mirror of
https://github.com/morluto/rea.git
synced 2026-10-21 21:32:26 -05:00
* feat(process): add owned debugger shutdown lifecycle * feat(reverse): add local inspection commands * feat(gdb): add persistent debugger integration * feat(cutter): add Cutter bridge integration * test(reverse): enforce complete integration coverage * fix(process): preserve debugger shutdown ownership * fix(reverse): retain evidence across interrupted commands * fix(gdb): honor captured provider environment * test(process): cover debugger shutdown retries * fix(reverse): retain evidence for interrupted providers * test(process): cover debugger shutdown retries * fix(reverse): retain evidence for interrupted providers * fix(server): snapshot provider environment at creation * fix(reverse): close review gaps with complete coverage * fix(reverse): address inspection review findings * fix(gdb): bound sessions and retain cleanup ownership * fix(ci): require reverse-tools quality lane * fix(process): unref inherited debugger output pipes * fix(reverse): address remaining PR 1960 findings * fix(gdb): address remaining PR 1961 findings * fix(reverse): account for unrestricted provider execution * fix(process): retain debugger ownership until safe shutdown * fix(process): preserve replacement debugger sessions * fix(reverse): preserve admission and output provenance * fix(process): retain exited debugger until output settles * fix(mcp): bound provider admission and debugger cleanup * fix(reverse): preserve failure provenance and classify E2BIG * fix(gdb): preserve startup cleanup and detach safety * fix(process): retain debugger ownership after detach failure * fix(reverse): preserve mutation and failure provenance * fix(gdb): address debugger review findings * fix(reverse): rebind sessions after external mutation * fix(process): cap debugger output after exit * fix(gdb): protect one-shot detach verification * feat(debugger): add reverse tool coverage gate * test(debugger): cover integrated failure paths * fix(gdb): bound and preserve session observations * fix(gdb): address review regressions * style: format merged integration files * fix(reverse): preserve session and output evidence * refactor(gdb): share repeated test and partial result setup * fix(gdb): invalidate TTY proof for Python aliases * fix(reverse): retain failure output byte counts * test(process): synchronize late debugger output * fix(gdb): invalidate TTY proof for wrapped commands * fix(gdb): recognize wit command abbreviation * test(reverse): wait for cancelled descendant readiness * test(reverse): bound descendant cancellation cleanup * style(reverse): format integration tests and adapters * style: format reverse engineering integration files * test(reverse): remove duplicate environment harness * test(gdb): share session startup assertions * fix(gdb): invalidate output proof for command abbreviations * test(reverse): share composition edge case scenarios * fix(ci): recognize verification and mutation tool entries * test(rizin): cover successful fake inferior detach * test(cli): align full output failure envelope * test(cli): isolate reverse command lifecycle service * test(process): share debugger output fixture setup * fix(binary): preserve high-bit Windows signature bytes * style(binary): format Windows signature parser * test(mcp): preserve call coverage in unchanged comparison * fix(ci): include reverse tools Vitest configs in lint cache * fix(mcp): preserve target content on delivery errors * ci: align duplication ceiling with expanded suite * test(reverse): allow signal admission mutants * fix(reverse): bound retained cleanup failures to process owners * fix(test): replace drifting mutation