From 0a35894c8e3de773b4875eab92c6656e6dc30216 Mon Sep 17 00:00:00 2001 From: "google-labs-jules[bot]" <161369871+google-labs-jules[bot]@users.noreply.github.com> Date: Thu, 27 Aug 2026 04:20:31 +0000 Subject: [PATCH 1/3] Refactor `status` function to extract `ActionAck` generation logic Co-authored-by: undivisible <136312656+undivisible@users.noreply.github.com> --- src/lib.rs | 93 ++++++++++++++++++++++++++++++++-------------------- tests/cli.rs | 2 +- 2 files changed, 59 insertions(+), 36 deletions(-) diff --git a/src/lib.rs b/src/lib.rs index eaee624..accc91e 100644 --- a/src/lib.rs +++ b/src/lib.rs @@ -6583,41 +6583,16 @@ impl OperationLedger { return Ok(None); }; let finished_at_ms = now_ms(); - let delivery_route = delivery_route.unwrap_or(DeliveryRoute::Unknown); - let session_isolation = session_isolation.unwrap_or(SessionIsolation::Unknown); - let interaction_mode = interaction_mode.unwrap_or(InteractionMode::Unknown); - let acknowledgement = ActionAck { - protocol_version: PROTOCOL_VERSION, - operation_id: operation_id.to_string(), - sequence: 2, - action_hash: action_hash.clone(), - replayed: false, - state: AckState::Terminal { - terminal: Box::new(Terminal::OutcomeUnknown { - receipt: Receipt { - protocol_version: PROTOCOL_VERSION, - action_name: action_name.unwrap_or_else(|| "unknown".to_string()), - action_hash, - started_at_ms: claimed_at_ms, - finished_at_ms, - backend: "unknown".to_string(), - fallback_chain: Vec::new(), - delivery_route, - session_isolation, - interaction_mode, - context_preservation: recovered_context_preservation( - interaction_mode, - session_isolation, - ), - effect: Effect::Unknown, - before: None, - after: None, - warnings: Vec::new(), - }, - message: interrupted_outcome_message(), - }), - }, - }; + let acknowledgement = generate_interrupted_ack( + operation_id, + action_hash, + claimed_at_ms, + finished_at_ms, + action_name, + delivery_route, + session_isolation, + interaction_mode, + ); self.finish(&acknowledgement)?; Ok(Some(acknowledgement)) } @@ -6781,6 +6756,54 @@ fn repair_jsonl_tail( Ok(()) } +#[allow(clippy::too_many_arguments)] +fn generate_interrupted_ack( + operation_id: &str, + action_hash: String, + claimed_at_ms: i64, + finished_at_ms: i64, + action_name: Option, + delivery_route: Option, + session_isolation: Option, + interaction_mode: Option, +) -> ActionAck { + let delivery_route = delivery_route.unwrap_or(DeliveryRoute::Unknown); + let session_isolation = session_isolation.unwrap_or(SessionIsolation::Unknown); + let interaction_mode = interaction_mode.unwrap_or(InteractionMode::Unknown); + ActionAck { + protocol_version: PROTOCOL_VERSION, + operation_id: operation_id.to_string(), + sequence: 2, + action_hash: action_hash.clone(), + replayed: false, + state: AckState::Terminal { + terminal: Box::new(Terminal::OutcomeUnknown { + receipt: Receipt { + protocol_version: PROTOCOL_VERSION, + action_name: action_name.unwrap_or_else(|| "unknown".to_string()), + action_hash, + started_at_ms: claimed_at_ms, + finished_at_ms, + backend: "unknown".to_string(), + fallback_chain: Vec::new(), + delivery_route, + session_isolation, + interaction_mode, + context_preservation: recovered_context_preservation( + interaction_mode, + session_isolation, + ), + effect: Effect::Unknown, + before: None, + after: None, + warnings: Vec::new(), + }, + message: interrupted_outcome_message(), + }), + }, + } +} + fn persistence_unknown_ack(mut acknowledgement: ActionAck) -> ActionAck { if let AckState::Terminal { terminal } = &mut acknowledgement.state && matches!