* feat(process): add owned debugger shutdown lifecycle * feat(reverse): add local inspection commands * feat(gdb): add persistent debugger integration * feat(cutter): add Cutter bridge integration * test(reverse): enforce complete integration coverage * fix(process): preserve debugger shutdown ownership * fix(reverse): retain evidence across interrupted commands * fix(gdb): honor captured provider environment * test(process): cover debugger shutdown retries * fix(reverse): retain evidence for interrupted providers * test(process): cover debugger shutdown retries * fix(reverse): retain evidence for interrupted providers * fix(server): snapshot provider environment at creation * fix(reverse): close review gaps with complete coverage * fix(reverse): address inspection review findings * fix(gdb): bound sessions and retain cleanup ownership * fix(ci): require reverse-tools quality lane * fix(process): unref inherited debugger output pipes * fix(reverse): address remaining PR 1960 findings * fix(gdb): address remaining PR 1961 findings * fix(reverse): account for unrestricted provider execution * fix(process): retain debugger ownership until safe shutdown * fix(process): preserve replacement debugger sessions * fix(reverse): preserve admission and output provenance * fix(process): retain exited debugger until output settles * fix(mcp): bound provider admission and debugger cleanup * fix(reverse): preserve failure provenance and classify E2BIG * fix(gdb): preserve startup cleanup and detach safety * fix(process): retain debugger ownership after detach failure * fix(reverse): preserve mutation and failure provenance * fix(gdb): address debugger review findings * fix(reverse): rebind sessions after external mutation * fix(process): cap debugger output after exit * fix(gdb): protect one-shot detach verification * feat(debugger): add reverse tool coverage gate * test(debugger): cover integrated failure paths * fix(gdb): bound and preserve session observations * fix(gdb): address review regressions * style: format merged integration files * fix(reverse): preserve session and output evidence * refactor(gdb): share repeated test and partial result setup * fix(gdb): invalidate TTY proof for Python aliases * fix(reverse): retain failure output byte counts * test(process): synchronize late debugger output * fix(gdb): invalidate TTY proof for wrapped commands * fix(gdb): recognize wit command abbreviation * test(reverse): wait for cancelled descendant readiness * test(reverse): bound descendant cancellation cleanup * style(reverse): format integration tests and adapters * style: format reverse engineering integration files * test(reverse): remove duplicate environment harness * test(gdb): share session startup assertions * fix(gdb): invalidate output proof for command abbreviations * test(reverse): share composition edge case scenarios * fix(ci): recognize verification and mutation tool entries * test(rizin): cover successful fake inferior detach * test(cli): align full output failure envelope * test(cli): isolate reverse command lifecycle service * test(process): share debugger output fixture setup * fix(binary): preserve high-bit Windows signature bytes * style(binary): format Windows signature parser * test(mcp): preserve call coverage in unchanged comparison * fix(ci): include reverse tools Vitest configs in lint cache * fix(mcp): preserve target content on delivery errors * ci: align duplication ceiling with expanded suite * test(reverse): allow signal admission mutants * fix(reverse): bound retained cleanup failures to process owners * fix(test): replace drifting mutation ranges with owned selectors * fix(reverse): admit persistent commands and retain cleanup ownership * fix(cutter): recover timed-out commands from exact receipts * fix(cutter): reject unsupported bridge request kinds * fix(ci): repair client format and shared verification fixtures * fix(native): preserve debugger