Verify selected files through a nonblocking opened handle before reading. Preserve regular-file symlinks and return actionable CLI/MCP diagnostics without publishing output. Co-authored-by: YouWish <29498139+Y0UW1SH@users.noreply.github.com>
58 lines
2.1 KiB
TypeScript
58 lines
2.1 KiB
TypeScript
import type { AndroidAnalysisPort } from "./AndroidAnalysisPort.js";
|
|
import type { ExecutionOptions } from "../AnalysisProvider.js";
|
|
import { parseBinaryTarget } from "../BinaryTargetResolver.js";
|
|
import {
|
|
androidRequestSchema,
|
|
type AndroidOperation,
|
|
} from "../../domain/android/androidAnalysis.js";
|
|
import {
|
|
AnalysisCancelledError,
|
|
AnalysisInputError,
|
|
} from "../../domain/analysisErrorCore.js";
|
|
import type { AnalysisError } from "../../domain/analysisErrorBase.js";
|
|
import { createEvidence, type Evidence } from "../../domain/evidence.js";
|
|
import { jsonObjectSchema } from "../../domain/jsonValue.js";
|
|
import { err, ok, type Result } from "../../domain/result.js";
|
|
|
|
/** Shared CLI/MCP admission, execution and Evidence composition for Android. */
|
|
export class AndroidAnalysisService {
|
|
constructor(readonly provider: AndroidAnalysisPort) {}
|
|
|
|
/** Inspect a caller-selected APK and retain producing-provider provenance inline. */
|
|
async execute(
|
|
operation: AndroidOperation,
|
|
input: unknown,
|
|
options?: ExecutionOptions,
|
|
): Promise<Result<Evidence, AnalysisError>> {
|
|
if (options?.signal?.aborted === true)
|
|
return err(new AnalysisCancelledError(operation));
|
|
const request = androidRequestSchema.safeParse({ operation, input });
|
|
if (!request.success)
|
|
return err(new AnalysisInputError(operation, { cause: request.error }));
|
|
const target = await parseBinaryTarget(
|
|
request.data.input.path,
|
|
options?.signal === undefined ? {} : { signal: options.signal },
|
|
);
|
|
if (!target.ok) return target;
|
|
const executed = await this.provider.execute(
|
|
target.value,
|
|
request.data,
|
|
options,
|
|
);
|
|
if (!executed.ok) return executed;
|
|
const execution = executed.value;
|
|
return ok(
|
|
createEvidence(execution.subject ?? target.value, execution.provider, {
|
|
operation,
|
|
parameters: jsonObjectSchema.parse(request.data.input),
|
|
result: execution.result,
|
|
rawResult: execution.rawResult,
|
|
limitations: execution.limitations,
|
|
locations: execution.locations,
|
|
confidence:
|
|
operation === "inspect_android_method" ? "derived" : "observed",
|
|
}),
|
|
);
|
|
}
|
|
}
|