morluto
58fb824105
Give ordinary Evidence creation an explicit unknown-payload input contract while retaining the strong JSON contract for producer helpers and cooperative immutable creation. Keep schema admission, input snapshotting and identity hashing with the Evidence owner. Remove 32 generic JSON preparses that only fed ordinary Evidence construction. Preserve semantic format validation, selected-source bindings, standalone JSON boundaries, typed executions and scenario digest contracts. Invalid JSON now reports its Evidence parameters/normalized_result/raw_result prefix. Validation: fresh runtime/catalog build, 560 focused and README tests passed, 4 platform-specific cases skipped, full static/docs checks, test discovery, duplication and diff checks. New regressions cover omitted semantic optionals, raw-result defaults and nested undefined refusal without input mutation. Installed providers, real browsers/Frida/JADX and Linux-only recovery remain unverified; boundary providers are authored fixtures.
62 lines
1.9 KiB
TypeScript
62 lines
1.9 KiB
TypeScript
import type { ProviderIdentity } from "../AnalysisProvider.js";
|
|
import {
|
|
createEvidence,
|
|
type Evidence,
|
|
type EvidenceObservation,
|
|
} from "../../domain/evidence.js";
|
|
import type {
|
|
JavaScriptRuntimeObservation,
|
|
JavaScriptRuntimeTargetList,
|
|
ListJavaScriptRuntimeTargetsInput,
|
|
ObserveJavaScriptRuntimeInput,
|
|
} from "../../domain/javascript/javascriptRuntimeObservation.js";
|
|
|
|
type RuntimeObservationOperation =
|
|
| "list_javascript_runtime_targets"
|
|
| "observe_javascript_runtime";
|
|
|
|
/** Create deterministic Evidence for one passive Inspector operation. */
|
|
export const createJavaScriptRuntimeObservationEvidence = (
|
|
operation: RuntimeObservationOperation,
|
|
input: ListJavaScriptRuntimeTargetsInput | ObserveJavaScriptRuntimeInput,
|
|
result: JavaScriptRuntimeTargetList | JavaScriptRuntimeObservation,
|
|
provider: ProviderIdentity,
|
|
): Evidence =>
|
|
createEvidence(undefined, provider, {
|
|
predicateType:
|
|
operation === "list_javascript_runtime_targets"
|
|
? "rea.javascript-runtime-target-list"
|
|
: "rea.javascript-runtime-observation",
|
|
operation,
|
|
parameters: parameters(input),
|
|
result,
|
|
rawResult: null,
|
|
confidence: "observed",
|
|
authority: "external-service",
|
|
environment: {
|
|
id: `${result.runtime.product}@${result.runtime.protocol_version}`,
|
|
platform: "unknown",
|
|
architecture: "unknown",
|
|
isolation: "none",
|
|
},
|
|
limitations: [
|
|
...result.limitations,
|
|
"Runtime host platform and architecture were not observed.",
|
|
],
|
|
});
|
|
|
|
const parameters = (
|
|
input: ListJavaScriptRuntimeTargetsInput | ObserveJavaScriptRuntimeInput,
|
|
): EvidenceObservation["parameters"] => ({
|
|
inspector_endpoint: input.inspector_endpoint,
|
|
...("target_id" in input
|
|
? {
|
|
target_id: input.target_id,
|
|
...(input.runtime_kind === undefined
|
|
? {}
|
|
: { runtime_kind: input.runtime_kind }),
|
|
observation_ms: input.observation_ms,
|
|
}
|
|
: {}),
|
|
});
|