mirror of
https://github.com/morluto/rea
synced 2026-10-26 06:16:17 -04:00
morluto
0281d10130
Authenticate inventory requests once before family projection, remove obsolete schema aliases and raw facades, and preserve unresolved occurrence references from partial pages without fabricating content identities.
79 lines
2.6 KiB
TypeScript
79 lines
2.6 KiB
TypeScript
import type { AnalysisInputError } from "../domain/analysisErrorCore.js";
|
|
import type { AnalysisError } from "../domain/analysisErrorBase.js";
|
|
import {
|
|
createEvidence,
|
|
type Evidence,
|
|
type EvidenceProvider,
|
|
type EvidenceSubjectTarget,
|
|
} from "../domain/evidence.js";
|
|
import type { JsonValue } from "../domain/jsonValue.js";
|
|
import type { ParsedInventorySet } from "../domain/artifactInventoryEvidence.js";
|
|
import { readApplicationInventoryProjection } from "../domain/mobileApplicationGraphProjection.js";
|
|
import { ok, type Result } from "../domain/result.js";
|
|
|
|
interface InventoryProjectionResult {
|
|
readonly root_sha256: string;
|
|
readonly source_evidence_ids: readonly string[];
|
|
readonly limitations: readonly string[];
|
|
}
|
|
|
|
export interface InventoryProjectionEvidenceResult {
|
|
readonly evidence: Evidence;
|
|
readonly sources: readonly Evidence[];
|
|
}
|
|
|
|
interface InventoryProjectionOptions<
|
|
Output extends InventoryProjectionResult & JsonValue,
|
|
> {
|
|
readonly rawInput: unknown;
|
|
readonly project: (
|
|
input: ParsedInventorySet,
|
|
) => Result<Output, AnalysisInputError>;
|
|
readonly operation: string;
|
|
readonly predicateType: string;
|
|
readonly provider: EvidenceProvider;
|
|
readonly subjectFormat: (first: Evidence) => EvidenceSubjectTarget["format"];
|
|
}
|
|
|
|
/** Resolve source inventory once, then wrap its family projection in Evidence. */
|
|
export const projectInventoryEvidence = <
|
|
Output extends InventoryProjectionResult & JsonValue,
|
|
>(
|
|
options: InventoryProjectionOptions<Output>,
|
|
): Result<InventoryProjectionEvidenceResult, AnalysisError> => {
|
|
const source = readApplicationInventoryProjection(
|
|
options.rawInput,
|
|
options.operation,
|
|
);
|
|
if (!source.ok) return source;
|
|
const projected = options.project(source.value);
|
|
if (!projected.ok) return projected;
|
|
const result = projected.value;
|
|
const first = source.value.evidence[0];
|
|
return ok({
|
|
evidence: createEvidence(
|
|
first?.subject === null || first?.subject === undefined
|
|
? undefined
|
|
: {
|
|
path: first.subject.local_path,
|
|
sha256: result.root_sha256,
|
|
format: options.subjectFormat(first),
|
|
},
|
|
options.provider,
|
|
{
|
|
predicateType: options.predicateType,
|
|
operation: options.operation,
|
|
parameters: { inventory_evidence_ids: [...result.source_evidence_ids] },
|
|
result,
|
|
rawResult: null,
|
|
confidence: "inferred",
|
|
authority: "analyst-inference",
|
|
environment: null,
|
|
limitations: result.limitations,
|
|
evidenceLinks: result.source_evidence_ids,
|
|
},
|
|
),
|
|
sources: source.value.evidence,
|
|
});
|
|
};
|