morluto
a9588be4eb
BREAKING CHANGE: Inventory Evidence must explicitly report integrity_contradictions, and browser capture Evidence must report every resolved budget. Caller input defaults remain supported; stored observations are never filled with inferred defaults.
121 lines
3.5 KiB
TypeScript
121 lines
3.5 KiB
TypeScript
import { describe, expect, it } from "vitest";
|
|
|
|
import { artifactInventoryResultSchema } from "./artifactGraph.js";
|
|
|
|
describe("artifact graph path and provenance fields", () => {
|
|
it("preserves long archive paths and command arguments inline", () => {
|
|
const path = `${"deep/".repeat(1_000)}resource.bin`;
|
|
const arguments_ = Array.from({ length: 1_025 }, (_, index) =>
|
|
index === 0 ? `/${"long/".repeat(1_000)}archive.ipa` : `arg-${index}`,
|
|
);
|
|
const artifactId = `art_${"a".repeat(64)}`;
|
|
const parsed = artifactInventoryResultSchema.parse({
|
|
manifest: {
|
|
manifest_id: `agm_${"b".repeat(64)}`,
|
|
root_artifact_id: artifactId,
|
|
root_sha256: "c".repeat(64),
|
|
root_format: "directory",
|
|
graph_sha256: "d".repeat(64),
|
|
node_count: 1,
|
|
occurrence_count: 1,
|
|
edge_count: 0,
|
|
},
|
|
nodes: [
|
|
{
|
|
artifact_id: artifactId,
|
|
format: "directory",
|
|
sha256: "c".repeat(64),
|
|
size: 0,
|
|
media_type: null,
|
|
architecture: null,
|
|
content_state: "materialized",
|
|
limitations: [],
|
|
},
|
|
],
|
|
occurrences: [
|
|
{
|
|
occurrence_id: `occ_${"e".repeat(64)}`,
|
|
artifact_id: artifactId,
|
|
parent_occurrence_id: null,
|
|
logical_path: path,
|
|
entry_kind: "file",
|
|
artifact_kind: "resource",
|
|
artifact_format: "file",
|
|
declared_size: 0,
|
|
compressed_size: 0,
|
|
executable: false,
|
|
encrypted: false,
|
|
hash_status: "verified",
|
|
source_location: null,
|
|
limitations: [],
|
|
},
|
|
],
|
|
edges: [],
|
|
provenance: [
|
|
{
|
|
tool: "archive-reader",
|
|
arguments: arguments_,
|
|
tool_version: null,
|
|
executable_sha256: null,
|
|
exit_code: 0,
|
|
effects: ["read"],
|
|
},
|
|
],
|
|
coverage: { scope: "container-entries", status: "complete" },
|
|
integrity_contradictions: [],
|
|
limitations: [],
|
|
});
|
|
|
|
expect(parsed.occurrences[0]?.logical_path).toBe(path);
|
|
expect(parsed.provenance[0]?.arguments).toHaveLength(1_025);
|
|
expect(parsed.provenance[0]?.arguments[0]).toBe(arguments_[0]);
|
|
});
|
|
|
|
it("requires current coverage and integrity facts and rejects the obsolete status alias", () => {
|
|
const inventory = {
|
|
manifest: {
|
|
manifest_id: `agm_${"b".repeat(64)}`,
|
|
root_artifact_id: `art_${"a".repeat(64)}`,
|
|
root_sha256: "c".repeat(64),
|
|
root_format: "plist",
|
|
graph_sha256: "d".repeat(64),
|
|
node_count: 1,
|
|
occurrence_count: 1,
|
|
edge_count: 0,
|
|
},
|
|
nodes: [],
|
|
occurrences: [],
|
|
edges: [],
|
|
provenance: [],
|
|
integrity_contradictions: [],
|
|
limitations: [],
|
|
};
|
|
|
|
expect(artifactInventoryResultSchema.safeParse(inventory).success).toBe(
|
|
false,
|
|
);
|
|
const { integrity_contradictions: _facts, ...withoutIntegrityFacts } =
|
|
inventory;
|
|
const currentWithoutIntegrityFacts = {
|
|
...withoutIntegrityFacts,
|
|
coverage: { scope: "root", status: "complete" },
|
|
};
|
|
expect(
|
|
artifactInventoryResultSchema.safeParse(currentWithoutIntegrityFacts)
|
|
.success,
|
|
).toBe(false);
|
|
expect(
|
|
artifactInventoryResultSchema.safeParse({
|
|
...currentWithoutIntegrityFacts,
|
|
integrity_contradictions: [],
|
|
}).success,
|
|
).toBe(true);
|
|
expect(
|
|
artifactInventoryResultSchema.safeParse({
|
|
...inventory,
|
|
coverage_status: "complete",
|
|
}).success,
|
|
).toBe(false);
|
|
});
|
|
});
|