mirror of
https://github.com/morluto/rea
synced 2026-10-28 15:07:26 -04:00
morluto
84 lines
3.5 KiB
TypeScript
84 lines
3.5 KiB
TypeScript
import { createHash } from "node:crypto";
|
|
import { mkdir, readFile, writeFile } from "node:fs/promises";
|
|
import { join } from "node:path";
|
|
import { expect } from "vitest";
|
|
import { thinMach } from "../../../src/domain/binaryTarget.fixture.js";
|
|
import { parseEvidence } from "../../../src/domain/evidence.js";
|
|
import { createTestTempDirectory } from "../../fixtures/temporaryDirectory.js";
|
|
import { connectLocalToolsMcp } from "../../fixtures/localToolsMcp.js";
|
|
import { cliTest } from "../../support/cli/cliFixture.js";
|
|
|
|
cliTest.for([
|
|
"decode_interface_builder",
|
|
"inspect_keyed_archive",
|
|
...(process.platform === "darwin"
|
|
? ["inspect_asset_catalog", "inspect_plist"]
|
|
: []),
|
|
] as const)(
|
|
"binds live %s Evidence to the open executable through stdio MCP",
|
|
async (operation) => {
|
|
const root = await createTestTempDirectory("rea-bundle-resource-identity-");
|
|
const app = join(root, "Probe.app");
|
|
const contents = join(app, "Contents");
|
|
const resources = join(contents, "Resources");
|
|
await mkdir(resources, { recursive: true });
|
|
await mkdir(join(contents, "MacOS"));
|
|
const executable = join(contents, "MacOS", "Probe");
|
|
const original = thinMach(0xfeedfacf, 0x0100000c);
|
|
await writeFile(executable, original);
|
|
await writeFile(
|
|
join(contents, "Info.plist"),
|
|
"<plist><dict><key>CFBundleExecutable</key><string>Probe</string></dict></plist>",
|
|
);
|
|
const nib = await readFile(
|
|
join(process.cwd(), "tests/fixtures/interface-builder/UIKitOutlet.xml"),
|
|
"utf8",
|
|
);
|
|
const nibPath = join(resources, "Main.nib");
|
|
await writeFile(nibPath, nib);
|
|
const { call } = await connectLocalToolsMcp();
|
|
const parameters =
|
|
operation === "inspect_keyed_archive"
|
|
? { path: "Contents/Resources/Main.nib" }
|
|
: {};
|
|
expect((await call("open_binary", { path: app })).isError).not.toBe(true);
|
|
const before = await call(operation, parameters);
|
|
expect(before.isError).not.toBe(true);
|
|
const initial = parseEvidence(before.structuredContent);
|
|
expect(initial.subject?.digest.sha256).toBe(
|
|
createHash("sha256").update(original).digest("hex"),
|
|
);
|
|
|
|
const changed = Buffer.from(original);
|
|
changed[31] = 1;
|
|
await writeFile(executable, changed);
|
|
const changedNib = nib.replaceAll("UIViewController", "ChangedController");
|
|
expect(changedNib).not.toBe(nib);
|
|
await writeFile(nibPath, changedNib);
|
|
if (operation === "inspect_plist")
|
|
await writeFile(
|
|
join(contents, "Info.plist"),
|
|
"<plist><dict><key>CFBundleExecutable</key><string>Probe</string><key>Marker</key><string>ChangedController</string></dict></plist>",
|
|
);
|
|
const stale = await call(operation, parameters);
|
|
expect(stale.isError).toBe(true);
|
|
expect(JSON.stringify(stale)).toContain("integrity_mismatch");
|
|
|
|
expect((await call("open_binary", { path: app })).isError).not.toBe(true);
|
|
const after = await call(operation, parameters);
|
|
expect(after.isError).not.toBe(true);
|
|
const refreshed = parseEvidence(after.structuredContent);
|
|
expect(refreshed.subject?.digest.sha256).toBe(
|
|
createHash("sha256").update(changed).digest("hex"),
|
|
);
|
|
if (operation !== "inspect_asset_catalog")
|
|
expect(JSON.stringify(refreshed.normalized_result)).toContain(
|
|
"ChangedController",
|
|
);
|
|
if (operation !== "inspect_asset_catalog" && operation !== "inspect_plist")
|
|
expect(JSON.stringify(refreshed.normalized_result)).toContain(
|
|
createHash("sha256").update(changedNib).digest("hex"),
|
|
);
|
|
},
|
|
);
|