morluto
ccdeda7a27
Move shared request parsing into its application owner, migrate all consumers, and remove six duplicated admission blocks while preserving cancellation and validation policy. Keep operator-selected JavaScript paths in verifier parent Evidence while retaining canonical comparison guards. Validated with 204 passing tests, 3 Linux-x64-only skips, typecheck, lint, and test discovery.
119 lines
4.2 KiB
TypeScript
119 lines
4.2 KiB
TypeScript
import { parseAnalysisInput } from "../AnalysisInput.js";
|
|
import type { ExecutionOptions } from "../AnalysisProvider.js";
|
|
import type { SqliteDatabasePort } from "./SqliteDatabasePort.js";
|
|
import type { AnalysisError } from "../../domain/analysisErrorBase.js";
|
|
import { AnalysisOutputError } from "../../domain/analysisErrorCore.js";
|
|
import {
|
|
createEvidence,
|
|
type Evidence,
|
|
type EvidenceSubjectTarget,
|
|
} from "../../domain/evidence.js";
|
|
import {
|
|
inspectSqliteDatabaseInputSchema,
|
|
sqliteDatabaseSchema,
|
|
type InspectSqliteDatabaseInput,
|
|
type SqliteDatabase,
|
|
SQLITE_ROW_LIMIT_DEFAULT,
|
|
DEFAULT_SQLITE_WORKER_TIMEOUT_MS,
|
|
sqliteSchemaHasObjectDeclaration,
|
|
sqliteSchemaScope,
|
|
sqliteInspectionParameters,
|
|
} from "../../domain/sqlite/sqliteDatabase.js";
|
|
import { err, ok, type Result } from "../../domain/result.js";
|
|
|
|
const OPERATION = "inspect_sqlite_database";
|
|
|
|
const matchesSelectedSchema = (
|
|
schema: SqliteDatabase["schema"],
|
|
table: string,
|
|
): boolean =>
|
|
sqliteSchemaHasObjectDeclaration(table)
|
|
? schema.tables.length === 1 &&
|
|
schema.tables[0]?.name === table &&
|
|
schema.indexes.every((index) => index.table === table) &&
|
|
schema.triggers.every((trigger) => trigger.table === table) &&
|
|
schema.views.length === 0
|
|
: schema.tables.length === 0 &&
|
|
schema.indexes.length === 0 &&
|
|
schema.views.length === 0 &&
|
|
schema.triggers.length === 0;
|
|
|
|
const matchesSelectedDatabase = (
|
|
report: SqliteDatabase,
|
|
input: InspectSqliteDatabaseInput,
|
|
subject: EvidenceSubjectTarget,
|
|
): boolean =>
|
|
report.artifact.path === input.path &&
|
|
subject.path === input.path &&
|
|
subject.sha256 === report.artifact.sha256 &&
|
|
subject.format === "file" &&
|
|
// Fresh executions must report known settings; only historical parsing permits omission.
|
|
report.worker_timeout_ms ===
|
|
(input.worker_timeout_ms ?? DEFAULT_SQLITE_WORKER_TIMEOUT_MS) &&
|
|
(report.wal === null || report.wal.path === `${input.path}-wal`) &&
|
|
report.schema.scope === sqliteSchemaScope(input) &&
|
|
(report.schema.scope !== "selected_table" ||
|
|
(input.table !== undefined &&
|
|
matchesSelectedSchema(report.schema, input.table))) &&
|
|
(input.table === undefined
|
|
? report.rows === null
|
|
: report.rows?.table === input.table &&
|
|
report.rows.row_limit === (input.row_limit ?? SQLITE_ROW_LIMIT_DEFAULT) &&
|
|
(input.columns === undefined ||
|
|
(report.rows.columns.length === input.columns.length &&
|
|
report.rows.columns.every(
|
|
(name, index) => name === input.columns?.[index],
|
|
))));
|
|
|
|
/** Shared snapshot inspection and caller-selection validation for CLI and MCP. */
|
|
export class SqliteDatabaseService {
|
|
constructor(readonly provider: SqliteDatabasePort) {}
|
|
|
|
/** Await provider shutdown, retaining failed cleanup owners for retry. */
|
|
close(): Promise<void> {
|
|
return this.provider.close?.() ?? Promise.resolve();
|
|
}
|
|
|
|
/** Inspect an explicit database snapshot and preserve its original database/WAL identity. */
|
|
async inspect(
|
|
rawInput: unknown,
|
|
options?: ExecutionOptions,
|
|
): Promise<Result<Evidence, AnalysisError>> {
|
|
const input = parseAnalysisInput(
|
|
OPERATION,
|
|
rawInput,
|
|
inspectSqliteDatabaseInputSchema,
|
|
options?.signal,
|
|
);
|
|
if (!input.ok) return input;
|
|
const inspected = await this.provider.inspect(input.value, options);
|
|
if (!inspected.ok) return inspected;
|
|
const execution = inspected.value;
|
|
const report = sqliteDatabaseSchema.safeParse(execution.result);
|
|
if (
|
|
!report.success ||
|
|
execution.subject == null ||
|
|
!matchesSelectedDatabase(report.data, input.value, execution.subject)
|
|
)
|
|
return err(
|
|
new AnalysisOutputError(
|
|
OPERATION,
|
|
"SQLite adapter returned malformed data or changed the selected database identity/table/row limit/worker budget.",
|
|
),
|
|
);
|
|
return ok(
|
|
createEvidence(execution.subject, execution.provider, {
|
|
operation: OPERATION,
|
|
parameters: sqliteInspectionParameters(input.value),
|
|
result: report.data,
|
|
...(execution.rawResult === null
|
|
? {}
|
|
: { rawResult: execution.rawResult }),
|
|
confidence: "observed",
|
|
locations: execution.locations,
|
|
limitations: execution.limitations,
|
|
}),
|
|
);
|
|
}
|
|
}
|