dbd556043c
* fix(providers): name JEB, IDA, and one-shot command deadlines Wire JEB catalog discovery to REA_JEB_MCP_TIMEOUT_MS, name the IDA registration timeoutMs, and add command_timeout_ms for one-shot objdump and rizin. Debugger, Frida, and Cutter caps stay fixed and say so. Refs #5910 Co-authored-by: morluto <morluto@users.noreply.github.com> * fix(providers): pass remaining deadlines and name the cap that fired Catalog discovery now sends the JEB budget still remaining to the SDK on connect and every tools/list page. Objdump and rizin preflight share one command_timeout_ms across stat and digest; the command still receives that budget again. Architecture Evidence keeps a selected timeout, and Frida and Rizin name the capture limit that actually stopped output. Co-authored-by: morluto <morluto@users.noreply.github.com> * fix(frida): preserve non-timeout device lookup failures getDeviceById is a lookup deadline only when Frida rejects with "Device not found" after the wait. A device-manager or backend failure stays a capability error. Align the assertions that still expected the previous capacity and capture sentences. Co-authored-by: morluto <morluto@users.noreply.github.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: morluto <morluto@users.noreply.github.com>
53 lines
4.5 KiB
TypeScript
53 lines
4.5 KiB
TypeScript
import { commandObservationSchema } from "../domain/commandObservation.js";
|
|
import { objdumpSummaryViewResultSchema } from "../domain/analysisView/analysisView.js";
|
|
|
|
import {
|
|
objdumpInputSchema,
|
|
rizinInputSchema,
|
|
} from "../domain/reverseEngineering.js";
|
|
import type { ToolContract } from "./toolContractTypes.js";
|
|
import { evidenceResultOf } from "./toolOutputSchemaPrimitives.js";
|
|
import { analysisDetailOutputSchemaOf } from "./analysisDetail.js";
|
|
import { toolContractMetadata } from "./toolEffects.js";
|
|
|
|
/** Caller-selected GNU objdump and Rizin observations. */
|
|
export const REVERSE_ENGINEERING_TOOL_CONTRACTS = [
|
|
{
|
|
name: "inspect_with_objdump",
|
|
...toolContractMetadata("inspect_with_objdump"),
|
|
kind: "native-provider",
|
|
description:
|
|
"Run caller-selected GNU objdump inspection against a local artifact, or request operation=architectures without a path to list BFD targets advertised by the installed binary. For operation=disassemble, optional symbol selects native symbol-scoped disassembly before output collection; omission preserves all code sections. Matching and symbol boundaries follow GNU objdump. Preserves decoded stdout and stderr inline with SHA-256 Evidence for artifact inspections, up to a shared 16 MiB combined limit; invalid UTF-8 bytes are represented by replacement characters and flagged in Evidence limitations. output_truncated reports output beyond that limit and completion_status is unknown if buffer enforcement terminated the process. The raw output is authoritative and REA does not claim a stable normalized format. DWARF does not follow local debug links by default. Set follow_debug_links to true to follow them; identities of external debug files are not bound to Evidence. REA clears DEBUGINFOD_URLS for objdump so DWARF processing does not make debuginfod network requests. Default detail complete returns original Evidence. Explicit detail summary retains the complete parent and returns its command observation once, without the raw mirror; parent_evidence_id supports later inspect_analysis_view summary queries and complete Evidence export. Architecture output is subjectless and does not establish support for any artifact. Optional command_timeout_ms is the per-phase wall clock in milliseconds (default 120000, range 1..2147483647); omitted means 120000 and the value applies on the next call. It does not raise the 16 MiB output cap.",
|
|
inputSchema: objdumpInputSchema,
|
|
outputSchema: analysisDetailOutputSchemaOf(
|
|
commandObservationSchema,
|
|
objdumpSummaryViewResultSchema,
|
|
),
|
|
examples: [
|
|
{
|
|
title: "Disassemble code sections",
|
|
input: { path: "/tmp/program", operation: "disassemble" },
|
|
},
|
|
{
|
|
title: "List advertised BFD targets",
|
|
input: { operation: "architectures" },
|
|
},
|
|
],
|
|
},
|
|
{
|
|
name: "execute_rizin_command",
|
|
...toolContractMetadata("execute_rizin_command"),
|
|
kind: "native-provider",
|
|
description:
|
|
"Execute one caller-selected Rizin command against a local artifact using the Rizin CLI profile that suppresses user settings and scripts while retaining plugins. Preserves decoded stdout and stderr inline with SHA-256 Evidence, up to a shared 16 MiB combined limit; invalid UTF-8 bytes are represented by replacement characters and flagged in Evidence limitations. output_truncated reports output beyond that limit and completion_status is unknown if buffer enforcement terminated the process. Rizin commands and retained plugins can execute foreign code, mutate files, access the network, and read files outside the selected artifact; identities and contents of those external inputs are not bound to Evidence. Command effects depend on the Rizin command and loaded plugins; JSON is command-specific and raw output remains authoritative. In a shared MCP server, this admitted command closes any active binary-analysis session; after its effects have settled, call open_binary before further analysis. Close an active Ghidra session explicitly first. Optional command_timeout_ms is the per-phase wall clock in milliseconds (default 120000, range 1..2147483647); omitted means 120000 and the value applies on the next call. It does not raise the 16 MiB output cap or a Rizin debugger session deadline.",
|
|
inputSchema: rizinInputSchema,
|
|
outputSchema: evidenceResultOf(commandObservationSchema),
|
|
examples: [
|
|
{
|
|
title: "Inspect binary information",
|
|
input: { path: "/tmp/program", command: "iI" },
|
|
},
|
|
],
|
|
},
|
|
] as const satisfies readonly ToolContract[];
|