@kirkchinese/dsh-rea 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 kirkchinese
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,51 @@
-# Temporary Holding Version
+# @kirkchinese/dsh-rea
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+通过[能力目录](../capability-catalog)在 DeepSeek Harness 中按需使用 [REA](https://github.com/morluto/rea)：人工整理的 14 个能力族覆盖 REA 6.7.0 的全部 207 个工具，REA 只在模型真正调用时启动。
+
+> **过渡方案。** 以下任一上游改进落地后，本包将弃用：REA 在 `tools/list` 中声明工具族（能力目录会直接采用），或 DSH 的 DeepSeek 适配器支持延迟工具与 `tool_reference`。提案草稿见仓库 `docs/upstream/`。
+
+## 安装
+
+需要先安装能力目录，并让 `rea` 在 PATH 上：
+
+```sh
+npm install -g rea-agents
+dsh plugin --profile web add @kirkchinese/dsh-capability-catalog
+dsh plugin --profile web add @kirkchinese/dsh-rea
+```
+
+想一次装好用整合包 [`@kirkchinese/dsh-re-kit`](../re-kit)，两者二选一。
+
+本包插入一行 `capability-catalog-rea`，不改动能力目录主行的配置。要改命令（例如改用 `npx -y rea-agents@6.7.0 mcp`）或关掉 REA，在 profile 的 `cordis.patch.yml` 中覆盖这一行：
+
+```yaml
+- id: capability-catalog-rea
+  config:
+    name: rea
+    enabled: false
+```
+
+覆盖会替换整个 `config`，`families` 需要的话请一并写上。
+
+## 能力族
+
+| 族 | 内容 | 工具数 |
+| --- | --- | --- |
+| session | 打开/关闭目标、提供方绑定、导航上下文 | 8 |
+| native-code | 函数、伪代码、汇编、调用图与引用 | 28 |
+| native-navigation | 地址、字节、字符串、名称、段、注释与书签 | 22 |
+| native-formats | Mach-O/PE/ELF、签名、Go/Rust/Swift/ObjC 元数据、objdump、rizin | 20 |
+| javascript-electron | JS/Electron 应用、bundle、source map、IPC 与运行时 | 17 |
+| web-browser | 浏览器页面、网络抓包、截图、WebMCP | 14 |
+| android | APK、类、方法、资源（JADX、Apktool、JEB） | 12 |
+| adb-device | adb 设备：包、文件、日志、屏幕与应用控制 | 24 |
+| managed-dotnet | .NET 程序集与重建 | 7 |
+| apple-bundles | plist、keyed archive、asset catalog、Interface Builder | 6 |
+| artifacts | 归档、包、固件、SQLite、分析视图 | 7 |
+| runtime-debug | Frida、GDB、rizin 调试、进程与原生 UI 捕获、崩溃记录 | 26 |
+| captures-signals | pcap 与逻辑信号 | 6 |
+| evidence | Evidence 包、残留未知项与重建验证 | 10 |
+
+规则在 [`families.yml`](families.yml)；`cordis.patch.yml` 由仓库的 `scripts/sync-patches.mjs` 生成。
+
+REA 自带的工作流 skill（`rea setup --skill --yes` 安装到 `~/.agents/skills`）照常可用，其中的工具名对应能力目录 id `mcp:rea/<name>`。