cleanup ownership and bridge authentication * test(native): retain diagnostics without perfect coverage requirements * chore(licenses): refresh locked dependency inventory and notices * fix(test): exclude transient command locks from mutation sandboxes * fix(gdb): admit only platforms with safe detach verification * fix(cutter): retain bounded completion receipts until acknowledgement * fix(cutter): acknowledge commands rejected before UI dispatch * test(reverse): fail cancellation checks before fixture teardown * test(gdb): clean up the retained broken-stdin fixture owner * docs(test): clarify focused provider verification scope * fix(rizin): retain close cleanup failures * fix(gdb): wait for inferior stop and bound MI buffering * fix(cutter): retain failed receipt acknowledgements * fix(rizin): return retained session identity on rebind failure * fix(gdb): preserve startup cancellation and lossy status * fix(rizin): retain launch provenance and assemble frames once * fix(cutter): recover receipts across callers and bound discovery * docs: describe debugger evidence and bridge recovery * fix(process): keep cleanup incomplete while writers remain Stopping a debugger no longer reports success when inherited output streams stay open, so BinarySession cannot reopen a binary a child is still changing. Concurrent Cutter cleanup retries share one receipt acknowledgement instead of treating a consumed receipt as failure. * fix(debuggers): recover cleanup with captured process identities * fix(analysis): retire sessions after unrestricted commands * fix(cli): preserve completed evidence after cleanup recovery * fix(cutter): bound frame collection and coalesce cleanup * fix(windows): resolve selected provider paths absolutely * fix(gdb): report decoding loss in failed startup evidence * fix(rizin): scope decoding loss to collected command frames * test(mcp): cover snapshot retirement in reverse tools CI --------- Co-authored-by: Daniel Gonçalves Araujo <47118053+dandgabr@users.noreply.github.com> Co-authored-by: REA Maintainers <noreply@github.com> Co-authored-by: OpenAI Codex <codex@users.noreply.github.com> Co-authored-by: Cursor Agent <cursoragent@cursor.com>
141 lines
5.3 KiB
C++
141 lines
5.3 KiB
C++
#pragma once
|
|
|
|
#define WIN32_LEAN_AND_MEAN
|
|
#define NOMINMAX
|
|
#include <windows.h>
|
|
#include <aclapi.h>
|
|
#include <bcrypt.h>
|
|
#include <node_api.h>
|
|
|
|
#include <algorithm>
|
|
#include <array>
|
|
#include <atomic>
|
|
#include <cstdint>
|
|
#include <memory>
|
|
#include <stdexcept>
|
|
#include <string>
|
|
#include <utility>
|
|
#include <vector>
|
|
|
|
namespace rea {
|
|
|
|
// Translate ordinary DOS drive separators without resolving components or
|
|
// changing extended, device, UNC, relative, or drive-relative namespaces.
|
|
inline std::wstring ordinaryDriveSeparators(std::wstring path) {
|
|
if (path.size() >= 3 && path[1] == L':' &&
|
|
((path[0] >= L'A' && path[0] <= L'Z') || (path[0] >= L'a' && path[0] <= L'z')) &&
|
|
(path[2] == L'\\' || path[2] == L'/'))
|
|
std::replace(path.begin(), path.end(), L'/', L'\\');
|
|
return path;
|
|
}
|
|
|
|
struct Failure : std::runtime_error {
|
|
DWORD win32;
|
|
std::wstring path;
|
|
std::string constraint;
|
|
// Affirmative proof for a failed runtime-parent admission; omission is unknown.
|
|
bool runtimeDirectoryUnallocated = false;
|
|
Failure(std::string constraint, std::wstring path = L"", DWORD code = GetLastError())
|
|
: std::runtime_error(constraint), win32(code), path(std::move(path)),
|
|
constraint(std::move(constraint)) {}
|
|
};
|
|
|
|
inline void require(bool condition, const char* constraint, const std::wstring& path = L"") {
|
|
if (!condition) {
|
|
const auto code = GetLastError();
|
|
throw Failure(constraint, path, code);
|
|
}
|
|
}
|
|
inline void require(bool condition, const char* constraint, const std::wstring& path, DWORD code) {
|
|
if (!condition) throw Failure(constraint, path, code);