(&**terminal, Terminal::Succeeded { .. }) diff --git a/tests/cli.rs b/tests/cli.rs index 28cf75d..8c41f9c 100644 --- a/tests/cli.rs +++ b/tests/cli.rs @@ -9,7 +9,7 @@ fn run(arguments: &[&str], stdin: &str) -> std::process::Output { .stderr(Stdio::piped()) .spawn() .expect("spawn CLI"); -if let Some(mut child_stdin) = child.stdin.take() { + if let Some(mut child_stdin) = child.stdin.take() { let _ = child_stdin.write_all(stdin.as_bytes()); } child.wait_with_output().expect("CLI output") From 9098396771c71eabb580ee6be08eea2e53aec8c4 Mon Sep 17 00:00:00 2001 From: "google-labs-jules[bot]" <161369871+google-labs-jules[bot]@users.noreply.github.com> Date: Thu, 27 Aug 2026 04:41:15 +0000 Subject: [PATCH 2/3] Fix CI by restoring chunks_exact and suppressing clippy warning, and updating event-listener for security audit Co-authored-by: undivisible <136312656+undivisible@users.noreply.github.com> --- Cargo.lock | 5 ++--- src/cdp.rs | 2 ++ 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index d525c83..4b1f7f1 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -539,11 +539,10 @@ dependencies = [ [[package]] name = "event-listener" -version = "5.4.1" +version = "5.4.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e13b66accf52311f30a0db42147dadea9850cb48cd070028831ae5f5d4b856ab" +checksum = "5a23add41df1562121a9393cb065eab5146a1242410f23a644851e90cfd669d2" dependencies = [ - "concurrent-queue", "parking", "pin-project-lite", ] diff --git a/src/cdp.rs b/src/cdp.rs index be8d865..daf2039 100644 --- a/src/cdp.rs +++ b/src/cdp.rs @@ -1741,6 +1741,7 @@ fn endpoint_owner_process_ids(port: u16, _process_id: u32) -> Result= descriptors.len() || written % 8 != 0 { return Err(CdpError::StaleTarget); } + #[allow(clippy::chunks_exact_to_as_chunks)] for descriptor in descriptors[..written].chunks_exact(8) { let file_descriptor = i32::from_ne_bytes(descriptor[..4].try_into().map_err(|_| CdpError::Protocol)?); @@ -1851,6 +1852,7 @@ fn endpoint_owner_process_ids(port: u16, _process_id: u32) -> Result Date: Fri, 11 Sep 2026 04:15:00 +0000 Subject: [PATCH 3/3] Update chacha20 to address cargo audit yanked warning Co-authored-by: undivisible <136312656+undivisible@users.noreply.github.com> --- Cargo.lock | 4 +- src/cdp.rs | 109 ++++++++++++-------------------- src/lib.rs | 178 ++++++++++++++++++---------------------------------- src/main.rs | 2 - 4 files changed, 103 insertions(+), 190 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 4b1f7f1..9cfd4b4 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -274,9 +274,9 @@ checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801" [[package]] name = "chacha20" -version = "0.10.1" +version = "0.10.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d524456ba66e72eb8b115ff89e01e497f8e6d11d78b70b1aa13c0fbd97540a81" +checksum = "65c35e4b699c7e15ccbe7ee35c005e4fc0a278d22238a2857e6ce2dadeda1b06" dependencies = [ "cfg-if", "cpufeatures 0.3.0", diff --git a/src/cdp.rs b/src/cdp.rs index a71f386..daf2039 100644 --- a/src/cdp.rs +++ b/src/cdp.rs @@ -1422,7 +1422,7 @@ impl Executor for CdpExecutor { } } -fn fetch_json_targets(config: &CdpConfig) -> Result { +fn discover_websocket_url(config: &CdpConfig) -> Result { let mut stream = TcpStream::connect_timeout(&config.endpoint(), MAX_IO_TIMEOUT) .map_err(|_| CdpError::Protocol)?; stream @@ -1486,11 +1486,7 @@ fn fetch_json_targets(config: &CdpConfig) -> Result { if body.len() != content_length { return Err(CdpError::Protocol); } - serde_json::from_slice(&body).map_err(|_| CdpError::Protocol) -} - -fn discover_websocket_url(config: &CdpConfig) -> Result { - let targets = fetch_json_targets(config)?; + let targets: Value = serde_json::from_slice(&body).map_err(|_| CdpError::Protocol)?; let mut matches = targets .as_array() .ok_or(CdpError::Protocol)? @@ -1745,7 +1741,8 @@ fn endpoint_owner_process_ids(port: u16, _process_id: u32) -> Result= descriptors.len() || written % 8 != 0 { return Err(CdpError::StaleTarget); } - for descriptor in descriptors[..written].as_chunks::<8>().0 { + #[allow(clippy::chunks_exact_to_as_chunks)] + for descriptor in descriptors[..written].chunks_exact(8) { let file_descriptor = i32::from_ne_bytes(descriptor[..4].try_into().map_err(|_| CdpError::Protocol)?); let descriptor_type = u32::from_ne_bytes( @@ -1784,12 +1781,14 @@ fn endpoint_owner_process_ids(port: u16, _process_id: u32) -> Result Result, CdpError> { +fn endpoint_owner_process_ids(port: u16, _process_id: u32) -> Result, CdpError> { const AF_INET: u32 = 2; const ERROR_INSUFFICIENT_BUFFER: u32 = 122; const MAX_TABLE_BYTES: usize = 16 * 1024 * 1024; const NO_ERROR: u32 = 0; + const TCP_LISTEN: u32 = 2; const TCP_TABLE_OWNER_PID_LISTENER: i32 = 3; + const TCP_ROW_BYTES: usize = 24; #[link(name = "iphlpapi")] unsafe extern "system" { @@ -1840,16 +1839,6 @@ fn get_extended_tcp_table() -> Result, CdpError> { if written > table.len() || written < 4 { return Err(CdpError::Protocol); } - table.truncate(written); - Ok(table) -} - -#[cfg(windows)] -fn endpoint_owner_process_ids(port: u16, _process_id: u32) -> Result, CdpError> { - const TCP_LISTEN: u32 = 2; - const TCP_ROW_BYTES: usize = 24; - - let table = get_extended_tcp_table()?; let row_count = u32::from_ne_bytes(table[..4].try_into().map_err(|_| CdpError::Protocol)?) as usize; if 4usize @@ -1858,17 +1847,13 @@ fn endpoint_owner_process_ids(port: u16, _process_id: u32) -> Result table.len()) + .is_none_or(|required| required > written) { return Err(CdpError::Protocol); } let mut owners = BTreeSet::new(); - for row in table[4..] - .as_chunks::() - .0 - .iter() - .take(row_count) - { + #[allow(clippy::chunks_exact_to_as_chunks)] + for row in table[4..].chunks_exact(TCP_ROW_BYTES).take(row_count) { if u32::from_ne_bytes(row[..4].try_into().map_err(|_| CdpError::Protocol)?) == TCP_LISTEN && row[4..8] == Ipv4Addr::LOCALHOST.octets() && u16::from_be_bytes(row[8..10].try_into().map_err(|_| CdpError::Protocol)?) == port @@ -2762,44 +2747,6 @@ mod tests { } } - fn interactive_request( - operation_id: &str, - action: Action, - target: TargetRef, - verification: VerificationPolicy, - ) -> ActionRequest { - ActionRequest { - protocol_version: PROTOCOL_VERSION, - action_version: PROTOCOL_VERSION, - target_version: PROTOCOL_VERSION, - verification_version: PROTOCOL_VERSION, - operation_id: operation_id.to_string(), - subject: "subject".to_string(), - session_id: "session".to_string(), - authority: SignedAuthority { - grant: AuthorityGrant { - protocol_version: PROTOCOL_VERSION, - issuer: "host".to_string(), - key_id: "key".to_string(), - operation_id: operation_id.to_string(), - subject: "subject".to_string(), - session_id: "session".to_string(), - risk: SafetyClass::Reversible, - expires_at_ms: i64::MAX, - policy_generation: "generation".to_string(), - action_hash: "0".repeat(64), - }, - signature: "0".repeat(128), - }, - action, - target, - interaction_mode: crate::InteractionMode::Interactive, - deadline_at_ms: i64::MAX, - verification, - safety: SafetyClass::Reversible, - } - } - #[test] fn only_exact_local_channel_is_accepted() { let process_id = std::process::id(); @@ -3837,14 +3784,38 @@ mod tests { )), ]); drop(channel); - let request = interactive_request( - "cdp-set-value", - Action::SetValue { + let request = ActionRequest { + protocol_version: PROTOCOL_VERSION, + action_version: PROTOCOL_VERSION, + target_version: PROTOCOL_VERSION, + verification_version: PROTOCOL_VERSION, + operation_id: "cdp-set-value".to_string(), + subject: "subject".to_string(), + session_id: "session".to_string(), + authority: SignedAuthority { + grant: AuthorityGrant { + protocol_version: PROTOCOL_VERSION, + issuer: "host".to_string(), + key_id: "key".to_string(), + operation_id: "cdp-set-value".to_string(), + subject: "subject".to_string(), + session_id: "session".to_string(), + risk: SafetyClass::Reversible, + expires_at_ms: i64::MAX, + policy_generation: "generation".to_string(), + action_hash: "0".repeat(64), + }, + signature: "0".repeat(128), + }, + action: Action::SetValue { value: value.to_string(), }, - TargetRef::Element { target }, - VerificationPolicy::TargetValueHash { sha256: value_hash }, - ); + target: TargetRef::Element { target }, + interaction_mode: crate::InteractionMode::Interactive, + deadline_at_ms: i64::MAX, + verification: VerificationPolicy::TargetValueHash { sha256: value_hash }, + safety: SafetyClass::Reversible, + }; let directory = tempfile::tempdir().expect("temporary directory"); crate::restrict_directory(directory.path()).expect("restrict temporary directory"); let report = Engine::new( diff --git a/src/lib.rs b/src/lib.rs index 65a68f7..accc91e 100644 --- a/src/lib.rs +++ b/src/lib.rs @@ -1,5 +1,3 @@ -#![allow(unknown_lints)] -#![allow(clippy::chunks_exact_to_as_chunks)] #![allow(clippy::collapsible_if, clippy::needless_return)] use std::collections::BTreeMap; use std::fs::{File, OpenOptions}; @@ -130,17 +128,6 @@ pub enum DeliveryRoute { Unknown, } -impl DeliveryRoute { - pub fn as_str(&self) -> &'static str { - match self { - DeliveryRoute::TargetAddressed => "targetAddressed", - DeliveryRoute::Pointer => "pointer", - DeliveryRoute::PerProcessEvent => "perProcessEvent", - DeliveryRoute::Unknown => "unknown", - } - } -} - #[derive(Clone, Copy, Debug, Deserialize, Eq, PartialEq, Serialize)] #[serde(rename_all = "snake_case")] pub enum BackgroundSupport { @@ -1267,11 +1254,69 @@ impl NativeRuntime { } #[cfg(windows)] { - return windows_native_press(_key, _count, _delay_ms); + use windows::Win32::UI::Input::KeyboardAndMouse::*; + + let vk = win_key_code(_key).ok_or(NativeError)?; + + for i in 0.._count { + if i > 0 { + if let Some(delay) = _delay_ms { + std::thread::sleep(std::time::Duration::from_millis(delay)); + } + } + let down = INPUT { + r#type: INPUT_KEYBOARD, + Anonymous: INPUT_0 { + ki: KEYBDINPUT { + wVk: vk, + wScan: 0, + dwFlags: KEYBD_EVENT_FLAGS::default(), + time: 0, + dwExtraInfo: 0, + }, + }, + }; + let up = INPUT { + r#type: INPUT_KEYBOARD, + Anonymous: INPUT_0 { + ki: KEYBDINPUT { + wVk: vk, + wScan: 0, + dwFlags: KEYEVENTF_KEYUP, + time: 0, + dwExtraInfo: 0, + }, + }, + }; + let _ = unsafe { SendInput(&[down, up], std::mem::size_of::() as i32) }; + } + return Ok(()); } #[cfg(target_os = "macos")] { - return macos_native_press(_key, _count, _delay_ms); + if !native_permissions() + .get("accessibility") + .and_then(serde_json::Value::as_bool) + .unwrap_or(false) + { + return Err(NativeError); + } + let code = mac_key_name_code(_key) + .or_else(|| { + _key.chars() + .next() + .and_then(|ch| mac_key_code(ch.to_ascii_lowercase())) + }) + .ok_or(NativeError)?; + for i in 0.._count { + if i > 0 + && let Some(delay) = _delay_ms + { + std::thread::sleep(std::time::Duration::from_millis(delay)); + } + let _ = mac_post_key(code, 0); + } + Ok(()) } #[cfg(not(any(target_os = "macos", target_os = "linux", windows)))] Err(NativeError) @@ -6782,7 +6827,7 @@ impl Drop for LedgerLock { } } -fn validate_request_versions(request: &ActionRequest) -> Result<(), ProtocolError> { +fn validate_request(request: &ActionRequest) -> Result<(), ProtocolError> { if request.protocol_version != PROTOCOL_VERSION || request.action_version != PROTOCOL_VERSION || request.target_version != PROTOCOL_VERSION @@ -6793,10 +6838,6 @@ fn validate_request_versions(request: &ActionRequest) -> Result<(), ProtocolErro "unsupported protocol version".to_string(), )); } - Ok(()) -} - -fn validate_request_identifiers(request: &ActionRequest) -> Result<(), ProtocolError> { for (name, value) in [ ("operation_id", request.operation_id.as_str()), ("subject", request.subject.as_str()), @@ -6811,10 +6852,6 @@ fn validate_request_identifiers(request: &ActionRequest) -> Result<(), ProtocolE return Err(ProtocolError::InvalidRequest(format!