* feat(artifacts): inspect classic iNES container regions
* fix(artifacts): preserve iNES source disappearance as integrity failure
* fix(artifacts): revalidate iNES source before parsing header
* fix(artifacts): validate admitted roots before classification
* fix(artifacts): normalize source loss during root hashing
* fix(artifacts): bind iNES extraction admission to inventory
* test(artifacts): clarify non-executing inspection wording
* fix: preserve binary plist detection with extended magic probe
* test(browser): wait for popup document loads before capture
* fix(artifacts): honor cancellation across source validation
* fix(artifacts): prefer artifact magic over implicit database suffix
* fix(artifacts): select extraction readers from scanned format
* fix(artifacts): complete prefix reads and share ZIP format admission
* fix(browser): budget scenario cleanup for content drain and shutdown
* test(artifacts): admit valid universal inputs before routing
* test(artifacts): verify iNES workflows on macOS
* test(ci): own iNES macOS coverage and portable fixture paths
* fix: preserve cleanup retries and avoid duplicate inventory parsing
* fix(contracts): share ZIP target formats across MCP lifecycle schemas
* fix(target): preserve typed cancellation during descriptor admission
* refactor(artifacts): use JSON-safe inventory producer output directly
* test(artifacts): share file read setup and satisfy CI checks
* fix(artifacts): classify changed admission as integrity failure
* ci: run Mach-O summary delivery coverage on macOS
* test(javascript): align parameter provenance with main contract
* test(browser): await discoverable fixture pages before runtime verification
* fix(artifacts): pass target metadata to format detection
* fix(artifacts): bind extraction to opened target
* fix: repair the static-check failures on the default branch (#2895)
* fix: repair the static-check failures on the default branch
The default branch fails its own required `Static checks` job three ways, so
every pull request reports that job as failed regardless of its own change.
- `npm run format:check` reports `src/domain/functionComparison.test.ts` and
`src/ida/IdaOperationRunner.ts`.
- `npm run lint` reports a duplicate `import { join } from "node:path"` in
`tests/boundary/mcp/ghidraInventoryMcp.test.ts` (lines 4 and 17).
- `npm run typecheck` reports `format: "devin"` missing from the client format
union in `src/application/SupportedClients.ts`, and an unchecked index in
`tests/boundary/cli/clientProfileLifecycle.test.ts`, whose pair array is
inferred as `string[][]`.
Apply the pinned formatter, drop the duplicate import, list the `"devin"` format
that its own definition already uses, and mark the pair array `as const`.
Validation: `npm run check:fast` and `npm run format:check` pass.
* fix(setup): keep Devin on the JSON configuration dialect
---------
Co-authored-by: 吴佳浩 <wujiahao@supremind.com>
Co-authored-by: morluto <76467478+morluto@users.noreply.github.com>
(cherry picked from commit df3d96da80)
* fix(artifacts): bind session inventories to target identity
* test(browser): bound fixture readiness acknowledgements
---------
Co-authored-by: 64579525 <17373302683@163.com>
Co-authored-by: 吴佳浩Alben <35291372+XiaoBinGan@users.noreply.github.com>
Co-authored-by: 吴佳浩 <wujiahao@supremind.com>
80 lines
2.4 KiB
TypeScript
80 lines
2.4 KiB
TypeScript
import { createOwnedArtifactClient } from "../../../support/artifactClientScope.js";
|
|
import { access, writeFile } from "node:fs/promises";
|
|
import { join } from "node:path";
|
|
|
|
import { expect, it, vi } from "vitest";
|
|
|
|
import { createTestTempDirectory } from "../../../fixtures/temporaryDirectory.js";
|
|
import { CPU_ARM64, universalMacho } from "../../../fixtures/universalMacho.js";
|
|
import { thinMach } from "../../../../src/domain/binaryTarget.fixture.js";
|
|
|
|
import { ArtifactReaderFailure } from "../../../../src/artifacts/ArtifactReader.js";
|
|
import {
|
|
CPU,
|
|
fatImage,
|
|
machoImage,
|
|
} from "../../../../src/artifacts/apple/MachoImage.fixture.js";
|
|
import { parseBinaryTarget } from "../../../../src/application/BinaryTargetResolver.js";
|
|
import { artifactExtractionExecutionSchema } from "../../../../src/contracts/artifactToolContracts.js";
|
|
|
|
const sliceReader = vi.hoisted(() => ({
|
|
reached: vi.fn(),
|
|
failure: null as unknown,
|
|
}));
|
|
|
|
vi.mock("../../../../src/artifacts/MachOSliceArtifactReader.js", () => ({
|
|
MachOSliceArtifactReader: class {
|
|
async *entries() {
|
|
sliceReader.reached();
|
|
yield* [];
|
|
throw sliceReader.failure;
|
|
}
|
|
|
|
close() {
|
|
return Promise.resolve();
|
|
}
|
|
|
|
provenance() {
|
|
return [];
|
|
}
|
|
},
|
|
}));
|
|
|
|
it("routes universal Mach-O extraction through slice inventory", async () => {
|
|
sliceReader.reached.mockClear();
|
|
sliceReader.failure = new ArtifactReaderFailure(
|
|
"unavailable",
|
|
"fixture reached universal slice inventory",
|
|
);
|
|
const root = await createTestTempDirectory("rea-extract-universal-");
|
|
const image = join(root, "Universal");
|
|
await writeFile(
|
|
image,
|
|
universalMacho([
|
|
{
|
|
bytes: thinMach(0xfeedfacf, CPU_ARM64),
|
|
cpuType: CPU_ARM64,
|
|
cpuSubtype: 0,
|
|
},
|
|
]).bytes,
|
|
);
|
|
const target = await parseBinaryTarget(image, { hostArchitecture: "arm64" });
|
|
if (!target.ok) throw target.error;
|
|
const output = join(root, "output");
|
|
const result = await createOwnedArtifactClient(target.value).execute(
|
|
"extract_artifact",
|
|
artifactExtractionExecutionSchema.parse({ output_root: output }),
|
|
);
|
|
|
|
expect(result).toMatchObject({
|
|
ok: false,
|
|
error: {
|
|
_tag: "ArtifactOperationError",
|
|
reason: "unavailable",
|
|
detail: "fixture reached universal slice inventory",
|
|
},
|
|
});
|
|
expect(sliceReader.reached).toHaveBeenCalledOnce();
|
|
await expect(access(output)).rejects.toThrow();
|
|
});
|