ranges with owned selectors * fix(reverse): admit persistent commands and retain cleanup ownership * fix(cutter): recover timed-out commands from exact receipts * fix(cutter): reject unsupported bridge request kinds * fix(ci): repair client format and shared verification fixtures * fix(native): preserve debugger cleanup ownership and bridge authentication * test(native): retain diagnostics without perfect coverage requirements * chore(licenses): refresh locked dependency inventory and notices * fix(test): exclude transient command locks from mutation sandboxes * fix(gdb): admit only platforms with safe detach verification * fix(cutter): retain bounded completion receipts until acknowledgement * fix(cutter): acknowledge commands rejected before UI dispatch * test(reverse): fail cancellation checks before fixture teardown * test(gdb): clean up the retained broken-stdin fixture owner * docs(test): clarify focused provider verification scope * fix(rizin): retain close cleanup failures * fix(gdb): wait for inferior stop and bound MI buffering * fix(cutter): retain failed receipt acknowledgements * fix(rizin): return retained session identity on rebind failure * fix(gdb): preserve startup cancellation and lossy status * fix(rizin): retain launch provenance and assemble frames once * fix(cutter): recover receipts across callers and bound discovery * docs: describe debugger evidence and bridge recovery * fix(process): keep cleanup incomplete while writers remain Stopping a debugger no longer reports success when inherited output streams stay open, so BinarySession cannot reopen a binary a child is still changing. Concurrent Cutter cleanup retries share one receipt acknowledgement instead of treating a consumed receipt as failure. * fix(debuggers): recover cleanup with captured process identities * fix(analysis): retire sessions after unrestricted commands * fix(cli): preserve completed evidence after cleanup recovery * fix(cutter): bound frame collection and coalesce cleanup * fix(windows): resolve selected provider paths absolutely * fix(gdb): report decoding loss in failed startup evidence * fix(rizin): scope decoding loss to collected command frames * test(mcp): cover snapshot retirement in reverse tools CI --------- Co-authored-by: Daniel Gonçalves Araujo <47118053+dandgabr@users.noreply.github.com> Co-authored-by: REA Maintainers <noreply@github.com> Co-authored-by: OpenAI Codex <codex@users.noreply.github.com> Co-authored-by: Cursor Agent <cursoragent@cursor.com>
167 lines
8.1 KiB
JavaScript
167 lines
8.1 KiB
JavaScript
import { createHash } from "node:crypto";
|
|
import { join } from "node:path";
|
|
import { pathToFileURL } from "node:url";
|
|
|
|
import canonicalize from "canonicalize";
|
|
|
|
const load = (root, path) => import(pathToFileURL(join(root, path)).href);
|
|
|
|
/** Sort tool/provider names alphabetically. */
|
|
export const names = (contracts) =>
|
|
contracts
|
|
.map(({ name }) => name)
|
|
.sort((left, right) => left.localeCompare(right));
|
|
|
|
/** Return the stable digest for a generated catalog projection. */
|
|
export const digest = (value) => {
|
|
const encoded = canonicalize(value);
|
|
if (encoded === undefined)
|
|
throw new TypeError("Catalog projection is not canonical JSON");
|
|
return createHash("sha256").update(encoded).digest("hex");
|
|
};
|
|
|
|
/** Throw when two name lists diverge. */
|
|
export const assertSameNames = (label, actual, expected) => {
|
|
const actualSet = new Set(actual);
|
|
const expectedSet = new Set(expected);
|
|
const missing = [...expectedSet].filter((name) => !actualSet.has(name));
|
|
const extra = [...actualSet].filter((name) => !expectedSet.has(name));
|
|