|
|
}
|
|
|
|
class Handle {
|
|
HANDLE value_ = INVALID_HANDLE_VALUE;
|
|
public:
|
|
Handle() = default;
|
|
explicit Handle(HANDLE value) : value_(value) {}
|
|
~Handle() { reset(); }
|
|
Handle(const Handle&) = delete;
|
|
Handle& operator=(const Handle&) = delete;
|
|
Handle(Handle&& other) noexcept : value_(other.release()) {}
|
|
Handle& operator=(Handle&& other) noexcept { reset(other.release()); return *this; }
|
|
HANDLE get() const { return value_; }
|
|
bool valid() const { return value_ != INVALID_HANDLE_VALUE && value_ != nullptr; }
|
|
HANDLE release() { return std::exchange(value_, INVALID_HANDLE_VALUE); }
|
|
void reset(HANDLE next = INVALID_HANDLE_VALUE) {
|
|
if (valid()) CloseHandle(value_);
|
|
value_ = next;
|
|
}
|
|
};
|
|
|
|
enum class Kind { File, Runtime, Process };
|
|
struct Resource {
|
|
const Kind kind;
|
|
bool closed = false;
|
|
explicit Resource(Kind value) : kind(value) {}
|
|
virtual ~Resource() = default;
|
|
};
|
|
struct File : Resource {
|
|
std::wstring requestedPath;
|
|
std::wstring path;
|
|
std::vector<Handle> handles;
|
|
explicit File(std::wstring path) : Resource(Kind::File), requestedPath(path), path(std::move(path)) {}
|
|
HANDLE get() const { return handles.back().get(); }
|
|
};
|
|
struct Runtime : Resource {
|
|
std::wstring path;
|
|
std::vector<Handle> parents;
|
|
Handle directory;
|
|
std::vector<Handle> immutableFiles;
|
|
bool closing = false;
|
|
// Main-thread admission is single-flight; only the accepted copy owns the
|
|
// atomic cancellation flag consumed by its async worker. ERROR_BUSY rejects
|
|
// another copy before it can reset that flag or replace pending ownership.
|
|
bool snapshotPending = false;
|
|
std::atomic_bool snapshotCancelled{false};
|
|
Runtime() : Resource(Kind::Runtime) {}
|
|
};
|
|
struct Process : Resource {
|
|
Handle job, process, stdoutRead, stderrRead, stdinWrite;
|
|
// Present only for a job with a commit limit; receives the job's notifications.
|
|
Handle notifications;
|
|
ULONGLONG memoryLimit = 0;
|
|
bool memoryLimitReached = false;
|
|
bool inputPending = false;
|
|
DWORD pid = 0;
|
|
Process() : Resource(Kind::Process) {}
|
|
};
|
|
|
|
void check(napi_status status);
|
|
napi_value failureValue(napi_env env, const Failure& failure);
|
|
napi_value object(napi_env env);
|
|
napi_value string(napi_env env, const std::string& value);
|
|
napi_value string(napi_env env, const std::wstring& value);
|
|
napi_value number(napi_env env, double value);
|
|
napi_value boolean(napi_env env, bool value);
|
|
napi_value null(napi_env env);
|
|
void set(napi_env env, napi_value object, const char* key, napi_value value);
|
|
std::wstring wide(napi_env env, napi_value value);
|
|
double numeric(napi_env env, napi_value value);
|
|
std::vector<napi_value> array(napi_env env, napi_value value);
|
|
napi_value wrap(napi_env env, std::unique_ptr<Resource> resource);
|
|
Resource& resource(napi_env env, napi_value value, Kind kind);
|
|
|
|
std::unique_ptr<File> openFile(const std::wstring& path, DWORD access = GENERIC_READ,
|
|
bool directory = false,
|
|
DWORD finalSharing = FILE_SHARE_READ);
|
|
napi_value identity(napi_env env, HANDLE handle, const std::wstring& path);
|
|
std::unique_ptr<Runtime> createRuntime(const std::wstring& parent, const std::wstring& prefix);
|
|
void closeRuntime(Runtime& runtime);
|
|
napi_value filesystemCall(napi_env env, const std::wstring& operation,
|
|
const std::vector<napi_value>& args);
|
|
std::unique_ptr<Process> spawnProcess(const std::wstring& command, const std::wstring& commandLine,
|
|
const std::wstring& cwd, const std::vector<std::wstring>& environment,
|
|
bool protocolStdin = false, ULONGLONG memoryLimit = 0);
|
|
napi_value processCall(napi_env env, const std::wstring& operation,
|
|
const std::vector<napi_value>& args);
|
|
napi_value inspect(napi_env env, std::unique_ptr<Runtime>& probe);
|
|
|
|
} // namespace rea
|