fix(javascript): preserve runtime path bytes and Electron ownership (#4941)

* fix(javascript): preserve literal percent runtime paths * fix(javascript): ignore resolve prefixes before the final anchor * fix(electron): retain application roots for loadFile declarations * fix(electron): resolve loadFile from enclosing application package * fix(electron): retain outer application root across package scopes * fix(electron): derive application ownership from inventoried packages * fix(electron): retain resolved package entrypoint ownership * fix(electron): preserve competing application ownership * fix(electron): retain invalid and omitted runtime ownership * fix(electron): preserve omitted module ownership and runtime paths * fix(electron): preserve proven roots before confining page paths * fix(electron): retain possible owners behind missing imports * fix(electron): distinguish absent imports and owned page candidates * fix(electron): keep unavailable JSON out of owner gaps * fix(electron): retain exact loader formats and default entry status * fix(electron): retain unavailable entrypoint ownership candidates * test(ghidra): preserve Windows Node probe prerequisites * test(ghidra): assert cancellation during profile shutdown * fix(electron): separate examined imports from frontend ownership * fix(electron): retain unavailable directory entrypoint owners * test(jeb): retain Linux ownership prerequisite in isolation * fix(javascript): retain unchecked loader ownership and literal main paths * fix(javascript): preserve runtime paths and call-site module aliases * fix(javascript): bound module alias traversal and preserve projections * fix(javascript): retain host module and nested artifact path boundaries * fix(javascript): preserve ESM and archive module loader provenance * test(javascript): distinguish unmapped containers from missing exports * fix: retain default module aliases and Electron builtin imports * fix: preserve host file URL and inward ASAR ownership * fix: preserve CommonJS file URL classification in CI fixtures * fix: retain bound module loaders and Windows entrypoint uncertainty * fix: retain ASAR uncertainty and invalidate changed Electron app roots * fix(javascript): retain ownership uncertainty across loader boundaries * fix(javascript): preserve loader sources and bound alias queries * fix(javascript): retain destructured loader sources * fix(javascript): preserve loader uncertainty at resolution boundaries * fix(javascript): preserve callable and package launch ownership * fix(javascript): preserve captured values across member reads * test(process): assert tagged filesystem cancellation failures * fix(javascript): preserve inventory bases and invocation read timing * fix(javascript): preserve ownership across indirect and unread loads * test(javascript): order fixture directory creation on Windows * test(javascript): share ordered filesystem fixture writer * fix(javascript): unify loader provenance and package validation * fix(javascript): preserve captured Node require loader values * fix(javascript): preserve loader invocation authority * fix(javascript): verify generic loader invocation authority * fix(javascript): preserve conditional loader method alternatives * fix(javascript): require proven factories for source association * fix(javascript): honor replaced Electron app path setters * fix(javascript): prove path and assignment source ownership * fix(javascript): retain native delegate eligibility through shared writes * fix(process): settle stale baseline errors after confirmed absence * fix(javascript): preserve assignment and path boundary evidence * fix(javascript): prove source-directory resolve anchors * fix: preserve application path provenance and portable schemas * fix(javascript): retain CommonJS exported setter effects * fix: isolate Linux identity observations and retain native module exports * fix(javascript): preserve published app and helper provenance * fix(javascript): normalize typed stores and native path fixtures
2026-10-26 14:25:49 -04:00 · 2026-10-20 17:25:19 +08:00
parent d532b18123
commit e9fc8fb30c
149 changed files with 16881 additions and 988 deletions
@@ -0,0 +1,73 @@
+import * as t from "@babel/types";
+
+import { builtinDataEffectCallablePath } from "./javascriptSemanticDataEffectHelpers.js";
+import type { JavaScriptBindingIndex } from "./javascriptSemanticState.js";
+import { completeSemanticSteps } from "./javascriptSemanticTraversal.js";
+import { evaluateSemanticExpressionProvenance } from "./javascriptSemanticValues.js";
+import {
+  isUnmodifiedGlobalReference,
+  isUnmodifiedImportMetaUrl,
+} from "./javascriptSemanticAmbientWrites.js";
+import { unwrapJavaScriptExpression } from "./javascriptAstValues.js";
+import type { JavaScriptStaticPathIntrinsicQuery } from "./javascriptStaticAnalysisHelpers.js";
+
+/** Prove Node's path resolver before applying its argument-selection semantics. */
+export const createStaticNodePathResolveQuery = (
+  index: JavaScriptBindingIndex,
+): JavaScriptStaticPathIntrinsicQuery => {
+  const facts = new WeakMap<t.Node, boolean>();
+  const nativeMethod = (
+    callee: t.Node,
+    method: string,
+    modules: readonly string[],
+  ): boolean => {
+    const provenance = evaluateSemanticExpressionProvenance(
+      callee,
+      index.bindings,
+    );
+    if (
+      provenance.status !== "module" ||
+      provenance.origins[0].importedPath.at(-1) !== method ||
+      !modules.includes(provenance.origins[0].specifier.replace(/^node:/u, ""))
+    )
+      return false;
+    completeSemanticSteps(index.indexMemberMutationFactsSteps());
+    const path = builtinDataEffectCallablePath(callee, index.bindings, modules);
+    return (
+      path !== null &&
+      ((path.length === 1 && path[0] === method) ||
+        (modules.includes("path") &&
+          path.length === 2 &&
+          path[0] === "posix" &&
+          path[1] === method))
+    );
+  };
+  const sourceFile = (node: t.Node | undefined): boolean => {
+    if (node === undefined) return false;
+    node = unwrapJavaScriptExpression(node).node;
+    if (t.isIdentifier(node, { name: "__filename" }))
+      return isUnmodifiedGlobalReference(node, index.bindings, "__filename");
+    return (
+      t.isCallExpression(node) &&
+      node.arguments.length === 1 &&
+      nativeMethod(node.callee, "fileURLToPath", ["url"]) &&
+      isUnmodifiedImportMetaUrl(node.arguments[0], index.bindings)
+    );
+  };
+  return (callee, fact) => {
+    if (fact === "source-directory") {
+      callee = unwrapJavaScriptExpression(callee).node;
+      return t.isIdentifier(callee, { name: "__dirname" })
+        ? isUnmodifiedGlobalReference(callee, index.bindings, "__dirname")
+        : t.isCallExpression(callee) &&
+            callee.arguments.length === 1 &&
+            nativeMethod(callee.callee, "dirname", ["path", "path/posix"]) &&
+            sourceFile(callee.arguments[0]);
+    }
+    const cached = facts.get(callee);
+    if (cached !== undefined) return cached;
+    const proven = nativeMethod(callee, "resolve", ["path", "path/posix"]);
+    facts.set(callee, proven);
+    return proven;
+  };
+};