ded59689ce
* fix(javascript): accept the Wakaru 1.x release line and verify 1.14.0 Exact --version equality rejected every Wakaru build except 1.13.0, and strict report schemas rejected any added field, so each upstream release broke recovery until REA re-pinned. Wakaru now documents that --version, --json and provenance.json change only by addition within a major version. Admit ^1.13.0 with the verified/compatible split used for Binwalk and Unblob, report the observed version instead of the pinned constant, and add a limitation for unverified releases. Parse reports with loose objects and keep the reported module status as a string; path, identity, range and file-set checks stay exact. Move the audited pin, submodule, CI binary and verifier to 1.14.0, and document where to get the binary from the refusal message. * fix(javascript): project known Wakaru warning fields --------- Co-authored-by: morluto <76467478+morluto@users.noreply.github.com>
30 lines
1.5 KiB
TypeScript
30 lines
1.5 KiB
TypeScript
import {
|
|
javascriptRecoveryInputSchema,
|
|
javascriptRecoveryResultSchema,
|
|
} from "../../domain/javascript/javascriptRecovery.js";
|
|
import { toolContractMetadata } from "../toolEffects.js";
|
|
import { evidenceResultOf } from "../toolOutputSchemaPrimitives.js";
|
|
import type { ToolContract } from "../toolContractTypes.js";
|
|
|
|
/** Derived script artifacts from optional upstream recovery adapters. */
|
|
export const JAVASCRIPT_RECOVERY_TOOL_CONTRACTS = [
|
|
{
|
|
name: "recover_javascript_sources",
|
|
...toolContractMetadata("recover_javascript_sources"),
|
|
kind: "application",
|
|
description:
|
|
"Recover readable modules from one local UTF-8 JavaScript script/bundle into an absent directory, using caller-supplied Wakaru ^1.13.0 (verified with 1.14.0) on Linux x64. Returns original/derived digests, extraction byte ranges, emitted source maps, warnings and analysis_input inline. Structural splitting may fall back to one module; original names and runtime equivalence remain unknown. No application code execution. Requires util-linux prlimit; one worker, 1 GiB address-space ceiling, 120-second deadline, 64 MiB input, 128 MiB output, 10000 entries and 8 MiB per diagnostic/report stream.",
|
|
inputSchema: javascriptRecoveryInputSchema,
|
|
outputSchema: evidenceResultOf(javascriptRecoveryResultSchema),
|
|
examples: [
|
|
{
|
|
title: "Recover a captured production bundle",
|
|
input: {
|
|
path: "/tmp/web-scripts/app.js",
|
|
output_directory: "/tmp/recovered-app",
|
|
},
|
|
},
|
|
],
|
|
},
|
|
] as const satisfies readonly ToolContract[];
|