediation: null,
details: { version: "1.989", verified_version: "1.989" },
details: { version: "1.990", verified_version: "1.990" },
},
{
name: "cache",
@@ -88,7 +88,7 @@ it("flags an unverified release without failing the installation", async () => {
"You may continue with the selected unverified release.",
),
remediation: expect.stringContaining("setting REA_KUNA_COMMAND"),
details: { verified_version: "1.989" },
details: { verified_version: "1.990" },
});
});
tests/boundary/providers/kuna/kunaInstallation.test.ts
+4 -4
View File
@@ -22,7 +22,7 @@ const it = test.skipIf(process.platform === "win32");
it("identifies a caller-selected kuna by version and digest", async () => {
const root = await createTestTempDirectory("rea-kuna-install-");
const kuna = await writeFakeKuna(root, {
version: { stdout: "kuna 1.989\n" },
version: { stdout: "kuna 1.990\n" },
});
const link = join(root, "current-kuna");
await symlink(kuna, link);
@@ -37,7 +37,7 @@ it("identifies a caller-selected kuna by version and digest", async () => {
value: {
configuration: { command: link, cacheRoot: join(root, "cache") },
executable: await realpath(kuna),
version: "1.989",
version: "1.990",
verified: true,
// A `#!` launcher reports its interpreter; ownership checks must not expect the path.
script: true,
@@ -104,14 +104,14 @@ fs.renameSync(process.argv[1] + ".new", process.argv[1]);
it("accepts another release but reports it as unverified", async () => {
const root = await createTestTempDirectory("rea-kuna-unverified-");
const kuna = await writeFakeKuna(root, {
version: { stdout: "kuna 1.988\n" },
version: { stdout: "kuna 1.989\n" },
});
const result = await inspectKunaInstallation({ REA_KUNA_COMMAND: kuna });
expect(result).toMatchObject({
ok: true,
value: { version: "1.988", verified: false },
value: { version: "1.989", verified: false },
});
});
tests/boundary/providers/kuna/kunaProvider.test.ts
+4 -4
View File
@@ -182,13 +182,13 @@ it("waits for an aborted pre-session hash before retrying its late close owner",
it("commits the observed Kuna release and digest to the analysis profile", async () => {
const { profile, kuna } = await session("rea-kuna-profile-", {
version: { stdout: "kuna 1.989\n" },
version: { stdout: "kuna 1.990\n" },
});
expect(profile).toMatchObject({
provider: { id: "kuna", name: "Kuna", version: "1.989" },
provider: { id: "kuna", name: "Kuna", version: "1.990" },
parameters: {
kuna_version: "1.989",
kuna_version: "1.990",
kuna_sha256: expect.stringMatching(/^[0-9a-f]{64}$/u),
kuna_command: kuna,
jobs: 1,
@@ -208,7 +208,7 @@ it("reports an unverified release on observations without binding policy into th
});
const client = open();
const inventory = await run(client, "list_procedures");
const warning = "Kuna 1.988 is not REA's verified 1.989 release";
const warning = "Kuna 1.988 is not REA's verified 1.990 release";
expect(inventory.limitations.join("\n")).toContain(warning);
const dossier = await run(client, "analyze_function", { procedure: "main" });
expect(dossier.limitations.join("\n")).toContain(warning);