if (missing.length === 0 && extra.length === 0) return;
|
|
throw new Error(
|
|
`${label} drifted (missing: ${missing.join(", ") || "none"}; extra: ${extra.join(", ") || "none"})`,
|
|
);
|
|
};
|
|
|
|
const SOURCE_PATHS = {
|
|
packageMetadata: "dist/generatedPackageMetadata.js",
|
|
catalogIdentity: "dist/catalogIdentity.js",
|
|
cliCommandNames: "dist/cliCommandNames.js",
|
|
cli: "dist/cli.js",
|
|
toolContracts: "dist/contracts/toolContracts.js",
|
|
officialContracts: "dist/contracts/officialToolContracts.js",
|
|
enhancedContracts: "dist/contracts/enhancedToolContracts.js",
|
|
sessionContracts: "dist/contracts/sessionToolContracts.js",
|
|
binaryDiagnosticsContracts:
|
|
"dist/contracts/native/binaryDiagnosticsToolContracts.js",
|
|
cutterContracts: "dist/contracts/cutterToolContracts.js",
|
|
cutterProvider: "dist/cutter/CutterBridgeClient.js",
|
|
reverseEngineeringContracts:
|
|
"dist/contracts/reverseEngineeringToolContracts.js",
|
|
gdbContracts: "dist/contracts/gdbToolContracts.js",
|
|
gdbProvider: "dist/gdb/GdbSessionManager.js",
|
|
rizinDebugContracts: "dist/contracts/rizinDebugToolContracts.js",
|
|
objdumpProvider: "dist/objdump/ObjdumpCommand.js",
|
|
rizinProvider: "dist/rizin/RizinCommand.js",
|
|
rizinDebugProvider: "dist/rizin/RizinDebugSessionManager.js",
|
|
fridaContracts: "dist/contracts/fridaToolContracts.js",
|
|
fridaProvider: "dist/frida/FridaInstrumentationManager.js",
|
|
pwntoolsProvider: "dist/native/pwntools/PwntoolsRelease.js",
|
|
nativeContracts: "dist/contracts/native/nativeToolContracts.js",
|
|
captureContracts: "dist/contracts/captures/captureToolContracts.js",
|
|
captureProvider: "dist/captures/TsharkCaptureProvider.js",
|
|
signalContracts: "dist/contracts/signals/signalToolContracts.js",
|
|
signalProvider: "dist/signals/SigrokRecordingProvider.js",
|
|
wasmContracts: "dist/contracts/wasm/wasmToolContracts.js",
|
|
wasmProvider: "dist/wasm/WabtRelease.js",
|
|
evmContracts: "dist/contracts/evm/evmToolContracts.js",
|
|
sqliteContracts: "dist/contracts/sqlite/sqliteToolContracts.js",
|
|
sqliteDomain: "dist/domain/sqlite/sqliteDatabase.js",
|
|
evmProvider: "dist/evm/EvmoleRelease.js",
|
|
goContracts: "dist/contracts/go/goToolContracts.js",
|
|
goProvider: "dist/go/GoBinaryProvider.js",
|
|
rustContracts: "dist/contracts/rust/rustToolContracts.js",
|
|
rustProvider: "dist/rust/RustBinaryProvider.js",
|
|
artifactContracts: "dist/contracts/artifactToolContracts.js",
|
|
managedContracts: "dist/contracts/managed/managedToolContracts.js",
|
|
firmwareContracts: "dist/contracts/firmware/firmwareToolContracts.js",
|
|
firmwareProvider: "dist/firmware/FirmwareRelease.js",
|
|
androidContracts: "dist/contracts/android/androidToolContracts.js",
|
|
flutterContracts: "dist/contracts/flutter/flutterToolContracts.js",
|
|
flutterProvider: "dist/flutter/FlutterBuildProvider.js",
|
|
androidProvider: "dist/android/JadxRelease.js",
|
|
apktoolContracts: "dist/contracts/apktool/apktoolToolContracts.js",
|
|
pcapContracts: "dist/contracts/pcap/pcapToolContracts.js",
|
|
pcapProvider: "dist/pcap/PcapProvider.js",
|
|
apktoolProvider: "dist/apktool/ApktoolProvider.js",
|
|
jebContracts: "dist/contracts/jeb/jebToolContracts.js",
|
|
jebProvider: "dist/jeb/JebProvider.js",
|
|
adbContracts: "dist/contracts/adb/adbToolContracts.js",
|
|
adbProvider: "dist/adb/AdbProvider.js",
|
|
managedWorkflowContracts:
|
|
"dist/contracts/managed/managedWorkflowToolContracts.js",
|
|
browserContracts: "dist/contracts/browserToolContracts.js",
|
|
webRuntimeContracts: "dist/contracts/webRuntimeToolContracts.js",
|
|
webNetworkCaptureContracts:
|
|
"dist/contracts/webNetworkCaptureToolContracts.js",
|
|
webNetworkCaptureProvider: "dist/browser/history/CaptureRelease.js",