package/cordis.patch.yml

@@ -0,0 +1,59 @@
+# Generated by scripts/sync-patches.mjs from packages/rea/families.yml; edit that file instead.
+# REA through the capability catalog. Deprecated once REA ships tool groups upstream or the
+# Harness DeepSeek adapter supports deferred tools; see packages/rea/README.md.
+- insert:
+    - id: capability-catalog-rea
+      name: '@kirkchinese/dsh-capability-catalog/server'
+      config:
+        name: rea
+        title: REA reverse engineering
+        description: >-
+          Reverse engineering of native binaries, JavaScript/Electron and web apps, Android, .NET,
+          Apple bundles, firmware and runtime behavior, with evidence for every finding. For workflow
+          guidance load the skill reverse-engineer-anything when it is available; tool names in it map
+          to ids mcp:rea/<name>.
+        command: rea
+        args: [mcp]
+        families:
+          - name: session
+            description: 'open/close a target, provider binding, readiness and navigation context'
+            match: [open_binary, close_binary, binary_session, binary_overview, get_navigation_context, list_documents, current_document, list_architectures]
+          - name: native-code
+            description: 'functions, pseudocode, assembly, call graph and references in native binaries (Hopper/Ghidra/IDA)'
+            match: [procedure_*, list_procedures, search_procedures, current_procedure, resolve_containing_procedure, analyze_function, batch_decompile, read_function_instructions, get_call_graph, build_call_path, trace_call_path, xrefs, find_xrefs_to_name, resolve_native_call_targets, trace_native_values, compare_functions, inspect_native_*, inspect_address_context]
+          - name: native-navigation
+            description: 'addresses, bytes, strings, names, segments, comments and bookmarks'
+            match: ['*address*', goto_address, next_address, prev_address, read_bytes, search_bytes, list_strings, search_strings, list_names, list_segments, '*comment*', '*bookmark*', annotate_native_function]
+          - name: native-formats
+            description: 'Mach-O, PE, ELF layout, signatures, Go/Rust/Swift/ObjC metadata, objdump and rizin'
+            match: [inspect_macho, inspect_pe_resources, inspect_binary_layout, inspect_signature, inspect_go_binary, inspect_rust_binary, '*swift*', get_objc_*, inspect_native_dispatch_metadata, inspect_with_objdump, execute_rizin_command, cutter_command, list_cutter_sessions, trace_dylib_resolution, inspect_dart_aot, identify_flutter_build, inspect_wasm_artifact, compare_wasm_interfaces, inspect_evm_interface]
+          - name: javascript-electron
+            description: 'JavaScript/Electron apps, bundles, source maps, IPC and runtime tracing'
+            match: ['*javascript*', analyze_web_bundle, recover_javascript_sources, compare_source_to_bundle, compare_bundles, '*electron*', trace_application_feature, trace_feature, compare_application_versions]
+          - name: web-browser
+            description: 'live pages through a Chrome-family browser, network captures, screenshots and WebMCP'
+            match: ['*web*', capture_browser_scenario, list_browser_targets]
+          - name: android
+            description: 'APKs, classes, methods, resources (JADX, Apktool, JEB) and app graphs'
+            match: ['*android*', inspect_apktool_client, '*jeb*']
+          - name: adb-device
+            description: 'attached Android devices over adb: packages, files, logs, screens and app control'
+            match: ['*adb*']
+          - name: managed-dotnet
+            description: '.NET assemblies, members, native boundaries and reconstruction'
+            match: ['*managed*']
+          - name: apple-bundles
+            description: 'plists, keyed archives, asset catalogs, Interface Builder and Apple/Harmony app graphs'
+            match: [inspect_plist, inspect_keyed_archive, inspect_asset_catalog, decode_interface_builder, project_apple_application_graph, project_harmony_application_graph]
+          - name: artifacts
+            description: 'archives, packages, firmware, SQLite and file-level comparisons'
+            match: [inspect_artifact, extract_artifact, compare_artifacts, inspect_firmware_regions, extract_firmware, inspect_sqlite_database, inspect_analysis_view]
+          - name: runtime-debug
+            description: 'Frida, GDB and rizin debugging, process and native UI capture, recorded crashes'
+            match: ['*frida*', '*gdb*', '*rizin_debug*', capture_process_scenario, compare_process_captures, observe_native_*, capture_native_ui_scenario, trace_native_ui_action, inspect_recorded_crash, correlate_static_and_runtime, find_changed_behavior]
+          - name: captures-signals
+            description: 'pcap/pcapng packets and recorded logic signals'
+            match: ['*pcap*', '*packet*', '*signal*']
+          - name: evidence
+            description: 'evidence bundles, residual unknowns and reconstruction verification'
+            match: ['*evidence*', '*unknown*', '*reconstruction*']