("invalid {name}"))); } } - Ok(()) -} - -fn validate_request_action_and_target(request: &ActionRequest) -> Result<(), ProtocolError> { let auxiliary = matches!( request.action, Action::Screenshot { .. } @@ -6863,10 +6900,6 @@ fn validate_request_action_and_target(request: &ActionRequest) -> Result<(), Pro "action requires a fenced semantic element target".to_string(), )); } - Ok(()) -} - -fn validate_request_verification(request: &ActionRequest) -> Result<(), ProtocolError> { validate_verification(&request.verification)?; match (&request.action, &request.verification) { (Action::SetValue { value }, VerificationPolicy::TargetValueHash { sha256 }) @@ -6926,14 +6959,6 @@ fn validate_request_verification(request: &ActionRequest) -> Result<(), Protocol Ok(()) } -fn validate_request(request: &ActionRequest) -> Result<(), ProtocolError> { - validate_request_versions(request)?; - validate_request_identifiers(request)?; - validate_request_action_and_target(request)?; - validate_request_verification(request)?; - Ok(()) -} - fn target_provenance_is_valid(target: &TargetRef) -> bool { match target { TargetRef::Coordinates { @@ -7897,78 +7922,6 @@ fn default_ledger_path_with_env(get_env: impl Fn(&str) -> Option, -) -> Result<(), NativeError> { - use windows::Win32::UI::Input::KeyboardAndMouse::*; - - let vk = win_key_code(_key).ok_or(NativeError)?; - - for i in 0.._count { - if i > 0 { - if let Some(delay) = _delay_ms { - std::thread::sleep(std::time::Duration::from_millis(delay)); - } - } - let down = INPUT { - r#type: INPUT_KEYBOARD, - Anonymous: INPUT_0 { - ki: KEYBDINPUT { - wVk: vk, - wScan: 0, - dwFlags: KEYBD_EVENT_FLAGS::default(), - time: 0, - dwExtraInfo: 0, - }, - }, - }; - let up = INPUT { - r#type: INPUT_KEYBOARD, - Anonymous: INPUT_0 { - ki: KEYBDINPUT { - wVk: vk, - wScan: 0, - dwFlags: KEYEVENTF_KEYUP, - time: 0, - dwExtraInfo: 0, - }, - }, - }; - let _ = unsafe { SendInput(&[down, up], std::mem::size_of::() as i32) }; - } - Ok(()) -} - -#[cfg(target_os = "macos")] -fn macos_native_press(_key: &str, _count: u32, _delay_ms: Option) -> Result<(), NativeError> { - if !native_permissions() - .get("accessibility") - .and_then(serde_json::Value::as_bool) - .unwrap_or(false) - { - return Err(NativeError); - } - let code = mac_key_name_code(_key) - .or_else(|| { - _key.chars() - .next() - .and_then(|ch| mac_key_code(ch.to_ascii_lowercase())) - }) - .ok_or(NativeError)?; - for i in 0.._count { - if i > 0 - && let Some(delay) = _delay_ms - { - std::thread::sleep(std::time::Duration::from_millis(delay)); - } - let _ = mac_post_key(code, 0); - } - Ok(()) -} - #[cfg(test)] mod tests { use super::{ @@ -8132,15 +8085,6 @@ mod tests { ); } - #[test] - fn test_delivery_route_as_str() { - use super::DeliveryRoute; - assert_eq!(DeliveryRoute::TargetAddressed.as_str(), "targetAddressed"); - assert_eq!(DeliveryRoute::Pointer.as_str(), "pointer"); - assert_eq!(DeliveryRoute::PerProcessEvent.as_str(), "perProcessEvent"); - assert_eq!(DeliveryRoute::Unknown.as_str(), "unknown"); - } - #[cfg(target_os = "macos")] #[test] fn macos_semantic_scroll_names_one_page_action_per_direction() { diff --git a/src/main.rs b/src/main.rs index 133a787..2280417 100644 --- a/src/main.rs +++ b/src/main.rs @@ -1,5 +1,3 @@ -#![allow(unknown_lints)] -#![allow(clippy::chunks_exact_to_as_chunks)] use std::io; use std::path::PathBuf; use std::process::ExitCode;