mirror of
https://github.com/morluto/rea
synced 2026-10-26 06:16:17 -04:00
6ba6aea5eb
Use zip.js's parsed symlink fact for inventory and open refusal. Treat an unmatched Godot trailer as an unconfirmed candidate while preserving failures for confirmed malformed packs. Report entropy path-resolution failures at the selected-input boundary. Separate Go header discovery from inline string extents in ELF and Mach-O, and apply the aggregate content allowance after validating real source ranges. Normalize binary plist UID widths through the existing scalar-copy owner, budget exact clone growth, preserve source identity, and refuse inexact UIDs. Validation: 389 distinct tests passed, one Linux /proc test skipped on Darwin; build, typecheck/lint, docs, single-thread formatting, and discovery (2142 files) passed. CLI/MCP Go fixtures and public ZIP/Godot/keyed-archive workflows ran. Real producer prevalence and external provider execution were not established. Repeated ordinary keyed-archive CLI inventory facts and estimated reply tokens were equal before/after. Warm median elapsed was 0.5166s / 0.5177s; no speed claim. Fixes #6751 Fixes #6763 Fixes #6754 Fixes #6767 Fixes #6762 Fixes #6779
49 lines
1.9 KiB
TypeScript
49 lines
1.9 KiB
TypeScript
import { writeFile } from "node:fs/promises";
|
|
import { join } from "node:path";
|
|
|
|
import { expect } from "vitest";
|
|
|
|
import { artifactInventoryResultSchema } from "../../src/domain/artifactGraph.js";
|
|
import { artifactInspectionResultSchema } from "../../src/domain/artifactInspection.js";
|
|
import { parseEvidence } from "../../src/domain/evidence.js";
|
|
import { createTestTempDirectory } from "../fixtures/temporaryDirectory.js";
|
|
import { zipSymlinkMetadataFixture } from "../fixtures/zipSymlinkMetadata.js";
|
|
import { cliTest } from "../support/cli/cliFixture.js";
|
|
|
|
cliTest(
|
|
"reports ZIP symlinks from type bits when Unix permission bits are absent",
|
|
async ({ cli }) => {
|
|
const root = await createTestTempDirectory("rea-zip-symlink-metadata-");
|
|
const archivePath = join(root, "symlinks.zip");
|
|
await writeFile(archivePath, await zipSymlinkMetadataFixture());
|
|
|
|
const inspected = await cli.run({
|
|
arguments: ["inspect-artifact", archivePath, "--json"],
|
|
});
|
|
expect(inspected.exitCode, inspected.stdout + inspected.stderr).toBe(0);
|
|
const inspection = artifactInspectionResultSchema.parse(
|
|
parseEvidence(inspected.json).normalized_result,
|
|
);
|
|
const inventoryEvidence = inspection.substeps[0]?.evidence;
|
|
if (inventoryEvidence === undefined)
|
|
throw new Error("CLI inspection did not retain ZIP inventory Evidence");
|
|
const inventory = artifactInventoryResultSchema.parse(
|
|
inventoryEvidence.normalized_result,
|
|
);
|
|
const entriesByPath = new Map(
|
|
inventory.occurrences.map((entry) => [entry.logical_path, entry]),
|
|
);
|
|
|
|
expect(entriesByPath.get("target.txt")).toMatchObject({
|
|
entry_kind: "file",
|
|
});
|
|
for (const path of ["type-only-link", "permissions-link"])
|
|
expect(entriesByPath.get(path)).toMatchObject({
|
|
entry_kind: "symlink",
|
|
limitations: expect.arrayContaining([
|
|
"Archive symlink target was not read.",
|
|
]),
|
|
});
|
|
},
|
|
);
|