mirror of
https://github.com/morluto/rea.git
synced 2026-10-12 02:19:24 +00:00
* feat(adb): acquire installed APK sets from connected Android devices Add a read-only ADB device-acquisition family over the caller's adb binary: inspect_adb_client, list_adb_devices, inspect_adb_device, list_adb_packages, and pull_adb_package, exposed through the CLI and MCP with shared admission, Evidence provenance (binary, version, serial, transport), and fixed argv vectors that never reach a shell. pull_adb_package acquires the complete split set reported by pm path into a package-named directory that must not exist, digesting every file with SHA-256 and keeping per-file failure reasons and partial coverage. Device kind is reported as an inference with its basis; getprop whitelisting keeps build identity bounded. REA installs nothing and never manages devices or emulators; the first device query may start the caller's local adb server, recorded when observed. Verified against adb 34.0.5 on Linux with an Android 14 (API 34) x86_64 emulator: full 224-package inventory, a real two-APK split set pulled with byte-exact digests, and a 73.9 MB system-package pull. npm run verify:adb records the lane; parser goldens come from the same device. READMEs carry the new row in every supported language. * feat(adb): complete the adb surface with observation, transfer, and lifecycle tools Extend the ADB family from five to twenty-four operations, all through fixed adb argument vectors with no shell exposure: Observation: read_adb_logcat (bounded dump, count/buffer/pid), inspect_adb_package (dumpsys package projection), list_adb_processes (ps -A), list_adb_directory (ls -la with kinds and symlink targets), list_adb_features (hex GL versions), list_adb_services (AIDL slash-suffixed names), inspect_adb_display (wm size and density), inspect_adb_window (focus declarations), read_adb_setting (device-side nulls reported as such), capture_adb_screen (exec-out screencap with PNG dimensions), collect_adb_bugreport (digested device archive). Transfer and search: pull_adb_file and push_adb_file (device-side sha256sum verification, explicit overwrite authority), resolve_adb_packages (substring package search with exact-match flag — the find step of an easy get). Lifecycle for dynamic analysis, each declaring mutatesTarget: install_adb_package and uninstall_adb_package preserving the device's Success/Failure verdict, start_adb_app (resolve-activity then am start -W), start_adb_activity (typed extras as --es/--ez/--ei/--el/--ef), and stop_adb_app (am force-stop). Verified end-to-end against adb 34.0.5 on Linux with an Android 14 (API 34) x86_64 emulator: 287 services, 92 features, split-set pulls with byte-exact digests, verified push/pull roundtrip, sized screen capture, and the full install → resolve → start → observe-in-ps → force-stop → uninstall lifecycle. Fixed a v-mode regex incompatibility in the settings key pattern and added argument descriptions required by the CLI catalog audit. * fix(adb): quote remote shell operands and protect captured output * test(adb): cover bugreport destinations containing spaces --------- Co-authored-by: REA Contributor <[email protected]> Co-authored-by: morluto <[email protected]>
135 lines
6.3 KiB
JavaScript
135 lines
6.3 KiB
JavaScript
import { createHash } from "node:crypto";
|
|
import { join } from "node:path";
|
|
import { pathToFileURL } from "node:url";
|
|
|
|
import canonicalize from "canonicalize";
|
|
|
|
const load = (root, path) => import(pathToFileURL(join(root, path)).href);
|
|
|
|
/** Sort tool/provider names alphabetically. */
|
|
export const names = (contracts) =>
|
|
contracts
|
|
.map(({ name }) => name)
|
|
.sort((left, right) => left.localeCompare(right));
|
|
|
|
/** Return the stable digest for a generated catalog projection. */
|
|
export const digest = (value) => {
|
|
const encoded = canonicalize(value);
|
|
if (encoded === undefined)
|
|
throw new TypeError("Catalog projection is not canonical JSON");
|
|
return createHash("sha256").update(encoded).digest("hex");
|
|
};
|
|
|
|
/** Throw when two name lists diverge. */
|
|
export const assertSameNames = (label, actual, expected) => {
|
|
const actualSet = new Set(actual);
|
|
const expectedSet = new Set(expected);
|
|
const missing = [...expectedSet].filter((name) => !actualSet.has(name));
|
|
const extra = [...actualSet].filter((name) => !expectedSet.has(name));
|
|
if (missing.length === 0 && extra.length === 0) return;
|
|
throw new Error(
|
|
`${label} drifted (missing: ${missing.join(", ") || "none"}; extra: ${extra.join(", ") || "none"})`,
|
|
);
|
|
};
|
|
|
|
const SOURCE_PATHS = {
|
|
packageMetadata: "dist/generatedPackageMetadata.js",
|
|
catalogIdentity: "dist/catalogIdentity.js",
|
|
cliCommandNames: "dist/cliCommandNames.js",
|
|
cli: "dist/cli.js",
|
|
toolContracts: "dist/contracts/toolContracts.js",
|
|
officialContracts: "dist/contracts/officialToolContracts.js",
|
|
enhancedContracts: "dist/contracts/enhancedToolContracts.js",