package/families.yml

@@ -0,0 +1,43 @@
+# Curated REA 6.7.0 families. Order matters: the first matching family wins.
+- name: session
+  description: 'open/close a target, provider binding, readiness and navigation context'
+  match: [open_binary, close_binary, binary_session, binary_overview, get_navigation_context, list_documents, current_document, list_architectures]
+- name: native-code
+  description: 'functions, pseudocode, assembly, call graph and references in native binaries (Hopper/Ghidra/IDA)'
+  match: [procedure_*, list_procedures, search_procedures, current_procedure, resolve_containing_procedure, analyze_function, batch_decompile, read_function_instructions, get_call_graph, build_call_path, trace_call_path, xrefs, find_xrefs_to_name, resolve_native_call_targets, trace_native_values, compare_functions, inspect_native_*, inspect_address_context]
+- name: native-navigation
+  description: 'addresses, bytes, strings, names, segments, comments and bookmarks'
+  match: ['*address*', goto_address, next_address, prev_address, read_bytes, search_bytes, list_strings, search_strings, list_names, list_segments, '*comment*', '*bookmark*', annotate_native_function]
+- name: native-formats
+  description: 'Mach-O, PE, ELF layout, signatures, Go/Rust/Swift/ObjC metadata, objdump and rizin'
+  match: [inspect_macho, inspect_pe_resources, inspect_binary_layout, inspect_signature, inspect_go_binary, inspect_rust_binary, '*swift*', get_objc_*, inspect_native_dispatch_metadata, inspect_with_objdump, execute_rizin_command, cutter_command, list_cutter_sessions, trace_dylib_resolution, inspect_dart_aot, identify_flutter_build, inspect_wasm_artifact, compare_wasm_interfaces, inspect_evm_interface]
+- name: javascript-electron
+  description: 'JavaScript/Electron apps, bundles, source maps, IPC and runtime tracing'
+  match: ['*javascript*', analyze_web_bundle, recover_javascript_sources, compare_source_to_bundle, compare_bundles, '*electron*', trace_application_feature, trace_feature, compare_application_versions]
+- name: web-browser
+  description: 'live pages through a Chrome-family browser, network captures, screenshots and WebMCP'
+  match: ['*web*', capture_browser_scenario, list_browser_targets]
+- name: android
+  description: 'APKs, classes, methods, resources (JADX, Apktool, JEB) and app graphs'
+  match: ['*android*', inspect_apktool_client, '*jeb*']
+- name: adb-device
+  description: 'attached Android devices over adb: packages, files, logs, screens and app control'
+  match: ['*adb*']
+- name: managed-dotnet
+  description: '.NET assemblies, members, native boundaries and reconstruction'
+  match: ['*managed*']
+- name: apple-bundles
+  description: 'plists, keyed archives, asset catalogs, Interface Builder and Apple/Harmony app graphs'
+  match: [inspect_plist, inspect_keyed_archive, inspect_asset_catalog, decode_interface_builder, project_apple_application_graph, project_harmony_application_graph]
+- name: artifacts
+  description: 'archives, packages, firmware, SQLite and file-level comparisons'
+  match: [inspect_artifact, extract_artifact, compare_artifacts, inspect_firmware_regions, extract_firmware, inspect_sqlite_database, inspect_analysis_view]
+- name: runtime-debug
+  description: 'Frida, GDB and rizin debugging, process and native UI capture, recorded crashes'
+  match: ['*frida*', '*gdb*', '*rizin_debug*', capture_process_scenario, compare_process_captures, observe_native_*, capture_native_ui_scenario, trace_native_ui_action, inspect_recorded_crash, correlate_static_and_runtime, find_changed_behavior]
+- name: captures-signals
+  description: 'pcap/pcapng packets and recorded logic signals'
+  match: ['*pcap*', '*packet*', '*signal*']
+- name: evidence
+  description: 'evidence bundles, residual unknowns and reconstruction verification'
+  match: ['*evidence*', '*unknown*', '*reconstruction*']

package/locale/en.json

@@ -0,0 +1 @@
+{ "meta": { "title": "REA (catalog)", "description": "REA reverse engineering served lazily through the capability catalog." } }

package/locale/zh.json

@@ -0,0 +1 @@
+{ "meta": { "title": "REA（能力目录）", "description": "通过能力目录按需提供 REA 逆向工程工具。" } }

package/package.json

@@ -1,6 +1,42 @@
 {
   "name": "@kirkchinese/dsh-rea",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "description": "REA reverse engineering for DeepSeek Harness through the lazy capability catalog: curated tool families, on-demand server start, no 670 KB of schemas per request",
+  "keywords": [
+    "deepseek-harness",
+    "dsh",
+    "dsh-plugin",
+    "rea",
+    "reverse-engineering",
+    "mcp"
+  ],
+  "license": "MIT",
+  "author": "kirkchinese",
+  "type": "module",
+  "exports": {
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json"
+  },
+  "files": [
+    "cordis.patch.yml",
+    "families.yml",
+    "locale/*.json",
+    "README.md",
+    "LICENSE"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  },
+  "dependencies": {
+    "@kirkchinese/dsh-capability-catalog": "^0.1.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/kirkchinese/dsh-capability-catalog.git",
+    "directory": "packages/rea"
+  },
+  "homepage": "https://github.com/kirkchinese/dsh-capability-catalog#readme"
 }