|
|
browserScenarioContracts: "dist/contracts/browserScenarioToolContracts.js",
|
|
electronContracts: "dist/contracts/javascript/electronToolContracts.js",
|
|
javascriptRuntimeObservationContracts:
|
|
"dist/contracts/javascript/javascriptRuntimeObservationToolContracts.js",
|
|
applicationContracts: "dist/contracts/applicationToolContracts.js",
|
|
analysisViewContracts: "dist/contracts/analysisViewToolContracts.js",
|
|
webScriptContracts: "dist/contracts/webScriptToolContracts.js",
|
|
javascriptRecoveryContracts:
|
|
"dist/contracts/javascript/javascriptRecoveryToolContracts.js",
|
|
javascriptRecoveryProvider: "dist/javascript/recovery/WakaruRelease.js",
|
|
supportedClients: "dist/application/SupportedClients.js",
|
|
hopperProvider: "dist/hopper/HopperProviderCapabilities.js",
|
|
ghidraProvider: "dist/ghidra/GhidraProviderCapabilities.js",
|
|
idaProvider: "dist/ida/IdaProviderCapabilities.js",
|
|
nativeProvider: "dist/native/NativeMacOSProviderMetadata.js",
|
|
artifactProviders: "dist/application/InvestigationProviders.js",
|
|
browserIdentities: "dist/browser/providerIdentities.js",
|
|
v8InspectorProvider: "dist/inspector/providerIdentity.js",
|
|
evidence: "dist/domain/evidence.js",
|
|
evidenceBundle: "dist/domain/evidenceBundle.js",
|
|
evidenceCompletion: "dist/domain/evidenceCompletionLedger.js",
|
|
completionGeneration: "dist/domain/completionLedgerGeneration.js",
|
|
processCapture: "dist/domain/process/processCapture.js",
|
|
analysisSnapshot: "dist/domain/analysisSnapshot.js",
|
|
artifactGraph: "dist/domain/artifactGraph.js",
|
|
browserObservation: "dist/domain/browserObservation.js",
|
|
browserScenario: "dist/domain/browserScenario.js",
|
|
browserScenarioCapture: "dist/domain/browserScenarioCapture.js",
|
|
browserScenarioDiff: "dist/domain/browserScenarioDiff.js",
|
|
browserSession: "dist/domain/browserSession.js",
|
|
electronObservation: "dist/domain/javascript/electronObservation.js",
|
|
electronActiveObservation:
|
|
"dist/domain/javascript/electronActiveObservation.js",
|
|
javascriptRuntimeObservation:
|
|
"dist/domain/javascript/javascriptRuntimeObservation.js",
|
|
webBundleAnalysis: "dist/domain/webBundleAnalysis.js",
|
|
webCaptureDiff: "dist/domain/webCaptureDiff.js",
|
|
managedArtifact: "dist/domain/managed/managedArtifact.js",
|
|
managedComparison: "dist/domain/managed/managedMemberComparison.js",
|
|
managedNativeVerification: "dist/domain/managed/managedNativeVerification.js",
|
|
webMcpDiscovery: "dist/domain/webMcpDiscovery.js",
|
|
webScreenshot: "dist/domain/webScreenshot.js",
|
|
javascriptApplicationGraph:
|
|
"dist/domain/javascript/javascriptApplicationGraph.js",
|
|
javascriptApplicationAnalysis:
|
|
"dist/domain/javascript/javascriptApplicationAnalysis.js",
|
|
javascriptSemanticGraph: "dist/domain/javascript/javascriptSemanticGraph.js",
|
|
javascriptSemanticQuery:
|
|
"dist/domain/javascript/javascriptSemanticQuerySchemas.js",
|
|
javascriptSemanticTrace:
|
|
"dist/domain/javascript/javascriptSemanticTraceSchemas.js",
|
|
javascriptFeatureTrace:
|
|
"dist/domain/javascript/javascriptFeatureTraceSchemas.js",
|
|
javascriptVersionComparison:
|
|
"dist/domain/javascript/javascriptApplicationVersionComparisonSchemas.js",
|
|
reconstructionVerification:
|
|
"dist/domain/reconstructionVerificationSchemas.js",
|
|
residualUnknown: "dist/domain/residualUnknown.js",
|
|
};
|
|
|
|
/** Load every compiled source module referenced by the catalog. */
|
|
export const loadSources = async (root) =>
|
|
Object.fromEntries(
|
|
await Promise.all(
|
|
Object.entries(SOURCE_PATHS).map(async ([key, path]) => [
|
|
key,
|
|
await load(root, path),
|
|
]),
|
|
),
|
|
);
|