|
|
sessionContracts: "dist/contracts/sessionToolContracts.js",
|
|
binaryDiagnosticsContracts:
|
|
"dist/contracts/native/binaryDiagnosticsToolContracts.js",
|
|
pwntoolsProvider: "dist/native/pwntools/PwntoolsRelease.js",
|
|
nativeContracts: "dist/contracts/native/nativeToolContracts.js",
|
|
evmContracts: "dist/contracts/evm/evmToolContracts.js",
|
|
evmProvider: "dist/evm/EvmoleRelease.js",
|
|
artifactContracts: "dist/contracts/artifactToolContracts.js",
|
|
managedContracts: "dist/contracts/managed/managedToolContracts.js",
|
|
firmwareContracts: "dist/contracts/firmware/firmwareToolContracts.js",
|
|
firmwareProvider: "dist/firmware/FirmwareRelease.js",
|
|
androidContracts: "dist/contracts/android/androidToolContracts.js",
|
|
androidProvider: "dist/android/JadxRelease.js",
|
|
adbContracts: "dist/contracts/adb/adbToolContracts.js",
|
|
adbProvider: "dist/adb/AdbProvider.js",
|
|
managedWorkflowContracts:
|
|
"dist/contracts/managed/managedWorkflowToolContracts.js",
|
|
browserContracts: "dist/contracts/browserToolContracts.js",
|
|
webRuntimeContracts: "dist/contracts/webRuntimeToolContracts.js",
|
|
webNetworkCaptureContracts:
|
|
"dist/contracts/webNetworkCaptureToolContracts.js",
|
|
webNetworkCaptureProvider: "dist/browser/history/CaptureRelease.js",
|
|
browserScenarioContracts: "dist/contracts/browserScenarioToolContracts.js",
|
|
electronContracts: "dist/contracts/javascript/electronToolContracts.js",
|
|
javascriptRuntimeObservationContracts:
|
|
"dist/contracts/javascript/javascriptRuntimeObservationToolContracts.js",
|
|
applicationContracts: "dist/contracts/applicationToolContracts.js",
|
|
analysisViewContracts: "dist/contracts/analysisViewToolContracts.js",
|
|
webScriptContracts: "dist/contracts/webScriptToolContracts.js",
|
|
javascriptRecoveryContracts:
|
|
"dist/contracts/javascript/javascriptRecoveryToolContracts.js",
|
|
javascriptRecoveryProvider: "dist/javascript/recovery/WakaruRelease.js",
|
|
supportedClients: "dist/application/SupportedClients.js",
|
|
hopperProvider: "dist/hopper/HopperProviderCapabilities.js",
|
|
ghidraProvider: "dist/ghidra/GhidraProviderCapabilities.js",
|
|
idaProvider: "dist/ida/IdaProviderCapabilities.js",
|
|
nativeProvider: "dist/native/NativeMacOSProviderMetadata.js",
|
|
artifactProviders: "dist/application/InvestigationProviders.js",
|
|
browserIdentities: "dist/browser/providerIdentities.js",
|
|
v8InspectorProvider: "dist/inspector/providerIdentity.js",
|
|
evidence: "dist/domain/evidence.js",
|
|
evidenceBundle: "dist/domain/evidenceBundle.js",
|
|
evidenceCompletion: "dist/domain/evidenceCompletionLedger.js",
|
|
completionGeneration: "dist/domain/completionLedgerGeneration.js",
|
|
processCapture: "dist/domain/process/processCapture.js",
|
|
analysisSnapshot: "dist/domain/analysisSnapshot.js",
|
|
artifactGraph: "dist/domain/artifactGraph.js",
|
|
browserObservation: "dist/domain/browserObservation.js",
|
|
browserScenario: "dist/domain/browserScenario.js",
|
|
browserScenarioCapture: "dist/domain/browserScenarioCapture.js",
|
|
browserScenarioDiff: "dist/domain/browserScenarioDiff.js",
|
|
browserSession: "dist/domain/browserSession.js",
|
|
electronObservation: "dist/domain/javascript/electronObservation.js",
|
|
electronActiveObservation:
|
|
"dist/domain/javascript/electronActiveObservation.js",
|
|
javascriptRuntimeObservation:
|
|
"dist/domain/javascript/javascriptRuntimeObservation.js",
|
|
webBundleAnalysis: "dist/domain/webBundleAnalysis.js",
|
|
webCaptureDiff: "dist/domain/webCaptureDiff.js",
|
|
managedArtifact: "dist/domain/managed/managedArtifact.js",
|
|
managedComparison: "dist/domain/managed/managedMemberComparison.js",
|
|
managedNativeVerification: "dist/domain/managed/managedNativeVerification.js",
|
|
webMcpDiscovery: "dist/domain/webMcpDiscovery.js",
|
|
webScreenshot: "dist/domain/webScreenshot.js",
|
|
javascriptApplicationGraph:
|
|
"dist/domain/javascript/javascriptApplicationGraph.js",
|
|
javascriptApplicationAnalysis:
|
|
"dist/domain/javascript/javascriptApplicationAnalysis.js",
|
|
javascriptSemanticGraph: "dist/domain/javascript/javascriptSemanticGraph.js",
|
|
javascriptSemanticQuery:
|
|
"dist/domain/javascript/javascriptSemanticQuerySchemas.js",
|
|
javascriptSemanticTrace:
|
|
"dist/domain/javascript/javascriptSemanticTraceSchemas.js",
|
|
javascriptFeatureTrace:
|
|
"dist/domain/javascript/javascriptFeatureTraceSchemas.js",
|
|
javascriptVersionComparison:
|
|
"dist/domain/javascript/javascriptApplicationVersionComparisonSchemas.js",
|
|
reconstructionVerification:
|
|
"dist/domain/reconstructionVerificationSchemas.js",
|
|
residualUnknown: "dist/domain/residualUnknown.js",
|
|
};
|
|
|
|
/** Load every compiled source module referenced by the catalog. */
|
|
export const loadSources = async (root) =>
|
|
Object.fromEntries(
|
|
await Promise.all(
|
|
Object.entries(SOURCE_PATHS).map(async ([key, path]) => [
|
|
key,
|
|
await load(root, path),
|
|
]),
|
|
),
|
|
);
|